This bug was fixed in the package linux-azure - 7.2.0-1002.2
---------------
linux-azure (7.2.0-1002.2) stonking; urgency=medium
* stonking/linux-azure: 7.2.0-1002.2 -proposed tracker (LP: #2164543)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
* Backport of VM Freeze Fix – "Avoid DMA Queue Allocation Failure Under
Memory Fragmentation (LP: #2163445)
- net: mana: Route ring-buffer access through offset-based helpers
- net: mana: Fall back to scattered pages for GDMA queues
* Miscellaneous Ubuntu changes
- [packaging] Move to stonking/7.2
- [Config] updateconfigs after rebase to 7.2.0-5.5
- [Packaging] Add Changes-azure.md, drop sauce after rebase
[ Ubuntu: 7.2.0-5.5 ]
* stonking/linux: 7.2.0-5.5 -proposed tracker (LP: #2163667)
* Miscellaneous Ubuntu changes
- [Config] toolchain version update
[ Ubuntu-unstable: 7.2.0-4.4 ]
* stonking/linux-unstable: 7.2.0-4.4 -proposed tracker (LP: #2163401)
* AA: disable SECURITY_APPARMOR_PACKET_MEDIATION_ENABLED (LP: #2147533)
- [Config] disable SECURITY_APPARMOR_PACKET_MEDIATION_ENABLED
* unconfined profile denies userns_create for chromium based processes
(LP: #1990064)
- [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
* FFe: add network interface mediation to 26.04 (LP: #2144679)
- SAUCE: apparmor5.1.0 [60/61]: apparmor: skb: add the ability to use
interface in network mediation.
- SAUCE: apparmor5.1.0 [61/61]: apparmor: skb: switch to using sk_ctx crit
section
* Jellyfin Desktop Flatpak doesn't work with the current AppArmor profile
(LP: #2142956)
- SAUCE: apparmor5.1.0 [59/61]: apparmor: skb: fix
apparmor_secmark_check() when !inet and secmark defined.
* update apparmor and LSM stacking patch set (LP: #2028253)
- SAUCE: apparmor5.1.0 [1/61]: apparmor-next: apparmor: fix net.h and
policy.h circular include pattern
- SAUCE: apparmor5.1.0 [2/61]: apparmor-next: apparmor: make include
headers self-contained
- SAUCE: apparmor5.1.0 [3/61]: apparmor-next: apparmor: Initial support
for compressed policies
- SAUCE: apparmor5.1.0 [4/61]: apparmor-next: apparmor: fix alternate
loaders ability to load compressed policy
- SAUCE: apparmor5.1.0 [5/61]: apparmor-next: apparmor: replace
decompress_zstd() prototype with its entity
- SAUCE: apparmor5.1.0 [6/61]: apparmor-next: apparmor: leverage
audit_log_n_untrustedstring() when possible
- SAUCE: apparmor5.1.0 [7/61]: apparmor-next: apparmor: switch website
link to https
- SAUCE: apparmor5.1.0 [8/61]: apparmor-next: apparmor: compressed_data
not described in aa_get_data_from_compressed
- SAUCE: apparmor5.1.0 [9/61]: apparmor-next: apparmor: Fix build failure
when ZSTD_DECOMPRESS is not enabled
- SAUCE: apparmor5.1.0 [10/61]: apparmor-next: apparmor: fix implicit
declaration of function 'decompress_zstd'
- SAUCE: apparmor5.1.0 [11/61]: apparmor-next: apparmor: Fix warning:
'decompress_zstd' defined but not used
- SAUCE: apparmor5.1.0 [12/61]: apparmor-next: apparmor: use
SEND_SIG_NOINFO instead of NULL in aa_audit()
- SAUCE: apparmor5.1.0 [13/61]: apparmor-next: apparmor: fix cred UAF
caused by begin_current_label_crit_section()
- SAUCE: apparmor5.1.0 [14/61]: apparmor-next: apparmor: optimize
current_label_crit_section() with needput
- SAUCE: apparmor5.1.0 [15/61]: apparmor-next: apparmor: fix integer
overflow in verify_tags() bounds check
- SAUCE: apparmor5.1.0 [16/61]: apparmor-next: apparmor: fix out-of-bounds
write when null terminating a label vec
- SAUCE: apparmor5.1.0 [17/61]: apparmor-next: apparmor: fix error
handling for copy_from_user in policy_update
- SAUCE: apparmor5.1.0 [18/61]: apparmor-next: apparmor: make
MEDIATES_AF_UNIX its own fn
- SAUCE: apparmor5.1.0 [19/61]: apparmor-next: apparmor: refactor network
sock mediation in preparation for inet mediation
- SAUCE: apparmor5.1.0 [20/61]: apparmor-next: apparmor: push inet
mediation into profile callbacks, and improve auditing
- SAUCE: apparmor5.1.0 [21/61]: apparmor-next: apparmor: refactor network
socket mediation to support compatibility
- SAUCE: apparmor5.1.0 [22/61]: apparmor-next: apparmor: move netfilter
functions next to the LSM network operations
- SAUCE: apparmor5.1.0 [23/61]: apparmor-next: apparmor: move
sock_rcv_skb() next to inet_conn_request
- SAUCE: apparmor5.1.0 [24/61]: apparmor-next: apparmor: reserve mediation
class for packet mediation
- SAUCE: apparmor5.1.0 [25/61]: apparmor-next: apparmor: fix unconfined
user namespace restriction forced stack
- SAUCE: apparmor5.1.0 [26/61]: apparmor-next: apparmor: refactor xattr
attachment, to take the file path
- SAUCE: apparmor5.1.0 [27/61]: apparmor-next: apparmor: fix race
condition in label replacement
- SAUCE: apparmor5.1.0 [28/61]: apparmor-next: apparmor: make table entry
count last enum for static tables
- SAUCE: apparmor5.1.0 [29/61]: apparmor-next: apparmor: fix error debug
output in fn_label_build
- SAUCE: apparmor5.1.0 [30/61]: apparmor-next: apparmor: mark static
tables and structs as read only
- SAUCE: apparmor5.1.0 [31/61]: apparmor-next: apparmor: add audit mode to
provide a mechanism to silence complain messages
- SAUCE: apparmor5.1.0 [32/61]: apparmor-next: apparmor: fix auditing of
mount binary data
- SAUCE: apparmor5.1.0 [33/61]: apparmor-next: apparmor: refactory mount
to use check_perms
- SAUCE: apparmor5.1.0 [34/61]: apparmor-next: apparmor: drop use of
_confined variant for iteration
- SAUCE: apparmor5.1.0 [35/61]: apparmor-next: apparmor: constify aa_perms
parameters that are read-only
- SAUCE: apparmor5.1.0 [36/61]: apparmor-next: apparmor: constify
aa_profile parameters on read-only compute paths
- SAUCE: apparmor5.1.0 [37/61]: apparmor-next: apparmor: constify aa_dfa
parameters on read-only compute paths
- SAUCE: apparmor5.1.0 [38/61]: apparmor-next: apparmor: constify aa_label
parameters on read-only query helpers
- SAUCE: apparmor5.1.0 [39/61]: apparmor-next-next: apparmor: setup slab
cache for audit data
- SAUCE: apparmor5.1.0 [40/61]: apparmor-next-next: apparmor: add the
ability for profiles to have a learning cache
- SAUCE: apparmor5.1.0 [41/61]: Stacking: LSM: Single calls in secid hooks
- SAUCE: apparmor5.1.0 [42/61]: Stacking: LSM: Exclusive secmark usage
- SAUCE: apparmor5.1.0 [43/61]: Stacking: AppArmor: Remove the exclusive
flag
- SAUCE: apparmor5.1.0 [44/61]: Revert "apparmor: fix dbus permission
queries to v9 ABI"
- SAUCE: apparmor5.1.0 [45/61]: apparmor: net: patch to provide
compatibility with v2.x net rules
- SAUCE: apparmor5.1.0 [46/61]: apparmor: net: add fine grained ipv4/ipv6
mediation
- SAUCE: apparmor5.1.0 [47/61]: apparmor: userns: add unprivileged user ns
mediation
- SAUCE: apparmor5.1.0 [48/61]: apparmor: userns: Add sysctls for
additional controls of unpriv userns restrictions
- SAUCE: apparmor5.1.0 [50/61]: apparmor: userns: open userns related
sysctl so lxc can check if restriction are in place
- SAUCE: apparmor5.1.0 [51/61]: apparmor: userns: allow profile to be
transitioned when a userns is created
- SAUCE: apparmor5.1.0 [52/61]: apparmor: mqueue: call
security_inode_init_security on inode creation
- SAUCE: apparmor5.1.0 [53/61]: apparmor: mqueue: add fine grained
mediation of posix mqueues
- SAUCE: apparmor5.1.0 [54/61]: apparmor: mqueue: prevent
profile->disconnected double free in aa_free_profile
- SAUCE: apparmor5.1.0 [55/61]: apparmor: uring: add io_uring mediation
- SAUCE: apparmor5.1.0 [58/61]: apparmor: prompt: enable userspace upcall
for mediation
* update apparmor and LSM stacking patch set (LP: #2028253) // Installation
of AppArmor on a 6.14 kernel produces error message "Illegal number: yes"
(LP: #2102680)
- SAUCE: apparmor5.1.0 [56/61]: apparmor: create an
AA_SFS_TYPE_BOOLEAN_INTPRINT sysctl variant
- SAUCE: apparmor5.1.0 [57/61]: apparmor: Use AA_SFS_FILE_BOOLEAN_INTPRINT
for userns and io_uring sysctls
* update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in
mantic (LP: #2032602)
- SAUCE: apparmor5.1.0 [49/61]: apparmor: userns - make it so special
unconfined profiles can mediate user namespaces
* Drop DEP-8 tests from kernel packages (LP: #2160302)
- [Packaging] Drop DEP-8 tests from kernel source
* Miscellaneous Ubuntu changes
- [Config] updateconfigs after rebase to v7.2-rc6
- [Config] Enable SECURITY_APPARMOR_COMPRESSED_POLICY
- [Config] toolchain version update
[ Ubuntu-unstable: 7.2.0-2.2 ]
* stonking/linux-unstable: 7.2.0-2.2 -proposed tracker (LP: #2161304)
* Miscellaneous Ubuntu changes
- Changes.md: dropping reboot=pci quirks for sandy bridge hw
[ Ubuntu-unstable: 7.2.0-1.1 ]
* stonking/linux-unstable: 7.2.0-1.1 -proposed tracker (LP: #2160497)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
[ Ubuntu-unstable: 7.2.0-0.0 ]
* stonking/linux-unstable: 7.2.0-0.0 -proposed tracker (LP: #2159617)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
- [Packaging] update annotations scripts
* Miscellaneous Ubuntu changes
- Update Changes.md after v7.2-rc1 rebase
- [Config] updateconfigs after v7.2-rc1 rebase
- SAUCE: thunderbolt: fixup move of pci_device out of tb_nhi
- [Packaging] integrate SBOM generation into the build
- SAUCE: fixup s/strncpy/strscpy/ in compat_uts_machine= kernel command
line override
- SAUCE: igh-ecat: replace strncpy with strscpy
- SAUCE: igh-ecat: replace strncpy with strscpy
- SAUCE: igh-ecat: replace strncpy with strscpy
- SAUCE: media: venus: core: guard SC8280XP/SM8350 resources behind !IRIS
-- Timo Aaltonen <[email protected]> Thu, 20 Aug 2026
15:39:58 +0300
** Changed in: linux-azure (Ubuntu Stonking)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2163445
Title:
Backport of VM Freeze Fix – "Avoid DMA Queue Allocation Failure Under
Memory Fragmentation
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-azure/+bug/2163445/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
