UbuntuUpdates.org

Package "linux-nvidia-tegra-igx-headers-5.15.0-1008"

Name: linux-nvidia-tegra-igx-headers-5.15.0-1008

Description:

Header files related to Linux kernel version 5.15.0
Latest version: 5.15.0-1008.8
Release: jammy (22.04)
Level: security
Repository: universe
Head package: linux-nvidia-tegra-igx

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "linux-nvidia-tegra-igx-headers-5.15.0-1008"

All arch deb package
APT INSTALL

Other versions of "linux-nvidia-tegra-igx-headers-5.15.0-1008" in Jammy

Repository Area Version
updates universe 5.15.0-1008.8

Changelog

Version: 5.15.0-1008.8 2024-01-31 11:09:44 UTC

  linux-nvidia-tegra-igx (5.15.0-1008.8) jammy; urgency=medium

  * jammy/linux-nvidia-tegra-igx: 5.15.0-1008.8 -proposed tracker (LP: #2049526)

  * apply nvidia-tegra patches 2024 Jan 1-15 (LP: #2049536)
    - [Config] linux-nvidia-tegra-igx: Set CONFIG_OPTEE=y and CONFIG_TEE=y
    - [Packaging] Out-of-tree Tegra modules are now built via separate source
      package
    - [Packaging] Remove out-of-tree Tegra modules from ABI

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/d2024.01.02)

  [ Ubuntu: 5.15.0-1021.21 ]

  * jammy/linux-nvidia-tegra: 5.15.0-1021.21 -proposed tracker (LP: #2049525)
  * apply nvidia-tegra patches 2024 Jan 1-15 (LP: #2049536)
    - NVIDIA: SAUCE: mmc: host: restrict min clk rate to 20MHz
    - NVIDIA: SAUCE: arm64: configs: enable PCIe ethernet
    - NVIDIA: SAUCE: mmc: sdhci-tegra: do not set padpipe_clk_override
    - NVIDIA: SAUCE: arm64: configs: Sanitize defconfig
    - NVIDIA: SAUCE: clocksource/drivers/timer-tegra186: add WDIOC_GETTIMELEFT
      support
    - NVIDIA: SAUCE: clocksource/drivers/timer-tegra186: fix watchdog self-
      pinging.
    - NVIDIA: SAUCE: arm64: configs: enable CONFIG_DMI
    - NVIDIA: SAUCE: mmc: sdhci-tegra: Enable wake on SD card event
    - NVIDIA: SAUCE: mmc: core: Update bus status on sd card removal
    - [Config] Re-enable CONFIG_DMI
  * apply nvidia igx patches for Nov 29 - Dec 8 2023 (LP: #2046011)
    - NVIDIA: SAUCE: arm64: configs: disable pps debug config
    - NVIDIA: SAUCE: net: phy: aquantia: Poll for valid FW ID.
  * apply nvidia igx patches for Oct 19 - Nov 28 2023 (LP: #2045080)
    - NVIDIA: SAUCE: arm64: configs: Sanitize arm64 defconfig
    - NVIDIA: SAUCE: arm64: configs: enable cfs bandwidth for k8s
    - NVIDIA: SAUCE: arm64: config: Disable DMI config
  * apply nvidia igx patches for Sep 20-29 (LP: #2038165)
    - drm/format-helper: Add drm_fb_xrgb8888_to_rgb332()
    - drm/format-helper: Add drm_fb_xrgb8888_to_rgb888()
    - drm/gud: Add GUD_PIXEL_FORMAT_R8
    - drm/gud: Add GUD_PIXEL_FORMAT_RGB332
    - drm/gud: Add GUD_PIXEL_FORMAT_RGB888
    - drm/format-helper: Export drm_fb_clip_offset()
    - drm/format-helper: Rework format-helper memcpy functions
    - drm/format-helper: Add destination-buffer pitch to drm_fb_swab()
    - drm/format-helper: Rework format-helper conversion functions
    - drm/format-helper: Streamline blit-helper interface
    - drm/simpledrm: Enable FB_DAMAGE_CLIPS property
    - drm/simpledrm: Support virtual screen sizes
    - drm/format-helper: Add drm_fb_xrgb8888_to_xrgb2101010_toio()
    - drm/simpledrm: Add [AX]RGB2101010 formats
    - drm/simpledrm: Request memory region in driver
    - drm/format-helper: Add drm_fb_xrgb8888_to_gray8_line()
    - drm/format-helper: Add drm_fb_xrgb8888_to_mono_reversed()
    - drm/repaper: Use format helper for xrgb8888 to monochrome conversion
    - drm/simpledrm: Use fbdev defaults for shadow buffering
    - drm/format-helper: Rename drm_fb_xrgb8888_to_mono_reversed()
    - drm/format-helper: Fix XRGB888 to monochrome conversion
    - drm/format_helper: fix a kernel-doc typo
    - drm/format-helper: Print warning on missing format conversion
    - drm/format-helper: Add RGB888-to-XRGB8888 conversion
    - drm/format-helper: Add RGB565-to-XRGB8888 conversion
    - drm/format-helper: Implement drm_fb_swab() with per-line helpers
    - drm/format-helper: Remove optional byte-swap from line convertion
    - drm/format-helper: Unify the parameters of all per-line conversion helpers
    - drm/format-helper: Share implementation among conversion helpers
    - drm/atomic-helper: Add helper drm_atomic_helper_check_crtc_state()
    - drm/fourcc: Add drm_format_info_bpp() helper
    - drm/format-helper: Fix endianness in drm_fb_*_to_*() conversion helpers
    - drm/simpledrm: Remove mem field from device structure
    - drm/simpledrm: Inline device-init helpers
    - drm/simpledrm: Remove pdev field from device structure
    - drm/simpledrm: Compute framebuffer stride if not set
    - drm/simpledrm: Convert to atomic helpers
    - drm/format-helper: Provide drm_fb_blit()
    - drm/format-helper: Add drm_fb_build_fourcc_list() helper
    - drm/simpledrm: Compute linestride with drm_format_info_min_pitch()
    - drm/simpledrm: Use drm_atomic_get_new_plane_state()
    - drm/simpledrm: Remove !fb check from atomic_update
    - drm/simpledrm: Iterate over damage clips
    - drm/simpledrm: Synchronize access to GEM BOs
    - drm/simpledrm: Set preferred depth from format of scanout buffer
    - drm/simpledrm: Use struct iosys_map consistently
    - drm/simpledrm: Add support for system memory framebuffers
    - drm/simpledrm: Fix an NULL vs IS_ERR() bug
  * apply nvidia igx patches for Aug 29 - Sep 19 (LP: #2036672)
    - NVIDIA: SAUCE: arm64: configs: Sanitize arm64 defconfig
    - NVIDIA: SAUCE: arch: arm64: enable FB_SIMPLE config
    - NVIDIA: SAUCE: (no-up) mm: mprotect: Avoid write-fault handler for dirty
      written PTEs
  * Apply 2023-07-20 + 2023-07-31 IGX PRs from NVIDIA (LP: #2029295)
    - SAUCE: arm64: defconfig: enable CONFIG_ISO9660_FS
  * apply nvidia-tegra patches for Jan 16 (LP: #2049530)
    - NVIDIA: SAUCE: tegra-epl: Set handshake retry count to 20
    - NVIDIA: SAUCE: tegra-epl: publish kernel pm state to FSI
    - NVIDIA: SAUCE: tegra-epl: Set default handshake retry count to 25
    - NVIDIA: SAUCE: arm64: configs: enable pps client configs
    - NVIDIA: SAUCE: arm64: configs: enable NTFS fs
    - NVIDIA: SAUCE: Revert "mmc: host: Apply post auto-tuning correction"
  * jammy/linux-realtime: 5.15.0-1053.59 -proposed tracker (LP: #2048594)
  * Packaging resync (LP: #1786013)
    - [Packaging] remove helper scripts
  * jammy/linux: 5.15.0-92.102 -proposed tracker (LP: #2048614)
  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
  * CVE-2024-0193
    - netfilter: nf_tables: skip set commit for deleted/destroyed sets
  * CVE-2023-6040
    - netfilter: nf
Source diff to previous version
2049536 apply nvidia-tegra patches 2024 Jan 1-15
1786013 Packaging resync
2046011 apply nvidia igx patches for Nov 29 - Dec 8 2023
2045080 apply nvidia igx patches for Oct 19 - Nov 28 2023
2038165 apply nvidia igx patches for Sep 20-29
2036672 apply nvidia igx patches for Aug 29 - Sep 19
2029295 Apply 2023-07-20 + 2023-07-31 IGX PRs from NVIDIA
2049530 apply nvidia-tegra patches for Jan 16
CVE-2024-0193 A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is r
CVE-2023-6040 An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported
CVE-2023-6606 An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker
CVE-2023-6817 A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The func
CVE-2023-6932 A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition c
CVE-2023-6931 A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escala

Version: 5.15.0-1007.7 2024-01-05 01:07:44 UTC

  linux-nvidia-tegra-igx (5.15.0-1007.7) jammy; urgency=medium

  * jammy/linux-nvidia-tegra-igx: 5.15.0-1007.7 -proposed tracker (LP: #2045983)

  * NVIDIA pull request 1018-002v1, 1018-003v1, 1018-004v1 (LP: #2042935)
    - [Packaging] linux-nvidia-tegra-igx: remove dmi-sysfs and surface_gpe
    - [Packaging] linux-nvidia-tegra-igx: remove tegra-se-nvhost

  * usbip: error: failed to open /usr/share/hwdata//usb.ids (LP: #2039439)
    - [Packaging] Make linux-tools-common depend on hwdata

  * Packaging resync (LP: #1786013)
    - [Packaging] resync dkms-build and family

  * apply nvidia igx patches for Nov 29 - Dec 8 2023 (LP: #2046011)
    - NVIDIA: SAUCE: arm64: configs: enable pps client configs
    - NVIDIA: SAUCE: arm64: configs: disable pps debug config
    - NVIDIA: SAUCE: net: phy: aquantia: Poll for valid FW ID.
    - [Packaging] linux-nvidia-tegra-igx: update dkms-versions for tegra-oot-igx
      1.2.1-1
    - [Config] linux-nvidia-tegra-igx: integrate config changes

  * apply nvidia igx patches for Oct 19 - Nov 28 2023 (LP: #2045080)
    - NVIDIA: SAUCE: arm64: configs: enable NTFS fs
    - NVIDIA: SAUCE: arm64: configs: Sanitize arm64 defconfig
    - NVIDIA: SAUCE: arm64: configs: enable cfs bandwidth for k8s
    - NVIDIA: SAUCE: arm64: config: Disable DMI config

  [ Ubuntu: 5.15.0-1020.20 ]

  * jammy/linux-nvidia-tegra: 5.15.0-1020.20 -proposed tracker (LP: #2045981)
  * NVIDIA pull request 1018-002v1, 1018-003v1, 1018-004v1 (LP: #2042935)
    - NVIDIA: SAUCE: arm64: config: Enable BRCMFMAC driver
    - NVIDIA: SAUCE: memory: tegra: Add client for RCE in Tegra234
    - NVIDIA: SAUCE: phy: xusb-tegra186: No redundant pad control
    - usb: typec: ucsi: don't print PPM init deferred errors
    - NVIDIA: SAUCE: arm64: configs: enable NTFS fs
    - NVIDIA: SAUCE: Remove support for summation channel control
    - NVIDIA: SAUCE: hwmon: ina3221: Add support for channel summation disable
    - mmc: sdhci-tegra: Add runtime PM and OPP support
    - [Config] linux-nvidia-tegra: set CONFIG_NTFS_FS as built-in
    - NVIDIA: SAUCE: aquantia: issue PHY reset during phy init
    - NVIDIA: SAUCE: arm: configs: enable QFMT_V2 for quota
    - NVIDIA: SAUCE: arm64: configs: disable LOGO
    - NVIDIA: SAUCE: arm64: config: Disable DMI config
    - NVIDIA: SAUCE: platform: tegra: Add new config TEGRA_PROD_LEGACY
    - NVIDIA: SAUCE: configs: defconfig: enable TPM configs
    - [Config] linux-nvidia-tegra: Integrate config changes
    - NVIDIA: SAUCE: arm64: configs: Sanitize arm64 defconfig
    - NVIDIA: SAUCE: arm64: configs: Enable NFS server support
    - NVIDIA: SAUCE: arm64: configs: Enable dm_multipath driver
    - NVIDIA: SAUCE: arm64: configs: enable few matches for netfliter
    - NVIDIA: SAUCE: pinctrl: tegra: Set SFIO mode to Mux Register
    - Revert "pinctrl: tegra: Add support to display pin function"
    - pinctrl: tegra: Display pin function in pinconf-groups
    - [Packaging] linux-nvidia-tegra: remove dmi-sysfs and surface_gpe
  * usbip: error: failed to open /usr/share/hwdata//usb.ids (LP: #2039439)
    - [Packaging] Make linux-tools-common depend on hwdata
  * Packaging resync (LP: #1786013)
    - [Packaging] remove helper scripts
  * jammy/linux-realtime: 5.15.0-1052.58 -proposed tracker (LP: #2041583)
  * usbip: error: failed to open /usr/share/hwdata//usb.ids (LP: #2039439)
    - [Packaging] Make linux-tools-common depend on hwdata
  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
    - [Packaging] resync update-dkms-versions helper
  * jammy/linux: 5.15.0-91.101 -proposed tracker (LP: #2043452)
  * USB bus error after upgrading to proposed kernel on lunar and jammy
    (LP: #2043197)
    - USB: core: Fix oversight in SuperSpeed initialization
  * jammy/linux: 5.15.0-90.100 -proposed tracker (LP: #2041603)
  * CVE-2023-25775
    - RDMA/irdma: Remove irdma_uk_mw_bind()
    - RDMA/irdma: Remove irdma_sc_send_lsmm_nostag()
    - RDMA/irdma: Remove irdma_cqp_up_map_cmd()
    - RDMA/irdma: Remove irdma_get_hw_addr()
    - RDMA/irdma: Make irdma_uk_cq_init() return a void
    - RDMA/irdma: optimize rx path by removing unnecessary copy
    - RDMA/irdma: Remove enum irdma_status_code
    - RDMA/irdma: Remove excess error variables
    - RDMA/irdma: Prevent zero-length STAG registration
  * CVE-2023-39189
    - netfilter: nfnetlink_osf: avoid OOB read
  * SMC stats: Wrong bucket calculation for payload of exactly 4096 bytes
    (LP: #2039575)
    - net/smc: Fix pos miscalculation in statistics
  * CVE-2023-45871
    - igb: set max size RX buffer when store bad packet is enabled
  * CVE-2023-39193
    - netfilter: xt_sctp: validate the flag_info count
  * CVE-2023-39192
    - netfilter: xt_u32: validate user space input
  * CVE-2023-31085
    - ubi: Refuse attaching if mtd's erasesize is 0
  * CVE-2023-5717
    - perf: Disallow mis-matched inherited group reads
  * CVE-2023-5178
    - nvmet-tcp: Fix a possible UAF in queue intialization setup
  * CVE-2023-5158
    - vringh: don't use vringh_kiov_advance() in vringh_iov_xfer()
  * [SRU][J/L/M] UBUNTU: [Packaging] Make WWAN driver a loadable module
    (LP: #2033406)
    - [Packaging] Make WWAN driver loadable modules
  * HP ProBook 450 G8 Notebook fail to wifi test (LP: #2037513)
    - iwlwifi: mvm: Don't fail if PPAG isn't supported
    - wifi: iwlwifi: fw: skip PPAG for JF
  * usbip: error: failed to open /usr/share/hwdata//usb.ids (LP: #2039439)
    - [Packaging] Make linux-tools-common depend on hwdata
  * scripts/pahole-flags.sh change return to exit 0 (LP: #2035123)
    - SAUCE: scripts/pahole-flags.sh change return to exit 0
  * Unable to use nvme drive to install Ubuntu 23.10 (LP: #2040157)
    - misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to
      probe
  * Jammy update: v5.15.131 upstream stable release (LP: #2039610)
    - erofs: ensure that the post-EOF tails are all zeroed
    - ksmbd: fix wrong DataOffset validation of create context
    - ksmbd: replace one-el
Source diff to previous version
2042935 NVIDIA pull request 1018-002v1, 1018-003v1, 1018-004v1
2039439 usbip: error: failed to open /usr/share/hwdata//usb.ids
1786013 Packaging resync
2046011 apply nvidia igx patches for Nov 29 - Dec 8 2023
2045080 apply nvidia igx patches for Oct 19 - Nov 28 2023
2043197 USB bus error after upgrading to proposed kernel on lunar and jammy
2039575 SMC stats: Wrong bucket calculation for payload of exactly 4096 bytes
2033406 [SRU][J/L/M] UBUNTU: [Packaging] Make WWAN driver a loadable module
2037513 HP ProBook 450 G8 Notebook fail to wifi test
2035123 scripts/pahole-flags.sh change return to exit 0
2040157 Unable to use nvme drive to install Ubuntu 23.10
2039610 Jammy update: v5.15.131 upstream stable release
2039608 Jammy update: v5.15.130 upstream stable release
2039227 Jammy update: v5.15.129 upstream stable release
2038486 Jammy update: v5.15.128 upstream stable release
2038382 Jammy update: v5.15.127 upstream stable release
CVE-2023-25775 Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentia
CVE-2023-39189 A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num
CVE-2023-45871 An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be ade
CVE-2023-39193 A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local pr
CVE-2023-39192 A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw all
CVE-2023-31085 An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd->erasesize), used indirec
CVE-2023-5717 A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local pri
CVE-2023-5178 A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` ...
CVE-2023-5158 A flaw was found in vringh_kiov_advance in drivers/vhost/vringh.c in the host side of a virtio ring in the Linux Kernel. This issue may result in a d
CVE-2023-42754 A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before c
CVE-2023-37453 An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/us

Version: 5.15.0-1006.6 2023-11-15 19:08:13 UTC

  linux-nvidia-tegra-igx (5.15.0-1006.6) jammy; urgency=medium

  * jammy/linux-nvidia-tegra-igx: 5.15.0-1006.6 -proposed tracker (LP: #2041992)

  * CVE-2023-42755
    - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6

  * apply nvidia igx patches for Sep 30 - Oct 18 (LP: #2039730)
    - NVIDIA: SAUCE: phy: xusb-tegra186: No redundant pad control
    - NVIDIA: SAUCE: memory: tegra: Add client for RCE in Tegra234
    - usb: typec: ucsi: don't print PPM init deferred errors
    - [Packaging] linux-nvidia-tegra-igx: update dkms-versions for tegra-oot-igx
      1.1.0-2

  * Split iGPU out-of-tree modules into a separate binary package (LP: #2038953)
    - [Packaging] Support custom control files for standalone modules packages
    - [Packaging] Add iGPU defaults package

  [ Ubuntu: 5.15.0-1019.19 ]

  * jammy/linux-nvidia-tegra: 5.15.0-1019.19 -proposed tracker (LP: #2041991)
  * NVIDIA pull requests 1017-001v3 (LP: #2034622)
    - NVIDIA: SAUCE: thermal: tegra-bpmp: Check if BPMP supports trip points
    - NVIDIA: SAUCE: simplefb: add support to parse fb-memory from DT
    - NVIDIA: SAUCE: memory: tegra: Add bpmp_id and type for nvdla
    - NVIDIA: SAUCE: memory: tegra: Add clients for VI in Tegra234
    - NVIDIA: SAUCE: mailbox: tegra-hsp: Add support for virtualization
    - NVIDIA: SAUCE: memory: tegra: Fix SID override
    - dma-buf: Update obsoluted comments on dma_buf_vmap/vunmap()
    - dma-buf-map: Rename to iosys-map
    - of: Move simple-framebuffer device handling from simplefb to of
    - iosys-map: Add offset to iosys_map_memcpy_to()
    - iosys-map: Add a few more helpers
    - NVIDIA: SAUCE: mtd: spi-nor: support for GD
    - NVIDIA: SAUCE: mmc: host: Apply post auto-tuning correction
    - NVIDIA: SAUCE: fs: eventpoll: Add smp_mb() before waitqueue_active
    - NVIDIA: SAUCE: crypto: tegra: Add Kconfig to support Tegra SE
    - drm/vgem: use shmem helpers
    - NVIDIA: SAUCE: dma-buf-map: Fix-up iosys-map integration
    - NVIDIA: SAUCE: arm64: configs: enable cifs
    - [Config] linux-nvidia-tegra: set CONFIG_CRYPTO_DEV_TEGRA=m
  * CVE-2023-42755
    - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
  * jammy/linux-realtime: 5.15.0-1050.56 -proposed tracker (LP: #2038035)
  * jammy/linux: 5.15.0-88.98 -proposed tracker (LP: #2038055)
  * CVE-2023-4244
    - netfilter: nf_tables: don't skip expired elements during walk
    - netfilter: nf_tables: adapt set backend to use GC transaction API
    - netfilter: nft_set_hash: mark set element as dead when deleting from packet
      path
    - netfilter: nf_tables: GC transaction API to avoid race with control plane
    - netfilter: nf_tables: remove busy mark and gc batch API
    - netfilter: nf_tables: don't fail inserts if duplicate has expired
    - netfilter: nf_tables: fix kdoc warnings after gc rework
    - netfilter: nf_tables: fix GC transaction races with netns and netlink event
      exit path
    - netfilter: nf_tables: GC transaction race with netns dismantle
    - netfilter: nf_tables: GC transaction race with abort path
    - netfilter: nf_tables: use correct lock to protect gc_list
    - netfilter: nf_tables: defer gc run if previous batch is still pending
    - netfilter: nft_dynset: disallow object maps
    - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
  * CVE-2023-42756
    - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
  * CVE-2023-4623
    - net/sched: sch_hfsc: Ensure inner classes have fsc curve
  * PCI BARs larger than 128GB are disabled (LP: #2037403)
    - PCI: Support BAR sizes up to 8TB
  * Fix unstable audio at low levels on Thinkpad P1G4 (LP: #2037077)
    - ALSA: hda/realtek - ALC287 I2S speaker platform support
  * Check for changes relevant for security certifications (LP: #1945989)
    - [Packaging] Add a new fips-checks script
  * Jammy update: v5.15.126 upstream stable release (LP: #2037593)
    - io_uring: gate iowait schedule on having pending requests
    - perf: Fix function pointer case
    - net/mlx5: Free irqs only on shutdown callback
    - arm64: errata: Add workaround for TSB flush failures
    - arm64: errata: Add detection for TRBE write to out-of-range
    - [Config] updateconfigs for ARM64_ERRATUM_ and
      ARM64_WORKAROUND_TSB_FLUSH_FAILURE
    - iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982
    - iommu/arm-smmu-v3: Document MMU-700 erratum 2812531
    - iommu/arm-smmu-v3: Add explicit feature for nesting
    - iommu/arm-smmu-v3: Document nesting-related errata
    - arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux
    - word-at-a-time: use the same return type for has_zero regardless of
      endianness
    - KVM: s390: fix sthyi error handling
    - wifi: cfg80211: Fix return value in scan logic
    - net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx
    - net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()
    - bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing
    - rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length
    - net: dsa: fix value check in bcm_sf2_sw_probe()
    - perf test uprobe_from_different_cu: Skip if there is no gcc
    - net: sched: cls_u32: Fix match key mis-addressing
    - mISDN: hfcpci: Fix potential deadlock on &hc->lock
    - qed: Fix kernel-doc warnings
    - qed: Fix scheduling in a tasklet while getting stats
    - net: annotate data-races around sk->sk_max_pacing_rate
    - net: add missing READ_ONCE(sk->sk_rcvlowat) annotation
    - net: add missing READ_ONCE(sk->sk_sndbuf) annotation
    - net: add missing READ_ONCE(sk->sk_rcvbuf) annotation
    - net: add missing data-race annotations around sk->sk_peek_off
    - net: add missing data-race annotation for sk_ll_usec
    - net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
    - bpf, cpumap: Handle skb as well when clean up ptr_ring
    - bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire
    - ne
Source diff to previous version
2039730 apply nvidia igx patches for Sep 30 - Oct 18
2038953 Split iGPU out-of-tree modules into a separate binary package
2034622 NVIDIA pull requests 1017-001v3
2037403 PCI BARs larger than 128GB are disabled
2037077 Fix unstable audio at low levels on Thinkpad P1G4
1945989 Check for changes relevant for security certifications
2037593 Jammy update: v5.15.126 upstream stable release
2036843 Jammy update: v5.15.125 upstream stable release
2035163 Avoid address overwrite in kernel_connect
2035166 NULL Pointer Dereference During KVM MMU Page Invalidation
2034479 Fix suspend hang on Lenovo workstation
2034745 [regression] Unable to initialize SGX enclaves with XFRM other than 3
2035400 Jammy update: v5.15.124 upstream stable release
2034612 Jammy update: v5.15.123 upstream stable release
1786013 Packaging resync
CVE-2023-42755 wild pointer access in rsvp classifer in the Linux kernel
CVE-2023-42756 A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic
CVE-2023-42753 An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->n
CVE-2023-42752 integer overflows in kmalloc_reserve()
CVE-2023-4881 ** REJECT ** CVE-2023-4881 was wrongly assigned to a bug that was deemed to be a non-security issue by the Linux kernel security team.
CVE-2023-31083 An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSET
CVE-2023-3772 A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADM

Version: 5.15.0-1005.5 2023-10-19 23:06:55 UTC

  linux-nvidia-tegra-igx (5.15.0-1005.5) jammy; urgency=medium

  * jammy/linux-nvidia-tegra-igx: 5.15.0-1005.5 -proposed tracker (LP: #2038956)

  * NVIDIA pull requests 2023-08-07, 2023-08-11, 2023-08-22 (LP: #2031567)
    - [Config] updateconfigs for removal of imx219

  * Split iGPU out-of-tree modules into a separate binary package (LP: #2038953)
    - [Packaging] linux-nvidia-tegra-igx: update dkms-versions for tegra-oot-igx
      1.0.4-1
    - [Packaging] Break out iGPU drivers into a standalone package
    - [Config] linux-nvidia-tegra-igx: updateconfigs for iGPU module changes

  * Jammy update: v5.15.117 upstream stable release (LP: #2030107)
    - [Config] updateconfigs for BLK_DEV_SX8

  * Jammy update: v5.15.118 upstream stable release (LP: #2030239)
    - [Config] updateconfigs for DECNET

  * Please enable Renesas RZ platform serial installer (LP: #2022361)
    - [Config] Mark sh-sci as built-in

  * Packaging resync (LP: #1786013)
    - [Packaging] update update.conf
    - debian/dkms-versions -- update from kernel-versions (main/d2023.08.28)

  * apply nvidia igx patches for Sep 20-29 (LP: #2038165)
    - NVIDIA: SAUCE: memory: tegra: Add bpmp_id and type for nvdla
    - NVIDIA: SAUCE: memory: tegra: Add clients for VI in Tegra234
    - NVIDIA: SAUCE: memory: tegra: Fix SID override
    - dma-buf: Update obsoluted comments on dma_buf_vmap/vunmap()
    - dma-buf-map: Rename to iosys-map
    - of: Move simple-framebuffer device handling from simplefb to of
    - iosys-map: Add offset to iosys_map_memcpy_to()
    - iosys-map: Add a few more helpers
    - NVIDIA: SAUCE: thermal: tegra-bpmp: Check if BPMP supports trip points
    - drm/format-helper: Add drm_fb_xrgb8888_to_rgb332()
    - drm/format-helper: Add drm_fb_xrgb8888_to_rgb888()
    - drm/gud: Add GUD_PIXEL_FORMAT_R8
    - drm/gud: Add GUD_PIXEL_FORMAT_RGB332
    - drm/gud: Add GUD_PIXEL_FORMAT_RGB888
    - drm/format-helper: Export drm_fb_clip_offset()
    - drm/format-helper: Rework format-helper memcpy functions
    - drm/format-helper: Add destination-buffer pitch to drm_fb_swab()
    - drm/format-helper: Rework format-helper conversion functions
    - drm/format-helper: Streamline blit-helper interface
    - drm/simpledrm: Enable FB_DAMAGE_CLIPS property
    - drm/simpledrm: Support virtual screen sizes
    - drm/format-helper: Add drm_fb_xrgb8888_to_xrgb2101010_toio()
    - drm/simpledrm: Add [AX]RGB2101010 formats
    - drm/simpledrm: Request memory region in driver
    - drm/format-helper: Add drm_fb_xrgb8888_to_gray8_line()
    - drm/format-helper: Add drm_fb_xrgb8888_to_mono_reversed()
    - drm/repaper: Use format helper for xrgb8888 to monochrome conversion
    - drm/simpledrm: Use fbdev defaults for shadow buffering
    - drm/format-helper: Rename drm_fb_xrgb8888_to_mono_reversed()
    - drm/format-helper: Fix XRGB888 to monochrome conversion
    - drm/format_helper: fix a kernel-doc typo
    - drm/format-helper: Print warning on missing format conversion
    - drm/format-helper: Add RGB888-to-XRGB8888 conversion
    - drm/format-helper: Add RGB565-to-XRGB8888 conversion
    - drm/format-helper: Implement drm_fb_swab() with per-line helpers
    - drm/format-helper: Remove optional byte-swap from line convertion
    - drm/format-helper: Unify the parameters of all per-line conversion helpers
    - drm/format-helper: Share implementation among conversion helpers
    - drm/atomic-helper: Add helper drm_atomic_helper_check_crtc_state()
    - drm/fourcc: Add drm_format_info_bpp() helper
    - drm/format-helper: Fix endianness in drm_fb_*_to_*() conversion helpers
    - drm/simpledrm: Remove mem field from device structure
    - drm/simpledrm: Inline device-init helpers
    - drm/simpledrm: Remove pdev field from device structure
    - drm/simpledrm: Compute framebuffer stride if not set
    - drm/simpledrm: Convert to atomic helpers
    - drm/format-helper: Provide drm_fb_blit()
    - drm/format-helper: Add drm_fb_build_fourcc_list() helper
    - drm/simpledrm: Compute linestride with drm_format_info_min_pitch()
    - drm/simpledrm: Use drm_atomic_get_new_plane_state()
    - drm/simpledrm: Remove !fb check from atomic_update
    - drm/simpledrm: Iterate over damage clips
    - drm/simpledrm: Synchronize access to GEM BOs
    - drm/simpledrm: Set preferred depth from format of scanout buffer
    - drm/simpledrm: Use struct iosys_map consistently
    - drm/simpledrm: Add support for system memory framebuffers
    - drm/simpledrm: Fix an NULL vs IS_ERR() bug
    - drm/vgem: use shmem helpers

  * Create modprobe configuration for the IGX kernel (LP: #2037760)
    - [Packaging] linux-nvidia-tegra-igx: Update modprobe configuration

  * apply nvidia igx patches for Aug 29 - Sep 19 (LP: #2036672)
    - NVIDIA: SAUCE: arm64: configs: Sanitize arm64 defconfig
    - NVIDIA: SAUCE: simplefb: add support to parse fb-memory from DT
    - NVIDIA: SAUCE: arch: arm64: enable FB_SIMPLE config
    - NVIDIA: SAUCE: (no-up) mm: mprotect: Avoid write-fault handler for dirty
      written PTEs
    - [Config] linux-nvidia-tegra-igx: integrate config changes

  [ Ubuntu: 5.15.0-1018.18 ]

  * jammy/linux-nvidia-tegra: 5.15.0-1018.18 -proposed tracker (LP: #2038680)
  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/d2023.09.14)
  * Jammy update: v5.15.117 upstream stable release (LP: #2030107)
    - [Config] updateconfigs for BLK_DEV_SX8
  * Jammy update: v5.15.118 upstream stable release (LP: #2030239)
    - [Config] updateconfigs for DECNET
  * Please enable Renesas RZ platform serial installer (LP: #2022361)
    - [Config] Mark sh-sci as built-in
  * NVIDIA pull requests 1017-001v3 (LP: #2034622)
    - NVIDIA: SAUCE: driver: cpufreq: remove volatile as not needed
    - NVIDIA: SAUCE: config: Disable CONFIG_LOCALVERSION_AUTO
    - NVIDIA: SAUCE: code-owners: Populate OWNERS file
    - NVIDIA: SAUCE: mailbox: tegra-hsp: Add sm ops route_irq & set_irq
    - NVIDIA: SAUCE: arch: a
Source diff to previous version
2031567 NVIDIA pull requests 2023-08-07, 2023-08-11, 2023-08-22
2038953 Split iGPU out-of-tree modules into a separate binary package
2030107 Jammy update: v5.15.117 upstream stable release
2030239 Jammy update: v5.15.118 upstream stable release
2022361 Please enable Renesas RZ platform serial installer
1786013 Packaging resync
2038165 apply nvidia igx patches for Sep 20-29
2037760 Create modprobe configuration for the IGX kernel
2036672 apply nvidia igx patches for Aug 29 - Sep 19
2034622 NVIDIA pull requests 1017-001v3
2036675 5.15.0-85 live migration regression
2035181 Regression for ubuntu_bpf test build on Jammy 5.15.0-85.95
2034447 `refcount_t: underflow; use-after-free.` on hidon w/ 5.15.0-85-generic
2033122 Request backport of xen timekeeping performance improvements
2033007 kdump doesn't work with UEFI secure boot and kernel lockdown enabled on ARM64
2019880 ubuntu_kernel_selftests:net:vrf-xfrm-tests.sh: 8 failed test cases on jammy/fips
2019868 ubuntu_kernel_selftests:net:tls: 88 failed test cases on jammy/fips
2032164 A general-proteciton exception during guest migration to unsupported PKRU machine
2028122 Fix unreliable ethernet cable detection on I219 NIC
2031333 Need to get fine-grained control for FAN(TFN) Participant.
2030924 [SRU][Ubuntu 22.04.1] Unable to interpret the frequency values in cpuinfo_min_freq and cpuino_max_freq sysfs files.
2032176 Crashing with CPU soft lock on GA kernel 5.15.0.79.76 and HWE kernel 5.19.0-46.47-22.04.1
2032690 Jammy update: v5.15.122 upstream stable release
2032689 Jammy update: v5.15.121 upstream stable release
2032688 Jammy update: v5.15.120 upstream stable release
2032683 Jammy update: v5.15.119 upstream stable release
CVE-2023-4569 A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to
CVE-2023-40283 An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the
CVE-2023-4194 A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized acc
CVE-2023-4155 A flaw was found in KVM AMD Secure Encrypted Virtualization (SEV) in t ...
CVE-2023-1206 A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN floo
CVE-2023-4273 A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, wh
CVE-2023-4128 A use-after-free flaw was found in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in the Linux Kernel. This flaw allows a local a
CVE-2023-3863 A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special

Version: 5.15.0-1004.4 2023-09-21 13:06:51 UTC

  linux-nvidia-tegra-igx (5.15.0-1004.4) jammy; urgency=medium

  * jammy/linux-nvidia-tegra-igx: 5.15.0-1004.4 -proposed tracker (LP: #2033699)

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts

  * apply nvidia igx patches for Aug 22-28 (LP: #2033315)
    - NVIDIA: SAUCE: config: Disable CONFIG_LOCALVERSION_AUTO
    - NVIDIA: SAUCE: arch: arm64: enable HDA_INTEL config

  * Include out-of-tree IGX modules in kernel build (LP: #2028200)
    - [Packaging] linux-nvidia-tegra-igx: update dkms-versions for tegra-oot-igx
      1.0.2-2

  * apply nvidia igx patches for Aug 1-7 (LP: #2030815)
    - NVIDIA: SAUCE: arm64: config: Enable Misc binary config
    - [Config] linux-nvidia-tegra-igx: Set CONFIG_BINFMT_MISC as built-in

  * Re-enable CONFIG_MEMCG on the Tegra kernels (LP: #2032954)
    - [Config] linux-nvidia-tegra-igx: Re-enable CONFIG_MEMCG to match j:realtime

  [ Ubuntu: 5.15.0-1017.17 ]

  * jammy/linux-nvidia-tegra: 5.15.0-1017.17 -proposed tracker (LP: #2033697)
  * Re-enable CONFIG_MEMCG on the Tegra kernels (LP: #2032954)
    - [Config] linux-nvidia-tegra: Re-enable CONFIG_MEMCG
  * NVIDIA pull requests 2023-08-07, 2023-08-11, 2023-08-22 (LP: #2031567)
    - SAUCE: memory: tegra: add nvlink clients for NVGPU
    - SAUCE: arm64: configs: Disable BRCMFMAC driver
    - SAUCE: arm64: config: Enable ZRAM config as module
    - SAUCE: soc/tegra: cbb: set ERD bit during resume for error interrupt
    - SAUCE: tty/serial: tegra-tcu: skip esc and ccplex_id
    - SAUCE: arm64: configs: Set USB_CONFIGFS_F_ACC to y
    - SAUCE: arm64: configs: Sanitize arm64 defconfig
    - SAUCE: arm64: config: Enable configs for nf_tables
    - SAUCE: ina3221: add support for summation channel control
    - NVIDIA: SAUCE: arm64: defconfig: Enable CONFIG_DEVFREQ_THERMAL
    - NVIDIA: SAUCE: configs: Sync defconfigs using make defconfig
    - NVIDIA: SAUCE: configs: Enable nvme target, tcp driver
    - NVIDIA: SAUCE: driver: cpufreq: use refclk delta based loop instead of
      udelay
    - NVIDIA: SAUCE: arm64: configs: disable inbuilt IMX219 driver
    - [Config] linux-nvidia-tegra: integrate defconfig changes
  * jammy/linux-realtime: 5.15.0-1045.50 -proposed tracker (LP: #2030402)
  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/2023.08.07)
  * Jammy real-time patch set update: v5.15.125-rt66 (LP: #2031687)
    - rcu/tree: Protect rcu_rdp_is_offloaded() invocations on RT
    - sched: Introduce migratable()
    - arm64: mm: Make arch_faults_on_old_pte() check for migratability
    - printk: rename printk cpulock API and always disable interrupts
    - console: add write_atomic interface
    - kdb: only use atomic consoles for output mirroring
    - serial: 8250: implement write_atomic
    - printk: relocate printk_delay()
    - printk: call boot_delay_msec() in printk_delay()
    - printk: use seqcount_latch for console_seq
    - printk: introduce kernel sync mode
    - printk: move console printing to kthreads
    - printk: add console handover
    - printk: add pr_flush()
    - printk: Enhance the condition check of msleep in pr_flush()
    - sched: Switch wait_task_inactive to HRTIMER_MODE_REL_HARD
    - kthread: Move prio/affinite change into the newly created thread
    - genirq: Move prio assignment into the newly created thread
    - genirq: Disable irqfixup/poll on PREEMPT_RT.
    - efi: Allow efi=runtime
    - mm: Disable zsmalloc on PREEMPT_RT
    - net/core: disable NET_RX_BUSY_POLL on PREEMPT_RT
    - samples/kfifo: Rename read_lock/write_lock
    - crypto: testmgr - Only disable migration in crypto_disable_simd_for_test()
    - mm: Allow only SLUB on PREEMPT_RT
    - mm: page_alloc: Use migrate_disable() in drain_local_pages_wq()
    - mm/scatterlist: Replace the !preemptible warning in sg_miter_stop()
    - mm: Disable NUMA_BALANCING_DEFAULT_ENABLED and TRANSPARENT_HUGEPAGE on
      PREEMPT_RT
    - x86/softirq: Disable softirq stacks on PREEMPT_RT
    - Documentation/kcov: Include types.h in the example.
    - Documentation/kcov: Define `ip' in the example.
    - kcov: Allocate per-CPU memory on the relevant node.
    - kcov: Avoid enable+disable interrupts if !in_task().
    - kcov: Replace local_irq_save() with a local_lock_t.
    - net/sched: sch_ets: properly init all active DRR list handles
    - gen_stats: Add instead Set the value in __gnet_stats_copy_basic().
    - gen_stats: Add gnet_stats_add_queue().
    - mq, mqprio: Use gnet_stats_add_queue().
    - gen_stats: Move remaining users to gnet_stats_add_queue().
    - u64_stats: Introduce u64_stats_set()
    - net: sched: Protect Qdisc::bstats with u64_stats
    - net: sched: Use _bstats_update/set() instead of raw writes
    - net: sched: Merge Qdisc::bstats and Qdisc::cpu_bstats data types
    - net: sched: Remove Qdisc::running sequence counter
    - net: sched: Allow statistics reads from softirq.
    - net: sched: fix logic error in qdisc_run_begin()
    - net: sched: remove one pair of atomic operations
    - net: stats: Read the statistics in ___gnet_stats_copy_basic() instead of
      adding.
    - net: sched: gred: dynamically allocate tc_gred_qopt_offload
    - sched/rt: Annotate the RT balancing logic irqwork as IRQ_WORK_HARD_IRQ
    - irq_work: Allow irq_work_sync() to sleep if irq_work() no IRQ support.
    - irq_work: Handle some irq_work in a per-CPU thread on PREEMPT_RT
    - irq_work: Also rcuwait for !IRQ_WORK_HARD_IRQ on PREEMPT_RT
    - irq_poll: Use raise_softirq_irqoff() in cpu_dead notifier
    - smp: Wake ksoftirqd on PREEMPT_RT instead do_softirq().
    - fs/namespace: Boost the mount_lock.lock owner instead of spinning on
      PREEMPT_RT.
    - fscache: Use only one fscache_object_cong_wait.
    - sched: Clean up the might_sleep() underscore zoo
    - sched: Make cond_resched_*lock() variants consistent vs. might_sleep()
    - sched: Remove preempt_offset argument from __might_sleep()
    - sched: Cleanup might_sleep() printks

1786013 Packaging resync
2033315 apply nvidia igx patches for Aug 22-28
2028200 Include out-of-tree IGX modules in kernel build
2030815 apply nvidia igx patches for Aug 1-7
2032954 Re-enable CONFIG_MEMCG on the Tegra kernels
2031567 NVIDIA pull requests 2023-08-07, 2023-08-11, 2023-08-22
2031687 Jammy real-time patch set update: v5.15.125-rt66
2031093 libgnutls report \
2015400 losetup with mknod fails on jammy with kernel 5.15.0-69-generic
2029401 Jammy update: v5.15.116 upstream stable release
2028550 Backport support to tolerate ZSTD compressed firmware files
2016398 stacked overlay file system mounts that have chroot() called against them appear to be getting locked (by the kernel most likely?)
2026028 usbrtl sometimes doesn't reload firmware
2029138 cifs: fix mid leak during reconnection after timeout threshold
2028799 Jammy update: v5.15.115 upstream stable release
2028701 Jammy update: v5.15.114 upstream stable release
2028408 Jammy update: v5.15.113 upstream stable release
2026607 Jammy update: v5.15.112 upstream stable release
CVE-2022-40982 Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may al
CVE-2023-4015 netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
CVE-2023-3995 ** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is a duplicate of CVE-2023-4147.
CVE-2023-3777 netfilter: nf_tables: skip bound chain on rule flush
CVE-2023-20593 An issue in \u201cZen 2\u201d CPUs, under specific microarchitectural ...
CVE-2023-4004 A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a
CVE-2023-2898 There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user t
CVE-2023-31084 An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNI


About   -   Send Feedback to @ubuntu_updates