jammy/linux-azure: 5.15.0-1064.73 -proposed tracker

[Stefan Bader]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: b4095a19081da128
  route-entry: 2
comments:
  abi-testing: 1
delta:
  promote-to-proposed: [lrm, lrs, main, meta, signed, lrg, generate]
  promote-to-security: []
  promote-to-updates: [lrm, lrs, main, meta, signed]
flag:
  boot-testing-requested: true
  bugs-spammed: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
  stream-from-cycle: true
issue: KSRU-12144
kernel-stable-master-bug: 2063635
packages:
  generate: linux-generate-azure
  lrg: linux-restricted-generate-azure
  lrm: linux-restricted-modules-azure
  lrs: linux-restricted-signatures-azure
  main: linux-azure
  meta: linux-meta-azure
  signed: linux-signed-azure
phase: Complete
phase-changed: Tuesday, 14. May 2024 08:13 UTC
reason: {}
synthetic:
  :promote-to-as-proposed: Invalid
trackers:
  focal/linux-azure-5.15: bug 2063588
  jammy/linux-azure-fde: bug 2063585
  jammy/linux-azure-fips: bug 2063586
variant: debs
versions:
  lrm: 5.15.0-1064.73
  main: 5.15.0-1064.73
  meta: 5.15.0.1064.62
  signed: 5.15.0-1064.73
~~:
  announce:
    swm-transition-crankable: 2024-04-30 07:47:35.992389
  clamps:
    new-review: b4095a19081da128
    promote-to-proposed: b4095a19081da128
    self: 5.15.0-1064.73
    sru-review: b4095a19081da128
  tracker:
    last-message: '2024-05-13 16:00:09.046509+00:00'

[Ubuntu Kernel Ancillary Bot (ubuntu-kernel-ancillary-bot)]

amd64/azure canonical-certs.pem unchanged
amd64/azure canonical-revoked-certs.pem unchanged
amd64/azure fwinfo unchanged
amd64/azure modules differs
  @@ -2519,7 +2519,6 @@
   thunderbolt
   thunderbolt-net
   ti-lmu
  -ti_am335x_tscadc (accepted)
   tifm_7xx1
   tifm_core
   timeriomem-rng
amd64/azure retpoline unchanged
arm64/azure canonical-certs.pem unchanged
arm64/azure canonical-revoked-certs.pem unchanged
arm64/azure fwinfo unchanged
arm64/azure modules unchanged
arm64/azure retpoline unchanged

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-azure - 5.15.0-1064.73

---------------
linux-azure (5.15.0-1064.73) jammy; urgency=medium

  * jammy/linux-azure: 5.15.0-1064.73 -proposed tracker (LP: #2063589)

  [ Ubuntu: 5.15.0-107.117 ]

  * jammy/linux: 5.15.0-107.117 -proposed tracker (LP: #2063635)
  * CVE-2023-52530
    - wifi: mac80211: fix potential key use-after-free
  * CVE-2024-26622
    - tomoyo: fix UAF write bug in tomoyo_write_control()
  * CVE-2023-47233
    - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach

linux-azure (5.15.0-1063.72) jammy; urgency=medium

  * jammy/linux-azure: 5.15.0-1063.72 -proposed tracker (LP: #2061767)

  * Packaging resync (LP: #1786013)
    - [Packaging] drop getabis data

  * Azure: Network doesn't get configured after triggering kdump (LP: #2054855)
    - Drivers: hv: Always reserve framebuffer region for Gen1 VMs

  [ Ubuntu: 5.15.0-106.116 ]

  * jammy/linux: 5.15.0-106.116 -proposed tracker (LP: #2061812)
  * CVE-2024-2201
    - x86/bugs: Use sysfs_emit()
    - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs
    - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace
    - KVM: x86: Use a switch statement and macros in __feature_translate()
    - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file
    - x86/syscall: Don't force use of indirect calls for system calls
    - x86/bhi: Add support for clearing branch history at syscall entry
    - x86/bhi: Define SPEC_CTRL_BHI_DIS_S
    - x86/bhi: Enumerate Branch History Injection (BHI) bug
    - x86/bhi: Add BHI mitigation knob
    - x86/bhi: Mitigate KVM by default
    - KVM: x86: Add BHI_NO
    - [Config] Set CONFIG_BHI to enabled (auto)
  * Drop fips-checks script from trees (LP: #2055083)
    - [Packaging] Remove fips-checks script
  * alsa/realtek: adjust max output valume for headphone on 2 LG machines
    (LP: #2058573)
    - ALSA: hda/realtek: fix the hp playback volume issue for LG machines
  * A general-proteciton exception during guest migration to unsupported PKRU
    machine (LP: #2032164)
    - x86/fpu: Allow caller to constrain xfeatures when copying to uabi buffer
    - KVM: x86: Constrain guest-supported xfeatures only at KVM_GET_XSAVE{2}
  * [ICX] [SPR] [ipc/msg] performance: Mitigate the lock contention with percpu
    counter (LP: #2058485)
    - ipc: check checkpoint_restore_ns_capable() to modify C/R proc files
    - ipc/ipc_sysctl.c: remove fallback for !CONFIG_PROC_SYSCTL
    - ipc: Store mqueue sysctls in the ipc namespace
    - ipc: Store ipc sysctls in the ipc namespace
    - ipc: Use the same namespace to modify and validate
    - ipc: Remove extra1 field abuse to pass ipc namespace
    - ipc: Check permissions for checkpoint_restart sysctls at open time
    - percpu: add percpu_counter_add_local and percpu_counter_sub_local
    - ipc/msg: mitigate the lock contention with percpu counter
  * Jammy update: v5.15.149 upstream stable release (LP: #2059014)
    - ksmbd: free ppace array on error in parse_dacl
    - ksmbd: don't allow O_TRUNC open on read-only share
    - ksmbd: validate mech token in session setup
    - ksmbd: fix UAF issue in ksmbd_tcp_new_connectio...

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being closed