focal/linux-oracle-5.15: 5.15.0-1015.19~20.04.1 -proposed tracker

[Thadeu Lima de Souza Cascardo]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
boot-testing-requested: true
bugs-spammed: true
built:
  from: 7d79c74d57e57f3a
  route-entry: 1
delta:
  promote-to-proposed: [main, signed, lrs, lrm, meta, lrg]
flag:
  boot-testing-requested: true
  bugs-spammed: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
issue: KSRU-4493
kernel-stable-master-bug: 1983682
packages:
  lrg: linux-restricted-generate-oracle-5.15
  lrm: linux-restricted-modules-oracle-5.15
  lrs: linux-restricted-signatures-oracle-5.15
  main: linux-oracle-5.15
  meta: linux-meta-oracle-5.15
  signed: linux-signed-oracle-5.15
phase: Testing
phase-changed: Friday, 29. July 2022 13:01 UTC
proposed-announcement-sent: true
proposed-testing-requested: true
reason:
  automated-testing: Ongoing -s testing in progress
  regression-testing: Stalled -s testing FAILED
synthetic:
  :promote-to-as-proposed: Fix Released
variant: debs
versions:
  lrm: 5.15.0-1015.19~20.04.1
  main: 5.15.0-1015.19~20.04.1
  meta: 5.15.0.1015.19~20.04.1
  signed: 5.15.0-1015.19~20.04.1
~~:
  clamps:
    new-review: 7d79c74d57e57f3a
    promote-to-proposed: 7d79c74d57e57f3a
    self: 5.15.0-1015.19~20.04.1
    sru-review: 7d79c74d57e57f3a

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Stefan Bader (smb)]

Parent does not include retbleed fixes

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-oracle-5.15 - 5.15.0-1016.20~20.04.1

---------------
linux-oracle-5.15 (5.15.0-1016.20~20.04.1) focal; urgency=medium

  [ Ubuntu: 5.15.0-1016.20 ]

  * CVE-2022-2585
    - SAUCE: posix-cpu-timers: Cleanup CPU timers before freeing them during exec
  * CVE-2022-2586
    - SAUCE: netfilter: nf_tables: do not allow SET_ID to refer to another table
    - SAUCE: netfilter: nf_tables: do not allow CHAIN_ID to refer to another table
    - SAUCE: netfilter: nf_tables: do not allow RULE_ID to refer to another chain
  * CVE-2022-2588
    - SAUCE: net_sched: cls_route: remove from list when handle is 0

linux-oracle-5.15 (5.15.0-1015.19~20.04.1) focal; urgency=medium

  * focal/linux-oracle-5.15: 5.15.0-1015.19~20.04.1 -proposed tracker
    (LP: #1982318)

  [ Ubuntu: 5.15.0-1015.19 ]

  * jammy/linux-oracle: 5.15.0-1015.19 -proposed tracker (LP: #1982305)
  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/2022.07.11)
  * CVE-2022-29900 // CVE-2022-29901
    - x86/lib/atomic64_386_32: Rename things
    - x86: Prepare asm files for straight-line-speculation
    - x86: Prepare inline-asm for straight-line-speculation
    - x86/alternative: Relax text_poke_bp() constraint
    - kbuild: move objtool_args back to scripts/Makefile.build
    - x86: Add straight-line-speculation mitigation
    - kvm/emulate: Fix SETcc emulation function offsets with SLS
    - crypto: x86/poly1305 - Fixup SLS
    - objtool: Add straight-line-speculation validation
    - objtool: Fix SLS validation for kcov tail-call replacement
    - objtool: Fix objtool regression on x32 systems
    - objtool: Fix symbol creation
    - objtool: Introduce CFI hash
    - objtool: Default ignore INT3 for unreachable
    - x86, kvm: use proper ASM macros for kvm_vcpu_is_preempted
    - x86/traps: Use pt_regs directly in fixup_bad_iret()
    - x86/entry: Switch the stack after error_entry() returns
    - x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry()
    - x86/entry: Don't call error_entry() for XENPV
    - x86/entry: Remove skip_r11rcx
    - x86/realmode: build with -D__DISABLE_EXPORTS
    - x86/ibt,ftrace: Make function-graph play nice
    - x86/kvm/vmx: Make noinstr clean
    - x86/cpufeatures: Move RETPOLINE flags to word 11
    - x86/retpoline: Cleanup some #ifdefery
    - x86/retpoline: Swizzle retpoline thunk
    - x86/retpoline: Use -mfunction-return
    - x86: Undo return-thunk damage
    - x86,objtool: Create .return_sites
    - objtool: skip non-text sections when adding return-thunk sites
    - x86,static_call: Use alternative RET encoding
    - x86/ftrace: Use alternative RET encoding
    - x86/bpf: Use alternative RET encoding
    - x86/kvm: Fix SETcc emulation for return thunks
    - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation
    - x86/sev: Avoid using __x86_return_thunk
    - x86: Use return-thunk in asm code
    - x86/entry: Avoid very early RET
    - objtool: Treat .text.__x86.* as noinstr
    - x86: Add magic AMD return-thunk
    - x86/bugs: Report AMD retbleed vulnerability
    - x86/bugs: Add AMD retbleed= boot parameter
    - x86/bugs: Enable STIBP for JMP2RET
    ...