Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-03-27
Ported from the following upstream stable releases:
v6.6.79, v6.12.16
from git://git.kernel.org/
nfsd: clear acl_access/acl_default after releasing them
NFSD: fix hang in nfsd4_shutdown_callback
pinctrl: cy8c95x0: Respect IRQ trigger settings from firmware
HID: multitouch: Add NULL check in mt_input_configured
HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
spi: sn-f-ospi: Fix division by zero
ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu()
vrf: use RCU protection in l3mdev_l3_out()
vxlan: check vxlan_vnigroup_init() return value
LoongArch: Fix idle VS timer enqueue
LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
cgroup: Remove steal time from usage_usec
drm/i915/selftests: avoid using uninitialized context
gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0
gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ
gpio: bcm-kona: Add missing newline to dev_err format string
drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
xen/swiotlb: relax alignment requirements
x86/xen: allow larger contiguous memory regions in PV guests
block: cleanup and fix batch completion adding conditions
gpiolib: Fix crash on error in gpiochip_get_ngpios()
tools: fix annoying "mkdir -p ..." logs when building tools in parallel
RDMA/efa: Reset device on probe failure
fbdev: omap: use threaded IRQ for LCD DMA
soc/tegra: fuse: Update Tegra234 nvmem keepout list
media: cxd2841er: fix 64-bit division on gcc-9
media: i2c: ds90ub913: Add error handling to ub913_hw_init()
media: i2c: ds90ub953: Add error handling for i2c reads/writes
media: uvcvideo: Implement dual stream quirk to fix loss of usb packets
media: uvcvideo: Add new quirk definition for the Sonix Technology Co. 292a
camera
media: uvcvideo: Add Kurokesu C1 PRO camera
media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P
PCI: switchtec: Add Microchip PCI100X device IDs
scsi: ufs: bsg: Set bsg_queue to NULL after removal
rtla/timerlat_hist: Abort event processing on second signal
rtla/timerlat_top: Abort event processing on second signal
vfio/pci: Enable iowrite64 and ioread64 for vfio pci
NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
Grab mm lock before grabbing pt lock
selftests: gpio: gpio-sim: Fix missing chip disablements
ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V
x86/mm/tlb: Only trim the mm_cpumask once a second
orangefs: fix a oob in orangefs_debug_write
ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V
batman-adv: fix panic during interface removal
batman-adv: Ignore neighbor throughput metrics in error case
batman-adv: Drop unmanaged ELP metric worker
drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
KVM: nSVM: Enter guest mode before initializing nested NPT MMU
perf/x86/intel: Ensure LBRs are disabled when a CPU is starting
usb: gadget: f_midi: Fixing wMaxPacketSize exceeded issue during MIDI bind
retries
usb: dwc3: Fix timeout issue during controller enter/exit from halt state
usb: roles: set switch registered flag early on
usb: gadget: udc: renesas_usb3: Fix compiler warning
usb: dwc2: gadget: remove of_node reference upon udc_stop
USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
usb: core: fix pipe creation for get_bMaxPacketSize0
USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist
USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone
usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
USB: hub: Ignore non-compliant devices with too many configs or interfaces
USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk
usb: cdc-acm: Check control transfer buffer size before access
usb: cdc-acm: Fix handling of oversized fragments
USB: serial: option: add MeiG Smart SLM828
USB: serial: option: add Telit Cinterion FN990B compositions
USB: serial: option: fix Telit Cinterion FN990A name
USB: serial: option: drop MeiG Smart defines
can: ctucanfd: handle skb allocation failure
can: c_can: fix unbalanced runtime PM disable in error path
can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length
zero
can: etas_es58x: fix potential NULL pointer dereference on udev->serial
alpha: make stack 16-byte aligned (most cases)
wifi: ath12k: fix handling of 6 GHz rules
kbuild: userprogs: fix bitsize and target detection on clang
efi: Avoid cold plugged memory for placing the kernel
cgroup: fix race between fork and cgroup.kill
serial: port: Assign ->iotype correctly when ->iobase is set
serial: port: Always update ->iotype in __uart_read_properties()
serial: 8250: Fix fifo underflow on flush
alpha: align stack for page fault and user unaligned trap handlers
gpiolib: acpi: Add a quirk for Acer Nitro ANV14
gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock
partitions: mac: fix handling of bogus partition table
regulator: qcom_smd: Add l2, l5 sub-node to mp5496 regulator
regmap-irq: Add missing kfree()
arm64: Handle .ARM.attributes section in linker scripts
mmc: mtk-sd: Fix register settings for hs400(es) mode
igc: Set buffer type for empty frames in igc_init_empty_frame
mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw()
btrfs: fix hole expansion when writing at an offset beyond EOF
clocksource: Use pr_info() for "Checking clocksource synchronization" message
clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic
context
ipv4: add RCU protection to ip4_dst_hoplimit()
net: add dev_net_rcu() helper
ipv4: use RCU protection in ipv4_default_advmss()
ipv4: use RCU protection in rt_is_expired()
ipv4: use RCU protection in inet_select_addr()
net: ipv4: Cache pmtu for all packet paths if multipath enabled
ipv4: use RCU protection in __ip_rt_update_pmtu()
ipv4: icmp: convert to dev_net_rcu()
flow_dissector: use RCU protection to fetch dev_net()
ipv6: use RCU protection in ip6_default_advmss()
ipv6: icmp: convert to dev_net_rcu()
HID: hid-steam: Make sure rumble work is canceled on removal
HID: hid-steam: Move hidraw input (un)registering to work
ndisc: use RCU protection in ndisc_alloc_skb()
neighbour: delete redundant judgment statements
neighbour: use RCU protection in __neigh_notify()
arp: use RCU protection in arp_xmit()
openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
ndisc: extend RCU protection in ndisc_send_skb()
ipv6: mcast: extend RCU protection in igmp6_send()
ipv6: mcast: add RCU protection to mld_newpack()
drm/tidss: Fix issue in irq handling causing irq-flood issue
drm/tidss: Clear the interrupt status for interrupts being disabled
drm/rcar-du: dsi: Fix PHY lock bit check
drm/v3d: Stop active perfmon if it is being destroyed
netdevsim: print human readable IP address
md/md-bitmap: factor behind write counters out from bitmap_{start/end}write()
md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()
md/md-bitmap: move bitmap_{start, end}write to md upper layer
HID: hid-steam: Don't use cancel_delayed_work_sync in IRQ context
io_uring/kbuf: reallocate buf lists on upgrade
x86/i8253: Disable PIT timer 0 when not in use
nfsd: validate the nfsd_serv pointer before calling svc_wake_up
x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit
pinctrl: cy8c95x0: Avoid accessing reserved registers
pinctrl: cy8c95x0: Enable regmap locking for debug
pinctrl: cy8c95x0: Rename PWMSEL to SELPWM
HID: winwing: Add NULL check in winwing_init_led()
scripts/Makefile.extrawarn: Do not show clang's non-kprintf warnings at W=1
pinctrl: pinconf-generic: Print unsigned value if a format is registered
net: fib_rules: annotate data-races around rule->[io]ifindex
Documentation/networking: fix basic node example document ISO 15765-2
idpf: fix handling rsc packet with a single segment
idpf: record rx queue in skb for RSC packets
idpf: call set_real_num_queues in idpf_open
igc: Fix HW RX timestamp when passed by ZC XDP
LoongArch: KVM: Fix typo issue about GCFG feature detection
net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases
net: ethernet: ti: am65_cpsw: fix tx_cleanup for XDP case
Bluetooth: btintel_pcie: Fix a potential race condition
team: better TEAM_OPTION_TYPE_STRING validation
workqueue: Put the pwq after detaching the rescuer from the pool
drm/tests: hdmi: Fix WW_MUTEX_SLOWPATH failures
gpu: host1x: Fix a use of uninitialized mutex
perf/x86/intel: Clean up PEBS-via-PT on hybrid
drm/xe/client: bo->client does not need bos_lock
io_uring/waitid: don't abuse io_tw_state
io_uring/uring_cmd: remove dead req_has_async_data() check
drm: Fix DSC BPP increment decoding
iommu/amd: Expicitly enable CNTRL.EPHEn bit in resume path
firmware: qcom: scm: smc: Handle missing SCM device
i3c: mipi-i3c-hci: Add Intel specific quirk to ring resuming
i3c: mipi-i3c-hci: Add support for MIPI I3C HCI on PCI bus
UBUNTU: [Config] updateconfigs for MIPI_I3C_HCI_PCI
media: bcm2835-unicam: Disable trigger mode operation
serial: 8250_pci: Resolve WCH vendor ID ambiguity
serial: 8250_pci: Share WCH IDs with parport_serial driver
8250: microchip: pci1xxxx: Add workaround for RTS bit toggle
vfio/nvgrace-gpu: Read dvsec register to determine need for uncached resmem
vfio/nvgrace-gpu: Expose the blackwell device PF BAR1 to the VM
fs/ntfs3: Unify inode corruption marking with _ntfs_bad_inode()
kbuild: suppress stdout from merge_config for silent builds
kbuild: Use -fzero-init-padding-bits=all
KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
perf/x86/intel: Fix ARCH_PERFMON_NUM_COUNTER_LEAF
ring-buffer: Unlock resize on mmap error
usb: gadget: core: flush gadget workqueue after device removal
PCI: Avoid FLR for Mediatek MT7922 WiFi
arm64: rust: clean Rust 1.85.0 warning using softfloat target
alpha: replace hardcoded stack offsets with autogenerated ones
s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn()
s390/pci: Fix handling of isolated VFs
iommu: Fix potential memory leak in iopf_queue_remove_device()
include: net: add static inline dst_dev_overhead() to dst.h
net: ipv6: ioam6_iptunnel: mitigate 2-realloc issue
net: ipv6: seg6_iptunnel: mitigate 2-realloc issue
net: ipv6: rpl_iptunnel: mitigate 2-realloc issue
net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels
scsi: ufs: core: Introduce ufshcd_has_pending_tasks()
scsi: ufs: core: Prepare to introduce a new clock_gating lock
scsi: ufs: core: Introduce a new clock_gating lock
scsi: ufs: Fix toggling of clk_gating.state when clock gating is not allowed
rust: kbuild: add -fzero-init-padding-bits to bindgen_skip_cflags
cpufreq/amd-pstate: Call cppc_set_epp_perf in the reenable function
cpufreq/amd-pstate: Align offline flow of shared memory and MSR based systems
cpufreq/amd-pstate: Refactor amd_pstate_epp_reenable() and
amd_pstate_epp_offline()
cpufreq/amd-pstate: Remove the cppc_state check in offline/online functions
cpufreq/amd-pstate: Merge amd_pstate_epp_cpu_offline() and
amd_pstate_epp_offline()
ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
drm/tidss: Fix race condition while handling interrupt registers
drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()
drm/msm/dpu: fix x1e80100 intf_6 underrun/vsync interrupt
drm/msm/dpu1: don't choke on disabling the writeback connector
drm/xe/tracing: Fix a potential TP_printk UAF
drm: renesas: rz-du: Increase supported resolutions
Revert "UBUNTU: SAUCE: selftest: netfilter: fix null IP field in
kci_test_ipsec_offload"
selftests: rtnetlink: update netdevsim ipsec output format
wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit
net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels
scsi: ufs: core: Ensure clk_gating.lock is used only after initialization
UBUNTU: Upstream stable to v6.6.79, v6.12.16
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Oracular)
Importance: Medium
Assignee: Noah Wager (nwager)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Oracular)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Oracular)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Oracular)
Status: New => In Progress
** Changed in: linux (Ubuntu Oracular)
Assignee: (unassigned) => Noah Wager (nwager)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-03-27
+
+ Ported from the following upstream stable releases:
+ v6.6.79, v6.12.16
+
from git://git.kernel.org/
+
+ nfsd: clear acl_access/acl_default after releasing them
+ NFSD: fix hang in nfsd4_shutdown_callback
+ pinctrl: cy8c95x0: Respect IRQ trigger settings from firmware
+ HID: multitouch: Add NULL check in mt_input_configured
+ HID: hid-thrustmaster: fix stack-out-of-bounds read in
usb_check_int_endpoints()
+ spi: sn-f-ospi: Fix division by zero
+ ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
+ ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu()
+ vrf: use RCU protection in l3mdev_l3_out()
+ vxlan: check vxlan_vnigroup_init() return value
+ LoongArch: Fix idle VS timer enqueue
+ LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
+ arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
+ cgroup: Remove steal time from usage_usec
+ drm/i915/selftests: avoid using uninitialized context
+ gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0
+ gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ
+ gpio: bcm-kona: Add missing newline to dev_err format string
+ drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
+ xen/swiotlb: relax alignment requirements
+ x86/xen: allow larger contiguous memory regions in PV guests
+ block: cleanup and fix batch completion adding conditions
+ gpiolib: Fix crash on error in gpiochip_get_ngpios()
+ tools: fix annoying "mkdir -p ..." logs when building tools in parallel
+ RDMA/efa: Reset device on probe failure
+ fbdev: omap: use threaded IRQ for LCD DMA
+ soc/tegra: fuse: Update Tegra234 nvmem keepout list
+ media: cxd2841er: fix 64-bit division on gcc-9
+ media: i2c: ds90ub913: Add error handling to ub913_hw_init()
+ media: i2c: ds90ub953: Add error handling for i2c reads/writes
+ media: uvcvideo: Implement dual stream quirk to fix loss of usb packets
+ media: uvcvideo: Add new quirk definition for the Sonix Technology Co. 292a
camera
+ media: uvcvideo: Add Kurokesu C1 PRO camera
+ media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
+ PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P
+ PCI: switchtec: Add Microchip PCI100X device IDs
+ scsi: ufs: bsg: Set bsg_queue to NULL after removal
+ rtla/timerlat_hist: Abort event processing on second signal
+ rtla/timerlat_top: Abort event processing on second signal
+ vfio/pci: Enable iowrite64 and ioread64 for vfio pci
+ NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
+ Grab mm lock before grabbing pt lock
+ selftests: gpio: gpio-sim: Fix missing chip disablements
+ ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V
+ x86/mm/tlb: Only trim the mm_cpumask once a second
+ orangefs: fix a oob in orangefs_debug_write
+ ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V
+ batman-adv: fix panic during interface removal
+ batman-adv: Ignore neighbor throughput metrics in error case
+ batman-adv: Drop unmanaged ELP metric worker
+ drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
+ KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
+ KVM: nSVM: Enter guest mode before initializing nested NPT MMU
+ perf/x86/intel: Ensure LBRs are disabled when a CPU is starting
+ usb: gadget: f_midi: Fixing wMaxPacketSize exceeded issue during MIDI bind
retries
+ usb: dwc3: Fix timeout issue during controller enter/exit from halt state
+ usb: roles: set switch registered flag early on
+ usb: gadget: udc: renesas_usb3: Fix compiler warning
+ usb: dwc2: gadget: remove of_node reference upon udc_stop
+ USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
+ usb: core: fix pipe creation for get_bMaxPacketSize0
+ USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist
+ USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone
+ usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
+ USB: hub: Ignore non-compliant devices with too many configs or interfaces
+ USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk
+ usb: cdc-acm: Check control transfer buffer size before access
+ usb: cdc-acm: Fix handling of oversized fragments
+ USB: serial: option: add MeiG Smart SLM828
+ USB: serial: option: add Telit Cinterion FN990B compositions
+ USB: serial: option: fix Telit Cinterion FN990A name
+ USB: serial: option: drop MeiG Smart defines
+ can: ctucanfd: handle skb allocation failure
+ can: c_can: fix unbalanced runtime PM disable in error path
+ can: j1939: j1939_sk_send_loop(): fix unable to send messages with data
length zero
+ can: etas_es58x: fix potential NULL pointer dereference on udev->serial
+ alpha: make stack 16-byte aligned (most cases)
+ wifi: ath12k: fix handling of 6 GHz rules
+ kbuild: userprogs: fix bitsize and target detection on clang
+ efi: Avoid cold plugged memory for placing the kernel
+ cgroup: fix race between fork and cgroup.kill
+ serial: port: Assign ->iotype correctly when ->iobase is set
+ serial: port: Always update ->iotype in __uart_read_properties()
+ serial: 8250: Fix fifo underflow on flush
+ alpha: align stack for page fault and user unaligned trap handlers
+ gpiolib: acpi: Add a quirk for Acer Nitro ANV14
+ gpio: stmpe: Check return value of stmpe_reg_read in
stmpe_gpio_irq_sync_unlock
+ partitions: mac: fix handling of bogus partition table
+ regulator: qcom_smd: Add l2, l5 sub-node to mp5496 regulator
+ regmap-irq: Add missing kfree()
+ arm64: Handle .ARM.attributes section in linker scripts
+ mmc: mtk-sd: Fix register settings for hs400(es) mode
+ igc: Set buffer type for empty frames in igc_init_empty_frame
+ mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw()
+ btrfs: fix hole expansion when writing at an offset beyond EOF
+ clocksource: Use pr_info() for "Checking clocksource synchronization" message
+ clocksource: Use migrate_disable() to avoid calling get_random_u32() in
atomic context
+ ipv4: add RCU protection to ip4_dst_hoplimit()
+ net: add dev_net_rcu() helper
+ ipv4: use RCU protection in ipv4_default_advmss()
+ ipv4: use RCU protection in rt_is_expired()
+ ipv4: use RCU protection in inet_select_addr()
+ net: ipv4: Cache pmtu for all packet paths if multipath enabled
+ ipv4: use RCU protection in __ip_rt_update_pmtu()
+ ipv4: icmp: convert to dev_net_rcu()
+ flow_dissector: use RCU protection to fetch dev_net()
+ ipv6: use RCU protection in ip6_default_advmss()
+ ipv6: icmp: convert to dev_net_rcu()
+ HID: hid-steam: Make sure rumble work is canceled on removal
+ HID: hid-steam: Move hidraw input (un)registering to work
+ ndisc: use RCU protection in ndisc_alloc_skb()
+ neighbour: delete redundant judgment statements
+ neighbour: use RCU protection in __neigh_notify()
+ arp: use RCU protection in arp_xmit()
+ openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
+ ndisc: extend RCU protection in ndisc_send_skb()
+ ipv6: mcast: extend RCU protection in igmp6_send()
+ ipv6: mcast: add RCU protection to mld_newpack()
+ drm/tidss: Fix issue in irq handling causing irq-flood issue
+ drm/tidss: Clear the interrupt status for interrupts being disabled
+ drm/rcar-du: dsi: Fix PHY lock bit check
+ drm/v3d: Stop active perfmon if it is being destroyed
+ netdevsim: print human readable IP address
+ md/md-bitmap: factor behind write counters out from bitmap_{start/end}write()
+ md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()
+ md/md-bitmap: move bitmap_{start, end}write to md upper layer
+ HID: hid-steam: Don't use cancel_delayed_work_sync in IRQ context
+ io_uring/kbuf: reallocate buf lists on upgrade
+ x86/i8253: Disable PIT timer 0 when not in use
+ nfsd: validate the nfsd_serv pointer before calling svc_wake_up
+ x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit
+ pinctrl: cy8c95x0: Avoid accessing reserved registers
+ pinctrl: cy8c95x0: Enable regmap locking for debug
+ pinctrl: cy8c95x0: Rename PWMSEL to SELPWM
+ HID: winwing: Add NULL check in winwing_init_led()
+ scripts/Makefile.extrawarn: Do not show clang's non-kprintf warnings at W=1
+ pinctrl: pinconf-generic: Print unsigned value if a format is registered
+ net: fib_rules: annotate data-races around rule->[io]ifindex
+ Documentation/networking: fix basic node example document ISO 15765-2
+ idpf: fix handling rsc packet with a single segment
+ idpf: record rx queue in skb for RSC packets
+ idpf: call set_real_num_queues in idpf_open
+ igc: Fix HW RX timestamp when passed by ZC XDP
+ LoongArch: KVM: Fix typo issue about GCFG feature detection
+ net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases
+ net: ethernet: ti: am65_cpsw: fix tx_cleanup for XDP case
+ Bluetooth: btintel_pcie: Fix a potential race condition
+ team: better TEAM_OPTION_TYPE_STRING validation
+ workqueue: Put the pwq after detaching the rescuer from the pool
+ drm/tests: hdmi: Fix WW_MUTEX_SLOWPATH failures
+ gpu: host1x: Fix a use of uninitialized mutex
+ perf/x86/intel: Clean up PEBS-via-PT on hybrid
+ drm/xe/client: bo->client does not need bos_lock
+ io_uring/waitid: don't abuse io_tw_state
+ io_uring/uring_cmd: remove dead req_has_async_data() check
+ drm: Fix DSC BPP increment decoding
+ iommu/amd: Expicitly enable CNTRL.EPHEn bit in resume path
+ firmware: qcom: scm: smc: Handle missing SCM device
+ i3c: mipi-i3c-hci: Add Intel specific quirk to ring resuming
+ i3c: mipi-i3c-hci: Add support for MIPI I3C HCI on PCI bus
+ UBUNTU: [Config] updateconfigs for MIPI_I3C_HCI_PCI
+ media: bcm2835-unicam: Disable trigger mode operation
+ serial: 8250_pci: Resolve WCH vendor ID ambiguity
+ serial: 8250_pci: Share WCH IDs with parport_serial driver
+ 8250: microchip: pci1xxxx: Add workaround for RTS bit toggle
+ vfio/nvgrace-gpu: Read dvsec register to determine need for uncached resmem
+ vfio/nvgrace-gpu: Expose the blackwell device PF BAR1 to the VM
+ fs/ntfs3: Unify inode corruption marking with _ntfs_bad_inode()
+ kbuild: suppress stdout from merge_config for silent builds
+ kbuild: Use -fzero-init-padding-bits=all
+ KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
+ perf/x86/intel: Fix ARCH_PERFMON_NUM_COUNTER_LEAF
+ ring-buffer: Unlock resize on mmap error
+ usb: gadget: core: flush gadget workqueue after device removal
+ PCI: Avoid FLR for Mediatek MT7922 WiFi
+ arm64: rust: clean Rust 1.85.0 warning using softfloat target
+ alpha: replace hardcoded stack offsets with autogenerated ones
+ s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn()
+ s390/pci: Fix handling of isolated VFs
+ iommu: Fix potential memory leak in iopf_queue_remove_device()
+ include: net: add static inline dst_dev_overhead() to dst.h
+ net: ipv6: ioam6_iptunnel: mitigate 2-realloc issue
+ net: ipv6: seg6_iptunnel: mitigate 2-realloc issue
+ net: ipv6: rpl_iptunnel: mitigate 2-realloc issue
+ net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels
+ scsi: ufs: core: Introduce ufshcd_has_pending_tasks()
+ scsi: ufs: core: Prepare to introduce a new clock_gating lock
+ scsi: ufs: core: Introduce a new clock_gating lock
+ scsi: ufs: Fix toggling of clk_gating.state when clock gating is not allowed
+ rust: kbuild: add -fzero-init-padding-bits to bindgen_skip_cflags
+ cpufreq/amd-pstate: Call cppc_set_epp_perf in the reenable function
+ cpufreq/amd-pstate: Align offline flow of shared memory and MSR based systems
+ cpufreq/amd-pstate: Refactor amd_pstate_epp_reenable() and
amd_pstate_epp_offline()
+ cpufreq/amd-pstate: Remove the cppc_state check in offline/online functions
+ cpufreq/amd-pstate: Merge amd_pstate_epp_cpu_offline() and
amd_pstate_epp_offline()
+ ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
+ drm/tidss: Fix race condition while handling interrupt registers
+ drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()
+ drm/msm/dpu: fix x1e80100 intf_6 underrun/vsync interrupt
+ drm/msm/dpu1: don't choke on disabling the writeback connector
+ drm/xe/tracing: Fix a potential TP_printk UAF
+ drm: renesas: rz-du: Increase supported resolutions
+ Revert "UBUNTU: SAUCE: selftest: netfilter: fix null IP field in
kci_test_ipsec_offload"
+ selftests: rtnetlink: update netdevsim ipsec output format
+ wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit
+ net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels
+ scsi: ufs: core: Ensure clk_gating.lock is used only after initialization
+ UBUNTU: Upstream stable to v6.6.79, v6.12.16
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2104873
Title:
Oracular update: upstream stable patchset 2025-03-27
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Oracular:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-03-27
Ported from the following upstream stable releases:
v6.6.79, v6.12.16
from git://git.kernel.org/
nfsd: clear acl_access/acl_default after releasing them
NFSD: fix hang in nfsd4_shutdown_callback
pinctrl: cy8c95x0: Respect IRQ trigger settings from firmware
HID: multitouch: Add NULL check in mt_input_configured
HID: hid-thrustmaster: fix stack-out-of-bounds read in
usb_check_int_endpoints()
spi: sn-f-ospi: Fix division by zero
ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu()
vrf: use RCU protection in l3mdev_l3_out()
vxlan: check vxlan_vnigroup_init() return value
LoongArch: Fix idle VS timer enqueue
LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
cgroup: Remove steal time from usage_usec
drm/i915/selftests: avoid using uninitialized context
gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0
gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ
gpio: bcm-kona: Add missing newline to dev_err format string
drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
xen/swiotlb: relax alignment requirements
x86/xen: allow larger contiguous memory regions in PV guests
block: cleanup and fix batch completion adding conditions
gpiolib: Fix crash on error in gpiochip_get_ngpios()
tools: fix annoying "mkdir -p ..." logs when building tools in parallel
RDMA/efa: Reset device on probe failure
fbdev: omap: use threaded IRQ for LCD DMA
soc/tegra: fuse: Update Tegra234 nvmem keepout list
media: cxd2841er: fix 64-bit division on gcc-9
media: i2c: ds90ub913: Add error handling to ub913_hw_init()
media: i2c: ds90ub953: Add error handling for i2c reads/writes
media: uvcvideo: Implement dual stream quirk to fix loss of usb packets
media: uvcvideo: Add new quirk definition for the Sonix Technology Co. 292a
camera
media: uvcvideo: Add Kurokesu C1 PRO camera
media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P
PCI: switchtec: Add Microchip PCI100X device IDs
scsi: ufs: bsg: Set bsg_queue to NULL after removal
rtla/timerlat_hist: Abort event processing on second signal
rtla/timerlat_top: Abort event processing on second signal
vfio/pci: Enable iowrite64 and ioread64 for vfio pci
NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
Grab mm lock before grabbing pt lock
selftests: gpio: gpio-sim: Fix missing chip disablements
ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V
x86/mm/tlb: Only trim the mm_cpumask once a second
orangefs: fix a oob in orangefs_debug_write
ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V
batman-adv: fix panic during interface removal
batman-adv: Ignore neighbor throughput metrics in error case
batman-adv: Drop unmanaged ELP metric worker
drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
KVM: nSVM: Enter guest mode before initializing nested NPT MMU
perf/x86/intel: Ensure LBRs are disabled when a CPU is starting
usb: gadget: f_midi: Fixing wMaxPacketSize exceeded issue during MIDI bind
retries
usb: dwc3: Fix timeout issue during controller enter/exit from halt state
usb: roles: set switch registered flag early on
usb: gadget: udc: renesas_usb3: Fix compiler warning
usb: dwc2: gadget: remove of_node reference upon udc_stop
USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
usb: core: fix pipe creation for get_bMaxPacketSize0
USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist
USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone
usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
USB: hub: Ignore non-compliant devices with too many configs or interfaces
USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk
usb: cdc-acm: Check control transfer buffer size before access
usb: cdc-acm: Fix handling of oversized fragments
USB: serial: option: add MeiG Smart SLM828
USB: serial: option: add Telit Cinterion FN990B compositions
USB: serial: option: fix Telit Cinterion FN990A name
USB: serial: option: drop MeiG Smart defines
can: ctucanfd: handle skb allocation failure
can: c_can: fix unbalanced runtime PM disable in error path
can: j1939: j1939_sk_send_loop(): fix unable to send messages with data
length zero
can: etas_es58x: fix potential NULL pointer dereference on udev->serial
alpha: make stack 16-byte aligned (most cases)
wifi: ath12k: fix handling of 6 GHz rules
kbuild: userprogs: fix bitsize and target detection on clang
efi: Avoid cold plugged memory for placing the kernel
cgroup: fix race between fork and cgroup.kill
serial: port: Assign ->iotype correctly when ->iobase is set
serial: port: Always update ->iotype in __uart_read_properties()
serial: 8250: Fix fifo underflow on flush
alpha: align stack for page fault and user unaligned trap handlers
gpiolib: acpi: Add a quirk for Acer Nitro ANV14
gpio: stmpe: Check return value of stmpe_reg_read in
stmpe_gpio_irq_sync_unlock
partitions: mac: fix handling of bogus partition table
regulator: qcom_smd: Add l2, l5 sub-node to mp5496 regulator
regmap-irq: Add missing kfree()
arm64: Handle .ARM.attributes section in linker scripts
mmc: mtk-sd: Fix register settings for hs400(es) mode
igc: Set buffer type for empty frames in igc_init_empty_frame
mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw()
btrfs: fix hole expansion when writing at an offset beyond EOF
clocksource: Use pr_info() for "Checking clocksource synchronization" message
clocksource: Use migrate_disable() to avoid calling get_random_u32() in
atomic context
ipv4: add RCU protection to ip4_dst_hoplimit()
net: add dev_net_rcu() helper
ipv4: use RCU protection in ipv4_default_advmss()
ipv4: use RCU protection in rt_is_expired()
ipv4: use RCU protection in inet_select_addr()
net: ipv4: Cache pmtu for all packet paths if multipath enabled
ipv4: use RCU protection in __ip_rt_update_pmtu()
ipv4: icmp: convert to dev_net_rcu()
flow_dissector: use RCU protection to fetch dev_net()
ipv6: use RCU protection in ip6_default_advmss()
ipv6: icmp: convert to dev_net_rcu()
HID: hid-steam: Make sure rumble work is canceled on removal
HID: hid-steam: Move hidraw input (un)registering to work
ndisc: use RCU protection in ndisc_alloc_skb()
neighbour: delete redundant judgment statements
neighbour: use RCU protection in __neigh_notify()
arp: use RCU protection in arp_xmit()
openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
ndisc: extend RCU protection in ndisc_send_skb()
ipv6: mcast: extend RCU protection in igmp6_send()
ipv6: mcast: add RCU protection to mld_newpack()
drm/tidss: Fix issue in irq handling causing irq-flood issue
drm/tidss: Clear the interrupt status for interrupts being disabled
drm/rcar-du: dsi: Fix PHY lock bit check
drm/v3d: Stop active perfmon if it is being destroyed
netdevsim: print human readable IP address
md/md-bitmap: factor behind write counters out from bitmap_{start/end}write()
md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()
md/md-bitmap: move bitmap_{start, end}write to md upper layer
HID: hid-steam: Don't use cancel_delayed_work_sync in IRQ context
io_uring/kbuf: reallocate buf lists on upgrade
x86/i8253: Disable PIT timer 0 when not in use
nfsd: validate the nfsd_serv pointer before calling svc_wake_up
x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit
pinctrl: cy8c95x0: Avoid accessing reserved registers
pinctrl: cy8c95x0: Enable regmap locking for debug
pinctrl: cy8c95x0: Rename PWMSEL to SELPWM
HID: winwing: Add NULL check in winwing_init_led()
scripts/Makefile.extrawarn: Do not show clang's non-kprintf warnings at W=1
pinctrl: pinconf-generic: Print unsigned value if a format is registered
net: fib_rules: annotate data-races around rule->[io]ifindex
Documentation/networking: fix basic node example document ISO 15765-2
idpf: fix handling rsc packet with a single segment
idpf: record rx queue in skb for RSC packets
idpf: call set_real_num_queues in idpf_open
igc: Fix HW RX timestamp when passed by ZC XDP
LoongArch: KVM: Fix typo issue about GCFG feature detection
net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases
net: ethernet: ti: am65_cpsw: fix tx_cleanup for XDP case
Bluetooth: btintel_pcie: Fix a potential race condition
team: better TEAM_OPTION_TYPE_STRING validation
workqueue: Put the pwq after detaching the rescuer from the pool
drm/tests: hdmi: Fix WW_MUTEX_SLOWPATH failures
gpu: host1x: Fix a use of uninitialized mutex
perf/x86/intel: Clean up PEBS-via-PT on hybrid
drm/xe/client: bo->client does not need bos_lock
io_uring/waitid: don't abuse io_tw_state
io_uring/uring_cmd: remove dead req_has_async_data() check
drm: Fix DSC BPP increment decoding
iommu/amd: Expicitly enable CNTRL.EPHEn bit in resume path
firmware: qcom: scm: smc: Handle missing SCM device
i3c: mipi-i3c-hci: Add Intel specific quirk to ring resuming
i3c: mipi-i3c-hci: Add support for MIPI I3C HCI on PCI bus
UBUNTU: [Config] updateconfigs for MIPI_I3C_HCI_PCI
media: bcm2835-unicam: Disable trigger mode operation
serial: 8250_pci: Resolve WCH vendor ID ambiguity
serial: 8250_pci: Share WCH IDs with parport_serial driver
8250: microchip: pci1xxxx: Add workaround for RTS bit toggle
vfio/nvgrace-gpu: Read dvsec register to determine need for uncached resmem
vfio/nvgrace-gpu: Expose the blackwell device PF BAR1 to the VM
fs/ntfs3: Unify inode corruption marking with _ntfs_bad_inode()
kbuild: suppress stdout from merge_config for silent builds
kbuild: Use -fzero-init-padding-bits=all
KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
perf/x86/intel: Fix ARCH_PERFMON_NUM_COUNTER_LEAF
ring-buffer: Unlock resize on mmap error
usb: gadget: core: flush gadget workqueue after device removal
PCI: Avoid FLR for Mediatek MT7922 WiFi
arm64: rust: clean Rust 1.85.0 warning using softfloat target
alpha: replace hardcoded stack offsets with autogenerated ones
s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn()
s390/pci: Fix handling of isolated VFs
iommu: Fix potential memory leak in iopf_queue_remove_device()
include: net: add static inline dst_dev_overhead() to dst.h
net: ipv6: ioam6_iptunnel: mitigate 2-realloc issue
net: ipv6: seg6_iptunnel: mitigate 2-realloc issue
net: ipv6: rpl_iptunnel: mitigate 2-realloc issue
net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels
scsi: ufs: core: Introduce ufshcd_has_pending_tasks()
scsi: ufs: core: Prepare to introduce a new clock_gating lock
scsi: ufs: core: Introduce a new clock_gating lock
scsi: ufs: Fix toggling of clk_gating.state when clock gating is not allowed
rust: kbuild: add -fzero-init-padding-bits to bindgen_skip_cflags
cpufreq/amd-pstate: Call cppc_set_epp_perf in the reenable function
cpufreq/amd-pstate: Align offline flow of shared memory and MSR based systems
cpufreq/amd-pstate: Refactor amd_pstate_epp_reenable() and
amd_pstate_epp_offline()
cpufreq/amd-pstate: Remove the cppc_state check in offline/online functions
cpufreq/amd-pstate: Merge amd_pstate_epp_cpu_offline() and
amd_pstate_epp_offline()
ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
drm/tidss: Fix race condition while handling interrupt registers
drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()
drm/msm/dpu: fix x1e80100 intf_6 underrun/vsync interrupt
drm/msm/dpu1: don't choke on disabling the writeback connector
drm/xe/tracing: Fix a potential TP_printk UAF
drm: renesas: rz-du: Increase supported resolutions
Revert "UBUNTU: SAUCE: selftest: netfilter: fix null IP field in
kci_test_ipsec_offload"
selftests: rtnetlink: update netdevsim ipsec output format
wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit
net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels
scsi: ufs: core: Ensure clk_gating.lock is used only after initialization
UBUNTU: Upstream stable to v6.6.79, v6.12.16
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2104873/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
