Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2024-10-04 Ported from the following upstream stable releases: v6.6.46, v6.10.5 from git://git.kernel.org/ irqchip/mbigen: Fix mbigen node address layout platform/x86/intel/ifs: Initialize union ifs_status to zero jump_label: Fix the fix, brown paper bags galore x86/mm: Fix pti_clone_pgtable() alignment assumption x86/mm: Fix pti_clone_entry_text() for i386 smb: client: move most of reparse point handling code to common file smb: client: set correct d_type for reparse DFS/DFSR and mount point smb: client: handle lack of FSCTL_GET_REPARSE_POINT support sctp: Fix null-ptr-deref in reuseport_add_sock(). net: usb: qmi_wwan: fix memory leak for not ip packets net: bridge: mcast: wait for previous gc cycles when removing port net: linkwatch: use system_unbound_wq ice: Fix reset handler Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() Bluetooth: hci_sync: avoid dup filtering when passive scanning with adv monitor net/smc: add the max value of fallback reason count net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() l2tp: fix lockdep splat net: bcmgenet: Properly overlay PHY and MAC Wake-on-LAN capabilities net: fec: Stop PPS on driver remove gpio: prevent potential speculation leaks in gpio_device_get_desc() hwmon: corsair-psu: add USB id of HX1200i Series 2023 psu rcutorture: Fix rcu_torture_fwd_cb_cr() data race md: do not delete safemode_timer in mddev_suspend md/raid5: avoid BUG_ON() while continue reshape after reassembling block: change rq_integrity_vec to respect the iterator rcu: Fix rcu_barrier() VS post CPUHP_TEARDOWN_CPU invocation clocksource/drivers/sh_cmt: Address race condition for clock events ACPI: battery: create alarm sysfs attribute atomically ACPI: SBS: manage alarm sysfs attribute through psy core xen: privcmd: Switch from mutex to spinlock for irqfds wifi: nl80211: disallow setting special AP channel widths wifi: ath12k: fix memory leak in ath12k_dp_rx_peer_frag_setup() net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT af_unix: Don't retry after unix_state_lock_nested() in unix_stream_connect(). PCI: Add Edimax Vendor ID to pci_ids.h udf: prevent integer overflow in udf_bitmap_free_blocks() wifi: nl80211: don't give key data to userspace can: mcp251xfd: tef: prepare to workaround broken TEF FIFO tail index erratum can: mcp251xfd: tef: update workaround for erratum DS80000789E 6 of mcp2518fd net: stmmac: qcom-ethqos: enable SGMII loopback during DMA reset on sa8775p-ride-r3 btrfs: do not clear page dirty inside extent_write_locked_range() btrfs: fix invalid mapping of extent xarray state btrfs: fix bitmap leak when loading free space cache on duplicate entry Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver unloading drm/amd/display: Add delay to improve LTTPR UHBR interop drm/amdgpu: fix potential resource leak warning drm/amdgpu/pm: Fix the param type of set_power_profile_mode drm/amdgpu/pm: Fix the null pointer dereference for smu7 drm/amdgpu: Fix the null pointer dereference to ras_manager drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules drm/admgpu: fix dereferencing null pointer context drm/amdgpu: Add lock around VF RLCG interface drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr media: amphion: Remove lock in s_ctrl callback drm/amd/display: Add null checker before passing variables media: uvcvideo: Ignore empty TS packets media: uvcvideo: Fix the bandwdith quirk on USB 3.x media: xc2028: avoid use-after-free in load_firmware_cb() ext4: fix uninitialized variable in ext4_inlinedir_to_tree jbd2: avoid memleak in jbd2_journal_write_metadata_buffer s390/sclp: Prevent release of buffer in I/O SUNRPC: Fix a race to wake a sync task profiling: remove profile=sleep support scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t' irqchip/loongarch-cpu: Fix return value of lpic_gsi_to_irq() sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime net: drop bad gso csum_start and offset in virtio_net_hdr arm64: Add Neoverse-V2 part arm64: barrier: Restore spec_bar() macro arm64: cputype: Add Cortex-X4 definitions arm64: cputype: Add Neoverse-V3 definitions arm64: errata: Add workaround for Arm errata 3194386 and 3312417 arm64: cputype: Add Cortex-X3 definitions arm64: cputype: Add Cortex-A720 definitions arm64: cputype: Add Cortex-X925 definitions arm64: errata: Unify speculative SSBS errata logic UBUNTU: [Config] Set ARM64_ERRATUM_3194386=y arm64: errata: Expand speculative SSBS workaround arm64: cputype: Add Cortex-X1C definitions arm64: cputype: Add Cortex-A725 definitions arm64: errata: Expand speculative SSBS workaround (again) i2c: smbus: Improve handling of stuck alerts ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask ASoC: codecs: wsa881x: Correct Soundwire ports mask ASoC: codecs: wsa883x: parse port-mapping information ASoC: codecs: wsa883x: Correct Soundwire ports mask ASoC: codecs: wsa884x: parse port-mapping information ASoC: codecs: wsa884x: Correct Soundwire ports mask ASoC: sti: add missing probe entry for player and reader spi: spidev: Add missing spi_device_id for bh2228fv ASoC: SOF: Remove libraries from topology lookups i2c: smbus: Send alert notifications to all devices if source not found bpf: kprobe: remove unused declaring of bpf_kprobe_override kprobes: Fix to check symbol prefixes correctly i2c: qcom-geni: Add missing clk_disable_unprepare in geni_i2c_runtime_resume i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume spi: spi-fsl-lpspi: Fix scldiv calculation ALSA: usb-audio: Re-add ScratchAmp quirk entries ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT cifs: cifs_inval_name_dfs_link_error: correct the check for fullpath module: warn about excessively long module waits module: make waiting for a concurrent module loader interruptible drm/i915/gem: Fix Virtual Memory mapping boundaries calculation drm/amd/display: Skip Recompute DSC Params if no Stream on Link drm/amdgpu: Forward soft recovery errors to userspace drm/i915/gem: Adjust vma offset for framebuffer mmap offset drm/client: fix null pointer dereference in drm_client_modeset_probe ALSA: line6: Fix racy access to midibuf ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 usb: vhci-hcd: Do not drop references before new references are gained USB: serial: debug: do not echo input by default usb: gadget: core: Check for unset descriptor usb: gadget: midi2: Fix the response for FB info with block 0xff usb: gadget: u_serial: Set start_delayed during suspend usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES scsi: ufs: core: Do not set link to OFF state while waking up from hibernation scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic tick/broadcast: Move per CPU pointer access into the atomic section vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler ntp: Clamp maxerror and esterror to operating range clocksource: Scale the watchdog read retries automatically clocksource: Fix brown-bag boolean thinko in cs_watchdog_read() driver core: Fix uevent_show() vs driver detach race tracefs: Fix inode allocation tracefs: Use generic inode RCU for synchronizing freeing ntp: Safeguard against time_constant overflow timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() serial: core: check uartclk for zero to avoid divide by zero memcg: protect concurrent access to mem_cgroup_idr parisc: fix unaligned accesses in BPF parisc: fix a possible DMA corruption ASoC: amd: yc: Add quirk entry for OMEN by HP Gaming Laptop 16-n0xxx kcov: properly check for softirq context irqchip/xilinx: Fix shift out of bounds genirq/irqdesc: Honor caller provided affinity in alloc_desc() LoongArch: Enable general EFI poweroff method power: supply: qcom_battmgr: return EAGAIN when firmware service is not up power: supply: axp288_charger: Fix constant_charge_voltage writes power: supply: axp288_charger: Round constant_charge_voltage writes down tracing: Fix overflow in get_free_elt() padata: Fix possible divide-by-0 panic in padata_mt_helper() smb3: fix setting SecurityFlags when encryption is required eventfs: Don't return NULL in eventfs_create_dir() eventfs: Use SRCU for freeing eventfs_inodes selftests: mm: add s390 to ARCH check btrfs: avoid using fixed char array size for tree names x86/paravirt: Fix incorrect virt spinlock setting on bare metal x86/mtrr: Check if fixed MTRRs exist before saving them sched/smt: Introduce sched_smt_present_inc/dec() helper sched/smt: Fix unbalance sched_smt_present dec/inc sched/core: Introduce sched_set_rq_on/offline() helper sched/core: Fix unbalance set_rq_online/offline() in sched_cpu_deactivate() drm/bridge: analogix_dp: properly handle zero sized AUX transactions drm/dp_mst: Skip CSN if topology probing is not done yet drm/lima: Mark simple_ondemand governor as softdep drm/mgag200: Set DDC timeout in milliseconds drm/mgag200: Bind I2C lifetime to DRM device drm/radeon: Remove __counted_by from StateArray.states[] mptcp: fully established after ADD_ADDR echo on MPJ mptcp: pm: deny endp with signal + subflow + port block: use the right type for stub rq_integrity_vec() btrfs: fix corruption after buffer fault in during direct IO append write tools headers arm64: Sync arm64's cputype.h with the kernel sources mm/hugetlb: fix potential race in __update_and_free_hugetlb_folio() xfs: fix log recovery buffer allocation for the legacy h_size fixup mptcp: pm: reduce indentation blocks mptcp: pm: don't try to create sf if alloc failed mptcp: pm: do not ignore 'subflow' if 'signal' flag is also set selftests: mptcp: join: ability to invert ADD_ADDR check selftests: mptcp: join: test both signal & subflow Revert "selftests: mptcp: simult flows: mark 'unbalanced' tests as flaky" btrfs: fix double inode unlock for direct IO sync writes perf/x86/intel/cstate: Switch to new Intel CPU model defines perf/x86/intel/cstate: Add Arrowlake support perf/x86/intel/cstate: Add Lunarlake support perf/x86/intel/cstate: Add pkg C2 residency counter for Sierra Forest platform/x86: intel-vbtn: Protect ACPI notify handler against recursion perf/x86/amd: Use try_cmpxchg() in events/amd/{un,}core.c perf/x86/intel: Support the PEBS event mask perf/x86: Support counter mask perf/x86: Fix smp_processor_id()-in-preemptible warnings virtio-net: unbreak vq resizing when coalescing is not negotiated net: dsa: microchip: Fix Wake-on-LAN check to not return an error net: dsa: microchip: disable EEE for KSZ8567/KSZ9567/KSZ9896/KSZ9897. regmap: kunit: Use a KUnit action to call regmap_exit() regmap: kunit: Replace a kmalloc/kfree() pair with KUnit-managed alloc regmap: kunit: Fix memory leaks in gen_regmap() and gen_raw_regmap() debugobjects: Annotate racy debug variables nvme: apple: fix device reference counting cpufreq: amd-pstate: Allow users to write 'default' EPP string cpufreq: amd-pstate: auto-load pstate driver by default soc: qcom: icc-bwmon: Allow for interrupts to be shared across instances ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MU ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MJ thermal: intel: hfi: Give HFI instances package scope wifi: ath12k: fix race due to setting ATH12K_FLAG_EXT_IRQ_ENABLED too early wifi: rtlwifi: handle return value of usb init TX/RX wifi: rtw89: pci: fix RX tag race condition resulting in wrong RX length wifi: mac80211: fix NULL dereference at band check in starting tx ba session bpf: add missing check_func_arg_reg_off() to prevent out-of-bounds memory accesses mlxsw: pci: Lock configuration space of upstream bridge during reset btrfs: do not BUG_ON() when freeing tree block after error btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info() btrfs: fix data race when accessing the last_trans field of a root drm/xe/preempt_fence: enlarge the fence critical section drm/amd/display: Handle HPD_IRQ for internal link drm/amd/amdkfd: Fix a resource leak in svm_range_validate_and_map() drm/xe/xe_guc_submit: Fix exec queue stop race condition drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing drm/amd/display: Wake DMCUB before sending a command for replay feature drm/amd/display: reduce ODM slice count to initial new dc state only when needed of: Add cleanup.h based auto release via __free(device_node) markings media: i2c: ov5647: replacing of_node_put with __free(device_node) drm/amd/display: Fix null pointer deref in dcn20_resource.c ext4: sanity check for NULL pointer after ext4_force_shutdown mm, slub: do not call do_slab_free for kfence object ASoC: cs35l56: Revert support for dual-ownership of ASP registers drm/atomic: allow no-op FB_ID updates for async flips drm/amd/display: Replace dm_execute_dmub_cmd with dc_wake_and_execute_dmub_cmd drm/xe/rtp: Fix off-by-one when processing rules drm/xe: Use dma_fence_chain_free in chain fence unused as a sync drm/xe/hwmon: Fix PL1 disable flow in xe_hwmon_power_max_write drm/xe: Move lrc snapshot capturing to xe_lrc.c drm/xe: Minor cleanup in LRC handling drm/test: fix the gem shmem test to map the sg table. usb: typec: pd: no opencoding of FIELD_GET usb: typec: fsa4480: Check if the chip is really there PM: runtime: Simplify pm_runtime_get_if_active() usage scsi: ufs: core: Fix deadlock during RTC update serial: sc16is7xx: fix invalid FIFO access with special register set tracing: Have format file honor EVENT_FILE_FL_FREED mm: list_lru: fix UAF for memory cgroup net/tcp: Disable TCP-AO static key after RCU grace period Revert "drm/amd/display: Handle HPD_IRQ for internal link" idpf: fix memleak in vport interrupt configuration drm/amd/display: Add null check in resource_log_pipe_topology_update UBUNTU: Upstream stable to v6.6.46, v6.10.5 ** Affects: linux (Ubuntu) Importance: Undecided Status: Invalid ** Affects: linux (Ubuntu Noble) Importance: Medium Assignee: Koichiro Den (koichiroden) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Noble) Importance: Undecided Status: New ** Changed in: linux (Ubuntu) Status: Confirmed => Invalid ** Changed in: linux (Ubuntu Noble) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Noble) Status: New => In Progress ** Changed in: linux (Ubuntu Noble) Assignee: (unassigned) => Koichiro Den (koichiroden) ** Description changed: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2024-10-04 + + Ported from the following upstream stable releases: + v6.6.46, v6.10.5 + from git://git.kernel.org/ + + irqchip/mbigen: Fix mbigen node address layout + platform/x86/intel/ifs: Initialize union ifs_status to zero + jump_label: Fix the fix, brown paper bags galore + x86/mm: Fix pti_clone_pgtable() alignment assumption + x86/mm: Fix pti_clone_entry_text() for i386 + smb: client: move most of reparse point handling code to common file + smb: client: set correct d_type for reparse DFS/DFSR and mount point + smb: client: handle lack of FSCTL_GET_REPARSE_POINT support + sctp: Fix null-ptr-deref in reuseport_add_sock(). + net: usb: qmi_wwan: fix memory leak for not ip packets + net: bridge: mcast: wait for previous gc cycles when removing port + net: linkwatch: use system_unbound_wq + ice: Fix reset handler + Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() + Bluetooth: hci_sync: avoid dup filtering when passive scanning with adv monitor + net/smc: add the max value of fallback reason count + net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() + l2tp: fix lockdep splat + net: bcmgenet: Properly overlay PHY and MAC Wake-on-LAN capabilities + net: fec: Stop PPS on driver remove + gpio: prevent potential speculation leaks in gpio_device_get_desc() + hwmon: corsair-psu: add USB id of HX1200i Series 2023 psu + rcutorture: Fix rcu_torture_fwd_cb_cr() data race + md: do not delete safemode_timer in mddev_suspend + md/raid5: avoid BUG_ON() while continue reshape after reassembling + block: change rq_integrity_vec to respect the iterator + rcu: Fix rcu_barrier() VS post CPUHP_TEARDOWN_CPU invocation + clocksource/drivers/sh_cmt: Address race condition for clock events + ACPI: battery: create alarm sysfs attribute atomically + ACPI: SBS: manage alarm sysfs attribute through psy core + xen: privcmd: Switch from mutex to spinlock for irqfds + wifi: nl80211: disallow setting special AP channel widths + wifi: ath12k: fix memory leak in ath12k_dp_rx_peer_frag_setup() + net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink + selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT + af_unix: Don't retry after unix_state_lock_nested() in unix_stream_connect(). + PCI: Add Edimax Vendor ID to pci_ids.h + udf: prevent integer overflow in udf_bitmap_free_blocks() + wifi: nl80211: don't give key data to userspace + can: mcp251xfd: tef: prepare to workaround broken TEF FIFO tail index erratum + can: mcp251xfd: tef: update workaround for erratum DS80000789E 6 of mcp2518fd + net: stmmac: qcom-ethqos: enable SGMII loopback during DMA reset on sa8775p-ride-r3 + btrfs: do not clear page dirty inside extent_write_locked_range() + btrfs: fix invalid mapping of extent xarray state + btrfs: fix bitmap leak when loading free space cache on duplicate entry + Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver unloading + drm/amd/display: Add delay to improve LTTPR UHBR interop + drm/amdgpu: fix potential resource leak warning + drm/amdgpu/pm: Fix the param type of set_power_profile_mode + drm/amdgpu/pm: Fix the null pointer dereference for smu7 + drm/amdgpu: Fix the null pointer dereference to ras_manager + drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules + drm/admgpu: fix dereferencing null pointer context + drm/amdgpu: Add lock around VF RLCG interface + drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr + media: amphion: Remove lock in s_ctrl callback + drm/amd/display: Add null checker before passing variables + media: uvcvideo: Ignore empty TS packets + media: uvcvideo: Fix the bandwdith quirk on USB 3.x + media: xc2028: avoid use-after-free in load_firmware_cb() + ext4: fix uninitialized variable in ext4_inlinedir_to_tree + jbd2: avoid memleak in jbd2_journal_write_metadata_buffer + s390/sclp: Prevent release of buffer in I/O + SUNRPC: Fix a race to wake a sync task + profiling: remove profile=sleep support + scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES + irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t' + irqchip/loongarch-cpu: Fix return value of lpic_gsi_to_irq() + sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime + net: drop bad gso csum_start and offset in virtio_net_hdr + arm64: Add Neoverse-V2 part + arm64: barrier: Restore spec_bar() macro + arm64: cputype: Add Cortex-X4 definitions + arm64: cputype: Add Neoverse-V3 definitions + arm64: errata: Add workaround for Arm errata 3194386 and 3312417 + arm64: cputype: Add Cortex-X3 definitions + arm64: cputype: Add Cortex-A720 definitions + arm64: cputype: Add Cortex-X925 definitions + arm64: errata: Unify speculative SSBS errata logic + UBUNTU: [Config] Set ARM64_ERRATUM_3194386=y + arm64: errata: Expand speculative SSBS workaround + arm64: cputype: Add Cortex-X1C definitions + arm64: cputype: Add Cortex-A725 definitions + arm64: errata: Expand speculative SSBS workaround (again) + i2c: smbus: Improve handling of stuck alerts + ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask + ASoC: codecs: wsa881x: Correct Soundwire ports mask + ASoC: codecs: wsa883x: parse port-mapping information + ASoC: codecs: wsa883x: Correct Soundwire ports mask + ASoC: codecs: wsa884x: parse port-mapping information + ASoC: codecs: wsa884x: Correct Soundwire ports mask + ASoC: sti: add missing probe entry for player and reader + spi: spidev: Add missing spi_device_id for bh2228fv + ASoC: SOF: Remove libraries from topology lookups + i2c: smbus: Send alert notifications to all devices if source not found + bpf: kprobe: remove unused declaring of bpf_kprobe_override + kprobes: Fix to check symbol prefixes correctly + i2c: qcom-geni: Add missing clk_disable_unprepare in geni_i2c_runtime_resume + i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume + spi: spi-fsl-lpspi: Fix scldiv calculation + ALSA: usb-audio: Re-add ScratchAmp quirk entries + ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT + cifs: cifs_inval_name_dfs_link_error: correct the check for fullpath + module: warn about excessively long module waits + module: make waiting for a concurrent module loader interruptible + drm/i915/gem: Fix Virtual Memory mapping boundaries calculation + drm/amd/display: Skip Recompute DSC Params if no Stream on Link + drm/amdgpu: Forward soft recovery errors to userspace + drm/i915/gem: Adjust vma offset for framebuffer mmap offset + drm/client: fix null pointer dereference in drm_client_modeset_probe + ALSA: line6: Fix racy access to midibuf + ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list + ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks + ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 + usb: vhci-hcd: Do not drop references before new references are gained + USB: serial: debug: do not echo input by default + usb: gadget: core: Check for unset descriptor + usb: gadget: midi2: Fix the response for FB info with block 0xff + usb: gadget: u_serial: Set start_delayed during suspend + usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. + scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES + scsi: ufs: core: Do not set link to OFF state while waking up from hibernation + scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic + tick/broadcast: Move per CPU pointer access into the atomic section + vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler + ntp: Clamp maxerror and esterror to operating range + clocksource: Scale the watchdog read retries automatically + clocksource: Fix brown-bag boolean thinko in cs_watchdog_read() + driver core: Fix uevent_show() vs driver detach race + tracefs: Fix inode allocation + tracefs: Use generic inode RCU for synchronizing freeing + ntp: Safeguard against time_constant overflow + timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() + serial: core: check uartclk for zero to avoid divide by zero + memcg: protect concurrent access to mem_cgroup_idr + parisc: fix unaligned accesses in BPF + parisc: fix a possible DMA corruption + ASoC: amd: yc: Add quirk entry for OMEN by HP Gaming Laptop 16-n0xxx + kcov: properly check for softirq context + irqchip/xilinx: Fix shift out of bounds + genirq/irqdesc: Honor caller provided affinity in alloc_desc() + LoongArch: Enable general EFI poweroff method + power: supply: qcom_battmgr: return EAGAIN when firmware service is not up + power: supply: axp288_charger: Fix constant_charge_voltage writes + power: supply: axp288_charger: Round constant_charge_voltage writes down + tracing: Fix overflow in get_free_elt() + padata: Fix possible divide-by-0 panic in padata_mt_helper() + smb3: fix setting SecurityFlags when encryption is required + eventfs: Don't return NULL in eventfs_create_dir() + eventfs: Use SRCU for freeing eventfs_inodes + selftests: mm: add s390 to ARCH check + btrfs: avoid using fixed char array size for tree names + x86/paravirt: Fix incorrect virt spinlock setting on bare metal + x86/mtrr: Check if fixed MTRRs exist before saving them + sched/smt: Introduce sched_smt_present_inc/dec() helper + sched/smt: Fix unbalance sched_smt_present dec/inc + sched/core: Introduce sched_set_rq_on/offline() helper + sched/core: Fix unbalance set_rq_online/offline() in sched_cpu_deactivate() + drm/bridge: analogix_dp: properly handle zero sized AUX transactions + drm/dp_mst: Skip CSN if topology probing is not done yet + drm/lima: Mark simple_ondemand governor as softdep + drm/mgag200: Set DDC timeout in milliseconds + drm/mgag200: Bind I2C lifetime to DRM device + drm/radeon: Remove __counted_by from StateArray.states[] + mptcp: fully established after ADD_ADDR echo on MPJ + mptcp: pm: deny endp with signal + subflow + port + block: use the right type for stub rq_integrity_vec() + btrfs: fix corruption after buffer fault in during direct IO append write + tools headers arm64: Sync arm64's cputype.h with the kernel sources + mm/hugetlb: fix potential race in __update_and_free_hugetlb_folio() + xfs: fix log recovery buffer allocation for the legacy h_size fixup + mptcp: pm: reduce indentation blocks + mptcp: pm: don't try to create sf if alloc failed + mptcp: pm: do not ignore 'subflow' if 'signal' flag is also set + selftests: mptcp: join: ability to invert ADD_ADDR check + selftests: mptcp: join: test both signal & subflow + Revert "selftests: mptcp: simult flows: mark 'unbalanced' tests as flaky" + btrfs: fix double inode unlock for direct IO sync writes + perf/x86/intel/cstate: Switch to new Intel CPU model defines + perf/x86/intel/cstate: Add Arrowlake support + perf/x86/intel/cstate: Add Lunarlake support + perf/x86/intel/cstate: Add pkg C2 residency counter for Sierra Forest + platform/x86: intel-vbtn: Protect ACPI notify handler against recursion + perf/x86/amd: Use try_cmpxchg() in events/amd/{un,}core.c + perf/x86/intel: Support the PEBS event mask + perf/x86: Support counter mask + perf/x86: Fix smp_processor_id()-in-preemptible warnings + virtio-net: unbreak vq resizing when coalescing is not negotiated + net: dsa: microchip: Fix Wake-on-LAN check to not return an error + net: dsa: microchip: disable EEE for KSZ8567/KSZ9567/KSZ9896/KSZ9897. + regmap: kunit: Use a KUnit action to call regmap_exit() + regmap: kunit: Replace a kmalloc/kfree() pair with KUnit-managed alloc + regmap: kunit: Fix memory leaks in gen_regmap() and gen_raw_regmap() + debugobjects: Annotate racy debug variables + nvme: apple: fix device reference counting + cpufreq: amd-pstate: Allow users to write 'default' EPP string + cpufreq: amd-pstate: auto-load pstate driver by default + soc: qcom: icc-bwmon: Allow for interrupts to be shared across instances + ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MU + ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MJ + thermal: intel: hfi: Give HFI instances package scope + wifi: ath12k: fix race due to setting ATH12K_FLAG_EXT_IRQ_ENABLED too early + wifi: rtlwifi: handle return value of usb init TX/RX + wifi: rtw89: pci: fix RX tag race condition resulting in wrong RX length + wifi: mac80211: fix NULL dereference at band check in starting tx ba session + bpf: add missing check_func_arg_reg_off() to prevent out-of-bounds memory accesses + mlxsw: pci: Lock configuration space of upstream bridge during reset + btrfs: do not BUG_ON() when freeing tree block after error + btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info() + btrfs: fix data race when accessing the last_trans field of a root + drm/xe/preempt_fence: enlarge the fence critical section + drm/amd/display: Handle HPD_IRQ for internal link + drm/amd/amdkfd: Fix a resource leak in svm_range_validate_and_map() + drm/xe/xe_guc_submit: Fix exec queue stop race condition + drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing + drm/amd/display: Wake DMCUB before sending a command for replay feature + drm/amd/display: reduce ODM slice count to initial new dc state only when needed + of: Add cleanup.h based auto release via __free(device_node) markings + media: i2c: ov5647: replacing of_node_put with __free(device_node) + drm/amd/display: Fix null pointer deref in dcn20_resource.c + ext4: sanity check for NULL pointer after ext4_force_shutdown + mm, slub: do not call do_slab_free for kfence object + ASoC: cs35l56: Revert support for dual-ownership of ASP registers + drm/atomic: allow no-op FB_ID updates for async flips + drm/amd/display: Replace dm_execute_dmub_cmd with dc_wake_and_execute_dmub_cmd + drm/xe/rtp: Fix off-by-one when processing rules + drm/xe: Use dma_fence_chain_free in chain fence unused as a sync + drm/xe/hwmon: Fix PL1 disable flow in xe_hwmon_power_max_write + drm/xe: Move lrc snapshot capturing to xe_lrc.c + drm/xe: Minor cleanup in LRC handling + drm/test: fix the gem shmem test to map the sg table. + usb: typec: pd: no opencoding of FIELD_GET + usb: typec: fsa4480: Check if the chip is really there + PM: runtime: Simplify pm_runtime_get_if_active() usage + scsi: ufs: core: Fix deadlock during RTC update + serial: sc16is7xx: fix invalid FIFO access with special register set + tracing: Have format file honor EVENT_FILE_FL_FREED + mm: list_lru: fix UAF for memory cgroup + net/tcp: Disable TCP-AO static key after RCU grace period + Revert "drm/amd/display: Handle HPD_IRQ for internal link" + idpf: fix memleak in vport interrupt configuration + drm/amd/display: Add null check in resource_log_pipe_topology_update + UBUNTU: Upstream stable to v6.6.46, v6.10.5 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2083656 Title: Noble update: upstream stable patchset 2024-10-04 Status in linux package in Ubuntu: Invalid Status in linux source package in Noble: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2024-10-04 Ported from the following upstream stable releases: v6.6.46, v6.10.5 from git://git.kernel.org/ irqchip/mbigen: Fix mbigen node address layout platform/x86/intel/ifs: Initialize union ifs_status to zero jump_label: Fix the fix, brown paper bags galore x86/mm: Fix pti_clone_pgtable() alignment assumption x86/mm: Fix pti_clone_entry_text() for i386 smb: client: move most of reparse point handling code to common file smb: client: set correct d_type for reparse DFS/DFSR and mount point smb: client: handle lack of FSCTL_GET_REPARSE_POINT support sctp: Fix null-ptr-deref in reuseport_add_sock(). net: usb: qmi_wwan: fix memory leak for not ip packets net: bridge: mcast: wait for previous gc cycles when removing port net: linkwatch: use system_unbound_wq ice: Fix reset handler Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() Bluetooth: hci_sync: avoid dup filtering when passive scanning with adv monitor net/smc: add the max value of fallback reason count net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() l2tp: fix lockdep splat net: bcmgenet: Properly overlay PHY and MAC Wake-on-LAN capabilities net: fec: Stop PPS on driver remove gpio: prevent potential speculation leaks in gpio_device_get_desc() hwmon: corsair-psu: add USB id of HX1200i Series 2023 psu rcutorture: Fix rcu_torture_fwd_cb_cr() data race md: do not delete safemode_timer in mddev_suspend md/raid5: avoid BUG_ON() while continue reshape after reassembling block: change rq_integrity_vec to respect the iterator rcu: Fix rcu_barrier() VS post CPUHP_TEARDOWN_CPU invocation clocksource/drivers/sh_cmt: Address race condition for clock events ACPI: battery: create alarm sysfs attribute atomically ACPI: SBS: manage alarm sysfs attribute through psy core xen: privcmd: Switch from mutex to spinlock for irqfds wifi: nl80211: disallow setting special AP channel widths wifi: ath12k: fix memory leak in ath12k_dp_rx_peer_frag_setup() net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT af_unix: Don't retry after unix_state_lock_nested() in unix_stream_connect(). PCI: Add Edimax Vendor ID to pci_ids.h udf: prevent integer overflow in udf_bitmap_free_blocks() wifi: nl80211: don't give key data to userspace can: mcp251xfd: tef: prepare to workaround broken TEF FIFO tail index erratum can: mcp251xfd: tef: update workaround for erratum DS80000789E 6 of mcp2518fd net: stmmac: qcom-ethqos: enable SGMII loopback during DMA reset on sa8775p-ride-r3 btrfs: do not clear page dirty inside extent_write_locked_range() btrfs: fix invalid mapping of extent xarray state btrfs: fix bitmap leak when loading free space cache on duplicate entry Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver unloading drm/amd/display: Add delay to improve LTTPR UHBR interop drm/amdgpu: fix potential resource leak warning drm/amdgpu/pm: Fix the param type of set_power_profile_mode drm/amdgpu/pm: Fix the null pointer dereference for smu7 drm/amdgpu: Fix the null pointer dereference to ras_manager drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules drm/admgpu: fix dereferencing null pointer context drm/amdgpu: Add lock around VF RLCG interface drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr media: amphion: Remove lock in s_ctrl callback drm/amd/display: Add null checker before passing variables media: uvcvideo: Ignore empty TS packets media: uvcvideo: Fix the bandwdith quirk on USB 3.x media: xc2028: avoid use-after-free in load_firmware_cb() ext4: fix uninitialized variable in ext4_inlinedir_to_tree jbd2: avoid memleak in jbd2_journal_write_metadata_buffer s390/sclp: Prevent release of buffer in I/O SUNRPC: Fix a race to wake a sync task profiling: remove profile=sleep support scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t' irqchip/loongarch-cpu: Fix return value of lpic_gsi_to_irq() sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime net: drop bad gso csum_start and offset in virtio_net_hdr arm64: Add Neoverse-V2 part arm64: barrier: Restore spec_bar() macro arm64: cputype: Add Cortex-X4 definitions arm64: cputype: Add Neoverse-V3 definitions arm64: errata: Add workaround for Arm errata 3194386 and 3312417 arm64: cputype: Add Cortex-X3 definitions arm64: cputype: Add Cortex-A720 definitions arm64: cputype: Add Cortex-X925 definitions arm64: errata: Unify speculative SSBS errata logic UBUNTU: [Config] Set ARM64_ERRATUM_3194386=y arm64: errata: Expand speculative SSBS workaround arm64: cputype: Add Cortex-X1C definitions arm64: cputype: Add Cortex-A725 definitions arm64: errata: Expand speculative SSBS workaround (again) i2c: smbus: Improve handling of stuck alerts ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask ASoC: codecs: wsa881x: Correct Soundwire ports mask ASoC: codecs: wsa883x: parse port-mapping information ASoC: codecs: wsa883x: Correct Soundwire ports mask ASoC: codecs: wsa884x: parse port-mapping information ASoC: codecs: wsa884x: Correct Soundwire ports mask ASoC: sti: add missing probe entry for player and reader spi: spidev: Add missing spi_device_id for bh2228fv ASoC: SOF: Remove libraries from topology lookups i2c: smbus: Send alert notifications to all devices if source not found bpf: kprobe: remove unused declaring of bpf_kprobe_override kprobes: Fix to check symbol prefixes correctly i2c: qcom-geni: Add missing clk_disable_unprepare in geni_i2c_runtime_resume i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume spi: spi-fsl-lpspi: Fix scldiv calculation ALSA: usb-audio: Re-add ScratchAmp quirk entries ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT cifs: cifs_inval_name_dfs_link_error: correct the check for fullpath module: warn about excessively long module waits module: make waiting for a concurrent module loader interruptible drm/i915/gem: Fix Virtual Memory mapping boundaries calculation drm/amd/display: Skip Recompute DSC Params if no Stream on Link drm/amdgpu: Forward soft recovery errors to userspace drm/i915/gem: Adjust vma offset for framebuffer mmap offset drm/client: fix null pointer dereference in drm_client_modeset_probe ALSA: line6: Fix racy access to midibuf ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 usb: vhci-hcd: Do not drop references before new references are gained USB: serial: debug: do not echo input by default usb: gadget: core: Check for unset descriptor usb: gadget: midi2: Fix the response for FB info with block 0xff usb: gadget: u_serial: Set start_delayed during suspend usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES scsi: ufs: core: Do not set link to OFF state while waking up from hibernation scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic tick/broadcast: Move per CPU pointer access into the atomic section vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler ntp: Clamp maxerror and esterror to operating range clocksource: Scale the watchdog read retries automatically clocksource: Fix brown-bag boolean thinko in cs_watchdog_read() driver core: Fix uevent_show() vs driver detach race tracefs: Fix inode allocation tracefs: Use generic inode RCU for synchronizing freeing ntp: Safeguard against time_constant overflow timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() serial: core: check uartclk for zero to avoid divide by zero memcg: protect concurrent access to mem_cgroup_idr parisc: fix unaligned accesses in BPF parisc: fix a possible DMA corruption ASoC: amd: yc: Add quirk entry for OMEN by HP Gaming Laptop 16-n0xxx kcov: properly check for softirq context irqchip/xilinx: Fix shift out of bounds genirq/irqdesc: Honor caller provided affinity in alloc_desc() LoongArch: Enable general EFI poweroff method power: supply: qcom_battmgr: return EAGAIN when firmware service is not up power: supply: axp288_charger: Fix constant_charge_voltage writes power: supply: axp288_charger: Round constant_charge_voltage writes down tracing: Fix overflow in get_free_elt() padata: Fix possible divide-by-0 panic in padata_mt_helper() smb3: fix setting SecurityFlags when encryption is required eventfs: Don't return NULL in eventfs_create_dir() eventfs: Use SRCU for freeing eventfs_inodes selftests: mm: add s390 to ARCH check btrfs: avoid using fixed char array size for tree names x86/paravirt: Fix incorrect virt spinlock setting on bare metal x86/mtrr: Check if fixed MTRRs exist before saving them sched/smt: Introduce sched_smt_present_inc/dec() helper sched/smt: Fix unbalance sched_smt_present dec/inc sched/core: Introduce sched_set_rq_on/offline() helper sched/core: Fix unbalance set_rq_online/offline() in sched_cpu_deactivate() drm/bridge: analogix_dp: properly handle zero sized AUX transactions drm/dp_mst: Skip CSN if topology probing is not done yet drm/lima: Mark simple_ondemand governor as softdep drm/mgag200: Set DDC timeout in milliseconds drm/mgag200: Bind I2C lifetime to DRM device drm/radeon: Remove __counted_by from StateArray.states[] mptcp: fully established after ADD_ADDR echo on MPJ mptcp: pm: deny endp with signal + subflow + port block: use the right type for stub rq_integrity_vec() btrfs: fix corruption after buffer fault in during direct IO append write tools headers arm64: Sync arm64's cputype.h with the kernel sources mm/hugetlb: fix potential race in __update_and_free_hugetlb_folio() xfs: fix log recovery buffer allocation for the legacy h_size fixup mptcp: pm: reduce indentation blocks mptcp: pm: don't try to create sf if alloc failed mptcp: pm: do not ignore 'subflow' if 'signal' flag is also set selftests: mptcp: join: ability to invert ADD_ADDR check selftests: mptcp: join: test both signal & subflow Revert "selftests: mptcp: simult flows: mark 'unbalanced' tests as flaky" btrfs: fix double inode unlock for direct IO sync writes perf/x86/intel/cstate: Switch to new Intel CPU model defines perf/x86/intel/cstate: Add Arrowlake support perf/x86/intel/cstate: Add Lunarlake support perf/x86/intel/cstate: Add pkg C2 residency counter for Sierra Forest platform/x86: intel-vbtn: Protect ACPI notify handler against recursion perf/x86/amd: Use try_cmpxchg() in events/amd/{un,}core.c perf/x86/intel: Support the PEBS event mask perf/x86: Support counter mask perf/x86: Fix smp_processor_id()-in-preemptible warnings virtio-net: unbreak vq resizing when coalescing is not negotiated net: dsa: microchip: Fix Wake-on-LAN check to not return an error net: dsa: microchip: disable EEE for KSZ8567/KSZ9567/KSZ9896/KSZ9897. regmap: kunit: Use a KUnit action to call regmap_exit() regmap: kunit: Replace a kmalloc/kfree() pair with KUnit-managed alloc regmap: kunit: Fix memory leaks in gen_regmap() and gen_raw_regmap() debugobjects: Annotate racy debug variables nvme: apple: fix device reference counting cpufreq: amd-pstate: Allow users to write 'default' EPP string cpufreq: amd-pstate: auto-load pstate driver by default soc: qcom: icc-bwmon: Allow for interrupts to be shared across instances ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MU ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MJ thermal: intel: hfi: Give HFI instances package scope wifi: ath12k: fix race due to setting ATH12K_FLAG_EXT_IRQ_ENABLED too early wifi: rtlwifi: handle return value of usb init TX/RX wifi: rtw89: pci: fix RX tag race condition resulting in wrong RX length wifi: mac80211: fix NULL dereference at band check in starting tx ba session bpf: add missing check_func_arg_reg_off() to prevent out-of-bounds memory accesses mlxsw: pci: Lock configuration space of upstream bridge during reset btrfs: do not BUG_ON() when freeing tree block after error btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info() btrfs: fix data race when accessing the last_trans field of a root drm/xe/preempt_fence: enlarge the fence critical section drm/amd/display: Handle HPD_IRQ for internal link drm/amd/amdkfd: Fix a resource leak in svm_range_validate_and_map() drm/xe/xe_guc_submit: Fix exec queue stop race condition drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing drm/amd/display: Wake DMCUB before sending a command for replay feature drm/amd/display: reduce ODM slice count to initial new dc state only when needed of: Add cleanup.h based auto release via __free(device_node) markings media: i2c: ov5647: replacing of_node_put with __free(device_node) drm/amd/display: Fix null pointer deref in dcn20_resource.c ext4: sanity check for NULL pointer after ext4_force_shutdown mm, slub: do not call do_slab_free for kfence object ASoC: cs35l56: Revert support for dual-ownership of ASP registers drm/atomic: allow no-op FB_ID updates for async flips drm/amd/display: Replace dm_execute_dmub_cmd with dc_wake_and_execute_dmub_cmd drm/xe/rtp: Fix off-by-one when processing rules drm/xe: Use dma_fence_chain_free in chain fence unused as a sync drm/xe/hwmon: Fix PL1 disable flow in xe_hwmon_power_max_write drm/xe: Move lrc snapshot capturing to xe_lrc.c drm/xe: Minor cleanup in LRC handling drm/test: fix the gem shmem test to map the sg table. usb: typec: pd: no opencoding of FIELD_GET usb: typec: fsa4480: Check if the chip is really there PM: runtime: Simplify pm_runtime_get_if_active() usage scsi: ufs: core: Fix deadlock during RTC update serial: sc16is7xx: fix invalid FIFO access with special register set tracing: Have format file honor EVENT_FILE_FL_FREED mm: list_lru: fix UAF for memory cgroup net/tcp: Disable TCP-AO static key after RCU grace period Revert "drm/amd/display: Handle HPD_IRQ for internal link" idpf: fix memleak in vport interrupt configuration drm/amd/display: Add null check in resource_log_pipe_topology_update UBUNTU: Upstream stable to v6.6.46, v6.10.5 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2083656/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp