| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Wed, 28 Oct 2015 16:51:41 +0000
From: Luis Henriques <luis.henriques@...onical.com>
To: linux-kernel@...r.kernel.org, stable@...r.kernel.org,
kernel-team@...ts.ubuntu.com
Subject: Re: [3.16.y-ckt stable] Linux 3.16.7-ckt19 stable review
On Mon, Oct 26, 2015 at 07:02:01PM +0000, Luis Henriques wrote:
> On Mon, Oct 26, 2015 at 01:41:42PM +0000, Luis Henriques wrote:
> > This is the start of the review cycle for the Linux 3.16.7-ckt19 stable kernel.
> >
> > This version contains 104 new patches, summarized below. The new patches are
> > posted as replies to this message and also available in this git branch:
> >
>
> I am adding 3 additional patches for this 3.16 stable kernel release,
> that fix CVE-2015-7872:
>
> 911b79cde95c KEYS: Don't permit request_key() to construct a new keyring
> f05819df10d7 KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring
> 94c4554ba07a KEYS: Fix race between key destruction and finding a keyring by name
>
Ok, I'm adding yet another patch for 3.16.7-ckt19:
808f80b46790 Btrfs: update fix for read corruption of compressed and shared extents
This fixes an issue that is introduced by 005efedf2c7d ("Btrfs: fix read
corruption of compressed and shared extents"), which is also queued for
this kernel release.
Cheers,
--
Luís
>
>
> > http://kernel.ubuntu.com/git/ubuntu/linux.git/log/?h=linux-3.16.y-review
> >
> > git://kernel.ubuntu.com/ubuntu/linux.git linux-3.16.y-review
> >
> > The review period for version 3.16.7-ckt19 will be open for the next three days.
> > To report a problem, please reply to the relevant follow-up patch message.
> >
> > For more information about the Linux 3.16.y-ckt extended stable kernel version,
> > see https://wiki.ubuntu.com/Kernel/Dev/ExtendedStable .
> >
> > -Luis
> >
> > --
> > arch/arm/Kconfig | 1 -
> > arch/arm/Makefile | 8 ++
> > arch/arm/boot/dts/omap3-beagle.dts | 2 +-
> > arch/arm/boot/dts/omap5-uevm.dts | 4 +-
> > arch/arm/kernel/signal.c | 15 ++--
> > arch/arm/kvm/interrupts_head.S | 6 +-
> > arch/arm/mach-orion5x/include/mach/irqs.h | 64 +++++++--------
> > arch/arm/mach-orion5x/irq.c | 4 +-
> > arch/arm64/Kconfig | 16 ++++
> > arch/arm64/Makefile | 4 +
> > arch/arm64/kernel/head.S | 5 ++
> > arch/arm64/kernel/module.c | 2 +
> > arch/arm64/kernel/signal32.c | 47 ++++++++---
> > arch/arm64/kvm/hyp.S | 5 +-
> > arch/m68k/include/asm/linkage.h | 30 +++++++
> > arch/mips/kernel/cps-vec.S | 12 +--
> > arch/mips/mm/dma-default.c | 2 +-
> > arch/powerpc/boot/Makefile | 3 +
> > arch/powerpc/mm/hugepage-hash64.c | 3 +-
> > arch/x86/include/uapi/asm/msr-index.h | 1 +
> > arch/x86/kernel/apic/apic.c | 7 ++
> > arch/x86/kernel/entry_64.S | 16 +++-
> > arch/x86/kernel/paravirt.c | 16 +++-
> > arch/x86/kernel/tsc.c | 17 ++--
> > arch/x86/kvm/svm.c | 2 +-
> > arch/x86/kvm/x86.c | 2 +
> > arch/x86/mm/init_64.c | 2 +-
> > arch/x86/platform/efi/efi.c | 67 +++++++++++++++-
> > drivers/block/zram/zcomp.c | 12 +--
> > drivers/cpufreq/intel_pstate.c | 10 +--
> > drivers/dma/dw/core.c | 4 +-
> > drivers/gpu/drm/i915/intel_bios.c | 12 ++-
> > drivers/gpu/drm/qxl/qxl_display.c | 14 ++--
> > drivers/gpu/drm/radeon/atombios_encoders.c | 8 +-
> > drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 6 +-
> > drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 6 +-
> > drivers/gpu/drm/vmwgfx/vmwgfx_overlay.c | 2 +-
> > drivers/gpu/drm/vmwgfx/vmwgfx_resource.c | 29 +++++--
> > drivers/gpu/drm/vmwgfx/vmwgfx_shader.c | 2 +-
> > drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 12 ++-
> > drivers/hwmon/nct6775.c | 16 ++--
> > drivers/infiniband/ulp/isert/ib_isert.c | 9 ++-
> > drivers/mtd/ubi/io.c | 5 ++
> > drivers/mtd/ubi/vtbl.c | 1 +
> > drivers/mtd/ubi/wl.c | 1 +
> > drivers/net/ethernet/marvell/mvneta.c | 4 +-
> > drivers/net/ppp/pppoe.c | 1 -
> > drivers/net/usb/asix_devices.c | 16 +---
> > drivers/net/vxlan.c | 10 +--
> > drivers/net/xen-netfront.c | 3 +-
> > drivers/pci/access.c | 27 +------
> > drivers/pci/quirks.c | 20 ++++-
> > drivers/platform/x86/hp-wmi.c | 35 +++++---
> > drivers/spi/spi-pxa2xx.c | 4 +
> > drivers/spi/spi-xtensa-xtfpga.c | 4 +-
> > drivers/spi/spi.c | 3 +-
> > drivers/staging/android/ion/ion.c | 6 +-
> > drivers/usb/chipidea/udc.c | 84 +++++++++----------
> > drivers/usb/core/config.c | 5 +-
> > drivers/usb/host/ehci-fsl.c | 13 +++
> > drivers/usb/host/ehci-hub.c | 7 ++
> > drivers/usb/host/ehci.h | 12 +++
> > drivers/usb/host/fsl-mph-dr-of.c | 10 +++
> > drivers/usb/host/xhci-mem.c | 23 +++---
> > drivers/usb/host/xhci-ring.c | 13 ++-
> > drivers/usb/host/xhci.c | 9 +--
> > drivers/usb/serial/option.c | 24 ++++++
> > drivers/usb/serial/whiteheat.c | 31 ++++++++
> > fs/btrfs/extent_io.c | 65 +++++++++++++--
> > fs/btrfs/inode.c | 3 +-
> > fs/cifs/cifsencrypt.c | 53 +++++++++++-
> > fs/cifs/ioctl.c | 6 ++
> > fs/cifs/smb2ops.c | 8 +-
> > fs/coredump.c | 38 +++++++--
> > fs/dcache.c | 7 ++
> > fs/jbd2/checkpoint.c | 39 +++++++--
> > fs/jbd2/commit.c | 2 +-
> > fs/jbd2/journal.c | 11 ++-
> > fs/namei.c | 31 +++++++-
> > fs/ocfs2/dlm/dlmmaster.c | 9 ++-
> > fs/ocfs2/dlm/dlmrecovery.c | 8 +-
> > include/linux/fsl_devices.h | 2 +
> > include/linux/jbd2.h | 3 +-
> > include/linux/skbuff.h | 5 +-
> > include/net/af_unix.h | 6 +-
> > include/net/sock.h | 8 ++
> > ipc/msg.c | 14 ++--
> > ipc/sem.c | 15 ++--
> > ipc/shm.c | 12 +--
> > ipc/util.c | 8 +-
> > kernel/irq/proc.c | 19 ++++-
> > kernel/time/clocksource.c | 2 +-
> > mm/hugetlb.c | 8 ++
> > mm/slab.c | 13 ++-
> > net/core/datagram.c | 6 +-
> > net/core/ethtool.c | 2 +-
> > net/core/fib_rules.c | 2 +-
> > net/core/skbuff.c | 9 ++-
> > net/ipv4/tcp_input.c | 2 +-
> > net/ipv4/udp.c | 2 +-
> > net/ipv6/raw.c | 2 +-
> > net/ipv6/udp.c | 3 +-
> > net/l2tp/l2tp_core.c | 11 ++-
> > net/netfilter/nft_compat.c | 24 ++++--
> > net/netlink/af_netlink.c | 34 +++++---
> > net/openvswitch/flow_table.c | 3 +-
> > net/sctp/sm_sideeffect.c | 2 +-
> > net/unix/af_unix.c | 16 +++-
> > sound/arm/Kconfig | 15 ++--
> > sound/soc/pxa/Kconfig | 2 -
> > sound/soc/pxa/pxa2xx-ac97.c | 4 +-
> > tools/lib/traceevent/event-parse.c | 23 +++++-
> > tools/perf/util/header.c | 4 +-
> > tools/perf/util/symbol-elf.c | 35 +++-----
> > virt/kvm/eventfd.c | 124 +++++++++++++++++------------
> > virt/kvm/kvm_main.c | 19 ++++-
> > 116 files changed, 1164 insertions(+), 451 deletions(-)
> >
> > Aaron Conole (2):
> > af_unix: Convert the unix_sk macro to an inline function for type safety
> > af_unix: return data from multiple SKBs on recv() with MSG_PEEK flag
> >
> > Adrian Hunter (1):
> > perf tools: Fix copying of /proc/kcore
> >
> > Alex Williamson (2):
> > PCI: Fix devfn for VPD access through function 0
> > PCI: Use function 0 VPD for identical functions, regular VPD for others
> >
> > Alexander Couzens (1):
> > l2tp: protect tunnel->del_work by ref_count
> >
> > Andreas Schwab (1):
> > m68k: Define asmlinkage_protect
> >
> > Andrey Vagin (1):
> > net/unix: fix logic about sk_peek_offset
> >
> > Andy Lutomirski (2):
> > x86/paravirt: Replace the paravirt nop with a bona fide empty function
> > x86/nmi/64: Fix a paravirt stack-clobbering bug in the NMI code
> >
> > Andy Shevchenko (1):
> > dmaengine: dw: properly read DWC_PARAMS register
> >
> > Aneesh Kumar K.V (1):
> > powerpc/mm: Recompute hash value after a failed update
> >
> > Arad, Ronen (1):
> > netlink: Trim skb to alloc size to avoid MSG_TRUNC
> >
> > Ard Biesheuvel (1):
> > ARM: 8429/1: disable GCC SRA optimization
> >
> > Arnaldo Carvalho de Melo (1):
> > perf header: Fixup reading of HEADER_NRCPUS feature
> >
> > Ben Hutchings (1):
> > genirq: Fix race in register_irq_proc()
> >
> > Benjamin Herrenschmidt (1):
> > powerpc/boot: Specify ABI v2 when building an LE boot wrapper
> >
> > Carl Frederik Werner (1):
> > ARM: dts: omap3-beagle: make i2c3, ddc and tfp410 gpio work again
> >
> > Charles Keepax (1):
> > asix: Do full reset during ax88772_bind
> >
> > Chas Williams (1):
> > net/xen-netfront: only napi_synchronize() if running
> >
> > Dave Airlie (1):
> > drm/qxl: only report first monitor as connected if we have no state
> >
> > David Woodhouse (1):
> > x86/platform: Fix Geode LX timekeeping in the generic x86 build
> >
> > Dirk Müller (1):
> > Use WARN_ON_ONCE for missing X86_FEATURE_NRIPS
> >
> > Eric Dumazet (1):
> > net: add pfmemalloc check in sk_add_backlog()
> >
> > Eric W. Biederman (2):
> > dcache: Handle escaped paths in prepend_path
> > vfs: Test for and handle paths that are unreachable from their mnt_root
> >
> > Fabiano Fidêncio (1):
> > drm/qxl: recreate the primary surface when the bo is not primary
> >
> > Filipe Manana (1):
> > Btrfs: fix read corruption of compressed and shared extents
> >
> > Grazvydas Ignotas (1):
> > ARM: dts: omap5-uevm.dts: fix i2c5 pinctrl offsets
> >
> > Guenter Roeck (2):
> > hwmon: (nct6775) Swap STEP_UP_TIME and STEP_DOWN_TIME registers for most chips
> > spi: Fix documentation of spi_alloc_master()
> >
> > Guillaume Nault (1):
> > ppp: don't override sk->sk_state in pppoe_flush_dev()
> >
> > James Hogan (1):
> > MIPS: dma-default: Fix 32-bit fall back to GFP_DMA
> >
> > Jan Kara (1):
> > jbd2: avoid infinite loop when destroying aborted journal
> >
> > Jani Nikula (1):
> > drm/i915/bios: handle MIPI Sequence Block v3+ gracefully
> >
> > Jann Horn (2):
> > CIFS: fix type confusion in copy offload ioctl
> > fs: if a coredump already exists, unlink and recreate with O_EXCL
> >
> > Jason Wang (4):
> > kvm: don't try to register to KVM_FAST_MMIO_BUS for non mmio eventfd
> > kvm: factor out core eventfd assign/deassign logic
> > kvm: fix double free for fast mmio eventfd
> > kvm: fix zero length mmio searching
> >
> > Jeff Mahoney (1):
> > btrfs: skip waiting on ordered range for special files
> >
> > Jenny Derzhavetz (1):
> > iser-target: remove command with state ISTATE_REMOVE
> >
> > Jiri Benc (1):
> > vxlan: set needed headroom correctly
> >
> > Joe Perches (1):
> > ethtool: Use kcalloc instead of kmalloc for ethtool_get_strings
> >
> > Johan Hovold (1):
> > USB: whiteheat: fix potential null-deref at probe
> >
> > John Stultz (1):
> > clocksource: Fix abs() usage w/ 64bit values
> >
> > Joonsoo Kim (1):
> > mm/slab: fix unexpected index mapping result of kmalloc_size(INDEX_NODE+1)
> >
> > Joseph Qi (1):
> > ocfs2/dlm: fix deadlock when dispatch assert master
> >
> > Julia Lawall (1):
> > xhci-mem: Use setup_timer
> >
> > Kapileshwar Singh (1):
> > tools lib traceevent: Fix string handling in heterogeneous arch environments
> >
> > Konstantin Khlebnikov (1):
> > ovs: do not allocate memory from offline numa node
> >
> > Kyle Evans (1):
> > hp-wmi: limit hotkey enable
> >
> > Linus Torvalds (1):
> > Initialize msg/shm IPC objects before doing ipc_addid()
> >
> > Liu.Zhao (1):
> > USB: option: add ZTE PIDs
> >
> > Luis Henriques (2):
> > zram: fix possible use after free in zcomp_create()
> > Revert "ARM: orion5x: fix legacy orion5x IRQ numbers"
> >
> > Manfred Spraul (1):
> > ipc/sem.c: fully initialize sem_array before making it visible
> >
> > Marc Zyngier (2):
> > arm64: KVM: Disable virtual timer even if the guest is not using it
> > arm: KVM: Disable virtual timer even if the guest is not using it
> >
> > Mathias Krause (1):
> > hp-wmi: Add missing __init annotations to initialization code
> >
> > Mathias Nyman (4):
> > usb: Use the USB_SS_MULT() macro to get the burst multiplier.
> > xhci: give command abortion one more chance before killing xhci
> > xhci: change xhci 1.0 only restrictions to support xhci 1.1
> > xhci: init command timeout timer earlier to avoid deleting it uninitialized
> >
> > Matt Fleming (1):
> > x86/efi: Fix boot crash by mapping EFI memmap entries bottom-up at runtime, instead of top-down
> >
> > Max Filippov (1):
> > spi: xtensa-xtfpga: fix register endianness
> >
> > Mel Gorman (1):
> > mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy a fault
> >
> > Michel Dänzer (1):
> > drm/radeon: Restore LCD backlight level on resume (>= R5xx)
> >
> > Michel Stam (1):
> > asix: Don't reset PHY on if_up for ASIX 88772
> >
> > Nikhil Badola (2):
> > drivers: usb :fsl: Implement Workaround for USB Erratum A007792
> > drivers: usb: fsl: Workaround for USB erratum-A005275
> >
> > Pablo Neira Ayuso (1):
> > netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPEC
> >
> > Paolo Bonzini (1):
> > KVM: x86: trap AMD MSRs for the TSeg base and mask
> >
> > Paul Burton (3):
> > MIPS: CPS: Stop dangling delay slot from has_mt.
> > MIPS: CPS: Don't include MT code in non-MT kernels.
> > MIPS: CPS: #ifdef on CONFIG_MIPS_MT_SMP rather than CONFIG_MIPS_MT
> >
> > Peter Chen (1):
> > usb: chipidea: udc: using the correct stall implementation
> >
> > Peter Seiderer (1):
> > cifs: use server timestamp for ntlmv2 authentication
> >
> > Prarit Bhargava (1):
> > intel_pstate: Fix overflow in busy_scaled due to long delay
> >
> > Pravin B Shelar (2):
> > skbuff: Fix skb checksum flag on skb pull
> > skbuff: Fix skb checksum partial check.
> >
> > Richard Weinberger (1):
> > UBI: Validate data_size
> >
> > Robert Jarzmik (2):
> > ASoC: pxa: pxa2xx-ac97: fix dma requestor lines
> > ASoC: fix broken pxa SoC support
> >
> > Roger Quadros (2):
> > usb: xhci: Clear XHCI_STATE_DYING on start
> > usb: xhci: Allow usb_add/remove_hcd() to be called repeatedly
> >
> > Roland Dreier (1):
> > fib_rules: Fix dump_rules() not to exit early
> >
> > Russell King (1):
> > ARM: fix Thumb2 signal handling when ARMv6 is enabled
> >
> > Sabrina Dubroca (1):
> > net: add length argument to skb_copy_and_csum_datagram_iovec
> >
> > Shaohua Li (1):
> > x86/apic: Serialize LVTT and TSC_DEADLINE writes
> >
> > Shawn Lin (1):
> > staging: ion: fix corruption of ion_import_dma_buf
> >
> > Simon Guinot (1):
> > net: mvneta: fix DMA buffer unmapping in mvneta_rx()
> >
> > Stephen Smalley (1):
> > x86/mm: Set NX on gap between __ex_table and rodata
> >
> > Steve French (1):
> > disabling oplocks/leases via module parm enable_oplocks broken for SMB3
> >
> > Stratos Karafotis (1):
> > cpufreq: intel_pstate: Remove unnecessary type casting in div_s64() call
> >
> > Tan, Jui Nee (1):
> > spi: spi-pxa2xx: Check status register to determine if SSSR_TINT is disabled
> >
> > Thomas Hellstrom (2):
> > drm/vmwgfx: Fix up user_dmabuf refcounting
> > drm/vmwgfx: Fix kernel NULL pointer dereference on older hardware
> >
> > Will Deacon (3):
> > arm64: head.S: initialise mdcr_el2 in el2_setup
> > arm64: compat: fix vfp save/restore across signal handlers in big-endian
> > arm64: errata: add module build workaround for erratum #843419
> >
> > lucien (1):
> > sctp: donot reset the overall_error_count in SHUTDOWN_RECEIVE state
> >
> > shengyong (1):
> > UBI: return ENOSPC if no enough space available
>
> --
> kernel-team mailing list
> kernel-team@...ts.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists