Kernel SRU Workflow

jammy/linux-intel-iotg: 5.15.0-1043.49 -proposed tracker

Bug #2038196 reported by Thadeu Lima de Souza Cascardo
26
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Kernel SRU Workflow
Fix Committed
Medium
Unassigned
Automated-testing
Invalid
Medium
Canonical Kernel Team
Boot-testing
Fix Released
Medium
Unassigned
Certification-testing
Invalid
Medium
Canonical Hardware Certification
New-review
Fix Released
Medium
Andy Whitcroft
Prepare-package
Fix Released
Medium
Philip Cox
Prepare-package-generate
Fix Released
Medium
Philip Cox
Prepare-package-lrg
Fix Released
Medium
Philip Cox
Prepare-package-lrm
Fix Released
Medium
Philip Cox
Prepare-package-lrs
Fix Released
Medium
Philip Cox
Prepare-package-meta
Fix Released
Medium
Philip Cox
Prepare-package-signed
Fix Released
Medium
Philip Cox
Promote-signing-to-proposed
Invalid
Medium
Unassigned
Promote-to-proposed
Fix Released
Medium
Ubuntu Stable Release Updates Team
Promote-to-security
Fix Released
Medium
Andy Whitcroft
Promote-to-updates
Fix Released
Medium
Andy Whitcroft
Regression-testing
Fix Released
Medium
Canonical Kernel Team
Security-signoff
Fix Released
Medium
Steve Beattie
Sru-review
Fix Released
Medium
Andy Whitcroft
Verification-testing
Fix Released
Medium
Canonical Kernel Team
canonical-signing-jobs
Task00
Fix Released
Medium
Andy Whitcroft
linux-intel-iotg (Ubuntu)
Jammy
Fix Released
Medium
Unassigned

Bug Description

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: 11c4863fa2893f49
  route-entry: 2
delta:
  promote-to-proposed: [lrm, lrs, main, meta, signed, lrg, generate]
  promote-to-security: []
  promote-to-updates: [lrm, lrs, main, meta, signed]
flag:
  boot-testing-requested: true
  bugs-spammed: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
issue: KSRU-10081
kernel-stable-master-bug: 2038209
packages:
  generate: linux-generate-intel-iotg
  lrg: linux-restricted-generate-intel-iotg
  lrm: linux-restricted-modules-intel-iotg
  lrs: linux-restricted-signatures-intel-iotg
  main: linux-intel-iotg
  meta: linux-meta-intel-iotg
  signed: linux-signed-intel-iotg
phase: Complete
phase-changed: Thursday, 19. October 2023 18:41 UTC
reason: {}
synthetic:
  :promote-to-as-proposed: Invalid
trackers:
  focal/linux-intel-iotg-5.15: bug 2038195
  jammy/linux-uc22-intel-iotg: bug 2038191
variant: debs
versions:
  lrm: 5.15.0-1043.49
  main: 5.15.0-1043.49
  meta: 5.15.0.1043.43
  signed: 5.15.0-1043.49
~~:
  announce:
    swm-transition-crankable: 2023-10-11 12:36:38.612159
  clamps:
    new-review: 11c4863fa2893f49
    promote-to-proposed: 11c4863fa2893f49
    self: 5.15.0-1043.49
    sru-review: 11c4863fa2893f49

See original description
Thadeu Lima de Souza Cascardo (cascardo)
tags: added: kernel-release-tracking-bug-live
description: updated
tags: added: kernel-sru-cycle-s2023.09.04-1
description: updated
description: updated
tags: added: kernel-sru-derivative-of-2038209
Changed in kernel-sru-workflow:
status: New → Confirmed
importance: Undecided → Medium
Ubuntu Kernel Bot (ubuntu-kernel-bot)
Changed in linux-intel-iotg (Ubuntu Jammy):
importance: Undecided → Medium
Changed in kernel-sru-workflow:
status: Confirmed → Triaged
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Changed in kernel-sru-workflow:
status: Triaged → In Progress
Ubuntu Kernel Bot (ubuntu-kernel-bot)
tags: added: kernel-jira-issue-ksru-10081
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Philip Cox (philcox)
summary: - jammy/linux-intel-iotg: <version to be filled> -proposed tracker
+ jammy/linux-intel-iotg: 5.15.0-1043.49 -proposed tracker
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in linux-intel-iotg (Ubuntu Jammy):
status: New → Confirmed
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux-intel-iotg - 5.15.0-1043.49

---------------
linux-intel-iotg (5.15.0-1043.49) jammy; urgency=medium

  * jammy/linux-intel-iotg: 5.15.0-1043.49 -proposed tracker (LP: #2038196)

  * CVE-2023-42755
    - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6

  [ Ubuntu: 5.15.0-87.97 ]

  * jammy/linux: 5.15.0-87.97 -proposed tracker (LP: #2038209)
  * CVE-2023-4623
    - net/sched: sch_hfsc: Ensure inner classes have fsc curve
  * CVE-2023-42755
    - net/sched: Retire rsvp classifier
    - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
  * CVE-2023-34319
    - xen/netback: Fix buffer overrun triggered by unusual packet
  * CVE-2023-4921
    - net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  * CVE-2023-42752
    - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
  * CVE-2023-4622
    - af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  * CVE-2023-4244
    - netfilter: nft_set_rbtree: fix overlap expiration walk
    - netfilter: nf_tables: don't skip expired elements during walk
    - netfilter: nf_tables: adapt set backend to use GC transaction API
    - netfilter: nft_set_hash: mark set element as dead when deleting from packet
      path
    - netfilter: nf_tables: GC transaction API to avoid race with control plane
    - netfilter: nf_tables: remove busy mark and gc batch API
    - netfilter: nf_tables: don't fail inserts if duplicate has expired
    - netfilter: nf_tables: fix kdoc warnings after gc rework
    - netfilter: nf_tables: fix GC transaction races with netns and netlink event
      exit path
    - netfilter: nf_tables: GC transaction race with netns dismantle
    - netfilter: nf_tables: GC transaction race with abort path
    - netfilter: nf_tables: use correct lock to protect gc_list
    - netfilter: nf_tables: defer gc run if previous batch is still pending
    - netfilter: nft_dynset: disallow object maps
    - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
  * CVE-2023-42756
    - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
  * CVE-2023-42753
    - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
      ip_set_hash_netportnet.c
  * CVE-2023-5197
    - netfilter: nf_tables: skip bound chain in netns release path
    - netfilter: nf_tables: disallow rule removal from chain binding
  * CVE-2023-4881
    - netfilter: nftables: exthdr: fix 4-byte stack OOB write

 -- Philip Cox <email address hidden> Wed, 11 Oct 2023 12:24:56 -0400

Changed in linux-intel-iotg (Ubuntu Jammy):
status: Confirmed → Fix Released
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote : Workflow done!

All tasks have been completed and the bug is being closed

Changed in kernel-sru-workflow:
status: In Progress → Fix Committed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.