[ubuntu/jammy-security] linux-oem-5.17 5.17.0-1032.33 (Accepted)

[Andy Whitcroft]

linux-oem-5.17 (5.17.0-1032.33) jammy; urgency=medium

  * jammy/linux-oem-5.17: 5.17.0-1032.33 -proposed tracker (LP: #2019648)

  * CVE-2023-32233
    - netfilter: nf_tables: deactivate anonymous set from preparation phase

  * CVE-2023-2612
    - SAUCE: shiftfs: prevent lock unbalance in shiftfs_create_object()

  * CVE-2023-1670
    - xirc2ps_cs: Fix use after free bug in xirc2ps_detach

  * CVE-2023-30456
    - KVM: nVMX: add missing consistency checks for CR0 and CR4

  * CVE-2022-4139
    - drm/i915/gt: Serialize TLB invalidates with GT resets
    - drm/i915: fix TLB invalidation for Gen12 video and compute engines

  * net: sched: Fix use after free in red_enqueue() (LP: #2017013)
    - net: sched: Fix use after free in red_enqueue()

  * CVE-2022-3586
    - sch_sfb: Also store skb len before calling child enqueue

Date: 2023-05-18 15:31:07.341540+00:00
Changed-By: Timo Aaltonen <tjaalton at ubuntu.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-oem-5.17/5.17.0-1032.33
-------------- next part --------------
Sorry, changesfile not available.