[ubuntu/jammy-security] linux 5.15.0-130.140 (Accepted)

[Andy Whitcroft]

linux (5.15.0-130.140) jammy; urgency=medium

  * jammy/linux: 5.15.0-130.140 -proposed tracker (LP: #2092132)

  * ovs/linuxbridge jobs running on ubuntu jammy broken with latest kernel
    5.15.0-127.137 (LP: #2091990)
    - netfilter: xtables: fix typo causing some targets not to load on IPv6

linux (5.15.0-128.138) jammy; urgency=medium

  * jammy/linux: 5.15.0-128.138 -proposed tracker (LP: #2090163)

  * CVE-2024-50264
    - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans

  * CVE-2024-53057
    - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT

  * CVE-2024-43904
    - drm/amd/display: Add null checks for 'stream' and 'plane' before
      dereferencing

  * CVE-2024-40973
    - media: mtk-vcodec: potential null pointer deference in SCP

  * CVE-2024-38553
    - net: fec: remove .ndo_poll_controller to avoid deadlocks

  * CVE-2024-26822
    - smb: client: set correct id, uid and cruid for multiuser automounts

  * CVE-2020-12351 // CVE-2020-12352 // CVE-2020-24490
    - [Config] Disable BlueZ highspeed support

  * CVE-2024-40910
    - ax25: Fix refcount imbalance on inbound connections

  * CVE-2024-35963
    - Bluetooth: hci_sock: Fix not validating setsockopt user input

  * CVE-2024-35965
    - Bluetooth: L2CAP: Fix not validating setsockopt user input

  * CVE-2024-35966
    - Bluetooth: RFCOMM: Fix not validating setsockopt user input

  * CVE-2024-35967
    - Bluetooth: SCO: Fix not validating setsockopt user input

Date: 2024-12-18 17:53:10.791868+00:00
Changed-By: Mehmet Basaran <mehmet.basaran at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux/5.15.0-130.140
-------------- next part --------------
Sorry, changesfile not available.