** Tags added: kernel-daily-bug

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2089068

Title:
  Oracular update: v6.11.4 upstream stable release

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Oracular:
  Fix Released

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v6.11.4 upstream stable release
         from git://git.kernel.org/

  unicode: Don't special case ignorable code points
  net: fec: don't save PTP state if PTP is unsupported
  fs/ntfs3: Do not call file_modified if collapse range failed
  fs/ntfs3: Optimize large writes into sparse file
  fs/ntfs3: Fix sparse warning for bigendian
  fs/ntfs3: Fix sparse warning in ni_fiemap
  fs/ntfs3: Refactor enum_rstbl to suppress static checker
  vdpa/octeon_ep: Fix format specifier for pointers in debug messages
  virtio_console: fix misc probe bugs
  perf vdso: Missed put on 32-bit dsos
  ntfs3: Change to non-blocking allocation in ntfs_d_hash
  perf build: Fix static compilation error when libdw is not installed
  perf build: Fix build feature-dwarf_getlocations fail for old libdw
  zram: free secondary algorithms names
  zram: don't free statically defined names
  bpf: Call the missed btf_record_free() when map creation fails
  selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
  bpf: Check percpu map value size first
  s390/facility: Disable compile time optimization for decompressor code
  s390/mm: Add cond_resched() to cmm_alloc/free_pages()
  bpf, x64: Fix a jit convergence issue
  ext4: don't set SB_RDONLY after filesystem errors
  ext4: nested locking for xattr inode
  s390/cpum_sf: Remove WARN_ON_ONCE statements
  s390/traps: Handle early warnings gracefully
  bpf: Prevent tail call between progs attached to different hooks
  ktest.pl: Avoid false positives with grub2 skip regex
  RDMA/mad: Improve handling of timed out WRs of mad agent
  soundwire: intel_bus_common: enable interrupts before exiting reset
  PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
  clk: bcm: bcm53573: fix OF node leak in init
  PCI: Add ACS quirk for Qualcomm SA8775P
  i2c: i801: Use a different adapter-name for IDF adapters
  PCI: Mark Creative Labs EMU20k2 INTx masking as broken
  i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver 
Due to Race Condition
  RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
  io_uring: check if we need to reschedule during overflow flush
  ntb: ntb_hw_switchtec: Fix use after free vulnerability in 
switchtec_ntb_remove due to race condition
  mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
  mfd: intel-lpss: Add Intel Panther Lake LPSS PCI IDs
  riscv: Omit optimized string routines when using KASAN
  riscv: avoid Imbalance in RAS
  RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
  PCI: qcom: Disable mirroring of DBI and iATU register space in BAR region
  PCI: endpoint: Assign PCI domain number for endpoint controllers
  soundwire: cadence: re-check Peripheral status with delayed_work
  riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
  media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
  remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
  clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
  serial: protect uart_port_dtr_rts() in uart_shutdown() too
  usb: typec: tipd: Free IRQ only if it was requested before
  usb: chipidea: udc: enable suspend interrupt after usb reset
  usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the 
Crashkernel Scenario
  xhci: dbc: Fix STALL transfer event handling
  usb: host: xhci-plat: Parse xhci-missing_cas_quirk and apply quirk
  comedi: ni_routing: tools: Check when the file could not be opened
  LoongArch: Fix memleak in pci_acpi_scan_root()
  netfilter: nf_nat: don't try nat source port reallocation for reverse dir 
clash
  netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
  virtio_pmem: Check device status before requesting flush
  tools/iio: Add memory allocation failure check for trigger_name
  staging: vme_user: added bound check to geoid
  usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
  dm vdo: don't refer to dedupe_context after releasing it
  driver core: bus: Fix double free in driver API bus_register()
  driver core: bus: Return -EIO instead of 0 when show/store invalid bus 
attribute
  scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in 
lpfc_els_flush_cmd()
  scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
  scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to 
KERN_WARNING
  drm/xe/oa: Fix overflow in oa batch buffer
  drm/amd/display: Check null pointer before dereferencing se
  fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
  smb: client: fix UAF in async decryption
  fbdev: sisfb: Fix strbuf array overflow
  NFSD: Mark filecache "down" if init fails
  nfsd: nfsd_destroy_serv() must call svc_destroy() even if nfsd_startup_net() 
failed
  ice: set correct dst VSI in only LAN filters
  ice: clear port vlan config during reset
  ice: fix memleak in ice_init_tx_topology()
  ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins
  ice: fix VLAN replay after reset
  SUNRPC: Fix integer overflow in decode_rc_list()
  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
  net: phy: dp83869: fix memory corruption when enabling fiber
  sfc: Don't invoke xdp_do_flush() from netpoll.
  net: phy: aquantia: AQR115c fix up PMA capabilities
  net: phy: aquantia: remove usage of phy_set_max_speed
  tcp: fix to allow timestamp undo if no retransmits were sent
  tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
  tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
  rxrpc: Fix uninitialised variable in rxrpc_send_data()
  net: dsa: sja1105: fix reception from VLAN-unaware bridges
  netfilter: br_netfilter: fix panic with metadata_dst skb
  selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() 
test
  net: pse-pd: Fix enabled status mismatch
  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
  Bluetooth: btusb: Don't fail external suspend requests
  net: phy: bcm84881: Fix some error handling paths
  nfsd: fix possible badness in FREE_STATEID
  thermal: intel: int340x: processor: Fix warning during module unload
  net: ethernet: adi: adin1110: Fix some error handling path in 
adin1110_read_fifo()
  net: dsa: b53: fix jumbo frame mtu check
  net: dsa: b53: fix max MTU for 1g switches
  net: dsa: b53: fix max MTU for BCM5325/BCM5365
  net: dsa: b53: allow lower MTUs on BCM5325/5365
  net: dsa: b53: fix jumbo frames on 10/100 ports
  drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
  nouveau/dmem: Fix privileged error in copy engine channel
  gpio: aspeed: Add the flush write to ensure the write complete.
  gpio: aspeed: Use devm_clk api to manage clock source
  x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE
  powercap: intel_rapl_tpmi: Ignore minor version change
  ice: Fix entering Safe Mode
  ice: Fix netif_is_ice() in Safe Mode
  ice: Flush FDB entries before reset
  ice: Fix increasing MSI-X on VF
  i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
  igb: Do not bring the device up after non-fatal error
  net/sched: accept TCA_STAB only for root qdisc
  drm/xe: Restore GT freq on GSC load error
  drm/xe: Make wedged_mode debugfs writable
  net: ibm: emac: mal: fix wrong goto
  net: ti: icssg-prueth: Fix race condition for VLAN table access
  btrfs: zoned: fix missing RCU locking in error message when loading zone info
  sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
  netfilter: xtables: avoid NFPROTO_UNSPEC where needed
  netfilter: fib: check correct rtable in vrf setups
  net: ibm: emac: mal: add dcr_unmap to _remove
  net: dsa: refuse cross-chip mirroring operations
  net: netconsole: fix wrong warning
  drm/fbdev-dma: Only cleanup deferred I/O if necessary
  net: do not delay dst_entries_add() in dst_release()
  rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
  vxlan: Handle error of rtnl_register_module().
  bridge: Handle error of rtnl_register_module().
  mctp: Handle error of rtnl_register_module().
  mpls: Handle error of rtnl_register_module().
  phonet: Handle error of rtnl_register_module().
  ppp: fix ppp_async_encode() illegal access
  net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC
  slip: make slhc_remember() more robust against malicious packets
  rcu/nocb: Fix rcuog wake-up from offline softirq
  HID: multitouch: Add support for lenovo Y9000P Touchpad
  hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
  hwmon: (tmp513) Add missing dependency on REGMAP_I2C
  hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
  hwmon: (adm9240) Add missing dependency on REGMAP_I2C
  hwmon: (adt7470) Add missing dependency on REGMAP_I2C
  hwmon: (ltc2991) Add missing dependency on REGMAP_I2C
  HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
  HID: plantronics: Workaround for an unexcepted opposite volume key
  HID: wacom: Hardcode (non-inverted) AES pens as BTN_TOOL_PEN
  Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
  usb: dwc3: core: Stop processing of pending events if controller is halted
  usb: xhci: Fix problem with xhci resume from suspend
  usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
  usb: dwc3: re-enable runtime PM after failed resume
  usb: gadget: core: force synchronous registration
  hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
  ACPI: resource: Make Asus ExpertBook B2402 matches cover more models
  ACPI: resource: Make Asus ExpertBook B2502 matches cover more models
  drm/amdgpu: partially revert powerplay `__counted_by` changes
  drm/amd/display: Clear update flags after update has been applied
  drm/v3d: Stop the active perfmon before being destroyed
  drm/vc4: Stop the active perfmon before being destroyed
  drm/amdkfd: Fix an eviction fence leak
  drm/amd/display: fix hibernate entry for DCN35+
  drm/xe/guc_submit: fix xa_store() error checking
  drm/i915/hdcp: fix connector refcounting
  drm/xe/ct: prevent UAF in send_recv()
  drm/xe/ct: fix xa_store() error checking
  Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
  thermal: core: Reference count the zone in thermal_zone_get_by_id()
  thermal: core: Free tzp copy along with the thermal zone
  scsi: wd33c93: Don't use stale scsi_pointer value
  scsi: fnic: Move flush_work initialization out of if block
  scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
  Revert "mmc: mvsdio: Use sg_miter for PIO"
  mmc: sdhci-of-dwcmshc: Prevent stale command interrupt handling
  mptcp: fallback when MPTCP opts are dropped after 1st data
  ata: libata: avoid superfluous disk spin down + spin up during hibernation
  OPP: fix error code in dev_pm_opp_set_config()
  net: explicitly clear the sk pointer, when pf->create fails
  net: Fix an unsafe loop on the list
  net: dsa: lan9303: ensure chip reset and wait for READY status
  net: phy: Remove LED entry from LEDs list on unregister
  net: phy: realtek: Fix MMD access on RTL8126A-integrated PHY
  mptcp: handle consistently DSS corruption
  mptcp: pm: do not remove closing subflows
  device-dax: correct pgoff align in dax_set_mapping()
  ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins()
  ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()
  nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
  powercap: intel_rapl_tpmi: Fix bogus register reading
  selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test
  selftests/rseq: Fix mm_cid test failure
  btrfs: split remaining space to discard in chunks
  btrfs: add cancellation points to trim loops
  PM: domains: Fix alloc/free in dev_pm_domain_attach|detach_list()
  idpf: use actual mbx receive payload length
  kthread: unpark only parked kthread
  fs/proc/kcore.c: allow translation of physical memory addresses
  secretmem: disable memfd_secret() if arch cannot set direct map
  PCI: Pass domain number to pci_bus_release_domain_nr() explicitly
  io_uring/rw: fix cflags posting for single issue multishot read
  Linux 6.11.4
  UBUNTU: Upstream stable to v6.11.4

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2089068/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to