[ubuntu/jammy-proposed] linux-nvidia-tegra 5.15.0-1035.35 (Accepted)

[Andy Whitcroft]

linux-nvidia-tegra (5.15.0-1035.35) jammy; urgency=medium

  * jammy/linux-nvidia-tegra: 5.15.0-1035.35 -proposed tracker (LP: #2102558)

  * apply NVIDIA patches March 31, 2025 (LP: #2105645)
    - NVIDIA: SAUCE: arm64: defconfig: Sanitize defconfig
    - NVIDIA: SAUCE: arm64: defconfig: Enable IP set support
    - NVIDIA: SAUCE: arm64: defconfig: Enable IP raw table support
    - [Config] nvidia-tegra: Explicitly enable IP set support
    - [Config] nvidia-tegra: Explicitly enable IP raw table support

  [ Ubuntu: 5.15.0-1082.91 ]

  * jammy/linux-realtime: 5.15.0-1082.91 -proposed tracker (LP: #2102561)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.realtime/dkms-versions -- update from kernel-versions
      (main/2025.03.17)
  * jammy/linux: 5.15.0-138.148 -proposed tracker (LP: #2102587)
  * ipsec_offload in rtnetlink.sh from ubunsu_kselftests_net fails on O/J
    (LP: #2096976)
    - SAUCE: selftest: netfilter: fix null IP field in kci_test_ipsec_offload
  * CVE-2025-21756
    - vsock: Keep the binding until socket destruction
    - vsock: Orphan socket after transport release
  * CVE-2024-50256
    - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
  * CVE-2025-21702
    - pfifo_tail_enqueue: Drop new packet when sch->limit == 0
  * CVE-2025-21703
    - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
  * CVE-2025-21700
    - net: sched: Disallow replacing of child qdisc from one parent to another
  * CVE-2024-46826
    - ELF: fix kernel.randomize_va_space double read
  * CVE-2024-56651
    - can: hi311x: hi3110_can_ist(): fix potential use-after-free
  * iBFT iSCSI out-of-bounds shift UBSAN warning (LP: #2097824)
    - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  * CVE-2024-50248
    - ntfs3: Add bounds checking to mi_enum_attr()
    - fs/ntfs3: Sequential field availability check in mi_enum_attr()
  * CVE-2022-0995
    - watch_queue: Use the bitmap API when applicable
  * CVE-2024-26837
    - net: bridge: switchdev: Skip MDB replays of deferred events on offload
  * CVE-2025-21701
    - net: avoid race between device unregistration and ethnl ops
  * CVE-2024-57798
    - drm/dp_mst: Skip CSN if topology probing is not done yet
    - drm/dp_mst: Ensure mst_primary pointer is valid in
      drm_dp_mst_handle_up_req()
  * CVE-2024-56658
    - net: defer final 'struct net' free in netns dismantle
  * CVE-2024-35864
    - smb: client: fix potential UAF in smb2_is_valid_lease_break()
  * CVE-2024-35864/CVE-2024-26928
    - smb: client: fix potential UAF in cifs_debug_files_proc_show()

linux-nvidia-tegra (5.15.0-1034.34) jammy; urgency=medium

  * jammy/linux-nvidia-tegra: 5.15.0-1034.34 -proposed tracker (LP: #2102401)

  [ Ubuntu: 5.15.0-1081.89 ]

  * jammy/linux-realtime: 5.15.0-1081.89 -proposed tracker (LP: #2102404)
  * jammy/linux: 5.15.0-136.147 -proposed tracker (LP: #2102429)
  * CVE-2024-57798
    - drm/dp_mst: Skip CSN if topology probing is not done yet
    - drm/dp_mst: Ensure mst_primary pointer is valid in
      drm_dp_mst_handle_up_req()
  * CVE-2024-56658
    - net: defer final 'struct net' free in netns dismantle
  * CVE-2024-35864
    - smb: client: fix potential UAF in smb2_is_valid_lease_break()
  * CVE-2024-35864/CVE-2024-26928
    - smb: client: fix potential UAF in cifs_debug_files_proc_show()

Date: 2025-04-02 17:41:18.019414+00:00
Changed-By: Noah Wager <noah.wager at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-nvidia-tegra/5.15.0-1035.35
-------------- next part --------------
Sorry, changesfile not available.