This bug was fixed in the package linux-gcp - 6.2.0-1017.19
---------------
linux-gcp (6.2.0-1017.19) lunar; urgency=medium
* lunar/linux-gcp: 6.2.0-1017.19 -proposed tracker (LP: #2038064)
* CVE-2023-42755
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
* SEV_SNP failure to init (LP: #2037316)
- x86/sev-es: Allow copy_from_kernel_nofault in earlier boot
- x86/sev-es: Only set x86_virt_bits to correct value
[ Ubuntu: 6.2.0-35.35 ]
* lunar/linux: 6.2.0-35.35 -proposed tracker (LP: #2038229)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* CVE-2023-4244
- netfilter: nf_tables: don't skip expired elements during walk
- netfilter: nf_tables: integrate pipapo into commit protocol
- netfilter: nft_set_rbtree: fix overlap expiration walk
- netfilter: nf_tables: adapt set backend to use GC transaction API
- netfilter: nft_set_hash: mark set element as dead when deleting from
packet
path
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nf_tables: GC transaction API to avoid race with control plane
- netfilter: nf_tables: remove busy mark and gc batch API
- netfilter: nf_tables: don't fail inserts if duplicate has expired
- netfilter: nf_tables: fix kdoc warnings after gc rework
- netfilter: nf_tables: fix GC transaction races with netns and netlink
event
exit path
- netfilter: nf_tables: GC transaction race with netns dismantle
- netfilter: nf_tables: GC transaction race with abort path
- netfilter: nf_tables: use correct lock to protect gc_list
- netfilter: nf_tables: defer gc run if previous batch is still pending
- netfilter: nft_dynset: disallow object maps
- netfilter: nft_set_rbtree: skip sync GC for new elements in this
transaction
* CVE-2023-5197
- netfilter: nf_tables: skip bound chain in netns release path
- netfilter: nf_tables: disallow rule removal from chain binding
* CVE-2023-4921
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
* CVE-2023-4881
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
* CVE-2023-4623
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
* CVE-2023-4622
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
* CVE-2023-42756
- netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
* CVE-2023-42755
- net/sched: Retire rsvp classifier
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
* CVE-2023-42753
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
ip_set_hash_netportnet.c
* CVE-2023-42752
- igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
- net: add SKB_HEAD_ALIGN() helper
- net: remove osize variable in __alloc_skb()
- net: factorize code in kmalloc_reserve()
- net: deal with integer overflows in kmalloc_reserve()
* CVE-2023-34319
- xen/netback: Fix buffer overrun triggered by unusual packet
-- John Cabaj <[email protected]> Thu, 05 Oct 2023 21:59:43
-0500
** Changed in: linux-gcp (Ubuntu Lunar)
Status: Fix Committed => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-34319
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-4244
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-42752
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-42753
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-42755
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-42756
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-4622
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-4623
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-4881
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-4921
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-5197
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-gcp in Ubuntu.
https://bugs.launchpad.net/bugs/2037316
Title:
SEV_SNP failure to init
Status in linux-aws package in Ubuntu:
Fix Released
Status in linux-gcp package in Ubuntu:
Fix Released
Status in linux-aws source package in Jammy:
Invalid
Status in linux-gcp source package in Jammy:
Fix Committed
Status in linux-aws source package in Lunar:
Fix Committed
Status in linux-gcp source package in Lunar:
Fix Released
Status in linux-aws source package in Mantic:
Fix Released
Status in linux-gcp source package in Mantic:
Fix Released
Bug description:
[Impact]
* Kernel fails to boot on SEV-SNP instances when compiled with GCC
12.3.0
[Fix]
*
https://lore.kernel.org/lkml/[email protected]/
[Test Case]
* Compile tested
* Boot tested
* Tested by Google
[Where things could go wrong]
* Patches relatively isolated and maintain similar checking
functionality, just earlier in boot. Likely a low chance of
regression.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-aws/+bug/2037316/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
