oracular/linux-gcp: 6.11.0-1017.17 -proposed tracker

[Manuel Diewald]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: 5fdf7fd736a48bf7
  route-entry: 2
comments:
  abi-testing: 1
  kernel-signoff: 2
delta:
  promote-to-proposed: [lrm, lrs, main, meta, signed, lrg, generate]
  promote-to-security: [lrm, lrs, main, meta, signed]
  promote-to-updates: [lrm, lrs, main, meta, signed]
flag:
  autoprep-requested: true
  boot-testing-requested: true
  bugs-spammed: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
  stream-from-cycle: true
flavours:
  linux-image-gcp: [amd64, arm64]
  linux-image-gcp-6.11: [amd64, arm64]
  linux-image-gcp-64k: [arm64]
  linux-image-gcp-64k-6.11: [arm64]
issue: KSRU-17177
kernel-stable-master-bug: 2114305
packages:
  generate: linux-generate-gcp
  lrg: linux-restricted-generate-gcp
  lrm: linux-restricted-modules-gcp
  lrs: linux-restricted-signatures-gcp
  main: linux-gcp
  meta: linux-meta-gcp
  signed: linux-signed-gcp
phase: Complete
phase-changed: Tuesday, 01. July 2025 17:40 UTC
reason: {}
synthetic:
  :auto-prepare: Fix Released
  :promote-to-as-proposed: Invalid
  :promote-to-build-public: Fix Released
testing:
  verification-bugs: [2114290, 2112602]
trackers:
  noble/linux-gcp-6.11: bug 2114289
variant: debs
versions:
  lrm: 6.11.0-1017.17
  main: 6.11.0-1017.17
  meta: 6.11.0-1017.17
  signed: 6.11.0-1017.17
workflow:
  :auto-prepare: testbuild-complete
~~:
  announce:
    swm-transition-crankable: 2025-06-25 17:50:41.235642
  clamps:
    new-review: 5fdf7fd736a48bf7
    promote-to-proposed: 5fdf7fd736a48bf7
    self: 6.11.0-1017.17
    sru-review: 5fdf7fd736a48bf7
  tracker:
    last-message: '2025-07-01 18:43:14.751749+00:00'

[Ubuntu Kernel Ancillary Bot (ubuntu-kernel-ancillary-bot)]

amd64/gcp canonical-certs.pem 2 certificates match
amd64/gcp canonical-revoked-certs.pem 8 certificates match
amd64/gcp fwinfo unchanged
amd64/gcp modules differs
  @@ -1,14 +1,12 @@

   104-quad-8
  -3c509 (accepted)
   3c574_cs
   3c589_cs
   3c59x
   3w-9xxx
   3w-sas
   3w-xxxx
  -53c700 (accepted)
   6lowpan
   6pack
   8021q
  @@ -331,7 +329,6 @@
   ah4
   ah6
   aha152x_cs
  -aha1740 (accepted)
   ahci
   ahci_dwc
   ahci_platform
  @@ -5027,7 +5024,6 @@
   sil164
   silead
   silicom-platform
  -sim710 (accepted)
   simatic-ipc
   simatic-ipc-batt
   simatic-ipc-batt-apollolake
arm64/gcp canonical-certs.pem 2 certificates match
arm64/gcp canonical-revoked-certs.pem 8 certificates match
arm64/gcp fwinfo unchanged
arm64/gcp modules unchanged
arm64/gcp-64k canonical-certs.pem 2 certificates match
arm64/gcp-64k canonical-revoked-certs.pem 8 certificates match
arm64/gcp-64k fwinfo unchanged
arm64/gcp-64k modules unchanged

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

linux-image name changes detected, review variant/flavour changes; kernel-signoff required.
  was: linux-image-gcp linux-image-gcp-64k
   is: linux-image-gcp linux-image-gcp-6.11 linux-image-gcp-64k linux-image-gcp-64k-6.11

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-gcp - 6.11.0-1017.17

---------------
linux-gcp (6.11.0-1017.17) oracular; urgency=medium

  * oracular/linux-gcp: 6.11.0-1017.17 -proposed tracker (LP: #2114290)

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants

  * Fix HLT logic execution for TDX VMs (LP: #2112602)
    - x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT

  [ Ubuntu: 6.11.0-29.29 ]

  * oracular/linux: 6.11.0-29.29 -proposed tracker (LP: #2114305)
  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - [Packaging] update annotations scripts
  * CVE-2025-37890
    - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child
      qdisc
    - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
    - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
  * raid1: Fix NULL pointer dereference in process_checks() (LP: #2112519)
    - md/raid1: Add check for missing source disk in process_checks()
  * CVE-2025-37798
    - sch_htb: make htb_qlen_notify() idempotent
    - sch_htb: make htb_deactivate() idempotent
    - sch_drr: make drr_qlen_notify() idempotent
    - sch_hfsc: make hfsc_qlen_notify() idempotent
    - sch_qfq: make qfq_qlen_notify() idempotent
    - sch_ets: make est_qlen_notify() idempotent
    - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
  * CVE-2025-37997
    - netfilter: ipset: fix region locking in hash types

 -- Ian Whitfield <email address hidden> Wed, 25 Jun 2025 13:26:12 -0700

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being closed