Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.6.5 upstream stable release from git://git.kernel.org/ Linux 6.6.5 vfio: Drop vfio_file_iommu_group() stub to fudge around a KVM wart x86/xen: fix percpu vcpu_info allocation vfio/pds: Fix possible sleep while in atomic context vfio/pds: Fix mutex lock->magic != lock warning drm/amd/display: Fix MPCC 1DLUT programming drm/amd/display: Simplify brightness initialization drm/amd/display: Reduce default backlight min from 5 nits to 1 nits drm/amd/display: refactor ILR to make it work iommu: Fix printk arg in of_iommu_get_resv_regions() drm/amd/pm: fix a memleak in aldebaran_tables_init cpufreq/amd-pstate: Only print supported EPP values for performance governor cpufreq/amd-pstate: Fix scaling_min_freq and scaling_max_freq update drm/panel: nt36523: fix return value check in nt36523_probe() drm/panel: starry-2081101qfh032011-53g: Fine tune the panel power sequence drm/i915/gsc: Mark internal GSC engine with reserved uabi class iommu/vt-d: Make context clearing consistent with context mapping iommu/vt-d: Disable PCI ATS in legacy passthrough mode iommu/vt-d: Omit devTLB invalidation requests when TES=0 cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily drm/amd/display: Remove power sequencing check drm/amd/display: Refactor edp power control s390/cmma: fix handling of swapper_pg_dir and invalid_pg_dir powerpc/pseries/iommu: enable_ddw incorrectly returns direct mapping for SR-IOV device net: ravb: Keep reverse order of operations in ravb_remove() net: ravb: Stop DMA in case of failures on ravb_open() net: ravb: Start TX queues after HW initialization succeeded net: ravb: Make write access to CXR35 first before accessing other EMAC registers net: ravb: Use pm_runtime_resume_and_get() net: ravb: Check return value of reset_control_deassert() ice: Fix VF Reset paths when interface in a failed over aggregate bpf, sockmap: af_unix stream sockets need to hold ref for pair sock ethtool: don't propagate EOPNOTSUPP from dumps ravb: Fix races between ravb_tx_timeout_work() and net related ops r8169: prevent potential deadlock in rtl8169_close efi/unaccepted: Fix off-by-one when checking for overlapping ranges neighbour: Fix __randomize_layout crash in struct neighbour octeontx2-pf: Restore TC ingress police rules when interface is up octeontx2-pf: Fix adding mbox work queue entry when num_vfs > 64 net: stmmac: xgmac: Disable FPE MMC interrupts octeontx2-af: Fix possible buffer overflow selftests/net: mptcp: fix uninitialized variable warnings selftests/net: unix: fix unused variable compiler warning selftests/net: fix a char signedness issue selftests/net: ipsec: fix constant out of range uapi: propagate __struct_group() attributes to the container union bpf: Add missed allocation hint for bpf_mem_cache_alloc_flags() dpaa2-eth: recycle the RX buffer only after all processing done dpaa2-eth: increase the needed headroom to account for alignment net: dsa: mv88e6xxx: fix marvell 6350 probe crash net: dsa: mv88e6xxx: fix marvell 6350 switch probing wifi: mac80211: do not pass AP_VLAN vif pointer to drivers during flush wifi: iwlwifi: mvm: fix an error code in iwl_mvm_mld_add_sta() ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet net: rswitch: Fix missing dev_kfree_skb_any() in error path net: rswitch: Fix return value in rswitch_start_xmit() net: rswitch: Fix type of ret in rswitch_start_xmit() netdevsim: Don't accept device bound programs media: v4l2-subdev: Fix a 64bit bug pinctrl: stm32: fix array read out of bound pinctrl: stm32: Add check for devm_kcalloc wifi: cfg80211: fix CQM for non-range use io_uring/kbuf: recycle freed mapped buffer ring entries io_uring/kbuf: defer release of mapped buffer rings io_uring: enable io_mem_alloc/free to be used in other parts btrfs: fix 64bit compat send ioctl arguments not initializing version member btrfs: free the allocated memory if btrfs_alloc_page_array() fails btrfs: make error messages more clear when getting a chunk map btrfs: send: ensure send_fd is writable btrfs: fix off-by-one when checking chunk map includes logical address btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod() btrfs: add dmesg output for first mount and last unmount of a filesystem parisc: Mark altinstructions read-only and 32-bit aligned parisc: Ensure 32-bit alignment on parisc unwind section parisc: Mark jump_table naturally aligned parisc: Drop the HP-UX ENOSYM and EREMOTERELEASE error codes parisc: Mark lock_aligned variables 16-byte aligned on SMP parisc: Use natural CPU alignment for bug_table parisc: Mark ex_table entries 32-bit aligned in uaccess.h parisc: Mark ex_table entries 32-bit aligned in assembly.h powerpc: Don't clobber f0/vs0 during fp|altivec register save KVM: PPC: Book3S HV: Fix KVM_RUN clobbering FP/VEC user registers iommu/vt-d: Add MTL to quirk list to skip TE disabling ext2: Fix ki_pos update for DIO buffered-io fallback case bcache: revert replacing IS_ERR_OR_NULL with IS_ERR iommu: Avoid more races around device probe io_uring: don't guard IORING_OFF_PBUF_RING with SETUP_NO_MMAP dma-buf: fix check in dma_resv_add_fence cpufreq/amd-pstate: Fix the return value of amd_pstate_fast_switch() powercap: DTPM: Fix unneeded conversions to micro-Watts nouveau: find the smallest page allocation to cover a buffer alloc. io_uring: free io_buffer_list entries via RCU iommu/vt-d: Fix incorrect cache invalidation for mm notification io_uring: don't allow discontig pages for IORING_SETUP_NO_MMAP ACPI: video: Use acpi_video_device for cooling-dev driver data r8169: fix deadlock on RTL8125 in jumbo mtu mode nvme: check for valid nvme_identify_ns() before using it dm verity: don't perform FEC for failed readahead IO dm verity: initialize fec io before freeing it drm/amd/display: force toggle rate wa for first link training for a retimer drm/amd/display: fix ABM disablement drm/amd/display: Update min Z8 residency time to 2100 for DCN314 drm/amd/display: Use DRAM speed from validation for dummy p-state drm/amd/display: Remove min_dst_y_next_start check for Z8 drm/amd/display: Include udelay when waiting for INBOX0 ACK drm/amdgpu: Update EEPROM I2C address for smu v13_0_0 drm/amdgpu: fix memory overflow in the IB test drm/amdgpu: Force order between a read and write to the same address drm/amdgpu: correct the amdgpu runtime dereference usage count drm/amd: Enable PCIe PME from D3 scsi: ufs: core: Clear cmd if abort succeeds in MCQ mode scsi: sd: Fix system start for ATA devices scsi: Change SCSI device boolean fields to single bit flags dm-verity: align struct dm_verity_fec_io properly net: libwx: fix memory leak on msix entry ALSA: hda/realtek: Add supported ALC257 for ChromeOS ALSA: hda/realtek: Headset Mic VREF to 100% ALSA: hda: Disable power-save on KONTRON SinglePC drm/i915: Also check for VGA converter in eDP probe mmc: block: Be sure to wait while busy in CQE error recovery mmc: block: Do not lose cache flush during CQE error recovery mmc: block: Retry commands in CQE error recovery mmc: cqhci: Fix task clearing in CQE error recovery mmc: cqhci: Warn of halt or task clear failure mmc: cqhci: Increase recovery halt timeout mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled mmc: sdhci-pci-gli: Disable LPM during initialization firewire: core: fix possible memory leak in create_units() pinctrl: avoid reload of p state in list iteration ksmbd: fix possible deadlock in smb2_open smb: client: report correct st_size for SMB and NFS symlinks smb: client: fix missing mode bits for SMB symlinks cifs: Fix FALLOC_FL_INSERT_RANGE by setting i_size after EOF moved cifs: Fix FALLOC_FL_ZERO_RANGE by setting i_size if EOF moved leds: class: Don't expose color sysfs entry ** Affects: linux (Ubuntu) Importance: Undecided Status: Confirmed ** Affects: linux (Ubuntu Noble) Importance: Undecided Status: Confirmed ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Noble) Importance: Undecided Status: Confirmed -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2046464 Title: Noble update: v6.6.5 upstream stable release Status in linux package in Ubuntu: Confirmed Status in linux source package in Noble: Confirmed Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.6.5 upstream stable release from git://git.kernel.org/ Linux 6.6.5 vfio: Drop vfio_file_iommu_group() stub to fudge around a KVM wart x86/xen: fix percpu vcpu_info allocation vfio/pds: Fix possible sleep while in atomic context vfio/pds: Fix mutex lock->magic != lock warning drm/amd/display: Fix MPCC 1DLUT programming drm/amd/display: Simplify brightness initialization drm/amd/display: Reduce default backlight min from 5 nits to 1 nits drm/amd/display: refactor ILR to make it work iommu: Fix printk arg in of_iommu_get_resv_regions() drm/amd/pm: fix a memleak in aldebaran_tables_init cpufreq/amd-pstate: Only print supported EPP values for performance governor cpufreq/amd-pstate: Fix scaling_min_freq and scaling_max_freq update drm/panel: nt36523: fix return value check in nt36523_probe() drm/panel: starry-2081101qfh032011-53g: Fine tune the panel power sequence drm/i915/gsc: Mark internal GSC engine with reserved uabi class iommu/vt-d: Make context clearing consistent with context mapping iommu/vt-d: Disable PCI ATS in legacy passthrough mode iommu/vt-d: Omit devTLB invalidation requests when TES=0 cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily drm/amd/display: Remove power sequencing check drm/amd/display: Refactor edp power control s390/cmma: fix handling of swapper_pg_dir and invalid_pg_dir powerpc/pseries/iommu: enable_ddw incorrectly returns direct mapping for SR-IOV device net: ravb: Keep reverse order of operations in ravb_remove() net: ravb: Stop DMA in case of failures on ravb_open() net: ravb: Start TX queues after HW initialization succeeded net: ravb: Make write access to CXR35 first before accessing other EMAC registers net: ravb: Use pm_runtime_resume_and_get() net: ravb: Check return value of reset_control_deassert() ice: Fix VF Reset paths when interface in a failed over aggregate bpf, sockmap: af_unix stream sockets need to hold ref for pair sock ethtool: don't propagate EOPNOTSUPP from dumps ravb: Fix races between ravb_tx_timeout_work() and net related ops r8169: prevent potential deadlock in rtl8169_close efi/unaccepted: Fix off-by-one when checking for overlapping ranges neighbour: Fix __randomize_layout crash in struct neighbour octeontx2-pf: Restore TC ingress police rules when interface is up octeontx2-pf: Fix adding mbox work queue entry when num_vfs > 64 net: stmmac: xgmac: Disable FPE MMC interrupts octeontx2-af: Fix possible buffer overflow selftests/net: mptcp: fix uninitialized variable warnings selftests/net: unix: fix unused variable compiler warning selftests/net: fix a char signedness issue selftests/net: ipsec: fix constant out of range uapi: propagate __struct_group() attributes to the container union bpf: Add missed allocation hint for bpf_mem_cache_alloc_flags() dpaa2-eth: recycle the RX buffer only after all processing done dpaa2-eth: increase the needed headroom to account for alignment net: dsa: mv88e6xxx: fix marvell 6350 probe crash net: dsa: mv88e6xxx: fix marvell 6350 switch probing wifi: mac80211: do not pass AP_VLAN vif pointer to drivers during flush wifi: iwlwifi: mvm: fix an error code in iwl_mvm_mld_add_sta() ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet net: rswitch: Fix missing dev_kfree_skb_any() in error path net: rswitch: Fix return value in rswitch_start_xmit() net: rswitch: Fix type of ret in rswitch_start_xmit() netdevsim: Don't accept device bound programs media: v4l2-subdev: Fix a 64bit bug pinctrl: stm32: fix array read out of bound pinctrl: stm32: Add check for devm_kcalloc wifi: cfg80211: fix CQM for non-range use io_uring/kbuf: recycle freed mapped buffer ring entries io_uring/kbuf: defer release of mapped buffer rings io_uring: enable io_mem_alloc/free to be used in other parts btrfs: fix 64bit compat send ioctl arguments not initializing version member btrfs: free the allocated memory if btrfs_alloc_page_array() fails btrfs: make error messages more clear when getting a chunk map btrfs: send: ensure send_fd is writable btrfs: fix off-by-one when checking chunk map includes logical address btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod() btrfs: add dmesg output for first mount and last unmount of a filesystem parisc: Mark altinstructions read-only and 32-bit aligned parisc: Ensure 32-bit alignment on parisc unwind section parisc: Mark jump_table naturally aligned parisc: Drop the HP-UX ENOSYM and EREMOTERELEASE error codes parisc: Mark lock_aligned variables 16-byte aligned on SMP parisc: Use natural CPU alignment for bug_table parisc: Mark ex_table entries 32-bit aligned in uaccess.h parisc: Mark ex_table entries 32-bit aligned in assembly.h powerpc: Don't clobber f0/vs0 during fp|altivec register save KVM: PPC: Book3S HV: Fix KVM_RUN clobbering FP/VEC user registers iommu/vt-d: Add MTL to quirk list to skip TE disabling ext2: Fix ki_pos update for DIO buffered-io fallback case bcache: revert replacing IS_ERR_OR_NULL with IS_ERR iommu: Avoid more races around device probe io_uring: don't guard IORING_OFF_PBUF_RING with SETUP_NO_MMAP dma-buf: fix check in dma_resv_add_fence cpufreq/amd-pstate: Fix the return value of amd_pstate_fast_switch() powercap: DTPM: Fix unneeded conversions to micro-Watts nouveau: find the smallest page allocation to cover a buffer alloc. io_uring: free io_buffer_list entries via RCU iommu/vt-d: Fix incorrect cache invalidation for mm notification io_uring: don't allow discontig pages for IORING_SETUP_NO_MMAP ACPI: video: Use acpi_video_device for cooling-dev driver data r8169: fix deadlock on RTL8125 in jumbo mtu mode nvme: check for valid nvme_identify_ns() before using it dm verity: don't perform FEC for failed readahead IO dm verity: initialize fec io before freeing it drm/amd/display: force toggle rate wa for first link training for a retimer drm/amd/display: fix ABM disablement drm/amd/display: Update min Z8 residency time to 2100 for DCN314 drm/amd/display: Use DRAM speed from validation for dummy p-state drm/amd/display: Remove min_dst_y_next_start check for Z8 drm/amd/display: Include udelay when waiting for INBOX0 ACK drm/amdgpu: Update EEPROM I2C address for smu v13_0_0 drm/amdgpu: fix memory overflow in the IB test drm/amdgpu: Force order between a read and write to the same address drm/amdgpu: correct the amdgpu runtime dereference usage count drm/amd: Enable PCIe PME from D3 scsi: ufs: core: Clear cmd if abort succeeds in MCQ mode scsi: sd: Fix system start for ATA devices scsi: Change SCSI device boolean fields to single bit flags dm-verity: align struct dm_verity_fec_io properly net: libwx: fix memory leak on msix entry ALSA: hda/realtek: Add supported ALC257 for ChromeOS ALSA: hda/realtek: Headset Mic VREF to 100% ALSA: hda: Disable power-save on KONTRON SinglePC drm/i915: Also check for VGA converter in eDP probe mmc: block: Be sure to wait while busy in CQE error recovery mmc: block: Do not lose cache flush during CQE error recovery mmc: block: Retry commands in CQE error recovery mmc: cqhci: Fix task clearing in CQE error recovery mmc: cqhci: Warn of halt or task clear failure mmc: cqhci: Increase recovery halt timeout mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled mmc: sdhci-pci-gli: Disable LPM during initialization firewire: core: fix possible memory leak in create_units() pinctrl: avoid reload of p state in list iteration ksmbd: fix possible deadlock in smb2_open smb: client: report correct st_size for SMB and NFS symlinks smb: client: fix missing mode bits for SMB symlinks cifs: Fix FALLOC_FL_INSERT_RANGE by setting i_size after EOF moved cifs: Fix FALLOC_FL_ZERO_RANGE by setting i_size if EOF moved leds: class: Don't expose color sysfs entry To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2046464/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp