Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.6.5 upstream stable release
       from git://git.kernel.org/

            
Linux 6.6.5
vfio: Drop vfio_file_iommu_group() stub to fudge around a KVM wart
x86/xen: fix percpu vcpu_info allocation
vfio/pds: Fix possible sleep while in atomic context
vfio/pds: Fix mutex lock->magic != lock warning
drm/amd/display: Fix MPCC 1DLUT programming
drm/amd/display: Simplify brightness initialization
drm/amd/display: Reduce default backlight min from 5 nits to 1 nits
drm/amd/display: refactor ILR to make it work
iommu: Fix printk arg in of_iommu_get_resv_regions()
drm/amd/pm: fix a memleak in aldebaran_tables_init
cpufreq/amd-pstate: Only print supported EPP values for performance governor
cpufreq/amd-pstate: Fix scaling_min_freq and scaling_max_freq update
drm/panel: nt36523: fix return value check in nt36523_probe()
drm/panel: starry-2081101qfh032011-53g: Fine tune the panel power sequence
drm/i915/gsc: Mark internal GSC engine with reserved uabi class
iommu/vt-d: Make context clearing consistent with context mapping
iommu/vt-d: Disable PCI ATS in legacy passthrough mode
iommu/vt-d: Omit devTLB invalidation requests when TES=0
cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily
drm/amd/display: Remove power sequencing check
drm/amd/display: Refactor edp power control
s390/cmma: fix handling of swapper_pg_dir and invalid_pg_dir
powerpc/pseries/iommu: enable_ddw incorrectly returns direct mapping for SR-IOV 
device
net: ravb: Keep reverse order of operations in ravb_remove()
net: ravb: Stop DMA in case of failures on ravb_open()
net: ravb: Start TX queues after HW initialization succeeded
net: ravb: Make write access to CXR35 first before accessing other EMAC 
registers
net: ravb: Use pm_runtime_resume_and_get()
net: ravb: Check return value of reset_control_deassert()
ice: Fix VF Reset paths when interface in a failed over aggregate
bpf, sockmap: af_unix stream sockets need to hold ref for pair sock
ethtool: don't propagate EOPNOTSUPP from dumps
ravb: Fix races between ravb_tx_timeout_work() and net related ops
r8169: prevent potential deadlock in rtl8169_close
efi/unaccepted: Fix off-by-one when checking for overlapping ranges
neighbour: Fix __randomize_layout crash in struct neighbour
octeontx2-pf: Restore TC ingress police rules when interface is up
octeontx2-pf: Fix adding mbox work queue entry when num_vfs > 64
net: stmmac: xgmac: Disable FPE MMC interrupts
octeontx2-af: Fix possible buffer overflow
selftests/net: mptcp: fix uninitialized variable warnings
selftests/net: unix: fix unused variable compiler warning
selftests/net: fix a char signedness issue
selftests/net: ipsec: fix constant out of range
uapi: propagate __struct_group() attributes to the container union
bpf: Add missed allocation hint for bpf_mem_cache_alloc_flags()
dpaa2-eth: recycle the RX buffer only after all processing done
dpaa2-eth: increase the needed headroom to account for alignment
net: dsa: mv88e6xxx: fix marvell 6350 probe crash
net: dsa: mv88e6xxx: fix marvell 6350 switch probing
wifi: mac80211: do not pass AP_VLAN vif pointer to drivers during flush
wifi: iwlwifi: mvm: fix an error code in iwl_mvm_mld_add_sta()
ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
net: rswitch: Fix missing dev_kfree_skb_any() in error path
net: rswitch: Fix return value in rswitch_start_xmit()
net: rswitch: Fix type of ret in rswitch_start_xmit()
netdevsim: Don't accept device bound programs
media: v4l2-subdev: Fix a 64bit bug
pinctrl: stm32: fix array read out of bound
pinctrl: stm32: Add check for devm_kcalloc
wifi: cfg80211: fix CQM for non-range use
io_uring/kbuf: recycle freed mapped buffer ring entries
io_uring/kbuf: defer release of mapped buffer rings
io_uring: enable io_mem_alloc/free to be used in other parts
btrfs: fix 64bit compat send ioctl arguments not initializing version member
btrfs: free the allocated memory if btrfs_alloc_page_array() fails
btrfs: make error messages more clear when getting a chunk map
btrfs: send: ensure send_fd is writable
btrfs: fix off-by-one when checking chunk map includes logical address
btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod()
btrfs: add dmesg output for first mount and last unmount of a filesystem
parisc: Mark altinstructions read-only and 32-bit aligned
parisc: Ensure 32-bit alignment on parisc unwind section
parisc: Mark jump_table naturally aligned
parisc: Drop the HP-UX ENOSYM and EREMOTERELEASE error codes
parisc: Mark lock_aligned variables 16-byte aligned on SMP
parisc: Use natural CPU alignment for bug_table
parisc: Mark ex_table entries 32-bit aligned in uaccess.h
parisc: Mark ex_table entries 32-bit aligned in assembly.h
powerpc: Don't clobber f0/vs0 during fp|altivec register save
KVM: PPC: Book3S HV: Fix KVM_RUN clobbering FP/VEC user registers
iommu/vt-d: Add MTL to quirk list to skip TE disabling
ext2: Fix ki_pos update for DIO buffered-io fallback case
bcache: revert replacing IS_ERR_OR_NULL with IS_ERR
iommu: Avoid more races around device probe
io_uring: don't guard IORING_OFF_PBUF_RING with SETUP_NO_MMAP
dma-buf: fix check in dma_resv_add_fence
cpufreq/amd-pstate: Fix the return value of amd_pstate_fast_switch()
powercap: DTPM: Fix unneeded conversions to micro-Watts
nouveau: find the smallest page allocation to cover a buffer alloc.
io_uring: free io_buffer_list entries via RCU
iommu/vt-d: Fix incorrect cache invalidation for mm notification
io_uring: don't allow discontig pages for IORING_SETUP_NO_MMAP
ACPI: video: Use acpi_video_device for cooling-dev driver data
r8169: fix deadlock on RTL8125 in jumbo mtu mode
nvme: check for valid nvme_identify_ns() before using it
dm verity: don't perform FEC for failed readahead IO
dm verity: initialize fec io before freeing it
drm/amd/display: force toggle rate wa for first link training for a retimer
drm/amd/display: fix ABM disablement
drm/amd/display: Update min Z8 residency time to 2100 for DCN314
drm/amd/display: Use DRAM speed from validation for dummy p-state
drm/amd/display: Remove min_dst_y_next_start check for Z8
drm/amd/display: Include udelay when waiting for INBOX0 ACK
drm/amdgpu: Update EEPROM I2C address for smu v13_0_0
drm/amdgpu: fix memory overflow in the IB test
drm/amdgpu: Force order between a read and write to the same address
drm/amdgpu: correct the amdgpu runtime dereference usage count
drm/amd: Enable PCIe PME from D3
scsi: ufs: core: Clear cmd if abort succeeds in MCQ mode
scsi: sd: Fix system start for ATA devices
scsi: Change SCSI device boolean fields to single bit flags
dm-verity: align struct dm_verity_fec_io properly
net: libwx: fix memory leak on msix entry
ALSA: hda/realtek: Add supported ALC257 for ChromeOS
ALSA: hda/realtek: Headset Mic VREF to 100%
ALSA: hda: Disable power-save on KONTRON SinglePC
drm/i915: Also check for VGA converter in eDP probe
mmc: block: Be sure to wait while busy in CQE error recovery
mmc: block: Do not lose cache flush during CQE error recovery
mmc: block: Retry commands in CQE error recovery
mmc: cqhci: Fix task clearing in CQE error recovery
mmc: cqhci: Warn of halt or task clear failure
mmc: cqhci: Increase recovery halt timeout
mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled
mmc: sdhci-pci-gli: Disable LPM during initialization
firewire: core: fix possible memory leak in create_units()
pinctrl: avoid reload of p state in list iteration
ksmbd: fix possible deadlock in smb2_open
smb: client: report correct st_size for SMB and NFS symlinks
smb: client: fix missing mode bits for SMB symlinks
cifs: Fix FALLOC_FL_INSERT_RANGE by setting i_size after EOF moved
cifs: Fix FALLOC_FL_ZERO_RANGE by setting i_size if EOF moved
leds: class: Don't expose color sysfs entry

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Confirmed

** Affects: linux (Ubuntu Noble)
     Importance: Undecided
         Status: Confirmed


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Noble)
   Importance: Undecided
       Status: Confirmed

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2046464

Title:
  Noble update: v6.6.5 upstream stable release

Status in linux package in Ubuntu:
  Confirmed
Status in linux source package in Noble:
  Confirmed

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v6.6.5 upstream stable release
         from git://git.kernel.org/

              
  Linux 6.6.5
  vfio: Drop vfio_file_iommu_group() stub to fudge around a KVM wart
  x86/xen: fix percpu vcpu_info allocation
  vfio/pds: Fix possible sleep while in atomic context
  vfio/pds: Fix mutex lock->magic != lock warning
  drm/amd/display: Fix MPCC 1DLUT programming
  drm/amd/display: Simplify brightness initialization
  drm/amd/display: Reduce default backlight min from 5 nits to 1 nits
  drm/amd/display: refactor ILR to make it work
  iommu: Fix printk arg in of_iommu_get_resv_regions()
  drm/amd/pm: fix a memleak in aldebaran_tables_init
  cpufreq/amd-pstate: Only print supported EPP values for performance governor
  cpufreq/amd-pstate: Fix scaling_min_freq and scaling_max_freq update
  drm/panel: nt36523: fix return value check in nt36523_probe()
  drm/panel: starry-2081101qfh032011-53g: Fine tune the panel power sequence
  drm/i915/gsc: Mark internal GSC engine with reserved uabi class
  iommu/vt-d: Make context clearing consistent with context mapping
  iommu/vt-d: Disable PCI ATS in legacy passthrough mode
  iommu/vt-d: Omit devTLB invalidation requests when TES=0
  cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily
  drm/amd/display: Remove power sequencing check
  drm/amd/display: Refactor edp power control
  s390/cmma: fix handling of swapper_pg_dir and invalid_pg_dir
  powerpc/pseries/iommu: enable_ddw incorrectly returns direct mapping for 
SR-IOV device
  net: ravb: Keep reverse order of operations in ravb_remove()
  net: ravb: Stop DMA in case of failures on ravb_open()
  net: ravb: Start TX queues after HW initialization succeeded
  net: ravb: Make write access to CXR35 first before accessing other EMAC 
registers
  net: ravb: Use pm_runtime_resume_and_get()
  net: ravb: Check return value of reset_control_deassert()
  ice: Fix VF Reset paths when interface in a failed over aggregate
  bpf, sockmap: af_unix stream sockets need to hold ref for pair sock
  ethtool: don't propagate EOPNOTSUPP from dumps
  ravb: Fix races between ravb_tx_timeout_work() and net related ops
  r8169: prevent potential deadlock in rtl8169_close
  efi/unaccepted: Fix off-by-one when checking for overlapping ranges
  neighbour: Fix __randomize_layout crash in struct neighbour
  octeontx2-pf: Restore TC ingress police rules when interface is up
  octeontx2-pf: Fix adding mbox work queue entry when num_vfs > 64
  net: stmmac: xgmac: Disable FPE MMC interrupts
  octeontx2-af: Fix possible buffer overflow
  selftests/net: mptcp: fix uninitialized variable warnings
  selftests/net: unix: fix unused variable compiler warning
  selftests/net: fix a char signedness issue
  selftests/net: ipsec: fix constant out of range
  uapi: propagate __struct_group() attributes to the container union
  bpf: Add missed allocation hint for bpf_mem_cache_alloc_flags()
  dpaa2-eth: recycle the RX buffer only after all processing done
  dpaa2-eth: increase the needed headroom to account for alignment
  net: dsa: mv88e6xxx: fix marvell 6350 probe crash
  net: dsa: mv88e6xxx: fix marvell 6350 switch probing
  wifi: mac80211: do not pass AP_VLAN vif pointer to drivers during flush
  wifi: iwlwifi: mvm: fix an error code in iwl_mvm_mld_add_sta()
  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
  net: rswitch: Fix missing dev_kfree_skb_any() in error path
  net: rswitch: Fix return value in rswitch_start_xmit()
  net: rswitch: Fix type of ret in rswitch_start_xmit()
  netdevsim: Don't accept device bound programs
  media: v4l2-subdev: Fix a 64bit bug
  pinctrl: stm32: fix array read out of bound
  pinctrl: stm32: Add check for devm_kcalloc
  wifi: cfg80211: fix CQM for non-range use
  io_uring/kbuf: recycle freed mapped buffer ring entries
  io_uring/kbuf: defer release of mapped buffer rings
  io_uring: enable io_mem_alloc/free to be used in other parts
  btrfs: fix 64bit compat send ioctl arguments not initializing version member
  btrfs: free the allocated memory if btrfs_alloc_page_array() fails
  btrfs: make error messages more clear when getting a chunk map
  btrfs: send: ensure send_fd is writable
  btrfs: fix off-by-one when checking chunk map includes logical address
  btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod()
  btrfs: add dmesg output for first mount and last unmount of a filesystem
  parisc: Mark altinstructions read-only and 32-bit aligned
  parisc: Ensure 32-bit alignment on parisc unwind section
  parisc: Mark jump_table naturally aligned
  parisc: Drop the HP-UX ENOSYM and EREMOTERELEASE error codes
  parisc: Mark lock_aligned variables 16-byte aligned on SMP
  parisc: Use natural CPU alignment for bug_table
  parisc: Mark ex_table entries 32-bit aligned in uaccess.h
  parisc: Mark ex_table entries 32-bit aligned in assembly.h
  powerpc: Don't clobber f0/vs0 during fp|altivec register save
  KVM: PPC: Book3S HV: Fix KVM_RUN clobbering FP/VEC user registers
  iommu/vt-d: Add MTL to quirk list to skip TE disabling
  ext2: Fix ki_pos update for DIO buffered-io fallback case
  bcache: revert replacing IS_ERR_OR_NULL with IS_ERR
  iommu: Avoid more races around device probe
  io_uring: don't guard IORING_OFF_PBUF_RING with SETUP_NO_MMAP
  dma-buf: fix check in dma_resv_add_fence
  cpufreq/amd-pstate: Fix the return value of amd_pstate_fast_switch()
  powercap: DTPM: Fix unneeded conversions to micro-Watts
  nouveau: find the smallest page allocation to cover a buffer alloc.
  io_uring: free io_buffer_list entries via RCU
  iommu/vt-d: Fix incorrect cache invalidation for mm notification
  io_uring: don't allow discontig pages for IORING_SETUP_NO_MMAP
  ACPI: video: Use acpi_video_device for cooling-dev driver data
  r8169: fix deadlock on RTL8125 in jumbo mtu mode
  nvme: check for valid nvme_identify_ns() before using it
  dm verity: don't perform FEC for failed readahead IO
  dm verity: initialize fec io before freeing it
  drm/amd/display: force toggle rate wa for first link training for a retimer
  drm/amd/display: fix ABM disablement
  drm/amd/display: Update min Z8 residency time to 2100 for DCN314
  drm/amd/display: Use DRAM speed from validation for dummy p-state
  drm/amd/display: Remove min_dst_y_next_start check for Z8
  drm/amd/display: Include udelay when waiting for INBOX0 ACK
  drm/amdgpu: Update EEPROM I2C address for smu v13_0_0
  drm/amdgpu: fix memory overflow in the IB test
  drm/amdgpu: Force order between a read and write to the same address
  drm/amdgpu: correct the amdgpu runtime dereference usage count
  drm/amd: Enable PCIe PME from D3
  scsi: ufs: core: Clear cmd if abort succeeds in MCQ mode
  scsi: sd: Fix system start for ATA devices
  scsi: Change SCSI device boolean fields to single bit flags
  dm-verity: align struct dm_verity_fec_io properly
  net: libwx: fix memory leak on msix entry
  ALSA: hda/realtek: Add supported ALC257 for ChromeOS
  ALSA: hda/realtek: Headset Mic VREF to 100%
  ALSA: hda: Disable power-save on KONTRON SinglePC
  drm/i915: Also check for VGA converter in eDP probe
  mmc: block: Be sure to wait while busy in CQE error recovery
  mmc: block: Do not lose cache flush during CQE error recovery
  mmc: block: Retry commands in CQE error recovery
  mmc: cqhci: Fix task clearing in CQE error recovery
  mmc: cqhci: Warn of halt or task clear failure
  mmc: cqhci: Increase recovery halt timeout
  mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled
  mmc: sdhci-pci-gli: Disable LPM during initialization
  firewire: core: fix possible memory leak in create_units()
  pinctrl: avoid reload of p state in list iteration
  ksmbd: fix possible deadlock in smb2_open
  smb: client: report correct st_size for SMB and NFS symlinks
  smb: client: fix missing mode bits for SMB symlinks
  cifs: Fix FALLOC_FL_INSERT_RANGE by setting i_size after EOF moved
  cifs: Fix FALLOC_FL_ZERO_RANGE by setting i_size if EOF moved
  leds: class: Don't expose color sysfs entry

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2046464/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to