Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.14.7 upstream stable release from git://git.kernel.org/ dm: add missing unlock on in dm_keyslot_evict() fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio() Revert "btrfs: canonicalize the device path before adding it" arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2 firmware: arm_scmi: Fix timeout checks on polling path can: mcan: m_can_class_unregister(): fix order of unregistration calls wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation vfio/pci: Align huge faults to order can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls can: rockchip_canfd: rkcanfd_remove(): fix order of unregistration calls ksmbd: prevent rename with empty string ksmbd: prevent out-of-bounds stream writes by validating *pos ksmbd: Fix UAF in __close_file_table_ids openvswitch: Fix unsafe attribute parsing in output_userspace() ksmbd: fix memory leak in parse_lease_state() s390/entry: Fix last breaking event handling in case of stack corruption UBUNTU: SAUCE: Revert "sch_htb: make htb_deactivate() idempotent" sch_htb: make htb_deactivate() idempotent virtio-net: don't re-enable refill work too early when NAPI is disabled virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() gre: Fix again IPv6 link-local address generation. net: ethernet: mtk_eth_soc: reset all TX queues on DMA free net: ethernet: mtk_eth_soc: do not reset PSE when setting FE can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe can: mcp251xfd: fix TDC setting for low data bit rates can: gw: fix RCU/BH usage in cgw_create_job() wifi: mac80211: fix the type of status_code for negotiated TID to Link Mapping ice: use DSN instead of PCI BDF for ice_adapter index erofs: ensure the extra temporary copy is valid for shortened bvecs ipvs: fix uninit-value for saddr in do_output_route4 bpf: Scrub packet on bpf_redirect_peer net: dsa: b53: allow leaky reserved multicast net: dsa: b53: keep CPU port always tagged again net: dsa: b53: fix clearing PVID of a port net: dsa: b53: fix flushing old pvid VLAN on pvid change net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave net: dsa: b53: always rejoin default untagged VLAN on bridge leave net: dsa: b53: do not allow to configure VLAN 0 net: dsa: b53: do not program vlans when vlan filtering is off net: dsa: b53: fix toggling vlan_filtering net: dsa: b53: fix learning on VLAN unaware bridges net: dsa: b53: do not set learning and unicast/multicast on up fbnic: Fix initialization of mailbox descriptor rings fbnic: Gate AXI read/write enabling on FW mailbox fbnic: Actually flush_tx instead of stalling out fbnic: Cleanup handling of completions fbnic: Improve responsiveness of fbnic_mbx_poll_tx_ready fbnic: Pull fbnic_fw_xmit_cap_msg use out of interrupt context fbnic: Do not allow mailbox to toggle to ready outside fbnic_mbx_poll_tx_ready net: export a helper for adding up queue stats virtio-net: fix total qstat values Input: cyttsp5 - ensure minimum reset pulse width Input: cyttsp5 - fix power control issue on wakeup Input: mtk-pmic-keys - fix possible null pointer dereference Input: xpad - fix Share button on Xbox One controllers Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller Input: xpad - fix two controller table values Input: synaptics - enable InterTouch on Dynabook Portege X30-D Input: synaptics - enable InterTouch on Dynabook Portege X30L-G Input: synaptics - enable InterTouch on Dell Precision M3800 Input: synaptics - enable SMBus for HP Elitebook 850 G1 Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 rust: clean Rust 1.88.0's `unnecessary_transmutes` lint objtool/rust: add one more `noreturn` Rust function for Rust 1.87.0 rust: clean Rust 1.88.0's warning about `clippy::disallowed_macros` configuration uio_hv_generic: Fix sysfs creation path for ring buffer staging: iio: adc: ad7816: Correct conditional logic for store mode staging: bcm2835-camera: Initialise dev in v4l2_dev staging: axis-fifo: Remove hardware resets for user errors staging: axis-fifo: Correct handling of tx_fifo_depth for size validation x86/mm: Eliminate window where TLB flushes may be inadvertently skipped mm: fix folio_pte_batch() on XEN PV mm: vmalloc: support more granular vrealloc() sizing mm/huge_memory: fix dereferencing invalid pmd migration entry mm/userfaultfd: fix uninitialized output field for -EAGAIN race selftests/mm: compaction_test: support platform with huge mount of memory selftests/mm: fix a build failure on powerpc selftests/mm: fix build break when compiling pkey_util.c KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception drm/amd/display: Shift DMUB AUX reply command if necessary riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL io_uring: ensure deferred completions are flushed for multishot iio: adc: ad7768-1: Fix insufficient alignment of timestamp. iio: adc: ad7266: Fix potential timestamp alignment issue. iio: adc: ad7606: fix serial register access iio: adc: rockchip: Fix clock initialization sequence iio: adis16201: Correct inclinometer channel resolution iio: chemical: sps30: use aligned_s64 for timestamp iio: chemical: pms7003: use aligned_s64 for timestamp iio: hid-sensor-prox: Restore lost scale assignments iio: hid-sensor-prox: support multi-channel SCALE calculation iio: hid-sensor-prox: Fix incorrect OFFSET calculation iio: imu: inv_mpu6050: align buffer for timestamp iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo iio: light: opt3001: fix deadlock due to concurrent flag access iio: pressure: mprls0025pa: use aligned_s64 for timestamp Revert "drm/amd: Stop evicting resources on APUs in suspend" drm/v3d: Add job to pending list if the reset was skipped drm/xe: Add page queue multiplier drm/amdgpu: fix pm notifier handling drm/amdgpu/vcn: using separate VCN1_AON_SOC offset drm/amd/display: Fix invalid context error in dml helper drm/amd/display: Fix the checking condition in dmub aux handling drm/amd/display: Remove incorrect checking in dmub aux handler drm/amd/display: Fix wrong handling for AUX_DEFER case drm/amd/display: Copy AUX read reply data whenever length > 0 xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive. usb: uhci-platform: Make the clock really optional smb: client: Avoid race in open_cached_dir with lease breaks xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it xenbus: Use kref to track req lifetime accel/ivpu: Increase state dump msg timeout arm64: cpufeature: Move arm64_use_ng_mappings to the .data section to prevent wrong idmap generation clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort() memblock: Accept allocated memory before use in memblock_double_array() module: ensure that kobject_put() is safe for module type kobjects x86/microcode: Consolidate the loader enablement checking ocfs2: fix panic in failed foilio allocation ocfs2: fix the issue with discontiguous allocation in the global_bitmap ocfs2: switch osb->disable_recovery to enum ocfs2: implement handshaking with ocfs2 recovery thread ocfs2: stop quota recovery before disabling quotas usb: dwc3: gadget: Make gadget_wakeup asynchronous usb: cdnsp: Fix issue with resuming from L1 usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version usb: gadget: f_ecm: Add get_status callback usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN usb: gadget: Use get_status callback to set remote wakeup capability usb: host: tegra: Prevent host controller crash when OTG port is used usb: misc: onboard_usb_dev: fix support for Cypress HX3 hubs usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition usb: typec: ucsi: displayport: Fix deadlock usb: typec: ucsi: displayport: Fix NULL pointer access USB: usbtmc: use interruptible sleep in usbtmc_read usb: usbtmc: Fix erroneous get_stb ioctl error returns usb: usbtmc: Fix erroneous wait_srq ioctl return usb: usbtmc: Fix erroneous generic_read ioctl return iio: imu: bmi270: fix initial sampling frequency configuration iio: accel: adxl367: fix setting odr for activity time update iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer. iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64 iio: adc: dln2: Use aligned_s64 for timestamp timekeeping: Prevent coarse clocks going backwards accel/ivpu: Separate DB ID and CMDQ ID allocations from CMDQ allocation accel/ivpu: Correct mutex unlock order in job submission MIPS: Fix MAX_REG_OFFSET riscv: misaligned: Add handling for ZCB instructions loop: factor out a loop_assign_backing_file helper loop: Add sanity check for read/write_iter drm/panel: simple: Update timings for AUO G101EVN010 nvme: unblock ctrl state transition for firmware update riscv: misaligned: factorize trap handling riscv: misaligned: enable IRQs while handling misaligned accesses riscv: Disallow PR_GET_TAGGED_ADDR_CTRL without Supm drm/xe/tests/mocs: Hold XE_FORCEWAKE_ALL for LNCF regs drm/xe: Release force wake first then runtime power io_uring/sqpoll: Increase task_work submission batch size do_umount(): add missing barrier before refcount checks in sync case rust: allow Rust 1.87.0's `clippy::ptr_eq` lint rust: clean Rust 1.88.0's `clippy::uninlined_format_args` lint io_uring: always arm linked timeouts prior to issue Bluetooth: btmtk: Remove the resetting step before downloading the fw mm: page_alloc: don't steal single pages from biggest buddy mm: page_alloc: speed up fallbacks in rmqueue_bulk() arm64: insn: Add support for encoding DSB arm64: proton-pack: Expose whether the platform is mitigated by firmware arm64: proton-pack: Expose whether the branchy loop k value arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users arm64: proton-pack: Add new CPUs 'k' values for branch mitigation x86/bpf: Call branch history clearing sequence on exit x86/bpf: Add IBHF call at end of classic BPF x86/bhi: Do not set BHI_DIS_S in 32-bit mode Documentation: x86/bugs/its: Add ITS documentation x86/its: Enumerate Indirect Target Selection (ITS) bug x86/its: Add support for ITS-safe indirect thunk x86/its: Add support for ITS-safe return thunk x86/its: Enable Indirect Target Selection mitigation UBUNTU: [Config] enable MITIGATION_ITS x86/its: Add "vmexit" option to skip mitigation on some CPUs x86/its: Add support for RSB stuffing mitigation x86/its: Align RETs in BHB clear sequence to avoid thunking x86/ibt: Keep IBT disabled during alternative patching x86/its: Use dynamic thunks for indirect branches selftest/x86/bugs: Add selftests for ITS x86/its: Fix build errors when CONFIG_MODULES=n x86/its: FineIBT-paranoid vs ITS Linux 6.14.7 UBUNTU: Upstream stable to v6.14.7 ** Affects: linux (Ubuntu) Importance: Undecided Status: Invalid ** Affects: linux (Ubuntu Plucky) Importance: Medium Assignee: Manuel Diewald (diewald) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Plucky) Importance: Undecided Status: New ** Changed in: linux (Ubuntu) Status: Confirmed => Invalid ** Changed in: linux (Ubuntu Plucky) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Plucky) Status: New => In Progress ** Changed in: linux (Ubuntu Plucky) Assignee: (unassigned) => Manuel Diewald (diewald) ** Description changed: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.14.7 upstream stable release from git://git.kernel.org/ - + dm: add missing unlock on in dm_keyslot_evict() + fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio() + Revert "btrfs: canonicalize the device path before adding it" + arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2 + firmware: arm_scmi: Fix timeout checks on polling path + can: mcan: m_can_class_unregister(): fix order of unregistration calls + wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation + vfio/pci: Align huge faults to order + can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls + can: rockchip_canfd: rkcanfd_remove(): fix order of unregistration calls + ksmbd: prevent rename with empty string + ksmbd: prevent out-of-bounds stream writes by validating *pos + ksmbd: Fix UAF in __close_file_table_ids + openvswitch: Fix unsafe attribute parsing in output_userspace() + ksmbd: fix memory leak in parse_lease_state() + s390/entry: Fix last breaking event handling in case of stack corruption + UBUNTU: SAUCE: Revert "sch_htb: make htb_deactivate() idempotent" + sch_htb: make htb_deactivate() idempotent + virtio-net: don't re-enable refill work too early when NAPI is disabled + virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() + gre: Fix again IPv6 link-local address generation. + net: ethernet: mtk_eth_soc: reset all TX queues on DMA free + net: ethernet: mtk_eth_soc: do not reset PSE when setting FE + can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe + can: mcp251xfd: fix TDC setting for low data bit rates + can: gw: fix RCU/BH usage in cgw_create_job() + wifi: mac80211: fix the type of status_code for negotiated TID to Link Mapping + ice: use DSN instead of PCI BDF for ice_adapter index + erofs: ensure the extra temporary copy is valid for shortened bvecs + ipvs: fix uninit-value for saddr in do_output_route4 + bpf: Scrub packet on bpf_redirect_peer + net: dsa: b53: allow leaky reserved multicast + net: dsa: b53: keep CPU port always tagged again + net: dsa: b53: fix clearing PVID of a port + net: dsa: b53: fix flushing old pvid VLAN on pvid change + net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave + net: dsa: b53: always rejoin default untagged VLAN on bridge leave + net: dsa: b53: do not allow to configure VLAN 0 + net: dsa: b53: do not program vlans when vlan filtering is off + net: dsa: b53: fix toggling vlan_filtering + net: dsa: b53: fix learning on VLAN unaware bridges + net: dsa: b53: do not set learning and unicast/multicast on up + fbnic: Fix initialization of mailbox descriptor rings + fbnic: Gate AXI read/write enabling on FW mailbox + fbnic: Actually flush_tx instead of stalling out + fbnic: Cleanup handling of completions + fbnic: Improve responsiveness of fbnic_mbx_poll_tx_ready + fbnic: Pull fbnic_fw_xmit_cap_msg use out of interrupt context + fbnic: Do not allow mailbox to toggle to ready outside fbnic_mbx_poll_tx_ready + net: export a helper for adding up queue stats + virtio-net: fix total qstat values + Input: cyttsp5 - ensure minimum reset pulse width + Input: cyttsp5 - fix power control issue on wakeup + Input: mtk-pmic-keys - fix possible null pointer dereference + Input: xpad - fix Share button on Xbox One controllers + Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller + Input: xpad - fix two controller table values + Input: synaptics - enable InterTouch on Dynabook Portege X30-D + Input: synaptics - enable InterTouch on Dynabook Portege X30L-G + Input: synaptics - enable InterTouch on Dell Precision M3800 + Input: synaptics - enable SMBus for HP Elitebook 850 G1 + Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 + rust: clean Rust 1.88.0's `unnecessary_transmutes` lint + objtool/rust: add one more `noreturn` Rust function for Rust 1.87.0 + rust: clean Rust 1.88.0's warning about `clippy::disallowed_macros` configuration + uio_hv_generic: Fix sysfs creation path for ring buffer + staging: iio: adc: ad7816: Correct conditional logic for store mode + staging: bcm2835-camera: Initialise dev in v4l2_dev + staging: axis-fifo: Remove hardware resets for user errors + staging: axis-fifo: Correct handling of tx_fifo_depth for size validation + x86/mm: Eliminate window where TLB flushes may be inadvertently skipped + mm: fix folio_pte_batch() on XEN PV + mm: vmalloc: support more granular vrealloc() sizing + mm/huge_memory: fix dereferencing invalid pmd migration entry + mm/userfaultfd: fix uninitialized output field for -EAGAIN race + selftests/mm: compaction_test: support platform with huge mount of memory + selftests/mm: fix a build failure on powerpc + selftests/mm: fix build break when compiling pkey_util.c + KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing + KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception + drm/amd/display: Shift DMUB AUX reply command if necessary + riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL + io_uring: ensure deferred completions are flushed for multishot + iio: adc: ad7768-1: Fix insufficient alignment of timestamp. + iio: adc: ad7266: Fix potential timestamp alignment issue. + iio: adc: ad7606: fix serial register access + iio: adc: rockchip: Fix clock initialization sequence + iio: adis16201: Correct inclinometer channel resolution + iio: chemical: sps30: use aligned_s64 for timestamp + iio: chemical: pms7003: use aligned_s64 for timestamp + iio: hid-sensor-prox: Restore lost scale assignments + iio: hid-sensor-prox: support multi-channel SCALE calculation + iio: hid-sensor-prox: Fix incorrect OFFSET calculation + iio: imu: inv_mpu6050: align buffer for timestamp + iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo + iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo + iio: light: opt3001: fix deadlock due to concurrent flag access + iio: pressure: mprls0025pa: use aligned_s64 for timestamp + Revert "drm/amd: Stop evicting resources on APUs in suspend" + drm/v3d: Add job to pending list if the reset was skipped + drm/xe: Add page queue multiplier + drm/amdgpu: fix pm notifier handling + drm/amdgpu/vcn: using separate VCN1_AON_SOC offset + drm/amd/display: Fix invalid context error in dml helper + drm/amd/display: Fix the checking condition in dmub aux handling + drm/amd/display: Remove incorrect checking in dmub aux handler + drm/amd/display: Fix wrong handling for AUX_DEFER case + drm/amd/display: Copy AUX read reply data whenever length > 0 + xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive. + usb: uhci-platform: Make the clock really optional + smb: client: Avoid race in open_cached_dir with lease breaks + xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it + xenbus: Use kref to track req lifetime + accel/ivpu: Increase state dump msg timeout + arm64: cpufeature: Move arm64_use_ng_mappings to the .data section to prevent wrong idmap generation + clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() + KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort() + memblock: Accept allocated memory before use in memblock_double_array() + module: ensure that kobject_put() is safe for module type kobjects + x86/microcode: Consolidate the loader enablement checking + ocfs2: fix panic in failed foilio allocation + ocfs2: fix the issue with discontiguous allocation in the global_bitmap + ocfs2: switch osb->disable_recovery to enum + ocfs2: implement handshaking with ocfs2 recovery thread + ocfs2: stop quota recovery before disabling quotas + usb: dwc3: gadget: Make gadget_wakeup asynchronous + usb: cdnsp: Fix issue with resuming from L1 + usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version + usb: gadget: f_ecm: Add get_status callback + usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN + usb: gadget: Use get_status callback to set remote wakeup capability + usb: host: tegra: Prevent host controller crash when OTG port is used + usb: misc: onboard_usb_dev: fix support for Cypress HX3 hubs + usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition + usb: typec: ucsi: displayport: Fix deadlock + usb: typec: ucsi: displayport: Fix NULL pointer access + USB: usbtmc: use interruptible sleep in usbtmc_read + usb: usbtmc: Fix erroneous get_stb ioctl error returns + usb: usbtmc: Fix erroneous wait_srq ioctl return + usb: usbtmc: Fix erroneous generic_read ioctl return + iio: imu: bmi270: fix initial sampling frequency configuration + iio: accel: adxl367: fix setting odr for activity time update + iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer. + iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64 + iio: adc: dln2: Use aligned_s64 for timestamp + timekeeping: Prevent coarse clocks going backwards + accel/ivpu: Separate DB ID and CMDQ ID allocations from CMDQ allocation + accel/ivpu: Correct mutex unlock order in job submission + MIPS: Fix MAX_REG_OFFSET + riscv: misaligned: Add handling for ZCB instructions + loop: factor out a loop_assign_backing_file helper + loop: Add sanity check for read/write_iter + drm/panel: simple: Update timings for AUO G101EVN010 + nvme: unblock ctrl state transition for firmware update + riscv: misaligned: factorize trap handling + riscv: misaligned: enable IRQs while handling misaligned accesses + riscv: Disallow PR_GET_TAGGED_ADDR_CTRL without Supm + drm/xe/tests/mocs: Hold XE_FORCEWAKE_ALL for LNCF regs + drm/xe: Release force wake first then runtime power + io_uring/sqpoll: Increase task_work submission batch size + do_umount(): add missing barrier before refcount checks in sync case + rust: allow Rust 1.87.0's `clippy::ptr_eq` lint + rust: clean Rust 1.88.0's `clippy::uninlined_format_args` lint + io_uring: always arm linked timeouts prior to issue + Bluetooth: btmtk: Remove the resetting step before downloading the fw + mm: page_alloc: don't steal single pages from biggest buddy + mm: page_alloc: speed up fallbacks in rmqueue_bulk() + arm64: insn: Add support for encoding DSB + arm64: proton-pack: Expose whether the platform is mitigated by firmware + arm64: proton-pack: Expose whether the branchy loop k value + arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs + arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users + arm64: proton-pack: Add new CPUs 'k' values for branch mitigation + x86/bpf: Call branch history clearing sequence on exit + x86/bpf: Add IBHF call at end of classic BPF + x86/bhi: Do not set BHI_DIS_S in 32-bit mode + Documentation: x86/bugs/its: Add ITS documentation + x86/its: Enumerate Indirect Target Selection (ITS) bug + x86/its: Add support for ITS-safe indirect thunk + x86/its: Add support for ITS-safe return thunk + x86/its: Enable Indirect Target Selection mitigation + UBUNTU: [Config] enable MITIGATION_ITS + x86/its: Add "vmexit" option to skip mitigation on some CPUs + x86/its: Add support for RSB stuffing mitigation + x86/its: Align RETs in BHB clear sequence to avoid thunking + x86/ibt: Keep IBT disabled during alternative patching + x86/its: Use dynamic thunks for indirect branches + selftest/x86/bugs: Add selftests for ITS + x86/its: Fix build errors when CONFIG_MODULES=n + x86/its: FineIBT-paranoid vs ITS Linux 6.14.7 - x86/its: FineIBT-paranoid vs ITS - x86/its: Fix build errors when CONFIG_MODULES=n - selftest/x86/bugs: Add selftests for ITS - x86/its: Use dynamic thunks for indirect branches - x86/ibt: Keep IBT disabled during alternative patching - x86/its: Align RETs in BHB clear sequence to avoid thunking - x86/its: Add support for RSB stuffing mitigation - x86/its: Add "vmexit" option to skip mitigation on some CPUs - x86/its: Enable Indirect Target Selection mitigation - x86/its: Add support for ITS-safe return thunk - x86/its: Add support for ITS-safe indirect thunk - x86/its: Enumerate Indirect Target Selection (ITS) bug - Documentation: x86/bugs/its: Add ITS documentation - x86/bhi: Do not set BHI_DIS_S in 32-bit mode - x86/bpf: Add IBHF call at end of classic BPF - x86/bpf: Call branch history clearing sequence on exit - arm64: proton-pack: Add new CPUs 'k' values for branch mitigation - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs - arm64: proton-pack: Expose whether the branchy loop k value - arm64: proton-pack: Expose whether the platform is mitigated by firmware - arm64: insn: Add support for encoding DSB - mm: page_alloc: speed up fallbacks in rmqueue_bulk() - mm: page_alloc: don't steal single pages from biggest buddy - Bluetooth: btmtk: Remove the resetting step before downloading the fw - io_uring: always arm linked timeouts prior to issue - rust: clean Rust 1.88.0's `clippy::uninlined_format_args` lint - rust: allow Rust 1.87.0's `clippy::ptr_eq` lint - do_umount(): add missing barrier before refcount checks in sync case - io_uring/sqpoll: Increase task_work submission batch size - drm/xe: Release force wake first then runtime power - drm/xe/tests/mocs: Hold XE_FORCEWAKE_ALL for LNCF regs - riscv: Disallow PR_GET_TAGGED_ADDR_CTRL without Supm - riscv: misaligned: enable IRQs while handling misaligned accesses - riscv: misaligned: factorize trap handling - nvme: unblock ctrl state transition for firmware update - drm/panel: simple: Update timings for AUO G101EVN010 - loop: Add sanity check for read/write_iter - loop: factor out a loop_assign_backing_file helper - riscv: misaligned: Add handling for ZCB instructions - MIPS: Fix MAX_REG_OFFSET - accel/ivpu: Correct mutex unlock order in job submission - accel/ivpu: Separate DB ID and CMDQ ID allocations from CMDQ allocation - timekeeping: Prevent coarse clocks going backwards - iio: adc: dln2: Use aligned_s64 for timestamp - iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64 - iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer. - iio: accel: adxl367: fix setting odr for activity time update - iio: imu: bmi270: fix initial sampling frequency configuration - usb: usbtmc: Fix erroneous generic_read ioctl return - usb: usbtmc: Fix erroneous wait_srq ioctl return - usb: usbtmc: Fix erroneous get_stb ioctl error returns - USB: usbtmc: use interruptible sleep in usbtmc_read - usb: typec: ucsi: displayport: Fix NULL pointer access - usb: typec: ucsi: displayport: Fix deadlock - usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition - usb: misc: onboard_usb_dev: fix support for Cypress HX3 hubs - usb: host: tegra: Prevent host controller crash when OTG port is used - usb: gadget: Use get_status callback to set remote wakeup capability - usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN - usb: gadget: f_ecm: Add get_status callback - usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version - usb: cdnsp: Fix issue with resuming from L1 - usb: dwc3: gadget: Make gadget_wakeup asynchronous - ocfs2: stop quota recovery before disabling quotas - ocfs2: implement handshaking with ocfs2 recovery thread - ocfs2: switch osb->disable_recovery to enum - ocfs2: fix the issue with discontiguous allocation in the global_bitmap - ocfs2: fix panic in failed foilio allocation - x86/microcode: Consolidate the loader enablement checking - module: ensure that kobject_put() is safe for module type kobjects - memblock: Accept allocated memory before use in memblock_double_array() - KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort() - clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() - arm64: cpufeature: Move arm64_use_ng_mappings to the .data section to prevent wrong idmap generation - accel/ivpu: Increase state dump msg timeout - xenbus: Use kref to track req lifetime - xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it - smb: client: Avoid race in open_cached_dir with lease breaks - usb: uhci-platform: Make the clock really optional - xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive. - drm/amdgpu/hdp7: use memcfg register to post the write for HDP flush - drm/amdgpu/hdp6: use memcfg register to post the write for HDP flush - drm/amdgpu/hdp5: use memcfg register to post the write for HDP flush - drm/amdgpu/hdp5.2: use memcfg register to post the write for HDP flush - drm/amdgpu/hdp4: use memcfg register to post the write for HDP flush - drm/amd/display: Copy AUX read reply data whenever length > 0 - drm/amd/display: Fix wrong handling for AUX_DEFER case - drm/amd/display: Remove incorrect checking in dmub aux handler - drm/amd/display: Fix the checking condition in dmub aux handling - drm/amd/display: more liberal vmin/vmax update for freesync - drm/amd/display: Fix invalid context error in dml helper - drm/amdgpu/vcn: using separate VCN1_AON_SOC offset - drm/amdgpu: fix pm notifier handling - drm/xe: Add page queue multiplier - drm/v3d: Add job to pending list if the reset was skipped - Revert "drm/amd: Stop evicting resources on APUs in suspend" - iio: pressure: mprls0025pa: use aligned_s64 for timestamp - iio: light: opt3001: fix deadlock due to concurrent flag access - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo - iio: imu: inv_mpu6050: align buffer for timestamp - iio: hid-sensor-prox: Fix incorrect OFFSET calculation - iio: hid-sensor-prox: support multi-channel SCALE calculation - iio: hid-sensor-prox: Restore lost scale assignments - iio: chemical: pms7003: use aligned_s64 for timestamp - iio: chemical: sps30: use aligned_s64 for timestamp - iio: adis16201: Correct inclinometer channel resolution - iio: adc: rockchip: Fix clock initialization sequence - iio: adc: ad7606: fix serial register access - iio: adc: ad7266: Fix potential timestamp alignment issue. - iio: adc: ad7768-1: Fix insufficient alignment of timestamp. - io_uring: ensure deferred completions are flushed for multishot - riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL - drm/amd/display: Shift DMUB AUX reply command if necessary - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception - KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing - selftests/mm: fix build break when compiling pkey_util.c - selftests/mm: fix a build failure on powerpc - selftests/mm: compaction_test: support platform with huge mount of memory - mm/userfaultfd: fix uninitialized output field for -EAGAIN race - mm/huge_memory: fix dereferencing invalid pmd migration entry - mm: vmalloc: support more granular vrealloc() sizing - mm: fix folio_pte_batch() on XEN PV - x86/mm: Eliminate window where TLB flushes may be inadvertently skipped - staging: axis-fifo: Correct handling of tx_fifo_depth for size validation - staging: axis-fifo: Remove hardware resets for user errors - staging: bcm2835-camera: Initialise dev in v4l2_dev - staging: iio: adc: ad7816: Correct conditional logic for store mode - uio_hv_generic: Fix sysfs creation path for ring buffer - rust: clean Rust 1.88.0's warning about `clippy::disallowed_macros` configuration - objtool/rust: add one more `noreturn` Rust function for Rust 1.87.0 - rust: clean Rust 1.88.0's `unnecessary_transmutes` lint - Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 - Input: synaptics - enable SMBus for HP Elitebook 850 G1 - Input: synaptics - enable InterTouch on Dell Precision M3800 - Input: synaptics - enable InterTouch on Dynabook Portege X30L-G - Input: synaptics - enable InterTouch on Dynabook Portege X30-D - Input: xpad - fix two controller table values - Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller - Input: xpad - fix Share button on Xbox One controllers - Input: mtk-pmic-keys - fix possible null pointer dereference - Input: cyttsp5 - fix power control issue on wakeup - Input: cyttsp5 - ensure minimum reset pulse width - virtio-net: fix total qstat values - net: export a helper for adding up queue stats - fbnic: Do not allow mailbox to toggle to ready outside fbnic_mbx_poll_tx_ready - fbnic: Pull fbnic_fw_xmit_cap_msg use out of interrupt context - fbnic: Improve responsiveness of fbnic_mbx_poll_tx_ready - fbnic: Cleanup handling of completions - fbnic: Actually flush_tx instead of stalling out - fbnic: Gate AXI read/write enabling on FW mailbox - fbnic: Fix initialization of mailbox descriptor rings - net: dsa: b53: do not set learning and unicast/multicast on up - net: dsa: b53: fix learning on VLAN unaware bridges - net: dsa: b53: fix toggling vlan_filtering - net: dsa: b53: do not program vlans when vlan filtering is off - net: dsa: b53: do not allow to configure VLAN 0 - net: dsa: b53: always rejoin default untagged VLAN on bridge leave - net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave - net: dsa: b53: fix flushing old pvid VLAN on pvid change - net: dsa: b53: fix clearing PVID of a port - net: dsa: b53: keep CPU port always tagged again - net: dsa: b53: allow leaky reserved multicast - bpf: Scrub packet on bpf_redirect_peer - netfilter: ipset: fix region locking in hash types - ipvs: fix uninit-value for saddr in do_output_route4 - erofs: ensure the extra temporary copy is valid for shortened bvecs - ice: use DSN instead of PCI BDF for ice_adapter index - wifi: mac80211: fix the type of status_code for negotiated TID to Link Mapping - can: gw: fix RCU/BH usage in cgw_create_job() - can: mcp251xfd: fix TDC setting for low data bit rates - can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe - net: ethernet: mtk_eth_soc: do not reset PSE when setting FE - net: ethernet: mtk_eth_soc: reset all TX queues on DMA free - gre: Fix again IPv6 link-local address generation. - virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() - virtio-net: don't re-enable refill work too early when NAPI is disabled - sch_htb: make htb_deactivate() idempotent - s390/entry: Fix last breaking event handling in case of stack corruption - ksmbd: fix memory leak in parse_lease_state() - openvswitch: Fix unsafe attribute parsing in output_userspace() - ksmbd: Fix UAF in __close_file_table_ids - ksmbd: prevent out-of-bounds stream writes by validating *pos - ksmbd: prevent rename with empty string - can: rockchip_canfd: rkcanfd_remove(): fix order of unregistration calls - can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs - vfio/pci: Align huge faults to order - wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation - s390/pci: Fix missing check for zpci_create_device() error return - can: mcan: m_can_class_unregister(): fix order of unregistration calls - firmware: arm_scmi: Fix timeout checks on polling path - arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2 - Revert "btrfs: canonicalize the device path before adding it" - fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio() - dm: add missing unlock on in dm_keyslot_evict() + UBUNTU: Upstream stable to v6.14.7 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2115252 Title: Plucky update: v6.14.7 upstream stable release Status in linux package in Ubuntu: Invalid Status in linux source package in Plucky: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.14.7 upstream stable release from git://git.kernel.org/ dm: add missing unlock on in dm_keyslot_evict() fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio() Revert "btrfs: canonicalize the device path before adding it" arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2 firmware: arm_scmi: Fix timeout checks on polling path can: mcan: m_can_class_unregister(): fix order of unregistration calls wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation vfio/pci: Align huge faults to order can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls can: rockchip_canfd: rkcanfd_remove(): fix order of unregistration calls ksmbd: prevent rename with empty string ksmbd: prevent out-of-bounds stream writes by validating *pos ksmbd: Fix UAF in __close_file_table_ids openvswitch: Fix unsafe attribute parsing in output_userspace() ksmbd: fix memory leak in parse_lease_state() s390/entry: Fix last breaking event handling in case of stack corruption UBUNTU: SAUCE: Revert "sch_htb: make htb_deactivate() idempotent" sch_htb: make htb_deactivate() idempotent virtio-net: don't re-enable refill work too early when NAPI is disabled virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() gre: Fix again IPv6 link-local address generation. net: ethernet: mtk_eth_soc: reset all TX queues on DMA free net: ethernet: mtk_eth_soc: do not reset PSE when setting FE can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe can: mcp251xfd: fix TDC setting for low data bit rates can: gw: fix RCU/BH usage in cgw_create_job() wifi: mac80211: fix the type of status_code for negotiated TID to Link Mapping ice: use DSN instead of PCI BDF for ice_adapter index erofs: ensure the extra temporary copy is valid for shortened bvecs ipvs: fix uninit-value for saddr in do_output_route4 bpf: Scrub packet on bpf_redirect_peer net: dsa: b53: allow leaky reserved multicast net: dsa: b53: keep CPU port always tagged again net: dsa: b53: fix clearing PVID of a port net: dsa: b53: fix flushing old pvid VLAN on pvid change net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave net: dsa: b53: always rejoin default untagged VLAN on bridge leave net: dsa: b53: do not allow to configure VLAN 0 net: dsa: b53: do not program vlans when vlan filtering is off net: dsa: b53: fix toggling vlan_filtering net: dsa: b53: fix learning on VLAN unaware bridges net: dsa: b53: do not set learning and unicast/multicast on up fbnic: Fix initialization of mailbox descriptor rings fbnic: Gate AXI read/write enabling on FW mailbox fbnic: Actually flush_tx instead of stalling out fbnic: Cleanup handling of completions fbnic: Improve responsiveness of fbnic_mbx_poll_tx_ready fbnic: Pull fbnic_fw_xmit_cap_msg use out of interrupt context fbnic: Do not allow mailbox to toggle to ready outside fbnic_mbx_poll_tx_ready net: export a helper for adding up queue stats virtio-net: fix total qstat values Input: cyttsp5 - ensure minimum reset pulse width Input: cyttsp5 - fix power control issue on wakeup Input: mtk-pmic-keys - fix possible null pointer dereference Input: xpad - fix Share button on Xbox One controllers Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller Input: xpad - fix two controller table values Input: synaptics - enable InterTouch on Dynabook Portege X30-D Input: synaptics - enable InterTouch on Dynabook Portege X30L-G Input: synaptics - enable InterTouch on Dell Precision M3800 Input: synaptics - enable SMBus for HP Elitebook 850 G1 Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 rust: clean Rust 1.88.0's `unnecessary_transmutes` lint objtool/rust: add one more `noreturn` Rust function for Rust 1.87.0 rust: clean Rust 1.88.0's warning about `clippy::disallowed_macros` configuration uio_hv_generic: Fix sysfs creation path for ring buffer staging: iio: adc: ad7816: Correct conditional logic for store mode staging: bcm2835-camera: Initialise dev in v4l2_dev staging: axis-fifo: Remove hardware resets for user errors staging: axis-fifo: Correct handling of tx_fifo_depth for size validation x86/mm: Eliminate window where TLB flushes may be inadvertently skipped mm: fix folio_pte_batch() on XEN PV mm: vmalloc: support more granular vrealloc() sizing mm/huge_memory: fix dereferencing invalid pmd migration entry mm/userfaultfd: fix uninitialized output field for -EAGAIN race selftests/mm: compaction_test: support platform with huge mount of memory selftests/mm: fix a build failure on powerpc selftests/mm: fix build break when compiling pkey_util.c KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception drm/amd/display: Shift DMUB AUX reply command if necessary riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL io_uring: ensure deferred completions are flushed for multishot iio: adc: ad7768-1: Fix insufficient alignment of timestamp. iio: adc: ad7266: Fix potential timestamp alignment issue. iio: adc: ad7606: fix serial register access iio: adc: rockchip: Fix clock initialization sequence iio: adis16201: Correct inclinometer channel resolution iio: chemical: sps30: use aligned_s64 for timestamp iio: chemical: pms7003: use aligned_s64 for timestamp iio: hid-sensor-prox: Restore lost scale assignments iio: hid-sensor-prox: support multi-channel SCALE calculation iio: hid-sensor-prox: Fix incorrect OFFSET calculation iio: imu: inv_mpu6050: align buffer for timestamp iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo iio: light: opt3001: fix deadlock due to concurrent flag access iio: pressure: mprls0025pa: use aligned_s64 for timestamp Revert "drm/amd: Stop evicting resources on APUs in suspend" drm/v3d: Add job to pending list if the reset was skipped drm/xe: Add page queue multiplier drm/amdgpu: fix pm notifier handling drm/amdgpu/vcn: using separate VCN1_AON_SOC offset drm/amd/display: Fix invalid context error in dml helper drm/amd/display: Fix the checking condition in dmub aux handling drm/amd/display: Remove incorrect checking in dmub aux handler drm/amd/display: Fix wrong handling for AUX_DEFER case drm/amd/display: Copy AUX read reply data whenever length > 0 xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive. usb: uhci-platform: Make the clock really optional smb: client: Avoid race in open_cached_dir with lease breaks xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it xenbus: Use kref to track req lifetime accel/ivpu: Increase state dump msg timeout arm64: cpufeature: Move arm64_use_ng_mappings to the .data section to prevent wrong idmap generation clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort() memblock: Accept allocated memory before use in memblock_double_array() module: ensure that kobject_put() is safe for module type kobjects x86/microcode: Consolidate the loader enablement checking ocfs2: fix panic in failed foilio allocation ocfs2: fix the issue with discontiguous allocation in the global_bitmap ocfs2: switch osb->disable_recovery to enum ocfs2: implement handshaking with ocfs2 recovery thread ocfs2: stop quota recovery before disabling quotas usb: dwc3: gadget: Make gadget_wakeup asynchronous usb: cdnsp: Fix issue with resuming from L1 usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version usb: gadget: f_ecm: Add get_status callback usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN usb: gadget: Use get_status callback to set remote wakeup capability usb: host: tegra: Prevent host controller crash when OTG port is used usb: misc: onboard_usb_dev: fix support for Cypress HX3 hubs usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition usb: typec: ucsi: displayport: Fix deadlock usb: typec: ucsi: displayport: Fix NULL pointer access USB: usbtmc: use interruptible sleep in usbtmc_read usb: usbtmc: Fix erroneous get_stb ioctl error returns usb: usbtmc: Fix erroneous wait_srq ioctl return usb: usbtmc: Fix erroneous generic_read ioctl return iio: imu: bmi270: fix initial sampling frequency configuration iio: accel: adxl367: fix setting odr for activity time update iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer. iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64 iio: adc: dln2: Use aligned_s64 for timestamp timekeeping: Prevent coarse clocks going backwards accel/ivpu: Separate DB ID and CMDQ ID allocations from CMDQ allocation accel/ivpu: Correct mutex unlock order in job submission MIPS: Fix MAX_REG_OFFSET riscv: misaligned: Add handling for ZCB instructions loop: factor out a loop_assign_backing_file helper loop: Add sanity check for read/write_iter drm/panel: simple: Update timings for AUO G101EVN010 nvme: unblock ctrl state transition for firmware update riscv: misaligned: factorize trap handling riscv: misaligned: enable IRQs while handling misaligned accesses riscv: Disallow PR_GET_TAGGED_ADDR_CTRL without Supm drm/xe/tests/mocs: Hold XE_FORCEWAKE_ALL for LNCF regs drm/xe: Release force wake first then runtime power io_uring/sqpoll: Increase task_work submission batch size do_umount(): add missing barrier before refcount checks in sync case rust: allow Rust 1.87.0's `clippy::ptr_eq` lint rust: clean Rust 1.88.0's `clippy::uninlined_format_args` lint io_uring: always arm linked timeouts prior to issue Bluetooth: btmtk: Remove the resetting step before downloading the fw mm: page_alloc: don't steal single pages from biggest buddy mm: page_alloc: speed up fallbacks in rmqueue_bulk() arm64: insn: Add support for encoding DSB arm64: proton-pack: Expose whether the platform is mitigated by firmware arm64: proton-pack: Expose whether the branchy loop k value arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users arm64: proton-pack: Add new CPUs 'k' values for branch mitigation x86/bpf: Call branch history clearing sequence on exit x86/bpf: Add IBHF call at end of classic BPF x86/bhi: Do not set BHI_DIS_S in 32-bit mode Documentation: x86/bugs/its: Add ITS documentation x86/its: Enumerate Indirect Target Selection (ITS) bug x86/its: Add support for ITS-safe indirect thunk x86/its: Add support for ITS-safe return thunk x86/its: Enable Indirect Target Selection mitigation UBUNTU: [Config] enable MITIGATION_ITS x86/its: Add "vmexit" option to skip mitigation on some CPUs x86/its: Add support for RSB stuffing mitigation x86/its: Align RETs in BHB clear sequence to avoid thunking x86/ibt: Keep IBT disabled during alternative patching x86/its: Use dynamic thunks for indirect branches selftest/x86/bugs: Add selftests for ITS x86/its: Fix build errors when CONFIG_MODULES=n x86/its: FineIBT-paranoid vs ITS Linux 6.14.7 UBUNTU: Upstream stable to v6.14.7 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2115252/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp