** Changed in: linux-oem-6.1 (Ubuntu) Status: Confirmed => Invalid
** Changed in: linux-oem-6.1 (Ubuntu Jammy) Status: New => Fix Committed -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux-oem-6.1 in Ubuntu. https://bugs.launchpad.net/bugs/2028534 Title: Jammy update: v6.1.40 upstream stable release Status in linux-oem-6.1 package in Ubuntu: Invalid Status in linux-oem-6.1 source package in Jammy: Fix Committed Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.1.40 upstream stable release from git://git.kernel.org/ Linux 6.1.40 net/ncsi: change from ndo_set_mac_address to dev_set_mac_address net/ncsi: make one oem_gma function for all mfr id drm/atomic: Fix potential use-after-free in nonblocking commits net/sched: sch_qfq: reintroduce lmax bound check for MTU swiotlb: mark swiotlb_memblock_alloc() as __init Revert "drm/amd: Disable PSR-SU on Parade 0803 TCON" MIPS: kvm: Fix build error with KVM_MIPS_DEBUG_COP0_COUNTERS enabled scsi: qla2xxx: Fix end of loop test scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue scsi: qla2xxx: Pointer may be dereferenced scsi: qla2xxx: Correct the index of array scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() scsi: qla2xxx: Fix potential NULL pointer dereference scsi: qla2xxx: Fix buffer overrun scsi: qla2xxx: Avoid fcport pointer dereference scsi: qla2xxx: Array index may go out of bound scsi: qla2xxx: Fix mem access after free scsi: qla2xxx: Wait for io return on terminate rport scsi: qla2xxx: Fix hang in task management scsi: qla2xxx: Fix task management cmd fail due to unavailable resource scsi: qla2xxx: Fix task management cmd failure scsi: qla2xxx: Multi-que support for TMF tracing/user_events: Fix struct arg size match check tracing/probes: Fix to update dynamic data counter if fetcharg uses it tracing/probes: Fix not to count error code to total length selftests: mptcp: pm_nl_ctl: fix 32-bit support selftests: mptcp: depend on SYN_COOKIES selftests: mptcp: userspace_pm: report errors with 'remove' tests selftests: mptcp: userspace_pm: use correct server port selftests: mptcp: sockopt: return error if wrong mark selftests: mptcp: connect: fail if nft supposed to work tracing: Fix null pointer dereference in tracing_err_log_open() fprobe: Ensure running fprobe_exit_handler() finished before calling rethook_free() fprobe: Release rethook after the ftrace_ops is unregistered pwm: meson: fix handling of period/duty if greater than UINT_MAX pwm: meson: modify and simplify calculation in meson_pwm_get_state PM: QoS: Restore support for default value on frequency QoS perf/x86: Fix lockdep warning in for_each_sibling_event() on SPR xtensa: ISS: fix call to split_if_spec cifs: if deferred close is disabled then close files immediately drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13 drm/amd/pm: share the code around SMU13 pcie parameters update ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() ring-buffer: Fix deadloop issue on reading trace_pipe net: ena: fix shift-out-of-bounds in exponential backoff regmap-irq: Fix out-of-bounds access when allocating config buffers perf: RISC-V: Remove PERF_HES_STOPPED flag checking in riscv_pmu_start() samples: ftrace: Save required argument registers in sample trampolines nvme: don't reject probe due to duplicate IDs for single-ported PCIe devices tracing: Fix memory leak of iter->temp when reading trace_pipe tracing/histograms: Add histograms to hist_vars if they have referenced variables dm: verity-loadpin: Add NULL pointer check for 'bdev' parameter s390/decompressor: fix misaligned symbol build error bus: ixp4xx: fix IXP4XX_EXP_T1_MASK Revert "8250: add support for ASIX devices with a FIFO bug" soundwire: qcom: fix storing port config out-of-bounds opp: Fix use-after-free in lazy_opp_tables after probe deferral meson saradc: fix clock divider mask length xhci: Show ZHAOXIN xHCI root hub speed correctly xhci: Fix TRB prefetch issue of ZHAOXIN hosts xhci: Fix resume issue of some ZHAOXIN hosts ceph: don't let check_caps skip sending responses for revoke msgs ceph: fix blindly expanding the readahead windows ceph: add a dedicated private data for netfs rreq libceph: harden msgr2.1 frame segment length checks firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() tty: serial: imx: fix rs485 rx after tx tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error serial: atmel: don't enable IRQs prematurely drm/ttm: Don't leak a resource on swapout move error drm/amdgpu: avoid restore process run into dead loop. drm/amd/display: Add monitor specific edid quirk drm/amd/display: Correct `DMUB_FW_VERSION` macro drm/amd/display: add a NULL pointer check drm/amd: Disable PSR-SU on Parade 0803 TCON drm/amdgpu: fix clearing mappings for BOs that are always valid in VM drm/amd/display: disable seamless boot if force_odm_combine is enabled drm/amd/display: Remove Phantom Pipe Check When Calculating K1 and K2 drm/amd/display: edp do not add non-edid timings drm/amd/display: fix seamless odm transitions drm/rockchip: vop: Leave vblank enabled in self-refresh drm/atomic: Allow vblank-enabled + self-refresh "disable" scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() fs: dlm: fix mismatch of plock results from userspace fs: dlm: make F_SETLK use unkillable wait_event fs: dlm: interrupt posix locks only when process is killed fs: dlm: fix cleanup pending ops when interrupted fs: dlm: return positive pid value for F_GETLK dm init: add dm-mod.waitfor to wait for asynchronously probed block devices md/raid0: add discard support for the 'original' layout mfd: pm8008: Fix module autoloading misc: pci_endpoint_test: Re-init completion for every test misc: pci_endpoint_test: Free IRQs before removing the device PCI: rockchip: Set address alignment for endpoint mode PCI: rockchip: Use u32 variable to access 32-bit registers PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked PCI: rockchip: Write PCI Device ID to correct register PCI: rockchip: Assert PCI Configuration Enable bit after probe PCI: epf-test: Fix DMA transfer completion detection PCI: epf-test: Fix DMA transfer completion initialization PCI: qcom: Disable write access to read only registers for IP v2.3.3 PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 PCI: Release resource invalidated by coalescing PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold s390/zcrypt: do not retry administrative requests scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O dm integrity: reduce vmalloc space footprint on 32-bit architectures hwrng: imx-rngc - fix the timeout for init and self check jfs: jfs_dmap: Validate db_l2nbperpage while mounting ext2/dax: Fix ext2_setsize when len is page aligned soc: qcom: mdt_loader: Fix unconditional call to scm_pas_mem_setup fs: dlm: revert check required context while close ext4: only update i_reserved_data_blocks on successful block allocation ext4: turn quotas off if mount failed after enabling quotas ext4: fix to check return value of freeze_bdev() in ext4_shutdown() ext4: fix wrong unit use in ext4_mb_new_blocks ext4: get block from bh in ext4_free_blocks for fast commit replay ext4: fix wrong unit use in ext4_mb_clear_bb ext4: Fix reusing stale buffer heads from last failed mounting MIPS: KVM: Fix NULL pointer dereference MIPS: Loongson: Fix cpu_probe_loongson() again powerpc/64s: Fix native_hpte_remove() to be irq-safe powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 misc: fastrpc: Create fastrpc scalar with correct buffer count powerpc: Fail build if using recordmcount with binutils v2.37 tracing/user_events: Fix incorrect return value for writing operation when events are disabled kasan: add kasan_tag_mismatch prototype net: phy: dp83td510: fix kernel stall during netboot in DP83TD510E PHY driver net: bcmgenet: Ensure MDIO unregistration has clocks enabled mtd: rawnand: meson: fix unaligned DMA buffers handling tpm: return false from tpm_amd_is_rng_defective on non-x86 platforms tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation tpm: Do not remap from ACPI resources again for Pluton TPM pinctrl: amd: Unify debounce handling into amd_pinconf_set() pinctrl: amd: Drop pull up select configuration pinctrl: amd: Use amd_pinconf_set() for all config options pinctrl: amd: Only use special debounce behavior for GPIO 0 pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts on probe" pinctrl: amd: Detect and mask spurious interrupts pinctrl: amd: Fix mistake in handling clearing pins at startup pinctrl: amd: Detect internal GPIO0 debounce handling pinctrl: amd: Add fields for interrupt status and wake status pinctrl: amd: Adjust debugfs output pinctrl: amd: Add Z-state wake control bits f2fs: fix deadlock in i_xattr_sem and inode page lock f2fs: fix the wrong condition to determine atomic context drm/amd/pm: add abnormal fan detection for smu 13.0.0 drm/amdgpu: Fix minmax warning drm/amdgpu: add the fan abnormal detection feature drm/amd/pm: revise the ASPM settings for thunderbolt attached scenario drm/amdgpu/sdma4: set align mask to 255 drm/client: Send hotplug event after registering a client cifs: fix session state check in smb2_find_smb_ses ovl: fix null pointer dereference in ovl_get_acl_rcu() ovl: let helper ovl_i_path_real() return the realinode fs/ntfs3: Check fields while reading nvme-pci: fix DMA direction of unmapping integrity data net/sched: sch_qfq: account for stab overhead in qfq_enqueue net/sched: sch_qfq: refactor parsing of netlink parameters wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() net/sched: make psched_mtu() RTNL-less safe netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write() riscv: mm: fix truncation warning on RV32 net/sched: flower: Ensure both minimum and maximum ports are specified bpf: cpumap: Fix memory leak in cpu_map_update_elem wifi: airo: avoid uninitialized warning in airo_get_rate() erofs: fix fsdax unavailability for chunk-based regular files erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF erofs: avoid useless loops in z_erofs_pcluster_readmore() when reading beyond EOF octeontx2-pf: Add additional check for MCAM rules drm/i915: Fix one wrong caching mode enum usage drm/i915: Don't preserve dpll_hw_state for slave crtc in Bigjoiner riscv, bpf: Fix inconsistent JIT image generation nvme: fix the NVME_ID_NS_NVM_STS_MASK definition igc: Fix inserting of empty frame for launchtime igc: Fix launchtime before start of cycle kernel/trace: Fix cleanup logic of enable_trace_eprobe platform/x86: wmi: Break possible infinite loop when parsing GUID net: dsa: qca8k: Add check for skb_copy ipv6/addrconf: fix a potential refcount underflow for idev NTB: ntb_tool: Add check for devm_kcalloc NTB: ntb_transport: fix possible memory leak while device_register() fails ntb: intel: Fix error handling in intel_ntb_pci_driver_init() NTB: amd: Fix error handling in amd_ntb_pci_driver_init() ntb: idt: Fix error handling in idt_pci_driver_init() udp6: fix udp6_ehashfn() typo icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). net: prevent skb corruption on frag list segmentation net: bgmac: postpone turning IRQs off to avoid SoC hangs ionic: remove WARN_ON to prevent panic_on_warn octeontx2-af: Move validation of ptp pointer before its usage octeontx2-af: Promisc enable/disable through mbox gve: Set default duplex configuration to full net/sched: cls_fw: Fix improper refcount update leads to use-after-free net: mvneta: fix txq_map in case of txq_number==1 bpf: Fix max stack depth check for async callbacks scsi: ufs: ufs-mediatek: Add dependency for RESET_CONTROLLER scsi: qla2xxx: Fix error code in qla2x00_start_sp() blk-crypto: use dynamic lock class for blk_crypto_profile::lock igc: Handle PPS start time programming for past time values igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings net/mlx5e: Check for NOT_READY flag state after locking net/mlx5e: fix memory leak in mlx5e_ptp_open net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create net/mlx5e: fix double free in mlx5e_destroy_flow_table igc: Remove delay during TX ring configuration ice: Fix max_rate check while configuring TX rate limits drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags swiotlb: reduce the number of areas to match actual memory pool size swiotlb: reduce the swiotlb buffer size on allocation failure swiotlb: always set the number of areas before allocating the pool drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime drm/panel: simple: Add connector_type for innolux_at043tn24 ksmbd: fix out of bounds read in smb2_sess_setup ksmbd: add missing compound request handing in some commands workqueue: clean up WORK_* constant types, clarify masking net: lan743x: Don't sleep in atomic context HID: amd_sfh: Fix for shift-out-of-bounds HID: amd_sfh: Rename the float32 variable To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-oem-6.1/+bug/2028534/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp