Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2026-02-03
Ported from the following upstream stable releases:
v6.6.119, v6.12.61
from git://git.kernel.org/
can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs
can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before
accessing header
can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before
accessing data
Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
Bluetooth: SMP: Fix not generating mackey and ltk when repairing
net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY
platform/x86: intel: punit_ipc: fix memory corruption
net: aquantia: Add missing descriptor cache invalidation on ATL2
net: lan966x: Fix the initialization of taprio
net/mlx5e: Fix validation logic in rate limiting
net: sxgbe: fix potential NULL dereference in sxgbe_rx()
drm/amdgpu: fix cyan_skillfish2 gpu info fw handling
net: dsa: sja1105: simplify static configuration reload
net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic
net: atlantic: fix fragment overflow handling in RX path
net: fec: cancel perout_timer when PEROUT is disabled
net: fec: do not update PEROUT if it is enabled
net: fec: do not allow enabling PPS and PEROUT simultaneously
net: fec: do not register PPS event for PEROUT
iio: st_lsm6dsx: Fixed calibrated timestamp calculation
usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors
mailbox: mailbox-test: Fix debugfs_create_dir error checking
mailbox: pcc: Refactor error handling in irq handler into separate function
mailbox: pcc: don't zero error register
spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA
spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors
spi: spi-mem: Allow specifying the byte order in Octal DTR mode
spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency
spi: spi-mem: Add a new controller capability
spi: nxp-fspi: Support per spi-mem operation frequency switches
spi: nxp-fspi: Propagate fwnode in ACPI case as well
spi: bcm63xx: fix premature CS deassertion on RX-only transactions
Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields
iio:common:ssp_sensors: Fix an error handling path ssp_probe()
iio: accel: bmc150: Fix irq assumption regression
iio: accel: fix ADXL355 startup race condition
iio: adc: ad7280a: fix ad7280_store_balance_timer()
MIPS: mm: Prevent a TLB shutdown on initial uniquification
MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow
ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230
ARM: dts: nxp: imx6ul: correct SAI3 interrupt line
atm/fore200e: Fix possible data race in fore200e_open()
can: sja1000: fix max irq loop handling
can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
ceph: fix crash in process_v2_sparse_read() for encrypted directories
dm-verity: fix unreliable memory allocation
drivers/usb/dwc3: fix PCI parent check
smb: client: fix memory leak in cifs_construct_tcon()
thunderbolt: Add support for Intel Wildcat Lake
slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves
firmware: stratix10-svc: fix bug in saving controller data
mptcp: clear scheduled subflows on retransmit
serial: amba-pl011: prefer dma_mapping_error() over explicit address checking
most: usb: fix double free on late probe failure
usb: cdns3: Fix double resource release in cdns3_pci_probe
usb: gadget: f_eem: Fix memory leak in eem_unwrap
usb: renesas_usbhs: Fix synchronous external abort on unbind
usb: storage: Fix memory leak in USB bulk transport
USB: storage: Remove subclass and protocol overrides from Novatek quirk
usb: storage: sddr55: Reject out-of-bound new_pba
usb: uas: fix urb unmapping issue when the uas device is remove during ongoing
data transfer
usb: dwc3: pci: add support for the Intel Nova Lake -S
usb: dwc3: pci: Sort out the Intel device IDs
usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call
paths
xhci: dbgtty: Fix data corruption when transmitting data form DbC to host
xhci: dbgtty: fix device unregister
USB: serial: ftdi_sio: add support for u-blox EVK-M101
USB: serial: option: add support for Rolling RW101R-GL
drm: sti: fix device leaks at component probe
drm/amd/display: Check NULL before accessing
net: dsa: microchip: common: Fix checks on irq_find_mapping()
net: dsa: microchip: ptp: Fix checks on irq_find_mapping()
libceph: fix potential use-after-free in have_mon_and_osd_map()
libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
libceph: replace BUG_ON with bounds check for map->max_osd
nfsd: Replace clamp_t in nfsd4_get_drc_mem()
usb: udc: Add trace event for usb_gadget_set_state
usb: gadget: udc: fix use-after-free in usb_gadget_state_work
usb: typec: ucsi: psy: Set max current to zero when disconnected
can: rcar_canfd: Fix CAN-FD mode as default
iio: adc: rtq6056: Correct the sign bit index
ksmbd: fix use-after-free in session logoff
net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}()
net: dsa: microchip: Free previously initialized ports on init failures
team: Move team device type change at the end of team_port_add
mailbox: mtk-cmdq: Refine DMA address handling for the command buffer
iio: humditiy: hdc3020: fix units for temperature and humidity measurement
arm64: dts: imx8dxl-ss-conn: swap interrupts number of eqos
nvmem: layouts: fix nvmem_layout_bus_uevent
xhci: fix stale flag preventig URBs after link state error is cleared
drm/amd/display: Don't change brightness for disabled connectors
KVM: SVM: Introduce svm_recalc_lbr_msr_intercepts()
KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv()
KVM: nSVM: Fix and simplify LBR virtualization handling with nested
KVM: SVM: Fix redundant updates of LBR MSR intercepts
wifi: ath12k: correctly handle mcast packets for clients
drm/i915/dp: Initialize the source OUI write timestamp always
UBUNTU: Upstream stable to v6.6.119, v6.12.61
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Noble)
Importance: Medium
Assignee: Manuel Diewald (diewald)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Noble)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Noble)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Noble)
Status: New => In Progress
** Changed in: linux (Ubuntu Noble)
Assignee: (unassigned) => Manuel Diewald (diewald)
** Summary changed:
- Noble update: upstream stable patchset 2026-02-02
+ Noble update: upstream stable patchset 2026-02-03
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
- upstream stable patchset 2026-02-02
+ upstream stable patchset 2026-02-03
+
+ Ported from the following upstream stable releases:
+ v6.6.119, v6.12.61
+
from git://git.kernel.org/
+
+ can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
+ can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs
+ can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before
accessing header
+ can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before
accessing data
+ Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
+ Bluetooth: SMP: Fix not generating mackey and ltk when repairing
+ net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY
+ platform/x86: intel: punit_ipc: fix memory corruption
+ net: aquantia: Add missing descriptor cache invalidation on ATL2
+ net: lan966x: Fix the initialization of taprio
+ net/mlx5e: Fix validation logic in rate limiting
+ net: sxgbe: fix potential NULL dereference in sxgbe_rx()
+ drm/amdgpu: fix cyan_skillfish2 gpu info fw handling
+ net: dsa: sja1105: simplify static configuration reload
+ net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic
+ net: atlantic: fix fragment overflow handling in RX path
+ net: fec: cancel perout_timer when PEROUT is disabled
+ net: fec: do not update PEROUT if it is enabled
+ net: fec: do not allow enabling PPS and PEROUT simultaneously
+ net: fec: do not register PPS event for PEROUT
+ iio: st_lsm6dsx: Fixed calibrated timestamp calculation
+ usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors
+ mailbox: mailbox-test: Fix debugfs_create_dir error checking
+ mailbox: pcc: Refactor error handling in irq handler into separate function
+ mailbox: pcc: don't zero error register
+ spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA
+ spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors
+ spi: spi-mem: Allow specifying the byte order in Octal DTR mode
+ spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency
+ spi: spi-mem: Add a new controller capability
+ spi: nxp-fspi: Support per spi-mem operation frequency switches
+ spi: nxp-fspi: Propagate fwnode in ACPI case as well
+ spi: bcm63xx: fix premature CS deassertion on RX-only transactions
+ Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
+ iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields
+ iio:common:ssp_sensors: Fix an error handling path ssp_probe()
+ iio: accel: bmc150: Fix irq assumption regression
+ iio: accel: fix ADXL355 startup race condition
+ iio: adc: ad7280a: fix ad7280_store_balance_timer()
+ MIPS: mm: Prevent a TLB shutdown on initial uniquification
+ MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow
+ ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230
+ ARM: dts: nxp: imx6ul: correct SAI3 interrupt line
+ atm/fore200e: Fix possible data race in fore200e_open()
+ can: sja1000: fix max irq loop handling
+ can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
+ ceph: fix crash in process_v2_sparse_read() for encrypted directories
+ dm-verity: fix unreliable memory allocation
+ drivers/usb/dwc3: fix PCI parent check
+ smb: client: fix memory leak in cifs_construct_tcon()
+ thunderbolt: Add support for Intel Wildcat Lake
+ slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves
+ firmware: stratix10-svc: fix bug in saving controller data
+ mptcp: clear scheduled subflows on retransmit
+ serial: amba-pl011: prefer dma_mapping_error() over explicit address checking
+ most: usb: fix double free on late probe failure
+ usb: cdns3: Fix double resource release in cdns3_pci_probe
+ usb: gadget: f_eem: Fix memory leak in eem_unwrap
+ usb: renesas_usbhs: Fix synchronous external abort on unbind
+ usb: storage: Fix memory leak in USB bulk transport
+ USB: storage: Remove subclass and protocol overrides from Novatek quirk
+ usb: storage: sddr55: Reject out-of-bound new_pba
+ usb: uas: fix urb unmapping issue when the uas device is remove during
ongoing data transfer
+ usb: dwc3: pci: add support for the Intel Nova Lake -S
+ usb: dwc3: pci: Sort out the Intel device IDs
+ usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call
paths
+ xhci: dbgtty: Fix data corruption when transmitting data form DbC to host
+ xhci: dbgtty: fix device unregister
+ USB: serial: ftdi_sio: add support for u-blox EVK-M101
+ USB: serial: option: add support for Rolling RW101R-GL
+ drm: sti: fix device leaks at component probe
+ drm/amd/display: Check NULL before accessing
+ net: dsa: microchip: common: Fix checks on irq_find_mapping()
+ net: dsa: microchip: ptp: Fix checks on irq_find_mapping()
+ libceph: fix potential use-after-free in have_mon_and_osd_map()
+ libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
+ libceph: replace BUG_ON with bounds check for map->max_osd
+ nfsd: Replace clamp_t in nfsd4_get_drc_mem()
+ usb: udc: Add trace event for usb_gadget_set_state
+ usb: gadget: udc: fix use-after-free in usb_gadget_state_work
+ usb: typec: ucsi: psy: Set max current to zero when disconnected
+ can: rcar_canfd: Fix CAN-FD mode as default
+ iio: adc: rtq6056: Correct the sign bit index
+ ksmbd: fix use-after-free in session logoff
+ net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}()
+ net: dsa: microchip: Free previously initialized ports on init failures
+ team: Move team device type change at the end of team_port_add
+ mailbox: mtk-cmdq: Refine DMA address handling for the command buffer
+ iio: humditiy: hdc3020: fix units for temperature and humidity measurement
+ arm64: dts: imx8dxl-ss-conn: swap interrupts number of eqos
+ nvmem: layouts: fix nvmem_layout_bus_uevent
+ xhci: fix stale flag preventig URBs after link state error is cleared
+ drm/amd/display: Don't change brightness for disabled connectors
+ KVM: SVM: Introduce svm_recalc_lbr_msr_intercepts()
+ KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv()
+ KVM: nSVM: Fix and simplify LBR virtualization handling with nested
+ KVM: SVM: Fix redundant updates of LBR MSR intercepts
+ wifi: ath12k: correctly handle mcast packets for clients
+ drm/i915/dp: Initialize the source OUI write timestamp always
+ UBUNTU: Upstream stable to v6.6.119, v6.12.61
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2139633
Title:
Noble update: upstream stable patchset 2026-02-03
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2139633/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
