[ubuntu/jammy-updates] linux-gke 5.15.0-1110.116 (Accepted)

[Andy Whitcroft]

linux-gke (5.15.0-1110.116) jammy; urgency=medium

  * jammy/linux-gke: 5.15.0-1110.116 -proposed tracker (LP: #2162254)

  [ Ubuntu: 5.15.0-190.200 ]

  * jammy/linux: 5.15.0-190.200 -proposed tracker (LP: #2163031)
  * CVE-2026-53246
    - sctp: delete the nested flexible array peer_init

  [ Ubuntu: 5.15.0-188.198 ]

  * jammy/linux: 5.15.0-188.198 -proposed tracker (LP: #2162294)
  * CVE-2026-64531
    - net: openvswitch: reject oversized nested action attrs
  * CVE-2026-53224
    - sctp: validate embedded INIT chunk and address list lengths in cookie
  * CVE-2026-53246
    - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing

linux-gke (5.15.0-1109.115) jammy; urgency=medium

  * jammy/linux-gke: 5.15.0-1109.115 -proposed tracker (LP: #2160856)

  [ Ubuntu: 5.15.0-187.197 ]

  * jammy/linux: 5.15.0-187.197 -proposed tracker (LP: #2160896)
  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts
    - [Packaging] resync retpoline extraction
  * CVE-2026-53086
    - net: bcmgenet: fix racing timeout handler
  * CVE-2026-53225
    - sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
  * CVE-2026-53228
    - ipv6: sit: reload inner IPv6 header after GSO offloads
  * CVE-2026-43499
    - rtmutex: Use waiter::task instead of current in remove_waiter()
  * CVE-2026-46331
    - net/sched: fix pedit partial COW leading to page cache corruption
  * CVE-2026-53212
    - netfilter: nft_tunnel: fix use-after-free on object destroy
  * CVE-2026-53359
    - KVM: x86: Fix shadow paging use-after-free due to unexpected role
  * CVE-2026-52989
    - nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers
  * CVE-2026-52924
    - sctp: purge outqueue on stale COOKIE-ECHO handling
  * CVE-2026-43378
    - smb: server: fix use-after-free in smb2_open()
  * CVE-2025-27558
    - wifi: prevent A-MSDU attacks in mesh networks
  * CVE-2026-53215
    - net: mvpp2: refill RX buffers before XDP or skb use
  * CVE-2026-53176
    - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN
  * CVE-2026-46266
    - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP
  * CVE-2026-43198
    - tcp: fix potential race in tcp_v6_syn_recv_sock()
  * CVE-2026-31705
    - ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment
  * CVE-2026-31448
    - ext4: avoid infinite loops caused by residual data
  * CVE-2026-31414
    - netfilter: nf_conntrack_expect: use expect->helper

Date: 2026-08-11 14:23:30.469946+00:00
Changed-By: Manuel Diewald <manuel.diewald at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-gke/5.15.0-1110.116
-------------- next part --------------
Sorry, changesfile not available.