mantic/linux: 6.5.0-14.14 -proposed tracker

Boot testing looks fine. One gcp instance has not started yet, slow infra, but everything else was run.

Status changed to 'Confirmed' because the bug affects multiple users.

amd64/generic canonical-certs.pem unchanged
amd64/generic canonical-revoked-certs.pem unchanged
amd64/generic fwinfo unchanged
amd64/generic modules differs
  @@ -4786,7 +4786,6 @@
   sha512-ssse3
   sha512_generic
   shark2
  -shiftfs
   sht15
   sht21
   sht3x
amd64/generic retpoline unchanged
arm64/generic canonical-certs.pem unchanged
arm64/generic canonical-revoked-certs.pem unchanged
arm64/generic fwinfo unchanged
arm64/generic modules differs
  @@ -4000,6 +4000,7 @@
   mtk-uart-apdma
   mtk-vpu
   mtk_dp
  +mtk_iommu
   mtk_nand
   mtk_rpmsg
   mtk_scp
  @@ -5996,7 +5997,6 @@
   sha512-ce
   sha512_generic
   shark2
  -shiftfs
   shmob-drm
   sht15
   sht21
arm64/generic retpoline unchanged
arm64/generic-64k canonical-certs.pem unchanged
arm64/generic-64k canonical-revoked-certs.pem unchanged
arm64/generic-64k fwinfo unchanged
arm64/generic-64k modules differs
  @@ -3999,6 +3999,7 @@
   mtk-uart-apdma
   mtk-vpu
   mtk_dp
  +mtk_iommu
   mtk_nand
   mtk_rpmsg
   mtk_scp
  @@ -5994,7 +5995,6 @@
   sha512-ce
   sha512_generic
   shark2
  -shiftfs
   shmob-drm
   sht15
   sht21
arm64/generic-64k retpoline unchanged
armhf/generic canonical-certs.pem unchanged
armhf/generic canonical-revoked-certs.pem unchanged
armhf/generic fwinfo unchanged
armhf/generic modules differs
  @@ -5586,7 +5586,6 @@
   sha512-arm
   sha512_generic
   shark2
  -shiftfs
   shmob-drm
   sht15
   sht21
armhf/generic retpoline unchanged
ppc64el/generic canonical-certs.pem unchanged
ppc64el/generic canonical-revoked-certs.pem unchanged
ppc64el/generic fwinfo unchanged
ppc64el/generic modules differs
  @@ -4647,7 +4647,6 @@
   sha3_generic
   sha512_generic
   shark2
  -shiftfs
   sht15
   sht21
   sht3x
ppc64el/generic retpoline unchanged
s390x/generic canonical-certs.pem unchanged
s390x/generic canonical-revoked-certs.pem unchanged
s390x/generic fwinfo unchanged
s390x/generic modules differs
  @@ -847,7 +847,6 @@
   sha512_generic
   sha512_s390
   sha_common
  -shiftfs
   sig
   siox-bus-gpio
   siox-core
s390x/generic retpoline unchanged

amd64/generic canonical-certs.pem unchanged
amd64/generic canonical-revoked-certs.pem unchanged
amd64/generic fwinfo unchanged
amd64/generic modules differs
  @@ -4786,7 +4786,6 @@
   sha512-ssse3
   sha512_generic
   shark2
  -shiftfs (accepted)
   sht15
   sht21
   sht3x
amd64/generic retpoline unchanged
arm64/generic canonical-certs.pem unchanged
arm64/generic canonical-revoked-certs.pem unchanged
arm64/generic fwinfo unchanged
arm64/generic modules differs
  @@ -4000,6 +4000,7 @@
   mtk-uart-apdma
   mtk-vpu
   mtk_dp
  +mtk_iommu
   mtk_nand
   mtk_rpmsg
   mtk_scp
  @@ -5996,7 +5997,6 @@
   sha512-ce
   sha512_generic
   shark2
  -shiftfs (accepted)
   shmob-drm
   sht15
   sht21
arm64/generic retpoline unchanged
arm64/generic-64k canonical-certs.pem unchanged
arm64/generic-64k canonical-revoked-certs.pem unchanged
arm64/generic-64k fwinfo unchanged
arm64/generic-64k modules differs
  @@ -3999,6 +3999,7 @@
   mtk-uart-apdma
   mtk-vpu
   mtk_dp
  +mtk_iommu
   mtk_nand
   mtk_rpmsg
   mtk_scp
  @@ -5994,7 +5995,6 @@
   sha512-ce
   sha512_generic
   shark2
  -shiftfs (accepted)
   shmob-drm
   sht15
   sht21
arm64/generic-64k retpoline unchanged
armhf/generic canonical-certs.pem unchanged
armhf/generic canonical-revoked-certs.pem unchanged
armhf/generic fwinfo unchanged
armhf/generic modules differs
  @@ -5586,7 +5586,6 @@
   sha512-arm
   sha512_generic
   shark2
  -shiftfs (accepted)
   shmob-drm
   sht15
   sht21
armhf/generic retpoline unchanged
ppc64el/generic canonical-certs.pem unchanged
ppc64el/generic canonical-revoked-certs.pem unchanged
ppc64el/generic fwinfo unchanged
ppc64el/generic modules differs
  @@ -4647,7 +4647,6 @@
   sha3_generic
   sha512_generic
   shark2
  -shiftfs (accepted)
   sht15
   sht21
   sht3x
ppc64el/generic retpoline unchanged
s390x/generic canonical-certs.pem unchanged
s390x/generic canonical-revoked-certs.pem unchanged
s390x/generic fwinfo unchanged
s390x/generic modules differs
  @@ -847,7 +847,6 @@
   sha512_generic
   sha512_s390
   sha_common
  -shiftfs (accepted)
   sig
   siox-bus-gpio
   siox-core
s390x/generic retpoline unchanged

ADT: Systemd needs investigation, for amd64 it's been failing since forever, and armhf fails now too.

We inherited a bunch of failures from development. I have not seen anything that blocks the release, and I will make my top priority in the next month or so to solve some of these tests.

Kernel deb testing completes, no regressions found. Ready for Updates. Results here: https://trello.com/c/O92erJZE/3334-mantic-linux-image-650-14-generic-650-1414

This bug was fixed in the package linux - 6.5.0-14.14

---------------
linux (6.5.0-14.14) mantic; urgency=medium

  * mantic/linux: 6.5.0-14.14 -proposed tracker (LP: #2042660)

  * Boot log print hang on screen, no login prompt on Aspeed 2600 rev 52 BMC
    (LP: #2042850)
    - drm/ast: Add BMC virtual connector

  * arm64 atomic issues cause disk corruption (LP: #2042573)
    - locking/atomic: scripts: fix fallback ifdeffery

  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts

linux (6.5.0-12.12) mantic; urgency=medium

  * mantic/linux: 6.5.0-12.12 -proposed tracker (LP: #2041536)

  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts
    - [Packaging] update helper scripts
    - debian/dkms-versions -- update from kernel-versions (main/2023.10.30)

  * CVE-2023-5633
    - drm/vmwgfx: Keep a gem reference to user bos in surfaces

  * CVE-2023-5345
    - fs/smb/client: Reset password pointer to NULL

  * CVE-2023-39189
    - netfilter: nfnetlink_osf: avoid OOB read

  * CVE-2023-4244
    - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction

  * apparmor restricts read access of user namespace mediation sysctls to root
    (LP: #2040194)
    - SAUCE: apparmor: open userns related sysctl so lxc can check if restriction
      are in place

  * AppArmor spams kernel log with assert when auditing (LP: #2040192)
    - SAUCE: apparmor: fix request field from a prompt reply that denies all
      access

  * apparmor notification files verification (LP: #2040250)
    - SAUCE: apparmor: fix notification header size

  * apparmor oops when racing to retrieve a notification (LP: #2040245)
    - SAUCE: apparmor: fix oops when racing to retrieve notification

  * SMC stats: Wrong bucket calculation for payload of exactly 4096 bytes
    (LP: #2039575)
    - net/smc: Fix pos miscalculation in statistics

  * Support mipi camera on Intel Meteor Lake platform (LP: #2031412)
    - SAUCE: iommu: intel-ipu: use IOMMU passthrough mode for Intel IPUs on Meteor
      Lake
    - SAUCE: platform/x86: int3472: Add handshake GPIO function

  * CVE-2023-45898
    - ext4: fix slab-use-after-free in ext4_es_insert_extent()

  * CVE-2023-31085
    - ubi: Refuse attaching if mtd's erasesize is 0

  * CVE-2023-5717
    - perf: Disallow mis-matched inherited group reads

  * CVE-2023-5178
    - nvmet-tcp: Fix a possible UAF in queue intialization setup

  * CVE-2023-5158
    - vringh: don't use vringh_kiov_advance() in vringh_iov_xfer()

  * CVE-2023-5090
    - x86: KVM: SVM: always update the x2avic msr interception

  * [SRU][J/L/M] UBUNTU: [Packaging] Make WWAN driver a loadable module
    (LP: #2033406)
    - [Packaging] Make WWAN driver loadable modules

  * Unable to power off the system with MTL CPU (LP: #2039405)
    - Revert "x86/smp: Put CPUs into INIT on shutdown if possible"

  * usbip: error: failed to open /usr/share/hwdata//usb.ids (LP: #2039439)
    - [Packaging] Make linux-tools-common depend on hwdata

  * drop all references to is_rust_module.sh in kernels >= 6.5 (LP: #2038611)
    - [Packaging] drop references to is_rust_module.sh

  * disable shiftfs (LP: #2038522)
    - ...

All tasks have been completed and the bug is being closed