Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2024-08-09
Ported from the following upstream stable releases:
v6.6.37, v6.9.8
from git://git.kernel.org/
usb: typec: ucsi: Never send a lone connector change ack
usb: typec: ucsi: Ack also failed Get Error commands
Input: ili210x - fix ili251x_read_touch_data() return value
pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins
pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins
pinctrl: rockchip: use dedicated pinctrl type for RK3328
pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set
MIPS: pci: lantiq: restore reset gpio polarity
ASoC: rockchip: i2s-tdm: Fix trcm mode by setting clock on right mclk
ASoC: mediatek: mt8183-da7219-max98357: Fix kcontrol name collision
ASoC: atmel: atmel-classd: Re-add dai_link->platform to fix card init
workqueue: Increase worker desc's length to 32
ASoC: q6apm-lpass-dai: close graph on prepare errors
bpf: Add missed var_off setting in set_sext32_default_val()
bpf: Add missed var_off setting in coerce_subreg_to_size_sx()
s390/pci: Add missing virt_to_phys() for directed DIBV
ASoC: amd: acp: add a null check for chip_pdev structure
ASoC: amd: acp: remove i2s configuration check in acp_i2s_probe()
ASoC: fsl-asoc-card: set priv->pdev before using it
net: dsa: microchip: fix initial port flush problem
openvswitch: get related ct labels from its master if it is not confirmed
mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems
bpf: Fix overrunning reservations in ringbuf
ibmvnic: Free any outstanding tx skbs during scrq reset
net: phy: micrel: add Microchip KSZ 9477 to the device table
net: dsa: microchip: use collision based back pressure mode
ice: Rebuild TC queues on VSI queue reconfiguration
xdp: Remove WARN() from __xdp_reg_mem_model()
netfilter: fix undefined reference to 'netfilter_lwtunnel_*' when
CONFIG_SYSCTL=n
btrfs: use NOFS context when getting inodes during logging and log replay
Fix race for duplicate reqsk on identical SYN
ALSA: seq: Fix missing channel at encoding RPN/NRPN MIDI2 messages
net: dsa: microchip: fix wrong register write when masking interrupt
sparc: fix old compat_sys_select()
sparc: fix compat recv/recvfrom syscalls
parisc: use correct compat recv/recvfrom syscalls
powerpc: restore some missing spu syscalls
tcp: fix tcp_rcv_fastopen_synack() to enter TCP_CA_Loss for failed TFO
ALSA: seq: Fix missing MSB in MIDI2 SPP conversion
netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
net: mana: Fix possible double free in error handling path
drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
vduse: validate block features only with block devices
vduse: Temporarily fail if control queue feature requested
x86/fpu: Fix AMD X86_BUG_FXSAVE_LEAK fixup
mtd: partitions: redboot: Added conversion of operands to a larger type
wifi: ieee80211: check for NULL in ieee80211_mle_size_ok()
bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
RDMA/restrack: Fix potential invalid address access
net/iucv: Avoid explicit cpumask var allocation on stack
net/dpaa2: Avoid explicit cpumask var allocation on stack
crypto: ecdh - explicitly zeroize private_key
ALSA: emux: improve patch ioctl data validation
media: dvbdev: Initialize sbuf
irqchip/loongson: Select GENERIC_IRQ_EFFECTIVE_AFF_MASK if SMP for
IRQ_LOONGARCH_CPU
soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message
gfs2: Fix NULL pointer dereference in gfs2_log_flush
drm/radeon/radeon_display: Decrease the size of allocated memory
nvme: fixup comment for nvme RDMA Provider Type
drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA
gpio: davinci: Validate the obtained number of IRQs
RISC-V: fix vector insn load/store width mask
drm/amdgpu: Fix pci state save during mode-1 reset
riscv: stacktrace: convert arch_stack_walk() to noinstr
gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1)
randomize_kstack: Remove non-functional per-arch entropy filtering
x86: stop playing stack games in profile_pc()
parisc: use generic sys_fanotify_mark implementation
Revert "MIPS: pci: lantiq: restore reset gpio polarity"
pinctrl: qcom: spmi-gpio: drop broken pm8008 support
ocfs2: fix DIO failure due to insufficient transaction credits
nfs: drop the incorrect assertion in nfs_swap_rw()
mm: fix incorrect vbq reference in purge_fragmented_block
mmc: sdhci-pci-o2micro: Convert PCIBIOS_* return codes to errnos
mmc: sdhci-brcmstb: check R1_STATUS for erase/trim/discard
mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos
mmc: sdhci: Do not invert write-protect twice
mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro()
iio: xilinx-ams: Don't include ams_ctrl_channels in scan_mask
counter: ti-eqep: enable clock at probe
kbuild: doc: Update default INSTALL_MOD_DIR from extra to updates
kbuild: Fix build target deb-pkg: ln: failed to create hard link
i2c: testunit: don't erase registers after STOP
i2c: testunit: discard write requests while old command is running
ata: libata-core: Fix null pointer dereference on error
ata,scsi: libata-core: Do not leak memory for ata_port struct members
iio: adc: ad7266: Fix variable checking bug
iio: accel: fxls8962af: select IIO_BUFFER & IIO_KFIFO_BUF
iio: chemical: bme680: Fix pressure value output
iio: chemical: bme680: Fix calibration data variable
iio: chemical: bme680: Fix overflows in compensate() functions
iio: chemical: bme680: Fix sensor data read operation
net: usb: ax88179_178a: improve link status logs
usb: gadget: printer: SS+ support
usb: gadget: printer: fix races against disable
usb: musb: da8xx: fix a resource leak in probe()
usb: atm: cxacru: fix endpoint checking in cxacru_bind()
usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid
deadlock
usb: gadget: aspeed_udc: fix device address configuration
usb: typec: ucsi: glink: fix child node release in probe function
usb: ucsi: stm32: fix command completion handling
usb: dwc3: core: Add DWC31 version 2.00a controller
usb: dwc3: core: Workaround for CSR read timeout
Revert "serial: core: only stop transmit when HW fifo is empty"
serial: 8250_omap: Implementation of Errata i2310
serial: imx: set receiver level before starting uart
serial: core: introduce uart_port_tx_limited_flags()
serial: bcm63xx-uart: fix tx after conversion to uart_port_tx_limited()
tty: mcf: MCF54418 has 10 UARTS
net: can: j1939: Initialize unused data in j1939_send_one()
net: can: j1939: recover socket queue on CAN bus error during BAM transmission
net: can: j1939: enhanced error handling for tightly received RTS messages in
xtp_rx_rts_session_new
PCI/MSI: Fix UAF in msi_capability_init
cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing
irqchip/loongson-eiointc: Use early_cpu_to_node() instead of cpu_to_node()
cpu/hotplug: Fix dynstate assignment in __cpuhp_setup_state_cpuslocked()
irqchip/loongson-liointc: Set different ISRs for different cores
kbuild: Install dtb files as 0644 in Makefile.dtbinst
sh: rework sync_file_range ABI
btrfs: zoned: fix initial free space detection
csky, hexagon: fix broken sys_sync_file_range
hexagon: fix fadvise64_64 calling conventions
drm/drm_file: Fix pid refcounting race
drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
drm/fbdev-dma: Only set smem_start is enable per module option
drm/amdgpu: avoid using null object of framebuffer
drm/i915/gt: Fix potential UAF by revoke of fence registers
drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
drm/amd/display: Send DP_TOTAL_LTTPR_CNT during detection if LTTPR is present
drm/amdgpu/atomfirmware: fix parsing of vram_info
batman-adv: Don't accept TT entries for out-of-spec VIDs
can: mcp251xfd: fix infinite loop when xmit fails
ata: ahci: Clean up sysfs file on error
ata: libata-core: Fix double free on error
ftruncate: pass a signed offset
syscalls: fix compat_sys_io_pgetevents_time64 usage
syscalls: fix sys_fanotify_mark prototype
Revert "cpufreq: amd-pstate: Fix the inconsistency in max frequency units"
mm/page_alloc: Separate THP PCP into movable and non-movable categories
arm64: dts: rockchip: Fix SD NAND and eMMC init on rk3308-rock-pi-s
arm64: dts: rockchip: Rename LED related pinctrl nodes on rk3308-rock-pi-s
arm64: dts: rockchip: Fix the value of `dlg,jack-det-rate` mismatch on
rk3399-gru
ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node
arm64: dts: rockchip: make poweroff(8) work on Radxa ROCK 5A
arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E
arm64: dts: rockchip: Add sound-dai-cells for RK3368
cxl/region: Move cxl_dpa_to_region() work to the region driver
cxl/region: Avoid null pointer dereference in region lookup
cxl/region: check interleave capability
serial: imx: only set receiver level if it is zero
serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset()
pwm: stm32: Improve precision of calculation in .apply()
pwm: stm32: Fix for settings using period > UINT32_MAX
pwm: stm32: Calculate prescaler with a division instead of a loop
pwm: stm32: Refuse too small period requests
ASoC: cs42l43: Increase default type detect time and button delay
ASoC: amd: acp: move chip->flag variable assignment
bonding: fix incorrect software timestamping report
mlxsw: pci: Fix driver initialization with Spectrum-4
vxlan: Pull inner IP header in vxlan_xmit_one().
ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link
af_unix: Stop recv(MSG_PEEK) at consumed OOB skb.
af_unix: Don't stop recv(MSG_DONTWAIT) if consumed OOB skb is at the head.
af_unix: Don't stop recv() at consumed ex-OOB skb.
af_unix: Fix wrong ioctl(SIOCATMARK) when consumed OOB skb is at the head.
bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
bpf: Take return from set_memory_rox() into account with
bpf_jit_binary_lock_ro()
drm/xe: Fix potential integer overflow in page size calculation
drm/xe: Add a NULL check in xe_ttm_stolen_mgr_init
drm/amd/display: correct hostvm flag
drm/amd/display: Skip pipe if the pipe idx not set properly
bpf: Add a check for struct bpf_fib_lookup size
drm/xe/xe_devcoredump: Check NULL before assignments
iommu/arm-smmu-v3: Do not allow a SVA domain to be set on the wrong PASID
evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509
drm/xe: Check pat.ops before dumping PAT settings
nvmet: do not return 'reserved' for empty TSAS values
nvmet: make 'tsas' attribute idempotent for RDMA
iommu/amd: Fix GT feature enablement again
gpiolib: cdev: Ignore reconfiguration without direction
kasan: fix bad call to unpoison_slab_object
mm/memory: don't require head page for do_set_pmd()
SUNRPC: Fix backchannel reply, again
Revert "usb: gadget: u_ether: Re-attach netif device to mirror detachment"
Revert "usb: gadget: u_ether: Replace netif_stop_queue with netif_device_detach"
tty: serial: 8250: Fix port count mismatch with the device
tty: mxser: Remove __counted_by from mxser_board.ports[]
nvmet-fc: Remove __counted_by from nvmet_fc_tgt_queue.fod[]
ata: libata-core: Add ATA_HORKAGE_NOLPM for all Crucial BX SSD1 models
bcachefs: Fix sb_field_downgrade validation
bcachefs: Fix sb-downgrade validation
bcachefs: Fix bch2_sb_downgrade_update()
bcachefs: Fix setting of downgrade recovery passes/errors
bcachefs: btree_gc can now handle unknown btrees
pwm: stm32: Fix calculation of prescaler
pwm: stm32: Fix error message to not describe the previous error path
cxl/region: Convert cxl_pmem_region_alloc to scope-based resource management
cxl/mem: Fix no cxl_nvd during pmem region auto-assembling
arm64: dts: rockchip: Fix the i2c address of es8316 on Cool Pi 4B
netfs: Fix netfs_page_mkwrite() to check folio->mapping is valid
netfs: Fix netfs_page_mkwrite() to flush conflicting data, not wait
UBUNTU: Upstream stable to v6.6.37, v6.9.8
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Noble)
Importance: Medium
Assignee: Portia Stephens (portias)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Noble)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Noble)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Noble)
Status: New => In Progress
** Changed in: linux (Ubuntu Noble)
Assignee: (unassigned) => Portia Stephens (portias)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2024-08-09
+
+ Ported from the following upstream stable releases:
+ v6.6.37, v6.9.8
+
from git://git.kernel.org/
+
+ usb: typec: ucsi: Never send a lone connector change ack
+ usb: typec: ucsi: Ack also failed Get Error commands
+ Input: ili210x - fix ili251x_read_touch_data() return value
+ pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
+ pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins
+ pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins
+ pinctrl: rockchip: use dedicated pinctrl type for RK3328
+ pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set
+ MIPS: pci: lantiq: restore reset gpio polarity
+ ASoC: rockchip: i2s-tdm: Fix trcm mode by setting clock on right mclk
+ ASoC: mediatek: mt8183-da7219-max98357: Fix kcontrol name collision
+ ASoC: atmel: atmel-classd: Re-add dai_link->platform to fix card init
+ workqueue: Increase worker desc's length to 32
+ ASoC: q6apm-lpass-dai: close graph on prepare errors
+ bpf: Add missed var_off setting in set_sext32_default_val()
+ bpf: Add missed var_off setting in coerce_subreg_to_size_sx()
+ s390/pci: Add missing virt_to_phys() for directed DIBV
+ ASoC: amd: acp: add a null check for chip_pdev structure
+ ASoC: amd: acp: remove i2s configuration check in acp_i2s_probe()
+ ASoC: fsl-asoc-card: set priv->pdev before using it
+ net: dsa: microchip: fix initial port flush problem
+ openvswitch: get related ct labels from its master if it is not confirmed
+ mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems
+ bpf: Fix overrunning reservations in ringbuf
+ ibmvnic: Free any outstanding tx skbs during scrq reset
+ net: phy: micrel: add Microchip KSZ 9477 to the device table
+ net: dsa: microchip: use collision based back pressure mode
+ ice: Rebuild TC queues on VSI queue reconfiguration
+ xdp: Remove WARN() from __xdp_reg_mem_model()
+ netfilter: fix undefined reference to 'netfilter_lwtunnel_*' when
CONFIG_SYSCTL=n
+ btrfs: use NOFS context when getting inodes during logging and log replay
+ Fix race for duplicate reqsk on identical SYN
+ ALSA: seq: Fix missing channel at encoding RPN/NRPN MIDI2 messages
+ net: dsa: microchip: fix wrong register write when masking interrupt
+ sparc: fix old compat_sys_select()
+ sparc: fix compat recv/recvfrom syscalls
+ parisc: use correct compat recv/recvfrom syscalls
+ powerpc: restore some missing spu syscalls
+ tcp: fix tcp_rcv_fastopen_synack() to enter TCP_CA_Loss for failed TFO
+ ALSA: seq: Fix missing MSB in MIDI2 SPP conversion
+ netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
+ net: mana: Fix possible double free in error handling path
+ drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
+ vduse: validate block features only with block devices
+ vduse: Temporarily fail if control queue feature requested
+ x86/fpu: Fix AMD X86_BUG_FXSAVE_LEAK fixup
+ mtd: partitions: redboot: Added conversion of operands to a larger type
+ wifi: ieee80211: check for NULL in ieee80211_mle_size_ok()
+ bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
+ RDMA/restrack: Fix potential invalid address access
+ net/iucv: Avoid explicit cpumask var allocation on stack
+ net/dpaa2: Avoid explicit cpumask var allocation on stack
+ crypto: ecdh - explicitly zeroize private_key
+ ALSA: emux: improve patch ioctl data validation
+ media: dvbdev: Initialize sbuf
+ irqchip/loongson: Select GENERIC_IRQ_EFFECTIVE_AFF_MASK if SMP for
IRQ_LOONGARCH_CPU
+ soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message
+ gfs2: Fix NULL pointer dereference in gfs2_log_flush
+ drm/radeon/radeon_display: Decrease the size of allocated memory
+ nvme: fixup comment for nvme RDMA Provider Type
+ drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA
+ gpio: davinci: Validate the obtained number of IRQs
+ RISC-V: fix vector insn load/store width mask
+ drm/amdgpu: Fix pci state save during mode-1 reset
+ riscv: stacktrace: convert arch_stack_walk() to noinstr
+ gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1)
+ randomize_kstack: Remove non-functional per-arch entropy filtering
+ x86: stop playing stack games in profile_pc()
+ parisc: use generic sys_fanotify_mark implementation
+ Revert "MIPS: pci: lantiq: restore reset gpio polarity"
+ pinctrl: qcom: spmi-gpio: drop broken pm8008 support
+ ocfs2: fix DIO failure due to insufficient transaction credits
+ nfs: drop the incorrect assertion in nfs_swap_rw()
+ mm: fix incorrect vbq reference in purge_fragmented_block
+ mmc: sdhci-pci-o2micro: Convert PCIBIOS_* return codes to errnos
+ mmc: sdhci-brcmstb: check R1_STATUS for erase/trim/discard
+ mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos
+ mmc: sdhci: Do not invert write-protect twice
+ mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro()
+ iio: xilinx-ams: Don't include ams_ctrl_channels in scan_mask
+ counter: ti-eqep: enable clock at probe
+ kbuild: doc: Update default INSTALL_MOD_DIR from extra to updates
+ kbuild: Fix build target deb-pkg: ln: failed to create hard link
+ i2c: testunit: don't erase registers after STOP
+ i2c: testunit: discard write requests while old command is running
+ ata: libata-core: Fix null pointer dereference on error
+ ata,scsi: libata-core: Do not leak memory for ata_port struct members
+ iio: adc: ad7266: Fix variable checking bug
+ iio: accel: fxls8962af: select IIO_BUFFER & IIO_KFIFO_BUF
+ iio: chemical: bme680: Fix pressure value output
+ iio: chemical: bme680: Fix calibration data variable
+ iio: chemical: bme680: Fix overflows in compensate() functions
+ iio: chemical: bme680: Fix sensor data read operation
+ net: usb: ax88179_178a: improve link status logs
+ usb: gadget: printer: SS+ support
+ usb: gadget: printer: fix races against disable
+ usb: musb: da8xx: fix a resource leak in probe()
+ usb: atm: cxacru: fix endpoint checking in cxacru_bind()
+ usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to
avoid deadlock
+ usb: gadget: aspeed_udc: fix device address configuration
+ usb: typec: ucsi: glink: fix child node release in probe function
+ usb: ucsi: stm32: fix command completion handling
+ usb: dwc3: core: Add DWC31 version 2.00a controller
+ usb: dwc3: core: Workaround for CSR read timeout
+ Revert "serial: core: only stop transmit when HW fifo is empty"
+ serial: 8250_omap: Implementation of Errata i2310
+ serial: imx: set receiver level before starting uart
+ serial: core: introduce uart_port_tx_limited_flags()
+ serial: bcm63xx-uart: fix tx after conversion to uart_port_tx_limited()
+ tty: mcf: MCF54418 has 10 UARTS
+ net: can: j1939: Initialize unused data in j1939_send_one()
+ net: can: j1939: recover socket queue on CAN bus error during BAM transmission
+ net: can: j1939: enhanced error handling for tightly received RTS messages in
xtp_rx_rts_session_new
+ PCI/MSI: Fix UAF in msi_capability_init
+ cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing
+ irqchip/loongson-eiointc: Use early_cpu_to_node() instead of cpu_to_node()
+ cpu/hotplug: Fix dynstate assignment in __cpuhp_setup_state_cpuslocked()
+ irqchip/loongson-liointc: Set different ISRs for different cores
+ kbuild: Install dtb files as 0644 in Makefile.dtbinst
+ sh: rework sync_file_range ABI
+ btrfs: zoned: fix initial free space detection
+ csky, hexagon: fix broken sys_sync_file_range
+ hexagon: fix fadvise64_64 calling conventions
+ drm/drm_file: Fix pid refcounting race
+ drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
+ drm/fbdev-dma: Only set smem_start is enable per module option
+ drm/amdgpu: avoid using null object of framebuffer
+ drm/i915/gt: Fix potential UAF by revoke of fence registers
+ drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
+ drm/amd/display: Send DP_TOTAL_LTTPR_CNT during detection if LTTPR is present
+ drm/amdgpu/atomfirmware: fix parsing of vram_info
+ batman-adv: Don't accept TT entries for out-of-spec VIDs
+ can: mcp251xfd: fix infinite loop when xmit fails
+ ata: ahci: Clean up sysfs file on error
+ ata: libata-core: Fix double free on error
+ ftruncate: pass a signed offset
+ syscalls: fix compat_sys_io_pgetevents_time64 usage
+ syscalls: fix sys_fanotify_mark prototype
+ Revert "cpufreq: amd-pstate: Fix the inconsistency in max frequency units"
+ mm/page_alloc: Separate THP PCP into movable and non-movable categories
+ arm64: dts: rockchip: Fix SD NAND and eMMC init on rk3308-rock-pi-s
+ arm64: dts: rockchip: Rename LED related pinctrl nodes on rk3308-rock-pi-s
+ arm64: dts: rockchip: Fix the value of `dlg,jack-det-rate` mismatch on
rk3399-gru
+ ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node
+ arm64: dts: rockchip: make poweroff(8) work on Radxa ROCK 5A
+ arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E
+ arm64: dts: rockchip: Add sound-dai-cells for RK3368
+ cxl/region: Move cxl_dpa_to_region() work to the region driver
+ cxl/region: Avoid null pointer dereference in region lookup
+ cxl/region: check interleave capability
+ serial: imx: only set receiver level if it is zero
+ serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
+ tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset()
+ pwm: stm32: Improve precision of calculation in .apply()
+ pwm: stm32: Fix for settings using period > UINT32_MAX
+ pwm: stm32: Calculate prescaler with a division instead of a loop
+ pwm: stm32: Refuse too small period requests
+ ASoC: cs42l43: Increase default type detect time and button delay
+ ASoC: amd: acp: move chip->flag variable assignment
+ bonding: fix incorrect software timestamping report
+ mlxsw: pci: Fix driver initialization with Spectrum-4
+ vxlan: Pull inner IP header in vxlan_xmit_one().
+ ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link
+ af_unix: Stop recv(MSG_PEEK) at consumed OOB skb.
+ af_unix: Don't stop recv(MSG_DONTWAIT) if consumed OOB skb is at the head.
+ af_unix: Don't stop recv() at consumed ex-OOB skb.
+ af_unix: Fix wrong ioctl(SIOCATMARK) when consumed OOB skb is at the head.
+ bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
+ bpf: Take return from set_memory_rox() into account with
bpf_jit_binary_lock_ro()
+ drm/xe: Fix potential integer overflow in page size calculation
+ drm/xe: Add a NULL check in xe_ttm_stolen_mgr_init
+ drm/amd/display: correct hostvm flag
+ drm/amd/display: Skip pipe if the pipe idx not set properly
+ bpf: Add a check for struct bpf_fib_lookup size
+ drm/xe/xe_devcoredump: Check NULL before assignments
+ iommu/arm-smmu-v3: Do not allow a SVA domain to be set on the wrong PASID
+ evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509
+ drm/xe: Check pat.ops before dumping PAT settings
+ nvmet: do not return 'reserved' for empty TSAS values
+ nvmet: make 'tsas' attribute idempotent for RDMA
+ iommu/amd: Fix GT feature enablement again
+ gpiolib: cdev: Ignore reconfiguration without direction
+ kasan: fix bad call to unpoison_slab_object
+ mm/memory: don't require head page for do_set_pmd()
+ SUNRPC: Fix backchannel reply, again
+ Revert "usb: gadget: u_ether: Re-attach netif device to mirror detachment"
+ Revert "usb: gadget: u_ether: Replace netif_stop_queue with
netif_device_detach"
+ tty: serial: 8250: Fix port count mismatch with the device
+ tty: mxser: Remove __counted_by from mxser_board.ports[]
+ nvmet-fc: Remove __counted_by from nvmet_fc_tgt_queue.fod[]
+ ata: libata-core: Add ATA_HORKAGE_NOLPM for all Crucial BX SSD1 models
+ bcachefs: Fix sb_field_downgrade validation
+ bcachefs: Fix sb-downgrade validation
+ bcachefs: Fix bch2_sb_downgrade_update()
+ bcachefs: Fix setting of downgrade recovery passes/errors
+ bcachefs: btree_gc can now handle unknown btrees
+ pwm: stm32: Fix calculation of prescaler
+ pwm: stm32: Fix error message to not describe the previous error path
+ cxl/region: Convert cxl_pmem_region_alloc to scope-based resource management
+ cxl/mem: Fix no cxl_nvd during pmem region auto-assembling
+ arm64: dts: rockchip: Fix the i2c address of es8316 on Cool Pi 4B
+ netfs: Fix netfs_page_mkwrite() to check folio->mapping is valid
+ netfs: Fix netfs_page_mkwrite() to flush conflicting data, not wait
+ UBUNTU: Upstream stable to v6.6.37, v6.9.8
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2076435
Title:
Noble update: upstream stable patchset 2024-08-09
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Noble:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2024-08-09
Ported from the following upstream stable releases:
v6.6.37, v6.9.8
from git://git.kernel.org/
usb: typec: ucsi: Never send a lone connector change ack
usb: typec: ucsi: Ack also failed Get Error commands
Input: ili210x - fix ili251x_read_touch_data() return value
pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins
pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins
pinctrl: rockchip: use dedicated pinctrl type for RK3328
pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set
MIPS: pci: lantiq: restore reset gpio polarity
ASoC: rockchip: i2s-tdm: Fix trcm mode by setting clock on right mclk
ASoC: mediatek: mt8183-da7219-max98357: Fix kcontrol name collision
ASoC: atmel: atmel-classd: Re-add dai_link->platform to fix card init
workqueue: Increase worker desc's length to 32
ASoC: q6apm-lpass-dai: close graph on prepare errors
bpf: Add missed var_off setting in set_sext32_default_val()
bpf: Add missed var_off setting in coerce_subreg_to_size_sx()
s390/pci: Add missing virt_to_phys() for directed DIBV
ASoC: amd: acp: add a null check for chip_pdev structure
ASoC: amd: acp: remove i2s configuration check in acp_i2s_probe()
ASoC: fsl-asoc-card: set priv->pdev before using it
net: dsa: microchip: fix initial port flush problem
openvswitch: get related ct labels from its master if it is not confirmed
mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems
bpf: Fix overrunning reservations in ringbuf
ibmvnic: Free any outstanding tx skbs during scrq reset
net: phy: micrel: add Microchip KSZ 9477 to the device table
net: dsa: microchip: use collision based back pressure mode
ice: Rebuild TC queues on VSI queue reconfiguration
xdp: Remove WARN() from __xdp_reg_mem_model()
netfilter: fix undefined reference to 'netfilter_lwtunnel_*' when
CONFIG_SYSCTL=n
btrfs: use NOFS context when getting inodes during logging and log replay
Fix race for duplicate reqsk on identical SYN
ALSA: seq: Fix missing channel at encoding RPN/NRPN MIDI2 messages
net: dsa: microchip: fix wrong register write when masking interrupt
sparc: fix old compat_sys_select()
sparc: fix compat recv/recvfrom syscalls
parisc: use correct compat recv/recvfrom syscalls
powerpc: restore some missing spu syscalls
tcp: fix tcp_rcv_fastopen_synack() to enter TCP_CA_Loss for failed TFO
ALSA: seq: Fix missing MSB in MIDI2 SPP conversion
netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
net: mana: Fix possible double free in error handling path
drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
vduse: validate block features only with block devices
vduse: Temporarily fail if control queue feature requested
x86/fpu: Fix AMD X86_BUG_FXSAVE_LEAK fixup
mtd: partitions: redboot: Added conversion of operands to a larger type
wifi: ieee80211: check for NULL in ieee80211_mle_size_ok()
bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
RDMA/restrack: Fix potential invalid address access
net/iucv: Avoid explicit cpumask var allocation on stack
net/dpaa2: Avoid explicit cpumask var allocation on stack
crypto: ecdh - explicitly zeroize private_key
ALSA: emux: improve patch ioctl data validation
media: dvbdev: Initialize sbuf
irqchip/loongson: Select GENERIC_IRQ_EFFECTIVE_AFF_MASK if SMP for
IRQ_LOONGARCH_CPU
soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message
gfs2: Fix NULL pointer dereference in gfs2_log_flush
drm/radeon/radeon_display: Decrease the size of allocated memory
nvme: fixup comment for nvme RDMA Provider Type
drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA
gpio: davinci: Validate the obtained number of IRQs
RISC-V: fix vector insn load/store width mask
drm/amdgpu: Fix pci state save during mode-1 reset
riscv: stacktrace: convert arch_stack_walk() to noinstr
gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1)
randomize_kstack: Remove non-functional per-arch entropy filtering
x86: stop playing stack games in profile_pc()
parisc: use generic sys_fanotify_mark implementation
Revert "MIPS: pci: lantiq: restore reset gpio polarity"
pinctrl: qcom: spmi-gpio: drop broken pm8008 support
ocfs2: fix DIO failure due to insufficient transaction credits
nfs: drop the incorrect assertion in nfs_swap_rw()
mm: fix incorrect vbq reference in purge_fragmented_block
mmc: sdhci-pci-o2micro: Convert PCIBIOS_* return codes to errnos
mmc: sdhci-brcmstb: check R1_STATUS for erase/trim/discard
mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos
mmc: sdhci: Do not invert write-protect twice
mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro()
iio: xilinx-ams: Don't include ams_ctrl_channels in scan_mask
counter: ti-eqep: enable clock at probe
kbuild: doc: Update default INSTALL_MOD_DIR from extra to updates
kbuild: Fix build target deb-pkg: ln: failed to create hard link
i2c: testunit: don't erase registers after STOP
i2c: testunit: discard write requests while old command is running
ata: libata-core: Fix null pointer dereference on error
ata,scsi: libata-core: Do not leak memory for ata_port struct members
iio: adc: ad7266: Fix variable checking bug
iio: accel: fxls8962af: select IIO_BUFFER & IIO_KFIFO_BUF
iio: chemical: bme680: Fix pressure value output
iio: chemical: bme680: Fix calibration data variable
iio: chemical: bme680: Fix overflows in compensate() functions
iio: chemical: bme680: Fix sensor data read operation
net: usb: ax88179_178a: improve link status logs
usb: gadget: printer: SS+ support
usb: gadget: printer: fix races against disable
usb: musb: da8xx: fix a resource leak in probe()
usb: atm: cxacru: fix endpoint checking in cxacru_bind()
usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to
avoid deadlock
usb: gadget: aspeed_udc: fix device address configuration
usb: typec: ucsi: glink: fix child node release in probe function
usb: ucsi: stm32: fix command completion handling
usb: dwc3: core: Add DWC31 version 2.00a controller
usb: dwc3: core: Workaround for CSR read timeout
Revert "serial: core: only stop transmit when HW fifo is empty"
serial: 8250_omap: Implementation of Errata i2310
serial: imx: set receiver level before starting uart
serial: core: introduce uart_port_tx_limited_flags()
serial: bcm63xx-uart: fix tx after conversion to uart_port_tx_limited()
tty: mcf: MCF54418 has 10 UARTS
net: can: j1939: Initialize unused data in j1939_send_one()
net: can: j1939: recover socket queue on CAN bus error during BAM transmission
net: can: j1939: enhanced error handling for tightly received RTS messages in
xtp_rx_rts_session_new
PCI/MSI: Fix UAF in msi_capability_init
cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing
irqchip/loongson-eiointc: Use early_cpu_to_node() instead of cpu_to_node()
cpu/hotplug: Fix dynstate assignment in __cpuhp_setup_state_cpuslocked()
irqchip/loongson-liointc: Set different ISRs for different cores
kbuild: Install dtb files as 0644 in Makefile.dtbinst
sh: rework sync_file_range ABI
btrfs: zoned: fix initial free space detection
csky, hexagon: fix broken sys_sync_file_range
hexagon: fix fadvise64_64 calling conventions
drm/drm_file: Fix pid refcounting race
drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
drm/fbdev-dma: Only set smem_start is enable per module option
drm/amdgpu: avoid using null object of framebuffer
drm/i915/gt: Fix potential UAF by revoke of fence registers
drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
drm/amd/display: Send DP_TOTAL_LTTPR_CNT during detection if LTTPR is present
drm/amdgpu/atomfirmware: fix parsing of vram_info
batman-adv: Don't accept TT entries for out-of-spec VIDs
can: mcp251xfd: fix infinite loop when xmit fails
ata: ahci: Clean up sysfs file on error
ata: libata-core: Fix double free on error
ftruncate: pass a signed offset
syscalls: fix compat_sys_io_pgetevents_time64 usage
syscalls: fix sys_fanotify_mark prototype
Revert "cpufreq: amd-pstate: Fix the inconsistency in max frequency units"
mm/page_alloc: Separate THP PCP into movable and non-movable categories
arm64: dts: rockchip: Fix SD NAND and eMMC init on rk3308-rock-pi-s
arm64: dts: rockchip: Rename LED related pinctrl nodes on rk3308-rock-pi-s
arm64: dts: rockchip: Fix the value of `dlg,jack-det-rate` mismatch on
rk3399-gru
ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node
arm64: dts: rockchip: make poweroff(8) work on Radxa ROCK 5A
arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E
arm64: dts: rockchip: Add sound-dai-cells for RK3368
cxl/region: Move cxl_dpa_to_region() work to the region driver
cxl/region: Avoid null pointer dereference in region lookup
cxl/region: check interleave capability
serial: imx: only set receiver level if it is zero
serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset()
pwm: stm32: Improve precision of calculation in .apply()
pwm: stm32: Fix for settings using period > UINT32_MAX
pwm: stm32: Calculate prescaler with a division instead of a loop
pwm: stm32: Refuse too small period requests
ASoC: cs42l43: Increase default type detect time and button delay
ASoC: amd: acp: move chip->flag variable assignment
bonding: fix incorrect software timestamping report
mlxsw: pci: Fix driver initialization with Spectrum-4
vxlan: Pull inner IP header in vxlan_xmit_one().
ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link
af_unix: Stop recv(MSG_PEEK) at consumed OOB skb.
af_unix: Don't stop recv(MSG_DONTWAIT) if consumed OOB skb is at the head.
af_unix: Don't stop recv() at consumed ex-OOB skb.
af_unix: Fix wrong ioctl(SIOCATMARK) when consumed OOB skb is at the head.
bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
bpf: Take return from set_memory_rox() into account with
bpf_jit_binary_lock_ro()
drm/xe: Fix potential integer overflow in page size calculation
drm/xe: Add a NULL check in xe_ttm_stolen_mgr_init
drm/amd/display: correct hostvm flag
drm/amd/display: Skip pipe if the pipe idx not set properly
bpf: Add a check for struct bpf_fib_lookup size
drm/xe/xe_devcoredump: Check NULL before assignments
iommu/arm-smmu-v3: Do not allow a SVA domain to be set on the wrong PASID
evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509
drm/xe: Check pat.ops before dumping PAT settings
nvmet: do not return 'reserved' for empty TSAS values
nvmet: make 'tsas' attribute idempotent for RDMA
iommu/amd: Fix GT feature enablement again
gpiolib: cdev: Ignore reconfiguration without direction
kasan: fix bad call to unpoison_slab_object
mm/memory: don't require head page for do_set_pmd()
SUNRPC: Fix backchannel reply, again
Revert "usb: gadget: u_ether: Re-attach netif device to mirror detachment"
Revert "usb: gadget: u_ether: Replace netif_stop_queue with
netif_device_detach"
tty: serial: 8250: Fix port count mismatch with the device
tty: mxser: Remove __counted_by from mxser_board.ports[]
nvmet-fc: Remove __counted_by from nvmet_fc_tgt_queue.fod[]
ata: libata-core: Add ATA_HORKAGE_NOLPM for all Crucial BX SSD1 models
bcachefs: Fix sb_field_downgrade validation
bcachefs: Fix sb-downgrade validation
bcachefs: Fix bch2_sb_downgrade_update()
bcachefs: Fix setting of downgrade recovery passes/errors
bcachefs: btree_gc can now handle unknown btrees
pwm: stm32: Fix calculation of prescaler
pwm: stm32: Fix error message to not describe the previous error path
cxl/region: Convert cxl_pmem_region_alloc to scope-based resource management
cxl/mem: Fix no cxl_nvd during pmem region auto-assembling
arm64: dts: rockchip: Fix the i2c address of es8316 on Cool Pi 4B
netfs: Fix netfs_page_mkwrite() to check folio->mapping is valid
netfs: Fix netfs_page_mkwrite() to flush conflicting data, not wait
UBUNTU: Upstream stable to v6.6.37, v6.9.8
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2076435/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
