Package "linux-riscv-headers-6.17.0-41"
| Name: |
linux-riscv-headers-6.17.0-41
|
Description: |
Header files related to Linux kernel version 6.17.0
|
| Latest version: |
6.17.0-41.41.1 |
| Release: |
questing (25.10) |
| Level: |
security |
| Repository: |
main |
| Head package: |
linux-riscv |
Links
Download "linux-riscv-headers-6.17.0-41"
Other versions of "linux-riscv-headers-6.17.0-41" in Questing
Changelog
|
linux-riscv (6.17.0-40.40.1) questing; urgency=medium
* questing/linux-riscv: 6.17.0-40.40.1 -proposed tracker (LP: #2157627)
[ Ubuntu: 6.17.0-40.40 ]
* questing/linux: 6.17.0-40.40 -proposed tracker (LP: #2157631)
* CVE-2026-43037
- ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
|
| Source diff to previous version |
| CVE-2026-43037 |
In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following |
|
|
linux-riscv (6.17.0-35.35.1) questing; urgency=medium
[ Ubuntu: 6.17.0-35.35 ]
* GRO managed-frag use-after-free leading to local privilege escalation
(LP: #2154172)
- net: gro: don't merge zcopy skbs
[ Ubuntu: 6.17.0-32.32 ]
* apparmor (LP: #2151747)
- SAUCE: apparmor: pass big_resp to handler
- SAUCE: apparmor: remove redundant kref_init for listener->count
- SAUCE: apparmor: fix NULL pointer dereference in unpack_pdb
* apparmor (LP: #2151747) // CVE-2026-47337
- SAUCE: apparmor: fix NULL pointer dereference in bind_map_addr
* apparmor (LP: #2151747) // CVE-2026-47334
- SAUCE: apparmor: fix sleep prone memory allocation under a spin_lock
* apparmor (LP: #2151747) // CVE-2026-47333
- SAUCE: apparmor: fix dfa unpacking size of the notification filter
* apparmor (LP: #2151747) // CVE-2026-47332
- SAUCE: apparmor: fix size check against type instead of pointer
* apparmor: LLVM/clang build failure due to uninitialized variable in
notify.c (LP: #2148809) // CVE-2026-47330
- SAUCE: apparmor: initialize variable used in uninitialized context
* apparmor (LP: #2151747) // CVE-2026-47329
- SAUCE: apparmor: fix name validation bypass on notification
* apparmor (LP: #2151747) // CVE-2026-47327 // CVE-2026-47328
- SAUCE: apparmor: fix glob memory leak after kstrdup
* apparmor (LP: #2151747) // CVE-2026-47326
- SAUCE: apparmor: fix inverted NULL check after aa_get_buffer
[ Ubuntu: 6.17.0-31.31 ]
* questing/linux: 6.17.0-31.31 -proposed tracker (LP: #2153765)
* Packaging resync (LP: #1786013)
- [Packaging] update annotations scripts
* CVE-2026-46300
- net: skbuff: preserve shared-frag marker during coalescing
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
* net/rds: reset op_nents when zerocopy page pin fails (LP: #2153962)
- net/rds: reset op_nents when zerocopy page pin fails
* CVE-2026-46333
- ptrace: slightly saner 'get_dumpable()' logic
* CVE-2026-43500
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets
- rxrpc: Fix potential UAF after skb_unshare() failure
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
* CVE-2026-31676 // CVE-2026-43500
- rxrpc: only handle RESPONSE during service challenge
* CVE-2026-43284
- xfrm: esp: avoid in-place decrypt on shared skb frags
-- Edoardo Canepa <email address hidden> Tue, 26 May 2026 21:04:20 +0200
|
| Source diff to previous version |
| 2154172 |
GRO managed-frag use-after-free leading to local privilege escalation |
| 2151747 |
AppArmor Vulnerabilities |
| 2148809 |
apparmor: LLVM/clang build failure due to uninitialized variable in notify.c |
| 1786013 |
Packaging resync |
| 2153962 |
net/rds: reset op_nents when zerocopy page pin fails |
| CVE-2026-47337 |
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible N ... |
| CVE-2026-47334 |
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which in ... |
| CVE-2026-47333 |
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which ca ... |
| CVE-2026-47332 |
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which in ... |
| CVE-2026-47330 |
Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which ca ... |
| CVE-2026-47329 |
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to val ... |
| CVE-2026-47327 |
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible N ... |
| CVE-2026-47328 |
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which in ... |
| CVE-2026-47326 |
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a memory lea ... |
| CVE-2026-46300 |
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() c |
| CVE-2026-46333 |
In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fu |
| CVE-2026-43500 |
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA |
| CVE-2026-31676 |
In the Linux kernel, the following vulnerability has been resolved: rxrpc: only handle RESPONSE during service challenge Only process RESPONSE pack |
| CVE-2026-43284 |
In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can atta |
|
|
linux-riscv (6.17.0-29.29.1) questing; urgency=medium
* questing/linux-riscv: 6.17.0-29.29.1 -proposed tracker (LP: #2151095)
[ Ubuntu: 6.17.0-29.29 ]
* questing/linux: 6.17.0-29.29 -proposed tracker (LP: #2151099)
* CVE-2026-31419
- net: bonding: fix use-after-free in bond_xmit_broadcast()
* CVE-2026-31431
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place
decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- crypto: algif_aead - Fix minimum RX size check for decryption
* CVE-2026-31533
- net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
* CVE-2026-31504
- net: fix fanout UAF in packet_release() via NETDEV_UP race
-- Manuel Diewald <email address hidden> Wed, 06 May 2026 22:06:25 +0200
|
| Source diff to previous version |
| CVE-2026-31419 |
In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broadcast() bond_xmit_broadcast() |
| CVE-2026-31431 |
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commi |
| CVE-2026-31533 |
In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption The -EBUS |
| CVE-2026-31504 |
In the Linux kernel, the following vulnerability has been resolved: net: fix fanout UAF in packet_release() via NETDEV_UP race `packet_release()` h |
|
|
linux-riscv (6.17.0-23.23.1) questing; urgency=medium
* questing/linux-riscv: 6.17.0-23.23.1 -proposed tracker (LP: #2147916)
[ Ubuntu: 6.17.0-23.23 ]
* questing/linux: 6.17.0-23.23 -proposed tracker (LP: #2147920)
* CVE-2026-23231
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
* macvlan: observe an RCU grace period in macvlan_common_newlink() error
path (LP: #2144380) // CVE-2026-23209
- macvlan: observe an RCU grace period in macvlan_common_newlink() error
path
* Dell Machines cannot boot into OS with 6.17.0-1012-oem (LP: #2144522)
- drm/amd: Disable MES LR compute W/A
- drm/amd: Set minimum version for set_hw_resource_1 on gfx11 to 0x52
* CVE-2026-23112
- nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
-- Sarah Emery <email address hidden> Wed, 15 Apr 2026 11:37:10 +0200
|
| 2144380 |
macvlan: observe an RCU grace period in macvlan_common_newlink() error path |
| 2144522 |
Dell Machines cannot boot into OS with 6.17.0-1012-oem |
| CVE-2026-23231 |
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() nf_tables_addc |
| CVE-2026-23209 |
In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlan_common_newlink() valis provided a nice r |
| CVE-2026-23112 |
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec nvmet_tcp_build_pdu_i |
|
About
-
Send Feedback to @ubuntu_updates
