Kernel SRU Workflow

lunar/linux: 6.2.0-35.35 -proposed tracker

Bug #2038229 reported by Thadeu Lima de Souza Cascardo
12
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Kernel SRU Workflow
Fix Committed
Medium
Unassigned
Automated-testing
Invalid
Medium
Canonical Kernel Team
Boot-testing
Fix Released
Medium
Unassigned
Certification-testing
Invalid
Medium
Canonical Hardware Certification
Kernel-signoff
Fix Released
Medium
Canonical Kernel Team
New-review
Fix Released
Medium
Andy Whitcroft
Prepare-package
Fix Released
Medium
Thadeu Lima de Souza Cascardo
Prepare-package-generate
Fix Released
Medium
Thadeu Lima de Souza Cascardo
Prepare-package-lrg
Fix Released
Medium
Thadeu Lima de Souza Cascardo
Prepare-package-lrm
Fix Released
Medium
Thadeu Lima de Souza Cascardo
Prepare-package-lrs
Fix Released
Medium
Thadeu Lima de Souza Cascardo
Prepare-package-meta
Fix Released
Medium
Thadeu Lima de Souza Cascardo
Prepare-package-signed
Fix Released
Medium
Thadeu Lima de Souza Cascardo
Promote-signing-to-proposed
Invalid
Medium
Ubuntu Stable Release Updates Team
Promote-to-proposed
Fix Released
Medium
Ubuntu Stable Release Updates Team
Promote-to-security
Fix Released
Medium
Andy Whitcroft
Promote-to-updates
Fix Released
Medium
Andy Whitcroft
Regression-testing
Fix Released
Medium
Stefan Bader
Security-signoff
Fix Released
Medium
Steve Beattie
Sru-review
Fix Released
Medium
Andy Whitcroft
Verification-testing
Fix Released
Medium
Canonical Kernel Team
canonical-signing-jobs
Task00
Fix Released
Medium
Andy Whitcroft
linux (Ubuntu)
Lunar
Fix Released
Medium
Unassigned

Bug Description

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: 3188b5e3d35f71fc
  route-entry: 2
delta:
  promote-to-proposed: [lrm, lrs, main, meta, signed, lrg, generate]
  promote-to-security: []
  promote-to-updates: [lrm, lrs, main, meta, signed]
flag:
  boot-testing-requested: true
  bugs-spammed: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
issue: KSRU-10102
packages:
  generate: linux-generate
  lrg: linux-restricted-generate
  lrm: linux-restricted-modules
  lrs: linux-restricted-signatures
  main: linux
  meta: linux-meta
  signed: linux-signed
phase: Complete
phase-changed: Thursday, 19. October 2023 13:46 UTC
reason: {}
synthetic:
  :promote-to-as-proposed: Invalid
trackers:
  jammy/linux-hwe-6.2: bug 2038228
  lunar/linux-aws: bug 2038212
  lunar/linux-azure: bug 2038215
  lunar/linux-gcp: bug 2038217
  lunar/linux-kvm: bug 2038218
  lunar/linux-lowlatency: bug 2038220
  lunar/linux-oracle: bug 2038222
  lunar/linux-raspi: bug 2038223
  lunar/linux-riscv: bug 2038224
  lunar/linux-starfive: bug 2038226
variant: debs
versions:
  lrm: 6.2.0-35.35
  main: 6.2.0-35.35
  meta: 6.2.0.35.35
  signed: 6.2.0-35.35
~~:
  announce:
    swm-transition-crankable: 2023-10-02 19:02:32.666813
  clamps:
    new-review: 3188b5e3d35f71fc
    promote-to-proposed: 3188b5e3d35f71fc
    self: 6.2.0-35.35
    sru-review: 3188b5e3d35f71fc

See original description
Thadeu Lima de Souza Cascardo (cascardo)
tags: added: kernel-release-tracking-bug-live
description: updated
tags: added: kernel-sru-cycle-s2023.09.04-1
description: updated
Changed in kernel-sru-workflow:
status: New → Confirmed
importance: Undecided → Medium
Ubuntu Kernel Bot (ubuntu-kernel-bot)
Changed in linux (Ubuntu Lunar):
importance: Undecided → Medium
tags: added: kernel-block-derivatives
tags: added: kernel-regression-testing-early
Changed in kernel-sru-workflow:
status: Confirmed → Triaged
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Changed in kernel-sru-workflow:
status: Triaged → In Progress
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
tags: added: kernel-jira-issue-ksru-10102
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Thadeu Lima de Souza Cascardo (cascardo)
summary: - lunar/linux: <version to be filled> -proposed tracker
+ lunar/linux: 6.2.0-35.35 -proposed tracker
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Revision history for this message
Thadeu Lima de Souza Cascardo (cascardo) wrote :

Mostly good test results. Failures unrelated to changes.

tags: added: boot-testing-passed
removed: kernel-block-derivatives
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Revision history for this message
Stefan Bader (smb) wrote :

Right now the only suspicious result of RT is scoobee.kernel (arm64) which fails the net:tls test in a way that looks like a crash. I do not know whether this was on the radar or whether there is any chance that the few changes in the security cycle would make a difference there. So I am not force hinting this today.

Thadeu Lima de Souza Cascardo (cascardo)
tags: added: regression-testing-passed
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux - 6.2.0-35.35

---------------
linux (6.2.0-35.35) lunar; urgency=medium

  * lunar/linux: 6.2.0-35.35 -proposed tracker (LP: #2038229)

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts

  * CVE-2023-4244
    - netfilter: nf_tables: don't skip expired elements during walk
    - netfilter: nf_tables: integrate pipapo into commit protocol
    - netfilter: nft_set_rbtree: fix overlap expiration walk
    - netfilter: nf_tables: adapt set backend to use GC transaction API
    - netfilter: nft_set_hash: mark set element as dead when deleting from packet
      path
    - netfilter: nf_tables: drop map element references from preparation phase
    - netfilter: nf_tables: GC transaction API to avoid race with control plane
    - netfilter: nf_tables: remove busy mark and gc batch API
    - netfilter: nf_tables: don't fail inserts if duplicate has expired
    - netfilter: nf_tables: fix kdoc warnings after gc rework
    - netfilter: nf_tables: fix GC transaction races with netns and netlink event
      exit path
    - netfilter: nf_tables: GC transaction race with netns dismantle
    - netfilter: nf_tables: GC transaction race with abort path
    - netfilter: nf_tables: use correct lock to protect gc_list
    - netfilter: nf_tables: defer gc run if previous batch is still pending
    - netfilter: nft_dynset: disallow object maps
    - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction

  * CVE-2023-5197
    - netfilter: nf_tables: skip bound chain in netns release path
    - netfilter: nf_tables: disallow rule removal from chain binding

  * CVE-2023-4921
    - net: sched: sch_qfq: Fix UAF in qfq_dequeue()

  * CVE-2023-4881
    - netfilter: nftables: exthdr: fix 4-byte stack OOB write

  * CVE-2023-4623
    - net/sched: sch_hfsc: Ensure inner classes have fsc curve

  * CVE-2023-4622
    - af_unix: Fix null-ptr-deref in unix_stream_sendpage().

  * CVE-2023-42756
    - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP

  * CVE-2023-42755
    - net/sched: Retire rsvp classifier
    - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6

  * CVE-2023-42753
    - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
      ip_set_hash_netportnet.c

  * CVE-2023-42752
    - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
    - net: add SKB_HEAD_ALIGN() helper
    - net: remove osize variable in __alloc_skb()
    - net: factorize code in kmalloc_reserve()
    - net: deal with integer overflows in kmalloc_reserve()

  * CVE-2023-34319
    - xen/netback: Fix buffer overrun triggered by unusual packet

 -- Thadeu Lima de Souza Cascardo <email address hidden> Tue, 03 Oct 2023 08:50:55 -0300

Changed in linux (Ubuntu Lunar):
status: New → Fix Released
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote : Workflow done!

All tasks have been completed and the bug is being closed

Changed in kernel-sru-workflow:
status: In Progress → Fix Committed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.