noble/linux-gke: 6.8.0-1007.10 -proposed tracker

[Stefan Bader]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: 039a00dae2c1920b
  route-entry: 2
comments:
  abi-testing: 1
delta:
  promote-to-proposed: [main, meta, signed, generate]
  promote-to-updates: [main, meta, signed]
flag:
  boot-testing-requested: true
  bugs-spammed: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
  stream-from-cycle: true
issue: KSRU-12927
kernel-stable-master-bug: 2071983
packages:
  generate: linux-generate-gke
  main: linux-gke
  meta: linux-meta-gke
  signed: linux-signed-gke
phase: Complete
phase-changed: Thursday, 25. July 2024 00:22 UTC
reason: {}
synthetic:
  :promote-to-as-proposed: Invalid
variant: debs
versions:
  main: 6.8.0-1007.10
  meta: 6.8.0-1007.10
  signed: 6.8.0-1007.10
~~:
  announce:
    swm-transition-crankable: 2024-07-12 13:17:39.028342
  clamps:
    new-review: 039a00dae2c1920b
    promote-to-proposed: 039a00dae2c1920b
    self: 6.8.0-1007.10
    sru-review: 039a00dae2c1920b
  tracker:
    last-message: '2024-07-24 20:26:32.061665+00:00'

[Ubuntu Kernel Ancillary Bot (ubuntu-kernel-ancillary-bot)]

amd64/gke canonical-certs.pem unchanged
amd64/gke canonical-revoked-certs.pem unchanged
amd64/gke fwinfo unchanged
amd64/gke modules unchanged
arm64/gke canonical-certs.pem unchanged
arm64/gke canonical-revoked-certs.pem unchanged
arm64/gke fwinfo unchanged
arm64/gke modules unchanged

[Kevin Becker (kevinbecker)]

Regression testing passes. One hint isn't parsing correctly, which blocks swm from detecting that it passes. I'm working with TNT to get that resolved for future updates.

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-gke - 6.8.0-1007.10

---------------
linux-gke (6.8.0-1007.10) noble; urgency=medium

  * noble/linux-gke: 6.8.0-1007.10 -proposed tracker (LP: #2071959)

  [ Ubuntu: 6.8.0-39.39 ]

  * noble/linux: 6.8.0-39.39 -proposed tracker (LP: #2071983)
  * CVE-2024-25742
    - x86/sev: Harden #VC instruction emulation somewhat
    - x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler
  * Noble update: v6.8.9 upstream stable release (LP: #2070337) //
    CVE-2024-35984
    - i2c: smbus: fix NULL function pointer dereference
  * Noble update: v6.8.9 upstream stable release (LP: #2070337) //
    CVE-2024-35990
    - dma: xilinx_dpdma: Fix locking
  * Noble update: v6.8.9 upstream stable release (LP: #2070337) //
    CVE-2024-35997
    - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
  * CVE-2024-36016
    - tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  * CVE-2024-36008
    - ipv4: check for NULL idev in ip_route_use_hint()
  * CVE-2024-35992
    - phy: marvell: a3700-comphy: Fix out of bounds read

 -- Kevin Becker <email address hidden> Fri, 12 Jul 2024 11:40:46 -0400

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being closed