Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v6.12.4 upstream stable release
from git://git.kernel.org/
Linux 6.12.4
Revert "drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs"
posix-timers: Target group sigqueue to current task only if not exiting
drm/amd/display: Remove PIPE_DTO_SRC_SEL programming from set_dtbclk_dto
drm/amd/display: update pipe selection policy to check head pipe
drm/amd/display: Fix handling of plane refcount
drm/amd/pm: Remove arcturus min power limit
drm/amd/pm: disable pcie speed switching on Intel platform for smu v14.0.2/3
drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu v13.0.7
drm/amd: Fix initialization mistake for NBIO 7.11 devices
drm/amd/pm: skip setting the power source on smu v14.0.2/3
drm/amdgpu: fix usage slab after free
drm/amd: Add some missing straps from NBIO 7.11.0
drm/amdgpu/pm: add gen5 display to the user on smu v14.0.2/3
drm/amdkfd: Use the correct wptr size
drm/xe/guc_submit: fix race around suspend_pending
drm/xe/migrate: use XE_BO_FLAG_PAGETABLE
Revert "drm/radeon: Delay Connector detecting when HPD singals is unstable"
drm/xe/migrate: fix pat index usage
drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs
drm: xlnx: zynqmp_dpsub: fix hotplug detection
drm/etnaviv: flush shader L1 cache after user commandstream
drm/bridge: it6505: Fix inverted reset polarity
drm/mediatek: Fix child node refcount handling in early exit
drm/fbdev-dma: Select FB_DEFERRED_IO
drm/sti: avoid potential dereference of error pointers
drm: panel: jd9365da-h3: Remove unused num_init_cmds structure member
drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check
drm/panic: Fix uninitialized spinlock acquisition with CONFIG_DRM_PANIC=n
net: fec: make PPS channel configurable
net: fec: refactor PPS channel configuration
dt-bindings: net: fec: add pps channel property
binder: add delivered_freeze to debugfs output
binder: fix memleak of proc->delivered_freeze
binder: allow freeze notification for dead nodes
binder: fix BINDER_WORK_CLEAR_FREEZE_NOTIFICATION debug logs
binder: fix BINDER_WORK_FROZEN_BINDER debug logs
binder: fix freeze UAF in binder_release_work()
binder: fix OOB in binder_add_freeze_work()
binder: fix node UAF in binder_add_freeze_work()
powerpc: Adjust adding stack protector flags to KBUILD_CLAGS for clang
powerpc: Fix stack protector Kconfig test for clang
iio: gts: fix infinite loop for gain_to_scaletables()
iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name()
iio: invensense: fix multiple odr switch when FIFO is off
iio: accel: kx022a: Fix raw read format
nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
nfsd: make sure exp active before svc_export_show
PCI: rockchip-ep: Fix address translation unit programming
PCI: of_property: Assign PCI instead of CPU bus address to dynamic PCI nodes
PCI: dwc: ep: Fix advertised resizable BAR size regression
dm thin: Add missing destroy_work_on_stack()
dm: Fix typo in error message
mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address
into one operation
ovl: properly handle large files in ovl_security_fileattr
leds: flash: mt6360: Fix device_for_each_child_node() refcounting in error paths
thermal: int3400: Fix reading of current_uuid for active policy
fs/proc/kcore.c: Clear ret value in read_kcore_iter after successful
iov_iter_zero
slab: Fix too strict alignment check in create_cache()
PCI: endpoint: Clear secondary (not primary) EPC in pci_epc_remove_epf()
PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy()
PCI: keystone: Add link up check to ks_pcie_other_map_bus()
PCI: keystone: Set mode as Root Complex for "ti,keystone-pcie" compatible
i3c: master: svc: Modify enabled_events bit 7:0 to act as IBI enable counter
i3c: master: svc: fix possible assignment of the same address to two devices
i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
i3c: master: svc: Fix pm_runtime_set_suspended() with runtime pm enabled
scsi: ufs: exynos: Fix hibern8 notify callbacks
scsi: ufs: exynos: Add check inside exynos_ufs_config_smu()
s390/stacktrace: Use break instead of return statement
util_macros.h: fix/rework find_closest() macros
mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information
mtd: spinand: winbond: Fix 512GW and 02JW OOB layout
ceph: fix cred leak in ceph_mds_check_access()
ceph: pass cred pointer to ceph_mds_auth_match()
ceph: extract entity name from device id
f2fs: fix to drop all discards after creating snapshot on lvm device
mm/slub: Avoid list corruption when removing a slab from the full list
PCI: imx6: Fix suspend/resume support on i.MX6QDL
remoteproc: qcom_q6v5_pas: disable auto boot for wpss
perf jevents: fix breakage when do perf stat on system metric
PCI: qcom: Disable ASPM L0s for X1E80100
vfio/qat: fix overflow check in qat_vf_resume_write()
net: stmmac: set initial EEE policy configuration
ARM: 9431/1: mm: Pair atomic_set_release() with _read_acquire()
ARM: 9430/1: entry: Do a dummy read from VMAP shadow
s390/entry: Mark IRQ entries to fix stack depot warnings
ARM: 9429/1: ioremap: Sync PGDs for VMALLOC shadow
spmi: pmic-arb: fix return path in for_each_available_child_of_node()
driver core: fw_devlink: Stop trying to optimize cycle detection logic
nvmem: core: Check read_only flag for force_ro in bin_attr_nvmem_write()
ad7780: fix division by zero in ad7780_write_raw()
clk: qcom: gcc-qcs404: fix initial rate of GPLL3
cpufreq: scmi: Fix cleanup path when boost enablement fails
powerpc/vdso: Drop -mstack-protector-guard flags in 32-bit files with clang
mm/damon/vaddr: fix issue in damon_va_evenly_split_region()
leds: lp55xx: Remove redundant test for invalid channel number
iommu/arm-smmu: Defer probe of clients after smmu device bound
iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables
zram: clear IDLE flag after recompression
vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event
ftrace: Fix regression with module command in stack_trace_filter
maple_tree: refine mas_store_root() on storing NULL
ovl: Filter invalid inodes with missing lookup function
kunit: string-stream: Fix a UAF bug in kunit_init_suite()
kunit: Fix potential null dereference in kunit_device_driver_test()
tracing: Fix function timing profiler to initialize hashtable
media: uvcvideo: Require entities to have a non-zero unique ID
media: uvcvideo: Stop stream during unregister
media: platform: allegro-dvt: Fix possible memory leak in
allocate_buffers_internal()
media: ov08x40: Fix burst write sequence
media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate()
media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled
media: amphion: Fix pm_runtime_set_suspended() with runtime pm enabled
net: phy: dp83869: fix status reporting for 1000base-x autonegotiation
efi/libstub: Free correct pointer on failure
media: platform: exynos4-is: Fix an OF node reference leak in
fimc_md_is_isp_available
media: ts2020: fix null-ptr-deref in ts2020_probe()
media: verisilicon: av1: Fix reference video buffer pointer assignment
media: platform: rga: fix 32-bit DMA limitation
media: imx-jpeg: Ensure power suppliers be suspended before detach them
media: i2c: tc358743: Fix crash in the probe error path when using polling
arm64: dts: freescale: imx8mp-verdin: Fix SD regulator startup delay
media: i2c: dw9768: Fix pm_runtime_set_suspended() with runtime pm enabled
media: mtk-jpeg: Fix null-ptr-deref during unload module
media: imx-jpeg: Set video drvdata before register video device
media: amphion: Set video drvdata before register video device
media: qcom: camss: fix error path on configuration of power domains
arm64: dts: mediatek: mt8186-corsola: Fix IT6505 reset line polarity
arm64: dts: ti: k3-am62-verdin: Fix SD regulator startup delay
arm64: dts: freescale: imx8mm-verdin: Fix SD regulator startup delay
arm64: dts: mediatek: mt8186-corsola: Fix GPU supply coupling max-spread
arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer
md/md-bitmap: Add missing destroy_work_on_stack()
md/raid5: Wait sync io to finish before changing group cnt
netkit: Add option for scrubbing skb meta data
iommu/tegra241-cmdqv: Fix unused variable warning
btrfs: ref-verify: fix use-after-free after invalid ref action
btrfs: add a sanity check for btrfs root in btrfs_search_slot()
btrfs: don't loop for nowait writes when checking for cross references
btrfs: fix use-after-free in btrfs_encoded_read_endio()
btrfs: move priv off stack in btrfs_encoded_read_regular_fill_pages()
btrfs: change btrfs_encoded_read() so that reading of extent is done by caller
btrfs: drop unused parameter file_offset from
btrfs_encoded_read_regular_fill_pages()
quota: flush quota_release_work upon quota writeback
xfs: remove unknown compat feature check in superblock write validation
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Confirmed
** Affects: linux (Ubuntu Plucky)
Importance: Undecided
Status: Confirmed
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Plucky)
Importance: Undecided
Status: Confirmed
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2091627
Title:
Plucky update: v6.12.4 upstream stable release
Status in linux package in Ubuntu:
Confirmed
Status in linux source package in Plucky:
Confirmed
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v6.12.4 upstream stable release
from git://git.kernel.org/
Linux 6.12.4
Revert "drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs"
posix-timers: Target group sigqueue to current task only if not exiting
drm/amd/display: Remove PIPE_DTO_SRC_SEL programming from set_dtbclk_dto
drm/amd/display: update pipe selection policy to check head pipe
drm/amd/display: Fix handling of plane refcount
drm/amd/pm: Remove arcturus min power limit
drm/amd/pm: disable pcie speed switching on Intel platform for smu v14.0.2/3
drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu
v13.0.7
drm/amd: Fix initialization mistake for NBIO 7.11 devices
drm/amd/pm: skip setting the power source on smu v14.0.2/3
drm/amdgpu: fix usage slab after free
drm/amd: Add some missing straps from NBIO 7.11.0
drm/amdgpu/pm: add gen5 display to the user on smu v14.0.2/3
drm/amdkfd: Use the correct wptr size
drm/xe/guc_submit: fix race around suspend_pending
drm/xe/migrate: use XE_BO_FLAG_PAGETABLE
Revert "drm/radeon: Delay Connector detecting when HPD singals is unstable"
drm/xe/migrate: fix pat index usage
drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs
drm: xlnx: zynqmp_dpsub: fix hotplug detection
drm/etnaviv: flush shader L1 cache after user commandstream
drm/bridge: it6505: Fix inverted reset polarity
drm/mediatek: Fix child node refcount handling in early exit
drm/fbdev-dma: Select FB_DEFERRED_IO
drm/sti: avoid potential dereference of error pointers
drm: panel: jd9365da-h3: Remove unused num_init_cmds structure member
drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
drm/sti: avoid potential dereference of error pointers in
sti_hqvdp_atomic_check
drm/panic: Fix uninitialized spinlock acquisition with CONFIG_DRM_PANIC=n
net: fec: make PPS channel configurable
net: fec: refactor PPS channel configuration
dt-bindings: net: fec: add pps channel property
binder: add delivered_freeze to debugfs output
binder: fix memleak of proc->delivered_freeze
binder: allow freeze notification for dead nodes
binder: fix BINDER_WORK_CLEAR_FREEZE_NOTIFICATION debug logs
binder: fix BINDER_WORK_FROZEN_BINDER debug logs
binder: fix freeze UAF in binder_release_work()
binder: fix OOB in binder_add_freeze_work()
binder: fix node UAF in binder_add_freeze_work()
powerpc: Adjust adding stack protector flags to KBUILD_CLAGS for clang
powerpc: Fix stack protector Kconfig test for clang
iio: gts: fix infinite loop for gain_to_scaletables()
iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name()
iio: invensense: fix multiple odr switch when FIFO is off
iio: accel: kx022a: Fix raw read format
nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
nfsd: make sure exp active before svc_export_show
PCI: rockchip-ep: Fix address translation unit programming
PCI: of_property: Assign PCI instead of CPU bus address to dynamic PCI nodes
PCI: dwc: ep: Fix advertised resizable BAR size regression
dm thin: Add missing destroy_work_on_stack()
dm: Fix typo in error message
mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address
into one operation
ovl: properly handle large files in ovl_security_fileattr
leds: flash: mt6360: Fix device_for_each_child_node() refcounting in error
paths
thermal: int3400: Fix reading of current_uuid for active policy
fs/proc/kcore.c: Clear ret value in read_kcore_iter after successful
iov_iter_zero
slab: Fix too strict alignment check in create_cache()
PCI: endpoint: Clear secondary (not primary) EPC in pci_epc_remove_epf()
PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy()
PCI: keystone: Add link up check to ks_pcie_other_map_bus()
PCI: keystone: Set mode as Root Complex for "ti,keystone-pcie" compatible
i3c: master: svc: Modify enabled_events bit 7:0 to act as IBI enable counter
i3c: master: svc: fix possible assignment of the same address to two devices
i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
i3c: master: svc: Fix pm_runtime_set_suspended() with runtime pm enabled
scsi: ufs: exynos: Fix hibern8 notify callbacks
scsi: ufs: exynos: Add check inside exynos_ufs_config_smu()
s390/stacktrace: Use break instead of return statement
util_macros.h: fix/rework find_closest() macros
mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information
mtd: spinand: winbond: Fix 512GW and 02JW OOB layout
ceph: fix cred leak in ceph_mds_check_access()
ceph: pass cred pointer to ceph_mds_auth_match()
ceph: extract entity name from device id
f2fs: fix to drop all discards after creating snapshot on lvm device
mm/slub: Avoid list corruption when removing a slab from the full list
PCI: imx6: Fix suspend/resume support on i.MX6QDL
remoteproc: qcom_q6v5_pas: disable auto boot for wpss
perf jevents: fix breakage when do perf stat on system metric
PCI: qcom: Disable ASPM L0s for X1E80100
vfio/qat: fix overflow check in qat_vf_resume_write()
net: stmmac: set initial EEE policy configuration
ARM: 9431/1: mm: Pair atomic_set_release() with _read_acquire()
ARM: 9430/1: entry: Do a dummy read from VMAP shadow
s390/entry: Mark IRQ entries to fix stack depot warnings
ARM: 9429/1: ioremap: Sync PGDs for VMALLOC shadow
spmi: pmic-arb: fix return path in for_each_available_child_of_node()
driver core: fw_devlink: Stop trying to optimize cycle detection logic
nvmem: core: Check read_only flag for force_ro in bin_attr_nvmem_write()
ad7780: fix division by zero in ad7780_write_raw()
clk: qcom: gcc-qcs404: fix initial rate of GPLL3
cpufreq: scmi: Fix cleanup path when boost enablement fails
powerpc/vdso: Drop -mstack-protector-guard flags in 32-bit files with clang
mm/damon/vaddr: fix issue in damon_va_evenly_split_region()
leds: lp55xx: Remove redundant test for invalid channel number
iommu/arm-smmu: Defer probe of clients after smmu device bound
iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables
zram: clear IDLE flag after recompression
vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event
ftrace: Fix regression with module command in stack_trace_filter
maple_tree: refine mas_store_root() on storing NULL
ovl: Filter invalid inodes with missing lookup function
kunit: string-stream: Fix a UAF bug in kunit_init_suite()
kunit: Fix potential null dereference in kunit_device_driver_test()
tracing: Fix function timing profiler to initialize hashtable
media: uvcvideo: Require entities to have a non-zero unique ID
media: uvcvideo: Stop stream during unregister
media: platform: allegro-dvt: Fix possible memory leak in
allocate_buffers_internal()
media: ov08x40: Fix burst write sequence
media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate()
media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled
media: amphion: Fix pm_runtime_set_suspended() with runtime pm enabled
net: phy: dp83869: fix status reporting for 1000base-x autonegotiation
efi/libstub: Free correct pointer on failure
media: platform: exynos4-is: Fix an OF node reference leak in
fimc_md_is_isp_available
media: ts2020: fix null-ptr-deref in ts2020_probe()
media: verisilicon: av1: Fix reference video buffer pointer assignment
media: platform: rga: fix 32-bit DMA limitation
media: imx-jpeg: Ensure power suppliers be suspended before detach them
media: i2c: tc358743: Fix crash in the probe error path when using polling
arm64: dts: freescale: imx8mp-verdin: Fix SD regulator startup delay
media: i2c: dw9768: Fix pm_runtime_set_suspended() with runtime pm enabled
media: mtk-jpeg: Fix null-ptr-deref during unload module
media: imx-jpeg: Set video drvdata before register video device
media: amphion: Set video drvdata before register video device
media: qcom: camss: fix error path on configuration of power domains
arm64: dts: mediatek: mt8186-corsola: Fix IT6505 reset line polarity
arm64: dts: ti: k3-am62-verdin: Fix SD regulator startup delay
arm64: dts: freescale: imx8mm-verdin: Fix SD regulator startup delay
arm64: dts: mediatek: mt8186-corsola: Fix GPU supply coupling max-spread
arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer
md/md-bitmap: Add missing destroy_work_on_stack()
md/raid5: Wait sync io to finish before changing group cnt
netkit: Add option for scrubbing skb meta data
iommu/tegra241-cmdqv: Fix unused variable warning
btrfs: ref-verify: fix use-after-free after invalid ref action
btrfs: add a sanity check for btrfs root in btrfs_search_slot()
btrfs: don't loop for nowait writes when checking for cross references
btrfs: fix use-after-free in btrfs_encoded_read_endio()
btrfs: move priv off stack in btrfs_encoded_read_regular_fill_pages()
btrfs: change btrfs_encoded_read() so that reading of extent is done by caller
btrfs: drop unused parameter file_offset from
btrfs_encoded_read_regular_fill_pages()
quota: flush quota_release_work upon quota writeback
xfs: remove unknown compat feature check in superblock write validation
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2091627/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
