** Changed in: linux (Ubuntu Noble) Status: In Progress => Fix Committed
-- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2102181 Title: Noble update: upstream stable patchset 2025-03-13 Status in linux package in Ubuntu: Invalid Status in linux source package in Noble: Fix Committed Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2025-03-13 Ported from the following upstream stable releases: v6.6.67, v6.12.6 from git://git.kernel.org/ bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG ksmbd: fix racy issue from session lookup and expire splice: do not checksum AF_UNIX sockets tcp: check space before adding MPTCP SYN options ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 riscv: Fix IPIs usage in kfence_protect_page() usb: host: max3421-hcd: Correctly abort a USB request. ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() usb: dwc2: Fix HCD resume usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature usb: dwc2: Fix HCD port connection race scsi: ufs: core: Update compl_time_stamp_local_clock after completing a cqe usb: gadget: midi2: Fix interpretation of is_midi1 bits usb: ehci-hcd: fix call balance of clocks handling routines usb: typec: anx7411: fix fwnode_handle reference leak usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe() usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode drm/i915: Fix memory leak by correcting cache object name in error handler drm/i915: Fix NULL pointer dereference in capture_engine xfs: update btree keys correctly when _insrec splits an inode root block xfs: don't drop errno values when we fail to ficlone the entire range xfs: return from xfs_symlink_verify early on V4 filesystems xfs: fix scrub tracepoints when inode-rooted btrees are involved xfs: only run precommits once per transaction object bpf: Check size for BTF-based ctx access of pointer members bpf: Fix theoretical prog_array UAF in __uprobe_perf_func() bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog bpf, sockmap: Fix race between element replace and close() bpf, sockmap: Fix update element with same wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon wifi: mac80211: clean up 'ret' in sta_link_apply_parameters() wifi: mac80211: fix station NSS capability initialization order acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl batman-adv: Do not send uninitialized TT changes batman-adv: Remove uninitialized data in full table TT response batman-adv: Do not let TT changes list grows indefinitely net/mlx5: DR, prevent potential error pointer dereference wifi: cfg80211: sme: init n_channels before channels[] access selftests: mlxsw: sharedbuffer: Remove h1 ingress test case selftests: mlxsw: sharedbuffer: Remove duplicate test cases selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init() net: lapb: increase LAPB_HEADER_LEN net: mscc: ocelot: fix memory leak on ocelot_port_add_txtstamp_skb() net: mscc: ocelot: improve handling of TX timestamp for unknown skb net: mscc: ocelot: ocelot->ts_id_lock and ocelot_port->tx_skbs.lock are IRQ-safe net: mscc: ocelot: be resilient to loss of PTP packets during transmission net: mscc: ocelot: perform error cleanup in ocelot_hwstamp_set() spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user() net: sparx5: fix FDMA performance issue net: sparx5: fix the maximum frame length register ACPI: resource: Fix memory resource type union access cxgb4: use port number to set mac addr qca_spi: Fix clock speed for multiple QCA7000 qca_spi: Make driver probing reliable ALSA: control: Avoid WARN() for symlink errors ASoC: amd: yc: Fix the wrong return value Documentation: PM: Clarify pm_runtime_resume_and_get() return value net: renesas: rswitch: fix race window between tx start and complete net: renesas: rswitch: fix leaked pointer on error path net: renesas: rswitch: avoid use-after-put for a device tree node net: renesas: rswitch: handle stop vs interrupt race netfilter: IDLETIMER: Fix for possible ABBA deadlock net: dsa: felix: fix stuck CPU-injected packets with short taprio windows net/sched: netem: account for backlog updates from child qdisc netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating Bluetooth: iso: Fix recursive locking warning Bluetooth: SCO: Add support for 16 bits transparent voice setting Bluetooth: btmtk: avoid UAF in btmtk_process_coredump net: renesas: rswitch: fix initial MPIC register setting net: dsa: microchip: KSZ9896 register regmap alignment to 32 bit boundaries blk-iocost: Avoid using clamp() on inuse in __propagate_weights() kselftest/arm64: abi: fix SVCR detection KVM: arm64: Disable MPAM visibility by default and ignore VMM writes bpf: sync_linked_regs() must preserve subreg_def selftests/bpf: remove use of __xlated() xen/netfront: fix crash when removing device x86: make get_cpu_vendor() accessible from Xen code objtool/x86: allow syscall instruction x86/static-call: provide a way to do very early static-call updates x86/xen: don't do PV iret hypercall through hypercall page x86/xen: add central hypercall functions x86/xen: fix xen_hypercall_hvm() to not clobber %rbx x86/xen: add FRAME_END to xen_hypercall_hvm() x86/xen: use new hypercall functions instead of hypercall page x86/xen: remove hypercall page x86/static-call: fix 32-bit build x86/asm: Make serialize() always_inline x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 serial: sh-sci: Check if TX data was written to device in .tx_empty() gpio: ljca: Initialize num before accessing item in ljca_gpio_config ALSA: hda/realtek: Fix headset mic on Acer Nitro 5 drm/amdkfd: Use device based logging for errors drm/amdkfd: pause autosuspend when creating pdd drm/amdkfd: fixed page fault when enable MES shader debugger drm/i915/color: Stop using non-posted DSB writes for legacy LUT drm/amd/pm: Set SMU v13.0.7 default workload type xfs: return a 64-bit block count from xfs_btree_count_blocks perf machine: Initialize machine->env to address a segfault bnxt_en: Fix GSO type for HW GRO packets on 5750X chips bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips net: renesas: rswitch: fix possible early skb release Bluetooth: Improve setsockopt() handling of malformed user input libperf: evlist: Fix --cpu argument on hybrid platform selftests: netfilter: Stabilize rpath.sh net, team, bonding: Add netdev_base_features helper bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features team: Fix initial vlan_feature set in __team_compute_features Bluetooth: iso: Always release hdev at the end of iso_listen_bis Bluetooth: iso: Fix circular lock in iso_listen_bis drm/xe: fix the ERR_PTR() returned on failure to allocate tiny pt drm/xe/reg_sr: Remove register pool UBUNTU: Upstream stable to v6.6.67, v6.12.6 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2102181/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp