Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-02-25
Ported from the following upstream stable releases:
v6.6.60, v6.11.7
from git://git.kernel.org/
Input: xpad - sort xpad_device by vendor and product ID
Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
cgroup: Fix potential overflow issue when checking max_depth
spi: geni-qcom: Fix boot warning related to pm_runtime and devres
wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
wifi: ath11k: Fix invalid ring usage in full monitor mode
wifi: brcm80211: BRCM_TRACING should depend on TRACING
RDMA/cxgb4: Dump vendor specific QP details
RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
RDMA/bnxt_re: Fix the usage of control path spin locks
RDMA/bnxt_re: synchronize the qp-handle table array
RDMA/bnxt_re: Fix the locking while accessing the QP table
wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
wifi: iwlwifi: mvm: don't add default link in fw restart flow
ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
macsec: Fix use-after-free while sending the offloading packet
net: stmmac: dwmac4: Fix high address display by updating reg_space[] from
register values
net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
net: stmmac: fix TSO DMA API usage causing oops
ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
gtp: allow -1 to be specified as file description from userspace
bpf: Force checkpoint when jmp history is too long
netdevsim: Add trailing zero to terminate the string in
nsim_nexthop_bucket_activity_write()
bpf: Fix out-of-bounds write in trie_get_next_key()
net: fix crash when config small gso_max_size/gso_ipv4_max_size
netfilter: Fix use-after-free in get_info()
netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets
mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
iomap: improve shared block detection in iomap_unshare_iter
iomap: don't bother unsharing delalloc extents
iomap: share iomap_unshare_iter predicate code with fsdax
fsdax: remove zeroing code from dax_unshare_iter
fsdax: dax_unshare_iter needs to copy entire blocks
iomap: turn iomap_want_unshare_iter into an inline function
kasan: Fix Software Tag-Based KASAN with GCC
firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
afs: Fix missing subdir edit when renamed between parent dirs
ACPI: CPPC: Make rmw_lock a raw_spin_lock
smb: client: set correct device number on nfs reparse points
cxl/events: Fix Trace DRAM Event Record
ntfs3: Add bounds checking to mi_enum_attr()
fs/ntfs3: Check if more than chunk-size bytes are written
fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
fs/ntfs3: Stale inode instead of bad
fs/ntfs3: Add rough attr alloc_size check
fs/ntfs3: Fix possible deadlock in mi_read
fs/ntfs3: Additional check in ni_clear()
fs/ntfs3: Fix general protection fault in run_is_mapped_full
fs/ntfs3: Additional check in ntfs_file_release
scsi: scsi_transport_fc: Allow setting rport state to current state
cifs: Fix creating native symlinks pointing to current or parent directory
thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
net: amd: mvme147: Fix probe banner message
NFS: remove revoked delegation from server's delegation list
misc: sgi-gru: Don't disable preemption in GRU driver
usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
USB: gadget: dummy-hcd: Fix "task hung" problem
ALSA: usb-audio: Add quirks for Dell WD19 dock
usbip: tools: Fix detach_port() invalid port error path
usb: phy: Fix API devm_usb_put_phy() can not release the phy
usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
xhci: Fix Link TRB DMA in command ring stopped completion event
xhci: Use pm_runtime_get to prevent RPM on unsupported systems
Revert "driver core: Fix uevent_show() vs driver detach race"
wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
wifi: ath10k: Fix memory leak in management tx
wifi: cfg80211: clear wdev->cqm_config pointer on free
wifi: iwlegacy: Clear stale interrupts before resuming device
iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
iio: gts-helper: Fix memory leaks for the error path of
iio_gts_build_avail_scale_table()
iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
iio: light: veml6030: fix microlux value calculation
RISC-V: ACPI: fix early_ioremap to early_memremap
tools/mm: -Werror fixes in page-types/slabinfo
tools/mm: fix compile error
thunderbolt: Honor TMU requirements in the domain when setting TMU mode
cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
block: fix sanity checks in blk_rq_map_user_bvec
cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
riscv: vdso: Prevent the compiler from inserting calls to memset()
Input: edt-ft5x06 - fix regmap leak when probe fails
ALSA: hda/realtek: Limit internal Mic boost on Dell platform
riscv: efi: Set NX compat flag in PE/COFF header
riscv: Use '%u' to format the output of 'cpu'
riscv: Remove unused GENERATING_ASM_OFFSETS
riscv: Remove duplicated GET_RM
cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
sched/numa: Fix the potential null pointer dereference in task_numa_work()
iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
mptcp: init: protect sched with rcu_read_lock
mei: use kvmalloc for read buffer
mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
x86/traps: Enable UBSAN traps on x86
x86/traps: move kmsan check after instrumentation_begin
ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
mctp i2c: handle NULL header address
xfs: fix finding a last resort AG in xfs_filestream_pick_ag
ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
nvmet-auth: assign dh_key to NULL after kfree_sensitive
kasan: remove vmalloc_percpu test
io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
vmscan,migrate: fix page count imbalance on node stats when demoting pages
arm64: dts: imx8ulp: correct the flexspi compatible string
io_uring: always lock __io_cqring_overflow_flush
wifi: iwlwifi: mvm: fix 6 GHz scan construction
mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw()
mm: don't install PMD mappings when THPs are disabled by the hw/process/vma
fs/ntfs3: Sequential field availability check in mi_enum_attr()
perf trace: Fix non-listed archs in the syscalltbl routines
ASoC: dapm: fix bounds checker error in dapm_widget_list_create
dpll: add Embedded SYNC feature for a pin
ice: add callbacks for Embedded SYNC enablement on dpll pins
ice: fix crash on probe for DPLL enabled E810 LOM
ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext()
bpf: Add bpf_mem_alloc_check_size() helper
net: ethernet: mtk_wed: fix path of MT7988 WO firmware
drm/mediatek: ovl: Remove the color format comment for ovl_fmt_convert()
drm/mediatek: Fix get efuse issue for MT8188 DPTX
ACPI: resource: Fold Asus Vivobook Pro N6506M* DMI quirks together
powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U
usb: typec: qcom-pmic-typec: fix missing fwnode removal in error path
phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend
nilfs2: fix kernel bug due to missing clearing of checked flag
mm: shrinker: avoid memleak in alloc_shrinker_info
firmware: microchip: auto-update: fix poll_complete() to not report spurious
timeout errors
soc: qcom: pmic_glink: Handle GLINK intent allocation rejections
cxl/port: Fix CXL port initialization order when the subsystem is built-in
btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io()
btrfs: fix error propagation of split bios
scsi: ufs: core: Fix another deadlock during RTC update
posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone
drm/amd/pm: Vangogh: Fix kernel memory out of bounds write
fork: do not invoke uffd on fork if error occurs
mm/ksm: remove redundant code in ksm_fork
fork: only invoke khugepaged, ksm hooks if no error
resource,kexec: walk_system_ram_res_rev must retain resource flags
nvme: re-fix error-handling for io_uring nvme-passthrough
btrfs: fix extent map merging not happening for adjacent extents
btrfs: fix defrag not merging contiguous extents due to merged extent maps
mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
mm: multi-gen LRU: ignore non-leaf pmd_young for force_scan=true
mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats
mm: shrink skip folio mapped by an exiting process
mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify()
drm/i915: Skip programming FIA link enable bits for MTL+
drm/i915/display: WA for Re-initialize dispcnlunitt1 xosc clock
drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
drm/i915/hdcp: Add encoder check in hdcp2_get_capability
drm/i915/dp: Clear VSC SDP during post ddi disable routine
drm/i915/pps: Disable DPLS_GATING around pps sequence
drm/i915: move rawclk from runtime to display runtime info
drm/xe/display: drop unused rawclk_freq and RUNTIME_INFO()
drm/xe: Support 'nomodeset' kernel command-line option
drm/xe/xe2hpg: Introduce performance tuning changes for Xe2_HPG
drm/amdgpu/swsmu: fix ordering for setting workload_mask
drm/amdgpu/swsmu: default to fullscreen 3D profile for dGPUs
drm/amdgpu: handle default profile on on devices without fullscreen 3D
MIPS: export __cmpxchg_small()
rcu/kvfree: Add kvfree_rcu_barrier() API
rcu/kvfree: Refactor kvfree_rcu_queue_batch()
UBUNTU: Upstream stable to v6.6.60, v6.11.7
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Noble)
Importance: Medium
Assignee: Koichiro Den (koichiroden)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Noble)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Noble)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Noble)
Status: New => In Progress
** Changed in: linux (Ubuntu Noble)
Assignee: (unassigned) => Koichiro Den (koichiroden)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-02-25
+
+ Ported from the following upstream stable releases:
+ v6.6.60, v6.11.7
+
from git://git.kernel.org/
+
+ Input: xpad - sort xpad_device by vendor and product ID
+ Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
+ cgroup: Fix potential overflow issue when checking max_depth
+ spi: geni-qcom: Fix boot warning related to pm_runtime and devres
+ wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
+ mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
+ wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
+ wifi: ath11k: Fix invalid ring usage in full monitor mode
+ wifi: brcm80211: BRCM_TRACING should depend on TRACING
+ RDMA/cxgb4: Dump vendor specific QP details
+ RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
+ RDMA/bnxt_re: Fix the usage of control path spin locks
+ RDMA/bnxt_re: synchronize the qp-handle table array
+ RDMA/bnxt_re: Fix the locking while accessing the QP table
+ wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
+ wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
+ wifi: iwlwifi: mvm: don't add default link in fw restart flow
+ ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
+ macsec: Fix use-after-free while sending the offloading packet
+ net: stmmac: dwmac4: Fix high address display by updating reg_space[] from
register values
+ net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
+ net: stmmac: fix TSO DMA API usage causing oops
+ ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
+ gtp: allow -1 to be specified as file description from userspace
+ bpf: Force checkpoint when jmp history is too long
+ netdevsim: Add trailing zero to terminate the string in
nsim_nexthop_bucket_activity_write()
+ bpf: Fix out-of-bounds write in trie_get_next_key()
+ net: fix crash when config small gso_max_size/gso_ipv4_max_size
+ netfilter: Fix use-after-free in get_info()
+ netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
+ Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
+ net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
+ net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets
+ mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
+ mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
+ netfilter: nft_payload: sanitize offset and length before calling
skb_checksum()
+ bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
+ iomap: improve shared block detection in iomap_unshare_iter
+ iomap: don't bother unsharing delalloc extents
+ iomap: share iomap_unshare_iter predicate code with fsdax
+ fsdax: remove zeroing code from dax_unshare_iter
+ fsdax: dax_unshare_iter needs to copy entire blocks
+ iomap: turn iomap_want_unshare_iter into an inline function
+ kasan: Fix Software Tag-Based KASAN with GCC
+ firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
+ afs: Fix missing subdir edit when renamed between parent dirs
+ ACPI: CPPC: Make rmw_lock a raw_spin_lock
+ smb: client: set correct device number on nfs reparse points
+ cxl/events: Fix Trace DRAM Event Record
+ ntfs3: Add bounds checking to mi_enum_attr()
+ fs/ntfs3: Check if more than chunk-size bytes are written
+ fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
+ fs/ntfs3: Stale inode instead of bad
+ fs/ntfs3: Add rough attr alloc_size check
+ fs/ntfs3: Fix possible deadlock in mi_read
+ fs/ntfs3: Additional check in ni_clear()
+ fs/ntfs3: Fix general protection fault in run_is_mapped_full
+ fs/ntfs3: Additional check in ntfs_file_release
+ scsi: scsi_transport_fc: Allow setting rport state to current state
+ cifs: Fix creating native symlinks pointing to current or parent directory
+ thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
+ thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
+ net: amd: mvme147: Fix probe banner message
+ NFS: remove revoked delegation from server's delegation list
+ misc: sgi-gru: Don't disable preemption in GRU driver
+ usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
+ usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
+ usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
+ USB: gadget: dummy-hcd: Fix "task hung" problem
+ ALSA: usb-audio: Add quirks for Dell WD19 dock
+ usbip: tools: Fix detach_port() invalid port error path
+ usb: phy: Fix API devm_usb_put_phy() can not release the phy
+ usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
+ usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
+ phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
+ phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
+ xhci: Fix Link TRB DMA in command ring stopped completion event
+ xhci: Use pm_runtime_get to prevent RPM on unsupported systems
+ Revert "driver core: Fix uevent_show() vs driver detach race"
+ wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
+ wifi: ath10k: Fix memory leak in management tx
+ wifi: cfg80211: clear wdev->cqm_config pointer on free
+ wifi: iwlegacy: Clear stale interrupts before resuming device
+ iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
+ iio: gts-helper: Fix memory leaks for the error path of
iio_gts_build_avail_scale_table()
+ iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
+ iio: light: veml6030: fix microlux value calculation
+ RISC-V: ACPI: fix early_ioremap to early_memremap
+ tools/mm: -Werror fixes in page-types/slabinfo
+ tools/mm: fix compile error
+ thunderbolt: Honor TMU requirements in the domain when setting TMU mode
+ cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
+ mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
+ mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
+ block: fix sanity checks in blk_rq_map_user_bvec
+ cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
+ phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
+ spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
+ riscv: vdso: Prevent the compiler from inserting calls to memset()
+ Input: edt-ft5x06 - fix regmap leak when probe fails
+ ALSA: hda/realtek: Limit internal Mic boost on Dell platform
+ riscv: efi: Set NX compat flag in PE/COFF header
+ riscv: Use '%u' to format the output of 'cpu'
+ riscv: Remove unused GENERATING_ASM_OFFSETS
+ riscv: Remove duplicated GET_RM
+ cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
+ cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
+ sched/numa: Fix the potential null pointer dereference in task_numa_work()
+ iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
+ mptcp: init: protect sched with rcu_read_lock
+ mei: use kvmalloc for read buffer
+ mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
+ x86/traps: Enable UBSAN traps on x86
+ x86/traps: move kmsan check after instrumentation_begin
+ ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
+ mctp i2c: handle NULL header address
+ xfs: fix finding a last resort AG in xfs_filestream_pick_ag
+ ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
+ ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
+ nvmet-auth: assign dh_key to NULL after kfree_sensitive
+ kasan: remove vmalloc_percpu test
+ io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
+ vmscan,migrate: fix page count imbalance on node stats when demoting pages
+ arm64: dts: imx8ulp: correct the flexspi compatible string
+ io_uring: always lock __io_cqring_overflow_flush
+ wifi: iwlwifi: mvm: fix 6 GHz scan construction
+ mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw()
+ mm: don't install PMD mappings when THPs are disabled by the hw/process/vma
+ fs/ntfs3: Sequential field availability check in mi_enum_attr()
+ perf trace: Fix non-listed archs in the syscalltbl routines
+ ASoC: dapm: fix bounds checker error in dapm_widget_list_create
+ dpll: add Embedded SYNC feature for a pin
+ ice: add callbacks for Embedded SYNC enablement on dpll pins
+ ice: fix crash on probe for DPLL enabled E810 LOM
+ ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
+ net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext()
+ bpf: Add bpf_mem_alloc_check_size() helper
+ net: ethernet: mtk_wed: fix path of MT7988 WO firmware
+ drm/mediatek: ovl: Remove the color format comment for ovl_fmt_convert()
+ drm/mediatek: Fix get efuse issue for MT8188 DPTX
+ ACPI: resource: Fold Asus Vivobook Pro N6506M* DMI quirks together
+ powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U
+ usb: typec: qcom-pmic-typec: fix missing fwnode removal in error path
+ phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend
+ nilfs2: fix kernel bug due to missing clearing of checked flag
+ mm: shrinker: avoid memleak in alloc_shrinker_info
+ firmware: microchip: auto-update: fix poll_complete() to not report spurious
timeout errors
+ soc: qcom: pmic_glink: Handle GLINK intent allocation rejections
+ cxl/port: Fix CXL port initialization order when the subsystem is built-in
+ btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io()
+ btrfs: fix error propagation of split bios
+ scsi: ufs: core: Fix another deadlock during RTC update
+ posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone
+ drm/amd/pm: Vangogh: Fix kernel memory out of bounds write
+ fork: do not invoke uffd on fork if error occurs
+ mm/ksm: remove redundant code in ksm_fork
+ fork: only invoke khugepaged, ksm hooks if no error
+ resource,kexec: walk_system_ram_res_rev must retain resource flags
+ nvme: re-fix error-handling for io_uring nvme-passthrough
+ btrfs: fix extent map merging not happening for adjacent extents
+ btrfs: fix defrag not merging contiguous extents due to merged extent maps
+ mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
+ mm: multi-gen LRU: ignore non-leaf pmd_young for force_scan=true
+ mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats
+ mm: shrink skip folio mapped by an exiting process
+ mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify()
+ drm/i915: Skip programming FIA link enable bits for MTL+
+ drm/i915/display: WA for Re-initialize dispcnlunitt1 xosc clock
+ drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
+ drm/i915/hdcp: Add encoder check in hdcp2_get_capability
+ drm/i915/dp: Clear VSC SDP during post ddi disable routine
+ drm/i915/pps: Disable DPLS_GATING around pps sequence
+ drm/i915: move rawclk from runtime to display runtime info
+ drm/xe/display: drop unused rawclk_freq and RUNTIME_INFO()
+ drm/xe: Support 'nomodeset' kernel command-line option
+ drm/xe/xe2hpg: Introduce performance tuning changes for Xe2_HPG
+ drm/amdgpu/swsmu: fix ordering for setting workload_mask
+ drm/amdgpu/swsmu: default to fullscreen 3D profile for dGPUs
+ drm/amdgpu: handle default profile on on devices without fullscreen 3D
+ MIPS: export __cmpxchg_small()
+ rcu/kvfree: Add kvfree_rcu_barrier() API
+ rcu/kvfree: Refactor kvfree_rcu_queue_batch()
+ UBUNTU: Upstream stable to v6.6.60, v6.11.7
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2099996
Title:
Noble update: upstream stable patchset 2025-02-25
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Noble:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-02-25
Ported from the following upstream stable releases:
v6.6.60, v6.11.7
from git://git.kernel.org/
Input: xpad - sort xpad_device by vendor and product ID
Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
cgroup: Fix potential overflow issue when checking max_depth
spi: geni-qcom: Fix boot warning related to pm_runtime and devres
wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
wifi: ath11k: Fix invalid ring usage in full monitor mode
wifi: brcm80211: BRCM_TRACING should depend on TRACING
RDMA/cxgb4: Dump vendor specific QP details
RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
RDMA/bnxt_re: Fix the usage of control path spin locks
RDMA/bnxt_re: synchronize the qp-handle table array
RDMA/bnxt_re: Fix the locking while accessing the QP table
wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
wifi: iwlwifi: mvm: don't add default link in fw restart flow
ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
macsec: Fix use-after-free while sending the offloading packet
net: stmmac: dwmac4: Fix high address display by updating reg_space[] from
register values
net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
net: stmmac: fix TSO DMA API usage causing oops
ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
gtp: allow -1 to be specified as file description from userspace
bpf: Force checkpoint when jmp history is too long
netdevsim: Add trailing zero to terminate the string in
nsim_nexthop_bucket_activity_write()
bpf: Fix out-of-bounds write in trie_get_next_key()
net: fix crash when config small gso_max_size/gso_ipv4_max_size
netfilter: Fix use-after-free in get_info()
netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets
mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
netfilter: nft_payload: sanitize offset and length before calling
skb_checksum()
bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
iomap: improve shared block detection in iomap_unshare_iter
iomap: don't bother unsharing delalloc extents
iomap: share iomap_unshare_iter predicate code with fsdax
fsdax: remove zeroing code from dax_unshare_iter
fsdax: dax_unshare_iter needs to copy entire blocks
iomap: turn iomap_want_unshare_iter into an inline function
kasan: Fix Software Tag-Based KASAN with GCC
firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
afs: Fix missing subdir edit when renamed between parent dirs
ACPI: CPPC: Make rmw_lock a raw_spin_lock
smb: client: set correct device number on nfs reparse points
cxl/events: Fix Trace DRAM Event Record
ntfs3: Add bounds checking to mi_enum_attr()
fs/ntfs3: Check if more than chunk-size bytes are written
fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
fs/ntfs3: Stale inode instead of bad
fs/ntfs3: Add rough attr alloc_size check
fs/ntfs3: Fix possible deadlock in mi_read
fs/ntfs3: Additional check in ni_clear()
fs/ntfs3: Fix general protection fault in run_is_mapped_full
fs/ntfs3: Additional check in ntfs_file_release
scsi: scsi_transport_fc: Allow setting rport state to current state
cifs: Fix creating native symlinks pointing to current or parent directory
thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
net: amd: mvme147: Fix probe banner message
NFS: remove revoked delegation from server's delegation list
misc: sgi-gru: Don't disable preemption in GRU driver
usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
USB: gadget: dummy-hcd: Fix "task hung" problem
ALSA: usb-audio: Add quirks for Dell WD19 dock
usbip: tools: Fix detach_port() invalid port error path
usb: phy: Fix API devm_usb_put_phy() can not release the phy
usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
xhci: Fix Link TRB DMA in command ring stopped completion event
xhci: Use pm_runtime_get to prevent RPM on unsupported systems
Revert "driver core: Fix uevent_show() vs driver detach race"
wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
wifi: ath10k: Fix memory leak in management tx
wifi: cfg80211: clear wdev->cqm_config pointer on free
wifi: iwlegacy: Clear stale interrupts before resuming device
iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
iio: gts-helper: Fix memory leaks for the error path of
iio_gts_build_avail_scale_table()
iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
iio: light: veml6030: fix microlux value calculation
RISC-V: ACPI: fix early_ioremap to early_memremap
tools/mm: -Werror fixes in page-types/slabinfo
tools/mm: fix compile error
thunderbolt: Honor TMU requirements in the domain when setting TMU mode
cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
block: fix sanity checks in blk_rq_map_user_bvec
cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
riscv: vdso: Prevent the compiler from inserting calls to memset()
Input: edt-ft5x06 - fix regmap leak when probe fails
ALSA: hda/realtek: Limit internal Mic boost on Dell platform
riscv: efi: Set NX compat flag in PE/COFF header
riscv: Use '%u' to format the output of 'cpu'
riscv: Remove unused GENERATING_ASM_OFFSETS
riscv: Remove duplicated GET_RM
cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
sched/numa: Fix the potential null pointer dereference in task_numa_work()
iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
mptcp: init: protect sched with rcu_read_lock
mei: use kvmalloc for read buffer
mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
x86/traps: Enable UBSAN traps on x86
x86/traps: move kmsan check after instrumentation_begin
ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
mctp i2c: handle NULL header address
xfs: fix finding a last resort AG in xfs_filestream_pick_ag
ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
nvmet-auth: assign dh_key to NULL after kfree_sensitive
kasan: remove vmalloc_percpu test
io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
vmscan,migrate: fix page count imbalance on node stats when demoting pages
arm64: dts: imx8ulp: correct the flexspi compatible string
io_uring: always lock __io_cqring_overflow_flush
wifi: iwlwifi: mvm: fix 6 GHz scan construction
mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw()
mm: don't install PMD mappings when THPs are disabled by the hw/process/vma
fs/ntfs3: Sequential field availability check in mi_enum_attr()
perf trace: Fix non-listed archs in the syscalltbl routines
ASoC: dapm: fix bounds checker error in dapm_widget_list_create
dpll: add Embedded SYNC feature for a pin
ice: add callbacks for Embedded SYNC enablement on dpll pins
ice: fix crash on probe for DPLL enabled E810 LOM
ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext()
bpf: Add bpf_mem_alloc_check_size() helper
net: ethernet: mtk_wed: fix path of MT7988 WO firmware
drm/mediatek: ovl: Remove the color format comment for ovl_fmt_convert()
drm/mediatek: Fix get efuse issue for MT8188 DPTX
ACPI: resource: Fold Asus Vivobook Pro N6506M* DMI quirks together
powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U
usb: typec: qcom-pmic-typec: fix missing fwnode removal in error path
phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend
nilfs2: fix kernel bug due to missing clearing of checked flag
mm: shrinker: avoid memleak in alloc_shrinker_info
firmware: microchip: auto-update: fix poll_complete() to not report spurious
timeout errors
soc: qcom: pmic_glink: Handle GLINK intent allocation rejections
cxl/port: Fix CXL port initialization order when the subsystem is built-in
btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io()
btrfs: fix error propagation of split bios
scsi: ufs: core: Fix another deadlock during RTC update
posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone
drm/amd/pm: Vangogh: Fix kernel memory out of bounds write
fork: do not invoke uffd on fork if error occurs
mm/ksm: remove redundant code in ksm_fork
fork: only invoke khugepaged, ksm hooks if no error
resource,kexec: walk_system_ram_res_rev must retain resource flags
nvme: re-fix error-handling for io_uring nvme-passthrough
btrfs: fix extent map merging not happening for adjacent extents
btrfs: fix defrag not merging contiguous extents due to merged extent maps
mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
mm: multi-gen LRU: ignore non-leaf pmd_young for force_scan=true
mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats
mm: shrink skip folio mapped by an exiting process
mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify()
drm/i915: Skip programming FIA link enable bits for MTL+
drm/i915/display: WA for Re-initialize dispcnlunitt1 xosc clock
drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
drm/i915/hdcp: Add encoder check in hdcp2_get_capability
drm/i915/dp: Clear VSC SDP during post ddi disable routine
drm/i915/pps: Disable DPLS_GATING around pps sequence
drm/i915: move rawclk from runtime to display runtime info
drm/xe/display: drop unused rawclk_freq and RUNTIME_INFO()
drm/xe: Support 'nomodeset' kernel command-line option
drm/xe/xe2hpg: Introduce performance tuning changes for Xe2_HPG
drm/amdgpu/swsmu: fix ordering for setting workload_mask
drm/amdgpu/swsmu: default to fullscreen 3D profile for dGPUs
drm/amdgpu: handle default profile on on devices without fullscreen 3D
MIPS: export __cmpxchg_small()
rcu/kvfree: Add kvfree_rcu_barrier() API
rcu/kvfree: Refactor kvfree_rcu_queue_batch()
UBUNTU: Upstream stable to v6.6.60, v6.11.7
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2099996/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
