This bug was fixed in the package linux-raspi - 5.19.0-1004.10
---------------
linux-raspi (5.19.0-1004.10) kinetic; urgency=medium
* kinetic/linux-raspi: 5.19.0-1004.10 -proposed tracker (LP: #1993133)
* armhf kernel compiled with gcc-12 fails to boot on pi 3/2 (LP: #1993120)
- [Packaging] raspi: Use gcc-11 for armhf
- [Config] raspi: updateconfigs for gcc-11 for armhf
[ Ubuntu: 5.19.0-21.21 ]
* kinetic/linux: 5.19.0-21.21 -proposed tracker (LP: #1992639)
* cannot change mount namespace (LP: #1991691)
- SAUCE: apparmor: Fix getaatr mediation causing snap failures
* Kernel regresses openjdk on riscv64 (LP: #1992484)
- SAUCE: Revert "riscv: mmap with PROT_WRITE but no PROT_READ is invalid"
[ Ubuntu: 5.19.0-20.20 ]
* kinetic/linux: 5.19.0-20.20 -proposed tracker (LP: #1992408)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/master)
* Kinetic kernels 5.19.0-18/19-generic won't boot on Intel 11th/12th gen
(LP: #1991704)
- drm/i915: fix null pointer dereference
* rcu_sched detected stalls on CPUs/tasks (LP: #1967130)
- [Config] Disable VMAP_STACK on riscv64
* Disable sv57 as the userspace is not ready (LP: #1991790)
- SAUCE: riscv: mm: Force disable sv57
* earlyconsole prints question marks on 5.19.0-1002-generic (LP: #1988984)
- [Config] Set CONFIG_PWM_SIFIVE=m for riscv64
* RCU stalls (LP: #1991951)
- [Config] Harmonize RCU_CPU_STALL_TIMEOUT
* backport dkms fixes to build modules correctly for hwe-5.19+ kernels with
custom compiler (LP: #1991664)
- [Packaging] use versioned gcc-12
- [Packaging] Update configs with versioned compiler version
* FTBFS on kinetic (LP: #1990964)
- SAUCE: uapi: Fixup strace compile error
* CVE-2022-40768
- scsi: stex: Properly zero out the passthrough command structure
* [22.10 FEAT] zKVM: Crypto Passthrough Hotplug - kernel part (LP: #1852741)
- s390/vfio-ap: use new AP bus interface to search for queue devices
- s390/vfio-ap: move probe and remove callbacks to vfio_ap_ops.c
- s390/vfio-ap: manage link between queue struct and matrix mdev
- s390/vfio-ap: introduce shadow APCB
- s390/vfio-ap: refresh guest's APCB by filtering AP resources assigned to
mdev
- s390/vfio-ap: allow assignment of unavailable AP queues to mdev device
- s390/vfio-ap: rename matrix_dev->lock mutex to matrix_dev->mdevs_lock
- s390/vfio-ap: introduce new mutex to control access to the KVM pointer
- s390/vfio-ap: use proper locking order when setting/clearing KVM pointer
- s390/vfio-ap: prepare for dynamic update of guest's APCB on
assign/unassign
- s390/vfio-ap: prepare for dynamic update of guest's APCB on queue
probe/remove
- s390/vfio-ap: allow hot plug/unplug of AP devices when assigned/unassigned
- s390/vfio-ap: hot plug/unplug of AP devices when probed/removed
- s390/vfio-ap: reset queues after adapter/domain unassignment
- s390/vfio-ap: implement in-use callback for vfio_ap driver
- s390/vfio-ap: sysfs attribute to display the guest's matrix
- s390/vfio-ap: handle config changed and scan complete notification
- s390/vfio-ap: update docs to include dynamic config support
- s390/Docs: new doc describing lock usage by the vfio_ap device driver
- MAINTAINERS: pick up all vfio_ap docs for VFIO AP maintainers
linux-raspi (5.19.0-1003.7) kinetic; urgency=medium
* kinetic/linux-raspi: 5.19.0-1003.7 -proposed tracker (LP: #1991799)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/master)
* Please enable CONFIG_SQUASHFS_DECOMP_MULTI_PERCPU (LP: #1980861)
- [Config] raspi: Switch from DECOMP_SINGLE to DECOMP_MULTI_PERCPU
* kinetic: apply new apparmor and LSM stacking patch set (LP: #1989983)
- [Config] raspi: update configs after apply new apparmor patch set
* No HDMI sound output from alsa in server (no KMS) (LP: #1991254)
- staging: bcm2835-audio: Find compatible firmware node
- staging: bcm2835-audio: Fix firmware node refcounting
- staging: bcm2835-audio: Log errors in case of firmware query failures
- staging: bcm2835-audio: Fix unused enable_hdmi module parameter
- staging: bcm2835-audio: Fix unused enable_headphones module parameter
* Essential staging modules are unsigned (LP: #1968834)
- [Packaging] raspi: Add signature-inclusion list
* Miscellaneous upstream changes
- ARM: dts: Don't enable the 8250 UART on CM4S
[ Ubuntu: 5.19.0-19.19 ]
* kinetic/linux: 5.19.0-19.19 -proposed tracker (LP: #1990960)
* kinetic: apply new apparmor and LSM stacking patch set (LP: #1989983)
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Specify which LSM to display
(using struct cred as input)"""
- Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: Fix build error, make sk
parameter const"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
smk_netlbl_mls()"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: change ima_read_file() to use
lsmblob"""
- Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: rename kzfree() to
kfree_sensitive()"""
- Revert "Revert "Revert "UBUNTU: SAUCE: Audit: Fix for missing NULL
check"""
- Revert "Revert "Revert "UBUNTU: SAUCE: AppArmor: Remove the exclusive
flag"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Add /proc attr entry for full
LSM context"""
- Revert "Revert "Revert "UBUNTU: SAUCE: Audit: Add a new record for
multiple
object LSM attributes"""
- Revert "Revert "Revert "UBUNTU: SAUCE: Audit: Fix incorrect static inline
function declration."""
- Revert "Revert "Revert "UBUNTU: SAUCE: Audit: Add new record for multiple
process LSM attributes"""
- Revert "Revert "Revert "UBUNTU: SAUCE: NET: Store LSM netlabel data in a
lsmblob"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: security_secid_to_secctx in
netlink netfilter"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmcontext in
security_inode_getsecctx"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmcontext in
security_secid_to_secctx"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Ensure the correct LSM context
releaser"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Specify which LSM to
display"""
- Revert "Revert "Revert "UBUNTU: SAUCE: IMA: Change internal interfaces to
use lsmblobs"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_cred_getsecid"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_inode_getsecid"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_task_getsecid"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_ipc_getsecid"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_secid_to_secctx"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_secctx_to_secid"""
- Revert "Revert "Revert "UBUNTU: SAUCE: net: Prepare UDS for security
module
stacking"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_kernel_act_as"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_audit_rule_match"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Create and manage the lsmblob
data structure."""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Infrastructure management of
the
sock security"""
- Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: LSM stacking: switch from
SK_CTX() to aa_sock()"""
- Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: rename aa_sock() to
aa_unix_sk()"""
- Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: disable showing the mode
as
part of a secid to secctx"""
- Revert "Revert "Revert "apparmor: fix absroot causing audited secids to
begin with ="""
- Revert "Revert "Revert "UBUNTU SAUCE: apparmor: fix apparmor mediating
locking non-fs, unix sockets"""
- Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: fix use after free in
sk_peer_label"""
- Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: af_unix mediation"""
- Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: patch to provide
compatibility with v2.x net rules"""
- Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: add/use fns to print hash
string hex value"""
- SAUCE: upstream v6.0: apparmor: fix absroot causing audited secids to
begin
with =
- SAUCE: upstream v6.0: apparmor: Fix kernel-doc
- SAUCE: upstream v6.0: lsm: Fix kernel-doc
- SAUCE: upstream v6.0: apparmor: Update help description of policy hash for
introspection
- SAUCE: upstream v6.0: apparmor: make export of raw binary profile to
userspace optional
- SAUCE: upstream v6.0: apparmor: Enable tuning of policy paranoid load for
embedded systems
- SAUCE: upstream v6.0: apparmor: don't create raw_sha1 symlink if sha1
hashing is disabled
- SAUCE: upstream v6.0: apparmor: resolve uninitialized symbol warnings in
policy_unpack_test.c
- SAUCE: upstream v6.0: security/apparmor: remove redundant ret variable
- SAUCE: upstream v6.0: apparmor: Use struct_size() helper in kmalloc()
- SAUCE: upstream v6.0: apparmor: Fix match_mnt_path_str() and match_mnt()
kernel-doc comment
- SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
- SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
- SAUCE: upstream v6.0: apparmor: Fix undefined reference to
`zlib_deflate_workspacesize'
- SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
- SAUCE: upstream v6.0: apparmor: test: Remove some casts which are
no-longer
required
- SAUCE: upstream v6.0: apparmor: add a kernel label to use on kernel
objects
- SAUCE: upstream v6.0: apparmor: Convert secid mapping to XArrays instead
of
IDR
- SAUCE: upstream v6.0: apparmor: disable showing the mode as part of a
secid
to secctx
- SAUCE: upstream v6.0: apparmor: Mark alloc_unconfined() as static
- SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
- SAUCE: upstream v6.0: apparmor: allow label to carry debug flags
- SAUCE: upstream v6.0: apparmor: extend policydb permission set by making
use
of the xbits
- SAUCE: upstream v6.0: apparmor: move ptrace mediation to more logical
task.{h,c}
- SAUCE: upstream v6.0: apparmor: correct config reference to intended one
- SAUCE: upstream v6.0: lsm,io_uring: add LSM hooks for the new uring_cmd
file
op
- SAUCE: upstream v6.0: selinux: implement the security_uring_cmd() LSM hook
- SAUCE: upstream v6.0: Smack: Provide read control for io_uring_cmd
- SAUCE: apparmor-next 6.1: apparmor: fix a memleak in
multi_transaction_new()
- SAUCE: apparmor-next 6.1: apparmor: fix lockdep warning when removing a
namespace
- SAUCE: apparmor-next 6.1: apparmor: reserve mediation classes
- SAUCE: apparmor-next 6.1: apparmor: use zstd compression for profile data
- SAUCE: apparmor-next 6.1: apparmor: expose compression level limits in
sysfs
- SAUCE: apparmor-next 6.1: apparmor: compute file permissions on profile
load
- SAUCE: apparmor-next 6.1: apparmor: compute xmatch permissions on profile
load
- SAUCE: apparmor-next 6.1: apparmor: move fperm computation into
policy_unpack
- SAUCE: apparmor-next 6.1: apparmor: rework and cleanup fperm computation
- SAUCE: apparmor-next 6.1: apparmor: convert xmatch to use aa_perms
structure
- SAUCE: apparmor-next 6.1: apparmor: compute policydb permission on profile
load
- SAUCE: apparmor-next 6.1: apparmor: combine file_rules and aa_policydb
into
a single shared struct
- SAUCE: apparmor-next 6.1: apparmor: convert xmatch to using the new shared
policydb struct
- SAUCE: apparmor-next 6.1: apparmor: convert fperm lookup to use accept as
an
index
- SAUCE: apparmor-next 6.1: apparmor: convert xmatch lookup to use accept as
an index
- SAUCE: apparmor-next 6.1: apparmor: cleanup shared permission struct
- SAUCE: apparmor-next 6.1: apparmor: convert policy lookup to use accept as
an index
- SAUCE: apparmor-next 6.1: apparmor: preparse for state being more than
just
an integer
- SAUCE: apparmor-next 6.1: apparmor: Fix abi check to include v8 abi
- SAUCE: apparmor-next 6.1: apparmor: fix apparmor mediating locking non-fs
unix sockets
- SAUCE: apparmor-next 6.1: apparmor: extend policydb permission set by
making
use of the xbits
- SAUCE: apparmor-next 6.1: apparmor: move dfa perm macros into
policy_unpack
- SAUCE: apparmor-next 6.1: apparmor: extend xindex size
- SAUCE: apparmor-next 6.1: apparmor: isolate policy backwards compatibility
to its own file
- SAUCE: apparmor-next 6.1: apparmor: extend permissions to support a label
and tag string
- SAUCE: apparmor-next 6.1: apparmor: add mediation class information to
auditing
- SAUCE: apparmor-next 6.1: apparmor: add user mode flag
- SAUCE: apparmor-next 6.1: apparmor: make transition table unpack generic
so
it can be reused
- SAUCE: apparmor-next 6.1: apparmor: group dfa policydb unpacking
- SAUCE: apparmor-next 6.1: apparmor: make unpack_array return a trianary
value
- SAUCE: apparmor-next 6.1: apparmor: add the ability for policy to specify
a
permission table
- SAUCE: apparmor-next 6.1: apparmor: verify permission table indexes
- SAUCE: apparmor-next 6.1: apparmor: make sure perm indexes are accumulated
- SAUCE: apparmor-next 6.1: apparmor: cleanup: move perm accumulation into
perms.h
- SAUCE: apparmor-next 6.1: apparmor: verify loaded permission bits masks
don't overlap
- SAUCE: apparmor-next 6.1: apparmor: refactor profile rules and attachments
- SAUCE: apparmor-next 6.1: apparmor: rework profile->rules to be a list
- SAUCE: apparmor-next 6.1: apparmor: fix aa_class_names[] to match reserved
classes
- SAUCE: apparmor-next 6.1: apparmor: Fix regression in stacking due to
label
flags
- SAUCE: apparmor-next 6.1: apparmor: Simplify obtain the newest label on a
cred
- SAUCE: apparmor-next 6.1: apparmor: make __aa_path_perm() static
- SAUCE: apparmor-next 6.1: apparmor: Fix doc comment for compute_fperms
- SAUCE: apparmor-next 6.1: apparmor: Remove unnecessary size check when
unpacking trans_table
- SAUCE: apparmor-next 6.1: apparmor: make sure the decompression ctx is
promperly initialized
- SAUCE: apparmor: add/use fns to print hash string hex value
- SAUCE: apparmor: patch to provide compatibility with v2.x net rules
- SAUCE: Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: make
__aa_path_perm() static"
- SAUCE: apparmor: af_unix mediation
- SAUCE: fix shutdown unix socket owner conditional check
- SAUCE: apparmor: rename aa_sock() to aa_unix_sk()
- SAUCE: apparmor: Add fine grained mediation of posix mqueues
- SAUCE: apparmor: LSM stacking: switch from SK_CTX() to aa_sock()
- SAUCE: lsm stacking v37: integrity: disassociate ima_filter_rule from
security_audit_rule
- SAUCE: lsm stacking v37: LSM: Infrastructure management of the sock
security
- SAUCE: lsm stacking v37: LSM: Add the lsmblob data structure.
- SAUCE: lsm stacking v37: LSM: provide lsm name and id slot mappings
- SAUCE: lsm stacking v37: IMA: avoid label collisions with stacked LSMs
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_audit_rule_match
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_kernel_act_as
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_secctx_to_secid
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_secid_to_secctx
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_ipc_getsecid
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_current_getsecid
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_inode_getsecid
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_cred_getsecid
- SAUCE: lsm stacking v37: LSM: Specify which LSM to display
- SAUCE: fixup lsm stacking v37: LSM: Specify which LSM to display
- SAUCE: lsm stacking v37: LSM: Ensure the correct LSM context releaser
- SAUCE: lsm stacking v37: LSM: Use lsmcontext in security_secid_to_secctx
- SAUCE: lsm stacking v37: LSM: Use lsmcontext in security_inode_getsecctx
- SAUCE: lsm stacking v37: LSM: Use lsmcontext in
security_dentry_init_security
- SAUCE: lsm stacking v37: LSM: security_secid_to_secctx in netlink
netfilter
- SAUCE: lsm stacking v37: NET: Store LSM netlabel data in a lsmblob
- SAUCE: lsm stacking v37: binder: Pass LSM identifier for confirmation
- SAUCE: lsm stacking v37: LSM: security_secid_to_secctx module selection
- SAUCE: lsm stacking v37: Audit: Keep multiple LSM data in audit_names
- SAUCE: lsm stacking v37: Audit: Create audit_stamp structure
- SAUCE: lsm stacking v37: LSM: Add a function to report multiple LSMs
- SAUCE: lsm stacking v37: Audit: Allow multiple records in an audit_buffer
- SAUCE: lsm stacking v37: Audit: Add record for multiple task security
contexts
- SAUCE: lsm stacking v37: audit: multiple subject lsm values for netlabel
- SAUCE: lsm stacking v37: Audit: Add record for multiple object contexts
- SAUCE: lsm stacking v37: netlabel: Use a struct lsmblob in audit data
- SAUCE: lsm stacking v37: LSM: Removed scaffolding function lsmcontext_init
- SAUCE: lsm stacking v37: LSM: Add /proc attr entry for full LSM context
- SAUCE: lsm stacking v37: AppArmor: Remove the exclusive flag
- SAUCE: security, lsm: Introduce security_create_user_ns()
- SAUCE: bpf-lsm: Make bpf_lsm_userns_create() sleepable
- SAUCE: selinux: Implement userns_create hook
- SAUCE: apparmor: add user namespace creation mediation
- [Config] update configs after apply new apparmor patch set
* kinetic: apply new apparmor and LSM stacking patch set (LP: #1989983) //
5.19.0-17.17: kernel NULL pointer dereference, address: 0000000000000084
(LP: #1990236)
- SAUCE: apparmor: fix oops in unix owner conditional setup
* Miscellaneous Ubuntu changes
- [Config] make sure CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT is enforced
[ Ubuntu: 5.19.0-18.18 ]
* kinetic/linux: 5.19.0-18.18 -proposed tracker (LP: #1990366)
* 5.19.0-17.17: kernel NULL pointer dereference, address: 0000000000000084
(LP: #1990236)
- Revert "UBUNTU: SAUCE: apparmor: Fix regression in stacking due to label
flags"
- Revert "UBUNTU: [Config] disable SECURITY_APPARMOR_RESTRICT_USERNS"
- Revert "UBUNTU: SAUCE: Revert "hwrng: virtio - add an internal buffer""
- Revert "UBUNTU: SAUCE: Revert "hwrng: virtio - don't wait on cleanup""
- Revert "UBUNTU: SAUCE: Revert "hwrng: virtio - don't waste entropy""
- Revert "UBUNTU: SAUCE: Revert "hwrng: virtio - always add a pending
request""
- Revert "UBUNTU: SAUCE: Revert "hwrng: virtio - unregister device before
reset""
- Revert "UBUNTU: SAUCE: Revert "virtio-rng: make device ready before making
request""
- Revert "UBUNTU: [Config] update configs after apply new apparmor patch
set"
- Revert "UBUNTU: SAUCE: apparmor: add user namespace creation mediation"
- Revert "UBUNTU: SAUCE: selinux: Implement userns_create hook"
- Revert "UBUNTU: SAUCE: bpf-lsm: Make bpf_lsm_userns_create() sleepable"
- Revert "UBUNTU: SAUCE: security, lsm: Introduce security_create_user_ns()"
- Revert "UBUNTU: SAUCE: lsm stacking v37: AppArmor: Remove the exclusive
flag"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: Add /proc attr entry for
full
LSM context"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: Removed scaffolding function
lsmcontext_init"
- Revert "UBUNTU: SAUCE: lsm stacking v37: netlabel: Use a struct lsmblob in
audit data"
- Revert "UBUNTU: SAUCE: lsm stacking v37: Audit: Add record for multiple
object contexts"
- Revert "UBUNTU: SAUCE: lsm stacking v37: audit: multiple subject lsm
values
for netlabel"
- Revert "UBUNTU: SAUCE: lsm stacking v37: Audit: Add record for multiple
task
security contexts"
- Revert "UBUNTU: SAUCE: lsm stacking v37: Audit: Allow multiple records in
an
audit_buffer"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: Add a function to report
multiple LSMs"
- Revert "UBUNTU: SAUCE: lsm stacking v37: Audit: Create audit_stamp
structure"
- Revert "UBUNTU: SAUCE: lsm stacking v37: Audit: Keep multiple LSM data in
audit_names"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: security_secid_to_secctx
module selection"
- Revert "UBUNTU: SAUCE: lsm stacking v37: binder: Pass LSM identifier for
confirmation"
- Revert "UBUNTU: SAUCE: lsm stacking v37: NET: Store LSM netlabel data in a
lsmblob"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: security_secid_to_secctx in
netlink netfilter"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: Use lsmcontext in
security_dentry_init_security"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: Use lsmcontext in
security_inode_getsecctx"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: Use lsmcontext in
security_secid_to_secctx"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: Ensure the correct LSM
context
releaser"
- Revert "UBUNTU: SAUCE: fixup lsm stacking v37: LSM: Specify which LSM to
display"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: Specify which LSM to
display"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: Use lsmblob in
security_cred_getsecid"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: Use lsmblob in
security_inode_getsecid"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: Use lsmblob in
security_current_getsecid"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: Use lsmblob in
security_ipc_getsecid"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: Use lsmblob in
security_secid_to_secctx"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: Use lsmblob in
security_secctx_to_secid"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: Use lsmblob in
security_kernel_act_as"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: Use lsmblob in
security_audit_rule_match"
- Revert "UBUNTU: SAUCE: lsm stacking v37: IMA: avoid label collisions with
stacked LSMs"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: provide lsm name and id slot
mappings"
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: Add the lsmblob data
structure."
- Revert "UBUNTU: SAUCE: lsm stacking v37: LSM: Infrastructure management of
the sock security"
- Revert "UBUNTU: SAUCE: lsm stacking v37: integrity: disassociate
ima_filter_rule from security_audit_rule"
- Revert "UBUNTU: SAUCE: apparmor: LSM stacking: switch from SK_CTX() to
aa_sock()"
- Revert "UBUNTU: SAUCE: apparmor: Add fine grained mediation of posix
mqueues"
- Revert "UBUNTU: SAUCE: apparmor: rename aa_sock() to aa_unix_sk()"
- Revert "UBUNTU: SAUCE: fix shutdown unix socket owner conditional check"
- Revert "UBUNTU: SAUCE: apparmor: af_unix mediation"
- Revert "UBUNTU: SAUCE: apparmor: patch to provide compatibility with v2.x
net rules"
- Revert "UBUNTU: SAUCE: apparmor: add/use fns to print hash string hex
value"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: fix aa_class_names[]
to
match reserved classes"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: rework profile->rules
to
be a list"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: refactor profile rules
and attachments"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: verify loaded
permission
bits masks don't overlap"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: cleanup: move perm
accumulation into perms.h"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: make sure perm indexes
are accumulated"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: verify permission
table
indexes"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: add the ability for
policy to specify a permission table"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: make unpack_array
return
a trianary value"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: group dfa policydb
unpacking"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: make transition table
unpack generic so it can be reused"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: add user mode flag"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: add mediation class
information to auditing"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: extend permissions to
support a label and tag string"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: isolate policy
backwards
compatibility to its own file"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: extend xindex size"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: move dfa perm macros
into policy_unpack"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: extend policydb
permission set by making use of the xbits"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: fix apparmor mediating
locking non-fs unix sockets"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: Fix abi check to
include
v8 abi"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: preparse for state
being
more than just an integer"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: convert policy lookup
to
use accept as an index"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: cleanup shared
permission struct"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: convert xmatch lookup
to
use accept as an index"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: convert fperm lookup
to
use accept as an index"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: convert xmatch to
using
the new shared policydb struct"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: combine file_rules and
aa_policydb into a single shared struct"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: compute policydb
permission on profile load"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: convert xmatch to use
aa_perms structure"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: rework and cleanup
fperm
computation"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: move fperm computation
into policy_unpack"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: compute xmatch
permissions on profile load"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: compute file
permissions
on profile load"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: expose compression
level
limits in sysfs"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: use zstd compression
for
profile data"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: reserve mediation
classes"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: fix lockdep warning
when
removing a namespace"
- Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: fix a memleak in
multi_transaction_new()"
- Revert "UBUNTU: SAUCE: upstream v6.0: Smack: Provide read control for
io_uring_cmd"
- Revert "UBUNTU: SAUCE: upstream v6.0: selinux: implement the
security_uring_cmd() LSM hook"
- Revert "UBUNTU: SAUCE: upstream v6.0: lsm,io_uring: add LSM hooks for the
new uring_cmd file op"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: correct config reference
to
intended one"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: move ptrace mediation to
more logical task.{h,c}"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: extend policydb permission
set by making use of the xbits"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: allow label to carry debug
flags"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: Fix some kernel-doc
comments"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: Mark alloc_unconfined() as
static"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: disable showing the mode
as
part of a secid to secctx"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: Convert secid mapping to
XArrays instead of IDR"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: add a kernel label to use
on
kernel objects"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: test: Remove some casts
which are no-longer required"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: Fix some kernel-doc
comments"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: Fix undefined reference to
`zlib_deflate_workspacesize'"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: Fix some kernel-doc
comments"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: Fix some kernel-doc
comments"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: Fix match_mnt_path_str()
and
match_mnt() kernel-doc comment"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: Use struct_size() helper
in
kmalloc()"
- Revert "UBUNTU: SAUCE: upstream v6.0: security/apparmor: remove redundant
ret variable"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: resolve uninitialized
symbol
warnings in policy_unpack_test.c"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: don't create raw_sha1
symlink if sha1 hashing is disabled"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: Enable tuning of policy
paranoid load for embedded systems"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: make export of raw binary
profile to userspace optional"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: Update help description of
policy hash for introspection"
- Revert "UBUNTU: SAUCE: upstream v6.0: lsm: Fix kernel-doc"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: Fix kernel-doc"
- Revert "UBUNTU: SAUCE: upstream v6.0: apparmor: fix absroot causing
audited
secids to begin with ="
- Revert "Revert "UBUNTU: SAUCE: apparmor: add/use fns to print hash string
hex value""
- Revert "Revert "UBUNTU: SAUCE: apparmor: patch to provide compatibility
with
v2.x net rules""
- Revert "Revert "UBUNTU: SAUCE: apparmor: af_unix mediation""
- Revert "Revert "UBUNTU: SAUCE: apparmor: fix use after free in
sk_peer_label""
- Revert "Revert "UBUNTU SAUCE: apparmor: fix apparmor mediating locking
non-
fs, unix sockets""
- Revert "Revert "apparmor: fix absroot causing audited secids to begin with
=""
- Revert "Revert "UBUNTU: SAUCE: apparmor: disable showing the mode as part
of
a secid to secctx""
- Revert "Revert "UBUNTU: SAUCE: apparmor: rename aa_sock() to
aa_unix_sk()""
- Revert "Revert "UBUNTU: SAUCE: apparmor: LSM stacking: switch from
SK_CTX()
to aa_sock()""
- Revert "Revert "UBUNTU: SAUCE: LSM: Infrastructure management of the sock
security""
- Revert "Revert "UBUNTU: SAUCE: LSM: Create and manage the lsmblob data
structure.""
- Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_audit_rule_match""
- Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_kernel_act_as""
- Revert "Revert "UBUNTU: SAUCE: net: Prepare UDS for security module
stacking""
- Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_secctx_to_secid""
- Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_secid_to_secctx""
- Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_ipc_getsecid""
- Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_task_getsecid""
- Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_inode_getsecid""
- Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_cred_getsecid""
- Revert "Revert "UBUNTU: SAUCE: IMA: Change internal interfaces to use
lsmblobs""
- Revert "Revert "UBUNTU: SAUCE: LSM: Specify which LSM to display""
- Revert "Revert "UBUNTU: SAUCE: LSM: Ensure the correct LSM context
releaser""
- Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmcontext in
security_secid_to_secctx""
- Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmcontext in
security_inode_getsecctx""
- Revert "Revert "UBUNTU: SAUCE: LSM: security_secid_to_secctx in netlink
netfilter""
- Revert "Revert "UBUNTU: SAUCE: NET: Store LSM netlabel data in a lsmblob""
- Revert "Revert "UBUNTU: SAUCE: Audit: Add new record for multiple process
LSM attributes""
- Revert "Revert "UBUNTU: SAUCE: Audit: Fix incorrect static inline function
declration.""
- Revert "Revert "UBUNTU: SAUCE: Audit: Add a new record for multiple object
LSM attributes""
- Revert "Revert "UBUNTU: SAUCE: LSM: Add /proc attr entry for full LSM
context""
- Revert "Revert "UBUNTU: SAUCE: AppArmor: Remove the exclusive flag""
- Revert "Revert "UBUNTU: SAUCE: Audit: Fix for missing NULL check""
- Revert "Revert "UBUNTU: SAUCE: apparmor: rename kzfree() to
kfree_sensitive()""
- Revert "Revert "UBUNTU: SAUCE: LSM: change ima_read_file() to use
lsmblob""
- Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in smk_netlbl_mls()""
- Revert "Revert "UBUNTU: SAUCE: apparmor: Fix build error, make sk
parameter
const""
- Revert "Revert "UBUNTU: SAUCE: LSM: Specify which LSM to display (using
struct cred as input)""
* [22.04 FEAT] Enhanced Interpretation for PCI Functions on s390x - kernel
part (LP: #1853306)
- s390/sclp: detect the zPCI load/store interpretation facility
- s390/sclp: detect the AISII facility
- s390/sclp: detect the AENI facility
- s390/sclp: detect the AISI facility
- s390/airq: pass more TPI info to airq handlers
- s390/airq: allow for airq structure that uses an input vector
- s390/pci: externalize the SIC operation controls and routine
- s390/pci: stash associated GISA designation
- s390/pci: stash dtsm and maxstbl
- vfio/pci: introduce CONFIG_VFIO_PCI_ZDEV_KVM
- KVM: s390: pci: add basic kvm_zdev structure
- KVM: s390: pci: do initial setup for AEN interpretation
- KVM: s390: pci: enable host forwarding of Adapter Event Notifications
- KVM: s390: mechanism to enable guest zPCI Interpretation
- KVM: s390: pci: provide routines for enabling/disabling interrupt
forwarding
- KVM: s390: pci: add routines to start/stop interpretive execution
- vfio-pci/zdev: add open/close device hooks
- vfio-pci/zdev: add function handle to clp base capability
- vfio-pci/zdev: different maxstbl for interpreted devices
- KVM: s390: add KVM_S390_ZPCI_OP to manage guest zPCI devices
- MAINTAINERS: additional files related kvm s390 pci passthrough
- Documentation: kvm: extend KVM_S390_ZPCI_OP subheading underline
- KVM: s390: pci: Hook to access KVM lowlevel from VFIO
* [22.10 FEAT] [IO2201] Independent Usage of Secondary Physical Function
(LP: #1959542)
- PCI: Clean up pci_scan_slot()
- PCI: Split out next_ari_fn() from next_fn()
- PCI: Move jailhouse's isolated function handling to pci_scan_slot()
- PCI: Extend isolated function probing to s390
- s390/pci: allow zPCI zbus without a function zero
* AMD ACP 6.2 DMIC support (LP: #1989518)
- ASoC: amd: add Pink Sardine platform ACP IP register header
- ASoC: amd: add Pink Sardine ACP PCI driver
- ASoC: amd: add acp6.2 init/de-init functions
- ASoC: amd: add platform devices for acp6.2 pdm driver and dmic driver
- ASoC: amd: add acp6.2 pdm platform driver
- ASoC: amd: add acp6.2 irq handler
- ASoC: amd: add acp6.2 pdm driver dma ops
- ASoC: amd: add acp6.2 pci driver pm ops
- ASoC: amd: add acp6.2 pdm driver pm ops
- ASoC: amd: enable Pink Sardine acp6.2 drivers build
- ASoC: amd: create platform device for acp6.2 machine driver
- ASoC: amd: add Pink Sardine machine driver using dmic
- ASoC: amd: enable Pink sardine platform machine driver build.
- [Config] Enable audio for AMD PinkSardine
* support independent clock and LED GPIOs for Intel IPU6 platforms
(LP: #1989046)
- SAUCE: platform/x86: int3472: support independent clock and LED GPIOs
* CVE-2022-2978
- SAUCE: fs: fix UAF/GPF bug in nilfs_mdt_destroy
* Miscellaneous Ubuntu changes
- [Config] disable SECURITY_APPARMOR_RESTRICT_USERNS
- SAUCE: Add mdev_set_iommu_device() kABI.
- SAUCE: apparmor: Fix regression in stacking due to label flags
- [Config] update toolchain version
* Miscellaneous upstream changes
- Revert "drm/i915/opregion: check port number bounds for SWSCI display
power
state"
[ Ubuntu: 5.19.0-17.17 ]
* kinetic/linux: 5.19.0-17.17 -proposed tracker (LP: #1989987)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/master)
- debian/dkms-versions -- update from kernel-versions (main/master)
* multiple kernel oops regarding hung tasks delaying boot (LP: #1989258)
- SAUCE: Revert "virtio-rng: make device ready before making request"
- SAUCE: Revert "hwrng: virtio - unregister device before reset"
- SAUCE: Revert "hwrng: virtio - always add a pending request"
- SAUCE: Revert "hwrng: virtio - don't waste entropy"
- SAUCE: Revert "hwrng: virtio - don't wait on cleanup"
- SAUCE: Revert "hwrng: virtio - add an internal buffer"
* kinetic: apply new apparmor and LSM stacking patch set (LP: #1989983)
- Revert "UBUNTU: SAUCE: LSM: Specify which LSM to display (using struct
cred
as input)"
- Revert "UBUNTU: SAUCE: apparmor: Fix build error, make sk parameter const"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in smk_netlbl_mls()"
- Revert "UBUNTU: SAUCE: LSM: change ima_read_file() to use lsmblob"
- Revert "UBUNTU: SAUCE: apparmor: rename kzfree() to kfree_sensitive()"
- Revert "UBUNTU: SAUCE: Audit: Fix for missing NULL check"
- Revert "UBUNTU: SAUCE: AppArmor: Remove the exclusive flag"
- Revert "UBUNTU: SAUCE: LSM: Add /proc attr entry for full LSM context"
- Revert "UBUNTU: SAUCE: Audit: Add a new record for multiple object LSM
attributes"
- Revert "UBUNTU: SAUCE: Audit: Fix incorrect static inline function
declration."
- Revert "UBUNTU: SAUCE: Audit: Add new record for multiple process LSM
attributes"
- Revert "UBUNTU: SAUCE: NET: Store LSM netlabel data in a lsmblob"
- Revert "UBUNTU: SAUCE: LSM: security_secid_to_secctx in netlink netfilter"
- Revert "UBUNTU: SAUCE: LSM: Use lsmcontext in security_inode_getsecctx"
- Revert "UBUNTU: SAUCE: LSM: Use lsmcontext in security_secid_to_secctx"
- Revert "UBUNTU: SAUCE: LSM: Ensure the correct LSM context releaser"
- Revert "UBUNTU: SAUCE: LSM: Specify which LSM to display"
- Revert "UBUNTU: SAUCE: IMA: Change internal interfaces to use lsmblobs"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_cred_getsecid"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_inode_getsecid"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_task_getsecid"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_ipc_getsecid"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_secid_to_secctx"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_secctx_to_secid"
- Revert "UBUNTU: SAUCE: net: Prepare UDS for security module stacking"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_kernel_act_as"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_audit_rule_match"
- Revert "UBUNTU: SAUCE: LSM: Create and manage the lsmblob data structure."
- Revert "UBUNTU: SAUCE: LSM: Infrastructure management of the sock
security"
- Revert "UBUNTU: SAUCE: apparmor: LSM stacking: switch from SK_CTX() to
aa_sock()"
- Revert "UBUNTU: SAUCE: apparmor: rename aa_sock() to aa_unix_sk()"
- Revert "UBUNTU: SAUCE: apparmor: disable showing the mode as part of a
secid
to secctx"
- Revert "apparmor: fix absroot causing audited secids to begin with ="
- Revert "UBUNTU SAUCE: apparmor: fix apparmor mediating locking non-fs,
unix
sockets"
- Revert "UBUNTU: SAUCE: apparmor: fix use after free in sk_peer_label"
- Revert "UBUNTU: SAUCE: apparmor: af_unix mediation"
- Revert "UBUNTU: SAUCE: apparmor: patch to provide compatibility with v2.x
net rules"
- Revert "UBUNTU: SAUCE: apparmor: add/use fns to print hash string hex
value"
- SAUCE: upstream v6.0: apparmor: fix absroot causing audited secids to
begin
with =
- SAUCE: upstream v6.0: apparmor: Fix kernel-doc
- SAUCE: upstream v6.0: lsm: Fix kernel-doc
- SAUCE: upstream v6.0: apparmor: Update help description of policy hash for
introspection
- SAUCE: upstream v6.0: apparmor: make export of raw binary profile to
userspace optional
- SAUCE: upstream v6.0: apparmor: Enable tuning of policy paranoid load for
embedded systems
- SAUCE: upstream v6.0: apparmor: don't create raw_sha1 symlink if sha1
hashing is disabled
- SAUCE: upstream v6.0: apparmor: resolve uninitialized symbol warnings in
policy_unpack_test.c
- SAUCE: upstream v6.0: security/apparmor: remove redundant ret variable
- SAUCE: upstream v6.0: apparmor: Use struct_size() helper in kmalloc()
- SAUCE: upstream v6.0: apparmor: Fix match_mnt_path_str() and match_mnt()
kernel-doc comment
- SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
- SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
- SAUCE: upstream v6.0: apparmor: Fix undefined reference to
`zlib_deflate_workspacesize'
- SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
- SAUCE: upstream v6.0: apparmor: test: Remove some casts which are
no-longer
required
- SAUCE: upstream v6.0: apparmor: add a kernel label to use on kernel
objects
- SAUCE: upstream v6.0: apparmor: Convert secid mapping to XArrays instead
of
IDR
- SAUCE: upstream v6.0: apparmor: disable showing the mode as part of a
secid
to secctx
- SAUCE: upstream v6.0: apparmor: Mark alloc_unconfined() as static
- SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
- SAUCE: upstream v6.0: apparmor: allow label to carry debug flags
- SAUCE: upstream v6.0: apparmor: extend policydb permission set by making
use
of the xbits
- SAUCE: upstream v6.0: apparmor: move ptrace mediation to more logical
task.{h,c}
- SAUCE: upstream v6.0: apparmor: correct config reference to intended one
- SAUCE: upstream v6.0: lsm,io_uring: add LSM hooks for the new uring_cmd
file
op
- SAUCE: upstream v6.0: selinux: implement the security_uring_cmd() LSM hook
- SAUCE: upstream v6.0: Smack: Provide read control for io_uring_cmd
- SAUCE: apparmor-next 6.1: apparmor: fix a memleak in
multi_transaction_new()
- SAUCE: apparmor-next 6.1: apparmor: fix lockdep warning when removing a
namespace
- SAUCE: apparmor-next 6.1: apparmor: reserve mediation classes
- SAUCE: apparmor-next 6.1: apparmor: use zstd compression for profile data
- SAUCE: apparmor-next 6.1: apparmor: expose compression level limits in
sysfs
- SAUCE: apparmor-next 6.1: apparmor: compute file permissions on profile
load
- SAUCE: apparmor-next 6.1: apparmor: compute xmatch permissions on profile
load
- SAUCE: apparmor-next 6.1: apparmor: move fperm computation into
policy_unpack
- SAUCE: apparmor-next 6.1: apparmor: rework and cleanup fperm computation
- SAUCE: apparmor-next 6.1: apparmor: convert xmatch to use aa_perms
structure
- SAUCE: apparmor-next 6.1: apparmor: compute policydb permission on profile
load
- SAUCE: apparmor-next 6.1: apparmor: combine file_rules and aa_policydb
into
a single shared struct
- SAUCE: apparmor-next 6.1: apparmor: convert xmatch to using the new shared
policydb struct
- SAUCE: apparmor-next 6.1: apparmor: convert fperm lookup to use accept as
an
index
- SAUCE: apparmor-next 6.1: apparmor: convert xmatch lookup to use accept as
an index
- SAUCE: apparmor-next 6.1: apparmor: cleanup shared permission struct
- SAUCE: apparmor-next 6.1: apparmor: convert policy lookup to use accept as
an index
- SAUCE: apparmor-next 6.1: apparmor: preparse for state being more than
just
an integer
- SAUCE: apparmor-next 6.1: apparmor: Fix abi check to include v8 abi
- SAUCE: apparmor-next 6.1: apparmor: fix apparmor mediating locking non-fs
unix sockets
- SAUCE: apparmor-next 6.1: apparmor: extend policydb permission set by
making
use of the xbits
- SAUCE: apparmor-next 6.1: apparmor: move dfa perm macros into
policy_unpack
- SAUCE: apparmor-next 6.1: apparmor: extend xindex size
- SAUCE: apparmor-next 6.1: apparmor: isolate policy backwards compatibility
to its own file
- SAUCE: apparmor-next 6.1: apparmor: extend permissions to support a label
and tag string
- SAUCE: apparmor-next 6.1: apparmor: add mediation class information to
auditing
- SAUCE: apparmor-next 6.1: apparmor: add user mode flag
- SAUCE: apparmor-next 6.1: apparmor: make transition table unpack generic
so
it can be reused
- SAUCE: apparmor-next 6.1: apparmor: group dfa policydb unpacking
- SAUCE: apparmor-next 6.1: apparmor: make unpack_array return a trianary
value
- SAUCE: apparmor-next 6.1: apparmor: add the ability for policy to specify
a
permission table
- SAUCE: apparmor-next 6.1: apparmor: verify permission table indexes
- SAUCE: apparmor-next 6.1: apparmor: make sure perm indexes are accumulated
- SAUCE: apparmor-next 6.1: apparmor: cleanup: move perm accumulation into
perms.h
- SAUCE: apparmor-next 6.1: apparmor: verify loaded permission bits masks
don't overlap
- SAUCE: apparmor-next 6.1: apparmor: refactor profile rules and attachments
- SAUCE: apparmor-next 6.1: apparmor: rework profile->rules to be a list
- SAUCE: apparmor-next 6.1: apparmor: fix aa_class_names[] to match reserved
classes
- SAUCE: apparmor: add/use fns to print hash string hex value
- SAUCE: apparmor: patch to provide compatibility with v2.x net rules
- SAUCE: apparmor: af_unix mediation
- SAUCE: fix shutdown unix socket owner conditional check
- SAUCE: apparmor: rename aa_sock() to aa_unix_sk()
- SAUCE: apparmor: Add fine grained mediation of posix mqueues
- SAUCE: apparmor: LSM stacking: switch from SK_CTX() to aa_sock()
- SAUCE: lsm stacking v37: integrity: disassociate ima_filter_rule from
security_audit_rule
- SAUCE: lsm stacking v37: LSM: Infrastructure management of the sock
security
- SAUCE: lsm stacking v37: LSM: Add the lsmblob data structure.
- SAUCE: lsm stacking v37: LSM: provide lsm name and id slot mappings
- SAUCE: lsm stacking v37: IMA: avoid label collisions with stacked LSMs
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_audit_rule_match
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_kernel_act_as
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_secctx_to_secid
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_secid_to_secctx
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_ipc_getsecid
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_current_getsecid
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_inode_getsecid
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_cred_getsecid
- SAUCE: lsm stacking v37: LSM: Specify which LSM to display
- SAUCE: fixup lsm stacking v37: LSM: Specify which LSM to display
- SAUCE: lsm stacking v37: LSM: Ensure the correct LSM context releaser
- SAUCE: lsm stacking v37: LSM: Use lsmcontext in security_secid_to_secctx
- SAUCE: lsm stacking v37: LSM: Use lsmcontext in security_inode_getsecctx
- SAUCE: lsm stacking v37: LSM: Use lsmcontext in
security_dentry_init_security
- SAUCE: lsm stacking v37: LSM: security_secid_to_secctx in netlink
netfilter
- SAUCE: lsm stacking v37: NET: Store LSM netlabel data in a lsmblob
- SAUCE: lsm stacking v37: binder: Pass LSM identifier for confirmation
- SAUCE: lsm stacking v37: LSM: security_secid_to_secctx module selection
- SAUCE: lsm stacking v37: Audit: Keep multiple LSM data in audit_names
- SAUCE: lsm stacking v37: Audit: Create audit_stamp structure
- SAUCE: lsm stacking v37: LSM: Add a function to report multiple LSMs
- SAUCE: lsm stacking v37: Audit: Allow multiple records in an audit_buffer
- SAUCE: lsm stacking v37: Audit: Add record for multiple task security
contexts
- SAUCE: lsm stacking v37: audit: multiple subject lsm values for netlabel
- SAUCE: lsm stacking v37: Audit: Add record for multiple object contexts
- SAUCE: lsm stacking v37: netlabel: Use a struct lsmblob in audit data
- SAUCE: lsm stacking v37: LSM: Removed scaffolding function lsmcontext_init
- SAUCE: lsm stacking v37: LSM: Add /proc attr entry for full LSM context
- SAUCE: lsm stacking v37: AppArmor: Remove the exclusive flag
- SAUCE: security, lsm: Introduce security_create_user_ns()
- SAUCE: bpf-lsm: Make bpf_lsm_userns_create() sleepable
- SAUCE: selinux: Implement userns_create hook
- SAUCE: apparmor: add user namespace creation mediation
- [Config] update configs after apply new apparmor patch set
* [22.10 FEAT] KVM: Secure Execution guest dump encryption with customer keys
- kernel part (LP: #1959940)
- s390/uv: Add SE hdr query information
- s390/uv: Add dump fields to query
- KVM: s390: pv: Add query interface
- KVM: s390: pv: Add dump support definitions
- KVM: s390: pv: Add query dump information
- KVM: s390: Add configuration dump functionality
- KVM: s390: Add CPU dump functionality
- KVM: s390: Add KVM_CAP_S390_PROTECTED_DUMP
- Documentation: virt: Protected virtual machine dumps
- Documentation/virt/kvm/api.rst: Add protvirt dump/info api descriptions
- Documentation/virt/kvm/api.rst: Explain rc/rrc delivery
* [SRU][OEM-5.14/Jammy/OEM-5.17][PATCH 0/1] Fix blank screen on Thinkpad ADL
4K+ panel (LP: #1980621)
- SAUCE: drm/i915: Implement WaEdpLinkRateDataReload
- SAUCE: Revert "drm/i915/display: Re-add check for low voltage sku for max
dp
source rate"
* [UBUNTU 22.04] s390/qeth: cache link_info for ethtool (LP: #1984103)
- s390/qeth: cache link_info for ethtool
* Kernel livepatch support for for s390x (LP: #1639924)
- [Config] Enable EXPOLINE_EXTERN on s390x
* IWLMEI may cause device down at resuming from s2idle (LP: #1987312)
- [Config] Disable IWLMEI
* Raise CONFIG_NR_CPUS (LP: #1967889)
- [Config] Raise riscv64 CONFIG_NR_CPUS to 32
* PolarFire Icicle Kit: missing USB support (LP: #1986970)
- usb: musb: Add support for PolarFire SoC's musb controller
- usb: musb: mpfs: Fix error codes in probe()
- usb: musb: mpfs: add missing clk_disable_unprepare() in mpfs_remove()
- [Config] Enable CONFIG_USB_MUSB_POLARFIRE_SOC on riscv64
* System freeze after resuming from suspend due to PCI ASPM settings
(LP: #1980829)
- SAUCE: PCI/ASPM: Save/restore L1SS Capability for suspend/resume
- SAUCE: whitelist platforms that needs save/restore ASPM L1SS for
suspend/resume
* Please enable CONFIG_SQUASHFS_DECOMP_MULTI_PERCPU (LP: #1980861)
- [Config] Switch from DECOMP_SINGLE to DECOMP_MULTI_PERCPU
* Miscellaneous Ubuntu changes
- [Config] enable security-related configs
- [Packaging] Make stamp-install-<flavor> target reentrant
- [Packaging] Pass kernel build_arch to dkms
- [Packaging] Enable building zfs during cross-compile
- [Packaging] temporarily disable signing for ppc64el
-- Juerg Haefliger <juerg.haefli...@canonical.com> Mon, 17 Oct 2022
13:17:32 +0200
** Changed in: linux-raspi (Ubuntu)
Status: New => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-2978
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-40768
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-raspi in Ubuntu.
https://bugs.launchpad.net/bugs/1993120
Title:
armhf kernel compiled with gcc-12 fails to boot on pi 3/2
Status in linux-raspi package in Ubuntu:
Fix Released
Bug description:
Kinetic 5.19 kernels compiled with gcc-12 for armhf don't boot or hang
on Pi 3 and 2. Seems to work fine on Pi 4.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-raspi/+bug/1993120/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
