This bug was fixed in the package linux-azure - 6.8.0-1038.44
---------------
linux-azure (6.8.0-1038.44) noble; urgency=medium
[ Ubuntu: 6.8.0-84.84 ]
* Linux refcount imbalance in af_unix subsystem (LP: #2121515)
- SAUCE: af_unix: Fix GC compatibility with upstream OOB refcount changes
linux-azure (6.8.0-1036.42) noble; urgency=medium
* noble/linux-azure: 6.8.0-1036.42 -proposed tracker (LP: #2121967)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] debian.azure/dkms-versions -- update from kernel-versions
(main/2025.08.11)
* [MANA][Backport] The big tcp enablement patch (LP: #2119958)
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE
- hv_netvsc: Use VF's tso_max_size value when data path is VF
* [storvsc][Backport] scsi: storvsc: Increase the timeouts to
storvsc_timeout (LP: #2119690)
- scsi: storvsc: Increase the timeouts to storvsc_timeout
* [MANA][Backport]net: mana: Record doorbell physical address in PF mode
(LP: #2119680)
- net: mana: Record doorbell physical address in PF mode
* MANA patch catch-up with azure-nvidia for 6.8 kernel (LP: #2119572)
- RDMA/mana_ib: Set correct device into ib
- net: mana: Change the function signature of mana_get_primary_netdev_rcu
- RDMA/mana_ib: Handle net event for pointing to the current netdev
* net: mana: Expose additional hardware counters for drop and TC via ethtool
(LP: #2119686)
- net: mana: use ethtool string helpers
- net: mana: Expose additional hardware counters for drop and TC via
ethtool.
* [MANA][Backport] net: mana: Switch to page pool for jumbo frames
(LP: #2118947)
- net: mana: Switch to page pool for jumbo frames
* [MANA][Backport] patch: net: mana: Add debug logs in MANA network driver
(LP: #2119168)
- net: mana: Add debug logs in MANA network driver
* Backporting Linux CIFS dentry leak fix: Avoid race in open_cached_dir with
lease breaks (LP: #2117524)
- smb: client: Avoid race in open_cached_dir with lease breaks
[ Ubuntu: 6.8.0-81.81 ]
* noble/linux: 6.8.0-81.81 -proposed tracker (LP: #2121671)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2025.08.11)
* nvme no longer detected on boot after upgrade to 6.8.0-60 (LP: #2111521)
- SAUCE: PCI: Disable RRS polling for Intel SSDPE2KX020T8 nvme
* No IP Address assigned after hot-plugging Ethernet cable on HP Platform
(LP: #2115393)
- Revert "e1000e: change k1 configuration on MTP and later platforms"
* minimal kernel lacks modules for blk disk in arm64 openstack environments
where config_drive is required (LP: #2118499)
- [Config] Enable SYM53C8XX_2 on arm64
* rcu: Eliminate deadlocks involving do_exit() and RCU tasks (LP: #2117123)
- rcu-tasks: Initialize callback lists at rcu_init() time
- rcu-tasks: Maintain lists to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Eliminate deadlocks involving do_exit() and RCU tasks
- rcu-tasks: Maintain real-time response in rcu_tasks_postscan()
* BPF header file in wrong location (LP: #2118965)
- [Packaging] Install bpf header to correct location
* i915: support ARL-H gpu (LP: #2117716)
- drm/i915: Add additional ARL PCI IDs
- drm/i915/mtl: Add fake PCH for Meteor Lake
- drm/i915/mtl: Wake GT before sending H2G message
- drm/i915/xelpg: Add workaround 14019877138
- drm/i915/xelpg: Extend driver code of Xe_LPG to Xe_LPG+
- drm/i915/display: correct dual pps handling for MTL_PCH+
* Ubuntu 24.04.2: NULL pointer dereference with Ceph and selinux
(LP: #2115447)
- SAUCE: fs/ceph, selinux: fix NULL pointer dereference on CephFS write
with SELinux in permissive mode
* Noble update: upstream stable patchset 2025-08-04 (LP: #2119458)
- clockevents/drivers/i8253: Fix stop sequence for timer 0
- sched/isolation: Prevent boot crash when the boot CPU is nohz_full
- hrtimer: Use and report correct timerslack values for realtime tasks
- mm: add nommu variant of vm_insert_pages()
- io_uring: get rid of remap_pfn_range() for mapping rings/sqes
- io_uring: don't attempt to mmap larger than what the user asks for
- io_uring: fix corner case forgetting to vunmap
- io_uring: use vmap() for ring mapping
- io_uring: unify io_pin_pages()
- io_uring/kbuf: vmap pinned buffer ring
- io_uring/kbuf: use vm_insert_pages() for mmap'ed pbuf ring
- io_uring: use unpin_user_pages() where appropriate
- io_uring: fix error pbuf checking
- rust: Disallow BTF generation with Rust + LTO
- rust: init: fix `Zeroable` implementation for `Option<NonNull<T>>` and
`Option<KBox<T>>`
- lib/buildid: Handle memfd_secret() files in build_id_parse()
- mm: split critical region in remap_file_pages() and invoke LSMs in
between
- stmmac: loongson: Pass correct arg to PCI function
- rust: lockdep: Remove support for dynamically allocated LockClassKeys
- netfilter: nf_tables: allow clone callbacks to sleep
- drm/amd/display: should support dmub hw lock on Replay
- drm/amd/display: Use HW lock mgr for PSR1 when only one eDP
- KVM: arm64: Calculate cptr_el2 traps on activating traps
- KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
- KVM: arm64: Remove host FPSIMD saving for non-protected KVM
- KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN
- KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN
- KVM: arm64: Refactor exit handlers
- KVM: arm64: Eagerly switch ZCR_EL{1,2}
- Revert "sched/core: Reduce cost of sched_move_task when config
autogroup"
- wifi: iwlwifi: support BIOS override for 5G9 in CA also in LARI version
8
- netfilter: nft_counter: Use u64_stats_t for statistic.
- firmware: imx-scu: fix OF node leak in .probe()
- arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply
- arm64: dts: rockchip: remove supports-cqe from rk3588 jaguar
- xfrm: fix tunnel mode TX datapath in packet offload mode
- xfrm_output: Force software GSO only in tunnel mode
- soc: imx8m: Remove global soc_uid
- soc: imx8m: Use devm_* to simplify probe failure handling
- soc: imx8m: Unregister cpufreq and soc dev in cleanup path
- ARM: dts: bcm2711: Fix xHCI power-domain
- ARM: dts: bcm2711: PL011 UARTs are actually r1p5
- arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1
- RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
- RDMA/mlx5: Handle errors returned from mlx5r_ib_rate()
- ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP
- ARM: dts: bcm2711: Don't mark timer regs unconfigured
- dma-mapping: fix missing clear bdr in check_ram_in_range_map()
- RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
- RDMA/hns: Fix soft lockup during bt pages loop
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix a missing rollback in error path of
hns_roce_create_qp_common()
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix wrong value of max_sge_rd
- Bluetooth: Fix error code in chan_alloc_skb_cb()
- Bluetooth: hci_event: Fix connection regression between LE and non-LE
adapters
- accel/qaic: Fix possible data corruption in BOs > 2G
- ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX
- ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
- ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
- devlink: fix xa_alloc_cyclic() error handling
- dpll: fix xa_alloc_cyclic() error handling
- gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU
- net: atm: fix use after free in lec_send()
- net: lwtunnel: fix recursion loops
- net: ipv6: ioam6: fix lwtunnel_output() loop
- libfs: Fix duplicate directory entry in offset_dir_lookup
- net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
- i2c: omap: fix IRQ storms
- net: mana: Support holes in device list reply msg
- can: rcar_canfd: Fix page entries in the AFL list
- can: ucan: fix out of bound read in strscpy() source
- can: flexcan: only change CAN state when link up in system PM
- can: flexcan: disable transceiver during system PM
- drm/xe: Fix exporting xe buffers multiple times
- drm/v3d: Don't run jobs that have errors flagged in its fence
- riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function
definitions
- regulator: dummy: force synchronous probing
- regulator: check that dummy regulator has been probed before using it
- accel/qaic: Fix integer overflow in qaic_validate_req()
- arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to
sound card
- arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to
sound card
- arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou
- mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
- mmc: atmel-mci: Add missing clk_disable_unprepare()
- mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT
- mm/migrate: fix shmem xarray update during migration
- proc: fix UAF in proc_get_inode()
- ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6
- ARM: shmobile: smp: Enforce shmobile_smp_* alignment
- efi/libstub: Avoid physical address 0x0 when doing random allocation
- xsk: fix an integer overflow in xp_create_and_assign_umem()
- batman-adv: Ignore own maximum aggregation size during RX
- soc: qcom: pdr: Fix the potential deadlock
- pmdomain: amlogic: fix T7 ISP secpower
- drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
- drm/sched: Fix fence reference count leak
- drm/amd/display: Fix message for support_edp0_on_dp1
- drm/amd/pm: add unique_id for gfx12
- drm/amdgpu: Remove JPEG from vega and carrizo video caps
- drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size
- drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
- ksmbd: fix incorrect validation for num_aces field of smb_acl
- KVM: arm64: Mark some header functions as inline
- arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
- mptcp: Fix data stream corruption in the address announcement
- net: lwtunnel: disable BHs when required
- Upstream stable to v6.6.84, v6.6.85, v6.12.21
* Noble update: upstream stable patchset 2025-07-28 (LP: #2118927)
- drm/i915/xe2lpd: Move D2D enable/disable
- drm/i915/ddi: Fix HDMI port width programming in DDI_BUF_CTL
- ibmvnic: Perform tx CSO during send scrq direct
- ibmvnic: Inspect header requirements before using scrq direct
- drm/amdgpu: Check extended configuration space register when system uses
large bar
- drm/amdgpu: disable BAR resize on Dell G5 SE
- net: enetc: Remove setting of RX software timestamp
- net: enetc: Replace ifdef with IS_ENABLED
- net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
- NFS: O_DIRECT writes must check and adjust the file length
- riscv: cacheinfo: remove the useless input parameter (node) of
ci_leaf_init()
- riscv: cacheinfo: initialize cacheinfo's level and type from ACPI PPTT
- riscv: Prevent a bad reference count on CPU nodes
- riscv: cacheinfo: Use of_property_present() for non-boolean properties
- mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear()
- arm64: hugetlb: Fix huge_ptep_get_and_clear() for non-present ptes
- drm/i915/dsi: Use TRANS_DDI_FUNC_CTL's own port width macro
- x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
- ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattr
- x86/boot: Sanitize boot params before parsing command line
- fbdev: hyperv_fb: iounmap() the correct memory when removing a device
- pinctrl: bcm281xx: Fix incorrect regmap max_registers value
- pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw
- netfilter: nft_ct: Use __refcount_inc() for per-CPU
nft_ct_pcpu_template.
- ice: fix memory leak in aRFS after reset
- netfilter: nf_conncount: garbage collection is not skipped when jiffies
wrap around
- netfilter: nf_tables: make destruction work queue pernet
- sched: address a potential NULL pointer dereference in the GRED
scheduler.
- wifi: iwlwifi: mvm: fix PNVM timeout for non-MSI-X platforms
- wifi: mac80211: don't queue sdata::work for a non-running sdata
- wifi: cfg80211: cancel wiphy_work before freeing wiphy
- Bluetooth: hci_event: Fix enabling passive scanning
- net/mlx5: Fill out devlink dev info only for PFs
- net: dsa: mv88e6xxx: Verify after ATU Load ops
- net: mctp i3c: Copy headers if cloned
- net: mctp i2c: Copy headers if cloned
- netpoll: hold rcu read lock in __netpoll_send_skb()
- drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
- fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs
- fbdev: hyperv_fb: Simplify hvfb_putmem
- fbdev: hyperv_fb: Allow graceful removal of framebuffer
- Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
- net/mlx5: handle errors in mlx5_chains_create_table()
- eth: bnxt: fix truesize for mb-xdp-pass case
- eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
- net: switchdev: Convert blocking notification chain to a raw one
- net: mctp: unshare packets when reassembling
- bonding: fix incorrect MAC address setting to receive NS messages
- netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in
insert_tree()
- ipvs: prevent integer overflow in do_ip_vs_get_ctl()
- netfilter: nft_exthdr: fix offset with ipv4_find_option()
- net: openvswitch: remove misbehaving actions length check
- net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch
- net/mlx5: Bridge, fix the crash caused by LAG state check
- net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed
devices
- nvme-fc: go straight to connecting state when initializing
- nvme-fc: do not ignore connectivity loss during connecting
- hrtimers: Mark is_migration_base() with __always_inline
- powercap: call put_device() on an error path in
powercap_register_control_type()
- futex: Pass in task to futex_queue()
- sched/debug: Provide slice length for fair tasks
- platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show()
- scsi: core: Use GFP_NOIO to avoid circular locking dependency
- scsi: ufs: core: Fix error return with query response
- scsi: qla1280: Fix kernel oops when debug level > 2
- ACPI: resource: IRQ override for Eluktronics MECH-17
- smb: client: fix noisy when tree connecting to DFS interlink targets
- alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
- vboxsf: fix building with GCC 15
- HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
- HID: intel-ish-hid: Send clock sync message immediately after reset
- HID: ignore non-functional sensor in HP 5MP Camera
- HID: hid-steam: Fix issues with disabling both gamepad mode and lizard
mode
- usb: phy: generic: Use proper helper for property detection
- HID: topre: Fix n-key rollover on Realforce R3S TKL boards
- HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
- HID: apple: fix up the F6 key on the Omoton KB066 keyboard
- objtool: Ignore dangling jump table entries
- sched: Clarify wake_up_q()'s write to task->wake_q.next
- platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
- platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
- platform/x86: int3472: Use str_high_low()
- platform/x86: int3472: Use GPIO_LOOKUP() macro
- platform/x86: int3472: Use correct type for "polarity", call it
gpio_flags
- platform/x86: int3472: Call "reset" GPIO "enable" for INT347E
- s390/cio: Fix CHPID "configure" attribute caching
- thermal/cpufreq_cooling: Remove structure member documentation
- LoongArch: KVM: Set host with kernel mode when switch to VM mode
- arm64: amu: Delay allocating cpumask for AMU FIE support
- Xen/swiotlb: mark xen_swiotlb_fixup() __init
- Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
- selftests/bpf: Fix invalid flag of recv()
- ASoC: Intel: sof_sdw: Add lookup of quirk using PCI subsystem ID
- ASoC: simple-card-utils.c: add missing dlc->of_node
- ALSA: hda/realtek: Limit mic boost on Positivo ARN50
- ASoC: rsnd: indicate unsupported clock rate
- ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
- ASoC: rsnd: adjust convert rate limitation
- ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
- ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
- ASoC: SOF: amd: Add post_fw_run_delay ACP quirk
- ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE
- net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
- io-wq: backoff when retrying worker creation
- nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
- nvmet-rdma: recheck queue state is LIVE in state lock in recv done
- apple-nvme: Release power domains when probe fails
- cifs: Treat unhandled directory name surrogate reparse points as mount
directory nodes
- sctp: Fix undefined behavior in left shift operation
- nvme: only allow entering LIVE from CONNECTING state
- phy: ti: gmii-sel: Simplify with dev_err_probe()
- phy: ti: gmii-sel: Do not use syscon helper to build regmap
- ASoC: tas2770: Fix volume scale
- ASoC: tas2764: Fix power control mask
- ASoC: tas2764: Set the SDOUT polarity correctly
- fuse: don't truncate cached, mutated symlink
- drm/vkms: Round fixp2int conversion in lerp_u16
- perf/x86/intel: Use better start period for frequency mode
- x86/irq: Define trace events conditionally
- mptcp: safety check before fallback
- drm/nouveau: Do not override forced connector status
- net: Handle napi_schedule() calls from non-interrupt
- block: fix 'kmem_cache of name 'bio-108' already exists'
- cifs: Validate content of WSL reparse point buffers
- cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from
parse_reparse_point()
- Input: ads7846 - fix gpiod allocation
- Input: iqs7222 - preserve system status register
- Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE
controllers
- Input: xpad - add multiple supported devices
- Input: xpad - add support for ZOTAC Gaming Zone
- Input: xpad - add support for TECNO Pocket Go
- Input: xpad - rename QH controller to Legion Go S
- Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
- Input: i8042 - add required quirks for missing old boardnames
- Input: i8042 - swap old quirk combination with new quirk for several
devices
- Input: i8042 - swap old quirk combination with new quirk for more
devices
- USB: serial: ftdi_sio: add support for Altera USB Blaster 3
- USB: serial: option: add Telit Cinterion FE990B compositions
- USB: serial: option: fix Telit Cinterion FE990A name
- USB: serial: option: match on interface class for Telit FN990B
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- drm/i915/cdclk: Do cdclk post plane programming later
- drm/atomic: Filter out redundant DPMS calls
- drm/dp_mst: Fix locking when skipping CSN before topology probing
- drm/amd/amdkfd: Evict all queues even HWS remove queue failed
- drm/amd/display: Disable unneeded hpd interrupts during dm_init
- drm/amd/display: Restore correct backlight brightness after a GPU reset
- drm/amd/display: Assign normalized_pix_clk when color depth = 14
- drm/amd/display: Fix slab-use-after-free on hdcp_work
- ksmbd: fix use-after-free in ksmbd_free_work_struct
- ksmbd: prevent connection release during oplock break notification
- clk: samsung: update PLL locktime for PLL142XX used on FSD platform
- clk: samsung: gs101: fix synchronous external abort in
samsung_clk_save()
- ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
- dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
- arm64: mm: Populate vmemmap at the page level if not section aligned
- Fix mmu notifiers for range-based invalidates
- qlcnic: fix memory leak issues in qlcnic_sriov_common.c
- smb: client: fix regression with guest option
- net: phy: nxp-c45-tja11xx: add TJA112X PHY configuration errata
- net: phy: nxp-c45-tja11xx: add TJA112XB SGMII PCS restart errata
- ASoC: ops: Consistently treat platform_max as control value
- rust: error: add missing newline to pr_warn! calls
- drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
- ASoC: cs42l43: Fix maximum ADC Volume
- rust: init: add missing newline to pr_info! calls
- ASoC: rt722-sdca: add missing readable registers
- drm/xe: cancel pending job timer before freeing scheduler
- drm/xe: Release guc ids before cancelling work
- ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
- scripts: generate_rust_analyzer: add missing macros deps
- scripts: generate_rust_analyzer: add missing include_dirs
- scripts: generate_rust_analyzer: add uapi crate
- cifs: Fix integer overflow while processing acregmax mount option
- cifs: Fix integer overflow while processing acdirmax mount option
- cifs: Fix integer overflow while processing actimeo mount option
- cifs: Fix integer overflow while processing closetimeo mount option
- x86/vmware: Parse MP tables for SEV-SNP enabled guests under VMware
hypervisors
- i2c: ali1535: Fix an error handling path in ali1535_probe()
- i2c: ali15x3: Fix an error handling path in ali15x3_probe()
- i2c: sis630: Fix an error handling path in sis630_probe()
- mm/hugetlb: wait for hugetlb folios to be freed
- smb3: add support for IAKerb
- smb: client: Fix match_session bug preventing session reuse
- Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
- nvme-fc: rely on state transitions to handle connectivity loss
- HID: apple: disable Fn key handling on the Omoton KB066
- Input: xpad - fix two controller table values
- cifs: Ensure that all non-client-specific reparse points are processed
by the server
- wifi: cfg80211: init wiphy_work before allocating rfkill fails
- ksmbd: fix r_count dec/increment mismatch
- nvme: unblock ctrl state transition for firmware update
- Upstream stable to v6.6.83, v6.12.20
* Noble update: upstream stable patchset 2025-07-22 (LP: #2117533)
- x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()
- gpio: vf610: use generic device_get_match_data()
- gpio: vf610: add locking to gpio direction functions
- cifs: Remove symlink member from cifs_open_info_data union
- smb311: failure to open files of length 1040 when mounting with SMB3.1.1
POSIX extensions
- btrfs: fix data overwriting bug during buffered write when block size <
page size
- x86/microcode/AMD: Add some forgotten models to the SHA check
- rust: workqueue: remove unneeded ``#[allow(clippy::new_ret_no_self)]`
- rust: init: remove unneeded `#[allow(clippy::disallowed_names)]`
- rust: introduce `.clippy.toml`
- rust: replace `clippy::dbg_macro` with `disallowed_macros`
- rust: provide proper code documentation titles
- rust: enable Clippy's `check-private-items`
- Documentation: rust: add coding guidelines on lints
- Documentation: rust: discuss `#[expect(...)]` in the guidelines
- rust: error: make conversion functions public
- rust: error: optimize error type to use nonzero
- rust: error: check for config `test` in `Error::name`
- rust: fix size_t in bindgen prototypes of C builtins
- rust: map `__kernel_size_t` and friends also to usize/isize
- tracing: tprobe-events: Fix a memory leak when tprobe with $retval
- LoongArch: Convert unreachable() to BUG()
- LoongArch: Use polling play_dead() when resuming from hibernation
- LoongArch: Set max_pfn with the PFN of the last page
- LoongArch: KVM: Add interrupt checking for AVEC
- LoongArch: KVM: Reload guest CSR registers after sleep
- LoongArch: KVM: Fix GPA size issue about VM
- HID: appleir: Fix potential NULL dereference at raw event handle
- ksmbd: fix type confusion via race condition when using
ipc_msg_send_request
- ksmbd: fix out-of-bounds in parse_sec_desc()
- ksmbd: fix use-after-free in smb2_lock
- ksmbd: fix bug on trap in smb2_lock
- gpio: rcar: Use raw_spinlock to protect register access
- ALSA: seq: Avoid module auto-load handling at event delivery
- ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
- ALSA: hda/realtek: update ALC222 depop optimize
- btrfs: fix a leaked chunk map issue in read_one_chunk()
- hwmon: (peci/dimmtemp) Do not provide fake thresholds data
- drm/amd/display: Fix null check for pipe_ctx->plane_state in
resource_build_scaling_params
- drm/imagination: avoid deadlock on fence release
- drm/imagination: Hold drm_gem_gpuva lock for unmap
- drm/imagination: only init job done fences once
- drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
- platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
- x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
- x86/cpu: Validate CPUID leaf 0x2 EDX output
- x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
- Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
- Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
- wifi: cfg80211: regulatory: improve invalid hints checking
- wifi: nl80211: reject cooked mode if it is set along with other flags
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- rapidio: fix an API misues when rio_add_net() fails
- dma: kmsan: export kmsan_handle_dma() for modules
- s390/traps: Fix test_monitor_call() inline assembly
- NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback
- userfaultfd: do not block on locking a large folio with raised refcount
- block: fix conversion of GPT partition name to 7-bit
- mm/page_alloc: fix uninitialized variable
- mm: don't skip arch_sync_kernel_mappings() in error paths
- wifi: iwlwifi: mvm: don't try to talk to a dead firmware
- wifi: iwlwifi: limit printed string from FW file
- HID: google: fix unused variable warning under !CONFIG_ACPI
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove()
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- bluetooth: btusb: Initialize .owner field of force_poll_sync_fops
- nvme-tcp: add basic support for the C2HTermReq PDU
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- net: gso: fix ownership in __udp_gso_segment
- caif_virtio: fix wrong pointer check in cfv_probe()
- perf/core: Fix pmus_lock vs. pmus_srcu ordering
- hwmon: (pmbus) Initialise page count in pmbus_identify()
- hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
- hwmon: (ad7314) Validate leading zero bits and return error
- tracing: probe-events: Remove unused MAX_ARG_BUF_LEN macro
- drm/imagination: Fix timestamps in firmware traces
- ALSA: usx2y: validate nrpacks module parameter on probe
- llc: do not use skb_get() before dev_queue_xmit()
- hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
- drm/sched: Fix preprocessor guard
- be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
- net: hns3: make sure ptp clock is unregister and freed if
hclge_ptp_get_cycle returns an error
- net: ipa: Fix v4.7 resource group names
- net: ipa: Fix QSB data for v4.7
- net: ipa: Enable checksum for IPA_ENDPOINT_AP_MODEM_{RX,TX} for v4.7
- ppp: Fix KMSAN uninit-value warning with bpf
- vlan: enforce underlying device type
- x86/sgx: Fix size overflows in sgx_encl_create()
- exfat: fix soft lockup in exfat_clear_bitmap
- exfat: short-circuit zero-byte writes in exfat_file_write_iter
- net-timestamp: support TCP GSO case for a few missing flags
- ublk: set_params: properly check if parameters can be applied
- sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
- nvme-tcp: fix signedness bug in nvme_tcp_init_connection()
- net: dsa: mt7530: Fix traffic flooding for MMIO devices
- mctp i3c: handle NULL header address
- net: ipv6: fix dst ref loop in ila lwtunnel
- net: ipv6: fix missing dst ref drop in ila lwtunnel
- gpio: rcar: Fix missing of_node_put() call
- usb: renesas_usbhs: Call clk_put()
- usb: renesas_usbhs: Use devm_usb_get_phy()
- usb: hub: lack of clearing xHC resources
- usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card
Reader
- usb: typec: ucsi: Fix NULL pointer access
- usb: renesas_usbhs: Flush the notify_hotplug_work
- usb: gadget: u_ether: Set is_suspend flag if remote wakeup fails
- usb: atm: cxacru: fix a flaw in existing endpoint checks
- usb: dwc3: Set SUSPENDENABLE soon after phy init
- usb: dwc3: gadget: Prevent irq storm when TH re-executes
- usb: typec: ucsi: increase timeout for PPM reset operations
- usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
- usb: gadget: Set self-powered based on MaxPower and bmAttributes
- usb: gadget: Fix setting self-powered state on suspend
- usb: gadget: Check bmAttributes only if configuration is valid
- kbuild: userprogs: use correct lld when linking through clang
- xhci: pci: Fix indentation in the PCI device ID definitions
- usb: xhci: Enable the TRB overfetch quirk on VIA VL805
- KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow
- KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value
- KVM: SVM: Suppress DEBUGCTL.BTF on AMD
- KVM: x86: Snapshot the host's DEBUGCTL in common x86
- KVM: SVM: Manually context switch DEBUGCTL if LBR virtualization is
disabled
- KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs
- KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by
KVM
- cdx: Fix possible UAF error in driver_override_show()
- mei: me: add panther lake P DID
- mei: vsc: Use "wakeuphostint" when getting the host wakeup GPIO
- intel_th: pci: Add Arrow Lake support
- intel_th: pci: Add Panther Lake-H support
- intel_th: pci: Add Panther Lake-P/U support
- slimbus: messaging: Free transaction ID in delayed interrupt scenario
- bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid
deadlock
- eeprom: digsy_mtc: Make GPIO lookup table match the device
- drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
- iio: filter: admv8818: Force initialization of SDO
- iio: dac: ad3552r: clear reset status flag
- iio: adc: ad7192: fix channel select
- iio: adc: at91-sama5d2_adc: fix sama7g5 realbits value
- kbuild: hdrcheck: fix cross build with clang
- nvme-tcp: Fix a C2HTermReq error message
- docs: rust: remove spurious item in `expect` list
- Upstream stable to v6.6.82, v6.12.19
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878)
- IB/mlx5: Set and get correct qp_num for a DCT QP
- RDMA/mana_ib: Allocate PAGE aligned doorbell index
- scsi: ufs: core: Fix ufshcd_is_ufs_dev_busy() and ufshcd_eh_timed_out()
- SUNRPC: convert RPC_TASK_* constants to enum
- SUNRPC: Prevent looping due to rpc_signal_task() races
- SUNRPC: Handle -ETIMEDOUT return from tlshd
- RDMA/mlx5: Fix AH static rate parsing
- scsi: core: Clear driver private data when retrying request
- RDMA/mlx5: Fix bind QP error cleanup flow
- sunrpc: suppress warnings for unused procfs functions
- ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports
- Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response
- rxrpc: rxperf: Fix missing decoding of terminal magic cookie
- afs: Fix the server_list to unuse a displaced server rather than putting
it
- net: loopback: Avoid sending IP packets without an Ethernet header
- net: set the minimum for net_hotdata.netdev_budget_usecs
- net/ipv4: add tracepoint for icmp_send
- ipv4: icmp: Pass full DS field to ip_route_input()
- ipv4: icmp: Unmask upper DSCP bits in icmp_route_lookup()
- ipvlan: Unmask upper DSCP bits in ipvlan_process_v4_outbound()
- ipv4: Convert icmp_route_lookup() to dscp_t.
- ipv4: Convert ip_route_input() to dscp_t.
- ipvlan: Prepare ipvlan_process_v4_outbound() to future .flowi4_tos
conversion.
- net: cadence: macb: Synchronize stats calculations
- ASoC: es8328: fix route from DAC to output
- ipvs: Always clear ipvs_property flag in skb_scrub_packet()
- firmware: cs_dsp: Remove async regmap writes
- ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15
- ice: add E830 HW VF mailbox message limit support
- tcp: Defer ts_recent changes until req is owned
- net: Clear old fragment checksum value in napi_reuse_skb
- net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination.
- net/mlx5: IRQ, Fix null string in debug print
- net: ipv6: fix dst ref loop on input in seg6 lwt
- net: ipv6: fix dst ref loop on input in rpl lwt
- net: ti: icss-iep: Remove spinlock-based synchronization
- net: ti: icss-iep: Reject perout generation request
- io_uring/net: save msg_control for compat
- x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems
- phy: rockchip: naneng-combphy: compatible reset with old DT
- RISCV: KVM: Introduce mp_state_lock to avoid lock inversion
- riscv: KVM: Fix hart suspend status check
- riscv: KVM: Fix SBI IPI error generation
- riscv: KVM: Fix SBI TIME error generation
- ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2
- ALSA: hda/realtek: Fix microphone regression on ASUS N705UD
- perf/x86: Fix low freqency setting issue
- perf/core: Fix low freq setting via IOC_PERIOD
- drm/amd/display: Disable PSR-SU on eDP panels
- drm/amd/display: Fix HPD after gpu reset
- i2c: ls2x: Fix frequency division register access
- net: enetc: fix the off-by-one issue in enetc_map_tx_buffs()
- net: enetc: keep track of correct Tx BD count in
enetc_map_tx_tso_buffs()
- net: enetc: update UDP checksum when updating originTimestamp field
- net: enetc: correct the xdp_tx statistics
- net: enetc: fix the off-by-one issue in enetc_map_tx_tso_buffs()
- phy: tegra: xusb: reset VBUS & ID OVERRIDE
- phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in
refclk
- mptcp: reset when MPTCP opts are dropped after join
- vmlinux.lds: Ensure that const vars with relocations are mapped R/O
- rcuref: Plug slowpath race in rcuref_put()
- rseq/selftests: Fix riscv rseq_offset_deref_addv inline asm
- riscv/futex: sign extend compare value in atomic cmpxchg
- riscv: signal: fix signal frame size
- rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
- rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
- amdgpu/pm/legacy: fix suspend/resume issues
- gve: set xdp redirect target only when it is available
- x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID
- x86/microcode/AMD: Pay attention to the stepping dynamically
- x86/microcode/AMD: Split load_microcode_amd()
- x86/microcode/intel: Remove unnecessary cache writeback and invalidation
- x86/microcode/AMD: Flush patch buffer mapping after application
- x86/microcode/AMD: Return bool from find_blobs_in_containers()
- x86/microcode/AMD: Make __verify_patch_size() return bool
- x86/microcode/AMD: Have __apply_microcode_amd() return bool
- x86/microcode/AMD: Merge early_apply_microcode() into its single
callsite
- x86/microcode/AMD: Get rid of the _load_microcode_amd() forward
declaration
- x86/microcode/AMD: Add get_patch_level()
- x86/microcode/AMD: Load only SHA256-checksummed patches
- x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive
- RDMA/mlx5: Fix a race for DMABUF MR which can lead to CQE with error
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- RDMA/bnxt_re: Allocate dev_attr information dynamically
- RDMA/bnxt_re: Fix the statistics for Gen P7 VF
- landlock: Fix non-TCP sockets restriction
- RDMA/mlx5: Fix implicit ODP hang on parent deregistration
- scsi: ufs: core: Set default runtime/system PM levels before
ufshcd_hba_init()
- afs: Give an afs_server object a ref on the afs_cell object it points to
- ASoC: cs35l56: Prevent races when soft-resetting using SPI control
- thermal: gov_power_allocator: Fix incorrect calculation in
divvy_up_power()
- unreachable: Unify
- objtool: Remove annotate_{,un}reachable()
- objtool: Fix C jump table annotations for Clang
- riscv: KVM: Fix hart suspend_type use
- KVM: arm64: Ensure a VMID is allocated before programming VTTBR_EL2
- drm/xe/regs: remove a duplicate definition for RING_CTL_SIZE(size)
- drm/xe/userptr: restore invalidation list on error
- drm/amdkfd: Preserve cp_hqd_pq_control on update_mqd
- drm/amd/display: Add option to configure mapping policy for edp0 on dp1
- drm/amd/display: add a quirk to enable eDP0 on DP1
- intel_idle: Handle older CPUs, which stop the TSC in deeper C states,
correctly
- selftests/landlock: Test that MPTCP actions are not restricted
- selftests/landlock: Test TCP accesses with protocol=IPPROTO_TCP
- riscv: signal: fix signal_minsigstksz
- x86/microcode/AMD: Remove ugly linebreak in __verify_patch_section()
signature
- x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd()
declarations
- Upstream stable to v6.6.81, v6.12.18
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21872
- efi: Don't map the entire mokvar table to determine its size
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21880
- drm/xe/userptr: fix EFAULT handling
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21890
- idpf: fix checksums set in idpf_rx_rsc()
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21885
- RDMA/bnxt_re: Fix the page details for the srq created by kernel
consumers
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21888
- RDMA/mlx5: Fix a WARN during dereg_mr for DM type
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21892
- RDMA/mlx5: Fix the recovery flow of the UMR QP
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21873
- scsi: ufs: core: bsg: Fix crash when arpmb command fails
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2024-58090
- sched/core: Prevent rescheduling when interrupts are disabled
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21875
- mptcp: always handle address removal under msk socket lock
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21877
- usbnet: gl620a: fix endpoint checking in genelink_bind()
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21878
- i2c: npcm: disable interrupt enable bit before devm_request_irq
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21889
- perf/core: Add RCU read lock protection to perf_iterate_ctx()
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21898
- ftrace: Avoid potential division by zero in function_stat_show()
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21899
- tracing: Fix bad hist from corrupting named_triggers list
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21881
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21895
- perf/core: Order the PMU list to fix warning about unordered
pmu_ctx_list
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21883
- ice: Fix deinitializing VF in error path
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21891
- ipvlan: ensure network headers are in skb linear part
* CVE-2024-57996 // CVE-2025-37752
- net_sched: sch_sfq: move the limit validation
* CVE-2025-38350
- net/sched: Always pass notifications when child class becomes empty
* CVE-2025-21887
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
-- Stefan Bader <stefan.ba...@canonical.com> Thu, 11 Sep 2025 09:02:02
+0200
** Changed in: linux-azure (Ubuntu Noble)
Status: Fix Committed => Fix Released
** CVE added: https://cve.org/CVERecord?id=CVE-2024-57996
** CVE added: https://cve.org/CVERecord?id=CVE-2024-58090
** CVE added: https://cve.org/CVERecord?id=CVE-2025-21872
** CVE added: https://cve.org/CVERecord?id=CVE-2025-21873
** CVE added: https://cve.org/CVERecord?id=CVE-2025-21875
** CVE added: https://cve.org/CVERecord?id=CVE-2025-21877
** CVE added: https://cve.org/CVERecord?id=CVE-2025-21878
** CVE added: https://cve.org/CVERecord?id=CVE-2025-21880
** CVE added: https://cve.org/CVERecord?id=CVE-2025-21881
** CVE added: https://cve.org/CVERecord?id=CVE-2025-21883
** CVE added: https://cve.org/CVERecord?id=CVE-2025-21885
** CVE added: https://cve.org/CVERecord?id=CVE-2025-21887
** CVE added: https://cve.org/CVERecord?id=CVE-2025-21888
** CVE added: https://cve.org/CVERecord?id=CVE-2025-21889
** CVE added: https://cve.org/CVERecord?id=CVE-2025-21890
** CVE added: https://cve.org/CVERecord?id=CVE-2025-21891
** CVE added: https://cve.org/CVERecord?id=CVE-2025-21892
** CVE added: https://cve.org/CVERecord?id=CVE-2025-21895
** CVE added: https://cve.org/CVERecord?id=CVE-2025-21898
** CVE added: https://cve.org/CVERecord?id=CVE-2025-21899
** CVE added: https://cve.org/CVERecord?id=CVE-2025-37752
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38350
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-azure in Ubuntu.
https://bugs.launchpad.net/bugs/2119572
Title:
MANA patch catch-up with azure-nvidia for 6.8 kernel
Status in linux-azure package in Ubuntu:
New
Status in linux-azure source package in Noble:
Fix Released
Bug description:
SRU Justification
[Impact]
* Microsoft requested MANA patches already applied to azure-nvidia to
be applied to azure trees as well
[Fix]
* Backports of the following from upstream:
* 1df03a4b4414: "RDMA/mana_ib: Set correct device into ib"
* a8445cfec101: "net: mana: Change the function signature of
mana_get_primary_netdev_rcu"
* bee35b7161aa: "RDMA/mana_ib: Handle net event for pointing to the current
netdev"
[Test Plan]
* Compile tested
[Regression potential]
* Changes are localized to MANA, and have been part of linux-azure-nvidia for
some time.
Possible regressions could result in unexpected behavior of MANA driver.
[Other info]
* SF#00414169
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-azure/+bug/2119572/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
