Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       upstream stable patchset 2025-02-13

                Ported from the following upstream stable releases:
                        v6.6.71, v6.6.72, v6.12.10

       from git://git.kernel.org/

memblock: make memblock_set_node() also warn about use of MAX_NUMNODES
jbd2: increase IO priority for writing revoke records
jbd2: flush filesystem device before updating tail sequence
dm array: fix releasing a faulty array block twice in dm_array_cursor_end
dm array: fix unreleased btree blocks on closing a faulty array cursor
dm array: fix cursor index when skipping across block boundaries
exfat: fix the infinite loop in exfat_readdir()
exfat: fix the infinite loop in __exfat_free_cluster()
ASoC: rt722: add delay time to wait for the calibration procedure
ASoC: mediatek: disable buffer pre-allocation
selftests/alsa: Fix circular dependency involving global-timer
ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
net: 802: LLC+SNAP OID:PID lookup on start of skb data
tcp/dccp: allow a connection when sk_max_ack_backlog is zero
net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
net: libwx: fix firmware mailbox abnormal return
btrfs: avoid NULL pointer dereference if no valid extent tree
pds_core: limit loop over fw name list
bnxt_en: Fix possible memory leak when hwrm_req_replace fails
cxgb4: Avoid removal of uninserted tid
ice: fix incorrect PHY settings for 100 GB/s
igc: return early when failing to read EECD register
tls: Fix tls_sw_sendmsg error handling
ipvlan: Fix use-after-free in ipvlan_get_iflink().
eth: gve: use appropriate helper to set xdp_features
Bluetooth: hci_sync: Fix not setting Random Address when required
Bluetooth: MGMT: Fix Add Device to responding before completing
Bluetooth: btnxpuart: Fix driver sending truncated data
Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming
tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset
netfilter: nf_tables: imbalance in flowtable binding
netfilter: conntrack: clamp maximum hashtable size to INT_MAX
sched: sch_cake: add bounds checks to host bulk flow fairness counts
net: stmmac: dwmac-tegra: Read iommu stream id from device tree
net/mlx5: Fix variable not being completed when function returns
drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind 
returns err
drm/mediatek: stop selecting foreign drivers
UBUNTU: [Config] updateconfigs for MTK_SMI
drm/mediatek: Fix YCbCr422 color format issue for DP
drm/mediatek: Fix mode valid issue for dp
drm/mediatek: Add return value check when reading DPCD
ksmbd: fix a missing return value check bug
afs: Fix the maximum cell name length
platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it
ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
cpuidle: riscv-sbi: fix device node release in early exit of 
for_each_possible_cpu
riscv: mm: Fix the out of bound issue of vmemmap address
dm thin: make get_first_thin use rcu-safe list first function
scsi: ufs: qcom: Power off the PHY if it was already powered on in 
ufs_qcom_power_up_sequence()
dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
mptcp: sysctl: sched: avoid using current->nsproxy
sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
sctp: sysctl: rto_min/max: avoid using current->nsproxy
sctp: sysctl: auth_enable: avoid using current->nsproxy
sctp: sysctl: udp_port: avoid using current->nsproxy
sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
ksmbd: Implement new SMB3 POSIX type
drm/amd/display: Add check for granularity in dml ceil/floor helpers
thermal: of: fix OF node leak in of_thermal_zone_find()
smb: client: sync the root session and superblock context passwords before 
automounting
riscv: Fix sleeping in invalid context in die()
ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]
drm/amd/display: increase MAX_SURFACES to the value supported by hw
io_uring/timeout: fix multishot updates
dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2)
USB: serial: option: add MeiG Smart SRM815
USB: serial: option: add Neoway N723-EA support
staging: iio: ad9834: Correct phase range check
staging: iio: ad9832: Correct phase range check
usb-storage: Add max sectors quirk for Nokia 208
USB: serial: cp210x: add Phoenix Contact UPS Device
usb: dwc3: gadget: fix writing NYET threshold
topology: Keep the cpumask unchanged when printing cpumap
misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config
tty: serial: 8250: Fix another runtime PM usage counter underflow
x86/fpu: Ensure shadow stack is active before "getting" registers
usb: dwc3-am62: Disable autosuspend during remove
USB: usblp: return error when setting unsupported protocol
USB: core: Disable LPM only for non-suspended ports
usb: fix reference leak in usb_new_device()
usb: gadget: midi2: Reverse-select at the right place
usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in the 
error path of .probe()
usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
usb: typec: tcpm/tcpci_maxim: fix error code in 
max_contaminant_read_resistance_kohm()
usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
usb: gadget: configfs: Ignore trailing LF for user strings to cdev
iio: pressure: zpa2326: fix information leak in triggered buffer
iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
iio: light: vcnl4035: fix information leak in triggered buffer
iio: imu: kmx61: fix information leak in triggered buffer
iio: adc: rockchip_saradc: fix information leak in triggered buffer
iio: adc: ti-ads8688: fix information leak in triggered buffer
iio: gyro: fxas21002c: Fix missing data update in trigger handler
iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
iio: adc: at91: call input_free_device() on allocated iio_dev
iio: inkern: call iio_device_put() only on mapped devices
iio: adc: ad7124: Disable all channels at probe time
ARM: dts: imxrt1050: Fix clocks for mmc
hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
arm64: dts: rockchip: add hevc power domain clock to rk3328
drm/mediatek: Only touch DISP_REG_OVL_PITCH_MSB if AFBC is supported
iomap: pass byte granular end position to iomap_add_to_ioend
iomap: fix zero padding data issue in concurrent append writes
netfs: Fix missing barriers by using clear_and_wake_up_bit()
fuse: respect FOPEN_KEEP_CACHE on opendir
ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
ovl: support encoding fid from inode with no alias
net: don't dump Tx and uninitialized NAPIs
ice: fix max values for dpll pin phase adjust
Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices.
net: hns3: fixed reset failure issues caused by the incorrect reset type
net: hns3: fix missing features due to dev->features configuration too early
net: hns3: Resolved the issue that the debugfs query result is inconsistent.
net: hns3: don't auto enable misc vector
net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
mctp i3c: fix MCTP I3C driver multi-thread issue
drm/mediatek: Move mtk_crtc_finish_page_flip() to ddp_cmdq_cb()
drm/mediatek: Add support for 180-degree rotation in the display driver
drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188
gpio: virtuser: fix missing lookup table cleanups
gpio: virtuser: Use GPIO_LOOKUP_IDX() macro
gpio: virtuser: fix handling of multiple conn_ids in lookup table
platform/x86: intel/pmc: Fix ioremap() of bad address
riscv: module: remove relocation_head rel_entry member allocation
riscv: stacktrace: fix backtracing through exceptions
drm/xe: Fix tlb invalidation when wedging
netfs: Fix kernel async DIO
fs: relax assertions on failure to encode file handles
fs: fix is_mnt_ns_file()
mptcp: sysctl: avail sched: remove write access
rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
Revert "drm/mediatek: dsi: Correct calculation formula of PHY Timing"
cgroup/cpuset: Prevent leakage of isolated CPUs into sched domains
cgroup/cpuset: remove kernfs active break
arm64: dts: qcom: x1e80100: Fix up BAR space size for PCIe6a
arm64: dts: qcom: sa8775p: Fix the size of 'addr_space' regions
fs: kill MNT_ONRB
riscv: kprobes: Fix incorrect address calculation
gpio: loongson: Fix Loongson-2K2000 ACPI GPIO register offset
drm/amdgpu: Add a lock when accessing the buddy trim function
drm/amd/pm: fix BUG: scheduling while atomic
drm/amdkfd: wq_release signals dma_fence only when available
drm/amd/display: fix divide error in DM plane scale calcs
drm/amd/display: fix page fault due to max surface definition mismatch
io_uring/sqpoll: zero sqd->thread on tctx errors
serial: stm32: use port lock wrappers for break control
usb: host: xhci-plat: set skip_phy_initialization if software node has 
XHCI_SKIP_PHY_INIT property
usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control()
iio: adc: ti-ads1119: fix information leak in triggered buffer
iio: adc: ti-ads1119: fix sample size in scan struct for triggered buffer
iio: adc: ti-ads1298: Add NULL check in ads1298_init
iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
iio: adc: ad7173: fix using shared static info struct
io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
arm64: dts: qcom: sa8775p: fix the secure device bootup issue
firewall: remove misplaced semicolon from stm32_firewall_get_firewall
io_uring: don't touch sqd->thread off tw add
iio: imu: inv_icm42600: fix spi burst write not supported
netdev: prevent accessing NAPI instances from another namespace
UBUNTU: Upstream stable to v6.6.71, v6.6.72, v6.12.10

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: linux (Ubuntu Oracular)
     Importance: Medium
     Assignee: Koichiro Den (koichiroden)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Oracular)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu)
       Status: Confirmed => Invalid

** Changed in: linux (Ubuntu Oracular)
   Importance: Undecided => Medium

** Changed in: linux (Ubuntu Oracular)
       Status: New => In Progress

** Changed in: linux (Ubuntu Oracular)
     Assignee: (unassigned) => Koichiro Den (koichiroden)

** Description changed:

  
      SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
         upstream stable patchset 2025-02-13
+ 
+                 Ported from the following upstream stable releases:
+                         v6.6.71, v6.6.72, v6.12.10
+ 
         from git://git.kernel.org/
+ 
+ memblock: make memblock_set_node() also warn about use of MAX_NUMNODES
+ jbd2: increase IO priority for writing revoke records
+ jbd2: flush filesystem device before updating tail sequence
+ dm array: fix releasing a faulty array block twice in dm_array_cursor_end
+ dm array: fix unreleased btree blocks on closing a faulty array cursor
+ dm array: fix cursor index when skipping across block boundaries
+ exfat: fix the infinite loop in exfat_readdir()
+ exfat: fix the infinite loop in __exfat_free_cluster()
+ ASoC: rt722: add delay time to wait for the calibration procedure
+ ASoC: mediatek: disable buffer pre-allocation
+ selftests/alsa: Fix circular dependency involving global-timer
+ ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
+ net: 802: LLC+SNAP OID:PID lookup on start of skb data
+ tcp/dccp: allow a connection when sk_max_ack_backlog is zero
+ net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
+ net: libwx: fix firmware mailbox abnormal return
+ btrfs: avoid NULL pointer dereference if no valid extent tree
+ pds_core: limit loop over fw name list
+ bnxt_en: Fix possible memory leak when hwrm_req_replace fails
+ cxgb4: Avoid removal of uninserted tid
+ ice: fix incorrect PHY settings for 100 GB/s
+ igc: return early when failing to read EECD register
+ tls: Fix tls_sw_sendmsg error handling
+ ipvlan: Fix use-after-free in ipvlan_get_iflink().
+ eth: gve: use appropriate helper to set xdp_features
+ Bluetooth: hci_sync: Fix not setting Random Address when required
+ Bluetooth: MGMT: Fix Add Device to responding before completing
+ Bluetooth: btnxpuart: Fix driver sending truncated data
+ Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming
+ tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset
+ netfilter: nf_tables: imbalance in flowtable binding
+ netfilter: conntrack: clamp maximum hashtable size to INT_MAX
+ sched: sch_cake: add bounds checks to host bulk flow fairness counts
+ net: stmmac: dwmac-tegra: Read iommu stream id from device tree
+ net/mlx5: Fix variable not being completed when function returns
+ drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind 
returns err
+ drm/mediatek: stop selecting foreign drivers
+ UBUNTU: [Config] updateconfigs for MTK_SMI
+ drm/mediatek: Fix YCbCr422 color format issue for DP
+ drm/mediatek: Fix mode valid issue for dp
+ drm/mediatek: Add return value check when reading DPCD
+ ksmbd: fix a missing return value check bug
+ afs: Fix the maximum cell name length
+ platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it
+ ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
+ cpuidle: riscv-sbi: fix device node release in early exit of 
for_each_possible_cpu
+ riscv: mm: Fix the out of bound issue of vmemmap address
+ dm thin: make get_first_thin use rcu-safe list first function
+ scsi: ufs: qcom: Power off the PHY if it was already powered on in 
ufs_qcom_power_up_sequence()
+ dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
+ mptcp: sysctl: sched: avoid using current->nsproxy
+ sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
+ sctp: sysctl: rto_min/max: avoid using current->nsproxy
+ sctp: sysctl: auth_enable: avoid using current->nsproxy
+ sctp: sysctl: udp_port: avoid using current->nsproxy
+ sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
+ ksmbd: Implement new SMB3 POSIX type
+ drm/amd/display: Add check for granularity in dml ceil/floor helpers
+ thermal: of: fix OF node leak in of_thermal_zone_find()
+ smb: client: sync the root session and superblock context passwords before 
automounting
+ riscv: Fix sleeping in invalid context in die()
+ ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
+ ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]
+ drm/amd/display: increase MAX_SURFACES to the value supported by hw
+ io_uring/timeout: fix multishot updates
+ dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2)
+ USB: serial: option: add MeiG Smart SRM815
+ USB: serial: option: add Neoway N723-EA support
+ staging: iio: ad9834: Correct phase range check
+ staging: iio: ad9832: Correct phase range check
+ usb-storage: Add max sectors quirk for Nokia 208
+ USB: serial: cp210x: add Phoenix Contact UPS Device
+ usb: dwc3: gadget: fix writing NYET threshold
+ topology: Keep the cpumask unchanged when printing cpumap
+ misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
+ misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config
+ tty: serial: 8250: Fix another runtime PM usage counter underflow
+ x86/fpu: Ensure shadow stack is active before "getting" registers
+ usb: dwc3-am62: Disable autosuspend during remove
+ USB: usblp: return error when setting unsupported protocol
+ USB: core: Disable LPM only for non-suspended ports
+ usb: fix reference leak in usb_new_device()
+ usb: gadget: midi2: Reverse-select at the right place
+ usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in 
the error path of .probe()
+ usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
+ usb: typec: tcpm/tcpci_maxim: fix error code in 
max_contaminant_read_resistance_kohm()
+ usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
+ usb: gadget: configfs: Ignore trailing LF for user strings to cdev
+ iio: pressure: zpa2326: fix information leak in triggered buffer
+ iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
+ iio: light: vcnl4035: fix information leak in triggered buffer
+ iio: imu: kmx61: fix information leak in triggered buffer
+ iio: adc: rockchip_saradc: fix information leak in triggered buffer
+ iio: adc: ti-ads8688: fix information leak in triggered buffer
+ iio: gyro: fxas21002c: Fix missing data update in trigger handler
+ iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
+ iio: adc: at91: call input_free_device() on allocated iio_dev
+ iio: inkern: call iio_device_put() only on mapped devices
+ iio: adc: ad7124: Disable all channels at probe time
+ ARM: dts: imxrt1050: Fix clocks for mmc
+ hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
+ block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
+ arm64: dts: rockchip: add hevc power domain clock to rk3328
+ drm/mediatek: Only touch DISP_REG_OVL_PITCH_MSB if AFBC is supported
+ iomap: pass byte granular end position to iomap_add_to_ioend
+ iomap: fix zero padding data issue in concurrent append writes
+ netfs: Fix missing barriers by using clear_and_wake_up_bit()
+ fuse: respect FOPEN_KEEP_CACHE on opendir
+ ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
+ ovl: support encoding fid from inode with no alias
+ net: don't dump Tx and uninitialized NAPIs
+ ice: fix max values for dpll pin phase adjust
+ Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices.
+ net: hns3: fixed reset failure issues caused by the incorrect reset type
+ net: hns3: fix missing features due to dev->features configuration too early
+ net: hns3: Resolved the issue that the debugfs query result is inconsistent.
+ net: hns3: don't auto enable misc vector
+ net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
+ net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
+ net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
+ mctp i3c: fix MCTP I3C driver multi-thread issue
+ drm/mediatek: Move mtk_crtc_finish_page_flip() to ddp_cmdq_cb()
+ drm/mediatek: Add support for 180-degree rotation in the display driver
+ drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188
+ gpio: virtuser: fix missing lookup table cleanups
+ gpio: virtuser: Use GPIO_LOOKUP_IDX() macro
+ gpio: virtuser: fix handling of multiple conn_ids in lookup table
+ platform/x86: intel/pmc: Fix ioremap() of bad address
+ riscv: module: remove relocation_head rel_entry member allocation
+ riscv: stacktrace: fix backtracing through exceptions
+ drm/xe: Fix tlb invalidation when wedging
+ netfs: Fix kernel async DIO
+ fs: relax assertions on failure to encode file handles
+ fs: fix is_mnt_ns_file()
+ mptcp: sysctl: avail sched: remove write access
+ rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
+ Revert "drm/mediatek: dsi: Correct calculation formula of PHY Timing"
+ cgroup/cpuset: Prevent leakage of isolated CPUs into sched domains
+ cgroup/cpuset: remove kernfs active break
+ arm64: dts: qcom: x1e80100: Fix up BAR space size for PCIe6a
+ arm64: dts: qcom: sa8775p: Fix the size of 'addr_space' regions
+ fs: kill MNT_ONRB
+ riscv: kprobes: Fix incorrect address calculation
+ gpio: loongson: Fix Loongson-2K2000 ACPI GPIO register offset
+ drm/amdgpu: Add a lock when accessing the buddy trim function
+ drm/amd/pm: fix BUG: scheduling while atomic
+ drm/amdkfd: wq_release signals dma_fence only when available
+ drm/amd/display: fix divide error in DM plane scale calcs
+ drm/amd/display: fix page fault due to max surface definition mismatch
+ io_uring/sqpoll: zero sqd->thread on tctx errors
+ serial: stm32: use port lock wrappers for break control
+ usb: host: xhci-plat: set skip_phy_initialization if software node has 
XHCI_SKIP_PHY_INIT property
+ usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control()
+ iio: adc: ti-ads1119: fix information leak in triggered buffer
+ iio: adc: ti-ads1119: fix sample size in scan struct for triggered buffer
+ iio: adc: ti-ads1298: Add NULL check in ads1298_init
+ iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
+ iio: adc: ad7173: fix using shared static info struct
+ io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
+ arm64: dts: qcom: sa8775p: fix the secure device bootup issue
+ firewall: remove misplaced semicolon from stm32_firewall_get_firewall
+ io_uring: don't touch sqd->thread off tw add
+ iio: imu: inv_icm42600: fix spi burst write not supported
+ netdev: prevent accessing NAPI instances from another namespace
+ UBUNTU: Upstream stable to v6.6.71, v6.6.72, v6.12.10

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2098165

Title:
  Oracular update: upstream stable patchset 2025-02-13

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Oracular:
  In Progress

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         upstream stable patchset 2025-02-13

                  Ported from the following upstream stable releases:
                          v6.6.71, v6.6.72, v6.12.10

         from git://git.kernel.org/

  memblock: make memblock_set_node() also warn about use of MAX_NUMNODES
  jbd2: increase IO priority for writing revoke records
  jbd2: flush filesystem device before updating tail sequence
  dm array: fix releasing a faulty array block twice in dm_array_cursor_end
  dm array: fix unreleased btree blocks on closing a faulty array cursor
  dm array: fix cursor index when skipping across block boundaries
  exfat: fix the infinite loop in exfat_readdir()
  exfat: fix the infinite loop in __exfat_free_cluster()
  ASoC: rt722: add delay time to wait for the calibration procedure
  ASoC: mediatek: disable buffer pre-allocation
  selftests/alsa: Fix circular dependency involving global-timer
  ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
  net: 802: LLC+SNAP OID:PID lookup on start of skb data
  tcp/dccp: allow a connection when sk_max_ack_backlog is zero
  net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
  net: libwx: fix firmware mailbox abnormal return
  btrfs: avoid NULL pointer dereference if no valid extent tree
  pds_core: limit loop over fw name list
  bnxt_en: Fix possible memory leak when hwrm_req_replace fails
  cxgb4: Avoid removal of uninserted tid
  ice: fix incorrect PHY settings for 100 GB/s
  igc: return early when failing to read EECD register
  tls: Fix tls_sw_sendmsg error handling
  ipvlan: Fix use-after-free in ipvlan_get_iflink().
  eth: gve: use appropriate helper to set xdp_features
  Bluetooth: hci_sync: Fix not setting Random Address when required
  Bluetooth: MGMT: Fix Add Device to responding before completing
  Bluetooth: btnxpuart: Fix driver sending truncated data
  Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming
  tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset
  netfilter: nf_tables: imbalance in flowtable binding
  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  sched: sch_cake: add bounds checks to host bulk flow fairness counts
  net: stmmac: dwmac-tegra: Read iommu stream id from device tree
  net/mlx5: Fix variable not being completed when function returns
  drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind 
returns err
  drm/mediatek: stop selecting foreign drivers
  UBUNTU: [Config] updateconfigs for MTK_SMI
  drm/mediatek: Fix YCbCr422 color format issue for DP
  drm/mediatek: Fix mode valid issue for dp
  drm/mediatek: Add return value check when reading DPCD
  ksmbd: fix a missing return value check bug
  afs: Fix the maximum cell name length
  platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it
  ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
  cpuidle: riscv-sbi: fix device node release in early exit of 
for_each_possible_cpu
  riscv: mm: Fix the out of bound issue of vmemmap address
  dm thin: make get_first_thin use rcu-safe list first function
  scsi: ufs: qcom: Power off the PHY if it was already powered on in 
ufs_qcom_power_up_sequence()
  dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
  mptcp: sysctl: sched: avoid using current->nsproxy
  sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
  sctp: sysctl: rto_min/max: avoid using current->nsproxy
  sctp: sysctl: auth_enable: avoid using current->nsproxy
  sctp: sysctl: udp_port: avoid using current->nsproxy
  sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
  ksmbd: Implement new SMB3 POSIX type
  drm/amd/display: Add check for granularity in dml ceil/floor helpers
  thermal: of: fix OF node leak in of_thermal_zone_find()
  smb: client: sync the root session and superblock context passwords before 
automounting
  riscv: Fix sleeping in invalid context in die()
  ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
  ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]
  drm/amd/display: increase MAX_SURFACES to the value supported by hw
  io_uring/timeout: fix multishot updates
  dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2)
  USB: serial: option: add MeiG Smart SRM815
  USB: serial: option: add Neoway N723-EA support
  staging: iio: ad9834: Correct phase range check
  staging: iio: ad9832: Correct phase range check
  usb-storage: Add max sectors quirk for Nokia 208
  USB: serial: cp210x: add Phoenix Contact UPS Device
  usb: dwc3: gadget: fix writing NYET threshold
  topology: Keep the cpumask unchanged when printing cpumap
  misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
  misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config
  tty: serial: 8250: Fix another runtime PM usage counter underflow
  x86/fpu: Ensure shadow stack is active before "getting" registers
  usb: dwc3-am62: Disable autosuspend during remove
  USB: usblp: return error when setting unsupported protocol
  USB: core: Disable LPM only for non-suspended ports
  usb: fix reference leak in usb_new_device()
  usb: gadget: midi2: Reverse-select at the right place
  usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in 
the error path of .probe()
  usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
  usb: typec: tcpm/tcpci_maxim: fix error code in 
max_contaminant_read_resistance_kohm()
  usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
  usb: gadget: configfs: Ignore trailing LF for user strings to cdev
  iio: pressure: zpa2326: fix information leak in triggered buffer
  iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
  iio: light: vcnl4035: fix information leak in triggered buffer
  iio: imu: kmx61: fix information leak in triggered buffer
  iio: adc: rockchip_saradc: fix information leak in triggered buffer
  iio: adc: ti-ads8688: fix information leak in triggered buffer
  iio: gyro: fxas21002c: Fix missing data update in trigger handler
  iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
  iio: adc: at91: call input_free_device() on allocated iio_dev
  iio: inkern: call iio_device_put() only on mapped devices
  iio: adc: ad7124: Disable all channels at probe time
  ARM: dts: imxrt1050: Fix clocks for mmc
  hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
  block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
  arm64: dts: rockchip: add hevc power domain clock to rk3328
  drm/mediatek: Only touch DISP_REG_OVL_PITCH_MSB if AFBC is supported
  iomap: pass byte granular end position to iomap_add_to_ioend
  iomap: fix zero padding data issue in concurrent append writes
  netfs: Fix missing barriers by using clear_and_wake_up_bit()
  fuse: respect FOPEN_KEEP_CACHE on opendir
  ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
  ovl: support encoding fid from inode with no alias
  net: don't dump Tx and uninitialized NAPIs
  ice: fix max values for dpll pin phase adjust
  Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices.
  net: hns3: fixed reset failure issues caused by the incorrect reset type
  net: hns3: fix missing features due to dev->features configuration too early
  net: hns3: Resolved the issue that the debugfs query result is inconsistent.
  net: hns3: don't auto enable misc vector
  net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
  net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
  net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
  mctp i3c: fix MCTP I3C driver multi-thread issue
  drm/mediatek: Move mtk_crtc_finish_page_flip() to ddp_cmdq_cb()
  drm/mediatek: Add support for 180-degree rotation in the display driver
  drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188
  gpio: virtuser: fix missing lookup table cleanups
  gpio: virtuser: Use GPIO_LOOKUP_IDX() macro
  gpio: virtuser: fix handling of multiple conn_ids in lookup table
  platform/x86: intel/pmc: Fix ioremap() of bad address
  riscv: module: remove relocation_head rel_entry member allocation
  riscv: stacktrace: fix backtracing through exceptions
  drm/xe: Fix tlb invalidation when wedging
  netfs: Fix kernel async DIO
  fs: relax assertions on failure to encode file handles
  fs: fix is_mnt_ns_file()
  mptcp: sysctl: avail sched: remove write access
  rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
  Revert "drm/mediatek: dsi: Correct calculation formula of PHY Timing"
  cgroup/cpuset: Prevent leakage of isolated CPUs into sched domains
  cgroup/cpuset: remove kernfs active break
  arm64: dts: qcom: x1e80100: Fix up BAR space size for PCIe6a
  arm64: dts: qcom: sa8775p: Fix the size of 'addr_space' regions
  fs: kill MNT_ONRB
  riscv: kprobes: Fix incorrect address calculation
  gpio: loongson: Fix Loongson-2K2000 ACPI GPIO register offset
  drm/amdgpu: Add a lock when accessing the buddy trim function
  drm/amd/pm: fix BUG: scheduling while atomic
  drm/amdkfd: wq_release signals dma_fence only when available
  drm/amd/display: fix divide error in DM plane scale calcs
  drm/amd/display: fix page fault due to max surface definition mismatch
  io_uring/sqpoll: zero sqd->thread on tctx errors
  serial: stm32: use port lock wrappers for break control
  usb: host: xhci-plat: set skip_phy_initialization if software node has 
XHCI_SKIP_PHY_INIT property
  usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control()
  iio: adc: ti-ads1119: fix information leak in triggered buffer
  iio: adc: ti-ads1119: fix sample size in scan struct for triggered buffer
  iio: adc: ti-ads1298: Add NULL check in ads1298_init
  iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
  iio: adc: ad7173: fix using shared static info struct
  io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
  arm64: dts: qcom: sa8775p: fix the secure device bootup issue
  firewall: remove misplaced semicolon from stm32_firewall_get_firewall
  io_uring: don't touch sqd->thread off tw add
  iio: imu: inv_icm42600: fix spi burst write not supported
  netdev: prevent accessing NAPI instances from another namespace
  UBUNTU: Upstream stable to v6.6.71, v6.6.72, v6.12.10

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2098165/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to