Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-04-17
Ported from the following upstream stable releases:
v6.6.83, v6.12.20
from git://git.kernel.org/
ibmvnic: Perform tx CSO during send scrq direct
ibmvnic: Inspect header requirements before using scrq direct
net: enetc: Remove setting of RX software timestamp
net: enetc: Replace ifdef with IS_ENABLED
net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
mm: fix kernel BUG when userfaultfd_move encounters swapcache
userfaultfd: fix PTE unmapping stack-allocated PTE copies
fbdev: hyperv_fb: iounmap() the correct memory when removing a device
pinctrl: bcm281xx: Fix incorrect regmap max_registers value
pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw
netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
ice: do not configure destination override for switchdev
ice: fix memory leak in aRFS after reset
netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap
around
netfilter: nf_tables: make destruction work queue pernet
sched: address a potential NULL pointer dereference in the GRED scheduler.
wifi: iwlwifi: mvm: fix PNVM timeout for non-MSI-X platforms
wifi: mac80211: don't queue sdata::work for a non-running sdata
wifi: cfg80211: cancel wiphy_work before freeing wiphy
Bluetooth: hci_event: Fix enabling passive scanning
Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"
net/mlx5: Fill out devlink dev info only for PFs
net: dsa: mv88e6xxx: Verify after ATU Load ops
net: mctp i3c: Copy headers if cloned
net: mctp i2c: Copy headers if cloned
netpoll: hold rcu read lock in __netpoll_send_skb()
drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs
fbdev: hyperv_fb: Simplify hvfb_putmem
Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
net/mlx5: handle errors in mlx5_chains_create_table()
eth: bnxt: fix truesize for mb-xdp-pass case
eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc()
eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx}
eth: bnxt: use page pool for head frags
bnxt_en: refactor tpa_info alloc/free into helpers
bnxt_en: handle tpa_info in queue API implementation
eth: bnxt: fix memory leak in queue reset
net: switchdev: Convert blocking notification chain to a raw one
net: mctp: unshare packets when reassembling
bonding: fix incorrect MAC address setting to receive NS messages
netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in
insert_tree()
ipvs: prevent integer overflow in do_ip_vs_get_ctl()
netfilter: nft_exthdr: fix offset with ipv4_find_option()
net: openvswitch: remove misbehaving actions length check
net/mlx5: Fix incorrect IRQ pool usage when releasing IRQs
net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch
net/mlx5: Bridge, fix the crash caused by LAG state check
net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
nvme-fc: go straight to connecting state when initializing
nvme-fc: do not ignore connectivity loss during connecting
hrtimers: Mark is_migration_base() with __always_inline
powercap: call put_device() on an error path in powercap_register_control_type()
btrfs: avoid starting new transaction when cleaning qgroup during subvolume drop
futex: Pass in task to futex_queue()
sched/debug: Provide slice length for fair tasks
platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show()
scsi: core: Use GFP_NOIO to avoid circular locking dependency
scsi: ufs: core: Fix error return with query response
scsi: qla1280: Fix kernel oops when debug level > 2
ACPI: resource: IRQ override for Eluktronics MECH-17
smb: client: fix noisy when tree connecting to DFS interlink targets
alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
vboxsf: fix building with GCC 15
selftests: always check mask returned by statmount(2)
HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
HID: intel-ish-hid: Send clock sync message immediately after reset
HID: ignore non-functional sensor in HP 5MP Camera
HID: hid-steam: Fix issues with disabling both gamepad mode and lizard mode
usb: phy: generic: Use proper helper for property detection
HID: intel-ish-hid: ipc: Add Panther Lake PCI device IDs
HID: topre: Fix n-key rollover on Realforce R3S TKL boards
selftests/cgroup: use bash in test_cpuset_v1_hp.sh
HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
HID: apple: fix up the F6 key on the Omoton KB066 keyboard
objtool: Ignore dangling jump table entries
sched: Clarify wake_up_q()'s write to task->wake_q.next
platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
s390/cio: Fix CHPID "configure" attribute caching
thermal/cpufreq_cooling: Remove structure member documentation
LoongArch: KVM: Set host with kernel mode when switch to VM mode
arm64: amu: Delay allocating cpumask for AMU FIE support
Xen/swiotlb: mark xen_swiotlb_fixup() __init
Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
drm/tests: hdmi: Remove redundant assignments
drm/tests: hdmi: Reorder DRM entities variables assignment
drm/tests: hdmi: Fix recursive locking
selftests/bpf: Fix invalid flag of recv()
ASoC: Intel: sof_sdw: Add lookup of quirk using PCI subsystem ID
ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S14
ASoC: Intel: soc-acpi-intel-mtl-match: declare adr as ull
ASoC: simple-card-utils.c: add missing dlc->of_node
ALSA: hda/realtek: Limit mic boost on Positivo ARN50
ASoC: rsnd: indicate unsupported clock rate
ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
ASoC: rsnd: adjust convert rate limitation
ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
PCI: pci_ids: add INTEL_HDA_PTL_H
ALSA: hda: intel-dsp-config: Add PTL-H support
ALSA: hda: hda-intel: add Panther Lake-H support
ASoC: SOF: amd: Add post_fw_run_delay ACP quirk
ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE
net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
io-wq: backoff when retrying worker creation
nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
nvmet-rdma: recheck queue state is LIVE in state lock in recv done
apple-nvme: Release power domains when probe fails
cifs: Treat unhandled directory name surrogate reparse points as mount
directory nodes
sctp: Fix undefined behavior in left shift operation
nvme: only allow entering LIVE from CONNECTING state
phy: ti: gmii-sel: Simplify with dev_err_probe()
phy: ti: gmii-sel: Do not use syscon helper to build regmap
ASoC: tas2770: Fix volume scale
ASoC: tas2764: Fix power control mask
ASoC: tas2764: Set the SDOUT polarity correctly
fuse: don't truncate cached, mutated symlink
ASoC: dapm-graph: set fill colour of turned on nodes
drm/vkms: Round fixp2int conversion in lerp_u16
perf/x86/intel: Use better start period for frequency mode
x86/of: Don't use DTB for SMP setup if ACPI is enabled
x86/irq: Define trace events conditionally
perf/x86/rapl: Add support for Intel Arrow Lake U
mptcp: safety check before fallback
drm/nouveau: Do not override forced connector status
net: Handle napi_schedule() calls from non-interrupt
block: fix 'kmem_cache of name 'bio-108' already exists'
vhost: return task creation error instead of NULL
cifs: Validate content of WSL reparse point buffers
cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from
parse_reparse_point()
Input: goodix-berlin - fix vddio regulator references
Input: ads7846 - fix gpiod allocation
Input: iqs7222 - preserve system status register
Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE controllers
Input: xpad - add multiple supported devices
Input: xpad - add support for ZOTAC Gaming Zone
Input: xpad - add support for TECNO Pocket Go
Input: xpad - rename QH controller to Legion Go S
Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
Input: i8042 - add required quirks for missing old boardnames
Input: i8042 - swap old quirk combination with new quirk for several devices
Input: i8042 - swap old quirk combination with new quirk for more devices
USB: serial: ftdi_sio: add support for Altera USB Blaster 3
USB: serial: option: add Telit Cinterion FE990B compositions
USB: serial: option: fix Telit Cinterion FE990A name
USB: serial: option: match on interface class for Telit FN990B
rust: lockdep: Remove support for dynamically allocated LockClassKeys
rust: Disallow BTF generation with Rust + LTO
x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
spi: microchip-core: prevent RX overflows when transmit size > FIFO size
drm/i915/cdclk: Do cdclk post plane programming later
drm/atomic: Filter out redundant DPMS calls
drm/dp_mst: Fix locking when skipping CSN before topology probing
drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags
drm/amd/amdkfd: Evict all queues even HWS remove queue failed
drm/amdgpu/display: Allow DCC for video formats on GFX12
drm/amd/display: Disable unneeded hpd interrupts during dm_init
drm/amd/display: fix default brightness
drm/amd/display: fix missing .is_two_pixels_per_container
drm/amd/display: Restore correct backlight brightness after a GPU reset
drm/amd/display: Assign normalized_pix_clk when color depth = 14
drm/amd/display: Fix slab-use-after-free on hdcp_work
ksmbd: fix use-after-free in ksmbd_free_work_struct
ksmbd: prevent connection release during oplock break notification
clk: samsung: update PLL locktime for PLL142XX used on FSD platform
clk: samsung: gs101: fix synchronous external abort in samsung_clk_save()
ASoC: Intel: sof_sdw: Fix unlikely uninitialized variable use in
create_sdw_dailinks()
ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
arm64: mm: Populate vmemmap at the page level if not section aligned
Fix mmu notifiers for range-based invalidates
qlcnic: fix memory leak issues in qlcnic_sriov_common.c
smb: client: fix regression with guest option
net: phy: nxp-c45-tja11xx: add TJA112X PHY configuration errata
net: phy: nxp-c45-tja11xx: add TJA112XB SGMII PCS restart errata
ASoC: ops: Consistently treat platform_max as control value
rust: error: add missing newline to pr_warn! calls
drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
ASoC: cs42l43: Fix maximum ADC Volume
rust: init: add missing newline to pr_info! calls
ASoC: rt722-sdca: add missing readable registers
drm/xe: cancel pending job timer before freeing scheduler
drm/xe: Release guc ids before cancelling work
drm/xe/userptr: Fix an incorrect assert
drm/xe/pm: Temporarily disable D3Cold on BMG
nvme: move error logging from nvme_end_req() to __nvme_end_req()
ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
drm/i915: Increase I915_PARAM_MMAP_GTT_VERSION version to indicate support for
partial mmaps
scripts: generate_rust_analyzer: add missing macros deps
scripts: generate_rust_analyzer: add missing include_dirs
scripts: generate_rust_analyzer: add uapi crate
block: change blk_mq_add_to_batch() third argument type to bool
cifs: Fix integer overflow while processing acregmax mount option
cifs: Fix integer overflow while processing acdirmax mount option
cifs: Fix integer overflow while processing actimeo mount option
cifs: Fix integer overflow while processing closetimeo mount option
x86/vmware: Parse MP tables for SEV-SNP enabled guests under VMware hypervisors
i2c: ali1535: Fix an error handling path in ali1535_probe()
i2c: ali15x3: Fix an error handling path in ali15x3_probe()
i2c: sis630: Fix an error handling path in sis630_probe()
mm/hugetlb: wait for hugetlb folios to be freed
smb3: add support for IAKerb
smb: client: Fix match_session bug preventing session reuse
Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
nvme-fc: rely on state transitions to handle connectivity loss
HID: apple: disable Fn key handling on the Omoton KB066
UBUNTU: Upstream stable to v6.6.83, v6.12.20
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Oracular)
Importance: Medium
Assignee: Noah Wager (nwager)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Oracular)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Oracular)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Oracular)
Status: New => In Progress
** Changed in: linux (Ubuntu Oracular)
Assignee: (unassigned) => Noah Wager (nwager)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-04-17
+
+ Ported from the following upstream stable releases:
+ v6.6.83, v6.12.20
+
from git://git.kernel.org/
+
+ ibmvnic: Perform tx CSO during send scrq direct
+ ibmvnic: Inspect header requirements before using scrq direct
+ net: enetc: Remove setting of RX software timestamp
+ net: enetc: Replace ifdef with IS_ENABLED
+ net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
+ mm: fix kernel BUG when userfaultfd_move encounters swapcache
+ userfaultfd: fix PTE unmapping stack-allocated PTE copies
+ fbdev: hyperv_fb: iounmap() the correct memory when removing a device
+ pinctrl: bcm281xx: Fix incorrect regmap max_registers value
+ pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw
+ netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
+ ice: do not configure destination override for switchdev
+ ice: fix memory leak in aRFS after reset
+ netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap
around
+ netfilter: nf_tables: make destruction work queue pernet
+ sched: address a potential NULL pointer dereference in the GRED scheduler.
+ wifi: iwlwifi: mvm: fix PNVM timeout for non-MSI-X platforms
+ wifi: mac80211: don't queue sdata::work for a non-running sdata
+ wifi: cfg80211: cancel wiphy_work before freeing wiphy
+ Bluetooth: hci_event: Fix enabling passive scanning
+ Revert "Bluetooth: hci_core: Fix sleeping function called from invalid
context"
+ net/mlx5: Fill out devlink dev info only for PFs
+ net: dsa: mv88e6xxx: Verify after ATU Load ops
+ net: mctp i3c: Copy headers if cloned
+ net: mctp i2c: Copy headers if cloned
+ netpoll: hold rcu read lock in __netpoll_send_skb()
+ drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
+ fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs
+ fbdev: hyperv_fb: Simplify hvfb_putmem
+ Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
+ net/mlx5: handle errors in mlx5_chains_create_table()
+ eth: bnxt: fix truesize for mb-xdp-pass case
+ eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc()
+ eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
+ eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx}
+ eth: bnxt: use page pool for head frags
+ bnxt_en: refactor tpa_info alloc/free into helpers
+ bnxt_en: handle tpa_info in queue API implementation
+ eth: bnxt: fix memory leak in queue reset
+ net: switchdev: Convert blocking notification chain to a raw one
+ net: mctp: unshare packets when reassembling
+ bonding: fix incorrect MAC address setting to receive NS messages
+ netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in
insert_tree()
+ ipvs: prevent integer overflow in do_ip_vs_get_ctl()
+ netfilter: nft_exthdr: fix offset with ipv4_find_option()
+ net: openvswitch: remove misbehaving actions length check
+ net/mlx5: Fix incorrect IRQ pool usage when releasing IRQs
+ net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch
+ net/mlx5: Bridge, fix the crash caused by LAG state check
+ net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
+ nvme-fc: go straight to connecting state when initializing
+ nvme-fc: do not ignore connectivity loss during connecting
+ hrtimers: Mark is_migration_base() with __always_inline
+ powercap: call put_device() on an error path in
powercap_register_control_type()
+ btrfs: avoid starting new transaction when cleaning qgroup during subvolume
drop
+ futex: Pass in task to futex_queue()
+ sched/debug: Provide slice length for fair tasks
+ platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show()
+ scsi: core: Use GFP_NOIO to avoid circular locking dependency
+ scsi: ufs: core: Fix error return with query response
+ scsi: qla1280: Fix kernel oops when debug level > 2
+ ACPI: resource: IRQ override for Eluktronics MECH-17
+ smb: client: fix noisy when tree connecting to DFS interlink targets
+ alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
+ vboxsf: fix building with GCC 15
+ selftests: always check mask returned by statmount(2)
+ HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
+ HID: intel-ish-hid: Send clock sync message immediately after reset
+ HID: ignore non-functional sensor in HP 5MP Camera
+ HID: hid-steam: Fix issues with disabling both gamepad mode and lizard mode
+ usb: phy: generic: Use proper helper for property detection
+ HID: intel-ish-hid: ipc: Add Panther Lake PCI device IDs
+ HID: topre: Fix n-key rollover on Realforce R3S TKL boards
+ selftests/cgroup: use bash in test_cpuset_v1_hp.sh
+ HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
+ HID: apple: fix up the F6 key on the Omoton KB066 keyboard
+ objtool: Ignore dangling jump table entries
+ sched: Clarify wake_up_q()'s write to task->wake_q.next
+ platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
+ platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
+ s390/cio: Fix CHPID "configure" attribute caching
+ thermal/cpufreq_cooling: Remove structure member documentation
+ LoongArch: KVM: Set host with kernel mode when switch to VM mode
+ arm64: amu: Delay allocating cpumask for AMU FIE support
+ Xen/swiotlb: mark xen_swiotlb_fixup() __init
+ Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
+ drm/tests: hdmi: Remove redundant assignments
+ drm/tests: hdmi: Reorder DRM entities variables assignment
+ drm/tests: hdmi: Fix recursive locking
+ selftests/bpf: Fix invalid flag of recv()
+ ASoC: Intel: sof_sdw: Add lookup of quirk using PCI subsystem ID
+ ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S14
+ ASoC: Intel: soc-acpi-intel-mtl-match: declare adr as ull
+ ASoC: simple-card-utils.c: add missing dlc->of_node
+ ALSA: hda/realtek: Limit mic boost on Positivo ARN50
+ ASoC: rsnd: indicate unsupported clock rate
+ ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
+ ASoC: rsnd: adjust convert rate limitation
+ ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
+ ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
+ PCI: pci_ids: add INTEL_HDA_PTL_H
+ ALSA: hda: intel-dsp-config: Add PTL-H support
+ ALSA: hda: hda-intel: add Panther Lake-H support
+ ASoC: SOF: amd: Add post_fw_run_delay ACP quirk
+ ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE
+ net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
+ io-wq: backoff when retrying worker creation
+ nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
+ nvmet-rdma: recheck queue state is LIVE in state lock in recv done
+ apple-nvme: Release power domains when probe fails
+ cifs: Treat unhandled directory name surrogate reparse points as mount
directory nodes
+ sctp: Fix undefined behavior in left shift operation
+ nvme: only allow entering LIVE from CONNECTING state
+ phy: ti: gmii-sel: Simplify with dev_err_probe()
+ phy: ti: gmii-sel: Do not use syscon helper to build regmap
+ ASoC: tas2770: Fix volume scale
+ ASoC: tas2764: Fix power control mask
+ ASoC: tas2764: Set the SDOUT polarity correctly
+ fuse: don't truncate cached, mutated symlink
+ ASoC: dapm-graph: set fill colour of turned on nodes
+ drm/vkms: Round fixp2int conversion in lerp_u16
+ perf/x86/intel: Use better start period for frequency mode
+ x86/of: Don't use DTB for SMP setup if ACPI is enabled
+ x86/irq: Define trace events conditionally
+ perf/x86/rapl: Add support for Intel Arrow Lake U
+ mptcp: safety check before fallback
+ drm/nouveau: Do not override forced connector status
+ net: Handle napi_schedule() calls from non-interrupt
+ block: fix 'kmem_cache of name 'bio-108' already exists'
+ vhost: return task creation error instead of NULL
+ cifs: Validate content of WSL reparse point buffers
+ cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from
parse_reparse_point()
+ Input: goodix-berlin - fix vddio regulator references
+ Input: ads7846 - fix gpiod allocation
+ Input: iqs7222 - preserve system status register
+ Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE controllers
+ Input: xpad - add multiple supported devices
+ Input: xpad - add support for ZOTAC Gaming Zone
+ Input: xpad - add support for TECNO Pocket Go
+ Input: xpad - rename QH controller to Legion Go S
+ Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
+ Input: i8042 - add required quirks for missing old boardnames
+ Input: i8042 - swap old quirk combination with new quirk for several devices
+ Input: i8042 - swap old quirk combination with new quirk for more devices
+ USB: serial: ftdi_sio: add support for Altera USB Blaster 3
+ USB: serial: option: add Telit Cinterion FE990B compositions
+ USB: serial: option: fix Telit Cinterion FE990A name
+ USB: serial: option: match on interface class for Telit FN990B
+ rust: lockdep: Remove support for dynamically allocated LockClassKeys
+ rust: Disallow BTF generation with Rust + LTO
+ x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
+ spi: microchip-core: prevent RX overflows when transmit size > FIFO size
+ drm/i915/cdclk: Do cdclk post plane programming later
+ drm/atomic: Filter out redundant DPMS calls
+ drm/dp_mst: Fix locking when skipping CSN before topology probing
+ drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags
+ drm/amd/amdkfd: Evict all queues even HWS remove queue failed
+ drm/amdgpu/display: Allow DCC for video formats on GFX12
+ drm/amd/display: Disable unneeded hpd interrupts during dm_init
+ drm/amd/display: fix default brightness
+ drm/amd/display: fix missing .is_two_pixels_per_container
+ drm/amd/display: Restore correct backlight brightness after a GPU reset
+ drm/amd/display: Assign normalized_pix_clk when color depth = 14
+ drm/amd/display: Fix slab-use-after-free on hdcp_work
+ ksmbd: fix use-after-free in ksmbd_free_work_struct
+ ksmbd: prevent connection release during oplock break notification
+ clk: samsung: update PLL locktime for PLL142XX used on FSD platform
+ clk: samsung: gs101: fix synchronous external abort in samsung_clk_save()
+ ASoC: Intel: sof_sdw: Fix unlikely uninitialized variable use in
create_sdw_dailinks()
+ ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
+ dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
+ arm64: mm: Populate vmemmap at the page level if not section aligned
+ Fix mmu notifiers for range-based invalidates
+ qlcnic: fix memory leak issues in qlcnic_sriov_common.c
+ smb: client: fix regression with guest option
+ net: phy: nxp-c45-tja11xx: add TJA112X PHY configuration errata
+ net: phy: nxp-c45-tja11xx: add TJA112XB SGMII PCS restart errata
+ ASoC: ops: Consistently treat platform_max as control value
+ rust: error: add missing newline to pr_warn! calls
+ drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
+ ASoC: cs42l43: Fix maximum ADC Volume
+ rust: init: add missing newline to pr_info! calls
+ ASoC: rt722-sdca: add missing readable registers
+ drm/xe: cancel pending job timer before freeing scheduler
+ drm/xe: Release guc ids before cancelling work
+ drm/xe/userptr: Fix an incorrect assert
+ drm/xe/pm: Temporarily disable D3Cold on BMG
+ nvme: move error logging from nvme_end_req() to __nvme_end_req()
+ ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
+ drm/i915: Increase I915_PARAM_MMAP_GTT_VERSION version to indicate support
for partial mmaps
+ scripts: generate_rust_analyzer: add missing macros deps
+ scripts: generate_rust_analyzer: add missing include_dirs
+ scripts: generate_rust_analyzer: add uapi crate
+ block: change blk_mq_add_to_batch() third argument type to bool
+ cifs: Fix integer overflow while processing acregmax mount option
+ cifs: Fix integer overflow while processing acdirmax mount option
+ cifs: Fix integer overflow while processing actimeo mount option
+ cifs: Fix integer overflow while processing closetimeo mount option
+ x86/vmware: Parse MP tables for SEV-SNP enabled guests under VMware
hypervisors
+ i2c: ali1535: Fix an error handling path in ali1535_probe()
+ i2c: ali15x3: Fix an error handling path in ali15x3_probe()
+ i2c: sis630: Fix an error handling path in sis630_probe()
+ mm/hugetlb: wait for hugetlb folios to be freed
+ smb3: add support for IAKerb
+ smb: client: Fix match_session bug preventing session reuse
+ Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
+ nvme-fc: rely on state transitions to handle connectivity loss
+ HID: apple: disable Fn key handling on the Omoton KB066
+ UBUNTU: Upstream stable to v6.6.83, v6.12.20
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2107522
Title:
Oracular update: upstream stable patchset 2025-04-17
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Oracular:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-04-17
Ported from the following upstream stable releases:
v6.6.83, v6.12.20
from git://git.kernel.org/
ibmvnic: Perform tx CSO during send scrq direct
ibmvnic: Inspect header requirements before using scrq direct
net: enetc: Remove setting of RX software timestamp
net: enetc: Replace ifdef with IS_ENABLED
net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
mm: fix kernel BUG when userfaultfd_move encounters swapcache
userfaultfd: fix PTE unmapping stack-allocated PTE copies
fbdev: hyperv_fb: iounmap() the correct memory when removing a device
pinctrl: bcm281xx: Fix incorrect regmap max_registers value
pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw
netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
ice: do not configure destination override for switchdev
ice: fix memory leak in aRFS after reset
netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap
around
netfilter: nf_tables: make destruction work queue pernet
sched: address a potential NULL pointer dereference in the GRED scheduler.
wifi: iwlwifi: mvm: fix PNVM timeout for non-MSI-X platforms
wifi: mac80211: don't queue sdata::work for a non-running sdata
wifi: cfg80211: cancel wiphy_work before freeing wiphy
Bluetooth: hci_event: Fix enabling passive scanning
Revert "Bluetooth: hci_core: Fix sleeping function called from invalid
context"
net/mlx5: Fill out devlink dev info only for PFs
net: dsa: mv88e6xxx: Verify after ATU Load ops
net: mctp i3c: Copy headers if cloned
net: mctp i2c: Copy headers if cloned
netpoll: hold rcu read lock in __netpoll_send_skb()
drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs
fbdev: hyperv_fb: Simplify hvfb_putmem
Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
net/mlx5: handle errors in mlx5_chains_create_table()
eth: bnxt: fix truesize for mb-xdp-pass case
eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc()
eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx}
eth: bnxt: use page pool for head frags
bnxt_en: refactor tpa_info alloc/free into helpers
bnxt_en: handle tpa_info in queue API implementation
eth: bnxt: fix memory leak in queue reset
net: switchdev: Convert blocking notification chain to a raw one
net: mctp: unshare packets when reassembling
bonding: fix incorrect MAC address setting to receive NS messages
netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in
insert_tree()
ipvs: prevent integer overflow in do_ip_vs_get_ctl()
netfilter: nft_exthdr: fix offset with ipv4_find_option()
net: openvswitch: remove misbehaving actions length check
net/mlx5: Fix incorrect IRQ pool usage when releasing IRQs
net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch
net/mlx5: Bridge, fix the crash caused by LAG state check
net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
nvme-fc: go straight to connecting state when initializing
nvme-fc: do not ignore connectivity loss during connecting
hrtimers: Mark is_migration_base() with __always_inline
powercap: call put_device() on an error path in
powercap_register_control_type()
btrfs: avoid starting new transaction when cleaning qgroup during subvolume
drop
futex: Pass in task to futex_queue()
sched/debug: Provide slice length for fair tasks
platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show()
scsi: core: Use GFP_NOIO to avoid circular locking dependency
scsi: ufs: core: Fix error return with query response
scsi: qla1280: Fix kernel oops when debug level > 2
ACPI: resource: IRQ override for Eluktronics MECH-17
smb: client: fix noisy when tree connecting to DFS interlink targets
alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
vboxsf: fix building with GCC 15
selftests: always check mask returned by statmount(2)
HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
HID: intel-ish-hid: Send clock sync message immediately after reset
HID: ignore non-functional sensor in HP 5MP Camera
HID: hid-steam: Fix issues with disabling both gamepad mode and lizard mode
usb: phy: generic: Use proper helper for property detection
HID: intel-ish-hid: ipc: Add Panther Lake PCI device IDs
HID: topre: Fix n-key rollover on Realforce R3S TKL boards
selftests/cgroup: use bash in test_cpuset_v1_hp.sh
HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
HID: apple: fix up the F6 key on the Omoton KB066 keyboard
objtool: Ignore dangling jump table entries
sched: Clarify wake_up_q()'s write to task->wake_q.next
platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
s390/cio: Fix CHPID "configure" attribute caching
thermal/cpufreq_cooling: Remove structure member documentation
LoongArch: KVM: Set host with kernel mode when switch to VM mode
arm64: amu: Delay allocating cpumask for AMU FIE support
Xen/swiotlb: mark xen_swiotlb_fixup() __init
Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
drm/tests: hdmi: Remove redundant assignments
drm/tests: hdmi: Reorder DRM entities variables assignment
drm/tests: hdmi: Fix recursive locking
selftests/bpf: Fix invalid flag of recv()
ASoC: Intel: sof_sdw: Add lookup of quirk using PCI subsystem ID
ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S14
ASoC: Intel: soc-acpi-intel-mtl-match: declare adr as ull
ASoC: simple-card-utils.c: add missing dlc->of_node
ALSA: hda/realtek: Limit mic boost on Positivo ARN50
ASoC: rsnd: indicate unsupported clock rate
ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
ASoC: rsnd: adjust convert rate limitation
ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
PCI: pci_ids: add INTEL_HDA_PTL_H
ALSA: hda: intel-dsp-config: Add PTL-H support
ALSA: hda: hda-intel: add Panther Lake-H support
ASoC: SOF: amd: Add post_fw_run_delay ACP quirk
ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE
net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
io-wq: backoff when retrying worker creation
nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
nvmet-rdma: recheck queue state is LIVE in state lock in recv done
apple-nvme: Release power domains when probe fails
cifs: Treat unhandled directory name surrogate reparse points as mount
directory nodes
sctp: Fix undefined behavior in left shift operation
nvme: only allow entering LIVE from CONNECTING state
phy: ti: gmii-sel: Simplify with dev_err_probe()
phy: ti: gmii-sel: Do not use syscon helper to build regmap
ASoC: tas2770: Fix volume scale
ASoC: tas2764: Fix power control mask
ASoC: tas2764: Set the SDOUT polarity correctly
fuse: don't truncate cached, mutated symlink
ASoC: dapm-graph: set fill colour of turned on nodes
drm/vkms: Round fixp2int conversion in lerp_u16
perf/x86/intel: Use better start period for frequency mode
x86/of: Don't use DTB for SMP setup if ACPI is enabled
x86/irq: Define trace events conditionally
perf/x86/rapl: Add support for Intel Arrow Lake U
mptcp: safety check before fallback
drm/nouveau: Do not override forced connector status
net: Handle napi_schedule() calls from non-interrupt
block: fix 'kmem_cache of name 'bio-108' already exists'
vhost: return task creation error instead of NULL
cifs: Validate content of WSL reparse point buffers
cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from
parse_reparse_point()
Input: goodix-berlin - fix vddio regulator references
Input: ads7846 - fix gpiod allocation
Input: iqs7222 - preserve system status register
Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE controllers
Input: xpad - add multiple supported devices
Input: xpad - add support for ZOTAC Gaming Zone
Input: xpad - add support for TECNO Pocket Go
Input: xpad - rename QH controller to Legion Go S
Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
Input: i8042 - add required quirks for missing old boardnames
Input: i8042 - swap old quirk combination with new quirk for several devices
Input: i8042 - swap old quirk combination with new quirk for more devices
USB: serial: ftdi_sio: add support for Altera USB Blaster 3
USB: serial: option: add Telit Cinterion FE990B compositions
USB: serial: option: fix Telit Cinterion FE990A name
USB: serial: option: match on interface class for Telit FN990B
rust: lockdep: Remove support for dynamically allocated LockClassKeys
rust: Disallow BTF generation with Rust + LTO
x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
spi: microchip-core: prevent RX overflows when transmit size > FIFO size
drm/i915/cdclk: Do cdclk post plane programming later
drm/atomic: Filter out redundant DPMS calls
drm/dp_mst: Fix locking when skipping CSN before topology probing
drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags
drm/amd/amdkfd: Evict all queues even HWS remove queue failed
drm/amdgpu/display: Allow DCC for video formats on GFX12
drm/amd/display: Disable unneeded hpd interrupts during dm_init
drm/amd/display: fix default brightness
drm/amd/display: fix missing .is_two_pixels_per_container
drm/amd/display: Restore correct backlight brightness after a GPU reset
drm/amd/display: Assign normalized_pix_clk when color depth = 14
drm/amd/display: Fix slab-use-after-free on hdcp_work
ksmbd: fix use-after-free in ksmbd_free_work_struct
ksmbd: prevent connection release during oplock break notification
clk: samsung: update PLL locktime for PLL142XX used on FSD platform
clk: samsung: gs101: fix synchronous external abort in samsung_clk_save()
ASoC: Intel: sof_sdw: Fix unlikely uninitialized variable use in
create_sdw_dailinks()
ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
arm64: mm: Populate vmemmap at the page level if not section aligned
Fix mmu notifiers for range-based invalidates
qlcnic: fix memory leak issues in qlcnic_sriov_common.c
smb: client: fix regression with guest option
net: phy: nxp-c45-tja11xx: add TJA112X PHY configuration errata
net: phy: nxp-c45-tja11xx: add TJA112XB SGMII PCS restart errata
ASoC: ops: Consistently treat platform_max as control value
rust: error: add missing newline to pr_warn! calls
drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
ASoC: cs42l43: Fix maximum ADC Volume
rust: init: add missing newline to pr_info! calls
ASoC: rt722-sdca: add missing readable registers
drm/xe: cancel pending job timer before freeing scheduler
drm/xe: Release guc ids before cancelling work
drm/xe/userptr: Fix an incorrect assert
drm/xe/pm: Temporarily disable D3Cold on BMG
nvme: move error logging from nvme_end_req() to __nvme_end_req()
ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
drm/i915: Increase I915_PARAM_MMAP_GTT_VERSION version to indicate support
for partial mmaps
scripts: generate_rust_analyzer: add missing macros deps
scripts: generate_rust_analyzer: add missing include_dirs
scripts: generate_rust_analyzer: add uapi crate
block: change blk_mq_add_to_batch() third argument type to bool
cifs: Fix integer overflow while processing acregmax mount option
cifs: Fix integer overflow while processing acdirmax mount option
cifs: Fix integer overflow while processing actimeo mount option
cifs: Fix integer overflow while processing closetimeo mount option
x86/vmware: Parse MP tables for SEV-SNP enabled guests under VMware
hypervisors
i2c: ali1535: Fix an error handling path in ali1535_probe()
i2c: ali15x3: Fix an error handling path in ali15x3_probe()
i2c: sis630: Fix an error handling path in sis630_probe()
mm/hugetlb: wait for hugetlb folios to be freed
smb3: add support for IAKerb
smb: client: Fix match_session bug preventing session reuse
Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
nvme-fc: rely on state transitions to handle connectivity loss
HID: apple: disable Fn key handling on the Omoton KB066
UBUNTU: Upstream stable to v6.6.83, v6.12.20
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2107522/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
