jammy/linux-ibm: 5.15.0-1003.3 -proposed tracker

[Andrea Righi]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
boot-testing-requested: true
bugs-spammed: true
built:
  from: d7ad47a8af3fc0ce
  route-entry: 2
delta:
  promote-to-proposed:
  - main
  - meta
  - signed
  promote-to-security: []
  promote-to-updates:
  - main
  - signed
  - meta
  sru-review:
  - signed
  - main
  - meta
kernel-stable-master-bug: 1968954
packages:
  main: linux-ibm
  meta: linux-meta-ibm
  signed: linux-signed-ibm
phase: Complete
phase-changed: Tuesday, 26. April 2022 19:52 UTC
proposed-announcement-sent: true
proposed-testing-requested: true
reason: {}
synthetic:
  :promote-to-as-proposed: Fix Released
variant: debs
versions:
  main: 5.15.0-1003.3
  meta: 5.15.0.1003.4
  signed: 5.15.0-1003.3
~~:
  clamps:
    promote-to-proposed: d7ad47a8af3fc0ce
    self: 5.15.0-1003.3
    sru-review: d7ad47a8af3fc0ce

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-ibm - 5.15.0-1003.3

---------------
linux-ibm (5.15.0-1003.3) jammy; urgency=medium

  * jammy/linux-ibm: 5.15.0-1003.3 -proposed tracker (LP: #1969494)

  [ Ubuntu: 5.15.0-27.28 ]

  * jammy/linux: 5.15.0-27.28 -proposed tracker (LP: #1968954)

  [ Ubuntu: 5.15.0-26.27 ]

  * jammy/linux: 5.15.0-26.27 -proposed tracker (LP: #1968850)
  * CVE-2022-1016
    - netfilter: nf_tables: initialize registers in nft_do_chain()
  * CVE-2022-1015
    - netfilter: nf_tables: validate registers coming from userspace.
  * CVE-2022-26490
    - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
  * harden indirect calls against BHI attacks (LP: #1967579)
    - objtool: Classify symbols
    - objtool: Explicitly avoid self modifying code in .altinstr_replacement
    - objtool: Shrink struct instruction
    - objtool,x86: Replace alternatives with .retpoline_sites
    - x86/retpoline: Remove unused replacement symbols
    - x86/asm: Fix register order
    - x86/asm: Fixup odd GEN-for-each-reg.h usage
    - x86/retpoline: Move the retpoline thunk declarations to nospec-branch.h
    - x86/retpoline: Create a retpoline thunk array
    - x86/alternative: Implement .retpoline_sites support
    - x86/alternative: Handle Jcc __x86_indirect_thunk_\reg
    - x86/alternative: Try inline spectre_v2=retpoline,amd
    - x86/alternative: Add debug prints to apply_retpolines()
    - bpf,x86: Simplify computing label offsets
    - bpf,x86: Respect X86_FEATURE_RETPOLINE*

 -- Andrea Righi <email address hidden> Wed, 20 Apr 2022 08:01:18 +0200

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being set to Fix Released