2013-06-10 10:34:12

by Willy Tarreau

[permalink] [raw]
Subject: Linux 2.6.32.61

I've just released Linux 2.6.32.61.

This version include backports from the 3.0.y branch up to and including
3.0.80. The following CVE IDs were fixed since 2.6.32.60 :

CVE-2011-2695 CVE-2011-2699 CVE-2012-2390 CVE-2012-3430 CVE-2012-3552
CVE-2012-4398 CVE-2012-4444 CVE-2012-4461 CVE-2012-4508 CVE-2012-4530
CVE-2012-4565 CVE-2012-6537 CVE-2012-6539 CVE-2012-6540 CVE-2012-6542
CVE-2012-6544 CVE-2012-6545 CVE-2012-6546 CVE-2012-6548 CVE-2012-6549
CVE-2013-0228 CVE-2013-0268 CVE-2013-0349 CVE-2013-0871 CVE-2013-0914
CVE-2013-1767 CVE-2013-1773 CVE-2013-1774 CVE-2013-1792 CVE-2013-1796
CVE-2013-1798 CVE-2013-1826 CVE-2013-1860 CVE-2013-1928 CVE-2013-2015
CVE-2013-2634 CVE-2013-3222 CVE-2013-3223 CVE-2013-3224 CVE-2013-3225
CVE-2013-3228 CVE-2013-3229 CVE-2013-3231 CVE-2013-3234 CVE-2013-3235

The patch and changelog will appear soon at the following locations:
ftp://ftp.all.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.32/
ftp://ftp.all.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.32/patch-2.6.32.61.bz2
ftp://ftp.all.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.32/patch-2.6.32.61.xz
ftp://ftp.all.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.32/patch-2.6.32.61.gz
ftp://ftp.all.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.32/ChangeLog-2.6.32.61

The updated 2.6.32.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-2.6.32.y
http://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-2.6.32.y

The tree can be browsed on the gitweb interface:
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/log/?id=refs/heads/linux-2.6.32.y

Testing status (build/boot, OK/FAIL, otherwise not tested) :

ARCH | CONFIGURATION
--------+-----------------------------------
| allmodconfig other-config
x86_64 | build:OK -
i386 | build:OK -
arm | build:OK -

Thanks to all reviewers, Moritz for the long list of security fixes, Ben for
the careful review and to Greg for the final packaging.

Willy

---------
Makefile | 2 +-
arch/alpha/kernel/sys_nautilus.c | 5 +
arch/arm/include/asm/signal.h | 1 +
arch/avr32/include/asm/signal.h | 1 +
arch/cris/include/asm/signal.h | 1 +
arch/h8300/include/asm/signal.h | 1 +
arch/m32r/include/asm/signal.h | 1 +
arch/m68k/include/asm/signal.h | 1 +
arch/mips/Makefile | 2 +-
arch/mips/kernel/Makefile | 2 +-
arch/mn10300/include/asm/signal.h | 1 +
arch/parisc/kernel/signal32.c | 6 +-
arch/powerpc/include/asm/signal.h | 1 +
arch/s390/include/asm/signal.h | 1 +
arch/sparc/include/asm/signal.h | 1 +
arch/x86/Kconfig | 2 +-
arch/x86/include/asm/pgtable.h | 5 +
arch/x86/include/asm/ptrace.h | 5 +-
arch/x86/include/asm/signal.h | 2 +
arch/x86/kernel/apic/io_apic.c | 9 +-
arch/x86/kernel/cpu/mcheck/mce.c | 9 +-
arch/x86/kernel/efi.c | 3 -
arch/x86/kernel/msr.c | 3 +
arch/x86/kvm/x86.c | 9 +
arch/x86/mm/fault.c | 6 +-
arch/x86/mm/init_64.c | 3 +
arch/x86/xen/enlighten.c | 18 +-
arch/x86/xen/xen-asm_32.S | 14 +-
arch/xtensa/include/asm/signal.h | 1 +
block/blk-core.c | 14 +-
block/blk-exec.c | 7 +
block/scsi_ioctl.c | 5 +-
crypto/cryptd.c | 11 +-
drivers/acpi/processor_idle.c | 3 +
drivers/ata/libata-scsi.c | 6 +-
drivers/base/bus.c | 4 +-
drivers/char/ipmi/ipmi_bt_sm.c | 4 +-
drivers/firmware/pcdp.c | 4 +-
drivers/infiniband/ulp/ipoib/ipoib_main.c | 2 +-
drivers/infiniband/ulp/ipoib/ipoib_multicast.c | 19 +-
drivers/isdn/isdnloop/isdnloop.c | 12 -
drivers/net/bonding/bonding.h | 4 +-
drivers/net/r8169.c | 30 +--
drivers/net/tg3.c | 4 +
drivers/net/wireless/b43legacy/main.c | 2 +
drivers/scsi/bnx2i/bnx2i_hwi.c | 3 +
drivers/scsi/mpt2sas/mpt2sas_ctl.c | 7 +-
drivers/scsi/scsi_lib.c | 2 +
drivers/serial/8250.c | 2 +-
drivers/staging/comedi/comedi_fops.c | 13 +-
drivers/staging/comedi/drivers/comedi_test.c | 2 +-
drivers/staging/comedi/drivers/das08.c | 2 +-
drivers/staging/comedi/drivers/jr3_pci.c | 2 +-
drivers/staging/comedi/drivers/ni_labpc.c | 35 +--
drivers/staging/comedi/drivers/s626.c | 2 +-
drivers/staging/vt6656/rf.c | 3 +
drivers/telephony/ixj.c | 24 +-
drivers/usb/class/cdc-wdm.c | 23 +-
drivers/usb/host/ehci-hcd.c | 8 +-
drivers/usb/host/ehci-q.c | 82 +++---
drivers/usb/host/ehci.h | 3 +-
drivers/usb/host/pci-quirks.c | 12 +-
drivers/usb/serial/ftdi_sio.c | 4 +
drivers/usb/serial/garmin_gps.c | 7 +-
drivers/usb/serial/io_ti.c | 3 +
drivers/usb/serial/mos7840.c | 2 +-
drivers/usb/serial/sierra.c | 1 +
drivers/usb/serial/whiteheat.c | 1 +
drivers/w1/w1.c | 3 +-
fs/binfmt_elf.c | 19 +-
fs/binfmt_em86.c | 1 -
fs/binfmt_misc.c | 11 +-
fs/binfmt_script.c | 8 +-
fs/btrfs/volumes.c | 6 +
fs/cifs/cifs_dfs_ref.c | 2 +
fs/compat_ioctl.c | 3 +
fs/eventpoll.c | 22 +-
fs/exec.c | 25 +-
fs/ext4/acl.c | 6 +-
fs/ext4/ext4_extents.h | 7 +-
fs/ext4/extents.c | 106 ++++++--
fs/ext4/inode.c | 8 +-
fs/ext4/mballoc.c | 12 +-
fs/ext4/move_extent.c | 17 +-
fs/ext4/namei.c | 26 +-
fs/ext4/super.c | 17 +-
fs/fat/inode.c | 2 +-
fs/fat/namei_vfat.c | 9 +-
fs/fscache/stats.c | 2 +-
fs/hfsplus/extents.c | 2 +-
fs/isofs/export.c | 1 +
fs/jbd/commit.c | 43 +++-
fs/jbd/transaction.c | 99 ++++++--
fs/nfsd/nfs4xdr.c | 11 +-
fs/nls/nls_base.c | 43 +++-
fs/splice.c | 7 +-
fs/sysfs/dir.c | 16 +-
fs/udf/inode.c | 4 +
fs/udf/namei.c | 1 +
fs/udf/udf_sb.h | 2 +-
include/asm-generic/signal.h | 4 +
include/linux/binfmts.h | 3 +-
include/linux/blkdev.h | 4 +-
include/linux/kmod.h | 2 +
include/linux/mempolicy.h | 2 +-
include/linux/msdos_fs.h | 3 +-
include/linux/nls.h | 5 +-
include/linux/page-flags.h | 8 +-
include/linux/sched.h | 11 +-
include/linux/socket.h | 2 +-
include/net/inet_sock.h | 14 +-
include/net/ip.h | 11 +-
include/net/ipv6.h | 12 +-
include/net/transp_v6.h | 2 +
include/scsi/scsi.h | 8 +-
include/scsi/scsi_netlink.h | 4 +-
include/trace/events/kmem.h | 4 +-
kernel/async.c | 13 +-
kernel/cgroup.c | 2 -
kernel/kmod.c | 89 ++++++-
kernel/posix-cpu-timers.c | 23 +-
kernel/ptrace.c | 71 ++++--
kernel/resource.c | 50 +++-
kernel/sched.c | 3 +-
kernel/signal.c | 21 +-
kernel/softirq.c | 17 +-
kernel/sys.c | 1 +
kernel/time/tick-broadcast.c | 3 +-
kernel/time/tick-sched.c | 2 +-
kernel/time/timekeeping.c | 3 +-
kernel/timer.c | 2 +-
kernel/trace/ftrace.c | 1 -
kernel/trace/ring_buffer.c | 2 +
lib/genalloc.c | 2 +-
mm/hugetlb.c | 29 ++-
mm/mempolicy.c | 37 ++-
mm/shmem.c | 10 +-
mm/truncate.c | 3 +-
mm/vmscan.c | 2 +
net/atm/common.c | 3 +
net/atm/pvc.c | 1 +
net/ax25/af_ax25.c | 1 +
net/bluetooth/af_bluetooth.c | 4 +-
net/bluetooth/hci_sock.c | 1 +
net/bluetooth/hidp/core.c | 2 +-
net/bluetooth/l2cap.c | 1 +
net/bluetooth/rfcomm/sock.c | 2 +
net/bridge/br_stp_bpdu.c | 2 +
net/core/dev.c | 9 +-
net/core/sock.c | 3 +-
net/dcb/dcbnl.c | 1 +
net/dccp/ipv4.c | 15 +-
net/dccp/ipv6.c | 2 +-
net/ipv4/af_inet.c | 16 +-
net/ipv4/cipso_ipv4.c | 113 +++++----
net/ipv4/icmp.c | 23 +-
net/ipv4/inet_connection_sock.c | 8 +-
net/ipv4/ip_options.c | 38 ++-
net/ipv4/ip_output.c | 50 ++--
net/ipv4/ip_sockglue.c | 35 ++-
net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c | 8 +
net/ipv4/raw.c | 19 +-
net/ipv4/route.c | 17 +-
net/ipv4/syncookies.c | 4 +-
net/ipv4/tcp.c | 2 +-
net/ipv4/tcp_illinois.c | 8 +-
net/ipv4/tcp_ipv4.c | 33 +--
net/ipv4/tcp_output.c | 7 +-
net/ipv4/udp.c | 21 +-
net/ipv6/af_inet6.c | 2 +
net/ipv6/ip6_output.c | 40 ++-
net/ipv6/reassembly.c | 74 ++----
net/ipv6/tcp_ipv6.c | 2 +-
net/ipv6/udp.c | 2 +-
net/irda/af_irda.c | 2 +
net/iucv/af_iucv.c | 2 +
net/llc/af_llc.c | 5 +-
net/netfilter/ipvs/ip_vs_ctl.c | 1 +
net/netfilter/ipvs/ip_vs_xmit.c | 33 ++-
net/packet/af_packet.c | 1 -
net/rds/recv.c | 3 +
net/rose/af_rose.c | 1 +
net/sched/act_gact.c | 14 +-
net/sched/sch_htb.c | 2 +-
net/sctp/auth.c | 2 +-
net/sctp/chunk.c | 7 +-
net/sctp/endpointola.c | 5 +
net/sctp/socket.c | 2 +-
net/socket.c | 6 +-
net/sunrpc/rpc_pipe.c | 2 +-
net/tipc/socket.c | 7 +
net/unix/af_unix.c | 7 +-
net/xfrm/xfrm_user.c | 15 +-
scripts/Kbuild.include | 12 +-
scripts/gcc-version.sh | 6 +-
scripts/gcc-x86_32-has-stack-protector.sh | 2 +-
scripts/gcc-x86_64-has-stack-protector.sh | 2 +-
scripts/kconfig/check.sh | 2 +-
scripts/kconfig/lxdialog/check-lxdialog.sh | 2 +-
security/keys/process_keys.c | 2 +-
sound/core/seq/seq_timer.c | 8 +-
sound/pci/ac97/ac97_codec.c | 2 +
sound/pci/hda/patch_realtek.c | 329 +++++++++++++++++++++++--
usr/gen_init_cpio.c | 43 ++--
virt/kvm/ioapic.c | 7 +-
205 files changed, 1800 insertions(+), 819 deletions(-)

Summary of changes from 2.6.32.60 to 2.6.32.61
==============================================
Al Viro (1):
PARISC: fix user-triggerable panic on parisc

Alan Cox (1):
x86/msr: Add capabilities check

Alan Stern (2):
USB: EHCI: go back to using the system clock for QH unlinks
NLS: improve UTF8 -> UTF16 string conversion routine

Alexey Khoroshilov (1):
net/core: Fix potential memory leak in dev_set_alias()

Allison Henderson (1):
ext4: don't dereference null pointer when make_indexed_dir() fails

Anatol Pomozov (1):
ext4: make orphan functions be no-op in no-journal mode

Anderson Lizardo (1):
Bluetooth: Fix incorrect strncpy() in hidp_setup_hid()

Andi Kleen (1):
MCE: Fix vm86 handling for 32bit mce handler

Andrew Morton (1):
kernel/signal.c: use __ARCH_HAS_SA_RESTORER instead of SA_RESTORER

Andrew Worsley (1):
USB: serial: ftdi_sio: Handle the old_termios == 0 case e.g. uart_resume_port()

Andy Honig (2):
KVM: x86: fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (CVE-2013-1796)
KVM: Fix bounds checking in ioapic indirect register reads (CVE-2013-1798)

Anurup m (1):
fs/fscache/stats.c: fix memory leak

Ben Hutchings (2):
Revert "pcdp: use early_ioremap/early_iounmap to access pcdp table"
signal: Define __ARCH_HAS_SA_RESTORER so we know whether to clear sa_restorer

Benjamin LaHaise (1):
ipv4: check rt_genid in dst_check

Bernd Schubert (1):
ext4: always set i_op in ext4_mknod()

Bjorn Helgaas (1):
Driver core: treat unregistered bus_types as having no devices

Chen Gang (1):
drivers/char/ipmi: memcpy, need additional 2 bytes to avoid memory overflow

Christoffer Dall (1):
mm: Fix PageHead when !CONFIG_PAGEFLAGS_EXTENDED

Cong Ding (1):
fs/cifs/cifs_dfs_ref.c: fix potential memory leakage

Cong Wang (1):
net: prevent setting ttl=0 via IP_TTL

Dan Carpenter (1):
telephony: ijx: buffer overflow in ixj_write_cid()

Daniel Borkmann (3):
net: sctp: sctp_setsockopt_auth_key: use kzfree instead of kfree
net: sctp: sctp_endpoint_free: zero out secret key data
net: sctp: sctp_auth_key_put: use kzfree instead of kfree

Dave Hansen (2):
hugetlb: fix resv_map leak in error path
mm: fix vma_resv_map() NULL pointer

David Howells (1):
keys: fix race with concurrent install_user_keyrings()

Denys Vlasenko (1):
coredump: prevent double-free on an error path in core dumper

Dmitry Monakhov (1):
ext4: online defrag is not supported for journaled files

Eddie Wai (1):
SCSI: bnx2i: Fixed NULL ptr deference for 1G bnx2 Linux iSCSI offload

Emese Revfy (1):
kernel/signal.c: stop info leak via the tkill and the tgkill syscalls

Eric Dumazet (8):
net: reduce net_rx_action() latency to 2 HZ
softirq: reduce latencies
net: guard tcp_set_keepalive() to tcp sockets
inet: add RCU protection to inet->opt
tcp: allow splice() to build full TSO packets
tcp: fix MSG_SENDPAGE_NOTLAST logic
tcp: preserve ACK clocking in TSO
ipv6: make fragment identifications less predictable

Eric Sandeen (1):
btrfs: use rcu_barrier() to wait for bdev puts at unmount

Eric Wong (1):
epoll: prevent missed events on EPOLL_CTL_MOD

Eugene Shatokhin (1):
ext4: fix memory leak in ext4_xattr_set_acl()'s error path

Francois Romieu (1):
r8169: incorrect identifier for a 8168dp

Geert Uytterhoeven (1):
sysfs: sysfs_pathname/sysfs_add_one: Use strlcat() instead of strcat()

Greg Thelen (1):
tmpfs: fix use-after-free of mempolicy object

Hayes Wang (1):
r8169: correct settings of rtl8102e.

Hillf Danton (1):
bonding: Fix slave selection bug.

Hiroaki SHIMODA (1):
net_sched: gact: Fix potential panic in tcf_gact().

Hugh Dickins (1):
mm: fix invalidate_complete_page2() lock ordering

Ian Abbott (9):
staging: comedi: ni_labpc: correct differential channel sequence for AI commands
staging: comedi: ni_labpc: set up command4 register *after* command3
staging: comedi: comedi_test: fix race when cancelling command
staging: comedi: fix memory leak for saved channel list
staging: comedi: s626: don't dereference insn->data
staging: comedi: jr3_pci: fix iomem dereference
staging: comedi: don't dereference user memory for INSN_INTTRIG
staging: comedi: check s->async for poll(), read() and write()
staging: comedi: das08: Correct AO output for das08jr-16-ao

J. Bruce Fields (1):
nfsd4: fix oops on unusual readlike compound

James Bottomley (1):
fix crash in scsi_dispatch_cmd()

Jamie Iles (1):
CVE-2012-4508 kernel: ext4: AIO vs fallocate stale data exposure

Jan Beulich (1):
x86/xen: don't assume %ds is usable in xen_iret for 32-bit PVOPS.

Jan Kara (7):
scsi: Silence unnecessary warnings about ioctl to partition
jbd: Delay discarding buffers in journal_unmap_buffer
jbd: Fix assertion failure in commit code due to lacking transaction credits
jbd: Fix lock ordering bug in journal_unmap_buffer()
ext4: Fix fs corruption when make_indexed_dir() fails
ext4: fix fdatasync() for files with only i_size changes
udf: Fix bitmap overflow on large filesystems with small block size

Jay Estabrook (1):
alpha: Add irongate_io to PCI bus resources

Jean Delvare (1):
kbuild: Fix gcc -x syntax

Jens Axboe (1):
Revert "block: improve queue_should_plug() by looking at IO depths"

Jesper Dangaard Brouer (2):
net: fix divide by zero in tcp algorithm illinois
ipvs: IPv6 MTU checking cleanup and bugfix

Jiri Slaby (1):
serial: 8250, increase PASS_LIMIT

Johan Hovold (4):
USB: whiteheat: fix memory leak in error path
USB: mos7840: fix urb leak at release
USB: mos7840: fix port-device leak in error path
USB: garmin_gps: fix memory leak on disconnect

John Johansen (1):
ptrace: Fix ptrace when task is in task_is_stopped() state

John Stultz (1):
2.6.32.y: timekeeping: Fix nohz issue with commit 61b76840ddee647c0c223365378c3f394355b7d7

Jozsef Kadlecsik (1):
netfilter: nf_ct_ipv4: packets with wrong ihl are invalid

Jussi Kivilinna (1):
crypto: cryptd - disable softirqs in cryptd_queue_worker to prevent data corruption

Kailang Yang (1):
ALSA: hda - More ALC663 fixes and support of compatible chips

Kashyap, Desai (1):
mpt2sas: Send default descriptor for RAID pass through in mpt2ctl

Kees Cook (5):
gen_init_cpio: avoid stack overflow when expanding
exec: do not leave bprm->interp on stack
exec: use -ELOOP for max recursion depth
signal: always clear sa_restorer on execve
fs/compat_ioctl.c: VIDEO_SET_SPU_PALETTE missing error check

Kevin Dankwardt (1):
fat: Fix stat->f_namelen

Konrad Rzeszutek Wilk (3):
xen/bootup: allow read_tscp call for Xen PV guests.
xen/bootup: allow {read|write}_cr8 pvops call.
ACPI / cpuidle: Fix NULL pointer issues when cpuidle is disabled

Lachlan McIlroy (1):
ext4: limit group search loop for non-extent files

Larry Finger (1):
b43legacy: Fix crash on unload when firmware not available

Lennart Sorensen (2):
r8169: Add support for D-Link 530T rev C1 (Kernel Bug 38862)
USB: serial: Fix memory leak in sierra_release()

Li Zhong (1):
Fix a dead loop in async_synchronize_full()

Lukas Czerner (1):
ext4: Fix max file size and logical block counting of extent format file

Malcolm Priestley (1):
staging: vt6656: [BUG] out of bound array reference in RFbSetPower.

Marcelo Tosatti (1):
KVM: x86: relax MSR_KVM_SYSTEM_TIME alignment check

Marcin Jurkowski (1):
w1: fix oops when w1_search is called from netlink connector

Mark Rutland (1):
clockevents: Don't allow dummy broadcast timers

Mathias Krause (25):
xfrm_user: fix info leak in copy_to_user_state()
xfrm_user: fix info leak in copy_to_user_policy()
xfrm_user: fix info leak in copy_to_user_tmpl()
xfrm_user: return error pointer instead of NULL
xfrm_user: return error pointer instead of NULL #2
Bluetooth: HCI - Fix info leak in getsockopt(HCI_FILTER)
Bluetooth: RFCOMM - Fix info leak via getsockname()
Bluetooth: RFCOMM - Fix missing msg_namelen update in rfcomm_sock_recvmsg()
Bluetooth: L2CAP - Fix info leak via getsockname()
Bluetooth: fix possible info leak in bt_sock_recvmsg()
udf: avoid info leak on export
isofs: avoid info leak on export
net: fix info leak in compat dev_ifconf()
dcbnl: fix various netlink info leaks
ipvs: fix info leak in getsockopt(IP_VS_SO_GET_TIMEOUT)
atm: update msg_namelen in vcc_recvmsg()
atm: fix info leak via getsockname()
atm: fix info leak in getsockopt(SO_ATMPVC)
ax25: fix info leak via msg_name in ax25_recvmsg()
iucv: Fix missing msg_namelen update in iucv_sock_recvmsg()
llc: fix info leak via getsockname()
llc: Fix missing msg_namelen update in llc_ui_recvmsg()
rose: fix info leak via msg_name in rose_recvmsg()
irda: Fix missing msg_namelen update in irda_recvmsg_dgram()
tipc: fix info leaks via msg_name in recv_msg/recv_stream

Matthew Garrett (2):
x86: Don't use the EFI reboot method by default
xhci: Make handover code more robust

Mel Gorman (2):
mempolicy: fix a race in shared_policy_replace()
x86/mm: Check if PUD is large when validating a kernel address

Namhyung Kim (1):
tracing: Fix double free when function profile init failed

Namjae Jeon (1):
udf: fix memory leak while allocating blocks during write

Nicolas Dichtel (1):
ipv6: discard overlapping fragment

Nithin Nayak Sujir (1):
tg3: Avoid null pointer dereference in tg3_interrupt in netconsole mode

Niu Yawei (1):
ext4: fix race in ext4_mb_add_n_trim()

Oleg Nesterov (9):
usermodehelper: introduce umh_complete(sub_info)
usermodehelper: implement UMH_KILLABLE
usermodehelper: ____call_usermodehelper() doesn't need do_exit()
kmod: introduce call_modprobe() helper
kmod: make __request_module() killable
ptrace: ptrace_resume() shouldn't wake up !TASK_TRACED thread
ptrace: introduce signal_wake_up_state() and ptrace_signal_wake_up()
ptrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL
wake_up_process() should be never used to wakeup a TASK_STOPPED/TRACED task

Oliver Neukum (1):
USB: cdc-wdm: fix buffer overflow

Patrick McHardy (1):
IPoIB: Fix use-after-free of multicast object

Paul Moore (1):
unix: fix a race condition in unix_release()

Peter Korsgaard (1):
scsi: use __uX types for headers exported to user space

Petr Matousek (1):
KVM: x86: invalid opcode oops on SET_SREGS with OSXSAVE bit set (CVE-2012-4461)

Romain Francoise (1):
x86, random: make ARCH_RANDOM prompt if EMBEDDED, not EXPERT

Samu Kallio (1):
x86, mm, paravirt: Fix vmalloc_fault oops during lazy MMU updates

Shawn Guo (1):
kernel/sys.c: call disable_nonboot_cpus() in kernel_restart()

Simon Horman (1):
ipvs: allow transmit of GRO aggregated skbs

Stanislaw Gruszka (1):
posix-cpu-timers: Fix nanosleep task_struct leak

Stefan Hasko (1):
net: sched: integer overflow fix

Stephen Hemminger (1):
bridge: set priority of STP packets

Steven Rostedt (1):
ring-buffer: Fix race between integrity check and readers

Suresh Siddha (1):
x86, ioapic: initialize nr_ioapic_registers early in mp_register_ioapic()

T Makphaibulchoke (1):
kernel/resource.c: fix stack overflow in __reserve_region_with_split()

Takamori Yamaguchi (1):
mm: bugfix: set current->reclaim_state to NULL while returning from kswapd()

Takashi Iwai (3):
ALSA: hda - Add a pin-fix for FSC Amilo Pi1505
ALSA: seq: Fix missing error handling in snd_seq_timer_open()
ALSA: ac97 - Fix missing NULL check in snd_ac97_cvol_new()

Tejun Heo (1):
cgroup: remove incorrect dget/dput() pair in cgroup_create_dir()

Thadeu Lima de Souza Cascardo (1):
genalloc: stop crashing the system when destroying a pool

Theodore Ts'o (2):
ext4: lock i_mutex when truncating orphan inodes
ext4: avoid hang when mounting non-journal filesystems with orphan list

Thomas Gleixner (1):
tick: Cleanup NOHZ per cpu data on cpu down

Timo Ter?s (1):
r8169: remove the obsolete and incorrect AMD workaround

Tirupathi Reddy (1):
timer: Don't reinitialize the cpu base lock during CPU_UP_PREPARE

Tommi Rantala (1):
sctp: fix memory leak in sctp_datamsg_from_user() when copy from user space fails

Trond Myklebust (1):
kernel panic when mount NFSv4

Vyacheslav Dubeyko (1):
hfsplus: fix potential overflow in hfsplus_file_truncate()

Weiping Pan (1):
rds: set correct msg_namelen

Wen Congyang (1):
tracing: Don't call page_to_pfn() if page is NULL

Willy Tarreau (2):
x86, ptrace: fix build breakage with gcc 4.7
Linux 2.6.32.61

Wolfgang Frisch (1):
USB: io_ti: Fix NULL dereference in chase_port()

Wu Fengguang (1):
isdnloop: fix and simplify isdnloop_init()

Xiaotian Feng (1):
libata: fix Null pointer dereference on disk error

Ying Xue (1):
USB: ftdi_sio: Quiet sparse noise about using plain integer was NULL pointer

[email protected] (1):
af_packet: remove BUG statement in tpacket_destruct_skb


2013-06-10 15:18:59

by Sven-Haegar Koch

[permalink] [raw]
Subject: Re: Linux 2.6.32.61

On Mon, 10 Jun 2013, Willy Tarreau wrote:

> Willy Tarreau (2):
> x86, ptrace: fix build breakage with gcc 4.7

This change breaks "make headers_install":

CHECK include (0 files)
CHECK include/asm (54 files)
/home/haegar/src/2.6.32/linux/usr/include/asm/ptrace.h:5: included file 'linux/linkage.h' is not exported
make[3]: *** [/home/haegar/src/2.6.32/linux/usr/include/asm/.check] Error 123
make[2]: *** [headers_check] Error 2
make[1]: *** [deb-pkg] Error 2
make: *** [deb-pkg] Error 2

c'ya
sven-haegar

--
Three may keep a secret, if two of them are dead.
- Ben F.

2013-06-10 16:04:21

by Willy Tarreau

[permalink] [raw]
Subject: Re: Linux 2.6.32.61

Hi Sven-Haegar,

On Mon, Jun 10, 2013 at 05:11:49PM +0200, Sven-Haegar Koch wrote:
> On Mon, 10 Jun 2013, Willy Tarreau wrote:
>
> > Willy Tarreau (2):
> > x86, ptrace: fix build breakage with gcc 4.7
>
> This change breaks "make headers_install":
>
> CHECK include (0 files)
> CHECK include/asm (54 files)
> /home/haegar/src/2.6.32/linux/usr/include/asm/ptrace.h:5: included file 'linux/linkage.h' is not exported
> make[3]: *** [/home/haegar/src/2.6.32/linux/usr/include/asm/.check] Error 123
> make[2]: *** [headers_check] Error 2
> make[1]: *** [deb-pkg] Error 2
> make: *** [deb-pkg] Error 2

Grrr... seems like we'll need to fix the gcc 4.7 build issue differently
because we probably don't want to export linux/linkage.h just to make
the __attribute__((regparm=3)) appear in one arch-specific file.

I'll check if the definition in the include is really needed after I
install a gcc 4.7 cross-compiler.

Thanks for your report, and sorry for the mess.

Willy

2013-06-13 17:53:39

by Willy Tarreau

[permalink] [raw]
Subject: Re: Linux 2.6.32.61 - x86/ptrace/gcc 4.7 build error

Sven-Haegar, Christoph,

concerning the issue below, I could reproduce both Sven-Haegar's error (running
make headers_check with the patch applied) and Christoph's build error with gcc
4.7 on i686 without the patch.

I noticed that neither syscall_trace_enter() nor syscall_trace_leave() were
called from C code, all were from pure asm. So I simply reverted the first
patch then removed the two function prototypes and everything is OK for me
now using gcc 4.7, i686 and x86_64.

I'm attaching the two patches here to be appled on top of 2.6.32.61, I would
like it if you could try in your environment to confirm that they correctly
fix the issue.

Thanks,
Willy

--
On Mon, Jun 10, 2013 at 05:11:49PM +0200, Sven-Haegar Koch wrote:
> On Mon, 10 Jun 2013, Willy Tarreau wrote:
>
> > Willy Tarreau (2):
> > x86, ptrace: fix build breakage with gcc 4.7
>
> This change breaks "make headers_install":
>
> CHECK include (0 files)
> CHECK include/asm (54 files)
> /home/haegar/src/2.6.32/linux/usr/include/asm/ptrace.h:5: included file 'linux/linkage.h' is not exported
> make[3]: *** [/home/haegar/src/2.6.32/linux/usr/include/asm/.check] Error 123
> make[2]: *** [headers_check] Error 2
> make[1]: *** [deb-pkg] Error 2
> make: *** [deb-pkg] Error 2
>
> c'ya
> sven-haegar
>
> --
> Three may keep a secret, if two of them are dead.
> - Ben F.
> --
> To unsubscribe from this list: send the line "unsubscribe stable" in
> the body of a message to [email protected]
> More majordomo info at http://vger.kernel.org/majordomo-info.html


Attachments:
(No filename) (1.52 kB)
0001-Revert-x86-ptrace-fix-build-breakage-with-gcc-4.7.patch (1.55 kB)
0002-x86-ptrace-fix-build-breakage-with-gcc-4.7-second-tr.patch (1.14 kB)
Download all attachments

2013-06-13 18:31:29

by Sven-Haegar Koch

[permalink] [raw]
Subject: Re: Linux 2.6.32.61 - x86/ptrace/gcc 4.7 build error

On Thu, 13 Jun 2013, Willy Tarreau wrote:

> Sven-Haegar, Christoph,
>
> concerning the issue below, I could reproduce both Sven-Haegar's error (running
> make headers_check with the patch applied) and Christoph's build error with gcc
> 4.7 on i686 without the patch.
>
> I noticed that neither syscall_trace_enter() nor syscall_trace_leave() were
> called from C code, all were from pure asm. So I simply reverted the first
> patch then removed the two function prototypes and everything is OK for me
> now using gcc 4.7, i686 and x86_64.
>
> I'm attaching the two patches here to be appled on top of 2.6.32.61, I would
> like it if you could try in your environment to confirm that they correctly
> fix the issue.

hello Willy,

With your two new patches applied on top I was able to build my kernel
package both using gcc 4.7 (Debian Wheezy) and gcc 4.4 (Debian Squeeze).

(But I did not try rebooting the server yet)

Thanks for the fix!
Haegar

--
Three may keep a secret, if two of them are dead.
- Ben F.

2013-06-13 18:42:02

by Willy Tarreau

[permalink] [raw]
Subject: Re: Linux 2.6.32.61 - x86/ptrace/gcc 4.7 build error

On Thu, Jun 13, 2013 at 08:31:08PM +0200, Sven-Haegar Koch wrote:
> On Thu, 13 Jun 2013, Willy Tarreau wrote:
>
> > Sven-Haegar, Christoph,
> >
> > concerning the issue below, I could reproduce both Sven-Haegar's error (running
> > make headers_check with the patch applied) and Christoph's build error with gcc
> > 4.7 on i686 without the patch.
> >
> > I noticed that neither syscall_trace_enter() nor syscall_trace_leave() were
> > called from C code, all were from pure asm. So I simply reverted the first
> > patch then removed the two function prototypes and everything is OK for me
> > now using gcc 4.7, i686 and x86_64.
> >
> > I'm attaching the two patches here to be appled on top of 2.6.32.61, I would
> > like it if you could try in your environment to confirm that they correctly
> > fix the issue.
>
> hello Willy,
>
> With your two new patches applied on top I was able to build my kernel
> package both using gcc 4.7 (Debian Wheezy) and gcc 4.4 (Debian Squeeze).

Great, thanks for the report!

> (But I did not try rebooting the server yet)

no pb, usually on that old kernels, we get build failure reports in the week of
the release and boot issues during the next month because it seems that not that
many people use them on machines where unplanned reboots are permitted :-)

Thanks !
Willy

2013-06-14 04:12:13

by Ben Hutchings

[permalink] [raw]
Subject: Re: Linux 2.6.32.61

On Mon, 2013-06-10 at 12:15 +0200, Willy Tarreau wrote:
[...]
> Eric Dumazet (8):
[...]
> softirq: reduce latencies
[...]

This one apparently introduces a regression, fixed in mainline by commit
34376a50fb1f 'Fix lockup related to stop_machine being stuck in
__do_softirq.'

I'm a bit surprised that you picked it for 2.6.32 as it wasn't applied
to any other branch older than 3.9.

Ben.

--
Ben Hutchings
If the facts do not conform to your theory, they must be disposed of.


Attachments:
signature.asc (828.00 B)
This is a digitally signed message part

2013-06-14 05:54:13

by Willy Tarreau

[permalink] [raw]
Subject: Re: Linux 2.6.32.61

Hi Ben,

On Fri, Jun 14, 2013 at 05:11:55AM +0100, Ben Hutchings wrote:
> On Mon, 2013-06-10 at 12:15 +0200, Willy Tarreau wrote:
> [...]
> > Eric Dumazet (8):
> [...]
> > softirq: reduce latencies
> [...]
>
> This one apparently introduces a regression, fixed in mainline by commit
> 34376a50fb1f 'Fix lockup related to stop_machine being stuck in
> __do_softirq.'
>
> I'm a bit surprised that you picked it for 2.6.32 as it wasn't applied
> to any other branch older than 3.9.

Interesting. It was discussed on stable@ in March between Eric and Paul
about the pertinence of merging it into 2.6.32 and 2.6.34 (both CCed).
The thread was '[PATCH] net: reduce net_rx_action() latency to 2 HZ'.
It is supposed to fix a but introduced in 2.6.29 by commit 24f8b2385
(net: increase receive packet quantum).

I didn't notice that it was not in more recent versions.

Eric, do you suggest that I revert this patch or that I also include the
mainline fix above to fix the regression ? If the latter, should Paul and
Greg also take the two patches ?

Thanks,
Willy

2013-06-14 06:31:30

by Christoph Biedl

[permalink] [raw]
Subject: Re: Linux 2.6.32.61 - x86/ptrace/gcc 4.7 build error

Willy Tarreau wrote...

> I'm attaching the two patches here to be appled on top of 2.6.32.61, I would
> like it if you could try in your environment to confirm that they correctly
> fix the issue.

Confirmation: Kernel builds and runs for both Debian squeeze and
wheezy (gcc 4.4 and gcc 4.7) on i386.

There are still other issues that need investigation but they might be
older and/or related to changes on my end. virtio-net doesn't seem to
work at all (but does so in the Debian squeeze 2.6.32 kernel), and the
virtualbox guest module (4.1.18) fails to load (known issue on i386 if
build using gcc 4.7, but know this also happens with gcc 4.4).

Unfortunately my time ressources are very limited at the moment, and
there's also something in 3.4.49 which has higher priority. Stay
tuned.

Christoph

2013-06-14 06:36:26

by Willy Tarreau

[permalink] [raw]
Subject: Re: Linux 2.6.32.61 - x86/ptrace/gcc 4.7 build error

Hi Christoph,

On Fri, Jun 14, 2013 at 08:23:18AM +0200, Christoph Biedl wrote:
> Willy Tarreau wrote...
>
> > I'm attaching the two patches here to be appled on top of 2.6.32.61, I would
> > like it if you could try in your environment to confirm that they correctly
> > fix the issue.
>
> Confirmation: Kernel builds and runs for both Debian squeeze and
> wheezy (gcc 4.4 and gcc 4.7) on i386.
>
> There are still other issues that need investigation but they might be
> older and/or related to changes on my end. virtio-net doesn't seem to
> work at all (but does so in the Debian squeeze 2.6.32 kernel), and the
> virtualbox guest module (4.1.18) fails to load (known issue on i386 if
> build using gcc 4.7, but know this also happens with gcc 4.4).

Thanks for your report. Do you know if the issues you get are regressions
from 2.6.32.60 or just compared to the Debian kernel ?

Willy