[ubuntu/jammy-security] linux-aws-6.8 6.8.0-1040.42~22.04.1 (Accepted)

[Andy Whitcroft]

linux-aws-6.8 (6.8.0-1040.42~22.04.1) jammy; urgency=medium

  * jammy/linux-aws-6.8: 6.8.0-1040.42~22.04.1 -proposed tracker (LP: #2125066)

  [ Ubuntu-aws: 6.8.0-1040.42 ]

  * noble/linux-aws: 6.8.0-1040.42 -proposed tracker (LP: #2125067)
  [ Ubuntu: 6.8.0-85.85 ]
  * noble/linux: 6.8.0-85.85 -proposed tracker (LP: #2125109)
  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
  * CVE-2025-38500
    - xfrm: interface: fix use-after-free after changing collect_md xfrm
      interface
  * TLS socket disconnection causes various issues (LP: #2120516) //
    CVE-2025-37756
    - net: tls: explicitly disallow disconnect
  * CVE-2025-38477
    - net/sched: sch_qfq: Fix race condition on qfq_aggregate
    - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in
      qfq_delete_class
  * CVE-2025-38618
    - vsock: Do not allow binding to VMADDR_PORT_ANY
  * CVE-2025-38617
    - net/packet: fix a race in packet_set_ring() and packet_notifier()
  * CVE-2025-37785
    - ext4: fix OOB read when checking dotdot dir

  [ Ubuntu-aws: 6.8.0-1039.41 ]

  [ Ubuntu: 6.8.0-84.84 ]
  * Linux refcount imbalance in af_unix subsystem (LP: #2121515)
    - SAUCE: af_unix: Fix GC compatibility with upstream OOB refcount changes

Date: 2025-09-24 09:10:13.949983+00:00
Changed-By: Austin Rhodes <austin.rhodes at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-aws-6.8/6.8.0-1040.42~22.04.1
-------------- next part --------------
Sorry, changesfile not available.