This bug was fixed in the package linux-oracle - 5.8.0-1029.30

---------------
linux-oracle (5.8.0-1029.30) groovy; urgency=medium

  [ Ubuntu: 5.8.0-53.60 ]

  * CVE-2021-3491
    - io_uring: fix provide_buffers sign extension
    - io_uring: fix overflows checks in provide buffers
    - SAUCE: proc: Avoid mixing integer types in mem_rw()
    - SAUCE: io_uring: truncate lengths larger than MAX_RW_COUNT on provide
      buffers
  * CVE-2021-3490
    - bpf: Fix a verifier failure with xor
    - SAUCE: bpf: verifier: fix ALU32 bounds tracking with bitwise ops
  * CVE-2021-3489
    - SAUCE: bpf: ringbuf: deny reserve of buffers larger than ringbuf
    - SAUCE: bpf: prevent writable memory-mapping of read-only ringbuf pages

 -- Stefan Bader <stefan.ba...@canonical.com>  Thu, 06 May 2021 11:26:55
+0200

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-gcp in Ubuntu.
https://bugs.launchpad.net/bugs/1908264

Title:
  Disable Atari partition support for cloud kernels

Status in linux-aws package in Ubuntu:
  In Progress
Status in linux-azure package in Ubuntu:
  Fix Released
Status in linux-azure-4.15 package in Ubuntu:
  Invalid
Status in linux-gcp package in Ubuntu:
  New
Status in linux-gke package in Ubuntu:
  New
Status in linux-gkeop package in Ubuntu:
  New
Status in linux-oracle package in Ubuntu:
  New
Status in linux-aws source package in Xenial:
  Fix Committed
Status in linux-azure source package in Xenial:
  Fix Released
Status in linux-azure-4.15 source package in Xenial:
  Invalid
Status in linux-aws source package in Bionic:
  Fix Released
Status in linux-azure source package in Bionic:
  Invalid
Status in linux-azure-4.15 source package in Bionic:
  Fix Released
Status in linux-gcp source package in Bionic:
  Fix Committed
Status in linux-oracle source package in Bionic:
  Fix Released
Status in linux-aws source package in Focal:
  Fix Released
Status in linux-azure source package in Focal:
  Fix Released
Status in linux-azure-4.15 source package in Focal:
  Invalid
Status in linux-gcp source package in Focal:
  Fix Released
Status in linux-gke source package in Focal:
  Fix Released
Status in linux-gkeop source package in Focal:
  Fix Released
Status in linux-oracle source package in Focal:
  Fix Released
Status in linux-aws source package in Groovy:
  Fix Committed
Status in linux-azure source package in Groovy:
  Fix Released
Status in linux-azure-4.15 source package in Groovy:
  Invalid
Status in linux-gcp source package in Groovy:
  Fix Released
Status in linux-oracle source package in Groovy:
  Fix Released
Status in linux-aws source package in Hirsute:
  In Progress
Status in linux-azure source package in Hirsute:
  Fix Released
Status in linux-azure-4.15 source package in Hirsute:
  Invalid
Status in linux-gcp source package in Hirsute:
  New
Status in linux-oracle source package in Hirsute:
  New

Bug description:
  [Impact]
  Atari partition tables have very broad specifications, and can spontaneously 
show up on uncleared disks with "garbage" data. There have been reports of 
misinterpreted AHDI partition tables before (see [0] and [1]), usually as an 
unintended side-effect of using non-zeroed disks. Users of this specific 
partition scheme are unlikely to be on AWS instances, so we should disable them.

  [0] 
https://lore.kernel.org/linux-block/1467736712-11825-1-git-send-email-kris...@linux.vnet.ibm.com/
  [1] https://mail-index.netbsd.org/port-atari/1995/11/19/0001.html

  [Test Case]
  Ensure that CONFIG_ATARI_PARTITION is not set in /boot/config-$(uname -r)

  [Fix]
  Unset CONFIG_ATARI_PARTITION in debian.aws/config/config.common.ubuntu

  [Regression Potential]
  There could be unexpected dependencies on Atari partitions that are impacted 
by this change. Considering Atari hardware hasn't been produced in a long time, 
and is unlikely to be used in AWS instances, the regression potential should be 
very low.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-aws/+bug/1908264/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to