This bug was fixed in the package linux-aws-5.15 -
5.15.0-1077.84~20.04.1
---------------
linux-aws-5.15 (5.15.0-1077.84~20.04.1) focal; urgency=medium
* focal/linux-aws-5.15: 5.15.0-1077.84~20.04.1 -proposed tracker
(LP: #2093524)
[ Ubuntu: 5.15.0-1077.84 ]
* jammy/linux-aws: 5.15.0-1077.84 -proposed tracker (LP: #2093525)
* jammy/linux: 5.15.0-131.141 -proposed tracker (LP: #2093573)
* CVE-2024-53164
- net: sched: fix ordering of qlen adjustment
* CVE-2024-53141
- netfilter: ipset: add missing range check in bitmap_ip_uadt
* CVE-2024-53103
- hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
[ Ubuntu: 5.15.0-1076.83 ]
* jammy/linux-aws: 5.15.0-1076.83 -proposed tracker (LP: #2092176)
* CVE-2020-12351 // CVE-2020-12352 // CVE-2020-24490
- [Config] Disable BlueZ highspeed support
* jammy/linux: 5.15.0-130.140 -proposed tracker (LP: #2092132)
* ovs/linuxbridge jobs running on ubuntu jammy broken with latest kernel
5.15.0-127.137 (LP: #2091990)
- netfilter: xtables: fix typo causing some targets not to load on IPv6
* jammy/linux: 5.15.0-128.138 -proposed tracker (LP: #2090163)
* CVE-2024-50264
- vsock/virtio: Initialization of the dangling pointer occurring in
vsk->trans
* CVE-2024-53057
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
* CVE-2024-43904
- drm/amd/display: Add null checks for 'stream' and 'plane' before
dereferencing
* CVE-2024-40973
- media: mtk-vcodec: potential null pointer deference in SCP
* CVE-2024-38553
- net: fec: remove .ndo_poll_controller to avoid deadlocks
* CVE-2024-26822
- smb: client: set correct id, uid and cruid for multiuser automounts
* CVE-2020-12351 // CVE-2020-12352 // CVE-2020-24490
- [Config] Disable BlueZ highspeed support
* CVE-2024-40910
- ax25: Fix refcount imbalance on inbound connections
* CVE-2024-35963
- Bluetooth: hci_sock: Fix not validating setsockopt user input
* CVE-2024-35965
- Bluetooth: L2CAP: Fix not validating setsockopt user input
* CVE-2024-35966
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
* CVE-2024-35967
- Bluetooth: SCO: Fix not validating setsockopt user input
-- Philip Cox <[email protected]> Mon, 20 Jan 2025 14:52:40
-0500
** Changed in: linux-aws-5.15 (Ubuntu Focal)
Status: New => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-12351
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-12352
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-24490
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-26822
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-35963
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-35965
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-35966
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-35967
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-38553
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-40910
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-40973
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-43904
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-50264
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-53057
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-53103
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-53141
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-53164
--
You received this bug notification because you are a member of hardware-
certification-users, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/2093524
Title:
focal/linux-aws-5.15: 5.15.0-1077.84~20.04.1 -proposed tracker
Status in canonical-signing-jobs task00 series:
Fix Released
Status in Kernel SRU Workflow:
In Progress
Status in Kernel SRU Workflow abi-testing series:
Fix Released
Status in Kernel SRU Workflow automated-testing series:
Invalid
Status in Kernel SRU Workflow boot-testing series:
Fix Released
Status in Kernel SRU Workflow certification-testing series:
Invalid
Status in Kernel SRU Workflow new-review series:
Fix Released
Status in Kernel SRU Workflow prepare-package series:
Fix Released
Status in Kernel SRU Workflow prepare-package-generate series:
Fix Released
Status in Kernel SRU Workflow prepare-package-lrg series:
Fix Released
Status in Kernel SRU Workflow prepare-package-lrm series:
Fix Released
Status in Kernel SRU Workflow prepare-package-lrs series:
Fix Released
Status in Kernel SRU Workflow prepare-package-meta series:
Fix Released
Status in Kernel SRU Workflow prepare-package-signed series:
Fix Released
Status in Kernel SRU Workflow promote-signing-to-proposed series:
Invalid
Status in Kernel SRU Workflow promote-to-proposed series:
Fix Released
Status in Kernel SRU Workflow promote-to-security series:
New
Status in Kernel SRU Workflow promote-to-updates series:
In Progress
Status in Kernel SRU Workflow regression-testing series:
Fix Released
Status in Kernel SRU Workflow security-signoff series:
Fix Released
Status in Kernel SRU Workflow sru-review series:
Fix Released
Status in Kernel SRU Workflow verification-testing series:
Fix Released
Status in linux-aws-5.15 source package in Focal:
Fix Released
Bug description:
This bug will contain status and test results related to a kernel
source (or snap) as stated in the title.
For an explanation of the tasks and the associated workflow see:
https://wiki.ubuntu.com/Kernel/kernel-sru-workflow
-- swm properties --
built:
from: a0d1077408a46000
route-entry: 2
comments:
abi-testing: 1
delta:
promote-to-proposed: [lrm, lrs, main, meta, signed, lrg, generate]
promote-to-updates: [lrm, lrs, main, meta, signed]
flag:
boot-testing-requested: true
bugs-spammed: true
proposed-announcement-sent: true
proposed-testing-requested: true
stream-from-cycle: true
flavours:
linux-image-aws: [amd64, arm64]
linux-image-aws-edge: [amd64, arm64]
issue: KSRU-15204
kernel-stable-master-bug: 2093573
packages:
generate: linux-generate-aws-5.15
lrg: linux-restricted-generate-aws-5.15
lrm: linux-restricted-modules-aws-5.15
lrs: linux-restricted-signatures-aws-5.15
main: linux-aws-5.15
meta: linux-meta-aws-5.15
signed: linux-signed-aws-5.15
phase: Promote to Updates
phase-changed: Monday, 10. February 2025 14:16 UTC
reason:
promote-to-updates: Ongoing -- packages not yet published
synthetic:
:promote-to-as-proposed: Invalid
testing:
verification-bugs: [2090163, 2091990, 2092132, 2093524, 2092176]
variant: debs
versions:
lrm: 5.15.0-1077.84~20.04.1
main: 5.15.0-1077.84~20.04.1
meta: 5.15.0.1077.84~20.04.1
signed: 5.15.0-1077.84~20.04.1
~~:
announce:
swm-transition-crankable: 2025-01-20 19:45:08.500846
clamps:
new-review: a0d1077408a46000
promote-to-proposed: a0d1077408a46000
self: 5.15.0-1077.84~20.04.1
sru-review: a0d1077408a46000
tracker:
last-message: '2025-02-10 14:19:47.537398+00:00'
To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-signing-jobs/task00/+bug/2093524/+subscriptions
--
Mailing list: https://launchpad.net/~canonical-hw-cert
Post to : [email protected]
Unsubscribe : https://launchpad.net/~canonical-hw-cert
More help : https://help.launchpad.net/ListHelp
