Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.1.59 upstream stable release
       from git://git.kernel.org/

            
Linux 6.1.59
ALSA: hda/realtek - Fixed two speaker platform
powerpc/64e: Fix wrong test in __ptep_test_and_clear_young()
powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE
dmaengine: mediatek: Fix deadlock caused by synchronize_irq()
dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq
x86/alternatives: Disable KASAN in apply_alternatives()
usb: cdnsp: Fixes issue with dequeuing not queued requests
usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails
usb: typec: altmodes/displayport: Signal hpd low when exiting mode
counter: microchip-tcb-capture: Fix the use of internal GCLK logic
counter: chrdev: fix getting array extensions
scsi: ufs: core: Correct clear TM error log
pinctrl: avoid unsafe code pattern in find_pinctrl()
dma-buf: add dma_fence_timestamp helper
cgroup: Remove duplicates in cgroup v1 tasks file
usb: typec: ucsi: Use GET_CAPABILITY attributes data to set power supply scope
nfp: flower: avoid rmmod nfp crash issues
mctp: perform route lookups under a RCU read-side lock
tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx 
== 0 case
Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table
Input: xpad - add PXN V900 support
Input: psmouse - fix fast_reconnect function for PS/2 mode
Input: powermate - fix use-after-free in powermate_config_complete
ceph: fix type promotion bug on 32bit systems
ceph: fix incorrect revoked caps assert in ceph_fill_file_size()
libceph: use kernel_connect()
powerpc/47x: Fix 47x syscall return crash
thunderbolt: Restart XDomain discovery handshake after failure
thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding
thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge
mcb: remove is_added flag from mcb_device struct
x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
perf/x86/lbr: Filter vsyscall addresses
ksmbd: not allow to open file if delelete on close bit is set
ACPI: EC: Add quirk for the HP Pavilion Gaming 15-dk1xxx
ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
drm/amd/display: Don't set dpms_off for seamless boot
drm/amdgpu: add missing NULL check
drm/atomic-helper: relax unregistered connector check
arm64: dts: mediatek: mt8195-demo: update and reorder reserved memory regions
arm64: dts: mediatek: mt8195-demo: fix the memory size to 8GB
iio: addac: Kconfig: update ad74413r selections
iio: pressure: ms5611: ms5611_prom_is_valid false negative bug
iio: pressure: dps310: Adjust Timeout Settings
iio: admv1013: add mixer_vgate corner cases
iio: dac: ad3552r: Correct device IDs
iio: adc: imx8qxp: Fix address for command buffer registers
iio: imu: bno055: Fix missing Kconfig dependencies
iio: pressure: bmp280: Fix NULL pointer exception
usb: musb: Modify the "HWVers" register address
usb: musb: Get the musb_qh poniter after musb_giveback
usb: hub: Guard against accesses to uninitialized BOS descriptors
usb: cdns3: Modify the return value of cdns_set_active () to void when 
CONFIG_PM_SLEEP is disabled
usb: dwc3: Soft reset phy on probe for host
net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer
dmaengine: stm32-mdma: set in_flight_bytes in case CRQA flag is set
dmaengine: stm32-mdma: use Link Address Register to compute residue
dmaengine: stm32-dma: fix residue in case of MDMA chaining
dmaengine: stm32-dma: fix stm32_dma_prep_slave_sg in case of MDMA chaining
dmaengine: stm32-mdma: abort resume if no ongoing transfer
tcp: enforce receive buffer memory limits by allowing the tcp window to shrink
workqueue: Override implicit ordered attribute in 
workqueue_apply_unbound_cpumask()
nfc: nci: assert requested protocol is valid
pinctrl: renesas: rzn1: Enable missing PINMUX
net/smc: Fix pos miscalculation in statistics
net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp
ixgbe: fix crash with empty VF macvlan list
net/mlx5e: macsec: use update_pn flag instead of PN comparation
net: phy: mscc: macsec: reject PN update requests
net: macsec: indicate next pn update when offloading
net: refine debug info in skb_checksum_help()
bpf: Fix verifier log for async callback return values
drm/vmwgfx: fix typo of sizeof argument
riscv, bpf: Sign-extend return values
riscv, bpf: Factor out emit_call for kernel and bpf context
xen-netback: use default TX queue size for vifs
mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type
ieee802154: ca8210: Fix a potential UAF in ca8210_probe
ravb: Fix use-after-free issue in ravb_tx_timeout_work()
ravb: Fix up dma_free_coherent() call in ravb_remove()
arm64: dts: mediatek: mt8195: Set DSU PMU status to fail
can: sun4i_can: Only show Kconfig if ARCH_SUNXI is set
can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior
net: dsa: qca8k: fix potential MDIO bus conflict when accessing internal PHYs 
via management frames
phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers
phy: lynx-28g: lock PHY while performing CDR lock workaround
phy: lynx-28g: cancel the CDR check work item on the remove path
drm/msm/dp: Add newlines to debug printks
drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow
drm/msm/dsi: fix irq_of_parse_and_map() error checking
drm/msm/dsi: skip the wait for video mode done if not applicable
drm/msm/dp: do not reinitialize phy unless retry during link training
pinctrl: nuvoton: wpcm450: fix out of bounds write
ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP
ALSA: hda/realtek - ALC287 I2S speaker platform support
ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx
ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED
ASoC: fsl_sai: Don't disable bitclock for i.MX8MP
ASoC: fsl_sai: MCLK bind with TX/RX enable bit
ASoC: Use of_property_read_bool() for boolean properties
ASoC: Intel: soc-acpi: Add entry for sof_es8336 in MTL match table.
ASoC: Intel: sof_sdw: add support for SKU 0B14
ASoC: Intel: soc-acpi: Add entry for HDMI_In capture support in MTL match table
ASoC: simple-card-utils: fixup simple_util_startup() error handling
ASoC: SOF: amd: fix for firmware reload failure after playback
ALSA: hda/realtek: Change model for Intel RVP board
ALSA: usb-audio: Fix microphone sound on Nexigo webcam.
ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset
KEYS: trusted: Remove redundant static calls usage
irqchip: renesas-rzg2l: Fix logic to clear TINT interrupt source
dt-bindings: interrupt-controller: renesas,rzg2l-irqc: Update description for 
'#interrupt-cells' property
arm64: dts: qcom: sm8150: extend the size of the PDC resource
net: prevent address rewrite in kernel_bind()
ata: libata-scsi: Disable scsi device manage_system_start_stop
ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM
quota: Fix slow quotaoff
HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
scsi: Do not rescan devices with a suspended queue
platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section 
mismatch warning
platform/x86: think-lmi: Fix reference leak
perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7
RDMA/cxgb4: Check skb value for failure to allocate
drm/i915: Don't set PIPE_CONTROL_FLUSH_L3 for aux inval
mptcp: fix delegated action races
net: mana: Fix TX CQE error handling

** Affects: linux-oem-6.1 (Ubuntu)
     Importance: Undecided
         Status: Confirmed

** Affects: linux-oem-6.1 (Ubuntu Jammy)
     Importance: Undecided
         Status: New


** Tags: kernel-stable-tracking-bug

** Changed in: linux-oem-6.1 (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux-oem-6.1 (Ubuntu Jammy)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-oem-6.1 in Ubuntu.
https://bugs.launchpad.net/bugs/2042572

Title:
  Jammy update: v6.1.59 upstream stable release

Status in linux-oem-6.1 package in Ubuntu:
  Confirmed
Status in linux-oem-6.1 source package in Jammy:
  New

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v6.1.59 upstream stable release
         from git://git.kernel.org/

              
  Linux 6.1.59
  ALSA: hda/realtek - Fixed two speaker platform
  powerpc/64e: Fix wrong test in __ptep_test_and_clear_young()
  powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE
  dmaengine: mediatek: Fix deadlock caused by synchronize_irq()
  dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq
  x86/alternatives: Disable KASAN in apply_alternatives()
  usb: cdnsp: Fixes issue with dequeuing not queued requests
  usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
  usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
  usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails
  usb: typec: altmodes/displayport: Signal hpd low when exiting mode
  counter: microchip-tcb-capture: Fix the use of internal GCLK logic
  counter: chrdev: fix getting array extensions
  scsi: ufs: core: Correct clear TM error log
  pinctrl: avoid unsafe code pattern in find_pinctrl()
  dma-buf: add dma_fence_timestamp helper
  cgroup: Remove duplicates in cgroup v1 tasks file
  usb: typec: ucsi: Use GET_CAPABILITY attributes data to set power supply scope
  nfp: flower: avoid rmmod nfp crash issues
  mctp: perform route lookups under a RCU read-side lock
  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
  Input: goodix - ensure int GPIO is in input for gpio_count == 1 && 
gpio_int_idx == 0 case
  Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table
  Input: xpad - add PXN V900 support
  Input: psmouse - fix fast_reconnect function for PS/2 mode
  Input: powermate - fix use-after-free in powermate_config_complete
  ceph: fix type promotion bug on 32bit systems
  ceph: fix incorrect revoked caps assert in ceph_fill_file_size()
  libceph: use kernel_connect()
  powerpc/47x: Fix 47x syscall return crash
  thunderbolt: Restart XDomain discovery handshake after failure
  thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding
  thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple 
Ridge
  mcb: remove is_added flag from mcb_device struct
  x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
  perf/x86/lbr: Filter vsyscall addresses
  ksmbd: not allow to open file if delelete on close bit is set
  ACPI: EC: Add quirk for the HP Pavilion Gaming 15-dk1xxx
  ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
  drm/amd/display: Don't set dpms_off for seamless boot
  drm/amdgpu: add missing NULL check
  drm/atomic-helper: relax unregistered connector check
  arm64: dts: mediatek: mt8195-demo: update and reorder reserved memory regions
  arm64: dts: mediatek: mt8195-demo: fix the memory size to 8GB
  iio: addac: Kconfig: update ad74413r selections
  iio: pressure: ms5611: ms5611_prom_is_valid false negative bug
  iio: pressure: dps310: Adjust Timeout Settings
  iio: admv1013: add mixer_vgate corner cases
  iio: dac: ad3552r: Correct device IDs
  iio: adc: imx8qxp: Fix address for command buffer registers
  iio: imu: bno055: Fix missing Kconfig dependencies
  iio: pressure: bmp280: Fix NULL pointer exception
  usb: musb: Modify the "HWVers" register address
  usb: musb: Get the musb_qh poniter after musb_giveback
  usb: hub: Guard against accesses to uninitialized BOS descriptors
  usb: cdns3: Modify the return value of cdns_set_active () to void when 
CONFIG_PM_SLEEP is disabled
  usb: dwc3: Soft reset phy on probe for host
  net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
  usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer
  dmaengine: stm32-mdma: set in_flight_bytes in case CRQA flag is set
  dmaengine: stm32-mdma: use Link Address Register to compute residue
  dmaengine: stm32-dma: fix residue in case of MDMA chaining
  dmaengine: stm32-dma: fix stm32_dma_prep_slave_sg in case of MDMA chaining
  dmaengine: stm32-mdma: abort resume if no ongoing transfer
  tcp: enforce receive buffer memory limits by allowing the tcp window to shrink
  workqueue: Override implicit ordered attribute in 
workqueue_apply_unbound_cpumask()
  nfc: nci: assert requested protocol is valid
  pinctrl: renesas: rzn1: Enable missing PINMUX
  net/smc: Fix pos miscalculation in statistics
  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
  net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp
  ixgbe: fix crash with empty VF macvlan list
  net/mlx5e: macsec: use update_pn flag instead of PN comparation
  net: phy: mscc: macsec: reject PN update requests
  net: macsec: indicate next pn update when offloading
  net: refine debug info in skb_checksum_help()
  bpf: Fix verifier log for async callback return values
  drm/vmwgfx: fix typo of sizeof argument
  riscv, bpf: Sign-extend return values
  riscv, bpf: Factor out emit_call for kernel and bpf context
  xen-netback: use default TX queue size for vifs
  mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type
  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  ravb: Fix use-after-free issue in ravb_tx_timeout_work()
  ravb: Fix up dma_free_coherent() call in ravb_remove()
  arm64: dts: mediatek: mt8195: Set DSU PMU status to fail
  can: sun4i_can: Only show Kconfig if ARCH_SUNXI is set
  can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior
  net: dsa: qca8k: fix potential MDIO bus conflict when accessing internal PHYs 
via management frames
  phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared 
registers
  phy: lynx-28g: lock PHY while performing CDR lock workaround
  phy: lynx-28g: cancel the CDR check work item on the remove path
  drm/msm/dp: Add newlines to debug printks
  drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow
  drm/msm/dsi: fix irq_of_parse_and_map() error checking
  drm/msm/dsi: skip the wait for video mode done if not applicable
  drm/msm/dp: do not reinitialize phy unless retry during link training
  pinctrl: nuvoton: wpcm450: fix out of bounds write
  ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP
  ALSA: hda/realtek - ALC287 I2S speaker platform support
  ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx
  ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED
  ASoC: fsl_sai: Don't disable bitclock for i.MX8MP
  ASoC: fsl_sai: MCLK bind with TX/RX enable bit
  ASoC: Use of_property_read_bool() for boolean properties
  ASoC: Intel: soc-acpi: Add entry for sof_es8336 in MTL match table.
  ASoC: Intel: sof_sdw: add support for SKU 0B14
  ASoC: Intel: soc-acpi: Add entry for HDMI_In capture support in MTL match 
table
  ASoC: simple-card-utils: fixup simple_util_startup() error handling
  ASoC: SOF: amd: fix for firmware reload failure after playback
  ALSA: hda/realtek: Change model for Intel RVP board
  ALSA: usb-audio: Fix microphone sound on Nexigo webcam.
  ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset
  KEYS: trusted: Remove redundant static calls usage
  irqchip: renesas-rzg2l: Fix logic to clear TINT interrupt source
  dt-bindings: interrupt-controller: renesas,rzg2l-irqc: Update description for 
'#interrupt-cells' property
  arm64: dts: qcom: sm8150: extend the size of the PDC resource
  net: prevent address rewrite in kernel_bind()
  ata: libata-scsi: Disable scsi device manage_system_start_stop
  ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM
  quota: Fix slow quotaoff
  HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  scsi: Do not rescan devices with a suspended queue
  platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section 
mismatch warning
  platform/x86: think-lmi: Fix reference leak
  perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7
  RDMA/cxgb4: Check skb value for failure to allocate
  drm/i915: Don't set PIPE_CONTROL_FLUSH_L3 for aux inval
  mptcp: fix delegated action races
  net: mana: Fix TX CQE error handling

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-oem-6.1/+bug/2042572/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to