Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-08-04
Ported from the following upstream stable releases:
v6.6.84, v6.6.85, v6.12.21
from git://git.kernel.org/
clockevents/drivers/i8253: Fix stop sequence for timer 0
sched/isolation: Prevent boot crash when the boot CPU is nohz_full
hrtimer: Use and report correct timerslack values for realtime tasks
mm: add nommu variant of vm_insert_pages()
io_uring: get rid of remap_pfn_range() for mapping rings/sqes
io_uring: don't attempt to mmap larger than what the user asks for
io_uring: fix corner case forgetting to vunmap
io_uring: use vmap() for ring mapping
io_uring: unify io_pin_pages()
io_uring/kbuf: vmap pinned buffer ring
io_uring/kbuf: use vm_insert_pages() for mmap'ed pbuf ring
io_uring: use unpin_user_pages() where appropriate
io_uring: fix error pbuf checking
rust: Disallow BTF generation with Rust + LTO
rust: init: fix `Zeroable` implementation for `Option<NonNull<T>>` and
`Option<KBox<T>>`
lib/buildid: Handle memfd_secret() files in build_id_parse()
mm: split critical region in remap_file_pages() and invoke LSMs in between
stmmac: loongson: Pass correct arg to PCI function
rust: lockdep: Remove support for dynamically allocated LockClassKeys
netfilter: nf_tables: allow clone callbacks to sleep
drm/amd/display: should support dmub hw lock on Replay
drm/amd/display: Use HW lock mgr for PSR1 when only one eDP
KVM: arm64: Calculate cptr_el2 traps on activating traps
KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
KVM: arm64: Remove host FPSIMD saving for non-protected KVM
KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN
KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN
KVM: arm64: Refactor exit handlers
KVM: arm64: Eagerly switch ZCR_EL{1,2}
Revert "sched/core: Reduce cost of sched_move_task when config autogroup"
wifi: iwlwifi: support BIOS override for 5G9 in CA also in LARI version 8
netfilter: nft_counter: Use u64_stats_t for statistic.
firmware: imx-scu: fix OF node leak in .probe()
arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply
arm64: dts: rockchip: remove supports-cqe from rk3588 jaguar
xfrm: fix tunnel mode TX datapath in packet offload mode
xfrm_output: Force software GSO only in tunnel mode
soc: imx8m: Remove global soc_uid
soc: imx8m: Use devm_* to simplify probe failure handling
soc: imx8m: Unregister cpufreq and soc dev in cleanup path
ARM: dts: bcm2711: Fix xHCI power-domain
ARM: dts: bcm2711: PL011 UARTs are actually r1p5
arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1
RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
RDMA/mlx5: Handle errors returned from mlx5r_ib_rate()
ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP
ARM: dts: bcm2711: Don't mark timer regs unconfigured
dma-mapping: fix missing clear bdr in check_ram_in_range_map()
RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
RDMA/hns: Fix soft lockup during bt pages loop
RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
RDMA/hns: Fix missing xa_destroy()
RDMA/hns: Fix wrong value of max_sge_rd
Bluetooth: Fix error code in chan_alloc_skb_cb()
Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters
accel/qaic: Fix possible data corruption in BOs > 2G
ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX
ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
devlink: fix xa_alloc_cyclic() error handling
dpll: fix xa_alloc_cyclic() error handling
gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU
net: atm: fix use after free in lec_send()
net: lwtunnel: fix recursion loops
net: ipv6: ioam6: fix lwtunnel_output() loop
libfs: Fix duplicate directory entry in offset_dir_lookup
net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
i2c: omap: fix IRQ storms
net: mana: Support holes in device list reply msg
can: rcar_canfd: Fix page entries in the AFL list
can: ucan: fix out of bound read in strscpy() source
can: flexcan: only change CAN state when link up in system PM
can: flexcan: disable transceiver during system PM
drm/xe: Fix exporting xe buffers multiple times
drm/v3d: Don't run jobs that have errors flagged in its fence
riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions
regulator: dummy: force synchronous probing
regulator: check that dummy regulator has been probed before using it
accel/qaic: Fix integer overflow in qaic_validate_req()
arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to sound card
arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card
arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou
mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
mmc: atmel-mci: Add missing clk_disable_unprepare()
mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT
mm/migrate: fix shmem xarray update during migration
proc: fix UAF in proc_get_inode()
memcg: drain obj stock on cpu hotplug teardown
ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6
ARM: shmobile: smp: Enforce shmobile_smp_* alignment
efi/libstub: Avoid physical address 0x0 when doing random allocation
xsk: fix an integer overflow in xp_create_and_assign_umem()
batman-adv: Ignore own maximum aggregation size during RX
soc: qcom: pdr: Fix the potential deadlock
pmdomain: amlogic: fix T7 ISP secpower
drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
drm/sched: Fix fence reference count leak
drm/amd/display: Fix message for support_edp0_on_dp1
drm/amd/pm: add unique_id for gfx12
drm/amdgpu: Remove JPEG from vega and carrizo video caps
drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size
drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
ksmbd: fix incorrect validation for num_aces field of smb_acl
KVM: arm64: Mark some header functions as inline
arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
mptcp: Fix data stream corruption in the address announcement
net: lwtunnel: disable BHs when required
UBUNTU: Upstream stable to v6.6.84, v6.6.85, v6.12.21
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Noble)
Importance: Medium
Assignee: Noah Wager (nwager)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Noble)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Noble)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Noble)
Status: New => In Progress
** Changed in: linux (Ubuntu Noble)
Assignee: (unassigned) => Noah Wager (nwager)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-08-04
+
+ Ported from the following upstream stable releases:
+ v6.6.84, v6.6.85, v6.12.21
+
from git://git.kernel.org/
+
+ clockevents/drivers/i8253: Fix stop sequence for timer 0
+ sched/isolation: Prevent boot crash when the boot CPU is nohz_full
+ hrtimer: Use and report correct timerslack values for realtime tasks
+ mm: add nommu variant of vm_insert_pages()
+ io_uring: get rid of remap_pfn_range() for mapping rings/sqes
+ io_uring: don't attempt to mmap larger than what the user asks for
+ io_uring: fix corner case forgetting to vunmap
+ io_uring: use vmap() for ring mapping
+ io_uring: unify io_pin_pages()
+ io_uring/kbuf: vmap pinned buffer ring
+ io_uring/kbuf: use vm_insert_pages() for mmap'ed pbuf ring
+ io_uring: use unpin_user_pages() where appropriate
+ io_uring: fix error pbuf checking
+ rust: Disallow BTF generation with Rust + LTO
+ rust: init: fix `Zeroable` implementation for `Option<NonNull<T>>` and
`Option<KBox<T>>`
+ lib/buildid: Handle memfd_secret() files in build_id_parse()
+ mm: split critical region in remap_file_pages() and invoke LSMs in between
+ stmmac: loongson: Pass correct arg to PCI function
+ rust: lockdep: Remove support for dynamically allocated LockClassKeys
+ netfilter: nf_tables: allow clone callbacks to sleep
+ drm/amd/display: should support dmub hw lock on Replay
+ drm/amd/display: Use HW lock mgr for PSR1 when only one eDP
+ KVM: arm64: Calculate cptr_el2 traps on activating traps
+ KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
+ KVM: arm64: Remove host FPSIMD saving for non-protected KVM
+ KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN
+ KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN
+ KVM: arm64: Refactor exit handlers
+ KVM: arm64: Eagerly switch ZCR_EL{1,2}
+ Revert "sched/core: Reduce cost of sched_move_task when config autogroup"
+ wifi: iwlwifi: support BIOS override for 5G9 in CA also in LARI version 8
+ netfilter: nft_counter: Use u64_stats_t for statistic.
+ firmware: imx-scu: fix OF node leak in .probe()
+ arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply
+ arm64: dts: rockchip: remove supports-cqe from rk3588 jaguar
+ xfrm: fix tunnel mode TX datapath in packet offload mode
+ xfrm_output: Force software GSO only in tunnel mode
+ soc: imx8m: Remove global soc_uid
+ soc: imx8m: Use devm_* to simplify probe failure handling
+ soc: imx8m: Unregister cpufreq and soc dev in cleanup path
+ ARM: dts: bcm2711: Fix xHCI power-domain
+ ARM: dts: bcm2711: PL011 UARTs are actually r1p5
+ arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1
+ RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
+ RDMA/mlx5: Handle errors returned from mlx5r_ib_rate()
+ ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP
+ ARM: dts: bcm2711: Don't mark timer regs unconfigured
+ dma-mapping: fix missing clear bdr in check_ram_in_range_map()
+ RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
+ RDMA/hns: Fix soft lockup during bt pages loop
+ RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
+ RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
+ RDMA/hns: Fix missing xa_destroy()
+ RDMA/hns: Fix wrong value of max_sge_rd
+ Bluetooth: Fix error code in chan_alloc_skb_cb()
+ Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters
+ accel/qaic: Fix possible data corruption in BOs > 2G
+ ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX
+ ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
+ ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
+ devlink: fix xa_alloc_cyclic() error handling
+ dpll: fix xa_alloc_cyclic() error handling
+ gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU
+ net: atm: fix use after free in lec_send()
+ net: lwtunnel: fix recursion loops
+ net: ipv6: ioam6: fix lwtunnel_output() loop
+ libfs: Fix duplicate directory entry in offset_dir_lookup
+ net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
+ i2c: omap: fix IRQ storms
+ net: mana: Support holes in device list reply msg
+ can: rcar_canfd: Fix page entries in the AFL list
+ can: ucan: fix out of bound read in strscpy() source
+ can: flexcan: only change CAN state when link up in system PM
+ can: flexcan: disable transceiver during system PM
+ drm/xe: Fix exporting xe buffers multiple times
+ drm/v3d: Don't run jobs that have errors flagged in its fence
+ riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions
+ regulator: dummy: force synchronous probing
+ regulator: check that dummy regulator has been probed before using it
+ accel/qaic: Fix integer overflow in qaic_validate_req()
+ arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to sound card
+ arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card
+ arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou
+ mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
+ mmc: atmel-mci: Add missing clk_disable_unprepare()
+ mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT
+ mm/migrate: fix shmem xarray update during migration
+ proc: fix UAF in proc_get_inode()
+ memcg: drain obj stock on cpu hotplug teardown
+ ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6
+ ARM: shmobile: smp: Enforce shmobile_smp_* alignment
+ efi/libstub: Avoid physical address 0x0 when doing random allocation
+ xsk: fix an integer overflow in xp_create_and_assign_umem()
+ batman-adv: Ignore own maximum aggregation size during RX
+ soc: qcom: pdr: Fix the potential deadlock
+ pmdomain: amlogic: fix T7 ISP secpower
+ drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
+ drm/sched: Fix fence reference count leak
+ drm/amd/display: Fix message for support_edp0_on_dp1
+ drm/amd/pm: add unique_id for gfx12
+ drm/amdgpu: Remove JPEG from vega and carrizo video caps
+ drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size
+ drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
+ ksmbd: fix incorrect validation for num_aces field of smb_acl
+ KVM: arm64: Mark some header functions as inline
+ arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
+ mptcp: Fix data stream corruption in the address announcement
+ net: lwtunnel: disable BHs when required
+ UBUNTU: Upstream stable to v6.6.84, v6.6.85, v6.12.21
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2119458
Title:
Noble update: upstream stable patchset 2025-08-04
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Noble:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-08-04
Ported from the following upstream stable releases:
v6.6.84, v6.6.85, v6.12.21
from git://git.kernel.org/
clockevents/drivers/i8253: Fix stop sequence for timer 0
sched/isolation: Prevent boot crash when the boot CPU is nohz_full
hrtimer: Use and report correct timerslack values for realtime tasks
mm: add nommu variant of vm_insert_pages()
io_uring: get rid of remap_pfn_range() for mapping rings/sqes
io_uring: don't attempt to mmap larger than what the user asks for
io_uring: fix corner case forgetting to vunmap
io_uring: use vmap() for ring mapping
io_uring: unify io_pin_pages()
io_uring/kbuf: vmap pinned buffer ring
io_uring/kbuf: use vm_insert_pages() for mmap'ed pbuf ring
io_uring: use unpin_user_pages() where appropriate
io_uring: fix error pbuf checking
rust: Disallow BTF generation with Rust + LTO
rust: init: fix `Zeroable` implementation for `Option<NonNull<T>>` and
`Option<KBox<T>>`
lib/buildid: Handle memfd_secret() files in build_id_parse()
mm: split critical region in remap_file_pages() and invoke LSMs in between
stmmac: loongson: Pass correct arg to PCI function
rust: lockdep: Remove support for dynamically allocated LockClassKeys
netfilter: nf_tables: allow clone callbacks to sleep
drm/amd/display: should support dmub hw lock on Replay
drm/amd/display: Use HW lock mgr for PSR1 when only one eDP
KVM: arm64: Calculate cptr_el2 traps on activating traps
KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
KVM: arm64: Remove host FPSIMD saving for non-protected KVM
KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN
KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN
KVM: arm64: Refactor exit handlers
KVM: arm64: Eagerly switch ZCR_EL{1,2}
Revert "sched/core: Reduce cost of sched_move_task when config autogroup"
wifi: iwlwifi: support BIOS override for 5G9 in CA also in LARI version 8
netfilter: nft_counter: Use u64_stats_t for statistic.
firmware: imx-scu: fix OF node leak in .probe()
arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply
arm64: dts: rockchip: remove supports-cqe from rk3588 jaguar
xfrm: fix tunnel mode TX datapath in packet offload mode
xfrm_output: Force software GSO only in tunnel mode
soc: imx8m: Remove global soc_uid
soc: imx8m: Use devm_* to simplify probe failure handling
soc: imx8m: Unregister cpufreq and soc dev in cleanup path
ARM: dts: bcm2711: Fix xHCI power-domain
ARM: dts: bcm2711: PL011 UARTs are actually r1p5
arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1
RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
RDMA/mlx5: Handle errors returned from mlx5r_ib_rate()
ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP
ARM: dts: bcm2711: Don't mark timer regs unconfigured
dma-mapping: fix missing clear bdr in check_ram_in_range_map()
RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
RDMA/hns: Fix soft lockup during bt pages loop
RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
RDMA/hns: Fix missing xa_destroy()
RDMA/hns: Fix wrong value of max_sge_rd
Bluetooth: Fix error code in chan_alloc_skb_cb()
Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters
accel/qaic: Fix possible data corruption in BOs > 2G
ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX
ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
devlink: fix xa_alloc_cyclic() error handling
dpll: fix xa_alloc_cyclic() error handling
gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU
net: atm: fix use after free in lec_send()
net: lwtunnel: fix recursion loops
net: ipv6: ioam6: fix lwtunnel_output() loop
libfs: Fix duplicate directory entry in offset_dir_lookup
net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
i2c: omap: fix IRQ storms
net: mana: Support holes in device list reply msg
can: rcar_canfd: Fix page entries in the AFL list
can: ucan: fix out of bound read in strscpy() source
can: flexcan: only change CAN state when link up in system PM
can: flexcan: disable transceiver during system PM
drm/xe: Fix exporting xe buffers multiple times
drm/v3d: Don't run jobs that have errors flagged in its fence
riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions
regulator: dummy: force synchronous probing
regulator: check that dummy regulator has been probed before using it
accel/qaic: Fix integer overflow in qaic_validate_req()
arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to sound card
arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card
arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou
mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
mmc: atmel-mci: Add missing clk_disable_unprepare()
mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT
mm/migrate: fix shmem xarray update during migration
proc: fix UAF in proc_get_inode()
memcg: drain obj stock on cpu hotplug teardown
ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6
ARM: shmobile: smp: Enforce shmobile_smp_* alignment
efi/libstub: Avoid physical address 0x0 when doing random allocation
xsk: fix an integer overflow in xp_create_and_assign_umem()
batman-adv: Ignore own maximum aggregation size during RX
soc: qcom: pdr: Fix the potential deadlock
pmdomain: amlogic: fix T7 ISP secpower
drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
drm/sched: Fix fence reference count leak
drm/amd/display: Fix message for support_edp0_on_dp1
drm/amd/pm: add unique_id for gfx12
drm/amdgpu: Remove JPEG from vega and carrizo video caps
drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size
drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
ksmbd: fix incorrect validation for num_aces field of smb_acl
KVM: arm64: Mark some header functions as inline
arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
mptcp: Fix data stream corruption in the address announcement
net: lwtunnel: disable BHs when required
UBUNTU: Upstream stable to v6.6.84, v6.6.85, v6.12.21
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2119458/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
