Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.12.5 upstream stable release
       from git://git.kernel.org/

            
Linux 6.12.5
softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel
clocksource: Make negative motion detection more robust
timekeeping: Remove CONFIG_DEBUG_TIMEKEEPING
ALSA: hda/realtek: Fix spelling mistake "Firelfy" -> "Firefly"
s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails
Revert "drm/amd/display: parse umc_info or vram_info based on ASIC"
ALSA: hda: Fix build error without CONFIG_SND_DEBUG
drm/amdgpu: rework resume handling for display (v2)
ASoC: Intel: avs: Fix return status of avs_pcm_hw_constraints_init()
net/mlx5: unique names for per device caches
ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume"
media: ipu6: use the IPU6 DMA mapping APIs to do mapping
jffs2: Fix rtime decompressor
jffs2: Prevent rtime decompress memory corruption
KVM: x86/mmu: Ensure that kvm_release_pfn_clean() takes exact pfn from 
kvm_faultin_pfn()
selftests/ftrace: adjust offset for kprobe syntax error test
vfio/mlx5: Align the page tracking max message size with the device capability
Revert "unicode: Don't special case ignorable code points"
x86: Fix build regression with CONFIG_KEXEC_JUMP enabled
tracing/eprobe: Fix to release eprobe when failed to add dyn_event
clk: en7523: Initialize num before accessing hws in en7523_register_clocks()
btrfs: fix missing snapshot drew unlock when root is dead during swap activation
btrfs: fix mount failure due to remount races
btrfs: drop unused parameter data from btrfs_fill_super()
btrfs: drop unused parameter options from open_ctree()
sched/deadline: Fix warning in migrate_enable for boosted tasks
sched/core: Prevent wakeup of ksoftirqd during idle load balance
sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning 
busy
sched/core: Remove the unnecessary need_resched() check in nohz_csd_func()
sched: fix warning in sched_setaffinity
drm/amd/display: Add option to retrieve detile buffer size
drm/xe/devcoredump: Update handling of xe_force_wake_get return
drm/xe/forcewake: Add a helper xe_force_wake_ref_has_domain()
drm/xe/guc: Copy GuC log prior to dumping
drm/xe/devcoredump: Add ASCII85 dump helper function
drm/xe/devcoredump: Improve section headings and add tile info
drm/xe/devcoredump: Use drm_puts and already cached local variables
scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()
io_uring/tctx: work around xa_store() allocation error issue
setlocalversion: work around "git describe" performance
smb: client: don't try following DFS links in cifs_tree_connect()
irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
Revert "nvme: make keep-alive synchronous operation"
serial: 8250_dw: Add Sophgo SG2044 quirk
rtc: cmos: avoid taking rtc_lock for extended period of time
misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle
powerpc/prom_init: Fixup missing powermac #size-cells
ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6 21M1CTO1WW
MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3
ASoC: amd: yc: fix internal mic on Redmi G 2022
usb: typec: ucsi: glink: be more precise on orientation-aware ports
iio: light: ltr501: Add LTER0303 to the supported devices
iio: adc: ad7192: properly check spi_get_device_match_data()
usb: typec: ucsi: Do not call ACPI _DSM method for UCSI read operations
usb: chipidea: udc: handle USB Error Interrupt if IOC not set
usb: chipidea: udc: create bounce buffer for problem sglist entries if possible
usb: chipidea: udc: limit usb request length to max 16KB
usb: chipidea: add CI_HDRC_HAS_SHORT_PKT_LIMIT flag
regulator: qcom-rpmh: Update ranges for FTSMPS525
fs/ntfs3: Fix case when unmarked clusters intersect with zone
fs/ntfs3: Fix warning in ni_fiemap
LoongArch: Fix sleeping in atomic context for PREEMPT_RT
ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[]
ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840
f2fs: add a sysfs node to limit max read extent count per-inode
f2fs: fix to shrink read extent node in batches
f2fs: print message if fscorrupted was found in f2fs_new_node_page()
i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid 
deadlock
remoteproc: qcom: pas: enable SAR2130P audio DSP support
PCI: Add ACS quirk for Wangxun FF5xxx NICs
PCI: Add 'reset_subordinate' to reset hierarchy below bridge
PCI: starfive: Enable controller runtime PM before probing host bridge
PCI: Detect and trust built-in Thunderbolt chips
PCI: vmd: Set devices to D0 before enabling PM L1 Substates
PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs
PCI: qcom: Add support for IPQ9574
i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request
KMSAN: uninit-value in inode_go_dump (5)
f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
mailbox: pcc: Check before sending MCTP PCC response ACK
verification/dot2: Improve dot parser robustness
tools/rtla: Enhance argument parsing in timerlat_load.py
tracing: Fix function name for trampoline
smb: client: memcpy() with surrounding object base address
nvdimm: rectify the illogical code within nd_dax_probe()
thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens
pinctrl: qcom: spmi-mpp: Add PM8937 compatible
pinctrl: qcom-pmic-gpio: add support for PM8937
scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset
scsi: st: Don't modify unknown block number in MTIOCGET
leds: class: Protect brightness_show() with led_cdev->led_access mutex
clk: qcom: clk-alpha-pll: Add NSS HUAYRA ALPHA PLL support for ipq9574
clk: qcom: dispcc-sm8550: enable support for SAR2130P
clk: qcom: tcsrcc-sm8550: add SAR2130P support
clk: qcom: rpmh: add support for SAR2130P
clk: qcom: rcg2: add clk_rcg2_shared_floor_ops
scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback
scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI
scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths
bpf: put bpf_link's program when link is safe to be deallocated
iommu/amd: Fix corruption when mapping large pages from 0
scsi: ufs: core: Make DMA mask configuration more flexible
pinmux: Use sequential access to access desc->pinmux data
ring-buffer: Limit time with disabled interrupts in rb_check_pages()
scsi: hisi_sas: Create all dump files during debugfs initialization
scsi: hisi_sas: Add cond_resched() for no forced preemption model
rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long long
rtla/timerlat: Make timerlat_top_cpu->*_count unsigned long long
tools/rtla: fix collision with glibc sched_attr/sched_set_attr
tracing: Use atomic64_inc_return() in trace_clock_counter()
tracing/ftrace: disable preemption in syscall probe
rtla: Fix consistency in getopt_long for timerlat_hist
pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU
netpoll: Use rcu_access_pointer() in __netpoll_setup
net/neighbor: clear error in case strict check is not set
rocker: fix link status detection in rocker_carrier_init()
ASoC: hdmi-codec: reorder channel allocation list
Bluetooth: btusb: Add 3 HWIDs for MT7925
Bluetooth: btusb: Add new VID/PID 0489/e124 for MT7925
Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925
Bluetooth: Set quirks for ATS2851
Bluetooth: Support new quirks for ATS2851
Bluetooth: Add new quirks for ATS2851
Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
Bluetooth: hci_conn: Use disable_delayed_work_sync
Bluetooth: btusb: Add USB HW IDs for MT7920/MT7925
Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables
Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions
i2c: i801: Add support for Intel Panther Lake
dsa: qca8k: Use nested lock to avoid splat
mptcp: fix possible integer overflow in mptcp_reset_tout_timer
bpf: Call free_htab_elem() after htab_unlock_bucket()
wifi: brcmfmac: Fix oops due to NULL pointer dereference in 
brcmf_sdiod_sglist_rw()
wifi: ipw2x00: libipw_rx_any(): fix bad alignment
drm/amdgpu: set the right AMDGPU sg segment limitation
ALSA: usb-audio: Make mic volume workarounds globally applicable
virtio-net: fix overflow inside virtnet_rq_alloc
drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov
drm/amd/display: Prune Invalid Modes For HDMI Output
drm/amd/display: parse umc_info or vram_info based on ASIC
drm/amd/display: Remove hw w/a toggle if on DP2/HPO
drm/panic: Add ABGR2101010 support
net/tcp: Add missing lockdep annotations for TCP-AO hlist traversals
fsl/fman: Validate cell-index value obtained from Device Tree
jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
jfs: fix array-index-out-of-bounds in jfs_readdir
jfs: fix shift-out-of-bounds in dbSplit
jfs: array-index-out-of-bounds fix in dtReadFirst
dma-debug: fix a possible deadlock on radix_lock
mptcp: annotate data-races around subflow->fully_established
drm/amd/display: Fix underflow when playing 8K video in full screen mode
ASoC: Intel: soc-acpi-intel-arl-match: Add rt722 and rt1320 support
ASoC: sdw_utils: Add quirk to exclude amplifier function
drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr
netlink: specs: Add missing bitset attrs to ethtool spec
drm/amdgpu: Dereference the ATCS ACPI buffer
drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih
drm/amdgpu/gfx9: Add cleaner shader for GFX9.4.2
drm/amd/display: Adding array index check to prevent memory corruption
drm/sched: memset() 'job' in drm_sched_job_init()
net: stmmac: Programming sequence for VLAN packets with split header
net: sfp: change quirks for Alcatel Lucent G-010S-P
drm/panel: simple: Add Microchip AC69T88A LVDS Display panel
drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
ASoC: Intel: sof_sdw: Add quirks for some new Lenovo laptops
ASoC: Intel: sof_sdw: Add quirk for cs42l43 system using host DMICs
ASoC: sdw_utils: Add a quirk to allow the cs42l43 mic DAI to be ignored
ASoC: sdw_utils: Add support for exclusion DAI quirks
bpf: Prevent tailcall infinite loop caused by freplace
fanotify: allow reporting errors on failure to open fd
wifi: ath5k: add PCI ID for Arcadyan devices
wifi: ath5k: add PCI ID for SX76X
wifi: ath10k: avoid NULL pointer error during sdio remove
net: inet6: do not leave a dangling sk pointer in inet6_create()
net: inet: do not leave a dangling sk pointer in inet_create()
net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
net: af_can: do not leave a dangling sk pointer in can_create()
Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
Bluetooth: L2CAP: do not leave dangling sk pointer on error in 
l2cap_sock_create()
af_packet: avoid erroring out after sock_init_data() in packet_create()
net/sched: cbs: Fix integer overflow in cbs_set_port_rate()
net: ethernet: fs_enet: Use %pa to format resource_size_t
net: fec_mpc52xx_phy: Use %pa to format resource_size_t
drm/amd/display: Full exit out of IPS2 when all allow signals have been cleared
accel/qaic: Add AIC080 support
wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()
samples/bpf: Fix a resource leak
r8169: don't apply UDP padding quirk on RTL8126A
ALSA: hda/realtek: Use codec SSID matching for Lenovo devices
ALSA: hda/conexant: Use the new codec SSID matching
ALSA: hda: Use own quirk lookup helper
drm/display: Fix building with GCC 15
drm/xe/xe3: Add initial set of workarounds
drm/xe/ptl: L3bank mask is not available on the media GT
drm/amd/display: disable SG displays on cyan skillfish
drm/amd/display: Fix garbage or black screen when resetting otg
drm/amd/display: skip disable CRTC in seemless bootup case
dlm: fix possible lkb_resource null dereference
ASoC: Intel: sof_rt5682: Add HDMI-In capture with rt5682 support for MTL.
drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check()
drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
wifi: rtw89: check return value of ieee80211_probereq_get() for RNR
drm/mcde: Enable module autoloading
drm/bridge: it6505: Enable module autoloading
drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK
drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition
drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model
drm/xe/pciid: Add new PCI id for ARL
wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb
drm/xe/pciids: Add PVC's PCI device ID macros
drm/vc4: hvs: Set AXI panic modes for the HVS
drm/vc4: hdmi: Avoid log spam for audio start failure
drm/xe/pciids: separate ARL and MTL PCI IDs
drm/xe/pciids: separate RPL-U and RPL-P PCI IDs
HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support
sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl()
selftests/resctrl: Protect against array overflow when reading strings
regmap: maple: Provide lockdep (sub)class for maple tree's internal lock
soc: imx8m: Probe the SoC driver as platform driver
firmware: qcom: scm: Allow QSEECOM on Dell XPS 13 9345
mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED
mmc: core: Add SD card quirk for broken poweroff notification
media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108
media: uvcvideo: Force UVC version to 1.0a for 0408:4033
media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera
media: uvcvideo: RealSense D421 Depth module metadata
soc: qcom: pd-mapper: Add QCM6490 PD maps
firmware: qcom: scm: Allow QSEECOM on Lenovo Yoga Slim 7x
HID: add per device quirk to force bind to hid-generic
soc: qcom: llcc: Use designated initializers for LLC settings
spi: spi-fsl-lpspi: Adjust type of scldiv
gpio: free irqs that are still requested when the chip is being removed
timekeeping: Always check for negative motion
iio: magnetometer: fix if () scoped_guard() formatting
cleanup: Adjust scoped_guard() macros to avoid potential warning
perf/x86/amd: Warn only on new bits set
ACPI: video: force native for Apple MacbookPro11,2 and Air7,2
ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration()
ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID
hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list
kcsan: Turn report_filterlist_lock into a raw_spinlock
crypto: ecdsa - Avoid signed integer overflow on signature decoding
ext4: partial zero eof block on unaligned inode size extension
kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all()
btrfs: do not clear read-only when adding sprout device
btrfs: canonicalize the device path before adding it
btrfs: avoid unnecessary device path update for the same device
btrfs: don't take dev_replace rwsem on task already holding it
block: RCU protect disk->conv_zones_bitmap
s390/cpum_sf: Handle CPU hotplug remove during sampling
kselftest/arm64: Log fp-stress child startup errors to stdout
epoll: annotate racy check
s390/pci: Ignore RID for isolated VFs
s390/pci: Use topology ID for multi-function devices
s390/pci: Sort PCI functions prior to creating virtual busses
rust: enable arbitrary_self_types and remove `Receiver`
memblock: allow zero threshold in validate_numa_converage()
scsi: ufs: pltfrm: Drop PM runtime reference count after ufshcd_remove()
mm: respect mmap hint address when aligning for THP
mm: fix vrealloc()'s KASAN poisoning logic
mm: open-code page_folio() in dump_page()
mm: open-code PageTail in folio_flags() and const_folio_flags()
mm: memcg: declare do_memsw_account inline
mm/damon: fix order of arguments in damos_before_apply tracepoint
x86/mm: Add _PAGE_NOPTISHADOW bit to avoid updating userspace page tables
x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC
mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
mm/gup: handle NULL pages in unpin_user_pages()
kasan: make report_lock a raw spinlock
sched/numa: fix memory leak due to the overwritten vma->numab_state
lib: stackinit: hide never-taken branch from compiler
stackdepot: fix stack_depot_save_flags() in NMI context
ocfs2: update seq_file index in ocfs2_dlm_seq_next
x86/cpu: Add Lunar Lake to list of CPUs with a broken MONITOR implementation
mmc: core: Further prevent card detect during shutdown
mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet
arch_numa: Restore nid checks before registering a memblock with a node
regmap: detach regmap from dev on regmap_exit
xsk: fix OOB map writes when deleting elements
dma-fence: Use kernel's sort for merging fences
dma-fence: Fix reference leak on fence merge failure path
dma-buf: fix dma_fence_array_signaled v4
bpf: fix OOB devmap writes when deleting elements
x86/kexec: Restore GDT on return from ::preserve_context kexec
modpost: Add .irqentry.text to OTHER_SECTIONS
drm/amdgpu/hdp5.2: do a posting read when flushing HDP
drm/amdgpu/hdp7.0: do a posting read when flushing HDP
drm/amdgpu/hdp5.0: do a posting read when flushing HDP
drm/amdgpu/hdp4.0: do a posting read when flushing HDP
drm/amdgpu/hdp6.0: do a posting read when flushing HDP
drm/amd/display: Add a left edge pixel if in YCbCr422 or YCbCr420 and odm
drm/amd/display: Limit VTotal range to max hw cap minus fp
drm/amd/display: Correct prefetch calculation
drm/dp_mst: Fix resetting msg rx state after topology removal
drm/dp_mst: Verify request type in the corresponding down message reply
drm/amd/pm: fix and simplify workload handling
drm/amdkfd: add MEC version that supports no PCIe atomics for GFX12
drm/dp_mst: Fix MST sideband message body length check
drm/amdkfd: hard-code cacheline for gc943,gc944
x86/cacheinfo: Delete global num_cache_leaves
cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU
selftest: hugetlb_dio: fix test naming
selftests/damon: add _damon_sysfs.py to TEST_FILES
pmdomain: imx: gpcv2: Adjust delay after power up handshake
Revert "readahead: properly shorten readahead when falling back to 
do_page_cache_ra()"
bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
io_uring: Change res2 parameter type in io_uring_cmd_done
smb3.1.1: fix posix mounts to older servers
fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points
fs/smb/client: Implement new SMB3 POSIX type
fs/smb/client: avoid querying SMB2_OP_QUERY_WSL_EA for SMB3 POSIX
nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
scsi: ufs: core: Add missing post notify for power mode change
scsi: ufs: pltfrm: Disable runtime PM during removal of glue drivers
scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
scsi: ufs: core: Cancel RTC work during ufshcd_remove()
scsi: ufs: core: sysfs: Prevent div by zero
scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt
scsi: qla2xxx: Fix use after free on unload
scsi: qla2xxx: Supported speed displayed incorrectly for VPorts
scsi: qla2xxx: Fix NVMe and NPIV connect issue
scsi: qla2xxx: Fix abort in bsg timeout
ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG)
ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8
ALSA: usb-audio: add mixer mapping for Corsair HS80
ALSA: hda/realtek: fix micmute LEDs don't work on HP Laptops
ALSA: usb-audio: Add extra PID for RME Digiface USB
ALSA: usb-audio: Fix a DMA to stack memory bug
arm64: ptrace: fix partial SETREGSET for NT_ARM_POE
arm64: ptrace: fix partial SETREGSET for NT_ARM_FPMR
arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs
arm64: mm: Fix zone_dma_limit calculation
iommufd: Fix out_fput in iommufd_fault_alloc()
net :mana :Request a V2 response version for MANA_QUERY_GF_STAT
tracing: Fix cmp_entries_dup() to respect sort() comparison rules
can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E 6.
can: dev: can_set_termination(): allow sleeping GPIOs
watchdog: rti: of: honor timeout-sec property
ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
LoongArch: KVM: Protect kvm_check_requests() with SRCU
LoongArch: Add architecture specific huge_pte_clear()
HID: wacom: fix when get product name maybe null pointer
HID: i2c-hid: Revert to using power commands to wake on resume
rust: allow `clippy::needless_lifetimes`
x86/CPU/AMD: WARN when setting EFER.AUTOIBRS if and only if the WRMSR fails
bpf: Fix exact match conditions in trie_get_next_key()
bpf: Handle in-place update for full LPM trie correctly
bpf: Remove unnecessary kfree(im_node) in lpm_trie_update_elem
bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
smb: client: fix potential race in cifs_put_tcon()
iio: magnetometer: yas530: use signed integer type for clamp limits
scatterlist: fix incorrect func name in kernel-doc
ocfs2: free inode when ocfs2_get_init_inode() fails
drm/v3d: Enable Performance Counters before clearing them
ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec
scsi: scsi_debug: Fix hrtimer support for ndelay
scsi: sg: Fix slab-use-after-free read in sg_release()
nvme-rdma: unquiesce admin_q before destroy it
nvme-tcp: fix the memleak while create new ctrl failed
nvme-fabrics: handle zero MAXCMD without closing the connection
bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
bpf: Don't mark STACK_INVALID as STACK_MISC in mark_stack_slot_misc
drivers/virt: pkvm: Don't fail ioremap() call if MMIO_GUARD fails
irqchip/stm32mp-exti: CONFIG_STM32MP_EXTI should not default to y when 
compile-testing
bpf: Ensure reg is PTR_TO_STACK in process_iter_arg
x86/pkeys: Ensure updated PKRU value is XRSTOR'd
x86/pkeys: Change caller of update_pkru_in_sigframe()
nvme: don't apply NVME_QUIRK_DEALLOCATE_ZEROES when DSM is not supported
pmdomain: core: Fix error path in pm_genpd_init() when ida alloc fails
pmdomain: core: Add missing put_device()
ASoC: SOF: ipc3-topology: fix resource leaks in sof_ipc3_widget_setup_comp_dai()
ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index
spi: mpc52xx: Add cancel_work_sync before module remove
tools: Override makefile ARCH variable if defined, but empty
ALSA: usb-audio: Notify xrun for low-latency mode
ALSA: seq: ump: Fix seq port updates per FB info notify
tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
drm/sti: Add __iomem for mixer_dbg_mxn's parameter
bpftool: fix potential NULL pointer dereferencing in prog_dump()
xsk: always clear DMA mapping information when unmapping the pool
bpf, vsock: Invoke proto::close on close()
bpf, vsock: Fix poll() missing a queue
scsi: ufs: core: Add ufshcd_send_bsg_uic_cmd() for UFS BSG
scsi: ufs: core: Always initialize the UIC done completion
drm/amd/display: Ignore scalar validation failure if pipe is phantom
drm/amd/display: calculate final viewport before TAP optimization
i3c: master: Fix dynamic address leak when 'assigned-address' is present
i3c: master: Extend address status bit to 4 and add I3C_ADDR_SLOT_EXT_DESIRED
i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS
f2fs: fix to requery extent which cross boundary of inquiry
f2fs: fix to adjust appropriate length for fiemap
f2fs: clean up w/ F2FS_{BLK_TO_BYTES,BTYES_TO_BLK}
ntp: Remove invalid cast in time offset math
zram: clear IDLE flag in mark_idle()
zram: do not mark idle slots that cannot be idle
mmc: core: Use GFP_NOIO in ACMD22
mmc: core: Adjust ACMD22 to SDUC
mmc: sd: SDUC Support Recognition
mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting
mmc: mtk-sd: fix devm_clk_get_optional usage
mmc: mtk-sd: Fix error handle of probe function
mmc: mtk-sd: use devm_mmc_alloc_host
gpio: grgpio: Add NULL check in grgpio_probe
gpio: grgpio: use a helper variable to store the address of ofdev->dev
net: avoid potential UAF in default_operstate()
vsock/test: fix parameter types in SO_VM_SOCKETS_* calls
vsock/test: fix failures due to wrong SO_RCVLOWAT parameter
net/mlx5e: Remove workaround to avoid syndrome for internal port
net/mlx5e: SD, Use correct mdev to build channel param
net/mlx5: HWS: Properly set bwc queue locks lock classes
net/mlx5: HWS: Fix memory leak in mlx5hws_definer_calc_layout
geneve: do not assume mac header is set in geneve_xmit_skb()
mlxsw: spectrum_acl_flex_keys: Use correct key block on Spectrum-4
mlxsw: spectrum_acl_flex_keys: Constify struct mlxsw_afk_element_inst
ethtool: Fix wrong mod state in case of verbose and no_mask bitset
netfilter: nft_set_hash: skip duplicated elements pending gc run
netfilter: ipset: Hold module reference while requesting a module
net: sched: fix erspan_opt settings in cls_flower
Revert "udp: avoid calling sock_def_readable() if possible"
netfilter: nft_inner: incorrect percpu area handling under softirq
igb: Fix potential invalid memory access in igb_init_module()
ixgbe: Correct BASE-BX10 compliance code
ixgbe: downgrade logging of unsupported VF API version to debug
ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5
idpf: set completion tag for "empty" bufs associated with a packet
ice: Fix VLAN pruning in switchdev mode
ice: fix PHY timestamp extraction for ETH56G
ice: fix PHY Clock Recovery availability check
net: hsr: must allocate more bytes for RedBox support
net/qed: allow old cards not supporting "num_images" to work
net/smc: fix LGR and link use-after-free issue
net/smc: initialize close_work early to avoid warning
tipc: Fix use-after-free of kernel socket in cleanup_bearer().
dccp: Fix memory leak in dccp_feat_change_recv
net/ipv6: release expired exception dst cached in socket
net: phy: microchip: Reset LAN88xx PHY to ensure clean link state on 
LAN7800/7850
platform/x86: asus-wmi: Ignore return value when writing thermal policy
can: j1939: j1939_session_new(): fix skb reference counting
ipv6: avoid possible NULL deref in modify_prefix_route()
net: Fix icmp host relookup triggering ip_rt_bug
bnxt_en: ethtool: Supply ntuple rss context action
net: hsr: avoid potential out-of-bound access in fill_frame_info()
net/sched: tbf: correct backlog statistic for GSO packets
ptp: Add error handling for adjfine callback in ptp_clock_adjtime
net: enetc: Do not configure preemptible TCs if SIs do not support
selftests: hid: fix typo and exit code
netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
netfilter: x_tables: fix LED ID check in led_tg_check()
ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
can: f81604: f81604_handle_can_bus_errors(): fix {rx,tx}_errors statistics
can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics
can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics
can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics
can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics
can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics
can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics
can: hi311x: hi3110_can_ist(): fix potential use-after-free
can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL
can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails
can: gs_usb: add usb endpoint address detection at driver probe step
watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart()
watchdog: apple: Actually flush writes after requesting watchdog restart
watchdog: xilinx_wwdt: Calculate max_hw_heartbeat_ms using clock frequency
iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Confirmed

** Affects: linux (Ubuntu Plucky)
     Importance: Undecided
         Status: Confirmed


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Plucky)
   Importance: Undecided
       Status: Confirmed

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2097339

Title:
  Plucky update: v6.12.5 upstream stable release

Status in linux package in Ubuntu:
  Confirmed
Status in linux source package in Plucky:
  Confirmed

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v6.12.5 upstream stable release
         from git://git.kernel.org/

              
  Linux 6.12.5
  softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel
  clocksource: Make negative motion detection more robust
  timekeeping: Remove CONFIG_DEBUG_TIMEKEEPING
  ALSA: hda/realtek: Fix spelling mistake "Firelfy" -> "Firefly"
  s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails
  Revert "drm/amd/display: parse umc_info or vram_info based on ASIC"
  ALSA: hda: Fix build error without CONFIG_SND_DEBUG
  drm/amdgpu: rework resume handling for display (v2)
  ASoC: Intel: avs: Fix return status of avs_pcm_hw_constraints_init()
  net/mlx5: unique names for per device caches
  ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume"
  media: ipu6: use the IPU6 DMA mapping APIs to do mapping
  jffs2: Fix rtime decompressor
  jffs2: Prevent rtime decompress memory corruption
  KVM: x86/mmu: Ensure that kvm_release_pfn_clean() takes exact pfn from 
kvm_faultin_pfn()
  selftests/ftrace: adjust offset for kprobe syntax error test
  vfio/mlx5: Align the page tracking max message size with the device capability
  Revert "unicode: Don't special case ignorable code points"
  x86: Fix build regression with CONFIG_KEXEC_JUMP enabled
  tracing/eprobe: Fix to release eprobe when failed to add dyn_event
  clk: en7523: Initialize num before accessing hws in en7523_register_clocks()
  btrfs: fix missing snapshot drew unlock when root is dead during swap 
activation
  btrfs: fix mount failure due to remount races
  btrfs: drop unused parameter data from btrfs_fill_super()
  btrfs: drop unused parameter options from open_ctree()
  sched/deadline: Fix warning in migrate_enable for boosted tasks
  sched/core: Prevent wakeup of ksoftirqd during idle load balance
  sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning 
busy
  sched/core: Remove the unnecessary need_resched() check in nohz_csd_func()
  sched: fix warning in sched_setaffinity
  drm/amd/display: Add option to retrieve detile buffer size
  drm/xe/devcoredump: Update handling of xe_force_wake_get return
  drm/xe/forcewake: Add a helper xe_force_wake_ref_has_domain()
  drm/xe/guc: Copy GuC log prior to dumping
  drm/xe/devcoredump: Add ASCII85 dump helper function
  drm/xe/devcoredump: Improve section headings and add tile info
  drm/xe/devcoredump: Use drm_puts and already cached local variables
  scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()
  io_uring/tctx: work around xa_store() allocation error issue
  setlocalversion: work around "git describe" performance
  smb: client: don't try following DFS links in cifs_tree_connect()
  irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
  Revert "nvme: make keep-alive synchronous operation"
  serial: 8250_dw: Add Sophgo SG2044 quirk
  rtc: cmos: avoid taking rtc_lock for extended period of time
  misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle
  powerpc/prom_init: Fixup missing powermac #size-cells
  ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6 
21M1CTO1WW
  MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
  drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3
  ASoC: amd: yc: fix internal mic on Redmi G 2022
  usb: typec: ucsi: glink: be more precise on orientation-aware ports
  iio: light: ltr501: Add LTER0303 to the supported devices
  iio: adc: ad7192: properly check spi_get_device_match_data()
  usb: typec: ucsi: Do not call ACPI _DSM method for UCSI read operations
  usb: chipidea: udc: handle USB Error Interrupt if IOC not set
  usb: chipidea: udc: create bounce buffer for problem sglist entries if 
possible
  usb: chipidea: udc: limit usb request length to max 16KB
  usb: chipidea: add CI_HDRC_HAS_SHORT_PKT_LIMIT flag
  regulator: qcom-rpmh: Update ranges for FTSMPS525
  fs/ntfs3: Fix case when unmarked clusters intersect with zone
  fs/ntfs3: Fix warning in ni_fiemap
  LoongArch: Fix sleeping in atomic context for PREEMPT_RT
  ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[]
  ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840
  f2fs: add a sysfs node to limit max read extent count per-inode
  f2fs: fix to shrink read extent node in batches
  f2fs: print message if fscorrupted was found in f2fs_new_node_page()
  i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid 
deadlock
  remoteproc: qcom: pas: enable SAR2130P audio DSP support
  PCI: Add ACS quirk for Wangxun FF5xxx NICs
  PCI: Add 'reset_subordinate' to reset hierarchy below bridge
  PCI: starfive: Enable controller runtime PM before probing host bridge
  PCI: Detect and trust built-in Thunderbolt chips
  PCI: vmd: Set devices to D0 before enabling PM L1 Substates
  PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs
  PCI: qcom: Add support for IPQ9574
  i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request
  KMSAN: uninit-value in inode_go_dump (5)
  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  mailbox: pcc: Check before sending MCTP PCC response ACK
  verification/dot2: Improve dot parser robustness
  tools/rtla: Enhance argument parsing in timerlat_load.py
  tracing: Fix function name for trampoline
  smb: client: memcpy() with surrounding object base address
  nvdimm: rectify the illogical code within nd_dax_probe()
  thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens
  pinctrl: qcom: spmi-mpp: Add PM8937 compatible
  pinctrl: qcom-pmic-gpio: add support for PM8937
  scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset
  scsi: st: Don't modify unknown block number in MTIOCGET
  leds: class: Protect brightness_show() with led_cdev->led_access mutex
  clk: qcom: clk-alpha-pll: Add NSS HUAYRA ALPHA PLL support for ipq9574
  clk: qcom: dispcc-sm8550: enable support for SAR2130P
  clk: qcom: tcsrcc-sm8550: add SAR2130P support
  clk: qcom: rpmh: add support for SAR2130P
  clk: qcom: rcg2: add clk_rcg2_shared_floor_ops
  scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback
  scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up 
FDMI
  scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths
  bpf: put bpf_link's program when link is safe to be deallocated
  iommu/amd: Fix corruption when mapping large pages from 0
  scsi: ufs: core: Make DMA mask configuration more flexible
  pinmux: Use sequential access to access desc->pinmux data
  ring-buffer: Limit time with disabled interrupts in rb_check_pages()
  scsi: hisi_sas: Create all dump files during debugfs initialization
  scsi: hisi_sas: Add cond_resched() for no forced preemption model
  rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long long
  rtla/timerlat: Make timerlat_top_cpu->*_count unsigned long long
  tools/rtla: fix collision with glibc sched_attr/sched_set_attr
  tracing: Use atomic64_inc_return() in trace_clock_counter()
  tracing/ftrace: disable preemption in syscall probe
  rtla: Fix consistency in getopt_long for timerlat_hist
  pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU
  netpoll: Use rcu_access_pointer() in __netpoll_setup
  net/neighbor: clear error in case strict check is not set
  rocker: fix link status detection in rocker_carrier_init()
  ASoC: hdmi-codec: reorder channel allocation list
  Bluetooth: btusb: Add 3 HWIDs for MT7925
  Bluetooth: btusb: Add new VID/PID 0489/e124 for MT7925
  Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925
  Bluetooth: Set quirks for ATS2851
  Bluetooth: Support new quirks for ATS2851
  Bluetooth: Add new quirks for ATS2851
  Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
  Bluetooth: hci_conn: Use disable_delayed_work_sync
  Bluetooth: btusb: Add USB HW IDs for MT7920/MT7925
  Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables
  Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions
  i2c: i801: Add support for Intel Panther Lake
  dsa: qca8k: Use nested lock to avoid splat
  mptcp: fix possible integer overflow in mptcp_reset_tout_timer
  bpf: Call free_htab_elem() after htab_unlock_bucket()
  wifi: brcmfmac: Fix oops due to NULL pointer dereference in 
brcmf_sdiod_sglist_rw()
  wifi: ipw2x00: libipw_rx_any(): fix bad alignment
  drm/amdgpu: set the right AMDGPU sg segment limitation
  ALSA: usb-audio: Make mic volume workarounds globally applicable
  virtio-net: fix overflow inside virtnet_rq_alloc
  drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov
  drm/amd/display: Prune Invalid Modes For HDMI Output
  drm/amd/display: parse umc_info or vram_info based on ASIC
  drm/amd/display: Remove hw w/a toggle if on DP2/HPO
  drm/panic: Add ABGR2101010 support
  net/tcp: Add missing lockdep annotations for TCP-AO hlist traversals
  fsl/fman: Validate cell-index value obtained from Device Tree
  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  jfs: fix array-index-out-of-bounds in jfs_readdir
  jfs: fix shift-out-of-bounds in dbSplit
  jfs: array-index-out-of-bounds fix in dtReadFirst
  dma-debug: fix a possible deadlock on radix_lock
  mptcp: annotate data-races around subflow->fully_established
  drm/amd/display: Fix underflow when playing 8K video in full screen mode
  ASoC: Intel: soc-acpi-intel-arl-match: Add rt722 and rt1320 support
  ASoC: sdw_utils: Add quirk to exclude amplifier function
  drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr
  netlink: specs: Add missing bitset attrs to ethtool spec
  drm/amdgpu: Dereference the ATCS ACPI buffer
  drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih
  drm/amdgpu/gfx9: Add cleaner shader for GFX9.4.2
  drm/amd/display: Adding array index check to prevent memory corruption
  drm/sched: memset() 'job' in drm_sched_job_init()
  net: stmmac: Programming sequence for VLAN packets with split header
  net: sfp: change quirks for Alcatel Lucent G-010S-P
  drm/panel: simple: Add Microchip AC69T88A LVDS Display panel
  drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
  ASoC: Intel: sof_sdw: Add quirks for some new Lenovo laptops
  ASoC: Intel: sof_sdw: Add quirk for cs42l43 system using host DMICs
  ASoC: sdw_utils: Add a quirk to allow the cs42l43 mic DAI to be ignored
  ASoC: sdw_utils: Add support for exclusion DAI quirks
  bpf: Prevent tailcall infinite loop caused by freplace
  fanotify: allow reporting errors on failure to open fd
  wifi: ath5k: add PCI ID for Arcadyan devices
  wifi: ath5k: add PCI ID for SX76X
  wifi: ath10k: avoid NULL pointer error during sdio remove
  net: inet6: do not leave a dangling sk pointer in inet6_create()
  net: inet: do not leave a dangling sk pointer in inet_create()
  net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
  net: af_can: do not leave a dangling sk pointer in can_create()
  Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
  Bluetooth: L2CAP: do not leave dangling sk pointer on error in 
l2cap_sock_create()
  af_packet: avoid erroring out after sock_init_data() in packet_create()
  net/sched: cbs: Fix integer overflow in cbs_set_port_rate()
  net: ethernet: fs_enet: Use %pa to format resource_size_t
  net: fec_mpc52xx_phy: Use %pa to format resource_size_t
  drm/amd/display: Full exit out of IPS2 when all allow signals have been 
cleared
  accel/qaic: Add AIC080 support
  wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()
  samples/bpf: Fix a resource leak
  r8169: don't apply UDP padding quirk on RTL8126A
  ALSA: hda/realtek: Use codec SSID matching for Lenovo devices
  ALSA: hda/conexant: Use the new codec SSID matching
  ALSA: hda: Use own quirk lookup helper
  drm/display: Fix building with GCC 15
  drm/xe/xe3: Add initial set of workarounds
  drm/xe/ptl: L3bank mask is not available on the media GT
  drm/amd/display: disable SG displays on cyan skillfish
  drm/amd/display: Fix garbage or black screen when resetting otg
  drm/amd/display: skip disable CRTC in seemless bootup case
  dlm: fix possible lkb_resource null dereference
  ASoC: Intel: sof_rt5682: Add HDMI-In capture with rt5682 support for MTL.
  drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check()
  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  wifi: rtw89: check return value of ieee80211_probereq_get() for RNR
  drm/mcde: Enable module autoloading
  drm/bridge: it6505: Enable module autoloading
  drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK
  drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition
  drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model
  drm/xe/pciid: Add new PCI id for ARL
  wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb
  drm/xe/pciids: Add PVC's PCI device ID macros
  drm/vc4: hvs: Set AXI panic modes for the HVS
  drm/vc4: hdmi: Avoid log spam for audio start failure
  drm/xe/pciids: separate ARL and MTL PCI IDs
  drm/xe/pciids: separate RPL-U and RPL-P PCI IDs
  HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support
  sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl()
  selftests/resctrl: Protect against array overflow when reading strings
  regmap: maple: Provide lockdep (sub)class for maple tree's internal lock
  soc: imx8m: Probe the SoC driver as platform driver
  firmware: qcom: scm: Allow QSEECOM on Dell XPS 13 9345
  mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED
  mmc: core: Add SD card quirk for broken poweroff notification
  media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108
  media: uvcvideo: Force UVC version to 1.0a for 0408:4033
  media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera
  media: uvcvideo: RealSense D421 Depth module metadata
  soc: qcom: pd-mapper: Add QCM6490 PD maps
  firmware: qcom: scm: Allow QSEECOM on Lenovo Yoga Slim 7x
  HID: add per device quirk to force bind to hid-generic
  soc: qcom: llcc: Use designated initializers for LLC settings
  spi: spi-fsl-lpspi: Adjust type of scldiv
  gpio: free irqs that are still requested when the chip is being removed
  timekeeping: Always check for negative motion
  iio: magnetometer: fix if () scoped_guard() formatting
  cleanup: Adjust scoped_guard() macros to avoid potential warning
  perf/x86/amd: Warn only on new bits set
  ACPI: video: force native for Apple MacbookPro11,2 and Air7,2
  ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration()
  ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID
  hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list
  kcsan: Turn report_filterlist_lock into a raw_spinlock
  crypto: ecdsa - Avoid signed integer overflow on signature decoding
  ext4: partial zero eof block on unaligned inode size extension
  kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all()
  btrfs: do not clear read-only when adding sprout device
  btrfs: canonicalize the device path before adding it
  btrfs: avoid unnecessary device path update for the same device
  btrfs: don't take dev_replace rwsem on task already holding it
  block: RCU protect disk->conv_zones_bitmap
  s390/cpum_sf: Handle CPU hotplug remove during sampling
  kselftest/arm64: Log fp-stress child startup errors to stdout
  epoll: annotate racy check
  s390/pci: Ignore RID for isolated VFs
  s390/pci: Use topology ID for multi-function devices
  s390/pci: Sort PCI functions prior to creating virtual busses
  rust: enable arbitrary_self_types and remove `Receiver`
  memblock: allow zero threshold in validate_numa_converage()
  scsi: ufs: pltfrm: Drop PM runtime reference count after ufshcd_remove()
  mm: respect mmap hint address when aligning for THP
  mm: fix vrealloc()'s KASAN poisoning logic
  mm: open-code page_folio() in dump_page()
  mm: open-code PageTail in folio_flags() and const_folio_flags()
  mm: memcg: declare do_memsw_account inline
  mm/damon: fix order of arguments in damos_before_apply tracepoint
  x86/mm: Add _PAGE_NOPTISHADOW bit to avoid updating userspace page tables
  x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC
  mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
  mm/gup: handle NULL pages in unpin_user_pages()
  kasan: make report_lock a raw spinlock
  sched/numa: fix memory leak due to the overwritten vma->numab_state
  lib: stackinit: hide never-taken branch from compiler
  stackdepot: fix stack_depot_save_flags() in NMI context
  ocfs2: update seq_file index in ocfs2_dlm_seq_next
  x86/cpu: Add Lunar Lake to list of CPUs with a broken MONITOR implementation
  mmc: core: Further prevent card detect during shutdown
  mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet
  arch_numa: Restore nid checks before registering a memblock with a node
  regmap: detach regmap from dev on regmap_exit
  xsk: fix OOB map writes when deleting elements
  dma-fence: Use kernel's sort for merging fences
  dma-fence: Fix reference leak on fence merge failure path
  dma-buf: fix dma_fence_array_signaled v4
  bpf: fix OOB devmap writes when deleting elements
  x86/kexec: Restore GDT on return from ::preserve_context kexec
  modpost: Add .irqentry.text to OTHER_SECTIONS
  drm/amdgpu/hdp5.2: do a posting read when flushing HDP
  drm/amdgpu/hdp7.0: do a posting read when flushing HDP
  drm/amdgpu/hdp5.0: do a posting read when flushing HDP
  drm/amdgpu/hdp4.0: do a posting read when flushing HDP
  drm/amdgpu/hdp6.0: do a posting read when flushing HDP
  drm/amd/display: Add a left edge pixel if in YCbCr422 or YCbCr420 and odm
  drm/amd/display: Limit VTotal range to max hw cap minus fp
  drm/amd/display: Correct prefetch calculation
  drm/dp_mst: Fix resetting msg rx state after topology removal
  drm/dp_mst: Verify request type in the corresponding down message reply
  drm/amd/pm: fix and simplify workload handling
  drm/amdkfd: add MEC version that supports no PCIe atomics for GFX12
  drm/dp_mst: Fix MST sideband message body length check
  drm/amdkfd: hard-code cacheline for gc943,gc944
  x86/cacheinfo: Delete global num_cache_leaves
  cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU
  selftest: hugetlb_dio: fix test naming
  selftests/damon: add _damon_sysfs.py to TEST_FILES
  pmdomain: imx: gpcv2: Adjust delay after power up handshake
  Revert "readahead: properly shorten readahead when falling back to 
do_page_cache_ra()"
  bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
  io_uring: Change res2 parameter type in io_uring_cmd_done
  smb3.1.1: fix posix mounts to older servers
  fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points
  fs/smb/client: Implement new SMB3 POSIX type
  fs/smb/client: avoid querying SMB2_OP_QUERY_WSL_EA for SMB3 POSIX
  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  scsi: ufs: core: Add missing post notify for power mode change
  scsi: ufs: pltfrm: Disable runtime PM during removal of glue drivers
  scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
  scsi: ufs: core: Cancel RTC work during ufshcd_remove()
  scsi: ufs: core: sysfs: Prevent div by zero
  scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt
  scsi: qla2xxx: Fix use after free on unload
  scsi: qla2xxx: Supported speed displayed incorrectly for VPorts
  scsi: qla2xxx: Fix NVMe and NPIV connect issue
  scsi: qla2xxx: Fix abort in bsg timeout
  ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG)
  ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8
  ALSA: usb-audio: add mixer mapping for Corsair HS80
  ALSA: hda/realtek: fix micmute LEDs don't work on HP Laptops
  ALSA: usb-audio: Add extra PID for RME Digiface USB
  ALSA: usb-audio: Fix a DMA to stack memory bug
  arm64: ptrace: fix partial SETREGSET for NT_ARM_POE
  arm64: ptrace: fix partial SETREGSET for NT_ARM_FPMR
  arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
  arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs
  arm64: mm: Fix zone_dma_limit calculation
  iommufd: Fix out_fput in iommufd_fault_alloc()
  net :mana :Request a V2 response version for MANA_QUERY_GF_STAT
  tracing: Fix cmp_entries_dup() to respect sort() comparison rules
  can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E 6.
  can: dev: can_set_termination(): allow sleeping GPIOs
  watchdog: rti: of: honor timeout-sec property
  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  LoongArch: KVM: Protect kvm_check_requests() with SRCU
  LoongArch: Add architecture specific huge_pte_clear()
  HID: wacom: fix when get product name maybe null pointer
  HID: i2c-hid: Revert to using power commands to wake on resume
  rust: allow `clippy::needless_lifetimes`
  x86/CPU/AMD: WARN when setting EFER.AUTOIBRS if and only if the WRMSR fails
  bpf: Fix exact match conditions in trie_get_next_key()
  bpf: Handle in-place update for full LPM trie correctly
  bpf: Remove unnecessary kfree(im_node) in lpm_trie_update_elem
  bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
  smb: client: fix potential race in cifs_put_tcon()
  iio: magnetometer: yas530: use signed integer type for clamp limits
  scatterlist: fix incorrect func name in kernel-doc
  ocfs2: free inode when ocfs2_get_init_inode() fails
  drm/v3d: Enable Performance Counters before clearing them
  ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec
  scsi: scsi_debug: Fix hrtimer support for ndelay
  scsi: sg: Fix slab-use-after-free read in sg_release()
  nvme-rdma: unquiesce admin_q before destroy it
  nvme-tcp: fix the memleak while create new ctrl failed
  nvme-fabrics: handle zero MAXCMD without closing the connection
  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
  bpf: Don't mark STACK_INVALID as STACK_MISC in mark_stack_slot_misc
  drivers/virt: pkvm: Don't fail ioremap() call if MMIO_GUARD fails
  irqchip/stm32mp-exti: CONFIG_STM32MP_EXTI should not default to y when 
compile-testing
  bpf: Ensure reg is PTR_TO_STACK in process_iter_arg
  x86/pkeys: Ensure updated PKRU value is XRSTOR'd
  x86/pkeys: Change caller of update_pkru_in_sigframe()
  nvme: don't apply NVME_QUIRK_DEALLOCATE_ZEROES when DSM is not supported
  pmdomain: core: Fix error path in pm_genpd_init() when ida alloc fails
  pmdomain: core: Add missing put_device()
  ASoC: SOF: ipc3-topology: fix resource leaks in 
sof_ipc3_widget_setup_comp_dai()
  ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index
  spi: mpc52xx: Add cancel_work_sync before module remove
  tools: Override makefile ARCH variable if defined, but empty
  ALSA: usb-audio: Notify xrun for low-latency mode
  ALSA: seq: ump: Fix seq port updates per FB info notify
  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  drm/sti: Add __iomem for mixer_dbg_mxn's parameter
  bpftool: fix potential NULL pointer dereferencing in prog_dump()
  xsk: always clear DMA mapping information when unmapping the pool
  bpf, vsock: Invoke proto::close on close()
  bpf, vsock: Fix poll() missing a queue
  scsi: ufs: core: Add ufshcd_send_bsg_uic_cmd() for UFS BSG
  scsi: ufs: core: Always initialize the UIC done completion
  drm/amd/display: Ignore scalar validation failure if pipe is phantom
  drm/amd/display: calculate final viewport before TAP optimization
  i3c: master: Fix dynamic address leak when 'assigned-address' is present
  i3c: master: Extend address status bit to 4 and add I3C_ADDR_SLOT_EXT_DESIRED
  i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS
  f2fs: fix to requery extent which cross boundary of inquiry
  f2fs: fix to adjust appropriate length for fiemap
  f2fs: clean up w/ F2FS_{BLK_TO_BYTES,BTYES_TO_BLK}
  ntp: Remove invalid cast in time offset math
  zram: clear IDLE flag in mark_idle()
  zram: do not mark idle slots that cannot be idle
  mmc: core: Use GFP_NOIO in ACMD22
  mmc: core: Adjust ACMD22 to SDUC
  mmc: sd: SDUC Support Recognition
  mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting
  mmc: mtk-sd: fix devm_clk_get_optional usage
  mmc: mtk-sd: Fix error handle of probe function
  mmc: mtk-sd: use devm_mmc_alloc_host
  gpio: grgpio: Add NULL check in grgpio_probe
  gpio: grgpio: use a helper variable to store the address of ofdev->dev
  net: avoid potential UAF in default_operstate()
  vsock/test: fix parameter types in SO_VM_SOCKETS_* calls
  vsock/test: fix failures due to wrong SO_RCVLOWAT parameter
  net/mlx5e: Remove workaround to avoid syndrome for internal port
  net/mlx5e: SD, Use correct mdev to build channel param
  net/mlx5: HWS: Properly set bwc queue locks lock classes
  net/mlx5: HWS: Fix memory leak in mlx5hws_definer_calc_layout
  geneve: do not assume mac header is set in geneve_xmit_skb()
  mlxsw: spectrum_acl_flex_keys: Use correct key block on Spectrum-4
  mlxsw: spectrum_acl_flex_keys: Constify struct mlxsw_afk_element_inst
  ethtool: Fix wrong mod state in case of verbose and no_mask bitset
  netfilter: nft_set_hash: skip duplicated elements pending gc run
  netfilter: ipset: Hold module reference while requesting a module
  net: sched: fix erspan_opt settings in cls_flower
  Revert "udp: avoid calling sock_def_readable() if possible"
  netfilter: nft_inner: incorrect percpu area handling under softirq
  igb: Fix potential invalid memory access in igb_init_module()
  ixgbe: Correct BASE-BX10 compliance code
  ixgbe: downgrade logging of unsupported VF API version to debug
  ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5
  idpf: set completion tag for "empty" bufs associated with a packet
  ice: Fix VLAN pruning in switchdev mode
  ice: fix PHY timestamp extraction for ETH56G
  ice: fix PHY Clock Recovery availability check
  net: hsr: must allocate more bytes for RedBox support
  net/qed: allow old cards not supporting "num_images" to work
  net/smc: fix LGR and link use-after-free issue
  net/smc: initialize close_work early to avoid warning
  tipc: Fix use-after-free of kernel socket in cleanup_bearer().
  dccp: Fix memory leak in dccp_feat_change_recv
  net/ipv6: release expired exception dst cached in socket
  net: phy: microchip: Reset LAN88xx PHY to ensure clean link state on 
LAN7800/7850
  platform/x86: asus-wmi: Ignore return value when writing thermal policy
  can: j1939: j1939_session_new(): fix skb reference counting
  ipv6: avoid possible NULL deref in modify_prefix_route()
  net: Fix icmp host relookup triggering ip_rt_bug
  bnxt_en: ethtool: Supply ntuple rss context action
  net: hsr: avoid potential out-of-bound access in fill_frame_info()
  net/sched: tbf: correct backlog statistic for GSO packets
  ptp: Add error handling for adjfine callback in ptp_clock_adjtime
  net: enetc: Do not configure preemptible TCs if SIs do not support
  selftests: hid: fix typo and exit code
  netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
  netfilter: x_tables: fix LED ID check in led_tg_check()
  ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
  can: f81604: f81604_handle_can_bus_errors(): fix {rx,tx}_errors statistics
  can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics
  can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics
  can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics
  can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics
  can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics
  can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics
  can: hi311x: hi3110_can_ist(): fix potential use-after-free
  can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL
  can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails
  can: gs_usb: add usb endpoint address detection at driver probe step
  watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart()
  watchdog: apple: Actually flush writes after requesting watchdog restart
  watchdog: xilinx_wwdt: Calculate max_hw_heartbeat_ms using clock frequency
  iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2097339/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to