focal/linux-ibm-5.15: 5.15.0-1041.44~20.04.1 -proposed tracker
Bug Description
This bug will contain status and test results related to a kernel source (or snap) as stated in the title.
For an explanation of the tasks and the associated workflow see:
https:/
-- swm properties --
built:
from: fc299ec471a78dc9
route-entry: 2
delta:
promote-
promote-
promote-
flag:
boot-
bugs-spammed: true
proposed-
proposed-
issue: KSRU-10073
kernel-
packages:
generate: linux-generate-
main: linux-ibm-5.15
meta: linux-meta-ibm-5.15
signed: linux-signed-
phase: Complete
phase-changed: Thursday, 19. October 2023 13:45 UTC
reason: {}
synthetic:
:promote-
variant: debs
versions:
main: 5.15.0-
meta: 5.15.0.
signed: 5.15.0-
~~:
announce:
swm-
clamps:
new-review: fc299ec471a78dc9
promote-
self: 5.15.0-
sru-review: fc299ec471a78dc9
tags: | added: kernel-release-tracking-bug-live |
description: | updated |
tags: | added: kernel-sru-cycle-s2023.09.04-1 |
description: | updated |
description: | updated |
tags: | added: kernel-sru-backport-of-2038182 |
Changed in kernel-sru-workflow: | |
status: | New → Confirmed |
importance: | Undecided → Medium |
Changed in linux-ibm-5.15 (Ubuntu Focal): | |
importance: | Undecided → Medium |
Changed in kernel-sru-workflow: | |
status: | Confirmed → Triaged |
description: | updated |
Changed in kernel-sru-workflow: | |
status: | Triaged → In Progress |
tags: | added: kernel-jira-issue-ksru-10073 |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
summary: |
- focal/linux-ibm-5.15: <version to be filled> -proposed tracker + focal/linux-ibm-5.15: 5.15.0-1041.44~20.04.1 -proposed tracker |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
Changed in kernel-sru-workflow: | |
status: | Fix Committed → Fix Released |
This bug was fixed in the package linux-ibm-5.15 - 5.15.0- 1041.44~ 20.04.1
--------------- 1041.44~ 20.04.1) focal; urgency=medium
linux-ibm-5.15 (5.15.0-
* focal/linux- ibm-5.15: 5.15.0- 1041.44~ 20.04.1 -proposed tracker
(LP: #2038181)
* CVE-2023-42755
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
[ Ubuntu: 5.15.0-1041.44 ]
* jammy/linux-ibm: 5.15.0-1041.44 -proposed tracker (LP: #2038182) sendpage( ). HASH_WITH_ NET0 macro for set_hash_ netportnet. c
* CVE-2023-42755
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
* jammy/linux: 5.15.0-87.97 -proposed tracker (LP: #2038209)
* CVE-2023-4623
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
* CVE-2023-42755
- net/sched: Retire rsvp classifier
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
* CVE-2023-34319
- xen/netback: Fix buffer overrun triggered by unusual packet
* CVE-2023-4921
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
* CVE-2023-42752
- igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
* CVE-2023-4622
- af_unix: Fix null-ptr-deref in unix_stream_
* CVE-2023-4244
- netfilter: nft_set_rbtree: fix overlap expiration walk
- netfilter: nf_tables: don't skip expired elements during walk
- netfilter: nf_tables: adapt set backend to use GC transaction API
- netfilter: nft_set_hash: mark set element as dead when deleting from packet
path
- netfilter: nf_tables: GC transaction API to avoid race with control plane
- netfilter: nf_tables: remove busy mark and gc batch API
- netfilter: nf_tables: don't fail inserts if duplicate has expired
- netfilter: nf_tables: fix kdoc warnings after gc rework
- netfilter: nf_tables: fix GC transaction races with netns and netlink event
exit path
- netfilter: nf_tables: GC transaction race with netns dismantle
- netfilter: nf_tables: GC transaction race with abort path
- netfilter: nf_tables: use correct lock to protect gc_list
- netfilter: nf_tables: defer gc run if previous batch is still pending
- netfilter: nft_dynset: disallow object maps
- netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
* CVE-2023-42756
- netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
* CVE-2023-42753
- netfilter: ipset: add the missing IP_SET_
ip_
* CVE-2023-5197
- netfilter: nf_tables: skip bound chain in netns release path
- netfilter: nf_tables: disallow rule removal from chain binding
* CVE-2023-4881
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
-- John Cabaj <email address hidden> Tue, 10 Oct 2023 11:51:35 -0500