Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.1.35 upstream stable release from git://git.kernel.org/ Linux 6.1.35 kbuild: Update assembler calls to use proper flags and language target MIPS: Prefer cc-option for additions to cflags MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option x86/boot/compressed: prefer cc-option for CFLAGS additions scsi: target: core: Fix error path in target_setup_session() neighbour: delete neigh_lookup_nodev as not used net/sched: act_api: add specific EXT_WARN_MSG for tc action Revert "net/sched: act_api: move TCA_EXT_WARN_MSG to the correct hierarchy" net/sched: act_api: move TCA_EXT_WARN_MSG to the correct hierarchy drm/amdgpu: Don't set struct drm_driver.output_poll_changed rcu/kvfree: Avoid freeing new kfree_rcu() memory after old grace period parisc: Delete redundant register definitions in <asm/assembly.h> afs: Fix vlserver probe RTT handling octeon_ep: Add missing check for ioremap selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET net: tipc: resize nlattr array to correct size dm: don't lock fs when the map is NULL during suspend or resume sfc: fix XDP queues mode with legacy IRQ net: macsec: fix double free of percpu stats net: lapbether: only support ethernet devices net: dsa: felix: fix taprio guard band overflow at 10Mbps with jumbo frames net/sched: cls_api: Fix lockup on flushing explicitly created chain ext4: drop the call to ext4_error() from ext4_get_group_info() cifs: fix lease break oops in xfstest generic/098 selftests: forwarding: hw_stats_l3: Set addrgenmode in a separate step net/sched: qdisc_destroy() old ingress and clsact Qdiscs before grafting net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs sched: add new attr TCA_EXT_WARN_MSG to report tc extact message selftests/tc-testing: Fix SFB db test selftests/tc-testing: Fix Error: failed to find target LOG selftests/tc-testing: Fix Error: Specified qdisc kind is unknown. drm/nouveau: add nv_encoder pointer check for NULL drm/nouveau/dp: check for NULL nv_connector->native_mode drm/bridge: ti-sn65dsi86: Avoid possible buffer overflow drm/nouveau: don't detect DSM for non-NVIDIA device net: phylink: use a dedicated helper to parse usgmii control word net: phylink: report correct max speed for QUSGMII igb: fix nvm.ops.read() error handling igc: Fix possible system crash when loading module igc: Clean the TX buffer and TX descriptor ring sctp: fix an error code in sctp_sf_eat_auth() ipvlan: fix bound dev checking for IPv6 l3s mode net: ethtool: correct MAX attribute value for stats IB/isert: Fix incorrect release of isert connection IB/isert: Fix possible list corruption in CMA handler IB/isert: Fix dead lock in ib_isert RDMA/mlx5: Fix affinity assignment IB/uverbs: Fix to consider event queue closing also upon non-blocking mode RDMA/cma: Always set static rate to 0 for RoCE RDMA/mlx5: Create an indirect flow table for steering anchor RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions octeontx2-af: fix lbk link credits on cn10k octeontx2-af: fixed resource availability check iavf: remove mask from iavf_irq_enable_queues() RDMA/rxe: Fix the use-before-initialization error of resp_pkts RDMA/rxe: Removed unused name from rxe_task struct wifi: mac80211: take lock before setting vif links wifi: cfg80211: fix link del callback to call correct handler wifi: mac80211: fix link activation settings order net/sched: cls_u32: Fix reference counter leak leading to overflow octeontx2-af: Fix promiscuous mode net/sched: act_pedit: Parse L3 Header for L4 offset net/sched: act_pedit: remove extra check for key type net/sched: simplify tcf_pedit_act igb: Fix extts capture value format for 82580/i354/i350 ping6: Fix send to link-local addresses with VRF. net: enetc: correct the indexes of highest and 2nd highest TCs netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE ice: Fix XDP memory leak when NIC is brought up and down netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM netfilter: nf_tables: integrate pipapo into commit protocol spi: fsl-dspi: avoid SCK glitches with continuous transfers spi: cadence-quadspi: Add missing check for dma_set_mask RDMA/rxe: Fix ref count error in check_rkey() RDMA/rxe: Fix packet length checks RDMA/rtrs: Fix rxe_dealloc_pd warning RDMA/rtrs: Fix the last iu->buf leak in err path usb: dwc3: gadget: Reset num TRBs before giving back the request USB: dwc3: fix use-after-free on core driver unbind USB: dwc3: qcom: fix NULL-deref on suspend usb: gadget: udc: core: Prevent soft_connect_store() race usb: gadget: udc: core: Offload usb_udc_vbus_handler processing usb: typec: Fix fast_role_swap_current show function usb: typec: ucsi: Fix command cancellation serial: lantiq: add missing interrupt ack USB: serial: option: add Quectel EM061KGL series clk: pxa: fix NULL pointer dereference in pxa3xx_clk_update_accr thunderbolt: Mask ring interrupt on Intel hardware as well thunderbolt: dma_test: Use correct value for absent rings when creating paths thunderbolt: Do not touch CL state configuration during discovery ALSA: hda/realtek: Add a quirk for Compaq N14JP6 drm/amdgpu: add missing radeon secondary PCI ID drm/amd/pm: workaround for compute workload type on some skus drm/amd: Tighten permissions on VBIOS flashing attributes drm/amd: Make sure image is written to trigger VBIOS image update flow drm/amd/display: edp do not add non-edid timings net: usb: qmi_wwan: add support for Compal RXM-G1 drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1 RDMA/uverbs: Restrict usage of privileged QKEYs nouveau: fix client work fence deletion race net: ethernet: stmicro: stmmac: fix possible memory leak in __stmmac_open dm thin: fix issue_discard to pass GFP_NOIO to __blkdev_issue_discard dm thin metadata: check fail_io before using data_sm ALSA: usb-audio: Add quirk flag for HEM devices to enable native DSD playback ALSA: usb-audio: Fix broken resume due to UAC3 power state btrfs: can_nocow_file_extent should pass down args->strict from callers btrfs: fix iomap_begin length for nocow writes btrfs: do not ASSERT() on duplicated global roots powerpc/purgatory: remove PGO flags riscv/purgatory: remove PGO flags x86/purgatory: remove PGO flags kexec: support purgatories with .text.hot sections io_uring/net: save msghdr->msg_control for retries LoongArch: Fix perf event id calculation nilfs2: reject devices with insufficient block count nilfs2: fix possible out-of-bounds segment allocation in resize ioctl nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() nios2: dts: Fix tse_mac "max-frame-size" property zswap: do not shrink if cgroup may not zswap ocfs2: check new file size on fallocate call ocfs2: fix use-after-free when unmounting read-only filesystem epoll: ep_autoremove_wake_function should use list_del_init_careful wifi: cfg80211: fix double lock bug in reg_wdev_chan_valid() wifi: cfg80211: fix locking in regulatory disconnect irqchip/gic: Correctly validate OF quirk descriptors NVMe: Add MAXIO 1602 to bogus nid list. io_uring: unlock sqd->lock before sq thread release CPU drm:amd:amdgpu: Fix missing buffer object unlock in failure path xen/blkfront: Only check REQ_FUA for writes ASoC: dwc: move DMA init to snd_soc_dai_driver probe() ASoC: cs35l41: Fix default regmap values for some registers mips: Move initrd_start check after initrd address sanitisation. MIPS: Alchemy: fix dbdma2 MIPS: Restore Au1300 support MIPS: unhide PATA_PLATFORM parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory() parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() ASoC: Intel: avs: Add missing checks on FE startup ASoC: Intel: avs: Account for UID of ACPI device ASoC: soc-pcm: test if a BE can be prepared btrfs: handle memory allocation failure in btrfs_csum_one_bio btrfs: scrub: try harder to mark RAID56 block groups read-only drm: panel-orientation-quirks: Change Air's quirk to support Air Plus power: supply: Fix logic checking if system is running from battery irqchip/meson-gpio: Mark OF related data as maybe unused irqchip/gic-v3: Disable pseudo NMIs on Mediatek devices w/ firmware issues regulator: Fix error checking for debugfs_create_dir platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports power: supply: Ratelimit no data debug output selftests: gpio: gpio-sim: Fix BUG: test FAILED due to recent change tools: gpio: fix debounce_period_us output of lsgpio ARM: dts: vexpress: add missing cache properties power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() power: supply: sc27xx: Fix external_power_changed race power: supply: ab8500: Fix external_power_changed race of: overlay: Fix missing of_node_put() in error case of init_overlay_changeset() ksmbd: validate smb request protocol id EDAC/qcom: Get rid of hardcoded register offsets qcom: llcc/edac: Fix the base address used for accessing LLCC banks cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() cgroup: always put cset in cgroup_css_set_put_fork cgroup: bpf: use cgroup_lock()/cgroup_unlock() wrappers test_firmware: prevent race conditions by a correct implementation of locking test_firmware: Use kstrtobool() instead of strtobool() x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed ** Affects: linux-oem-6.1 (Ubuntu) Importance: Undecided Status: Confirmed ** Affects: linux-oem-6.1 (Ubuntu Jammy) Importance: Undecided Status: New ** Tags: kernel-stable-tracking-bug ** Changed in: linux-oem-6.1 (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux-oem-6.1 (Ubuntu Jammy) Importance: Undecided Status: New -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux-oem-6.1 in Ubuntu. https://bugs.launchpad.net/bugs/2025708 Title: Jammy update: v6.1.35 upstream stable release Status in linux-oem-6.1 package in Ubuntu: Confirmed Status in linux-oem-6.1 source package in Jammy: New Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.1.35 upstream stable release from git://git.kernel.org/ Linux 6.1.35 kbuild: Update assembler calls to use proper flags and language target MIPS: Prefer cc-option for additions to cflags MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option x86/boot/compressed: prefer cc-option for CFLAGS additions scsi: target: core: Fix error path in target_setup_session() neighbour: delete neigh_lookup_nodev as not used net/sched: act_api: add specific EXT_WARN_MSG for tc action Revert "net/sched: act_api: move TCA_EXT_WARN_MSG to the correct hierarchy" net/sched: act_api: move TCA_EXT_WARN_MSG to the correct hierarchy drm/amdgpu: Don't set struct drm_driver.output_poll_changed rcu/kvfree: Avoid freeing new kfree_rcu() memory after old grace period parisc: Delete redundant register definitions in <asm/assembly.h> afs: Fix vlserver probe RTT handling octeon_ep: Add missing check for ioremap selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET net: tipc: resize nlattr array to correct size dm: don't lock fs when the map is NULL during suspend or resume sfc: fix XDP queues mode with legacy IRQ net: macsec: fix double free of percpu stats net: lapbether: only support ethernet devices net: dsa: felix: fix taprio guard band overflow at 10Mbps with jumbo frames net/sched: cls_api: Fix lockup on flushing explicitly created chain ext4: drop the call to ext4_error() from ext4_get_group_info() cifs: fix lease break oops in xfstest generic/098 selftests: forwarding: hw_stats_l3: Set addrgenmode in a separate step net/sched: qdisc_destroy() old ingress and clsact Qdiscs before grafting net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs sched: add new attr TCA_EXT_WARN_MSG to report tc extact message selftests/tc-testing: Fix SFB db test selftests/tc-testing: Fix Error: failed to find target LOG selftests/tc-testing: Fix Error: Specified qdisc kind is unknown. drm/nouveau: add nv_encoder pointer check for NULL drm/nouveau/dp: check for NULL nv_connector->native_mode drm/bridge: ti-sn65dsi86: Avoid possible buffer overflow drm/nouveau: don't detect DSM for non-NVIDIA device net: phylink: use a dedicated helper to parse usgmii control word net: phylink: report correct max speed for QUSGMII igb: fix nvm.ops.read() error handling igc: Fix possible system crash when loading module igc: Clean the TX buffer and TX descriptor ring sctp: fix an error code in sctp_sf_eat_auth() ipvlan: fix bound dev checking for IPv6 l3s mode net: ethtool: correct MAX attribute value for stats IB/isert: Fix incorrect release of isert connection IB/isert: Fix possible list corruption in CMA handler IB/isert: Fix dead lock in ib_isert RDMA/mlx5: Fix affinity assignment IB/uverbs: Fix to consider event queue closing also upon non-blocking mode RDMA/cma: Always set static rate to 0 for RoCE RDMA/mlx5: Create an indirect flow table for steering anchor RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions octeontx2-af: fix lbk link credits on cn10k octeontx2-af: fixed resource availability check iavf: remove mask from iavf_irq_enable_queues() RDMA/rxe: Fix the use-before-initialization error of resp_pkts RDMA/rxe: Removed unused name from rxe_task struct wifi: mac80211: take lock before setting vif links wifi: cfg80211: fix link del callback to call correct handler wifi: mac80211: fix link activation settings order net/sched: cls_u32: Fix reference counter leak leading to overflow octeontx2-af: Fix promiscuous mode net/sched: act_pedit: Parse L3 Header for L4 offset net/sched: act_pedit: remove extra check for key type net/sched: simplify tcf_pedit_act igb: Fix extts capture value format for 82580/i354/i350 ping6: Fix send to link-local addresses with VRF. net: enetc: correct the indexes of highest and 2nd highest TCs netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE ice: Fix XDP memory leak when NIC is brought up and down netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM netfilter: nf_tables: integrate pipapo into commit protocol spi: fsl-dspi: avoid SCK glitches with continuous transfers spi: cadence-quadspi: Add missing check for dma_set_mask RDMA/rxe: Fix ref count error in check_rkey() RDMA/rxe: Fix packet length checks RDMA/rtrs: Fix rxe_dealloc_pd warning RDMA/rtrs: Fix the last iu->buf leak in err path usb: dwc3: gadget: Reset num TRBs before giving back the request USB: dwc3: fix use-after-free on core driver unbind USB: dwc3: qcom: fix NULL-deref on suspend usb: gadget: udc: core: Prevent soft_connect_store() race usb: gadget: udc: core: Offload usb_udc_vbus_handler processing usb: typec: Fix fast_role_swap_current show function usb: typec: ucsi: Fix command cancellation serial: lantiq: add missing interrupt ack USB: serial: option: add Quectel EM061KGL series clk: pxa: fix NULL pointer dereference in pxa3xx_clk_update_accr thunderbolt: Mask ring interrupt on Intel hardware as well thunderbolt: dma_test: Use correct value for absent rings when creating paths thunderbolt: Do not touch CL state configuration during discovery ALSA: hda/realtek: Add a quirk for Compaq N14JP6 drm/amdgpu: add missing radeon secondary PCI ID drm/amd/pm: workaround for compute workload type on some skus drm/amd: Tighten permissions on VBIOS flashing attributes drm/amd: Make sure image is written to trigger VBIOS image update flow drm/amd/display: edp do not add non-edid timings net: usb: qmi_wwan: add support for Compal RXM-G1 drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1 RDMA/uverbs: Restrict usage of privileged QKEYs nouveau: fix client work fence deletion race net: ethernet: stmicro: stmmac: fix possible memory leak in __stmmac_open dm thin: fix issue_discard to pass GFP_NOIO to __blkdev_issue_discard dm thin metadata: check fail_io before using data_sm ALSA: usb-audio: Add quirk flag for HEM devices to enable native DSD playback ALSA: usb-audio: Fix broken resume due to UAC3 power state btrfs: can_nocow_file_extent should pass down args->strict from callers btrfs: fix iomap_begin length for nocow writes btrfs: do not ASSERT() on duplicated global roots powerpc/purgatory: remove PGO flags riscv/purgatory: remove PGO flags x86/purgatory: remove PGO flags kexec: support purgatories with .text.hot sections io_uring/net: save msghdr->msg_control for retries LoongArch: Fix perf event id calculation nilfs2: reject devices with insufficient block count nilfs2: fix possible out-of-bounds segment allocation in resize ioctl nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() nios2: dts: Fix tse_mac "max-frame-size" property zswap: do not shrink if cgroup may not zswap ocfs2: check new file size on fallocate call ocfs2: fix use-after-free when unmounting read-only filesystem epoll: ep_autoremove_wake_function should use list_del_init_careful wifi: cfg80211: fix double lock bug in reg_wdev_chan_valid() wifi: cfg80211: fix locking in regulatory disconnect irqchip/gic: Correctly validate OF quirk descriptors NVMe: Add MAXIO 1602 to bogus nid list. io_uring: unlock sqd->lock before sq thread release CPU drm:amd:amdgpu: Fix missing buffer object unlock in failure path xen/blkfront: Only check REQ_FUA for writes ASoC: dwc: move DMA init to snd_soc_dai_driver probe() ASoC: cs35l41: Fix default regmap values for some registers mips: Move initrd_start check after initrd address sanitisation. MIPS: Alchemy: fix dbdma2 MIPS: Restore Au1300 support MIPS: unhide PATA_PLATFORM parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory() parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() ASoC: Intel: avs: Add missing checks on FE startup ASoC: Intel: avs: Account for UID of ACPI device ASoC: soc-pcm: test if a BE can be prepared btrfs: handle memory allocation failure in btrfs_csum_one_bio btrfs: scrub: try harder to mark RAID56 block groups read-only drm: panel-orientation-quirks: Change Air's quirk to support Air Plus power: supply: Fix logic checking if system is running from battery irqchip/meson-gpio: Mark OF related data as maybe unused irqchip/gic-v3: Disable pseudo NMIs on Mediatek devices w/ firmware issues regulator: Fix error checking for debugfs_create_dir platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports power: supply: Ratelimit no data debug output selftests: gpio: gpio-sim: Fix BUG: test FAILED due to recent change tools: gpio: fix debounce_period_us output of lsgpio ARM: dts: vexpress: add missing cache properties power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() power: supply: sc27xx: Fix external_power_changed race power: supply: ab8500: Fix external_power_changed race of: overlay: Fix missing of_node_put() in error case of init_overlay_changeset() ksmbd: validate smb request protocol id EDAC/qcom: Get rid of hardcoded register offsets qcom: llcc/edac: Fix the base address used for accessing LLCC banks cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() cgroup: always put cset in cgroup_css_set_put_fork cgroup: bpf: use cgroup_lock()/cgroup_unlock() wrappers test_firmware: prevent race conditions by a correct implementation of locking test_firmware: Use kstrtobool() instead of strtobool() x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-oem-6.1/+bug/2025708/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp