Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.1.77 upstream stable release
       from git://git.kernel.org/

            
Linux 6.1.77
drm/amdgpu: Fix missing error code in 'gmc_v6/7/8/9_0_hw_init()'
ASoC: codecs: wsa883x: fix PA volume control
ASoC: codecs: lpass-wsa-macro: fix compander volume hack
bonding: remove print in bond_verify_device_path
gve: Fix use-after-free vulnerability
LoongArch/smp: Call rcutree_report_cpu_starting() at tlb_init()
drm/msm/dsi: Enable runtime PM
Revert "drm/amd/display: Disable PSR-SU on Parade 0803 TCON again"
mm, kmsan: fix infinite recursion due to RCU critical section
arm64: irq: set the correct node for shadow call stack
selftests: bonding: Check initial state
selftests: team: Add missing config options
net: sysfs: Fix /sys/class/net/<iface> path
selftests: net: fix available tunnels detection
af_unix: fix lockdep positive in sk_diag_dump_icons()
net: ipv4: fix a memleak in ip_setup_cork
netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV
netfilter: conntrack: correct window scaling with retransmitted SYN
selftests: net: add missing config for GENEVE
bridge: mcast: fix disabled snooping after long uptime
llc: call sock_orphan() at release time
ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
net: dsa: qca8k: fix illegal usage of GPIO
ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
ixgbe: Refactor overtemp event handling
ixgbe: Refactor returning internal error codes
tcp: add sanity checks to rx zerocopy
net: lan966x: Fix port configuration when using SGMII interface
ipmr: fix kernel panic when forwarding mcast packets
ipv4: raw: add drop reasons
ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
selftests: net: give more time for GRO aggregation
HID: hidraw: fix a problem of memory leak in hidraw_release()
scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
regulator: ti-abb: don't use devm_platform_ioremap_resource_byname for shared 
interrupt register
scsi: isci: Fix an error code problem in isci_io_request_build()
drm: using mul_u32_u32() requires linux/math64.h
wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
perf: Fix the nr_addr_filters fix
drm/amdkfd: Fix 'node' NULL check in 'svm_range_get_range_boundaries()'
drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()'
drm/amdgpu: Fix with right return code '-EIO' in 'amdgpu_gmc_vram_checking()'
drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 
'get_platform_power_management_table()'
ceph: fix invalid pointer access if get_quota_realm return ERR_PTR
ceph: fix deadlock or deadcode of misusing dget()
ceph: reinitialize mds feature bit even when session in open
blk-mq: fix IO hang from sbitmap wakeup race
virtio_net: Fix "ā€˜%dā€™ directive writing between 1 and 11 bytes into a region of 
size 10" warnings
drm/amdkfd: Fix lock dependency warning with srcu
drm/amdkfd: Fix lock dependency warning
libsubcmd: Fix memory leak in uniq()
misc: lis3lv02d_i2c: Add missing setting of the reg_ctrl callback
9p: Fix initialisation of netfs_inode for 9p
PCI/AER: Decode Requester ID when no error info found
PCI: Fix 64GT/s effective data rate calculation
spmi: mediatek: Fix UAF on device remove
fs/kernfs/dir: obey S_ISGID
tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
selftests/sgx: Fix linker script asserts
usb: hub: Add quirk to decrease IN-ep poll interval for Microchip USB491x hub
usb: hub: Replace hardcoded quirk value with BIT() macro
perf cs-etm: Bump minimum OpenCSD version to ensure a bugfix is present
PCI: switchtec: Fix stdev_release() crash after surprise hot remove
PCI: Only override AMD USB controller if required
mailbox: arm_mhuv2: Fix a bug for mhuv2_sender_interrupt
mfd: ti_am335x_tscadc: Fix TI SoC dependencies
xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
i3c: master: cdns: Update maximum prescaler value for i2c clock
um: time-travel: fix time corruption
um: net: Fix return type of uml_net_start_xmit()
um: Don't use vfprintf() for os_info()
um: Fix naming clash between UML and scheduler
leds: trigger: panic: Don't register panic notifier if creating the trigger 
failed
ALSA: hda/conexant: Fix headset auto detect fail in cx8070 and SN6140
drm/amdkfd: Fix iterator used outside loop in 'kfd_add_peer_prop()'
drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
drm/amdgpu: Fix '*fw' from request_firmware() not released in 
'amdgpu_ucode_request()'
drm/amdgpu: Let KFD sync with VM fences
drm/amdgpu: Fix ecc irq enable/disable unpaired
clk: imx: clk-imx8qxp: fix LVDS bypass, pixel and phy clocks
drm/amd/display: make flip_timestamp_in_us a 64-bit variable
watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
drm/amdgpu: fix ftrace event amdgpu_bo_move always move on same heap
drm/msm/dpu: fix writeback programming for YUV cases
drm/msm/dpu: Ratelimit framedone timeout msgs
drm/amd/display: For prefetch mode > 0, extend prefetch if possible
media: i2c: imx335: Fix hblank min/max values
media: ddbridge: fix an error code problem in ddb_probe
media: amphion: remove mutext lock in condition of wait_event
IB/ipoib: Fix mcast list locking
drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
f2fs: fix to tag gcing flag on page during block migration
hwmon: (nct6775) Fix fan speed set failure in automatic mode
media: rkisp1: Fix IRQ disable race issue
media: rkisp1: Store IRQ lines
media: rkisp1: Fix IRQ handler return values
media: rkisp1: Drop IRQF_SHARED
ALSA: hda: Intel: add HDA_ARL PCI ID support
PCI: add INTEL_HDA_ARL to pci_ids.h
media: rockchip: rga: fix swizzling for RGB formats
media: stk1160: Fixed high volume of stk1160_dbg messages
drm/mipi-dsi: Fix detach call without attach
drm/framebuffer: Fix use of uninitialized variable
drm/drm_file: fix use of uninitialized variable
ASoC: amd: Add new dmi entries for acp5x platform
f2fs: fix write pointers on zoned device after roll forward
drm/amd/display: Fix tiled display misalignment
drm/bridge: anx7625: Fix Set HPD irq detect window to 2ms
drm/panel-edp: Add override_edid_mode quirk for generic edp
RDMA/IPoIB: Fix error code return in ipoib_mcast_join
fast_dput(): handle underflows gracefully
ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
ALSA: hda: Refer to correct stream index at loops
f2fs: fix to check return value of f2fs_reserve_new_block()
net: dsa: qca8k: put MDIO bus OF node on qca8k_mdio_register() failure
octeontx2-af: Fix max NPC MCAM entry check while validating ref_entry
i40e: Fix VF disable behavior to block all traffic
bridge: cfm: fix enum typo in br_cc_ccm_tx_parse
net/smc: disable SEID on non-s390 archs where virtual ISM may be used
Bluetooth: L2CAP: Fix possible multiple reject send
Bluetooth: hci_sync: fix BR/EDR wakeup bug
Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
wifi: cfg80211: free beacon_ies when overridden from hidden BSS
wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
libbpf: Fix NULL pointer dereference in bpf_object__collect_prog_relos
wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
arm64: dts: amlogic: fix format for s4 uart node
ice: fix pre-shifted bit usage
arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
md: Whenassemble the array, consult the superblock of the freshest device
block: prevent an integer overflow in bvec_try_merge_hw_page
net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
net: atlantic: eliminate double free in error handling logic
ice: fix ICE_AQ_VSI_Q_OPT_RSS_* register values
scsi: hisi_sas: Set .phy_attached before notifing phyup event 
HISI_PHYE_PHY_UP_PM
ARM: dts: imx23/28: Fix the DMA controller node name
ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
ARM: dts: imx27-apf27dev: Fix LED name
ARM: dts: imx25/27: Pass timing0
ARM: dts: imx25: Fix the iim compatible string
block/rnbd-srv: Check for unlikely string overflow
ionic: bypass firmware cmds when stuck in reset
ionic: pass opcode to devcmd_wait
net: phy: at803x: fix passing the wrong reference for config_intr
ARM: dts: imx1: Fix sram node
ARM: dts: imx27: Fix sram node
ARM: dts: imx: Use flash@0,0 pattern
ARM: dts: imx25/27-eukrea: Fix RTC node name
ARM: dts: rockchip: fix rk3036 hdmi ports node
wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
bpf: Set uattr->batch.count as zero before batched update or deletion
scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
scsi: libfc: Don't schedule abort twice
bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
wifi: ath11k: fix race due to setting ATH11K_FLAG_EXT_IRQ_ENABLED too early
wifi: ath9k: Fix potential array-index-out-of-bounds read in 
ath9k_htc_txstatus()
ARM: dts: imx7s: Fix nand-controller #size-cells
ARM: dts: imx7s: Fix lcdif compatible
ARM: dts: imx7d: Fix coresight funnel ports
scsi: arcmsr: Support new PCI device IDs 1883 and 1886
scsi: mpi3mr: Add PCI checks where SAS5116 diverges from SAS4116
net: usb: ax88179_178a: avoid two consecutive device resets
bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
PCI: Add no PM reset quirk for NVIDIA Spectrum devices
scsi: lpfc: Fix possible file string name overflow when updating firmware
soc: xilinx: fix unhandled SGI warning message
soc: xilinx: Fix for call trace due to the usage of smp_processor_id()
selftests/bpf: Fix issues in setup_classid_environment()
wifi: rt2x00: correct wrong BBP register in RxDCOC calibration
selftests/bpf: Fix pyperf180 compilation failure with clang18
selftests/bpf: satisfy compiler by having explicit return in btf test
wifi: rt2x00: restart beacon queue when hardware reset
ext4: avoid online resizing failures due to oversized flex bg
ext4: remove unnecessary check from alloc_flex_gd()
ext4: unify the type of flexbg_size to unsigned int
ext4: fix inconsistent between segment fstrim and full fstrim
ecryptfs: Reject casefold directory inodes
SUNRPC: Fix a suspicious RCU usage warning
KVM: s390: fix setting of fpc register
s390/ptrace: handle setting of fpc register correctly
s390/vfio-ap: fix sysfs status attribute for AP queue devices
arch: consolidate arch_irq_work_raise prototypes
jfs: fix array-index-out-of-bounds in diNewExt
rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
crypto: stm32/crc32 - fix parsing list of devices
erofs: fix ztailpacking for subpage compressed blocks
crypto: octeontx2 - Fix cptvf driver cleanup
pstore/ram: Fix crash when setting number of cpus to an odd number
jfs: fix uaf in jfs_evict_inode
jfs: fix array-index-out-of-bounds in dbAdjTree
jfs: fix slab-out-of-bounds Read in dtSearch
UBSAN: array-index-out-of-bounds in dtSplitRoot
FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
PM / devfreq: Synchronize devfreq_monitor_[start/stop]
ACPI: NUMA: Fix the logic of getting the fake_pxm value
ACPI: extlog: fix NULL pointer dereference check
PNP: ACPI: fix fortify warning
ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
audit: Send netlink ACK before setting connection in auditd_set
regulator: core: Only increment use_count when enable_count changes
debugobjects: Stop accessing objects after releasing hash bucket lock
perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs 
file
x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
powerpc/lib: Validate size for vector operations
powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
x86/boot: Ignore NMIs during very early boot
powerpc/64s: Fix CONFIG_NUMA=n build due to create_section_mapping()
powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
powerpc: Fix build error due to is_valid_bugaddr()
drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
arm64: irq: set the correct node for VMAP stack
powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
asm-generic: make sparse happy with odd-sized put_unaligned_*()

** Affects: linux-oem-6.1 (Ubuntu)
     Importance: Undecided
         Status: Confirmed

** Affects: linux-oem-6.1 (Ubuntu Jammy)
     Importance: Undecided
         Status: New


** Tags: kernel-stable-tracking-bug

** Changed in: linux-oem-6.1 (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux-oem-6.1 (Ubuntu Jammy)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-oem-6.1 in Ubuntu.
https://bugs.launchpad.net/bugs/2052631

Title:
  Jammy update: v6.1.77 upstream stable release

Status in linux-oem-6.1 package in Ubuntu:
  Confirmed
Status in linux-oem-6.1 source package in Jammy:
  New

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v6.1.77 upstream stable release
         from git://git.kernel.org/

              
  Linux 6.1.77
  drm/amdgpu: Fix missing error code in 'gmc_v6/7/8/9_0_hw_init()'
  ASoC: codecs: wsa883x: fix PA volume control
  ASoC: codecs: lpass-wsa-macro: fix compander volume hack
  bonding: remove print in bond_verify_device_path
  gve: Fix use-after-free vulnerability
  LoongArch/smp: Call rcutree_report_cpu_starting() at tlb_init()
  drm/msm/dsi: Enable runtime PM
  Revert "drm/amd/display: Disable PSR-SU on Parade 0803 TCON again"
  mm, kmsan: fix infinite recursion due to RCU critical section
  arm64: irq: set the correct node for shadow call stack
  selftests: bonding: Check initial state
  selftests: team: Add missing config options
  net: sysfs: Fix /sys/class/net/<iface> path
  selftests: net: fix available tunnels detection
  af_unix: fix lockdep positive in sk_diag_dump_icons()
  net: ipv4: fix a memleak in ip_setup_cork
  netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom 
expectations
  netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
  netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV
  netfilter: conntrack: correct window scaling with retransmitted SYN
  selftests: net: add missing config for GENEVE
  bridge: mcast: fix disabled snooping after long uptime
  llc: call sock_orphan() at release time
  ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
  net: dsa: qca8k: fix illegal usage of GPIO
  ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
  ixgbe: Refactor overtemp event handling
  ixgbe: Refactor returning internal error codes
  tcp: add sanity checks to rx zerocopy
  net: lan966x: Fix port configuration when using SGMII interface
  ipmr: fix kernel panic when forwarding mcast packets
  ipv4: raw: add drop reasons
  ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
  selftests: net: give more time for GRO aggregation
  HID: hidraw: fix a problem of memory leak in hidraw_release()
  scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
  regulator: ti-abb: don't use devm_platform_ioremap_resource_byname for shared 
interrupt register
  scsi: isci: Fix an error code problem in isci_io_request_build()
  drm: using mul_u32_u32() requires linux/math64.h
  wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
  perf: Fix the nr_addr_filters fix
  drm/amdkfd: Fix 'node' NULL check in 'svm_range_get_range_boundaries()'
  drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()'
  drm/amdgpu: Fix with right return code '-EIO' in 'amdgpu_gmc_vram_checking()'
  drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 
'get_platform_power_management_table()'
  ceph: fix invalid pointer access if get_quota_realm return ERR_PTR
  ceph: fix deadlock or deadcode of misusing dget()
  ceph: reinitialize mds feature bit even when session in open
  blk-mq: fix IO hang from sbitmap wakeup race
  virtio_net: Fix "ā€˜%dā€™ directive writing between 1 and 11 bytes into a region 
of size 10" warnings
  drm/amdkfd: Fix lock dependency warning with srcu
  drm/amdkfd: Fix lock dependency warning
  libsubcmd: Fix memory leak in uniq()
  misc: lis3lv02d_i2c: Add missing setting of the reg_ctrl callback
  9p: Fix initialisation of netfs_inode for 9p
  PCI/AER: Decode Requester ID when no error info found
  PCI: Fix 64GT/s effective data rate calculation
  spmi: mediatek: Fix UAF on device remove
  fs/kernfs/dir: obey S_ISGID
  tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
  selftests/sgx: Fix linker script asserts
  usb: hub: Add quirk to decrease IN-ep poll interval for Microchip USB491x hub
  usb: hub: Replace hardcoded quirk value with BIT() macro
  perf cs-etm: Bump minimum OpenCSD version to ensure a bugfix is present
  PCI: switchtec: Fix stdev_release() crash after surprise hot remove
  PCI: Only override AMD USB controller if required
  mailbox: arm_mhuv2: Fix a bug for mhuv2_sender_interrupt
  mfd: ti_am335x_tscadc: Fix TI SoC dependencies
  xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
  i3c: master: cdns: Update maximum prescaler value for i2c clock
  um: time-travel: fix time corruption
  um: net: Fix return type of uml_net_start_xmit()
  um: Don't use vfprintf() for os_info()
  um: Fix naming clash between UML and scheduler
  leds: trigger: panic: Don't register panic notifier if creating the trigger 
failed
  ALSA: hda/conexant: Fix headset auto detect fail in cx8070 and SN6140
  drm/amdkfd: Fix iterator used outside loop in 'kfd_add_peer_prop()'
  drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
  drm/amdgpu: Fix '*fw' from request_firmware() not released in 
'amdgpu_ucode_request()'
  drm/amdgpu: Let KFD sync with VM fences
  drm/amdgpu: Fix ecc irq enable/disable unpaired
  clk: imx: clk-imx8qxp: fix LVDS bypass, pixel and phy clocks
  drm/amd/display: make flip_timestamp_in_us a 64-bit variable
  watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
  clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
  clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
  drm/amdgpu: fix ftrace event amdgpu_bo_move always move on same heap
  drm/msm/dpu: fix writeback programming for YUV cases
  drm/msm/dpu: Ratelimit framedone timeout msgs
  drm/amd/display: For prefetch mode > 0, extend prefetch if possible
  media: i2c: imx335: Fix hblank min/max values
  media: ddbridge: fix an error code problem in ddb_probe
  media: amphion: remove mutext lock in condition of wait_event
  IB/ipoib: Fix mcast list locking
  drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
  f2fs: fix to tag gcing flag on page during block migration
  hwmon: (nct6775) Fix fan speed set failure in automatic mode
  media: rkisp1: Fix IRQ disable race issue
  media: rkisp1: Store IRQ lines
  media: rkisp1: Fix IRQ handler return values
  media: rkisp1: Drop IRQF_SHARED
  ALSA: hda: Intel: add HDA_ARL PCI ID support
  PCI: add INTEL_HDA_ARL to pci_ids.h
  media: rockchip: rga: fix swizzling for RGB formats
  media: stk1160: Fixed high volume of stk1160_dbg messages
  drm/mipi-dsi: Fix detach call without attach
  drm/framebuffer: Fix use of uninitialized variable
  drm/drm_file: fix use of uninitialized variable
  ASoC: amd: Add new dmi entries for acp5x platform
  f2fs: fix write pointers on zoned device after roll forward
  drm/amd/display: Fix tiled display misalignment
  drm/bridge: anx7625: Fix Set HPD irq detect window to 2ms
  drm/panel-edp: Add override_edid_mode quirk for generic edp
  RDMA/IPoIB: Fix error code return in ipoib_mcast_join
  fast_dput(): handle underflows gracefully
  ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
  ALSA: hda: Refer to correct stream index at loops
  f2fs: fix to check return value of f2fs_reserve_new_block()
  net: dsa: qca8k: put MDIO bus OF node on qca8k_mdio_register() failure
  octeontx2-af: Fix max NPC MCAM entry check while validating ref_entry
  i40e: Fix VF disable behavior to block all traffic
  bridge: cfm: fix enum typo in br_cc_ccm_tx_parse
  net/smc: disable SEID on non-s390 archs where virtual ISM may be used
  Bluetooth: L2CAP: Fix possible multiple reject send
  Bluetooth: hci_sync: fix BR/EDR wakeup bug
  Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
  wifi: cfg80211: free beacon_ies when overridden from hidden BSS
  wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
  libbpf: Fix NULL pointer dereference in bpf_object__collect_prog_relos
  wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
  arm64: dts: amlogic: fix format for s4 uart node
  ice: fix pre-shifted bit usage
  arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
  arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
  md: Whenassemble the array, consult the superblock of the freshest device
  block: prevent an integer overflow in bvec_try_merge_hw_page
  net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
  net: atlantic: eliminate double free in error handling logic
  ice: fix ICE_AQ_VSI_Q_OPT_RSS_* register values
  scsi: hisi_sas: Set .phy_attached before notifing phyup event 
HISI_PHYE_PHY_UP_PM
  ARM: dts: imx23/28: Fix the DMA controller node name
  ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
  ARM: dts: imx27-apf27dev: Fix LED name
  ARM: dts: imx25/27: Pass timing0
  ARM: dts: imx25: Fix the iim compatible string
  block/rnbd-srv: Check for unlikely string overflow
  ionic: bypass firmware cmds when stuck in reset
  ionic: pass opcode to devcmd_wait
  net: phy: at803x: fix passing the wrong reference for config_intr
  ARM: dts: imx1: Fix sram node
  ARM: dts: imx27: Fix sram node
  ARM: dts: imx: Use flash@0,0 pattern
  ARM: dts: imx25/27-eukrea: Fix RTC node name
  ARM: dts: rockchip: fix rk3036 hdmi ports node
  wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
  bpf: Set uattr->batch.count as zero before batched update or deletion
  scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
  scsi: libfc: Don't schedule abort twice
  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
  wifi: ath11k: fix race due to setting ATH11K_FLAG_EXT_IRQ_ENABLED too early
  wifi: ath9k: Fix potential array-index-out-of-bounds read in 
ath9k_htc_txstatus()
  ARM: dts: imx7s: Fix nand-controller #size-cells
  ARM: dts: imx7s: Fix lcdif compatible
  ARM: dts: imx7d: Fix coresight funnel ports
  scsi: arcmsr: Support new PCI device IDs 1883 and 1886
  scsi: mpi3mr: Add PCI checks where SAS5116 diverges from SAS4116
  net: usb: ax88179_178a: avoid two consecutive device resets
  bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
  PCI: Add no PM reset quirk for NVIDIA Spectrum devices
  scsi: lpfc: Fix possible file string name overflow when updating firmware
  soc: xilinx: fix unhandled SGI warning message
  soc: xilinx: Fix for call trace due to the usage of smp_processor_id()
  selftests/bpf: Fix issues in setup_classid_environment()
  wifi: rt2x00: correct wrong BBP register in RxDCOC calibration
  selftests/bpf: Fix pyperf180 compilation failure with clang18
  selftests/bpf: satisfy compiler by having explicit return in btf test
  wifi: rt2x00: restart beacon queue when hardware reset
  ext4: avoid online resizing failures due to oversized flex bg
  ext4: remove unnecessary check from alloc_flex_gd()
  ext4: unify the type of flexbg_size to unsigned int
  ext4: fix inconsistent between segment fstrim and full fstrim
  ecryptfs: Reject casefold directory inodes
  SUNRPC: Fix a suspicious RCU usage warning
  KVM: s390: fix setting of fpc register
  s390/ptrace: handle setting of fpc register correctly
  s390/vfio-ap: fix sysfs status attribute for AP queue devices
  arch: consolidate arch_irq_work_raise prototypes
  jfs: fix array-index-out-of-bounds in diNewExt
  rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
  afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
  afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
  crypto: stm32/crc32 - fix parsing list of devices
  erofs: fix ztailpacking for subpage compressed blocks
  crypto: octeontx2 - Fix cptvf driver cleanup
  pstore/ram: Fix crash when setting number of cpus to an odd number
  jfs: fix uaf in jfs_evict_inode
  jfs: fix array-index-out-of-bounds in dbAdjTree
  jfs: fix slab-out-of-bounds Read in dtSearch
  UBSAN: array-index-out-of-bounds in dtSplitRoot
  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous 
events
  PM / devfreq: Synchronize devfreq_monitor_[start/stop]
  ACPI: NUMA: Fix the logic of getting the fake_pxm value
  ACPI: extlog: fix NULL pointer dereference check
  PNP: ACPI: fix fortify warning
  ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
  audit: Send netlink ACK before setting connection in auditd_set
  regulator: core: Only increment use_count when enable_count changes
  debugobjects: Stop accessing objects after releasing hash bucket lock
  perf/core: Fix narrow startup race when creating the perf nr_addr_filters 
sysfs file
  x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
  powerpc/lib: Validate size for vector operations
  powerpc: pmd_move_must_withdraw() is only needed for 
CONFIG_TRANSPARENT_HUGEPAGE
  x86/boot: Ignore NMIs during very early boot
  powerpc/64s: Fix CONFIG_NUMA=n build due to create_section_mapping()
  powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
  powerpc: Fix build error due to is_valid_bugaddr()
  drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
  arm64: irq: set the correct node for VMAP stack
  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
  asm-generic: make sparse happy with odd-sized put_unaligned_*()

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-oem-6.1/+bug/2052631/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to