Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.14.4 upstream stable release
       from git://git.kernel.org/

scsi: hisi_sas: Enable force phy when SATA disk directly connected
wifi: at76c50x: fix use after free access in at76_disconnect
wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
wifi: mac80211: Purge vif txq in ieee80211_do_stop()
wifi: brcmfmac: fix memory leak in brcmf_get_module_param
wifi: wl1251: fix memory leak in wl1251_tx_work
scsi: iscsi: Fix missing scsi_host_put() in error path
scsi: smartpqi: Use is_kdump_kernel() to check for kdump
md/raid10: fix missing discard IO accounting
md/md-bitmap: fix stats collection for external bitmaps
ASoC: dwc: always enable/disable i2s irqs
ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()
crypto: tegra - Fix IV usage for AES ECB
ovl: remove unused forward declaration
RDMA/bnxt_re: Fix budget handling of notification queue
RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
RDMA/hns: Fix wrong maximum DMA segment size
ALSA: hda/cirrus_scodec_test: Don't select dependencies
ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
ASoC: cs42l43: Reset clamp override on jack removal
RDMA/core: Silence oversized kvmalloc() warning
firmware: cs_dsp: test_bin_error: Fix uninitialized data used as fw version
Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
Bluetooth: btrtl: Prevent potential NULL dereference
Bluetooth: qca: fix NV variant for one of WCN3950 SoCs
Bluetooth: l2cap: Check encryption key size on incoming connection
RDMA/bnxt_re: Remove unusable nq variable
ipv6: add exception routes to GC list in rt6_insert_exception
xen: fix multicall debug feature
mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show()
wifi: iwlwifi: pcie: set state to no-FW before reset handshake
Revert "wifi: mac80211: Update skb's control block key in 
ieee80211_tx_dequeue()"
igc: fix PTM cycle trigger logic
igc: increase wait time before retrying PTM
igc: move ktime snapshot into PTM retry loop
igc: handle the IGC_PTP_ENABLED flag correctly
igc: cleanup PTP module if probe fails
igc: add lock preventing multiple simultaneous PTM transactions
perf tools: Remove evsel__handle_error_quirks()
dt-bindings: soc: fsl: fsl,ls1028a-reset: Fix maintainer entry
smc: Fix lockdep false-positive for IPPROTO_SMC.
test suite: use %zu to print size_t
selftests: mincore: fix tmpfs mincore test failure
pds_core: fix memory leak in pdsc_debugfs_add_qcq()
ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll()
net: mctp: Set SOCK_RCU_FREE
net: hibmcge: fix incorrect pause frame statistics issue
net: hibmcge: fix incorrect multicast filtering issue
net: hibmcge: fix wrong mtu log issue
net: hibmcge: fix not restore rx pause mac addr after reset issue
block: fix resource leak in blk_register_queue() error path
netlink: specs: ovs_vport: align with C codegen capabilities
net: openvswitch: fix nested key length validation in the set() action
can: rockchip_canfd: fix broken quirks checks
net: ngbe: fix memory leak in ngbe_probe() error path
octeontx2-pf: handle otx2_mbox_get_rsp errors
net: ethernet: ti: am65-cpsw: fix port_np reference counting
eth: bnxt: fix missing ring index trim on error path
loop: aio inherit the ioprio of original request
loop: stop using vfs_iter_{read,write} for buffered I/O
nvmet: pci-epf: always fully initialize completion entries
nvmet: pci-epf: clear CC and CSTS when disabling the controller
ata: libata-sata: Save all fields from sense data descriptor
cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
netlink: specs: rt-link: add an attr layer around alt-ifname
netlink: specs: rtnetlink: attribute naming corrections
netlink: specs: rt-link: adjust mctp attribute naming
netlink: specs: rt-neigh: prefix struct nfmsg members with ndm
net: b53: enable BPDU reception for management port
net: bridge: switchdev: do not notify new brentries as changed
net: txgbe: fix memory leak in txgbe_probe() error path
net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never 
registered
net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported
net: dsa: clean up FDB, MDB, VLAN entries on unbind
net: dsa: free routing table on probe failure
net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails
ptp: ocp: fix start time alignment in ptp_ocp_signal_set
netfilter: conntrack: fix erronous removal of offload bit
net: ti: icss-iep: Add pwidth configuration for perout signal
net: ti: icss-iep: Add phase offset configuration for perout signal
net: ti: icss-iep: Fix possible NULL pointer dereference for perout request
net: ethernet: mtk_eth_soc: reapply mdc divider on reset
net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for 
100Mbps
net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings
riscv: Use kvmalloc_array on relocation_hashtable
riscv: Properly export reserved regions in /proc/iomem
riscv: module: Fix out-of-bounds relocation access
riscv: module: Allocate PLT entries for R_RISCV_PLT32
kunit: qemu_configs: SH: Respect kunit cmdline
thermal: intel: int340x: Fix Panther Lake DLVR support
riscv: KGDB: Do not inline arch_kgdb_breakpoint()
riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
objtool/rust: add one more `noreturn` Rust function for Rust 1.86.0
rust: helpers: Remove volatile qualifier from io helpers
rust: kasan/kbuild: fix missing flags on first build
rust: disable `clippy::needless_continue`
rust: kbuild: Don't export __pfx symbols
rust: kbuild: use `pound` to support GNU Make < 4.3
writeback: fix false warning in inode_to_wb()
Revert "PCI: Avoid reset when disabled via sysfs"
ASoC: fsl: fsl_qmc_audio: Reset audio data pointers on TRIGGER_START event
ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S16
ASoC: qcom: Fix sc7280 lpass potential buffer overflow
accel/ivpu: Fix the NPU's DPU frequency calculation
alloc_tag: handle incomplete bulk allocations in vm_module_tags_populate
asus-laptop: Fix an uninitialized variable
block: integrity: Do not call set_page_dirty_lock()
drm/v3d: Fix Indirect Dispatch configuration for V3D 7.1.6 and later
drm/msm/dpu: Fix error pointers in dpu_plane_virtual_atomic_check
drm/msm/dpu: drop rogue intr_tear_rd_ptr values
dma-buf/sw_sync: Decrement refcount on error in sw_sync_ioctl_get_deadline()
nfs: add missing selections of CONFIG_CRC32
nfsd: decrease sc_count directly if fail to queue dl_recall
i2c: atr: Fix wrong include
eventpoll: abstract out ep_try_send_events() helper
eventpoll: Set epoll timeout if it's in the future
ftrace: fix incorrect hash size in register_ftrace_direct()
drm/msm/a6xx+: Don't let IB_SIZE overflow
Bluetooth: l2cap: Process valid commands in too long frame
Bluetooth: vhci: Avoid needless snprintf() calls
btrfs: ioctl: don't free iov when btrfs_encoded_read() returns -EAGAIN
btrfs: correctly escape subvol in btrfs_show_options()
cpufreq/sched: Explicitly synchronize limits_changed flag handling
crypto: caam/qi - Fix drv_ctx refcount bug
hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
i2c: cros-ec-tunnel: defer probe if parent EC is not present
isofs: Prevent the use of too small fid
lib/iov_iter: fix to increase non slab folio refcount
loop: properly send KOBJ_CHANGED uevent for disk device
loop: LOOP_SET_FD: send uevents for partitions
mm/compaction: fix bug in hugetlb handling pathway
mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
mm: fix filemap_get_folios_contig returning batches of identical folios
mm: fix apply_to_existing_page_range()
ovl: don't allow datadir only
ksmbd: Fix dangling pointer in krb_authenticate
ksmbd: fix use-after-free in __smb2_lease_break_noti()
ksmbd: fix use-after-free in smb_break_all_levII_oplock()
ksmbd: Prevent integer overflow in calculation of deadtime
ksmbd: fix the warning from __kernel_write_iter
Revert "smb: client: Fix netns refcount imbalance causing leaks and 
use-after-free"
Revert "smb: client: fix TCP timers deadlock after rmmod"
riscv: Avoid fortify warning in syscall_get_arguments()
selftests/mm: generate a temporary mountpoint for cgroup filesystem
slab: ensure slab->obj_exts is clear in a newly allocated slab page
smb3 client: fix open hardlink on deferred close file error
string: Add load_unaligned_zeropad() code path to sized_strscpy()
tracing: Fix filter string testing
virtiofs: add filesystem context source name check
x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any 
unreleased standalone Zen5 microcode patches
x86/cpu/amd: Fix workaround for erratum 1054
x86/boot/sev: Avoid shared GHCB page for early memory acceptance
scsi: megaraid_sas: Block zero-length ATA VPD inquiry
scsi: ufs: exynos: Move UFS shareability value to drvdata
scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set
scsi: ufs: exynos: Ensure consistent phy reference counts
RDMA/cma: Fix workqueue crash in cma_netevent_work_handler
RAS/AMD/ATL: Include row[13] bit in row retirement
RAS/AMD/FMPM: Get masked address
platform/x86: amd: pmf: Fix STT limits
perf/x86/intel: Allow to update user space GPRs from PEBS records
perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
drm/repaper: fix integer overflows in repeat functions
drm/ast: Fix ast_dp connection status
drm/msm/dsi: Add check for devm_kstrdup()
drm/msm/a6xx: Fix stale rpmh votes from GPU
drm/amdgpu: Prefer shadow rom when available
drm/amd/display: prevent hang on link training fail
drm/amd: Handle being compiled without SI or CIK support better
drm/amd/display: Actually do immediate vblank disable
drm/amd/display: Increase vblank offdelay for PSR panels
drm/amd/pm: Prevent division by zero
drm/amd/pm/powerplay: Prevent division by zero
drm/amd/pm: Add zero RPM enabled OD setting support for SMU14.0.2
drm/amd/pm/smu11: Prevent division by zero
drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
drm/amdgpu/mes12: optimize MES pipe FW version fetching
drm/i915/vrr: Add vrr.vsync_{start, end} in vrr_params_changed
drm/xe: Use local fence in error path of xe_migrate_clear
drm/virtio: Don't attach GEM to a non-created context in gem_object_open()
drm/amd/display: Add HP Elitebook 645 to the quirk list for eDP on DP1
drm/amd/display: Protect FPU in dml2_validate()/dml21_validate()
drm/amd/display: Protect FPU in dml21_copy()
drm/amdgpu/mes11: optimize MES pipe FW version fetching
drm/amdgpu/dma_buf: fix page_link check
drm/nouveau: prime: fix ttm_bo_delayed_delete oops
drm/imagination: fix firmware memory leaks
drm/imagination: take paired job reference
drm/virtio: Fix missed dmabuf unpinning in error path of prepare_fb()
drm/sti: remove duplicate object names
drm/i915: Fix scanline_offset for LNL+ and BMG+
drm/xe: Fix an out-of-bounds shift when invalidating TLB
Revert "UBUNTU: SAUCE: drm/xe/bmg: Add one additional PCI ID"
drm/xe/bmg: Add one additional PCI ID
drm/i915/gvt: fix unterminated-string-initialization warning
drm/i915/xe2hpd: Identify the memory type for SKUs with GDDR + ECC
drm/i915/dp: Reject HBR3 when sink doesn't support TPS4
drm/amdgpu: immediately use GTT for new allocations
drm/amd/display: Do not enable Replay and PSR while VRR is on in 
amdgpu_dm_commit_planes()
drm/amd/display: Protect FPU in dml2_init()/dml21_init()
drm/amd/display: Add HP Probook 445 and 465 to the quirk list for eDP on DP1
drm/xe/dma_buf: stop relying on placement in unmap
drm/xe/userptr: fix notifier vs folio deadlock
drm/xe: Set LRC addresses before guc load
drm/i915/display: Add macro for checking 3 DSC engines
drm/i915/dp: Check for HAS_DSC_3ENGINES while configuring DSC slices
drm/amd/display/dml2: use vzalloc rather than kzalloc
drm/amdgpu: fix warning of drm_mm_clean
drm/mgag200: Fix value in <VBLKSTR> register
io_uring: don't post tag CQEs on file/buffer registration failure
arm64/sysreg: Update register fields for ID_AA64MMFR0_EL1
arm64/sysreg: Add register fields for HDFGRTR2_EL2
arm64/sysreg: Add register fields for HDFGWTR2_EL2
arm64/sysreg: Add register fields for HFGITR2_EL2
arm64/sysreg: Add register fields for HFGRTR2_EL2
arm64/sysreg: Add register fields for HFGWTR2_EL2
arm64/boot: Enable EL2 requirements for FEAT_PMUv3p9
cpufreq: Reference count policy in cpufreq_update_limits()
scripts: generate_rust_analyzer: Add ffi crate
platform/x86: alienware-wmi-wmax: Add G-Mode support to Alienware m16 R1
platform/x86: alienware-wmi-wmax: Extend support to more laptops
platform/x86: msi-wmi-platform: Rename "data" variable
platform/x86: msi-wmi-platform: Workaround a ACPI firmware bug
drm/amd/display: Temporarily disable hostvm on DCN31
nvmet-fc: Remove unused functions
mm/vma: add give_up_on_oom option on modify/merge, use in uffd release
Revert "wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process"
MIPS: dec: Declare which_prom() as static
MIPS: cevt-ds1287: Add missing ds1287.h include
MIPS: ds1287: Match ds1287_set_base_clock() function types
wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
Linux 6.14.4
UBUNTU: Upstream stable to v6.14.4

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: linux (Ubuntu Plucky)
     Importance: Medium
     Assignee: Manuel Diewald (diewald)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Plucky)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu)
       Status: Confirmed => Invalid

** Changed in: linux (Ubuntu Plucky)
   Importance: Undecided => Medium

** Changed in: linux (Ubuntu Plucky)
       Status: New => In Progress

** Changed in: linux (Ubuntu Plucky)
     Assignee: (unassigned) => Manuel Diewald (diewald)

** Description changed:

  
      SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
         v6.14.4 upstream stable release
         from git://git.kernel.org/
  
-             
+ scsi: hisi_sas: Enable force phy when SATA disk directly connected
+ wifi: at76c50x: fix use after free access in at76_disconnect
+ wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
+ wifi: mac80211: Purge vif txq in ieee80211_do_stop()
+ wifi: brcmfmac: fix memory leak in brcmf_get_module_param
+ wifi: wl1251: fix memory leak in wl1251_tx_work
+ scsi: iscsi: Fix missing scsi_host_put() in error path
+ scsi: smartpqi: Use is_kdump_kernel() to check for kdump
+ md/raid10: fix missing discard IO accounting
+ md/md-bitmap: fix stats collection for external bitmaps
+ ASoC: dwc: always enable/disable i2s irqs
+ ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()
+ crypto: tegra - Fix IV usage for AES ECB
+ ovl: remove unused forward declaration
+ RDMA/bnxt_re: Fix budget handling of notification queue
+ RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
+ RDMA/hns: Fix wrong maximum DMA segment size
+ ALSA: hda/cirrus_scodec_test: Don't select dependencies
+ ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
+ ASoC: cs42l43: Reset clamp override on jack removal
+ RDMA/core: Silence oversized kvmalloc() warning
+ firmware: cs_dsp: test_bin_error: Fix uninitialized data used as fw version
+ Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
+ Bluetooth: btrtl: Prevent potential NULL dereference
+ Bluetooth: qca: fix NV variant for one of WCN3950 SoCs
+ Bluetooth: l2cap: Check encryption key size on incoming connection
+ RDMA/bnxt_re: Remove unusable nq variable
+ ipv6: add exception routes to GC list in rt6_insert_exception
+ xen: fix multicall debug feature
+ mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show()
+ wifi: iwlwifi: pcie: set state to no-FW before reset handshake
+ Revert "wifi: mac80211: Update skb's control block key in 
ieee80211_tx_dequeue()"
+ igc: fix PTM cycle trigger logic
+ igc: increase wait time before retrying PTM
+ igc: move ktime snapshot into PTM retry loop
+ igc: handle the IGC_PTP_ENABLED flag correctly
+ igc: cleanup PTP module if probe fails
+ igc: add lock preventing multiple simultaneous PTM transactions
+ perf tools: Remove evsel__handle_error_quirks()
+ dt-bindings: soc: fsl: fsl,ls1028a-reset: Fix maintainer entry
+ smc: Fix lockdep false-positive for IPPROTO_SMC.
+ test suite: use %zu to print size_t
+ selftests: mincore: fix tmpfs mincore test failure
+ pds_core: fix memory leak in pdsc_debugfs_add_qcq()
+ ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll()
+ net: mctp: Set SOCK_RCU_FREE
+ net: hibmcge: fix incorrect pause frame statistics issue
+ net: hibmcge: fix incorrect multicast filtering issue
+ net: hibmcge: fix wrong mtu log issue
+ net: hibmcge: fix not restore rx pause mac addr after reset issue
+ block: fix resource leak in blk_register_queue() error path
+ netlink: specs: ovs_vport: align with C codegen capabilities
+ net: openvswitch: fix nested key length validation in the set() action
+ can: rockchip_canfd: fix broken quirks checks
+ net: ngbe: fix memory leak in ngbe_probe() error path
+ octeontx2-pf: handle otx2_mbox_get_rsp errors
+ net: ethernet: ti: am65-cpsw: fix port_np reference counting
+ eth: bnxt: fix missing ring index trim on error path
+ loop: aio inherit the ioprio of original request
+ loop: stop using vfs_iter_{read,write} for buffered I/O
+ nvmet: pci-epf: always fully initialize completion entries
+ nvmet: pci-epf: clear CC and CSTS when disabling the controller
+ ata: libata-sata: Save all fields from sense data descriptor
+ cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
+ netlink: specs: rt-link: add an attr layer around alt-ifname
+ netlink: specs: rtnetlink: attribute naming corrections
+ netlink: specs: rt-link: adjust mctp attribute naming
+ netlink: specs: rt-neigh: prefix struct nfmsg members with ndm
+ net: b53: enable BPDU reception for management port
+ net: bridge: switchdev: do not notify new brentries as changed
+ net: txgbe: fix memory leak in txgbe_probe() error path
+ net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never 
registered
+ net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported
+ net: dsa: clean up FDB, MDB, VLAN entries on unbind
+ net: dsa: free routing table on probe failure
+ net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails
+ ptp: ocp: fix start time alignment in ptp_ocp_signal_set
+ netfilter: conntrack: fix erronous removal of offload bit
+ net: ti: icss-iep: Add pwidth configuration for perout signal
+ net: ti: icss-iep: Add phase offset configuration for perout signal
+ net: ti: icss-iep: Fix possible NULL pointer dereference for perout request
+ net: ethernet: mtk_eth_soc: reapply mdc divider on reset
+ net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for 
100Mbps
+ net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings
+ riscv: Use kvmalloc_array on relocation_hashtable
+ riscv: Properly export reserved regions in /proc/iomem
+ riscv: module: Fix out-of-bounds relocation access
+ riscv: module: Allocate PLT entries for R_RISCV_PLT32
+ kunit: qemu_configs: SH: Respect kunit cmdline
+ thermal: intel: int340x: Fix Panther Lake DLVR support
+ riscv: KGDB: Do not inline arch_kgdb_breakpoint()
+ riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
+ cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
+ objtool/rust: add one more `noreturn` Rust function for Rust 1.86.0
+ rust: helpers: Remove volatile qualifier from io helpers
+ rust: kasan/kbuild: fix missing flags on first build
+ rust: disable `clippy::needless_continue`
+ rust: kbuild: Don't export __pfx symbols
+ rust: kbuild: use `pound` to support GNU Make < 4.3
+ writeback: fix false warning in inode_to_wb()
+ Revert "PCI: Avoid reset when disabled via sysfs"
+ ASoC: fsl: fsl_qmc_audio: Reset audio data pointers on TRIGGER_START event
+ ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
+ ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
+ ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S16
+ ASoC: qcom: Fix sc7280 lpass potential buffer overflow
+ accel/ivpu: Fix the NPU's DPU frequency calculation
+ alloc_tag: handle incomplete bulk allocations in vm_module_tags_populate
+ asus-laptop: Fix an uninitialized variable
+ block: integrity: Do not call set_page_dirty_lock()
+ drm/v3d: Fix Indirect Dispatch configuration for V3D 7.1.6 and later
+ drm/msm/dpu: Fix error pointers in dpu_plane_virtual_atomic_check
+ drm/msm/dpu: drop rogue intr_tear_rd_ptr values
+ dma-buf/sw_sync: Decrement refcount on error in sw_sync_ioctl_get_deadline()
+ nfs: add missing selections of CONFIG_CRC32
+ nfsd: decrease sc_count directly if fail to queue dl_recall
+ i2c: atr: Fix wrong include
+ eventpoll: abstract out ep_try_send_events() helper
+ eventpoll: Set epoll timeout if it's in the future
+ ftrace: fix incorrect hash size in register_ftrace_direct()
+ drm/msm/a6xx+: Don't let IB_SIZE overflow
+ Bluetooth: l2cap: Process valid commands in too long frame
+ Bluetooth: vhci: Avoid needless snprintf() calls
+ btrfs: ioctl: don't free iov when btrfs_encoded_read() returns -EAGAIN
+ btrfs: correctly escape subvol in btrfs_show_options()
+ cpufreq/sched: Explicitly synchronize limits_changed flag handling
+ crypto: caam/qi - Fix drv_ctx refcount bug
+ hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
+ i2c: cros-ec-tunnel: defer probe if parent EC is not present
+ isofs: Prevent the use of too small fid
+ lib/iov_iter: fix to increase non slab folio refcount
+ loop: properly send KOBJ_CHANGED uevent for disk device
+ loop: LOOP_SET_FD: send uevents for partitions
+ mm/compaction: fix bug in hugetlb handling pathway
+ mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
+ mm: fix filemap_get_folios_contig returning batches of identical folios
+ mm: fix apply_to_existing_page_range()
+ ovl: don't allow datadir only
+ ksmbd: Fix dangling pointer in krb_authenticate
+ ksmbd: fix use-after-free in __smb2_lease_break_noti()
+ ksmbd: fix use-after-free in smb_break_all_levII_oplock()
+ ksmbd: Prevent integer overflow in calculation of deadtime
+ ksmbd: fix the warning from __kernel_write_iter
+ Revert "smb: client: Fix netns refcount imbalance causing leaks and 
use-after-free"
+ Revert "smb: client: fix TCP timers deadlock after rmmod"
+ riscv: Avoid fortify warning in syscall_get_arguments()
+ selftests/mm: generate a temporary mountpoint for cgroup filesystem
+ slab: ensure slab->obj_exts is clear in a newly allocated slab page
+ smb3 client: fix open hardlink on deferred close file error
+ string: Add load_unaligned_zeropad() code path to sized_strscpy()
+ tracing: Fix filter string testing
+ virtiofs: add filesystem context source name check
+ x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any 
unreleased standalone Zen5 microcode patches
+ x86/cpu/amd: Fix workaround for erratum 1054
+ x86/boot/sev: Avoid shared GHCB page for early memory acceptance
+ scsi: megaraid_sas: Block zero-length ATA VPD inquiry
+ scsi: ufs: exynos: Move UFS shareability value to drvdata
+ scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set
+ scsi: ufs: exynos: Ensure consistent phy reference counts
+ RDMA/cma: Fix workqueue crash in cma_netevent_work_handler
+ RAS/AMD/ATL: Include row[13] bit in row retirement
+ RAS/AMD/FMPM: Get masked address
+ platform/x86: amd: pmf: Fix STT limits
+ perf/x86/intel: Allow to update user space GPRs from PEBS records
+ perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
+ perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
+ perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
+ drm/repaper: fix integer overflows in repeat functions
+ drm/ast: Fix ast_dp connection status
+ drm/msm/dsi: Add check for devm_kstrdup()
+ drm/msm/a6xx: Fix stale rpmh votes from GPU
+ drm/amdgpu: Prefer shadow rom when available
+ drm/amd/display: prevent hang on link training fail
+ drm/amd: Handle being compiled without SI or CIK support better
+ drm/amd/display: Actually do immediate vblank disable
+ drm/amd/display: Increase vblank offdelay for PSR panels
+ drm/amd/pm: Prevent division by zero
+ drm/amd/pm/powerplay: Prevent division by zero
+ drm/amd/pm: Add zero RPM enabled OD setting support for SMU14.0.2
+ drm/amd/pm/smu11: Prevent division by zero
+ drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
+ drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
+ drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
+ drm/amdgpu/mes12: optimize MES pipe FW version fetching
+ drm/i915/vrr: Add vrr.vsync_{start, end} in vrr_params_changed
+ drm/xe: Use local fence in error path of xe_migrate_clear
+ drm/virtio: Don't attach GEM to a non-created context in gem_object_open()
+ drm/amd/display: Add HP Elitebook 645 to the quirk list for eDP on DP1
+ drm/amd/display: Protect FPU in dml2_validate()/dml21_validate()
+ drm/amd/display: Protect FPU in dml21_copy()
+ drm/amdgpu/mes11: optimize MES pipe FW version fetching
+ drm/amdgpu/dma_buf: fix page_link check
+ drm/nouveau: prime: fix ttm_bo_delayed_delete oops
+ drm/imagination: fix firmware memory leaks
+ drm/imagination: take paired job reference
+ drm/virtio: Fix missed dmabuf unpinning in error path of prepare_fb()
+ drm/sti: remove duplicate object names
+ drm/i915: Fix scanline_offset for LNL+ and BMG+
+ drm/xe: Fix an out-of-bounds shift when invalidating TLB
+ Revert "UBUNTU: SAUCE: drm/xe/bmg: Add one additional PCI ID"
+ drm/xe/bmg: Add one additional PCI ID
+ drm/i915/gvt: fix unterminated-string-initialization warning
+ drm/i915/xe2hpd: Identify the memory type for SKUs with GDDR + ECC
+ drm/i915/dp: Reject HBR3 when sink doesn't support TPS4
+ drm/amdgpu: immediately use GTT for new allocations
+ drm/amd/display: Do not enable Replay and PSR while VRR is on in 
amdgpu_dm_commit_planes()
+ drm/amd/display: Protect FPU in dml2_init()/dml21_init()
+ drm/amd/display: Add HP Probook 445 and 465 to the quirk list for eDP on DP1
+ drm/xe/dma_buf: stop relying on placement in unmap
+ drm/xe/userptr: fix notifier vs folio deadlock
+ drm/xe: Set LRC addresses before guc load
+ drm/i915/display: Add macro for checking 3 DSC engines
+ drm/i915/dp: Check for HAS_DSC_3ENGINES while configuring DSC slices
+ drm/amd/display/dml2: use vzalloc rather than kzalloc
+ drm/amdgpu: fix warning of drm_mm_clean
+ drm/mgag200: Fix value in <VBLKSTR> register
+ io_uring: don't post tag CQEs on file/buffer registration failure
+ arm64/sysreg: Update register fields for ID_AA64MMFR0_EL1
+ arm64/sysreg: Add register fields for HDFGRTR2_EL2
+ arm64/sysreg: Add register fields for HDFGWTR2_EL2
+ arm64/sysreg: Add register fields for HFGITR2_EL2
+ arm64/sysreg: Add register fields for HFGRTR2_EL2
+ arm64/sysreg: Add register fields for HFGWTR2_EL2
+ arm64/boot: Enable EL2 requirements for FEAT_PMUv3p9
+ cpufreq: Reference count policy in cpufreq_update_limits()
+ scripts: generate_rust_analyzer: Add ffi crate
+ platform/x86: alienware-wmi-wmax: Add G-Mode support to Alienware m16 R1
+ platform/x86: alienware-wmi-wmax: Extend support to more laptops
+ platform/x86: msi-wmi-platform: Rename "data" variable
+ platform/x86: msi-wmi-platform: Workaround a ACPI firmware bug
+ drm/amd/display: Temporarily disable hostvm on DCN31
+ nvmet-fc: Remove unused functions
+ mm/vma: add give_up_on_oom option on modify/merge, use in uffd release
+ Revert "wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process"
+ MIPS: dec: Declare which_prom() as static
+ MIPS: cevt-ds1287: Add missing ds1287.h include
+ MIPS: ds1287: Match ds1287_set_base_clock() function types
+ wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
  Linux 6.14.4
- wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
- MIPS: ds1287: Match ds1287_set_base_clock() function types
- MIPS: cevt-ds1287: Add missing ds1287.h include
- MIPS: dec: Declare which_prom() as static
- Revert "wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process"
- mm/vma: add give_up_on_oom option on modify/merge, use in uffd release
- nvmet-fc: Remove unused functions
- drm/amd/display: Temporarily disable hostvm on DCN31
- platform/x86: msi-wmi-platform: Workaround a ACPI firmware bug
- platform/x86: msi-wmi-platform: Rename "data" variable
- platform/x86: alienware-wmi-wmax: Extend support to more laptops
- platform/x86: alienware-wmi-wmax: Add G-Mode support to Alienware m16 R1
- scripts: generate_rust_analyzer: Add ffi crate
- cpufreq: Reference count policy in cpufreq_update_limits()
- arm64/boot: Enable EL2 requirements for FEAT_PMUv3p9
- arm64/sysreg: Add register fields for HFGWTR2_EL2
- arm64/sysreg: Add register fields for HFGRTR2_EL2
- arm64/sysreg: Add register fields for HFGITR2_EL2
- arm64/sysreg: Add register fields for HDFGWTR2_EL2
- arm64/sysreg: Add register fields for HDFGRTR2_EL2
- arm64/sysreg: Update register fields for ID_AA64MMFR0_EL1
- io_uring: don't post tag CQEs on file/buffer registration failure
- drm/mgag200: Fix value in <VBLKSTR> register
- drm/amdgpu: fix warning of drm_mm_clean
- drm/amd/display/dml2: use vzalloc rather than kzalloc
- drm/i915/dp: Check for HAS_DSC_3ENGINES while configuring DSC slices
- drm/i915/display: Add macro for checking 3 DSC engines
- drm/xe: Set LRC addresses before guc load
- drm/xe/userptr: fix notifier vs folio deadlock
- drm/xe/dma_buf: stop relying on placement in unmap
- drm/amd/display: Add HP Probook 445 and 465 to the quirk list for eDP on DP1
- drm/amd/display: Protect FPU in dml2_init()/dml21_init()
- drm/amd/display: Do not enable Replay and PSR while VRR is on in 
amdgpu_dm_commit_planes()
- drm/amdgpu: immediately use GTT for new allocations
- drm/i915/dp: Reject HBR3 when sink doesn't support TPS4
- drm/i915/xe2hpd: Identify the memory type for SKUs with GDDR + ECC
- drm/i915/gvt: fix unterminated-string-initialization warning
- drm/xe/bmg: Add one additional PCI ID
- drm/xe: Fix an out-of-bounds shift when invalidating TLB
- drm/i915: Fix scanline_offset for LNL+ and BMG+
- drm/sti: remove duplicate object names
- drm/virtio: Fix missed dmabuf unpinning in error path of prepare_fb()
- drm/imagination: take paired job reference
- drm/imagination: fix firmware memory leaks
- drm/nouveau: prime: fix ttm_bo_delayed_delete oops
- drm/amdgpu/dma_buf: fix page_link check
- drm/amdgpu/mes11: optimize MES pipe FW version fetching
- drm/amd/display: Protect FPU in dml21_copy()
- drm/amd/display: Protect FPU in dml2_validate()/dml21_validate()
- drm/amd/display: Add HP Elitebook 645 to the quirk list for eDP on DP1
- drm/virtio: Don't attach GEM to a non-created context in gem_object_open()
- drm/xe: Use local fence in error path of xe_migrate_clear
- drm/i915/vrr: Add vrr.vsync_{start, end} in vrr_params_changed
- drm/amdgpu/mes12: optimize MES pipe FW version fetching
- drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
- drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
- drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
- drm/amd/pm/smu11: Prevent division by zero
- drm/amd/pm: Add zero RPM enabled OD setting support for SMU14.0.2
- drm/amd/pm/powerplay: Prevent division by zero
- drm/amd/pm: Prevent division by zero
- drm/amd/display: Increase vblank offdelay for PSR panels
- drm/amd/display: Actually do immediate vblank disable
- drm/amd: Handle being compiled without SI or CIK support better
- drm/amd/display: prevent hang on link training fail
- drm/amdgpu: Prefer shadow rom when available
- drm/msm/a6xx: Fix stale rpmh votes from GPU
- drm/msm/dsi: Add check for devm_kstrdup()
- drm/ast: Fix ast_dp connection status
- drm/repaper: fix integer overflows in repeat functions
- perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
- perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
- perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
- perf/x86/intel: Allow to update user space GPRs from PEBS records
- platform/x86: amd: pmf: Fix STT limits
- RAS/AMD/FMPM: Get masked address
- RAS/AMD/ATL: Include row[13] bit in row retirement
- RDMA/cma: Fix workqueue crash in cma_netevent_work_handler
- scsi: ufs: exynos: Ensure consistent phy reference counts
- scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set
- scsi: ufs: exynos: Move UFS shareability value to drvdata
- scsi: megaraid_sas: Block zero-length ATA VPD inquiry
- x86/boot/sev: Avoid shared GHCB page for early memory acceptance
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any 
unreleased standalone Zen5 microcode patches
- virtiofs: add filesystem context source name check
- tracing: Fix filter string testing
- string: Add load_unaligned_zeropad() code path to sized_strscpy()
- smb3 client: fix open hardlink on deferred close file error
- slab: ensure slab->obj_exts is clear in a newly allocated slab page
- selftests/mm: generate a temporary mountpoint for cgroup filesystem
- riscv: Avoid fortify warning in syscall_get_arguments()
- Revert "smb: client: fix TCP timers deadlock after rmmod"
- Revert "smb: client: Fix netns refcount imbalance causing leaks and 
use-after-free"
- ksmbd: fix the warning from __kernel_write_iter
- ksmbd: Prevent integer overflow in calculation of deadtime
- ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- ksmbd: fix use-after-free in __smb2_lease_break_noti()
- ksmbd: Fix dangling pointer in krb_authenticate
- ovl: don't allow datadir only
- mm: fix apply_to_existing_page_range()
- mm: fix filemap_get_folios_contig returning batches of identical folios
- mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
- mm/compaction: fix bug in hugetlb handling pathway
- loop: LOOP_SET_FD: send uevents for partitions
- loop: properly send KOBJ_CHANGED uevent for disk device
- lib/iov_iter: fix to increase non slab folio refcount
- isofs: Prevent the use of too small fid
- i2c: cros-ec-tunnel: defer probe if parent EC is not present
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- crypto: caam/qi - Fix drv_ctx refcount bug
- cpufreq/sched: Explicitly synchronize limits_changed flag handling
- btrfs: correctly escape subvol in btrfs_show_options()
- btrfs: ioctl: don't free iov when btrfs_encoded_read() returns -EAGAIN
- Bluetooth: vhci: Avoid needless snprintf() calls
- Bluetooth: l2cap: Process valid commands in too long frame
- drm/msm/a6xx+: Don't let IB_SIZE overflow
- ftrace: fix incorrect hash size in register_ftrace_direct()
- eventpoll: Set epoll timeout if it's in the future
- eventpoll: abstract out ep_try_send_events() helper
- i2c: atr: Fix wrong include
- nfsd: decrease sc_count directly if fail to queue dl_recall
- nfs: add missing selections of CONFIG_CRC32
- dma-buf/sw_sync: Decrement refcount on error in sw_sync_ioctl_get_deadline()
- drm/msm/dpu: drop rogue intr_tear_rd_ptr values
- drm/msm/dpu: Fix error pointers in dpu_plane_virtual_atomic_check
- drm/v3d: Fix Indirect Dispatch configuration for V3D 7.1.6 and later
- block: integrity: Do not call set_page_dirty_lock()
- asus-laptop: Fix an uninitialized variable
- alloc_tag: handle incomplete bulk allocations in vm_module_tags_populate
- accel/ivpu: Fix the NPU's DPU frequency calculation
- ASoC: qcom: Fix sc7280 lpass potential buffer overflow
- ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S16
- ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
- ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
- ASoC: fsl: fsl_qmc_audio: Reset audio data pointers on TRIGGER_START event
- Revert "PCI: Avoid reset when disabled via sysfs"
- writeback: fix false warning in inode_to_wb()
- rust: kbuild: use `pound` to support GNU Make < 4.3
- rust: kbuild: Don't export __pfx symbols
- rust: disable `clippy::needless_continue`
- rust: kasan/kbuild: fix missing flags on first build
- rust: helpers: Remove volatile qualifier from io helpers
- objtool/rust: add one more `noreturn` Rust function for Rust 1.86.0
- cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
- riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
- riscv: KGDB: Do not inline arch_kgdb_breakpoint()
- thermal: intel: int340x: Fix Panther Lake DLVR support
- kunit: qemu_configs: SH: Respect kunit cmdline
- riscv: module: Allocate PLT entries for R_RISCV_PLT32
- riscv: module: Fix out-of-bounds relocation access
- riscv: Properly export reserved regions in /proc/iomem
- riscv: Use kvmalloc_array on relocation_hashtable
- net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings
- net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for 
100Mbps
- net: ethernet: mtk_eth_soc: reapply mdc divider on reset
- net: ti: icss-iep: Fix possible NULL pointer dereference for perout request
- net: ti: icss-iep: Add phase offset configuration for perout signal
- net: ti: icss-iep: Add pwidth configuration for perout signal
- netfilter: conntrack: fix erronous removal of offload bit
- ptp: ocp: fix start time alignment in ptp_ocp_signal_set
- net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails
- net: dsa: free routing table on probe failure
- net: dsa: clean up FDB, MDB, VLAN entries on unbind
- net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported
- net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never 
registered
- net: txgbe: fix memory leak in txgbe_probe() error path
- net: bridge: switchdev: do not notify new brentries as changed
- net: b53: enable BPDU reception for management port
- netlink: specs: rt-neigh: prefix struct nfmsg members with ndm
- netlink: specs: rt-link: adjust mctp attribute naming
- netlink: specs: rtnetlink: attribute naming corrections
- netlink: specs: rt-link: add an attr layer around alt-ifname
- cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
- ata: libata-sata: Save all fields from sense data descriptor
- nvmet: pci-epf: clear CC and CSTS when disabling the controller
- nvmet: pci-epf: always fully initialize completion entries
- loop: stop using vfs_iter_{read,write} for buffered I/O
- loop: aio inherit the ioprio of original request
- eth: bnxt: fix missing ring index trim on error path
- net: ethernet: ti: am65-cpsw: fix port_np reference counting
- octeontx2-pf: handle otx2_mbox_get_rsp errors
- net: ngbe: fix memory leak in ngbe_probe() error path
- can: rockchip_canfd: fix broken quirks checks
- net: openvswitch: fix nested key length validation in the set() action
- netlink: specs: ovs_vport: align with C codegen capabilities
- block: fix resource leak in blk_register_queue() error path
- net: hibmcge: fix not restore rx pause mac addr after reset issue
- net: hibmcge: fix wrong mtu log issue
- net: hibmcge: fix incorrect multicast filtering issue
- net: hibmcge: fix incorrect pause frame statistics issue
- net: mctp: Set SOCK_RCU_FREE
- ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll()
- pds_core: fix memory leak in pdsc_debugfs_add_qcq()
- selftests: mincore: fix tmpfs mincore test failure
- test suite: use %zu to print size_t
- smc: Fix lockdep false-positive for IPPROTO_SMC.
- dt-bindings: soc: fsl: fsl,ls1028a-reset: Fix maintainer entry
- perf tools: Remove evsel__handle_error_quirks()
- igc: add lock preventing multiple simultaneous PTM transactions
- igc: cleanup PTP module if probe fails
- igc: handle the IGC_PTP_ENABLED flag correctly
- igc: move ktime snapshot into PTM retry loop
- igc: increase wait time before retrying PTM
- igc: fix PTM cycle trigger logic
- Revert "wifi: mac80211: Update skb's control block key in 
ieee80211_tx_dequeue()"
- wifi: iwlwifi: pcie: set state to no-FW before reset handshake
- mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show()
- xen: fix multicall debug feature
- ipv6: add exception routes to GC list in rt6_insert_exception
- RDMA/bnxt_re: Remove unusable nq variable
- Bluetooth: l2cap: Check encryption key size on incoming connection
- Bluetooth: qca: fix NV variant for one of WCN3950 SoCs
- Bluetooth: btrtl: Prevent potential NULL dereference
- Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
- firmware: cs_dsp: test_bin_error: Fix uninitialized data used as fw version
- RDMA/core: Silence oversized kvmalloc() warning
- ASoC: cs42l43: Reset clamp override on jack removal
- ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
- ALSA: hda/cirrus_scodec_test: Don't select dependencies
- RDMA/hns: Fix wrong maximum DMA segment size
- RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
- RDMA/bnxt_re: Fix budget handling of notification queue
- ovl: remove unused forward declaration
- crypto: tegra - Fix IV usage for AES ECB
- ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()
- ASoC: dwc: always enable/disable i2s irqs
- md/md-bitmap: fix stats collection for external bitmaps
- md/raid10: fix missing discard IO accounting
- scsi: smartpqi: Use is_kdump_kernel() to check for kdump
- scsi: iscsi: Fix missing scsi_host_put() in error path
- wifi: wl1251: fix memory leak in wl1251_tx_work
- wifi: brcmfmac: fix memory leak in brcmf_get_module_param
- wifi: mac80211: Purge vif txq in ieee80211_do_stop()
- wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
- wifi: at76c50x: fix use after free access in at76_disconnect
- scsi: hisi_sas: Enable force phy when SATA disk directly connected
+ UBUNTU: Upstream stable to v6.14.4

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2109367

Title:
  Plucky update: v6.14.4 upstream stable release

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Plucky:
  In Progress

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v6.14.4 upstream stable release
         from git://git.kernel.org/

  scsi: hisi_sas: Enable force phy when SATA disk directly connected
  wifi: at76c50x: fix use after free access in at76_disconnect
  wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
  wifi: mac80211: Purge vif txq in ieee80211_do_stop()
  wifi: brcmfmac: fix memory leak in brcmf_get_module_param
  wifi: wl1251: fix memory leak in wl1251_tx_work
  scsi: iscsi: Fix missing scsi_host_put() in error path
  scsi: smartpqi: Use is_kdump_kernel() to check for kdump
  md/raid10: fix missing discard IO accounting
  md/md-bitmap: fix stats collection for external bitmaps
  ASoC: dwc: always enable/disable i2s irqs
  ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()
  crypto: tegra - Fix IV usage for AES ECB
  ovl: remove unused forward declaration
  RDMA/bnxt_re: Fix budget handling of notification queue
  RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
  RDMA/hns: Fix wrong maximum DMA segment size
  ALSA: hda/cirrus_scodec_test: Don't select dependencies
  ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
  ASoC: cs42l43: Reset clamp override on jack removal
  RDMA/core: Silence oversized kvmalloc() warning
  firmware: cs_dsp: test_bin_error: Fix uninitialized data used as fw version
  Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
  Bluetooth: btrtl: Prevent potential NULL dereference
  Bluetooth: qca: fix NV variant for one of WCN3950 SoCs
  Bluetooth: l2cap: Check encryption key size on incoming connection
  RDMA/bnxt_re: Remove unusable nq variable
  ipv6: add exception routes to GC list in rt6_insert_exception
  xen: fix multicall debug feature
  mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show()
  wifi: iwlwifi: pcie: set state to no-FW before reset handshake
  Revert "wifi: mac80211: Update skb's control block key in 
ieee80211_tx_dequeue()"
  igc: fix PTM cycle trigger logic
  igc: increase wait time before retrying PTM
  igc: move ktime snapshot into PTM retry loop
  igc: handle the IGC_PTP_ENABLED flag correctly
  igc: cleanup PTP module if probe fails
  igc: add lock preventing multiple simultaneous PTM transactions
  perf tools: Remove evsel__handle_error_quirks()
  dt-bindings: soc: fsl: fsl,ls1028a-reset: Fix maintainer entry
  smc: Fix lockdep false-positive for IPPROTO_SMC.
  test suite: use %zu to print size_t
  selftests: mincore: fix tmpfs mincore test failure
  pds_core: fix memory leak in pdsc_debugfs_add_qcq()
  ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll()
  net: mctp: Set SOCK_RCU_FREE
  net: hibmcge: fix incorrect pause frame statistics issue
  net: hibmcge: fix incorrect multicast filtering issue
  net: hibmcge: fix wrong mtu log issue
  net: hibmcge: fix not restore rx pause mac addr after reset issue
  block: fix resource leak in blk_register_queue() error path
  netlink: specs: ovs_vport: align with C codegen capabilities
  net: openvswitch: fix nested key length validation in the set() action
  can: rockchip_canfd: fix broken quirks checks
  net: ngbe: fix memory leak in ngbe_probe() error path
  octeontx2-pf: handle otx2_mbox_get_rsp errors
  net: ethernet: ti: am65-cpsw: fix port_np reference counting
  eth: bnxt: fix missing ring index trim on error path
  loop: aio inherit the ioprio of original request
  loop: stop using vfs_iter_{read,write} for buffered I/O
  nvmet: pci-epf: always fully initialize completion entries
  nvmet: pci-epf: clear CC and CSTS when disabling the controller
  ata: libata-sata: Save all fields from sense data descriptor
  cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
  netlink: specs: rt-link: add an attr layer around alt-ifname
  netlink: specs: rtnetlink: attribute naming corrections
  netlink: specs: rt-link: adjust mctp attribute naming
  netlink: specs: rt-neigh: prefix struct nfmsg members with ndm
  net: b53: enable BPDU reception for management port
  net: bridge: switchdev: do not notify new brentries as changed
  net: txgbe: fix memory leak in txgbe_probe() error path
  net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never 
registered
  net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported
  net: dsa: clean up FDB, MDB, VLAN entries on unbind
  net: dsa: free routing table on probe failure
  net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails
  ptp: ocp: fix start time alignment in ptp_ocp_signal_set
  netfilter: conntrack: fix erronous removal of offload bit
  net: ti: icss-iep: Add pwidth configuration for perout signal
  net: ti: icss-iep: Add phase offset configuration for perout signal
  net: ti: icss-iep: Fix possible NULL pointer dereference for perout request
  net: ethernet: mtk_eth_soc: reapply mdc divider on reset
  net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for 
100Mbps
  net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings
  riscv: Use kvmalloc_array on relocation_hashtable
  riscv: Properly export reserved regions in /proc/iomem
  riscv: module: Fix out-of-bounds relocation access
  riscv: module: Allocate PLT entries for R_RISCV_PLT32
  kunit: qemu_configs: SH: Respect kunit cmdline
  thermal: intel: int340x: Fix Panther Lake DLVR support
  riscv: KGDB: Do not inline arch_kgdb_breakpoint()
  riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
  cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
  objtool/rust: add one more `noreturn` Rust function for Rust 1.86.0
  rust: helpers: Remove volatile qualifier from io helpers
  rust: kasan/kbuild: fix missing flags on first build
  rust: disable `clippy::needless_continue`
  rust: kbuild: Don't export __pfx symbols
  rust: kbuild: use `pound` to support GNU Make < 4.3
  writeback: fix false warning in inode_to_wb()
  Revert "PCI: Avoid reset when disabled via sysfs"
  ASoC: fsl: fsl_qmc_audio: Reset audio data pointers on TRIGGER_START event
  ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
  ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
  ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S16
  ASoC: qcom: Fix sc7280 lpass potential buffer overflow
  accel/ivpu: Fix the NPU's DPU frequency calculation
  alloc_tag: handle incomplete bulk allocations in vm_module_tags_populate
  asus-laptop: Fix an uninitialized variable
  block: integrity: Do not call set_page_dirty_lock()
  drm/v3d: Fix Indirect Dispatch configuration for V3D 7.1.6 and later
  drm/msm/dpu: Fix error pointers in dpu_plane_virtual_atomic_check
  drm/msm/dpu: drop rogue intr_tear_rd_ptr values
  dma-buf/sw_sync: Decrement refcount on error in sw_sync_ioctl_get_deadline()
  nfs: add missing selections of CONFIG_CRC32
  nfsd: decrease sc_count directly if fail to queue dl_recall
  i2c: atr: Fix wrong include
  eventpoll: abstract out ep_try_send_events() helper
  eventpoll: Set epoll timeout if it's in the future
  ftrace: fix incorrect hash size in register_ftrace_direct()
  drm/msm/a6xx+: Don't let IB_SIZE overflow
  Bluetooth: l2cap: Process valid commands in too long frame
  Bluetooth: vhci: Avoid needless snprintf() calls
  btrfs: ioctl: don't free iov when btrfs_encoded_read() returns -EAGAIN
  btrfs: correctly escape subvol in btrfs_show_options()
  cpufreq/sched: Explicitly synchronize limits_changed flag handling
  crypto: caam/qi - Fix drv_ctx refcount bug
  hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
  i2c: cros-ec-tunnel: defer probe if parent EC is not present
  isofs: Prevent the use of too small fid
  lib/iov_iter: fix to increase non slab folio refcount
  loop: properly send KOBJ_CHANGED uevent for disk device
  loop: LOOP_SET_FD: send uevents for partitions
  mm/compaction: fix bug in hugetlb handling pathway
  mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
  mm: fix filemap_get_folios_contig returning batches of identical folios
  mm: fix apply_to_existing_page_range()
  ovl: don't allow datadir only
  ksmbd: Fix dangling pointer in krb_authenticate
  ksmbd: fix use-after-free in __smb2_lease_break_noti()
  ksmbd: fix use-after-free in smb_break_all_levII_oplock()
  ksmbd: Prevent integer overflow in calculation of deadtime
  ksmbd: fix the warning from __kernel_write_iter
  Revert "smb: client: Fix netns refcount imbalance causing leaks and 
use-after-free"
  Revert "smb: client: fix TCP timers deadlock after rmmod"
  riscv: Avoid fortify warning in syscall_get_arguments()
  selftests/mm: generate a temporary mountpoint for cgroup filesystem
  slab: ensure slab->obj_exts is clear in a newly allocated slab page
  smb3 client: fix open hardlink on deferred close file error
  string: Add load_unaligned_zeropad() code path to sized_strscpy()
  tracing: Fix filter string testing
  virtiofs: add filesystem context source name check
  x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any 
unreleased standalone Zen5 microcode patches
  x86/cpu/amd: Fix workaround for erratum 1054
  x86/boot/sev: Avoid shared GHCB page for early memory acceptance
  scsi: megaraid_sas: Block zero-length ATA VPD inquiry
  scsi: ufs: exynos: Move UFS shareability value to drvdata
  scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set
  scsi: ufs: exynos: Ensure consistent phy reference counts
  RDMA/cma: Fix workqueue crash in cma_netevent_work_handler
  RAS/AMD/ATL: Include row[13] bit in row retirement
  RAS/AMD/FMPM: Get masked address
  platform/x86: amd: pmf: Fix STT limits
  perf/x86/intel: Allow to update user space GPRs from PEBS records
  perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
  perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
  perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
  drm/repaper: fix integer overflows in repeat functions
  drm/ast: Fix ast_dp connection status
  drm/msm/dsi: Add check for devm_kstrdup()
  drm/msm/a6xx: Fix stale rpmh votes from GPU
  drm/amdgpu: Prefer shadow rom when available
  drm/amd/display: prevent hang on link training fail
  drm/amd: Handle being compiled without SI or CIK support better
  drm/amd/display: Actually do immediate vblank disable
  drm/amd/display: Increase vblank offdelay for PSR panels
  drm/amd/pm: Prevent division by zero
  drm/amd/pm/powerplay: Prevent division by zero
  drm/amd/pm: Add zero RPM enabled OD setting support for SMU14.0.2
  drm/amd/pm/smu11: Prevent division by zero
  drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
  drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
  drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
  drm/amdgpu/mes12: optimize MES pipe FW version fetching
  drm/i915/vrr: Add vrr.vsync_{start, end} in vrr_params_changed
  drm/xe: Use local fence in error path of xe_migrate_clear
  drm/virtio: Don't attach GEM to a non-created context in gem_object_open()
  drm/amd/display: Add HP Elitebook 645 to the quirk list for eDP on DP1
  drm/amd/display: Protect FPU in dml2_validate()/dml21_validate()
  drm/amd/display: Protect FPU in dml21_copy()
  drm/amdgpu/mes11: optimize MES pipe FW version fetching
  drm/amdgpu/dma_buf: fix page_link check
  drm/nouveau: prime: fix ttm_bo_delayed_delete oops
  drm/imagination: fix firmware memory leaks
  drm/imagination: take paired job reference
  drm/virtio: Fix missed dmabuf unpinning in error path of prepare_fb()
  drm/sti: remove duplicate object names
  drm/i915: Fix scanline_offset for LNL+ and BMG+
  drm/xe: Fix an out-of-bounds shift when invalidating TLB
  Revert "UBUNTU: SAUCE: drm/xe/bmg: Add one additional PCI ID"
  drm/xe/bmg: Add one additional PCI ID
  drm/i915/gvt: fix unterminated-string-initialization warning
  drm/i915/xe2hpd: Identify the memory type for SKUs with GDDR + ECC
  drm/i915/dp: Reject HBR3 when sink doesn't support TPS4
  drm/amdgpu: immediately use GTT for new allocations
  drm/amd/display: Do not enable Replay and PSR while VRR is on in 
amdgpu_dm_commit_planes()
  drm/amd/display: Protect FPU in dml2_init()/dml21_init()
  drm/amd/display: Add HP Probook 445 and 465 to the quirk list for eDP on DP1
  drm/xe/dma_buf: stop relying on placement in unmap
  drm/xe/userptr: fix notifier vs folio deadlock
  drm/xe: Set LRC addresses before guc load
  drm/i915/display: Add macro for checking 3 DSC engines
  drm/i915/dp: Check for HAS_DSC_3ENGINES while configuring DSC slices
  drm/amd/display/dml2: use vzalloc rather than kzalloc
  drm/amdgpu: fix warning of drm_mm_clean
  drm/mgag200: Fix value in <VBLKSTR> register
  io_uring: don't post tag CQEs on file/buffer registration failure
  arm64/sysreg: Update register fields for ID_AA64MMFR0_EL1
  arm64/sysreg: Add register fields for HDFGRTR2_EL2
  arm64/sysreg: Add register fields for HDFGWTR2_EL2
  arm64/sysreg: Add register fields for HFGITR2_EL2
  arm64/sysreg: Add register fields for HFGRTR2_EL2
  arm64/sysreg: Add register fields for HFGWTR2_EL2
  arm64/boot: Enable EL2 requirements for FEAT_PMUv3p9
  cpufreq: Reference count policy in cpufreq_update_limits()
  scripts: generate_rust_analyzer: Add ffi crate
  platform/x86: alienware-wmi-wmax: Add G-Mode support to Alienware m16 R1
  platform/x86: alienware-wmi-wmax: Extend support to more laptops
  platform/x86: msi-wmi-platform: Rename "data" variable
  platform/x86: msi-wmi-platform: Workaround a ACPI firmware bug
  drm/amd/display: Temporarily disable hostvm on DCN31
  nvmet-fc: Remove unused functions
  mm/vma: add give_up_on_oom option on modify/merge, use in uffd release
  Revert "wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process"
  MIPS: dec: Declare which_prom() as static
  MIPS: cevt-ds1287: Add missing ds1287.h include
  MIPS: ds1287: Match ds1287_set_base_clock() function types
  wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
  Linux 6.14.4
  UBUNTU: Upstream stable to v6.14.4

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2109367/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to