Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2026-11-02
Ported from the following upstream stable releases:
v6.18.59, v7.2.13
from git://git.kernel.org/
ALSA: ctxfi: Rename SPDIFI1 to SPDIFI_BAY
ALSA: ctxfi: Use correct DAIO type for da_desc
ax25: bound REJ-driven fast retransmits with the existing N2 counter
rose: purge rose_neigh->queue on final teardown
i2c: qcom-geni: Restore the source-clock selection policy
soc/tegra: fuse: Add missing newline to APBMISC error message
ARM: dts: ti/omap: dra7: fix PCIe PHY clock divider definition
power: supply: Fix maintenance charge table kernel-doc
power: supply: ds2780: Fix ds2780_get_capacity() returning raw value
Drivers: hv: Avoid infinite retry loop in init_vp_index()
x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()
Drivers: hv: Don't reset VMBus connection state on error/exit paths
pinctrl: qcom: qcs8300: Fix intr_target_width
pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13
tools/power turbostat: Fix fd_perf leak on reset
tools/power turbostat: Fix CWF PMT off-by-one
tools/power turbostat: Fix PMT error path fd handling
tools/power turbostat: Fix add_counter issue if > 24 counters.
power: supply: generic-adc-battery: Fix temperature IIO channel conversion
power: supply: core: prevent unregistering a power supply while a callback runs
pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12
pinctrl: sunxi: dt: do not accumulate npins across probe attempts
drm/vc4: hdmi: Move packet RAM enable to PM runtime
gpio: nct6694: Mark the GPIO controller as sleeping
vsock: treat TCP_CLOSING as once-established
net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure
ASoC: Intel: avs: Reset the stream unless it is already prepared
ASoC: stm32: spdifrx: fix synchronization state check
ASoC: cs42l56: Put the Limiter Cushion control on the limiter register
ASoC: cs42l52: Fix the NG Type Switch bit
ASoC: pcm3168a: Fix the DAC zero flag polarity bit
ASoC: max98371: Fix the Speaker DHT Min Volume bits
ASoC: wm8978: Fix the 128x oversampling switch bits
ASoC: nau8822: Fix the 128x oversampling switch bits
regmap: Drop map lock during cache init and exit
netlink: reset skb headers before unicast and multicast filtering
accel/rocket: clear rdev on device init failure
net/mlx5: HWS, release L2 to L3 tunnel reformats to their own pool
net/mlx5: HWS, fix flow meter offset within its bulk
ASoC: amd: yc: disable MSI on resume
drm/xe: skip eviction of a BO with no resource
drm/xe/oa: Zero OA buffer at allocation
spi: tegra114: assert CS GPIO for every transfer in a message
nios2: fix __wsum type degradation in csum_fold()
scsi: st: Save the visited block for the partition the drive is in
scsi: target: iscsi: Fix race in discovery auth updates
drm/panthor: fix immortalis condition
ocfs2/dlm: Protect the recovery list during debugfs reads
samples: pidfd: fix userprogs typo
pipe: preserve existing fasync readers on writer setup failure
tracing: probes: error if BTF is required but unavailable
scsi: libsas: Fix SMP IO deadlock during HA resume
netlink: avoid hashing the network namespace pointer
net: bcmgenet: unshare the skb before writing the control block
calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()
gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths
gpio: mxc: fix race between chained IRQ handler install and probe completion
gpio: mxc: fix both_edges bit operations
gpio: mxc: use BIT() macro
gpio: mxc: fix wakeup_pads bit operations
gpio: mxc: fix race between gpiochip registration and IRQ domain setup
perf: Fix perf_pmu_migrate_context() leaving events behind
printk: Postpone kthread startup
PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV
accel/rocket: search every core slot when a core is removed
afs: free the super info after a grace period
autofs: ignore notification errors from a replaced pipe
bootconfig: give the footer size static_assert a message
unicode: free the map after a grace period
watch_queue: Fix note pool publication race in watch_queue_set_size()
x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context
KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for
!VM-Entry
fsnotify: prevent mark additions during connector teardown
pid_namespace: make zap_pid_ns_processes() freezable
eventfs: Free the eventfs_inode after an rcu grace period too
namei: test for a negative dentry the way traverse_mounts() does
lib/crypto: arm64: Fix lost Poly1305 carry when resuming NEON state
lib/crypto: poly1305: Use memzero_explicit() in poly1305_final()
net/sched: fix use-after-free in __tcf_action_put()
net: rds: fix uninitialized trans dereference in CM event handler
pinctrl: amd: Clear S4 wake bits when firmware has _AEI
sctp: revalidate output stream after association connect wait
tools: gpio: fix building from the top level with O=
tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields
i2c: qcom-cci: Fix HALT_ACK reset request being dropped
i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()
perf: Track the perf mlock gift separately
perf: Update cgroup time when rotating multiplexed events
ring-buffer: Do not show buffer_meta for CPUs without a buffer
ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx()
ring-buffer: Fix false warning in ring_buffer_map_get_reader()
scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies
scsi: xen/scsifront: Check for a NULL shadow entry on a backend response
scsi: libiscsi: Reject a negative task index from parse_pdu_itt
scsi: libiscsi: Validate the ITT reflected in a Reject PDU
scsi: libiscsi: Validate the task named by a management response
drm/amd/pm: add zero fan stop temperature support on smu 14.0.2
drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang
drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr
drm/amdgpu: report the BO alignment in bytes in GEM_LIST_HANDLES
drm/exec: don't immediately add prelocked obj to array of locked objs
drm/i915/cx0_phy: Fix ARL-S host bridge detection
drm/i915/dmc: Add sanity check for DMC load address
drm/xe: Bump LRU for external objects on exec and rebind
tracing: Fix the shift out of bounds in the log2 histogram modifier
tracing: Take trace_types_lock when dropping the buffer_meta reference
tracing: Check operator stack capacity before pushing
tracing: Do not initialize tracefs work if tracing is disabled
tracing: Fix hist trigger timestamps for buffered events
wifi: p54: validate firmware record lengths
tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)
tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)
cgroup: fix spurious SIGKILL of CLONE_INTO_CGROUP children
cifs: don't update i_size in cifs_do_truncate without a cached handle
dm cache: fix demotion stats in passthrough mode
dm cache: fix issue with background work locking
dm-crypt: fix a tiny race condition in crypt_dec_pending
dm-ebs: fix incorrect device offset check in ebs_ctr()
dm-integrity: fix infinite loop on discard with large tag size
dm-integrity: require stable writes for internal hash modes
mac802154: fix data race and NULL deref on local->assoc_dev
net/iucv: fix the recvmsg window update
xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf
xfs: fix capability check in xfs
xfs: fix zoned write iomap flags assignments
netlink: specs: fix the conntrack filter type
netlink: specs: add missing mask attributes for conntrack dump
workqueue: Use raise_softirq() to trigger softirq in irq_work handler
workqueue: Annotate cb_lock nesting when draining a dead BH pool
tipc: protect node reset trace dump with node lock
sctp: validate chunk length in the inqueue parser
page_pool: keep frag_offset aligned for odd-sized requests
s390/ctcm: Prevent XID null dereference
s390/pci: Fix leak of uninitialized kernel data in SCLP report
ipv4: avoid divide by zero in fib_rebalance
drm/amdgpu: Fix VCE 3 ring align_mask
netfilter: nft_byteorder: remove multi-register support
KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots
KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes
drm/amdgpu: keep the eviction fence until the last handle is closed
futex: Fix mm reuse handling for FUT_OFF_MMSHARED
ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture
ext4: free the sbi after a grace period
net: bridge: mcast: don't truncate the port group walk on teardown
net: psp: do not inherit the Rx association on clone
ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION
ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION
ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in
net/sched: cls_flower: validate mask pointer after nla_next()
smb: client: fix heap overflow in cifs_do_set_acl()
smb: client: fix multiuser mount with krb5
scsi: st: Fix use-after-free race between st_remove() and st_open()
ntfs3: free the sbi after a grace period
drm/i915/dmc: Harden DMC firmware payload parsing
sched_ext: idle: Respect task affinity in restricted CPU selection
tracing: Fix ignored return value of resize_buffer_duplicate_size()
tracing: Keep the predicate limit separate from program capacity
drm/amdgpu: free the userptr ranges when a CS fails after parser_bos
sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its
CPU's local DSQ
smb/client: refresh allocation size after duplicate extents
cifs: add revalidation on FSCTL failure in smb2_duplicate_extents()
io_uring/cancel: don't spin on local work the task can't run
workqueue: release pwq pools by pool type
workqueue: Fix unbound pool lifetime for pending pwqs
vsock/virtio: validate packet source for connected sockets
ipv4: udp: Create exceptions before socket matching
vsock/vmci: validate packet source for connected sockets
smb: client: fix data corruption with concurrent writes and O_TRUNC
smb: client: drain outstanding I/O before truncating on O_TRUNC open
ARM: configs: sama5: enable current Microchip KSZ DSA symbols
pinctrl: qcom: spmi-gpio: make direction changes exclusive
tools/power turbostat: Warn, but don't Err on out-dated perf systems
accel/amdxdna: Fix Kconfig invalid configuration
sched/core: Call wakeup_preempt() for queued tasks during class change
iommupt/kunit: Use if_changed_rule for the kunit
exit: fix lost-update race on the child_subreaper bitfields
ring-buffer: Skip si_mem_available() for persistent and remote buffers
ring-buffer: Use subbuf_order in available memory estimation
net: stmmac: dwmac1000: clear the RGMII status interrupt
perf/x86/intel/uncore: Fix DMR CXL CM invert filter
x86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx()
firewire: core: fix race condition in split transaction handling
accel/rocket: search every core slot when looking up a scheduler
ASoC: SOF: sof-client: Use event-handler mutex consistently
ipc: drop the mqueue mount with kern_unmount() on setup failure
mshv_vtl: Check per-CPU register page before mmap
power: sequencing: qcom-wcn: power off WLAN at probe
spi: imx: fix slab corruption from undersized DMA bounce buffers
tools/power turbostat: Read complete CPU lists
gpio: shared: fix use-after-free bug when adding shared proxies
gpio: shared: gracefully handle no-device lookup of shared GPIOs
drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions
drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set
drm/amdgpu: destroy mutex when tearing down ttm buffer entity
drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl
drm/amdgpu: fix sched entity leak in ttm buffer entity init
tracing: Fix crash in print_graph_function_event()
selinux: fix BPF token permission checks
s390/pai: Handle multiple PMU stop callback invocations
drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction
drm/amdgpu/userq: actually validate userq BOs
smb: client: reject SetEA requests that do not fit the request buffer
drm/amdgpu: Remove the bo list mutex
UBUNTU: Upstream stable to v6.18.59, v7.2.13
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Resolute)
Importance: Medium
Assignee: Manuel Diewald (diewald)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Also affects: linux (Ubuntu Resolute)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Resolute)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Resolute)
Status: New => In Progress
** Changed in: linux (Ubuntu Resolute)
Assignee: (unassigned) => Manuel Diewald (diewald)
** Summary changed:
- Resolute update: upstream stable patchset 2026-11-04
+ Resolute update: upstream stable patchset 2026-11-02
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
- upstream stable patchset 2026-11-04
+ upstream stable patchset 2026-11-02
+
+ Ported from the following upstream stable releases:
+ v6.18.59, v7.2.13
+
from git://git.kernel.org/
+
+ ALSA: ctxfi: Rename SPDIFI1 to SPDIFI_BAY
+ ALSA: ctxfi: Use correct DAIO type for da_desc
+ ax25: bound REJ-driven fast retransmits with the existing N2 counter
+ rose: purge rose_neigh->queue on final teardown
+ i2c: qcom-geni: Restore the source-clock selection policy
+ soc/tegra: fuse: Add missing newline to APBMISC error message
+ ARM: dts: ti/omap: dra7: fix PCIe PHY clock divider definition
+ power: supply: Fix maintenance charge table kernel-doc
+ power: supply: ds2780: Fix ds2780_get_capacity() returning raw value
+ Drivers: hv: Avoid infinite retry loop in init_vp_index()
+ x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()
+ Drivers: hv: Don't reset VMBus connection state on error/exit paths
+ pinctrl: qcom: qcs8300: Fix intr_target_width
+ pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13
+ tools/power turbostat: Fix fd_perf leak on reset
+ tools/power turbostat: Fix CWF PMT off-by-one
+ tools/power turbostat: Fix PMT error path fd handling
+ tools/power turbostat: Fix add_counter issue if > 24 counters.
+ power: supply: generic-adc-battery: Fix temperature IIO channel conversion
+ power: supply: core: prevent unregistering a power supply while a callback
runs
+ pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12
+ pinctrl: sunxi: dt: do not accumulate npins across probe attempts
+ drm/vc4: hdmi: Move packet RAM enable to PM runtime
+ gpio: nct6694: Mark the GPIO controller as sleeping
+ vsock: treat TCP_CLOSING as once-established
+ net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure
+ ASoC: Intel: avs: Reset the stream unless it is already prepared
+ ASoC: stm32: spdifrx: fix synchronization state check
+ ASoC: cs42l56: Put the Limiter Cushion control on the limiter register
+ ASoC: cs42l52: Fix the NG Type Switch bit
+ ASoC: pcm3168a: Fix the DAC zero flag polarity bit
+ ASoC: max98371: Fix the Speaker DHT Min Volume bits
+ ASoC: wm8978: Fix the 128x oversampling switch bits
+ ASoC: nau8822: Fix the 128x oversampling switch bits
+ regmap: Drop map lock during cache init and exit
+ netlink: reset skb headers before unicast and multicast filtering
+ accel/rocket: clear rdev on device init failure
+ net/mlx5: HWS, release L2 to L3 tunnel reformats to their own pool
+ net/mlx5: HWS, fix flow meter offset within its bulk
+ ASoC: amd: yc: disable MSI on resume
+ drm/xe: skip eviction of a BO with no resource
+ drm/xe/oa: Zero OA buffer at allocation
+ spi: tegra114: assert CS GPIO for every transfer in a message
+ nios2: fix __wsum type degradation in csum_fold()
+ scsi: st: Save the visited block for the partition the drive is in
+ scsi: target: iscsi: Fix race in discovery auth updates
+ drm/panthor: fix immortalis condition
+ ocfs2/dlm: Protect the recovery list during debugfs reads
+ samples: pidfd: fix userprogs typo
+ pipe: preserve existing fasync readers on writer setup failure
+ tracing: probes: error if BTF is required but unavailable
+ scsi: libsas: Fix SMP IO deadlock during HA resume
+ netlink: avoid hashing the network namespace pointer
+ net: bcmgenet: unshare the skb before writing the control block
+ calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()
+ gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths
+ gpio: mxc: fix race between chained IRQ handler install and probe completion
+ gpio: mxc: fix both_edges bit operations
+ gpio: mxc: use BIT() macro
+ gpio: mxc: fix wakeup_pads bit operations
+ gpio: mxc: fix race between gpiochip registration and IRQ domain setup
+ perf: Fix perf_pmu_migrate_context() leaving events behind
+ printk: Postpone kthread startup
+ PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV
+ accel/rocket: search every core slot when a core is removed
+ afs: free the super info after a grace period
+ autofs: ignore notification errors from a replaced pipe
+ bootconfig: give the footer size static_assert a message
+ unicode: free the map after a grace period
+ watch_queue: Fix note pool publication race in watch_queue_set_size()
+ x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context
+ KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for
!VM-Entry
+ fsnotify: prevent mark additions during connector teardown
+ pid_namespace: make zap_pid_ns_processes() freezable
+ eventfs: Free the eventfs_inode after an rcu grace period too
+ namei: test for a negative dentry the way traverse_mounts() does
+ lib/crypto: arm64: Fix lost Poly1305 carry when resuming NEON state
+ lib/crypto: poly1305: Use memzero_explicit() in poly1305_final()
+ net/sched: fix use-after-free in __tcf_action_put()
+ net: rds: fix uninitialized trans dereference in CM event handler
+ pinctrl: amd: Clear S4 wake bits when firmware has _AEI
+ sctp: revalidate output stream after association connect wait
+ tools: gpio: fix building from the top level with O=
+ tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace
fields
+ i2c: qcom-cci: Fix HALT_ACK reset request being dropped
+ i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()
+ perf: Track the perf mlock gift separately
+ perf: Update cgroup time when rotating multiplexed events
+ ring-buffer: Do not show buffer_meta for CPUs without a buffer
+ ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx()
+ ring-buffer: Fix false warning in ring_buffer_map_get_reader()
+ scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies
+ scsi: xen/scsifront: Check for a NULL shadow entry on a backend response
+ scsi: libiscsi: Reject a negative task index from parse_pdu_itt
+ scsi: libiscsi: Validate the ITT reflected in a Reject PDU
+ scsi: libiscsi: Validate the task named by a management response
+ drm/amd/pm: add zero fan stop temperature support on smu 14.0.2
+ drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang
+ drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr
+ drm/amdgpu: report the BO alignment in bytes in GEM_LIST_HANDLES
+ drm/exec: don't immediately add prelocked obj to array of locked objs
+ drm/i915/cx0_phy: Fix ARL-S host bridge detection
+ drm/i915/dmc: Add sanity check for DMC load address
+ drm/xe: Bump LRU for external objects on exec and rebind
+ tracing: Fix the shift out of bounds in the log2 histogram modifier
+ tracing: Take trace_types_lock when dropping the buffer_meta reference
+ tracing: Check operator stack capacity before pushing
+ tracing: Do not initialize tracefs work if tracing is disabled
+ tracing: Fix hist trigger timestamps for buffered events
+ wifi: p54: validate firmware record lengths
+ tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)
+ tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)
+ cgroup: fix spurious SIGKILL of CLONE_INTO_CGROUP children
+ cifs: don't update i_size in cifs_do_truncate without a cached handle
+ dm cache: fix demotion stats in passthrough mode
+ dm cache: fix issue with background work locking
+ dm-crypt: fix a tiny race condition in crypt_dec_pending
+ dm-ebs: fix incorrect device offset check in ebs_ctr()
+ dm-integrity: fix infinite loop on discard with large tag size
+ dm-integrity: require stable writes for internal hash modes
+ mac802154: fix data race and NULL deref on local->assoc_dev
+ net/iucv: fix the recvmsg window update
+ xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf
+ xfs: fix capability check in xfs
+ xfs: fix zoned write iomap flags assignments
+ netlink: specs: fix the conntrack filter type
+ netlink: specs: add missing mask attributes for conntrack dump
+ workqueue: Use raise_softirq() to trigger softirq in irq_work handler
+ workqueue: Annotate cb_lock nesting when draining a dead BH pool
+ tipc: protect node reset trace dump with node lock
+ sctp: validate chunk length in the inqueue parser
+ page_pool: keep frag_offset aligned for odd-sized requests
+ s390/ctcm: Prevent XID null dereference
+ s390/pci: Fix leak of uninitialized kernel data in SCLP report
+ ipv4: avoid divide by zero in fib_rebalance
+ drm/amdgpu: Fix VCE 3 ring align_mask
+ netfilter: nft_byteorder: remove multi-register support
+ KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots
+ KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes
+ drm/amdgpu: keep the eviction fence until the last handle is closed
+ futex: Fix mm reuse handling for FUT_OFF_MMSHARED
+ ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture
+ ext4: free the sbi after a grace period
+ net: bridge: mcast: don't truncate the port group walk on teardown
+ net: psp: do not inherit the Rx association on clone
+ ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION
+ ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION
+ ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in
+ net/sched: cls_flower: validate mask pointer after nla_next()
+ smb: client: fix heap overflow in cifs_do_set_acl()
+ smb: client: fix multiuser mount with krb5
+ scsi: st: Fix use-after-free race between st_remove() and st_open()
+ ntfs3: free the sbi after a grace period
+ drm/i915/dmc: Harden DMC firmware payload parsing
+ sched_ext: idle: Respect task affinity in restricted CPU selection
+ tracing: Fix ignored return value of resize_buffer_duplicate_size()
+ tracing: Keep the predicate limit separate from program capacity
+ drm/amdgpu: free the userptr ranges when a CS fails after parser_bos
+ sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its
CPU's local DSQ
+ smb/client: refresh allocation size after duplicate extents
+ cifs: add revalidation on FSCTL failure in smb2_duplicate_extents()
+ io_uring/cancel: don't spin on local work the task can't run
+ workqueue: release pwq pools by pool type
+ workqueue: Fix unbound pool lifetime for pending pwqs
+ vsock/virtio: validate packet source for connected sockets
+ ipv4: udp: Create exceptions before socket matching
+ vsock/vmci: validate packet source for connected sockets
+ smb: client: fix data corruption with concurrent writes and O_TRUNC
+ smb: client: drain outstanding I/O before truncating on O_TRUNC open
+ ARM: configs: sama5: enable current Microchip KSZ DSA symbols
+ pinctrl: qcom: spmi-gpio: make direction changes exclusive
+ tools/power turbostat: Warn, but don't Err on out-dated perf systems
+ accel/amdxdna: Fix Kconfig invalid configuration
+ sched/core: Call wakeup_preempt() for queued tasks during class change
+ iommupt/kunit: Use if_changed_rule for the kunit
+ exit: fix lost-update race on the child_subreaper bitfields
+ ring-buffer: Skip si_mem_available() for persistent and remote buffers
+ ring-buffer: Use subbuf_order in available memory estimation
+ net: stmmac: dwmac1000: clear the RGMII status interrupt
+ perf/x86/intel/uncore: Fix DMR CXL CM invert filter
+ x86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx()
+ firewire: core: fix race condition in split transaction handling
+ accel/rocket: search every core slot when looking up a scheduler
+ ASoC: SOF: sof-client: Use event-handler mutex consistently
+ ipc: drop the mqueue mount with kern_unmount() on setup failure
+ mshv_vtl: Check per-CPU register page before mmap
+ power: sequencing: qcom-wcn: power off WLAN at probe
+ spi: imx: fix slab corruption from undersized DMA bounce buffers
+ tools/power turbostat: Read complete CPU lists
+ gpio: shared: fix use-after-free bug when adding shared proxies
+ gpio: shared: gracefully handle no-device lookup of shared GPIOs
+ drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions
+ drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set
+ drm/amdgpu: destroy mutex when tearing down ttm buffer entity
+ drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl
+ drm/amdgpu: fix sched entity leak in ttm buffer entity init
+ tracing: Fix crash in print_graph_function_event()
+ selinux: fix BPF token permission checks
+ s390/pai: Handle multiple PMU stop callback invocations
+ drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction
+ drm/amdgpu/userq: actually validate userq BOs
+ smb: client: reject SetEA requests that do not fit the request buffer
+ drm/amdgpu: Remove the bo list mutex
+ UBUNTU: Upstream stable to v6.18.59, v7.2.13
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2173009
Title:
Resolute update: upstream stable patchset 2026-11-02
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2173009/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
