Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.1.59 upstream stable release from git://git.kernel.org/ Linux 6.1.59 ALSA: hda/realtek - Fixed two speaker platform powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE dmaengine: mediatek: Fix deadlock caused by synchronize_irq() dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq x86/alternatives: Disable KASAN in apply_alternatives() usb: cdnsp: Fixes issue with dequeuing not queued requests usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call usb: gadget: udc-xilinx: replace memcpy with memcpy_toio usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails usb: typec: altmodes/displayport: Signal hpd low when exiting mode counter: microchip-tcb-capture: Fix the use of internal GCLK logic counter: chrdev: fix getting array extensions scsi: ufs: core: Correct clear TM error log pinctrl: avoid unsafe code pattern in find_pinctrl() dma-buf: add dma_fence_timestamp helper cgroup: Remove duplicates in cgroup v1 tasks file usb: typec: ucsi: Use GET_CAPABILITY attributes data to set power supply scope nfp: flower: avoid rmmod nfp crash issues mctp: perform route lookups under a RCU read-side lock tee: amdtee: fix use-after-free vulnerability in amdtee_close_session Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table Input: xpad - add PXN V900 support Input: psmouse - fix fast_reconnect function for PS/2 mode Input: powermate - fix use-after-free in powermate_config_complete ceph: fix type promotion bug on 32bit systems ceph: fix incorrect revoked caps assert in ceph_fill_file_size() libceph: use kernel_connect() powerpc/47x: Fix 47x syscall return crash thunderbolt: Restart XDomain discovery handshake after failure thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge mcb: remove is_added flag from mcb_device struct x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs perf/x86/lbr: Filter vsyscall addresses ksmbd: not allow to open file if delelete on close bit is set ACPI: EC: Add quirk for the HP Pavilion Gaming 15-dk1xxx ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA drm/amd/display: Don't set dpms_off for seamless boot drm/amdgpu: add missing NULL check drm/atomic-helper: relax unregistered connector check arm64: dts: mediatek: mt8195-demo: update and reorder reserved memory regions arm64: dts: mediatek: mt8195-demo: fix the memory size to 8GB iio: addac: Kconfig: update ad74413r selections iio: pressure: ms5611: ms5611_prom_is_valid false negative bug iio: pressure: dps310: Adjust Timeout Settings iio: admv1013: add mixer_vgate corner cases iio: dac: ad3552r: Correct device IDs iio: adc: imx8qxp: Fix address for command buffer registers iio: imu: bno055: Fix missing Kconfig dependencies iio: pressure: bmp280: Fix NULL pointer exception usb: musb: Modify the "HWVers" register address usb: musb: Get the musb_qh poniter after musb_giveback usb: hub: Guard against accesses to uninitialized BOS descriptors usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled usb: dwc3: Soft reset phy on probe for host net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer dmaengine: stm32-mdma: set in_flight_bytes in case CRQA flag is set dmaengine: stm32-mdma: use Link Address Register to compute residue dmaengine: stm32-dma: fix residue in case of MDMA chaining dmaengine: stm32-dma: fix stm32_dma_prep_slave_sg in case of MDMA chaining dmaengine: stm32-mdma: abort resume if no ongoing transfer tcp: enforce receive buffer memory limits by allowing the tcp window to shrink workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() nfc: nci: assert requested protocol is valid pinctrl: renesas: rzn1: Enable missing PINMUX net/smc: Fix pos miscalculation in statistics net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp ixgbe: fix crash with empty VF macvlan list net/mlx5e: macsec: use update_pn flag instead of PN comparation net: phy: mscc: macsec: reject PN update requests net: macsec: indicate next pn update when offloading net: refine debug info in skb_checksum_help() bpf: Fix verifier log for async callback return values drm/vmwgfx: fix typo of sizeof argument riscv, bpf: Sign-extend return values riscv, bpf: Factor out emit_call for kernel and bpf context xen-netback: use default TX queue size for vifs mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type ieee802154: ca8210: Fix a potential UAF in ca8210_probe ravb: Fix use-after-free issue in ravb_tx_timeout_work() ravb: Fix up dma_free_coherent() call in ravb_remove() arm64: dts: mediatek: mt8195: Set DSU PMU status to fail can: sun4i_can: Only show Kconfig if ARCH_SUNXI is set can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior net: dsa: qca8k: fix potential MDIO bus conflict when accessing internal PHYs via management frames phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers phy: lynx-28g: lock PHY while performing CDR lock workaround phy: lynx-28g: cancel the CDR check work item on the remove path drm/msm/dp: Add newlines to debug printks drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow drm/msm/dsi: fix irq_of_parse_and_map() error checking drm/msm/dsi: skip the wait for video mode done if not applicable drm/msm/dp: do not reinitialize phy unless retry during link training pinctrl: nuvoton: wpcm450: fix out of bounds write ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP ALSA: hda/realtek - ALC287 I2S speaker platform support ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED ASoC: fsl_sai: Don't disable bitclock for i.MX8MP ASoC: fsl_sai: MCLK bind with TX/RX enable bit ASoC: Use of_property_read_bool() for boolean properties ASoC: Intel: soc-acpi: Add entry for sof_es8336 in MTL match table. ASoC: Intel: sof_sdw: add support for SKU 0B14 ASoC: Intel: soc-acpi: Add entry for HDMI_In capture support in MTL match table ASoC: simple-card-utils: fixup simple_util_startup() error handling ASoC: SOF: amd: fix for firmware reload failure after playback ALSA: hda/realtek: Change model for Intel RVP board ALSA: usb-audio: Fix microphone sound on Nexigo webcam. ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset KEYS: trusted: Remove redundant static calls usage irqchip: renesas-rzg2l: Fix logic to clear TINT interrupt source dt-bindings: interrupt-controller: renesas,rzg2l-irqc: Update description for '#interrupt-cells' property arm64: dts: qcom: sm8150: extend the size of the PDC resource net: prevent address rewrite in kernel_bind() ata: libata-scsi: Disable scsi device manage_system_start_stop ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM quota: Fix slow quotaoff HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect scsi: Do not rescan devices with a suspended queue platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning platform/x86: think-lmi: Fix reference leak perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7 RDMA/cxgb4: Check skb value for failure to allocate drm/i915: Don't set PIPE_CONTROL_FLUSH_L3 for aux inval mptcp: fix delegated action races net: mana: Fix TX CQE error handling ** Affects: linux-oem-6.1 (Ubuntu) Importance: Undecided Status: Confirmed ** Affects: linux-oem-6.1 (Ubuntu Jammy) Importance: Undecided Status: New ** Tags: kernel-stable-tracking-bug ** Changed in: linux-oem-6.1 (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux-oem-6.1 (Ubuntu Jammy) Importance: Undecided Status: New -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux-oem-6.1 in Ubuntu. https://bugs.launchpad.net/bugs/2042572 Title: Jammy update: v6.1.59 upstream stable release Status in linux-oem-6.1 package in Ubuntu: Confirmed Status in linux-oem-6.1 source package in Jammy: New Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.1.59 upstream stable release from git://git.kernel.org/ Linux 6.1.59 ALSA: hda/realtek - Fixed two speaker platform powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE dmaengine: mediatek: Fix deadlock caused by synchronize_irq() dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq x86/alternatives: Disable KASAN in apply_alternatives() usb: cdnsp: Fixes issue with dequeuing not queued requests usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call usb: gadget: udc-xilinx: replace memcpy with memcpy_toio usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails usb: typec: altmodes/displayport: Signal hpd low when exiting mode counter: microchip-tcb-capture: Fix the use of internal GCLK logic counter: chrdev: fix getting array extensions scsi: ufs: core: Correct clear TM error log pinctrl: avoid unsafe code pattern in find_pinctrl() dma-buf: add dma_fence_timestamp helper cgroup: Remove duplicates in cgroup v1 tasks file usb: typec: ucsi: Use GET_CAPABILITY attributes data to set power supply scope nfp: flower: avoid rmmod nfp crash issues mctp: perform route lookups under a RCU read-side lock tee: amdtee: fix use-after-free vulnerability in amdtee_close_session Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table Input: xpad - add PXN V900 support Input: psmouse - fix fast_reconnect function for PS/2 mode Input: powermate - fix use-after-free in powermate_config_complete ceph: fix type promotion bug on 32bit systems ceph: fix incorrect revoked caps assert in ceph_fill_file_size() libceph: use kernel_connect() powerpc/47x: Fix 47x syscall return crash thunderbolt: Restart XDomain discovery handshake after failure thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge mcb: remove is_added flag from mcb_device struct x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs perf/x86/lbr: Filter vsyscall addresses ksmbd: not allow to open file if delelete on close bit is set ACPI: EC: Add quirk for the HP Pavilion Gaming 15-dk1xxx ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA drm/amd/display: Don't set dpms_off for seamless boot drm/amdgpu: add missing NULL check drm/atomic-helper: relax unregistered connector check arm64: dts: mediatek: mt8195-demo: update and reorder reserved memory regions arm64: dts: mediatek: mt8195-demo: fix the memory size to 8GB iio: addac: Kconfig: update ad74413r selections iio: pressure: ms5611: ms5611_prom_is_valid false negative bug iio: pressure: dps310: Adjust Timeout Settings iio: admv1013: add mixer_vgate corner cases iio: dac: ad3552r: Correct device IDs iio: adc: imx8qxp: Fix address for command buffer registers iio: imu: bno055: Fix missing Kconfig dependencies iio: pressure: bmp280: Fix NULL pointer exception usb: musb: Modify the "HWVers" register address usb: musb: Get the musb_qh poniter after musb_giveback usb: hub: Guard against accesses to uninitialized BOS descriptors usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled usb: dwc3: Soft reset phy on probe for host net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer dmaengine: stm32-mdma: set in_flight_bytes in case CRQA flag is set dmaengine: stm32-mdma: use Link Address Register to compute residue dmaengine: stm32-dma: fix residue in case of MDMA chaining dmaengine: stm32-dma: fix stm32_dma_prep_slave_sg in case of MDMA chaining dmaengine: stm32-mdma: abort resume if no ongoing transfer tcp: enforce receive buffer memory limits by allowing the tcp window to shrink workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() nfc: nci: assert requested protocol is valid pinctrl: renesas: rzn1: Enable missing PINMUX net/smc: Fix pos miscalculation in statistics net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp ixgbe: fix crash with empty VF macvlan list net/mlx5e: macsec: use update_pn flag instead of PN comparation net: phy: mscc: macsec: reject PN update requests net: macsec: indicate next pn update when offloading net: refine debug info in skb_checksum_help() bpf: Fix verifier log for async callback return values drm/vmwgfx: fix typo of sizeof argument riscv, bpf: Sign-extend return values riscv, bpf: Factor out emit_call for kernel and bpf context xen-netback: use default TX queue size for vifs mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type ieee802154: ca8210: Fix a potential UAF in ca8210_probe ravb: Fix use-after-free issue in ravb_tx_timeout_work() ravb: Fix up dma_free_coherent() call in ravb_remove() arm64: dts: mediatek: mt8195: Set DSU PMU status to fail can: sun4i_can: Only show Kconfig if ARCH_SUNXI is set can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior net: dsa: qca8k: fix potential MDIO bus conflict when accessing internal PHYs via management frames phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers phy: lynx-28g: lock PHY while performing CDR lock workaround phy: lynx-28g: cancel the CDR check work item on the remove path drm/msm/dp: Add newlines to debug printks drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow drm/msm/dsi: fix irq_of_parse_and_map() error checking drm/msm/dsi: skip the wait for video mode done if not applicable drm/msm/dp: do not reinitialize phy unless retry during link training pinctrl: nuvoton: wpcm450: fix out of bounds write ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP ALSA: hda/realtek - ALC287 I2S speaker platform support ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED ASoC: fsl_sai: Don't disable bitclock for i.MX8MP ASoC: fsl_sai: MCLK bind with TX/RX enable bit ASoC: Use of_property_read_bool() for boolean properties ASoC: Intel: soc-acpi: Add entry for sof_es8336 in MTL match table. ASoC: Intel: sof_sdw: add support for SKU 0B14 ASoC: Intel: soc-acpi: Add entry for HDMI_In capture support in MTL match table ASoC: simple-card-utils: fixup simple_util_startup() error handling ASoC: SOF: amd: fix for firmware reload failure after playback ALSA: hda/realtek: Change model for Intel RVP board ALSA: usb-audio: Fix microphone sound on Nexigo webcam. ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset KEYS: trusted: Remove redundant static calls usage irqchip: renesas-rzg2l: Fix logic to clear TINT interrupt source dt-bindings: interrupt-controller: renesas,rzg2l-irqc: Update description for '#interrupt-cells' property arm64: dts: qcom: sm8150: extend the size of the PDC resource net: prevent address rewrite in kernel_bind() ata: libata-scsi: Disable scsi device manage_system_start_stop ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM quota: Fix slow quotaoff HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect scsi: Do not rescan devices with a suspended queue platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning platform/x86: think-lmi: Fix reference leak perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7 RDMA/cxgb4: Check skb value for failure to allocate drm/i915: Don't set PIPE_CONTROL_FLUSH_L3 for aux inval mptcp: fix delegated action races net: mana: Fix TX CQE error handling To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-oem-6.1/+bug/2042572/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp