Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       upstream stable patchset 2025-10-21

                Ported from the following upstream stable releases:
                        v6.6.89, v6.12.25, v6.12.26

       from git://git.kernel.org/

module: sign with sha512 instead of sha1 by default
x86/extable: Remove unused fixup type EX_TYPE_COPY
x86/mce: use is_copy_from_user() to determine copy-from-user context
tracing: Add __string_len() example
tracing: Add __print_dynamic_array() helper
tracing: Verify event formats that have "%*p.."
soc: qcom: ice: introduce devm_of_qcom_ice_get
mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
auxdisplay: hd44780: Convert to platform remove callback returning void
auxdisplay: hd44780: Fix an API misuse in hd44780.c
net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
net: dsa: mv88e6xxx: fix VTU methods for 6320 family
ASoC: qcom: q6apm-dai: drop unused 'q6apm_dai_rtd' fields
ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return 
value check
iio: adc: ad7768-1: Fix conversion result sign
arm64: tegra: Remove the Orin NX/Nano suspend key
clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable
clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
of: resolver: Simplify of_resolve_phandles() using __free()
of: resolver: Fix device node refcount leakage in of_resolve_phandles()
scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
cpufreq/sched: Explicitly synchronize limits_changed flag handling
ceph: Fix incorrect flush end position calculation
dma/contiguous: avoid warning about unused size_bytes
cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
cpufreq: cppc: Fix invalid return value in .get() callback
btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
scsi: core: Clear flags for scsi_cmnd that did not complete
net: phy: leds: fix memory leak
tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
pds_core: Remove unnecessary check in pds_client_adminq_cmd()
pds_core: make wait_context part of q_info
iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
splice: remove duplicate noinline from pipe_clear_nowait
perf/x86: Fix non-sampling (counting) events on certain x86 platforms
LoongArch: Select ARCH_USE_MEMTEST
LoongArch: Make regs_irqs_disabled() more clear
LoongArch: Make do_xyz() exception handlers more robust
virtio_console: fix missing byte order handling for cols and rows
crypto: atmel-sha204a - Set hwrng quality to lowest possible
xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
net: selftests: initialize TCP header and skb payload with zero
net: phy: microchip: force IRQ polling mode for lan88xx
drm/amd/display: Fix gpu reset in multidisplay config
irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
LoongArch: Return NULL from huge_pte_offset() for invalid PMD
LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
LoongArch: Remove a bogus reference to ZONE_DMA
io_uring: fix 'sync' handling of io_fallback_tw()
KVM: SVM: Allocate IR data using atomic allocation
cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
mcb: fix a double free bug in chameleon_parse_gdd()
ata: libata-scsi: Improve CDL control
ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
ata: libata-scsi: Fix ata_msense_control_ata_feature()
USB: storage: quirk for ADATA Portable HDD CH94
scsi: Improve CDL control
mei: me: add panther lake H DID
KVM: x86: Explicitly treat routing entry type changes as changes
KVM: x86: Reset IRTE to host control if *new* route isn't postable
char: misc: register chrdev region with all possible minors
misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
serial: msm: Configure correct working mode before starting earlycon
serial: sifive: lock port in startup()/shutdown() callbacks
USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
USB: serial: option: add Sierra Wireless EM9291
USB: serial: simple: add OWON HDS200 series oscilloscope support
usb: xhci: Fix invalid pointer dereference in Etron workaround
usb: cdns3: Fix deadlock when using NCM gadget
usb: chipidea: ci_hdrc_imx: fix usbmisc handling
usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
usb: dwc3: gadget: check that event count does not exceed event buffer length
usb: dwc3: xilinx: Prevent spike in reset signal
usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
USB: VLI disk crashes if LPM is used
USB: wdm: handle IO errors in wdm_wwan_port_start
USB: wdm: close race between wdm_open and wdm_wwan_port_stop
USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
USB: wdm: add annotation
pinctrl: renesas: rza2: Fix potential NULL pointer dereference
MIPS: cm: Detect CM quirks from device tree
crypto: ccp - Add support for PCI device 0x1134
crypto: null - Use spin lock instead of mutex
bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
parisc: PDT: Fix missing prototype warning
s390/sclp: Add check for get_zeroed_page()
s390/tty: Fix a potential memory leak bug
bpf: bpftool: Setting error code in do_loader()
bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates 
storage
bpf: Reject attaching fexit/fmod_ret to __noreturn functions
mailbox: pcc: Fix the possible race in updation of chan_in_use flag
mailbox: pcc: Always clear the platform ack interrupt first
usb: host: max3421-hcd: Add missing spi_device_id table
fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
thunderbolt: Scan retimers after device router has been enumerated
objtool: Silence more KCOV warnings
objtool, panic: Disable SMAP in __stack_chk_fail()
objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in 
wcd934x_slim_irq_handler()
objtool, regulator: rk808: Remove potential undefined behavior in 
rk806_set_mode_dcdc()
objtool, lkdtm: Obfuscate the do_nothing() pointer
qibfs: fix _another_ leak
ntb: reduce stack usage in idt_scan_mws
ntb_hw_amd: Add NTB PCI ID for new gen CPU
9p/net: fix improper handling of bogus negative read/write replies
rtc: pcf85063: do a SW reset if POR failed
io_uring: always do atomic put from iowq
sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
KVM: s390: Don't use %pK through tracepoints
KVM: s390: Don't use %pK through debug printing
udmabuf: fix a buf size overflow issue during udmabuf creation
selftests: ublk: fix test_stripe_04
perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
xen: Change xen-acpi-processor dom0 dependency
ACPI: EC: Set ec_no_wakeup for Lenovo Go S
ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
nvme: multipath: fix return value of nvme_available_path
objtool: Stop UNRET validation on UD2
gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
selftests/mincore: Allow read-ahead pages to reach the end of the file
x86/bugs: Use SBPB in write_ibpb() if applicable
x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
x86/bugs: Don't fill RSB on context switch with eIBRS
nvmet-fc: take tgtport reference only once
cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode
timekeeping: Add a lockdep override in tick_freeze()
ext4: make block validity check resistent to sb bh corruption
scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
scsi: pm80xx: Set phy_attached to zero when device is gone
x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
iomap: skip unnecessary ifs_block_is_uptodate check
riscv: Provide all alternative macros all the time
loop: aio inherit the ioprio of original request
spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
spi: tegra210-quad: add rate limiting and simplify timeout error message
ubsan: Fix panic from test_ubsan_out_of_bounds
x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores
spi: spi-imx: Add check for spi_imx_setupxfer()
x86/pvh: Call C code via the kernel virtual mapping
Revert "drivers: core: synchronize really_probe() and dev_uevent()"
driver core: introduce device_set_driver() helper
driver core: fix potential NULL pointer dereference in dev_uevent()
vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
comedi: jr3_pci: Fix synchronous deletion of timer
ext4: goto right label 'out_mmap_sem' in ext4_setattr()
net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
net: dsa: mv88e6xxx: enable PVT for 6321 switch
net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
net: dsa: mv88e6xxx: enable STU methods for 6320 family
MIPS: cm: Fix warning if MIPS_CM is disabled
objtool: Ignore end-of-section jumps for KCOV/GCOV
objtool: Silence more KCOV warnings, part 2
ALSA: hda/cirrus_scodec_test: Don't select dependencies
ALSA: hda: improve bass speaker support for ASUS Zenbook UM5606WA
ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130
ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
eth: bnxt: fix missing ring index trim on error path
net: txgbe: fix memory leak in txgbe_probe() error path
net: ethernet: mtk_eth_soc: reapply mdc divider on reset
riscv: Use kvmalloc_array on relocation_hashtable
riscv: module: Fix out-of-bounds relocation access
riscv: module: Allocate PLT entries for R_RISCV_PLT32
ASoC: fsl: fsl_qmc_audio: Reset audio data pointers on TRIGGER_START event
block: integrity: Do not call set_page_dirty_lock()
dma-buf/sw_sync: Decrement refcount on error in sw_sync_ioctl_get_deadline()
mm/compaction: fix bug in hugetlb handling pathway
platform/x86: amd: pmf: Fix STT limits
drm/xe: Use local fence in error path of xe_migrate_clear
drm/amd/display: Add HP Elitebook 645 to the quirk list for eDP on DP1
drm/imagination: fix firmware memory leaks
drm/imagination: take paired job reference
drm/xe: Fix an out-of-bounds shift when invalidating TLB
drm/amd/display: Add HP Probook 445 and 465 to the quirk list for eDP on DP1
drm/xe/dma_buf: stop relying on placement in unmap
drm/amdgpu: fix warning of drm_mm_clean
arm64/sysreg: Update register fields for ID_AA64MMFR0_EL1
arm64/sysreg: Add register fields for HDFGRTR2_EL2
arm64/sysreg: Add register fields for HDFGWTR2_EL2
arm64/sysreg: Add register fields for HFGITR2_EL2
arm64/sysreg: Add register fields for HFGRTR2_EL2
arm64/sysreg: Add register fields for HFGWTR2_EL2
kbuild: Add '-fno-builtin-wcslen'
drm/amd/display: Temporarily disable hostvm on DCN31
block: remove rq_list_move
wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
bpf: add find_containing_subprog() utility function
selftests/bpf: test for changing packet data from global functions
selftests/bpf: freplace tests for tracking of changes_packet_data
selftests/bpf: validate that tail call invalidates packet pointers
selftests/bpf: extend changes_pkt_data with cases w/o subprograms
media: i2c: imx214: Use subdev active state
media: i2c: imx214: Simplify with dev_err_probe()
media: i2c: imx214: Convert to CCI register access helpers
media: i2c: imx214: Replace register addresses with macros
media: i2c: imx214: Check number of lanes from device tree
media: i2c: imx214: Fix link frequency validation
scsi: ufs: exynos: Move UFS shareability value to drvdata
scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set
btrfs: zoned: return EIO on RAID1 block group write pointer mismatch
cgroup/cpuset: Expose cpuset filesystem with cpuset v1 only
cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
vhost-scsi: Add better resource allocation failure handling
vhost-scsi: Fix vhost_scsi_send_bad_target()
vhost-scsi: Fix vhost_scsi_send_status()
scsi: ufs: mcq: Use ufshcd_mcq_req_to_hwq() to simplify updating hwq
scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()
pds_core: Prevent possible adminq overflow/stuck condition
riscv: Replace function-like macro by static inline function
riscv: uprobes: Add missing fence.i after building the XOL buffer
bpf: Add namespace to BPF internal symbols
netfilter: fib: avoid lookup if socket is available
drm: panel: jd9365da: fix reset signal polarity in unprepare
drm/amd/display: Force full update in gpu reset
mei: vsc: Fix fortify-panic caused by invalid counted_by() use
KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
firmware: stratix10-svc: Add of_platform_default_populate()
i3c: master: svc: Add support for Nuvoton npcm845 i3c
9p/trans_fd: mark concurrent read and writes to p9_conn->err
x86/xen: disable CPU idle and frequency drivers for PVH dom0
nvmet-fc: put ref when assoc->del_work is already scheduled
scsi: ufs: exynos: Move phy calls to .exit() callback
ASoC: fsl_asrc_dma: get codec or cpu dai from backend
xfs: do not check NEEDSREPAIR if ro,norecovery mount.
xfs: Do not allow norecovery mount with quotacheck
xfs: rename xfs_iomap_swapfile_activate to xfs_vm_swap_activate
xfs: flush inodegc before swapon
selftests/bpf: fix bpf_map_redirect call for cpu map test
selftests/bpf: make xdp_cpumap_attach keep redirect prog attached
selftests/bpf: check program redirect in xdp_cpumap_attach
selftests/bpf: Adjust data size to have ETH_HLEN
usb: typec: class: Fix NULL pointer access
usb: typec: class: Invalidate USB device pointers on partner unregistration
Revert "net: dsa: mv88e6xxx: fix internal PHYs for 6320 family"
iommu: Handle race with default domain setup
media: i2c: imx214: Fix uninitialized variable in imx214_set_ctrl()
usb: typec: class: Unlocked on error in typec_register_partner()
UBUNTU: Upstream stable to v6.6.89, v6.12.25, v6.12.26

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: linux (Ubuntu Noble)
     Importance: Medium
     Assignee: Manuel Diewald (diewald)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Noble)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu)
       Status: Confirmed => Invalid

** Changed in: linux (Ubuntu Noble)
   Importance: Undecided => Medium

** Changed in: linux (Ubuntu Noble)
       Status: New => In Progress

** Changed in: linux (Ubuntu Noble)
     Assignee: (unassigned) => Manuel Diewald (diewald)

** Description changed:

  
      SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
         upstream stable patchset 2025-10-21
+ 
+                 Ported from the following upstream stable releases:
+                         v6.6.89, v6.12.25, v6.12.26
+ 
         from git://git.kernel.org/
+ 
+ module: sign with sha512 instead of sha1 by default
+ x86/extable: Remove unused fixup type EX_TYPE_COPY
+ x86/mce: use is_copy_from_user() to determine copy-from-user context
+ tracing: Add __string_len() example
+ tracing: Add __print_dynamic_array() helper
+ tracing: Verify event formats that have "%*p.."
+ soc: qcom: ice: introduce devm_of_qcom_ice_get
+ mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
+ auxdisplay: hd44780: Convert to platform remove callback returning void
+ auxdisplay: hd44780: Fix an API misuse in hd44780.c
+ net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
+ net: dsa: mv88e6xxx: fix VTU methods for 6320 family
+ ASoC: qcom: q6apm-dai: drop unused 'q6apm_dai_rtd' fields
+ ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
+ ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
+ iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary 
return value check
+ iio: adc: ad7768-1: Fix conversion result sign
+ arm64: tegra: Remove the Orin NX/Nano suspend key
+ clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable
+ clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
+ of: resolver: Simplify of_resolve_phandles() using __free()
+ of: resolver: Fix device node refcount leakage in of_resolve_phandles()
+ scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
+ cpufreq/sched: Explicitly synchronize limits_changed flag handling
+ ceph: Fix incorrect flush end position calculation
+ dma/contiguous: avoid warning about unused size_bytes
+ cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
+ cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
+ cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
+ scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
+ cpufreq: cppc: Fix invalid return value in .get() callback
+ btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
+ scsi: core: Clear flags for scsi_cmnd that did not complete
+ net: phy: leds: fix memory leak
+ tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
+ net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
+ fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
+ net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
+ net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
+ pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
+ pds_core: Remove unnecessary check in pds_client_adminq_cmd()
+ pds_core: make wait_context part of q_info
+ iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
+ splice: remove duplicate noinline from pipe_clear_nowait
+ perf/x86: Fix non-sampling (counting) events on certain x86 platforms
+ LoongArch: Select ARCH_USE_MEMTEST
+ LoongArch: Make regs_irqs_disabled() more clear
+ LoongArch: Make do_xyz() exception handlers more robust
+ virtio_console: fix missing byte order handling for cols and rows
+ crypto: atmel-sha204a - Set hwrng quality to lowest possible
+ xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
+ net: selftests: initialize TCP header and skb payload with zero
+ net: phy: microchip: force IRQ polling mode for lan88xx
+ drm/amd/display: Fix gpu reset in multidisplay config
+ irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
+ LoongArch: Return NULL from huge_pte_offset() for invalid PMD
+ LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
+ LoongArch: Remove a bogus reference to ZONE_DMA
+ io_uring: fix 'sync' handling of io_fallback_tw()
+ KVM: SVM: Allocate IR data using atomic allocation
+ cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
+ mcb: fix a double free bug in chameleon_parse_gdd()
+ ata: libata-scsi: Improve CDL control
+ ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
+ ata: libata-scsi: Fix ata_msense_control_ata_feature()
+ USB: storage: quirk for ADATA Portable HDD CH94
+ scsi: Improve CDL control
+ mei: me: add panther lake H DID
+ KVM: x86: Explicitly treat routing entry type changes as changes
+ KVM: x86: Reset IRTE to host control if *new* route isn't postable
+ char: misc: register chrdev region with all possible minors
+ misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
+ misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
+ serial: msm: Configure correct working mode before starting earlycon
+ serial: sifive: lock port in startup()/shutdown() callbacks
+ USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
+ USB: serial: option: add Sierra Wireless EM9291
+ USB: serial: simple: add OWON HDS200 series oscilloscope support
+ usb: xhci: Fix invalid pointer dereference in Etron workaround
+ usb: cdns3: Fix deadlock when using NCM gadget
+ usb: chipidea: ci_hdrc_imx: fix usbmisc handling
+ usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
+ usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
+ USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
+ usb: dwc3: gadget: check that event count does not exceed event buffer length
+ usb: dwc3: xilinx: Prevent spike in reset signal
+ usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
+ usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
+ USB: VLI disk crashes if LPM is used
+ USB: wdm: handle IO errors in wdm_wwan_port_start
+ USB: wdm: close race between wdm_open and wdm_wwan_port_stop
+ USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
+ USB: wdm: add annotation
+ pinctrl: renesas: rza2: Fix potential NULL pointer dereference
+ MIPS: cm: Detect CM quirks from device tree
+ crypto: ccp - Add support for PCI device 0x1134
+ crypto: null - Use spin lock instead of mutex
+ bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
+ clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
+ parisc: PDT: Fix missing prototype warning
+ s390/sclp: Add check for get_zeroed_page()
+ s390/tty: Fix a potential memory leak bug
+ bpf: bpftool: Setting error code in do_loader()
+ bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates 
storage
+ bpf: Reject attaching fexit/fmod_ret to __noreturn functions
+ mailbox: pcc: Fix the possible race in updation of chan_in_use flag
+ mailbox: pcc: Always clear the platform ack interrupt first
+ usb: host: max3421-hcd: Add missing spi_device_id table
+ fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
+ usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
+ usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
+ sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
+ usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
+ usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
+ thunderbolt: Scan retimers after device router has been enumerated
+ objtool: Silence more KCOV warnings
+ objtool, panic: Disable SMAP in __stack_chk_fail()
+ objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in 
wcd934x_slim_irq_handler()
+ objtool, regulator: rk808: Remove potential undefined behavior in 
rk806_set_mode_dcdc()
+ objtool, lkdtm: Obfuscate the do_nothing() pointer
+ qibfs: fix _another_ leak
+ ntb: reduce stack usage in idt_scan_mws
+ ntb_hw_amd: Add NTB PCI ID for new gen CPU
+ 9p/net: fix improper handling of bogus negative read/write replies
+ rtc: pcf85063: do a SW reset if POR failed
+ io_uring: always do atomic put from iowq
+ sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
+ KVM: s390: Don't use %pK through tracepoints
+ KVM: s390: Don't use %pK through debug printing
+ udmabuf: fix a buf size overflow issue during udmabuf creation
+ selftests: ublk: fix test_stripe_04
+ perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
+ xen: Change xen-acpi-processor dom0 dependency
+ ACPI: EC: Set ec_no_wakeup for Lenovo Go S
+ ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
+ nvme: multipath: fix return value of nvme_available_path
+ objtool: Stop UNRET validation on UD2
+ gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
+ selftests/mincore: Allow read-ahead pages to reach the end of the file
+ x86/bugs: Use SBPB in write_ibpb() if applicable
+ x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
+ x86/bugs: Don't fill RSB on context switch with eIBRS
+ nvmet-fc: take tgtport reference only once
+ cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode
+ timekeeping: Add a lockdep override in tick_freeze()
+ ext4: make block validity check resistent to sb bh corruption
+ scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
+ scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
+ scsi: pm80xx: Set phy_attached to zero when device is gone
+ x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
+ iomap: skip unnecessary ifs_block_is_uptodate check
+ riscv: Provide all alternative macros all the time
+ loop: aio inherit the ioprio of original request
+ spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
+ spi: tegra210-quad: add rate limiting and simplify timeout error message
+ ubsan: Fix panic from test_ubsan_out_of_bounds
+ x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores
+ spi: spi-imx: Add check for spi_imx_setupxfer()
+ x86/pvh: Call C code via the kernel virtual mapping
+ Revert "drivers: core: synchronize really_probe() and dev_uevent()"
+ driver core: introduce device_set_driver() helper
+ driver core: fix potential NULL pointer dereference in dev_uevent()
+ vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
+ comedi: jr3_pci: Fix synchronous deletion of timer
+ ext4: goto right label 'out_mmap_sem' in ext4_setattr()
+ net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
+ net: dsa: mv88e6xxx: enable PVT for 6321 switch
+ net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
+ net: dsa: mv88e6xxx: enable STU methods for 6320 family
+ MIPS: cm: Fix warning if MIPS_CM is disabled
+ objtool: Ignore end-of-section jumps for KCOV/GCOV
+ objtool: Silence more KCOV warnings, part 2
+ ALSA: hda/cirrus_scodec_test: Don't select dependencies
+ ALSA: hda: improve bass speaker support for ASUS Zenbook UM5606WA
+ ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130
+ ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
+ eth: bnxt: fix missing ring index trim on error path
+ net: txgbe: fix memory leak in txgbe_probe() error path
+ net: ethernet: mtk_eth_soc: reapply mdc divider on reset
+ riscv: Use kvmalloc_array on relocation_hashtable
+ riscv: module: Fix out-of-bounds relocation access
+ riscv: module: Allocate PLT entries for R_RISCV_PLT32
+ ASoC: fsl: fsl_qmc_audio: Reset audio data pointers on TRIGGER_START event
+ block: integrity: Do not call set_page_dirty_lock()
+ dma-buf/sw_sync: Decrement refcount on error in sw_sync_ioctl_get_deadline()
+ mm/compaction: fix bug in hugetlb handling pathway
+ platform/x86: amd: pmf: Fix STT limits
+ drm/xe: Use local fence in error path of xe_migrate_clear
+ drm/amd/display: Add HP Elitebook 645 to the quirk list for eDP on DP1
+ drm/imagination: fix firmware memory leaks
+ drm/imagination: take paired job reference
+ drm/xe: Fix an out-of-bounds shift when invalidating TLB
+ drm/amd/display: Add HP Probook 445 and 465 to the quirk list for eDP on DP1
+ drm/xe/dma_buf: stop relying on placement in unmap
+ drm/amdgpu: fix warning of drm_mm_clean
+ arm64/sysreg: Update register fields for ID_AA64MMFR0_EL1
+ arm64/sysreg: Add register fields for HDFGRTR2_EL2
+ arm64/sysreg: Add register fields for HDFGWTR2_EL2
+ arm64/sysreg: Add register fields for HFGITR2_EL2
+ arm64/sysreg: Add register fields for HFGRTR2_EL2
+ arm64/sysreg: Add register fields for HFGWTR2_EL2
+ kbuild: Add '-fno-builtin-wcslen'
+ drm/amd/display: Temporarily disable hostvm on DCN31
+ block: remove rq_list_move
+ wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
+ bpf: add find_containing_subprog() utility function
+ selftests/bpf: test for changing packet data from global functions
+ selftests/bpf: freplace tests for tracking of changes_packet_data
+ selftests/bpf: validate that tail call invalidates packet pointers
+ selftests/bpf: extend changes_pkt_data with cases w/o subprograms
+ media: i2c: imx214: Use subdev active state
+ media: i2c: imx214: Simplify with dev_err_probe()
+ media: i2c: imx214: Convert to CCI register access helpers
+ media: i2c: imx214: Replace register addresses with macros
+ media: i2c: imx214: Check number of lanes from device tree
+ media: i2c: imx214: Fix link frequency validation
+ scsi: ufs: exynos: Move UFS shareability value to drvdata
+ scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set
+ btrfs: zoned: return EIO on RAID1 block group write pointer mismatch
+ cgroup/cpuset: Expose cpuset filesystem with cpuset v1 only
+ cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
+ vhost-scsi: Add better resource allocation failure handling
+ vhost-scsi: Fix vhost_scsi_send_bad_target()
+ vhost-scsi: Fix vhost_scsi_send_status()
+ scsi: ufs: mcq: Use ufshcd_mcq_req_to_hwq() to simplify updating hwq
+ scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()
+ pds_core: Prevent possible adminq overflow/stuck condition
+ riscv: Replace function-like macro by static inline function
+ riscv: uprobes: Add missing fence.i after building the XOL buffer
+ bpf: Add namespace to BPF internal symbols
+ netfilter: fib: avoid lookup if socket is available
+ drm: panel: jd9365da: fix reset signal polarity in unprepare
+ drm/amd/display: Force full update in gpu reset
+ mei: vsc: Fix fortify-panic caused by invalid counted_by() use
+ KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
+ firmware: stratix10-svc: Add of_platform_default_populate()
+ i3c: master: svc: Add support for Nuvoton npcm845 i3c
+ 9p/trans_fd: mark concurrent read and writes to p9_conn->err
+ x86/xen: disable CPU idle and frequency drivers for PVH dom0
+ nvmet-fc: put ref when assoc->del_work is already scheduled
+ scsi: ufs: exynos: Move phy calls to .exit() callback
+ ASoC: fsl_asrc_dma: get codec or cpu dai from backend
+ xfs: do not check NEEDSREPAIR if ro,norecovery mount.
+ xfs: Do not allow norecovery mount with quotacheck
+ xfs: rename xfs_iomap_swapfile_activate to xfs_vm_swap_activate
+ xfs: flush inodegc before swapon
+ selftests/bpf: fix bpf_map_redirect call for cpu map test
+ selftests/bpf: make xdp_cpumap_attach keep redirect prog attached
+ selftests/bpf: check program redirect in xdp_cpumap_attach
+ selftests/bpf: Adjust data size to have ETH_HLEN
+ usb: typec: class: Fix NULL pointer access
+ usb: typec: class: Invalidate USB device pointers on partner unregistration
+ Revert "net: dsa: mv88e6xxx: fix internal PHYs for 6320 family"
+ iommu: Handle race with default domain setup
+ media: i2c: imx214: Fix uninitialized variable in imx214_set_ctrl()
+ usb: typec: class: Unlocked on error in typec_register_partner()
+ UBUNTU: Upstream stable to v6.6.89, v6.12.25, v6.12.26

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2129307

Title:
  Noble update: upstream stable patchset 2025-10-21

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Noble:
  In Progress

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         upstream stable patchset 2025-10-21

                  Ported from the following upstream stable releases:
                          v6.6.89, v6.12.25, v6.12.26

         from git://git.kernel.org/

  module: sign with sha512 instead of sha1 by default
  x86/extable: Remove unused fixup type EX_TYPE_COPY
  x86/mce: use is_copy_from_user() to determine copy-from-user context
  tracing: Add __string_len() example
  tracing: Add __print_dynamic_array() helper
  tracing: Verify event formats that have "%*p.."
  soc: qcom: ice: introduce devm_of_qcom_ice_get
  mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
  auxdisplay: hd44780: Convert to platform remove callback returning void
  auxdisplay: hd44780: Fix an API misuse in hd44780.c
  net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
  net: dsa: mv88e6xxx: fix VTU methods for 6320 family
  ASoC: qcom: q6apm-dai: drop unused 'q6apm_dai_rtd' fields
  ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
  ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
  iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary 
return value check
  iio: adc: ad7768-1: Fix conversion result sign
  arm64: tegra: Remove the Orin NX/Nano suspend key
  clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable
  clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
  of: resolver: Simplify of_resolve_phandles() using __free()
  of: resolver: Fix device node refcount leakage in of_resolve_phandles()
  scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
  cpufreq/sched: Explicitly synchronize limits_changed flag handling
  ceph: Fix incorrect flush end position calculation
  dma/contiguous: avoid warning about unused size_bytes
  cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
  cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
  cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
  scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
  cpufreq: cppc: Fix invalid return value in .get() callback
  btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
  scsi: core: Clear flags for scsi_cmnd that did not complete
  net: phy: leds: fix memory leak
  tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
  net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
  fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
  net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
  net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
  pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
  pds_core: Remove unnecessary check in pds_client_adminq_cmd()
  pds_core: make wait_context part of q_info
  iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
  splice: remove duplicate noinline from pipe_clear_nowait
  perf/x86: Fix non-sampling (counting) events on certain x86 platforms
  LoongArch: Select ARCH_USE_MEMTEST
  LoongArch: Make regs_irqs_disabled() more clear
  LoongArch: Make do_xyz() exception handlers more robust
  virtio_console: fix missing byte order handling for cols and rows
  crypto: atmel-sha204a - Set hwrng quality to lowest possible
  xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
  net: selftests: initialize TCP header and skb payload with zero
  net: phy: microchip: force IRQ polling mode for lan88xx
  drm/amd/display: Fix gpu reset in multidisplay config
  irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
  LoongArch: Return NULL from huge_pte_offset() for invalid PMD
  LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
  LoongArch: Remove a bogus reference to ZONE_DMA
  io_uring: fix 'sync' handling of io_fallback_tw()
  KVM: SVM: Allocate IR data using atomic allocation
  cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
  mcb: fix a double free bug in chameleon_parse_gdd()
  ata: libata-scsi: Improve CDL control
  ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
  ata: libata-scsi: Fix ata_msense_control_ata_feature()
  USB: storage: quirk for ADATA Portable HDD CH94
  scsi: Improve CDL control
  mei: me: add panther lake H DID
  KVM: x86: Explicitly treat routing entry type changes as changes
  KVM: x86: Reset IRTE to host control if *new* route isn't postable
  char: misc: register chrdev region with all possible minors
  misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
  misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
  serial: msm: Configure correct working mode before starting earlycon
  serial: sifive: lock port in startup()/shutdown() callbacks
  USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
  USB: serial: option: add Sierra Wireless EM9291
  USB: serial: simple: add OWON HDS200 series oscilloscope support
  usb: xhci: Fix invalid pointer dereference in Etron workaround
  usb: cdns3: Fix deadlock when using NCM gadget
  usb: chipidea: ci_hdrc_imx: fix usbmisc handling
  usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
  usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
  USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
  usb: dwc3: gadget: check that event count does not exceed event buffer length
  usb: dwc3: xilinx: Prevent spike in reset signal
  usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
  usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
  USB: VLI disk crashes if LPM is used
  USB: wdm: handle IO errors in wdm_wwan_port_start
  USB: wdm: close race between wdm_open and wdm_wwan_port_stop
  USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
  USB: wdm: add annotation
  pinctrl: renesas: rza2: Fix potential NULL pointer dereference
  MIPS: cm: Detect CM quirks from device tree
  crypto: ccp - Add support for PCI device 0x1134
  crypto: null - Use spin lock instead of mutex
  bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
  clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
  parisc: PDT: Fix missing prototype warning
  s390/sclp: Add check for get_zeroed_page()
  s390/tty: Fix a potential memory leak bug
  bpf: bpftool: Setting error code in do_loader()
  bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates 
storage
  bpf: Reject attaching fexit/fmod_ret to __noreturn functions
  mailbox: pcc: Fix the possible race in updation of chan_in_use flag
  mailbox: pcc: Always clear the platform ack interrupt first
  usb: host: max3421-hcd: Add missing spi_device_id table
  fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
  usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
  usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
  sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
  usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
  usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
  thunderbolt: Scan retimers after device router has been enumerated
  objtool: Silence more KCOV warnings
  objtool, panic: Disable SMAP in __stack_chk_fail()
  objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in 
wcd934x_slim_irq_handler()
  objtool, regulator: rk808: Remove potential undefined behavior in 
rk806_set_mode_dcdc()
  objtool, lkdtm: Obfuscate the do_nothing() pointer
  qibfs: fix _another_ leak
  ntb: reduce stack usage in idt_scan_mws
  ntb_hw_amd: Add NTB PCI ID for new gen CPU
  9p/net: fix improper handling of bogus negative read/write replies
  rtc: pcf85063: do a SW reset if POR failed
  io_uring: always do atomic put from iowq
  sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
  KVM: s390: Don't use %pK through tracepoints
  KVM: s390: Don't use %pK through debug printing
  udmabuf: fix a buf size overflow issue during udmabuf creation
  selftests: ublk: fix test_stripe_04
  perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
  xen: Change xen-acpi-processor dom0 dependency
  ACPI: EC: Set ec_no_wakeup for Lenovo Go S
  ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
  nvme: multipath: fix return value of nvme_available_path
  objtool: Stop UNRET validation on UD2
  gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
  selftests/mincore: Allow read-ahead pages to reach the end of the file
  x86/bugs: Use SBPB in write_ibpb() if applicable
  x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
  x86/bugs: Don't fill RSB on context switch with eIBRS
  nvmet-fc: take tgtport reference only once
  cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode
  timekeeping: Add a lockdep override in tick_freeze()
  ext4: make block validity check resistent to sb bh corruption
  scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
  scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
  scsi: pm80xx: Set phy_attached to zero when device is gone
  x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
  iomap: skip unnecessary ifs_block_is_uptodate check
  riscv: Provide all alternative macros all the time
  loop: aio inherit the ioprio of original request
  spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
  spi: tegra210-quad: add rate limiting and simplify timeout error message
  ubsan: Fix panic from test_ubsan_out_of_bounds
  x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores
  spi: spi-imx: Add check for spi_imx_setupxfer()
  x86/pvh: Call C code via the kernel virtual mapping
  Revert "drivers: core: synchronize really_probe() and dev_uevent()"
  driver core: introduce device_set_driver() helper
  driver core: fix potential NULL pointer dereference in dev_uevent()
  vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
  comedi: jr3_pci: Fix synchronous deletion of timer
  ext4: goto right label 'out_mmap_sem' in ext4_setattr()
  net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
  net: dsa: mv88e6xxx: enable PVT for 6321 switch
  net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
  net: dsa: mv88e6xxx: enable STU methods for 6320 family
  MIPS: cm: Fix warning if MIPS_CM is disabled
  objtool: Ignore end-of-section jumps for KCOV/GCOV
  objtool: Silence more KCOV warnings, part 2
  ALSA: hda/cirrus_scodec_test: Don't select dependencies
  ALSA: hda: improve bass speaker support for ASUS Zenbook UM5606WA
  ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130
  ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
  eth: bnxt: fix missing ring index trim on error path
  net: txgbe: fix memory leak in txgbe_probe() error path
  net: ethernet: mtk_eth_soc: reapply mdc divider on reset
  riscv: Use kvmalloc_array on relocation_hashtable
  riscv: module: Fix out-of-bounds relocation access
  riscv: module: Allocate PLT entries for R_RISCV_PLT32
  ASoC: fsl: fsl_qmc_audio: Reset audio data pointers on TRIGGER_START event
  block: integrity: Do not call set_page_dirty_lock()
  dma-buf/sw_sync: Decrement refcount on error in sw_sync_ioctl_get_deadline()
  mm/compaction: fix bug in hugetlb handling pathway
  platform/x86: amd: pmf: Fix STT limits
  drm/xe: Use local fence in error path of xe_migrate_clear
  drm/amd/display: Add HP Elitebook 645 to the quirk list for eDP on DP1
  drm/imagination: fix firmware memory leaks
  drm/imagination: take paired job reference
  drm/xe: Fix an out-of-bounds shift when invalidating TLB
  drm/amd/display: Add HP Probook 445 and 465 to the quirk list for eDP on DP1
  drm/xe/dma_buf: stop relying on placement in unmap
  drm/amdgpu: fix warning of drm_mm_clean
  arm64/sysreg: Update register fields for ID_AA64MMFR0_EL1
  arm64/sysreg: Add register fields for HDFGRTR2_EL2
  arm64/sysreg: Add register fields for HDFGWTR2_EL2
  arm64/sysreg: Add register fields for HFGITR2_EL2
  arm64/sysreg: Add register fields for HFGRTR2_EL2
  arm64/sysreg: Add register fields for HFGWTR2_EL2
  kbuild: Add '-fno-builtin-wcslen'
  drm/amd/display: Temporarily disable hostvm on DCN31
  block: remove rq_list_move
  wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
  bpf: add find_containing_subprog() utility function
  selftests/bpf: test for changing packet data from global functions
  selftests/bpf: freplace tests for tracking of changes_packet_data
  selftests/bpf: validate that tail call invalidates packet pointers
  selftests/bpf: extend changes_pkt_data with cases w/o subprograms
  media: i2c: imx214: Use subdev active state
  media: i2c: imx214: Simplify with dev_err_probe()
  media: i2c: imx214: Convert to CCI register access helpers
  media: i2c: imx214: Replace register addresses with macros
  media: i2c: imx214: Check number of lanes from device tree
  media: i2c: imx214: Fix link frequency validation
  scsi: ufs: exynos: Move UFS shareability value to drvdata
  scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set
  btrfs: zoned: return EIO on RAID1 block group write pointer mismatch
  cgroup/cpuset: Expose cpuset filesystem with cpuset v1 only
  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
  vhost-scsi: Add better resource allocation failure handling
  vhost-scsi: Fix vhost_scsi_send_bad_target()
  vhost-scsi: Fix vhost_scsi_send_status()
  scsi: ufs: mcq: Use ufshcd_mcq_req_to_hwq() to simplify updating hwq
  scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()
  pds_core: Prevent possible adminq overflow/stuck condition
  riscv: Replace function-like macro by static inline function
  riscv: uprobes: Add missing fence.i after building the XOL buffer
  bpf: Add namespace to BPF internal symbols
  netfilter: fib: avoid lookup if socket is available
  drm: panel: jd9365da: fix reset signal polarity in unprepare
  drm/amd/display: Force full update in gpu reset
  mei: vsc: Fix fortify-panic caused by invalid counted_by() use
  KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
  firmware: stratix10-svc: Add of_platform_default_populate()
  i3c: master: svc: Add support for Nuvoton npcm845 i3c
  9p/trans_fd: mark concurrent read and writes to p9_conn->err
  x86/xen: disable CPU idle and frequency drivers for PVH dom0
  nvmet-fc: put ref when assoc->del_work is already scheduled
  scsi: ufs: exynos: Move phy calls to .exit() callback
  ASoC: fsl_asrc_dma: get codec or cpu dai from backend
  xfs: do not check NEEDSREPAIR if ro,norecovery mount.
  xfs: Do not allow norecovery mount with quotacheck
  xfs: rename xfs_iomap_swapfile_activate to xfs_vm_swap_activate
  xfs: flush inodegc before swapon
  selftests/bpf: fix bpf_map_redirect call for cpu map test
  selftests/bpf: make xdp_cpumap_attach keep redirect prog attached
  selftests/bpf: check program redirect in xdp_cpumap_attach
  selftests/bpf: Adjust data size to have ETH_HLEN
  usb: typec: class: Fix NULL pointer access
  usb: typec: class: Invalidate USB device pointers on partner unregistration
  Revert "net: dsa: mv88e6xxx: fix internal PHYs for 6320 family"
  iommu: Handle race with default domain setup
  media: i2c: imx214: Fix uninitialized variable in imx214_set_ctrl()
  usb: typec: class: Unlocked on error in typec_register_partner()
  UBUNTU: Upstream stable to v6.6.89, v6.12.25, v6.12.26

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2129307/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to