Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.1.55 upstream stable release from git://git.kernel.org/ Linux 6.1.55 interconnect: Teach lockdep about icc_bw_lock order net/sched: Retire rsvp classifier drm/amdgpu: fix amdgpu_cs_p1_user_fence Revert "memcg: drop kmem.limit_in_bytes" drm/amd/display: fix the white screen issue when >= 64GB DRAM ext4: fix rec_len verify error scsi: pm8001: Setup IRQs on resume scsi: megaraid_sas: Fix deadlock on firmware crashdump ata: libahci: clear pending interrupt status ata: libata: disallow dev-initiated LPM transitions to unsupported states i2c: aspeed: Reset the i2c controller when timeout occurs tracefs: Add missing lockdown check to tracefs_create_dir() nfsd: fix change_info in NFSv4 RENAME replies selinux: fix handling of empty opts in selinux_fs_context_submount() tracing: Have option files inc the trace array ref count tracing: Have current_trace inc the trace array ref count tracing: Increase trace array ref count on enable and filter files tracing: Have event inject files inc the trace array ref count tracing: Have tracing_max_latency inc the trace array ref count btrfs: check for BTRFS_FS_ERROR in pending ordered assert btrfs: release path before inode lookup during the ino lookup ioctl btrfs: fix a compilation error if DEBUG is defined in btree_dirty_folio btrfs: fix lockdep splat and potential deadlock after failure running delayed items dm: don't attempt to queue IO under RCU protection Revert "drm/amd: Disable S/G for APUs when 64GB or more host memory" md: Put the right device in md_seq_next nvme: avoid bogus CRTO values io_uring/net: fix iter retargeting for selected buf ovl: fix incorrect fdput() on aio completion ovl: fix failed copyup of fileattr on a symlink attr: block mode changes of symlinks Revert "SUNRPC: Fail faster on bad verifier" md/raid1: fix error: ISO C90 forbids mixed declarations samples/hw_breakpoint: fix building without module unloading x86/purgatory: Remove LTO flags x86/boot/compressed: Reserve more memory for page tables panic: Reenable preemption in WARN slowpath scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() scsi: target: core: Fix target_cmd_counter leak riscv: kexec: Align the kexeced kernel entry x86/ibt: Suppress spurious ENDBR selftests: tracing: Fix to unmount tracefs for recovering environment scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() drm: gm12u320: Fix the timeout usage for usb_bulk_msg() nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() nvmet: use bvec_set_page to initialize bvecs block: factor out a bvec_set_page helper btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super btrfs: add a helper to read the superblock metadata_uuid MIPS: Use "grep -E" instead of "egrep" misc: fastrpc: Fix incorrect DMA mapping unmap request misc: fastrpc: Prepare to dynamic dma-buf locking specification dma-buf: Add unlocked variant of attachment-mapping functions printk: Consolidate console deferred printing printk: Keep non-panic-CPUs out of console lock interconnect: Fix locking for runpm vs reclaim kobject: Add sanity check for kset->kobj.ktype in kset_register() media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning usb: chipidea: add workaround for chipidea PEC bug usb: ehci: add workaround for chipidea PORTSC.PEC bug misc: open-dice: make OPEN_DICE depend on HAS_IOMEM serial: cpm_uart: Avoid suspicious locking scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() tools: iio: iio_generic_buffer: Fix some integer type and calculation usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc usb: cdns3: Put the cdns set active part outside the spin lock media: pci: cx23885: replace BUG with error return media: tuners: qt1010: replace BUG_ON with a regular error scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() media: anysee: fix null-ptr-deref in anysee_master_xfer media: af9005: Fix null-ptr-deref in af9005_i2c_xfer media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer media: mdp3: Fix resource leaks in of_find_device_by_node PCI: fu740: Set the number of MSI vectors PCI: vmd: Disable bridge window for domain reset powerpc/pseries: fix possible memory leak in ibmebus_bus_init() ARM: 9317/1: kexec: Make smp stop calls asynchronous PCI: dwc: Provide deinit callback for i.MX jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() ext2: fix datatype of block number in ext2_xattr_set2() md: raid1: fix potential OOB in raid1_remove_disk() bus: ti-sysc: Configure uart quirks for k3 SoC drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer() drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN314 drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31 drm/amd/display: Use DTBCLK as refclk instead of DPREFCLK ALSA: hda: intel-dsp-cfg: add LunarLake support ASoC: Intel: sof_sdw: Update BT offload config for soundwire config ASoC: SOF: topology: simplify code to prevent static analysis warnings drm/amd/display: Fix underflow issue on 175hz timing samples/hw_breakpoint: Fix kernel BUG 'invalid opcode: 0000' arm64: dts: qcom: sm8250-edo: correct ramoops pmsg-size arm64: dts: qcom: sm8150-kumano: correct ramoops pmsg-size arm64: dts: qcom: sm6350: correct ramoops pmsg-size arm64: dts: qcom: sm6125-pdx201: correct ramoops pmsg-size drm/edid: Add quirk for OSVR HDK 2.0 drm/bridge: tc358762: Instruct DSI host to generate HSE packets libbpf: Free btf_vmlinux when closing bpf_object wifi: mac80211_hwsim: drop short frames wifi: mac80211: check for station first in client probe wifi: cfg80211: ocb: don't leave if not joined wifi: cfg80211: reject auth/assoc to AP with our address netfilter: ebtables: fix fortify warnings in size_entry_mwt() wifi: mac80211: check S1G action frame size alx: fix OOB-read compiler warning mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 tpm_tis: Resend command to recover from data transfer errors netlink: convert nlk->flags to atomic flags Bluetooth: Fix hci_suspend_sync crash crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() net/ipv4: return the real errno instead of -EINVAL net: Use sockaddr_storage for getsockopt(SO_PEERNAME). can: sun4i_can: Add support for the Allwinner D1 can: sun4i_can: Add acceptance register quirk wifi: wil6210: fix fortify warnings mt76: mt7921: don't assume adequate headroom for SDIO headers wifi: mwifiex: fix fortify warning wifi: ath9k: fix printk specifier wifi: ath9k: fix fortify warnings ice: Don't tx before switchdev is fully configured crypto: lrw,xts - Replace strlcpy with strscpy devlink: remove reload failed checks in params get/set callbacks selftests/nolibc: fix up kernel parameters support ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects hw_breakpoint: fix single-stepping when using bpf_overflow_handler perf/imx_ddr: speed up overflow frequency of cycle perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 scftorture: Forgive memory-allocation failure if KASAN rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() kernel/fork: beware of __put_task_struct() calling context ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock btrfs: output extra debug info if we failed to find an inline backref autofs: fix memory leak of waitqueues in autofs_catatonic_mode ** Affects: linux-oem-6.1 (Ubuntu) Importance: Undecided Status: Confirmed ** Affects: linux-oem-6.1 (Ubuntu Jammy) Importance: Undecided Status: New ** Tags: kernel-stable-tracking-bug ** Changed in: linux-oem-6.1 (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux-oem-6.1 (Ubuntu Jammy) Importance: Undecided Status: New -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux-oem-6.1 in Ubuntu. https://bugs.launchpad.net/bugs/2038831 Title: Jammy update: v6.1.55 upstream stable release Status in linux-oem-6.1 package in Ubuntu: Confirmed Status in linux-oem-6.1 source package in Jammy: New Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.1.55 upstream stable release from git://git.kernel.org/ Linux 6.1.55 interconnect: Teach lockdep about icc_bw_lock order net/sched: Retire rsvp classifier drm/amdgpu: fix amdgpu_cs_p1_user_fence Revert "memcg: drop kmem.limit_in_bytes" drm/amd/display: fix the white screen issue when >= 64GB DRAM ext4: fix rec_len verify error scsi: pm8001: Setup IRQs on resume scsi: megaraid_sas: Fix deadlock on firmware crashdump ata: libahci: clear pending interrupt status ata: libata: disallow dev-initiated LPM transitions to unsupported states i2c: aspeed: Reset the i2c controller when timeout occurs tracefs: Add missing lockdown check to tracefs_create_dir() nfsd: fix change_info in NFSv4 RENAME replies selinux: fix handling of empty opts in selinux_fs_context_submount() tracing: Have option files inc the trace array ref count tracing: Have current_trace inc the trace array ref count tracing: Increase trace array ref count on enable and filter files tracing: Have event inject files inc the trace array ref count tracing: Have tracing_max_latency inc the trace array ref count btrfs: check for BTRFS_FS_ERROR in pending ordered assert btrfs: release path before inode lookup during the ino lookup ioctl btrfs: fix a compilation error if DEBUG is defined in btree_dirty_folio btrfs: fix lockdep splat and potential deadlock after failure running delayed items dm: don't attempt to queue IO under RCU protection Revert "drm/amd: Disable S/G for APUs when 64GB or more host memory" md: Put the right device in md_seq_next nvme: avoid bogus CRTO values io_uring/net: fix iter retargeting for selected buf ovl: fix incorrect fdput() on aio completion ovl: fix failed copyup of fileattr on a symlink attr: block mode changes of symlinks Revert "SUNRPC: Fail faster on bad verifier" md/raid1: fix error: ISO C90 forbids mixed declarations samples/hw_breakpoint: fix building without module unloading x86/purgatory: Remove LTO flags x86/boot/compressed: Reserve more memory for page tables panic: Reenable preemption in WARN slowpath scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() scsi: target: core: Fix target_cmd_counter leak riscv: kexec: Align the kexeced kernel entry x86/ibt: Suppress spurious ENDBR selftests: tracing: Fix to unmount tracefs for recovering environment scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() drm: gm12u320: Fix the timeout usage for usb_bulk_msg() nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() nvmet: use bvec_set_page to initialize bvecs block: factor out a bvec_set_page helper btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super btrfs: add a helper to read the superblock metadata_uuid MIPS: Use "grep -E" instead of "egrep" misc: fastrpc: Fix incorrect DMA mapping unmap request misc: fastrpc: Prepare to dynamic dma-buf locking specification dma-buf: Add unlocked variant of attachment-mapping functions printk: Consolidate console deferred printing printk: Keep non-panic-CPUs out of console lock interconnect: Fix locking for runpm vs reclaim kobject: Add sanity check for kset->kobj.ktype in kset_register() media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning usb: chipidea: add workaround for chipidea PEC bug usb: ehci: add workaround for chipidea PORTSC.PEC bug misc: open-dice: make OPEN_DICE depend on HAS_IOMEM serial: cpm_uart: Avoid suspicious locking scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() tools: iio: iio_generic_buffer: Fix some integer type and calculation usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc usb: cdns3: Put the cdns set active part outside the spin lock media: pci: cx23885: replace BUG with error return media: tuners: qt1010: replace BUG_ON with a regular error scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() media: anysee: fix null-ptr-deref in anysee_master_xfer media: af9005: Fix null-ptr-deref in af9005_i2c_xfer media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer media: mdp3: Fix resource leaks in of_find_device_by_node PCI: fu740: Set the number of MSI vectors PCI: vmd: Disable bridge window for domain reset powerpc/pseries: fix possible memory leak in ibmebus_bus_init() ARM: 9317/1: kexec: Make smp stop calls asynchronous PCI: dwc: Provide deinit callback for i.MX jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() ext2: fix datatype of block number in ext2_xattr_set2() md: raid1: fix potential OOB in raid1_remove_disk() bus: ti-sysc: Configure uart quirks for k3 SoC drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer() drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN314 drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31 drm/amd/display: Use DTBCLK as refclk instead of DPREFCLK ALSA: hda: intel-dsp-cfg: add LunarLake support ASoC: Intel: sof_sdw: Update BT offload config for soundwire config ASoC: SOF: topology: simplify code to prevent static analysis warnings drm/amd/display: Fix underflow issue on 175hz timing samples/hw_breakpoint: Fix kernel BUG 'invalid opcode: 0000' arm64: dts: qcom: sm8250-edo: correct ramoops pmsg-size arm64: dts: qcom: sm8150-kumano: correct ramoops pmsg-size arm64: dts: qcom: sm6350: correct ramoops pmsg-size arm64: dts: qcom: sm6125-pdx201: correct ramoops pmsg-size drm/edid: Add quirk for OSVR HDK 2.0 drm/bridge: tc358762: Instruct DSI host to generate HSE packets libbpf: Free btf_vmlinux when closing bpf_object wifi: mac80211_hwsim: drop short frames wifi: mac80211: check for station first in client probe wifi: cfg80211: ocb: don't leave if not joined wifi: cfg80211: reject auth/assoc to AP with our address netfilter: ebtables: fix fortify warnings in size_entry_mwt() wifi: mac80211: check S1G action frame size alx: fix OOB-read compiler warning mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 tpm_tis: Resend command to recover from data transfer errors netlink: convert nlk->flags to atomic flags Bluetooth: Fix hci_suspend_sync crash crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() net/ipv4: return the real errno instead of -EINVAL net: Use sockaddr_storage for getsockopt(SO_PEERNAME). can: sun4i_can: Add support for the Allwinner D1 can: sun4i_can: Add acceptance register quirk wifi: wil6210: fix fortify warnings mt76: mt7921: don't assume adequate headroom for SDIO headers wifi: mwifiex: fix fortify warning wifi: ath9k: fix printk specifier wifi: ath9k: fix fortify warnings ice: Don't tx before switchdev is fully configured crypto: lrw,xts - Replace strlcpy with strscpy devlink: remove reload failed checks in params get/set callbacks selftests/nolibc: fix up kernel parameters support ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects hw_breakpoint: fix single-stepping when using bpf_overflow_handler perf/imx_ddr: speed up overflow frequency of cycle perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 scftorture: Forgive memory-allocation failure if KASAN rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() kernel/fork: beware of __put_task_struct() calling context ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock btrfs: output extra debug info if we failed to find an inline backref autofs: fix memory leak of waitqueues in autofs_catatonic_mode To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-oem-6.1/+bug/2038831/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp