[SECURITY] Fedora 38 Update: kernel-6.4.4-200.fc38
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-e4e985b5dd
2023-07-23 01:27:02.654052
--------------------------------------------------------------------------------
Name : kernel
Product : Fedora 38
Version : 6.4.4
Release : 200.fc38
URL : https://www.kernel.org/
Summary : The Linux kernel
Description :
The kernel meta package
--------------------------------------------------------------------------------
Update Information:
The 6.4.4 stable kernel rebase contains additional hardware support, new
features, and a number of important fixes across the tree.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 19 2023 Justin M. Forbes <jforbes(a)fedoraproject.org> [6.4.4-0]
- move ownership of /lib/modules/<ver>/ to kernel-core (Thorsten Leemhuis)
- Let kernel-modules-core own the files depmod generates. (Thorsten Leemhuis)
- Add more bugs fixed in 6.4.4 (Justin M. Forbes)
- Add some bugs to be fixed in 6.4.4 (Justin M. Forbes)
- Add kunit configs for 6.4.4 (Justin M. Forbes)
- Add hid-uclogic-test to mod-internal.list (Thorsten Leemhuis)
- Add input_test to mod-intenal.list (Thorsten Leemhuis)
- fedora: wifi: tweak ZYDAS WiFI config options (Peter Robinson)
- Fix module filters for aarch64 and ppc (Justin M. Forbes)
- Fix up some config mismatches (Justin M. Forbes)
- Linux v6.4.4
* Tue Jul 11 2023 Justin M. Forbes <jforbes(a)fedoraproject.org> [6.4.3-0]
- drm/amd: Don't try to enable secure display TA multiple times (Mario Limonciello)
- drm/amdgpu: fix number of fence calculations (Christian K��nig)
- drm/amdgpu: check RAS irq existence for VCN/JPEG (Tao Zhou)
- drm/amd/pm: add abnormal fan detection for smu 13.0.0 (Kenneth Feng)
- drm/amdgpu/sdma4: set align mask to 255 (Alex Deucher)
- drm/amd/pm: revise the ASPM settings for thunderbolt attached scenario (Evan Quan)
- drm/amdgpu: Skip mark offset for high priority rings (Jiadong Zhu)
- drm/amdgpu: make sure that BOs have a backing store (Christian K��nig)
- drm/amdgpu: make sure BOs are locked in amdgpu_vm_get_memory (Christian K��nig)
- Linux 6.4.3 (Greg Kroah-Hartman)
- fork: lock VMAs of the parent process when forking (Suren Baghdasaryan)
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page (Liu Shixin)
- mm: call arch_swap_restore() from do_swap_page() (Peter Collingbourne)
- mm: lock newly mapped VMA with corrected ordering (Hugh Dickins)
- mm: lock newly mapped VMA which can be modified after it becomes visible (Suren
Baghdasaryan)
- mm: lock a vma before stack expansion (Suren Baghdasaryan)
- fedora: arm: some minor updates (Peter Robinson)
- fedora: bluetooth: enable AOSP extensions (Peter Robinson)
- Fix up buildReqs for UKI (Justin M. Forbes)
- mm: disable CONFIG_PER_VMA_LOCK until its fixed (Suren Baghdasaryan)
- fork: lock VMAs of the parent process when forking (Suren Baghdasaryan)
- Turn on NET_VENDOR_QUALCOMM so that rmnet builds (Justin M. Forbes)
- Fix missing rhel config (Justin M. Forbes)
- Linux v6.4.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2220892 - CVE-2023-35001 kernel: nf_tables: stack-out-of-bounds-read in
nft_byteorder_eval()
https://bugzilla.redhat.com/show_bug.cgi?id=2220892
[ 2 ] Bug #2220893 - CVE-2023-31248 kernel: nf_tables: use-after-free in
nft_chain_lookup_byid()
https://bugzilla.redhat.com/show_bug.cgi?id=2220893
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-e4e985b5dd' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------