UbuntuUpdates.org

Package "linux-xilinx-zynqmp-headers-5.15.0-1032"

This package belongs to a PPA: Canonical Kernel Team

Name: linux-xilinx-zynqmp-headers-5.15.0-1032

Description:

Header files related to Linux kernel version 5.15.0
Latest version: 5.15.0-1032.36
Release: jammy (22.04)
Level: base
Repository: main
Head package: linux-xilinx-zynqmp

Links

All versions of this package
Bug fixes

Repository home page

Download "linux-xilinx-zynqmp-headers-5.15.0-1032"

All arch deb package
APT INSTALL

Other versions of "linux-xilinx-zynqmp-headers-5.15.0-1032" in Jammy

No other version of this package is available in the Jammy release.

Changelog

Version: 5.15.0-1026.30 2024-01-19 13:08:45 UTC

 linux-xilinx-zynqmp (5.15.0-1026.30) jammy; urgency=medium
 .
   * jammy/linux-xilinx-zynqmp: 5.15.0-1026.30 -proposed tracker (LP: #2049802)
 .
   * Packaging resync (LP: #1786013)
     - [Packaging] resync update-dkms-versions helper
     - [Packaging] remove helper scripts
     - debian/dkms-versions -- update from kernel-versions (main/d2024.01.02)
 .
   * Enable symbols for all Xilinx device trees (LP: #2049442)
     - SAUCE: arm64: dts: Enable symbols for all Xilinx device trees
 .
   * Turn off non-zynqmp arch support (LP: #2044554)
     - [Config] Turn off non-zynqmp arch support
     - [Packaging] Update new baseline abi checks
 .
   * Add support for KD240 platform (LP: #2046280)
     - Sync KD240 DTS from xlnx_rebase_v6.1_LTS
     - can: xilinx_can: Add support for controller reset
 .
   [ Ubuntu: 5.15.0-92.102 ]
 .
   * jammy/linux: 5.15.0-92.102 -proposed tracker (LP: #2048614)
   * Packaging resync (LP: #1786013)
     - [Packaging] resync git-ubuntu-log
   * CVE-2024-0193
     - netfilter: nf_tables: skip set commit for deleted/destroyed sets
   * CVE-2023-6040
     - netfilter: nf_tables: Reject tables of unsupported family
   * CVE-2023-6606
     - smb: client: fix OOB in smbCalcSize()
   * CVE-2023-6817
     - netfilter: nft_set_pipapo: skip inactive elements during set walk
   * CVE-2023-6932
     - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
   * CVE-2023-6931
     - perf/core: Add a new read format to get a number of lost samples
     - perf: Fix perf_event_validate_size()
     - perf: Fix perf_event_validate_size() lockdep splat
 .
   [ Ubuntu: 5.15.0-91.101 ]
 .
   * jammy/linux: 5.15.0-91.101 -proposed tracker (LP: #2043452)
   * USB bus error after upgrading to proposed kernel on lunar and jammy
     (LP: #2043197)
     - USB: core: Fix oversight in SuperSpeed initialization
 .
   [ Ubuntu: 5.15.0-90.100 ]
 .
   * jammy/linux: 5.15.0-90.100 -proposed tracker (LP: #2041603)
   * CVE-2023-25775
     - RDMA/irdma: Remove irdma_uk_mw_bind()
     - RDMA/irdma: Remove irdma_sc_send_lsmm_nostag()
     - RDMA/irdma: Remove irdma_cqp_up_map_cmd()
     - RDMA/irdma: Remove irdma_get_hw_addr()
     - RDMA/irdma: Make irdma_uk_cq_init() return a void
     - RDMA/irdma: optimize rx path by removing unnecessary copy
     - RDMA/irdma: Remove enum irdma_status_code
     - RDMA/irdma: Remove excess error variables
     - RDMA/irdma: Prevent zero-length STAG registration
   * CVE-2023-39189
     - netfilter: nfnetlink_osf: avoid OOB read
   * SMC stats: Wrong bucket calculation for payload of exactly 4096 bytes
     (LP: #2039575)
     - net/smc: Fix pos miscalculation in statistics
   * CVE-2023-45871
     - igb: set max size RX buffer when store bad packet is enabled
   * CVE-2023-39193
     - netfilter: xt_sctp: validate the flag_info count
   * CVE-2023-39192
     - netfilter: xt_u32: validate user space input
   * CVE-2023-31085
     - ubi: Refuse attaching if mtd's erasesize is 0
   * CVE-2023-5717
     - perf: Disallow mis-matched inherited group reads
   * CVE-2023-5178
     - nvmet-tcp: Fix a possible UAF in queue intialization setup
   * CVE-2023-5158
     - vringh: don't use vringh_kiov_advance() in vringh_iov_xfer()
   * [SRU][J/L/M] UBUNTU: [Packaging] Make WWAN driver a loadable module
     (LP: #2033406)
     - [Packaging] Make WWAN driver loadable modules
   * HP ProBook 450 G8 Notebook fail to wifi test (LP: #2037513)
     - iwlwifi: mvm: Don't fail if PPAG isn't supported
     - wifi: iwlwifi: fw: skip PPAG for JF
   * usbip: error: failed to open /usr/share/hwdata//usb.ids (LP: #2039439)
     - [Packaging] Make linux-tools-common depend on hwdata
   * scripts/pahole-flags.sh change return to exit 0 (LP: #2035123)
     - SAUCE: scripts/pahole-flags.sh change return to exit 0
   * Unable to use nvme drive to install Ubuntu 23.10 (LP: #2040157)
     - misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to
       probe
   * Jammy update: v5.15.131 upstream stable release (LP: #2039610)
     - erofs: ensure that the post-EOF tails are all zeroed
     - ksmbd: fix wrong DataOffset validation of create context
     - ksmbd: replace one-element array with flex-array member in struct
       smb2_ea_info
     - ARM: pxa: remove use of symbol_get()
     - mmc: au1xmmc: force non-modular build and remove symbol_get usage
     - net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index
     - rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff
     - modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules
     - USB: serial: option: add Quectel EM05G variant (0x030e)
     - USB: serial: option: add FOXCONN T99W368/T99W373 product
     - ALSA: usb-audio: Fix init call orders for UAC1
     - usb: dwc3: meson-g12a: do post init to fix broken usb after resumption
     - usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0
     - HID: wacom: remove the battery when the EKR is off
     - staging: rtl8712: fix race condition
     - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race
       condition
     - wifi: mt76: mt7921: do not support one stream on secondary antenna only
     - serial: qcom-geni: fix opp vote on shutdown
     - serial: sc16is7xx: fix broken port 0 uart init
     - serial: sc16is7xx: fix bug when first setting GPIO direction
     - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
     - fsi: master-ast-cf: Add MODULE_FIRMWARE macro
     - tcpm: Avoid soft reset when partner does not support get_status
     - nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
     - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
     - pinctrl: amd: Don't show `Invalid config param` errors
     - usb: typec: tcpci: move tcpci.h to include/linux/usb/
     - usb: typec: tcpci: clear the fault status bit
     - Linux 5.15.131
   * Jammy update: v5.15.130 upstream stable release (LP: #2039608)
     - ACPI: thermal: Drop nocrt parameter
   
Source diff to previous version
1786013 Packaging resync
2049442 Enable symbols for all Xilinx device trees
2044554 Turn off non-zynqmp arch support
2046280 Add support for KD240 platform
2043197 USB bus error after upgrading to proposed kernel on lunar and jammy
2039575 SMC stats: Wrong bucket calculation for payload of exactly 4096 bytes
2033406 [SRU][J/L/M] UBUNTU: [Packaging] Make WWAN driver a loadable module
2037513 HP ProBook 450 G8 Notebook fail to wifi test
2039439 usbip: error: failed to open /usr/share/hwdata//usb.ids
2035123 scripts/pahole-flags.sh change return to exit 0
2040157 Unable to use nvme drive to install Ubuntu 23.10
2039610 Jammy update: v5.15.131 upstream stable release
2039608 Jammy update: v5.15.130 upstream stable release
2039227 Jammy update: v5.15.129 upstream stable release
2038486 Jammy update: v5.15.128 upstream stable release
2038382 Jammy update: v5.15.127 upstream stable release
CVE-2024-0193 A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is r
CVE-2023-6040 An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported
CVE-2023-6606 An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker
CVE-2023-6817 A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The func
CVE-2023-6932 A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition c
CVE-2023-6931 A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escala
CVE-2023-25775 Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentia
CVE-2023-39189 A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num
CVE-2023-45871 An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be ade
CVE-2023-39193 A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local pr
CVE-2023-39192 A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw all
CVE-2023-31085 An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd->erasesize), used indirec
CVE-2023-5717 A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local pri
CVE-2023-5178 A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` ...
CVE-2023-5158 A flaw was found in vringh_kiov_advance in drivers/vhost/vringh.c in the host side of a virtio ring in the Linux Kernel. This issue may result in a d
CVE-2023-42754 A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before c
CVE-2023-37453 An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/us

Version: 5.15.0-1025.29 2023-10-31 07:16:04 UTC

 linux-xilinx-zynqmp (5.15.0-1025.29) jammy; urgency=medium
 .
   * jammy/linux-xilinx-zynqmp: 5.15.0-1025.29 -proposed tracker (LP: #2036376)
 .
   * Packaging resync (LP: #1786013)
     - [Packaging] update helper scripts
     - debian/dkms-versions -- update from kernel-versions (main/d2023.10.10)
 .
   * Jammy update: v5.15.117 upstream stable release (LP: #2030107)
     - [Config] updateconfigs for BLK_DEV_SX8
 .
   * Jammy update: v5.15.118 upstream stable release (LP: #2030239)
     - [Config] updateconfigs for DECNET
 .
   * CVE-2023-42755
     - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
 .
   * Please enable Renesas RZ platform serial installer (LP: #2022361)
     - [Config] Mark sh-sci as built-in
 .
   * Jammy update: v5.15.107 upstream stable release (LP: #2023320)
     - [Config] updateconfigs for ns module merger
 .
   * Jammy update: v5.15.105 upstream stable release (LP: #2023230)
     - [Config] updateconfigs for SERIAL_8250_ASPEED_VUART
 .
   * Add K24 device tree (LP: #2040354)
     - SAUCE: arm64: zynqmp: Add K24 device trees
     - SAUCE: arm64: dts: Build dtbs for k24 carrier board
 .
   * K26 QSPI MTD Definition Correction (LP: #2032972)
     - arm64: zynqmp: Fix User MTD partition size
 .
   * Move experimental ubuntu drivers to staging (LP: #2036370)
     - ubuntu/staging: Move out of tree Xilinx drivers into staging directory
     - modpost: Add staging flag to drivers in ubuntu/staging
 .
   * [kr260] Kernel snap does not boot (LP: #2028505)
     - Fix kernel snap to support KR260
 .
   [ Ubuntu: 5.15.0-88.98 ]
 .
   * jammy/linux: 5.15.0-88.98 -proposed tracker (LP: #2038055)
   * CVE-2023-4244
     - netfilter: nf_tables: don't skip expired elements during walk
     - netfilter: nf_tables: adapt set backend to use GC transaction API
     - netfilter: nft_set_hash: mark set element as dead when deleting from packet
       path
     - netfilter: nf_tables: GC transaction API to avoid race with control plane
     - netfilter: nf_tables: remove busy mark and gc batch API
     - netfilter: nf_tables: don't fail inserts if duplicate has expired
     - netfilter: nf_tables: fix kdoc warnings after gc rework
     - netfilter: nf_tables: fix GC transaction races with netns and netlink event
       exit path
     - netfilter: nf_tables: GC transaction race with netns dismantle
     - netfilter: nf_tables: GC transaction race with abort path
     - netfilter: nf_tables: use correct lock to protect gc_list
     - netfilter: nf_tables: defer gc run if previous batch is still pending
     - netfilter: nft_dynset: disallow object maps
     - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
   * CVE-2023-42756
     - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
   * CVE-2023-4623
     - net/sched: sch_hfsc: Ensure inner classes have fsc curve
   * PCI BARs larger than 128GB are disabled (LP: #2037403)
     - PCI: Support BAR sizes up to 8TB
   * Fix unstable audio at low levels on Thinkpad P1G4 (LP: #2037077)
     - ALSA: hda/realtek - ALC287 I2S speaker platform support
   * Check for changes relevant for security certifications (LP: #1945989)
     - [Packaging] Add a new fips-checks script
   * Jammy update: v5.15.126 upstream stable release (LP: #2037593)
     - io_uring: gate iowait schedule on having pending requests
     - perf: Fix function pointer case
     - net/mlx5: Free irqs only on shutdown callback
     - arm64: errata: Add workaround for TSB flush failures
     - arm64: errata: Add detection for TRBE write to out-of-range
     - [Config] updateconfigs for ARM64_ERRATUM_ and
       ARM64_WORKAROUND_TSB_FLUSH_FAILURE
     - iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982
     - iommu/arm-smmu-v3: Document MMU-700 erratum 2812531
     - iommu/arm-smmu-v3: Add explicit feature for nesting
     - iommu/arm-smmu-v3: Document nesting-related errata
     - arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux
     - word-at-a-time: use the same return type for has_zero regardless of
       endianness
     - KVM: s390: fix sthyi error handling
     - wifi: cfg80211: Fix return value in scan logic
     - net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx
     - net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()
     - bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing
     - rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length
     - net: dsa: fix value check in bcm_sf2_sw_probe()
     - perf test uprobe_from_different_cu: Skip if there is no gcc
     - net: sched: cls_u32: Fix match key mis-addressing
     - mISDN: hfcpci: Fix potential deadlock on &hc->lock
     - qed: Fix kernel-doc warnings
     - qed: Fix scheduling in a tasklet while getting stats
     - net: annotate data-races around sk->sk_max_pacing_rate
     - net: add missing READ_ONCE(sk->sk_rcvlowat) annotation
     - net: add missing READ_ONCE(sk->sk_sndbuf) annotation
     - net: add missing READ_ONCE(sk->sk_rcvbuf) annotation
     - net: add missing data-race annotations around sk->sk_peek_off
     - net: add missing data-race annotation for sk_ll_usec
     - net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
     - bpf, cpumap: Handle skb as well when clean up ptr_ring
     - bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire
     - net: ll_temac: Switch to use dev_err_probe() helper
     - net: ll_temac: fix error checking of irq_of_parse_and_map()
     - net: korina: handle clk prepare error in korina_probe()
     - net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode
     - net: dcb: choose correct policy to parse DCB_ATTR_BCN
     - s390/qeth: Don't call dev_close/dev_open (DOWN/UP)
     - ip6mr: Fix skb_under_panic in ip6mr_cache_report()
     - vxlan: Fix nexthop hash size
     - net/mlx5: fs_core: Make find_closest_ft more generic
     - net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs
Source diff to previous version
1786013 Packaging resync
2030107 Jammy update: v5.15.117 upstream stable release
2030239 Jammy update: v5.15.118 upstream stable release
2022361 Please enable Renesas RZ platform serial installer
2023320 Jammy update: v5.15.107 upstream stable release
2023230 Jammy update: v5.15.105 upstream stable release
2040354 Add K24 device tree
2037403 PCI BARs larger than 128GB are disabled
2037077 Fix unstable audio at low levels on Thinkpad P1G4
1945989 Check for changes relevant for security certifications
2037593 Jammy update: v5.15.126 upstream stable release
2036843 Jammy update: v5.15.125 upstream stable release
2035163 Avoid address overwrite in kernel_connect
2035166 NULL Pointer Dereference During KVM MMU Page Invalidation
2034479 Fix suspend hang on Lenovo workstation
2034745 [regression] Unable to initialize SGX enclaves with XFRM other than 3
2035400 Jammy update: v5.15.124 upstream stable release
2034612 Jammy update: v5.15.123 upstream stable release
2036675 5.15.0-85 live migration regression
2035181 Regression for ubuntu_bpf test build on Jammy 5.15.0-85.95
2034447 `refcount_t: underflow; use-after-free.` on hidon w/ 5.15.0-85-generic
2033122 Request backport of xen timekeeping performance improvements
2033007 kdump doesn't work with UEFI secure boot and kernel lockdown enabled on ARM64
2019880 ubuntu_kernel_selftests:net:vrf-xfrm-tests.sh: 8 failed test cases on jammy/fips
2019868 ubuntu_kernel_selftests:net:tls: 88 failed test cases on jammy/fips
2028122 Fix unreliable ethernet cable detection on I219 NIC
2031333 Need to get fine-grained control for FAN(TFN) Participant.
2030924 [SRU][Ubuntu 22.04.1] Unable to interpret the frequency values in cpuinfo_min_freq and cpuino_max_freq sysfs files.
2032176 Crashing with CPU soft lock on GA kernel 5.15.0.79.76 and HWE kernel 5.19.0-46.47-22.04.1
2032690 Jammy update: v5.15.122 upstream stable release
2032689 Jammy update: v5.15.121 upstream stable release
2032688 Jammy update: v5.15.120 upstream stable release
2032683 Jammy update: v5.15.119 upstream stable release
2031093 libgnutls report \
2015400 losetup with mknod fails on jammy with kernel 5.15.0-69-generic
2029401 Jammy update: v5.15.116 upstream stable release
2028550 Backport support to tolerate ZSTD compressed firmware files
2016398 stacked overlay file system mounts that have chroot() called against them appear to be getting locked (by the kernel most likely?)
2026028 usbrtl sometimes doesn't reload firmware
2029138 cifs: fix mid leak during reconnection after timeout threshold
2028799 Jammy update: v5.15.115 upstream stable release
2028701 Jammy update: v5.15.114 upstream stable release
2028408 Jammy update: v5.15.113 upstream stable release
2026607 Jammy update: v5.15.112 upstream stable release
2025095 Jammy update: v5.15.111 upstream stable release
2025090 Jammy update: v5.15.110 upstream stable release
2024265 Jammy update: v5.15.109 upstream stable release
2024900 Disable hv-kvp-daemon if /dev/vmbus/hv_kvp is not present
2008745 [SRU] Intel Sapphire Rapids HBM support needs CONFIG_NUMA_EMU
1853306 [22.04 FEAT] Enhanced Interpretation for PCI Functions on s390x - kernel part
2003374 Undefined Behavior Sanitizer (UBSAN) causes failure to match symbols
1977827 ftrace in ubuntu_kernel_selftests failed with \
2023650 Add microphone support of the front headphone port on P3 Tower
2023539 Add audio support for ThinkPad P1 Gen 6 and Z16 Gen 2
2023311 Resolve synchronous exception on arm64
2018591 Enable Tracing Configs for OSNOISE and TIMERLAT
2003053 NFS: client permission error after adding user to permissible group
2022098 Severe NFS performance degradation after LP #2003053
2020319 Encountering an issue with memcpy_fromio causing failed boot of SEV-enabled guest
2023328 Jammy update: v5.15.108 upstream stable release
2023233 Jammy update: v5.15.106 upstream stable release
2023225 Jammy update: v5.15.104 upstream stable release
2023224 Jammy update: v5.15.103 upstream stable release
2020393 Jammy update: v5.15.102 upstream stable release
2020391 Jammy update: v5.15.101 upstream stable release
2020387 Jammy update: v5.15.100 upstream stable release
CVE-2023-42755 wild pointer access in rsvp classifer in the Linux kernel
CVE-2023-42756 A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic
CVE-2023-42753 An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->n
CVE-2023-42752 integer overflows in kmalloc_reserve()
CVE-2023-4881 ** REJECT ** CVE-2023-4881 was wrongly assigned to a bug that was deemed to be a non-security issue by the Linux kernel security team.
CVE-2023-31083 An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSET
CVE-2023-3772 A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADM
CVE-2023-4569 A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to
CVE-2023-40283 An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the
CVE-2023-4194 A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized acc
CVE-2023-4155 A flaw was found in KVM AMD Secure Encrypted Virtualization (SEV) in t ...
CVE-2023-1206 A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN floo
CVE-2023-4273 A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, wh
CVE-2023-4128 A use-after-free flaw was found in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in the Linux Kernel. This flaw allows a local a
CVE-2023-3863 A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special
CVE-2022-40982 Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may al
CVE-2023-4015 netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
CVE-2023-3995 ** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is a duplicate of CVE-2023-4147.
CVE-2023-3777 netfilter: nf_tables: skip bound chain on rule flush
CVE-2023-20593 An issue in \u201cZen 2\u201d CPUs, under specific microarchitectural ...
CVE-2023-4004 A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a
CVE-2023-2898 There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user t
CVE-2023-31084 An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNI
CVE-2023-35001 Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or
CVE-2023-31248 Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active a
CVE-2023-3439 A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard deta
CVE-2023-3141 A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker
CVE-2022-48502 An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an
CVE-2023-2124 An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty l
CVE-2023-0597 A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the way user can guess location o

Version: 5.15.0-1024.28 2023-09-29 18:08:43 UTC

 linux-xilinx-zynqmp (5.15.0-1024.28) jammy; urgency=medium
 .
   * jammy/linux-xilinx-zynqmp: 5.15.0-1024.28 -proposed tracker (LP: #2036376)
 .
   * K26 QSPI MTD Definition Correction (LP: #2032972)
     - arm64: zynqmp: Fix User MTD partition size
 .
   * Move experimental ubuntu drivers to staging (LP: #2036370)
     - ubuntu/staging: Move out of tree Xilinx drivers into staging directory
     - modpost: Add staging flag to drivers in ubuntu/staging
 .
   * [kr260] Kernel snap does not boot (LP: #2028505)
     - Fix kernel snap to support KR260
 .
   [ Ubuntu: 5.15.0-84.93 ]
 .
   * jammy/linux: 5.15.0-84.93 -proposed tracker (LP: #2034202)
   * Packaging resync (LP: #1786013)
     - [Packaging] update helper scripts
   * CVE-2023-4569
     - netfilter: nf_tables: deactivate catchall elements in next generation
   * CVE-2023-40283
     - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
   * CVE-2023-20588
     - x86/bugs: Increase the x86 bugs vector size to two u32s
     - x86/CPU/AMD: Do not leak quotient data after a division by 0
     - x86/CPU/AMD: Fix the DIV(0) initial fix attempt
   * CVE-2023-4128
     - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-
       free
     - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-
       free
     - net/sched: cls_route: No longer copy tcf_result on update to avoid use-
       after-free
 .
   [ Ubuntu: 5.15.0-83.92 ]
 .
   * jammy/linux: 5.15.0-83.92 -proposed tracker (LP: #2031132)
   * libgnutls report "trap invalid opcode" when trying to install packages over
     https (LP: #2031093)
     - [Config]: disable CONFIG_GDS_FORCE_MITIGATION
 .
   [ Ubuntu: 5.15.0-81.90 ]
 .
   * jammy/linux: 5.15.0-81.90 -proposed tracker (LP: #2030422)
   * Packaging resync (LP: #1786013)
     - [Packaging] resync update-dkms-versions helper
     - [Packaging] resync getabis
     - debian/dkms-versions -- update from kernel-versions (main/2023.08.07)
   * CVE-2022-40982
     - x86/mm: Initialize text poking earlier
     - x86/mm: fix poking_init() for Xen PV guests
     - x86/mm: Use mm_alloc() in poking_init()
     - mm: Move mm_cachep initialization to mm_init()
     - init: Provide arch_cpu_finalize_init()
     - x86/cpu: Switch to arch_cpu_finalize_init()
     - ARM: cpu: Switch to arch_cpu_finalize_init()
     - sparc/cpu: Switch to arch_cpu_finalize_init()
     - um/cpu: Switch to arch_cpu_finalize_init()
     - init: Remove check_bugs() leftovers
     - init: Invoke arch_cpu_finalize_init() earlier
     - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init()
     - x86/init: Initialize signal frame size late
     - x86/fpu: Remove cpuinfo argument from init functions
     - x86/fpu: Mark init functions __init
     - x86/fpu: Move FPU initialization into arch_cpu_finalize_init()
     - x86/xen: Fix secondary processors' FPU initialization
     - x86/speculation: Add Gather Data Sampling mitigation
     - x86/speculation: Add force option to GDS mitigation
     - x86/speculation: Add Kconfig option for GDS
     - KVM: Add GDS_NO support to KVM
     - Documentation/x86: Fix backwards on/off logic about YMM support
     - [Config]: Enable CONFIG_ARCH_HAS_CPU_FINALIZE_INIT and
       CONFIG_GDS_FORCE_MITIGATION
   * CVE-2023-3609
     - net/sched: cls_u32: Fix reference counter leak leading to overflow
   * CVE-2023-21400
     - io_uring: ensure IOPOLL locks around deferred work
   * CVE-2023-4015
     - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound
       set/chain
     - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
     - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
   * CVE-2023-3995
     - netfilter: nf_tables: disallow rule addition to bound chain via
       NFTA_RULE_CHAIN_ID
   * CVE-2023-3777
     - netfilter: nf_tables: skip bound chain on rule flush
   * losetup with mknod fails on jammy with kernel 5.15.0-69-generic
     (LP: #2015400)
     - loop: do not enforce max_loop hard limit by (new) default
   * Include the MAC address pass through function on RTL8153DD-CG (LP: #2020295)
     - r8152: add USB device driver for config selection
   * Jammy update: v5.15.116 upstream stable release (LP: #2029401)
     - RDMA/bnxt_re: Fix the page_size used during the MR creation
     - RDMA/efa: Fix unsupported page sizes in device
     - RDMA/hns: Fix base address table allocation
     - RDMA/hns: Modify the value of long message loopback slice
     - dmaengine: at_xdmac: Move the free desc to the tail of the desc list
     - dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved()
     - RDMA/bnxt_re: Fix a possible memory leak
     - RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
     - iommu/rockchip: Fix unwind goto issue
     - iommu/amd: Don't block updates to GATag if guest mode is on
     - dmaengine: pl330: rename _start to prevent build error
     - riscv: Fix unused variable warning when BUILTIN_DTB is set
     - net/mlx5: fw_tracer, Fix event handling
     - net/mlx5e: Don't attach netdev profile while handling internal error
     - net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure
     - netrom: fix info-leak in nr_write_internal()
     - af_packet: Fix data-races of pkt_sk(sk)->num.
     - amd-xgbe: fix the false linkup in xgbe_phy_status
     - mtd: rawnand: ingenic: fix empty stub helper definitions
     - RDMA/irdma: Add SW mechanism to generate completions on error
     - RDMA/irdma: Prevent QP use after free
     - RDMA/irdma: Fix Local Invalidate fencing
     - af_packet: do not use READ_ONCE() in packet_bind()
     - tcp: deny tcp_disconnect() when threads are waiting
     - tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set
     - net/sched: sch_ingress: Only create under TC_H_INGRESS
     - net/sched: sch_clsact: Only create under TC_H_CLSACT
     - net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress

Source diff to previous version
1786013 Packaging resync
2031093 libgnutls report \
2015400 losetup with mknod fails on jammy with kernel 5.15.0-69-generic
2029401 Jammy update: v5.15.116 upstream stable release
2028550 Backport support to tolerate ZSTD compressed firmware files
2016398 stacked overlay file system mounts that have chroot() called against them appear to be getting locked (by the kernel most likely?)
2026028 usbrtl sometimes doesn't reload firmware
2029138 cifs: fix mid leak during reconnection after timeout threshold
2028799 Jammy update: v5.15.115 upstream stable release
2028701 Jammy update: v5.15.114 upstream stable release
2028408 Jammy update: v5.15.113 upstream stable release
2026607 Jammy update: v5.15.112 upstream stable release
2025095 Jammy update: v5.15.111 upstream stable release
2025090 Jammy update: v5.15.110 upstream stable release
2024265 Jammy update: v5.15.109 upstream stable release
2024900 Disable hv-kvp-daemon if /dev/vmbus/hv_kvp is not present
2008745 [SRU] Intel Sapphire Rapids HBM support needs CONFIG_NUMA_EMU
1853306 [22.04 FEAT] Enhanced Interpretation for PCI Functions on s390x - kernel part
2003374 Undefined Behavior Sanitizer (UBSAN) causes failure to match symbols
1977827 ftrace in ubuntu_kernel_selftests failed with \
2023650 Add microphone support of the front headphone port on P3 Tower
2023539 Add audio support for ThinkPad P1 Gen 6 and Z16 Gen 2
2023311 Resolve synchronous exception on arm64
2018591 Enable Tracing Configs for OSNOISE and TIMERLAT
2003053 NFS: client permission error after adding user to permissible group
2022098 Severe NFS performance degradation after LP #2003053
2020319 Encountering an issue with memcpy_fromio causing failed boot of SEV-enabled guest
2023328 Jammy update: v5.15.108 upstream stable release
2023320 Jammy update: v5.15.107 upstream stable release
2023233 Jammy update: v5.15.106 upstream stable release
2023230 Jammy update: v5.15.105 upstream stable release
2023225 Jammy update: v5.15.104 upstream stable release
2023224 Jammy update: v5.15.103 upstream stable release
2020393 Jammy update: v5.15.102 upstream stable release
2020391 Jammy update: v5.15.101 upstream stable release
2020387 Jammy update: v5.15.100 upstream stable release
CVE-2023-4569 A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to
CVE-2023-40283 An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the
CVE-2023-4128 A use-after-free flaw was found in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in the Linux Kernel. This flaw allows a local a
CVE-2022-40982 Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may al
CVE-2023-4015 netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
CVE-2023-3995 ** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is a duplicate of CVE-2023-4147.
CVE-2023-3777 netfilter: nf_tables: skip bound chain on rule flush
CVE-2023-20593 An issue in \u201cZen 2\u201d CPUs, under specific microarchitectural ...
CVE-2023-4004 A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a
CVE-2023-2898 There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user t
CVE-2023-31084 An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNI
CVE-2023-35001 Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or
CVE-2023-31248 Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active a
CVE-2023-3439 A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard deta
CVE-2023-3141 A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker
CVE-2022-48502 An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an
CVE-2023-2124 An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty l
CVE-2023-0597 A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the way user can guess location o

Version: 5.15.0-1023.27 2023-06-29 01:12:42 UTC

 linux-xilinx-zynqmp (5.15.0-1023.27) jammy; urgency=medium
 .
   * jammy/linux-xilinx-zynqmp: 5.15.0-1023.27 -proposed tracker (LP: #2025252)
 .
   * Packaging resync (LP: #1786013)
     - [Packaging] resync update-dkms-versions helper
 .
   * Miscellaneous upstream changes
     - drivers:media Ar1335: Add MODULE DEVICE TABLE entry
 .
   [ Ubuntu: 5.15.0-76.83 ]
 .
   * jammy/linux: 5.15.0-76.83 -proposed tracker (LP: #2023905)
   * cls_flower: off-by-one in fl_set_geneve_opt (LP: #2023577)
     - net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
   * Some INVLPG implementations can leave Global translations unflushed when
     PCIDs are enabled (LP: #2023220)
     - x86/mm: Avoid incomplete Global INVLPG flushes
 .
   [ Ubuntu: 5.15.0-75.82 ]
 .
   * jammy/linux: 5.15.0-75.82 -proposed tracker (LP: #2023065)
   * Jammy update: v5.15.102 upstream stable release (LP: #2020393)
     - wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext"
   * Packaging resync (LP: #1786013)
     - [Packaging] resync git-ubuntu-log
     - [Packaging] resync getabis
   * fix typo in config-checks invocation (LP: #2020413)
     - [Packaging] fix typo when calling the old config-check
     - [Packaging] fix typo in 4-checks.mk
   * support python < 3.9 with annotations (LP: #2020531)
     - [Packaging] kconfig/annotations.py: support older way of merging dicts

Source diff to previous version
1786013 Packaging resync
2023577 cls_flower: off-by-one in fl_set_geneve_opt
2020393 Jammy update: v5.15.102 upstream stable release
2020413 fix typo in config-checks invocation
2020531 support python \u003c 3.9 with annotations

Version: 5.15.0-1022.26 2023-05-19 19:09:09 UTC

 linux-xilinx-zynqmp (5.15.0-1022.26) jammy; urgency=medium
 .
   * jammy/linux-xilinx-zynqmp: 5.15.0-1022.26 -proposed tracker (LP: #2019520)
 .
   * Use new annotations model (LP: #2019000)
     - [Config] migrate zynqmp config into annotations
 .
   * Update k26 Linux device tree to pull in qspi partition layout changes
     - arm64: zynqmp: Add mtd partition for secure OS storage area
 .
   * ap1302: add support for test pattern mode
     - media: i2c: ap1302: Add test pattern control
 .
   * KR260 Device Tree Patch
     - Added GEM TSU clock properties to KR260 PS GEMs
 .
   * KR260 PL eth ports causing kernel panic with kr07 image
     - net: axienet: Remove repeated MDIO setup
     - net: axienet: Remove repeated RX skb handling
     - net: xilinx: Correct skb passed in error handling path
 .
   * mv-camera-sensor-module: Add support for Y10/Y12 formats
     - mv-camera-sensor-module: Add support for Y10/Y12 formats
 .
   * Submit kernel patches for AR1335 driver
     - media:i2c AR1335 Camera sensor driver support
     - media: dt-bindings: media: i2c: Add bindings for AR1335
     - [Config] Enable AR1335 driver as a kernel module
 .
   * Update AMD TSN Preemption and minor bug fixes
     - lib: add reference counting tracking infrastructure
     - net: add net device refcount tracker infrastructure
     - netlink: add net device refcount tracker to struct ethnl_req_info
     - ethtool: use ethnl_parse_header_dev_put()
     - net: ethtool: netlink: introduce ethnl_update_bool()
     - net: ethtool: add support for MAC Merge layer
     - docs: ethtool-netlink: document interface for MAC Merge layer
     - net: ethtool: netlink: retrieve stats from multiple sources (eMAC, pMAC)
     - docs: ethtool: document ETHTOOL_A_STATS_SRC and ETHTOOL_A_PAUSE_STATS_SRC
     - net: ethtool: add helpers for aggregate statistics
     - net: ethtool: add helpers for MM fragment size translation
     - net: dsa: add plumbing for changing and getting MAC merge layer state
     - net: ethtool: fix NULL pointer dereference in stats_prepare_data()
     - net: ethtool: fix NULL pointer dereference in pause_prepare_data()
     - net: ethtool: provide shims for stats aggregation helpers when
       CONFIG_ETHTOOL_NETLINK=n
     - ethtool: mm: fix get_mm() return code not propagating to user space
     - net: ethtool: fix __ethtool_dev_mm_supported() implementation
     - staging: xilinx-tsn: Add support to configure MAC merge parameters via
       ethtool
     - staging: xilinx-tsn: defer temac and switch probe when ep is not probed.
     - staging: xilinx-tsn: don't exit probe when ep mac address is not found
     - staging: xilinx-tsn: warn user when temac and ep mac address dont match
 .
   [ Ubuntu: 5.15.0-74.81 ]
 .
   * jammy/linux: 5.15.0-74.81 -proposed tracker (LP: #2019420)
   * smartpqi: Update 22.04 driver to include recent bug fixes and support
     current generation devices (LP: #1998643)
     - scsi: smartpqi: Switch to attribute groups
     - scsi: smartpqi: Fix rmmod stack trace
     - scsi: smartpqi: Add PCI IDs
     - scsi: smartpqi: Enable SATA NCQ priority in sysfs
     - scsi: smartpqi: Eliminate drive spin down on warm boot
     - scsi: smartpqi: Quickly propagate path failures to SCSI midlayer
     - scsi: smartpqi: Fix a name typo and cleanup code
     - scsi: smartpqi: Fix a typo in func pqi_aio_submit_io()
     - scsi: smartpqi: Resolve delay issue with PQI_HZ value
     - scsi: smartpqi: Avoid drive spin-down during suspend
     - scsi: smartpqi: Update volume size after expansion
     - scsi: smartpqi: Speed up RAID 10 sequential reads
     - scsi: smartpqi: Expose SAS address for SATA drives
     - scsi: smartpqi: Fix NUMA node not updated during init
     - scsi: smartpqi: Fix BUILD_BUG_ON() statements
     - scsi: smartpqi: Fix hibernate and suspend
     - scsi: smartpqi: Fix lsscsi -t SAS addresses
     - scsi: smartpqi: Update version to 2.1.14-035
     - scsi: smartpqi: Fix unused variable pqi_pm_ops for clang
     - scsi: smartpqi: Stop using the SCSI pointer
     - scsi: smartpqi: Fix typo in comment
     - scsi: smartpqi: Shorten drive visibility after removal
     - scsi: smartpqi: Add controller fw version to console log
     - scsi: smartpqi: Add PCI IDs for ramaxel controllers
     - scsi: smartpqi: Close write read holes
     - scsi: smartpqi: Add driver support for multi-LUN devices
     - scsi: smartpqi: Fix PCI control linkdown system hang
     - scsi: smartpqi: Add PCI ID for Adaptec SmartHBA 2100-8i
     - scsi: smartpqi: Add PCI IDs for Lenovo controllers
     - scsi: smartpqi: Stop logging spurious PQI reset failures
     - scsi: smartpqi: Fix RAID map race condition
     - scsi: smartpqi: Add module param to disable managed ints
     - scsi: smartpqi: Update deleting a LUN via sysfs
     - scsi: smartpqi: Add ctrl ready timeout module parameter
     - scsi: smartpqi: Update copyright to current year
     - scsi: smartpqi: Update version to 2.1.18-045
     - scsi: smartpqi: Convert to host_tagset
     - scsi: smartpqi: Add new controller PCI IDs
     - scsi: smartpqi: Correct max LUN number
     - scsi: smartpqi: Change sysfs raid_level attribute to N/A for controllers
     - scsi: smartpqi: Correct device removal for multi-actuator devices
     - scsi: smartpqi: Add controller cache flush during rmmod
     - scsi: smartpqi: Initialize feature section info
     - scsi: smartpqi: Change version to 2.1.20-035
   * CVE-2023-32233
     - netfilter: nf_tables: deactivate anonymous set from preparation phase
   * CVE-2023-2612
     - SAUCE: shiftfs: prevent lock unbalance in shiftfs_create_object()
   * CVE-2023-31436
     - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
   * CVE-2023-1380
     - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
   * Add PPIN support for Intel EMR cpu (LP: #2019131)
     - x86/cpu: Merge Intel and AMD ppin_init() functions
     - x86/cpu: Add Xeon Emerald Rapids to list of CPUs that support
2019000 Use new annotations model
1998643 smartpqi: Update 22.04 driver to include recent bug fixes and support current generation devices
2019131 Add PPIN support for Intel EMR cpu
2016269 conntrack mark is not advertised via netlink
2008751 [SRU] Backport request for hpwdt from upstream 6.1 to Jammy
2012335 Ubuntu 22.04 raise abnormal NIC MSI-X requests with larger CPU cores (256)
2008527 [SRU]With \
2007745 [SRU][Jammy] CONFIG_PCI_MESON is not enabled
2018438 Jammy update: v5.15.99 upstream stable release
1786013 Packaging resync
2015855 Add split lock detection for EMR
2015372 Add support for intel EMR cpu
2013603 Kernel livepatch ftrace graph fix
2015600 Jammy update: v5.15.98 upstream stable release
2015599 Jammy update: v5.15.97 upstream stable release
2015595 Jammy update: v5.15.96 upstream stable release
2015498 Debian autoreconstruct Fix restoration of execute permissions
2013088 kernel: fix __clear_user() inline assembly constraints
2015097 Kernel crash during Mellanox performance testing
2013209 expoline.o is packaged unconditionally for s390x
2004262 Intel E810 NICs driver in causing hangs when booting and bonds configured
2013118 Jammy update: v5.15.95 upstream stable release
1937133 devlink_port_split from ubuntu_kernel_selftests.net fails on hirsute (KeyError: 'flavour')
2011616 Connection timeout due to conntrack limits
2012673 Jammy update: v5.15.94 upstream stable release
2012665 Jammy update: v5.15.93 upstream stable release
2008157 [SRU][Ubuntu 22.04.1]: Observed \
2011926 Revert \
CVE-2023-32233 In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and
CVE-2023-31436 qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.
CVE-2023-1380 A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel.
CVE-2023-30456 An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency checks for CR0 and CR4.
CVE-2023-1859 A use-after-free flaw was found in xen_9pfs_front_removet in net/9p/trans_xen.c in Xen transport for 9pfs in the Linux Kernel. This flaw could allow
CVE-2023-1670 A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the syst
CVE-2023-1075 A flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness, potentially accessing a type confused entry to the
CVE-2023-1118 A flaw use after free in the Linux kernel integrated infrared receiver/transceiver driver was found in the way user detaching rc device. A local user


About   -   Send Feedback to @ubuntu_updates