Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-02-04
Ported from the following upstream stable releases:
v6.6.67, v6.12.6
from git://git.kernel.org/
bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG
ksmbd: fix racy issue from session lookup and expire
splice: do not checksum AF_UNIX sockets
tcp: check space before adding MPTCP SYN options
riscv: Fix wrong usage of __pa() on a fixmap address
blk-cgroup: Fix UAF in blkcg_unpin_online()
ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5
riscv: Fix IPIs usage in kfence_protect_page()
usb: host: max3421-hcd: Correctly abort a USB request.
ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
usb: dwc2: Fix HCD resume
usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
usb: dwc2: Fix HCD port connection race
scsi: ufs: core: Update compl_time_stamp_local_clock after completing a cqe
usb: gadget: midi2: Fix interpretation of is_midi1 bits
usb: ehci-hcd: fix call balance of clocks handling routines
usb: typec: anx7411: fix fwnode_handle reference leak
usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe()
usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing
null pointer
usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode
drm/i915: Fix memory leak by correcting cache object name in error handler
drm/i915: Fix NULL pointer dereference in capture_engine
xfs: update btree keys correctly when _insrec splits an inode root block
xfs: don't drop errno values when we fail to ficlone the entire range
xfs: return from xfs_symlink_verify early on V4 filesystems
xfs: fix scrub tracepoints when inode-rooted btrees are involved
xfs: only run precommits once per transaction object
bpf: Check size for BTF-based ctx access of pointer members
bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()
bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
bpf, sockmap: Fix race between element replace and close()
bpf, sockmap: Fix update element with same
wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon
wifi: mac80211: fix station NSS capability initialization order
acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
batman-adv: Do not send uninitialized TT changes
batman-adv: Remove uninitialized data in full table TT response
batman-adv: Do not let TT changes list grows indefinitely
net/mlx5: DR, prevent potential error pointer dereference
wifi: cfg80211: sme: init n_channels before channels[] access
selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
selftests: mlxsw: sharedbuffer: Remove duplicate test cases
selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted
ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()
net: lapb: increase LAPB_HEADER_LEN
net: defer final 'struct net' free in netns dismantle
net: mscc: ocelot: fix memory leak on ocelot_port_add_txtstamp_skb()
net: mscc: ocelot: improve handling of TX timestamp for unknown skb
net: mscc: ocelot: ocelot->ts_id_lock and ocelot_port->tx_skbs.lock are IRQ-safe
net: mscc: ocelot: be resilient to loss of PTP packets during transmission
net: mscc: ocelot: perform error cleanup in ocelot_hwstamp_set()
spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user()
net: sparx5: fix FDMA performance issue
net: sparx5: fix the maximum frame length register
ACPI: resource: Fix memory resource type union access
cxgb4: use port number to set mac addr
qca_spi: Fix clock speed for multiple QCA7000
qca_spi: Make driver probing reliable
ALSA: control: Avoid WARN() for symlink errors
ASoC: amd: yc: Fix the wrong return value
Documentation: PM: Clarify pm_runtime_resume_and_get() return value
net: renesas: rswitch: fix race window between tx start and complete
net: renesas: rswitch: fix leaked pointer on error path
net: renesas: rswitch: avoid use-after-put for a device tree node
net: renesas: rswitch: handle stop vs interrupt race
netfilter: IDLETIMER: Fix for possible ABBA deadlock
netfilter: nf_tables: do not defer rule destruction via call_rcu
net: dsa: felix: fix stuck CPU-injected packets with short taprio windows
net/sched: netem: account for backlog updates from child qdisc
bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired
Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating
Bluetooth: iso: Fix recursive locking warning
Bluetooth: SCO: Add support for 16 bits transparent voice setting
Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
net: renesas: rswitch: fix initial MPIC register setting
net: dsa: microchip: KSZ9896 register regmap alignment to 32 bit boundaries
blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
kselftest/arm64: abi: fix SVCR detection
KVM: arm64: Disable MPAM visibility by default and ignore VMM writes
selftests/bpf: remove use of __xlated()
xen/netfront: fix crash when removing device
x86: make get_cpu_vendor() accessible from Xen code
objtool/x86: allow syscall instruction
x86/static-call: provide a way to do very early static-call updates
x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0
x86/asm: Make serialize() always_inline
x86/xen: don't do PV iret hypercall through hypercall page
x86/xen: add central hypercall functions
x86/xen: use new hypercall functions instead of hypercall page
x86/xen: remove hypercall page
x86/static-call: fix 32-bit build
serial: sh-sci: Check if TX data was written to device in .tx_empty()
clk: en7523: Fix wrong BUS clock for EN7581
riscv: mm: Do not call pmd dtor on vmemmap page table teardown
block: Switch to using refcount_t for zone write plugs
block: Use a zone write plug BIO work for REQ_NOWAIT BIOs
dm: Fix dm-zoned-reclaim zone write pointer alignment
block: Prevent potential deadlocks in zone write plug error recovery
gpio: graniterapids: Fix GPIO Ack functionality
spi: rockchip: Fix PM runtime count on no-op cs
gpio: ljca: Initialize num before accessing item in ljca_gpio_config
ALSA: hda/realtek: Fix headset mic on Acer Nitro 5
crypto: hisilicon/debugfs - fix the struct pointer incorrectly offset problem
block: Ignore REQ_NOWAIT for zone reset and zone finish operations
gpio: graniterapids: Fix vGPIO driver crash
gpio: graniterapids: Fix incorrect BAR assignment
gpio: graniterapids: Fix invalid GPI_IS register offset
gpio: graniterapids: Fix invalid RXEVCFG register bitmask
gpio: graniterapids: Determine if GPIO pad can be used by driver
gpio: graniterapids: Check if GPIO line can be used for IRQs
usb: core: hcd: only check primary hcd skip_phy_initialization
bpf: Revert "bpf: Mark raw_tp arguments with PTR_MAYBE_NULL"
usb: typec: ucsi: Fix completion notifications
iommu/vt-d: Remove cache tags before disabling ATS
drm/xe: Call invalidation_fence_fini for PT inval fences in error state
drm/amdkfd: pause autosuspend when creating pdd
drm/amdkfd: fixed page fault when enable MES shader debugger
drm/i915/dsb: s/dsb/dsb_color_vblank/
drm/i915/color: Stop using non-posted DSB writes for legacy LUT
drm/amdgpu: fix UVD contiguous CS mapping problem
drm/amd/pm: Set SMU v13.0.7 default workload type
drm/amdkfd: hard-code cacheline size for gfx11
drm/amdkfd: hard-code MALL cacheline size for gfx11, gfx12
xfs: set XFS_SICK_INO_SYMLINK_ZAPPED explicitly when zapping a symlink
xfs: return a 64-bit block count from xfs_btree_count_blocks
xfs: unlock inodes when erroring out of xfs_trans_alloc_dir
bpf: Augment raw_tp arguments with PTR_MAYBE_NULL
wifi: mac80211: fix a queue stall in certain cases of CSA
perf machine: Initialize machine->env to address a segfault
bnxt_en: Fix GSO type for HW GRO packets on 5750X chips
regulator: axp20x: AXP717: set ramp_delay
block: get wp_offset by bdev_offset_from_zone_start
bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips
cifs: Fix rmdir failure due to ongoing I/O on deleted file
net: renesas: rswitch: fix possible early skb release
Bluetooth: Improve setsockopt() handling of malformed user input
libperf: evlist: Fix --cpu argument on hybrid platform
ASoC: fsl_xcvr: change IFACE_PCM to IFACE_MIXER
ASoC: fsl_spdif: change IFACE_PCM to IFACE_MIXER
selftests: netfilter: Stabilize rpath.sh
net: mana: Fix memory leak in mana_gd_setup_irqs
net: mana: Fix irq_contexts memory leak in mana_gd_setup_irqs
net, team, bonding: Add netdev_base_features helper
bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features
team: Fix initial vlan_feature set in __team_compute_features
ASoC: Intel: sof_sdw: Add space for a terminator into DAIs array
Bluetooth: iso: Always release hdev at the end of iso_listen_bis
Bluetooth: iso: Fix circular lock in iso_listen_bis
Bluetooth: iso: Fix circular lock in iso_conn_big_sync
net: dsa: tag_ocelot_8021q: fix broken reception
drm/xe: fix the ERR_PTR() returned on failure to allocate tiny pt
drm/xe/reg_sr: Remove register pool
blk-mq: move cpuhp callback registering out of q->sysfs_lock
block: avoid to reuse `hctx` not removed from cpuhp callback list
rust: kbuild: set `bindgen`'s Rust target version
UBUNTU: Upstream stable to v6.6.67, v6.12.6
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Oracular)
Importance: Medium
Assignee: Koichiro Den (koichiroden)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Oracular)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Oracular)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Oracular)
Status: New => In Progress
** Changed in: linux (Ubuntu Oracular)
Assignee: (unassigned) => Koichiro Den (koichiroden)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-02-04
+
+ Ported from the following upstream stable releases:
+ v6.6.67, v6.12.6
+
from git://git.kernel.org/
+
+ bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
+ perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG
+ ksmbd: fix racy issue from session lookup and expire
+ splice: do not checksum AF_UNIX sockets
+ tcp: check space before adding MPTCP SYN options
+ riscv: Fix wrong usage of __pa() on a fixmap address
+ blk-cgroup: Fix UAF in blkcg_unpin_online()
+ ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5
+ riscv: Fix IPIs usage in kfence_protect_page()
+ usb: host: max3421-hcd: Correctly abort a USB request.
+ ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
+ usb: dwc2: Fix HCD resume
+ usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
+ usb: dwc2: Fix HCD port connection race
+ scsi: ufs: core: Update compl_time_stamp_local_clock after completing a cqe
+ usb: gadget: midi2: Fix interpretation of is_midi1 bits
+ usb: ehci-hcd: fix call balance of clocks handling routines
+ usb: typec: anx7411: fix fwnode_handle reference leak
+ usb: typec: anx7411: fix OF node reference leaks in
anx7411_typec_switch_probe()
+ usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to
accessing null pointer
+ usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode
+ drm/i915: Fix memory leak by correcting cache object name in error handler
+ drm/i915: Fix NULL pointer dereference in capture_engine
+ xfs: update btree keys correctly when _insrec splits an inode root block
+ xfs: don't drop errno values when we fail to ficlone the entire range
+ xfs: return from xfs_symlink_verify early on V4 filesystems
+ xfs: fix scrub tracepoints when inode-rooted btrees are involved
+ xfs: only run precommits once per transaction object
+ bpf: Check size for BTF-based ctx access of pointer members
+ bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()
+ bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
+ bpf, sockmap: Fix race between element replace and close()
+ bpf, sockmap: Fix update element with same
+ wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
+ wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon
+ wifi: mac80211: fix station NSS capability initialization order
+ acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
+ batman-adv: Do not send uninitialized TT changes
+ batman-adv: Remove uninitialized data in full table TT response
+ batman-adv: Do not let TT changes list grows indefinitely
+ net/mlx5: DR, prevent potential error pointer dereference
+ wifi: cfg80211: sme: init n_channels before channels[] access
+ selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
+ selftests: mlxsw: sharedbuffer: Remove duplicate test cases
+ selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted
+ ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()
+ net: lapb: increase LAPB_HEADER_LEN
+ net: defer final 'struct net' free in netns dismantle
+ net: mscc: ocelot: fix memory leak on ocelot_port_add_txtstamp_skb()
+ net: mscc: ocelot: improve handling of TX timestamp for unknown skb
+ net: mscc: ocelot: ocelot->ts_id_lock and ocelot_port->tx_skbs.lock are
IRQ-safe
+ net: mscc: ocelot: be resilient to loss of PTP packets during transmission
+ net: mscc: ocelot: perform error cleanup in ocelot_hwstamp_set()
+ spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user()
+ net: sparx5: fix FDMA performance issue
+ net: sparx5: fix the maximum frame length register
+ ACPI: resource: Fix memory resource type union access
+ cxgb4: use port number to set mac addr
+ qca_spi: Fix clock speed for multiple QCA7000
+ qca_spi: Make driver probing reliable
+ ALSA: control: Avoid WARN() for symlink errors
+ ASoC: amd: yc: Fix the wrong return value
+ Documentation: PM: Clarify pm_runtime_resume_and_get() return value
+ net: renesas: rswitch: fix race window between tx start and complete
+ net: renesas: rswitch: fix leaked pointer on error path
+ net: renesas: rswitch: avoid use-after-put for a device tree node
+ net: renesas: rswitch: handle stop vs interrupt race
+ netfilter: IDLETIMER: Fix for possible ABBA deadlock
+ netfilter: nf_tables: do not defer rule destruction via call_rcu
+ net: dsa: felix: fix stuck CPU-injected packets with short taprio windows
+ net/sched: netem: account for backlog updates from child qdisc
+ bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
+ team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
+ ACPICA: events/evxfregn: don't release the ContextMutex that was never
acquired
+ Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating
+ Bluetooth: iso: Fix recursive locking warning
+ Bluetooth: SCO: Add support for 16 bits transparent voice setting
+ Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
+ net: renesas: rswitch: fix initial MPIC register setting
+ net: dsa: microchip: KSZ9896 register regmap alignment to 32 bit boundaries
+ blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
+ kselftest/arm64: abi: fix SVCR detection
+ KVM: arm64: Disable MPAM visibility by default and ignore VMM writes
+ selftests/bpf: remove use of __xlated()
+ xen/netfront: fix crash when removing device
+ x86: make get_cpu_vendor() accessible from Xen code
+ objtool/x86: allow syscall instruction
+ x86/static-call: provide a way to do very early static-call updates
+ x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0
+ x86/asm: Make serialize() always_inline
+ x86/xen: don't do PV iret hypercall through hypercall page
+ x86/xen: add central hypercall functions
+ x86/xen: use new hypercall functions instead of hypercall page
+ x86/xen: remove hypercall page
+ x86/static-call: fix 32-bit build
+ serial: sh-sci: Check if TX data was written to device in .tx_empty()
+ clk: en7523: Fix wrong BUS clock for EN7581
+ riscv: mm: Do not call pmd dtor on vmemmap page table teardown
+ block: Switch to using refcount_t for zone write plugs
+ block: Use a zone write plug BIO work for REQ_NOWAIT BIOs
+ dm: Fix dm-zoned-reclaim zone write pointer alignment
+ block: Prevent potential deadlocks in zone write plug error recovery
+ gpio: graniterapids: Fix GPIO Ack functionality
+ spi: rockchip: Fix PM runtime count on no-op cs
+ gpio: ljca: Initialize num before accessing item in ljca_gpio_config
+ ALSA: hda/realtek: Fix headset mic on Acer Nitro 5
+ crypto: hisilicon/debugfs - fix the struct pointer incorrectly offset problem
+ block: Ignore REQ_NOWAIT for zone reset and zone finish operations
+ gpio: graniterapids: Fix vGPIO driver crash
+ gpio: graniterapids: Fix incorrect BAR assignment
+ gpio: graniterapids: Fix invalid GPI_IS register offset
+ gpio: graniterapids: Fix invalid RXEVCFG register bitmask
+ gpio: graniterapids: Determine if GPIO pad can be used by driver
+ gpio: graniterapids: Check if GPIO line can be used for IRQs
+ usb: core: hcd: only check primary hcd skip_phy_initialization
+ bpf: Revert "bpf: Mark raw_tp arguments with PTR_MAYBE_NULL"
+ usb: typec: ucsi: Fix completion notifications
+ iommu/vt-d: Remove cache tags before disabling ATS
+ drm/xe: Call invalidation_fence_fini for PT inval fences in error state
+ drm/amdkfd: pause autosuspend when creating pdd
+ drm/amdkfd: fixed page fault when enable MES shader debugger
+ drm/i915/dsb: s/dsb/dsb_color_vblank/
+ drm/i915/color: Stop using non-posted DSB writes for legacy LUT
+ drm/amdgpu: fix UVD contiguous CS mapping problem
+ drm/amd/pm: Set SMU v13.0.7 default workload type
+ drm/amdkfd: hard-code cacheline size for gfx11
+ drm/amdkfd: hard-code MALL cacheline size for gfx11, gfx12
+ xfs: set XFS_SICK_INO_SYMLINK_ZAPPED explicitly when zapping a symlink
+ xfs: return a 64-bit block count from xfs_btree_count_blocks
+ xfs: unlock inodes when erroring out of xfs_trans_alloc_dir
+ bpf: Augment raw_tp arguments with PTR_MAYBE_NULL
+ wifi: mac80211: fix a queue stall in certain cases of CSA
+ perf machine: Initialize machine->env to address a segfault
+ bnxt_en: Fix GSO type for HW GRO packets on 5750X chips
+ regulator: axp20x: AXP717: set ramp_delay
+ block: get wp_offset by bdev_offset_from_zone_start
+ bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips
+ cifs: Fix rmdir failure due to ongoing I/O on deleted file
+ net: renesas: rswitch: fix possible early skb release
+ Bluetooth: Improve setsockopt() handling of malformed user input
+ libperf: evlist: Fix --cpu argument on hybrid platform
+ ASoC: fsl_xcvr: change IFACE_PCM to IFACE_MIXER
+ ASoC: fsl_spdif: change IFACE_PCM to IFACE_MIXER
+ selftests: netfilter: Stabilize rpath.sh
+ net: mana: Fix memory leak in mana_gd_setup_irqs
+ net: mana: Fix irq_contexts memory leak in mana_gd_setup_irqs
+ net, team, bonding: Add netdev_base_features helper
+ bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features
+ team: Fix initial vlan_feature set in __team_compute_features
+ ASoC: Intel: sof_sdw: Add space for a terminator into DAIs array
+ Bluetooth: iso: Always release hdev at the end of iso_listen_bis
+ Bluetooth: iso: Fix circular lock in iso_listen_bis
+ Bluetooth: iso: Fix circular lock in iso_conn_big_sync
+ net: dsa: tag_ocelot_8021q: fix broken reception
+ drm/xe: fix the ERR_PTR() returned on failure to allocate tiny pt
+ drm/xe/reg_sr: Remove register pool
+ blk-mq: move cpuhp callback registering out of q->sysfs_lock
+ block: avoid to reuse `hctx` not removed from cpuhp callback list
+ rust: kbuild: set `bindgen`'s Rust target version
+ UBUNTU: Upstream stable to v6.6.67, v6.12.6
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2097332
Title:
Oracular update: upstream stable patchset 2025-02-04
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Oracular:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-02-04
Ported from the following upstream stable releases:
v6.6.67, v6.12.6
from git://git.kernel.org/
bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG
ksmbd: fix racy issue from session lookup and expire
splice: do not checksum AF_UNIX sockets
tcp: check space before adding MPTCP SYN options
riscv: Fix wrong usage of __pa() on a fixmap address
blk-cgroup: Fix UAF in blkcg_unpin_online()
ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5
riscv: Fix IPIs usage in kfence_protect_page()
usb: host: max3421-hcd: Correctly abort a USB request.
ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
usb: dwc2: Fix HCD resume
usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
usb: dwc2: Fix HCD port connection race
scsi: ufs: core: Update compl_time_stamp_local_clock after completing a cqe
usb: gadget: midi2: Fix interpretation of is_midi1 bits
usb: ehci-hcd: fix call balance of clocks handling routines
usb: typec: anx7411: fix fwnode_handle reference leak
usb: typec: anx7411: fix OF node reference leaks in
anx7411_typec_switch_probe()
usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to
accessing null pointer
usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode
drm/i915: Fix memory leak by correcting cache object name in error handler
drm/i915: Fix NULL pointer dereference in capture_engine
xfs: update btree keys correctly when _insrec splits an inode root block
xfs: don't drop errno values when we fail to ficlone the entire range
xfs: return from xfs_symlink_verify early on V4 filesystems
xfs: fix scrub tracepoints when inode-rooted btrees are involved
xfs: only run precommits once per transaction object
bpf: Check size for BTF-based ctx access of pointer members
bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()
bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
bpf, sockmap: Fix race between element replace and close()
bpf, sockmap: Fix update element with same
wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon
wifi: mac80211: fix station NSS capability initialization order
acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
batman-adv: Do not send uninitialized TT changes
batman-adv: Remove uninitialized data in full table TT response
batman-adv: Do not let TT changes list grows indefinitely
net/mlx5: DR, prevent potential error pointer dereference
wifi: cfg80211: sme: init n_channels before channels[] access
selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
selftests: mlxsw: sharedbuffer: Remove duplicate test cases
selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted
ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()
net: lapb: increase LAPB_HEADER_LEN
net: defer final 'struct net' free in netns dismantle
net: mscc: ocelot: fix memory leak on ocelot_port_add_txtstamp_skb()
net: mscc: ocelot: improve handling of TX timestamp for unknown skb
net: mscc: ocelot: ocelot->ts_id_lock and ocelot_port->tx_skbs.lock are
IRQ-safe
net: mscc: ocelot: be resilient to loss of PTP packets during transmission
net: mscc: ocelot: perform error cleanup in ocelot_hwstamp_set()
spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user()
net: sparx5: fix FDMA performance issue
net: sparx5: fix the maximum frame length register
ACPI: resource: Fix memory resource type union access
cxgb4: use port number to set mac addr
qca_spi: Fix clock speed for multiple QCA7000
qca_spi: Make driver probing reliable
ALSA: control: Avoid WARN() for symlink errors
ASoC: amd: yc: Fix the wrong return value
Documentation: PM: Clarify pm_runtime_resume_and_get() return value
net: renesas: rswitch: fix race window between tx start and complete
net: renesas: rswitch: fix leaked pointer on error path
net: renesas: rswitch: avoid use-after-put for a device tree node
net: renesas: rswitch: handle stop vs interrupt race
netfilter: IDLETIMER: Fix for possible ABBA deadlock
netfilter: nf_tables: do not defer rule destruction via call_rcu
net: dsa: felix: fix stuck CPU-injected packets with short taprio windows
net/sched: netem: account for backlog updates from child qdisc
bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
ACPICA: events/evxfregn: don't release the ContextMutex that was never
acquired
Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating
Bluetooth: iso: Fix recursive locking warning
Bluetooth: SCO: Add support for 16 bits transparent voice setting
Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
net: renesas: rswitch: fix initial MPIC register setting
net: dsa: microchip: KSZ9896 register regmap alignment to 32 bit boundaries
blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
kselftest/arm64: abi: fix SVCR detection
KVM: arm64: Disable MPAM visibility by default and ignore VMM writes
selftests/bpf: remove use of __xlated()
xen/netfront: fix crash when removing device
x86: make get_cpu_vendor() accessible from Xen code
objtool/x86: allow syscall instruction
x86/static-call: provide a way to do very early static-call updates
x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0
x86/asm: Make serialize() always_inline
x86/xen: don't do PV iret hypercall through hypercall page
x86/xen: add central hypercall functions
x86/xen: use new hypercall functions instead of hypercall page
x86/xen: remove hypercall page
x86/static-call: fix 32-bit build
serial: sh-sci: Check if TX data was written to device in .tx_empty()
clk: en7523: Fix wrong BUS clock for EN7581
riscv: mm: Do not call pmd dtor on vmemmap page table teardown
block: Switch to using refcount_t for zone write plugs
block: Use a zone write plug BIO work for REQ_NOWAIT BIOs
dm: Fix dm-zoned-reclaim zone write pointer alignment
block: Prevent potential deadlocks in zone write plug error recovery
gpio: graniterapids: Fix GPIO Ack functionality
spi: rockchip: Fix PM runtime count on no-op cs
gpio: ljca: Initialize num before accessing item in ljca_gpio_config
ALSA: hda/realtek: Fix headset mic on Acer Nitro 5
crypto: hisilicon/debugfs - fix the struct pointer incorrectly offset problem
block: Ignore REQ_NOWAIT for zone reset and zone finish operations
gpio: graniterapids: Fix vGPIO driver crash
gpio: graniterapids: Fix incorrect BAR assignment
gpio: graniterapids: Fix invalid GPI_IS register offset
gpio: graniterapids: Fix invalid RXEVCFG register bitmask
gpio: graniterapids: Determine if GPIO pad can be used by driver
gpio: graniterapids: Check if GPIO line can be used for IRQs
usb: core: hcd: only check primary hcd skip_phy_initialization
bpf: Revert "bpf: Mark raw_tp arguments with PTR_MAYBE_NULL"
usb: typec: ucsi: Fix completion notifications
iommu/vt-d: Remove cache tags before disabling ATS
drm/xe: Call invalidation_fence_fini for PT inval fences in error state
drm/amdkfd: pause autosuspend when creating pdd
drm/amdkfd: fixed page fault when enable MES shader debugger
drm/i915/dsb: s/dsb/dsb_color_vblank/
drm/i915/color: Stop using non-posted DSB writes for legacy LUT
drm/amdgpu: fix UVD contiguous CS mapping problem
drm/amd/pm: Set SMU v13.0.7 default workload type
drm/amdkfd: hard-code cacheline size for gfx11
drm/amdkfd: hard-code MALL cacheline size for gfx11, gfx12
xfs: set XFS_SICK_INO_SYMLINK_ZAPPED explicitly when zapping a symlink
xfs: return a 64-bit block count from xfs_btree_count_blocks
xfs: unlock inodes when erroring out of xfs_trans_alloc_dir
bpf: Augment raw_tp arguments with PTR_MAYBE_NULL
wifi: mac80211: fix a queue stall in certain cases of CSA
perf machine: Initialize machine->env to address a segfault
bnxt_en: Fix GSO type for HW GRO packets on 5750X chips
regulator: axp20x: AXP717: set ramp_delay
block: get wp_offset by bdev_offset_from_zone_start
bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips
cifs: Fix rmdir failure due to ongoing I/O on deleted file
net: renesas: rswitch: fix possible early skb release
Bluetooth: Improve setsockopt() handling of malformed user input
libperf: evlist: Fix --cpu argument on hybrid platform
ASoC: fsl_xcvr: change IFACE_PCM to IFACE_MIXER
ASoC: fsl_spdif: change IFACE_PCM to IFACE_MIXER
selftests: netfilter: Stabilize rpath.sh
net: mana: Fix memory leak in mana_gd_setup_irqs
net: mana: Fix irq_contexts memory leak in mana_gd_setup_irqs
net, team, bonding: Add netdev_base_features helper
bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features
team: Fix initial vlan_feature set in __team_compute_features
ASoC: Intel: sof_sdw: Add space for a terminator into DAIs array
Bluetooth: iso: Always release hdev at the end of iso_listen_bis
Bluetooth: iso: Fix circular lock in iso_listen_bis
Bluetooth: iso: Fix circular lock in iso_conn_big_sync
net: dsa: tag_ocelot_8021q: fix broken reception
drm/xe: fix the ERR_PTR() returned on failure to allocate tiny pt
drm/xe/reg_sr: Remove register pool
blk-mq: move cpuhp callback registering out of q->sysfs_lock
block: avoid to reuse `hctx` not removed from cpuhp callback list
rust: kbuild: set `bindgen`'s Rust target version
UBUNTU: Upstream stable to v6.6.67, v6.12.6
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2097332/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
