Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-04-15
Ported from the following upstream stable releases:
v6.6.82, v6.12.19
from git://git.kernel.org/
x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()
rust: block: fix formatting in GenDisk doc
gpio: vf610: use generic device_get_match_data()
gpio: vf610: add locking to gpio direction functions
cifs: Remove symlink member from cifs_open_info_data union
btrfs: fix data overwriting bug during buffered write when block size < page
size
x86/microcode/AMD: Add some forgotten models to the SHA check
loongarch: Use ASM_REACHABLE
rust: workqueue: remove unneeded ``#[allow(clippy::new_ret_no_self)]`
rust: sort global Rust flags
rust: types: avoid repetition in `{As,From}Bytes` impls
rust: enable `clippy::unnecessary_safety_comment` lint
rust: enable `clippy::unnecessary_safety_doc` lint
rust: enable `clippy::ignored_unit_patterns` lint
rust: enable `rustdoc::unescaped_backticks` lint
rust: init: remove unneeded `#[allow(clippy::disallowed_names)]`
rust: introduce `.clippy.toml`
rust: replace `clippy::dbg_macro` with `disallowed_macros`
rust: provide proper code documentation titles
rust: enable Clippy's `check-private-items`
Documentation: rust: add coding guidelines on lints
Documentation: rust: discuss `#[expect(...)]` in the guidelines
rust: error: allow `useless_conversion` for 32-bit builds
rust: error: optimize error type to use nonzero
rust: kbuild: expand rusttest target for macros
rust: fix size_t in bindgen prototypes of C builtins
rust: map `__kernel_size_t` and friends also to usize/isize
tracing: tprobe-events: Fix a memory leak when tprobe with $retval
tracing: tprobe-events: Reject invalid tracepoint name
stmmac: loongson: Pass correct arg to PCI function
LoongArch: Convert unreachable() to BUG()
LoongArch: Use polling play_dead() when resuming from hibernation
LoongArch: Set max_pfn with the PFN of the last page
LoongArch: KVM: Add interrupt checking for AVEC
LoongArch: KVM: Reload guest CSR registers after sleep
LoongArch: KVM: Fix GPA size issue about VM
HID: appleir: Fix potential NULL dereference at raw event handle
ksmbd: fix type confusion via race condition when using ipc_msg_send_request
ksmbd: fix out-of-bounds in parse_sec_desc()
ksmbd: fix use-after-free in smb2_lock
ksmbd: fix bug on trap in smb2_lock
gpio: rcar: Use raw_spinlock to protect register access
gpio: aggregator: protect driver attr handlers against module unload
ALSA: seq: Avoid module auto-load handling at event delivery
ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
ALSA: hda/realtek: update ALC222 depop optimize
btrfs: fix a leaked chunk map issue in read_one_chunk()
hwmon: (peci/dimmtemp) Do not provide fake thresholds data
drm/amd/display: Fix null check for pipe_ctx->plane_state in
resource_build_scaling_params
drm/amd/pm: always allow ih interrupt from fw
drm/imagination: avoid deadlock on fence release
drm/imagination: Hold drm_gem_gpuva lock for unmap
drm/imagination: only init job done fences once
drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
Revert "mm/page_alloc.c: don't show protection in zone's ->lowmem_reserve[] for
empty zone"
Revert "selftests/mm: remove local __NR_* definitions"
platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
x86/boot: Sanitize boot params before parsing command line
x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
x86/cpu: Validate CPUID leaf 0x2 EDX output
x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
drm/xe: Add staging tree for VM binds
drm/xe/hmm: Style- and include fixes
drm/xe/hmm: Don't dereference struct page pointers without notifier lock
drm/xe/vm: Fix a misplaced #endif
drm/xe/vm: Validate userptr during gpu vma prefetching
drm/xe: Fix GT "for each engine" workarounds
drm/xe: Fix fault mode invalidation with unbind
drm/xe/userptr: properly setup pfn_flags_mask
drm/xe/userptr: Unmap userptrs in the mmu notifier
Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
wifi: cfg80211: regulatory: improve invalid hints checking
wifi: nl80211: reject cooked mode if it is set along with other flags
selftests/damon/damos_quota_goal: handle minimum quota that cannot be further
reduced
selftests/damon/damos_quota: make real expectation of quota exceeds
selftests/damon/damon_nr_regions: set ops update for merge results check to
100ms
selftests/damon/damon_nr_regions: sort collected regiosn before checking with
min/max boundaries
rapidio: add check for rio_add_net() in rio_scan_alloc_net()
rapidio: fix an API misues when rio_add_net() fails
dma: kmsan: export kmsan_handle_dma() for modules
s390/traps: Fix test_monitor_call() inline assembly
NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback
userfaultfd: do not block on locking a large folio with raised refcount
block: fix conversion of GPT partition name to 7-bit
mm/page_alloc: fix uninitialized variable
mm: don't skip arch_sync_kernel_mappings() in error paths
mm: fix finish_fault() handling for large folios
wifi: iwlwifi: mvm: clean up ROC on failure
wifi: iwlwifi: mvm: don't try to talk to a dead firmware
wifi: iwlwifi: limit printed string from FW file
wifi: iwlwifi: Free pages allocated when failing to build A-MSDU
wifi: iwlwifi: Fix A-MSDU TSO preparation
HID: google: fix unused variable warning under !CONFIG_ACPI
HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove()
HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
wifi: mac80211: Support parsing EPCS ML element
wifi: mac80211: fix MLE non-inheritance parsing
wifi: mac80211: fix vendor-specific inheritance
drm/fbdev-helper: Move color-mode lookup into 4CC format helper
drm/fbdev: Add memory-agnostic fbdev client
drm: Add client-agnostic setup helper
drm/fbdev-ttm: Support struct drm_driver.fbdev_probe
drm/nouveau: select FW caching
bluetooth: btusb: Initialize .owner field of force_poll_sync_fops
nvme-tcp: add basic support for the C2HTermReq PDU
nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
net: gso: fix ownership in __udp_gso_segment
caif_virtio: fix wrong pointer check in cfv_probe()
perf/core: Fix pmus_lock vs. pmus_srcu ordering
hwmon: (pmbus) Initialise page count in pmbus_identify()
hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
hwmon: (ad7314) Validate leading zero bits and return error
tracing: probe-events: Remove unused MAX_ARG_BUF_LEN macro
drm/imagination: Fix timestamps in firmware traces
ALSA: usx2y: validate nrpacks module parameter on probe
llc: do not use skb_get() before dev_queue_xmit()
hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
drm/sched: Fix preprocessor guard
be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle
returns an error
drm/i915/color: Extract intel_color_modeset()
drm/i915: Plumb 'dsb' all way to the plane hooks
drm/xe: Remove double pageflip
HID: hid-steam: Fix use-after-free when detaching device
net: ipa: Fix v4.7 resource group names
net: ipa: Fix QSB data for v4.7
net: ipa: Enable checksum for IPA_ENDPOINT_AP_MODEM_{RX,TX} for v4.7
ppp: Fix KMSAN uninit-value warning with bpf
vlan: enforce underlying device type
x86/sgx: Fix size overflows in sgx_encl_create()
exfat: fix just enough dentries but allocate a new cluster to dir
exfat: fix soft lockup in exfat_clear_bitmap
exfat: short-circuit zero-byte writes in exfat_file_write_iter
net-timestamp: support TCP GSO case for a few missing flags
ublk: set_params: properly check if parameters can be applied
sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
nvme-tcp: fix signedness bug in nvme_tcp_init_connection()
net: dsa: mt7530: Fix traffic flooding for MMIO devices
mctp i3c: handle NULL header address
net: ipv6: fix dst ref loop in ila lwtunnel
net: ipv6: fix missing dst ref drop in ila lwtunnel
gpio: rcar: Fix missing of_node_put() call
Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
usb: renesas_usbhs: Call clk_put()
usb: renesas_usbhs: Use devm_usb_get_phy()
usb: hub: lack of clearing xHC resources
usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
usb: typec: ucsi: Fix NULL pointer access
usb: renesas_usbhs: Flush the notify_hotplug_work
usb: gadget: u_ether: Set is_suspend flag if remote wakeup fails
usb: atm: cxacru: fix a flaw in existing endpoint checks
usb: dwc3: Set SUSPENDENABLE soon after phy init
usb: dwc3: gadget: Prevent irq storm when TH re-executes
usb: typec: ucsi: increase timeout for PPM reset operations
usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
usb: gadget: Set self-powered based on MaxPower and bmAttributes
usb: gadget: Fix setting self-powered state on suspend
usb: gadget: Check bmAttributes only if configuration is valid
kbuild: userprogs: use correct lld when linking through clang
acpi: typec: ucsi: Introduce a ->poll_cci method
xhci: pci: Fix indentation in the PCI device ID definitions
usb: xhci: Enable the TRB overfetch quirk on VIA VL805
KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow
KVM: SVM: Save host DR masks on CPUs with DebugSwap
KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value
KVM: SVM: Suppress DEBUGCTL.BTF on AMD
KVM: x86: Snapshot the host's DEBUGCTL in common x86
KVM: SVM: Manually context switch DEBUGCTL if LBR virtualization is disabled
KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs
KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM
cdx: Fix possible UAF error in driver_override_show()
mei: me: add panther lake P DID
mei: vsc: Use "wakeuphostint" when getting the host wakeup GPIO
intel_th: pci: Add Arrow Lake support
intel_th: pci: Add Panther Lake-H support
intel_th: pci: Add Panther Lake-P/U support
char: misc: deallocate static minor in error path
drivers: core: fix device leak in __fw_devlink_relax_cycles()
slimbus: messaging: Free transaction ID in delayed interrupt scenario
bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock
eeprom: digsy_mtc: Make GPIO lookup table match the device
drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
iio: filter: admv8818: Force initialization of SDO
iio: light: apds9306: fix max_scale_nano values
iio: dac: ad3552r: clear reset status flag
iio: adc: ad7192: fix channel select
iio: adc: at91-sama5d2_adc: fix sama7g5 realbits value
mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear()
arm64: hugetlb: Fix huge_ptep_get_and_clear() for non-present ptes
kbuild: hdrcheck: fix cross build with clang
nvme-tcp: Fix a C2HTermReq error message
docs: rust: remove spurious item in `expect` list
KVM: e500: always restore irqs
x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
wifi: iwlwifi: pcie: Fix TSO preparation
UBUNTU: Upstream stable to v6.6.82, v6.12.19
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Oracular)
Importance: Medium
Assignee: Noah Wager (nwager)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Oracular)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Oracular)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Oracular)
Status: New => In Progress
** Changed in: linux (Ubuntu Oracular)
Assignee: (unassigned) => Noah Wager (nwager)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-04-15
+
+ Ported from the following upstream stable releases:
+ v6.6.82, v6.12.19
+
from git://git.kernel.org/
+
+ x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()
+ rust: block: fix formatting in GenDisk doc
+ gpio: vf610: use generic device_get_match_data()
+ gpio: vf610: add locking to gpio direction functions
+ cifs: Remove symlink member from cifs_open_info_data union
+ btrfs: fix data overwriting bug during buffered write when block size < page
size
+ x86/microcode/AMD: Add some forgotten models to the SHA check
+ loongarch: Use ASM_REACHABLE
+ rust: workqueue: remove unneeded ``#[allow(clippy::new_ret_no_self)]`
+ rust: sort global Rust flags
+ rust: types: avoid repetition in `{As,From}Bytes` impls
+ rust: enable `clippy::unnecessary_safety_comment` lint
+ rust: enable `clippy::unnecessary_safety_doc` lint
+ rust: enable `clippy::ignored_unit_patterns` lint
+ rust: enable `rustdoc::unescaped_backticks` lint
+ rust: init: remove unneeded `#[allow(clippy::disallowed_names)]`
+ rust: introduce `.clippy.toml`
+ rust: replace `clippy::dbg_macro` with `disallowed_macros`
+ rust: provide proper code documentation titles
+ rust: enable Clippy's `check-private-items`
+ Documentation: rust: add coding guidelines on lints
+ Documentation: rust: discuss `#[expect(...)]` in the guidelines
+ rust: error: allow `useless_conversion` for 32-bit builds
+ rust: error: optimize error type to use nonzero
+ rust: kbuild: expand rusttest target for macros
+ rust: fix size_t in bindgen prototypes of C builtins
+ rust: map `__kernel_size_t` and friends also to usize/isize
+ tracing: tprobe-events: Fix a memory leak when tprobe with $retval
+ tracing: tprobe-events: Reject invalid tracepoint name
+ stmmac: loongson: Pass correct arg to PCI function
+ LoongArch: Convert unreachable() to BUG()
+ LoongArch: Use polling play_dead() when resuming from hibernation
+ LoongArch: Set max_pfn with the PFN of the last page
+ LoongArch: KVM: Add interrupt checking for AVEC
+ LoongArch: KVM: Reload guest CSR registers after sleep
+ LoongArch: KVM: Fix GPA size issue about VM
+ HID: appleir: Fix potential NULL dereference at raw event handle
+ ksmbd: fix type confusion via race condition when using ipc_msg_send_request
+ ksmbd: fix out-of-bounds in parse_sec_desc()
+ ksmbd: fix use-after-free in smb2_lock
+ ksmbd: fix bug on trap in smb2_lock
+ gpio: rcar: Use raw_spinlock to protect register access
+ gpio: aggregator: protect driver attr handlers against module unload
+ ALSA: seq: Avoid module auto-load handling at event delivery
+ ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
+ ALSA: hda/realtek: update ALC222 depop optimize
+ btrfs: fix a leaked chunk map issue in read_one_chunk()
+ hwmon: (peci/dimmtemp) Do not provide fake thresholds data
+ drm/amd/display: Fix null check for pipe_ctx->plane_state in
resource_build_scaling_params
+ drm/amd/pm: always allow ih interrupt from fw
+ drm/imagination: avoid deadlock on fence release
+ drm/imagination: Hold drm_gem_gpuva lock for unmap
+ drm/imagination: only init job done fences once
+ drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
+ Revert "mm/page_alloc.c: don't show protection in zone's ->lowmem_reserve[]
for empty zone"
+ Revert "selftests/mm: remove local __NR_* definitions"
+ platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
+ x86/boot: Sanitize boot params before parsing command line
+ x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
+ x86/cpu: Validate CPUID leaf 0x2 EDX output
+ x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
+ drm/xe: Add staging tree for VM binds
+ drm/xe/hmm: Style- and include fixes
+ drm/xe/hmm: Don't dereference struct page pointers without notifier lock
+ drm/xe/vm: Fix a misplaced #endif
+ drm/xe/vm: Validate userptr during gpu vma prefetching
+ drm/xe: Fix GT "for each engine" workarounds
+ drm/xe: Fix fault mode invalidation with unbind
+ drm/xe/userptr: properly setup pfn_flags_mask
+ drm/xe/userptr: Unmap userptrs in the mmu notifier
+ Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
+ Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
+ wifi: cfg80211: regulatory: improve invalid hints checking
+ wifi: nl80211: reject cooked mode if it is set along with other flags
+ selftests/damon/damos_quota_goal: handle minimum quota that cannot be further
reduced
+ selftests/damon/damos_quota: make real expectation of quota exceeds
+ selftests/damon/damon_nr_regions: set ops update for merge results check to
100ms
+ selftests/damon/damon_nr_regions: sort collected regiosn before checking with
min/max boundaries
+ rapidio: add check for rio_add_net() in rio_scan_alloc_net()
+ rapidio: fix an API misues when rio_add_net() fails
+ dma: kmsan: export kmsan_handle_dma() for modules
+ s390/traps: Fix test_monitor_call() inline assembly
+ NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback
+ userfaultfd: do not block on locking a large folio with raised refcount
+ block: fix conversion of GPT partition name to 7-bit
+ mm/page_alloc: fix uninitialized variable
+ mm: don't skip arch_sync_kernel_mappings() in error paths
+ mm: fix finish_fault() handling for large folios
+ wifi: iwlwifi: mvm: clean up ROC on failure
+ wifi: iwlwifi: mvm: don't try to talk to a dead firmware
+ wifi: iwlwifi: limit printed string from FW file
+ wifi: iwlwifi: Free pages allocated when failing to build A-MSDU
+ wifi: iwlwifi: Fix A-MSDU TSO preparation
+ HID: google: fix unused variable warning under !CONFIG_ACPI
+ HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove()
+ HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
+ wifi: mac80211: Support parsing EPCS ML element
+ wifi: mac80211: fix MLE non-inheritance parsing
+ wifi: mac80211: fix vendor-specific inheritance
+ drm/fbdev-helper: Move color-mode lookup into 4CC format helper
+ drm/fbdev: Add memory-agnostic fbdev client
+ drm: Add client-agnostic setup helper
+ drm/fbdev-ttm: Support struct drm_driver.fbdev_probe
+ drm/nouveau: select FW caching
+ bluetooth: btusb: Initialize .owner field of force_poll_sync_fops
+ nvme-tcp: add basic support for the C2HTermReq PDU
+ nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
+ nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
+ net: gso: fix ownership in __udp_gso_segment
+ caif_virtio: fix wrong pointer check in cfv_probe()
+ perf/core: Fix pmus_lock vs. pmus_srcu ordering
+ hwmon: (pmbus) Initialise page count in pmbus_identify()
+ hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
+ hwmon: (ad7314) Validate leading zero bits and return error
+ tracing: probe-events: Remove unused MAX_ARG_BUF_LEN macro
+ drm/imagination: Fix timestamps in firmware traces
+ ALSA: usx2y: validate nrpacks module parameter on probe
+ llc: do not use skb_get() before dev_queue_xmit()
+ hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
+ drm/sched: Fix preprocessor guard
+ be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
+ net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle
returns an error
+ drm/i915/color: Extract intel_color_modeset()
+ drm/i915: Plumb 'dsb' all way to the plane hooks
+ drm/xe: Remove double pageflip
+ HID: hid-steam: Fix use-after-free when detaching device
+ net: ipa: Fix v4.7 resource group names
+ net: ipa: Fix QSB data for v4.7
+ net: ipa: Enable checksum for IPA_ENDPOINT_AP_MODEM_{RX,TX} for v4.7
+ ppp: Fix KMSAN uninit-value warning with bpf
+ vlan: enforce underlying device type
+ x86/sgx: Fix size overflows in sgx_encl_create()
+ exfat: fix just enough dentries but allocate a new cluster to dir
+ exfat: fix soft lockup in exfat_clear_bitmap
+ exfat: short-circuit zero-byte writes in exfat_file_write_iter
+ net-timestamp: support TCP GSO case for a few missing flags
+ ublk: set_params: properly check if parameters can be applied
+ sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
+ nvme-tcp: fix signedness bug in nvme_tcp_init_connection()
+ net: dsa: mt7530: Fix traffic flooding for MMIO devices
+ mctp i3c: handle NULL header address
+ net: ipv6: fix dst ref loop in ila lwtunnel
+ net: ipv6: fix missing dst ref drop in ila lwtunnel
+ gpio: rcar: Fix missing of_node_put() call
+ Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
+ usb: renesas_usbhs: Call clk_put()
+ usb: renesas_usbhs: Use devm_usb_get_phy()
+ usb: hub: lack of clearing xHC resources
+ usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
+ usb: typec: ucsi: Fix NULL pointer access
+ usb: renesas_usbhs: Flush the notify_hotplug_work
+ usb: gadget: u_ether: Set is_suspend flag if remote wakeup fails
+ usb: atm: cxacru: fix a flaw in existing endpoint checks
+ usb: dwc3: Set SUSPENDENABLE soon after phy init
+ usb: dwc3: gadget: Prevent irq storm when TH re-executes
+ usb: typec: ucsi: increase timeout for PPM reset operations
+ usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
+ usb: gadget: Set self-powered based on MaxPower and bmAttributes
+ usb: gadget: Fix setting self-powered state on suspend
+ usb: gadget: Check bmAttributes only if configuration is valid
+ kbuild: userprogs: use correct lld when linking through clang
+ acpi: typec: ucsi: Introduce a ->poll_cci method
+ xhci: pci: Fix indentation in the PCI device ID definitions
+ usb: xhci: Enable the TRB overfetch quirk on VIA VL805
+ KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow
+ KVM: SVM: Save host DR masks on CPUs with DebugSwap
+ KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value
+ KVM: SVM: Suppress DEBUGCTL.BTF on AMD
+ KVM: x86: Snapshot the host's DEBUGCTL in common x86
+ KVM: SVM: Manually context switch DEBUGCTL if LBR virtualization is disabled
+ KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs
+ KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM
+ cdx: Fix possible UAF error in driver_override_show()
+ mei: me: add panther lake P DID
+ mei: vsc: Use "wakeuphostint" when getting the host wakeup GPIO
+ intel_th: pci: Add Arrow Lake support
+ intel_th: pci: Add Panther Lake-H support
+ intel_th: pci: Add Panther Lake-P/U support
+ char: misc: deallocate static minor in error path
+ drivers: core: fix device leak in __fw_devlink_relax_cycles()
+ slimbus: messaging: Free transaction ID in delayed interrupt scenario
+ bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock
+ eeprom: digsy_mtc: Make GPIO lookup table match the device
+ drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
+ iio: filter: admv8818: Force initialization of SDO
+ iio: light: apds9306: fix max_scale_nano values
+ iio: dac: ad3552r: clear reset status flag
+ iio: adc: ad7192: fix channel select
+ iio: adc: at91-sama5d2_adc: fix sama7g5 realbits value
+ mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear()
+ arm64: hugetlb: Fix huge_ptep_get_and_clear() for non-present ptes
+ kbuild: hdrcheck: fix cross build with clang
+ nvme-tcp: Fix a C2HTermReq error message
+ docs: rust: remove spurious item in `expect` list
+ KVM: e500: always restore irqs
+ x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
+ wifi: iwlwifi: pcie: Fix TSO preparation
+ UBUNTU: Upstream stable to v6.6.82, v6.12.19
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2107437
Title:
Oracular update: upstream stable patchset 2025-04-15
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Oracular:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-04-15
Ported from the following upstream stable releases:
v6.6.82, v6.12.19
from git://git.kernel.org/
x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()
rust: block: fix formatting in GenDisk doc
gpio: vf610: use generic device_get_match_data()
gpio: vf610: add locking to gpio direction functions
cifs: Remove symlink member from cifs_open_info_data union
btrfs: fix data overwriting bug during buffered write when block size < page
size
x86/microcode/AMD: Add some forgotten models to the SHA check
loongarch: Use ASM_REACHABLE
rust: workqueue: remove unneeded ``#[allow(clippy::new_ret_no_self)]`
rust: sort global Rust flags
rust: types: avoid repetition in `{As,From}Bytes` impls
rust: enable `clippy::unnecessary_safety_comment` lint
rust: enable `clippy::unnecessary_safety_doc` lint
rust: enable `clippy::ignored_unit_patterns` lint
rust: enable `rustdoc::unescaped_backticks` lint
rust: init: remove unneeded `#[allow(clippy::disallowed_names)]`
rust: introduce `.clippy.toml`
rust: replace `clippy::dbg_macro` with `disallowed_macros`
rust: provide proper code documentation titles
rust: enable Clippy's `check-private-items`
Documentation: rust: add coding guidelines on lints
Documentation: rust: discuss `#[expect(...)]` in the guidelines
rust: error: allow `useless_conversion` for 32-bit builds
rust: error: optimize error type to use nonzero
rust: kbuild: expand rusttest target for macros
rust: fix size_t in bindgen prototypes of C builtins
rust: map `__kernel_size_t` and friends also to usize/isize
tracing: tprobe-events: Fix a memory leak when tprobe with $retval
tracing: tprobe-events: Reject invalid tracepoint name
stmmac: loongson: Pass correct arg to PCI function
LoongArch: Convert unreachable() to BUG()
LoongArch: Use polling play_dead() when resuming from hibernation
LoongArch: Set max_pfn with the PFN of the last page
LoongArch: KVM: Add interrupt checking for AVEC
LoongArch: KVM: Reload guest CSR registers after sleep
LoongArch: KVM: Fix GPA size issue about VM
HID: appleir: Fix potential NULL dereference at raw event handle
ksmbd: fix type confusion via race condition when using ipc_msg_send_request
ksmbd: fix out-of-bounds in parse_sec_desc()
ksmbd: fix use-after-free in smb2_lock
ksmbd: fix bug on trap in smb2_lock
gpio: rcar: Use raw_spinlock to protect register access
gpio: aggregator: protect driver attr handlers against module unload
ALSA: seq: Avoid module auto-load handling at event delivery
ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
ALSA: hda/realtek: update ALC222 depop optimize
btrfs: fix a leaked chunk map issue in read_one_chunk()
hwmon: (peci/dimmtemp) Do not provide fake thresholds data
drm/amd/display: Fix null check for pipe_ctx->plane_state in
resource_build_scaling_params
drm/amd/pm: always allow ih interrupt from fw
drm/imagination: avoid deadlock on fence release
drm/imagination: Hold drm_gem_gpuva lock for unmap
drm/imagination: only init job done fences once
drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
Revert "mm/page_alloc.c: don't show protection in zone's ->lowmem_reserve[]
for empty zone"
Revert "selftests/mm: remove local __NR_* definitions"
platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
x86/boot: Sanitize boot params before parsing command line
x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
x86/cpu: Validate CPUID leaf 0x2 EDX output
x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
drm/xe: Add staging tree for VM binds
drm/xe/hmm: Style- and include fixes
drm/xe/hmm: Don't dereference struct page pointers without notifier lock
drm/xe/vm: Fix a misplaced #endif
drm/xe/vm: Validate userptr during gpu vma prefetching
drm/xe: Fix GT "for each engine" workarounds
drm/xe: Fix fault mode invalidation with unbind
drm/xe/userptr: properly setup pfn_flags_mask
drm/xe/userptr: Unmap userptrs in the mmu notifier
Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
wifi: cfg80211: regulatory: improve invalid hints checking
wifi: nl80211: reject cooked mode if it is set along with other flags
selftests/damon/damos_quota_goal: handle minimum quota that cannot be further
reduced
selftests/damon/damos_quota: make real expectation of quota exceeds
selftests/damon/damon_nr_regions: set ops update for merge results check to
100ms
selftests/damon/damon_nr_regions: sort collected regiosn before checking with
min/max boundaries
rapidio: add check for rio_add_net() in rio_scan_alloc_net()
rapidio: fix an API misues when rio_add_net() fails
dma: kmsan: export kmsan_handle_dma() for modules
s390/traps: Fix test_monitor_call() inline assembly
NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback
userfaultfd: do not block on locking a large folio with raised refcount
block: fix conversion of GPT partition name to 7-bit
mm/page_alloc: fix uninitialized variable
mm: don't skip arch_sync_kernel_mappings() in error paths
mm: fix finish_fault() handling for large folios
wifi: iwlwifi: mvm: clean up ROC on failure
wifi: iwlwifi: mvm: don't try to talk to a dead firmware
wifi: iwlwifi: limit printed string from FW file
wifi: iwlwifi: Free pages allocated when failing to build A-MSDU
wifi: iwlwifi: Fix A-MSDU TSO preparation
HID: google: fix unused variable warning under !CONFIG_ACPI
HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove()
HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
wifi: mac80211: Support parsing EPCS ML element
wifi: mac80211: fix MLE non-inheritance parsing
wifi: mac80211: fix vendor-specific inheritance
drm/fbdev-helper: Move color-mode lookup into 4CC format helper
drm/fbdev: Add memory-agnostic fbdev client
drm: Add client-agnostic setup helper
drm/fbdev-ttm: Support struct drm_driver.fbdev_probe
drm/nouveau: select FW caching
bluetooth: btusb: Initialize .owner field of force_poll_sync_fops
nvme-tcp: add basic support for the C2HTermReq PDU
nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
net: gso: fix ownership in __udp_gso_segment
caif_virtio: fix wrong pointer check in cfv_probe()
perf/core: Fix pmus_lock vs. pmus_srcu ordering
hwmon: (pmbus) Initialise page count in pmbus_identify()
hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
hwmon: (ad7314) Validate leading zero bits and return error
tracing: probe-events: Remove unused MAX_ARG_BUF_LEN macro
drm/imagination: Fix timestamps in firmware traces
ALSA: usx2y: validate nrpacks module parameter on probe
llc: do not use skb_get() before dev_queue_xmit()
hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
drm/sched: Fix preprocessor guard
be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle
returns an error
drm/i915/color: Extract intel_color_modeset()
drm/i915: Plumb 'dsb' all way to the plane hooks
drm/xe: Remove double pageflip
HID: hid-steam: Fix use-after-free when detaching device
net: ipa: Fix v4.7 resource group names
net: ipa: Fix QSB data for v4.7
net: ipa: Enable checksum for IPA_ENDPOINT_AP_MODEM_{RX,TX} for v4.7
ppp: Fix KMSAN uninit-value warning with bpf
vlan: enforce underlying device type
x86/sgx: Fix size overflows in sgx_encl_create()
exfat: fix just enough dentries but allocate a new cluster to dir
exfat: fix soft lockup in exfat_clear_bitmap
exfat: short-circuit zero-byte writes in exfat_file_write_iter
net-timestamp: support TCP GSO case for a few missing flags
ublk: set_params: properly check if parameters can be applied
sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
nvme-tcp: fix signedness bug in nvme_tcp_init_connection()
net: dsa: mt7530: Fix traffic flooding for MMIO devices
mctp i3c: handle NULL header address
net: ipv6: fix dst ref loop in ila lwtunnel
net: ipv6: fix missing dst ref drop in ila lwtunnel
gpio: rcar: Fix missing of_node_put() call
Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
usb: renesas_usbhs: Call clk_put()
usb: renesas_usbhs: Use devm_usb_get_phy()
usb: hub: lack of clearing xHC resources
usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
usb: typec: ucsi: Fix NULL pointer access
usb: renesas_usbhs: Flush the notify_hotplug_work
usb: gadget: u_ether: Set is_suspend flag if remote wakeup fails
usb: atm: cxacru: fix a flaw in existing endpoint checks
usb: dwc3: Set SUSPENDENABLE soon after phy init
usb: dwc3: gadget: Prevent irq storm when TH re-executes
usb: typec: ucsi: increase timeout for PPM reset operations
usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
usb: gadget: Set self-powered based on MaxPower and bmAttributes
usb: gadget: Fix setting self-powered state on suspend
usb: gadget: Check bmAttributes only if configuration is valid
kbuild: userprogs: use correct lld when linking through clang
acpi: typec: ucsi: Introduce a ->poll_cci method
xhci: pci: Fix indentation in the PCI device ID definitions
usb: xhci: Enable the TRB overfetch quirk on VIA VL805
KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow
KVM: SVM: Save host DR masks on CPUs with DebugSwap
KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value
KVM: SVM: Suppress DEBUGCTL.BTF on AMD
KVM: x86: Snapshot the host's DEBUGCTL in common x86
KVM: SVM: Manually context switch DEBUGCTL if LBR virtualization is disabled
KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs
KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM
cdx: Fix possible UAF error in driver_override_show()
mei: me: add panther lake P DID
mei: vsc: Use "wakeuphostint" when getting the host wakeup GPIO
intel_th: pci: Add Arrow Lake support
intel_th: pci: Add Panther Lake-H support
intel_th: pci: Add Panther Lake-P/U support
char: misc: deallocate static minor in error path
drivers: core: fix device leak in __fw_devlink_relax_cycles()
slimbus: messaging: Free transaction ID in delayed interrupt scenario
bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock
eeprom: digsy_mtc: Make GPIO lookup table match the device
drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
iio: filter: admv8818: Force initialization of SDO
iio: light: apds9306: fix max_scale_nano values
iio: dac: ad3552r: clear reset status flag
iio: adc: ad7192: fix channel select
iio: adc: at91-sama5d2_adc: fix sama7g5 realbits value
mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear()
arm64: hugetlb: Fix huge_ptep_get_and_clear() for non-present ptes
kbuild: hdrcheck: fix cross build with clang
nvme-tcp: Fix a C2HTermReq error message
docs: rust: remove spurious item in `expect` list
KVM: e500: always restore irqs
x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
wifi: iwlwifi: pcie: Fix TSO preparation
UBUNTU: Upstream stable to v6.6.82, v6.12.19
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2107437/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
