UbuntuUpdates.org

Package "linux"

This package belongs to a PPA: Canonical Kernel Team

Name: linux

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Linux kernel buildinfo for version 6.2.0 on 64 bit x86 SMP
  • Linux kernel version specific cloud tools for version 6.2.0-41
  • Linux kernel version specific cloud tools for version 6.2.0-41
  • Linux kernel version specific cloud tools for version 6.2.0

Latest version: 6.2.0-41.42
Release: lunar (23.04)
Level: base
Repository: main

Links



Other versions of "linux" in Lunar

Repository Area Version
base main 6.2.0-20.20
security main 6.2.0-39.40
updates main 6.2.0-39.40
proposed main 6.2.0-41.42

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 6.2.0-34.34 2023-09-04 13:08:31 UTC

 linux (6.2.0-34.34) lunar; urgency=medium
 .
   * lunar/linux: 6.2.0-34.34 -proposed tracker (LP: #2033779)
 .
   * CVE-2023-20569
     - x86/cpu, kvm: Add support for CPUID_80000021_EAX
     - tools headers x86 cpufeatures: Sync with the kernel sources
     - x86/alternative: Optimize returns patching
     - x86/retbleed: Add __x86_return_thunk alignment checks
     - x86/srso: Add a Speculative RAS Overflow mitigation
     - x86/srso: Add IBPB_BRTYPE support
     - x86/srso: Add SRSO_NO support
     - x86/srso: Add IBPB
     - x86/srso: Add IBPB on VMEXIT
     - x86/srso: Fix return thunks in generated code
     - x86/srso: Add a forgotten NOENDBR annotation
     - x86/srso: Tie SBPB bit setting to microcode patch detection
     - Documentation/hw-vuln: Unify filename specification in index
     - Documentation/srso: Document IBPB aspect and fix formatting
     - x86/srso: Fix build breakage with the LLVM linker
     - x86: Move gds_ucode_mitigated() declaration to header
     - x86/retpoline: Don't clobber RFLAGS during srso_safe_ret()
     - x86/srso: Disable the mitigation on unaffected configurations
     - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG
     - x86/retpoline,kprobes: Skip optprobe check for indirect jumps with
       retpolines and IBT
     - x86/cpu: Fix __x86_return_thunk symbol type
     - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk()
     - objtool/x86: Fix SRSO mess
     - x86/alternative: Make custom return thunk unconditional
     - x86/cpu: Clean up SRSO return thunk mess
     - x86/cpu: Rename original retbleed methods
     - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1
     - x86/cpu: Cleanup the untrain mess
     - x86/srso: Explain the untraining sequences a bit more
     - objtool/x86: Fixup frame-pointer vs rethunk
     - x86/static_call: Fix __static_call_fixup()
     - x86/srso: Correct the mitigation status when SMT is disabled
     - Ubuntu: [Config]: enable Speculative Return Stack Overflow mitigation
 .
   * Please enable Renesas RZ platform serial installer (LP: #2022361)
     - [Config] enable hihope RZ/G2M serial console
     - [Config] Mark sh-sci as built-in
 .
   * dGPU cannot resume because system firmware stuck in IPCS method
     (LP: #2021572)
     - drm/i915/tc: Abort DP AUX transfer on a disconnected TC port
     - drm/i915/tc: switch to intel_de_* register accessors in display code
     - drm/i915: Enable a PIPEDMC whenever its corresponding pipe is enabled
     - drm/i915/tc: Fix TC port link ref init for DP MST during HW readout
     - drm/i915/tc: Fix system resume MST mode restore for DP-alt sinks
     - drm/i915/tc: Wait for IOM/FW PHY initialization of legacy TC ports
     - drm/i915/tc: Factor out helpers converting HPD mask to TC mode
     - drm/i915/tc: Fix target TC mode for a disconnected legacy port
     - drm/i915/tc: Fix TC mode for a legacy port if the PHY is not ready
     - drm/i915/tc: Fix initial TC mode on disabled legacy ports
     - drm/i915/tc: Make the TC mode readout consistent in all PHY states
     - drm/i915: Add encoder hook to get the PLL type used by TC ports
     - drm/i915/tc: Assume a TC port is legacy if VBT says the port has HDMI
     - drm/i915/tc: Factor out a function querying active links on a TC port
     - drm/i915/tc: Check the PLL type used by an enabled TC port
     - drm/i915/tc: Group the TC PHY setup/query functions per platform
     - drm/i915/tc: Use the adlp prefix for ADLP TC PHY functions
     - drm/i915/tc: Rename tc_phy_status_complete() to tc_phy_is_ready()
     - drm/i915/tc: Use the tc_phy prefix for all TC PHY functions
     - drm/i915/tc: Move TC port fields to a new intel_tc_port struct
     - drm/i915/tc: Check for TC PHY explicitly in
       intel_tc_port_fia_max_lane_count()
     - drm/i915/tc: Move the intel_tc_port struct declaration to intel_tc.c
     - drm/i915/tc: Add TC PHY hook to get the PHY HPD live status
     - drm/i915/tc: Add TC PHY hooks to get the PHY ready/owned state
     - drm/i915/tc: Add TC PHY hook to read out the PHY HW state
     - drm/i915/tc: Add generic TC PHY connect/disconnect handlers
     - drm/i915/tc: Factor out tc_phy_verify_legacy_or_dp_alt_mode()
     - drm/i915/tc: Add TC PHY hooks to connect/disconnect the PHY
     - drm/i915/tc: Fix up the legacy VBT flag only in disconnected mode
     - drm/i915/tc: Check TC mode instead of the VBT legacy flag
     - drm/i915/tc: Block/unblock TC-cold in the PHY connect/disconnect hooks
     - drm/i915/tc: Remove redundant wakeref=0 check from unblock_tc_cold()
     - drm/i915/tc: Drop tc_cold_block()/unblock()'s power domain parameter
     - drm/i915/tc: Add TC PHY hook to get the TC-cold blocking power domain
     - drm/i915/tc: Add asserts in TC PHY hooks that the required power is on
     - drm/i915/tc: Add TC PHY hook to init the PHY
     - drm/i915/adlp/tc: Use the DE HPD ISR register for hotplug detection
     - drm/i915/tc: Get power ref for reading the HPD live status register
     - drm/i915/tc: Don't connect the PHY in intel_tc_port_connected()
     - drm/i915/adlp/tc: Align the connect/disconnect PHY sequence with bspec
     - drm/i915: Move shared DPLL disabling into CRTC disable hook
     - drm/i915: Disable DPLLs before disconnecting the TC PHY
     - drm/i915: Remove TC PHY disconnect workaround
     - drm/i915: Remove the encoder update_prepare()/complete() hooks
     - drm/i915/dp_mst: Fix active port PLL selection for secondary MST streams
     - drm/i915: Fix PIPEDMC disabling for a bigjoiner configuration
     - drm/i915: Add helpers to reference/unreference a DPLL for a CRTC
     - drm/i915: Make the CRTC state consistent during sanitize-disabling
     - drm/i915: Update connector atomic state before crtc sanitize-disabling
     - drm/i915: Separate intel_crtc_disable_noatomic_begin/complete()
     - drm/i915: Factor out set_encoder_for_connector()
     - drm/i915: Add support for disabling any CRTCs during HW readout/sanitization
  

Source diff to previous version
2022361 Please enable Renesas RZ platform serial installer
2021572 dGPU cannot resume because system firmware stuck in IPCS method
2033654 amdgpu: Fixes for S0i3 resume on Phoenix
2033007 kdump doesn't work with UEFI secure boot and kernel lockdown enabled on ARM64
2033122 Request backport of xen timekeeping performance improvements
2033452 Enable D3cold at s2idle for Intel DG2 GPU
2026322 Fix non-working MT7921e when pre-boot WiFi is enabled
2028122 Fix unreliable ethernet cable detection on I219 NIC
2030924 [SRU][Ubuntu 22.04.1] Unable to interpret the frequency values in cpuinfo_min_freq and cpuino_max_freq sysfs files.
2029808 Lunar update: upstream stable patchset 2023-08-03
CVE-2023-4569 A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to
CVE-2023-40283 An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the
CVE-2023-4194 A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized acc
CVE-2023-1206 A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN floo
CVE-2023-4273 A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, wh
CVE-2023-4128 A use-after-free flaw was found in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in the Linux Kernel. This flaw allows a local a
CVE-2023-3212 A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tr

Version: 6.2.0-32.32 2023-08-14 10:08:37 UTC

 linux (6.2.0-32.32) lunar; urgency=medium
 .
   * lunar/linux: 6.2.0-32.32 -proposed tracker (LP: #2031134)
 .
   * libgnutls report "trap invalid opcode" when trying to install packages over
     https (LP: #2031093)
     - [Config]: disable CONFIG_GDS_FORCE_MITIGATION
 .

Source diff to previous version
2031093 libgnutls report \

Version: 6.2.0-30.30 2023-08-09 13:08:37 UTC

 linux (6.2.0-30.30) lunar; urgency=medium
 .
   * lunar/linux: 6.2.0-30.30 -proposed tracker (LP: #2030381)
 .
   * CVE-2022-40982
     - init: Provide arch_cpu_finalize_init()
     - x86/cpu: Switch to arch_cpu_finalize_init()
     - ARM: cpu: Switch to arch_cpu_finalize_init()
     - ia64/cpu: Switch to arch_cpu_finalize_init()
     - m68k/cpu: Switch to arch_cpu_finalize_init()
     - mips/cpu: Switch to arch_cpu_finalize_init()
     - sh/cpu: Switch to arch_cpu_finalize_init()
     - sparc/cpu: Switch to arch_cpu_finalize_init()
     - um/cpu: Switch to arch_cpu_finalize_init()
     - init: Remove check_bugs() leftovers
     - init: Invoke arch_cpu_finalize_init() earlier
     - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init()
     - x86/init: Initialize signal frame size late
     - x86/fpu: Remove cpuinfo argument from init functions
     - x86/fpu: Mark init functions __init
     - x86/fpu: Move FPU initialization into arch_cpu_finalize_init()
     - x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build
     - x86/xen: Fix secondary processors' FPU initialization
     - x86/speculation: Add Gather Data Sampling mitigation
     - x86/speculation: Add force option to GDS mitigation
     - x86/speculation: Add Kconfig option for GDS
     - KVM: Add GDS_NO support to KVM
     - Documentation/x86: Fix backwards on/off logic about YMM support
     - [Config]: Enable CONFIG_ARCH_HAS_CPU_FINALIZE_INIT and
       CONFIG_GDS_FORCE_MITIGATION
 .
   * CVE-2023-4015
     - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound
       set/chain
     - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
     - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
 .
   * CVE-2023-3995
     - netfilter: nf_tables: disallow rule addition to bound chain via
       NFTA_RULE_CHAIN_ID
 .
   * CVE-2023-3777
     - netfilter: nf_tables: skip bound chain on rule flush
 .
   * CVE-2023-3609
     - net/sched: cls_u32: Fix reference counter leak leading to overflow
 .
   * NULL pointer dereference on CS35L41 HDA AMP (LP: #2029199)
     - ASoC: cs35l41: Refactor error release code
     - ALSA: cs35l41: Add shared boost feature
     - ASoC: dt-bindings: cirrus, cs35l41: Document CS35l41 shared boost
     - ALSA: hda: cs35l41: Ensure firmware/tuning pairs are always loaded
     - ALSA: hda: cs35l41: Enable Amp High Pass Filter
     - ALSA: cs35l41: Use mbox command to enable speaker output for external boost
     - ALSA: cs35l41: Poll for Power Up/Down rather than waiting a fixed delay
     - ALSA: hda: cs35l41: Check mailbox status of pause command after firmware
       load
     - ALSA: hda: cs35l41: Ensure we correctly re-sync regmap before system
       suspending.
     - ALSA: hda: cs35l41: Ensure we pass up any errors during system suspend.
     - ALSA: hda: cs35l41: Move Play and Pause into separate functions
     - ALSA: hda: hda_component: Add pre and post playback hooks to hda_component
     - ALSA: hda: cs35l41: Use pre and post playback hooks
     - ALSA: hda: cs35l41: Rework System Suspend to ensure correct call separation
     - ALSA: hda: cs35l41: Add device_link between HDA and cs35l41_hda
     - ALSA: hda: cs35l41: Ensure amp is only unmuted during playback
 .
   * Reboot command powers off the system (LP: #2029332)
     - x86/smp: Make stop_other_cpus() more robust
     - x86/smp: Dont access non-existing CPUID leaf
 .
   * losetup with mknod fails on jammy with kernel 5.15.0-69-generic
     (LP: #2015400)
     - loop: deprecate autoloading callback loop_probe()
     - loop: do not enforce max_loop hard limit by (new) default
 .
   * Fix UBSAN in Intel EDAC driver (LP: #2028746)
     - EDAC/skx_common: Enable EDAC support for the "near" memory
     - EDAC/skx_common: Delete duplicated and unreachable code
     - EDAC/i10nm: Add Intel Emerald Rapids server support
     - EDAC/i10nm: Make more configurations CPU model specific
     - EDAC/i10nm: Add Intel Granite Rapids server support
     - EDAC/i10nm: Skip the absent memory controllers
 .
   * Make TTY switching possible for NVIDIA when it's boot VGA (LP: #2028749)
     - drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
     - video/aperture: use generic code to figure out the vga default device
     - drm/aperture: Remove primary argument
     - video/aperture: Only kick vgacon when the pdev is decoding vga
     - video/aperture: Move vga handling to pci function
     - video/aperture: Drop primary argument
     - video/aperture: Only remove sysfb on the default vga pci device
     - fbdev: Simplify fb_is_primary_device for x86
     - video/aperture: Provide a VGA helper for gma500 and internal use
 .
   * Fix AMD gpu hang when screen off/on (LP: #2028740)
     - drm/amd/display: Keep PHY active for dp config
 .
   * Various backlight issues with the 6.0/6.1 kernel (LP: #2023638)
     - ACPI: video: Stop trying to use vendor backlight control on laptops from
       after ~2012
 .
   * FM350(mtk_t7xx) failed to suspend, or early wake while suspending
     (LP: #2020743)
     - net: wwan: t7xx: Ensure init is completed before system sleep
 .
   * Include the MAC address pass through function on RTL8153DD-CG (LP: #2020295)
     - r8152: add USB device driver for config selection
 .
   * CVE-2023-20593
     - x86/cpu/amd: Move the errata checking functionality up
     - x86/cpu/amd: Add a Zenbleed fix
 .
   * CVE-2023-4004
     - netfilter: nft_set_pipapo: fix improper element removal
 .
   * CVE-2023-3611
     - net/sched: sch_qfq: refactor parsing of netlink parameters
     - net/sched: sch_qfq: account for stab overhead in qfq_enqueue
 .
   * CVE-2023-3610
     - netfilter: nf_tables: fix chain binding transaction logic
 .
   * CVE-2023-2898
     - f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
 .
   * Fix speaker volume too low on HP G10 laptops (LP: #2023197)
     - ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform
 .
   * st

Source diff to previous version
2029199 NULL pointer dereference on CS35L41 HDA AMP
2029332 Reboot command powers off the system
2028746 Fix UBSAN in Intel EDAC driver
2028749 Make TTY switching possible for NVIDIA when it's boot VGA
2028740 Fix AMD gpu hang when screen off/on
2023197 Fix speaker volume too low on HP G10 laptops
2016398 stacked overlay file system mounts that have chroot() called against them appear to be getting locked (by the kernel most likely?)
2026776 arm64+ast2600: No Output from BMC's VGA port
2024273 Fix eDP only displays 3/4 area after switching to mirror mode with external HDMI 4K monitor
2029138 cifs: fix mid leak during reconnection after timeout threshold
2028979 Lunar update: upstream stable patchset 2023-07-28
2022354 sysfs msi_irqs directory empty with kernel-5.19 when being a xen guest
2028808 Lunar update: upstream stable patchset 2023-07-26
2028580 Lunar update: v6.2.16 upstream stable release
1786013 Packaging resync
CVE-2023-20593 An issue in \u201cZen 2\u201d CPUs, under specific microarchitectural ...
CVE-2023-4004 A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a
CVE-2023-2898 There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user t
CVE-2023-31084 An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNI

Version: 6.2.0-27.28 2023-07-12 22:09:09 UTC

 linux (6.2.0-27.28) lunar; urgency=medium
 .
   * lunar/linux: 6.2.0-27.28 -proposed tracker (LP: #2026488)
 .
   * Packaging resync (LP: #1786013)
     - [Packaging] resync update-dkms-versions helper
     - [Packaging] update annotations scripts
 .
   * CVE-2023-2640 // CVE-2023-32629
     - Revert "UBUNTU: SAUCE: overlayfs: handle idmapped mounts in
       ovl_do_(set|remove)xattr"
     - Revert "UBUNTU: SAUCE: overlayfs: Skip permission checking for
       trusted.overlayfs.* xattrs"
     - SAUCE: overlayfs: default to userxattr when mounted from non initial user
       namespace
 .
   * UNII-4 5.9G Band support request on 8852BE (LP: #2023952)
     - wifi: rtw89: 8851b: add 8851B basic chip_info
     - wifi: rtw89: introduce realtek ACPI DSM method
     - wifi: rtw89: regd: judge UNII-4 according to BIOS and chip
     - wifi: rtw89: support U-NII-4 channels on 5GHz band
 .
   * Disable hv-kvp-daemon if /dev/vmbus/hv_kvp is not present (LP: #2024900)
     - [Packaging] disable hv-kvp-daemon if needed
 .
   * A deadlock issue in scsi rescan task while resuming from S3 (LP: #2018566)
     - ata: libata-scsi: Avoid deadlock on rescan after device resume
 .
   * [SRU] Intel Sapphire Rapids HBM support needs CONFIG_NUMA_EMU (LP: #2008745)
     - [Config] Intel Sapphire Rapids HBM support needs CONFIG_NUMA_EMU
 .
   * Lunar update: v6.2.15 upstream stable release (LP: #2025067)
     - ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15
     - ASoC: Intel: soc-acpi: add table for Intel 'Rooks County' NUC M15
     - ASoC: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm
     - x86/hyperv: Block root partition functionality in a Confidential VM
     - ASoC: amd: yc: Add DMI entries to support Victus by HP Laptop 16-e1xxx
       (8A22)
     - iio: adc: palmas_gpadc: fix NULL dereference on rmmod
     - ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750
     - ASoC: da7213.c: add missing pm_runtime_disable()
     - net: wwan: t7xx: do not compile with -Werror
     - wifi: mt76: mt7921: Fix use-after-free in fw features query.
     - selftests mount: Fix mount_setattr_test builds failed
     - scsi: mpi3mr: Handle soft reset in progress fault code (0xF002)
     - net: sfp: add quirk enabling 2500Base-x for HG MXPD-483II
     - platform/x86: thinkpad_acpi: Add missing T14s Gen1 type to s2idle quirk list
     - wifi: ath11k: reduce the MHI timeout to 20s
     - tracing: Error if a trace event has an array for a __field()
     - asm-generic/io.h: suppress endianness warnings for readq() and writeq()
     - asm-generic/io.h: suppress endianness warnings for relaxed accessors
     - x86/cpu: Add model number for Intel Arrow Lake processor
     - wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset
     - ASoC: amd: ps: update the acp clock source.
     - arm64: Always load shadow stack pointer directly from the task struct
     - arm64: Stash shadow stack pointer in the task struct on interrupt
     - powerpc/boot: Fix boot wrapper code generation with CONFIG_POWER10_CPU
     - PCI: kirin: Select REGMAP_MMIO
     - PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
     - PCI: qcom: Fix the incorrect register usage in v2.7.0 config
     - bus: mhi: host: pci_generic: Revert "Add a secondary AT port to Telit FN990"
     - phy: qcom-qmp-pcie: sc8180x PCIe PHY has 2 lanes
     - IMA: allow/fix UML builds
     - wifi: rtw88: usb: fix priority queue to endpoint mapping
     - usb: gadget: udc: core: Invoke usb_gadget_connect only when started
     - usb: gadget: udc: core: Prevent redundant calls to pullup
     - usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive
     - USB: dwc3: fix runtime pm imbalance on probe errors
     - USB: dwc3: fix runtime pm imbalance on unbind
     - hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write
     - hwmon: (adt7475) Use device_property APIs when configuring polarity
     - tpm: Add !tpm_amd_is_rng_defective() to the hwrng_unregister() call site
     - posix-cpu-timers: Implement the missing timer_wait_running callback
     - media: ov8856: Do not check for for module version
     - drm/vmwgfx: Fix Legacy Display Unit atomic drm support
     - blk-stat: fix QUEUE_FLAG_STATS clear
     - blk-mq: release crypto keyslot before reporting I/O complete
     - blk-crypto: make blk_crypto_evict_key() return void
     - blk-crypto: make blk_crypto_evict_key() more robust
     - staging: iio: resolver: ads1210: fix config mode
     - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
     - xhci: fix debugfs register accesses while suspended
     - serial: fix TIOCSRS485 locking
     - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
     - serial: max310x: fix IO data corruption in batched operations
     - tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem
     - fs: fix sysctls.c built
     - MIPS: fw: Allow firmware to pass a empty env
     - ipmi:ssif: Add send_retries increment
     - ipmi: fix SSIF not responding under certain cond.
     - iio: addac: stx104: Fix race condition when converting analog-to-digital
     - iio: addac: stx104: Fix race condition for stx104_write_raw()
     - kheaders: Use array declaration instead of char
     - wifi: mt76: add missing locking to protect against concurrent rx/status
       calls
     - wifi: rtw89: correct 5 MHz mask setting
     - pwm: meson: Fix axg ao mux parents
     - pwm: meson: Fix g12a ao clk81 name
     - soundwire: qcom: correct setting ignore bit on v1.5.1
     - pinctrl: qcom: lpass-lpi: set output value before enabling output
     - ring-buffer: Ensure proper resetting of atomic variables in
       ring_buffer_reset_online_cpus
     - ring-buffer: Sync IRQ works before buffer destruction
     - crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON()
     - crypto: safexcel - Cleanup ring IRQ workqueues on load failure
     - crypto: arm64/aes-neonbs

Source diff to previous version
1786013 Packaging resync
2023952 UNII-4 5.9G Band support request on 8852BE
2024900 Disable hv-kvp-daemon if /dev/vmbus/hv_kvp is not present
2008745 [SRU] Intel Sapphire Rapids HBM support needs CONFIG_NUMA_EMU
2025067 Lunar update: v6.2.15 upstream stable release
2025066 Lunar update: v6.2.14 upstream stable release
CVE-2023-35001 Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or
CVE-2023-31248 Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active a
CVE-2023-3269 A vulnerability exists in the memory management subsystem of the Linux ...
CVE-2023-3141 A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker

Version: 6.2.0-27.27 2023-07-11 20:09:56 UTC

 linux (6.2.0-27.27) lunar; urgency=medium
 .
   * lunar/linux: 6.2.0-27.27 -proposed tracker (LP: #2026488)
 .
   * Packaging resync (LP: #1786013)
     - [Packaging] resync update-dkms-versions helper
     - [Packaging] update annotations scripts
 .
   * CVE-2023-2640 // CVE-2023-32629
     - Revert "UBUNTU: SAUCE: overlayfs: handle idmapped mounts in
       ovl_do_(set|remove)xattr"
     - Revert "UBUNTU: SAUCE: overlayfs: Skip permission checking for
       trusted.overlayfs.* xattrs"
     - SAUCE: overlayfs: default to userxattr when mounted from non initial user
       namespace
 .
   * UNII-4 5.9G Band support request on 8852BE (LP: #2023952)
     - wifi: rtw89: 8851b: add 8851B basic chip_info
     - wifi: rtw89: introduce realtek ACPI DSM method
     - wifi: rtw89: regd: judge UNII-4 according to BIOS and chip
     - wifi: rtw89: support U-NII-4 channels on 5GHz band
 .
   * Disable hv-kvp-daemon if /dev/vmbus/hv_kvp is not present (LP: #2024900)
     - [Packaging] disable hv-kvp-daemon if needed
 .
   * A deadlock issue in scsi rescan task while resuming from S3 (LP: #2018566)
     - ata: libata-scsi: Avoid deadlock on rescan after device resume
 .
   * [SRU] Intel Sapphire Rapids HBM support needs CONFIG_NUMA_EMU (LP: #2008745)
     - [Config] Intel Sapphire Rapids HBM support needs CONFIG_NUMA_EMU
 .
   * Lunar update: v6.2.15 upstream stable release (LP: #2025067)
     - ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15
     - ASoC: Intel: soc-acpi: add table for Intel 'Rooks County' NUC M15
     - ASoC: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm
     - x86/hyperv: Block root partition functionality in a Confidential VM
     - ASoC: amd: yc: Add DMI entries to support Victus by HP Laptop 16-e1xxx
       (8A22)
     - iio: adc: palmas_gpadc: fix NULL dereference on rmmod
     - ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750
     - ASoC: da7213.c: add missing pm_runtime_disable()
     - net: wwan: t7xx: do not compile with -Werror
     - wifi: mt76: mt7921: Fix use-after-free in fw features query.
     - selftests mount: Fix mount_setattr_test builds failed
     - scsi: mpi3mr: Handle soft reset in progress fault code (0xF002)
     - net: sfp: add quirk enabling 2500Base-x for HG MXPD-483II
     - platform/x86: thinkpad_acpi: Add missing T14s Gen1 type to s2idle quirk list
     - wifi: ath11k: reduce the MHI timeout to 20s
     - tracing: Error if a trace event has an array for a __field()
     - asm-generic/io.h: suppress endianness warnings for readq() and writeq()
     - asm-generic/io.h: suppress endianness warnings for relaxed accessors
     - x86/cpu: Add model number for Intel Arrow Lake processor
     - wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset
     - ASoC: amd: ps: update the acp clock source.
     - arm64: Always load shadow stack pointer directly from the task struct
     - arm64: Stash shadow stack pointer in the task struct on interrupt
     - powerpc/boot: Fix boot wrapper code generation with CONFIG_POWER10_CPU
     - PCI: kirin: Select REGMAP_MMIO
     - PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
     - PCI: qcom: Fix the incorrect register usage in v2.7.0 config
     - bus: mhi: host: pci_generic: Revert "Add a secondary AT port to Telit FN990"
     - phy: qcom-qmp-pcie: sc8180x PCIe PHY has 2 lanes
     - IMA: allow/fix UML builds
     - wifi: rtw88: usb: fix priority queue to endpoint mapping
     - usb: gadget: udc: core: Invoke usb_gadget_connect only when started
     - usb: gadget: udc: core: Prevent redundant calls to pullup
     - usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive
     - USB: dwc3: fix runtime pm imbalance on probe errors
     - USB: dwc3: fix runtime pm imbalance on unbind
     - hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write
     - hwmon: (adt7475) Use device_property APIs when configuring polarity
     - tpm: Add !tpm_amd_is_rng_defective() to the hwrng_unregister() call site
     - posix-cpu-timers: Implement the missing timer_wait_running callback
     - media: ov8856: Do not check for for module version
     - drm/vmwgfx: Fix Legacy Display Unit atomic drm support
     - blk-stat: fix QUEUE_FLAG_STATS clear
     - blk-mq: release crypto keyslot before reporting I/O complete
     - blk-crypto: make blk_crypto_evict_key() return void
     - blk-crypto: make blk_crypto_evict_key() more robust
     - staging: iio: resolver: ads1210: fix config mode
     - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
     - xhci: fix debugfs register accesses while suspended
     - serial: fix TIOCSRS485 locking
     - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
     - serial: max310x: fix IO data corruption in batched operations
     - tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem
     - fs: fix sysctls.c built
     - MIPS: fw: Allow firmware to pass a empty env
     - ipmi:ssif: Add send_retries increment
     - ipmi: fix SSIF not responding under certain cond.
     - iio: addac: stx104: Fix race condition when converting analog-to-digital
     - iio: addac: stx104: Fix race condition for stx104_write_raw()
     - kheaders: Use array declaration instead of char
     - wifi: mt76: add missing locking to protect against concurrent rx/status
       calls
     - wifi: rtw89: correct 5 MHz mask setting
     - pwm: meson: Fix axg ao mux parents
     - pwm: meson: Fix g12a ao clk81 name
     - soundwire: qcom: correct setting ignore bit on v1.5.1
     - pinctrl: qcom: lpass-lpi: set output value before enabling output
     - ring-buffer: Ensure proper resetting of atomic variables in
       ring_buffer_reset_online_cpus
     - ring-buffer: Sync IRQ works before buffer destruction
     - crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON()
     - crypto: safexcel - Cleanup ring IRQ workqueues on load failure
     - crypto: arm64/aes-neonbs

1786013 Packaging resync
2023952 UNII-4 5.9G Band support request on 8852BE
2024900 Disable hv-kvp-daemon if /dev/vmbus/hv_kvp is not present
2008745 [SRU] Intel Sapphire Rapids HBM support needs CONFIG_NUMA_EMU
2025067 Lunar update: v6.2.15 upstream stable release
2025066 Lunar update: v6.2.14 upstream stable release
CVE-2023-35001 Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or
CVE-2023-31248 Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active a
CVE-2023-3269 A vulnerability exists in the memory management subsystem of the Linux ...
CVE-2023-3141 A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker



About   -   Send Feedback to @ubuntu_updates