mantic/linux-laptop: 6.5.0-1007.10 -proposed tracker

[Stefan Bader]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: b1a1e3a42a03a0c6
  route-entry: 1
comments:
  abi-testing: 1
delta:
  promote-to-proposed: [main, meta]
  promote-to-security: []
  promote-to-updates: [main, meta]
flag:
  boot-testing-requested: true
  bugs-spammed: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
  stream-from-cycle: true
issue: KSRU-10211
kernel-stable-master-bug: 2042660
packages:
  main: linux-laptop
  meta: linux-meta-laptop
phase: Complete
phase-changed: Tuesday, 05. December 2023 15:26 UTC
reason: {}
synthetic:
  :promote-to-as-proposed: Fix Released
variant: debs
versions:
  main: 6.5.0-1007.10
  meta: 6.5.0.1007.10
~~:
  announce:
    swm-transition-crankable: 2023-11-22 09:40:48.313831
  clamps:
    new-review: b1a1e3a42a03a0c6
    promote-to-proposed: b1a1e3a42a03a0c6
    self: 6.5.0-1007.10
    sru-review: b1a1e3a42a03a0c6
  tracker:
    last-message: '2023-12-05 16:30:37.418759+00:00'

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

arm64/laptop canonical-certs.pem unchanged
arm64/laptop canonical-revoked-certs.pem unchanged
arm64/laptop fwinfo unchanged
arm64/laptop modules differs
  @@ -4000,6 +4000,7 @@
   mtk-uart-apdma
   mtk-vpu
   mtk_dp
  +mtk_iommu
   mtk_nand
   mtk_rpmsg
   mtk_scp
  @@ -6000,7 +6001,6 @@
   sha512-ce
   sha512_generic
   shark2
  -shiftfs
   shmob-drm
   sht15
   sht21
arm64/laptop retpoline unchanged

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-laptop - 6.5.0-1007.10

---------------
linux-laptop (6.5.0-1007.10) mantic; urgency=medium

  * mantic/linux-laptop: 6.5.0-1007.10 -proposed tracker (LP: #2041530)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
    - [Packaging] resync update-dkms-versions helper
    - debian/dkms-versions -- update from kernel-versions (main/2023.10.30)

  * drop all references to is_rust_module.sh in kernels >= 6.5 (LP: #2038611)
    - [Packaging] laptop: drop references to is_rust_module.sh

  * disable shiftfs (LP: #2038522)
    - [Config] raspi: disable shiftfs

  * Don't produce linux-*-tools-{common,host} binary packages (LP: #2044003)
    - [Packaging] laptop: Don't build linux-laptop-tools-{common,host}

  [ Ubuntu: 6.5.0-14.14 ]

  * mantic/linux: 6.5.0-14.14 -proposed tracker (LP: #2042660)
  * Boot log print hang on screen, no login prompt on Aspeed 2600 rev 52 BMC
    (LP: #2042850)
    - drm/ast: Add BMC virtual connector
  * arm64 atomic issues cause disk corruption (LP: #2042573)
    - locking/atomic: scripts: fix fallback ifdeffery
  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts

  [ Ubuntu: 6.5.0-12.12 ]

  * mantic/linux: 6.5.0-12.12 -proposed tracker (LP: #2041536)
  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts
    - [Packaging] update helper scripts
    - debian/dkms-versions -- update from kernel-versions (main/2023.10.30)
  * CVE-2023-5633
    - drm/vmwgfx: Keep a gem reference to user bos in surfaces
  * CVE-2023-5345
    - fs/smb/client: Reset password pointer to NULL
  * CVE-2023-39189
    - netfilter: nfnetlink_osf: avoid OOB read
  * CVE-2023-4244
    - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
  * apparmor restricts read access of user namespace mediation sysctls to root
    (LP: #2040194)
    - SAUCE: apparmor: open userns related sysctl so lxc can check if restriction
      are in place
  * AppArmor spams kernel log with assert when auditing (LP: #2040192)
    - SAUCE: apparmor: fix request field from a prompt reply that denies all
      access
  * apparmor notification files verification (LP: #2040250)
    - SAUCE: apparmor: fix notification header size
  * apparmor oops when racing to retrieve a notification (LP: #2040245)
    - SAUCE: apparmor: fix oops when racing to retrieve notification
  * SMC stats: Wrong bucket calculation for payload of exactly 4096 bytes
    (LP: #2039575)
    - net/smc: Fix pos miscalculation in statistics
  * Support mipi camera on Intel Meteor Lake platform (LP: #2031412)
    - SAUCE: iommu: intel-ipu: use IOMMU passthrough mode for Intel IPUs on Meteor
      Lake
    - SAUCE: platform/x86: int3472: Add handshake GPIO function
  * CVE-2023-45898
    - ext4: fix slab-use-after-free in ext4_es_insert_extent()
  * CVE-2023-31085
    - ubi: Refuse attaching if mtd's erasesize is 0
  * CVE-2023-5717
    - perf: Disallow mis-matched inherited group reads
  * CVE-2023-5178
    - nvmet-tcp: Fix a possible UAF in queue intialization setup
  * CVE-2023-5158
    - vringh: don't use vringh_kiov_advance() in vringh_iov_xfer()
  * CVE-2023-50...

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being closed