This bug was fixed in the package linux - 6.8.0-48.48 --------------- linux (6.8.0-48.48) noble; urgency=medium
* noble/linux: 6.8.0-48.48 -proposed tracker (LP: #2082437) * [SRU][Noble] Bad EPP defaults cause performance regressions on select Intel CPUs (LP: #2077470) - x86/cpu/vfm: Update arch/x86/include/asm/intel-family.h - cpufreq: intel_pstate: Allow model specific EPPs - cpufreq: intel_pstate: Update default EPPs for Meteor Lake - cpufreq: intel_pstate: Switch to new Intel CPU model defines - cpufreq: intel_pstate: Update Meteor Lake EPPs - cpufreq: intel_pstate: Use Meteor Lake EPPs for Arrow Lake - cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids * power: Enable intel_rapl driver (LP: #2078834) - powercap: intel_rapl: Add support for ArrowLake-H platform * x86/vmware: Add TDX hypercall support (LP: #2077729) - x86/vmware: Introduce VMware hypercall API - x86/vmware: Add TDX hypercall support * Guest crashes post migration with migrate_misplaced_folio+0x4cc/0x5d0 (LP: #2076866) - mm/mempolicy: use numa_node_id() instead of cpu_to_node() - mm/numa_balancing: allow migrate on protnone reference with MPOL_PREFERRED_MANY policy - mm: convert folio_estimated_sharers() to folio_likely_mapped_shared() - mm: factor out the numa mapping rebuilding into a new helper - mm: support multi-size THP numa balancing - mm/migrate: make migrate_misplaced_folio() return 0 on success - mm/migrate: move NUMA hinting fault folio isolation + checks under PTL - mm: fix possible OOB in numa_rebuild_large_mapping() * Add 'mm: hold PTL from the first PTE while reclaiming a large folio' to fix L2 Guest hang during LTP Test (LP: #2076147) - mm: hold PTL from the first PTE while reclaiming a large folio * KOP L2 guest fails to boot with 1 core - SMT8 topology (LP: #2070329) - KVM: PPC: Book3S HV nestedv2: Add DPDES support in helper library for Guest state buffer - KVM: PPC: Book3S HV nestedv2: Fix doorbell emulation * L2 Guest migration: continuously dumping while running NFS guest migration (LP: #2076406) - KVM: PPC: Book3S HV: Fix the set_one_reg for MMCR3 - KVM: PPC: Book3S HV: Fix the get_one_reg of SDAR - KVM: PPC: Book3S HV: Add one-reg interface for DEXCR register - KVM: PPC: Book3S HV nestedv2: Keep nested guest DEXCR in sync - KVM: PPC: Book3S HV: Add one-reg interface for HASHKEYR register - KVM: PPC: Book3S HV nestedv2: Keep nested guest HASHKEYR in sync - KVM: PPC: Book3S HV: Add one-reg interface for HASHPKEYR register - KVM: PPC: Book3S HV nestedv2: Keep nested guest HASHPKEYR in sync * perf build disables tracepoint support (LP: #2076190) - [Packaging] perf: reenable libtraceevent * Please backport the more restrictive XSAVES deactivation for Zen1/2 arch (LP: #2077321) - x86/CPU/AMD: Improve the erratum 1386 workaround * Fix alsa scarlett2 driver in 6.8 (LP: #2076402) - ALSA: scarlett2: Move initialisation code lower in the source - ALSA: scarlett2: Implement handling of the ACK notification * rtw89: reset IDMEM mode to prevent download firmware failure (LP: #2077396) - wifi: rtw89: 885xb: reset IDMEM mode to prevent download firmware failure * CVE-2024-43858 - jfs: Fix array-index-out-of-bounds in diFree * CVE-2024-42280 - mISDN: Fix a use after free in hfcmulti_tx() * CVE-2024-42271 - net/iucv: fix use after free in iucv_sock_close() * [Ubuntu-24.04] FADump with recommended crash size is making the L1 hang (LP: #2060039) - powerpc/64s/radix/kfence: map __kfence_pool at page granularity * Noble update: upstream stable patchset 2024-09-09 (LP: #2079945) - ocfs2: add bounds checking to ocfs2_check_dir_entry() - jfs: don't walk off the end of ealist - fs/ntfs3: Add a check for attr_names and oatbl - fs/ntfs3: Validate ff offset - usb: gadget: midi2: Fix incorrect default MIDI2 protocol setup - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 - arm64: dts: qcom: qrb4210-rb2: switch I2C2 to i2c-gpio - arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB - arm64: dts: qcom: sm6350: Disable SS instance in Parkmode for USB - arm64: dts: qcom: ipq6018: Disable SS instance in Parkmode for USB - arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB - ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused - ALSA: seq: ump: Skip useless ports for static blocks - filelock: Fix fcntl/close race recovery compat path - tun: add missing verification for short frame - tap: add missing verification for short frame - s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception() - ALSA: hda/tas2781: Add new quirk for Lenovo Hera2 Laptop - arm64: dts: qcom: sc7180: Disable SuperSpeed instances in park mode - arm64: dts: qcom: sc7280: Disable SuperSpeed instances in park mode - arm64: dts: qcom: qrb2210-rb1: switch I2C2 to i2c-gpio - arm64: dts: qcom: msm8998: Disable SS instance in Parkmode for USB - arm64: dts: qcom: ipq8074: Disable SS instance in Parkmode for USB - arm64: dts: qcom: sdm845: Disable SS instance in Parkmode for USB - Upstream stable to v6.6.43, v6.9.12 * Noble update: upstream stable patchset 2024-09-02 (LP: #2078304) - filelock: Remove locks reliably when fcntl/close race is detected - scsi: core: alua: I/O errors for ALUA state transitions - scsi: sr: Fix unintentional arithmetic wraparound - scsi: qedf: Don't process stag work during unload and recovery - scsi: qedf: Wait for stag work during unload - scsi: qedf: Set qed_slowpath_params to zero before use - efi/libstub: zboot.lds: Discard .discard sections - ACPI: EC: Abort address space access upon error - ACPI: EC: Avoid returning AE_OK on errors in address space handler - tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata - wifi: mac80211: apply mcast rate only if interface is up - wifi: mac80211: handle tasklet frames before stopping - wifi: cfg80211: fix 6 GHz scan request building - wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup - wifi: iwlwifi: mvm: remove stale STA link data during restart - wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd - wifi: iwlwifi: mvm: handle BA session teardown in RF-kill - wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option - wifi: iwlwifi: mvm: Fix scan abort handling with HW rfkill - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() - selftests: cachestat: Fix build warnings on ppc64 - selftests/openat2: Fix build warnings on ppc64 - selftests/futex: pass _GNU_SOURCE without a value to the compiler - of/irq: Factor out parsing of interrupt-map parent phandle+args from of_irq_parse_raw() - Input: silead - Always support 10 fingers - net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() - ila: block BH in ila_output() - arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process - null_blk: fix validation of block size - kconfig: gconf: give a proper initial state to the Save button - kconfig: remove wrong expr_trans_bool() - input: Add event code for accessibility key - input: Add support for "Do Not Disturb" - HID: Ignore battery for ELAN touchscreens 2F2C and 4116 - NFSv4: Fix memory leak in nfs4_set_security_label - nfs: propagate readlink errors in nfs_symlink_filler - nfs: Avoid flushing many pages with NFS_FILE_SYNC - nfs: don't invalidate dentries on transient errors - cachefiles: add consistency check for copen/cread - cachefiles: Set object to close if ondemand_id < 0 in copen - cachefiles: make on-demand read killable - fs/file: fix the check in find_next_fd() - mei: demote client disconnect warning on suspend to debug - iomap: Fix iomap_adjust_read_range for plen calculation - drm/exynos: dp: drop driver owner initialization - drm: panel-orientation-quirks: Add quirk for Aya Neo KUN - drm/mediatek: Call drm_atomic_helper_shutdown() at shutdown time - nvme: avoid double free special payload - nvmet: always initialize cqe.result - ALSA: hda: cs35l56: Fix lifecycle of codec pointer - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check - ALSA: hda/realtek: Support Lenovo Thinkbook 16P Gen 5 - KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() - drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency - ALSA: hda/realtek: Add more codec ID to no shutup pins list - spi: Fix OCTAL mode support - cpumask: limit FORCE_NR_CPUS to just the UP case - [Config] Remove FORCE_NR_CPUS - selftests: openvswitch: Set value to nla flags. - drm/amdgpu: Indicate CU havest info to CP - ALSA: hda: cs35l56: Select SERIAL_MULTI_INSTANTIATE - mips: fix compat_sys_lseek syscall - Input: elantech - fix touchpad state on resume for Lenovo N24 - Input: i8042 - add Ayaneo Kun to i8042 quirk table - ASoC: rt722-sdca-sdw: add silence detection register as volatile - Input: xpad - add support for ASUS ROG RAIKIRI PRO - ASoC: topology: Fix references to freed memory - ASoC: topology: Do not assign fields that are already set - bytcr_rt5640 : inverse jack detect for Archos 101 cesium - ALSA: dmaengine: Synchronize dma channel after drop() - ASoC: ti: davinci-mcasp: Set min period size using FIFO config - ASoC: ti: omap-hdmi: Fix too long driver name - ASoC: SOF: sof-audio: Skip unprepare for in-use widgets on error rollback - ASoC: rt722-sdca-sdw: add debounce time for type detection - nvme: fix NVME_NS_DEAC may incorrectly identifying the disk as EXT_LBA. - Input: ads7846 - use spi_device_id table - can: kvaser_usb: fix return value for hif_usb_send_regout - gpio: pca953x: fix pca953x_irq_bus_sync_unlock race - octeontx2-pf: Fix coverity and klockwork issues in octeon PF driver - s390/sclp: Fix sclp_init() cleanup on failure - platform/mellanox: nvsw-sn2201: Add check for platform_device_add_resources - platform/x86: wireless-hotkey: Add support for LG Airplane Button - platform/x86: lg-laptop: Remove LGEX0815 hotkey handling - platform/x86: lg-laptop: Change ACPI device id - platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB - btrfs: qgroup: fix quota root leak after quota disable failure - ibmvnic: Add tx check to prevent skb leak - ALSA: PCM: Allow resume only for suspended streams - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx - ALSA: dmaengine_pcm: terminate dmaengine before synchronize - ASoC: amd: yc: Fix non-functional mic on ASUS M5602RA - net: usb: qmi_wwan: add Telit FN912 compositions - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() - powerpc/pseries: Whitelist dtl slub object for copying to userspace - powerpc/eeh: avoid possible crash when edev->pdev changes - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed - tee: optee: ffa: Fix missing-field-initializers warning - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() - Bluetooth: btnxpuart: Enable Power Save feature on startup - bluetooth/l2cap: sync sock recv cb and release - erofs: ensure m_llen is reset to 0 if metadata is invalid - drm/amd/display: Add refresh rate range check - drm/amd/display: Account for cursor prefetch BW in DML1 mode support - drm/amd/display: Fix refresh rate range for some panel - drm/radeon: check bo_va->bo is non-NULL before using it - fs: better handle deep ancestor chains in is_subdir() - wifi: iwlwifi: properly set WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK - drivers/perf: riscv: Reset the counter to hpmevent mapping while starting cpus - riscv: stacktrace: fix usage of ftrace_graph_ret_addr() - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices - ksmbd: return FILE_DEVICE_DISK instead of super magic - ASoC: SOF: Intel: hda-pcm: Limit the maximum number of periods by MAX_BDL_ENTRIES - selftest/timerns: fix clang build failures for abs() calls - selftests/vDSO: fix clang build errors and warnings - hfsplus: fix uninit-value in copy_name - selftests/bpf: Extend tcx tests to cover late tcx_entry release - spi: mux: set ctlr->bits_per_word_mask - ALSA: hda: Use imply for suggesting CONFIG_SERIAL_MULTI_INSTANTIATE - [Config] Update CONFIG_SERIAL_MULTI_INSTANTIATE - cifs: fix noisy message on copy_file_range - Bluetooth: L2CAP: Fix deadlock - of/irq: Disable "interrupt-map" parsing for PASEMI Nemo - wifi: cfg80211: wext: set ssids=NULL for passive scans - wifi: mac80211: disable softirqs for queued frame handling - wifi: iwlwifi: mvm: don't wake up rx_sync_waitq upon RFKILL - cachefiles: fix slab-use-after-free in fscache_withdraw_volume() - cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() - btrfs: ensure fast fsync waits for ordered extents after a write failure - PNP: Hide pnp_bus_type from the non-PNP code - ACPI: AC: Properly notify powermanagement core about changes - selftests/overlayfs: Fix build error on ppc64 - nvme-fabrics: use reserved tag for reg read/write command - LoongArch: Fix GMAC's phy-mode definitions in dts - io_uring: fix possible deadlock in io_register_iowq_max_workers() - vfio: Create vfio_fs_type with inode per device - vfio/pci: Use unmap_mapping_range() - parport: amiga: Mark driver struct with __refdata to prevent section mismatch - drm: renesas: shmobile: Call drm_atomic_helper_shutdown() at shutdown time - vfio/pci: Insert full vma on mmap'd MMIO fault - ALSA: hda: cs35l41: Support Lenovo Thinkbook 16P Gen 5 - ALSA: hda: cs35l41: Support Lenovo Thinkbook 13x Gen 4 - ALSA: hda/realtek: Support Lenovo Thinkbook 13x Gen 4 - wifi: mac80211: Avoid address calculations via out of bounds array indexing - drm/amd/display: change dram_clock_latency to 34us for dcn35 - closures: Change BUG_ON() to WARN_ON() - ASoC: codecs: ES8326: Solve headphone detection issue - ASoC: Intel: avs: Fix route override - net: mvpp2: fill-in dev_port attribute - btrfs: scrub: handle RST lookup error correctly - clk: qcom: apss-ipq-pll: remove 'config_ctl_hi_val' from Stromer pll configs - drm/amd/display: Update efficiency bandwidth for dcn351 - drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport - btrfs: fix uninitialized return value in the ref-verify tool - spi: davinci: Unset POWERDOWN bit when releasing resources - mm: page_ref: remove folio_try_get_rcu() - ALSA: hda: cs35l41: Fix swapped l/r audio channels for Lenovo ThinBook 13x Gen4 - netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() - Upstream stable to v6.6.42, v6.9.11 * CVE-2024-27022 - Revert "Revert "fork: defer linking file vma until vma is fully initialized"" * UBSAN: array-index-out-of-bounds in /build/linux-Z1RxaK/linux- 6.8.0/drivers/gpu/drm/amd/amdgpu/../pm/powerplay/hwmgr/processpptables.c:124 9:61 (LP: #2078041) - drm/amdgpu/pptable: convert some variable sized arrays to [] style - drm/amdgpu: convert some variable sized arrays to [] style - drm/amdgpu/pptable: Fix UBSAN array-index-out-of-bounds * alsa: Headphone and Speaker couldn't output sound intermittently (LP: #2077690) - ALSA: hda/realtek - Fixed ALC256 headphone no sound - ALSA: hda/realtek - FIxed ALC285 headphone no sound * Fix ethernet performance on JSL and EHL (LP: #2077858) - intel_idle: Disable promotion to C1E on Jasper Lake and Elkhart Lake * Noble update: upstream stable patchset 2024-08-29 (LP: #2078289) - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" - Compiler Attributes: Add __uninitialized macro - mm: prevent derefencing NULL ptr in pfn_section_valid() - scsi: ufs: core: Fix ufshcd_clear_cmd racing issue - scsi: ufs: core: Fix ufshcd_abort_one racing issue - vfio/pci: Init the count variable in collecting hot-reset devices - cachefiles: propagate errors from vfs_getxattr() to avoid infinite loop - cachefiles: stop sending new request when dropping object - cachefiles: cancel all requests for the object that is being dropped - cachefiles: wait for ondemand_object_worker to finish when dropping object - cachefiles: cyclic allocation of msg_id to avoid reuse - cachefiles: add missing lock protection when polling - dsa: lan9303: Fix mapping between DSA port number and PHY address - filelock: fix potential use-after-free in posix_lock_inode - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading - vfs: don't mod negative dentry count when on shrinker list - net: bcmasp: Fix error code in probe() - tcp: fix incorrect undo caused by DSACK of TLP retransmit - bpf: Fix too early release of tcx_entry - net: phy: microchip: lan87xx: reinit PHY after cable test - skmsg: Skip zero length skb in sk_msg_recvmsg - octeontx2-af: Fix incorrect value output on error path in rvu_check_rsrc_availability() - net: fix rc7's __skb_datagram_iter() - i40e: Fix XDP program unloading while removing the driver - net: ethernet: lantiq_etop: fix double free in detach - bpf: fix order of args in call to bpf_map_kvcalloc - bpf: make timer data struct more generic - bpf: replace bpf_timer_init with a generic helper - bpf: Fail bpf_timer_cancel when callback is being cancelled - net: ethernet: mtk-star-emac: set mac_managed_pm when probing - ppp: reject claimed-as-LCP but actually malformed packets - ethtool: netlink: do not return SQI value if link is down - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket - s390: Mark psw in __load_psw_mask() as __unitialized - arm64: dts: qcom: sc8180x: Fix LLCC reg property again - firmware: cs_dsp: Fix overflow checking of wmfw header - firmware: cs_dsp: Return error if block header overflows file - firmware: cs_dsp: Validate payload length before processing block - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers - ASoC: SOF: Intel: hda: fix null deref on system suspend entry - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files - ARM: davinci: Convert comma to semicolon - octeontx2-af: replace cpt slot with lf id on reg write - octeontx2-af: fix a issue with cpt_lf_alloc mailbox - octeontx2-af: fix detection of IP layer - octeontx2-af: fix issue with IPv6 ext match for RSS - octeontx2-af: fix issue with IPv4 match for RSS - cifs: fix setting SecurityFlags to true - Revert "sched/fair: Make sure to try to detach at least one movable task" - tcp: avoid too many retransmit packets - net: ks8851: Fix deadlock with the SPI chip variant - net: ks8851: Fix potential TX stall after interface reopen - USB: serial: option: add Telit generic core-dump composition - USB: serial: option: add Telit FN912 rmnet compositions - USB: serial: option: add Fibocom FM350-GL - USB: serial: option: add support for Foxconn T99W651 - USB: serial: option: add Netprisma LCUK54 series modules - USB: serial: option: add Rolling RW350-GL variants - USB: serial: mos7840: fix crash on resume - USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k - usb: dwc3: pci: add support for the Intel Panther Lake - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor - misc: microchip: pci1xxxx: Fix return value of nvmem callbacks - hpet: Support 32-bit userspace - xhci: always resume roothubs if xHC was reset during resume - s390/mm: Add NULL pointer check to crst_table_free() base_crst_free() - mm: vmalloc: check if a hash-index is in cpu_possible_mask - mm/filemap: skip to create PMD-sized page cache if needed - mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray - ksmbd: discard write access to the directory open - iio: trigger: Fix condition for own trigger - arm64: dts: qcom: sa8775p: Correct IRQ number of EL2 non-secure physical timer - arm64: dts: qcom: sc8280xp-x13s: fix touchscreen power on - nvmem: rmem: Fix return value of rmem_read() - nvmem: meson-efuse: Fix return value of nvmem callbacks - nvmem: core: only change name to fram for current attribute - platform/x86: toshiba_acpi: Fix array out-of-bounds access - tty: serial: ma35d1: Add a NULL check for of_node - ALSA: hda/realtek: add quirk for Clevo V5[46]0TU - ALSA: hda/realtek: Enable Mute LED on HP 250 G7 - ALSA: hda/realtek: Limit mic boost on VAIO PRO PX - Fix userfaultfd_api to return EINVAL as expected - pmdomain: qcom: rpmhpd: Skip retention level for Power Domains - libceph: fix race between delayed_work() and ceph_monc_stop() - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency - cpufreq: ACPI: Mark boost policy as enabled when setting boost - cpufreq: Allow drivers to advertise boost enabled - wireguard: selftests: use acpi=off instead of -no-acpi for recent QEMU - wireguard: allowedips: avoid unaligned 64-bit memory accesses - wireguard: queueing: annotate intentional data race in cpu round robin - wireguard: send: annotate intentional data race in checking empty queue - misc: fastrpc: Fix DSP capabilities request - misc: fastrpc: Avoid updating PD type for capability request - misc: fastrpc: Copy the complete capability structure to user - misc: fastrpc: Fix memory leak in audio daemon attach operation - misc: fastrpc: Fix ownership reassignment of remote heap - misc: fastrpc: Restrict untrusted app to attach to privileged PD - mm/shmem: disable PMD-sized page cache if needed - mm/damon/core: merge regions aggressively when max_nr_regions is unmet - selftests/net: fix gro.c compilation failure due to non-existent opt_ipproto_off - ext4: avoid ptr null pointer dereference - sched: Move psi_account_irqtime() out of update_rq_clock_task() hotpath - i2c: rcar: bring hardware to known state when probing - i2c: mark HostNotify target address as used - i2c: rcar: ensure Gen3+ reset does not disturb local targets - i2c: testunit: avoid re-issued work after read message - i2c: rcar: clear NO_RXDMA flag after resetting - x86/bhi: Avoid warning in #DB handler due to BHI mitigation - kbuild: Make ld-version.sh more robust against version string changes - spi: axi-spi-engine: fix sleep calculation - minixfs: Fix minixfs_rename with HIGHMEM - bpf: Defer work in bpf_timer_cancel_and_free - netfilter: nf_tables: prefer nft_chain_validate - arm64: dts: qcom: x1e80100-*: Allocate some CMA buffers - arm64: dts: qcom: sm6115: add iommu for sdhc_1 - arm64: dts: qcom: qdu1000: Fix LLCC reg property - net: ethtool: Fix RSS setting - nilfs2: fix kernel bug on rename operation of broken directory - cachestat: do not flush stats in recency check - mm: fix crashes from deferred split racing folio migration - nvmem: core: limit cell sysfs permissions to main attribute ones - serial: imx: ensure RTS signal is not left active after shutdown - mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE - mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length - mm/readahead: limit page cache size in page_cache_ra_order() - Revert "dt-bindings: cache: qcom,llcc: correct QDU1000 reg entries" - sched/deadline: Fix task_struct reference leak - Upstream stable to v6.6.40, v6.6.41, v6.9.10 * [SRU][HPE 24.04] Intel FVL NIC FW flash fails with inbox driver, causing driver not detected (LP: #2076675) // Noble update: upstream stable patchset 2024-08-29 (LP: #2078289) - i40e: fix: remove needless retries of NVM update * CVE-2024-41022 - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() * Deadlock occurs while suspending md raid (LP: #2073695) - md: change the return value type of md_write_start to void - md: fix deadlock between mddev_suspend and flush bio * Lenovo X12 Detachable Gen 2 unresponsive under light load (LP: #2076361) - drm/i915: Enable Wa_16019325821 - drm/i915/guc: Add support for w/a KLVs - drm/i915/guc: Enable Wa_14019159160 * Regression: unable to reach low idle states on Tiger Lake (LP: #2072679) - SAUCE: PCI: ASPM: Allow OS to configure ASPM where BIOS is incapable of - SAUCE: PCI: vmd: Let OS control ASPM for devices under VMD domain * Noble update: upstream stable patchset 2024-08-22 (LP: #2077600) - locking/mutex: Introduce devm_mutex_init() - leds: an30259a: Use devm_mutex_init() for mutex initialization - crypto: hisilicon/debugfs - Fix debugfs uninit process issue - drm/lima: fix shared irq handling on driver remove - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. - media: dvb: as102-fe: Fix as10x_register_addr packing - media: dvb-usb: dib0700_devices: Add missing release_firmware() - IB/core: Implement a limit on UMAD receive List - scsi: qedf: Make qedf_execute_tmf() non-preemptible - selftests/bpf: adjust dummy_st_ops_success to detect additional error - selftests/bpf: do not pass NULL for non-nullable params in dummy_st_ops - selftests/bpf: dummy_st_ops should reject 0 for non-nullable params - RISC-V: KVM: Fix the initial sample period value - crypto: aead,cipher - zeroize key buffer after use - media: mediatek: vcodec: Only free buffer VA that is not NULL - drm/amdgpu: Fix uninitialized variable warnings - drm/amdgpu: Initialize timestamp for some legacy SOCs - drm/amd/display: Check index msg_id before read or write - drm/amd/display: Check pipe offset before setting vblank - drm/amd/display: Skip finding free audio for unknown engine_id - drm/amd/display: Fix uninitialized variables in DM - drm/amdgpu: fix uninitialized scalar variable warning - drm/amdgpu: fix the warning about the expression (int)size - len - media: dw2102: Don't translate i2c read into write - riscv: Apply SiFive CIP-1200 workaround to single-ASID sfence.vma - sctp: prefer struct_size over open coded arithmetic - firmware: dmi: Stop decoding on broken entry - Input: ff-core - prefer struct_size over open coded arithmetic - wifi: mt76: replace skb_put with skb_put_zero - wifi: mt76: mt7996: add sanity checks for background radar trigger - thermal/drivers/mediatek/lvts_thermal: Check NULL ptr on lvts_data - media: dvb-frontends: tda18271c2dd: Remove casting during div - media: s2255: Use refcount_t instead of atomic_t for num_channels - media: dvb-frontends: tda10048: Fix integer overflow - i2c: i801: Annotate apanel_addr as __ro_after_init - powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n - orangefs: fix out-of-bounds fsid access - kunit: Fix timeout message - powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#" - selftests/net: fix uninitialized variables - igc: fix a log entry using uninitialized netdev - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD - serial: imx: Raise TX trigger level to 8 - jffs2: Fix potential illegal address access in jffs2_free_inode - s390/pkey: Wipe sensitive data on failure - btrfs: scrub: initialize ret in scrub_simple_mirror() to fix compilation warning - cdrom: rearrange last_media_change check to avoid unintentional overflow - tools/power turbostat: Remember global max_die_id - vhost: Use virtqueue mutex for swapping worker - vhost: Release worker mutex during flushes - vhost_task: Handle SIGKILL by flushing work and exiting - mac802154: fix time calculation in ieee802154_configure_durations() - net: phy: phy_device: Fix PHY LED blinking code comment - UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open() - net/mlx5: E-switch, Create ingress ACL when needed - net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() - Bluetooth: hci_event: Fix setting of unicast qos interval - Bluetooth: Ignore too large handle values in BIG - Bluetooth: ISO: Check socket flag instead of hcon - bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX - KVM: s390: fix LPSWEY handling - e1000e: Fix S0ix residency on corporate systems - gpiolib: of: fix lookup quirk for MIPS Lantiq - net: allow skb_datagram_iter to be called from any context - net: txgbe: initialize num_q_vectors for MSI/INTx interrupts - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() - gpio: mmio: do not calculate bgpio_bits via "ngpios" - wifi: wilc1000: fix ies_len type in connect path - riscv: kexec: Avoid deadlock in kexec crash path - netfilter: nf_tables: unconditionally flush pending work before notifier - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() - selftests: fix OOM in msg_zerocopy selftest - selftests: make order checking verbose in msg_zerocopy selftest - inet_diag: Initialize pad field in struct inet_diag_req_v2 - mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file - gpiolib: of: add polarity quirk for TSC2005 - cpu: Fix broken cmdline "nosmp" and "maxcpus=0" - platform/x86: toshiba_acpi: Fix quickstart quirk handling - Revert "igc: fix a log entry using uninitialized netdev" - nilfs2: fix inode number range checks - nilfs2: add missing check for inode numbers on directory entries - mm: optimize the redundant loop of mm_update_owner_next() - mm: avoid overflows in dirty throttling logic - btrfs: fix adding block group to a reclaim list and the unused list during reclaim - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() - Bluetooth: hci_bcm4377: Fix msgid release - Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot - can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct - fsnotify: Do not generate events for O_PATH file descriptors - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes - drm/amdgpu/atomfirmware: silence UBSAN warning - drm: panel-orientation-quirks: Add quirk for Valve Galileo - clk: qcom: gcc-ipq9574: Add BRANCH_HALT_VOTED flag - clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common - powerpc/pseries: Fix scv instruction crash with kexec - powerpc/64s: Fix unnecessary copy to 0 when kernel is booted at address 0 - mtd: rawnand: Ensure ECC configuration is propagated to upper layers - mtd: rawnand: Fix the nand_read_data_op() early check - mtd: rawnand: Bypass a couple of sanity checks during NAND identification - mtd: rawnand: rockchip: ensure NVDDR timings are rejected - net: stmmac: dwmac-qcom-ethqos: fix error array size - arm64: dts: rockchip: Fix the DCDC_REG2 minimum voltage on Quartz64 Model B - media: dw2102: fix a potential buffer overflow - clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents - clk: qcom: clk-alpha-pll: set ALPHA_EN bit for Stromer Plus PLLs - clk: mediatek: mt8183: Only enable runtime PM on mt8183-mfgcfg - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr - fs/ntfs3: Mark volume as dirty if xattr is broken - ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897 - vhost-scsi: Handle vhost_vq_work_queue failures for events - nvme-multipath: find NUMA path only for online numa-node - dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails - connector: Fix invalid conversion in cn_proc.h - nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset - regmap-i2c: Subtract reg size from max_write - platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet - platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro - nvmet: fix a possible leak when destroy a ctrl during qp establishment - kbuild: fix short log for AS in link-vmlinux.sh - nfc/nci: Add the inconsistency check between the input data length and count - spi: cadence: Ensure data lines set to low during dummy-cycle period - ALSA: ump: Set default protocol when not given explicitly - drm/amdgpu: silence UBSAN warning - null_blk: Do not allow runt zone with zone capacity smaller then zone size - nilfs2: fix incorrect inode allocation from reserved inodes - leds: mlxreg: Use devm_mutex_init() for mutex initialization - net: dql: Avoid calling BUG() when WARN() is enough - drm/xe: Add outer runtime_pm protection to xe_live_ktest@xe_dma_buf - bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable - drm/amdgpu: fix double free err_addr pointer warnings - drm/amd/display: Fix overlapping copy within dml_core_mode_programming - drm/amd/display: update pipe topology log to support subvp - drm/amd/display: Do not return negative stream id for array - drm/amd/display: ASSERT when failing to find index by plane/stream id - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB - media: i2c: st-mipid02: Use the correct div function - media: tc358746: Use the correct div_ function - crypto: hisilicon/sec2 - fix for register offset - s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings - s390/pkey: Wipe copies of clear-key structures on failure - s390/pkey: Wipe copies of protected- and secure-keys - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values - wifi: mac80211: fix BSS_CHANGED_UNSOL_BCAST_PROBE_RESP - net: txgbe: remove separate irq request for MSI and INTx - net: txgbe: add extra handle for MSI/INTx into thread irq handle - net: txgbe: free isb resources at the right time - btrfs: always do the basic checks for btrfs_qgroup_inherit structure - net: phy: aquantia: add missing include guards - drm/fbdev-generic: Fix framebuffer on big endian devices - net: stmmac: enable HW-accelerated VLAN stripping for gmac4 only - net: rswitch: Avoid use-after-free in rswitch_poll() - ice: use proper macro for testing bit - drm/xe/mcr: Avoid clobbering DSS steering - tcp: Don't flag tcp_sk(sk)->rx_opt.saw_unknown for TCP AO. - btrfs: zoned: fix calc_available_free_space() for zoned mode - btrfs: fix folio refcount in __alloc_dummy_extent_buffer() - Bluetooth: Add quirk to ignore reserved PHY bits in LE Extended Adv Report - drm/xe: fix error handling in xe_migrate_update_pgtables - drm/ttm: Always take the bo delayed cleanup path for imported bos - fs: don't misleadingly warn during thaw operations - drm/amdkfd: Let VRAM allocations go to GTT domain on small APUs - drm/amdgpu: correct hbm field in boot status - Upstream stable to v6.6.38, v6.6.39, v6.9.9 * Panels show garbage or flickering when i915.psr2 enabled (LP: #2069993) - SAUCE: drm/i915/display/psr: add a psr2 disable quirk table - SAUCE: drm/i915/display/psr: disable psr2 for panel_0x4d_0x10_0x93_0x15 - SAUCE: drm/i915/display/psr: disable psr2 for panel_0x30_0xe4_0x8b_0x07 - SAUCE: drm/i915/display/psr: disable psr2 for panel_0x30_0xe4_0x78_0x07 - SAUCE: drm/i915/display/psr: disable psr2 for panel_0x30_0xe4_0x8c_0x07 - SAUCE: drm/i915/display/psr: disable psr2 for panel_0x06_0xaf_0x9a_0xf9 - SAUCE: drm/i915/display/psr: disable psr2 for panel_0x4d_0x10_0x8f_0x15 - SAUCE: drm/i915/display/psr: disable psr2 for panel_0x06_0xaf_0xa3_0xc3 * Random flickering with Intel i915 (Gen9 GPUs in 6th-8th gen CPUs) on Linux 6.8 (LP: #2062951) - SAUCE: iommu/intel: disable DMAR for SKL integrated gfx * [SRU][22.04.5]: mpi3mr driver update (LP: #2073583) - scsi: mpi3mr: HDB allocation and posting for hardware and firmware buffers - scsi: mpi3mr: Trigger support - scsi: mpi3mr: Add ioctl support for HDB - scsi: mpi3mr: Support PCI Error Recovery callback handlers - scsi: mpi3mr: Prevent PCI writes from driver during PCI error recovery - scsi: mpi3mr: Driver version update * Fix power consumption while using HW accelerated video decode on AMD platforms (LP: #2073282) - drm/amdgpu/vcn: identify unified queue in sw init - drm/amdgpu/vcn: not pause dpg for unified queue * Noble update: upstream stable patchset 2024-08-09 (LP: #2076435) - usb: typec: ucsi: Never send a lone connector change ack - usb: typec: ucsi: Ack also failed Get Error commands - Input: ili210x - fix ili251x_read_touch_data() return value - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins - pinctrl: rockchip: use dedicated pinctrl type for RK3328 - pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set - MIPS: pci: lantiq: restore reset gpio polarity - ASoC: rockchip: i2s-tdm: Fix trcm mode by setting clock on right mclk - ASoC: mediatek: mt8183-da7219-max98357: Fix kcontrol name collision - ASoC: atmel: atmel-classd: Re-add dai_link->platform to fix card init - workqueue: Increase worker desc's length to 32 - ASoC: q6apm-lpass-dai: close graph on prepare errors - bpf: Add missed var_off setting in set_sext32_default_val() - bpf: Add missed var_off setting in coerce_subreg_to_size_sx() - s390/pci: Add missing virt_to_phys() for directed DIBV - ASoC: amd: acp: add a null check for chip_pdev structure - ASoC: amd: acp: remove i2s configuration check in acp_i2s_probe() - ASoC: fsl-asoc-card: set priv->pdev before using it - net: dsa: microchip: fix initial port flush problem - openvswitch: get related ct labels from its master if it is not confirmed - mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems - ibmvnic: Free any outstanding tx skbs during scrq reset - net: phy: micrel: add Microchip KSZ 9477 to the device table - net: dsa: microchip: use collision based back pressure mode - ice: Rebuild TC queues on VSI queue reconfiguration - xdp: Remove WARN() from __xdp_reg_mem_model() - netfilter: fix undefined reference to 'netfilter_lwtunnel_*' when CONFIG_SYSCTL=n - btrfs: use NOFS context when getting inodes during logging and log replay - Fix race for duplicate reqsk on identical SYN - ALSA: seq: Fix missing channel at encoding RPN/NRPN MIDI2 messages - net: dsa: microchip: fix wrong register write when masking interrupt - sparc: fix old compat_sys_select() - sparc: fix compat recv/recvfrom syscalls - parisc: use correct compat recv/recvfrom syscalls - powerpc: restore some missing spu syscalls - tcp: fix tcp_rcv_fastopen_synack() to enter TCP_CA_Loss for failed TFO - ALSA: seq: Fix missing MSB in MIDI2 SPP conversion - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers - net: mana: Fix possible double free in error handling path - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep - vduse: validate block features only with block devices - vduse: Temporarily fail if control queue feature requested - x86/fpu: Fix AMD X86_BUG_FXSAVE_LEAK fixup - mtd: partitions: redboot: Added conversion of operands to a larger type - wifi: ieee80211: check for NULL in ieee80211_mle_size_ok() - bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode - RDMA/restrack: Fix potential invalid address access - net/iucv: Avoid explicit cpumask var allocation on stack - net/dpaa2: Avoid explicit cpumask var allocation on stack - crypto: ecdh - explicitly zeroize private_key - ALSA: emux: improve patch ioctl data validation - media: dvbdev: Initialize sbuf - irqchip/loongson: Select GENERIC_IRQ_EFFECTIVE_AFF_MASK if SMP for IRQ_LOONGARCH_CPU - soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message - gfs2: Fix NULL pointer dereference in gfs2_log_flush - drm/radeon/radeon_display: Decrease the size of allocated memory - nvme: fixup comment for nvme RDMA Provider Type - drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA - gpio: davinci: Validate the obtained number of IRQs - RISC-V: fix vector insn load/store width mask - drm/amdgpu: Fix pci state save during mode-1 reset - riscv: stacktrace: convert arch_stack_walk() to noinstr - gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1) - randomize_kstack: Remove non-functional per-arch entropy filtering - x86: stop playing stack games in profile_pc() - parisc: use generic sys_fanotify_mark implementation - Revert "MIPS: pci: lantiq: restore reset gpio polarity" - pinctrl: qcom: spmi-gpio: drop broken pm8008 support - ocfs2: fix DIO failure due to insufficient transaction credits - nfs: drop the incorrect assertion in nfs_swap_rw() - mm: fix incorrect vbq reference in purge_fragmented_block - mmc: sdhci-pci-o2micro: Convert PCIBIOS_* return codes to errnos - mmc: sdhci-brcmstb: check R1_STATUS for erase/trim/discard - mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos - mmc: sdhci: Do not invert write-protect twice - mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro() - iio: xilinx-ams: Don't include ams_ctrl_channels in scan_mask - counter: ti-eqep: enable clock at probe - kbuild: doc: Update default INSTALL_MOD_DIR from extra to updates - kbuild: Fix build target deb-pkg: ln: failed to create hard link - i2c: testunit: don't erase registers after STOP - i2c: testunit: discard write requests while old command is running - ata: libata-core: Fix null pointer dereference on error - ata,scsi: libata-core: Do not leak memory for ata_port struct members - iio: adc: ad7266: Fix variable checking bug - iio: accel: fxls8962af: select IIO_BUFFER & IIO_KFIFO_BUF - iio: chemical: bme680: Fix pressure value output - iio: chemical: bme680: Fix calibration data variable - iio: chemical: bme680: Fix overflows in compensate() functions - iio: chemical: bme680: Fix sensor data read operation - net: usb: ax88179_178a: improve link status logs - usb: gadget: printer: SS+ support - usb: gadget: printer: fix races against disable - usb: musb: da8xx: fix a resource leak in probe() - usb: atm: cxacru: fix endpoint checking in cxacru_bind() - usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock - usb: gadget: aspeed_udc: fix device address configuration - usb: typec: ucsi: glink: fix child node release in probe function - usb: ucsi: stm32: fix command completion handling - usb: dwc3: core: Add DWC31 version 2.00a controller - usb: dwc3: core: Workaround for CSR read timeout - Revert "serial: core: only stop transmit when HW fifo is empty" - serial: 8250_omap: Implementation of Errata i2310 - serial: imx: set receiver level before starting uart - serial: core: introduce uart_port_tx_limited_flags() - serial: bcm63xx-uart: fix tx after conversion to uart_port_tx_limited() - tty: mcf: MCF54418 has 10 UARTS - net: can: j1939: Initialize unused data in j1939_send_one() - net: can: j1939: recover socket queue on CAN bus error during BAM transmission - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new - PCI/MSI: Fix UAF in msi_capability_init - cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing - irqchip/loongson-eiointc: Use early_cpu_to_node() instead of cpu_to_node() - cpu/hotplug: Fix dynstate assignment in __cpuhp_setup_state_cpuslocked() - irqchip/loongson-liointc: Set different ISRs for different cores - kbuild: Install dtb files as 0644 in Makefile.dtbinst - sh: rework sync_file_range ABI - btrfs: zoned: fix initial free space detection - csky, hexagon: fix broken sys_sync_file_range - hexagon: fix fadvise64_64 calling conventions - drm/drm_file: Fix pid refcounting race - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes - drm/fbdev-dma: Only set smem_start is enable per module option - drm/amdgpu: avoid using null object of framebuffer - drm/i915/gt: Fix potential UAF by revoke of fence registers - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes - drm/amd/display: Send DP_TOTAL_LTTPR_CNT during detection if LTTPR is present - drm/amdgpu/atomfirmware: fix parsing of vram_info - batman-adv: Don't accept TT entries for out-of-spec VIDs - can: mcp251xfd: fix infinite loop when xmit fails - ata: ahci: Clean up sysfs file on error - ata: libata-core: Fix double free on error - ftruncate: pass a signed offset - syscalls: fix compat_sys_io_pgetevents_time64 usage - syscalls: fix sys_fanotify_mark prototype - Revert "cpufreq: amd-pstate: Fix the inconsistency in max frequency units" - mm/page_alloc: Separate THP PCP into movable and non-movable categories - arm64: dts: rockchip: Fix SD NAND and eMMC init on rk3308-rock-pi-s - arm64: dts: rockchip: Rename LED related pinctrl nodes on rk3308-rock-pi-s - arm64: dts: rockchip: Fix the value of `dlg,jack-det-rate` mismatch on rk3399-gru - ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node - arm64: dts: rockchip: make poweroff(8) work on Radxa ROCK 5A - arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E - arm64: dts: rockchip: Add sound-dai-cells for RK3368 - cxl/region: Move cxl_dpa_to_region() work to the region driver - cxl/region: Avoid null pointer dereference in region lookup - cxl/region: check interleave capability - serial: imx: only set receiver level if it is zero - serial: 8250_omap: Fix Errata i2310 with RX FIFO level check - tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset() - pwm: stm32: Improve precision of calculation in .apply() - pwm: stm32: Fix for settings using period > UINT32_MAX - pwm: stm32: Calculate prescaler with a division instead of a loop - pwm: stm32: Refuse too small period requests - ASoC: cs42l43: Increase default type detect time and button delay - ASoC: amd: acp: move chip->flag variable assignment - bonding: fix incorrect software timestamping report - mlxsw: pci: Fix driver initialization with Spectrum-4 - vxlan: Pull inner IP header in vxlan_xmit_one(). - ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link - af_unix: Stop recv(MSG_PEEK) at consumed OOB skb. - af_unix: Don't stop recv(MSG_DONTWAIT) if consumed OOB skb is at the head. - af_unix: Don't stop recv() at consumed ex-OOB skb. - af_unix: Fix wrong ioctl(SIOCATMARK) when consumed OOB skb is at the head. - bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro() - bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro() - drm/xe: Fix potential integer overflow in page size calculation - drm/xe: Add a NULL check in xe_ttm_stolen_mgr_init - drm/amd/display: correct hostvm flag - drm/amd/display: Skip pipe if the pipe idx not set properly - bpf: Add a check for struct bpf_fib_lookup size - drm/xe/xe_devcoredump: Check NULL before assignments - iommu/arm-smmu-v3: Do not allow a SVA domain to be set on the wrong PASID - evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509 - drm/xe: Check pat.ops before dumping PAT settings - nvmet: do not return 'reserved' for empty TSAS values - nvmet: make 'tsas' attribute idempotent for RDMA - iommu/amd: Fix GT feature enablement again - gpiolib: cdev: Ignore reconfiguration without direction - kasan: fix bad call to unpoison_slab_object - mm/memory: don't require head page for do_set_pmd() - SUNRPC: Fix backchannel reply, again - Revert "usb: gadget: u_ether: Re-attach netif device to mirror detachment" - Revert "usb: gadget: u_ether: Replace netif_stop_queue with netif_device_detach" - tty: serial: 8250: Fix port count mismatch with the device - tty: mxser: Remove __counted_by from mxser_board.ports[] - nvmet-fc: Remove __counted_by from nvmet_fc_tgt_queue.fod[] - ata: libata-core: Add ATA_HORKAGE_NOLPM for all Crucial BX SSD1 models - bcachefs: Fix sb_field_downgrade validation - bcachefs: Fix sb-downgrade validation - bcachefs: Fix bch2_sb_downgrade_update() - bcachefs: Fix setting of downgrade recovery passes/errors - bcachefs: btree_gc can now handle unknown btrees - pwm: stm32: Fix calculation of prescaler - pwm: stm32: Fix error message to not describe the previous error path - cxl/region: Convert cxl_pmem_region_alloc to scope-based resource management - cxl/mem: Fix no cxl_nvd during pmem region auto-assembling - arm64: dts: rockchip: Fix the i2c address of es8316 on Cool Pi 4B - netfs: Fix netfs_page_mkwrite() to check folio->mapping is valid - netfs: Fix netfs_page_mkwrite() to flush conflicting data, not wait - Upstream stable to v6.6.37, v6.9.8 * [UBUNTU 22.04] s390/cpum_cf: make crypto counters upward compatible (LP: #2074380) - s390/cpum_cf: make crypto counters upward compatible across machine types * CVE-2024-45016 - netem: fix return value if duplicate enqueue fails -- Stefan Bader <stefan.ba...@canonical.com> Fri, 27 Sep 2024 14:22:35 +0200 ** Changed in: linux (Ubuntu Noble) Status: Fix Committed => Fix Released ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-27022 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-41022 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-42271 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-42280 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-43858 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-45016 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2077729 Title: x86/vmware: Add TDX hypercall support To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2077729/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs