UbuntuUpdates.org

Package "linux-tools-common"

This package belongs to a PPA: Canonical Kernel Team

Name: linux-tools-common

Description:

Linux kernel version specific tools for version 6.17.0

Latest version: 6.17.0-38.38
Release: questing (25.10)
Level: base
Repository: main
Head package: linux

Links


Download "linux-tools-common"


Other versions of "linux-tools-common" in Questing

Repository Area Version
base main 6.17.0-5.5
security main 6.17.0-35.35
updates main 6.17.0-35.35
proposed main 6.17.0-38.38

Changelog

Version: 6.17.0-38.38 2026-05-29 05:09:00 UTC

 linux (6.17.0-38.38) questing; urgency=medium
 .
   * questing/linux: 6.17.0-38.38 -proposed tracker (LP: #2154532)
 .
   * Generic questing kernel oops on bootup with newer Nvidia machines
     (LP: #2154481)
     - nouveau: don't attempt fwsec on sb on newer platforms.
 .
   * Kernel regression (6.8.0-117.generic) (LP: #2153556)
     - bonding: do not set usable_slaves for broadcast mode
 .
   * powerpc-build in ubuntu_kernel_selftests fails to build due to
     uninitialized value (LP: #2129844)
     - selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
 .
   * iptables connlimit traffic loss (LP: #2149872)
     - netfilter: nf_conncount: fix tracking of connections from localhost
 .
   * On Dell system, the internal OLED display drops to a visibly low FPS after
     suspend/resume (LP: #2144712)
     - drm/i915/psr: Disable Panel Replay on Dell XPS 14 DA14260 as a quirk
     - drm/i915/psr: Fixes for Dell XPS DA14260 quirk
 .
   * CVE-2026-23272
     - netfilter: nf_tables: unconditionally bump set->nelems before insertion
 .
   * CVE-2026-31418
     - netfilter: ipset: drop logically empty buckets in mtype_del
 .
   * CVE-2026-23392
     - netfilter: nf_tables: release flowtable after rcu grace period on error
 .
   * CVE-2026-23278
     - netfilter: nf_tables: always walk all pending catchall elements
 .
   * GRO managed-frag use-after-free leading to local privilege escalation
     (LP: #2154172)
     - net: gro: don't merge zcopy skbs
 .
   * AppArmor Vulnerabilities (LP: #2151747)
     - SAUCE: apparmor: pass big_resp to handler
     - SAUCE: apparmor: remove redundant kref_init for listener->count
     - SAUCE: apparmor: fix NULL pointer dereference in unpack_pdb
 .
   * AppArmor Vulnerabilities (LP: #2151747) // CVE-2026-47337
     - SAUCE: apparmor: fix NULL pointer dereference in bind_map_addr
 .
   * AppArmor Vulnerabilities (LP: #2151747) // CVE-2026-47334
     - SAUCE: apparmor: fix sleep prone memory allocation under a spin_lock
 .
   * AppArmor Vulnerabilities (LP: #2151747) // CVE-2026-47333
     - SAUCE: apparmor: fix dfa unpacking size of the notification filter
 .
   * AppArmor Vulnerabilities (LP: #2151747) // CVE-2026-47332
     - SAUCE: apparmor: fix size check against type instead of pointer
 .
   * apparmor: LLVM/clang build failure due to uninitialized variable in
     notify.c (LP: #2148809) // CVE-2026-47330
     - SAUCE: apparmor: initialize variable used in uninitialized context
 .
   * AppArmor Vulnerabilities (LP: #2151747) // CVE-2026-47329
     - SAUCE: apparmor: fix name validation bypass on notification
 .
   * AppArmor Vulnerabilities (LP: #2151747) // CVE-2026-47327 //
     CVE-2026-47328
     - SAUCE: apparmor: fix glob memory leak after kstrdup
 .
   * AppArmor Vulnerabilities (LP: #2151747) // CVE-2026-47326
     - SAUCE: apparmor: fix inverted NULL check after aa_get_buffer
 .
   * CVE-2026-46300
     - net: skbuff: preserve shared-frag marker during coalescing
     - net: skbuff: propagate shared-frag marker through frag-transfer helpers
 .
   * net/rds: reset op_nents when zerocopy page pin fails (LP: #2153962)
     - net/rds: reset op_nents when zerocopy page pin fails
 .
   * CVE-2026-46333
     - ptrace: slightly saner 'get_dumpable()' logic
 .
   * CVE-2026-43500
     - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets
     - rxrpc: Fix potential UAF after skb_unshare() failure
     - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets
     - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
 .
   * CVE-2026-31676 // CVE-2026-43500
     - rxrpc: only handle RESPONSE during service challenge
 .
   * CVE-2026-43284
     - xfrm: esp: avoid in-place decrypt on shared skb frags
 .
   * CVE-2026-31419
     - net: bonding: fix use-after-free in bond_xmit_broadcast()
 .
   * CVE-2026-31431
     - crypto: algif_aead - Revert to operating out-of-place
     - crypto: algif_aead - snapshot IV for async AEAD requests
     - crypto: authencesn - Do not place hiseq at end of dst for out-of-place
       decryption
     - crypto: authencesn - Fix src offset when decrypting in-place
     - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
     - crypto: algif_aead - Fix minimum RX size check for decryption
 .
   * CVE-2026-31533
     - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
 .
   * CVE-2026-31504
     - net: fix fanout UAF in packet_release() via NETDEV_UP race

Source diff to previous version
2154481 Generic questing kernel oops on bootup with newer Nvidia machines
2153556 Kernel regression (6.8.0-117.generic)
2129844 powerpc-build in ubuntu_kernel_selftests fails to build due to uninitialized value
2149872 iptables connlimit traffic loss
2144712 On Dell system, the internal OLED display drops to a visibly low FPS after suspend/resume
2154172 GRO managed-frag use-after-free leading to local privilege escalation
2151747 AppArmor Vulnerabilities
2148809 apparmor: LLVM/clang build failure due to uninitialized variable in notify.c
2153962 net/rds: reset op_nents when zerocopy page pin fails
CVE-2026-23272 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally bump set->nelems before insertion In case
CVE-2026-31418 In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: drop logically empty buckets in mtype_del mtype_del() counts
CVE-2026-23392 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flowtable after rcu grace period on error Call sy
CVE-2026-23278 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always walk all pending catchall elements During transact
CVE-2026-47337 Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible N ...
CVE-2026-47334 Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which in ...
CVE-2026-47333 Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which ca ...
CVE-2026-47332 Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which in ...
CVE-2026-47330 Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which ca ...
CVE-2026-47329 Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to val ...
CVE-2026-47327 Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible N ...
CVE-2026-47328 Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which in ...
CVE-2026-47326 Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a memory lea ...
CVE-2026-46300 In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() c
CVE-2026-46333 In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fu
CVE-2026-43500 In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA
CVE-2026-31676 In the Linux kernel, the following vulnerability has been resolved: rxrpc: only handle RESPONSE during service challenge Only process RESPONSE pack
CVE-2026-43284 In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can atta
CVE-2026-31419 In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broadcast() bond_xmit_broadcast()
CVE-2026-31431 In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commi
CVE-2026-31533 In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption The -EBUS
CVE-2026-31504 In the Linux kernel, the following vulnerability has been resolved: net: fix fanout UAF in packet_release() via NETDEV_UP race `packet_release()` h

Version: 6.17.0-34.34 2026-05-25 23:09:02 UTC

 linux (6.17.0-34.34) questing; urgency=medium
 .
   * questing/linux: 6.17.0-34.34 -proposed tracker (LP: #2154216)
 .
   * Kernel regression (6.8.0-117.generic) (LP: #2153556)
     - bonding: do not set usable_slaves for broadcast mode
 .
   * powerpc-build in ubuntu_kernel_selftests fails to build due to
     uninitialized value (LP: #2129844)
     - selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
 .
   * iptables connlimit traffic loss (LP: #2149872)
     - netfilter: nf_conncount: fix tracking of connections from localhost
 .
   * On Dell system, the internal OLED display drops to a visibly low FPS after
     suspend/resume (LP: #2144712)
     - drm/i915/psr: Disable Panel Replay on Dell XPS 14 DA14260 as a quirk
     - drm/i915/psr: Fixes for Dell XPS DA14260 quirk
 .
   * CVE-2026-23272
     - netfilter: nf_tables: unconditionally bump set->nelems before insertion
 .
   * CVE-2026-31418
     - netfilter: ipset: drop logically empty buckets in mtype_del
 .
   * CVE-2026-23392
     - netfilter: nf_tables: release flowtable after rcu grace period on error
 .
   * CVE-2026-23278
     - netfilter: nf_tables: always walk all pending catchall elements
 .
   * CVE-2026-46300
     - net: skbuff: preserve shared-frag marker during coalescing
     - net: skbuff: propagate shared-frag marker through frag-transfer helpers
 .
   * net/rds: reset op_nents when zerocopy page pin fails (LP: #2153962)
     - net/rds: reset op_nents when zerocopy page pin fails
 .
   * CVE-2026-46333
     - ptrace: slightly saner 'get_dumpable()' logic
 .
   * CVE-2026-43500
     - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets
     - rxrpc: Fix potential UAF after skb_unshare() failure
     - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets
     - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
 .
   * CVE-2026-31676 // CVE-2026-43500
     - rxrpc: only handle RESPONSE during service challenge
 .
   * CVE-2026-43284
     - xfrm: esp: avoid in-place decrypt on shared skb frags
 .
   * CVE-2026-31419
     - net: bonding: fix use-after-free in bond_xmit_broadcast()
 .
   * CVE-2026-31431
     - crypto: algif_aead - Revert to operating out-of-place
     - crypto: algif_aead - snapshot IV for async AEAD requests
     - crypto: authencesn - Do not place hiseq at end of dst for out-of-place
       decryption
     - crypto: authencesn - Fix src offset when decrypting in-place
     - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
     - crypto: algif_aead - Fix minimum RX size check for decryption
 .
   * CVE-2026-31533
     - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
 .
   * CVE-2026-31504
     - net: fix fanout UAF in packet_release() via NETDEV_UP race

Source diff to previous version
2153556 Kernel regression (6.8.0-117.generic)
2129844 powerpc-build in ubuntu_kernel_selftests fails to build due to uninitialized value
2149872 iptables connlimit traffic loss
2144712 On Dell system, the internal OLED display drops to a visibly low FPS after suspend/resume
2153962 net/rds: reset op_nents when zerocopy page pin fails
CVE-2026-23272 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally bump set->nelems before insertion In case
CVE-2026-31418 In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: drop logically empty buckets in mtype_del mtype_del() counts
CVE-2026-23392 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flowtable after rcu grace period on error Call sy
CVE-2026-23278 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always walk all pending catchall elements During transact
CVE-2026-46300 In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() c
CVE-2026-46333 In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fu
CVE-2026-43500 In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA
CVE-2026-31676 In the Linux kernel, the following vulnerability has been resolved: rxrpc: only handle RESPONSE during service challenge Only process RESPONSE pack
CVE-2026-43284 In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can atta
CVE-2026-31419 In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broadcast() bond_xmit_broadcast()
CVE-2026-31431 In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commi
CVE-2026-31533 In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption The -EBUS
CVE-2026-31504 In the Linux kernel, the following vulnerability has been resolved: net: fix fanout UAF in packet_release() via NETDEV_UP race `packet_release()` h

Version: 6.17.0-33.33 2026-05-23 01:08:54 UTC

 linux (6.17.0-33.33) questing; urgency=medium
 .
   * questing/linux: 6.17.0-33.33 -proposed tracker (LP: #2154029)
 .
   * powerpc-build in ubuntu_kernel_selftests fails to build due to
     uninitialized value (LP: #2129844)
     - selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
 .
   * iptables connlimit traffic loss (LP: #2149872)
     - netfilter: nf_conncount: fix tracking of connections from localhost
 .
   * On Dell system, the internal OLED display drops to a visibly low FPS after
     suspend/resume (LP: #2144712)
     - drm/i915/psr: Disable Panel Replay on Dell XPS 14 DA14260 as a quirk
     - drm/i915/psr: Fixes for Dell XPS DA14260 quirk
 .
   * CVE-2026-23272
     - netfilter: nf_tables: unconditionally bump set->nelems before insertion
 .
   * CVE-2026-31418
     - netfilter: ipset: drop logically empty buckets in mtype_del
 .
   * CVE-2026-23392
     - netfilter: nf_tables: release flowtable after rcu grace period on error
 .
   * CVE-2026-23278
     - netfilter: nf_tables: always walk all pending catchall elements
 .
   * CVE-2026-46300
     - net: skbuff: preserve shared-frag marker during coalescing
     - net: skbuff: propagate shared-frag marker through frag-transfer helpers
 .
   * net/rds: reset op_nents when zerocopy page pin fails (LP: #2153962)
     - net/rds: reset op_nents when zerocopy page pin fails
 .
   * CVE-2026-46333
     - ptrace: slightly saner 'get_dumpable()' logic
 .
   * CVE-2026-43500
     - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets
     - rxrpc: Fix potential UAF after skb_unshare() failure
     - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets
     - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
 .
   * CVE-2026-31676 // CVE-2026-43500
     - rxrpc: only handle RESPONSE during service challenge
 .
   * CVE-2026-43284
     - xfrm: esp: avoid in-place decrypt on shared skb frags
 .
   * CVE-2026-31419
     - net: bonding: fix use-after-free in bond_xmit_broadcast()
 .
   * CVE-2026-31431
     - crypto: algif_aead - Revert to operating out-of-place
     - crypto: algif_aead - snapshot IV for async AEAD requests
     - crypto: authencesn - Do not place hiseq at end of dst for out-of-place
       decryption
     - crypto: authencesn - Fix src offset when decrypting in-place
     - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
     - crypto: algif_aead - Fix minimum RX size check for decryption
 .
   * CVE-2026-31533
     - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
 .
   * CVE-2026-31504
     - net: fix fanout UAF in packet_release() via NETDEV_UP race

Source diff to previous version
2129844 powerpc-build in ubuntu_kernel_selftests fails to build due to uninitialized value
2149872 iptables connlimit traffic loss
2144712 On Dell system, the internal OLED display drops to a visibly low FPS after suspend/resume
2153962 net/rds: reset op_nents when zerocopy page pin fails
CVE-2026-23272 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally bump set->nelems before insertion In case
CVE-2026-31418 In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: drop logically empty buckets in mtype_del mtype_del() counts
CVE-2026-23392 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flowtable after rcu grace period on error Call sy
CVE-2026-23278 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always walk all pending catchall elements During transact
CVE-2026-46333 In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fu
CVE-2026-43500 In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA
CVE-2026-31676 In the Linux kernel, the following vulnerability has been resolved: rxrpc: only handle RESPONSE during service challenge Only process RESPONSE pack
CVE-2026-43284 In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can atta
CVE-2026-31419 In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broadcast() bond_xmit_broadcast()
CVE-2026-31431 In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commi
CVE-2026-31533 In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption The -EBUS
CVE-2026-31504 In the Linux kernel, the following vulnerability has been resolved: net: fix fanout UAF in packet_release() via NETDEV_UP race `packet_release()` h

Version: 6.17.0-30.30 2026-05-09 01:08:49 UTC

 linux (6.17.0-30.30) questing; urgency=medium
 .
   * questing/linux: 6.17.0-30.30 -proposed tracker (LP: #2151895)
 .
   * powerpc-build in ubuntu_kernel_selftests fails to build due to
     uninitialized value (LP: #2129844)
     - selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
 .
   * iptables connlimit traffic loss (LP: #2149872)
     - netfilter: nf_conncount: fix tracking of connections from localhost
 .
   * On Dell system, the internal OLED display drops to a visibly low FPS after
     suspend/resume (LP: #2144712)
     - drm/i915/psr: Disable Panel Replay on Dell XPS 14 DA14260 as a quirk
     - drm/i915/psr: Fixes for Dell XPS DA14260 quirk
 .
   * CVE-2026-23272
     - netfilter: nf_tables: unconditionally bump set->nelems before insertion
 .
   * CVE-2026-31418
     - netfilter: ipset: drop logically empty buckets in mtype_del
 .
   * CVE-2026-23392
     - netfilter: nf_tables: release flowtable after rcu grace period on error
 .
   * CVE-2026-23278
     - netfilter: nf_tables: always walk all pending catchall elements
 .
   * CVE-2026-31419
     - net: bonding: fix use-after-free in bond_xmit_broadcast()
 .
   * CVE-2026-31431
     - crypto: algif_aead - Revert to operating out-of-place
     - crypto: algif_aead - snapshot IV for async AEAD requests
     - crypto: authencesn - Do not place hiseq at end of dst for out-of-place
       decryption
     - crypto: authencesn - Fix src offset when decrypting in-place
     - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
     - crypto: algif_aead - Fix minimum RX size check for decryption
 .
   * CVE-2026-31533
     - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
 .
   * CVE-2026-31504
     - net: fix fanout UAF in packet_release() via NETDEV_UP race

Source diff to previous version
2129844 powerpc-build in ubuntu_kernel_selftests fails to build due to uninitialized value
2149872 iptables connlimit traffic loss
2144712 On Dell system, the internal OLED display drops to a visibly low FPS after suspend/resume
CVE-2026-23272 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally bump set->nelems before insertion In case
CVE-2026-31418 In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: drop logically empty buckets in mtype_del mtype_del() counts
CVE-2026-23392 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flowtable after rcu grace period on error Call sy
CVE-2026-23278 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always walk all pending catchall elements During transact
CVE-2026-31419 In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broadcast() bond_xmit_broadcast()
CVE-2026-31431 In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commi
CVE-2026-31533 In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption The -EBUS
CVE-2026-31504 In the Linux kernel, the following vulnerability has been resolved: net: fix fanout UAF in packet_release() via NETDEV_UP race `packet_release()` h

Version: 6.17.0-28.28 2026-04-23 01:10:25 UTC

 linux (6.17.0-28.28) questing; urgency=medium
 .
   * questing/linux: 6.17.0-28.28 -proposed tracker (LP: #2150051)
 .
   * Linux kernel 6.17.0-22.22 breaks amdxdna (LP: #2149766)
     - Revert "iommu: disable SVA when CONFIG_X86 is set"
 .

2149766 Linux kernel 6.17.0-22.22 breaks amdxdna



About   -   Send Feedback to @ubuntu_updates