Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2025-03-14 Ported from the following upstream stable releases: v6.6.68, v6.12.7 from git://git.kernel.org/ usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled PCI: vmd: Create domain symlink before pci_bus_add_devices() PCI: Add ACS quirk for Broadcom BCM5760X NIC usb: cdns3-ti: Add workaround for Errata i2409 MIPS: Loongson64: DTS: Fix msi node for ls7a ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C usb: cdns3: Add quirk flag to enable suspend residency platform/x86: p2sb: Make p2sb_get_devfn() return void p2sb: Factor out p2sb_read_from_cache() p2sb: Introduce the global flag p2sb_hidden_by_bios p2sb: Move P2SB hide and unhide code to p2sb_scan_and_cache() p2sb: Do not scan and remove the P2SB device when it is unhidden i2c: pnx: Fix timeout in wait functions xfs: fix the contact address for the sysfs ABI documentation xfs: verify buffer, inode, and dquot items every tx commit xfs: use consistent uid/gid when grabbing dquots for inodes xfs: declare xfs_file.c symbols in xfs_file.h xfs: create a new helper to return a file's allocation unit xfs: Fix xfs_flush_unmap_range() range for RT xfs: Fix xfs_prepare_shift() range for RT xfs: don't walk off the end of a directory data block xfs: convert comma to semicolon xfs: fix file_path handling in tracepoints xfs: remove unused parameter in macro XFS_DQUOT_LOGRES xfs: attr forks require attr, not attr2 xfs: conditionally allow FS_XFLAG_REALTIME changes if S_DAX is set xfs: Fix the owner setting issue for rmap query in xfs fsmap xfs: use XFS_BUF_DADDR_NULL for daddrs in getfsmap code xfs: take m_growlock when running growfsrt xfs: reset rootdir extent size hint after growfsrt tools: hv: change permissions of NetworkManager configuration file cxl/pci: Fix potential bogus return value upon successful probing cxl/region: Fix region creation for greater than x2 switches net/smc: protect link down work from execute after lgr freed net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg net/smc: check smcd_v2_ext_offset when receiving proposal msg net/smc: check return value of sock_recvmsg when draining clc data net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic() netdevsim: prevent bad user input in nsim_dev_health_break_write() ionic: Fix netdev notifier unregister on failure ionic: use ee->offset when returning sprom data net: renesas: rswitch: rework ts tags management net: hinic: Fix cleanup in create_rxqs/txqs() net: ethernet: bgmac-platform: fix an OF node reference leak ipvs: Fix clamp() of ip_vs_conn_tab on small memory systems netfilter: ipset: Fix for recursive locking warning selftests: openvswitch: fix tcpdump execution net: mdiobus: fix an OF node reference leak mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk mmc: mtk-sd: disable wakeup in .remove() and in the error path of .probe() EDAC/amd64: Simplify ECC check on unified memory controllers net: tun: fix tun_napi_alloc_frags() chelsio/chtls: prevent potential integer overflow on 32bit i2c: riic: Always round-up when calculating bus period efivarfs: Fix error on non-existent file hexagon: Disable constant extender optimization for LLVM prior to 19.1.0 USB: serial: option: add TCL IK512 MBIM & ECM USB: serial: option: add MeiG Smart SLM770A USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready USB: serial: option: add MediaTek T7XX compositions USB: serial: option: add Telit FE910C04 rmnet compositions thunderbolt: Improve redrive mode handling drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() drm/panel: novatek-nt35950: fix return value check in nt35950_probe() i915/guc: Reset engine utilization buffer before registration i915/guc: Ensure busyness counter increases motonically i915/guc: Accumulate active runtime on gt reset hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers hwmon: (tmp513) Fix Current Register value interpretation hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers zram: refuse to use zero sized block device as backing device zram: fix uninitialized ZRAM not releasing backing device zram: fix potential UAF of zram table vmalloc: fix accounting with i915 btrfs: tree-checker: reject inline extent items with 0 ref count Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet KVM: x86: Play nice with protected guests in complete_hypercall_exit() smb: client: fix TCP timers deadlock after rmmod tracing: Fix test_event_printk() to process entire print argument tracing: Add missing helper functions in event pointer dereference check tracing: Add "%s" check in test_event_printk() tracing: Have process_string() also allow arrays selftests/memfd: run sysctl tests when PID namespace support is enabled selftests/bpf: Use asm constraint "m" for LoongArch io_uring: Fix registered ring file refcount leak io_uring: check if iowq is killed before queuing NFS/pnfs: Fix a live lock between recalled layouts and layoutget of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent() of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() nilfs2: fix buffer head leaks in calls to truncate_inode_pages() nilfs2: prevent use of deleted inode udmabuf: also check for F_SEAL_FUTURE_WRITE of: Fix error path in of_parse_phandle_with_args_map() of: Fix refcount leakage for OF node returned by __of_get_dma_parent() ceph: validate snapdirname option length when mounting ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() ceph: fix memory leaks in __ceph_sync_read() epoll: Add synchronous wakeup support for ep_poll_callback io_uring/rw: avoid punting to io-wq directly drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update xfs: sb_spino_align is not verified xfs: fix sparse inode limits on runt AG xfs: fix sb_spino_align checks for large fsblock sizes xfs: fix zero byte checking in the superblock scrubber netdev: fix repeated netlink messages in queue dump team: Fix feature exposure when no ports are present can: m_can: fix missed interrupts with m_can_pci netdev-genl: avoid empty messages in queue dump KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden KVM: arm64: Fix set_id_regs selftest for ASIDBITS becoming unwritable net: mctp: handle skb cleanup on sock_queue failures xhci: retry Stop Endpoint on buggy NEC controllers usb: xhci: Limit Stop Endpoint retries usb: xhci: Avoid queuing redundant Stop Endpoint commands xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic thunderbolt: Add support for Intel Panther Lake-M/P thunderbolt: Don't display nvm_version unless upgrade supported drm/panel: st7701: Add prepare_prev_first flag to drm_panel drm/panel: synaptics-r63353: Fix regulator unbalance drm/amdgpu/nbio7.11: fix IP version check drm/amdgpu/nbio7.7: fix IP version check fgraph: Still initialize idle shadow stacks when starting x86/hyperv: Fix hv tsc page based sched_clock for hibernation accel/ivpu: Fix general protection fault in ivpu_bo_list() accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal() ocfs2: fix the space leak in LA when releasing LA of: property: fw_devlink: Do not use interrupt-parent directly of: address: Preserve the flags portion on 1:1 dma-ranges mapping ceph: give up on paths longer than PATH_MAX ceph: fix memory leak in ceph_direct_read_write() UBUNTU: Upstream stable to v6.6.68, v6.12.7 ** Affects: linux (Ubuntu) Importance: Undecided Status: Invalid ** Affects: linux (Ubuntu Noble) Importance: Medium Assignee: Koichiro Den (koichiroden) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Noble) Importance: Undecided Status: New -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2102266 Title: Noble update: upstream stable patchset 2025-03-14 Status in linux package in Ubuntu: Invalid Status in linux source package in Noble: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2025-03-14 Ported from the following upstream stable releases: v6.6.68, v6.12.7 from git://git.kernel.org/ usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled PCI: vmd: Create domain symlink before pci_bus_add_devices() PCI: Add ACS quirk for Broadcom BCM5760X NIC usb: cdns3-ti: Add workaround for Errata i2409 MIPS: Loongson64: DTS: Fix msi node for ls7a ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C usb: cdns3: Add quirk flag to enable suspend residency platform/x86: p2sb: Make p2sb_get_devfn() return void p2sb: Factor out p2sb_read_from_cache() p2sb: Introduce the global flag p2sb_hidden_by_bios p2sb: Move P2SB hide and unhide code to p2sb_scan_and_cache() p2sb: Do not scan and remove the P2SB device when it is unhidden i2c: pnx: Fix timeout in wait functions xfs: fix the contact address for the sysfs ABI documentation xfs: verify buffer, inode, and dquot items every tx commit xfs: use consistent uid/gid when grabbing dquots for inodes xfs: declare xfs_file.c symbols in xfs_file.h xfs: create a new helper to return a file's allocation unit xfs: Fix xfs_flush_unmap_range() range for RT xfs: Fix xfs_prepare_shift() range for RT xfs: don't walk off the end of a directory data block xfs: convert comma to semicolon xfs: fix file_path handling in tracepoints xfs: remove unused parameter in macro XFS_DQUOT_LOGRES xfs: attr forks require attr, not attr2 xfs: conditionally allow FS_XFLAG_REALTIME changes if S_DAX is set xfs: Fix the owner setting issue for rmap query in xfs fsmap xfs: use XFS_BUF_DADDR_NULL for daddrs in getfsmap code xfs: take m_growlock when running growfsrt xfs: reset rootdir extent size hint after growfsrt tools: hv: change permissions of NetworkManager configuration file cxl/pci: Fix potential bogus return value upon successful probing cxl/region: Fix region creation for greater than x2 switches net/smc: protect link down work from execute after lgr freed net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg net/smc: check smcd_v2_ext_offset when receiving proposal msg net/smc: check return value of sock_recvmsg when draining clc data net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic() netdevsim: prevent bad user input in nsim_dev_health_break_write() ionic: Fix netdev notifier unregister on failure ionic: use ee->offset when returning sprom data net: renesas: rswitch: rework ts tags management net: hinic: Fix cleanup in create_rxqs/txqs() net: ethernet: bgmac-platform: fix an OF node reference leak ipvs: Fix clamp() of ip_vs_conn_tab on small memory systems netfilter: ipset: Fix for recursive locking warning selftests: openvswitch: fix tcpdump execution net: mdiobus: fix an OF node reference leak mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk mmc: mtk-sd: disable wakeup in .remove() and in the error path of .probe() EDAC/amd64: Simplify ECC check on unified memory controllers net: tun: fix tun_napi_alloc_frags() chelsio/chtls: prevent potential integer overflow on 32bit i2c: riic: Always round-up when calculating bus period efivarfs: Fix error on non-existent file hexagon: Disable constant extender optimization for LLVM prior to 19.1.0 USB: serial: option: add TCL IK512 MBIM & ECM USB: serial: option: add MeiG Smart SLM770A USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready USB: serial: option: add MediaTek T7XX compositions USB: serial: option: add Telit FE910C04 rmnet compositions thunderbolt: Improve redrive mode handling drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() drm/panel: novatek-nt35950: fix return value check in nt35950_probe() i915/guc: Reset engine utilization buffer before registration i915/guc: Ensure busyness counter increases motonically i915/guc: Accumulate active runtime on gt reset hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers hwmon: (tmp513) Fix Current Register value interpretation hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers zram: refuse to use zero sized block device as backing device zram: fix uninitialized ZRAM not releasing backing device zram: fix potential UAF of zram table vmalloc: fix accounting with i915 btrfs: tree-checker: reject inline extent items with 0 ref count Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet KVM: x86: Play nice with protected guests in complete_hypercall_exit() smb: client: fix TCP timers deadlock after rmmod tracing: Fix test_event_printk() to process entire print argument tracing: Add missing helper functions in event pointer dereference check tracing: Add "%s" check in test_event_printk() tracing: Have process_string() also allow arrays selftests/memfd: run sysctl tests when PID namespace support is enabled selftests/bpf: Use asm constraint "m" for LoongArch io_uring: Fix registered ring file refcount leak io_uring: check if iowq is killed before queuing NFS/pnfs: Fix a live lock between recalled layouts and layoutget of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent() of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() nilfs2: fix buffer head leaks in calls to truncate_inode_pages() nilfs2: prevent use of deleted inode udmabuf: also check for F_SEAL_FUTURE_WRITE of: Fix error path in of_parse_phandle_with_args_map() of: Fix refcount leakage for OF node returned by __of_get_dma_parent() ceph: validate snapdirname option length when mounting ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() ceph: fix memory leaks in __ceph_sync_read() epoll: Add synchronous wakeup support for ep_poll_callback io_uring/rw: avoid punting to io-wq directly drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update xfs: sb_spino_align is not verified xfs: fix sparse inode limits on runt AG xfs: fix sb_spino_align checks for large fsblock sizes xfs: fix zero byte checking in the superblock scrubber netdev: fix repeated netlink messages in queue dump team: Fix feature exposure when no ports are present can: m_can: fix missed interrupts with m_can_pci netdev-genl: avoid empty messages in queue dump KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden KVM: arm64: Fix set_id_regs selftest for ASIDBITS becoming unwritable net: mctp: handle skb cleanup on sock_queue failures xhci: retry Stop Endpoint on buggy NEC controllers usb: xhci: Limit Stop Endpoint retries usb: xhci: Avoid queuing redundant Stop Endpoint commands xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic thunderbolt: Add support for Intel Panther Lake-M/P thunderbolt: Don't display nvm_version unless upgrade supported drm/panel: st7701: Add prepare_prev_first flag to drm_panel drm/panel: synaptics-r63353: Fix regulator unbalance drm/amdgpu/nbio7.11: fix IP version check drm/amdgpu/nbio7.7: fix IP version check fgraph: Still initialize idle shadow stacks when starting x86/hyperv: Fix hv tsc page based sched_clock for hibernation accel/ivpu: Fix general protection fault in ivpu_bo_list() accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal() ocfs2: fix the space leak in LA when releasing LA of: property: fw_devlink: Do not use interrupt-parent directly of: address: Preserve the flags portion on 1:1 dma-ranges mapping ceph: give up on paths longer than PATH_MAX ceph: fix memory leak in ceph_direct_read_write() UBUNTU: Upstream stable to v6.6.68, v6.12.7 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2102266/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp