Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v6.8.9 upstream stable release
from git://git.kernel.org/
Linux 6.8.9
Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS
phy: qcom: qmp-combo: fix VCO div offset on v5_5nm and v6
i2c: smbus: fix NULL function pointer dereference
RISC-V: selftests: cbo: Ensure asm operands match constraints, take 2
riscv: hwprobe: fix invalid sign extension for RISCV_HWPROBE_EXT_ZVFHMIN
sched/eevdf: Prevent vlag from going out of bounds in reweight_eevdf()
sched/eevdf: Fix miscalculation in reweight_entity() when se is not curr
sched/eevdf: Always update V if se->on_rq when reweighting
dt-bindings: eeprom: at24: Fix ST M24C64-D compatible schema
phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered
riscv: Fix loading 64-bit NOMMU kernels past the start of RAM
riscv: Fix TASK_SIZE on 64-bit NOMMU
dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
dma: xilinx_dpdma: Fix locking
dmaengine: idxd: Convert spinlock to mutex to lock evl workqueue
phy: qcom: m31: match requested regulator name with dt schema
phy: rockchip: naneng-combphy: Fix mux on rk3588
phy: rockchip-snps-pcie3: fix clearing PHP_GRF_PCIESEL_CON bits
phy: rockchip-snps-pcie3: fix bifurcation on rk3588
phy: freescale: imx8m-pcie: fix pcie link-up instability
phy: marvell: a3700-comphy: Fix hardcoded array size
phy: marvell: a3700-comphy: Fix out of bounds read
soundwire: amd: fix for wake interrupt handling for clockstop mode
idma64: Don't try to serve interrupts when device is powered off
dmaengine: tegra186: Fix residual calculation
dmaengine: owl: fix register access functions
mm: zswap: fix shrinker NULL crash with cgroup_disable=memory
mm: turn folio_test_hugetlb into a PageType
phy: qcom: qmp-combo: Fix VCO div offset on v3
phy: qcom: qmp-combo: Fix register base for QSERDES_DP_PHY_MODE
firmware: qcom: uefisecapp: Fix memory related IO errors and crashes
mtd: diskonchip: work around ubsan link failure
mtd: limit OTP NVMEM cell parse to non-NAND devices
udp: preserve the connected status if only UDP cmsg
fbdev: fix incorrect address computation in deferred IO
stackdepot: respect __GFP_NOLOCKDEP allocation flag
macsec: Detect if Rx skb is macsec-related for offloading devices that update
md_dst
macsec: Enable devices to advertise whether they update sk_buff md_dst during
offloads
net: b44: set pause params only when interface is up
ethernet: Add helper for assigning packet type when dest address does not match
device address
net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for MACsec
ACPI: CPPC: Fix access width used for PCC registers
ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
ACPI: CPPC: Use access_width over bit_width for system memory accesses
irqchip/gic-v3-its: Prevent double free on error
drm/amdkfd: Fix eviction fence handling
drm/amdkfd: Fix rescheduling of restore worker
drm/amdgpu: Fix leak when GPU memory allocation fails
drm/amdgpu/umsch: don't execute umsch test when GPU is in reset/suspend
drm/amdgpu/pm: Remove gpu_od if it's an empty directory
drm/atomic-helper: fix parameter order in drm_format_conv_state_copy() call
drm/amdgpu: Assign correct bits for SDMA HDP flush
drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
dmaengine: xilinx: xdma: Fix synchronization issue
dmaengine: xilinx: xdma: Fix wrong offsets in the buffers addresses in dma
descriptor
dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state"
arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
arm64: dts: qcom: sm8450: Fix the msi-map entries
arm64: dts: qcom: sc8280xp: add missing PCIe minimum OPP
LoongArch: Fix access error when read fault on a write-only VMA
LoongArch: Fix callchain parse error with kernel tracepoint events
eeprom: at24: fix memory corruption race condition
cpu: Re-enable CPU mitigations by default for !X86 architectures
x86/tdx: Preserve shared bit on mprotect()
btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
btrfs: scrub: run relocation repair when/only needed
btrfs: fix wrong block_start calculation for btrfs_drop_extent_map_range()
btrfs: fallback if compressed IO fails for ENOSPC
HID: i2c-hid: Revert to await reset ACK before reading report descriptor
HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
smb3: fix lock ordering potential deadlock in cifs_sync_mid_result
smb3: missing lock when picking channel
smb: client: Fix struct_group() usage in __packed structs
mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio()
mm: support page_mapcount() on page_has_type() pages
mm: create FOLIO_FLAG_FALSE and FOLIO_TYPE_OPS macros
mmc: sdhci-of-dwcmshc: th1520: Increase tuning loop count to 128
mmc: sdhci-msm: pervent access to suspended controller
mm/hugetlb: fix missing hugetlb_lock for resv uncharge
mtd: rawnand: qcom: Fix broken OP_RESET_DEVICE command in
qcom_misc_cmd_type_exec()
Bluetooth: qca: fix NULL-deref on non-serdev setup
Bluetooth: qca: fix NULL-deref on non-serdev suspend
Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
rust: remove `params` from `module` macro example
kbuild: rust: force `alloc` extern to allow "empty" Rust files
kbuild: rust: remove unneeded `@rustc_cfg` to avoid ICE
rust: make mutually exclusive with CFI_CLANG
rust: init: remove impl Zeroable for Infallible
rust: don't select CONSTRUCTORS
rust: kernel: require `Send` for `Module` implementations
rust: phy: implement `Send` for `Registration`
x86/cpu: Fix check for RDPKRU in __show_regs()
x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
selftests/seccomp: Handle EINVAL on unshare(CLONE_NEWPID)
selftests/seccomp: Change the syscall used in KILL_THREAD test
selftests/seccomp: user_notification_addfd check nextfd is available
drm/amdgpu: fix visible VRAM handling during faults
drm/amdgpu: add shared fdinfo stats
drm: add drm_gem_object_is_shared_for_memory_stats() helper
KVM: x86/pmu: Set enable bits for GP counters in PERF_GLOBAL_CTRL at "RESET"
KVM: x86/pmu: Zero out PMU metadata on AMD if PMU is disabled
usb: xhci: correct return value in case of STS_HCE
xhci: move event processing for one interrupter to a separate function
Revert "drm/amd/display: fix USB-C flag update after enc10 feature init"
drm/amd/display: Check DP Alt mode DPCS state via DMUB
netfs: Fix the pre-flush when appending to a file in writethrough mode
af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
tls: fix lockless read of strp->msg_ready in ->poll
dpll: fix dpll_pin_on_pin_register() for multiple parent pins
dpll: check that pin is registered in __dpll_pin_unregister()
octeontx2-af: fix the double free in rvu_npc_freemem()
net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
ice: fix LAG and VF lock dependency in ice_reset_vf()
iavf: Fix TC config comparison with existing adapter TC config
i40e: Report MFS in decimal base instead of hex
i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
net: ti: icssg-prueth: Fix signedness bug in prueth_init_rx_chns()
net: phy: dp83869: Fix MII mode failure
netfilter: nf_tables: honor table dormant flag from netdev release event path
ARM: dts: imx6ull-tarragon: fix USB over-current polarity
eth: bnxt: fix counting packets discarded due to OOM and netpoll
mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
mlxsw: spectrum_acl_tcam: Fix warning during rehash
mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
mlxsw: spectrum_acl_tcam: Rate limit error message
mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
mlxsw: spectrum_acl_tcam: Fix race in region ID allocation
mlxsw: Use refcount_t for reference counting
net: openvswitch: Fix Use-After-Free in ovs_ct_exit
ipvs: Fix checksumming on GSO of SCTP packets
Bluetooth: qca: set power_ctrl_enabled on NULL returned by gpiod_get_optional()
Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor
Bluetooth: btusb: mediatek: Fix double free of skb in coredump
Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID
Bluetooth: hci_event: Fix sending HCI_OP_READ_ENC_KEY_SIZE
Bluetooth: btusb: Fix triggering coredump implementation for QCA
Bluetooth: hci_sync: Use advertised PHYs on hci_le_ext_create_conn_sync
Bluetooth: ISO: Reassemble PA data for bcast sink
Bluetooth: hci_sync: Attempt to dequeue connection attempt
Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
Bluetooth: hci_conn: Always use sk_timeo as conn_timeout
Bluetooth: Remove pending ACL connection attempts
Bluetooth: hci_conn: Only do ACL connections sequentially
Bluetooth: hci_event: Use HCI error defines instead of magic values
drm/xe: call free_gsc_pkt only once on action add failure
drm/xe: Remove sysfs only once on action add failure
gpio: tegra186: Fix tegra186_gpio_is_accessible() check
net: phy: mediatek-ge-soc: follow netdev LED trigger semantics
net: gtp: Fix Use-After-Free in gtp_dellink
tcp: Fix Use-After-Free in tcp_ao_connect_init
net: usb: ax88179_178a: stop lying about skb->truesize
ipv4: check for NULL idev in ip_route_use_hint()
net: fix sk_memory_allocated_{add|sub} vs softirqs
net: make SK_MEMORY_PCPU_RESERV tunable
tools: ynl: don't ignore errors in NLMSG_DONE messages
soc: mediatek: mtk-svs: Append "-thermal" to thermal zone names
ax25: Fix netdev refcount issue
netfs: Fix writethrough-mode error handling
NFC: trf7970a: disable all regulators on removal
net: dsa: mv88e6xx: fix supported_interfaces setup in
mv88e6250_phylink_get_caps()
cxl/core: Fix potential payload size confusion in cxl_mem_get_poison()
bnxt_en: Fix error recovery for 5760X (P7) chips
bnxt_en: Fix the PCI-AER routines
bnxt_en: refactor reset close code
bridge/br_netlink.c: no need to return void function
icmp: prevent possible NULL dereferences from icmp_build_probe()
ARM: dts: microchip: at91-sama7g5ek: Replace regulator-suspend-voltage with the
valid property
mlxsw: pci: Fix driver initialization with old firmware
mlxsw: core_env: Fix driver initialization with old firmware
mlxsw: core: Unregister EMAD trap using FORWARD action
net: bcmasp: fix memory leak when bringing down interface
vxlan: drop packets from invalid src-address
net: libwx: fix alloc msix vectors failed
wifi: mac80211: fix unaligned le16 access
wifi: mac80211: remove link before AP
wifi: mac80211_hwsim: init peer measurement result
drm/gma500: Remove lid code
wifi: iwlwifi: mvm: return uid from iwl_mvm_build_scan_cmd
wifi: iwlwifi: mvm: remove old PASN station when adding a new one
wifi: mac80211: split mesh fast tx cache into local/proxied/forwarded
wifi: mac80211: clean up assignments to pointer cache.
ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
gpio: tangier: Use correct type for the IRQ chip data
arm64: dts: qcom: sc8180x: Fix ss_phy_irq for secondary USB controller
arm64: dts: qcom: x1e80100: Fix the compatible for cluster idle states
arm64: dts: qcom: Fix type of "wdog" IRQs for remoteprocs
block: fix module reference leakage from bdev_open_by_dev error path
arm64: dts: rockchip: regulator for sd needs to be always on for BPI-R2Pro
arm64: dts: rockchip: mark system power controller and fix typo on
orangepi-5-plus
arm64: dts: mediatek: mt2712: fix validation errors
arm64: dts: mediatek: mt7986: prefix BPI-R3 cooling maps with "map-"
arm64: dts: mediatek: mt7986: drop invalid thermal block clock
arm64: dts: mediatek: mt7986: reorder nodes
arm64: dts: mediatek: mt7986: drop "#reset-cells" from Ethernet controller
arm64: dts: mediatek: mt7986: drop invalid properties from ethsys
arm64: dts: mediatek: mt7986: reorder properties
arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
arm64: dts: mediatek: mt7622: fix IR nodename
arm64: dts: mediatek: mt7622: fix clock controllers
arm64: dts: mediatek: mt8183-kukui: Use default min voltage for MT6358
arm64: dts: mediatek: mt8195-cherry: Update min voltage constraint for MT6315
arm64: dts: mediatek: mt8192-asurada: Update min voltage constraint for MT6315
arm64: dts: mediatek: cherry: Describe CPU supplies
arm64: dts: mediatek: mt8195: Add missing gce-client-reg to mutex1
arm64: dts: mediatek: mt8195: Add missing gce-client-reg to mutex
arm64: dts: mediatek: mt8195: Add missing gce-client-reg to vpp/vdosys
arm64: dts: mediatek: mt8192: Add missing gce-client-reg to mutex
arm64: dts: mediatek: mt8183: Add power-domains properity to mfgcfg
arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
arm64: dts: rockchip: Fix the i2c address of es8316 on Cool Pi CM5
arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
arm64: dts: rockchip: enable internal pull-up on Q7_USB_ID for RK3399 Puma
arm64: dts: rockchip: set PHY address of MT7531 switch to 0x1f
HID: logitech-dj: allow mice to use all types of reports
HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc
cifs: reinstate original behavior again for forceuid/forcegid
smb: client: fix rename(2) regression against samba
cifs: Fix reacquisition of volume cookie on still-live connection
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Confirmed
** Affects: linux (Ubuntu Noble)
Importance: Undecided
Status: New
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Noble)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2070337
Title:
Noble update: v6.8.9 upstream stable release
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2070337/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
