UbuntuUpdates.org

Package "linux-headers-6.17.0-41-generic"

Name: linux-headers-6.17.0-41-generic

Description:

Linux kernel headers for version 6.17.0
Latest version: 6.17.0-41.41
Release: questing (25.10)
Level: security
Repository: main
Head package: linux

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "linux-headers-6.17.0-41-generic"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "linux-headers-6.17.0-41-generic" in Questing

Repository Area Version
updates main 6.17.0-41.41
proposed main 6.17.0-41.41
PPA: Canonical Kernel Team 6.17.0-41.41

Changelog

Version: 6.17.0-41.41 2026-07-20 20:08:43 UTC
No changelog available yet.
Source diff to previous version

Version: 6.17.0-40.40 2026-06-26 08:07:57 UTC

  linux (6.17.0-40.40) questing; urgency=medium

  * questing/linux: 6.17.0-40.40 -proposed tracker (LP: #2157631)

  * CVE-2026-43037
    - ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
Source diff to previous version
CVE-2026-43037 In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following

Version: 6.17.0-35.35 2026-06-02 10:08:04 UTC

  linux (6.17.0-35.35) questing; urgency=medium

  * GRO managed-frag use-after-free leading to local privilege escalation
    (LP: #2154172)
    - net: gro: don't merge zcopy skbs
Source diff to previous version
2154172 GRO managed-frag use-after-free leading to local privilege escalation

Version: 6.17.0-29.29 2026-05-19 14:08:15 UTC

  linux (6.17.0-29.29) questing; urgency=medium

  * questing/linux: 6.17.0-29.29 -proposed tracker (LP: #2151099)

  * CVE-2026-31419
    - net: bonding: fix use-after-free in bond_xmit_broadcast()

  * CVE-2026-31431
    - crypto: algif_aead - Revert to operating out-of-place
    - crypto: algif_aead - snapshot IV for async AEAD requests
    - crypto: authencesn - Do not place hiseq at end of dst for out-of-place
      decryption
    - crypto: authencesn - Fix src offset when decrypting in-place
    - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
    - crypto: algif_aead - Fix minimum RX size check for decryption

  * CVE-2026-31533
    - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption

  * CVE-2026-31504
    - net: fix fanout UAF in packet_release() via NETDEV_UP race

 -- Manuel Diewald <email address hidden> Tue, 05 May 2026 15:53:32 +0200
Source diff to previous version
CVE-2026-31419 In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broadcast() bond_xmit_broadcast()
CVE-2026-31431 In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commi
CVE-2026-31533 In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption The -EBUS
CVE-2026-31504 In the Linux kernel, the following vulnerability has been resolved: net: fix fanout UAF in packet_release() via NETDEV_UP race `packet_release()` h

Version: 6.17.0-23.23 2026-05-04 15:36:13 UTC

  linux (6.17.0-23.23) questing; urgency=medium

  * questing/linux: 6.17.0-23.23 -proposed tracker (LP: #2147920)

  * CVE-2026-23231
    - netfilter: nf_tables: fix use-after-free in nf_tables_addchain()

  * macvlan: observe an RCU grace period in macvlan_common_newlink() error
    path (LP: #2144380) // CVE-2026-23209
    - macvlan: observe an RCU grace period in macvlan_common_newlink() error
      path

  * Dell Machines cannot boot into OS with 6.17.0-1012-oem (LP: #2144522)
    - drm/amd: Disable MES LR compute W/A
    - drm/amd: Set minimum version for set_hw_resource_1 on gfx11 to 0x52

  * CVE-2026-23112
    - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec

 -- Manuel Diewald <email address hidden> Sat, 11 Apr 2026 22:54:06 +0200
2144380 macvlan: observe an RCU grace period in macvlan_common_newlink() error path
2144522 Dell Machines cannot boot into OS with 6.17.0-1012-oem
CVE-2026-23231 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() nf_tables_addc
CVE-2026-23209 In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlan_common_newlink() valis provided a nice r
CVE-2026-23112 In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec nvmet_tcp_build_pdu_i


About   -   Send Feedback to @ubuntu_updates