UbuntuUpdates.org

Package "linux-headers-5.14.0-1059-oem"

Name: linux-headers-5.14.0-1059-oem

Description:

Linux kernel headers for version 5.14.0 on 64 bit x86 SMP
Latest version: 5.14.0-1059.67
Release: focal (20.04)
Level: security
Repository: main
Head package: linux-oem-5.14

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "linux-headers-5.14.0-1059-oem"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "linux-headers-5.14.0-1059-oem" in Focal

Repository Area Version
updates main 5.14.0-1059.67
PPA: Canonical Kernel Team 5.14.0-1059.67

Changelog

Version: 5.14.0-1054.61 2022-10-19 10:07:23 UTC

  linux-oem-5.14 (5.14.0-1054.61) focal; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Config] Add PAHOLE_HAS_SPLIT_BTF config

  * CVE-2022-2602
    - SAUCE: io_uring/af_unix: defer registered files gc to io_uring release
    - SAUCE: io_uring/af_unix: fix memleak during unix GC

  * CVE-2022-41674
    - mac80211: fix memory leaks with element parsing
    - SAUCE: wifi: cfg80211: fix u8 overflow in
      cfg80211_update_notlisted_nontrans()
    - SAUCE: wifi: cfg80211/mac80211: reject bad MBSSID elements
    - SAUCE: wifi: cfg80211: ensure length byte is present before access
    - SAUCE: wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
    - SAUCE: wifi: cfg80211: update hidden BSSes to avoid WARN_ON

  * CVE-2022-42722
    - SAUCE: wifi: mac80211: fix crash in beacon protection for P2P-device

  * CVE-2022-42721
    - SAUCE: wifi: cfg80211: avoid nontransmitted BSS list corruption

  * CVE-2022-42720
    - SAUCE: wifi: cfg80211: fix BSS refcounting bugs

  * CVE-2022-42719
    - SAUCE: wifi: mac80211: fix MBSSID parsing use-after-free

 -- Stefan Bader <email address hidden> Fri, 14 Oct 2022 14:45:08 +0200
Source diff to previous version
1786013 Packaging resync
CVE-2022-2602 io_uring/af_unix: defer registered files gc to io_uring release
CVE-2022-41674 An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211_bss_i
CVE-2022-42722 In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer
CVE-2022-42721 A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (a
CVE-2022-42720 Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local
CVE-2022-42719 A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by atta

Version: 5.14.0-1051.58 2022-08-30 11:06:22 UTC

  linux-oem-5.14 (5.14.0-1051.58) focal; urgency=medium

  * focal/linux-oem-5.14: 5.14.0-1051.58 -proposed tracker (LP: #1987690)

  * Miscellaneous upstream changes
    - Revert "drm/amd/display: Apply w/a for hard hang on HPD"

 -- Timo Aaltonen <email address hidden> Thu, 25 Aug 2022 20:28:21 +0300
Source diff to previous version

Version: 5.14.0-1050.57 2022-08-25 21:07:05 UTC

  linux-oem-5.14 (5.14.0-1050.57) focal; urgency=medium

  * focal/linux-oem-5.14: 5.14.0-1050.57 -proposed tracker (LP: #1983948)

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/2022.08.08)

  * CVE-2022-36946
    - netfilter: nf_queue: do not allow packet truncation below transport header
      offset

  * Miscellaneous upstream changes
    - drm/amd/display: Apply w/a for hard hang on HPD

 -- Timo Aaltonen <email address hidden> Fri, 19 Aug 2022 10:22:04 +0300
Source diff to previous version
1786013 Packaging resync
CVE-2022-36946 nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) beca

Version: 5.14.0-1049.56 2022-08-23 23:07:04 UTC

  linux-oem-5.14 (5.14.0-1049.56) focal; urgency=medium

  * focal/linux-oem-5.14: 5.14.0-1049.56 -proposed tracker (LP: #1985873)

  * CVE-2021-33655
    - fbcon: Disallow setting font bigger than screen size
    - fbcon: Prevent that screen size is smaller than font size
    - fbmem: Check virtual screen sizes in fb_set_var()

  * AMD Rembrandt: DP tunneling fails with Thunderbolt monitors (LP: #1983143)
    - SAUCE: drm/amd: Fix DP Tunneling with Thunderbolt monitors
    - drm/amd/display: Fix for dmub outbox notification enable
    - Revert "drm/amd/display: Fix DPIA outbox timeout after S3/S4/reset"
    - drm/amd/display: Reset link encoder assignments for GPU reset
    - drm/amd/display: Fix DPIA outbox timeout after S3/S4/reset
    - drm/amd/display: Fix new dmub notification enabling in DM
    - SAUCE: thunderbolt: Add DP out resource when DP tunnel is discovered.

  * Enable speaker and mute LEDs for HP laptops (LP: #1982990)
    - ALSA: hda/realtek: Enable speaker and mute LEDs for HP laptops

  * Audio mute key (f5) LED and Mic mute key (f8) LED are no function on HP
    440/450/640/650 G9 (LP: #1982716)
    - ALSA: hda/realtek: fix mute/micmute LEDs for HP machines

  * CVE-2021-33061
    - ixgbe: add improvement for MDD response functionality

  * Miscellaneous upstream changes
    - ixgbe: add the ability for the PF to disable VF link state
    - ixgbevf: add disable link state

 -- Timo Aaltonen <email address hidden> Fri, 12 Aug 2022 12:36:48 +0300
Source diff to previous version
CVE-2021-33655 When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.
CVE-2021-33061 Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable d

Version: 5.14.0-1048.55 2022-08-10 11:06:29 UTC

  linux-oem-5.14 (5.14.0-1048.55) focal; urgency=medium

  * CVE-2022-2585
    - SAUCE: posix-cpu-timers: Cleanup CPU timers before freeing them during exec

  * CVE-2022-2586
    - SAUCE: netfilter: nf_tables: do not allow SET_ID to refer to another table
    - SAUCE: netfilter: nf_tables: do not allow CHAIN_ID to refer to another table
    - SAUCE: netfilter: nf_tables: do not allow RULE_ID to refer to another chain

  * CVE-2022-2588
    - SAUCE: net_sched: cls_route: remove from list when handle is 0

 -- Thadeu Lima de Souza Cascardo <email address hidden> Mon, 08 Aug 2022 09:48:50 -0300


About   -   Send Feedback to @ubuntu_updates