"vsock/virtio: Initialization of the dangling pointer occurring in
vsk->trans" applied for CVE-2024-50264

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-50264

** Changed in: linux (Ubuntu Focal)
       Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2089558

Title:
  Focal update: v5.4.286 upstream stable release

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Focal:
  Fix Committed

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v5.4.286 upstream stable release
         from git://git.kernel.org/

  arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
  arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
  arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
  arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
  ARM: dts: rockchip: fix rk3036 acodec node
  ARM: dts: rockchip: drop grf reference from rk3036 hdmi
  ARM: dts: rockchip: Fix the spi controller on rk3036
  ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
  HID: core: zero-initialize the report buffer
  security/keys: fix slab-out-of-bounds in key_task_permission
  enetc: simplify the return expression of enetc_vf_set_mac_addr()
  net: enetc: set MAC address to the VF net_device
  sctp: properly validate chunk size in sctp_sf_ootb()
  can: c_can: fix {rx,tx}_errors statistics
  net: hns3: fix kernel crash when uninstalling driver
  media: stb0899_algo: initialize cfr before using it
  media: dvbdev: prevent the risk of out of memory access
  media: dvb_frontend: don't play tricks with underflow values
  media: adv7604: prevent underflow condition when reporting colorspace
  ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
  media: s5p-jpeg: prevent buffer overflows
  media: cx24116: prevent overflows on SNR calculus
  media: v4l2-tpg: prevent the risk of a division by zero
  pwm: imx-tpm: Use correct MODULO value for EPWM mode
  drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
  drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
  dm cache: correct the number of origin blocks to match the target length
  dm cache: fix out-of-bounds access to the dirty bitset when resizing
  dm cache: optimize dirty bit checking with find_next_bit when resizing
  dm cache: fix potential out-of-bounds access on the first resume
  dm-unstriped: cast an operand to sector_t to prevent potential uint32_t 
overflow
  nfs: Fix KMSAN warning in decode_getfattr_attrs()
  btrfs: reinitialize delayed ref list after deleting it from the list
  mtd: rawnand: protect access to rawnand devices while in suspend
  spi: Fix deadlock when adding SPI controllers on SPI buses
  spi: fix use-after-free of the add_lock mutex
  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in 
uvc_parse_format
  fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
  usb: musb: sunxi: Fix accessing an released usb phy
  USB: serial: io_edgeport: fix use after free in debug printk
  USB: serial: qcserial: add support for Sierra Wireless EM86xx
  USB: serial: option: add Fibocom FG132 0x0112 composition
  USB: serial: option: add Quectel RG650V
  irqchip/gic-v3: Force propagation of the active state with a read-back
  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
  ALSA: usb-audio: Support jack detection on Dell dock
  ALSA: usb-audio: Add quirks for Dell WD19 dock
  NFSD: Fix NFSv4's PUTPUBFH operation
  ftrace: Fix possible use-after-free issue in ftrace_location()
  hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
  vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
  ALSA: usb-audio: Add endianness annotations
  9p: Avoid creating multiple slab caches with the same name
  HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad
  bpf: use kvzmalloc to allocate BPF verifier environment
  sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML
  powerpc/powernv: Free name on error in opal_event_init()
  fs: Fix uninitialized value issue in from_kuid and from_kgid
  net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition
  md/raid10: improve code of mrdev in raid10_sync_request
  mm: clarify a confusing comment for remap_pfn_range()
  mm: fix ambiguous comments for better code readability
  mm/memory.c: make remap_pfn_range() reject unaligned addr
  mm: add remap_pfn_range_notrack
  9p: fix slab cache name creation for real
  mm: avoid leaving partial pfn mappings around in error case
  Linux 5.4.286
  UBUNTU: Upstream stable to v5.4.286

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2089558/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to