Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.1.61 upstream stable release from git://git.kernel.org/ Linux 6.1.61 objtool/x86: add missing embedded_insn check ext4: avoid overlapping preallocations due to overflow ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow ext4: add two helper functions extent_logical_end() and pa_logical_end() platform/x86: Add s2idle quirk for more Lenovo laptops clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name sparc32: fix a braino in fault handling in csum_and_copy_..._user() perf/core: Fix potential NULL deref x86/cpu: Add model number for Intel Arrow Lake mobile processor x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility nvmem: imx: correct nregs for i.MX6UL nvmem: imx: correct nregs for i.MX6SLL nvmem: imx: correct nregs for i.MX6ULL misc: fastrpc: Unmap only if buffer is unmapped from DSP misc: fastrpc: Clean buffers on remote invocation failures misc: fastrpc: Free DMA handles for RPC calls with no arguments misc: fastrpc: Reset metadata buffer to avoid incorrect free tracing/kprobes: Fix the description of variable length arguments i2c: aspeed: Fix i2c bus hang in slave read i2c: stm32f7: Fix PEC handling in case of SMBUS transfers i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() iio: adc: xilinx-xadc: Correct temperature offset/scale for UltraScale iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature thresholds iio: exynos-adc: request second interupt only when touchscreen mode is used iio: afe: rescale: Accept only offset channels io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid kasan: print the original fault addr when access invalid shadow blk-throttle: check for overflow in calculate_bytes_allowed scsi: sd: Introduce manage_shutdown device flag iavf: in iavf_down, disable queues when removing the driver drm/logicvc: Kconfig: select REGMAP and REGMAP_MMIO i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR gtp: fix fragmentation needed check with gso gtp: uapi: fix GTPA_MAX tcp: fix wrong RTO timeout when received SACK reneging r8152: Release firmware if we have an error in probe r8152: Cancel hw_phy_work if we have an error in probe r8152: Run the unload routine if we have errors during probe r8152: Increase USB control msg timeout to 5000ms as per spec net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() net: ethernet: adi: adin1110: Fix uninitialized variable igc: Fix ambiguity in the ethtool advertising neighbour: fix various data-races igb: Fix potential memory leak in igb_add_ethtool_nfc_entry treewide: Spelling fix in comment i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value iavf: initialize waitqueues before starting watchdog_task r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1 r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 r8169: fix the KCSAN reported data-race in rtl_tx() while reading tp->cur_tx clk: ti: Fix missing omap5 mcbsp functional clock and aliases clk: ti: Fix missing omap4 mcbsp functional clock and aliases firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels() ARM: OMAP: timer32K: fix all kernel-doc warnings drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() drm/amd: Disable ASPM for VI w/ all Intel systems drm/i915/pmu: Check if pmu is closed before stopping event nfsd: lock_rename() needs both directories to live on the same fs maple_tree: add GFP_KERNEL to allocations in mas_expected_entries() hugetlbfs: extend hugetlb_vma_lock to private VMAs mm/migrate: fix do_pages_move for compat pointers mm/page_alloc: correct start page when guard page debug is enabled hugetlbfs: clear resv_map pointer if mmap fails mm: fix vm_brk_flags() to not bail out while holding lock arm64: dts: rockchip: Fix i2s0 pin conflict on ROCK Pi 4 boards arm64: dts: rockchip: Add i2s0-2ch-bus-bclk-off pins to RK3399 vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE vsock/virtio: initialize the_virtio_vsock before using VQs virtio_pci: fix the common cfg map size virtio-crypto: handle config changed by work queue virtio-mmio: fix memory leak of vm_dev virtio_balloon: Fix endless deflation and inflation on arm64 mcb-lpc: Reallocate memory region to avoid memory overlapping mcb: Return actual parsed size when reading chameleon table pinctrl: qcom: lpass-lpi: fix concurrent register updates ASoC: codecs: wcd938x: fix runtime PM imbalance on remove ASoC: codecs: wcd938x: fix regulator leaks on probe errors ASoC: codecs: wcd938x: Simplify with dev_err_probe ASoC: codecs: wcd938x: Convert to platform remove callback returning void mmc: core: Fix error propagation for some ioctl commands mmc: block: ioctl: do write error check for spi mmc: core: Align to common busy polling behaviour for mmc ioctls KVM: x86/pmu: Truncate counter value to allowed width on write ** Affects: linux-oem-6.1 (Ubuntu) Importance: Undecided Status: Confirmed ** Affects: linux-oem-6.1 (Ubuntu Jammy) Importance: Undecided Status: New ** Tags: kernel-stable-tracking-bug ** Changed in: linux-oem-6.1 (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux-oem-6.1 (Ubuntu Jammy) Importance: Undecided Status: New -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux-oem-6.1 in Ubuntu. https://bugs.launchpad.net/bugs/2042580 Title: Jammy update: v6.1.61 upstream stable release Status in linux-oem-6.1 package in Ubuntu: Confirmed Status in linux-oem-6.1 source package in Jammy: New Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.1.61 upstream stable release from git://git.kernel.org/ Linux 6.1.61 objtool/x86: add missing embedded_insn check ext4: avoid overlapping preallocations due to overflow ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow ext4: add two helper functions extent_logical_end() and pa_logical_end() platform/x86: Add s2idle quirk for more Lenovo laptops clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name sparc32: fix a braino in fault handling in csum_and_copy_..._user() perf/core: Fix potential NULL deref x86/cpu: Add model number for Intel Arrow Lake mobile processor x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility nvmem: imx: correct nregs for i.MX6UL nvmem: imx: correct nregs for i.MX6SLL nvmem: imx: correct nregs for i.MX6ULL misc: fastrpc: Unmap only if buffer is unmapped from DSP misc: fastrpc: Clean buffers on remote invocation failures misc: fastrpc: Free DMA handles for RPC calls with no arguments misc: fastrpc: Reset metadata buffer to avoid incorrect free tracing/kprobes: Fix the description of variable length arguments i2c: aspeed: Fix i2c bus hang in slave read i2c: stm32f7: Fix PEC handling in case of SMBUS transfers i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() iio: adc: xilinx-xadc: Correct temperature offset/scale for UltraScale iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature thresholds iio: exynos-adc: request second interupt only when touchscreen mode is used iio: afe: rescale: Accept only offset channels io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid kasan: print the original fault addr when access invalid shadow blk-throttle: check for overflow in calculate_bytes_allowed scsi: sd: Introduce manage_shutdown device flag iavf: in iavf_down, disable queues when removing the driver drm/logicvc: Kconfig: select REGMAP and REGMAP_MMIO i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR gtp: fix fragmentation needed check with gso gtp: uapi: fix GTPA_MAX tcp: fix wrong RTO timeout when received SACK reneging r8152: Release firmware if we have an error in probe r8152: Cancel hw_phy_work if we have an error in probe r8152: Run the unload routine if we have errors during probe r8152: Increase USB control msg timeout to 5000ms as per spec net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() net: ethernet: adi: adin1110: Fix uninitialized variable igc: Fix ambiguity in the ethtool advertising neighbour: fix various data-races igb: Fix potential memory leak in igb_add_ethtool_nfc_entry treewide: Spelling fix in comment i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value iavf: initialize waitqueues before starting watchdog_task r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1 r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 r8169: fix the KCSAN reported data-race in rtl_tx() while reading tp->cur_tx clk: ti: Fix missing omap5 mcbsp functional clock and aliases clk: ti: Fix missing omap4 mcbsp functional clock and aliases firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels() ARM: OMAP: timer32K: fix all kernel-doc warnings drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() drm/amd: Disable ASPM for VI w/ all Intel systems drm/i915/pmu: Check if pmu is closed before stopping event nfsd: lock_rename() needs both directories to live on the same fs maple_tree: add GFP_KERNEL to allocations in mas_expected_entries() hugetlbfs: extend hugetlb_vma_lock to private VMAs mm/migrate: fix do_pages_move for compat pointers mm/page_alloc: correct start page when guard page debug is enabled hugetlbfs: clear resv_map pointer if mmap fails mm: fix vm_brk_flags() to not bail out while holding lock arm64: dts: rockchip: Fix i2s0 pin conflict on ROCK Pi 4 boards arm64: dts: rockchip: Add i2s0-2ch-bus-bclk-off pins to RK3399 vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE vsock/virtio: initialize the_virtio_vsock before using VQs virtio_pci: fix the common cfg map size virtio-crypto: handle config changed by work queue virtio-mmio: fix memory leak of vm_dev virtio_balloon: Fix endless deflation and inflation on arm64 mcb-lpc: Reallocate memory region to avoid memory overlapping mcb: Return actual parsed size when reading chameleon table pinctrl: qcom: lpass-lpi: fix concurrent register updates ASoC: codecs: wcd938x: fix runtime PM imbalance on remove ASoC: codecs: wcd938x: fix regulator leaks on probe errors ASoC: codecs: wcd938x: Simplify with dev_err_probe ASoC: codecs: wcd938x: Convert to platform remove callback returning void mmc: core: Fix error propagation for some ioctl commands mmc: block: ioctl: do write error check for spi mmc: core: Align to common busy polling behaviour for mmc ioctls KVM: x86/pmu: Truncate counter value to allowed width on write To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-oem-6.1/+bug/2042580/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp