This bug was fixed in the package linux - 5.8.0-16.17
---------------
linux (5.8.0-16.17) groovy; urgency=medium
* groovy/linux: 5.8.0-16.17 -proposed tracker (LP: #1891233)
* Miscellaneous Ubuntu changes
- hio -- Update to use bio_{start,end}_io_acct with 5.8+
- Enable hio driver
- [Packaging] Temporarily disable building doc package contents
linux (5.8.0-15.16) groovy; urgency=medium
* groovy/linux: 5.8.0-15.16 -proposed tracker (LP: #1891177)
* Miscellaneous Ubuntu changes
- SAUCE: Documentation: import error c_funcptr_sig_re, c_sig_re (sphinx-
doc/sphinx@0f49e30c)
linux (5.8.0-14.15) groovy; urgency=medium
* groovy/linux: 5.8.0-14.15 -proposed tracker (LP: #1891085)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* msg_zerocopy.sh in net from ubuntu_kernel_selftests failed (LP: #1812620)
- selftests/net: relax cpu affinity requirement in msg_zerocopy test
* Fix missing HDMI/DP Audio on an HP Desktop (LP: #1890441)
- ALSA: hda/hdmi: Add quirk to force connectivity
* Add initial audio support for Lenovo ThinkStation P620 (LP: #1890317)
- ALSA: usb-audio: Add support for Lenovo ThinkStation P620
* Fix IOMMU error on AMD Radeon Pro W5700 (LP: #1890306)
- PCI: Mark AMD Navi10 GPU rev 0x00 ATS as broken
* Enlarge hisi_sec2 capability (LP: #1890222)
- crypto: hisilicon - update SEC driver module parameter
* Miscellaneous Ubuntu changes
- [Config] Re-enable signing for ppc64el
-- Seth Forshee <[email protected]> Tue, 11 Aug 2020 15:32:58
-0500
** Changed in: linux (Ubuntu)
Status: Triaged => Fix Released
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1855341
Title:
CONFIG_USELIB should be disabled
Status in linux package in Ubuntu:
Fix Released
Bug description:
We should disable CONFIG_USELIB to make the uselib(2) system call
unreachable in an effort to reduce the kernel attack surface.
The system call is only used by very old libc implementations and is
unlikely to be used today.
This config option is recommended by the Kernel Self Protection
Project[1] and a 2019 study performed by Capsule 8 shows that it is
enabled in some other major distro kernels[2].
[1]
https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
[2]
https://capsule8.com/blog/millions-of-binaries-later-a-look-into-linux-hardening-in-the-wild/
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1855341/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
