7379967...
by
Dimitri John Ledkov
on 2022-07-14
UBUNTU: [Packaging] Update etc/getabis
Correct the pool directory prefix for cranky open to work.
Signed-off-by: Dimitri John Ledkov <email address hidden>
27648f9...
by
Pavel Skripkin <email address hidden>
on 2022-06-28
UBUNTU: SAUCE: ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
Syzbot reported use-after-free Read in ath9k_hif_ usb_rx_ cb() [0]. The
problem was in incorrect htc_handle- >drv_priv initialization.
Probable call trace which can trigger use-after-free:
ath9k_htc_ probe_device( )
/* htc_handle- >drv_priv = priv; */
ath9k_ htc_wait_ for_target( ) <--- Failed
ieee80211_ free_hw( ) <--- priv pointer is freed
<IRQ>
...
ath9k_hif_ usb_rx_ cb()
ath9k_ hif_usb_ rx_stream( )
RX_STAT_INC() <--- htc_handle- >drv_priv access
In order to not add fancy protection for drv_priv we can move
htc_handle- >drv_priv initialization at the end of the
ath9k_htc_ probe_device( ) and add helper macro to make
all *_STAT_* macros NULL safe, since syzbot has reported related NULL
deref in that macros [1]
Link: https:/ /syzkaller. appspot. com/bug? id=6ead44e37afb 6866ac0c7dd121b 4ce07cb665f60 [0]
Link: https:/ /syzkaller. appspot. com/bug? id=b8101ffcec10 7c0567a0cd8acbb acec91e9ee8de [1]
Fixes: fb9987d0f748 ("ath9k_htc: Support for AR9271 chipset.")
Reported- and-tested- by: <email address hidden>
Reported- and-tested- by: <email address hidden>
Signed-off-by: Pavel Skripkin <email address hidden>
Acked-by: Toke Høiland-Jørgensen <email address hidden>
Signed-off-by: Kalle Valo <email address hidden>
Link: https:/ /lore.kernel. org/r/d57bbedc8 57950659bfacac0 ab48790c1eda00c 8 <email address hidden>
(cherry picked from commit 0ac4827f78c7ffe 8eef074bc010e7e 34bc22f533 ath.git)
CVE-2022-1679
Signed-off-by: Thadeu Lima de Souza Cascardo <email address hidden>
Signed-off-by: Dimitri John Ledkov <email address hidden>
b4781ca...
by
Pablo Neira Ayuso <email address hidden>
on 2022-07-06
netfilter: nf_tables: stricter validation of element data
Make sure element data type and length do not mismatch the one specified
by the set declaration.
Fixes: 7d7402642eaf ("netfilter: nf_tables: variable sized set element keys / data")
Reported-by: Hugues ANGUELKOV <email address hidden>
Signed-off-by: Pablo Neira Ayuso <email address hidden>
CVE-2022-34918
(cherry picked from commit 7e6bc1f6cabcd30 aba0b11219d8e01 b952eacbb6 net.git)
Signed-off-by: Cengiz Can <email address hidden>
Signed-off-by: Dimitri John Ledkov <email address hidden>
401cfa2...
by
Paolo Pisati
on 2022-07-01
UBUNTU: Ubuntu- hwe-5.17- 5.17.0- 8.8~22. 04.6
Signed-off-by: Paolo Pisati <email address hidden>
fa562f3...
by
Paolo Pisati
on 2022-07-01
UBUNTU: link-to-tracker: update tracking bug
BugLink: https:/ /bugs.launchpad .net/bugs/ 1980479
Properties: no-test-build
Signed-off-by: Paolo Pisati <email address hidden>
2ecd3fc...
by
Paolo Pisati
on 2022-07-01
UBUNTU: [Config] adjust annotation
b22f38b...
by
Paolo Pisati
on 2022-07-01
UBUNTU: Start new release
Ignore: yes
Signed-off-by: Paolo Pisati <email address hidden>
64d7985...
by
Paolo Pisati
on 2022-07-01
Revert "perf tools: Use Python devtools for version autodetection rather than runtime"
This reverts commit c92b397b714ff2b 762e5fcf4eddc29 bfb71fb46e.
Signed-off-by: Paolo Pisati <email address hidden>
74d92bd...
by
Paolo Pisati
on 2022-06-30
UBUNTU: [Config] updateconfigs following v5.17.15 cherry-pick
Signed-off-by: Paolo Pisati <email address hidden>
18a6843...
by
Greg Kroah-Hartman <email address hidden>
on 2022-06-14
Linux 5.17.15
BugLink: https:/ /bugs.launchpad .net/bugs/ 1980389
Link: https://<email address hidden>
Link: https://<email address hidden>
Tested-by: Florian Fainelli <email address hidden>
Tested-by: Justin M. Forbes <email address hidden>
Tested-by: Fox Chen <email address hidden>
Tested-by: Shuah Khan <email address hidden>
Tested-by: Sudip Mukherjee <email address hidden>
Tested-by: Ron Economos <email address hidden>
Tested-by: Guenter Roeck <email address hidden>
Signed-off-by: Greg Kroah-Hartman <email address hidden>
Signed-off-by: Paolo Pisati <email address hidden>