[ubuntu/noble-security] linux-nvidia-6.17 6.17.0-1032.32 (Accepted)

[Andy Whitcroft]

linux-nvidia-6.17 (6.17.0-1032.32) noble; urgency=medium

  * noble/linux-nvidia-6.17: 6.17.0-1032.32 -proposed tracker (LP: #2164554)

  [ Ubuntu-hwe-6.17: 6.17.0-43.43 ]

  * noble/linux-hwe-6.17: 6.17.0-43.43 -proposed tracker (LP: #2162589)
  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts
  * CVE-2026-52982
    - net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()
  * CVE-2026-52999
    - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
  * CVE-2026-64531
    - net: openvswitch: reject oversized nested action attrs
  * CVE-2026-53216
    - net: mvpp2: limit XDP frame size to the RX buffer
  * CVE-2026-53049
    - gfs2: add some missing log locking
  * CVE-2026-53175
    - inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush
  * CVE-2026-53006
    - ipv6: fix possible UAF in icmpv6_rcv()
  * CVE-2026-52993
    - tipc: fix double-free in tipc_buf_append()
  * CVE-2026-52986
    - netfilter: nf_conntrack_sip: don't use simple_strtoul
  * CVE-2026-52914
    - batman-adv: fix fragment reassembly length accounting
  * CVE-2026-52955
    - libceph: Fix potential out-of-bounds access in crush_decode()
  * CVE-2026-53260
    - tcp: Add preempt_{disable, enable}_nested() in reqsk_queue_hash_req().
  * CVE-2026-53247
    - net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown
  * CVE-2026-53215
    - net: mvpp2: refill RX buffers before XDP or skb use
  * CVE-2026-53055
    - crypto: hisilicon/sec2 - prevent req used-after-free for sec
  * CVE-2026-53045
    - memory: tegra124-emc: Fix dll_change check
  * CVE-2026-53046
    - ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine
  * CVE-2026-53043
    - ocfs2/dlm: validate qr_numregions in dlm_match_regions()
  * CVE-2026-52958
    - libceph: Fix potential out-of-bounds access in osdmap_decode()
  * CVE-2026-52931
    - batman-adv: tp_meter: avoid use of uninit sender vars
  * CVE-2026-53224
    - sctp: validate embedded INIT chunk and address list lengths in cookie
  * CVE-2026-53246
    - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing
  * CVE-2026-53309
    - ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison
  * CVE-2026-53151
    - rxrpc: Fix the ACK parser to extract the SACK table for parsing
  * CVE-2026-53088
    - net: bcmgenet: fix off-by-one in bcmgenet_put_txcb
  * CVE-2026-53010
    - ksmbd: fix use-after-free in smb2_open during durable reconnect
  * CVE-2026-53002
    - netfilter: conntrack: remove sprintf usage

Date: 2026-08-19 16:12:14.139700+00:00
Changed-By: Jacob Martin <jacob.martin at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-nvidia-6.17/6.17.0-1032.32
-------------- next part --------------
Sorry, changesfile not available.