jammy/linux: 5.15.0-33.34 -proposed tracker

[Stefan Bader]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
boot-testing-requested: true
bugs-spammed: true
built:
  from: f248b5572c0af186
  route-entry: 1
delta:
  promote-to-proposed:
  - signed
  - lrm
  - lrs
  - main
  - meta
  - lrg
  promote-to-security: []
  promote-to-updates:
  - lrs
  - signed
  - main
  - lrm
  - meta
issue: KSRU-2121
packages:
  lrg: linux-restricted-generate
  lrm: linux-restricted-modules
  lrs: linux-restricted-signatures
  main: linux
  meta: linux-meta
  signed: linux-signed
phase: Complete
phase-changed: Monday, 23. May 2022 19:48 UTC
proposed-announcement-sent: true
reason: {}
synthetic:
  :promote-to-as-proposed: Fix Released
trackers:
  jammy/linux-aws: bug 1973893
  jammy/linux-azure: bug 1973896
  jammy/linux-fips: bug 1973918
  jammy/linux-gcp: bug 1973899
  jammy/linux-gke: bug 1973919
  jammy/linux-ibm: bug 1973901
  jammy/linux-ibm-gt: bug 1973920
  jammy/linux-intel-iotg: bug 1973921
  jammy/linux-kvm: bug 1973903
  jammy/linux-lowlatency: bug 1973907
  jammy/linux-oracle: bug 1973910
  jammy/linux-raspi: bug 1973913
  jammy/linux-realtime: bug 1973915
  jammy/linux-riscv: bug 1973917
  jammy/linux-uc22: bug 1973923
  kinetic/linux: bug 1973890
variant: debs
versions:
  lrm: 5.15.0-33.34
  main: 5.15.0-33.34
  meta: 5.15.0.33.36
  signed: 5.15.0-33.34
versions-replace:
  lrm:
  - 5.15.0-32.33+1
  - 5.15.0-32.33
  main:
  - 5.15.0-32.33
  meta:
  - 5.15.0.32.35
  signed:
  - 5.15.0-32.33
~~:
  clamps:
    new-review: f248b5572c0af186
    promote-to-proposed: f248b5572c0af186
    self: 5.15.0-33.34
    sru-review: f248b5572c0af186

[Stefan Bader (smb)]

Good enough for the small change.

[Stefan Bader (smb)]

ADT looks ok (just the usual random failures).

[Kleber Sacilotto de Souza (kleber-souza)]

Security fixes successfully verified by @cascardo.

[Stefan Bader (smb)]

Looks good to go.

[Thadeu Lima de Souza Cascardo (cascardo)]

Tested reproducer for CVE-2022-29581 and CVE-2022-30594. Tests passed. Also tested ext4 truncate BUG_ON and passed.

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 5.15.0-33.34

---------------
linux (5.15.0-33.34) jammy; urgency=medium

  * jammy/linux: 5.15.0-33.34 -proposed tracker (LP: #1973924)

  * CVE-2022-29581
    - net/sched: cls_u32: fix netns refcount changes in u32_change()

  * ext4: limit length to bitmap_maxbytes (LP: #1972281)
    - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole

  * Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP
    option (LP: #1972740)
    - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE

 -- Stefan Bader <email address hidden> Wed, 18 May 2022 15:11:00 +0200

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being set to Fix Released