xenial/linux-hwe: 4.15.0-122.124~16.04.1 -proposed tracker

[Stefan Bader]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
boot-testing-requested: true
kernel-stable-master-bug: 1899941
packages:
  main: linux-hwe
  meta: linux-meta-hwe
  signed: linux-signed-hwe
phase: Complete
phase-changed: Tuesday, 20. October 2020 08:07 UTC
proposed-announcement-sent: true
proposed-testing-requested: true
reason: {}
variant: debs
versions:
  main: 4.15.0-122.124~16.04.1
  meta: 4.15.0.122.122
  signed: 4.15.0-122.124~16.04.1

[Stefan Bader (smb)]

This is a security fixup which was not supposed to wait for any longer testing.

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-hwe - 4.15.0-122.124~16.04.1

---------------
linux-hwe (4.15.0-122.124~16.04.1) xenial; urgency=medium

  * xenial/linux-hwe: 4.15.0-122.124~16.04.1 -proposed tracker (LP: #1899950)

  [ Ubuntu: 4.15.0-122.124 ]

  * bionic/linux: 4.15.0-122.124 -proposed tracker (LP: #1899941)
  * CVE-2020-12351 // CVE-2020-12352 // CVE-2020-24490
    - Bluetooth: Disable High Speed by default
    - Bluetooth: MGMT: Fix not checking if BT_HS is enabled
    - [Config] Disable BlueZ highspeed support
  * CVE-2020-12351
    - Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel
  * CVE-2020-12352
    - Bluetooth: A2MP: Fix not initializing all members

  [ Ubuntu: 4.15.0-121.123 ]

  * Packaging resync (LP: #1786013)
    - update dkms package versions

 -- Kleber Sacilotto de Souza <email address hidden> Thu, 15 Oct 2020 16:50:06 +0200

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being set to Fix Released

[John McHugo (nospamboz)]

Does this fix need to be ported to kernel 4.4.0 as well, for 16.04 systems that do not need HWE? 12352 CVE says the bug was introduced in kernel 3.6, so I would expect so.