This bug was fixed in the package linux-iot - 5.4.0-1024.25
--------------- linux-iot (5.4.0-1024.25) focal; urgency=medium
* focal/linux-iot: 5.4.0-1024.25 -proposed tracker (LP: #2038152)
* CVE-2023-42755 - [Config] iot: remove NET_CLS_RSVP and NET_CLS_RSVP6
[ Ubuntu: 5.4.0-165.182 ]
* focal/linux: 5.4.0-165.182 -proposed tracker (LP: #2038163) * CVE-2023-42756 - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP * CVE-2023-4623 - net/sched: sch_hfsc: Ensure inner classes have fsc curve * CVE-2023-42755 - net/sched: Retire rsvp classifier - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6 * CVE-2023-42753 - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c * CVE-2023-34319 - xen/netback: Fix buffer overrun triggered by unusual packet * CVE-2023-4921 - net: sched: sch_qfq: Fix UAF in qfq_dequeue() * CVE-2023-42752 - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU * CVE-2023-4881 - netfilter: nftables: exthdr: fix 4-byte stack OOB write * CVE-2023-4622 - af_unix: Fix null-ptr-deref in unix_stream_sendpage().
-- Wen-chien Jesse Sung <email address hidden> Thu, 12 Oct 2023 17:49:08 +0800
This bug was fixed in the package linux-iot - 5.4.0-1024.25
---------------
linux-iot (5.4.0-1024.25) focal; urgency=medium
* focal/linux-iot: 5.4.0-1024.25 -proposed tracker (LP: #2038152)
* CVE-2023-42755
- [Config] iot: remove NET_CLS_RSVP and NET_CLS_RSVP6
[ Ubuntu: 5.4.0-165.182 ]
* focal/linux: 5.4.0-165.182 -proposed tracker (LP: #2038163) HASH_WITH_ NET0 macro for set_hash_ netportnet. c sendpage( ).
* CVE-2023-42756
- netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
* CVE-2023-4623
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
* CVE-2023-42755
- net/sched: Retire rsvp classifier
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
* CVE-2023-42753
- netfilter: ipset: add the missing IP_SET_
ip_
* CVE-2023-34319
- xen/netback: Fix buffer overrun triggered by unusual packet
* CVE-2023-4921
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
* CVE-2023-42752
- igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
* CVE-2023-4881
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
* CVE-2023-4622
- af_unix: Fix null-ptr-deref in unix_stream_
-- Wen-chien Jesse Sung <email address hidden> Thu, 12 Oct 2023 17:49:08 +0800