Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-05-29
Ported from the following upstream stable releases:
v6.6.76, v6.12.13
from git://git.kernel.org/
powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active
dlm: fix srcu_read_lock() return type to int
afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY
afs: Fix directory format encoding struct
afs: Fix cleanup of immediately failed async calls
fs: fix proc_handler for sysctl_nr_open
block: retry call probe after request_module in blk_request_module
nbd: don't allow reconnect after disconnect
pstore/blk: trivial typo fixes
nvme: Add error check for xa_store in nvme_get_effects_log
selftests/powerpc: Fix argument order to timer_sub()
nvme: Add error path for xa_store in nvme_init_effects
partitions: ldm: remove the initial kernel-doc notation
select: Fix unbalanced user_access_end()
nvme: fix bogus kzalloc() return check in nvme_init_effects_log()
afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call
perf/core: Save raw sample data conditionally based on sample type
sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat
x86/cpu: Enable SD_ASYM_PACKING for PKG domain on AMD
x86/topology: Use x86_sched_itmt_flags for PKG domain unconditionally
drm/msm/dp: set safe_to_exit_level before printing it
drm/etnaviv: Fix page property being used for non writecombine buffers
HID: core: Fix assumption that Resolution Multipliers must be in Logical
Collections
drm/amd/pm: Fix an error handling path in
vega10_enable_se_edc_force_stall_config()
drm/amdgpu: Fix potential NULL pointer dereference in
atomctrl_get_smc_sclk_range_table
drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset
drm/rockchip: vop2: Fix the mixer alpha setup for layer 0
drm/rockchip: vop2: Fix the windows switch between different layers
drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8
drm/rockchip: vop2: include rockchip_drm_drv.h
OPP: add index check to assert to avoid buffer overflow in _read_freq()
OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
drm/msm/dpu: link DSPP_2/_3 blocks on SM8150
drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X
drm/msm/dpu: link DSPP_2/_3 blocks on SM8250
drm/msm/dpu: link DSPP_2/_3 blocks on SM8350
drm/msm/dpu: link DSPP_2/_3 blocks on SM8550
drm/msm: Check return value of of_dma_configure()
drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE
drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini()
genirq: Make handle_enforce_irqctx() unconditionally available
ipmi: ipmb: Add check devm_kasprintf() returned value
wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855
wifi: rtlwifi: do not complete firmware loading needlessly
wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step
wifi: rtlwifi: wait for firmware loading before releasing memory
wifi: rtlwifi: fix init_sw_vars leak when probe fails
wifi: rtlwifi: usb: fix workqueue leak when probe fails
wifi: wcn36xx: fix channel survey memory allocation size
net_sched: sch_sfq: annotate data-races around q->perturb_period
net_sched: sch_sfq: handle bigger packets
net_sched: sch_sfq: don't allow 1 packet limit
spi: zynq-qspi: Add check for clk_enable()
rxrpc: Fix handling of received connection abort
dt-bindings: mmc: controller: clarify the address-cells description
of: remove internal arguments from of_property_for_each_u32()
clk: fix an OF node reference leak in of_clk_get_parent_name()
dt-bindings: leds: class-multicolor: Fix path to color definitions
wifi: rtlwifi: remove unused check_buddy_priv
wifi: rtlwifi: destroy workqueue at rtl_deinit_core
wifi: rtlwifi: fix memory leaks and invalid access at probe error path
wifi: rtlwifi: pci: wait for firmware loading before releasing memory
HID: multitouch: fix support for Goodix PID 0x01e9
regulator: dt-bindings: mt6315: Drop regulator-compatible property
wifi: brcmfmac: add missing header include for brcmf_dbg
ACPI: fan: cleanup resources in the error path of .probe()
cpupower: fix TSC MHz calculation
dt-bindings: mfd: bd71815: Fix rsense and typos
leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata()
inetpeer: remove create argument of inet_getpeer_v[46]()
inetpeer: remove create argument of inet_getpeer()
inetpeer: update inetpeer timestamp in inet_getpeer()
inetpeer: do not get a refcount in inet_getpeer()
pwm: stm32-lp: Add check for clk_enable()
cpufreq: schedutil: Fix superfluous updates caused by need_freq_update
gpio: pca953x: log an error when failing to get the reset GPIO
cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ is not
available
cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq* clocks
clk: imx8mp: Fix clkout1/2 support
team: prevent adding a device which is already a team device lower
dt-bindings: clock: sunxi: Export PLL_VIDEO_2X and PLL_MIPI
clk: sunxi-ng: a64: drop redundant CLK_PLL_VIDEO0_2X and CLK_PLL_MIPI
clk: sunxi-ng: a64: stop force-selecting PLL-MIPI as TCON0 parent
regulator: of: Implement the unwind path of of_regulator_match()
ax25: rcu protect dev->ax25_ptr
OPP: OF: Fix an OF node leak in _opp_add_static_v2()
ipmi: ssif_bmc: Fix new request loss when bmc ready for a response
wifi: ath12k: fix tx power, max reg power update to firmware
clk: qcom: gcc-sdm845: Do not use shared clk_ops for QUPs
HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint
check
HID: fix generic desktop D-Pad controls
leds: cht-wcove: Use devm_led_classdev_register() to avoid memory leak
mfd: syscon: Remove extern from function prototypes
mfd: syscon: Add of_syscon_register_regmap() API
mfd: syscon: Use scoped variables with memory allocators to simplify error paths
mfd: syscon: Fix race in device_node_get_regmap()
samples/landlock: Fix possible NULL dereference in parse_path()
wifi: wlcore: fix unbalanced pm_runtime calls
wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC
wifi: mac80211: prohibit deactivating all links
wifi: mac80211: fix tid removal during mesh forwarding
wifi: mac80211: Fix common size calculation for ML element
wifi: mac80211: don't flush non-uploaded STAs
net/smc: fix data error when recvmsg with MSG_PEEK flag
landlock: Handle weird files
wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO
wifi: mt76: mt7921: fix using incorrect group cipher after disconnection.
wifi: mt76: mt7915: fix overflows seen when writing limit attributes
wifi: mt76: mt7996: fix rx filter setting for bfee functionality
wifi: mt76: mt7915: firmware restart on devices with a second pcie link
wifi: mt76: connac: move mt7615_mcu_del_wtbl_all to connac
wifi: mt76: mt7915: improve hardware restart reliability
wifi: mt76: mt7915: fix omac index assignment after hardware reset
wifi: mt76: mt7915: fix register mapping
wifi: mt76: mt7996: fix register mapping
wifi: mt76: mt7996: add max mpdu len capability
wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU
wifi: mt76: mt7996: fix HE Phy capability
wifi: mt76: mt7996: fix incorrect indexing of MIB FW event
wifi: mt76: mt7996: fix ldpc setting
cpufreq: ACPI: Fix max-frequency computation
selftests: timers: clocksource-switch: Adapt progress to kselftest framework
selftests: harness: fix printing of mismatch values in __EXPECT()
wifi: cfg80211: adjust allocation of colocated AP data
inet: ipmr: fix data-races
clk: analogbits: Fix incorrect calculation of vco rate delta
pwm: stm32: Add check for clk_enable()
selftests/landlock: Fix error message
net: let net.core.dev_weight always be non-zero
net/mlxfw: Drop hard coded max FW flash image size
octeon_ep: remove firmware stats fetch in ndo_get_stats64
netfilter: nf_tables: fix set size with rbtree backend
netfilter: nft_flow_offload: update tcp state flags under lock
net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns()
tcp_cubic: fix incorrect HyStart round start detection
net/rose: prevent integer overflows in rose_setsockopt()
libbpf: don't adjust USDT semaphore address if .stapsdt.base addr is missing
tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind
libbpf: Fix segfault due to libelf functions not setting errno
ASoC: sun4i-spdif: Add clock multiplier settings
selftests/bpf: Fix fill_link_info selftest on powerpc
crypto: caam - use JobR's space to access page 0 regs
perf header: Fix one memory leakage in process_bpf_btf()
perf header: Fix one memory leakage in process_bpf_prog_info()
perf bpf: Fix two memory leakages when calling perf_env__insert_bpf_prog_info()
ASoC: renesas: rz-ssi: Use only the proper amount of dividers
perf expr: Initialize is_test value in expr__ctx_new()
ktest.pl: Remove unused declarations in run_bisect_test function
bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
crypto: hisilicon/sec2 - fix for aead icv error
crypto: hisilicon/sec2 - fix for aead invalid authsize
crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto()
ALSA: seq: remove redundant 'tristate' for SND_SEQ_UMP_CLIENT
ALSA: seq: Make dependency on UMP clearer
padata: fix sysfs store callback check
perf top: Don't complain about lack of vmlinux when not resolving some kernel
samples
perf machine: Don't ignore _etext when not a text symbol
perf namespaces: Introduce nsinfo__set_in_pidns()
perf namespaces: Fixup the nsinfo__in_pidns() return type, its bool
ASoC: Intel: avs: Prefix SKL/APL-specific members
ASoC: Intel: avs: Abstract IPC handling
ASoC: Intel: avs: Do not readq() u32 registers
ASoC: Intel: avs: Fix theoretical infinite loop
perf report: Fix misleading help message about --demangle
pinctrl: stm32: Add check for clk_enable()
pinctrl: amd: Take suspend type into consideration which pins are non-wake
bpf: Send signals asynchronously if !preemptible
bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write
ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31
laptop
perf lock: Fix parse_lock_type which only retrieve one lock flag
padata: fix UAF in padata_reorder
padata: add pd get/put refcnt helper
padata: avoid UAF for reorder_work
smb: client: fix oops due to unset link speed
cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM in
readdir.c
soc: atmel: fix device_node release in atmel_soc_device_init()
ARM: at91: pm: change BU Power Switch to automatic mode
arm64: dts: mediatek: mt8186: Move wakeup to MTU3 to get working suspend
arm64: dts: mt8183: set DMIC one-wire mode on Damu
arm64: dts: mediatek: mt8516: fix GICv2 range
arm64: dts: mediatek: mt8516: fix wdt irq type
arm64: dts: mediatek: mt8516: add i2c clock-div property
arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A
ARM: dts: stm32: Fix IPCC EXTI declaration on stm32mp151
RDMA/mlx4: Avoid false error about access to uninitialized gids array
rdma/cxgb4: Prevent potential integer overflow on 32bit
arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property
arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property
arm64: dts: mediatek: mt8192-asurada: Drop regulator-compatible property
arm64: dts: mediatek: mt8195-cherry: Drop regulator-compatible property
arm64: dts: mediatek: mt8195-demo: Drop regulator-compatible property
arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names
arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names
ARM: dts: aspeed: yosemite4: correct the compatible string of adm1272
ARM: dts: aspeed: yosemite4: Add required properties for IOE on fan boards
ARM: dts: aspeed: yosemite4: correct the compatible string for max31790
arm: dts: socfpga: use reset-name "stmmaceth-ocp" instead of "ahb"
RDMA/rxe: Improve newline in printing messages
RDMA/rxe: Fix mismatched max_msg_sz
arm64: dts: mediatek: mt8183: kenzo: Support second source touchscreen
arm64: dts: mediatek: mt8183: willow: Support second source touchscreen
RDMA/srp: Fix error handling in srp_add_port
arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie1
ARM: dts: stm32: Deduplicate serial aliases and chosen node for STM32MP15xx
DHCOM SoM
ARM: dts: stm32: Swap USART3 and UART8 alias on STM32MP15xx DHCOM SoM
memory: tegra20-emc: fix an OF node reference bug in
tegra_emc_find_node_by_ram_code()
arm64: dts: mediatek: mt8183-kukui-jacuzzi: Drop pp3300_panel voltage settings
arm64: dts: qcom: msm8996-xiaomi-gemini: Fix LP5562 LED1 reg property
arm64: dts: qcom: move common parts for sa8775p-ride variants into a .dtsi
arm64: dts: qcom: sa8775p: Update sleep_clk frequency
arm64: dts: qcom: msm8996: Fix up USB3 interrupts
arm64: dts: qcom: msm8994: Describe USB interrupts
arm64: dts: qcom: sm7225-fairphone-fp4: Drop extra qcom,msm-id value
arm64: dts: qcom: msm8916: correct sleep clock frequency
arm64: dts: qcom: msm8939: correct sleep clock frequency
arm64: dts: qcom: msm8994: correct sleep clock frequency
arm64: dts: qcom: qcs404: correct sleep clock frequency
arm64: dts: qcom: q[dr]u1000: correct sleep clock frequency
arm64: dts: qcom: qrb4210-rb2: correct sleep clock frequency
arm64: dts: qcom: sc7280: correct sleep clock frequency
arm64: dts: qcom: sdx75: correct sleep clock frequency
arm64: dts: qcom: sm4450: correct sleep clock frequency
arm64: dts: qcom: sm6125: correct sleep clock frequency
arm64: dts: qcom: sm6375: correct sleep clock frequency
arm64: dts: qcom: sm8250: correct sleep clock frequency
arm64: dts: qcom: sm8350: correct sleep clock frequency
arm64: dts: qcom: sm8450: correct sleep clock frequency
ARM: dts: microchip: sama5d27_wlsom1_ek: Add no-1-8-v property to sdmmc0 node
arm64: dts: ti: k3-am62: Remove duplicate GICR reg
arm64: dts: ti: k3-am62a: Remove duplicate GICR reg
arm64: dts: allwinner: a64: explicitly assign clock parent for TCON0
RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error
ARM: omap1: Fix up the Retu IRQ on Nokia 770
arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: Convert mezzanine riser
to dtso
arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: remove disabled ov7251
camera
arm64: dts: qcom: sc7180-trogdor-quackingstick: add missing avee-supply
arm64: dts: qcom: sc7180-*: Remove thermal zone polling delays
arm64: dts: qcom: sc7180-trogdor-pompom: rename 5v-choke thermal zone
arm64: dts: qcom: sc7180: change labels to lower-case
arm64: dts: qcom: sc7180: fix psci power domain node names
arm64: dts: qcom: sm8150-microsoft-surface-duo: fix typos in da7280 properties
arm64: dts: qcom: sc8280xp: Fix up remoteproc register space sizes
dts: arm64: mediatek: mt8195: Remove MT8183 compatible for OVL
arm64: dts: mediatek: add per-SoC compatibles for keypad nodes
arm64: dts: qcom: sdm845: Fix interrupt types of camss interrupts
arm64: dts: qcom: sm8250: Fix interrupt types of camss interrupts
ARM: dts: mediatek: mt7623: fix IR nodename
fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device()
arm64: tegra: Fix DMA ID for SPI2
i3c: dw: Add hot-join support.
i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition
RDMA/mlx5: Fix indirect mkey ODP page count
of: reserved-memory: Do not make kmemleak ignore freed address
efi: sysfb_efi: fix W=1 warnings when EFI is not set
RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"
spi: omap2-mcspi: Correctly handle devm_clk_get_optional() errors
media: rc: iguanair: handle timeouts
media: lmedm04: Handle errors for lme2510_int_read
PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy()
media: marvell: Add check for clk_enable()
media: i2c: imx290: Register 0x3011 varies between imx327 and imx290
media: i2c: imx412: Add missing newline to prints
media: i2c: ov9282: Correct the exposure offset
media: mipi-csis: Add check for clk_enable()
media: camif-core: Add check for clk_enable()
media: uvcvideo: Propagate buf->error to userspace
mtd: rawnand: brcmnand: fix status read of brcmnand_waitfunc
mtd: hyperbus: hbmc-am654: fix an OF node reference leak
media: nxp: imx8-isi: fix v4l2-compliance test errors
watchdog: rti_wdt: Fix an OF node leak in rti_wdt_probe()
staging: media: imx: fix OF node leak in imx_media_add_of_subdevs()
media: dvb-usb-v2: af9035: fix ISO C90 compilation error on
af9035_i2c_master_xfer
PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error
PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test
scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1
scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails
ocfs2: mark dquot as inactive if failed to start trans while releasing dquot
nilfs2: protect access to buffers with no active references
module: Extend the preempt disabled section in dereference_symbol_descriptor().
driver core: class: Fix wild pointer dereferences in API class_dev_iter_next()
serial: 8250: Adjust the timeout for FIFO mode
NFSv4.2: fix COPY_NOTIFY xdr buf size calculation
NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE
LoongArch: Fix warnings during S3 suspend
tools/bootconfig: Fix the wrong format specifier
xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO
dmaengine: ti: edma: fix OF node reference leaks in edma_driver
xfrm: delete intermediate secpath entry in packet offload mode
rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
rtc: loongson: clear TOY_MATCH0_REG in loongson_rtc_isr()
ubifs: skip dumping tnc tree when zroot is null
regulator: core: Add missing newline character
net: hns3: fix oops when unload drivers paralleling
gpio: mxc: remove dead code after switch to DT-only
net: fec: implement TSO descriptor cleanup
ipmr: do not call mr_mfc_uses_dev() for unres entries
PM: hibernate: Add error handling for syscore_suspend()
iavf: allow changing VLAN state without calling PF
net: rose: fix timer races against user threads
net: netdevsim: try to close UDP port harness races
vxlan: Fix uninit-value in vxlan_vnifilter_dump()
net: davicom: fix UAF in dm9000_drv_remove
ptp: Properly handle compat ioctls
net: stmmac: Limit the number of MTL queues to hardware capability
net: stmmac: Limit FIFO size by hardware capability
perf trace: Fix runtime error of index out of bounds
Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming
vsock: Allow retrying on connect() failure
bgmac: reduce max frame size to support just MTU 1500
tcp: correct handling of extreme memory squeeze
net: xdp: Disallow attaching device-bound programs in generic mode
net: sh_eth: Fix missing rtnl lock in suspend/resume path
genksyms: fix memory leak when the same symbol is added from source
genksyms: fix memory leak when the same symbol is read from *.symref file
RISC-V: Mark riscv_v_init() as __init
ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback
io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock()
cifs: Fix getting and setting SACLs over SMB1
kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST
kconfig: fix memory leak in sym_warn_unmet_dep()
hexagon: fix using plain integer as NULL pointer warning in cmpxchg
hexagon: Fix unbalanced spinlock in die()
f2fs: Introduce linear search for dentries
Revert "SUNRPC: Reduce thread wake-up rate when receiving large RPC messages"
kbuild: switch from lz4c to lz4 for compression
netfilter: nf_tables: reject mismatching sum of field_len with set key length
selftests/rseq: Fix handling of glibc without rseq support
ktest.pl: Check kernelrelease return in get_version
ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro
net: usb: rtl8150: enable basic endpoint checking
usb: xhci: Fix NULL pointer dereference on certain command aborts
usb: gadget: f_tcm: Fix Get/SetInterface return value
usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk()
usb: dwc3: core: Defer the probe until USB power supply ready
usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE
usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR PPS
mptcp: consolidate suboption status
mptcp: handle fastopen disconnect correctly
remoteproc: core: Fix ida_free call while not allocated
media: uvcvideo: Fix double free in error path
pps: Fix a use-after-free
usb: gadget: f_tcm: Don't free command immediately
staging: media: max96712: fix kernel oops when removing module
btrfs: output the reason for open_ctree() failure
s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
LoongArch: Change 8 to 14 for LOONGARCH_MAX_{BRP,WRP}
block: copy back bounce buffer to user-space correctly in case of split
nvme-tcp: Fix I/O queue cpu spreading for multiple controllers
powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
sched/fair: Untangle NEXT_BUDDY and pick_next_task()
sched: Fix race between yield_to() and try_to_wake_up()
drm/v3d: Fix performance counter source settings on V3D 7.x
drm/rockchip: vop2: fix rk3588 dp+dsi maxclk verification
drm/rockchip: vop2: Set AXI id for rk3588
drm/rockchip: vop2: Setup delay cycle for Esmart2/3
drm/rockchip: vop2: Add check for 32 bpp format for rk3588
drm/msm/dpu: provide DSPP and correct LM config for SDM670
drm/msm/dpu: link DSPP_2/_3 blocks on SM8650
drm/msm: don't clean up priv->kms prematurely
drm/msm/mdp4: correct LCDC regulator name
wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop
selftests/bpf: Actuate tx_metadata_len in xdp_hw_metadata
selftests: ktap_helpers: Fix uninitialized variable
ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
inet: constify inet_sk_bound_dev_eq() net parameter
inet: constify 'struct net' parameter of various lookup helpers
udp: constify 'struct net' parameter of socket lookups
inet6: constify 'struct net' parameter of various lookup helpers
ipv6: udp: constify 'struct net' parameter of socket lookups
udp: Deal with race between UDP socket address change and rehash
dt-bindings: clock: imx93: Drop IMX93_CLK_END macro definition
dt-bindings: clock: Add i.MX91 clock support
dt-bindings: clock: imx93: Add SPDIF IPG clk
clk: imx93: Move IMX93_CLK_END macro to clk driver
clk: imx: add i.MX91 clk
clk: imx93: Add IMX93_CLK_SPDIF_IPG clock
arm64: dts: imx93: Use IMX93_CLK_SPDIF_IPG as SPDIF IPG clock
clk: imx: Apply some clks only for i.MX93
wifi: rtw89: mcc: consider time limits not divisible by 1024
wifi: mt76: mt7925: fix off by one in mt7925_load_clc()
wifi: iwlwifi: cleanup uefi variables loading
wifi: iwlwifi: fw: read STEP table from correct UEFI var
wifi: mt76: mt7996: fix overflows seen when writing limit attributes
wifi: mt76: mt7996: fix definition of tx descriptor
Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name()
platform/mellanox: mlxbf-pmc: incorrect type in assignment
platform/x86: x86-android-tablets: make platform data be static
crypto: api - Fix boot-up self-test race
pinctrl: nomadik: Add check for clk_enable()
rhashtable: Fix potential deadlock by moving schedule_work outside lock
crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to 'async'
perf maps: Fix display of kernel symbols
perf MANIFEST: Add arch/*/include/uapi/asm/bpf_perf_event.h to the perf tarball
ALSA: hda: Fix compilation of snd_hdac_adsp_xxx() helpers
tools: Sync if_xdp.h uapi tooling header
rhashtable: Fix rhashtable_try_insert test
bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT
ARM: dts: imx7-tqma7: add missing vs-supply for LM75A (rev. 01xxx)
arm64: dts: renesas: rzg3s-smarc: Fix the debug serial alias
arm64: dts: mediatek: mt8395-genio-1200-evk: Drop regulator-compatible property
arm64: dts: qcom: sm8550: correct sleep clock frequency
arm64: dts: qcom: sm8650: correct sleep clock frequency
arm64: dts: qcom: x1e80100: correct sleep clock frequency
ARM: dts: microchip: sama5d29_curiosity: Add no-1-8-v property to sdmmc0 node
RDMA/hns: Clean up the legacy CONFIG_INFINIBAND_HNS
UBUNTU: [Config] updateconfigs for INFINIBAND_HNS
RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event
iommu: iommufd: fix WARNING in iommufd_device_unbind
iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
remoteproc: mtk_scp: Only populate devices for SCP cores
PCI: imx6: Deassert apps_reset in imx_pcie_deassert_core_reset()
PCI: dwc: Always stop link in the dw_pcie_suspend_noirq
PCI: microchip: Add support for using either Root Port 1 or 2
PCI: microchip: Set inbound address translation for coherent or non-coherent
mode
scsi: mpi3mr: Fix possible crash when setting up bsg fails
firewire: test: Fix potential null dereference in firewire kunit test
erofs: get rid of erofs_{find,insert}_workgroup
erofs: move erofs_workgroup operations into zdata.c
erofs: sunset `struct erofs_workgroup`
erofs: fix potential return value overflow of z_erofs_shrink_scan()
nilfs2: do not force clear folio if buffer is referenced
nilfs2: handle errors that nilfs_prepare_chunk() may return
tty: mips_ejtag_fdc: fix one more u8 warning
xfrm: Add support for per cpu xfrm state handling.
xfrm: Cache used outbound xfrm states at the policy.
xfrm: Add an inbound percpu state cache.
xfrm: state: fix out-of-bounds read during lookup
rtc: tps6594: Fix integer overflow on 32bit systems
xfrm: Don't disable preemption while looking up cache state.
idpf: add read memory barrier when checking descriptor done bit
idpf: convert workqueues to unbound
net/ncsi: use dev_set_mac_address() for Get MC MAC Address handling
tools: ynl: c: correct reverse decode of empty attrs
selftests: mptcp: extend CFLAGS to keep options from environment
selftests: net/{lib,openvswitch}: extend CFLAGS to keep options from environment
rxrpc, afs: Fix peer hash locking vs RCU callback
net: ethtool: only allow set_rxnfc with rss + ring_cookie if driver opts in
ethtool: Fix set RXNFC command with symmetric RSS hash
net: ravb: Fix missing rtnl lock in suspend/resume path
tools/power turbostat: Fix forked child affinity regression
md: add a new callback pers->bitmap_sector()
md/raid5: implement pers->bitmap_sector()
xfs: check for dead buffers in xfs_buf_find_insert
xfs: don't shut down the filesystem for media failures beyond end of log
usb: dwc3: Skip resume if pm_runtime_set_active() fails
clk: qcom: gcc-x1e80100: Do not turn off usb_2 controller GDSC
RDMA/mlx5: Fix implicit ODP use after free
xfrm: Add error handling when nla_put_u32() returns an error
xfrm: Fix acquire state insertion.
ethtool: Fix access to uninitialized fields in set RXNFC command
ASoC: da7213: Initialize the mutex
drm/amd/display: Add hubp cache reset when powergating
KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update()
btrfs: do proper folio cleanup when run_delalloc_nocow() failed
ethtool: ntuple: fix rss + ring_cookie check
UBUNTU: Upstream stable to v6.6.76, v6.12.13
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Noble)
Importance: Medium
Assignee: Manuel Diewald (diewald)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Noble)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Noble)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Noble)
Status: New => In Progress
** Changed in: linux (Ubuntu Noble)
Assignee: (unassigned) => Manuel Diewald (diewald)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-05-29
+
+ Ported from the following upstream stable releases:
+ v6.6.76, v6.12.13
+
from git://git.kernel.org/
+
+ powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active
+ dlm: fix srcu_read_lock() return type to int
+ afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY
+ afs: Fix directory format encoding struct
+ afs: Fix cleanup of immediately failed async calls
+ fs: fix proc_handler for sysctl_nr_open
+ block: retry call probe after request_module in blk_request_module
+ nbd: don't allow reconnect after disconnect
+ pstore/blk: trivial typo fixes
+ nvme: Add error check for xa_store in nvme_get_effects_log
+ selftests/powerpc: Fix argument order to timer_sub()
+ nvme: Add error path for xa_store in nvme_init_effects
+ partitions: ldm: remove the initial kernel-doc notation
+ select: Fix unbalanced user_access_end()
+ nvme: fix bogus kzalloc() return check in nvme_init_effects_log()
+ afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call
+ perf/core: Save raw sample data conditionally based on sample type
+ sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat
+ x86/cpu: Enable SD_ASYM_PACKING for PKG domain on AMD
+ x86/topology: Use x86_sched_itmt_flags for PKG domain unconditionally
+ drm/msm/dp: set safe_to_exit_level before printing it
+ drm/etnaviv: Fix page property being used for non writecombine buffers
+ HID: core: Fix assumption that Resolution Multipliers must be in Logical
Collections
+ drm/amd/pm: Fix an error handling path in
vega10_enable_se_edc_force_stall_config()
+ drm/amdgpu: Fix potential NULL pointer dereference in
atomctrl_get_smc_sclk_range_table
+ drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset
+ drm/rockchip: vop2: Fix the mixer alpha setup for layer 0
+ drm/rockchip: vop2: Fix the windows switch between different layers
+ drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8
+ drm/rockchip: vop2: include rockchip_drm_drv.h
+ OPP: add index check to assert to avoid buffer overflow in _read_freq()
+ OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
+ drm/msm/dpu: link DSPP_2/_3 blocks on SM8150
+ drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X
+ drm/msm/dpu: link DSPP_2/_3 blocks on SM8250
+ drm/msm/dpu: link DSPP_2/_3 blocks on SM8350
+ drm/msm/dpu: link DSPP_2/_3 blocks on SM8550
+ drm/msm: Check return value of of_dma_configure()
+ drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE
+ drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini()
+ genirq: Make handle_enforce_irqctx() unconditionally available
+ ipmi: ipmb: Add check devm_kasprintf() returned value
+ wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855
+ wifi: rtlwifi: do not complete firmware loading needlessly
+ wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step
+ wifi: rtlwifi: wait for firmware loading before releasing memory
+ wifi: rtlwifi: fix init_sw_vars leak when probe fails
+ wifi: rtlwifi: usb: fix workqueue leak when probe fails
+ wifi: wcn36xx: fix channel survey memory allocation size
+ net_sched: sch_sfq: annotate data-races around q->perturb_period
+ net_sched: sch_sfq: handle bigger packets
+ net_sched: sch_sfq: don't allow 1 packet limit
+ spi: zynq-qspi: Add check for clk_enable()
+ rxrpc: Fix handling of received connection abort
+ dt-bindings: mmc: controller: clarify the address-cells description
+ of: remove internal arguments from of_property_for_each_u32()
+ clk: fix an OF node reference leak in of_clk_get_parent_name()
+ dt-bindings: leds: class-multicolor: Fix path to color definitions
+ wifi: rtlwifi: remove unused check_buddy_priv
+ wifi: rtlwifi: destroy workqueue at rtl_deinit_core
+ wifi: rtlwifi: fix memory leaks and invalid access at probe error path
+ wifi: rtlwifi: pci: wait for firmware loading before releasing memory
+ HID: multitouch: fix support for Goodix PID 0x01e9
+ regulator: dt-bindings: mt6315: Drop regulator-compatible property
+ wifi: brcmfmac: add missing header include for brcmf_dbg
+ ACPI: fan: cleanup resources in the error path of .probe()
+ cpupower: fix TSC MHz calculation
+ dt-bindings: mfd: bd71815: Fix rsense and typos
+ leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata()
+ inetpeer: remove create argument of inet_getpeer_v[46]()
+ inetpeer: remove create argument of inet_getpeer()
+ inetpeer: update inetpeer timestamp in inet_getpeer()
+ inetpeer: do not get a refcount in inet_getpeer()
+ pwm: stm32-lp: Add check for clk_enable()
+ cpufreq: schedutil: Fix superfluous updates caused by need_freq_update
+ gpio: pca953x: log an error when failing to get the reset GPIO
+ cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ is
not available
+ cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq* clocks
+ clk: imx8mp: Fix clkout1/2 support
+ team: prevent adding a device which is already a team device lower
+ dt-bindings: clock: sunxi: Export PLL_VIDEO_2X and PLL_MIPI
+ clk: sunxi-ng: a64: drop redundant CLK_PLL_VIDEO0_2X and CLK_PLL_MIPI
+ clk: sunxi-ng: a64: stop force-selecting PLL-MIPI as TCON0 parent
+ regulator: of: Implement the unwind path of of_regulator_match()
+ ax25: rcu protect dev->ax25_ptr
+ OPP: OF: Fix an OF node leak in _opp_add_static_v2()
+ ipmi: ssif_bmc: Fix new request loss when bmc ready for a response
+ wifi: ath12k: fix tx power, max reg power update to firmware
+ clk: qcom: gcc-sdm845: Do not use shared clk_ops for QUPs
+ HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint
check
+ HID: fix generic desktop D-Pad controls
+ leds: cht-wcove: Use devm_led_classdev_register() to avoid memory leak
+ mfd: syscon: Remove extern from function prototypes
+ mfd: syscon: Add of_syscon_register_regmap() API
+ mfd: syscon: Use scoped variables with memory allocators to simplify error
paths
+ mfd: syscon: Fix race in device_node_get_regmap()
+ samples/landlock: Fix possible NULL dereference in parse_path()
+ wifi: wlcore: fix unbalanced pm_runtime calls
+ wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC
+ wifi: mac80211: prohibit deactivating all links
+ wifi: mac80211: fix tid removal during mesh forwarding
+ wifi: mac80211: Fix common size calculation for ML element
+ wifi: mac80211: don't flush non-uploaded STAs
+ net/smc: fix data error when recvmsg with MSG_PEEK flag
+ landlock: Handle weird files
+ wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO
+ wifi: mt76: mt7921: fix using incorrect group cipher after disconnection.
+ wifi: mt76: mt7915: fix overflows seen when writing limit attributes
+ wifi: mt76: mt7996: fix rx filter setting for bfee functionality
+ wifi: mt76: mt7915: firmware restart on devices with a second pcie link
+ wifi: mt76: connac: move mt7615_mcu_del_wtbl_all to connac
+ wifi: mt76: mt7915: improve hardware restart reliability
+ wifi: mt76: mt7915: fix omac index assignment after hardware reset
+ wifi: mt76: mt7915: fix register mapping
+ wifi: mt76: mt7996: fix register mapping
+ wifi: mt76: mt7996: add max mpdu len capability
+ wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU
+ wifi: mt76: mt7996: fix HE Phy capability
+ wifi: mt76: mt7996: fix incorrect indexing of MIB FW event
+ wifi: mt76: mt7996: fix ldpc setting
+ cpufreq: ACPI: Fix max-frequency computation
+ selftests: timers: clocksource-switch: Adapt progress to kselftest framework
+ selftests: harness: fix printing of mismatch values in __EXPECT()
+ wifi: cfg80211: adjust allocation of colocated AP data
+ inet: ipmr: fix data-races
+ clk: analogbits: Fix incorrect calculation of vco rate delta
+ pwm: stm32: Add check for clk_enable()
+ selftests/landlock: Fix error message
+ net: let net.core.dev_weight always be non-zero
+ net/mlxfw: Drop hard coded max FW flash image size
+ octeon_ep: remove firmware stats fetch in ndo_get_stats64
+ netfilter: nf_tables: fix set size with rbtree backend
+ netfilter: nft_flow_offload: update tcp state flags under lock
+ net: ethernet: ti: am65-cpsw: fix freeing IRQ in
am65_cpsw_nuss_remove_tx_chns()
+ tcp_cubic: fix incorrect HyStart round start detection
+ net/rose: prevent integer overflows in rose_setsockopt()
+ libbpf: don't adjust USDT semaphore address if .stapsdt.base addr is missing
+ tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind
+ libbpf: Fix segfault due to libelf functions not setting errno
+ ASoC: sun4i-spdif: Add clock multiplier settings
+ selftests/bpf: Fix fill_link_info selftest on powerpc
+ crypto: caam - use JobR's space to access page 0 regs
+ perf header: Fix one memory leakage in process_bpf_btf()
+ perf header: Fix one memory leakage in process_bpf_prog_info()
+ perf bpf: Fix two memory leakages when calling
perf_env__insert_bpf_prog_info()
+ ASoC: renesas: rz-ssi: Use only the proper amount of dividers
+ perf expr: Initialize is_test value in expr__ctx_new()
+ ktest.pl: Remove unused declarations in run_bisect_test function
+ bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
+ crypto: hisilicon/sec2 - fix for aead icv error
+ crypto: hisilicon/sec2 - fix for aead invalid authsize
+ crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto()
+ ALSA: seq: remove redundant 'tristate' for SND_SEQ_UMP_CLIENT
+ ALSA: seq: Make dependency on UMP clearer
+ padata: fix sysfs store callback check
+ perf top: Don't complain about lack of vmlinux when not resolving some kernel
samples
+ perf machine: Don't ignore _etext when not a text symbol
+ perf namespaces: Introduce nsinfo__set_in_pidns()
+ perf namespaces: Fixup the nsinfo__in_pidns() return type, its bool
+ ASoC: Intel: avs: Prefix SKL/APL-specific members
+ ASoC: Intel: avs: Abstract IPC handling
+ ASoC: Intel: avs: Do not readq() u32 registers
+ ASoC: Intel: avs: Fix theoretical infinite loop
+ perf report: Fix misleading help message about --demangle
+ pinctrl: stm32: Add check for clk_enable()
+ pinctrl: amd: Take suspend type into consideration which pins are non-wake
+ bpf: Send signals asynchronously if !preemptible
+ bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write
+ ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31
laptop
+ perf lock: Fix parse_lock_type which only retrieve one lock flag
+ padata: fix UAF in padata_reorder
+ padata: add pd get/put refcnt helper
+ padata: avoid UAF for reorder_work
+ smb: client: fix oops due to unset link speed
+ cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM
in readdir.c
+ soc: atmel: fix device_node release in atmel_soc_device_init()
+ ARM: at91: pm: change BU Power Switch to automatic mode
+ arm64: dts: mediatek: mt8186: Move wakeup to MTU3 to get working suspend
+ arm64: dts: mt8183: set DMIC one-wire mode on Damu
+ arm64: dts: mediatek: mt8516: fix GICv2 range
+ arm64: dts: mediatek: mt8516: fix wdt irq type
+ arm64: dts: mediatek: mt8516: add i2c clock-div property
+ arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A
+ ARM: dts: stm32: Fix IPCC EXTI declaration on stm32mp151
+ RDMA/mlx4: Avoid false error about access to uninitialized gids array
+ rdma/cxgb4: Prevent potential integer overflow on 32bit
+ arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property
+ arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property
+ arm64: dts: mediatek: mt8192-asurada: Drop regulator-compatible property
+ arm64: dts: mediatek: mt8195-cherry: Drop regulator-compatible property
+ arm64: dts: mediatek: mt8195-demo: Drop regulator-compatible property
+ arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names
+ arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names
+ ARM: dts: aspeed: yosemite4: correct the compatible string of adm1272
+ ARM: dts: aspeed: yosemite4: Add required properties for IOE on fan boards
+ ARM: dts: aspeed: yosemite4: correct the compatible string for max31790
+ arm: dts: socfpga: use reset-name "stmmaceth-ocp" instead of "ahb"
+ RDMA/rxe: Improve newline in printing messages
+ RDMA/rxe: Fix mismatched max_msg_sz
+ arm64: dts: mediatek: mt8183: kenzo: Support second source touchscreen
+ arm64: dts: mediatek: mt8183: willow: Support second source touchscreen
+ RDMA/srp: Fix error handling in srp_add_port
+ arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie1
+ ARM: dts: stm32: Deduplicate serial aliases and chosen node for STM32MP15xx
DHCOM SoM
+ ARM: dts: stm32: Swap USART3 and UART8 alias on STM32MP15xx DHCOM SoM
+ memory: tegra20-emc: fix an OF node reference bug in
tegra_emc_find_node_by_ram_code()
+ arm64: dts: mediatek: mt8183-kukui-jacuzzi: Drop pp3300_panel voltage settings
+ arm64: dts: qcom: msm8996-xiaomi-gemini: Fix LP5562 LED1 reg property
+ arm64: dts: qcom: move common parts for sa8775p-ride variants into a .dtsi
+ arm64: dts: qcom: sa8775p: Update sleep_clk frequency
+ arm64: dts: qcom: msm8996: Fix up USB3 interrupts
+ arm64: dts: qcom: msm8994: Describe USB interrupts
+ arm64: dts: qcom: sm7225-fairphone-fp4: Drop extra qcom,msm-id value
+ arm64: dts: qcom: msm8916: correct sleep clock frequency
+ arm64: dts: qcom: msm8939: correct sleep clock frequency
+ arm64: dts: qcom: msm8994: correct sleep clock frequency
+ arm64: dts: qcom: qcs404: correct sleep clock frequency
+ arm64: dts: qcom: q[dr]u1000: correct sleep clock frequency
+ arm64: dts: qcom: qrb4210-rb2: correct sleep clock frequency
+ arm64: dts: qcom: sc7280: correct sleep clock frequency
+ arm64: dts: qcom: sdx75: correct sleep clock frequency
+ arm64: dts: qcom: sm4450: correct sleep clock frequency
+ arm64: dts: qcom: sm6125: correct sleep clock frequency
+ arm64: dts: qcom: sm6375: correct sleep clock frequency
+ arm64: dts: qcom: sm8250: correct sleep clock frequency
+ arm64: dts: qcom: sm8350: correct sleep clock frequency
+ arm64: dts: qcom: sm8450: correct sleep clock frequency
+ ARM: dts: microchip: sama5d27_wlsom1_ek: Add no-1-8-v property to sdmmc0 node
+ arm64: dts: ti: k3-am62: Remove duplicate GICR reg
+ arm64: dts: ti: k3-am62a: Remove duplicate GICR reg
+ arm64: dts: allwinner: a64: explicitly assign clock parent for TCON0
+ RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error
+ ARM: omap1: Fix up the Retu IRQ on Nokia 770
+ arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: Convert mezzanine riser
to dtso
+ arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: remove disabled ov7251
camera
+ arm64: dts: qcom: sc7180-trogdor-quackingstick: add missing avee-supply
+ arm64: dts: qcom: sc7180-*: Remove thermal zone polling delays
+ arm64: dts: qcom: sc7180-trogdor-pompom: rename 5v-choke thermal zone
+ arm64: dts: qcom: sc7180: change labels to lower-case
+ arm64: dts: qcom: sc7180: fix psci power domain node names
+ arm64: dts: qcom: sm8150-microsoft-surface-duo: fix typos in da7280 properties
+ arm64: dts: qcom: sc8280xp: Fix up remoteproc register space sizes
+ dts: arm64: mediatek: mt8195: Remove MT8183 compatible for OVL
+ arm64: dts: mediatek: add per-SoC compatibles for keypad nodes
+ arm64: dts: qcom: sdm845: Fix interrupt types of camss interrupts
+ arm64: dts: qcom: sm8250: Fix interrupt types of camss interrupts
+ ARM: dts: mediatek: mt7623: fix IR nodename
+ fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device()
+ arm64: tegra: Fix DMA ID for SPI2
+ i3c: dw: Add hot-join support.
+ i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition
+ RDMA/mlx5: Fix indirect mkey ODP page count
+ of: reserved-memory: Do not make kmemleak ignore freed address
+ efi: sysfb_efi: fix W=1 warnings when EFI is not set
+ RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"
+ spi: omap2-mcspi: Correctly handle devm_clk_get_optional() errors
+ media: rc: iguanair: handle timeouts
+ media: lmedm04: Handle errors for lme2510_int_read
+ PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy()
+ media: marvell: Add check for clk_enable()
+ media: i2c: imx290: Register 0x3011 varies between imx327 and imx290
+ media: i2c: imx412: Add missing newline to prints
+ media: i2c: ov9282: Correct the exposure offset
+ media: mipi-csis: Add check for clk_enable()
+ media: camif-core: Add check for clk_enable()
+ media: uvcvideo: Propagate buf->error to userspace
+ mtd: rawnand: brcmnand: fix status read of brcmnand_waitfunc
+ mtd: hyperbus: hbmc-am654: fix an OF node reference leak
+ media: nxp: imx8-isi: fix v4l2-compliance test errors
+ watchdog: rti_wdt: Fix an OF node leak in rti_wdt_probe()
+ staging: media: imx: fix OF node leak in imx_media_add_of_subdevs()
+ media: dvb-usb-v2: af9035: fix ISO C90 compilation error on
af9035_i2c_master_xfer
+ PCI: rcar-ep: Fix incorrect variable used when calling
devm_request_mem_region()
+ PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error
+ PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test
+ scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1
+ scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails
+ ocfs2: mark dquot as inactive if failed to start trans while releasing dquot
+ nilfs2: protect access to buffers with no active references
+ module: Extend the preempt disabled section in
dereference_symbol_descriptor().
+ driver core: class: Fix wild pointer dereferences in API class_dev_iter_next()
+ serial: 8250: Adjust the timeout for FIFO mode
+ NFSv4.2: fix COPY_NOTIFY xdr buf size calculation
+ NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE
+ LoongArch: Fix warnings during S3 suspend
+ tools/bootconfig: Fix the wrong format specifier
+ xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO
+ dmaengine: ti: edma: fix OF node reference leaks in edma_driver
+ xfrm: delete intermediate secpath entry in packet offload mode
+ rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
+ rtc: loongson: clear TOY_MATCH0_REG in loongson_rtc_isr()
+ ubifs: skip dumping tnc tree when zroot is null
+ regulator: core: Add missing newline character
+ net: hns3: fix oops when unload drivers paralleling
+ gpio: mxc: remove dead code after switch to DT-only
+ net: fec: implement TSO descriptor cleanup
+ ipmr: do not call mr_mfc_uses_dev() for unres entries
+ PM: hibernate: Add error handling for syscore_suspend()
+ iavf: allow changing VLAN state without calling PF
+ net: rose: fix timer races against user threads
+ net: netdevsim: try to close UDP port harness races
+ vxlan: Fix uninit-value in vxlan_vnifilter_dump()
+ net: davicom: fix UAF in dm9000_drv_remove
+ ptp: Properly handle compat ioctls
+ net: stmmac: Limit the number of MTL queues to hardware capability
+ net: stmmac: Limit FIFO size by hardware capability
+ perf trace: Fix runtime error of index out of bounds
+ Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming
+ vsock: Allow retrying on connect() failure
+ bgmac: reduce max frame size to support just MTU 1500
+ tcp: correct handling of extreme memory squeeze
+ net: xdp: Disallow attaching device-bound programs in generic mode
+ net: sh_eth: Fix missing rtnl lock in suspend/resume path
+ genksyms: fix memory leak when the same symbol is added from source
+ genksyms: fix memory leak when the same symbol is read from *.symref file
+ RISC-V: Mark riscv_v_init() as __init
+ ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback
+ io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock()
+ cifs: Fix getting and setting SACLs over SMB1
+ kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST
+ kconfig: fix memory leak in sym_warn_unmet_dep()
+ hexagon: fix using plain integer as NULL pointer warning in cmpxchg
+ hexagon: Fix unbalanced spinlock in die()
+ f2fs: Introduce linear search for dentries
+ Revert "SUNRPC: Reduce thread wake-up rate when receiving large RPC messages"
+ kbuild: switch from lz4c to lz4 for compression
+ netfilter: nf_tables: reject mismatching sum of field_len with set key length
+ selftests/rseq: Fix handling of glibc without rseq support
+ ktest.pl: Check kernelrelease return in get_version
+ ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro
+ net: usb: rtl8150: enable basic endpoint checking
+ usb: xhci: Fix NULL pointer dereference on certain command aborts
+ usb: gadget: f_tcm: Fix Get/SetInterface return value
+ usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk()
+ usb: dwc3: core: Defer the probe until USB power supply ready
+ usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE
+ usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR PPS
+ mptcp: consolidate suboption status
+ mptcp: handle fastopen disconnect correctly
+ remoteproc: core: Fix ida_free call while not allocated
+ media: uvcvideo: Fix double free in error path
+ pps: Fix a use-after-free
+ usb: gadget: f_tcm: Don't free command immediately
+ staging: media: max96712: fix kernel oops when removing module
+ btrfs: output the reason for open_ctree() failure
+ s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
+ LoongArch: Change 8 to 14 for LOONGARCH_MAX_{BRP,WRP}
+ block: copy back bounce buffer to user-space correctly in case of split
+ nvme-tcp: Fix I/O queue cpu spreading for multiple controllers
+ powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
+ sched/fair: Untangle NEXT_BUDDY and pick_next_task()
+ sched: Fix race between yield_to() and try_to_wake_up()
+ drm/v3d: Fix performance counter source settings on V3D 7.x
+ drm/rockchip: vop2: fix rk3588 dp+dsi maxclk verification
+ drm/rockchip: vop2: Set AXI id for rk3588
+ drm/rockchip: vop2: Setup delay cycle for Esmart2/3
+ drm/rockchip: vop2: Add check for 32 bpp format for rk3588
+ drm/msm/dpu: provide DSPP and correct LM config for SDM670
+ drm/msm/dpu: link DSPP_2/_3 blocks on SM8650
+ drm/msm: don't clean up priv->kms prematurely
+ drm/msm/mdp4: correct LCDC regulator name
+ wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop
+ selftests/bpf: Actuate tx_metadata_len in xdp_hw_metadata
+ selftests: ktap_helpers: Fix uninitialized variable
+ ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
+ inet: constify inet_sk_bound_dev_eq() net parameter
+ inet: constify 'struct net' parameter of various lookup helpers
+ udp: constify 'struct net' parameter of socket lookups
+ inet6: constify 'struct net' parameter of various lookup helpers
+ ipv6: udp: constify 'struct net' parameter of socket lookups
+ udp: Deal with race between UDP socket address change and rehash
+ dt-bindings: clock: imx93: Drop IMX93_CLK_END macro definition
+ dt-bindings: clock: Add i.MX91 clock support
+ dt-bindings: clock: imx93: Add SPDIF IPG clk
+ clk: imx93: Move IMX93_CLK_END macro to clk driver
+ clk: imx: add i.MX91 clk
+ clk: imx93: Add IMX93_CLK_SPDIF_IPG clock
+ arm64: dts: imx93: Use IMX93_CLK_SPDIF_IPG as SPDIF IPG clock
+ clk: imx: Apply some clks only for i.MX93
+ wifi: rtw89: mcc: consider time limits not divisible by 1024
+ wifi: mt76: mt7925: fix off by one in mt7925_load_clc()
+ wifi: iwlwifi: cleanup uefi variables loading
+ wifi: iwlwifi: fw: read STEP table from correct UEFI var
+ wifi: mt76: mt7996: fix overflows seen when writing limit attributes
+ wifi: mt76: mt7996: fix definition of tx descriptor
+ Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name()
+ platform/mellanox: mlxbf-pmc: incorrect type in assignment
+ platform/x86: x86-android-tablets: make platform data be static
+ crypto: api - Fix boot-up self-test race
+ pinctrl: nomadik: Add check for clk_enable()
+ rhashtable: Fix potential deadlock by moving schedule_work outside lock
+ crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to 'async'
+ perf maps: Fix display of kernel symbols
+ perf MANIFEST: Add arch/*/include/uapi/asm/bpf_perf_event.h to the perf
tarball
+ ALSA: hda: Fix compilation of snd_hdac_adsp_xxx() helpers
+ tools: Sync if_xdp.h uapi tooling header
+ rhashtable: Fix rhashtable_try_insert test
+ bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT
+ ARM: dts: imx7-tqma7: add missing vs-supply for LM75A (rev. 01xxx)
+ arm64: dts: renesas: rzg3s-smarc: Fix the debug serial alias
+ arm64: dts: mediatek: mt8395-genio-1200-evk: Drop regulator-compatible
property
+ arm64: dts: qcom: sm8550: correct sleep clock frequency
+ arm64: dts: qcom: sm8650: correct sleep clock frequency
+ arm64: dts: qcom: x1e80100: correct sleep clock frequency
+ ARM: dts: microchip: sama5d29_curiosity: Add no-1-8-v property to sdmmc0 node
+ RDMA/hns: Clean up the legacy CONFIG_INFINIBAND_HNS
+ UBUNTU: [Config] updateconfigs for INFINIBAND_HNS
+ RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event
+ iommu: iommufd: fix WARNING in iommufd_device_unbind
+ iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
+ remoteproc: mtk_scp: Only populate devices for SCP cores
+ PCI: imx6: Deassert apps_reset in imx_pcie_deassert_core_reset()
+ PCI: dwc: Always stop link in the dw_pcie_suspend_noirq
+ PCI: microchip: Add support for using either Root Port 1 or 2
+ PCI: microchip: Set inbound address translation for coherent or non-coherent
mode
+ scsi: mpi3mr: Fix possible crash when setting up bsg fails
+ firewire: test: Fix potential null dereference in firewire kunit test
+ erofs: get rid of erofs_{find,insert}_workgroup
+ erofs: move erofs_workgroup operations into zdata.c
+ erofs: sunset `struct erofs_workgroup`
+ erofs: fix potential return value overflow of z_erofs_shrink_scan()
+ nilfs2: do not force clear folio if buffer is referenced
+ nilfs2: handle errors that nilfs_prepare_chunk() may return
+ tty: mips_ejtag_fdc: fix one more u8 warning
+ xfrm: Add support for per cpu xfrm state handling.
+ xfrm: Cache used outbound xfrm states at the policy.
+ xfrm: Add an inbound percpu state cache.
+ xfrm: state: fix out-of-bounds read during lookup
+ rtc: tps6594: Fix integer overflow on 32bit systems
+ xfrm: Don't disable preemption while looking up cache state.
+ idpf: add read memory barrier when checking descriptor done bit
+ idpf: convert workqueues to unbound
+ net/ncsi: use dev_set_mac_address() for Get MC MAC Address handling
+ tools: ynl: c: correct reverse decode of empty attrs
+ selftests: mptcp: extend CFLAGS to keep options from environment
+ selftests: net/{lib,openvswitch}: extend CFLAGS to keep options from
environment
+ rxrpc, afs: Fix peer hash locking vs RCU callback
+ net: ethtool: only allow set_rxnfc with rss + ring_cookie if driver opts in
+ ethtool: Fix set RXNFC command with symmetric RSS hash
+ net: ravb: Fix missing rtnl lock in suspend/resume path
+ tools/power turbostat: Fix forked child affinity regression
+ md: add a new callback pers->bitmap_sector()
+ md/raid5: implement pers->bitmap_sector()
+ xfs: check for dead buffers in xfs_buf_find_insert
+ xfs: don't shut down the filesystem for media failures beyond end of log
+ usb: dwc3: Skip resume if pm_runtime_set_active() fails
+ clk: qcom: gcc-x1e80100: Do not turn off usb_2 controller GDSC
+ RDMA/mlx5: Fix implicit ODP use after free
+ xfrm: Add error handling when nla_put_u32() returns an error
+ xfrm: Fix acquire state insertion.
+ ethtool: Fix access to uninitialized fields in set RXNFC command
+ ASoC: da7213: Initialize the mutex
+ drm/amd/display: Add hubp cache reset when powergating
+ KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update()
+ btrfs: do proper folio cleanup when run_delalloc_nocow() failed
+ ethtool: ntuple: fix rss + ring_cookie check
+ UBUNTU: Upstream stable to v6.6.76, v6.12.13
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2111953
Title:
Noble update: upstream stable patchset 2025-05-29
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Noble:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-05-29
Ported from the following upstream stable releases:
v6.6.76, v6.12.13
from git://git.kernel.org/
powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active
dlm: fix srcu_read_lock() return type to int
afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY
afs: Fix directory format encoding struct
afs: Fix cleanup of immediately failed async calls
fs: fix proc_handler for sysctl_nr_open
block: retry call probe after request_module in blk_request_module
nbd: don't allow reconnect after disconnect
pstore/blk: trivial typo fixes
nvme: Add error check for xa_store in nvme_get_effects_log
selftests/powerpc: Fix argument order to timer_sub()
nvme: Add error path for xa_store in nvme_init_effects
partitions: ldm: remove the initial kernel-doc notation
select: Fix unbalanced user_access_end()
nvme: fix bogus kzalloc() return check in nvme_init_effects_log()
afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call
perf/core: Save raw sample data conditionally based on sample type
sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat
x86/cpu: Enable SD_ASYM_PACKING for PKG domain on AMD
x86/topology: Use x86_sched_itmt_flags for PKG domain unconditionally
drm/msm/dp: set safe_to_exit_level before printing it
drm/etnaviv: Fix page property being used for non writecombine buffers
HID: core: Fix assumption that Resolution Multipliers must be in Logical
Collections
drm/amd/pm: Fix an error handling path in
vega10_enable_se_edc_force_stall_config()
drm/amdgpu: Fix potential NULL pointer dereference in
atomctrl_get_smc_sclk_range_table
drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset
drm/rockchip: vop2: Fix the mixer alpha setup for layer 0
drm/rockchip: vop2: Fix the windows switch between different layers
drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8
drm/rockchip: vop2: include rockchip_drm_drv.h
OPP: add index check to assert to avoid buffer overflow in _read_freq()
OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
drm/msm/dpu: link DSPP_2/_3 blocks on SM8150
drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X
drm/msm/dpu: link DSPP_2/_3 blocks on SM8250
drm/msm/dpu: link DSPP_2/_3 blocks on SM8350
drm/msm/dpu: link DSPP_2/_3 blocks on SM8550
drm/msm: Check return value of of_dma_configure()
drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE
drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini()
genirq: Make handle_enforce_irqctx() unconditionally available
ipmi: ipmb: Add check devm_kasprintf() returned value
wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855
wifi: rtlwifi: do not complete firmware loading needlessly
wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step
wifi: rtlwifi: wait for firmware loading before releasing memory
wifi: rtlwifi: fix init_sw_vars leak when probe fails
wifi: rtlwifi: usb: fix workqueue leak when probe fails
wifi: wcn36xx: fix channel survey memory allocation size
net_sched: sch_sfq: annotate data-races around q->perturb_period
net_sched: sch_sfq: handle bigger packets
net_sched: sch_sfq: don't allow 1 packet limit
spi: zynq-qspi: Add check for clk_enable()
rxrpc: Fix handling of received connection abort
dt-bindings: mmc: controller: clarify the address-cells description
of: remove internal arguments from of_property_for_each_u32()
clk: fix an OF node reference leak in of_clk_get_parent_name()
dt-bindings: leds: class-multicolor: Fix path to color definitions
wifi: rtlwifi: remove unused check_buddy_priv
wifi: rtlwifi: destroy workqueue at rtl_deinit_core
wifi: rtlwifi: fix memory leaks and invalid access at probe error path
wifi: rtlwifi: pci: wait for firmware loading before releasing memory
HID: multitouch: fix support for Goodix PID 0x01e9
regulator: dt-bindings: mt6315: Drop regulator-compatible property
wifi: brcmfmac: add missing header include for brcmf_dbg
ACPI: fan: cleanup resources in the error path of .probe()
cpupower: fix TSC MHz calculation
dt-bindings: mfd: bd71815: Fix rsense and typos
leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata()
inetpeer: remove create argument of inet_getpeer_v[46]()
inetpeer: remove create argument of inet_getpeer()
inetpeer: update inetpeer timestamp in inet_getpeer()
inetpeer: do not get a refcount in inet_getpeer()
pwm: stm32-lp: Add check for clk_enable()
cpufreq: schedutil: Fix superfluous updates caused by need_freq_update
gpio: pca953x: log an error when failing to get the reset GPIO
cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ is
not available
cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq* clocks
clk: imx8mp: Fix clkout1/2 support
team: prevent adding a device which is already a team device lower
dt-bindings: clock: sunxi: Export PLL_VIDEO_2X and PLL_MIPI
clk: sunxi-ng: a64: drop redundant CLK_PLL_VIDEO0_2X and CLK_PLL_MIPI
clk: sunxi-ng: a64: stop force-selecting PLL-MIPI as TCON0 parent
regulator: of: Implement the unwind path of of_regulator_match()
ax25: rcu protect dev->ax25_ptr
OPP: OF: Fix an OF node leak in _opp_add_static_v2()
ipmi: ssif_bmc: Fix new request loss when bmc ready for a response
wifi: ath12k: fix tx power, max reg power update to firmware
clk: qcom: gcc-sdm845: Do not use shared clk_ops for QUPs
HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint
check
HID: fix generic desktop D-Pad controls
leds: cht-wcove: Use devm_led_classdev_register() to avoid memory leak
mfd: syscon: Remove extern from function prototypes
mfd: syscon: Add of_syscon_register_regmap() API
mfd: syscon: Use scoped variables with memory allocators to simplify error
paths
mfd: syscon: Fix race in device_node_get_regmap()
samples/landlock: Fix possible NULL dereference in parse_path()
wifi: wlcore: fix unbalanced pm_runtime calls
wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC
wifi: mac80211: prohibit deactivating all links
wifi: mac80211: fix tid removal during mesh forwarding
wifi: mac80211: Fix common size calculation for ML element
wifi: mac80211: don't flush non-uploaded STAs
net/smc: fix data error when recvmsg with MSG_PEEK flag
landlock: Handle weird files
wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO
wifi: mt76: mt7921: fix using incorrect group cipher after disconnection.
wifi: mt76: mt7915: fix overflows seen when writing limit attributes
wifi: mt76: mt7996: fix rx filter setting for bfee functionality
wifi: mt76: mt7915: firmware restart on devices with a second pcie link
wifi: mt76: connac: move mt7615_mcu_del_wtbl_all to connac
wifi: mt76: mt7915: improve hardware restart reliability
wifi: mt76: mt7915: fix omac index assignment after hardware reset
wifi: mt76: mt7915: fix register mapping
wifi: mt76: mt7996: fix register mapping
wifi: mt76: mt7996: add max mpdu len capability
wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU
wifi: mt76: mt7996: fix HE Phy capability
wifi: mt76: mt7996: fix incorrect indexing of MIB FW event
wifi: mt76: mt7996: fix ldpc setting
cpufreq: ACPI: Fix max-frequency computation
selftests: timers: clocksource-switch: Adapt progress to kselftest framework
selftests: harness: fix printing of mismatch values in __EXPECT()
wifi: cfg80211: adjust allocation of colocated AP data
inet: ipmr: fix data-races
clk: analogbits: Fix incorrect calculation of vco rate delta
pwm: stm32: Add check for clk_enable()
selftests/landlock: Fix error message
net: let net.core.dev_weight always be non-zero
net/mlxfw: Drop hard coded max FW flash image size
octeon_ep: remove firmware stats fetch in ndo_get_stats64
netfilter: nf_tables: fix set size with rbtree backend
netfilter: nft_flow_offload: update tcp state flags under lock
net: ethernet: ti: am65-cpsw: fix freeing IRQ in
am65_cpsw_nuss_remove_tx_chns()
tcp_cubic: fix incorrect HyStart round start detection
net/rose: prevent integer overflows in rose_setsockopt()
libbpf: don't adjust USDT semaphore address if .stapsdt.base addr is missing
tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind
libbpf: Fix segfault due to libelf functions not setting errno
ASoC: sun4i-spdif: Add clock multiplier settings
selftests/bpf: Fix fill_link_info selftest on powerpc
crypto: caam - use JobR's space to access page 0 regs
perf header: Fix one memory leakage in process_bpf_btf()
perf header: Fix one memory leakage in process_bpf_prog_info()
perf bpf: Fix two memory leakages when calling
perf_env__insert_bpf_prog_info()
ASoC: renesas: rz-ssi: Use only the proper amount of dividers
perf expr: Initialize is_test value in expr__ctx_new()
ktest.pl: Remove unused declarations in run_bisect_test function
bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
crypto: hisilicon/sec2 - fix for aead icv error
crypto: hisilicon/sec2 - fix for aead invalid authsize
crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto()
ALSA: seq: remove redundant 'tristate' for SND_SEQ_UMP_CLIENT
ALSA: seq: Make dependency on UMP clearer
padata: fix sysfs store callback check
perf top: Don't complain about lack of vmlinux when not resolving some kernel
samples
perf machine: Don't ignore _etext when not a text symbol
perf namespaces: Introduce nsinfo__set_in_pidns()
perf namespaces: Fixup the nsinfo__in_pidns() return type, its bool
ASoC: Intel: avs: Prefix SKL/APL-specific members
ASoC: Intel: avs: Abstract IPC handling
ASoC: Intel: avs: Do not readq() u32 registers
ASoC: Intel: avs: Fix theoretical infinite loop
perf report: Fix misleading help message about --demangle
pinctrl: stm32: Add check for clk_enable()
pinctrl: amd: Take suspend type into consideration which pins are non-wake
bpf: Send signals asynchronously if !preemptible
bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write
ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31
laptop
perf lock: Fix parse_lock_type which only retrieve one lock flag
padata: fix UAF in padata_reorder
padata: add pd get/put refcnt helper
padata: avoid UAF for reorder_work
smb: client: fix oops due to unset link speed
cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM
in readdir.c
soc: atmel: fix device_node release in atmel_soc_device_init()
ARM: at91: pm: change BU Power Switch to automatic mode
arm64: dts: mediatek: mt8186: Move wakeup to MTU3 to get working suspend
arm64: dts: mt8183: set DMIC one-wire mode on Damu
arm64: dts: mediatek: mt8516: fix GICv2 range
arm64: dts: mediatek: mt8516: fix wdt irq type
arm64: dts: mediatek: mt8516: add i2c clock-div property
arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A
ARM: dts: stm32: Fix IPCC EXTI declaration on stm32mp151
RDMA/mlx4: Avoid false error about access to uninitialized gids array
rdma/cxgb4: Prevent potential integer overflow on 32bit
arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property
arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property
arm64: dts: mediatek: mt8192-asurada: Drop regulator-compatible property
arm64: dts: mediatek: mt8195-cherry: Drop regulator-compatible property
arm64: dts: mediatek: mt8195-demo: Drop regulator-compatible property
arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names
arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names
ARM: dts: aspeed: yosemite4: correct the compatible string of adm1272
ARM: dts: aspeed: yosemite4: Add required properties for IOE on fan boards
ARM: dts: aspeed: yosemite4: correct the compatible string for max31790
arm: dts: socfpga: use reset-name "stmmaceth-ocp" instead of "ahb"
RDMA/rxe: Improve newline in printing messages
RDMA/rxe: Fix mismatched max_msg_sz
arm64: dts: mediatek: mt8183: kenzo: Support second source touchscreen
arm64: dts: mediatek: mt8183: willow: Support second source touchscreen
RDMA/srp: Fix error handling in srp_add_port
arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie1
ARM: dts: stm32: Deduplicate serial aliases and chosen node for STM32MP15xx
DHCOM SoM
ARM: dts: stm32: Swap USART3 and UART8 alias on STM32MP15xx DHCOM SoM
memory: tegra20-emc: fix an OF node reference bug in
tegra_emc_find_node_by_ram_code()
arm64: dts: mediatek: mt8183-kukui-jacuzzi: Drop pp3300_panel voltage settings
arm64: dts: qcom: msm8996-xiaomi-gemini: Fix LP5562 LED1 reg property
arm64: dts: qcom: move common parts for sa8775p-ride variants into a .dtsi
arm64: dts: qcom: sa8775p: Update sleep_clk frequency
arm64: dts: qcom: msm8996: Fix up USB3 interrupts
arm64: dts: qcom: msm8994: Describe USB interrupts
arm64: dts: qcom: sm7225-fairphone-fp4: Drop extra qcom,msm-id value
arm64: dts: qcom: msm8916: correct sleep clock frequency
arm64: dts: qcom: msm8939: correct sleep clock frequency
arm64: dts: qcom: msm8994: correct sleep clock frequency
arm64: dts: qcom: qcs404: correct sleep clock frequency
arm64: dts: qcom: q[dr]u1000: correct sleep clock frequency
arm64: dts: qcom: qrb4210-rb2: correct sleep clock frequency
arm64: dts: qcom: sc7280: correct sleep clock frequency
arm64: dts: qcom: sdx75: correct sleep clock frequency
arm64: dts: qcom: sm4450: correct sleep clock frequency
arm64: dts: qcom: sm6125: correct sleep clock frequency
arm64: dts: qcom: sm6375: correct sleep clock frequency
arm64: dts: qcom: sm8250: correct sleep clock frequency
arm64: dts: qcom: sm8350: correct sleep clock frequency
arm64: dts: qcom: sm8450: correct sleep clock frequency
ARM: dts: microchip: sama5d27_wlsom1_ek: Add no-1-8-v property to sdmmc0 node
arm64: dts: ti: k3-am62: Remove duplicate GICR reg
arm64: dts: ti: k3-am62a: Remove duplicate GICR reg
arm64: dts: allwinner: a64: explicitly assign clock parent for TCON0
RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error
ARM: omap1: Fix up the Retu IRQ on Nokia 770
arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: Convert mezzanine riser
to dtso
arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: remove disabled ov7251
camera
arm64: dts: qcom: sc7180-trogdor-quackingstick: add missing avee-supply
arm64: dts: qcom: sc7180-*: Remove thermal zone polling delays
arm64: dts: qcom: sc7180-trogdor-pompom: rename 5v-choke thermal zone
arm64: dts: qcom: sc7180: change labels to lower-case
arm64: dts: qcom: sc7180: fix psci power domain node names
arm64: dts: qcom: sm8150-microsoft-surface-duo: fix typos in da7280 properties
arm64: dts: qcom: sc8280xp: Fix up remoteproc register space sizes
dts: arm64: mediatek: mt8195: Remove MT8183 compatible for OVL
arm64: dts: mediatek: add per-SoC compatibles for keypad nodes
arm64: dts: qcom: sdm845: Fix interrupt types of camss interrupts
arm64: dts: qcom: sm8250: Fix interrupt types of camss interrupts
ARM: dts: mediatek: mt7623: fix IR nodename
fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device()
arm64: tegra: Fix DMA ID for SPI2
i3c: dw: Add hot-join support.
i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition
RDMA/mlx5: Fix indirect mkey ODP page count
of: reserved-memory: Do not make kmemleak ignore freed address
efi: sysfb_efi: fix W=1 warnings when EFI is not set
RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"
spi: omap2-mcspi: Correctly handle devm_clk_get_optional() errors
media: rc: iguanair: handle timeouts
media: lmedm04: Handle errors for lme2510_int_read
PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy()
media: marvell: Add check for clk_enable()
media: i2c: imx290: Register 0x3011 varies between imx327 and imx290
media: i2c: imx412: Add missing newline to prints
media: i2c: ov9282: Correct the exposure offset
media: mipi-csis: Add check for clk_enable()
media: camif-core: Add check for clk_enable()
media: uvcvideo: Propagate buf->error to userspace
mtd: rawnand: brcmnand: fix status read of brcmnand_waitfunc
mtd: hyperbus: hbmc-am654: fix an OF node reference leak
media: nxp: imx8-isi: fix v4l2-compliance test errors
watchdog: rti_wdt: Fix an OF node leak in rti_wdt_probe()
staging: media: imx: fix OF node leak in imx_media_add_of_subdevs()
media: dvb-usb-v2: af9035: fix ISO C90 compilation error on
af9035_i2c_master_xfer
PCI: rcar-ep: Fix incorrect variable used when calling
devm_request_mem_region()
PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error
PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test
scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1
scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails
ocfs2: mark dquot as inactive if failed to start trans while releasing dquot
nilfs2: protect access to buffers with no active references
module: Extend the preempt disabled section in
dereference_symbol_descriptor().
driver core: class: Fix wild pointer dereferences in API class_dev_iter_next()
serial: 8250: Adjust the timeout for FIFO mode
NFSv4.2: fix COPY_NOTIFY xdr buf size calculation
NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE
LoongArch: Fix warnings during S3 suspend
tools/bootconfig: Fix the wrong format specifier
xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO
dmaengine: ti: edma: fix OF node reference leaks in edma_driver
xfrm: delete intermediate secpath entry in packet offload mode
rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
rtc: loongson: clear TOY_MATCH0_REG in loongson_rtc_isr()
ubifs: skip dumping tnc tree when zroot is null
regulator: core: Add missing newline character
net: hns3: fix oops when unload drivers paralleling
gpio: mxc: remove dead code after switch to DT-only
net: fec: implement TSO descriptor cleanup
ipmr: do not call mr_mfc_uses_dev() for unres entries
PM: hibernate: Add error handling for syscore_suspend()
iavf: allow changing VLAN state without calling PF
net: rose: fix timer races against user threads
net: netdevsim: try to close UDP port harness races
vxlan: Fix uninit-value in vxlan_vnifilter_dump()
net: davicom: fix UAF in dm9000_drv_remove
ptp: Properly handle compat ioctls
net: stmmac: Limit the number of MTL queues to hardware capability
net: stmmac: Limit FIFO size by hardware capability
perf trace: Fix runtime error of index out of bounds
Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming
vsock: Allow retrying on connect() failure
bgmac: reduce max frame size to support just MTU 1500
tcp: correct handling of extreme memory squeeze
net: xdp: Disallow attaching device-bound programs in generic mode
net: sh_eth: Fix missing rtnl lock in suspend/resume path
genksyms: fix memory leak when the same symbol is added from source
genksyms: fix memory leak when the same symbol is read from *.symref file
RISC-V: Mark riscv_v_init() as __init
ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback
io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock()
cifs: Fix getting and setting SACLs over SMB1
kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST
kconfig: fix memory leak in sym_warn_unmet_dep()
hexagon: fix using plain integer as NULL pointer warning in cmpxchg
hexagon: Fix unbalanced spinlock in die()
f2fs: Introduce linear search for dentries
Revert "SUNRPC: Reduce thread wake-up rate when receiving large RPC messages"
kbuild: switch from lz4c to lz4 for compression
netfilter: nf_tables: reject mismatching sum of field_len with set key length
selftests/rseq: Fix handling of glibc without rseq support
ktest.pl: Check kernelrelease return in get_version
ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro
net: usb: rtl8150: enable basic endpoint checking
usb: xhci: Fix NULL pointer dereference on certain command aborts
usb: gadget: f_tcm: Fix Get/SetInterface return value
usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk()
usb: dwc3: core: Defer the probe until USB power supply ready
usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE
usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR PPS
mptcp: consolidate suboption status
mptcp: handle fastopen disconnect correctly
remoteproc: core: Fix ida_free call while not allocated
media: uvcvideo: Fix double free in error path
pps: Fix a use-after-free
usb: gadget: f_tcm: Don't free command immediately
staging: media: max96712: fix kernel oops when removing module
btrfs: output the reason for open_ctree() failure
s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
LoongArch: Change 8 to 14 for LOONGARCH_MAX_{BRP,WRP}
block: copy back bounce buffer to user-space correctly in case of split
nvme-tcp: Fix I/O queue cpu spreading for multiple controllers
powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
sched/fair: Untangle NEXT_BUDDY and pick_next_task()
sched: Fix race between yield_to() and try_to_wake_up()
drm/v3d: Fix performance counter source settings on V3D 7.x
drm/rockchip: vop2: fix rk3588 dp+dsi maxclk verification
drm/rockchip: vop2: Set AXI id for rk3588
drm/rockchip: vop2: Setup delay cycle for Esmart2/3
drm/rockchip: vop2: Add check for 32 bpp format for rk3588
drm/msm/dpu: provide DSPP and correct LM config for SDM670
drm/msm/dpu: link DSPP_2/_3 blocks on SM8650
drm/msm: don't clean up priv->kms prematurely
drm/msm/mdp4: correct LCDC regulator name
wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop
selftests/bpf: Actuate tx_metadata_len in xdp_hw_metadata
selftests: ktap_helpers: Fix uninitialized variable
ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
inet: constify inet_sk_bound_dev_eq() net parameter
inet: constify 'struct net' parameter of various lookup helpers
udp: constify 'struct net' parameter of socket lookups
inet6: constify 'struct net' parameter of various lookup helpers
ipv6: udp: constify 'struct net' parameter of socket lookups
udp: Deal with race between UDP socket address change and rehash
dt-bindings: clock: imx93: Drop IMX93_CLK_END macro definition
dt-bindings: clock: Add i.MX91 clock support
dt-bindings: clock: imx93: Add SPDIF IPG clk
clk: imx93: Move IMX93_CLK_END macro to clk driver
clk: imx: add i.MX91 clk
clk: imx93: Add IMX93_CLK_SPDIF_IPG clock
arm64: dts: imx93: Use IMX93_CLK_SPDIF_IPG as SPDIF IPG clock
clk: imx: Apply some clks only for i.MX93
wifi: rtw89: mcc: consider time limits not divisible by 1024
wifi: mt76: mt7925: fix off by one in mt7925_load_clc()
wifi: iwlwifi: cleanup uefi variables loading
wifi: iwlwifi: fw: read STEP table from correct UEFI var
wifi: mt76: mt7996: fix overflows seen when writing limit attributes
wifi: mt76: mt7996: fix definition of tx descriptor
Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name()
platform/mellanox: mlxbf-pmc: incorrect type in assignment
platform/x86: x86-android-tablets: make platform data be static
crypto: api - Fix boot-up self-test race
pinctrl: nomadik: Add check for clk_enable()
rhashtable: Fix potential deadlock by moving schedule_work outside lock
crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to 'async'
perf maps: Fix display of kernel symbols
perf MANIFEST: Add arch/*/include/uapi/asm/bpf_perf_event.h to the perf
tarball
ALSA: hda: Fix compilation of snd_hdac_adsp_xxx() helpers
tools: Sync if_xdp.h uapi tooling header
rhashtable: Fix rhashtable_try_insert test
bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT
ARM: dts: imx7-tqma7: add missing vs-supply for LM75A (rev. 01xxx)
arm64: dts: renesas: rzg3s-smarc: Fix the debug serial alias
arm64: dts: mediatek: mt8395-genio-1200-evk: Drop regulator-compatible
property
arm64: dts: qcom: sm8550: correct sleep clock frequency
arm64: dts: qcom: sm8650: correct sleep clock frequency
arm64: dts: qcom: x1e80100: correct sleep clock frequency
ARM: dts: microchip: sama5d29_curiosity: Add no-1-8-v property to sdmmc0 node
RDMA/hns: Clean up the legacy CONFIG_INFINIBAND_HNS
UBUNTU: [Config] updateconfigs for INFINIBAND_HNS
RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event
iommu: iommufd: fix WARNING in iommufd_device_unbind
iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
remoteproc: mtk_scp: Only populate devices for SCP cores
PCI: imx6: Deassert apps_reset in imx_pcie_deassert_core_reset()
PCI: dwc: Always stop link in the dw_pcie_suspend_noirq
PCI: microchip: Add support for using either Root Port 1 or 2
PCI: microchip: Set inbound address translation for coherent or non-coherent
mode
scsi: mpi3mr: Fix possible crash when setting up bsg fails
firewire: test: Fix potential null dereference in firewire kunit test
erofs: get rid of erofs_{find,insert}_workgroup
erofs: move erofs_workgroup operations into zdata.c
erofs: sunset `struct erofs_workgroup`
erofs: fix potential return value overflow of z_erofs_shrink_scan()
nilfs2: do not force clear folio if buffer is referenced
nilfs2: handle errors that nilfs_prepare_chunk() may return
tty: mips_ejtag_fdc: fix one more u8 warning
xfrm: Add support for per cpu xfrm state handling.
xfrm: Cache used outbound xfrm states at the policy.
xfrm: Add an inbound percpu state cache.
xfrm: state: fix out-of-bounds read during lookup
rtc: tps6594: Fix integer overflow on 32bit systems
xfrm: Don't disable preemption while looking up cache state.
idpf: add read memory barrier when checking descriptor done bit
idpf: convert workqueues to unbound
net/ncsi: use dev_set_mac_address() for Get MC MAC Address handling
tools: ynl: c: correct reverse decode of empty attrs
selftests: mptcp: extend CFLAGS to keep options from environment
selftests: net/{lib,openvswitch}: extend CFLAGS to keep options from
environment
rxrpc, afs: Fix peer hash locking vs RCU callback
net: ethtool: only allow set_rxnfc with rss + ring_cookie if driver opts in
ethtool: Fix set RXNFC command with symmetric RSS hash
net: ravb: Fix missing rtnl lock in suspend/resume path
tools/power turbostat: Fix forked child affinity regression
md: add a new callback pers->bitmap_sector()
md/raid5: implement pers->bitmap_sector()
xfs: check for dead buffers in xfs_buf_find_insert
xfs: don't shut down the filesystem for media failures beyond end of log
usb: dwc3: Skip resume if pm_runtime_set_active() fails
clk: qcom: gcc-x1e80100: Do not turn off usb_2 controller GDSC
RDMA/mlx5: Fix implicit ODP use after free
xfrm: Add error handling when nla_put_u32() returns an error
xfrm: Fix acquire state insertion.
ethtool: Fix access to uninitialized fields in set RXNFC command
ASoC: da7213: Initialize the mutex
drm/amd/display: Add hubp cache reset when powergating
KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update()
btrfs: do proper folio cleanup when run_delalloc_nocow() failed
ethtool: ntuple: fix rss + ring_cookie check
UBUNTU: Upstream stable to v6.6.76, v6.12.13
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2111953/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
