This bug was fixed in the package linux-azure - 5.0.0-1010.10 --------------- linux-azure (5.0.0-1010.10) disco; urgency=medium
* linux-azure: 5.0.0-1010.10 -proposed tracker (LP: #1833924) * Enable eBPF JIT in the linux-azure kernels (LP: #1827916) - [Config] linux-azure: CONFIG_MLX{4,5}_INFINIBAND=m * linux-azure: Add the Catapult FPGA Driver (LP: #1824879) - SAUCE: linux-azure: Include Catapult FPGA PCI driver - [Config] linux-azure: CONFIG_CATAPULT_PCI=m * [Packaging] Improve config annotations check on custom kernels (LP: #1820075) - [Config] linux-azure: Include custom annotations files [ Ubuntu: 5.0.0-20.21 ] * linux: 5.0.0-20.21 -proposed tracker (LP: #1833934) * CVE-2019-11479 - SAUCE: tcp: add tcp_min_snd_mss sysctl - SAUCE: tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() * Remote denial of service (resource exhaustion) caused by TCP SACK scoreboard manipulation (LP: #1831638) // CVE-2019-11478 - tcp: refine memory limit test in tcp_fragment() [ Ubuntu: 5.0.0-19.20 ] * CVE-2019-12817 - SAUCE: powerpc/mm/64s/hash: Reallocate context ids on fork -- Marcelo Henrique Cerri <marcelo.ce...@canonical.com> Tue, 25 Jun 2019 10:36:47 -0300 ** Changed in: linux-azure (Ubuntu Disco) Status: Fix Committed => Fix Released ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-12817 ** Changed in: linux-azure (Ubuntu Cosmic) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux-azure in Ubuntu. https://bugs.launchpad.net/bugs/1827916 Title: Enable eBPF JIT in the linux-azure kernels Status in linux-azure package in Ubuntu: Fix Released Status in linux-azure source package in Xenial: Fix Released Status in linux-azure source package in Cosmic: Fix Released Status in linux-azure source package in Disco: Fix Released Bug description: eBPF is available as of kernel version 4.15, which is used on AKS nodes. Enabling JIT eBPF (built-in kernel feature) will speed-up execution of eBPF aware tools. eBPF JIT is controlled by the file /proc/sys/net/core/bpf_jit_enable. More details for eBPF JIT - https://www.kernel.org/doc/Documentation/sysctl/net.txt The file /proc/sys/net/core/bpf_jit_enable is not present on AKS nodes. Also, to support eBPF in AKS, we are requesting to switch the mlx* and ib* drivers to loadable modules instead of static. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-azure/+bug/1827916/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp