focal/linux-kvm: 5.4.0-1101.107 -proposed tracker

[Thadeu Lima de Souza Cascardo]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: 3bc844dd12310657
  route-entry: 2
delta:
  promote-to-proposed: [main, meta, signed, generate]
  promote-to-security: []
  promote-to-updates: [main, meta, signed]
flag:
  boot-testing-requested: true
  bugs-spammed: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
issue: KSRU-10047
kernel-stable-master-bug: 2038163
packages:
  generate: linux-generate-kvm
  main: linux-kvm
  meta: linux-meta-kvm
  signed: linux-signed-kvm
phase: Complete
phase-changed: Thursday, 19. October 2023 13:45 UTC
reason: {}
synthetic:
  :promote-to-as-proposed: Invalid
variant: debs
versions:
  main: 5.4.0-1101.107
  meta: 5.4.0.1101.96
  signed: 5.4.0-1101.107
~~:
  announce:
    swm-transition-crankable: 2023-10-06 12:36:42.186520
  clamps:
    new-review: 3bc844dd12310657
    promote-to-proposed: 3bc844dd12310657
    self: 5.4.0-1101.107
    sru-review: 3bc844dd12310657

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-kvm - 5.4.0-1101.107

---------------
linux-kvm (5.4.0-1101.107) focal; urgency=medium

  * focal/linux-kvm: 5.4.0-1101.107 -proposed tracker (LP: #2038153)

  [ Ubuntu: 5.4.0-165.182 ]

  * focal/linux: 5.4.0-165.182 -proposed tracker (LP: #2038163)
  * CVE-2023-42756
    - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
  * CVE-2023-4623
    - net/sched: sch_hfsc: Ensure inner classes have fsc curve
  * CVE-2023-42755
    - net/sched: Retire rsvp classifier
    - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
  * CVE-2023-42753
    - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
      ip_set_hash_netportnet.c
  * CVE-2023-34319
    - xen/netback: Fix buffer overrun triggered by unusual packet
  * CVE-2023-4921
    - net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  * CVE-2023-42752
    - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
  * CVE-2023-4881
    - netfilter: nftables: exthdr: fix 4-byte stack OOB write
  * CVE-2023-4622
    - af_unix: Fix null-ptr-deref in unix_stream_sendpage().

 -- Thibault Ferrante <email address hidden> Fri, 06 Oct 2023 16:18:20 +0200

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being closed