Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2025-04-24 Ported from the following upstream stable releases: v6.6.84, v6.12.21 from git://git.kernel.org/ clockevents/drivers/i8253: Fix stop sequence for timer 0 zram: fix NULL pointer in comp_algorithm_show() hrtimer: Use and report correct timerslack values for realtime tasks rust: init: fix `Zeroable` implementation for `Option<NonNull<T>>` and `Option<KBox<T>>` lib/buildid: Handle memfd_secret() files in build_id_parse() mm: split critical region in remap_file_pages() and invoke LSMs in between firmware: qcom: scm: Fix error code in probe() firmware: imx-scu: fix OF node leak in .probe() arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply arm64: dts: rockchip: remove supports-cqe from rk3588 jaguar arm64: dts: rockchip: remove supports-cqe from rk3588 tiger xfrm: fix tunnel mode TX datapath in packet offload mode xfrm_output: Force software GSO only in tunnel mode soc: imx8m: Remove global soc_uid soc: imx8m: Use devm_* to simplify probe failure handling soc: imx8m: Unregister cpufreq and soc dev in cleanup path ARM: dts: bcm2711: Fix xHCI power-domain ARM: dts: bcm2711: PL011 UARTs are actually r1p5 arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx RDMA/mlx5: Handle errors returned from mlx5r_ib_rate() ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP ARM: dts: bcm2711: Don't mark timer regs unconfigured ARM: dts: BCM5301X: Fix switch port labels of ASUS RT-AC5300 ARM: dts: BCM5301X: Fix switch port labels of ASUS RT-AC3200 dma-mapping: fix missing clear bdr in check_ram_in_range_map() RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path RDMA/hns: Fix soft lockup during bt pages loop RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db() RDMA/hns: Fix invalid sq params not being blocked RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common() RDMA/hns: Fix missing xa_destroy() RDMA/hns: Fix wrong value of max_sge_rd Bluetooth: Fix error code in chan_alloc_skb_cb() Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters accel/qaic: Fix possible data corruption in BOs > 2G ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX net: ipv6: fix TCP GSO segmentation with NAT ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). devlink: fix xa_alloc_cyclic() error handling dpll: fix xa_alloc_cyclic() error handling gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU net: atm: fix use after free in lec_send() net: ti: icssg-prueth: Add lock to stats net: lwtunnel: fix recursion loops net: ipv6: ioam6: fix lwtunnel_output() loop libfs: Fix duplicate directory entry in offset_dir_lookup net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES i2c: omap: fix IRQ storms net: mana: Support holes in device list reply msg can: rcar_canfd: Fix page entries in the AFL list can: ucan: fix out of bound read in strscpy() source can: flexcan: only change CAN state when link up in system PM can: flexcan: disable transceiver during system PM drm/xe: Fix exporting xe buffers multiple times drm/v3d: Don't run jobs that have errors flagged in its fence io_uring/net: don't clear REQ_F_NEED_CLEANUP unconditionally riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions netfs: Call `invalidate_cache` only if implemented regulator: dummy: force synchronous probing regulator: check that dummy regulator has been probed before using it accel/qaic: Fix integer overflow in qaic_validate_req() arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to sound card arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou arm64: dts: rockchip: fix pinmux of UART5 for PX30 Ringneck on Haikou mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops mmc: atmel-mci: Add missing clk_disable_unprepare() selftests/mm: run_vmtests.sh: fix half_ufd_size_MB calculation mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT mm/migrate: fix shmem xarray update during migration mm/page_alloc: fix memory accept before watermarks gets initialized proc: fix UAF in proc_get_inode() memcg: drain obj stock on cpu hotplug teardown ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6 ARM: shmobile: smp: Enforce shmobile_smp_* alignment firmware: qcom: uefisecapp: fix efivars registration race efi/libstub: Avoid physical address 0x0 when doing random allocation keys: Fix UAF in key_put() xsk: fix an integer overflow in xp_create_and_assign_umem() batman-adv: Ignore own maximum aggregation size during RX soc: qcom: pdr: Fix the potential deadlock pmdomain: amlogic: fix T7 ISP secpower drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() drm/sched: Fix fence reference count leak drm/amdgpu/gfx12: correct cleanup of 'me' field with gfx_v12_0_me_fini() drm/amd/display: Fix message for support_edp0_on_dp1 drm/amd/display: Use HW lock mgr for PSR1 when only one eDP drm/amd/pm: add unique_id for gfx12 drm/amdgpu: Restore uncached behaviour on GFX12 drm/amdgpu/pm: wire up hwmon fan speed for smu 14.0.2 drm/amdgpu: Remove JPEG from vega and carrizo video caps drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size drm/amdgpu: Fix JPEG video caps max size for navi1x and raven ksmbd: fix incorrect validation for num_aces field of smb_acl io_uring/net: fix sendzc double notif flush KVM: arm64: Fix __pkvm_init_vcpu cptr_el2 error path KVM: arm64: Calculate cptr_el2 traps on activating traps KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN KVM: arm64: Refactor exit handlers KVM: arm64: Mark some header functions as inline Revert "sched/core: Reduce cost of sched_move_task when config autogroup" libsubcmd: Silence compiler warning arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S mm/huge_memory: drop beyond-EOF folios with the right number of refs mptcp: Fix data stream corruption in the address announcement UBUNTU: Upstream stable to v6.6.84, v6.12.21 ** Affects: linux (Ubuntu) Importance: Undecided Status: Invalid ** Affects: linux (Ubuntu Oracular) Importance: Medium Assignee: Noah Wager (nwager) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Oracular) Importance: Undecided Status: New ** Changed in: linux (Ubuntu) Status: Confirmed => Invalid ** Changed in: linux (Ubuntu Oracular) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Oracular) Status: New => In Progress ** Changed in: linux (Ubuntu Oracular) Assignee: (unassigned) => Noah Wager (nwager) ** Description changed: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2025-04-24 + + Ported from the following upstream stable releases: + v6.6.84, v6.12.21 + from git://git.kernel.org/ + + clockevents/drivers/i8253: Fix stop sequence for timer 0 + zram: fix NULL pointer in comp_algorithm_show() + hrtimer: Use and report correct timerslack values for realtime tasks + rust: init: fix `Zeroable` implementation for `Option<NonNull<T>>` and `Option<KBox<T>>` + lib/buildid: Handle memfd_secret() files in build_id_parse() + mm: split critical region in remap_file_pages() and invoke LSMs in between + firmware: qcom: scm: Fix error code in probe() + firmware: imx-scu: fix OF node leak in .probe() + arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply + arm64: dts: rockchip: remove supports-cqe from rk3588 jaguar + arm64: dts: rockchip: remove supports-cqe from rk3588 tiger + xfrm: fix tunnel mode TX datapath in packet offload mode + xfrm_output: Force software GSO only in tunnel mode + soc: imx8m: Remove global soc_uid + soc: imx8m: Use devm_* to simplify probe failure handling + soc: imx8m: Unregister cpufreq and soc dev in cleanup path + ARM: dts: bcm2711: Fix xHCI power-domain + ARM: dts: bcm2711: PL011 UARTs are actually r1p5 + arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1 + RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests + RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx + RDMA/mlx5: Handle errors returned from mlx5r_ib_rate() + ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP + ARM: dts: bcm2711: Don't mark timer regs unconfigured + ARM: dts: BCM5301X: Fix switch port labels of ASUS RT-AC5300 + ARM: dts: BCM5301X: Fix switch port labels of ASUS RT-AC3200 + dma-mapping: fix missing clear bdr in check_ram_in_range_map() + RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path + RDMA/hns: Fix soft lockup during bt pages loop + RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db() + RDMA/hns: Fix invalid sq params not being blocked + RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common() + RDMA/hns: Fix missing xa_destroy() + RDMA/hns: Fix wrong value of max_sge_rd + Bluetooth: Fix error code in chan_alloc_skb_cb() + Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters + accel/qaic: Fix possible data corruption in BOs > 2G + ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX + net: ipv6: fix TCP GSO segmentation with NAT + ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). + ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). + devlink: fix xa_alloc_cyclic() error handling + dpll: fix xa_alloc_cyclic() error handling + gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU + net: atm: fix use after free in lec_send() + net: ti: icssg-prueth: Add lock to stats + net: lwtunnel: fix recursion loops + net: ipv6: ioam6: fix lwtunnel_output() loop + libfs: Fix duplicate directory entry in offset_dir_lookup + net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES + i2c: omap: fix IRQ storms + net: mana: Support holes in device list reply msg + can: rcar_canfd: Fix page entries in the AFL list + can: ucan: fix out of bound read in strscpy() source + can: flexcan: only change CAN state when link up in system PM + can: flexcan: disable transceiver during system PM + drm/xe: Fix exporting xe buffers multiple times + drm/v3d: Don't run jobs that have errors flagged in its fence + io_uring/net: don't clear REQ_F_NEED_CLEANUP unconditionally + riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions + netfs: Call `invalidate_cache` only if implemented + regulator: dummy: force synchronous probing + regulator: check that dummy regulator has been probed before using it + accel/qaic: Fix integer overflow in qaic_validate_req() + arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to sound card + arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card + arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou + arm64: dts: rockchip: fix pinmux of UART5 for PX30 Ringneck on Haikou + mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops + mmc: atmel-mci: Add missing clk_disable_unprepare() + selftests/mm: run_vmtests.sh: fix half_ufd_size_MB calculation + mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT + mm/migrate: fix shmem xarray update during migration + mm/page_alloc: fix memory accept before watermarks gets initialized + proc: fix UAF in proc_get_inode() + memcg: drain obj stock on cpu hotplug teardown + ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6 + ARM: shmobile: smp: Enforce shmobile_smp_* alignment + firmware: qcom: uefisecapp: fix efivars registration race + efi/libstub: Avoid physical address 0x0 when doing random allocation + keys: Fix UAF in key_put() + xsk: fix an integer overflow in xp_create_and_assign_umem() + batman-adv: Ignore own maximum aggregation size during RX + soc: qcom: pdr: Fix the potential deadlock + pmdomain: amlogic: fix T7 ISP secpower + drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() + drm/sched: Fix fence reference count leak + drm/amdgpu/gfx12: correct cleanup of 'me' field with gfx_v12_0_me_fini() + drm/amd/display: Fix message for support_edp0_on_dp1 + drm/amd/display: Use HW lock mgr for PSR1 when only one eDP + drm/amd/pm: add unique_id for gfx12 + drm/amdgpu: Restore uncached behaviour on GFX12 + drm/amdgpu/pm: wire up hwmon fan speed for smu 14.0.2 + drm/amdgpu: Remove JPEG from vega and carrizo video caps + drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size + drm/amdgpu: Fix JPEG video caps max size for navi1x and raven + ksmbd: fix incorrect validation for num_aces field of smb_acl + io_uring/net: fix sendzc double notif flush + KVM: arm64: Fix __pkvm_init_vcpu cptr_el2 error path + KVM: arm64: Calculate cptr_el2 traps on activating traps + KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state + KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN + KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN + KVM: arm64: Refactor exit handlers + KVM: arm64: Mark some header functions as inline + Revert "sched/core: Reduce cost of sched_move_task when config autogroup" + libsubcmd: Silence compiler warning + arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S + mm/huge_memory: drop beyond-EOF folios with the right number of refs + mptcp: Fix data stream corruption in the address announcement + UBUNTU: Upstream stable to v6.6.84, v6.12.21 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2109301 Title: Oracular update: upstream stable patchset 2025-04-24 Status in linux package in Ubuntu: Invalid Status in linux source package in Oracular: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2025-04-24 Ported from the following upstream stable releases: v6.6.84, v6.12.21 from git://git.kernel.org/ clockevents/drivers/i8253: Fix stop sequence for timer 0 zram: fix NULL pointer in comp_algorithm_show() hrtimer: Use and report correct timerslack values for realtime tasks rust: init: fix `Zeroable` implementation for `Option<NonNull<T>>` and `Option<KBox<T>>` lib/buildid: Handle memfd_secret() files in build_id_parse() mm: split critical region in remap_file_pages() and invoke LSMs in between firmware: qcom: scm: Fix error code in probe() firmware: imx-scu: fix OF node leak in .probe() arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply arm64: dts: rockchip: remove supports-cqe from rk3588 jaguar arm64: dts: rockchip: remove supports-cqe from rk3588 tiger xfrm: fix tunnel mode TX datapath in packet offload mode xfrm_output: Force software GSO only in tunnel mode soc: imx8m: Remove global soc_uid soc: imx8m: Use devm_* to simplify probe failure handling soc: imx8m: Unregister cpufreq and soc dev in cleanup path ARM: dts: bcm2711: Fix xHCI power-domain ARM: dts: bcm2711: PL011 UARTs are actually r1p5 arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx RDMA/mlx5: Handle errors returned from mlx5r_ib_rate() ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP ARM: dts: bcm2711: Don't mark timer regs unconfigured ARM: dts: BCM5301X: Fix switch port labels of ASUS RT-AC5300 ARM: dts: BCM5301X: Fix switch port labels of ASUS RT-AC3200 dma-mapping: fix missing clear bdr in check_ram_in_range_map() RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path RDMA/hns: Fix soft lockup during bt pages loop RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db() RDMA/hns: Fix invalid sq params not being blocked RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common() RDMA/hns: Fix missing xa_destroy() RDMA/hns: Fix wrong value of max_sge_rd Bluetooth: Fix error code in chan_alloc_skb_cb() Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters accel/qaic: Fix possible data corruption in BOs > 2G ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX net: ipv6: fix TCP GSO segmentation with NAT ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). devlink: fix xa_alloc_cyclic() error handling dpll: fix xa_alloc_cyclic() error handling gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU net: atm: fix use after free in lec_send() net: ti: icssg-prueth: Add lock to stats net: lwtunnel: fix recursion loops net: ipv6: ioam6: fix lwtunnel_output() loop libfs: Fix duplicate directory entry in offset_dir_lookup net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES i2c: omap: fix IRQ storms net: mana: Support holes in device list reply msg can: rcar_canfd: Fix page entries in the AFL list can: ucan: fix out of bound read in strscpy() source can: flexcan: only change CAN state when link up in system PM can: flexcan: disable transceiver during system PM drm/xe: Fix exporting xe buffers multiple times drm/v3d: Don't run jobs that have errors flagged in its fence io_uring/net: don't clear REQ_F_NEED_CLEANUP unconditionally riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions netfs: Call `invalidate_cache` only if implemented regulator: dummy: force synchronous probing regulator: check that dummy regulator has been probed before using it accel/qaic: Fix integer overflow in qaic_validate_req() arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to sound card arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou arm64: dts: rockchip: fix pinmux of UART5 for PX30 Ringneck on Haikou mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops mmc: atmel-mci: Add missing clk_disable_unprepare() selftests/mm: run_vmtests.sh: fix half_ufd_size_MB calculation mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT mm/migrate: fix shmem xarray update during migration mm/page_alloc: fix memory accept before watermarks gets initialized proc: fix UAF in proc_get_inode() memcg: drain obj stock on cpu hotplug teardown ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6 ARM: shmobile: smp: Enforce shmobile_smp_* alignment firmware: qcom: uefisecapp: fix efivars registration race efi/libstub: Avoid physical address 0x0 when doing random allocation keys: Fix UAF in key_put() xsk: fix an integer overflow in xp_create_and_assign_umem() batman-adv: Ignore own maximum aggregation size during RX soc: qcom: pdr: Fix the potential deadlock pmdomain: amlogic: fix T7 ISP secpower drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() drm/sched: Fix fence reference count leak drm/amdgpu/gfx12: correct cleanup of 'me' field with gfx_v12_0_me_fini() drm/amd/display: Fix message for support_edp0_on_dp1 drm/amd/display: Use HW lock mgr for PSR1 when only one eDP drm/amd/pm: add unique_id for gfx12 drm/amdgpu: Restore uncached behaviour on GFX12 drm/amdgpu/pm: wire up hwmon fan speed for smu 14.0.2 drm/amdgpu: Remove JPEG from vega and carrizo video caps drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size drm/amdgpu: Fix JPEG video caps max size for navi1x and raven ksmbd: fix incorrect validation for num_aces field of smb_acl io_uring/net: fix sendzc double notif flush KVM: arm64: Fix __pkvm_init_vcpu cptr_el2 error path KVM: arm64: Calculate cptr_el2 traps on activating traps KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN KVM: arm64: Refactor exit handlers KVM: arm64: Mark some header functions as inline Revert "sched/core: Reduce cost of sched_move_task when config autogroup" libsubcmd: Silence compiler warning arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S mm/huge_memory: drop beyond-EOF folios with the right number of refs mptcp: Fix data stream corruption in the address announcement UBUNTU: Upstream stable to v6.6.84, v6.12.21 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2109301/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp