This bug was fixed in the package linux - 3.13.0-101.148
---------------
linux (3.13.0-101.148) trusty; urgency=low
[ Seth Forshee ]
* Release Tracking Bug
- LP: #1635430
* [arm64] nova instances can't boot with 3.13.0-92 (LP: #1608854)
- Revert "efi: Disable interrupts around EFI calls, not in the epilog/prolog
calls"
- Revert "x86/efi: Use all 64 bit of efi_memmap in setup_e820()"
- Revert "x86/efi: Store upper bits of command line buffer address in
ext_cmd_line_ptr"
- Revert "efivarfs: Ensure VariableName is NUL-terminated"
- Revert "efi/libstub: Fix boundary checking in efi_high_alloc()"
- Revert "arm64: efi: only attempt efi map setup if booting via EFI"
- Revert "UBUNTU: arm64: Implement efi_enabled()"
- Revert "efi/arm64: ignore dtb= when UEFI SecureBoot is enabled"
- Revert "doc: arm64: add description of EFI stub support"
- Revert "UBUNTU: Move get_dram_base to arm private file"
- Revert "arm64: efi: add EFI stub"
- Revert "arm64: add EFI runtime services"
- Revert "efi: Add shared FDT related functions for ARM/ARM64"
- Revert "efi: add helper function to get UEFI params from FDT"
- Revert "doc: efi-stub.txt updates for ARM"
- Revert "efi: Add get_dram_base() helper function"
- Revert "efi: create memory map iteration helper"
- Revert "x86, ia64: Move EFI_FB vga_default_device() initialization to
pci_vga_fixup()"
- Revert "firmware: Do not use WARN_ON(!spin_is_locked())"
- Revert "efi-pstore: Fix an overflow on 32-bit builds"
- Revert "x86/efi: Fix 32-bit fallout"
- Revert "x86/efi: Check krealloc return value"
- Revert "x86/efi: Runtime services virtual mapping"
- Revert "x86/efi: Fix off-by-one bug in EFI Boot Services reservation"
- x86/efi: Simplify EFI_DEBUG
- x86/efi: Runtime services virtual mapping
- x86/efi: Check krealloc return value
- SAUCE: Merge tag 'efi-next' of
git://git.kernel.org/pub/scm/linux/kernel/git/mfleming/efi into x86/efi
- doc: Fix trivial spelling mistake in efi-stub.txt
- x86/efi: Remove unused variables in __map_region()
- x86/efi: Add a wrapper function efi_map_region_fixed()
- x86/efi: Fix off-by-one bug in EFI Boot Services reservation
- x86/efi: Cleanup efi_enter_virtual_mode() function
- efi: Export more EFI table variables to sysfs
- [Config] CONFIG_EFI_RUNTIME_MAP=y
- efi: Export EFI runtime memory mapping to sysfs
- x86/efi: Pass necessary EFI data for kexec via setup_data
- x86/efi: Delete superfluous global variables
- x86/efi: parse_efi_setup() build fix
- SAUCE: Merge tag 'v3.13-rc7' into x86/efi-kexec to resolve conflicts
- x86/efi: Allow mapping BGRT on x86-32
- x86/efi: Fix 32-bit fallout
- x86/efi: Check status field to validate BGRT header
- x86/efi: Quirk out SGI UV
- v3.14 - Bacported EFI up to v3.14
- efi: Move facility flags to struct efi
- efi: Set feature flags inside feature init functions
- efivarfs: 'efivarfs_file_write' function reorganization
- x86/efi: Delete out-of-date comments of efi_query_variable_store
- x86/efi: Style neatening
- x86/efi: Dump the EFI page table
- x86, pageattr: Export page unmapping interface
- x86/efi: Make efi virtual runtime map passing more robust
- x86/efi: Split efi_enter_virtual_mode
- ia64/efi: Implement efi_enabled()
- efi: Use NULL instead of 0 for pointer
- x86, tools: Consolidate #ifdef code
- x86/efi: Delete dead code when checking for non-native
- efi: Add separate 32-bit/64-bit definitions
- x86/efi: Build our own EFI services pointer table
- x86/efi: Add early thunk code to go from 64-bit to 32-bit
- x86/efi: Firmware agnostic handover entry points
- [Config] CONFIG_EFI_MIXED=y
- x86/efi: Wire up CONFIG_EFI_MIXED
- x86/efi: Re-disable interrupts after calling firmware services
- SAUCE: Merge remote-tracking branch 'tip/x86/efi-mixed' into efi-for-mingo
- x86, tools: Fix up compiler warnings
- x86/efi: Preserve segment registers in mixed mode
- x86/efi: Rip out phys_efi_get_time()
- x86/efi: Restore 'attr' argument to query_variable_info()
- SAUCE: merge with v3.15
- fs/efivarfs/super.c: use static const for dentry_operations
- SAUCE: merge with v3.16
- efi: efi-stub-helper cleanup
- efi: create memory map iteration helper
- efi: Add shared printk wrapper for consistent prefixing
- efi: Add get_dram_base() helper function
- efi: x86: Handle arbitrary Unicode characters
- x86/efi: Delete most of the efi_call* macros
- x86/efi: Implement a __efi_call_virt macro
- x86/efi: Save and restore FPU context around efi_calls (x86_64)
- x86/efi: Save and restore FPU context around efi_calls (i386)
- efivars: Use local variables instead of a pointer dereference
- efivars: Check size of user object
- efivars: Stop passing a struct argument to efivar_validate()
- efivars: Refactor sanity checking code into separate function
- efivars: Add compatibility code for compat tasks
- doc: efi-stub.txt updates for ARM
- efi: add helper function to get UEFI params from FDT
- efi: Add shared FDT related functions for ARM/ARM64
- [Config] CONFIG_LIBFDT=y
- arm64: add EFI runtime services
- arm64: efi: add EFI stub
- doc: arm64: add description of EFI stub support
- efi/arm64: ignore dtb= when UEFI SecureBoot is enabled
- arm64: efi: only attempt efi map setup if booting via EFI
- efi-pstore: Fix an overflow on 32-bit builds
- firmware: Do not use WARN_ON(!spin_is_locked())
- x86, ia64: Move EFI_FB vga_default_device() initialization to
pci_vga_fixup()
- efivarfs: Ensure VariableName is NUL-terminated
- x86/efi: Store upper bits of command line buffer address in
ext_cmd_line_ptr
- x86/efi: Use all 64 bit of efi_memmap in setup_e820()
- efi: Disable interrupts around EFI calls, not in the epilog/prolog calls
- x86/efi: Fix boot failure with EFI stub
- x86/efi: Fix boot crash by mapping EFI memmap entries bottom-up at
runtime,
instead of top-down
- efi/libstub: Fix boundary checking in efi_high_alloc()
- efi: Fix compiler warnings (unused, const, type)
- efi: fdt: Do not report an error during boot if UEFI is not available
- efi: Make our variable validation list include the guid
- lib/ucs2_string: Add ucs2 -> utf8 helper functions
- efi: Use ucs2_as_utf8 in efivarfs instead of open coding a bad version
- efi/reboot: Add generic wrapper around EfiResetSystem()
- efi/arm64: efistub: remove local copy of linux_banner
- x86/reboot: Add EFI reboot quirk for ACPI Hardware Reduced flag
- efi/reboot: Allow powering off machines using EFI
- efi: Fix error handling in add_sysfs_runtime_map_entry()
- efi: Small leak on error in runtime map code
- arm64/efi: map the entire UEFI vendor string before reading it
- arm64/efi: add missing call to early_ioremap_reset()
- efi/arm64: Store Runtime Services revision
- SAUCE: UEFI: Add secure_modules() call
- SAUCE: UEFI: PCI: Lock down BAR access when module security is enabled
- SAUCE: UEFI: x86: Lock down IO port access when module security is enabled
- SAUCE: UEFI: ACPI: Limit access to custom_method
- SAUCE: UEFI: asus-wmi: Restrict debugfs interface when module loading is
restricted
- SAUCE: UEFI: Restrict /dev/mem and /dev/kmem when module loading is
restricted
- SAUCE: UEFI: acpi: Ignore acpi_rsdp kernel parameter when module loading
is
restricted
- SAUCE: UEFI: kexec: Disable at runtime if the kernel enforces module
loading
restrictions
- SAUCE: UEFI: x86: Restrict MSR access when module loading is restricted
- [Config] CONFIG_EFI_SECURE_BOOT_SIG_ENFORCE=y
- SAUCE: UEFI: Add option to automatically enforce module signatures when in
Secure Boot mode
- SAUCE: UEFI: efi: Make EFI_SECURE_BOOT_SIG_ENFORCE depend on EFI
- SAUCE: UEFI MODSIGN: Import certificates from UEFI Secure Boot
- SAUCE: UEFI: efi: Disable secure boot if shim is in insecure mode
- SAUCE: UEFI: Display MOKSBState when disabled
- SAUCE: UEFI: Add secure boot and MOK SB State disabled sysctl
- SAUCE: UEFI: Set EFI_SECURE_BOOT bit in x86_efi_facility
- Revert "x86/efi: Save and restore FPU context around efi_calls (x86_64)"
- [Config] CONFIG_RTC_DRV_EFI=y
* proc_keys_show crash when reading /proc/keys (LP: #1634496)
- KEYS: ensure xbuf is large enough to fix buffer overflow in proc_keys_show
(LP: #1634496)
* [Trusty->Yakkety] powerpc/64: Fix incorrect return value from
__copy_tofrom_user (LP: #1632462)
- SAUCE: (no-up) powerpc/64: Fix incorrect return value from
__copy_tofrom_user
* Ubuntu 16.10: Oops panic in move_page_tables/page_remove_rmap after running
memory_stress_ng. (LP: #1628976)
- SAUCE: (no-up) powerpc/pseries: Fix stack corruption in htpe code
* sha1-powerpc returning wrong results (LP: #1629977)
- crypto: sha1-powerpc - little-endian support
* linux: Implement secure boot state variables (LP: #1593075)
- SAUCE: UEFI: Add secure boot and MOK SB State disabled sysctl
- SAUCE: UEFI: Set EFI_SECURE_BOOT bit in x86_efi_facility
* linux: MokSBState is ignored (LP: #1571691)
- SAUCE: UEFI MODSIGN: Import certificates from UEFI Secure Boot
- SAUCE: UEFI: efi: Disable secure boot if shim is in insecure mode
- SAUCE: UEFI: Display MOKSBState when disabled
* linux: Enforce signed module loading when UEFI secure boot (LP: #1566221)
- SAUCE: UEFI: Add secure_modules() call
- SAUCE: UEFI: PCI: Lock down BAR access when module security is enabled
- SAUCE: UEFI: x86: Lock down IO port access when module security is enabled
- SAUCE: UEFI: ACPI: Limit access to custom_method
- SAUCE: UEFI: asus-wmi: Restrict debugfs interface when module loading is
restricted
- SAUCE: UEFI: Restrict /dev/mem and /dev/kmem when module loading is
restricted
- SAUCE: UEFI: acpi: Ignore acpi_rsdp kernel parameter when module loading
is
restricted
- SAUCE: UEFI: kexec: Disable at runtime if the kernel enforces module
loading
restrictions
- SAUCE: UEFI: x86: Restrict MSR access when module loading is restricted
- SAUCE: UEFI: Add option to automatically enforce module signatures when in
Secure Boot mode
- SAUCE: UEFI: efi: Make EFI_SECURE_BOOT_SIG_ENFORCE depend on EFI
- SAUCE: UEFI MODSIGN: Import certificates from UEFI Secure Boot
- SAUCE: UEFI: efi: Disable secure boot if shim is in insecure mode
- SAUCE: UEFI: Display MOKSBState when disabled
* Utopic update to 3.16.7-ckt5 stable release (LP: #1419125)
- arm64/efi: add missing call to early_ioremap_reset()
* Trusty update to 3.16.7-ckt17 stable release (LP: #1500484)
- arm64/efi: map the entire UEFI vendor string before reading it
* Utopic update to 3.16.7-ckt8 stable release (LP: #1434595)
- efi: Small leak on error in runtime map code
* Utopic update to 3.16.7-ckt12 stable release (LP: #1465613)
- efi/reboot: Add generic wrapper around EfiResetSystem()
- x86/reboot: Add EFI reboot quirk for ACPI Hardware Reduced flag
- efi/reboot: Allow powering off machines using EFI
- efi: Fix error handling in add_sysfs_runtime_map_entry()
* Trusty update to 3.16.7-ckt26 stable release (LP: #1563345)
- efi: Make our variable validation list include the guid
- lib/ucs2_string: Add ucs2 -> utf8 helper functions
- efi: Use ucs2_as_utf8 in efivarfs instead of open coding a bad version
* Utopic update to 3.16.7-ckt9 stable release (LP: #1441317)
- efi/libstub: Fix boundary checking in efi_high_alloc()
* Trusty update to 3.16.7-ckt19 stable release (LP: #1514911)
- x86/efi: Fix boot crash by mapping EFI memmap entries bottom-up at
runtime,
instead of top-down
* Boot failure with EFI stub (LP: #1603476)
- x86/efi: Fix boot failure with EFI stub
* Trusty update to v3.13.11-ckt33 stable release (LP: #1538756)
- efi: Disable interrupts around EFI calls, not in the epilog/prolog calls
* Trusty update to 3.13.11-ckt26 stable release (LP: #1493305)
- x86/efi: Use all 64 bit of efi_memmap in setup_e820()
* Trusty update to v3.13.11.9 stable release (LP: #1381234)
- x86, ia64: Move EFI_FB vga_default_device() initialization to
pci_vga_fixup()
* CVE-2015-7833
- usbvision: revert commit 588afcc1
* CVE-2014-9904
- ALSA: compress: fix an integer overflow check
* CVE-2015-3288
- mm: avoid setting up anonymous pages into file mapping
* CVE-2016-3961 (LP: #1571020)
- mm: hugetlb: allow hugepages_supported to be architecture specific
- s390/hugetlb: add hugepages_supported define
- x86/mm/xen: Suppress hugetlbfs in PV guests
-- Seth Forshee <[email protected]> Thu, 20 Oct 2016 16:50:48
-0500
** Changed in: linux (Ubuntu)
Status: Invalid => Fix Released
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-9904
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-3288
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-7833
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2016-3961
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1465613
Title:
Utopic update to 3.16.7-ckt12 stable release
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Utopic:
Fix Released
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from Linus' tree or in a minimally
backported form of that patch. The 3.16.7-ckt12 upstream stable
patch set is now available. It should be included in the Ubuntu
kernel as well.
git://kernel.ubuntu.com/ubuntu/linux.git
TEST CASE: TBD
The following patches are in the 3.16.7-ckt12 stable release:
mlx4: Fix tx ring affinity_mask creation
net/mlx4_en: Schedule napi when RX buffers allocation fails
efi/reboot: Add generic wrapper around EfiResetSystem()
efi/reboot: Allow powering off machines using EFI
x86/reboot: Add EFI reboot quirk for ACPI Hardware Reduced flag
ARC: signal handling robustify
UBI: fix soft lockup in ubi_check_volume()
mnt: Fail collect_mounts when applied to unmounted mounts
ASoC: dapm: Enable autodisable on SOC_DAPM_SINGLE_TLV_AUTODISABLE
ASoC: rt5677: add register patch for PLL
btrfs: unlock i_mutex after attempting to delete subvolume during send
ALSA: hda - Fix mute-LED fixed mode
ALSA: hda - Add mute-LED mode control to Thinkpad
arm64: dma-mapping: always clear allocated buffers
ALSA: emu10k1: Fix card shortname string buffer overflow
ALSA: emux: Fix mutex deadlock at unloading
drm/radeon: add SI DPM quirk for Sapphire R9 270 Dual-X 2G GDDR5
SCSI: add 1024 max sectors black list flag
3w-sas: fix command completion race
3w-xxxx: fix command completion race
3w-9xxx: fix command completion race
uas: Allow uas_use_uas_driver to return usb-storage flags
uas: Add US_FL_MAX_SECTORS_240 flag
uas: Set max_sectors_240 quirk for ASM1053 devices
usb: chipidea: otg: remove mutex unlock and lock while stop and start role
serial: xilinx: Use platform_get_irq to get irq description structure
serial: of-serial: Remove device_type = "serial" registration
tty/serial: at91: maxburst was missing for dma transfers
ALSA: emux: Fix mutex deadlock in OSS emulation
ALSA: emu10k1: Emu10k2 32 bit DMA mode
rbd: end I/O the entire obj_request on error
ext4: fix data corruption caused by unwritten and delayed extents
ext4: move check under lock scope to close a race.
bridge/mdb: remove wrong use of NLM_F_MULTI
mlx4_en: Use correct loop cursor in error path.
powerpc/pseries: Correct cpu affinity for dlpar added cpus
Revert "i2c: Mark adapter devices with pm_runtime_no_callbacks"
Revert "mm/hugetlb: use pmd_page() in follow_huge_pmd()"
arm/arm64: KVM: Fix and refactor unmap_range
ARM: KVM: Unmap IPA on memslot delete/move
ARM: KVM: user_mem_abort: support stage 2 MMIO page mapping
arm64: KVM: export demux regids as KVM_REG_ARM64
ARM: virt: fix wrong HSCTLR.EE bit setting
ARM64: KVM: store kvm_vcpu_fault_info est_el2 as word
KVM: ARM/arm64: fix non-const declaration of function returning const
KVM: ARM/arm64: fix broken __percpu annotation
KVM: ARM/arm64: avoid returning negative error code as bool
KVM: vgic: return int instead of bool when checking I/O ranges
ARM/arm64: KVM: fix use of WnR bit in kvm_is_write_fault()
KVM: ARM: vgic: plug irq injection race
arm/arm64: KVM: Fix set_clear_sgi_pend_reg offset
arm/arm64: KVM: Fix VTTBR_BADDR_MASK and pgd alloc
arm: kvm: fix CPU hotplug
arm/arm64: KVM: fix potential NULL dereference in user_mem_abort()
arm/arm64: KVM: Ensure memslots are within KVM_PHYS_SIZE
arm: kvm: STRICT_MM_TYPECHECKS fix for user_mem_abort
arm64: KVM: fix unmapping with 48-bit VAs
arm/arm64: KVM: vgic: Fix error code in kvm_vgic_create()
arm64/kvm: Fix assembler compatibility of macros
arm/arm64: kvm: drop inappropriate use of kvm_is_mmio_pfn()
arm/arm64: KVM: Don't clear the VCPU_POWER_OFF flag
arm/arm64: KVM: Correct KVM_ARM_VCPU_INIT power off option
arm/arm64: KVM: Reset the HCR on each vcpu when resetting the vcpu
arm/arm64: KVM: Introduce stage2_unmap_vm
arm/arm64: KVM: Don't allow creating VCPUs after vgic_initialized
arm/arm64: KVM: Require in-kernel vgic for the arch timers
arm64: KVM: Fix TLB invalidation by IPA/VMID
arm64: KVM: Fix HCR setting for 32bit guests
arm64: KVM: Do not use pgd_index to index stage-2 pgd
net: make skb_gso_segment error handling more robust
efivarfs: Ensure VariableName is NUL-terminated
x86/efi: Store upper bits of command line buffer address in ext_cmd_line_ptr
blk-mq: fix CPU hotplug handling
writeback: use |1 instead of +1 to protect against div by zero
ARM: mvebu: armada-xp-openblocks-ax3-4: Disable internal RTC
ARM: dts: imx23-olinuxino: Fix polarity of LED GPIO
ARM: dts: imx23-olinuxino: Fix dr_mode of usb0
ARM: dts: imx6: phyFLEX: USB VBUS control is active-high
ARM: dts: imx25: Add #pwm-cells to pwm4
ARM: dts: imx28: Fix AUART4 TX-DMA interrupt name
gpio: unregister gpiochip device before removing it
gpio: sysfs: fix memory leaks and device hotplug
ACPI / PNP: add two IDs to list for PNPACPI device enumeration
ARM: OMAP2+: Fix omap off idle power consumption creeping up
ARM: dts: OMAP3-N900: Add microphone bias voltages
drm/radeon: disable semaphores for UVD V1 (v2)
RDMA/CMA: Canonize IPv4 on IPV6 sockets properly
drm/i915: Add missing MacBook Pro models with dual channel LVDS
efi: Fix error handling in add_sysfs_runtime_map_entry()
xen/events: Clear cpu_evtchn_mask before resuming
xen/xenbus: Update xenbus event channel on resume
xen/console: Update console event channel on resume
xen/events: Set irq_info->evtchn before binding the channel to CPU in
__startup_pirq()
mm/memory-failure: call shake_page() when error hits thp tail page
mm: soft-offline: fix num_poisoned_pages counting on concurrent events
nilfs2: fix sanity check of btree level in nilfs_btree_root_broken()
ocfs2: dlm: fix race between purge and get lock resource
drm/i915/dp: there is no audio on port A
drm/radeon: make VCE handle check more strict
drm/radeon: make UVD handle checking more strict
drm/radeon: more strictly validate the UVD codec
path_openat(): fix double fput()
mnt: Fix fs_fully_visible to verify the root directory is visible
ARM: ux500: Move GPIO regulator for SD-card into board DTSs
ARM: ux500: Enable GPIO regulator for SD-card for HREF boards
ARM: ux500: Enable GPIO regulator for SD-card for snowball
xen-pciback: Add name prefix to global 'permissive' variable
mmc: core: add missing pm event in mmc_pm_notify to fix hib restore
mmc: sh_mmcif: Fix timeout value for command request
pinctrl: Don't just pretend to protect pinctrl_maps, do it for real
ACPICA: Utilities: split IO address types from data type models.
ACPICA: Tables: Change acpi_find_root_pointer() to use acpi_physical_address.
ACPICA: Utilities: Cleanup to enforce
ACPI_PHYSADDR_TO_PTR()/ACPI_PTR_TO_PHYSADDR().
ACPICA: Utilities: Cleanup to convert physical address printing formats.
ACPICA: Utilities: Cleanup to remove useless ACPI_PRINTF/FORMAT_xxx helpers.
crush: ensuring at most num-rep osds are selected
netfilter: nf_tables: fix error handling of rule replacement
netfilter: Zero the tuple in nfnl_cthelper_parse_tuple()
netfilter: nf_tables: check for overflow of rule dlen field
netfilter: nft_compat: set IP6T_F_PROTO flag if protocol is set
netfilter: nf_tables: allow to change chain policy without hook if it exists
netfilter: nft_rbtree: fix locking
arm64/mm: Remove hack in mmap randomize layout
sched/autogroup: Fix failure to set cpu.rt_runtime_us
xprtrdma: Free the pd if ib_query_qp() fails
xfs: ensure truncate forces zeroed blocks to disk
Linux 3.16.7-ckt12
The following patches from 3.16.7-ckt12 were already applied in the
Utopic kernel:
cdc-acm: prevent infinite loop when parsing CDC headers.
mmc: card: Don't access RPMB partitions for normal read/write
md/raid0: fix restore to sector variable in raid0_make_request
The following patch from 3.16.7-ckt12 was dropped as it failed to apply
cleanly:
arm/arm64: KVM: Keep elrsr/aisr in sync with software model
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1465613/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp