[ubuntu/noble-security] linux-nvidia-tegra 6.8.0-1025.25 (Accepted)

[Andy Whitcroft]

linux-nvidia-tegra (6.8.0-1025.25) noble; urgency=medium

  * noble/linux-nvidia-tegra: 6.8.0-1025.25 -proposed tracker (LP: #2151052)

  [ Ubuntu-realtime: 6.8.1-1051.52 ]

  * noble/linux-realtime: 6.8.1-1051.52 -proposed tracker (LP: #2151059)
  [ Ubuntu: 6.8.0-117.117 ]
  * noble/linux: 6.8.0-117.117 -proposed tracker (LP: #2151070)
  * CVE-2026-31419
    - net: bonding: fix use-after-free in bond_xmit_broadcast()
  * CVE-2026-31431
    - crypto: scatterwalk - Backport memcpy_sglist()
    - crypto: algif_aead - use memcpy_sglist() instead of null skcipher
    - crypto: algif_aead - Revert to operating out-of-place
    - crypto: algif_aead - snapshot IV for async AEAD requests
    - crypto: authenc - use memcpy_sglist() instead of null skcipher
    - crypto: authencesn - Do not place hiseq at end of dst for out-of-place
      decryption
    - crypto: authencesn - Fix src offset when decrypting in-place
    - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
    - crypto: algif_aead - Fix minimum RX size check for decryption
  * CVE-2026-31533
    - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
  * CVE-2026-31504
    - net: fix fanout UAF in packet_release() via NETDEV_UP race

Date: 2026-05-08 14:37:11.088359+00:00
Changed-By: Jacob Martin <jacob.martin at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-nvidia-tegra/6.8.0-1025.25
-------------- next part --------------
Sorry, changesfile not available.