Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v6.17.10 upstream stable release
from git://git.kernel.org/
KVM: arm64: Check the untrusted offset in FF-A memory share
timers: Fix NULL function pointer race in timer_shutdown_sync()
arm64: dts: rockchip: Remove non-functioning CPU OPPs from RK3576
HID: amd_sfh: Stop sensor before starting
HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
arm64: dts: rockchip: Fix vccio4-supply on rk3566-pinetab2
arm64: dts: rockchip: fix PCIe 3.3V regulator voltage on orangepi-5
reset: imx8mp-audiomix: Fix bad mask values
arm64: dts: rockchip: include rk3399-base instead of rk3399 in rk3399-op1
arm64: dts: rockchip: disable HS400 on RK3588 Tiger
KVM: SVM: Fix redundant updates of LBR MSR intercepts
vfat: fix missing sb_min_blocksize() return value checks
mtd: rawnand: cadence: fix DMA device NULL pointer dereference
fs: Fix uninitialized 'offp' in statmount_string()
mtdchar: fix integer overflow in read/write ioctls
xfs: check the return value of sb_min_blocksize() in xfs_fs_fill_super
isofs: check the return value of sb_min_blocksize() in isofs_fill_super
shmem: fix tmpfs reconfiguration (remount) when noswap is set
exfat: check return value of sb_min_blocksize in exfat_read_boot_sector
mptcp: Disallow MPTCP subflows from sockmap
s390/mm: Fix __ptep_rdp() inline assembly
mptcp: Fix proto fallback detection with BPF
lib/test_kho: check if KHO is enabled
ACPI: APEI: EINJ: Fix EINJV2 initialization and injection
ata: libata-scsi: Fix system suspend for a security locked drive
selinux: rename task_security_struct to cred_security_struct
selinux: move avdcache to per-task security struct
smb: client: introduce close_cached_dir_locked()
wifi: rtw89: hw_scan: Don't let the operating channel be last
ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan()
be2net: pass wrb_params in case of OS2BMC
io_uring/cmd_net: fix wrong argument types for skb_queue_splice()
net: dsa: microchip: lan937x: Fix RGMII delay tuning
Revert "drm/tegra: dsi: Clear enable register if powered by bootloader"
Input: cros_ec_keyb - fix an invalid memory access
Input: goodix - add support for ACPI ID GDIX1003
Input: imx_sc_key - fix memory corruption on unload
Input: pegasus-notetaker - fix potential out-of-bounds access
mm/mempool: fix poisoning order>0 pages with HIGHMEM
nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot
nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl()
nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
PM: sleep: core: Fix runtime PM enabling in device_resume_early()
sched_ext: Fix scx_enable() crash on helper kthread creation failure
scsi: sg: Do not sleep in atomic context
scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
MIPS: Malta: Fix !EVA SOC-it PCI MMIO
dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups
LoongArch: BPF: Disable trampoline for kernel module function trace
LoongArch: Don't panic if no valid cache info for PCI
LoongArch: Fix NUMA node parsing with numa_memblks
platform/x86: alienware-wmi-wmax: Fix "Alienware m16 R1 AMD" quirk order
platform/x86: alienware-wmi-wmax: Add support for the whole "M" family
platform/x86: alienware-wmi-wmax: Add support for the whole "X" family
platform/x86: alienware-wmi-wmax: Add support for the whole "G" family
platform/x86: alienware-wmi-wmax: Add AWCC support to Alienware 16 Aurora
mptcp: fix race condition in mptcp_schedule_work()
mptcp: fix a race in mptcp_pm_del_add_timer()
mptcp: fix ack generation for fallback msk
mptcp: fix duplicate reset on fastclose
mptcp: fix premature close in case of fallback
selftests: mptcp: join: endpoints: longer timeout
selftests: mptcp: join: userspace: longer timeout
mptcp: avoid unneeded subflow-level drops
mptcp: decouple mptcp fastclose from tcp close
mptcp: do not fallback when OoO is present
drm/tegra: dc: Fix reference leak in tegra_dc_couple()
drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
drm/plane: Fix create_in_format_blob() return value
drm/amd: Skip power ungate during suspend for VPE
drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled
drm/amd/display: Increase DPCD read retries
drm/amd/display: Move sleep into each retry for retrieve_link_cap()
drm/amd/display: Fix pbn to kbps Conversion
drm/amd/display: Clear the CUR_ENABLE register on DCN20 on DPP5
mm/truncate: unmap large folio on split failure
pinctrl: mediatek: mt8196: align register base names to dt-bindings ones
pinctrl: mediatek: mt8189: align register base names to dt-bindings ones
xfrm: drop SA reference in xfrm_state_update if dir doesn't match
xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were
never added
xfrm: call xfrm_dev_state_delete when xfrm_state_migrate fails to add the state
xfrm: set err and extack on failure to create pcpu SA
clk: sunxi-ng: Mark A523 bus-r-cpucfg clock as critical
clk: sunxi-ng: sun55i-a523-r-ccu: Mark bus-r-dma as critical
clk: sunxi-ng: sun55i-a523-ccu: Lower audio0 pll minimum rate
pinctrl: realtek: Select REGMAP_MMIO for RTD driver
xfrm: Check inner packet family directly from skb_dst
xfrm: Determine inner GSO type from packet inner protocol
xfrm: Prevent locally generated packets from direct output in tunnel mode
pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe()
platform/x86: msi-wmi-platform: Only load on MSI devices
platform/x86: msi-wmi-platform: Fix typo in WMI GUID
mips: dts: econet: fix EN751221 core type
net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
drm/tegra: Add call to put_pid()
net: dsa: hellcreek: fix missing error handling in LED registration
net: mlxsw: linecards: fix missing error check in
mlxsw_linecard_devlink_info_get()
net: openvswitch: remove never-working support for setting nsh fields
veth: more robust handing of race to avoid txq getting stuck
tools: riscv: Fixed misalignment of CSR related definitions
nvmet-auth: update sc_c in target host hash calculation
nvme-multipath: fix lockdep WARN due to partition scan work
drm/i915/xe3lpd: Load DMC for Xe3_LPD version 30.02
s390/ctcm: Fix double-kfree
selftests: net: lib: Do not overwrite error messages
net: airoha: Add wlan flowtable TX offload
net: airoha: Do not loopback traffic to GDM2 if it is available on the device
platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos
platform/x86: intel-uncore-freq: fix all header kernel-doc warnings
net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and
qede_tpa_end()
drm/pcids: Split PTL pciids group to make wcl subplatform
drm/i915/display: Add definition for wcl as subplatform
drm/i915/xe3: Restrict PTL intel_encoder_is_c10phy() to only PHY A
drm/xe/kunit: Fix forcewake assertion in mocs test
drm/xe/irq: Handle msix vector0 interrupt
idpf: fix possible vport_config NULL pointer deref in remove
ice: fix PTP cleanup on driver removal in error path
pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc
pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc()
devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
net/mlx5: Clean up only new IRQ glue on request_irq() failure
af_unix: Read sk_peek_offset() again after sleeping in
unix_stream_read_generic().
gpio: cdev: make sure the cdev fd is still active before emitting events
net: phylink: add missing supported link modes for the fixed-link
tick/sched: Fix bogus condition in report_idle_softirq()
LoongArch: Use UAPI types in ptrace UAPI header
cifs: fix memory leak in smb3_fs_context_parse_param error path
perf: Fix 0 count issue of cpu-clock
vsock: Ignore signal/timeout on connect() if already established
timekeeping: Fix resource leak in tk_aux_sysfs_init() error paths
MIPS: kernel: Fix random segmentation faults
ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 2-in-1 14AKP10
sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc()
bcma: don't register devices disabled in OF
sched_ext: defer queue_balance_callback() until after ops.dispatch
drm/msm: Fix pgtable prealloc error path
ASoC: rt721: fix prepare clock stop failed
cifs: fix typo in enable_gcm_256 module parameter
scsi: core: Fix a regression triggered by scsi_host_busy()
ALSA: hda/realtek: Fix mute led for HP Victus 15-fa1xxx (MB 8C2D)
perf/x86/intel/uncore: Add uncore PMU support for Wildcat Lake
x86/microcode/AMD: Limit Entrysign signature checking to known generations
selftests: cachestat: Fix warning on declaration under label
smb: client: handle lack of IPC in dfs_cache_refresh()
selftests: net: use BASH for bareudp testing
net: tls: Change async resync helpers argument
blk-crypto: use BLK_STS_INVAL for alignment errors
net: tls: Cancel RX async resync request on rcd_delta overflow
x86/CPU/AMD: Extend Zen6 model range
kconfig/mconf: Initialize the default locale at startup
kconfig/nconf: Initialize the default locale at startup
drm/xe: Prevent BIT() overflow when handling invalid prefetch region
ALSA: usb-audio: fix uac2 clock source at terminal parser
scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3)
net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on
error
tracing/tools: Fix incorrcet short option in usage text for --threads
btrfs: set inode flag BTRFS_INODE_COPY_EVERYTHING when logging new name
drm/amdgpu: fix gpu page fault after hibernation on PF passthrough
smb: client: fix incomplete backport in cfids_invalidation_worker()
drm/i915/psr: Check drm_dp_dpcd_read return value on PSR dpcd init
drm/i915/dp_mst: Disable Panel Replay
drm/amdgpu/jpeg: Move parse_cs to amdgpu_jpeg.c
drm/amdgpu/jpeg: Add parse_cs for JPEG5_0_1
xfs: Replace strncpy with memcpy
xfs: fix out of bounds memory read error in symlink repair
mptcp: fix address removal logic in mptcp_pm_nl_rm_addr
drm/amd/display: Insert dccg log for easy debug
drm/amd/display: Prevent Gating DTBCLK before It Is Properly Latched
tty/vt: fix up incorrect backport to stable releases
Revert "drm/i915/dp: Reject HBR3 when sink doesn't support TPS4"
drm/i915/dp: Add device specific quirk to limit eDP rate to HBR2
sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads
sched_ext: fix flag check for deferred callbacks
Linux 6.17.10
UBUNTU: Upstream stable to v6.17.10
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Questing)
Importance: Medium
Assignee: Bethany Jamison (bjamison)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Questing)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Questing)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Questing)
Status: New => In Progress
** Changed in: linux (Ubuntu Questing)
Assignee: (unassigned) => Bethany Jamison (bjamison)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v6.17.10 upstream stable release
from git://git.kernel.org/
-
+ KVM: arm64: Check the untrusted offset in FF-A memory share
+ timers: Fix NULL function pointer race in timer_shutdown_sync()
+ arm64: dts: rockchip: Remove non-functioning CPU OPPs from RK3576
+ HID: amd_sfh: Stop sensor before starting
+ HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
+ arm64: dts: rockchip: Fix vccio4-supply on rk3566-pinetab2
+ arm64: dts: rockchip: fix PCIe 3.3V regulator voltage on orangepi-5
+ reset: imx8mp-audiomix: Fix bad mask values
+ arm64: dts: rockchip: include rk3399-base instead of rk3399 in rk3399-op1
+ arm64: dts: rockchip: disable HS400 on RK3588 Tiger
+ KVM: SVM: Fix redundant updates of LBR MSR intercepts
+ vfat: fix missing sb_min_blocksize() return value checks
+ mtd: rawnand: cadence: fix DMA device NULL pointer dereference
+ fs: Fix uninitialized 'offp' in statmount_string()
+ mtdchar: fix integer overflow in read/write ioctls
+ xfs: check the return value of sb_min_blocksize() in xfs_fs_fill_super
+ isofs: check the return value of sb_min_blocksize() in isofs_fill_super
+ shmem: fix tmpfs reconfiguration (remount) when noswap is set
+ exfat: check return value of sb_min_blocksize in exfat_read_boot_sector
+ mptcp: Disallow MPTCP subflows from sockmap
+ s390/mm: Fix __ptep_rdp() inline assembly
+ mptcp: Fix proto fallback detection with BPF
+ lib/test_kho: check if KHO is enabled
+ ACPI: APEI: EINJ: Fix EINJV2 initialization and injection
+ ata: libata-scsi: Fix system suspend for a security locked drive
+ selinux: rename task_security_struct to cred_security_struct
+ selinux: move avdcache to per-task security struct
+ smb: client: introduce close_cached_dir_locked()
+ wifi: rtw89: hw_scan: Don't let the operating channel be last
+ ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan()
+ be2net: pass wrb_params in case of OS2BMC
+ io_uring/cmd_net: fix wrong argument types for skb_queue_splice()
+ net: dsa: microchip: lan937x: Fix RGMII delay tuning
+ Revert "drm/tegra: dsi: Clear enable register if powered by bootloader"
+ Input: cros_ec_keyb - fix an invalid memory access
+ Input: goodix - add support for ACPI ID GDIX1003
+ Input: imx_sc_key - fix memory corruption on unload
+ Input: pegasus-notetaker - fix potential out-of-bounds access
+ mm/mempool: fix poisoning order>0 pages with HIGHMEM
+ nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot
+ nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl()
+ nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
+ PM: sleep: core: Fix runtime PM enabling in device_resume_early()
+ sched_ext: Fix scx_enable() crash on helper kthread creation failure
+ scsi: sg: Do not sleep in atomic context
+ scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
+ MIPS: Malta: Fix !EVA SOC-it PCI MMIO
+ dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups
+ LoongArch: BPF: Disable trampoline for kernel module function trace
+ LoongArch: Don't panic if no valid cache info for PCI
+ LoongArch: Fix NUMA node parsing with numa_memblks
+ platform/x86: alienware-wmi-wmax: Fix "Alienware m16 R1 AMD" quirk order
+ platform/x86: alienware-wmi-wmax: Add support for the whole "M" family
+ platform/x86: alienware-wmi-wmax: Add support for the whole "X" family
+ platform/x86: alienware-wmi-wmax: Add support for the whole "G" family
+ platform/x86: alienware-wmi-wmax: Add AWCC support to Alienware 16 Aurora
+ mptcp: fix race condition in mptcp_schedule_work()
+ mptcp: fix a race in mptcp_pm_del_add_timer()
+ mptcp: fix ack generation for fallback msk
+ mptcp: fix duplicate reset on fastclose
+ mptcp: fix premature close in case of fallback
+ selftests: mptcp: join: endpoints: longer timeout
+ selftests: mptcp: join: userspace: longer timeout
+ mptcp: avoid unneeded subflow-level drops
+ mptcp: decouple mptcp fastclose from tcp close
+ mptcp: do not fallback when OoO is present
+ drm/tegra: dc: Fix reference leak in tegra_dc_couple()
+ drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
+ drm/plane: Fix create_in_format_blob() return value
+ drm/amd: Skip power ungate during suspend for VPE
+ drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled
+ drm/amd/display: Increase DPCD read retries
+ drm/amd/display: Move sleep into each retry for retrieve_link_cap()
+ drm/amd/display: Fix pbn to kbps Conversion
+ drm/amd/display: Clear the CUR_ENABLE register on DCN20 on DPP5
+ mm/truncate: unmap large folio on split failure
+ pinctrl: mediatek: mt8196: align register base names to dt-bindings ones
+ pinctrl: mediatek: mt8189: align register base names to dt-bindings ones
+ xfrm: drop SA reference in xfrm_state_update if dir doesn't match
+ xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were
never added
+ xfrm: call xfrm_dev_state_delete when xfrm_state_migrate fails to add the
state
+ xfrm: set err and extack on failure to create pcpu SA
+ clk: sunxi-ng: Mark A523 bus-r-cpucfg clock as critical
+ clk: sunxi-ng: sun55i-a523-r-ccu: Mark bus-r-dma as critical
+ clk: sunxi-ng: sun55i-a523-ccu: Lower audio0 pll minimum rate
+ pinctrl: realtek: Select REGMAP_MMIO for RTD driver
+ xfrm: Check inner packet family directly from skb_dst
+ xfrm: Determine inner GSO type from packet inner protocol
+ xfrm: Prevent locally generated packets from direct output in tunnel mode
+ pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe()
+ platform/x86: msi-wmi-platform: Only load on MSI devices
+ platform/x86: msi-wmi-platform: Fix typo in WMI GUID
+ mips: dts: econet: fix EN751221 core type
+ net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
+ mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
+ drm/tegra: Add call to put_pid()
+ net: dsa: hellcreek: fix missing error handling in LED registration
+ net: mlxsw: linecards: fix missing error check in
mlxsw_linecard_devlink_info_get()
+ net: openvswitch: remove never-working support for setting nsh fields
+ veth: more robust handing of race to avoid txq getting stuck
+ tools: riscv: Fixed misalignment of CSR related definitions
+ nvmet-auth: update sc_c in target host hash calculation
+ nvme-multipath: fix lockdep WARN due to partition scan work
+ drm/i915/xe3lpd: Load DMC for Xe3_LPD version 30.02
+ s390/ctcm: Fix double-kfree
+ selftests: net: lib: Do not overwrite error messages
+ net: airoha: Add wlan flowtable TX offload
+ net: airoha: Do not loopback traffic to GDM2 if it is available on the device
+ platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos
+ platform/x86: intel-uncore-freq: fix all header kernel-doc warnings
+ net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and
qede_tpa_end()
+ drm/pcids: Split PTL pciids group to make wcl subplatform
+ drm/i915/display: Add definition for wcl as subplatform
+ drm/i915/xe3: Restrict PTL intel_encoder_is_c10phy() to only PHY A
+ drm/xe/kunit: Fix forcewake assertion in mocs test
+ drm/xe/irq: Handle msix vector0 interrupt
+ idpf: fix possible vport_config NULL pointer deref in remove
+ ice: fix PTP cleanup on driver removal in error path
+ pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc
+ pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc()
+ devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
+ net/mlx5: Clean up only new IRQ glue on request_irq() failure
+ af_unix: Read sk_peek_offset() again after sleeping in
unix_stream_read_generic().
+ gpio: cdev: make sure the cdev fd is still active before emitting events
+ net: phylink: add missing supported link modes for the fixed-link
+ tick/sched: Fix bogus condition in report_idle_softirq()
+ LoongArch: Use UAPI types in ptrace UAPI header
+ cifs: fix memory leak in smb3_fs_context_parse_param error path
+ perf: Fix 0 count issue of cpu-clock
+ vsock: Ignore signal/timeout on connect() if already established
+ timekeeping: Fix resource leak in tk_aux_sysfs_init() error paths
+ MIPS: kernel: Fix random segmentation faults
+ ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 2-in-1 14AKP10
+ sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc()
+ bcma: don't register devices disabled in OF
+ sched_ext: defer queue_balance_callback() until after ops.dispatch
+ drm/msm: Fix pgtable prealloc error path
+ ASoC: rt721: fix prepare clock stop failed
+ cifs: fix typo in enable_gcm_256 module parameter
+ scsi: core: Fix a regression triggered by scsi_host_busy()
+ ALSA: hda/realtek: Fix mute led for HP Victus 15-fa1xxx (MB 8C2D)
+ perf/x86/intel/uncore: Add uncore PMU support for Wildcat Lake
+ x86/microcode/AMD: Limit Entrysign signature checking to known generations
+ selftests: cachestat: Fix warning on declaration under label
+ smb: client: handle lack of IPC in dfs_cache_refresh()
+ selftests: net: use BASH for bareudp testing
+ net: tls: Change async resync helpers argument
+ blk-crypto: use BLK_STS_INVAL for alignment errors
+ net: tls: Cancel RX async resync request on rcd_delta overflow
+ x86/CPU/AMD: Extend Zen6 model range
+ kconfig/mconf: Initialize the default locale at startup
+ kconfig/nconf: Initialize the default locale at startup
+ drm/xe: Prevent BIT() overflow when handling invalid prefetch region
+ ALSA: usb-audio: fix uac2 clock source at terminal parser
+ scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3)
+ net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on
error
+ tracing/tools: Fix incorrcet short option in usage text for --threads
+ btrfs: set inode flag BTRFS_INODE_COPY_EVERYTHING when logging new name
+ drm/amdgpu: fix gpu page fault after hibernation on PF passthrough
+ smb: client: fix incomplete backport in cfids_invalidation_worker()
+ drm/i915/psr: Check drm_dp_dpcd_read return value on PSR dpcd init
+ drm/i915/dp_mst: Disable Panel Replay
+ drm/amdgpu/jpeg: Move parse_cs to amdgpu_jpeg.c
+ drm/amdgpu/jpeg: Add parse_cs for JPEG5_0_1
+ xfs: Replace strncpy with memcpy
+ xfs: fix out of bounds memory read error in symlink repair
+ mptcp: fix address removal logic in mptcp_pm_nl_rm_addr
+ drm/amd/display: Insert dccg log for easy debug
+ drm/amd/display: Prevent Gating DTBCLK before It Is Properly Latched
+ tty/vt: fix up incorrect backport to stable releases
+ Revert "drm/i915/dp: Reject HBR3 when sink doesn't support TPS4"
+ drm/i915/dp: Add device specific quirk to limit eDP rate to HBR2
+ sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads
+ sched_ext: fix flag check for deferred callbacks
Linux 6.17.10
- Revert "gpio: swnode: don't use the swnode's name as the key for GPIO lookup"
- sched_ext: fix flag check for deferred callbacks
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads
- drm/i915/dp: Add device specific quirk to limit eDP rate to HBR2
- Revert "drm/i915/dp: Reject HBR3 when sink doesn't support TPS4"
- tty/vt: fix up incorrect backport to stable releases
- drm/amd/display: Prevent Gating DTBCLK before It Is Properly Latched
- drm/amd/display: Insert dccg log for easy debug
- mptcp: fix address removal logic in mptcp_pm_nl_rm_addr
- xfs: fix out of bounds memory read error in symlink repair
- xfs: Replace strncpy with memcpy
- drm/amdgpu/jpeg: Add parse_cs for JPEG5_0_1
- drm/amdgpu/jpeg: Move parse_cs to amdgpu_jpeg.c
- drm/i915/dp_mst: Disable Panel Replay
- drm/i915/psr: Check drm_dp_dpcd_read return value on PSR dpcd init
- smb: client: fix incomplete backport in cfids_invalidation_worker()
- drm/amdgpu: fix gpu page fault after hibernation on PF passthrough
- btrfs: set inode flag BTRFS_INODE_COPY_EVERYTHING when logging new name
- tracing/tools: Fix incorrcet short option in usage text for --threads
- net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on
error
- scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3)
- ALSA: usb-audio: fix uac2 clock source at terminal parser
- drm/xe: Prevent BIT() overflow when handling invalid prefetch region
- kconfig/nconf: Initialize the default locale at startup
- kconfig/mconf: Initialize the default locale at startup
- x86/CPU/AMD: Extend Zen6 model range
- net: tls: Cancel RX async resync request on rcd_delta overflow
- blk-crypto: use BLK_STS_INVAL for alignment errors
- net: tls: Change async resync helpers argument
- selftests: net: use BASH for bareudp testing
- smb: client: handle lack of IPC in dfs_cache_refresh()
- selftests: cachestat: Fix warning on declaration under label
- x86/microcode/AMD: Limit Entrysign signature checking to known generations
- perf/x86/intel/uncore: Add uncore PMU support for Wildcat Lake
- ALSA: hda/realtek: Fix mute led for HP Victus 15-fa1xxx (MB 8C2D)
- scsi: core: Fix a regression triggered by scsi_host_busy()
- cifs: fix typo in enable_gcm_256 module parameter
- ASoC: rt721: fix prepare clock stop failed
- drm/msm: Fix pgtable prealloc error path
- sched_ext: defer queue_balance_callback() until after ops.dispatch
- bcma: don't register devices disabled in OF
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc()
- ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 2-in-1 14AKP10
- MIPS: kernel: Fix random segmentation faults
- timekeeping: Fix resource leak in tk_aux_sysfs_init() error paths
- vsock: Ignore signal/timeout on connect() if already established
- perf: Fix 0 count issue of cpu-clock
- cifs: fix memory leak in smb3_fs_context_parse_param error path
- LoongArch: Use UAPI types in ptrace UAPI header
- tick/sched: Fix bogus condition in report_idle_softirq()
- net: phylink: add missing supported link modes for the fixed-link
- gpio: cdev: make sure the cdev fd is still active before emitting events
- af_unix: Read sk_peek_offset() again after sleeping in
unix_stream_read_generic().
- net/mlx5: Clean up only new IRQ glue on request_irq() failure
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
- pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc()
- pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc
- ice: fix PTP cleanup on driver removal in error path
- idpf: fix possible vport_config NULL pointer deref in remove
- drm/xe/irq: Handle msix vector0 interrupt
- drm/xe/kunit: Fix forcewake assertion in mocs test
- drm/i915/xe3: Restrict PTL intel_encoder_is_c10phy() to only PHY A
- drm/i915/display: Add definition for wcl as subplatform
- drm/pcids: Split PTL pciids group to make wcl subplatform
- net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and
qede_tpa_end()
- platform/x86: intel-uncore-freq: fix all header kernel-doc warnings
- platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos
- net: airoha: Do not loopback traffic to GDM2 if it is available on the device
- net: airoha: Add wlan flowtable TX offload
- selftests: net: lib: Do not overwrite error messages
- s390/ctcm: Fix double-kfree
- drm/i915/xe3lpd: Load DMC for Xe3_LPD version 30.02
- nvme-multipath: fix lockdep WARN due to partition scan work
- nvmet-auth: update sc_c in target host hash calculation
- tools: riscv: Fixed misalignment of CSR related definitions
- veth: more robust handing of race to avoid txq getting stuck
- net: openvswitch: remove never-working support for setting nsh fields
- net: mlxsw: linecards: fix missing error check in
mlxsw_linecard_devlink_info_get()
- net: dsa: hellcreek: fix missing error handling in LED registration
- drm/tegra: Add call to put_pid()
- mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
- net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
- mips: dts: econet: fix EN751221 core type
- platform/x86: msi-wmi-platform: Fix typo in WMI GUID
- platform/x86: msi-wmi-platform: Only load on MSI devices
- pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe()
- xfrm: Prevent locally generated packets from direct output in tunnel mode
- xfrm: Determine inner GSO type from packet inner protocol
- xfrm: Check inner packet family directly from skb_dst
- pinctrl: realtek: Select REGMAP_MMIO for RTD driver
- clk: sunxi-ng: sun55i-a523-ccu: Lower audio0 pll minimum rate
- clk: sunxi-ng: sun55i-a523-r-ccu: Mark bus-r-dma as critical
- clk: sunxi-ng: Mark A523 bus-r-cpucfg clock as critical
- xfrm: set err and extack on failure to create pcpu SA
- xfrm: call xfrm_dev_state_delete when xfrm_state_migrate fails to add the
state
- xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were
never added
- xfrm: drop SA reference in xfrm_state_update if dir doesn't match
- pinctrl: mediatek: mt8189: align register base names to dt-bindings ones
- pinctrl: mediatek: mt8196: align register base names to dt-bindings ones
- mm/truncate: unmap large folio on split failure
- drm/amd/display: Clear the CUR_ENABLE register on DCN20 on DPP5
- drm/amd/display: Fix pbn to kbps Conversion
- drm/amd/display: Move sleep into each retry for retrieve_link_cap()
- drm/amd/display: Increase DPCD read retries
- drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled
- drm/amd: Skip power ungate during suspend for VPE
- drm/plane: Fix create_in_format_blob() return value
- drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
- drm/tegra: dc: Fix reference leak in tegra_dc_couple()
- mptcp: do not fallback when OoO is present
- mptcp: decouple mptcp fastclose from tcp close
- mptcp: avoid unneeded subflow-level drops
- selftests: mptcp: join: userspace: longer timeout
- selftests: mptcp: join: endpoints: longer timeout
- mptcp: fix premature close in case of fallback
- mptcp: fix duplicate reset on fastclose
- mptcp: fix ack generation for fallback msk
- mptcp: fix a race in mptcp_pm_del_add_timer()
- mptcp: fix race condition in mptcp_schedule_work()
- platform/x86: alienware-wmi-wmax: Add AWCC support to Alienware 16 Aurora
- platform/x86: alienware-wmi-wmax: Add support for the whole "G" family
- platform/x86: alienware-wmi-wmax: Add support for the whole "X" family
- platform/x86: alienware-wmi-wmax: Add support for the whole "M" family
- platform/x86: alienware-wmi-wmax: Fix "Alienware m16 R1 AMD" quirk order
- LoongArch: Fix NUMA node parsing with numa_memblks
- LoongArch: Don't panic if no valid cache info for PCI
- LoongArch: BPF: Disable trampoline for kernel module function trace
- dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups
- MIPS: Malta: Fix !EVA SOC-it PCI MMIO
- scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
- scsi: sg: Do not sleep in atomic context
- sched_ext: Fix scx_enable() crash on helper kthread creation failure
- PM: sleep: core: Fix runtime PM enabling in device_resume_early()
- nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl()
- nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot
- mm/mempool: fix poisoning order>0 pages with HIGHMEM
- Input: pegasus-notetaker - fix potential out-of-bounds access
- Input: imx_sc_key - fix memory corruption on unload
- Input: goodix - add support for ACPI ID GDIX1003
- Input: cros_ec_keyb - fix an invalid memory access
- Revert "drm/tegra: dsi: Clear enable register if powered by bootloader"
- net: dsa: microchip: lan937x: Fix RGMII delay tuning
- io_uring/cmd_net: fix wrong argument types for skb_queue_splice()
- be2net: pass wrb_params in case of OS2BMC
- ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan()
- wifi: rtw89: hw_scan: Don't let the operating channel be last
- smb: client: introduce close_cached_dir_locked()
- selinux: move avdcache to per-task security struct
- selinux: rename task_security_struct to cred_security_struct
- ata: libata-scsi: Fix system suspend for a security locked drive
- ACPI: APEI: EINJ: Fix EINJV2 initialization and injection
- lib/test_kho: check if KHO is enabled
- mptcp: Fix proto fallback detection with BPF
- s390/mm: Fix __ptep_rdp() inline assembly
- mptcp: Disallow MPTCP subflows from sockmap
- exfat: check return value of sb_min_blocksize in exfat_read_boot_sector
- shmem: fix tmpfs reconfiguration (remount) when noswap is set
- isofs: check the return value of sb_min_blocksize() in isofs_fill_super
- xfs: check the return value of sb_min_blocksize() in xfs_fs_fill_super
- mtdchar: fix integer overflow in read/write ioctls
- fs: Fix uninitialized 'offp' in statmount_string()
- mtd: rawnand: cadence: fix DMA device NULL pointer dereference
- vfat: fix missing sb_min_blocksize() return value checks
- KVM: SVM: Fix redundant updates of LBR MSR intercepts
- arm64: dts: rockchip: disable HS400 on RK3588 Tiger
- arm64: dts: rockchip: include rk3399-base instead of rk3399 in rk3399-op1
- reset: imx8mp-audiomix: Fix bad mask values
- arm64: dts: rockchip: fix PCIe 3.3V regulator voltage on orangepi-5
- arm64: dts: rockchip: Fix vccio4-supply on rk3566-pinetab2
- HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
- HID: amd_sfh: Stop sensor before starting
- arm64: dts: rockchip: Remove non-functioning CPU OPPs from RK3576
- timers: Fix NULL function pointer race in timer_shutdown_sync()
- KVM: arm64: Check the untrusted offset in FF-A memory share
+ UBUNTU: Upstream stable to v6.17.10
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2137723
Title:
Questing update: v6.17.10 upstream stable release
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2137723/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
