UbuntuUpdates.org

Package "linux-hwe-6.8"

Name: linux-hwe-6.8

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Linux kernel buildinfo for version 6.8.0 on 64 bit x86 SMP
  • Linux kernel buildinfo for version 6.8.0 on 64 bit x86 SMP
  • Linux kernel buildinfo for version 6.8.0 on 64 bit x86 SMP
  • Linux kernel buildinfo for version 6.8.0 on 64 bit x86 SMP
Latest version: 6.8.0-85.85~22.04.1
Release: jammy (22.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "linux-hwe-6.8" in Jammy

Repository Area Version
updates main 6.8.0-85.85~22.04.1
proposed main 6.8.0-86.87~22.04.1
PPA: Canonical Kernel Team 6.8.0-88.89~22.04.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 6.8.0-85.85~22.04.1 2025-10-01 20:07:11 UTC

  linux-hwe-6.8 (6.8.0-85.85~22.04.1) jammy; urgency=medium

  * jammy/linux-hwe-6.8: 6.8.0-85.85~22.04.1 -proposed tracker (LP: #2125107)

  [ Ubuntu: 6.8.0-85.85 ]

  * noble/linux: 6.8.0-85.85 -proposed tracker (LP: #2125109)
  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
  * CVE-2025-38500
    - xfrm: interface: fix use-after-free after changing collect_md xfrm
      interface
  * TLS socket disconnection causes various issues (LP: #2120516) //
    CVE-2025-37756
    - net: tls: explicitly disallow disconnect
  * CVE-2025-38477
    - net/sched: sch_qfq: Fix race condition on qfq_aggregate
    - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in
      qfq_delete_class
  * CVE-2025-38618
    - vsock: Do not allow binding to VMADDR_PORT_ANY
  * CVE-2025-38617
    - net/packet: fix a race in packet_set_ring() and packet_notifier()
  * CVE-2025-37785
    - ext4: fix OOB read when checking dotdot dir

 -- Stefan Bader <email address hidden> Fri, 19 Sep 2025 16:46:01 +0200
Source diff to previous version
1786013 Packaging resync
2120516 TLS socket disconnection causes various issues
CVE-2025-38500 In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm interface co
CVE-2025-37756 In the Linux kernel, the following vulnerability has been resolved: net: tls: explicitly disallow disconnect syzbot discovered that it can disconne
CVE-2025-38477 In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix race condition on qfq_aggregate A race condition can oc
CVE-2025-38618 In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to au
CVE-2025-38617 In the Linux kernel, the following vulnerability has been resolved: net/packet: fix a race in packet_set_ring() and packet_notifier() When packet_s
CVE-2025-37785 In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounting a corrupted filesystem wit

Version: 6.8.0-84.84~22.04.1 2025-09-25 23:07:30 UTC

  linux-hwe-6.8 (6.8.0-84.84~22.04.1) jammy; urgency=medium

  [ Ubuntu: 6.8.0-84.84 ]

  * Linux refcount imbalance in af_unix subsystem (LP: #2121515)
    - SAUCE: af_unix: Fix GC compatibility with upstream OOB refcount changes
Source diff to previous version
2121515 Linux refcount imbalance in af_unix subsystem

Version: 6.8.0-83.83~22.04.1 2025-09-18 14:07:16 UTC

  linux-hwe-6.8 (6.8.0-83.83~22.04.1) jammy; urgency=medium

  [ Ubuntu: 6.8.0-83.83 ]

  * Linux refcount imbalance in af_unix subsystem (LP: #2121515)
    - SAUCE: af_unix: Fix GC compatibility with upstream OOB refcount changes
  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log

 -- Manuel Diewald <email address hidden> Tue, 09 Sep 2025 18:21:54 +0200
Source diff to previous version
1786013 Packaging resync

Version: 6.8.0-79.79~22.04.1 2025-09-02 13:08:10 UTC

  linux-hwe-6.8 (6.8.0-79.79~22.04.1) jammy; urgency=medium

  * jammy/linux-hwe-6.8: 6.8.0-79.79~22.04.1 -proposed tracker (LP: #2119917)

  [ Ubuntu: 6.8.0-79.79 ]

  * noble/linux: 6.8.0-79.79 -proposed tracker (LP: #2120415)
  * CVE-2024-57996 // CVE-2025-37752
    - net_sched: sch_sfq: move the limit validation
  * CVE-2025-38350
    - net/sched: Always pass notifications when child class becomes empty
  * CVE-2025-21887
    - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up

 -- Stefan Bader <email address hidden> Fri, 15 Aug 2025 17:24:46 +0200
Source diff to previous version
CVE-2024-57996 In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: don't allow 1 packet limit The current implementation does
CVE-2025-37752 In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: move the limit validation It is not sufficient to directly
CVE-2025-38350 In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain cla
CVE-2025-21887 In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up The iss

Version: 6.8.0-78.78~22.04.1 2025-08-28 11:50:19 UTC

  linux-hwe-6.8 (6.8.0-78.78~22.04.1) jammy; urgency=medium

  * jammy/linux-hwe-6.8: 6.8.0-78.78~22.04.1 -proposed tracker (LP: #2120403)

  [ Ubuntu: 6.8.0-78.78 ]

  * noble/linux: 6.8.0-78.78 -proposed tracker (LP: #2120405)
  * Incorrect backport for CVE-2025-21861 causes kernel hangs
    (LP: #2120330) // CVE-2025-21861
    - mm/migrate_device: don't add folio to be freed to LRU in
      migrate_device_finalize()
  * Incorrect backport for CVE-2025-21861 causes kernel hangs (LP: #2120330)
    - SAUCE: Revert "mm/migrate_device: don't add folio to be freed to LRU in
      migrate_device_finalize()"
    - mm: migrate_device: use more folio in migrate_device_finalize()
2120330 Incorrect backport for CVE-2025-21861 causes kernel hangs
CVE-2025-21861 In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize


About   -   Send Feedback to @ubuntu_updates