Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-07-28
Ported from the following upstream stable releases:
v6.6.83, v6.12.20
from git://git.kernel.org/
drm/i915/xe2lpd: Move D2D enable/disable
drm/i915/ddi: Fix HDMI port width programming in DDI_BUF_CTL
ibmvnic: Perform tx CSO during send scrq direct
ibmvnic: Inspect header requirements before using scrq direct
drm/amdgpu: Check extended configuration space register when system uses large
bar
drm/amdgpu: disable BAR resize on Dell G5 SE
net: enetc: Remove setting of RX software timestamp
net: enetc: Replace ifdef with IS_ENABLED
net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
NFS: O_DIRECT writes must check and adjust the file length
riscv: cacheinfo: remove the useless input parameter (node) of ci_leaf_init()
riscv: cacheinfo: initialize cacheinfo's level and type from ACPI PPTT
riscv: Prevent a bad reference count on CPU nodes
riscv: cacheinfo: Use of_property_present() for non-boolean properties
mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear()
arm64: hugetlb: Fix huge_ptep_get_and_clear() for non-present ptes
drm/i915/dsi: Use TRANS_DDI_FUNC_CTL's own port width macro
x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattr
x86/boot: Sanitize boot params before parsing command line
fbdev: hyperv_fb: iounmap() the correct memory when removing a device
pinctrl: bcm281xx: Fix incorrect regmap max_registers value
pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw
netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
ice: fix memory leak in aRFS after reset
netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap
around
netfilter: nf_tables: make destruction work queue pernet
sched: address a potential NULL pointer dereference in the GRED scheduler.
wifi: iwlwifi: mvm: fix PNVM timeout for non-MSI-X platforms
wifi: mac80211: don't queue sdata::work for a non-running sdata
wifi: cfg80211: cancel wiphy_work before freeing wiphy
Bluetooth: hci_event: Fix enabling passive scanning
net/mlx5: Fill out devlink dev info only for PFs
net: dsa: mv88e6xxx: Verify after ATU Load ops
net: mctp i3c: Copy headers if cloned
net: mctp i2c: Copy headers if cloned
netpoll: hold rcu read lock in __netpoll_send_skb()
drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs
fbdev: hyperv_fb: Simplify hvfb_putmem
fbdev: hyperv_fb: Allow graceful removal of framebuffer
Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
net/mlx5: handle errors in mlx5_chains_create_table()
eth: bnxt: fix truesize for mb-xdp-pass case
eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
net: switchdev: Convert blocking notification chain to a raw one
net: mctp: unshare packets when reassembling
bonding: fix incorrect MAC address setting to receive NS messages
netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in
insert_tree()
ipvs: prevent integer overflow in do_ip_vs_get_ctl()
netfilter: nft_exthdr: fix offset with ipv4_find_option()
net: openvswitch: remove misbehaving actions length check
net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch
net/mlx5: Bridge, fix the crash caused by LAG state check
net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
nvme-fc: go straight to connecting state when initializing
nvme-fc: do not ignore connectivity loss during connecting
hrtimers: Mark is_migration_base() with __always_inline
powercap: call put_device() on an error path in powercap_register_control_type()
futex: Pass in task to futex_queue()
sched/debug: Provide slice length for fair tasks
platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show()
scsi: core: Use GFP_NOIO to avoid circular locking dependency
scsi: ufs: core: Fix error return with query response
scsi: qla1280: Fix kernel oops when debug level > 2
ACPI: resource: IRQ override for Eluktronics MECH-17
smb: client: fix noisy when tree connecting to DFS interlink targets
alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
vboxsf: fix building with GCC 15
HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
HID: intel-ish-hid: Send clock sync message immediately after reset
HID: ignore non-functional sensor in HP 5MP Camera
HID: hid-steam: Fix issues with disabling both gamepad mode and lizard mode
usb: phy: generic: Use proper helper for property detection
HID: topre: Fix n-key rollover on Realforce R3S TKL boards
HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
HID: apple: fix up the F6 key on the Omoton KB066 keyboard
objtool: Ignore dangling jump table entries
sched: Clarify wake_up_q()'s write to task->wake_q.next
platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
platform/x86: int3472: Use str_high_low()
platform/x86: int3472: Use GPIO_LOOKUP() macro
platform/x86: int3472: Use correct type for "polarity", call it gpio_flags
platform/x86: int3472: Call "reset" GPIO "enable" for INT347E
s390/cio: Fix CHPID "configure" attribute caching
thermal/cpufreq_cooling: Remove structure member documentation
LoongArch: KVM: Set host with kernel mode when switch to VM mode
arm64: amu: Delay allocating cpumask for AMU FIE support
Xen/swiotlb: mark xen_swiotlb_fixup() __init
Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
selftests/bpf: Fix invalid flag of recv()
ASoC: Intel: sof_sdw: Add lookup of quirk using PCI subsystem ID
ASoC: simple-card-utils.c: add missing dlc->of_node
ALSA: hda/realtek: Limit mic boost on Positivo ARN50
ASoC: rsnd: indicate unsupported clock rate
ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
ASoC: rsnd: adjust convert rate limitation
ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
ASoC: SOF: amd: Add post_fw_run_delay ACP quirk
ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE
net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
io-wq: backoff when retrying worker creation
nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
nvmet-rdma: recheck queue state is LIVE in state lock in recv done
apple-nvme: Release power domains when probe fails
cifs: Treat unhandled directory name surrogate reparse points as mount
directory nodes
sctp: Fix undefined behavior in left shift operation
nvme: only allow entering LIVE from CONNECTING state
phy: ti: gmii-sel: Simplify with dev_err_probe()
phy: ti: gmii-sel: Do not use syscon helper to build regmap
ASoC: tas2770: Fix volume scale
ASoC: tas2764: Fix power control mask
ASoC: tas2764: Set the SDOUT polarity correctly
fuse: don't truncate cached, mutated symlink
drm/vkms: Round fixp2int conversion in lerp_u16
perf/x86/intel: Use better start period for frequency mode
x86/irq: Define trace events conditionally
mptcp: safety check before fallback
drm/nouveau: Do not override forced connector status
net: Handle napi_schedule() calls from non-interrupt
block: fix 'kmem_cache of name 'bio-108' already exists'
cifs: Validate content of WSL reparse point buffers
cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from
parse_reparse_point()
Input: ads7846 - fix gpiod allocation
Input: iqs7222 - preserve system status register
Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE controllers
Input: xpad - add multiple supported devices
Input: xpad - add support for ZOTAC Gaming Zone
Input: xpad - add support for TECNO Pocket Go
Input: xpad - rename QH controller to Legion Go S
Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
Input: i8042 - add required quirks for missing old boardnames
Input: i8042 - swap old quirk combination with new quirk for several devices
Input: i8042 - swap old quirk combination with new quirk for more devices
USB: serial: ftdi_sio: add support for Altera USB Blaster 3
USB: serial: option: add Telit Cinterion FE990B compositions
USB: serial: option: fix Telit Cinterion FE990A name
USB: serial: option: match on interface class for Telit FN990B
x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
drm/i915/cdclk: Do cdclk post plane programming later
drm/atomic: Filter out redundant DPMS calls
drm/dp_mst: Fix locking when skipping CSN before topology probing
drm/amd/amdkfd: Evict all queues even HWS remove queue failed
drm/amd/display: Disable unneeded hpd interrupts during dm_init
drm/amd/display: Restore correct backlight brightness after a GPU reset
drm/amd/display: Assign normalized_pix_clk when color depth = 14
drm/amd/display: Fix slab-use-after-free on hdcp_work
ksmbd: fix use-after-free in ksmbd_free_work_struct
ksmbd: prevent connection release during oplock break notification
clk: samsung: update PLL locktime for PLL142XX used on FSD platform
clk: samsung: gs101: fix synchronous external abort in samsung_clk_save()
ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
arm64: mm: Populate vmemmap at the page level if not section aligned
Fix mmu notifiers for range-based invalidates
qlcnic: fix memory leak issues in qlcnic_sriov_common.c
smb: client: fix regression with guest option
net: phy: nxp-c45-tja11xx: add TJA112X PHY configuration errata
net: phy: nxp-c45-tja11xx: add TJA112XB SGMII PCS restart errata
ASoC: ops: Consistently treat platform_max as control value
rust: error: add missing newline to pr_warn! calls
drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
ASoC: cs42l43: Fix maximum ADC Volume
rust: init: add missing newline to pr_info! calls
ASoC: rt722-sdca: add missing readable registers
drm/xe: cancel pending job timer before freeing scheduler
drm/xe: Release guc ids before cancelling work
ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
scripts: generate_rust_analyzer: add missing macros deps
scripts: generate_rust_analyzer: add missing include_dirs
scripts: generate_rust_analyzer: add uapi crate
cifs: Fix integer overflow while processing acregmax mount option
cifs: Fix integer overflow while processing acdirmax mount option
cifs: Fix integer overflow while processing actimeo mount option
cifs: Fix integer overflow while processing closetimeo mount option
x86/vmware: Parse MP tables for SEV-SNP enabled guests under VMware hypervisors
i2c: ali1535: Fix an error handling path in ali1535_probe()
i2c: ali15x3: Fix an error handling path in ali15x3_probe()
i2c: sis630: Fix an error handling path in sis630_probe()
mm/hugetlb: wait for hugetlb folios to be freed
smb3: add support for IAKerb
smb: client: Fix match_session bug preventing session reuse
Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
nvme-fc: rely on state transitions to handle connectivity loss
HID: apple: disable Fn key handling on the Omoton KB066
Input: xpad - fix two controller table values
cifs: Ensure that all non-client-specific reparse points are processed by the
server
wifi: cfg80211: init wiphy_work before allocating rfkill fails
ksmbd: fix r_count dec/increment mismatch
nvme: unblock ctrl state transition for firmware update
UBUNTU: Upstream stable to v6.6.83, v6.12.20
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Noble)
Importance: Medium
Assignee: Noah Wager (nwager)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Noble)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Noble)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Noble)
Status: New => In Progress
** Changed in: linux (Ubuntu Noble)
Assignee: (unassigned) => Noah Wager (nwager)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-07-28
+
+ Ported from the following upstream stable releases:
+ v6.6.83, v6.12.20
+
from git://git.kernel.org/
+
+ drm/i915/xe2lpd: Move D2D enable/disable
+ drm/i915/ddi: Fix HDMI port width programming in DDI_BUF_CTL
+ ibmvnic: Perform tx CSO during send scrq direct
+ ibmvnic: Inspect header requirements before using scrq direct
+ drm/amdgpu: Check extended configuration space register when system uses
large bar
+ drm/amdgpu: disable BAR resize on Dell G5 SE
+ net: enetc: Remove setting of RX software timestamp
+ net: enetc: Replace ifdef with IS_ENABLED
+ net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
+ NFS: O_DIRECT writes must check and adjust the file length
+ riscv: cacheinfo: remove the useless input parameter (node) of ci_leaf_init()
+ riscv: cacheinfo: initialize cacheinfo's level and type from ACPI PPTT
+ riscv: Prevent a bad reference count on CPU nodes
+ riscv: cacheinfo: Use of_property_present() for non-boolean properties
+ mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear()
+ arm64: hugetlb: Fix huge_ptep_get_and_clear() for non-present ptes
+ drm/i915/dsi: Use TRANS_DDI_FUNC_CTL's own port width macro
+ x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
+ ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattr
+ x86/boot: Sanitize boot params before parsing command line
+ fbdev: hyperv_fb: iounmap() the correct memory when removing a device
+ pinctrl: bcm281xx: Fix incorrect regmap max_registers value
+ pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw
+ netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
+ ice: fix memory leak in aRFS after reset
+ netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap
around
+ netfilter: nf_tables: make destruction work queue pernet
+ sched: address a potential NULL pointer dereference in the GRED scheduler.
+ wifi: iwlwifi: mvm: fix PNVM timeout for non-MSI-X platforms
+ wifi: mac80211: don't queue sdata::work for a non-running sdata
+ wifi: cfg80211: cancel wiphy_work before freeing wiphy
+ Bluetooth: hci_event: Fix enabling passive scanning
+ net/mlx5: Fill out devlink dev info only for PFs
+ net: dsa: mv88e6xxx: Verify after ATU Load ops
+ net: mctp i3c: Copy headers if cloned
+ net: mctp i2c: Copy headers if cloned
+ netpoll: hold rcu read lock in __netpoll_send_skb()
+ drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
+ fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs
+ fbdev: hyperv_fb: Simplify hvfb_putmem
+ fbdev: hyperv_fb: Allow graceful removal of framebuffer
+ Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
+ net/mlx5: handle errors in mlx5_chains_create_table()
+ eth: bnxt: fix truesize for mb-xdp-pass case
+ eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
+ net: switchdev: Convert blocking notification chain to a raw one
+ net: mctp: unshare packets when reassembling
+ bonding: fix incorrect MAC address setting to receive NS messages
+ netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in
insert_tree()
+ ipvs: prevent integer overflow in do_ip_vs_get_ctl()
+ netfilter: nft_exthdr: fix offset with ipv4_find_option()
+ net: openvswitch: remove misbehaving actions length check
+ net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch
+ net/mlx5: Bridge, fix the crash caused by LAG state check
+ net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
+ nvme-fc: go straight to connecting state when initializing
+ nvme-fc: do not ignore connectivity loss during connecting
+ hrtimers: Mark is_migration_base() with __always_inline
+ powercap: call put_device() on an error path in
powercap_register_control_type()
+ futex: Pass in task to futex_queue()
+ sched/debug: Provide slice length for fair tasks
+ platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show()
+ scsi: core: Use GFP_NOIO to avoid circular locking dependency
+ scsi: ufs: core: Fix error return with query response
+ scsi: qla1280: Fix kernel oops when debug level > 2
+ ACPI: resource: IRQ override for Eluktronics MECH-17
+ smb: client: fix noisy when tree connecting to DFS interlink targets
+ alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
+ vboxsf: fix building with GCC 15
+ HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
+ HID: intel-ish-hid: Send clock sync message immediately after reset
+ HID: ignore non-functional sensor in HP 5MP Camera
+ HID: hid-steam: Fix issues with disabling both gamepad mode and lizard mode
+ usb: phy: generic: Use proper helper for property detection
+ HID: topre: Fix n-key rollover on Realforce R3S TKL boards
+ HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
+ HID: apple: fix up the F6 key on the Omoton KB066 keyboard
+ objtool: Ignore dangling jump table entries
+ sched: Clarify wake_up_q()'s write to task->wake_q.next
+ platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
+ platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
+ platform/x86: int3472: Use str_high_low()
+ platform/x86: int3472: Use GPIO_LOOKUP() macro
+ platform/x86: int3472: Use correct type for "polarity", call it gpio_flags
+ platform/x86: int3472: Call "reset" GPIO "enable" for INT347E
+ s390/cio: Fix CHPID "configure" attribute caching
+ thermal/cpufreq_cooling: Remove structure member documentation
+ LoongArch: KVM: Set host with kernel mode when switch to VM mode
+ arm64: amu: Delay allocating cpumask for AMU FIE support
+ Xen/swiotlb: mark xen_swiotlb_fixup() __init
+ Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
+ selftests/bpf: Fix invalid flag of recv()
+ ASoC: Intel: sof_sdw: Add lookup of quirk using PCI subsystem ID
+ ASoC: simple-card-utils.c: add missing dlc->of_node
+ ALSA: hda/realtek: Limit mic boost on Positivo ARN50
+ ASoC: rsnd: indicate unsupported clock rate
+ ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
+ ASoC: rsnd: adjust convert rate limitation
+ ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
+ ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
+ ASoC: SOF: amd: Add post_fw_run_delay ACP quirk
+ ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE
+ net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
+ io-wq: backoff when retrying worker creation
+ nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
+ nvmet-rdma: recheck queue state is LIVE in state lock in recv done
+ apple-nvme: Release power domains when probe fails
+ cifs: Treat unhandled directory name surrogate reparse points as mount
directory nodes
+ sctp: Fix undefined behavior in left shift operation
+ nvme: only allow entering LIVE from CONNECTING state
+ phy: ti: gmii-sel: Simplify with dev_err_probe()
+ phy: ti: gmii-sel: Do not use syscon helper to build regmap
+ ASoC: tas2770: Fix volume scale
+ ASoC: tas2764: Fix power control mask
+ ASoC: tas2764: Set the SDOUT polarity correctly
+ fuse: don't truncate cached, mutated symlink
+ drm/vkms: Round fixp2int conversion in lerp_u16
+ perf/x86/intel: Use better start period for frequency mode
+ x86/irq: Define trace events conditionally
+ mptcp: safety check before fallback
+ drm/nouveau: Do not override forced connector status
+ net: Handle napi_schedule() calls from non-interrupt
+ block: fix 'kmem_cache of name 'bio-108' already exists'
+ cifs: Validate content of WSL reparse point buffers
+ cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from
parse_reparse_point()
+ Input: ads7846 - fix gpiod allocation
+ Input: iqs7222 - preserve system status register
+ Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE controllers
+ Input: xpad - add multiple supported devices
+ Input: xpad - add support for ZOTAC Gaming Zone
+ Input: xpad - add support for TECNO Pocket Go
+ Input: xpad - rename QH controller to Legion Go S
+ Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
+ Input: i8042 - add required quirks for missing old boardnames
+ Input: i8042 - swap old quirk combination with new quirk for several devices
+ Input: i8042 - swap old quirk combination with new quirk for more devices
+ USB: serial: ftdi_sio: add support for Altera USB Blaster 3
+ USB: serial: option: add Telit Cinterion FE990B compositions
+ USB: serial: option: fix Telit Cinterion FE990A name
+ USB: serial: option: match on interface class for Telit FN990B
+ x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
+ drm/i915/cdclk: Do cdclk post plane programming later
+ drm/atomic: Filter out redundant DPMS calls
+ drm/dp_mst: Fix locking when skipping CSN before topology probing
+ drm/amd/amdkfd: Evict all queues even HWS remove queue failed
+ drm/amd/display: Disable unneeded hpd interrupts during dm_init
+ drm/amd/display: Restore correct backlight brightness after a GPU reset
+ drm/amd/display: Assign normalized_pix_clk when color depth = 14
+ drm/amd/display: Fix slab-use-after-free on hdcp_work
+ ksmbd: fix use-after-free in ksmbd_free_work_struct
+ ksmbd: prevent connection release during oplock break notification
+ clk: samsung: update PLL locktime for PLL142XX used on FSD platform
+ clk: samsung: gs101: fix synchronous external abort in samsung_clk_save()
+ ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
+ dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
+ arm64: mm: Populate vmemmap at the page level if not section aligned
+ Fix mmu notifiers for range-based invalidates
+ qlcnic: fix memory leak issues in qlcnic_sriov_common.c
+ smb: client: fix regression with guest option
+ net: phy: nxp-c45-tja11xx: add TJA112X PHY configuration errata
+ net: phy: nxp-c45-tja11xx: add TJA112XB SGMII PCS restart errata
+ ASoC: ops: Consistently treat platform_max as control value
+ rust: error: add missing newline to pr_warn! calls
+ drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
+ ASoC: cs42l43: Fix maximum ADC Volume
+ rust: init: add missing newline to pr_info! calls
+ ASoC: rt722-sdca: add missing readable registers
+ drm/xe: cancel pending job timer before freeing scheduler
+ drm/xe: Release guc ids before cancelling work
+ ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
+ scripts: generate_rust_analyzer: add missing macros deps
+ scripts: generate_rust_analyzer: add missing include_dirs
+ scripts: generate_rust_analyzer: add uapi crate
+ cifs: Fix integer overflow while processing acregmax mount option
+ cifs: Fix integer overflow while processing acdirmax mount option
+ cifs: Fix integer overflow while processing actimeo mount option
+ cifs: Fix integer overflow while processing closetimeo mount option
+ x86/vmware: Parse MP tables for SEV-SNP enabled guests under VMware
hypervisors
+ i2c: ali1535: Fix an error handling path in ali1535_probe()
+ i2c: ali15x3: Fix an error handling path in ali15x3_probe()
+ i2c: sis630: Fix an error handling path in sis630_probe()
+ mm/hugetlb: wait for hugetlb folios to be freed
+ smb3: add support for IAKerb
+ smb: client: Fix match_session bug preventing session reuse
+ Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
+ nvme-fc: rely on state transitions to handle connectivity loss
+ HID: apple: disable Fn key handling on the Omoton KB066
+ Input: xpad - fix two controller table values
+ cifs: Ensure that all non-client-specific reparse points are processed by the
server
+ wifi: cfg80211: init wiphy_work before allocating rfkill fails
+ ksmbd: fix r_count dec/increment mismatch
+ nvme: unblock ctrl state transition for firmware update
+ UBUNTU: Upstream stable to v6.6.83, v6.12.20
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2118927
Title:
Noble update: upstream stable patchset 2025-07-28
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Noble:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-07-28
Ported from the following upstream stable releases:
v6.6.83, v6.12.20
from git://git.kernel.org/
drm/i915/xe2lpd: Move D2D enable/disable
drm/i915/ddi: Fix HDMI port width programming in DDI_BUF_CTL
ibmvnic: Perform tx CSO during send scrq direct
ibmvnic: Inspect header requirements before using scrq direct
drm/amdgpu: Check extended configuration space register when system uses
large bar
drm/amdgpu: disable BAR resize on Dell G5 SE
net: enetc: Remove setting of RX software timestamp
net: enetc: Replace ifdef with IS_ENABLED
net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
NFS: O_DIRECT writes must check and adjust the file length
riscv: cacheinfo: remove the useless input parameter (node) of ci_leaf_init()
riscv: cacheinfo: initialize cacheinfo's level and type from ACPI PPTT
riscv: Prevent a bad reference count on CPU nodes
riscv: cacheinfo: Use of_property_present() for non-boolean properties
mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear()
arm64: hugetlb: Fix huge_ptep_get_and_clear() for non-present ptes
drm/i915/dsi: Use TRANS_DDI_FUNC_CTL's own port width macro
x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattr
x86/boot: Sanitize boot params before parsing command line
fbdev: hyperv_fb: iounmap() the correct memory when removing a device
pinctrl: bcm281xx: Fix incorrect regmap max_registers value
pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw
netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
ice: fix memory leak in aRFS after reset
netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap
around
netfilter: nf_tables: make destruction work queue pernet
sched: address a potential NULL pointer dereference in the GRED scheduler.
wifi: iwlwifi: mvm: fix PNVM timeout for non-MSI-X platforms
wifi: mac80211: don't queue sdata::work for a non-running sdata
wifi: cfg80211: cancel wiphy_work before freeing wiphy
Bluetooth: hci_event: Fix enabling passive scanning
net/mlx5: Fill out devlink dev info only for PFs
net: dsa: mv88e6xxx: Verify after ATU Load ops
net: mctp i3c: Copy headers if cloned
net: mctp i2c: Copy headers if cloned
netpoll: hold rcu read lock in __netpoll_send_skb()
drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs
fbdev: hyperv_fb: Simplify hvfb_putmem
fbdev: hyperv_fb: Allow graceful removal of framebuffer
Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
net/mlx5: handle errors in mlx5_chains_create_table()
eth: bnxt: fix truesize for mb-xdp-pass case
eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
net: switchdev: Convert blocking notification chain to a raw one
net: mctp: unshare packets when reassembling
bonding: fix incorrect MAC address setting to receive NS messages
netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in
insert_tree()
ipvs: prevent integer overflow in do_ip_vs_get_ctl()
netfilter: nft_exthdr: fix offset with ipv4_find_option()
net: openvswitch: remove misbehaving actions length check
net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch
net/mlx5: Bridge, fix the crash caused by LAG state check
net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
nvme-fc: go straight to connecting state when initializing
nvme-fc: do not ignore connectivity loss during connecting
hrtimers: Mark is_migration_base() with __always_inline
powercap: call put_device() on an error path in
powercap_register_control_type()
futex: Pass in task to futex_queue()
sched/debug: Provide slice length for fair tasks
platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show()
scsi: core: Use GFP_NOIO to avoid circular locking dependency
scsi: ufs: core: Fix error return with query response
scsi: qla1280: Fix kernel oops when debug level > 2
ACPI: resource: IRQ override for Eluktronics MECH-17
smb: client: fix noisy when tree connecting to DFS interlink targets
alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
vboxsf: fix building with GCC 15
HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
HID: intel-ish-hid: Send clock sync message immediately after reset
HID: ignore non-functional sensor in HP 5MP Camera
HID: hid-steam: Fix issues with disabling both gamepad mode and lizard mode
usb: phy: generic: Use proper helper for property detection
HID: topre: Fix n-key rollover on Realforce R3S TKL boards
HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
HID: apple: fix up the F6 key on the Omoton KB066 keyboard
objtool: Ignore dangling jump table entries
sched: Clarify wake_up_q()'s write to task->wake_q.next
platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
platform/x86: int3472: Use str_high_low()
platform/x86: int3472: Use GPIO_LOOKUP() macro
platform/x86: int3472: Use correct type for "polarity", call it gpio_flags
platform/x86: int3472: Call "reset" GPIO "enable" for INT347E
s390/cio: Fix CHPID "configure" attribute caching
thermal/cpufreq_cooling: Remove structure member documentation
LoongArch: KVM: Set host with kernel mode when switch to VM mode
arm64: amu: Delay allocating cpumask for AMU FIE support
Xen/swiotlb: mark xen_swiotlb_fixup() __init
Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
selftests/bpf: Fix invalid flag of recv()
ASoC: Intel: sof_sdw: Add lookup of quirk using PCI subsystem ID
ASoC: simple-card-utils.c: add missing dlc->of_node
ALSA: hda/realtek: Limit mic boost on Positivo ARN50
ASoC: rsnd: indicate unsupported clock rate
ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
ASoC: rsnd: adjust convert rate limitation
ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
ASoC: SOF: amd: Add post_fw_run_delay ACP quirk
ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE
net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
io-wq: backoff when retrying worker creation
nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
nvmet-rdma: recheck queue state is LIVE in state lock in recv done
apple-nvme: Release power domains when probe fails
cifs: Treat unhandled directory name surrogate reparse points as mount
directory nodes
sctp: Fix undefined behavior in left shift operation
nvme: only allow entering LIVE from CONNECTING state
phy: ti: gmii-sel: Simplify with dev_err_probe()
phy: ti: gmii-sel: Do not use syscon helper to build regmap
ASoC: tas2770: Fix volume scale
ASoC: tas2764: Fix power control mask
ASoC: tas2764: Set the SDOUT polarity correctly
fuse: don't truncate cached, mutated symlink
drm/vkms: Round fixp2int conversion in lerp_u16
perf/x86/intel: Use better start period for frequency mode
x86/irq: Define trace events conditionally
mptcp: safety check before fallback
drm/nouveau: Do not override forced connector status
net: Handle napi_schedule() calls from non-interrupt
block: fix 'kmem_cache of name 'bio-108' already exists'
cifs: Validate content of WSL reparse point buffers
cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from
parse_reparse_point()
Input: ads7846 - fix gpiod allocation
Input: iqs7222 - preserve system status register
Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE controllers
Input: xpad - add multiple supported devices
Input: xpad - add support for ZOTAC Gaming Zone
Input: xpad - add support for TECNO Pocket Go
Input: xpad - rename QH controller to Legion Go S
Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
Input: i8042 - add required quirks for missing old boardnames
Input: i8042 - swap old quirk combination with new quirk for several devices
Input: i8042 - swap old quirk combination with new quirk for more devices
USB: serial: ftdi_sio: add support for Altera USB Blaster 3
USB: serial: option: add Telit Cinterion FE990B compositions
USB: serial: option: fix Telit Cinterion FE990A name
USB: serial: option: match on interface class for Telit FN990B
x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
drm/i915/cdclk: Do cdclk post plane programming later
drm/atomic: Filter out redundant DPMS calls
drm/dp_mst: Fix locking when skipping CSN before topology probing
drm/amd/amdkfd: Evict all queues even HWS remove queue failed
drm/amd/display: Disable unneeded hpd interrupts during dm_init
drm/amd/display: Restore correct backlight brightness after a GPU reset
drm/amd/display: Assign normalized_pix_clk when color depth = 14
drm/amd/display: Fix slab-use-after-free on hdcp_work
ksmbd: fix use-after-free in ksmbd_free_work_struct
ksmbd: prevent connection release during oplock break notification
clk: samsung: update PLL locktime for PLL142XX used on FSD platform
clk: samsung: gs101: fix synchronous external abort in samsung_clk_save()
ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
arm64: mm: Populate vmemmap at the page level if not section aligned
Fix mmu notifiers for range-based invalidates
qlcnic: fix memory leak issues in qlcnic_sriov_common.c
smb: client: fix regression with guest option
net: phy: nxp-c45-tja11xx: add TJA112X PHY configuration errata
net: phy: nxp-c45-tja11xx: add TJA112XB SGMII PCS restart errata
ASoC: ops: Consistently treat platform_max as control value
rust: error: add missing newline to pr_warn! calls
drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
ASoC: cs42l43: Fix maximum ADC Volume
rust: init: add missing newline to pr_info! calls
ASoC: rt722-sdca: add missing readable registers
drm/xe: cancel pending job timer before freeing scheduler
drm/xe: Release guc ids before cancelling work
ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
scripts: generate_rust_analyzer: add missing macros deps
scripts: generate_rust_analyzer: add missing include_dirs
scripts: generate_rust_analyzer: add uapi crate
cifs: Fix integer overflow while processing acregmax mount option
cifs: Fix integer overflow while processing acdirmax mount option
cifs: Fix integer overflow while processing actimeo mount option
cifs: Fix integer overflow while processing closetimeo mount option
x86/vmware: Parse MP tables for SEV-SNP enabled guests under VMware
hypervisors
i2c: ali1535: Fix an error handling path in ali1535_probe()
i2c: ali15x3: Fix an error handling path in ali15x3_probe()
i2c: sis630: Fix an error handling path in sis630_probe()
mm/hugetlb: wait for hugetlb folios to be freed
smb3: add support for IAKerb
smb: client: Fix match_session bug preventing session reuse
Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
nvme-fc: rely on state transitions to handle connectivity loss
HID: apple: disable Fn key handling on the Omoton KB066
Input: xpad - fix two controller table values
cifs: Ensure that all non-client-specific reparse points are processed by the
server
wifi: cfg80211: init wiphy_work before allocating rfkill fails
ksmbd: fix r_count dec/increment mismatch
nvme: unblock ctrl state transition for firmware update
UBUNTU: Upstream stable to v6.6.83, v6.12.20
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2118927/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
