Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       upstream stable patchset 2025-02-10

                Ported from the following upstream stable releases:
                        v6.6.70, v6.12.9

       from git://git.kernel.org/

docs: media: update location of the media patches
x86/mm: Carve out INVLPG inline asm for use by others
smb/client: rename cifs_ntsd to smb_ntsd
smb/client: rename cifs_sid to smb_sid
smb/client: rename cifs_acl to smb_acl
smb/client: rename cifs_ace to smb_ace
fs/smb/client: implement chmod() for SMB3 POSIX Extensions
smb/client: Prevent error pointer dereference
smb: client: stop flooding dmesg in smb2_calc_signature()
smb: client: fix use-after-free of signing key
usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing 
logic
remoteproc: qcom: pas: Add support for SA8775p ADSP, CDSP and GPDSP
platform/x86: mlx-platform: call pci_dev_put() to balance the refcount
selinux: ignore unknown extended permissions
mmc: sdhci-msm: fix crypto key eviction
tracing: Handle old buffer mappings for event strings and functions
tracing: Fix trace_check_vprintf() when tp_printk is used
tracing: Check "%s" dereference via the field and not the TP_printk format
RDMA/bnxt_re: Remove always true dattr validity check
RDMA/mlx5: Enforce same type port association for multiport RoCE
RDMA/bnxt_re: Avoid initializing the software queue for user queues
RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters
nvme-pci: 512 byte aligned dma pool segment quirk
RDMA/bnxt_re: Fix the check for 9060 condition
RDMA/bnxt_re: Add check for path mtu in modify_qp
RDMA/bnxt_re: Fix reporting hw_ver in query_device
RDMA/bnxt_re: Fix max_qp_wrs reported
RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters
RDMA/bnxt_re: Disable use of reserved wqes
RDMA/bnxt_re: Add send queue size check for variable wqe
RDMA/bnxt_re: Fix MSN table size for variable wqe mode
RDMA/bnxt_re: Fix the locking while accessing the QP table
drm/bridge: adv7511_audio: Update Audio InfoFrame properly
net: dsa: microchip: Fix KSZ9477 set_ageing_time function
net: dsa: microchip: Fix LAN937X set_ageing_time function
RDMA/hns: Fix mapping error of zero-hop WQE buffer
RDMA/hns: Fix warning storm caused by invalid input in IO path
RDMA/hns: Fix missing flush CQE for DWQE
net: fix memory leak in tcp_conn_request()
ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev()
ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit()
ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit()
net: Fix netns for ip_tunnel_init_flow()
netrom: check buffer length before accessing it
net/mlx5: DR, select MSIX vector 0 for completion queue creation
net/mlx5e: macsec: Maintain TX SA from encoding_sa
net/mlx5e: Skip restore TC rules for vport rep without loaded flag
drm/i915/dg1: Fix power gate sequence.
net: llc: reset skb->transport_header
ALSA: usb-audio: US16x08: Initialize array before use
eth: bcmsysport: fix call balance of priv->clk handling routines
net: mv643xx_eth: fix an OF node reference leak
net: wwan: t7xx: Fix FSM command timeout issue
RDMA/rtrs: Ensure 'ib_sge list' is accessible
net: sfc: Correct key_len for efx_tc_ct_zone_ht_params
net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets
net: restrict SO_REUSEPORT to inet sockets
net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
af_packet: fix vlan_get_tci() vs MSG_PEEK
af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
ila: serialize calls to nf_register_net_hooks()
net: ti: icssg-prueth: Fix clearing of IEP_CMP_CFG registers during iep_init
wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
wifi: mac80211: wake the queues in case of failure in resume
drm/amdkfd: Correct the migration DMA map direction
btrfs: flush delalloc workers queue before stopping cleaner kthread during 
unmount
ALSA: hda/ca0132: Use standard HD-audio quirk matching helpers
ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model
sound: usb: enable DSD output for ddHiFi TC44C
sound: usb: format: don't warn that raw DSD is unsupported
bpf: fix potential error return
ksmbd: retry iterate_dir in smb2_query_dir
ksmbd: set ATTR_CTIME flags when setting mtime
smb: client: destroy cfid_put_wq on module exit
net: usb: qmi_wwan: add Telit FE910C04 compositions
irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
ARC: build: Try to guess GCC variant of cross compiler
RDMA/bnxt_re: Fix the max WQE size for static WQE support
modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
modpost: fix the missed iteration for the max bit in do_input()
ALSA: seq: Check UMP support for midi_version change
ALSA hda/realtek: Add quirk for Framework F111:000C
ALSA: seq: oss: Fix races at processing SysEx messages
ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
kcov: mark in_softirq_really() as __always_inline
scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
RDMA/uverbs: Prevent integer overflow issue
pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
sky2: Add device ID 11ab:4373 for Marvell 88E8075
net/sctp: Prevent autoclose integer overflow in sctp_association_init()
drm: adv7511: Drop dsi single lane support
dt-bindings: display: adi,adv7533: Drop single lane support
drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
gve: guard XSK operations on the existence of queues
gve: guard XDP xmit NDO on existence of xdp queues
mm/kmemleak: fix sleeping function called from invalid context at print message
mm: vmscan: account for free pages to prevent infinite Loop in 
throttle_direct_reclaim()
mptcp: fix TCP options overflow.
mptcp: fix recvbuffer adjust on sleeping rcvmsg
mptcp: don't always assume copied data in mptcp_cleanup_rbuf()
RDMA/bnxt_re: Fix max SGEs for the Work Request
drm/amdgpu: fix backport of commit 73dae652dcac
platform/x86: thinkpad-acpi: Add support for hotkey 0x1401
platform/x86: hp-wmi: mark 8A15 board for timed OMEN thermal profile
pmdomain: imx: gpcv2: Simplify with scoped for each OF child loop
pmdomain: imx: gpcv2: fix an OF node reference leak in imx_gpcv2_probe()
block: lift bio_is_zone_append to bio.h
btrfs: use bio_is_zone_append() in the completion handler
RDMA/core: Fix ENODEV error for iWARP test over vlan
wifi: iwlwifi: fix CRF name for Bz
RDMA/siw: Remove direct link to net_device
net: phy: micrel: Dynamically control external clock of KSZ PHY
selftests: net: local_termination: require mausezahn
netdev-genl: avoid empty messages in napi get
RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
drm/xe/devcoredump: Use drm_puts and already cached local variables
drm/xe/devcoredump: Improve section headings and add tile info
drm/xe/devcoredump: Add ASCII85 dump helper function
drm/xe/guc: Copy GuC log prior to dumping
drm/xe: Take PM ref in delayed snapshot capture worker
drm/xe: Move the coredump registration to the worker thread
drm/xe: Revert some changes that break a mesa debug tool
drm/xe: Fix and re-enable xe_print_blob_ascii85()
drm/xe/pf: Use correct function to check LMEM provisioning
net: stmmac: restructure the error path of stmmac_probe_config_dt()
net: pse-pd: tps23881: Fix power on/off issue
net/mlx5e: Keep netdev when leave switchdev for devlink set legacy only
RDMA/rxe: Remove the direct link to net_device
drm/i915/cx0_phy: Fix C10 pll programming sequence
nvmet: Don't overflow subsysnqn
io_uring/net: always initialize kmsg->msg.msg_inq upfront
perf/x86/intel: Add Arrow Lake U support
wifi: cfg80211: clear link ID from bitmap during link delete after clean up
drm/amdgpu: use sjt mec fw on gfx943 for sriov
ALSA: hda: cs35l56: Remove calls to 
cs35l56_force_sync_asp1_registers_from_cache()
ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio
btrfs: handle bio_split() errors
spi: spi-cadence-qspi: Disable STIG mode for Altera SoCFPGA.
ASoC: audio-graph-card: Call of_node_put() on correct node
ARC: build: disallow invalid PAE40 + 4K page config
ARC: fix reference of dependency for PAE40 config
ARC: bpf: Correct conditional check in 'check_jmp_32'
Bluetooth: hci_core: Fix sleeping function called from invalid context
bpf: refactor bpf_helper_changes_pkt_data to use helper number
bpf: consider that tail calls invalidate packet pointers
clk: thead: Fix TH1520 emmc and shdci clock rate
scripts/mksysmap: Fix escape chars '$'
kbuild: pacman-pkg: provide versioned linux-api-headers package
RDMA/mlx5: Enable multiplane mode only when it is supported
ftrace: Fix function profiler's filtering functionality
drm/xe: Use non-interruptible wait when moving BO to system
drm/xe: Wait for migration job before unmapping pages
maple_tree: reload mas before the second call for mas_empty_area
workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM 
worker
io_uring/rw: fix downgraded mshot read
wifi: iwlwifi: mvm: Fix __counted_by usage in cfg80211_wowlan_nd_*
fgraph: Add READ_ONCE() when accessing fgraph_array[]
net: ethernet: ti: am65-cpsw: default to round-robin for host port receive
mm/damon/core: fix ignored quota goals and filters of newly committed schemes
mm/damon/core: fix new damon_target objects leaks on damon_commit_targets()
mm: shmem: fix incorrect index alignment for within_size policy
fs/proc/task_mmu: fix pagemap flags with PMD THP entries on 32bit
gve: process XSK TX descriptors as part of RX NAPI
gve: clean XDP queues in gve_tx_stop_ring_gqi
gve: fix XDP allocation path in edge cases
gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup
mm/readahead: fix large folio support in async readahead
mm/hugetlb: enforce that PMD PT sharing has split PMD PT locks
mm: hugetlb: independent PMD page table shared count
UBUNTU: Upstream stable to v6.6.70, v6.12.9

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: linux (Ubuntu Oracular)
     Importance: Medium
     Assignee: Koichiro Den (koichiroden)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Oracular)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu)
       Status: Confirmed => Invalid

** Changed in: linux (Ubuntu Oracular)
   Importance: Undecided => Medium

** Changed in: linux (Ubuntu Oracular)
       Status: New => In Progress

** Changed in: linux (Ubuntu Oracular)
     Assignee: (unassigned) => Koichiro Den (koichiroden)

** Description changed:

  
      SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
         upstream stable patchset 2025-02-10
+ 
+                 Ported from the following upstream stable releases:
+                         v6.6.70, v6.12.9
+ 
         from git://git.kernel.org/
+ 
+ docs: media: update location of the media patches
+ x86/mm: Carve out INVLPG inline asm for use by others
+ smb/client: rename cifs_ntsd to smb_ntsd
+ smb/client: rename cifs_sid to smb_sid
+ smb/client: rename cifs_acl to smb_acl
+ smb/client: rename cifs_ace to smb_ace
+ fs/smb/client: implement chmod() for SMB3 POSIX Extensions
+ smb/client: Prevent error pointer dereference
+ smb: client: stop flooding dmesg in smb2_calc_signature()
+ smb: client: fix use-after-free of signing key
+ usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing 
logic
+ remoteproc: qcom: pas: Add support for SA8775p ADSP, CDSP and GPDSP
+ platform/x86: mlx-platform: call pci_dev_put() to balance the refcount
+ selinux: ignore unknown extended permissions
+ mmc: sdhci-msm: fix crypto key eviction
+ tracing: Handle old buffer mappings for event strings and functions
+ tracing: Fix trace_check_vprintf() when tp_printk is used
+ tracing: Check "%s" dereference via the field and not the TP_printk format
+ RDMA/bnxt_re: Remove always true dattr validity check
+ RDMA/mlx5: Enforce same type port association for multiport RoCE
+ RDMA/bnxt_re: Avoid initializing the software queue for user queues
+ RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters
+ nvme-pci: 512 byte aligned dma pool segment quirk
+ RDMA/bnxt_re: Fix the check for 9060 condition
+ RDMA/bnxt_re: Add check for path mtu in modify_qp
+ RDMA/bnxt_re: Fix reporting hw_ver in query_device
+ RDMA/bnxt_re: Fix max_qp_wrs reported
+ RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters
+ RDMA/bnxt_re: Disable use of reserved wqes
+ RDMA/bnxt_re: Add send queue size check for variable wqe
+ RDMA/bnxt_re: Fix MSN table size for variable wqe mode
+ RDMA/bnxt_re: Fix the locking while accessing the QP table
+ drm/bridge: adv7511_audio: Update Audio InfoFrame properly
+ net: dsa: microchip: Fix KSZ9477 set_ageing_time function
+ net: dsa: microchip: Fix LAN937X set_ageing_time function
+ RDMA/hns: Fix mapping error of zero-hop WQE buffer
+ RDMA/hns: Fix warning storm caused by invalid input in IO path
+ RDMA/hns: Fix missing flush CQE for DWQE
+ net: fix memory leak in tcp_conn_request()
+ ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev()
+ ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit()
+ ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit()
+ net: Fix netns for ip_tunnel_init_flow()
+ netrom: check buffer length before accessing it
+ net/mlx5: DR, select MSIX vector 0 for completion queue creation
+ net/mlx5e: macsec: Maintain TX SA from encoding_sa
+ net/mlx5e: Skip restore TC rules for vport rep without loaded flag
+ drm/i915/dg1: Fix power gate sequence.
+ net: llc: reset skb->transport_header
+ ALSA: usb-audio: US16x08: Initialize array before use
+ eth: bcmsysport: fix call balance of priv->clk handling routines
+ net: mv643xx_eth: fix an OF node reference leak
+ net: wwan: t7xx: Fix FSM command timeout issue
+ RDMA/rtrs: Ensure 'ib_sge list' is accessible
+ net: sfc: Correct key_len for efx_tc_ct_zone_ht_params
+ net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets
+ net: restrict SO_REUSEPORT to inet sockets
+ net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
+ af_packet: fix vlan_get_tci() vs MSG_PEEK
+ af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
+ ila: serialize calls to nf_register_net_hooks()
+ net: ti: icssg-prueth: Fix clearing of IEP_CMP_CFG registers during iep_init
+ wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
+ wifi: mac80211: wake the queues in case of failure in resume
+ drm/amdkfd: Correct the migration DMA map direction
+ btrfs: flush delalloc workers queue before stopping cleaner kthread during 
unmount
+ ALSA: hda/ca0132: Use standard HD-audio quirk matching helpers
+ ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model
+ sound: usb: enable DSD output for ddHiFi TC44C
+ sound: usb: format: don't warn that raw DSD is unsupported
+ bpf: fix potential error return
+ ksmbd: retry iterate_dir in smb2_query_dir
+ ksmbd: set ATTR_CTIME flags when setting mtime
+ smb: client: destroy cfid_put_wq on module exit
+ net: usb: qmi_wwan: add Telit FE910C04 compositions
+ irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
+ ARC: build: Try to guess GCC variant of cross compiler
+ RDMA/bnxt_re: Fix the max WQE size for static WQE support
+ modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
+ modpost: fix the missed iteration for the max bit in do_input()
+ ALSA: seq: Check UMP support for midi_version change
+ ALSA hda/realtek: Add quirk for Framework F111:000C
+ ALSA: seq: oss: Fix races at processing SysEx messages
+ ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
+ kcov: mark in_softirq_really() as __always_inline
+ scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
+ RDMA/uverbs: Prevent integer overflow issue
+ pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
+ sky2: Add device ID 11ab:4373 for Marvell 88E8075
+ net/sctp: Prevent autoclose integer overflow in sctp_association_init()
+ drm: adv7511: Drop dsi single lane support
+ dt-bindings: display: adi,adv7533: Drop single lane support
+ drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
+ gve: guard XSK operations on the existence of queues
+ gve: guard XDP xmit NDO on existence of xdp queues
+ mm/kmemleak: fix sleeping function called from invalid context at print 
message
+ mm: vmscan: account for free pages to prevent infinite Loop in 
throttle_direct_reclaim()
+ mptcp: fix TCP options overflow.
+ mptcp: fix recvbuffer adjust on sleeping rcvmsg
+ mptcp: don't always assume copied data in mptcp_cleanup_rbuf()
+ RDMA/bnxt_re: Fix max SGEs for the Work Request
+ drm/amdgpu: fix backport of commit 73dae652dcac
+ platform/x86: thinkpad-acpi: Add support for hotkey 0x1401
+ platform/x86: hp-wmi: mark 8A15 board for timed OMEN thermal profile
+ pmdomain: imx: gpcv2: Simplify with scoped for each OF child loop
+ pmdomain: imx: gpcv2: fix an OF node reference leak in imx_gpcv2_probe()
+ block: lift bio_is_zone_append to bio.h
+ btrfs: use bio_is_zone_append() in the completion handler
+ RDMA/core: Fix ENODEV error for iWARP test over vlan
+ wifi: iwlwifi: fix CRF name for Bz
+ RDMA/siw: Remove direct link to net_device
+ net: phy: micrel: Dynamically control external clock of KSZ PHY
+ selftests: net: local_termination: require mausezahn
+ netdev-genl: avoid empty messages in napi get
+ RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
+ drm/xe/devcoredump: Use drm_puts and already cached local variables
+ drm/xe/devcoredump: Improve section headings and add tile info
+ drm/xe/devcoredump: Add ASCII85 dump helper function
+ drm/xe/guc: Copy GuC log prior to dumping
+ drm/xe: Take PM ref in delayed snapshot capture worker
+ drm/xe: Move the coredump registration to the worker thread
+ drm/xe: Revert some changes that break a mesa debug tool
+ drm/xe: Fix and re-enable xe_print_blob_ascii85()
+ drm/xe/pf: Use correct function to check LMEM provisioning
+ net: stmmac: restructure the error path of stmmac_probe_config_dt()
+ net: pse-pd: tps23881: Fix power on/off issue
+ net/mlx5e: Keep netdev when leave switchdev for devlink set legacy only
+ RDMA/rxe: Remove the direct link to net_device
+ drm/i915/cx0_phy: Fix C10 pll programming sequence
+ nvmet: Don't overflow subsysnqn
+ io_uring/net: always initialize kmsg->msg.msg_inq upfront
+ perf/x86/intel: Add Arrow Lake U support
+ wifi: cfg80211: clear link ID from bitmap during link delete after clean up
+ drm/amdgpu: use sjt mec fw on gfx943 for sriov
+ ALSA: hda: cs35l56: Remove calls to 
cs35l56_force_sync_asp1_registers_from_cache()
+ ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio
+ btrfs: handle bio_split() errors
+ spi: spi-cadence-qspi: Disable STIG mode for Altera SoCFPGA.
+ ASoC: audio-graph-card: Call of_node_put() on correct node
+ ARC: build: disallow invalid PAE40 + 4K page config
+ ARC: fix reference of dependency for PAE40 config
+ ARC: bpf: Correct conditional check in 'check_jmp_32'
+ Bluetooth: hci_core: Fix sleeping function called from invalid context
+ bpf: refactor bpf_helper_changes_pkt_data to use helper number
+ bpf: consider that tail calls invalidate packet pointers
+ clk: thead: Fix TH1520 emmc and shdci clock rate
+ scripts/mksysmap: Fix escape chars '$'
+ kbuild: pacman-pkg: provide versioned linux-api-headers package
+ RDMA/mlx5: Enable multiplane mode only when it is supported
+ ftrace: Fix function profiler's filtering functionality
+ drm/xe: Use non-interruptible wait when moving BO to system
+ drm/xe: Wait for migration job before unmapping pages
+ maple_tree: reload mas before the second call for mas_empty_area
+ workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from 
!WQ_MEM_RECLAIM worker
+ io_uring/rw: fix downgraded mshot read
+ wifi: iwlwifi: mvm: Fix __counted_by usage in cfg80211_wowlan_nd_*
+ fgraph: Add READ_ONCE() when accessing fgraph_array[]
+ net: ethernet: ti: am65-cpsw: default to round-robin for host port receive
+ mm/damon/core: fix ignored quota goals and filters of newly committed schemes
+ mm/damon/core: fix new damon_target objects leaks on damon_commit_targets()
+ mm: shmem: fix incorrect index alignment for within_size policy
+ fs/proc/task_mmu: fix pagemap flags with PMD THP entries on 32bit
+ gve: process XSK TX descriptors as part of RX NAPI
+ gve: clean XDP queues in gve_tx_stop_ring_gqi
+ gve: fix XDP allocation path in edge cases
+ gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup
+ mm/readahead: fix large folio support in async readahead
+ mm/hugetlb: enforce that PMD PT sharing has split PMD PT locks
+ mm: hugetlb: independent PMD page table shared count
+ UBUNTU: Upstream stable to v6.6.70, v6.12.9

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2097738

Title:
  Oracular update: upstream stable patchset 2025-02-10

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Oracular:
  In Progress

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         upstream stable patchset 2025-02-10

                  Ported from the following upstream stable releases:
                          v6.6.70, v6.12.9

         from git://git.kernel.org/

  docs: media: update location of the media patches
  x86/mm: Carve out INVLPG inline asm for use by others
  smb/client: rename cifs_ntsd to smb_ntsd
  smb/client: rename cifs_sid to smb_sid
  smb/client: rename cifs_acl to smb_acl
  smb/client: rename cifs_ace to smb_ace
  fs/smb/client: implement chmod() for SMB3 POSIX Extensions
  smb/client: Prevent error pointer dereference
  smb: client: stop flooding dmesg in smb2_calc_signature()
  smb: client: fix use-after-free of signing key
  usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing 
logic
  remoteproc: qcom: pas: Add support for SA8775p ADSP, CDSP and GPDSP
  platform/x86: mlx-platform: call pci_dev_put() to balance the refcount
  selinux: ignore unknown extended permissions
  mmc: sdhci-msm: fix crypto key eviction
  tracing: Handle old buffer mappings for event strings and functions
  tracing: Fix trace_check_vprintf() when tp_printk is used
  tracing: Check "%s" dereference via the field and not the TP_printk format
  RDMA/bnxt_re: Remove always true dattr validity check
  RDMA/mlx5: Enforce same type port association for multiport RoCE
  RDMA/bnxt_re: Avoid initializing the software queue for user queues
  RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters
  nvme-pci: 512 byte aligned dma pool segment quirk
  RDMA/bnxt_re: Fix the check for 9060 condition
  RDMA/bnxt_re: Add check for path mtu in modify_qp
  RDMA/bnxt_re: Fix reporting hw_ver in query_device
  RDMA/bnxt_re: Fix max_qp_wrs reported
  RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters
  RDMA/bnxt_re: Disable use of reserved wqes
  RDMA/bnxt_re: Add send queue size check for variable wqe
  RDMA/bnxt_re: Fix MSN table size for variable wqe mode
  RDMA/bnxt_re: Fix the locking while accessing the QP table
  drm/bridge: adv7511_audio: Update Audio InfoFrame properly
  net: dsa: microchip: Fix KSZ9477 set_ageing_time function
  net: dsa: microchip: Fix LAN937X set_ageing_time function
  RDMA/hns: Fix mapping error of zero-hop WQE buffer
  RDMA/hns: Fix warning storm caused by invalid input in IO path
  RDMA/hns: Fix missing flush CQE for DWQE
  net: fix memory leak in tcp_conn_request()
  ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev()
  ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit()
  ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit()
  net: Fix netns for ip_tunnel_init_flow()
  netrom: check buffer length before accessing it
  net/mlx5: DR, select MSIX vector 0 for completion queue creation
  net/mlx5e: macsec: Maintain TX SA from encoding_sa
  net/mlx5e: Skip restore TC rules for vport rep without loaded flag
  drm/i915/dg1: Fix power gate sequence.
  net: llc: reset skb->transport_header
  ALSA: usb-audio: US16x08: Initialize array before use
  eth: bcmsysport: fix call balance of priv->clk handling routines
  net: mv643xx_eth: fix an OF node reference leak
  net: wwan: t7xx: Fix FSM command timeout issue
  RDMA/rtrs: Ensure 'ib_sge list' is accessible
  net: sfc: Correct key_len for efx_tc_ct_zone_ht_params
  net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets
  net: restrict SO_REUSEPORT to inet sockets
  net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
  af_packet: fix vlan_get_tci() vs MSG_PEEK
  af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
  ila: serialize calls to nf_register_net_hooks()
  net: ti: icssg-prueth: Fix clearing of IEP_CMP_CFG registers during iep_init
  wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
  wifi: mac80211: wake the queues in case of failure in resume
  drm/amdkfd: Correct the migration DMA map direction
  btrfs: flush delalloc workers queue before stopping cleaner kthread during 
unmount
  ALSA: hda/ca0132: Use standard HD-audio quirk matching helpers
  ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model
  sound: usb: enable DSD output for ddHiFi TC44C
  sound: usb: format: don't warn that raw DSD is unsupported
  bpf: fix potential error return
  ksmbd: retry iterate_dir in smb2_query_dir
  ksmbd: set ATTR_CTIME flags when setting mtime
  smb: client: destroy cfid_put_wq on module exit
  net: usb: qmi_wwan: add Telit FE910C04 compositions
  irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
  ARC: build: Try to guess GCC variant of cross compiler
  RDMA/bnxt_re: Fix the max WQE size for static WQE support
  modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
  modpost: fix the missed iteration for the max bit in do_input()
  ALSA: seq: Check UMP support for midi_version change
  ALSA hda/realtek: Add quirk for Framework F111:000C
  ALSA: seq: oss: Fix races at processing SysEx messages
  ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
  kcov: mark in_softirq_really() as __always_inline
  scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
  RDMA/uverbs: Prevent integer overflow issue
  pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
  sky2: Add device ID 11ab:4373 for Marvell 88E8075
  net/sctp: Prevent autoclose integer overflow in sctp_association_init()
  drm: adv7511: Drop dsi single lane support
  dt-bindings: display: adi,adv7533: Drop single lane support
  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
  gve: guard XSK operations on the existence of queues
  gve: guard XDP xmit NDO on existence of xdp queues
  mm/kmemleak: fix sleeping function called from invalid context at print 
message
  mm: vmscan: account for free pages to prevent infinite Loop in 
throttle_direct_reclaim()
  mptcp: fix TCP options overflow.
  mptcp: fix recvbuffer adjust on sleeping rcvmsg
  mptcp: don't always assume copied data in mptcp_cleanup_rbuf()
  RDMA/bnxt_re: Fix max SGEs for the Work Request
  drm/amdgpu: fix backport of commit 73dae652dcac
  platform/x86: thinkpad-acpi: Add support for hotkey 0x1401
  platform/x86: hp-wmi: mark 8A15 board for timed OMEN thermal profile
  pmdomain: imx: gpcv2: Simplify with scoped for each OF child loop
  pmdomain: imx: gpcv2: fix an OF node reference leak in imx_gpcv2_probe()
  block: lift bio_is_zone_append to bio.h
  btrfs: use bio_is_zone_append() in the completion handler
  RDMA/core: Fix ENODEV error for iWARP test over vlan
  wifi: iwlwifi: fix CRF name for Bz
  RDMA/siw: Remove direct link to net_device
  net: phy: micrel: Dynamically control external clock of KSZ PHY
  selftests: net: local_termination: require mausezahn
  netdev-genl: avoid empty messages in napi get
  RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
  drm/xe/devcoredump: Use drm_puts and already cached local variables
  drm/xe/devcoredump: Improve section headings and add tile info
  drm/xe/devcoredump: Add ASCII85 dump helper function
  drm/xe/guc: Copy GuC log prior to dumping
  drm/xe: Take PM ref in delayed snapshot capture worker
  drm/xe: Move the coredump registration to the worker thread
  drm/xe: Revert some changes that break a mesa debug tool
  drm/xe: Fix and re-enable xe_print_blob_ascii85()
  drm/xe/pf: Use correct function to check LMEM provisioning
  net: stmmac: restructure the error path of stmmac_probe_config_dt()
  net: pse-pd: tps23881: Fix power on/off issue
  net/mlx5e: Keep netdev when leave switchdev for devlink set legacy only
  RDMA/rxe: Remove the direct link to net_device
  drm/i915/cx0_phy: Fix C10 pll programming sequence
  nvmet: Don't overflow subsysnqn
  io_uring/net: always initialize kmsg->msg.msg_inq upfront
  perf/x86/intel: Add Arrow Lake U support
  wifi: cfg80211: clear link ID from bitmap during link delete after clean up
  drm/amdgpu: use sjt mec fw on gfx943 for sriov
  ALSA: hda: cs35l56: Remove calls to 
cs35l56_force_sync_asp1_registers_from_cache()
  ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio
  btrfs: handle bio_split() errors
  spi: spi-cadence-qspi: Disable STIG mode for Altera SoCFPGA.
  ASoC: audio-graph-card: Call of_node_put() on correct node
  ARC: build: disallow invalid PAE40 + 4K page config
  ARC: fix reference of dependency for PAE40 config
  ARC: bpf: Correct conditional check in 'check_jmp_32'
  Bluetooth: hci_core: Fix sleeping function called from invalid context
  bpf: refactor bpf_helper_changes_pkt_data to use helper number
  bpf: consider that tail calls invalidate packet pointers
  clk: thead: Fix TH1520 emmc and shdci clock rate
  scripts/mksysmap: Fix escape chars '$'
  kbuild: pacman-pkg: provide versioned linux-api-headers package
  RDMA/mlx5: Enable multiplane mode only when it is supported
  ftrace: Fix function profiler's filtering functionality
  drm/xe: Use non-interruptible wait when moving BO to system
  drm/xe: Wait for migration job before unmapping pages
  maple_tree: reload mas before the second call for mas_empty_area
  workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from 
!WQ_MEM_RECLAIM worker
  io_uring/rw: fix downgraded mshot read
  wifi: iwlwifi: mvm: Fix __counted_by usage in cfg80211_wowlan_nd_*
  fgraph: Add READ_ONCE() when accessing fgraph_array[]
  net: ethernet: ti: am65-cpsw: default to round-robin for host port receive
  mm/damon/core: fix ignored quota goals and filters of newly committed schemes
  mm/damon/core: fix new damon_target objects leaks on damon_commit_targets()
  mm: shmem: fix incorrect index alignment for within_size policy
  fs/proc/task_mmu: fix pagemap flags with PMD THP entries on 32bit
  gve: process XSK TX descriptors as part of RX NAPI
  gve: clean XDP queues in gve_tx_stop_ring_gqi
  gve: fix XDP allocation path in edge cases
  gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup
  mm/readahead: fix large folio support in async readahead
  mm/hugetlb: enforce that PMD PT sharing has split PMD PT locks
  mm: hugetlb: independent PMD page table shared count
  UBUNTU: Upstream stable to v6.6.70, v6.12.9

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2097738/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to