[ubuntu/plucky-security] linux-aws 6.14.0-1008.8 (Accepted)

[Andy Whitcroft]

linux-aws (6.14.0-1008.8) plucky; urgency=medium

  * plucky/linux-aws: 6.14.0-1008.8 -proposed tracker (LP: #2114266)

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants

  [ Ubuntu: 6.14.0-23.23 ]

  * plucky/linux: 6.14.0-23.23 -proposed tracker (LP: #2114279)
  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - [Packaging] update annotations scripts
  * CVE-2025-37798
    - sch_htb: make htb_qlen_notify() idempotent
    - sch_htb: make htb_deactivate() idempotent
    - sch_drr: make drr_qlen_notify() idempotent
    - sch_hfsc: make hfsc_qlen_notify() idempotent
    - sch_qfq: make qfq_qlen_notify() idempotent
    - sch_ets: make est_qlen_notify() idempotent
    - selftests/tc-testing: Add a test case for FQ_CODEL with HTB parent
    - selftests/tc-testing: Add a test case for FQ_CODEL with QFQ parent
    - selftests/tc-testing: Add a test case for FQ_CODEL with HFSC parent
    - selftests/tc-testing: Add a test case for FQ_CODEL with DRR parent
    - selftests/tc-testing: Add a test case for FQ_CODEL with ETS parent
  * CVE-2025-37997
    - netfilter: ipset: fix region locking in hash types
  * CVE-2025-37890
    - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child
      qdisc
    - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
    - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice

Date: 2025-06-20 17:02:12.554079+00:00
Changed-By: Philip Cox <philip.cox at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-aws/6.14.0-1008.8
-------------- next part --------------
Sorry, changesfile not available.