noble/linux-gke: 6.8.0-1005.8 -proposed tracker

[Stefan Bader]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: 022b674ce3f3bca0
  route-entry: 2
comments:
  abi-testing: 1
delta:
  promote-to-proposed: [main, meta, signed, generate]
  promote-to-security: []
  promote-to-updates: [main, meta, signed]
flag:
  boot-testing-requested: true
  bugs-spammed: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
  stream-from-cycle: true
issue: KSRU-12824
kernel-stable-master-bug: 2068150
packages:
  generate: linux-generate-gke
  main: linux-gke
  meta: linux-meta-gke
  signed: linux-signed-gke
phase: Promote to Security
phase-changed: Thursday, 11. July 2024 08:08 UTC
reason:
  promote-to-security: Ongoing -- packages not yet published
synthetic:
  :promote-to-as-proposed: Invalid
variant: debs
versions:
  main: 6.8.0-1005.8
  meta: 6.8.0-1005.8
  signed: 6.8.0-1005.8
~~:
  announce:
    swm-transition-crankable: 2024-06-12 09:49:08.611149
  clamps:
    new-review: 022b674ce3f3bca0
    promote-to-proposed: 022b674ce3f3bca0
    self: 6.8.0-1005.8
    sru-review: 022b674ce3f3bca0
  tracker:
    last-message: '2024-07-10 21:58:06.526536+00:00'

[Ubuntu Kernel Ancillary Bot (ubuntu-kernel-ancillary-bot)]

amd64/gke canonical-certs.pem unchanged
amd64/gke canonical-revoked-certs.pem unchanged
amd64/gke fwinfo unchanged
amd64/gke modules unchanged
arm64/gke canonical-certs.pem unchanged
arm64/gke canonical-revoked-certs.pem unchanged
arm64/gke fwinfo unchanged
arm64/gke modules differs
  @@ -4967,6 +4967,7 @@
   phy-qcom-qmp-ufs
   phy-qcom-qmp-usb
   phy-qcom-qmp-usb-legacy
  +phy-qcom-qmp-usbc (ok)
   phy-qcom-qusb2
   phy-qcom-sgmii-eth
   phy-qcom-snps-eusb2

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

New kernel with signed kernels; signing-review required.

[Andy Whitcroft (apw)]

Previous cycle kernel was tested and released; this is no longer a new kernel.

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-gke - 6.8.0-1005.8

---------------
linux-gke (6.8.0-1005.8) noble; urgency=medium

  * noble/linux-gke: 6.8.0-1005.8 -proposed tracker (LP: #2068136)

  [ Ubuntu: 6.8.0-36.36 ]

  * noble/linux: 6.8.0-36.36 -proposed tracker (LP: #2068150)
  * CVE-2024-26924
    - netfilter: nft_set_pipapo: do not free live element

  [ Ubuntu: 6.8.0-35.35 ]

  * noble/linux: 6.8.0-35.35 -proposed tracker (LP: #2065886)
  * CVE-2024-21823
    - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
    - dmaengine: idxd: add a new security check to deal with a hardware erratum
    - dmaengine: idxd: add a write() method for applications to submit work

 -- Joseph Salisbury <email address hidden> Wed, 12 Jun 2024 13:51:30 -0400