groovy/linux-azure: 5.8.0-1030.32 -proposed tracker

[Kleber Sacilotto de Souza]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
boot-testing-requested: true
bugs-spammed: true
built:
  lrg: build#1
  lrm: build#1
  lrs: build#1
  main: build#1
  meta: build#1
  signed: build#1
kernel-stable-master-bug: 1923754
packages:
  lrg: linux-restricted-generate-azure
  lrm: linux-restricted-modules-azure
  lrs: linux-restricted-signatures-azure
  main: linux-azure
  meta: linux-meta-azure
  signed: linux-signed-azure
phase: Signoff
phase-changed: Tuesday, 27. April 2021 15:12 UTC
promote:
- lrs
- meta
- signed
- main
- lrm
proposed-announcement-sent: true
proposed-testing-requested: true
reason:
  promote-to-updates: 'Holding -- waiting for signoffs:
    security-signoff'
  security-signoff: Stalled -- waiting for signoff
synthetic:
  :promote-to-as-proposed: Fix Released
trackers:
  focal/linux-azure-5.8: bug 1923743
variant: debs
versions:
  lrm: 5.8.0-1030.32+1
  main: 5.8.0-1030.32
  meta: 5.8.0.1030.30
  signed: 5.8.0-1030.32
  source: 5.8.0-1030.32

[Krzysztof Kozlowski (krzk)]

Regression tests look OK.
Related bugs found during regression testing: https://bugs.launchpad.net/ubuntu-kernel-tests/+bugs?field.searchtext=&orderby=-importance&field.tag=sru-20210412+groovy+azyre&field.tags_combinator=ALL

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-azure - 5.8.0-1032.34

---------------
linux-azure (5.8.0-1032.34) groovy; urgency=medium

  [ Ubuntu: 5.8.0-53.60 ]

  * CVE-2021-3491
    - io_uring: fix provide_buffers sign extension
    - io_uring: fix overflows checks in provide buffers
    - SAUCE: proc: Avoid mixing integer types in mem_rw()
    - SAUCE: io_uring: truncate lengths larger than MAX_RW_COUNT on provide
      buffers
  * CVE-2021-3490
    - bpf: Fix a verifier failure with xor
    - SAUCE: bpf: verifier: fix ALU32 bounds tracking with bitwise ops
  * CVE-2021-3489
    - SAUCE: bpf: ringbuf: deny reserve of buffers larger than ringbuf
    - SAUCE: bpf: prevent writable memory-mapping of read-only ringbuf pages

 -- Stefan Bader <email address hidden> Thu, 06 May 2021 10:06:14 +0200