[ubuntu/jammy-security] linux-intel-iotg 5.15.0-1036.41 (Accepted)

[Andy Whitcroft]

linux-intel-iotg (5.15.0-1036.41) jammy; urgency=medium

  * jammy/linux-intel-iotg: 5.15.0-1036.41 -proposed tracker (LP: #2026434)

  [ Ubuntu: 5.15.0-78.85 ]

  * jammy/linux: 5.15.0-78.85 -proposed tracker (LP: #2026448)
  * CVE-2023-35001
    - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  * CVE-2023-31248
    - netfilter: nf_tables: do not ignore genmask when looking up chain by id
  * CVE-2023-3389
    - io_uring: hold uring mutex around poll removal
  * CVE-2023-3439
    - mctp: Add refcounts to mctp_dev
    - mctp: Allow MCTP on tun devices
    - mctp: make __mctp_dev_get() take a refcount hold
    - mctp: defer the kfree of object mdev->addrs
  * CVE-2023-3390
    - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  * CVE-2023-3090
    - ipvlan:Fix out-of-bounds caused by unclear skb->cb
  * Packaging resync (LP: #1786013)
    - [Packaging] resync update-dkms-versions helper

linux-intel-iotg (5.15.0-1035.40) jammy; urgency=medium

  * jammy/linux-intel-iotg: 5.15.0-1035.40 -proposed tracker (LP: #2027684)

  * add Fintek F81604 can controller support (LP: #2022887)
    - can: skb: move can_dropped_invalid_skb() and can_skb_headroom_valid() to
      skb.c
    - can: skb: drop tx skb if in listen only mode
    - can: skb: unify skb CAN frame identification helpers
    - can: dev: fix skb drop check
    - can: usb: f81604: add Fintek F81604 support
    - [Config]: updateconfigs for CONFIG_CAN_F81604

Date: 2023-07-17 15:29:08.341835+00:00
Changed-By: Jian Hui Lee <jianhui.lee at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-intel-iotg/5.15.0-1036.41
-------------- next part --------------
Sorry, changesfile not available.