Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.14.7 upstream stable release
       from git://git.kernel.org/

dm: add missing unlock on in dm_keyslot_evict()
fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio()
Revert "btrfs: canonicalize the device path before adding it"
arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2
firmware: arm_scmi: Fix timeout checks on polling path
can: mcan: m_can_class_unregister(): fix order of unregistration calls
wifi: cfg80211: fix out-of-bounds access during multi-link element 
defragmentation
vfio/pci: Align huge faults to order
can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls
can: rockchip_canfd: rkcanfd_remove(): fix order of unregistration calls
ksmbd: prevent rename with empty string
ksmbd: prevent out-of-bounds stream writes by validating *pos
ksmbd: Fix UAF in __close_file_table_ids
openvswitch: Fix unsafe attribute parsing in output_userspace()
ksmbd: fix memory leak in parse_lease_state()
s390/entry: Fix last breaking event handling in case of stack corruption
UBUNTU: SAUCE: Revert "sch_htb: make htb_deactivate() idempotent"
sch_htb: make htb_deactivate() idempotent
virtio-net: don't re-enable refill work too early when NAPI is disabled
virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable()
gre: Fix again IPv6 link-local address generation.
net: ethernet: mtk_eth_soc: reset all TX queues on DMA free
net: ethernet: mtk_eth_soc: do not reset PSE when setting FE
can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe
can: mcp251xfd: fix TDC setting for low data bit rates
can: gw: fix RCU/BH usage in cgw_create_job()
wifi: mac80211: fix the type of status_code for negotiated TID to Link Mapping
ice: use DSN instead of PCI BDF for ice_adapter index
erofs: ensure the extra temporary copy is valid for shortened bvecs
ipvs: fix uninit-value for saddr in do_output_route4
bpf: Scrub packet on bpf_redirect_peer
net: dsa: b53: allow leaky reserved multicast
net: dsa: b53: keep CPU port always tagged again
net: dsa: b53: fix clearing PVID of a port
net: dsa: b53: fix flushing old pvid VLAN on pvid change
net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave
net: dsa: b53: always rejoin default untagged VLAN on bridge leave
net: dsa: b53: do not allow to configure VLAN 0
net: dsa: b53: do not program vlans when vlan filtering is off
net: dsa: b53: fix toggling vlan_filtering
net: dsa: b53: fix learning on VLAN unaware bridges
net: dsa: b53: do not set learning and unicast/multicast on up
fbnic: Fix initialization of mailbox descriptor rings
fbnic: Gate AXI read/write enabling on FW mailbox
fbnic: Actually flush_tx instead of stalling out
fbnic: Cleanup handling of completions
fbnic: Improve responsiveness of fbnic_mbx_poll_tx_ready
fbnic: Pull fbnic_fw_xmit_cap_msg use out of interrupt context
fbnic: Do not allow mailbox to toggle to ready outside fbnic_mbx_poll_tx_ready
net: export a helper for adding up queue stats
virtio-net: fix total qstat values
Input: cyttsp5 - ensure minimum reset pulse width
Input: cyttsp5 - fix power control issue on wakeup
Input: mtk-pmic-keys - fix possible null pointer dereference
Input: xpad - fix Share button on Xbox One controllers
Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller
Input: xpad - fix two controller table values
Input: synaptics - enable InterTouch on Dynabook Portege X30-D
Input: synaptics - enable InterTouch on Dynabook Portege X30L-G
Input: synaptics - enable InterTouch on Dell Precision M3800
Input: synaptics - enable SMBus for HP Elitebook 850 G1
Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5
rust: clean Rust 1.88.0's `unnecessary_transmutes` lint
objtool/rust: add one more `noreturn` Rust function for Rust 1.87.0
rust: clean Rust 1.88.0's warning about `clippy::disallowed_macros` 
configuration
uio_hv_generic: Fix sysfs creation path for ring buffer
staging: iio: adc: ad7816: Correct conditional logic for store mode
staging: bcm2835-camera: Initialise dev in v4l2_dev
staging: axis-fifo: Remove hardware resets for user errors
staging: axis-fifo: Correct handling of tx_fifo_depth for size validation
x86/mm: Eliminate window where TLB flushes may be inadvertently skipped
mm: fix folio_pte_batch() on XEN PV
mm: vmalloc: support more granular vrealloc() sizing
mm/huge_memory: fix dereferencing invalid pmd migration entry
mm/userfaultfd: fix uninitialized output field for -EAGAIN race
selftests/mm: compaction_test: support platform with huge mount of memory
selftests/mm: fix a build failure on powerpc
selftests/mm: fix build break when compiling pkey_util.c
KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing
KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
drm/amd/display: Shift DMUB AUX reply command if necessary
riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL
io_uring: ensure deferred completions are flushed for multishot
iio: adc: ad7768-1: Fix insufficient alignment of timestamp.
iio: adc: ad7266: Fix potential timestamp alignment issue.
iio: adc: ad7606: fix serial register access
iio: adc: rockchip: Fix clock initialization sequence
iio: adis16201: Correct inclinometer channel resolution
iio: chemical: sps30: use aligned_s64 for timestamp
iio: chemical: pms7003: use aligned_s64 for timestamp
iio: hid-sensor-prox: Restore lost scale assignments
iio: hid-sensor-prox: support multi-channel SCALE calculation
iio: hid-sensor-prox: Fix incorrect OFFSET calculation
iio: imu: inv_mpu6050: align buffer for timestamp
iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
iio: light: opt3001: fix deadlock due to concurrent flag access
iio: pressure: mprls0025pa: use aligned_s64 for timestamp
Revert "drm/amd: Stop evicting resources on APUs in suspend"
drm/v3d: Add job to pending list if the reset was skipped
drm/xe: Add page queue multiplier
drm/amdgpu: fix pm notifier handling
drm/amdgpu/vcn: using separate VCN1_AON_SOC offset
drm/amd/display: Fix invalid context error in dml helper
drm/amd/display: Fix the checking condition in dmub aux handling
drm/amd/display: Remove incorrect checking in dmub aux handler
drm/amd/display: Fix wrong handling for AUX_DEFER case
drm/amd/display: Copy AUX read reply data whenever length > 0
xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive.
usb: uhci-platform: Make the clock really optional
smb: client: Avoid race in open_cached_dir with lease breaks
xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it
xenbus: Use kref to track req lifetime
accel/ivpu: Increase state dump msg timeout
arm64: cpufeature: Move arm64_use_ng_mappings to the .data section to prevent 
wrong idmap generation
clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable()
KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort()
memblock: Accept allocated memory before use in memblock_double_array()
module: ensure that kobject_put() is safe for module type kobjects
x86/microcode: Consolidate the loader enablement checking
ocfs2: fix panic in failed foilio allocation
ocfs2: fix the issue with discontiguous allocation in the global_bitmap
ocfs2: switch osb->disable_recovery to enum
ocfs2: implement handshaking with ocfs2 recovery thread
ocfs2: stop quota recovery before disabling quotas
usb: dwc3: gadget: Make gadget_wakeup asynchronous
usb: cdnsp: Fix issue with resuming from L1
usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version
usb: gadget: f_ecm: Add get_status callback
usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN
usb: gadget: Use get_status callback to set remote wakeup capability
usb: host: tegra: Prevent host controller crash when OTG port is used
usb: misc: onboard_usb_dev: fix support for Cypress HX3 hubs
usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition
usb: typec: ucsi: displayport: Fix deadlock
usb: typec: ucsi: displayport: Fix NULL pointer access
USB: usbtmc: use interruptible sleep in usbtmc_read
usb: usbtmc: Fix erroneous get_stb ioctl error returns
usb: usbtmc: Fix erroneous wait_srq ioctl return
usb: usbtmc: Fix erroneous generic_read ioctl return
iio: imu: bmi270: fix initial sampling frequency configuration
iio: accel: adxl367: fix setting odr for activity time update
iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer.
iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64
iio: adc: dln2: Use aligned_s64 for timestamp
timekeeping: Prevent coarse clocks going backwards
accel/ivpu: Separate DB ID and CMDQ ID allocations from CMDQ allocation
accel/ivpu: Correct mutex unlock order in job submission
MIPS: Fix MAX_REG_OFFSET
riscv: misaligned: Add handling for ZCB instructions
loop: factor out a loop_assign_backing_file helper
loop: Add sanity check for read/write_iter
drm/panel: simple: Update timings for AUO G101EVN010
nvme: unblock ctrl state transition for firmware update
riscv: misaligned: factorize trap handling
riscv: misaligned: enable IRQs while handling misaligned accesses
riscv: Disallow PR_GET_TAGGED_ADDR_CTRL without Supm
drm/xe/tests/mocs: Hold XE_FORCEWAKE_ALL for LNCF regs
drm/xe: Release force wake first then runtime power
io_uring/sqpoll: Increase task_work submission batch size
do_umount(): add missing barrier before refcount checks in sync case
rust: allow Rust 1.87.0's `clippy::ptr_eq` lint
rust: clean Rust 1.88.0's `clippy::uninlined_format_args` lint
io_uring: always arm linked timeouts prior to issue
Bluetooth: btmtk: Remove the resetting step before downloading the fw
mm: page_alloc: don't steal single pages from biggest buddy
mm: page_alloc: speed up fallbacks in rmqueue_bulk()
arm64: insn: Add support for encoding DSB
arm64: proton-pack: Expose whether the platform is mitigated by firmware
arm64: proton-pack: Expose whether the branchy loop k value
arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
arm64: proton-pack: Add new CPUs 'k' values for branch mitigation
x86/bpf: Call branch history clearing sequence on exit
x86/bpf: Add IBHF call at end of classic BPF
x86/bhi: Do not set BHI_DIS_S in 32-bit mode
Documentation: x86/bugs/its: Add ITS documentation
x86/its: Enumerate Indirect Target Selection (ITS) bug
x86/its: Add support for ITS-safe indirect thunk
x86/its: Add support for ITS-safe return thunk
x86/its: Enable Indirect Target Selection mitigation
UBUNTU: [Config] enable MITIGATION_ITS
x86/its: Add "vmexit" option to skip mitigation on some CPUs
x86/its: Add support for RSB stuffing mitigation
x86/its: Align RETs in BHB clear sequence to avoid thunking
x86/ibt: Keep IBT disabled during alternative patching
x86/its: Use dynamic thunks for indirect branches
selftest/x86/bugs: Add selftests for ITS
x86/its: Fix build errors when CONFIG_MODULES=n
x86/its: FineIBT-paranoid vs ITS
Linux 6.14.7
UBUNTU: Upstream stable to v6.14.7

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: linux (Ubuntu Plucky)
     Importance: Medium
     Assignee: Manuel Diewald (diewald)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Plucky)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu)
       Status: Confirmed => Invalid

** Changed in: linux (Ubuntu Plucky)
   Importance: Undecided => Medium

** Changed in: linux (Ubuntu Plucky)
       Status: New => In Progress

** Changed in: linux (Ubuntu Plucky)
     Assignee: (unassigned) => Manuel Diewald (diewald)

** Description changed:

  
      SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
         v6.14.7 upstream stable release
         from git://git.kernel.org/
  
-             
+ dm: add missing unlock on in dm_keyslot_evict()
+ fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio()
+ Revert "btrfs: canonicalize the device path before adding it"
+ arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2
+ firmware: arm_scmi: Fix timeout checks on polling path
+ can: mcan: m_can_class_unregister(): fix order of unregistration calls
+ wifi: cfg80211: fix out-of-bounds access during multi-link element 
defragmentation
+ vfio/pci: Align huge faults to order
+ can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls
+ can: rockchip_canfd: rkcanfd_remove(): fix order of unregistration calls
+ ksmbd: prevent rename with empty string
+ ksmbd: prevent out-of-bounds stream writes by validating *pos
+ ksmbd: Fix UAF in __close_file_table_ids
+ openvswitch: Fix unsafe attribute parsing in output_userspace()
+ ksmbd: fix memory leak in parse_lease_state()
+ s390/entry: Fix last breaking event handling in case of stack corruption
+ UBUNTU: SAUCE: Revert "sch_htb: make htb_deactivate() idempotent"
+ sch_htb: make htb_deactivate() idempotent
+ virtio-net: don't re-enable refill work too early when NAPI is disabled
+ virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable()
+ gre: Fix again IPv6 link-local address generation.
+ net: ethernet: mtk_eth_soc: reset all TX queues on DMA free
+ net: ethernet: mtk_eth_soc: do not reset PSE when setting FE
+ can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe
+ can: mcp251xfd: fix TDC setting for low data bit rates
+ can: gw: fix RCU/BH usage in cgw_create_job()
+ wifi: mac80211: fix the type of status_code for negotiated TID to Link Mapping
+ ice: use DSN instead of PCI BDF for ice_adapter index
+ erofs: ensure the extra temporary copy is valid for shortened bvecs
+ ipvs: fix uninit-value for saddr in do_output_route4
+ bpf: Scrub packet on bpf_redirect_peer
+ net: dsa: b53: allow leaky reserved multicast
+ net: dsa: b53: keep CPU port always tagged again
+ net: dsa: b53: fix clearing PVID of a port
+ net: dsa: b53: fix flushing old pvid VLAN on pvid change
+ net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave
+ net: dsa: b53: always rejoin default untagged VLAN on bridge leave
+ net: dsa: b53: do not allow to configure VLAN 0
+ net: dsa: b53: do not program vlans when vlan filtering is off
+ net: dsa: b53: fix toggling vlan_filtering
+ net: dsa: b53: fix learning on VLAN unaware bridges
+ net: dsa: b53: do not set learning and unicast/multicast on up
+ fbnic: Fix initialization of mailbox descriptor rings
+ fbnic: Gate AXI read/write enabling on FW mailbox
+ fbnic: Actually flush_tx instead of stalling out
+ fbnic: Cleanup handling of completions
+ fbnic: Improve responsiveness of fbnic_mbx_poll_tx_ready
+ fbnic: Pull fbnic_fw_xmit_cap_msg use out of interrupt context
+ fbnic: Do not allow mailbox to toggle to ready outside fbnic_mbx_poll_tx_ready
+ net: export a helper for adding up queue stats
+ virtio-net: fix total qstat values
+ Input: cyttsp5 - ensure minimum reset pulse width
+ Input: cyttsp5 - fix power control issue on wakeup
+ Input: mtk-pmic-keys - fix possible null pointer dereference
+ Input: xpad - fix Share button on Xbox One controllers
+ Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller
+ Input: xpad - fix two controller table values
+ Input: synaptics - enable InterTouch on Dynabook Portege X30-D
+ Input: synaptics - enable InterTouch on Dynabook Portege X30L-G
+ Input: synaptics - enable InterTouch on Dell Precision M3800
+ Input: synaptics - enable SMBus for HP Elitebook 850 G1
+ Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5
+ rust: clean Rust 1.88.0's `unnecessary_transmutes` lint
+ objtool/rust: add one more `noreturn` Rust function for Rust 1.87.0
+ rust: clean Rust 1.88.0's warning about `clippy::disallowed_macros` 
configuration
+ uio_hv_generic: Fix sysfs creation path for ring buffer
+ staging: iio: adc: ad7816: Correct conditional logic for store mode
+ staging: bcm2835-camera: Initialise dev in v4l2_dev
+ staging: axis-fifo: Remove hardware resets for user errors
+ staging: axis-fifo: Correct handling of tx_fifo_depth for size validation
+ x86/mm: Eliminate window where TLB flushes may be inadvertently skipped
+ mm: fix folio_pte_batch() on XEN PV
+ mm: vmalloc: support more granular vrealloc() sizing
+ mm/huge_memory: fix dereferencing invalid pmd migration entry
+ mm/userfaultfd: fix uninitialized output field for -EAGAIN race
+ selftests/mm: compaction_test: support platform with huge mount of memory
+ selftests/mm: fix a build failure on powerpc
+ selftests/mm: fix build break when compiling pkey_util.c
+ KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing
+ KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
+ drm/amd/display: Shift DMUB AUX reply command if necessary
+ riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL
+ io_uring: ensure deferred completions are flushed for multishot
+ iio: adc: ad7768-1: Fix insufficient alignment of timestamp.
+ iio: adc: ad7266: Fix potential timestamp alignment issue.
+ iio: adc: ad7606: fix serial register access
+ iio: adc: rockchip: Fix clock initialization sequence
+ iio: adis16201: Correct inclinometer channel resolution
+ iio: chemical: sps30: use aligned_s64 for timestamp
+ iio: chemical: pms7003: use aligned_s64 for timestamp
+ iio: hid-sensor-prox: Restore lost scale assignments
+ iio: hid-sensor-prox: support multi-channel SCALE calculation
+ iio: hid-sensor-prox: Fix incorrect OFFSET calculation
+ iio: imu: inv_mpu6050: align buffer for timestamp
+ iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
+ iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
+ iio: light: opt3001: fix deadlock due to concurrent flag access
+ iio: pressure: mprls0025pa: use aligned_s64 for timestamp
+ Revert "drm/amd: Stop evicting resources on APUs in suspend"
+ drm/v3d: Add job to pending list if the reset was skipped
+ drm/xe: Add page queue multiplier
+ drm/amdgpu: fix pm notifier handling
+ drm/amdgpu/vcn: using separate VCN1_AON_SOC offset
+ drm/amd/display: Fix invalid context error in dml helper
+ drm/amd/display: Fix the checking condition in dmub aux handling
+ drm/amd/display: Remove incorrect checking in dmub aux handler
+ drm/amd/display: Fix wrong handling for AUX_DEFER case
+ drm/amd/display: Copy AUX read reply data whenever length > 0
+ xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive.
+ usb: uhci-platform: Make the clock really optional
+ smb: client: Avoid race in open_cached_dir with lease breaks
+ xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it
+ xenbus: Use kref to track req lifetime
+ accel/ivpu: Increase state dump msg timeout
+ arm64: cpufeature: Move arm64_use_ng_mappings to the .data section to prevent 
wrong idmap generation
+ clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable()
+ KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort()
+ memblock: Accept allocated memory before use in memblock_double_array()
+ module: ensure that kobject_put() is safe for module type kobjects
+ x86/microcode: Consolidate the loader enablement checking
+ ocfs2: fix panic in failed foilio allocation
+ ocfs2: fix the issue with discontiguous allocation in the global_bitmap
+ ocfs2: switch osb->disable_recovery to enum
+ ocfs2: implement handshaking with ocfs2 recovery thread
+ ocfs2: stop quota recovery before disabling quotas
+ usb: dwc3: gadget: Make gadget_wakeup asynchronous
+ usb: cdnsp: Fix issue with resuming from L1
+ usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version
+ usb: gadget: f_ecm: Add get_status callback
+ usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN
+ usb: gadget: Use get_status callback to set remote wakeup capability
+ usb: host: tegra: Prevent host controller crash when OTG port is used
+ usb: misc: onboard_usb_dev: fix support for Cypress HX3 hubs
+ usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition
+ usb: typec: ucsi: displayport: Fix deadlock
+ usb: typec: ucsi: displayport: Fix NULL pointer access
+ USB: usbtmc: use interruptible sleep in usbtmc_read
+ usb: usbtmc: Fix erroneous get_stb ioctl error returns
+ usb: usbtmc: Fix erroneous wait_srq ioctl return
+ usb: usbtmc: Fix erroneous generic_read ioctl return
+ iio: imu: bmi270: fix initial sampling frequency configuration
+ iio: accel: adxl367: fix setting odr for activity time update
+ iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer.
+ iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64
+ iio: adc: dln2: Use aligned_s64 for timestamp
+ timekeeping: Prevent coarse clocks going backwards
+ accel/ivpu: Separate DB ID and CMDQ ID allocations from CMDQ allocation
+ accel/ivpu: Correct mutex unlock order in job submission
+ MIPS: Fix MAX_REG_OFFSET
+ riscv: misaligned: Add handling for ZCB instructions
+ loop: factor out a loop_assign_backing_file helper
+ loop: Add sanity check for read/write_iter
+ drm/panel: simple: Update timings for AUO G101EVN010
+ nvme: unblock ctrl state transition for firmware update
+ riscv: misaligned: factorize trap handling
+ riscv: misaligned: enable IRQs while handling misaligned accesses
+ riscv: Disallow PR_GET_TAGGED_ADDR_CTRL without Supm
+ drm/xe/tests/mocs: Hold XE_FORCEWAKE_ALL for LNCF regs
+ drm/xe: Release force wake first then runtime power
+ io_uring/sqpoll: Increase task_work submission batch size
+ do_umount(): add missing barrier before refcount checks in sync case
+ rust: allow Rust 1.87.0's `clippy::ptr_eq` lint
+ rust: clean Rust 1.88.0's `clippy::uninlined_format_args` lint
+ io_uring: always arm linked timeouts prior to issue
+ Bluetooth: btmtk: Remove the resetting step before downloading the fw
+ mm: page_alloc: don't steal single pages from biggest buddy
+ mm: page_alloc: speed up fallbacks in rmqueue_bulk()
+ arm64: insn: Add support for encoding DSB
+ arm64: proton-pack: Expose whether the platform is mitigated by firmware
+ arm64: proton-pack: Expose whether the branchy loop k value
+ arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
+ arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
+ arm64: proton-pack: Add new CPUs 'k' values for branch mitigation
+ x86/bpf: Call branch history clearing sequence on exit
+ x86/bpf: Add IBHF call at end of classic BPF
+ x86/bhi: Do not set BHI_DIS_S in 32-bit mode
+ Documentation: x86/bugs/its: Add ITS documentation
+ x86/its: Enumerate Indirect Target Selection (ITS) bug
+ x86/its: Add support for ITS-safe indirect thunk
+ x86/its: Add support for ITS-safe return thunk
+ x86/its: Enable Indirect Target Selection mitigation
+ UBUNTU: [Config] enable MITIGATION_ITS
+ x86/its: Add "vmexit" option to skip mitigation on some CPUs
+ x86/its: Add support for RSB stuffing mitigation
+ x86/its: Align RETs in BHB clear sequence to avoid thunking
+ x86/ibt: Keep IBT disabled during alternative patching
+ x86/its: Use dynamic thunks for indirect branches
+ selftest/x86/bugs: Add selftests for ITS
+ x86/its: Fix build errors when CONFIG_MODULES=n
+ x86/its: FineIBT-paranoid vs ITS
  Linux 6.14.7
- x86/its: FineIBT-paranoid vs ITS
- x86/its: Fix build errors when CONFIG_MODULES=n
- selftest/x86/bugs: Add selftests for ITS
- x86/its: Use dynamic thunks for indirect branches
- x86/ibt: Keep IBT disabled during alternative patching
- x86/its: Align RETs in BHB clear sequence to avoid thunking
- x86/its: Add support for RSB stuffing mitigation
- x86/its: Add "vmexit" option to skip mitigation on some CPUs
- x86/its: Enable Indirect Target Selection mitigation
- x86/its: Add support for ITS-safe return thunk
- x86/its: Add support for ITS-safe indirect thunk
- x86/its: Enumerate Indirect Target Selection (ITS) bug
- Documentation: x86/bugs/its: Add ITS documentation
- x86/bhi: Do not set BHI_DIS_S in 32-bit mode
- x86/bpf: Add IBHF call at end of classic BPF
- x86/bpf: Call branch history clearing sequence on exit
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
- arm64: proton-pack: Expose whether the branchy loop k value
- arm64: proton-pack: Expose whether the platform is mitigated by firmware
- arm64: insn: Add support for encoding DSB
- mm: page_alloc: speed up fallbacks in rmqueue_bulk()
- mm: page_alloc: don't steal single pages from biggest buddy
- Bluetooth: btmtk: Remove the resetting step before downloading the fw
- io_uring: always arm linked timeouts prior to issue
- rust: clean Rust 1.88.0's `clippy::uninlined_format_args` lint
- rust: allow Rust 1.87.0's `clippy::ptr_eq` lint
- do_umount(): add missing barrier before refcount checks in sync case
- io_uring/sqpoll: Increase task_work submission batch size
- drm/xe: Release force wake first then runtime power
- drm/xe/tests/mocs: Hold XE_FORCEWAKE_ALL for LNCF regs
- riscv: Disallow PR_GET_TAGGED_ADDR_CTRL without Supm
- riscv: misaligned: enable IRQs while handling misaligned accesses
- riscv: misaligned: factorize trap handling
- nvme: unblock ctrl state transition for firmware update
- drm/panel: simple: Update timings for AUO G101EVN010
- loop: Add sanity check for read/write_iter
- loop: factor out a loop_assign_backing_file helper
- riscv: misaligned: Add handling for ZCB instructions
- MIPS: Fix MAX_REG_OFFSET
- accel/ivpu: Correct mutex unlock order in job submission
- accel/ivpu: Separate DB ID and CMDQ ID allocations from CMDQ allocation
- timekeeping: Prevent coarse clocks going backwards
- iio: adc: dln2: Use aligned_s64 for timestamp
- iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64
- iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer.
- iio: accel: adxl367: fix setting odr for activity time update
- iio: imu: bmi270: fix initial sampling frequency configuration
- usb: usbtmc: Fix erroneous generic_read ioctl return
- usb: usbtmc: Fix erroneous wait_srq ioctl return
- usb: usbtmc: Fix erroneous get_stb ioctl error returns
- USB: usbtmc: use interruptible sleep in usbtmc_read
- usb: typec: ucsi: displayport: Fix NULL pointer access
- usb: typec: ucsi: displayport: Fix deadlock
- usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition
- usb: misc: onboard_usb_dev: fix support for Cypress HX3 hubs
- usb: host: tegra: Prevent host controller crash when OTG port is used
- usb: gadget: Use get_status callback to set remote wakeup capability
- usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN
- usb: gadget: f_ecm: Add get_status callback
- usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version
- usb: cdnsp: Fix issue with resuming from L1
- usb: dwc3: gadget: Make gadget_wakeup asynchronous
- ocfs2: stop quota recovery before disabling quotas
- ocfs2: implement handshaking with ocfs2 recovery thread
- ocfs2: switch osb->disable_recovery to enum
- ocfs2: fix the issue with discontiguous allocation in the global_bitmap
- ocfs2: fix panic in failed foilio allocation
- x86/microcode: Consolidate the loader enablement checking
- module: ensure that kobject_put() is safe for module type kobjects
- memblock: Accept allocated memory before use in memblock_double_array()
- KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort()
- clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable()
- arm64: cpufeature: Move arm64_use_ng_mappings to the .data section to prevent 
wrong idmap generation
- accel/ivpu: Increase state dump msg timeout
- xenbus: Use kref to track req lifetime
- xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it
- smb: client: Avoid race in open_cached_dir with lease breaks
- usb: uhci-platform: Make the clock really optional
- xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive.
- drm/amdgpu/hdp7: use memcfg register to post the write for HDP flush
- drm/amdgpu/hdp6: use memcfg register to post the write for HDP flush
- drm/amdgpu/hdp5: use memcfg register to post the write for HDP flush
- drm/amdgpu/hdp5.2: use memcfg register to post the write for HDP flush
- drm/amdgpu/hdp4: use memcfg register to post the write for HDP flush
- drm/amd/display: Copy AUX read reply data whenever length > 0
- drm/amd/display: Fix wrong handling for AUX_DEFER case
- drm/amd/display: Remove incorrect checking in dmub aux handler
- drm/amd/display: Fix the checking condition in dmub aux handling
- drm/amd/display: more liberal vmin/vmax update for freesync
- drm/amd/display: Fix invalid context error in dml helper
- drm/amdgpu/vcn: using separate VCN1_AON_SOC offset
- drm/amdgpu: fix pm notifier handling
- drm/xe: Add page queue multiplier
- drm/v3d: Add job to pending list if the reset was skipped
- Revert "drm/amd: Stop evicting resources on APUs in suspend"
- iio: pressure: mprls0025pa: use aligned_s64 for timestamp
- iio: light: opt3001: fix deadlock due to concurrent flag access
- iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
- iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
- iio: imu: inv_mpu6050: align buffer for timestamp
- iio: hid-sensor-prox: Fix incorrect OFFSET calculation
- iio: hid-sensor-prox: support multi-channel SCALE calculation
- iio: hid-sensor-prox: Restore lost scale assignments
- iio: chemical: pms7003: use aligned_s64 for timestamp
- iio: chemical: sps30: use aligned_s64 for timestamp
- iio: adis16201: Correct inclinometer channel resolution
- iio: adc: rockchip: Fix clock initialization sequence
- iio: adc: ad7606: fix serial register access
- iio: adc: ad7266: Fix potential timestamp alignment issue.
- iio: adc: ad7768-1: Fix insufficient alignment of timestamp.
- io_uring: ensure deferred completions are flushed for multishot
- riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL
- drm/amd/display: Shift DMUB AUX reply command if necessary
- KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
- KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing
- selftests/mm: fix build break when compiling pkey_util.c
- selftests/mm: fix a build failure on powerpc
- selftests/mm: compaction_test: support platform with huge mount of memory
- mm/userfaultfd: fix uninitialized output field for -EAGAIN race
- mm/huge_memory: fix dereferencing invalid pmd migration entry
- mm: vmalloc: support more granular vrealloc() sizing
- mm: fix folio_pte_batch() on XEN PV
- x86/mm: Eliminate window where TLB flushes may be inadvertently skipped
- staging: axis-fifo: Correct handling of tx_fifo_depth for size validation
- staging: axis-fifo: Remove hardware resets for user errors
- staging: bcm2835-camera: Initialise dev in v4l2_dev
- staging: iio: adc: ad7816: Correct conditional logic for store mode
- uio_hv_generic: Fix sysfs creation path for ring buffer
- rust: clean Rust 1.88.0's warning about `clippy::disallowed_macros` 
configuration
- objtool/rust: add one more `noreturn` Rust function for Rust 1.87.0
- rust: clean Rust 1.88.0's `unnecessary_transmutes` lint
- Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5
- Input: synaptics - enable SMBus for HP Elitebook 850 G1
- Input: synaptics - enable InterTouch on Dell Precision M3800
- Input: synaptics - enable InterTouch on Dynabook Portege X30L-G
- Input: synaptics - enable InterTouch on Dynabook Portege X30-D
- Input: xpad - fix two controller table values
- Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller
- Input: xpad - fix Share button on Xbox One controllers
- Input: mtk-pmic-keys - fix possible null pointer dereference
- Input: cyttsp5 - fix power control issue on wakeup
- Input: cyttsp5 - ensure minimum reset pulse width
- virtio-net: fix total qstat values
- net: export a helper for adding up queue stats
- fbnic: Do not allow mailbox to toggle to ready outside fbnic_mbx_poll_tx_ready
- fbnic: Pull fbnic_fw_xmit_cap_msg use out of interrupt context
- fbnic: Improve responsiveness of fbnic_mbx_poll_tx_ready
- fbnic: Cleanup handling of completions
- fbnic: Actually flush_tx instead of stalling out
- fbnic: Gate AXI read/write enabling on FW mailbox
- fbnic: Fix initialization of mailbox descriptor rings
- net: dsa: b53: do not set learning and unicast/multicast on up
- net: dsa: b53: fix learning on VLAN unaware bridges
- net: dsa: b53: fix toggling vlan_filtering
- net: dsa: b53: do not program vlans when vlan filtering is off
- net: dsa: b53: do not allow to configure VLAN 0
- net: dsa: b53: always rejoin default untagged VLAN on bridge leave
- net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave
- net: dsa: b53: fix flushing old pvid VLAN on pvid change
- net: dsa: b53: fix clearing PVID of a port
- net: dsa: b53: keep CPU port always tagged again
- net: dsa: b53: allow leaky reserved multicast
- bpf: Scrub packet on bpf_redirect_peer
- netfilter: ipset: fix region locking in hash types
- ipvs: fix uninit-value for saddr in do_output_route4
- erofs: ensure the extra temporary copy is valid for shortened bvecs
- ice: use DSN instead of PCI BDF for ice_adapter index
- wifi: mac80211: fix the type of status_code for negotiated TID to Link Mapping
- can: gw: fix RCU/BH usage in cgw_create_job()
- can: mcp251xfd: fix TDC setting for low data bit rates
- can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe
- net: ethernet: mtk_eth_soc: do not reset PSE when setting FE
- net: ethernet: mtk_eth_soc: reset all TX queues on DMA free
- gre: Fix again IPv6 link-local address generation.
- virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable()
- virtio-net: don't re-enable refill work too early when NAPI is disabled
- sch_htb: make htb_deactivate() idempotent
- s390/entry: Fix last breaking event handling in case of stack corruption
- ksmbd: fix memory leak in parse_lease_state()
- openvswitch: Fix unsafe attribute parsing in output_userspace()
- ksmbd: Fix UAF in __close_file_table_ids
- ksmbd: prevent out-of-bounds stream writes by validating *pos
- ksmbd: prevent rename with empty string
- can: rockchip_canfd: rkcanfd_remove(): fix order of unregistration calls
- can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs
- vfio/pci: Align huge faults to order
- wifi: cfg80211: fix out-of-bounds access during multi-link element 
defragmentation
- s390/pci: Fix missing check for zpci_create_device() error return
- can: mcan: m_can_class_unregister(): fix order of unregistration calls
- firmware: arm_scmi: Fix timeout checks on polling path
- arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2
- Revert "btrfs: canonicalize the device path before adding it"
- fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio()
- dm: add missing unlock on in dm_keyslot_evict()
+ UBUNTU: Upstream stable to v6.14.7

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2115252

Title:
  Plucky update: v6.14.7 upstream stable release

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Plucky:
  In Progress

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v6.14.7 upstream stable release
         from git://git.kernel.org/

  dm: add missing unlock on in dm_keyslot_evict()
  fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio()
  Revert "btrfs: canonicalize the device path before adding it"
  arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2
  firmware: arm_scmi: Fix timeout checks on polling path
  can: mcan: m_can_class_unregister(): fix order of unregistration calls
  wifi: cfg80211: fix out-of-bounds access during multi-link element 
defragmentation
  vfio/pci: Align huge faults to order
  can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls
  can: rockchip_canfd: rkcanfd_remove(): fix order of unregistration calls
  ksmbd: prevent rename with empty string
  ksmbd: prevent out-of-bounds stream writes by validating *pos
  ksmbd: Fix UAF in __close_file_table_ids
  openvswitch: Fix unsafe attribute parsing in output_userspace()
  ksmbd: fix memory leak in parse_lease_state()
  s390/entry: Fix last breaking event handling in case of stack corruption
  UBUNTU: SAUCE: Revert "sch_htb: make htb_deactivate() idempotent"
  sch_htb: make htb_deactivate() idempotent
  virtio-net: don't re-enable refill work too early when NAPI is disabled
  virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable()
  gre: Fix again IPv6 link-local address generation.
  net: ethernet: mtk_eth_soc: reset all TX queues on DMA free
  net: ethernet: mtk_eth_soc: do not reset PSE when setting FE
  can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe
  can: mcp251xfd: fix TDC setting for low data bit rates
  can: gw: fix RCU/BH usage in cgw_create_job()
  wifi: mac80211: fix the type of status_code for negotiated TID to Link Mapping
  ice: use DSN instead of PCI BDF for ice_adapter index
  erofs: ensure the extra temporary copy is valid for shortened bvecs
  ipvs: fix uninit-value for saddr in do_output_route4
  bpf: Scrub packet on bpf_redirect_peer
  net: dsa: b53: allow leaky reserved multicast
  net: dsa: b53: keep CPU port always tagged again
  net: dsa: b53: fix clearing PVID of a port
  net: dsa: b53: fix flushing old pvid VLAN on pvid change
  net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave
  net: dsa: b53: always rejoin default untagged VLAN on bridge leave
  net: dsa: b53: do not allow to configure VLAN 0
  net: dsa: b53: do not program vlans when vlan filtering is off
  net: dsa: b53: fix toggling vlan_filtering
  net: dsa: b53: fix learning on VLAN unaware bridges
  net: dsa: b53: do not set learning and unicast/multicast on up
  fbnic: Fix initialization of mailbox descriptor rings
  fbnic: Gate AXI read/write enabling on FW mailbox
  fbnic: Actually flush_tx instead of stalling out
  fbnic: Cleanup handling of completions
  fbnic: Improve responsiveness of fbnic_mbx_poll_tx_ready
  fbnic: Pull fbnic_fw_xmit_cap_msg use out of interrupt context
  fbnic: Do not allow mailbox to toggle to ready outside fbnic_mbx_poll_tx_ready
  net: export a helper for adding up queue stats
  virtio-net: fix total qstat values
  Input: cyttsp5 - ensure minimum reset pulse width
  Input: cyttsp5 - fix power control issue on wakeup
  Input: mtk-pmic-keys - fix possible null pointer dereference
  Input: xpad - fix Share button on Xbox One controllers
  Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller
  Input: xpad - fix two controller table values
  Input: synaptics - enable InterTouch on Dynabook Portege X30-D
  Input: synaptics - enable InterTouch on Dynabook Portege X30L-G
  Input: synaptics - enable InterTouch on Dell Precision M3800
  Input: synaptics - enable SMBus for HP Elitebook 850 G1
  Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5
  rust: clean Rust 1.88.0's `unnecessary_transmutes` lint
  objtool/rust: add one more `noreturn` Rust function for Rust 1.87.0
  rust: clean Rust 1.88.0's warning about `clippy::disallowed_macros` 
configuration
  uio_hv_generic: Fix sysfs creation path for ring buffer
  staging: iio: adc: ad7816: Correct conditional logic for store mode
  staging: bcm2835-camera: Initialise dev in v4l2_dev
  staging: axis-fifo: Remove hardware resets for user errors
  staging: axis-fifo: Correct handling of tx_fifo_depth for size validation
  x86/mm: Eliminate window where TLB flushes may be inadvertently skipped
  mm: fix folio_pte_batch() on XEN PV
  mm: vmalloc: support more granular vrealloc() sizing
  mm/huge_memory: fix dereferencing invalid pmd migration entry
  mm/userfaultfd: fix uninitialized output field for -EAGAIN race
  selftests/mm: compaction_test: support platform with huge mount of memory
  selftests/mm: fix a build failure on powerpc
  selftests/mm: fix build break when compiling pkey_util.c
  KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing
  KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
  drm/amd/display: Shift DMUB AUX reply command if necessary
  riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL
  io_uring: ensure deferred completions are flushed for multishot
  iio: adc: ad7768-1: Fix insufficient alignment of timestamp.
  iio: adc: ad7266: Fix potential timestamp alignment issue.
  iio: adc: ad7606: fix serial register access
  iio: adc: rockchip: Fix clock initialization sequence
  iio: adis16201: Correct inclinometer channel resolution
  iio: chemical: sps30: use aligned_s64 for timestamp
  iio: chemical: pms7003: use aligned_s64 for timestamp
  iio: hid-sensor-prox: Restore lost scale assignments
  iio: hid-sensor-prox: support multi-channel SCALE calculation
  iio: hid-sensor-prox: Fix incorrect OFFSET calculation
  iio: imu: inv_mpu6050: align buffer for timestamp
  iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
  iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
  iio: light: opt3001: fix deadlock due to concurrent flag access
  iio: pressure: mprls0025pa: use aligned_s64 for timestamp
  Revert "drm/amd: Stop evicting resources on APUs in suspend"
  drm/v3d: Add job to pending list if the reset was skipped
  drm/xe: Add page queue multiplier
  drm/amdgpu: fix pm notifier handling
  drm/amdgpu/vcn: using separate VCN1_AON_SOC offset
  drm/amd/display: Fix invalid context error in dml helper
  drm/amd/display: Fix the checking condition in dmub aux handling
  drm/amd/display: Remove incorrect checking in dmub aux handler
  drm/amd/display: Fix wrong handling for AUX_DEFER case
  drm/amd/display: Copy AUX read reply data whenever length > 0
  xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive.
  usb: uhci-platform: Make the clock really optional
  smb: client: Avoid race in open_cached_dir with lease breaks
  xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it
  xenbus: Use kref to track req lifetime
  accel/ivpu: Increase state dump msg timeout
  arm64: cpufeature: Move arm64_use_ng_mappings to the .data section to prevent 
wrong idmap generation
  clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable()
  KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort()
  memblock: Accept allocated memory before use in memblock_double_array()
  module: ensure that kobject_put() is safe for module type kobjects
  x86/microcode: Consolidate the loader enablement checking
  ocfs2: fix panic in failed foilio allocation
  ocfs2: fix the issue with discontiguous allocation in the global_bitmap
  ocfs2: switch osb->disable_recovery to enum
  ocfs2: implement handshaking with ocfs2 recovery thread
  ocfs2: stop quota recovery before disabling quotas
  usb: dwc3: gadget: Make gadget_wakeup asynchronous
  usb: cdnsp: Fix issue with resuming from L1
  usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version
  usb: gadget: f_ecm: Add get_status callback
  usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN
  usb: gadget: Use get_status callback to set remote wakeup capability
  usb: host: tegra: Prevent host controller crash when OTG port is used
  usb: misc: onboard_usb_dev: fix support for Cypress HX3 hubs
  usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition
  usb: typec: ucsi: displayport: Fix deadlock
  usb: typec: ucsi: displayport: Fix NULL pointer access
  USB: usbtmc: use interruptible sleep in usbtmc_read
  usb: usbtmc: Fix erroneous get_stb ioctl error returns
  usb: usbtmc: Fix erroneous wait_srq ioctl return
  usb: usbtmc: Fix erroneous generic_read ioctl return
  iio: imu: bmi270: fix initial sampling frequency configuration
  iio: accel: adxl367: fix setting odr for activity time update
  iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer.
  iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64
  iio: adc: dln2: Use aligned_s64 for timestamp
  timekeeping: Prevent coarse clocks going backwards
  accel/ivpu: Separate DB ID and CMDQ ID allocations from CMDQ allocation
  accel/ivpu: Correct mutex unlock order in job submission
  MIPS: Fix MAX_REG_OFFSET
  riscv: misaligned: Add handling for ZCB instructions
  loop: factor out a loop_assign_backing_file helper
  loop: Add sanity check for read/write_iter
  drm/panel: simple: Update timings for AUO G101EVN010
  nvme: unblock ctrl state transition for firmware update
  riscv: misaligned: factorize trap handling
  riscv: misaligned: enable IRQs while handling misaligned accesses
  riscv: Disallow PR_GET_TAGGED_ADDR_CTRL without Supm
  drm/xe/tests/mocs: Hold XE_FORCEWAKE_ALL for LNCF regs
  drm/xe: Release force wake first then runtime power
  io_uring/sqpoll: Increase task_work submission batch size
  do_umount(): add missing barrier before refcount checks in sync case
  rust: allow Rust 1.87.0's `clippy::ptr_eq` lint
  rust: clean Rust 1.88.0's `clippy::uninlined_format_args` lint
  io_uring: always arm linked timeouts prior to issue
  Bluetooth: btmtk: Remove the resetting step before downloading the fw
  mm: page_alloc: don't steal single pages from biggest buddy
  mm: page_alloc: speed up fallbacks in rmqueue_bulk()
  arm64: insn: Add support for encoding DSB
  arm64: proton-pack: Expose whether the platform is mitigated by firmware
  arm64: proton-pack: Expose whether the branchy loop k value
  arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
  arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
  arm64: proton-pack: Add new CPUs 'k' values for branch mitigation
  x86/bpf: Call branch history clearing sequence on exit
  x86/bpf: Add IBHF call at end of classic BPF
  x86/bhi: Do not set BHI_DIS_S in 32-bit mode
  Documentation: x86/bugs/its: Add ITS documentation
  x86/its: Enumerate Indirect Target Selection (ITS) bug
  x86/its: Add support for ITS-safe indirect thunk
  x86/its: Add support for ITS-safe return thunk
  x86/its: Enable Indirect Target Selection mitigation
  UBUNTU: [Config] enable MITIGATION_ITS
  x86/its: Add "vmexit" option to skip mitigation on some CPUs
  x86/its: Add support for RSB stuffing mitigation
  x86/its: Align RETs in BHB clear sequence to avoid thunking
  x86/ibt: Keep IBT disabled during alternative patching
  x86/its: Use dynamic thunks for indirect branches
  selftest/x86/bugs: Add selftests for ITS
  x86/its: Fix build errors when CONFIG_MODULES=n
  x86/its: FineIBT-paranoid vs ITS
  Linux 6.14.7
  UBUNTU: Upstream stable to v6.14.7

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2115252/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to