jammy/linux-nvidia-tegra-igx: 5.15.0-1023.23 -proposed tracker

[Stefan Bader]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: 7d65acf03c2fc5f1
  route-entry: 1
comments:
  abi-testing: 1
delta:
  promote-to-proposed: [extra, extra2, lrm, lrs, main, meta, signed,
    lrg, generate]
  promote-to-security: [extra, extra2, lrm, lrs, main, meta, signed]
  promote-to-updates: [extra, extra2, lrm, lrs, main, meta, signed]
flag:
  boot-testing-requested: true
  bugs-spammed: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
  stream-from-cycle: true
flavours:
  linux-image-nvidia-tegra-igx: [arm64]
  linux-image-nvidia-tegra-igx-rt: [arm64]
  linux-image-uc-nvidia-tegra-igx: [arm64]
  linux-image-uc-nvidia-tegra-igx-rt: [arm64]
issue: KSRU-16195
kernel-stable-master-bug: 2102558
packages:
  extra: linux-nvidia-tegra-igx-modules
  extra2: linux-nvidia-tegra-igx-modules-signed
  generate: linux-generate-nvidia-tegra-igx
  lrg: linux-restricted-generate-nvidia-tegra-igx
  lrm: linux-restricted-modules-nvidia-tegra-igx
  lrs: linux-restricted-signatures-nvidia-tegra-igx
  main: linux-nvidia-tegra-igx
  meta: linux-meta-nvidia-tegra-igx
  signed: linux-signed-nvidia-tegra-igx
phase: Complete
phase-changed: Tuesday, 22. April 2025 15:50 UTC
reason: {}
synthetic:
  :promote-to-as-proposed: Fix Released
  :promote-to-build-public: Fix Released
testing:
  verification-bugs: [2102557, 2097735]
trackers:
  jammy/linux-nvidia-tegra-igx/tegra-kernel: bug 2102556
variant: debs
versions:
  extra: 5.15.0-1023.23
  extra2: 5.15.0-1023.23
  lrm: 5.15.0-1023.23
  main: 5.15.0-1023.23
  meta: 5.15.0.1023.25
  signed: 5.15.0-1023.23
~~:
  announce:
    swm-transition-crankable: 2025-04-02 17:51:22.644716
    swm-transition-peer-reviewable: 2025-04-04 15:32:56.601040
  clamps:
    new-review: 7d65acf03c2fc5f1
    promote-to-proposed: 7d65acf03c2fc5f1
    self: 5.15.0-1023.23
    sru-review: 7d65acf03c2fc5f1
  tracker:
    last-message: '2025-04-16 19:16:16.691260+00:00'

[Ubuntu Kernel Ancillary Bot (ubuntu-kernel-ancillary-bot)]

arm64/nvidia-tegra-igx canonical-certs.pem unchanged
arm64/nvidia-tegra-igx canonical-revoked-certs.pem unchanged
arm64/nvidia-tegra-igx fwinfo unchanged
arm64/nvidia-tegra-igx modules unchanged
arm64/nvidia-tegra-igx retpoline unchanged
arm64/nvidia-tegra-igx-rt canonical-certs.pem unchanged
arm64/nvidia-tegra-igx-rt canonical-revoked-certs.pem unchanged
arm64/nvidia-tegra-igx-rt fwinfo unchanged
arm64/nvidia-tegra-igx-rt modules unchanged
arm64/nvidia-tegra-igx-rt retpoline unchanged

[Noah Wager (nwager)]

known warning in log with nvidia-jetson-orin-nano-public device, hint boot test

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-nvidia-tegra-igx - 5.15.0-1023.23

---------------
linux-nvidia-tegra-igx (5.15.0-1023.23) jammy; urgency=medium

  * jammy/linux-nvidia-tegra-igx: 5.15.0-1023.23 -proposed tracker
    (LP: #2102557)

  * Miscellaneous tegra kernel packaging changes (LP: #2097735)
    - [Packaging] modprobe.d: blacklist upstream imx274

  [ Ubuntu: 5.15.0-1035.35 ]

  * jammy/linux-nvidia-tegra: 5.15.0-1035.35 -proposed tracker (LP: #2102558)
  * apply NVIDIA patches March 31, 2025 (LP: #2105645)
    - NVIDIA: SAUCE: arm64: defconfig: Sanitize defconfig
    - NVIDIA: SAUCE: arm64: defconfig: Enable IP set support
    - NVIDIA: SAUCE: arm64: defconfig: Enable IP raw table support
    - [Config] nvidia-tegra: Explicitly enable IP set support
    - [Config] nvidia-tegra: Explicitly enable IP raw table support
  * jammy/linux-realtime: 5.15.0-1082.91 -proposed tracker (LP: #2102561)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.realtime/dkms-versions -- update from kernel-versions
      (main/2025.03.17)
  * jammy/linux: 5.15.0-138.148 -proposed tracker (LP: #2102587)
  * ipsec_offload in rtnetlink.sh from ubunsu_kselftests_net fails on O/J
    (LP: #2096976)
    - SAUCE: selftest: netfilter: fix null IP field in kci_test_ipsec_offload
  * CVE-2025-21756
    - vsock: Keep the binding until socket destruction
    - vsock: Orphan socket after transport release
  * CVE-2024-50256
    - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
  * CVE-2025-21702
    - pfifo_tail_enqueue: Drop new packet when sch->limit == 0
  * CVE-2025-21703
    - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
  * CVE-2025-21700
    - net: sched: Disallow replacing of child qdisc from one parent to another
  * CVE-2024-46826
    - ELF: fix kernel.randomize_va_space double read
  * CVE-2024-56651
    - can: hi311x: hi3110_can_ist(): fix potential use-after-free
  * iBFT iSCSI out-of-bounds shift UBSAN warning (LP: #2097824)
    - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  * CVE-2024-50248
    - ntfs3: Add bounds checking to mi_enum_attr()
    - fs/ntfs3: Sequential field availability check in mi_enum_attr()
  * CVE-2022-0995
    - watch_queue: Use the bitmap API when applicable
  * CVE-2024-26837
    - net: bridge: switchdev: Skip MDB replays of deferred events on offload
  * CVE-2025-21701
    - net: avoid race between device unregistration and ethnl ops
  * CVE-2024-57798
    - drm/dp_mst: Skip CSN if topology probing is not done yet
    - drm/dp_mst: Ensure mst_primary pointer is valid in
      drm_dp_mst_handle_up_req()
  * CVE-2024-56658
    - net: defer final 'struct net' free in netns dismantle
  * CVE-2024-35864
    - smb: client: fix potential UAF in smb2_is_valid_lease_break()
  * CVE-2024-35864/CVE-2024-26928
    - smb: client: fix potential UAF in cifs_debug_files_proc_show()

 -- Abdur Rahman <email address hidden> Thu, 03 Apr 2025 18:07:49 -0400

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being closed