[SECURITY] Fedora 39 Update: kernel-6.8.10-200.fc39
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-49fcf86f58
2024-05-22 01:20:44.423456
--------------------------------------------------------------------------------
Name : kernel
Product : Fedora 39
Version : 6.8.10
Release : 200.fc39
URL : https://www.kernel.org/
Summary : The Linux kernel
Description :
The kernel meta package
--------------------------------------------------------------------------------
Update Information:
The 6.8.10 stable kernel update contains a number of important fixes across the
tree
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 17 2024 Augusto Caringi <acaringi(a)redhat.com> [6.8.10-200]
- Revert "cpupower: Bump soname version" (Justin M. Forbes)
- Drop soname for libcpupower.so since we reverted the bump (Justin M. Forbes)
* Fri May 17 2024 Augusto Caringi <acaringi(a)redhat.com> [6.8.10-0]
- redhat/configs: Enable CONFIG_DEBUG_INFO_BTF_MODULES (Augusto Caringi)
- Add bugs to BugsFixed for 6.8.10 (Justin M. Forbes)
- Turn on INIT_ON_ALLOC_DEFAULT_ON for Fedora (Justin M. Forbes)
- Reapply "drm/qxl: simplify qxl_fence_wait" (Linus Torvalds)
- BugsFixed updates for 6.8.10 (Justin M. Forbes)
- e1000e: change usleep_range to udelay in PHY mdic access (Vitaly Lifshits)
- Linux v6.8.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2276325 - Lenovo M910Q hardware boot fails with "Bug: scheduling while
atomic" when ethernet connected
https://bugzilla.redhat.com/show_bug.cgi?id=2276325
[ 2 ] Bug #2279678 - Missing automatic memory initialization: enable
CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
https://bugzilla.redhat.com/show_bug.cgi?id=2279678
[ 3 ] Bug #2279734 - Kernel 6.8.8 deadlocks with 100% cpu when run in qemu/kvm
https://bugzilla.redhat.com/show_bug.cgi?id=2279734
[ 4 ] Bug #2280396 - CVE-2024-21823 kernel: dmaengine/idxd: hardware erratum allows
potential security problem with direct access by untrusted application [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2280396
[ 5 ] Bug #2280408 - CVE-2024-27401 kernel: firewire: nosy: ensure user_length is taken
into account when fetching packet contents [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2280408
[ 6 ] Bug #2280461 - CVE-2024-27400 kernel: drm/amdgpu: once more fix the call oder in
amdgpu_ttm_move() v2 [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2280461
[ 7 ] Bug #2280463 - CVE-2024-27399 kernel: Bluetooth: l2cap: fix null-ptr-deref in
l2cap_chan_timeout [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2280463
[ 8 ] Bug #2280465 - CVE-2024-27398 kernel: Bluetooth: Fix use-after-free bugs caused by
sco_sock_timeout [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2280465
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-49fcf86f58' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------