Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.11.8 upstream stable release
       from git://git.kernel.org/

arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
arm64: dts: rockchip: Move L3 cache outside CPUs in RK3588(S) SoC dtsi
arm64: dts: rockchip: Start cooling maps numbering from zero on ROCK 5B
arm64: dts: rockchip: Designate Turing RK1's system power controller
firmware: qcom: scm: fix a NULL-pointer dereference
EDAC/qcom: Make irq configuration optional
arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
arm64: dts: rockchip: Drop regulator-init-microvolt from two boards
arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
arm64: dts: rockchip: Remove undocumented supports-emmc property
arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
arm64: dts: qcom: sm8450 fix PIPE clock specification for pcie1
arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
arm64: dts: imx8mp: correct sdhc ipg clk
arm64: dts: imx8mp-phyboard-pollux: Set Video PLL1 frequency to 506.8 MHz
firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
firmware: qcom: scm: Return -EOPNOTSUPP for unsupported SHM bridge enabling
arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
ARM: dts: rockchip: fix rk3036 acodec node
ARM: dts: rockchip: drop grf reference from rk3036 hdmi
ARM: dts: rockchip: Fix the spi controller on rk3036
ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
HID: core: zero-initialize the report buffer
platform/x86/amd/pmc: Detect when STB is not available
sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
NFSv3: only use NFS timeout for MOUNT when protocols are compatible
NFS: Fix attribute delegation behaviour on exclusive create
NFS: Further fixes to attribute delegation a/mtime changes
nfs: avoid i_lock contention in nfs_clear_invalid_mapping
security/keys: fix slab-out-of-bounds in key_task_permission
regulator: rtq2208: Fix uninitialized use of regulator_config
net: enetc: set MAC address to the VF net_device
net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd tracepoint
dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
sctp: properly validate chunk size in sctp_sf_ootb()
net: enetc: allocate vf_state during PF probes
net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts
can: c_can: fix {rx,tx}_errors statistics
ice: change q_index variable type to s16 to store -1 value
i40e: fix race condition by adding filter's intermediate sync state
e1000e: Remove Meteor Lake SMBUS workarounds
net: hns3: fix kernel crash when uninstalling driver
net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
netfilter: nf_tables: wait for rcu grace period on net_device removal
virtio_net: Support dynamic rss indirection table size
virtio_net: Add hash_key_length check
virtio_net: Sync rss config to device when virtnet_probe
virtio_net: Update rss when set queue
net: arc: fix the device for dma_map_single/dma_unmap_single
net: arc: rockchip: fix emac mdio node support
rxrpc: Fix missing locking causing hanging calls
net/smc: do not leave a dangling sk pointer in __smc_create()
drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
media: stb0899_algo: initialize cfr before using it
media: dvbdev: prevent the risk of out of memory access
media: dvb_frontend: don't play tricks with underflow values
media: adv7604: prevent underflow condition when reporting colorspace
scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
tools/lib/thermal: Fix sampling handler context ptr
thermal/of: support thermal zones w/o trips subnode
ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
media: dvb-core: add missing buffer index check
media: mgb4: protect driver against spectre
media: ar0521: don't overflow when checking PLL values
media: s5p-jpeg: prevent buffer overflows
media: cx24116: prevent overflows on SNR calculus
media: av7110: fix a spectre vulnerability
media: pulse8-cec: fix data timestamp at pulse8_setup()
media: vivid: fix buffer overwrite when using > 32 buffers
media: v4l2-tpg: prevent the risk of a division by zero
media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when 
switching CAN modes
can: {cc770,sja1000}_isa: allow building on x86_64
UBUNTU: [Config] updateconfigs for CAN_{CC770,SJA1000}_ISA
ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
ksmbd: check outstanding simultaneous SMB operations
ksmbd: Fix the missing xa_store error check
ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
drm/xe: Fix possible exec queue leak in exec IOCTL
drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL
drm/xe: Set mask bits for CCS_MODE register
pwm: imx-tpm: Use correct MODULO value for EPWM mode
tpm: Lock TPM chip in tpm_pm_suspend() first
rpmsg: glink: Handle rejected intent request better
drm/amd/pm: always pick the pptable from IFWI
drm/amd/display: Fix brightness level not retained over reboot
drm/imagination: Add a per-file PVR context list
drm/imagination: Break an object reference loop
drm/panthor: Lock XArray when getting entries for the VM
drm/panthor: Be stricter about IO mapping flags
drm/amdgpu: Adjust debugfs eviction and IB access permissions
drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
drm/amdgpu: Adjust debugfs register access permissions
drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
thermal/drivers/qcom/lmh: Remove false lockdep backtrace
KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation
dm cache: correct the number of origin blocks to match the target length
dm cache: fix flushing uninitialized delayed_work on cache_ctr error
dm cache: fix out-of-bounds access to the dirty bitset when resizing
dm cache: optimize dirty bit checking with find_next_bit when resizing
dm cache: fix potential out-of-bounds access on the first resume
dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
dm: fix a crash if blk_alloc_disk fails
mptcp: no admin perm to list endpoints
ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
scsi: ufs: core: Start the RTC update work later
nfs: Fix KMSAN warning in decode_getfattr_attrs()
tracing: Fix tracefs mount options
net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
net: vertexcom: mse102x: Fix possible double free of TX skb
mptcp: use sock_kfree_s instead of kfree
arm64/sve: Discard stale CPU state when handling SVE traps
arm64: Kconfig: Make SME depend on BROKEN for now
UBUNTU: [Config] updateconfigs for ARM64_SME
arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
mm/slab: fix warning caused by duplicate kmem_cache creation in 
kmem_buckets_create
KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before running it to avoid 
spurious interrupts
idpf: avoid vport access in idpf_get_link_ksettings
idpf: fix idpf_vc_core_init error path
btrfs: fix the length of reserved qgroup to free
btrfs: fix per-subvolume RO/RW flags with new mount API
btrfs: reinitialize delayed ref list after deleting it from the list
platform/x86/amd/pmf: Relocate CPU ID macros to the PMF header
platform/x86/amd/pmf: Update SMU metrics table for 1AH family series
platform/x86/amd/pmf: Add SMU metrics table support for 1Ah family 60h model
media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in 
uvc_parse_format
filemap: Fix bounds checking in filemap_read()
i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
clk: qcom: clk-alpha-pll: Fix pll post div mask when width is not set
fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
objpool: fix to make percpu slot allocation more robust
signal: restore the override_rlimit logic
mm/damon/core: avoid overflow in damon_feed_loop_next_input()
mm/damon/core: handle zero {aggregation,ops_update} intervals
mm/damon/core: handle zero schemes apply interval
mm/mlock: set the correct prev on failure
mm/thp: fix deferred split unqueue naming and locking
thunderbolt: Add only on-board retimers when !CONFIG_USB4_DEBUGFS_MARGINING
usb: musb: sunxi: Fix accessing an released usb phy
usb: dwc3: fix fault at system suspend if device was already runtime suspended
usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
USB: serial: io_edgeport: fix use after free in debug printk
USB: serial: qcserial: add support for Sierra Wireless EM86xx
USB: serial: option: add Fibocom FG132 0x0112 composition
USB: serial: option: add Quectel RG650V
clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs
clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks
thunderbolt: Fix connection issue with Pluggable UD-4VPD dock
staging: vchiq_arm: Use devm_kzalloc() for drv_mgmt allocation
staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation
irqchip/gic-v3: Force propagation of the active state with a read-back
ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
ucounts: fix counter leak in inc_rlimit_get_ucounts()
selftests: hugetlb_dio: check for initial conditions to skip in the start
firmware: qcom: scm: Refactor code to support multiple dload mode
UBUNTU: [Config] updateconfigfs for QCOM_SCM_DOWNLOAD_MODE_DEFAULT
firmware: qcom: scm: suppress download mode error
block: rework bio splitting
block: fix queue limits checks in blk_rq_map_user_bvec for real
drm/xe: Move LNL scheduling WA to xe_device.h
drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout
drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout
ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
xtensa: Emulate one-byte cmpxchg
hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
Linux 6.11.8
UBUNTU: Upstream stable to v6.11.8

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: linux (Ubuntu Oracular)
     Importance: Medium
     Assignee: Manuel Diewald (diewald)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Oracular)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu)
       Status: Confirmed => Invalid

** Changed in: linux (Ubuntu Oracular)
   Importance: Undecided => Medium

** Changed in: linux (Ubuntu Oracular)
       Status: New => In Progress

** Changed in: linux (Ubuntu Oracular)
     Assignee: (unassigned) => Manuel Diewald (diewald)

** Description changed:

  
      SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
         v6.11.8 upstream stable release
         from git://git.kernel.org/
  
-             
+ arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
+ arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
+ arm64: dts: rockchip: Move L3 cache outside CPUs in RK3588(S) SoC dtsi
+ arm64: dts: rockchip: Start cooling maps numbering from zero on ROCK 5B
+ arm64: dts: rockchip: Designate Turing RK1's system power controller
+ firmware: qcom: scm: fix a NULL-pointer dereference
+ EDAC/qcom: Make irq configuration optional
+ arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
+ arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
+ arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
+ arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
+ arm64: dts: rockchip: Drop regulator-init-microvolt from two boards
+ arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
+ arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
+ arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
+ arm64: dts: rockchip: Remove undocumented supports-emmc property
+ arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
+ arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
+ arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
+ arm64: dts: qcom: sm8450 fix PIPE clock specification for pcie1
+ arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
+ arm64: dts: imx8mp: correct sdhc ipg clk
+ arm64: dts: imx8mp-phyboard-pollux: Set Video PLL1 frequency to 506.8 MHz
+ firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
+ firmware: qcom: scm: Return -EOPNOTSUPP for unsupported SHM bridge enabling
+ arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
+ ARM: dts: rockchip: fix rk3036 acodec node
+ ARM: dts: rockchip: drop grf reference from rk3036 hdmi
+ ARM: dts: rockchip: Fix the spi controller on rk3036
+ ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
+ arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
+ HID: core: zero-initialize the report buffer
+ platform/x86/amd/pmc: Detect when STB is not available
+ sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
+ NFSv3: only use NFS timeout for MOUNT when protocols are compatible
+ NFS: Fix attribute delegation behaviour on exclusive create
+ NFS: Further fixes to attribute delegation a/mtime changes
+ nfs: avoid i_lock contention in nfs_clear_invalid_mapping
+ security/keys: fix slab-out-of-bounds in key_task_permission
+ regulator: rtq2208: Fix uninitialized use of regulator_config
+ net: enetc: set MAC address to the VF net_device
+ net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd tracepoint
+ dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
+ sctp: properly validate chunk size in sctp_sf_ootb()
+ net: enetc: allocate vf_state during PF probes
+ net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts
+ can: c_can: fix {rx,tx}_errors statistics
+ ice: change q_index variable type to s16 to store -1 value
+ i40e: fix race condition by adding filter's intermediate sync state
+ e1000e: Remove Meteor Lake SMBUS workarounds
+ net: hns3: fix kernel crash when uninstalling driver
+ net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
+ net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
+ netfilter: nf_tables: wait for rcu grace period on net_device removal
+ virtio_net: Support dynamic rss indirection table size
+ virtio_net: Add hash_key_length check
+ virtio_net: Sync rss config to device when virtnet_probe
+ virtio_net: Update rss when set queue
+ net: arc: fix the device for dma_map_single/dma_unmap_single
+ net: arc: rockchip: fix emac mdio node support
+ rxrpc: Fix missing locking causing hanging calls
+ net/smc: do not leave a dangling sk pointer in __smc_create()
+ drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
+ Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
+ media: stb0899_algo: initialize cfr before using it
+ media: dvbdev: prevent the risk of out of memory access
+ media: dvb_frontend: don't play tricks with underflow values
+ media: adv7604: prevent underflow condition when reporting colorspace
+ scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
+ ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
+ tools/lib/thermal: Fix sampling handler context ptr
+ thermal/of: support thermal zones w/o trips subnode
+ ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
+ ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
+ media: dvb-core: add missing buffer index check
+ media: mgb4: protect driver against spectre
+ media: ar0521: don't overflow when checking PLL values
+ media: s5p-jpeg: prevent buffer overflows
+ media: cx24116: prevent overflows on SNR calculus
+ media: av7110: fix a spectre vulnerability
+ media: pulse8-cec: fix data timestamp at pulse8_setup()
+ media: vivid: fix buffer overwrite when using > 32 buffers
+ media: v4l2-tpg: prevent the risk of a division by zero
+ media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
+ can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
+ can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
+ can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when 
switching CAN modes
+ can: {cc770,sja1000}_isa: allow building on x86_64
+ UBUNTU: [Config] updateconfigs for CAN_{CC770,SJA1000}_ISA
+ ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
+ ksmbd: check outstanding simultaneous SMB operations
+ ksmbd: Fix the missing xa_store error check
+ ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
+ drm/xe: Fix possible exec queue leak in exec IOCTL
+ drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL
+ drm/xe: Set mask bits for CCS_MODE register
+ pwm: imx-tpm: Use correct MODULO value for EPWM mode
+ tpm: Lock TPM chip in tpm_pm_suspend() first
+ rpmsg: glink: Handle rejected intent request better
+ drm/amd/pm: always pick the pptable from IFWI
+ drm/amd/display: Fix brightness level not retained over reboot
+ drm/imagination: Add a per-file PVR context list
+ drm/imagination: Break an object reference loop
+ drm/panthor: Lock XArray when getting entries for the VM
+ drm/panthor: Be stricter about IO mapping flags
+ drm/amdgpu: Adjust debugfs eviction and IB access permissions
+ drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
+ drm/amdgpu: Adjust debugfs register access permissions
+ drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
+ drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
+ thermal/drivers/qcom/lmh: Remove false lockdep backtrace
+ KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation
+ dm cache: correct the number of origin blocks to match the target length
+ dm cache: fix flushing uninitialized delayed_work on cache_ctr error
+ dm cache: fix out-of-bounds access to the dirty bitset when resizing
+ dm cache: optimize dirty bit checking with find_next_bit when resizing
+ dm cache: fix potential out-of-bounds access on the first resume
+ dm-unstriped: cast an operand to sector_t to prevent potential uint32_t 
overflow
+ dm: fix a crash if blk_alloc_disk fails
+ mptcp: no admin perm to list endpoints
+ ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
+ scsi: ufs: core: Start the RTC update work later
+ nfs: Fix KMSAN warning in decode_getfattr_attrs()
+ tracing: Fix tracefs mount options
+ net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
+ net: vertexcom: mse102x: Fix possible double free of TX skb
+ mptcp: use sock_kfree_s instead of kfree
+ arm64/sve: Discard stale CPU state when handling SVE traps
+ arm64: Kconfig: Make SME depend on BROKEN for now
+ UBUNTU: [Config] updateconfigs for ARM64_SME
+ arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
+ mm/slab: fix warning caused by duplicate kmem_cache creation in 
kmem_buckets_create
+ KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before running it to avoid 
spurious interrupts
+ idpf: avoid vport access in idpf_get_link_ksettings
+ idpf: fix idpf_vc_core_init error path
+ btrfs: fix the length of reserved qgroup to free
+ btrfs: fix per-subvolume RO/RW flags with new mount API
+ btrfs: reinitialize delayed ref list after deleting it from the list
+ platform/x86/amd/pmf: Relocate CPU ID macros to the PMF header
+ platform/x86/amd/pmf: Update SMU metrics table for 1AH family series
+ platform/x86/amd/pmf: Add SMU metrics table support for 1Ah family 60h model
+ media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in 
uvc_parse_format
+ filemap: Fix bounds checking in filemap_read()
+ i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
+ clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
+ clk: qcom: clk-alpha-pll: Fix pll post div mask when width is not set
+ fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
+ objpool: fix to make percpu slot allocation more robust
+ signal: restore the override_rlimit logic
+ mm/damon/core: avoid overflow in damon_feed_loop_next_input()
+ mm/damon/core: handle zero {aggregation,ops_update} intervals
+ mm/damon/core: handle zero schemes apply interval
+ mm/mlock: set the correct prev on failure
+ mm/thp: fix deferred split unqueue naming and locking
+ thunderbolt: Add only on-board retimers when !CONFIG_USB4_DEBUGFS_MARGINING
+ usb: musb: sunxi: Fix accessing an released usb phy
+ usb: dwc3: fix fault at system suspend if device was already runtime suspended
+ usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
+ usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
+ USB: serial: io_edgeport: fix use after free in debug printk
+ USB: serial: qcserial: add support for Sierra Wireless EM86xx
+ USB: serial: option: add Fibocom FG132 0x0112 composition
+ USB: serial: option: add Quectel RG650V
+ clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs
+ clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks
+ thunderbolt: Fix connection issue with Pluggable UD-4VPD dock
+ staging: vchiq_arm: Use devm_kzalloc() for drv_mgmt allocation
+ staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation
+ irqchip/gic-v3: Force propagation of the active state with a read-back
+ ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
+ ucounts: fix counter leak in inc_rlimit_get_ucounts()
+ selftests: hugetlb_dio: check for initial conditions to skip in the start
+ firmware: qcom: scm: Refactor code to support multiple dload mode
+ UBUNTU: [Config] updateconfigfs for QCOM_SCM_DOWNLOAD_MODE_DEFAULT
+ firmware: qcom: scm: suppress download mode error
+ block: rework bio splitting
+ block: fix queue limits checks in blk_rq_map_user_bvec for real
+ drm/xe: Move LNL scheduling WA to xe_device.h
+ drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout
+ drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout
+ ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
+ xtensa: Emulate one-byte cmpxchg
+ hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
  Linux 6.11.8
- vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
- hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
- xtensa: Emulate one-byte cmpxchg
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout
- drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout
- drm/xe: Move LNL scheduling WA to xe_device.h
- drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
- block: fix queue limits checks in blk_rq_map_user_bvec for real
- block: rework bio splitting
- firmware: qcom: scm: suppress download mode error
- firmware: qcom: scm: Refactor code to support multiple dload mode
- selftests: hugetlb_dio: check for initial conditions to skip in the start
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- irqchip/gic-v3: Force propagation of the active state with a read-back
- staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation
- staging: vchiq_arm: Use devm_kzalloc() for drv_mgmt allocation
- thunderbolt: Fix connection issue with Pluggable UD-4VPD dock
- clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks
- clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs
- USB: serial: option: add Quectel RG650V
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: io_edgeport: fix use after free in debug printk
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
- usb: dwc3: fix fault at system suspend if device was already runtime suspended
- usb: musb: sunxi: Fix accessing an released usb phy
- thunderbolt: Add only on-board retimers when !CONFIG_USB4_DEBUGFS_MARGINING
- mm/thp: fix deferred split unqueue naming and locking
- mm/mlock: set the correct prev on failure
- mm/damon/core: handle zero schemes apply interval
- mm/damon/core: handle zero {aggregation,ops_update} intervals
- mm/damon/core: avoid overflow in damon_feed_loop_next_input()
- signal: restore the override_rlimit logic
- objpool: fix to make percpu slot allocation more robust
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- clk: qcom: clk-alpha-pll: Fix pll post div mask when width is not set
- clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- filemap: Fix bounds checking in filemap_read()
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in 
uvc_parse_format
- platform/x86/amd/pmf: Add SMU metrics table support for 1Ah family 60h model
- platform/x86/amd/pmf: Update SMU metrics table for 1AH family series
- platform/x86/amd/pmf: Relocate CPU ID macros to the PMF header
- btrfs: reinitialize delayed ref list after deleting it from the list
- btrfs: fix per-subvolume RO/RW flags with new mount API
- btrfs: fix the length of reserved qgroup to free
- idpf: fix idpf_vc_core_init error path
- idpf: avoid vport access in idpf_get_link_ksettings
- KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before running it to avoid 
spurious interrupts
- mm/slab: fix warning caused by duplicate kmem_cache creation in 
kmem_buckets_create
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- arm64: Kconfig: Make SME depend on BROKEN for now
- arm64/sve: Discard stale CPU state when handling SVE traps
- mptcp: use sock_kfree_s instead of kfree
- net: vertexcom: mse102x: Fix possible double free of TX skb
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- tracing: Fix tracefs mount options
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- scsi: ufs: core: Start the RTC update work later
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- mptcp: no admin perm to list endpoints
- dm: fix a crash if blk_alloc_disk fails
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t 
overflow
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- dm cache: correct the number of origin blocks to match the target length
- KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- drm/panthor: Be stricter about IO mapping flags
- drm/panthor: Lock XArray when getting entries for the VM
- drm/amd/display: parse umc_info or vram_info based on ASIC
- drm/amd/pm: correct the workload setting
- drm/imagination: Break an object reference loop
- drm/imagination: Add a per-file PVR context list
- drm/amd/display: Fix brightness level not retained over reboot
- drm/amd/pm: always pick the pptable from IFWI
- rpmsg: glink: Handle rejected intent request better
- tpm: Lock TPM chip in tpm_pm_suspend() first
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- drm/xe: Set mask bits for CCS_MODE register
- drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL
- drm/xe: Fix possible exec queue leak in exec IOCTL
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- ksmbd: Fix the missing xa_store error check
- ksmbd: check outstanding simultaneous SMB operations
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- can: {cc770,sja1000}_isa: allow building on x86_64
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when 
switching CAN modes
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- media: v4l2-tpg: prevent the risk of a division by zero
- media: vivid: fix buffer overwrite when using > 32 buffers
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: av7110: fix a spectre vulnerability
- media: cx24116: prevent overflows on SNR calculus
- media: s5p-jpeg: prevent buffer overflows
- media: ar0521: don't overflow when checking PLL values
- media: mgb4: protect driver against spectre
- media: dvb-core: add missing buffer index check
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- thermal/of: support thermal zones w/o trips subnode
- tools/lib/thermal: Fix sampling handler context ptr
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- media: adv7604: prevent underflow condition when reporting colorspace
- media: dvb_frontend: don't play tricks with underflow values
- media: dvbdev: prevent the risk of out of memory access
- media: stb0899_algo: initialize cfr before using it
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- net/smc: do not leave a dangling sk pointer in __smc_create()
- rxrpc: Fix missing locking causing hanging calls
- net: arc: rockchip: fix emac mdio node support
- net: arc: fix the device for dma_map_single/dma_unmap_single
- virtio_net: Update rss when set queue
- virtio_net: Sync rss config to device when virtnet_probe
- virtio_net: Add hash_key_length check
- virtio_net: Support dynamic rss indirection table size
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: hns3: fix kernel crash when uninstalling driver
- e1000e: Remove Meteor Lake SMBUS workarounds
- i40e: fix race condition by adding filter's intermediate sync state
- ice: change q_index variable type to s16 to store -1 value
- can: c_can: fix {rx,tx}_errors statistics
- net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts
- net: enetc: allocate vf_state during PF probes
- sctp: properly validate chunk size in sctp_sf_ootb()
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd tracepoint
- net: enetc: set MAC address to the VF net_device
- regulator: rtq2208: Fix uninitialized use of regulator_config
- security/keys: fix slab-out-of-bounds in key_task_permission
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- NFS: Further fixes to attribute delegation a/mtime changes
- NFS: Fix attribute delegation behaviour on exclusive create
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- platform/x86/amd/pmc: Detect when STB is not available
- HID: core: zero-initialize the report buffer
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: fix rk3036 acodec node
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- firmware: qcom: scm: Return -EOPNOTSUPP for unsupported SHM bridge enabling
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
- arm64: dts: imx8mp-phyboard-pollux: Set Video PLL1 frequency to 506.8 MHz
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: qcom: sm8450 fix PIPE clock specification for pcie1
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: Drop regulator-init-microvolt from two boards
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- EDAC/qcom: Make irq configuration optional
- firmware: qcom: scm: fix a NULL-pointer dereference
- arm64: dts: rockchip: Designate Turing RK1's system power controller
- arm64: dts: rockchip: Start cooling maps numbering from zero on ROCK 5B
- arm64: dts: rockchip: Move L3 cache outside CPUs in RK3588(S) SoC dtsi
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
+ UBUNTU: Upstream stable to v6.11.8

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2091645

Title:
  Oracular update: v6.11.8 upstream stable release

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Oracular:
  In Progress

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v6.11.8 upstream stable release
         from git://git.kernel.org/

  arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
  arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
  arm64: dts: rockchip: Move L3 cache outside CPUs in RK3588(S) SoC dtsi
  arm64: dts: rockchip: Start cooling maps numbering from zero on ROCK 5B
  arm64: dts: rockchip: Designate Turing RK1's system power controller
  firmware: qcom: scm: fix a NULL-pointer dereference
  EDAC/qcom: Make irq configuration optional
  arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
  arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
  arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
  arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
  arm64: dts: rockchip: Drop regulator-init-microvolt from two boards
  arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
  arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
  arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
  arm64: dts: rockchip: Remove undocumented supports-emmc property
  arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
  arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
  arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
  arm64: dts: qcom: sm8450 fix PIPE clock specification for pcie1
  arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
  arm64: dts: imx8mp: correct sdhc ipg clk
  arm64: dts: imx8mp-phyboard-pollux: Set Video PLL1 frequency to 506.8 MHz
  firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
  firmware: qcom: scm: Return -EOPNOTSUPP for unsupported SHM bridge enabling
  arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
  ARM: dts: rockchip: fix rk3036 acodec node
  ARM: dts: rockchip: drop grf reference from rk3036 hdmi
  ARM: dts: rockchip: Fix the spi controller on rk3036
  ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
  arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
  HID: core: zero-initialize the report buffer
  platform/x86/amd/pmc: Detect when STB is not available
  sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
  NFSv3: only use NFS timeout for MOUNT when protocols are compatible
  NFS: Fix attribute delegation behaviour on exclusive create
  NFS: Further fixes to attribute delegation a/mtime changes
  nfs: avoid i_lock contention in nfs_clear_invalid_mapping
  security/keys: fix slab-out-of-bounds in key_task_permission
  regulator: rtq2208: Fix uninitialized use of regulator_config
  net: enetc: set MAC address to the VF net_device
  net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd tracepoint
  dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
  sctp: properly validate chunk size in sctp_sf_ootb()
  net: enetc: allocate vf_state during PF probes
  net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts
  can: c_can: fix {rx,tx}_errors statistics
  ice: change q_index variable type to s16 to store -1 value
  i40e: fix race condition by adding filter's intermediate sync state
  e1000e: Remove Meteor Lake SMBUS workarounds
  net: hns3: fix kernel crash when uninstalling driver
  net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
  net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
  netfilter: nf_tables: wait for rcu grace period on net_device removal
  virtio_net: Support dynamic rss indirection table size
  virtio_net: Add hash_key_length check
  virtio_net: Sync rss config to device when virtnet_probe
  virtio_net: Update rss when set queue
  net: arc: fix the device for dma_map_single/dma_unmap_single
  net: arc: rockchip: fix emac mdio node support
  rxrpc: Fix missing locking causing hanging calls
  net/smc: do not leave a dangling sk pointer in __smc_create()
  drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
  Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
  media: stb0899_algo: initialize cfr before using it
  media: dvbdev: prevent the risk of out of memory access
  media: dvb_frontend: don't play tricks with underflow values
  media: adv7604: prevent underflow condition when reporting colorspace
  scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
  ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
  tools/lib/thermal: Fix sampling handler context ptr
  thermal/of: support thermal zones w/o trips subnode
  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
  ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
  media: dvb-core: add missing buffer index check
  media: mgb4: protect driver against spectre
  media: ar0521: don't overflow when checking PLL values
  media: s5p-jpeg: prevent buffer overflows
  media: cx24116: prevent overflows on SNR calculus
  media: av7110: fix a spectre vulnerability
  media: pulse8-cec: fix data timestamp at pulse8_setup()
  media: vivid: fix buffer overwrite when using > 32 buffers
  media: v4l2-tpg: prevent the risk of a division by zero
  media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
  can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
  can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
  can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when 
switching CAN modes
  can: {cc770,sja1000}_isa: allow building on x86_64
  UBUNTU: [Config] updateconfigs for CAN_{CC770,SJA1000}_ISA
  ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
  ksmbd: check outstanding simultaneous SMB operations
  ksmbd: Fix the missing xa_store error check
  ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
  drm/xe: Fix possible exec queue leak in exec IOCTL
  drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL
  drm/xe: Set mask bits for CCS_MODE register
  pwm: imx-tpm: Use correct MODULO value for EPWM mode
  tpm: Lock TPM chip in tpm_pm_suspend() first
  rpmsg: glink: Handle rejected intent request better
  drm/amd/pm: always pick the pptable from IFWI
  drm/amd/display: Fix brightness level not retained over reboot
  drm/imagination: Add a per-file PVR context list
  drm/imagination: Break an object reference loop
  drm/panthor: Lock XArray when getting entries for the VM
  drm/panthor: Be stricter about IO mapping flags
  drm/amdgpu: Adjust debugfs eviction and IB access permissions
  drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
  drm/amdgpu: Adjust debugfs register access permissions
  drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
  drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
  thermal/drivers/qcom/lmh: Remove false lockdep backtrace
  KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation
  dm cache: correct the number of origin blocks to match the target length
  dm cache: fix flushing uninitialized delayed_work on cache_ctr error
  dm cache: fix out-of-bounds access to the dirty bitset when resizing
  dm cache: optimize dirty bit checking with find_next_bit when resizing
  dm cache: fix potential out-of-bounds access on the first resume
  dm-unstriped: cast an operand to sector_t to prevent potential uint32_t 
overflow
  dm: fix a crash if blk_alloc_disk fails
  mptcp: no admin perm to list endpoints
  ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
  scsi: ufs: core: Start the RTC update work later
  nfs: Fix KMSAN warning in decode_getfattr_attrs()
  tracing: Fix tracefs mount options
  net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
  net: vertexcom: mse102x: Fix possible double free of TX skb
  mptcp: use sock_kfree_s instead of kfree
  arm64/sve: Discard stale CPU state when handling SVE traps
  arm64: Kconfig: Make SME depend on BROKEN for now
  UBUNTU: [Config] updateconfigs for ARM64_SME
  arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
  mm/slab: fix warning caused by duplicate kmem_cache creation in 
kmem_buckets_create
  KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before running it to avoid 
spurious interrupts
  idpf: avoid vport access in idpf_get_link_ksettings
  idpf: fix idpf_vc_core_init error path
  btrfs: fix the length of reserved qgroup to free
  btrfs: fix per-subvolume RO/RW flags with new mount API
  btrfs: reinitialize delayed ref list after deleting it from the list
  platform/x86/amd/pmf: Relocate CPU ID macros to the PMF header
  platform/x86/amd/pmf: Update SMU metrics table for 1AH family series
  platform/x86/amd/pmf: Add SMU metrics table support for 1Ah family 60h model
  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in 
uvc_parse_format
  filemap: Fix bounds checking in filemap_read()
  i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
  clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
  clk: qcom: clk-alpha-pll: Fix pll post div mask when width is not set
  fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
  objpool: fix to make percpu slot allocation more robust
  signal: restore the override_rlimit logic
  mm/damon/core: avoid overflow in damon_feed_loop_next_input()
  mm/damon/core: handle zero {aggregation,ops_update} intervals
  mm/damon/core: handle zero schemes apply interval
  mm/mlock: set the correct prev on failure
  mm/thp: fix deferred split unqueue naming and locking
  thunderbolt: Add only on-board retimers when !CONFIG_USB4_DEBUGFS_MARGINING
  usb: musb: sunxi: Fix accessing an released usb phy
  usb: dwc3: fix fault at system suspend if device was already runtime suspended
  usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
  USB: serial: io_edgeport: fix use after free in debug printk
  USB: serial: qcserial: add support for Sierra Wireless EM86xx
  USB: serial: option: add Fibocom FG132 0x0112 composition
  USB: serial: option: add Quectel RG650V
  clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs
  clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks
  thunderbolt: Fix connection issue with Pluggable UD-4VPD dock
  staging: vchiq_arm: Use devm_kzalloc() for drv_mgmt allocation
  staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation
  irqchip/gic-v3: Force propagation of the active state with a read-back
  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
  ucounts: fix counter leak in inc_rlimit_get_ucounts()
  selftests: hugetlb_dio: check for initial conditions to skip in the start
  firmware: qcom: scm: Refactor code to support multiple dload mode
  UBUNTU: [Config] updateconfigfs for QCOM_SCM_DOWNLOAD_MODE_DEFAULT
  firmware: qcom: scm: suppress download mode error
  block: rework bio splitting
  block: fix queue limits checks in blk_rq_map_user_bvec for real
  drm/xe: Move LNL scheduling WA to xe_device.h
  drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout
  drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout
  ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
  xtensa: Emulate one-byte cmpxchg
  hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
  Linux 6.11.8
  UBUNTU: Upstream stable to v6.11.8

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2091645/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to