focal/linux-aws: 5.4.0-1106.114 -proposed tracker

[Thadeu Lima de Souza Cascardo]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: 102a4f953c86a172
  route-entry: 2
delta:
  promote-to-proposed: [lrm, lrs, main, meta, signed, lrg, generate]
  promote-to-security: []
  promote-to-updates: [lrm, lrs, main, meta, signed]
flag:
  boot-testing-requested: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
  stream-from-cycle: true
issue: KSRU-8286
kernel-stable-master-bug: 2026401
packages:
  generate: linux-generate-aws
  lrg: linux-restricted-generate-aws
  lrm: linux-restricted-modules-aws
  lrs: linux-restricted-signatures-aws
  main: linux-aws
  meta: linux-meta-aws
  signed: linux-signed-aws
phase: Complete
phase-changed: Monday, 24. July 2023 21:08 UTC
reason: {}
synthetic:
  :promote-to-as-proposed: Invalid
trackers:
  bionic/linux-aws-5.4: bug 2026363
  focal/linux-aws-fips: bug 2026362
variant: debs
versions:
  lrm: 5.4.0-1106.114
  main: 5.4.0-1106.114
  meta: 5.4.0.1106.103
  signed: 5.4.0-1106.114
~~:
  clamps:
    new-review: 102a4f953c86a172
    promote-to-proposed: 102a4f953c86a172
    self: 5.4.0-1106.114
    sru-review: 102a4f953c86a172

[Tim Gardner (timg-tpi)]

VT: All cloud specific bugs verified. Tagging as passed.

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-aws - 5.4.0-1106.114

---------------
linux-aws (5.4.0-1106.114) focal; urgency=medium

  * focal/linux-aws: 5.4.0-1106.114 -proposed tracker (LP: #2026364)

  [ Ubuntu: 5.4.0-155.172 ]

  * focal/linux: 5.4.0-155.172 -proposed tracker (LP: #2026401)
  * CVE-2023-3390
    - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  * CVE-2023-35001
    - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  * CVE-2023-32629
    - ovl: adhere to the vfs_ vs. ovl_do_ conventions for xattrs
  * CVE-2023-3090
    - ipvlan:Fix out-of-bounds caused by unclear skb->cb
  * Packaging resync (LP: #1786013)
    - [Packaging] resync update-dkms-versions helper

linux-aws (5.4.0-1105.113) focal; urgency=medium

  * focal/linux-aws: 5.4.0-1105.113 -proposed tracker (LP: #2024070)

  [ Ubuntu: 5.4.0-153.170 ]

  * focal/linux: 5.4.0-153.170 -proposed tracker (LP: #2024108)
  * cls_flower: off-by-one in fl_set_geneve_opt (LP: #2023577)
    - net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
  * Some INVLPG implementations can leave Global translations unflushed when
    PCIDs are enabled (LP: #2023220)
    - x86/mm: Avoid incomplete Global INVLPG flushes

  [ Ubuntu: 5.4.0-152.169 ]

  * focal/linux: 5.4.0-152.169 -proposed tracker (LP: #2023070)
  * Focal update: v5.4.236 upstream stable release (LP: #2020390)
    - wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext"
  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
    - [Packaging] resync getabis

linux-aws (5.4.0-1104.112) focal; urgency=medium

  * focal/linux-aws: 5.4.0-1104.112 -proposed tracker (LP: #2019346)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
    - [Packaging] resync getabis

  [ Ubuntu: 5.4.0-151.168 ]

  * focal/linux: 5.4.0-151.168 -proposed tracker (LP: #2019375)
  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts
    - debian/dkms-versions -- update from kernel-versions (main/2023.05.15)
  * CVE-2023-32233
    - netfilter: nf_tables: deactivate anonymous set from preparation phase
  * CVE-2023-2612
    - SAUCE: shiftfs: prevent lock unbalance in shiftfs_create_object()
  * CVE-2023-31436
    - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
  * CVE-2023-1380
    - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  * Focal update: Focal update: v5.4.235 upstream stable release (LP: #2017706)
    - HID: asus: Remove check for same LED brightness on set
    - HID: asus: use spinlock to protect concurrent accesses
    - HID: asus: use spinlock to safely schedule workers
    - ARM: OMAP2+: Fix memory leak in realtime_counter_init()
    - arm64: dts: qcom: qcs404: use symbol names for PCIe resets
    - ARM: zynq: Fix refcount leak in zynq_early_slcr_init
    - arm64: dts: meson-gx: Fix Ethernet MAC address unit name
    - arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name
    - arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address
    - arm64: dts: meson: remove CPU opps below 1GHz for G12A boards
    - ARM: OMAP1: call platform_device_put() in err...

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being closed