Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-05-27
Ported from the following upstream stable releases:
v6.6.87, v6.12.24
from git://git.kernel.org/
ASoC: Intel: adl: add 2xrt1316 audio configuration
cgroup/cpuset: Fix incorrect isolated_cpus update in
update_parent_effective_cpumask()
cgroup/cpuset: Revert "Allow suppression of sched domain rebuild in
update_cpumasks_hier()"
cgroup/cpuset: Enforce at most one rebuild_sched_domains_locked() call per
operation
cgroup/cpuset: Further optimize code if CONFIG_CPUSETS_V1 not set
cgroup/cpuset: Fix race between newly created partition and dying one
gpiolib: of: Fix the choice for Ingenic NAND quirk
selftests/futex: futex_waitv wouldblock test should fail
ublk: refactor recovery configuration flag helpers
ublk: fix handling recovery & reissue in ublk_abort_queue()
drm/i915: Disable RPG during live selftest
x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI
drm/xe/hw_engine: define sysfs_ops on all directories
ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret()
tipc: fix memory leak in tipc_link_xmit
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
net: tls: explicitly disallow disconnect
octeontx2-pf: qos: fix VF root node parent queue index
tc: Ensure we have enough buffer space when sending filter netlink notifications
net: ethtool: Don't call .cleanup_data when prepare_data fails
drm/tests: modeset: Fix drm_display_mode memory leak
drm/tests: helpers: Create kunit helper to destroy a drm_display_mode
drm/tests: cmdline: Fix drm_display_mode memory leak
drm/tests: modes: Fix drm_display_mode memory leak
drm/tests: probe-helper: Fix drm_display_mode memory leak
net: libwx: handle page_pool_dev_alloc_pages error
ata: sata_sx4: Add error handling in pdc20621_i2c_read()
drm/i915/huc: Fix fence not released on early probe errors
nvmet-fcloop: swap list_add_tail arguments
net_sched: sch_sfq: use a temporary work area for validating configuration
net_sched: sch_sfq: move the limit validation
net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend()
net: phy: allow MDIO bus PM ops to start/stop state machine for
phylink-controlled PHY
ipv6: Align behavior across nexthops during path selection
net: ppp: Add bound checking for skb data on ppp_sync_txmung
nft_set_pipapo: fix incorrect avx2 match of 5th field octet
iommu/exynos: Fix suspend/resume with IDENTITY domain
iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group
perf/x86: Add hw_perf_event::aux_config
perf/core: Add aux_pause, aux_resume, aux_start_paused
perf/core: Simplify the perf_event_alloc() error path
perf: Rename perf_event_context.nr_pending to nr_no_switch_fast.
perf: Fix hang while freeing sigtrap event
fs: consistently deref the files table with rcu_dereference_raw()
umount: Allow superblock owners to force umount
pm: cpupower: bench: Prevent NULL dereference on malloc failure
x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW
x86/percpu: Disable named address spaces for UBSAN_BOOL with KASAN for GCC <
14.2
x86/ia32: Leave NULL selector values 0~3 unchanged
x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when
running in a virtual machine
perf: arm_pmu: Don't disable counter in armpmu_add()
perf/dwc_pcie: fix some unreleased resources
PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
Flush console log from kernel_power_off()
arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
xen/mcelog: Add __nonstring annotations for unterminated strings
zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around
compiler segfault
ASoC: SOF: topology: Use krealloc_array() to replace krealloc()
HID: pidff: Convert infinite length from Linux API to PID standard
HID: pidff: Do not send effect envelope if it's empty
HID: pidff: Add MISSING_DELAY quirk and its detection
HID: pidff: Add MISSING_PBO quirk and its detection
HID: pidff: Add PERMISSIVE_CONTROL quirk
HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol
HID: pidff: Add FIX_WHEEL_DIRECTION quirk
HID: Add hid-universal-pidff driver and supported device ids
UBUNTU: [Config] updateconfigs for CONFIG_HID_UNIVERSAL_PIDFF
HID: pidff: Add PERIODIC_SINE_ONLY quirk
HID: pidff: Fix null pointer dereference in pidff_find_fields
ASoC: amd: ps: use macro for ACP6.3 pci revision id
ALSA: hda: intel: Fix Optimus when GPU has no sound
ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist
ASoC: fsl_audmix: register card device depends on 'dais' property
media: uvcvideo: Add quirk for Actions UVC05
media: s5p-mfc: Corrected NV12M/NV21M plane-sizes
mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves
ALSA: usb-audio: Fix CME quirk for UF series keyboards
ASoC: amd: Add DMI quirk for ACP6X mic support
ASoC: amd: yc: update quirk data for new Lenovo model
platform/x86: x86-android-tablets: Add select POWER_SUPPLY to Kconfig
wifi: ath11k: Fix DMA buffer allocation to resolve SWIOTLB issues
wifi: ath11k: fix memory leak in ath11k_xxx_remove()
wifi: ath12k: fix memory leak in ath12k_pci_remove()
ata: libata-core: Add 'external' to the libata.force kernel parameter
scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
f2fs: don't retry IO for corrupted data scenario
wifi: mac80211: add strict mode disabling workarounds
wifi: mac80211: ensure sdata->work is canceled before initialized.
scsi: target: spc: Fix RSOC parameter data header size
net: usb: asix_devices: add FiberGecko DeviceID
page_pool: avoid infinite loop to schedule delayed worker
can: flexcan: Add quirk to handle separate interrupt lines for mailboxes
can: flexcan: add NXP S32G2/S32G3 SoC support
jfs: Fix uninit-value access of imap allocated in the diMount() function
fs/jfs: cast inactags to s64 to prevent potential overflow
fs/jfs: Prevent integer overflow in AG size calculation
jfs: Prevent copying of nlink with value 0 from disk inode
jfs: add sanity check for agwidth in dbMount
ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
net: sfp: add quirk for 2.5G OEM BX SFP
wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
net: sfp: add quirk for FS SFP-10GM-T copper SFP+ module
ahci: add PCI ID for Marvell 88SE9215 SATA Controller
ext4: protect ext4_release_dquot against freezing
Revert "f2fs: rebuild nat_bits during umount"
ext4: ignore xattrs past end
cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk
scsi: st: Fix array overflow in st_setup()
ahci: Marvell 88SE9215 controllers prefer DMA for ATAPI
btrfs: harden block_group::bg_list against list_del() races
wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
net: vlan: don't propagate flags on open
tracing: fix return value in __ftrace_event_enable_disable for
TRACE_REG_UNREGISTER
Bluetooth: btintel_pcie: Add device id of Whale Peak
Bluetooth: hci_uart: fix race during initialization
Bluetooth: btusb: Add 2 HWIDs for MT7922
Bluetooth: hci_qca: use the power sequencer for wcn6750
Bluetooth: qca: simplify WCN399x NVM loading
Bluetooth: Add quirk for broken READ_VOICE_SETTING
Bluetooth: Add quirk for broken READ_PAGE_SCAN_TYPE
drm: allow encoder mode_set even when connectors change for crtc
drm/xe/bmg: Add new PCI IDs
drm/xe/vf: Don't try to trigger a full GT reset if VF
drm/amd/display: Update Cursor request mode to the beginning prefetch always
drm/amdgpu: Unlocked unmap only clear page table leaves
drm: panel-orientation-quirks: Add support for AYANEO 2S
drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB
drm: panel-orientation-quirks: Add quirk for AYA NEO Slide
drm: panel-orientation-quirks: Add new quirk for GPD Win 2
drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel)
drm/debugfs: fix printk format for bridge index
drm/bridge: panel: forbid initializing a panel with unknown connector type
drm/amd/display: stop DML2 from removing pipes based on planes
drivers: base: devres: Allow to release group on device release
drm/amdkfd: clamp queue size to minimum
drm/amdkfd: Fix mode1 reset crash issue
drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
drm/amdkfd: debugfs hang_hws skip GPU with MES
drm/xe/xelp: Move Wa_16011163337 from tunings to workarounds
drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data
drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
PCI: Add Rockchip Vendor ID
drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
PCI: Enable Configuration RRS SV early
PCI: Check BAR index for validity
PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
drm/amdgpu: grab an additional reference on the gang fence v2
fbdev: omapfb: Add 'plane' value check
tracing: probe-events: Add comments about entry data storing code
ktest: Fix Test Failures Due to Missing LOG_FILE Directories
tpm, tpm_tis: Workaround failed command reception on Infineon devices
tpm: End any active auth session before shutdown
pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
pwm: rcar: Improve register calculation
pwm: fsl-ftm: Handle clk_get_rate() returning 0
bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
ext4: don't treat fhandle lookup of ea_inode as FS corruption
HID: pidff: Clamp PERIODIC effect period to device's logical range
HID: pidff: Stop all effects before enabling actuators
HID: pidff: Completely rework and fix pidff_reset function
HID: pidff: Simplify pidff_upload_effect function
HID: pidff: Define values used in pidff_find_special_fields
HID: pidff: Rescale time values to match field units
HID: pidff: Factor out code for setting gain
HID: pidff: Move all hid-pidff definitions to a dedicated header
HID: pidff: Simplify pidff_rescale_signed
HID: pidff: Use macros instead of hardcoded min/max values for shorts
HID: pidff: Factor out pool report fetch and remove excess declaration
HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX
HID: hid-universal-pidff: Add Asetek wheelbases support
HID: pidff: Comment and code style update
HID: pidff: Support device error response from PID_BLOCK_LOAD
HID: pidff: Remove redundant call to pidff_find_special_keys
HID: pidff: Rename two functions to align them with naming convention
HID: pidff: Clamp effect playback LOOP_COUNT value
HID: pidff: Compute INFINITE value instead of using hardcoded 0xffff
HID: pidff: Fix 90 degrees direction name North -> East
HID: pidff: Fix set_device_control()
auxdisplay: hd44780: Fix an API misuse in hd44780.c
dt-bindings: media: st,stmipid02: correct lane-polarities maxItems
media: mediatek: vcodec: Fix a resource leak related to the scp device in FW
initialization
media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
media: mgb4: Fix CMT registers update logic
media: i2c: adv748x: Fix test pattern selection mask
media: mgb4: Fix switched CMT frequency range "magic values" sets
media: intel/ipu6: set the dev_parent of video device to pdev
media: venus: hfi: add a check to handle OOB in sfr region
media: venus: hfi: add check to handle incorrect queue size
media: vim2m: print device name after registering device
media: siano: Fix error handling in smsdvb_module_init()
media: rockchip: rga: fix rga offset lookup
xenfs/xensyms: respect hypervisor's "next" indication
arm64: cputype: Add MIDR_CORTEX_A76AE
arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
KVM: arm64: Tear down vGIC on failed vCPU creation
spi: cadence-qspi: Fix probe on AM62A LP SK
mtd: rawnand: brcmnand: fix PM resume warning
tpm, tpm_tis: Fix timeout handling when waiting for TPM status
accel/ivpu: Fix PM related deadlocks in MS IOCTLs
media: streamzap: prevent processing IR data on URB failure
media: hi556: Fix memory leak (on error) in hi556_check_hwcfg()
media: visl: Fix ERANGE error when setting enum controls
media: platform: stm32: Add check for clk_enable()
media: imx219: Adjust PLL settings based on the number of MIPI lanes
media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
Revert "media: imx214: Fix the error handling in imx214_probe()"
media: i2c: ccs: Set the device's runtime PM status correctly in remove
media: i2c: ccs: Set the device's runtime PM status correctly in probe
media: i2c: ov7251: Set enable GPIO low in probe
media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
media: nuvoton: Fix reference handling of ece_node
media: nuvoton: Fix reference handling of ece_pdev
media: venus: hfi_parser: add check to avoid out of bound access
media: venus: hfi_parser: refactor hfi packet parsing logic
media: i2c: imx319: Rectify runtime PM handling probe and remove
media: i2c: imx219: Rectify runtime PM handling in probe and remove
media: i2c: imx214: Rectify probe error handling related to runtime PM
media: chips-media: wave5: Fix gray color on screen
media: chips-media: wave5: Avoid race condition in the interrupt handler
media: chips-media: wave5: Fix a hang after seeking
media: chips-media: wave5: Fix timeout while testing 10bit hevc fluster
mptcp: sockopt: fix getting IPV6_V6ONLY
mptcp: sockopt: fix getting freebind & transparent
mtd: Add check for devm_kcalloc()
net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
mtd: Replace kcalloc() with devm_kcalloc()
clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
wifi: mt76: Add check for devm_kstrdup()
wifi: mac80211: fix integer overflow in hwmp_route_info_get()
wifi: mt76: mt7925: ensure wow pattern command align fw format
wifi: mt76: mt7925: fix country count limitation for CLC
wifi: mt76: mt7925: fix the wrong link_idx when a p2p_device is present
wifi: mt76: mt7925: fix the wrong simultaneous cap for MLO
io_uring/net: fix accept multishot handling
io_uring/net: fix io_req_post_cqe abuse by send bundle
io_uring/kbuf: reject zero sized provided buffers
ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe()
ASoC: q6apm: add q6apm_get_hw_pointer helper
ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment.
ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns.
ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
ALSA: hda/realtek: Enable Mute LED on HP OMEN 16 Laptop xd000xx
accel/ivpu: Fix warning in ivpu_ipc_send_receive_internal()
accel/ivpu: Fix deadlock in ivpu_ms_cleanup()
bus: mhi: host: Fix race between unprepare and queue_buf
ext4: fix off-by-one error in do_split
f2fs: fix to avoid atomicity corruption of atomic file
vdpa/mlx5: Fix oversized null mkey longer than 32bit
udf: Fix inode_getblk() return value
tpm: do not start chip while suspended
soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
smb311 client: fix missing tcon check when mounting with linux/posix extensions
ima: limit the number of open-writers integrity violations
ima: limit the number of ToMToU integrity violations
i3c: master: svc: Use readsb helper for reading MDB
i3c: Add NULL pointer check in i3c_master_queue_ibi()
jbd2: remove wrong sb->s_sequence check
leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs
leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs
mfd: ene-kb3930: Fix a potential NULL pointer dereference
mailbox: tegra-hsp: Define dimensioning masks in SoC data
locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
mptcp: fix NULL pointer in can_accept_new_subflow
mptcp: only inc MPJoinAckHMacFailure for HMAC failures
mtd: inftlcore: Add error check for inftl_read_oob()
mtd: rawnand: Add status chack in r852_ready()
arm64: mops: Do not dereference src reg for a set operation
arm64: tegra: Remove the Orin NX/Nano suspend key
arm64: mm: Correct the update of max_pfn
arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
arm64: dts: exynos: gs101: disable pinctrl_gsacore node
backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
btrfs: fix non-empty delayed iputs list on unmount due to compressed write
workers
btrfs: tests: fix chunk map leak after failure to add it to the tree
btrfs: zoned: fix zone activation with missing devices
btrfs: zoned: fix zone finishing with missing devices
iommufd: Fix uninitialized rc in iommufd_access_rw()
iommu/vt-d: Put IRTE back into posted MSI mode if vCPU posting is disabled
iommu/vt-d: Don't clobber posted vCPU IRTE when host IRQ affinity changes
iommu/vt-d: Fix possible circular locking dependency
iommu/vt-d: Wire up irq_ack() to irq_move_irq() for posted MSIs
sparc/mm: disable preemption in lazy mmu mode
sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes
net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
mm/damon/ops: have damon_get_folio return folio even for tail pages
mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
mm: make page_mapped_in_vma() hugetlb walk aware
mm: fix lazy mmu docs and usage
mm/mremap: correctly handle partial mremap() of VMA starting at 0
mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
mm/userfaultfd: fix release hang over concurrent GUP
mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
mm/hugetlb: move hugetlb_sysctl_init() to the __init section
sctp: detect and prevent references to a freed transport in sendmsg
x86/xen: fix balloon target initialization for PVH dom0
tracing: Do not add length to print format in synthetic events
thermal/drivers/rockchip: Add missing rk3328 mapping entry
cifs: avoid NULL pointer dereference in dbg call
cifs: fix integer overflow in match_server()
cifs: Ensure that all non-client-specific reparse points are processed by the
server
clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks
clk: qcom: gdsc: Release pm subdomains in reverse add order
clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code
clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
crypto: ccp - Fix check for the primary ASP device
crypto: ccp - Fix uAPI definitions of PSP errors
dlm: fix error if inactive rsb is not hashed
dlm: fix error if active rsb is not hashed
dm-ebs: fix prefetch-vs-suspend race
dm-integrity: set ti->error on memory allocation failure
dm-integrity: fix non-constant-time tag verification
dm-verity: fix prefetch-vs-suspend race
dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg'
dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg'
ftrace: Add cond_resched() to ftrace_graph_set_hash()
ftrace: Properly merge notrace hashes
gpio: tegra186: fix resource handling in ACPI probe path
gpio: zynq: Fix wakeup source leaks on device unbind
gve: handle overflow when reporting TX consumed descriptors
KVM: Allow building irqbypass.ko as as module when kvm.ko is a module
UBUNTU: [Config] updateconfigs for CONFIG_HAVE_KVM_IRQ_BYPASS
KVM: x86: Explicitly zero-initialize on-stack CPUID unions
KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
landlock: Move code to ease future backports
landlock: Add the errata interface
landlock: Add erratum for TCP fix
landlock: Prepare to add second errata
misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
net: mana: Switch to page pool for jumbo frames
ntb: use 64-bit arithmetic for the MSI doorbell mask
of/irq: Fix device node refcount leakage in API of_irq_parse_one()
of/irq: Fix device node refcount leakage in API of_irq_parse_raw()
of/irq: Fix device node refcount leakages in of_irq_count()
of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
of/irq: Fix device node refcount leakages in of_irq_init()
PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
PCI: j721e: Fix the value of .linkdown_irq_regfield for J784S4
PCI: pciehp: Avoid unnecessary device replacement check
PCI: Fix reference leak in pci_alloc_child_bus()
PCI: Fix reference leak in pci_register_host_bridge()
PCI: Fix wrong length of devres array
phy: freescale: imx8m-pcie: assert phy reset and perst in power off
pinctrl: qcom: Clear latched interrupt status when changing IRQ type
pinctrl: samsung: add support for eint_fltcon_offset
ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio()
s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs
s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues
s390: Fix linker error when -no-pie option is unavailable
selftests: mptcp: close fd_in before returning in main_loop
selftests: mptcp: fix incorrect fd checks in main_loop
thermal/drivers/mediatek/lvts: Disable monitor mode during suspend
thermal/drivers/mediatek/lvts: Disable Stage 3 thermal threshold
arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
iommufd: Avoid duplicated __iommu_group_set_core_domain() call
iommufd: Make attach_handle generic than fault specific
iommufd: Fail replace if device has not been attached
x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT
ACPI: platform-profile: Fix CFI violation when accessing sysfs files
NFSD: fix decoding in nfs4_xdr_dec_cb_getattr
NFSD: Fix CB_GETATTR status fix
x86/e820: Fix handling of subpage regions when calculating nosave ranges in
e820__register_nosave_regions()
libbpf: Prevent compiler warnings/errors
kbuild: Add '-fno-builtin-wcslen'
media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef noinline
Bluetooth: hci_uart: Fix another race during initialization
s390/cpumf: Fix double free on error in cpumf_pmu_event_init()
HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due
to Race Condition
UBUNTU: Upstream stable to v6.6.87, v6.12.24
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Oracular)
Importance: Medium
Assignee: Noah Wager (nwager)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Oracular)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Oracular)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Oracular)
Status: New => In Progress
** Changed in: linux (Ubuntu Oracular)
Assignee: (unassigned) => Noah Wager (nwager)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-05-27
+
+ Ported from the following upstream stable releases:
+ v6.6.87, v6.12.24
+
from git://git.kernel.org/
+
+ ASoC: Intel: adl: add 2xrt1316 audio configuration
+ cgroup/cpuset: Fix incorrect isolated_cpus update in
update_parent_effective_cpumask()
+ cgroup/cpuset: Revert "Allow suppression of sched domain rebuild in
update_cpumasks_hier()"
+ cgroup/cpuset: Enforce at most one rebuild_sched_domains_locked() call per
operation
+ cgroup/cpuset: Further optimize code if CONFIG_CPUSETS_V1 not set
+ cgroup/cpuset: Fix race between newly created partition and dying one
+ gpiolib: of: Fix the choice for Ingenic NAND quirk
+ selftests/futex: futex_waitv wouldblock test should fail
+ ublk: refactor recovery configuration flag helpers
+ ublk: fix handling recovery & reissue in ublk_abort_queue()
+ drm/i915: Disable RPG during live selftest
+ x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI
+ drm/xe/hw_engine: define sysfs_ops on all directories
+ ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
+ objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret()
+ tipc: fix memory leak in tipc_link_xmit
+ codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
+ net: tls: explicitly disallow disconnect
+ octeontx2-pf: qos: fix VF root node parent queue index
+ tc: Ensure we have enough buffer space when sending filter netlink
notifications
+ net: ethtool: Don't call .cleanup_data when prepare_data fails
+ drm/tests: modeset: Fix drm_display_mode memory leak
+ drm/tests: helpers: Create kunit helper to destroy a drm_display_mode
+ drm/tests: cmdline: Fix drm_display_mode memory leak
+ drm/tests: modes: Fix drm_display_mode memory leak
+ drm/tests: probe-helper: Fix drm_display_mode memory leak
+ net: libwx: handle page_pool_dev_alloc_pages error
+ ata: sata_sx4: Add error handling in pdc20621_i2c_read()
+ drm/i915/huc: Fix fence not released on early probe errors
+ nvmet-fcloop: swap list_add_tail arguments
+ net_sched: sch_sfq: use a temporary work area for validating configuration
+ net_sched: sch_sfq: move the limit validation
+ net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend()
+ net: phy: allow MDIO bus PM ops to start/stop state machine for
phylink-controlled PHY
+ ipv6: Align behavior across nexthops during path selection
+ net: ppp: Add bound checking for skb data on ppp_sync_txmung
+ nft_set_pipapo: fix incorrect avx2 match of 5th field octet
+ iommu/exynos: Fix suspend/resume with IDENTITY domain
+ iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group
+ perf/x86: Add hw_perf_event::aux_config
+ perf/core: Add aux_pause, aux_resume, aux_start_paused
+ perf/core: Simplify the perf_event_alloc() error path
+ perf: Rename perf_event_context.nr_pending to nr_no_switch_fast.
+ perf: Fix hang while freeing sigtrap event
+ fs: consistently deref the files table with rcu_dereference_raw()
+ umount: Allow superblock owners to force umount
+ pm: cpupower: bench: Prevent NULL dereference on malloc failure
+ x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW
+ x86/percpu: Disable named address spaces for UBSAN_BOOL with KASAN for GCC <
14.2
+ x86/ia32: Leave NULL selector values 0~3 unchanged
+ x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when
running in a virtual machine
+ perf: arm_pmu: Don't disable counter in armpmu_add()
+ perf/dwc_pcie: fix some unreleased resources
+ PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
+ Flush console log from kernel_power_off()
+ arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
+ xen/mcelog: Add __nonstring annotations for unterminated strings
+ zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work
around compiler segfault
+ ASoC: SOF: topology: Use krealloc_array() to replace krealloc()
+ HID: pidff: Convert infinite length from Linux API to PID standard
+ HID: pidff: Do not send effect envelope if it's empty
+ HID: pidff: Add MISSING_DELAY quirk and its detection
+ HID: pidff: Add MISSING_PBO quirk and its detection
+ HID: pidff: Add PERMISSIVE_CONTROL quirk
+ HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol
+ HID: pidff: Add FIX_WHEEL_DIRECTION quirk
+ HID: Add hid-universal-pidff driver and supported device ids
+ UBUNTU: [Config] updateconfigs for CONFIG_HID_UNIVERSAL_PIDFF
+ HID: pidff: Add PERIODIC_SINE_ONLY quirk
+ HID: pidff: Fix null pointer dereference in pidff_find_fields
+ ASoC: amd: ps: use macro for ACP6.3 pci revision id
+ ALSA: hda: intel: Fix Optimus when GPU has no sound
+ ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist
+ ASoC: fsl_audmix: register card device depends on 'dais' property
+ media: uvcvideo: Add quirk for Actions UVC05
+ media: s5p-mfc: Corrected NV12M/NV21M plane-sizes
+ mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves
+ ALSA: usb-audio: Fix CME quirk for UF series keyboards
+ ASoC: amd: Add DMI quirk for ACP6X mic support
+ ASoC: amd: yc: update quirk data for new Lenovo model
+ platform/x86: x86-android-tablets: Add select POWER_SUPPLY to Kconfig
+ wifi: ath11k: Fix DMA buffer allocation to resolve SWIOTLB issues
+ wifi: ath11k: fix memory leak in ath11k_xxx_remove()
+ wifi: ath12k: fix memory leak in ath12k_pci_remove()
+ ata: libata-core: Add 'external' to the libata.force kernel parameter
+ scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
+ f2fs: don't retry IO for corrupted data scenario
+ wifi: mac80211: add strict mode disabling workarounds
+ wifi: mac80211: ensure sdata->work is canceled before initialized.
+ scsi: target: spc: Fix RSOC parameter data header size
+ net: usb: asix_devices: add FiberGecko DeviceID
+ page_pool: avoid infinite loop to schedule delayed worker
+ can: flexcan: Add quirk to handle separate interrupt lines for mailboxes
+ can: flexcan: add NXP S32G2/S32G3 SoC support
+ jfs: Fix uninit-value access of imap allocated in the diMount() function
+ fs/jfs: cast inactags to s64 to prevent potential overflow
+ fs/jfs: Prevent integer overflow in AG size calculation
+ jfs: Prevent copying of nlink with value 0 from disk inode
+ jfs: add sanity check for agwidth in dbMount
+ ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
+ net: sfp: add quirk for 2.5G OEM BX SFP
+ wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
+ f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
+ net: sfp: add quirk for FS SFP-10GM-T copper SFP+ module
+ ahci: add PCI ID for Marvell 88SE9215 SATA Controller
+ ext4: protect ext4_release_dquot against freezing
+ Revert "f2fs: rebuild nat_bits during umount"
+ ext4: ignore xattrs past end
+ cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk
+ scsi: st: Fix array overflow in st_setup()
+ ahci: Marvell 88SE9215 controllers prefer DMA for ATAPI
+ btrfs: harden block_group::bg_list against list_del() races
+ wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
+ net: vlan: don't propagate flags on open
+ tracing: fix return value in __ftrace_event_enable_disable for
TRACE_REG_UNREGISTER
+ Bluetooth: btintel_pcie: Add device id of Whale Peak
+ Bluetooth: hci_uart: fix race during initialization
+ Bluetooth: btusb: Add 2 HWIDs for MT7922
+ Bluetooth: hci_qca: use the power sequencer for wcn6750
+ Bluetooth: qca: simplify WCN399x NVM loading
+ Bluetooth: Add quirk for broken READ_VOICE_SETTING
+ Bluetooth: Add quirk for broken READ_PAGE_SCAN_TYPE
+ drm: allow encoder mode_set even when connectors change for crtc
+ drm/xe/bmg: Add new PCI IDs
+ drm/xe/vf: Don't try to trigger a full GT reset if VF
+ drm/amd/display: Update Cursor request mode to the beginning prefetch always
+ drm/amdgpu: Unlocked unmap only clear page table leaves
+ drm: panel-orientation-quirks: Add support for AYANEO 2S
+ drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB
+ drm: panel-orientation-quirks: Add quirk for AYA NEO Slide
+ drm: panel-orientation-quirks: Add new quirk for GPD Win 2
+ drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel)
+ drm/debugfs: fix printk format for bridge index
+ drm/bridge: panel: forbid initializing a panel with unknown connector type
+ drm/amd/display: stop DML2 from removing pipes based on planes
+ drivers: base: devres: Allow to release group on device release
+ drm/amdkfd: clamp queue size to minimum
+ drm/amdkfd: Fix mode1 reset crash issue
+ drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
+ drm/amdkfd: debugfs hang_hws skip GPU with MES
+ drm/xe/xelp: Move Wa_16011163337 from tunings to workarounds
+ drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data
+ drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
+ PCI: Add Rockchip Vendor ID
+ drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
+ PCI: Enable Configuration RRS SV early
+ PCI: Check BAR index for validity
+ PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
+ drm/amdgpu: grab an additional reference on the gang fence v2
+ fbdev: omapfb: Add 'plane' value check
+ tracing: probe-events: Add comments about entry data storing code
+ ktest: Fix Test Failures Due to Missing LOG_FILE Directories
+ tpm, tpm_tis: Workaround failed command reception on Infineon devices
+ tpm: End any active auth session before shutdown
+ pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
+ pwm: rcar: Improve register calculation
+ pwm: fsl-ftm: Handle clk_get_rate() returning 0
+ bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
+ ext4: don't treat fhandle lookup of ea_inode as FS corruption
+ HID: pidff: Clamp PERIODIC effect period to device's logical range
+ HID: pidff: Stop all effects before enabling actuators
+ HID: pidff: Completely rework and fix pidff_reset function
+ HID: pidff: Simplify pidff_upload_effect function
+ HID: pidff: Define values used in pidff_find_special_fields
+ HID: pidff: Rescale time values to match field units
+ HID: pidff: Factor out code for setting gain
+ HID: pidff: Move all hid-pidff definitions to a dedicated header
+ HID: pidff: Simplify pidff_rescale_signed
+ HID: pidff: Use macros instead of hardcoded min/max values for shorts
+ HID: pidff: Factor out pool report fetch and remove excess declaration
+ HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX
+ HID: hid-universal-pidff: Add Asetek wheelbases support
+ HID: pidff: Comment and code style update
+ HID: pidff: Support device error response from PID_BLOCK_LOAD
+ HID: pidff: Remove redundant call to pidff_find_special_keys
+ HID: pidff: Rename two functions to align them with naming convention
+ HID: pidff: Clamp effect playback LOOP_COUNT value
+ HID: pidff: Compute INFINITE value instead of using hardcoded 0xffff
+ HID: pidff: Fix 90 degrees direction name North -> East
+ HID: pidff: Fix set_device_control()
+ auxdisplay: hd44780: Fix an API misuse in hd44780.c
+ dt-bindings: media: st,stmipid02: correct lane-polarities maxItems
+ media: mediatek: vcodec: Fix a resource leak related to the scp device in FW
initialization
+ media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
+ media: mgb4: Fix CMT registers update logic
+ media: i2c: adv748x: Fix test pattern selection mask
+ media: mgb4: Fix switched CMT frequency range "magic values" sets
+ media: intel/ipu6: set the dev_parent of video device to pdev
+ media: venus: hfi: add a check to handle OOB in sfr region
+ media: venus: hfi: add check to handle incorrect queue size
+ media: vim2m: print device name after registering device
+ media: siano: Fix error handling in smsdvb_module_init()
+ media: rockchip: rga: fix rga offset lookup
+ xenfs/xensyms: respect hypervisor's "next" indication
+ arm64: cputype: Add MIDR_CORTEX_A76AE
+ arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
+ arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
+ arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
+ KVM: arm64: Tear down vGIC on failed vCPU creation
+ spi: cadence-qspi: Fix probe on AM62A LP SK
+ mtd: rawnand: brcmnand: fix PM resume warning
+ tpm, tpm_tis: Fix timeout handling when waiting for TPM status
+ accel/ivpu: Fix PM related deadlocks in MS IOCTLs
+ media: streamzap: prevent processing IR data on URB failure
+ media: hi556: Fix memory leak (on error) in hi556_check_hwcfg()
+ media: visl: Fix ERANGE error when setting enum controls
+ media: platform: stm32: Add check for clk_enable()
+ media: imx219: Adjust PLL settings based on the number of MIPI lanes
+ media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
+ Revert "media: imx214: Fix the error handling in imx214_probe()"
+ media: i2c: ccs: Set the device's runtime PM status correctly in remove
+ media: i2c: ccs: Set the device's runtime PM status correctly in probe
+ media: i2c: ov7251: Set enable GPIO low in probe
+ media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
+ media: nuvoton: Fix reference handling of ece_node
+ media: nuvoton: Fix reference handling of ece_pdev
+ media: venus: hfi_parser: add check to avoid out of bound access
+ media: venus: hfi_parser: refactor hfi packet parsing logic
+ media: i2c: imx319: Rectify runtime PM handling probe and remove
+ media: i2c: imx219: Rectify runtime PM handling in probe and remove
+ media: i2c: imx214: Rectify probe error handling related to runtime PM
+ media: chips-media: wave5: Fix gray color on screen
+ media: chips-media: wave5: Avoid race condition in the interrupt handler
+ media: chips-media: wave5: Fix a hang after seeking
+ media: chips-media: wave5: Fix timeout while testing 10bit hevc fluster
+ mptcp: sockopt: fix getting IPV6_V6ONLY
+ mptcp: sockopt: fix getting freebind & transparent
+ mtd: Add check for devm_kcalloc()
+ net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
+ mtd: Replace kcalloc() with devm_kcalloc()
+ clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
+ wifi: mt76: Add check for devm_kstrdup()
+ wifi: mac80211: fix integer overflow in hwmp_route_info_get()
+ wifi: mt76: mt7925: ensure wow pattern command align fw format
+ wifi: mt76: mt7925: fix country count limitation for CLC
+ wifi: mt76: mt7925: fix the wrong link_idx when a p2p_device is present
+ wifi: mt76: mt7925: fix the wrong simultaneous cap for MLO
+ io_uring/net: fix accept multishot handling
+ io_uring/net: fix io_req_post_cqe abuse by send bundle
+ io_uring/kbuf: reject zero sized provided buffers
+ ASoC: codecs: wcd937x: fix a potential memory leak in
wcd937x_soc_codec_probe()
+ ASoC: q6apm: add q6apm_get_hw_pointer helper
+ ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
+ ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
+ ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment.
+ ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns.
+ ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
+ ALSA: hda/realtek: Enable Mute LED on HP OMEN 16 Laptop xd000xx
+ accel/ivpu: Fix warning in ivpu_ipc_send_receive_internal()
+ accel/ivpu: Fix deadlock in ivpu_ms_cleanup()
+ bus: mhi: host: Fix race between unprepare and queue_buf
+ ext4: fix off-by-one error in do_split
+ f2fs: fix to avoid atomicity corruption of atomic file
+ vdpa/mlx5: Fix oversized null mkey longer than 32bit
+ udf: Fix inode_getblk() return value
+ tpm: do not start chip while suspended
+ soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
+ smb311 client: fix missing tcon check when mounting with linux/posix
extensions
+ ima: limit the number of open-writers integrity violations
+ ima: limit the number of ToMToU integrity violations
+ i3c: master: svc: Use readsb helper for reading MDB
+ i3c: Add NULL pointer check in i3c_master_queue_ibi()
+ jbd2: remove wrong sb->s_sequence check
+ leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs
+ leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs
+ mfd: ene-kb3930: Fix a potential NULL pointer dereference
+ mailbox: tegra-hsp: Define dimensioning masks in SoC data
+ locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
+ lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
+ mptcp: fix NULL pointer in can_accept_new_subflow
+ mptcp: only inc MPJoinAckHMacFailure for HMAC failures
+ mtd: inftlcore: Add error check for inftl_read_oob()
+ mtd: rawnand: Add status chack in r852_ready()
+ arm64: mops: Do not dereference src reg for a set operation
+ arm64: tegra: Remove the Orin NX/Nano suspend key
+ arm64: mm: Correct the update of max_pfn
+ arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
+ arm64: dts: exynos: gs101: disable pinctrl_gsacore node
+ backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
+ btrfs: fix non-empty delayed iputs list on unmount due to compressed write
workers
+ btrfs: tests: fix chunk map leak after failure to add it to the tree
+ btrfs: zoned: fix zone activation with missing devices
+ btrfs: zoned: fix zone finishing with missing devices
+ iommufd: Fix uninitialized rc in iommufd_access_rw()
+ iommu/vt-d: Put IRTE back into posted MSI mode if vCPU posting is disabled
+ iommu/vt-d: Don't clobber posted vCPU IRTE when host IRQ affinity changes
+ iommu/vt-d: Fix possible circular locking dependency
+ iommu/vt-d: Wire up irq_ack() to irq_move_irq() for posted MSIs
+ sparc/mm: disable preemption in lazy mmu mode
+ sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes
+ net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
+ mm/damon/ops: have damon_get_folio return folio even for tail pages
+ mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
+ mm: make page_mapped_in_vma() hugetlb walk aware
+ mm: fix lazy mmu docs and usage
+ mm/mremap: correctly handle partial mremap() of VMA starting at 0
+ mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
+ mm/userfaultfd: fix release hang over concurrent GUP
+ mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
+ mm/hugetlb: move hugetlb_sysctl_init() to the __init section
+ sctp: detect and prevent references to a freed transport in sendmsg
+ x86/xen: fix balloon target initialization for PVH dom0
+ tracing: Do not add length to print format in synthetic events
+ thermal/drivers/rockchip: Add missing rk3328 mapping entry
+ cifs: avoid NULL pointer dereference in dbg call
+ cifs: fix integer overflow in match_server()
+ cifs: Ensure that all non-client-specific reparse points are processed by the
server
+ clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
+ clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks
+ clk: qcom: gdsc: Release pm subdomains in reverse add order
+ clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code
+ clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
+ crypto: ccp - Fix check for the primary ASP device
+ crypto: ccp - Fix uAPI definitions of PSP errors
+ dlm: fix error if inactive rsb is not hashed
+ dlm: fix error if active rsb is not hashed
+ dm-ebs: fix prefetch-vs-suspend race
+ dm-integrity: set ti->error on memory allocation failure
+ dm-integrity: fix non-constant-time tag verification
+ dm-verity: fix prefetch-vs-suspend race
+ dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg'
+ dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg'
+ ftrace: Add cond_resched() to ftrace_graph_set_hash()
+ ftrace: Properly merge notrace hashes
+ gpio: tegra186: fix resource handling in ACPI probe path
+ gpio: zynq: Fix wakeup source leaks on device unbind
+ gve: handle overflow when reporting TX consumed descriptors
+ KVM: Allow building irqbypass.ko as as module when kvm.ko is a module
+ UBUNTU: [Config] updateconfigs for CONFIG_HAVE_KVM_IRQ_BYPASS
+ KVM: x86: Explicitly zero-initialize on-stack CPUID unions
+ KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
+ landlock: Move code to ease future backports
+ landlock: Add the errata interface
+ landlock: Add erratum for TCP fix
+ landlock: Prepare to add second errata
+ misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
+ net: mana: Switch to page pool for jumbo frames
+ ntb: use 64-bit arithmetic for the MSI doorbell mask
+ of/irq: Fix device node refcount leakage in API of_irq_parse_one()
+ of/irq: Fix device node refcount leakage in API of_irq_parse_raw()
+ of/irq: Fix device node refcount leakages in of_irq_count()
+ of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
+ of/irq: Fix device node refcount leakages in of_irq_init()
+ PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
+ PCI: j721e: Fix the value of .linkdown_irq_regfield for J784S4
+ PCI: pciehp: Avoid unnecessary device replacement check
+ PCI: Fix reference leak in pci_alloc_child_bus()
+ PCI: Fix reference leak in pci_register_host_bridge()
+ PCI: Fix wrong length of devres array
+ phy: freescale: imx8m-pcie: assert phy reset and perst in power off
+ pinctrl: qcom: Clear latched interrupt status when changing IRQ type
+ pinctrl: samsung: add support for eint_fltcon_offset
+ ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio()
+ s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs
+ s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues
+ s390: Fix linker error when -no-pie option is unavailable
+ selftests: mptcp: close fd_in before returning in main_loop
+ selftests: mptcp: fix incorrect fd checks in main_loop
+ thermal/drivers/mediatek/lvts: Disable monitor mode during suspend
+ thermal/drivers/mediatek/lvts: Disable Stage 3 thermal threshold
+ arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
+ iommufd: Avoid duplicated __iommu_group_set_core_domain() call
+ iommufd: Make attach_handle generic than fault specific
+ iommufd: Fail replace if device has not been attached
+ x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT
+ ACPI: platform-profile: Fix CFI violation when accessing sysfs files
+ NFSD: fix decoding in nfs4_xdr_dec_cb_getattr
+ NFSD: Fix CB_GETATTR status fix
+ x86/e820: Fix handling of subpage regions when calculating nosave ranges in
e820__register_nosave_regions()
+ libbpf: Prevent compiler warnings/errors
+ kbuild: Add '-fno-builtin-wcslen'
+ media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef noinline
+ Bluetooth: hci_uart: Fix another race during initialization
+ s390/cpumf: Fix double free on error in cpumf_pmu_event_init()
+ HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver
Due to Race Condition
+ UBUNTU: Upstream stable to v6.6.87, v6.12.24
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2111782
Title:
Oracular update: upstream stable patchset 2025-05-27
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Oracular:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-05-27
Ported from the following upstream stable releases:
v6.6.87, v6.12.24
from git://git.kernel.org/
ASoC: Intel: adl: add 2xrt1316 audio configuration
cgroup/cpuset: Fix incorrect isolated_cpus update in
update_parent_effective_cpumask()
cgroup/cpuset: Revert "Allow suppression of sched domain rebuild in
update_cpumasks_hier()"
cgroup/cpuset: Enforce at most one rebuild_sched_domains_locked() call per
operation
cgroup/cpuset: Further optimize code if CONFIG_CPUSETS_V1 not set
cgroup/cpuset: Fix race between newly created partition and dying one
gpiolib: of: Fix the choice for Ingenic NAND quirk
selftests/futex: futex_waitv wouldblock test should fail
ublk: refactor recovery configuration flag helpers
ublk: fix handling recovery & reissue in ublk_abort_queue()
drm/i915: Disable RPG during live selftest
x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI
drm/xe/hw_engine: define sysfs_ops on all directories
ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret()
tipc: fix memory leak in tipc_link_xmit
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
net: tls: explicitly disallow disconnect
octeontx2-pf: qos: fix VF root node parent queue index
tc: Ensure we have enough buffer space when sending filter netlink
notifications
net: ethtool: Don't call .cleanup_data when prepare_data fails
drm/tests: modeset: Fix drm_display_mode memory leak
drm/tests: helpers: Create kunit helper to destroy a drm_display_mode
drm/tests: cmdline: Fix drm_display_mode memory leak
drm/tests: modes: Fix drm_display_mode memory leak
drm/tests: probe-helper: Fix drm_display_mode memory leak
net: libwx: handle page_pool_dev_alloc_pages error
ata: sata_sx4: Add error handling in pdc20621_i2c_read()
drm/i915/huc: Fix fence not released on early probe errors
nvmet-fcloop: swap list_add_tail arguments
net_sched: sch_sfq: use a temporary work area for validating configuration
net_sched: sch_sfq: move the limit validation
net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend()
net: phy: allow MDIO bus PM ops to start/stop state machine for
phylink-controlled PHY
ipv6: Align behavior across nexthops during path selection
net: ppp: Add bound checking for skb data on ppp_sync_txmung
nft_set_pipapo: fix incorrect avx2 match of 5th field octet
iommu/exynos: Fix suspend/resume with IDENTITY domain
iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group
perf/x86: Add hw_perf_event::aux_config
perf/core: Add aux_pause, aux_resume, aux_start_paused
perf/core: Simplify the perf_event_alloc() error path
perf: Rename perf_event_context.nr_pending to nr_no_switch_fast.
perf: Fix hang while freeing sigtrap event
fs: consistently deref the files table with rcu_dereference_raw()
umount: Allow superblock owners to force umount
pm: cpupower: bench: Prevent NULL dereference on malloc failure
x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW
x86/percpu: Disable named address spaces for UBSAN_BOOL with KASAN for GCC <
14.2
x86/ia32: Leave NULL selector values 0~3 unchanged
x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when
running in a virtual machine
perf: arm_pmu: Don't disable counter in armpmu_add()
perf/dwc_pcie: fix some unreleased resources
PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
Flush console log from kernel_power_off()
arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
xen/mcelog: Add __nonstring annotations for unterminated strings
zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work
around compiler segfault
ASoC: SOF: topology: Use krealloc_array() to replace krealloc()
HID: pidff: Convert infinite length from Linux API to PID standard
HID: pidff: Do not send effect envelope if it's empty
HID: pidff: Add MISSING_DELAY quirk and its detection
HID: pidff: Add MISSING_PBO quirk and its detection
HID: pidff: Add PERMISSIVE_CONTROL quirk
HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol
HID: pidff: Add FIX_WHEEL_DIRECTION quirk
HID: Add hid-universal-pidff driver and supported device ids
UBUNTU: [Config] updateconfigs for CONFIG_HID_UNIVERSAL_PIDFF
HID: pidff: Add PERIODIC_SINE_ONLY quirk
HID: pidff: Fix null pointer dereference in pidff_find_fields
ASoC: amd: ps: use macro for ACP6.3 pci revision id
ALSA: hda: intel: Fix Optimus when GPU has no sound
ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist
ASoC: fsl_audmix: register card device depends on 'dais' property
media: uvcvideo: Add quirk for Actions UVC05
media: s5p-mfc: Corrected NV12M/NV21M plane-sizes
mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves
ALSA: usb-audio: Fix CME quirk for UF series keyboards
ASoC: amd: Add DMI quirk for ACP6X mic support
ASoC: amd: yc: update quirk data for new Lenovo model
platform/x86: x86-android-tablets: Add select POWER_SUPPLY to Kconfig
wifi: ath11k: Fix DMA buffer allocation to resolve SWIOTLB issues
wifi: ath11k: fix memory leak in ath11k_xxx_remove()
wifi: ath12k: fix memory leak in ath12k_pci_remove()
ata: libata-core: Add 'external' to the libata.force kernel parameter
scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
f2fs: don't retry IO for corrupted data scenario
wifi: mac80211: add strict mode disabling workarounds
wifi: mac80211: ensure sdata->work is canceled before initialized.
scsi: target: spc: Fix RSOC parameter data header size
net: usb: asix_devices: add FiberGecko DeviceID
page_pool: avoid infinite loop to schedule delayed worker
can: flexcan: Add quirk to handle separate interrupt lines for mailboxes
can: flexcan: add NXP S32G2/S32G3 SoC support
jfs: Fix uninit-value access of imap allocated in the diMount() function
fs/jfs: cast inactags to s64 to prevent potential overflow
fs/jfs: Prevent integer overflow in AG size calculation
jfs: Prevent copying of nlink with value 0 from disk inode
jfs: add sanity check for agwidth in dbMount
ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
net: sfp: add quirk for 2.5G OEM BX SFP
wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
net: sfp: add quirk for FS SFP-10GM-T copper SFP+ module
ahci: add PCI ID for Marvell 88SE9215 SATA Controller
ext4: protect ext4_release_dquot against freezing
Revert "f2fs: rebuild nat_bits during umount"
ext4: ignore xattrs past end
cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk
scsi: st: Fix array overflow in st_setup()
ahci: Marvell 88SE9215 controllers prefer DMA for ATAPI
btrfs: harden block_group::bg_list against list_del() races
wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
net: vlan: don't propagate flags on open
tracing: fix return value in __ftrace_event_enable_disable for
TRACE_REG_UNREGISTER
Bluetooth: btintel_pcie: Add device id of Whale Peak
Bluetooth: hci_uart: fix race during initialization
Bluetooth: btusb: Add 2 HWIDs for MT7922
Bluetooth: hci_qca: use the power sequencer for wcn6750
Bluetooth: qca: simplify WCN399x NVM loading
Bluetooth: Add quirk for broken READ_VOICE_SETTING
Bluetooth: Add quirk for broken READ_PAGE_SCAN_TYPE
drm: allow encoder mode_set even when connectors change for crtc
drm/xe/bmg: Add new PCI IDs
drm/xe/vf: Don't try to trigger a full GT reset if VF
drm/amd/display: Update Cursor request mode to the beginning prefetch always
drm/amdgpu: Unlocked unmap only clear page table leaves
drm: panel-orientation-quirks: Add support for AYANEO 2S
drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB
drm: panel-orientation-quirks: Add quirk for AYA NEO Slide
drm: panel-orientation-quirks: Add new quirk for GPD Win 2
drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel)
drm/debugfs: fix printk format for bridge index
drm/bridge: panel: forbid initializing a panel with unknown connector type
drm/amd/display: stop DML2 from removing pipes based on planes
drivers: base: devres: Allow to release group on device release
drm/amdkfd: clamp queue size to minimum
drm/amdkfd: Fix mode1 reset crash issue
drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
drm/amdkfd: debugfs hang_hws skip GPU with MES
drm/xe/xelp: Move Wa_16011163337 from tunings to workarounds
drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data
drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
PCI: Add Rockchip Vendor ID
drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
PCI: Enable Configuration RRS SV early
PCI: Check BAR index for validity
PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
drm/amdgpu: grab an additional reference on the gang fence v2
fbdev: omapfb: Add 'plane' value check
tracing: probe-events: Add comments about entry data storing code
ktest: Fix Test Failures Due to Missing LOG_FILE Directories
tpm, tpm_tis: Workaround failed command reception on Infineon devices
tpm: End any active auth session before shutdown
pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
pwm: rcar: Improve register calculation
pwm: fsl-ftm: Handle clk_get_rate() returning 0
bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
ext4: don't treat fhandle lookup of ea_inode as FS corruption
HID: pidff: Clamp PERIODIC effect period to device's logical range
HID: pidff: Stop all effects before enabling actuators
HID: pidff: Completely rework and fix pidff_reset function
HID: pidff: Simplify pidff_upload_effect function
HID: pidff: Define values used in pidff_find_special_fields
HID: pidff: Rescale time values to match field units
HID: pidff: Factor out code for setting gain
HID: pidff: Move all hid-pidff definitions to a dedicated header
HID: pidff: Simplify pidff_rescale_signed
HID: pidff: Use macros instead of hardcoded min/max values for shorts
HID: pidff: Factor out pool report fetch and remove excess declaration
HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX
HID: hid-universal-pidff: Add Asetek wheelbases support
HID: pidff: Comment and code style update
HID: pidff: Support device error response from PID_BLOCK_LOAD
HID: pidff: Remove redundant call to pidff_find_special_keys
HID: pidff: Rename two functions to align them with naming convention
HID: pidff: Clamp effect playback LOOP_COUNT value
HID: pidff: Compute INFINITE value instead of using hardcoded 0xffff
HID: pidff: Fix 90 degrees direction name North -> East
HID: pidff: Fix set_device_control()
auxdisplay: hd44780: Fix an API misuse in hd44780.c
dt-bindings: media: st,stmipid02: correct lane-polarities maxItems
media: mediatek: vcodec: Fix a resource leak related to the scp device in FW
initialization
media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
media: mgb4: Fix CMT registers update logic
media: i2c: adv748x: Fix test pattern selection mask
media: mgb4: Fix switched CMT frequency range "magic values" sets
media: intel/ipu6: set the dev_parent of video device to pdev
media: venus: hfi: add a check to handle OOB in sfr region
media: venus: hfi: add check to handle incorrect queue size
media: vim2m: print device name after registering device
media: siano: Fix error handling in smsdvb_module_init()
media: rockchip: rga: fix rga offset lookup
xenfs/xensyms: respect hypervisor's "next" indication
arm64: cputype: Add MIDR_CORTEX_A76AE
arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
KVM: arm64: Tear down vGIC on failed vCPU creation
spi: cadence-qspi: Fix probe on AM62A LP SK
mtd: rawnand: brcmnand: fix PM resume warning
tpm, tpm_tis: Fix timeout handling when waiting for TPM status
accel/ivpu: Fix PM related deadlocks in MS IOCTLs
media: streamzap: prevent processing IR data on URB failure
media: hi556: Fix memory leak (on error) in hi556_check_hwcfg()
media: visl: Fix ERANGE error when setting enum controls
media: platform: stm32: Add check for clk_enable()
media: imx219: Adjust PLL settings based on the number of MIPI lanes
media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
Revert "media: imx214: Fix the error handling in imx214_probe()"
media: i2c: ccs: Set the device's runtime PM status correctly in remove
media: i2c: ccs: Set the device's runtime PM status correctly in probe
media: i2c: ov7251: Set enable GPIO low in probe
media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
media: nuvoton: Fix reference handling of ece_node
media: nuvoton: Fix reference handling of ece_pdev
media: venus: hfi_parser: add check to avoid out of bound access
media: venus: hfi_parser: refactor hfi packet parsing logic
media: i2c: imx319: Rectify runtime PM handling probe and remove
media: i2c: imx219: Rectify runtime PM handling in probe and remove
media: i2c: imx214: Rectify probe error handling related to runtime PM
media: chips-media: wave5: Fix gray color on screen
media: chips-media: wave5: Avoid race condition in the interrupt handler
media: chips-media: wave5: Fix a hang after seeking
media: chips-media: wave5: Fix timeout while testing 10bit hevc fluster
mptcp: sockopt: fix getting IPV6_V6ONLY
mptcp: sockopt: fix getting freebind & transparent
mtd: Add check for devm_kcalloc()
net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
mtd: Replace kcalloc() with devm_kcalloc()
clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
wifi: mt76: Add check for devm_kstrdup()
wifi: mac80211: fix integer overflow in hwmp_route_info_get()
wifi: mt76: mt7925: ensure wow pattern command align fw format
wifi: mt76: mt7925: fix country count limitation for CLC
wifi: mt76: mt7925: fix the wrong link_idx when a p2p_device is present
wifi: mt76: mt7925: fix the wrong simultaneous cap for MLO
io_uring/net: fix accept multishot handling
io_uring/net: fix io_req_post_cqe abuse by send bundle
io_uring/kbuf: reject zero sized provided buffers
ASoC: codecs: wcd937x: fix a potential memory leak in
wcd937x_soc_codec_probe()
ASoC: q6apm: add q6apm_get_hw_pointer helper
ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment.
ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns.
ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
ALSA: hda/realtek: Enable Mute LED on HP OMEN 16 Laptop xd000xx
accel/ivpu: Fix warning in ivpu_ipc_send_receive_internal()
accel/ivpu: Fix deadlock in ivpu_ms_cleanup()
bus: mhi: host: Fix race between unprepare and queue_buf
ext4: fix off-by-one error in do_split
f2fs: fix to avoid atomicity corruption of atomic file
vdpa/mlx5: Fix oversized null mkey longer than 32bit
udf: Fix inode_getblk() return value
tpm: do not start chip while suspended
soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
smb311 client: fix missing tcon check when mounting with linux/posix
extensions
ima: limit the number of open-writers integrity violations
ima: limit the number of ToMToU integrity violations
i3c: master: svc: Use readsb helper for reading MDB
i3c: Add NULL pointer check in i3c_master_queue_ibi()
jbd2: remove wrong sb->s_sequence check
leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs
leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs
mfd: ene-kb3930: Fix a potential NULL pointer dereference
mailbox: tegra-hsp: Define dimensioning masks in SoC data
locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
mptcp: fix NULL pointer in can_accept_new_subflow
mptcp: only inc MPJoinAckHMacFailure for HMAC failures
mtd: inftlcore: Add error check for inftl_read_oob()
mtd: rawnand: Add status chack in r852_ready()
arm64: mops: Do not dereference src reg for a set operation
arm64: tegra: Remove the Orin NX/Nano suspend key
arm64: mm: Correct the update of max_pfn
arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
arm64: dts: exynos: gs101: disable pinctrl_gsacore node
backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
btrfs: fix non-empty delayed iputs list on unmount due to compressed write
workers
btrfs: tests: fix chunk map leak after failure to add it to the tree
btrfs: zoned: fix zone activation with missing devices
btrfs: zoned: fix zone finishing with missing devices
iommufd: Fix uninitialized rc in iommufd_access_rw()
iommu/vt-d: Put IRTE back into posted MSI mode if vCPU posting is disabled
iommu/vt-d: Don't clobber posted vCPU IRTE when host IRQ affinity changes
iommu/vt-d: Fix possible circular locking dependency
iommu/vt-d: Wire up irq_ack() to irq_move_irq() for posted MSIs
sparc/mm: disable preemption in lazy mmu mode
sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes
net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
mm/damon/ops: have damon_get_folio return folio even for tail pages
mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
mm: make page_mapped_in_vma() hugetlb walk aware
mm: fix lazy mmu docs and usage
mm/mremap: correctly handle partial mremap() of VMA starting at 0
mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
mm/userfaultfd: fix release hang over concurrent GUP
mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
mm/hugetlb: move hugetlb_sysctl_init() to the __init section
sctp: detect and prevent references to a freed transport in sendmsg
x86/xen: fix balloon target initialization for PVH dom0
tracing: Do not add length to print format in synthetic events
thermal/drivers/rockchip: Add missing rk3328 mapping entry
cifs: avoid NULL pointer dereference in dbg call
cifs: fix integer overflow in match_server()
cifs: Ensure that all non-client-specific reparse points are processed by the
server
clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks
clk: qcom: gdsc: Release pm subdomains in reverse add order
clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code
clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
crypto: ccp - Fix check for the primary ASP device
crypto: ccp - Fix uAPI definitions of PSP errors
dlm: fix error if inactive rsb is not hashed
dlm: fix error if active rsb is not hashed
dm-ebs: fix prefetch-vs-suspend race
dm-integrity: set ti->error on memory allocation failure
dm-integrity: fix non-constant-time tag verification
dm-verity: fix prefetch-vs-suspend race
dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg'
dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg'
ftrace: Add cond_resched() to ftrace_graph_set_hash()
ftrace: Properly merge notrace hashes
gpio: tegra186: fix resource handling in ACPI probe path
gpio: zynq: Fix wakeup source leaks on device unbind
gve: handle overflow when reporting TX consumed descriptors
KVM: Allow building irqbypass.ko as as module when kvm.ko is a module
UBUNTU: [Config] updateconfigs for CONFIG_HAVE_KVM_IRQ_BYPASS
KVM: x86: Explicitly zero-initialize on-stack CPUID unions
KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
landlock: Move code to ease future backports
landlock: Add the errata interface
landlock: Add erratum for TCP fix
landlock: Prepare to add second errata
misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
net: mana: Switch to page pool for jumbo frames
ntb: use 64-bit arithmetic for the MSI doorbell mask
of/irq: Fix device node refcount leakage in API of_irq_parse_one()
of/irq: Fix device node refcount leakage in API of_irq_parse_raw()
of/irq: Fix device node refcount leakages in of_irq_count()
of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
of/irq: Fix device node refcount leakages in of_irq_init()
PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
PCI: j721e: Fix the value of .linkdown_irq_regfield for J784S4
PCI: pciehp: Avoid unnecessary device replacement check
PCI: Fix reference leak in pci_alloc_child_bus()
PCI: Fix reference leak in pci_register_host_bridge()
PCI: Fix wrong length of devres array
phy: freescale: imx8m-pcie: assert phy reset and perst in power off
pinctrl: qcom: Clear latched interrupt status when changing IRQ type
pinctrl: samsung: add support for eint_fltcon_offset
ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio()
s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs
s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues
s390: Fix linker error when -no-pie option is unavailable
selftests: mptcp: close fd_in before returning in main_loop
selftests: mptcp: fix incorrect fd checks in main_loop
thermal/drivers/mediatek/lvts: Disable monitor mode during suspend
thermal/drivers/mediatek/lvts: Disable Stage 3 thermal threshold
arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
iommufd: Avoid duplicated __iommu_group_set_core_domain() call
iommufd: Make attach_handle generic than fault specific
iommufd: Fail replace if device has not been attached
x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT
ACPI: platform-profile: Fix CFI violation when accessing sysfs files
NFSD: fix decoding in nfs4_xdr_dec_cb_getattr
NFSD: Fix CB_GETATTR status fix
x86/e820: Fix handling of subpage regions when calculating nosave ranges in
e820__register_nosave_regions()
libbpf: Prevent compiler warnings/errors
kbuild: Add '-fno-builtin-wcslen'
media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef noinline
Bluetooth: hci_uart: Fix another race during initialization
s390/cpumf: Fix double free on error in cpumf_pmu_event_init()
HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver
Due to Race Condition
UBUNTU: Upstream stable to v6.6.87, v6.12.24
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2111782/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
