This bug was fixed in the package linux - 5.11.0-17.18
---------------
linux (5.11.0-17.18) hirsute; urgency=medium
* Race between isotp_bind and isotp_setsockopt (LP: #1927409)
- SAUCE: Revert "can: isotp: add SF_BROADCAST support for functional
addressing"
* CVE-2021-3491
- io_uring: fix overflows checks in provide buffers
- SAUCE: proc: Avoid mixing integer types in mem_rw()
- SAUCE: io_uring: truncate lengths larger than MAX_RW_COUNT on provide
buffers
This bug was fixed in the package linux - 5.11.0-17.18
---------------
linux (5.11.0-17.18) hirsute; urgency=medium
* Race between isotp_bind and isotp_setsockopt (LP: #1927409)
- SAUCE: Revert "can: isotp: add SF_BROADCAST support for functional
addressing"
* CVE-2021-3491
- io_uring: fix overflows checks in provide buffers
- SAUCE: proc: Avoid mixing integer types in mem_rw()
- SAUCE: io_uring: truncate lengths larger than MAX_RW_COUNT on provide
buffers
* CVE-2021-3490
- SAUCE: bpf: verifier: fix ALU32 bounds tracking with bitwise ops
* CVE-2021-3489
- SAUCE: bpf: ringbuf: deny reserve of buffers larger than ringbuf
- SAUCE: bpf: prevent writable memory-mapping of read-only ringbuf pages
-- Stefan Bader <email address hidden> Thu, 06 May 2021 17:31:47 +0200