Comment 3 for bug 1978475

Revision history for this message
Tim Gardner (timg-tpi) wrote :

Sebastian - I assume the last working kernel for you was 5.13.0-1026.28. The only changes applied to 5.13.0-1028.31 were 2 CVE patches:

  * CVE-2022-1972
    - netfilter: nf_tables: sanitize nft_set_desc_concat_parse()
  * CVE-2022-1966
    - netfilter: nf_tables: disallow non-stateful expression in sets earlier

Here is a test kernel with the AUFS panic fix from LP: #1977919 and the 2 above mentioned CVE patches reverted: https://kernel.ubuntu.com/~rtg/focal-aws-5.13-docker-ports-lp1978475/5.13.0-1028.31~lp1978475.1.20.04.1/

wget https://kernel.ubuntu.com/~rtg/focal-aws-5.13-docker-ports-lp1978475/5.13.0-1028.31~lp1978475.1.20.04.1/amd64/linux-image-unsigned-5.13.0-1028-aws_5.13.0-1028.31~lp1978475.1.20.04.1_amd64.deb
wget https://kernel.ubuntu.com/~rtg/focal-aws-5.13-docker-ports-lp1978475/5.13.0-1028.31~lp1978475.1.20.04.1/amd64/linux-modules-5.13.0-1028-aws_5.13.0-1028.31~lp1978475.1.20.04.1_amd64.deb
sudo dpkg -i *.deb