[ubuntu/noble-security] linux-ibm 6.8.0-1040.40 (Accepted)

[Andy Whitcroft]

linux-ibm (6.8.0-1040.40) noble; urgency=medium

  * noble/linux-ibm: 6.8.0-1040.40 -proposed tracker (LP: #2127410)

  * Packaging resync (LP: #1786013)
    - [Packaging] ibm: Remove dwarfdump from Build-Depends

  [ Ubuntu: 6.8.0-87.88 ]

  * noble/linux: 6.8.0-87.88 -proposed tracker (LP: #2127436)
  * CVE-2025-37838
    - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol
      Driver Due to Race Condition
  * VMSCAPE CVE-2025-40300 (LP: #2124105) // CVE-2025-40300
    - Documentation/hw-vuln: Add VMSCAPE documentation
    - x86/vmscape: Enumerate VMSCAPE bug
    - x86/vmscape: Add conditional IBPB mitigation
    - x86/vmscape: Enable the mitigation
    - x86/bugs: Move cpu_bugs_smt_update() down
    - x86/vmscape: Warn when STIBP is disabled with SMT
    - x86/vmscape: Add old Intel CPUs to affected list
  * VMSCAPE CVE-2025-40300 (LP: #2124105)
    - [Config] Enable MITIGATION_VMSCAPE config
  * CVE-2025-38352
    - posix-cpu-timers: fix race between handle_posix_cpu_timers() and
      posix_cpu_timer_del()
  * CVE-2025-38118
    - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
    - Bluetooth: MGMT: Fix sparse errors

Date: 2025-10-14 21:01:13.634315+00:00
Changed-By: Tim Whisonant <tim.whisonant at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-ibm/6.8.0-1040.40
-------------- next part --------------
Sorry, changesfile not available.