Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-06-05
Ported from the following upstream stable releases:
v6.6.88, v6.12.25
from git://git.kernel.org/
wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
drm/amd/display: add workaround flag to link to force FFE preset
scsi: hisi_sas: Enable force phy when SATA disk directly connected
wifi: at76c50x: fix use after free access in at76_disconnect
wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
wifi: mac80211: Purge vif txq in ieee80211_do_stop()
wifi: wl1251: fix memory leak in wl1251_tx_work
scsi: iscsi: Fix missing scsi_host_put() in error path
md/raid10: fix missing discard IO accounting
md/md-bitmap: fix stats collection for external bitmaps
ASoC: dwc: always enable/disable i2s irqs
ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()
ovl: remove unused forward declaration
RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
RDMA/hns: Fix wrong maximum DMA segment size
ASoC: cs42l43: Reset clamp override on jack removal
RDMA/core: Silence oversized kvmalloc() warning
Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
Bluetooth: btrtl: Prevent potential NULL dereference
Bluetooth: l2cap: Check encryption key size on incoming connection
igc: fix PTM cycle trigger logic
igc: increase wait time before retrying PTM
igc: move ktime snapshot into PTM retry loop
igc: handle the IGC_PTP_ENABLED flag correctly
igc: cleanup PTP module if probe fails
igc: add lock preventing multiple simultaneous PTM transactions
test suite: use %zu to print size_t
pds_core: fix memory leak in pdsc_debugfs_add_qcq()
net: mctp: Set SOCK_RCU_FREE
block: fix resource leak in blk_register_queue() error path
net: openvswitch: fix nested key length validation in the set() action
net: ngbe: fix memory leak in ngbe_probe() error path
net: ethernet: ti: am65-cpsw: fix port_np reference counting
ata: libata-sata: Save all fields from sense data descriptor
cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
netlink: specs: rt-link: add an attr layer around alt-ifname
netlink: specs: rt-link: adjust mctp attribute naming
net: b53: enable BPDU reception for management port
net: bridge: switchdev: do not notify new brentries as changed
net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never
registered
net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported
net: dsa: clean up FDB, MDB, VLAN entries on unbind
net: dsa: free routing table on probe failure
net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails
ptp: ocp: fix start time alignment in ptp_ocp_signal_set
net: ti: icss-iep: Add pwidth configuration for perout signal
net: ti: icss-iep: Add phase offset configuration for perout signal
net: ti: icss-iep: Fix possible NULL pointer dereference for perout request
net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for
100Mbps
net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings
riscv: Properly export reserved regions in /proc/iomem
kunit: qemu_configs: SH: Respect kunit cmdline
riscv: KGDB: Do not inline arch_kgdb_breakpoint()
riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
writeback: fix false warning in inode_to_wb()
ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
ASoC: qcom: Fix sc7280 lpass potential buffer overflow
asus-laptop: Fix an uninitialized variable
nfs: add missing selections of CONFIG_CRC32
nfsd: decrease sc_count directly if fail to queue dl_recall
i2c: atr: Fix wrong include
ftrace: fix incorrect hash size in register_ftrace_direct()
Bluetooth: l2cap: Process valid commands in too long frame
Bluetooth: vhci: Avoid needless snprintf() calls
btrfs: correctly escape subvol in btrfs_show_options()
crypto: caam/qi - Fix drv_ctx refcount bug
Revert "UBUNTU: SAUCE: fs: hfs/hfsplus: add key_len boundary check to
hfs_bnode_read_key"
hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
i2c: cros-ec-tunnel: defer probe if parent EC is not present
isofs: Prevent the use of too small fid
loop: properly send KOBJ_CHANGED uevent for disk device
loop: LOOP_SET_FD: send uevents for partitions
mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
mm: fix filemap_get_folios_contig returning batches of identical folios
mm: fix apply_to_existing_page_range()
ovl: don't allow datadir only
ksmbd: Fix dangling pointer in krb_authenticate
ksmbd: fix use-after-free in smb_break_all_levII_oplock()
ksmbd: Prevent integer overflow in calculation of deadtime
ksmbd: fix the warning from __kernel_write_iter
Revert "smb: client: fix TCP timers deadlock after rmmod"
riscv: Avoid fortify warning in syscall_get_arguments()
selftests/mm: generate a temporary mountpoint for cgroup filesystem
smb3 client: fix open hardlink on deferred close file error
string: Add load_unaligned_zeropad() code path to sized_strscpy()
tracing: Fix filter string testing
virtiofs: add filesystem context source name check
x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any
unreleased standalone Zen5 microcode patches
x86/cpu/amd: Fix workaround for erratum 1054
x86/boot/sev: Avoid shared GHCB page for early memory acceptance
scsi: megaraid_sas: Block zero-length ATA VPD inquiry
scsi: ufs: exynos: Ensure consistent phy reference counts
RDMA/cma: Fix workqueue crash in cma_netevent_work_handler
perf/x86/intel: Allow to update user space GPRs from PEBS records
perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
drm/repaper: fix integer overflows in repeat functions
drm/msm/a6xx: Fix stale rpmh votes from GPU
drm/amd: Handle being compiled without SI or CIK support better
drm/amd/pm: Prevent division by zero
drm/amd/pm/powerplay: Prevent division by zero
drm/amd/pm/smu11: Prevent division by zero
drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
drm/amdgpu/dma_buf: fix page_link check
drm/nouveau: prime: fix ttm_bo_delayed_delete oops
drm/sti: remove duplicate object names
drm/i915/gvt: fix unterminated-string-initialization warning
cpufreq: Reference count policy in cpufreq_update_limits()
md: fix mddev uaf while iterating all_mddevs list
misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq
error
misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
x86/split_lock: Fix the delayed detection logic
LoongArch: Eliminate superfluous get_numa_distances_cnt()
nvmet-fc: Remove unused functions
sign-file,extract-cert: move common SSL helper functions to a header
sign-file,extract-cert: avoid using deprecated ERR_get_error_line()
sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3
MIPS: dec: Declare which_prom() as static
MIPS: cevt-ds1287: Add missing ds1287.h include
MIPS: ds1287: Match ds1287_set_base_clock() function types
driver core: bus: add irq_get_affinity callback to bus_type
blk-mq: introduce blk_mq_map_hw_queues
scsi: replace blk_mq_pci_map_queues with blk_mq_map_hw_queues
crypto: tegra - remove redundant error check on ret
crypto: tegra - Do not use fixed size buffers
crypto: tegra - Fix IV usage for AES ECB
ALSA: hda/cirrus_scodec_test: Don't select dependencies
ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130
ipv6: add exception routes to GC list in rt6_insert_exception
xen: fix multicall debug feature
Revert "wifi: mac80211: Update skb's control block key in
ieee80211_tx_dequeue()"
dt-bindings: soc: fsl: fsl,ls1028a-reset: Fix maintainer entry
smc: Fix lockdep false-positive for IPPROTO_SMC.
ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll()
netlink: specs: ovs_vport: align with C codegen capabilities
eth: bnxt: fix missing ring index trim on error path
loop: aio inherit the ioprio of original request
loop: stop using vfs_iter_{read,write} for buffered I/O
net: txgbe: fix memory leak in txgbe_probe() error path
net: ethernet: mtk_eth_soc: reapply mdc divider on reset
riscv: Use kvmalloc_array on relocation_hashtable
riscv: module: Fix out-of-bounds relocation access
riscv: module: Allocate PLT entries for R_RISCV_PLT32
rust: disable `clippy::needless_continue`
ASoC: fsl: fsl_qmc_audio: Reset audio data pointers on TRIGGER_START event
ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S16
block: integrity: Do not call set_page_dirty_lock()
dma-buf/sw_sync: Decrement refcount on error in sw_sync_ioctl_get_deadline()
drm/msm/a6xx+: Don't let IB_SIZE overflow
cpufreq/sched: Explicitly synchronize limits_changed flag handling
mm/compaction: fix bug in hugetlb handling pathway
slab: ensure slab->obj_exts is clear in a newly allocated slab page
RAS/AMD/ATL: Include row[13] bit in row retirement
RAS/AMD/FMPM: Get masked address
platform/x86: amd: pmf: Fix STT limits
drm/msm/dsi: Add check for devm_kstrdup()
drm/amd/display: prevent hang on link training fail
drm/amdgpu/mes12: optimize MES pipe FW version fetching
drm/i915/vrr: Add vrr.vsync_{start, end} in vrr_params_changed
drm/xe: Use local fence in error path of xe_migrate_clear
drm/amd/display: Add HP Elitebook 645 to the quirk list for eDP on DP1
drm/amd/display: Protect FPU in dml2_validate()/dml21_validate()
drm/amd/display: Protect FPU in dml21_copy()
drm/amdgpu/mes11: optimize MES pipe FW version fetching
drm/imagination: fix firmware memory leaks
drm/imagination: take paired job reference
drm/xe: Fix an out-of-bounds shift when invalidating TLB
drm/amdgpu: immediately use GTT for new allocations
drm/amd/display: Do not enable Replay and PSR while VRR is on in
amdgpu_dm_commit_planes()
drm/amd/display: Protect FPU in dml2_init()/dml21_init()
drm/amd/display: Add HP Probook 445 and 465 to the quirk list for eDP on DP1
drm/xe/dma_buf: stop relying on placement in unmap
drm/xe/userptr: fix notifier vs folio deadlock
drm/xe: Set LRC addresses before guc load
drm/amdgpu: fix warning of drm_mm_clean
arm64/sysreg: Update register fields for ID_AA64MMFR0_EL1
arm64/sysreg: Add register fields for HDFGRTR2_EL2
arm64/sysreg: Add register fields for HDFGWTR2_EL2
arm64/sysreg: Add register fields for HFGITR2_EL2
arm64/sysreg: Add register fields for HFGRTR2_EL2
arm64/sysreg: Add register fields for HFGWTR2_EL2
arm64/boot: Enable EL2 requirements for FEAT_PMUv3p9
platform/x86: msi-wmi-platform: Rename "data" variable
platform/x86: msi-wmi-platform: Workaround a ACPI firmware bug
selftests/bpf: Fix raw_tp null handling test
Revert "UBUNTU: SAUCE: efi: efi_get_memory_map -- increase map headroom"
efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32
drm/amd/display: Temporarily disable hostvm on DCN31
Revert "wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process"
bpf: add find_containing_subprog() utility function
bpf: track changes_pkt_data property for global functions
selftests/bpf: test for changing packet data from global functions
bpf: check changes_pkt_data property for extension programs
selftests/bpf: freplace tests for tracking of changes_packet_data
selftests/bpf: validate that tail call invalidates packet pointers
bpf: fix null dereference when computing changes_pkt_data of prog w/o subprogs
selftests/bpf: extend changes_pkt_data with cases w/o subprograms
UBUNTU: Upstream stable to v6.6.88, v6.12.25
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Oracular)
Importance: Medium
Assignee: Noah Wager (nwager)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Oracular)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Oracular)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Oracular)
Status: New => In Progress
** Changed in: linux (Ubuntu Oracular)
Assignee: (unassigned) => Noah Wager (nwager)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-06-05
+
+ Ported from the following upstream stable releases:
+ v6.6.88, v6.12.25
+
from git://git.kernel.org/
+
+ wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
+ drm/amd/display: add workaround flag to link to force FFE preset
+ scsi: hisi_sas: Enable force phy when SATA disk directly connected
+ wifi: at76c50x: fix use after free access in at76_disconnect
+ wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
+ wifi: mac80211: Purge vif txq in ieee80211_do_stop()
+ wifi: wl1251: fix memory leak in wl1251_tx_work
+ scsi: iscsi: Fix missing scsi_host_put() in error path
+ md/raid10: fix missing discard IO accounting
+ md/md-bitmap: fix stats collection for external bitmaps
+ ASoC: dwc: always enable/disable i2s irqs
+ ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()
+ ovl: remove unused forward declaration
+ RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
+ RDMA/hns: Fix wrong maximum DMA segment size
+ ASoC: cs42l43: Reset clamp override on jack removal
+ RDMA/core: Silence oversized kvmalloc() warning
+ Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
+ Bluetooth: btrtl: Prevent potential NULL dereference
+ Bluetooth: l2cap: Check encryption key size on incoming connection
+ igc: fix PTM cycle trigger logic
+ igc: increase wait time before retrying PTM
+ igc: move ktime snapshot into PTM retry loop
+ igc: handle the IGC_PTP_ENABLED flag correctly
+ igc: cleanup PTP module if probe fails
+ igc: add lock preventing multiple simultaneous PTM transactions
+ test suite: use %zu to print size_t
+ pds_core: fix memory leak in pdsc_debugfs_add_qcq()
+ net: mctp: Set SOCK_RCU_FREE
+ block: fix resource leak in blk_register_queue() error path
+ net: openvswitch: fix nested key length validation in the set() action
+ net: ngbe: fix memory leak in ngbe_probe() error path
+ net: ethernet: ti: am65-cpsw: fix port_np reference counting
+ ata: libata-sata: Save all fields from sense data descriptor
+ cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
+ netlink: specs: rt-link: add an attr layer around alt-ifname
+ netlink: specs: rt-link: adjust mctp attribute naming
+ net: b53: enable BPDU reception for management port
+ net: bridge: switchdev: do not notify new brentries as changed
+ net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never
registered
+ net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported
+ net: dsa: clean up FDB, MDB, VLAN entries on unbind
+ net: dsa: free routing table on probe failure
+ net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails
+ ptp: ocp: fix start time alignment in ptp_ocp_signal_set
+ net: ti: icss-iep: Add pwidth configuration for perout signal
+ net: ti: icss-iep: Add phase offset configuration for perout signal
+ net: ti: icss-iep: Fix possible NULL pointer dereference for perout request
+ net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for
100Mbps
+ net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings
+ riscv: Properly export reserved regions in /proc/iomem
+ kunit: qemu_configs: SH: Respect kunit cmdline
+ riscv: KGDB: Do not inline arch_kgdb_breakpoint()
+ riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
+ cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
+ writeback: fix false warning in inode_to_wb()
+ ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
+ ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
+ ASoC: qcom: Fix sc7280 lpass potential buffer overflow
+ asus-laptop: Fix an uninitialized variable
+ nfs: add missing selections of CONFIG_CRC32
+ nfsd: decrease sc_count directly if fail to queue dl_recall
+ i2c: atr: Fix wrong include
+ ftrace: fix incorrect hash size in register_ftrace_direct()
+ Bluetooth: l2cap: Process valid commands in too long frame
+ Bluetooth: vhci: Avoid needless snprintf() calls
+ btrfs: correctly escape subvol in btrfs_show_options()
+ crypto: caam/qi - Fix drv_ctx refcount bug
+ Revert "UBUNTU: SAUCE: fs: hfs/hfsplus: add key_len boundary check to
hfs_bnode_read_key"
+ hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
+ i2c: cros-ec-tunnel: defer probe if parent EC is not present
+ isofs: Prevent the use of too small fid
+ loop: properly send KOBJ_CHANGED uevent for disk device
+ loop: LOOP_SET_FD: send uevents for partitions
+ mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
+ mm: fix filemap_get_folios_contig returning batches of identical folios
+ mm: fix apply_to_existing_page_range()
+ ovl: don't allow datadir only
+ ksmbd: Fix dangling pointer in krb_authenticate
+ ksmbd: fix use-after-free in smb_break_all_levII_oplock()
+ ksmbd: Prevent integer overflow in calculation of deadtime
+ ksmbd: fix the warning from __kernel_write_iter
+ Revert "smb: client: fix TCP timers deadlock after rmmod"
+ riscv: Avoid fortify warning in syscall_get_arguments()
+ selftests/mm: generate a temporary mountpoint for cgroup filesystem
+ smb3 client: fix open hardlink on deferred close file error
+ string: Add load_unaligned_zeropad() code path to sized_strscpy()
+ tracing: Fix filter string testing
+ virtiofs: add filesystem context source name check
+ x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any
unreleased standalone Zen5 microcode patches
+ x86/cpu/amd: Fix workaround for erratum 1054
+ x86/boot/sev: Avoid shared GHCB page for early memory acceptance
+ scsi: megaraid_sas: Block zero-length ATA VPD inquiry
+ scsi: ufs: exynos: Ensure consistent phy reference counts
+ RDMA/cma: Fix workqueue crash in cma_netevent_work_handler
+ perf/x86/intel: Allow to update user space GPRs from PEBS records
+ perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
+ perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
+ perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
+ drm/repaper: fix integer overflows in repeat functions
+ drm/msm/a6xx: Fix stale rpmh votes from GPU
+ drm/amd: Handle being compiled without SI or CIK support better
+ drm/amd/pm: Prevent division by zero
+ drm/amd/pm/powerplay: Prevent division by zero
+ drm/amd/pm/smu11: Prevent division by zero
+ drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
+ drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
+ drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
+ drm/amdgpu/dma_buf: fix page_link check
+ drm/nouveau: prime: fix ttm_bo_delayed_delete oops
+ drm/sti: remove duplicate object names
+ drm/i915/gvt: fix unterminated-string-initialization warning
+ cpufreq: Reference count policy in cpufreq_update_limits()
+ md: fix mddev uaf while iterating all_mddevs list
+ misc: pci_endpoint_test: Avoid issue of interrupts remaining after
request_irq error
+ misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
+ x86/split_lock: Fix the delayed detection logic
+ LoongArch: Eliminate superfluous get_numa_distances_cnt()
+ nvmet-fc: Remove unused functions
+ sign-file,extract-cert: move common SSL helper functions to a header
+ sign-file,extract-cert: avoid using deprecated ERR_get_error_line()
+ sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3
+ MIPS: dec: Declare which_prom() as static
+ MIPS: cevt-ds1287: Add missing ds1287.h include
+ MIPS: ds1287: Match ds1287_set_base_clock() function types
+ driver core: bus: add irq_get_affinity callback to bus_type
+ blk-mq: introduce blk_mq_map_hw_queues
+ scsi: replace blk_mq_pci_map_queues with blk_mq_map_hw_queues
+ crypto: tegra - remove redundant error check on ret
+ crypto: tegra - Do not use fixed size buffers
+ crypto: tegra - Fix IV usage for AES ECB
+ ALSA: hda/cirrus_scodec_test: Don't select dependencies
+ ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130
+ ipv6: add exception routes to GC list in rt6_insert_exception
+ xen: fix multicall debug feature
+ Revert "wifi: mac80211: Update skb's control block key in
ieee80211_tx_dequeue()"
+ dt-bindings: soc: fsl: fsl,ls1028a-reset: Fix maintainer entry
+ smc: Fix lockdep false-positive for IPPROTO_SMC.
+ ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll()
+ netlink: specs: ovs_vport: align with C codegen capabilities
+ eth: bnxt: fix missing ring index trim on error path
+ loop: aio inherit the ioprio of original request
+ loop: stop using vfs_iter_{read,write} for buffered I/O
+ net: txgbe: fix memory leak in txgbe_probe() error path
+ net: ethernet: mtk_eth_soc: reapply mdc divider on reset
+ riscv: Use kvmalloc_array on relocation_hashtable
+ riscv: module: Fix out-of-bounds relocation access
+ riscv: module: Allocate PLT entries for R_RISCV_PLT32
+ rust: disable `clippy::needless_continue`
+ ASoC: fsl: fsl_qmc_audio: Reset audio data pointers on TRIGGER_START event
+ ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S16
+ block: integrity: Do not call set_page_dirty_lock()
+ dma-buf/sw_sync: Decrement refcount on error in sw_sync_ioctl_get_deadline()
+ drm/msm/a6xx+: Don't let IB_SIZE overflow
+ cpufreq/sched: Explicitly synchronize limits_changed flag handling
+ mm/compaction: fix bug in hugetlb handling pathway
+ slab: ensure slab->obj_exts is clear in a newly allocated slab page
+ RAS/AMD/ATL: Include row[13] bit in row retirement
+ RAS/AMD/FMPM: Get masked address
+ platform/x86: amd: pmf: Fix STT limits
+ drm/msm/dsi: Add check for devm_kstrdup()
+ drm/amd/display: prevent hang on link training fail
+ drm/amdgpu/mes12: optimize MES pipe FW version fetching
+ drm/i915/vrr: Add vrr.vsync_{start, end} in vrr_params_changed
+ drm/xe: Use local fence in error path of xe_migrate_clear
+ drm/amd/display: Add HP Elitebook 645 to the quirk list for eDP on DP1
+ drm/amd/display: Protect FPU in dml2_validate()/dml21_validate()
+ drm/amd/display: Protect FPU in dml21_copy()
+ drm/amdgpu/mes11: optimize MES pipe FW version fetching
+ drm/imagination: fix firmware memory leaks
+ drm/imagination: take paired job reference
+ drm/xe: Fix an out-of-bounds shift when invalidating TLB
+ drm/amdgpu: immediately use GTT for new allocations
+ drm/amd/display: Do not enable Replay and PSR while VRR is on in
amdgpu_dm_commit_planes()
+ drm/amd/display: Protect FPU in dml2_init()/dml21_init()
+ drm/amd/display: Add HP Probook 445 and 465 to the quirk list for eDP on DP1
+ drm/xe/dma_buf: stop relying on placement in unmap
+ drm/xe/userptr: fix notifier vs folio deadlock
+ drm/xe: Set LRC addresses before guc load
+ drm/amdgpu: fix warning of drm_mm_clean
+ arm64/sysreg: Update register fields for ID_AA64MMFR0_EL1
+ arm64/sysreg: Add register fields for HDFGRTR2_EL2
+ arm64/sysreg: Add register fields for HDFGWTR2_EL2
+ arm64/sysreg: Add register fields for HFGITR2_EL2
+ arm64/sysreg: Add register fields for HFGRTR2_EL2
+ arm64/sysreg: Add register fields for HFGWTR2_EL2
+ arm64/boot: Enable EL2 requirements for FEAT_PMUv3p9
+ platform/x86: msi-wmi-platform: Rename "data" variable
+ platform/x86: msi-wmi-platform: Workaround a ACPI firmware bug
+ selftests/bpf: Fix raw_tp null handling test
+ Revert "UBUNTU: SAUCE: efi: efi_get_memory_map -- increase map headroom"
+ efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32
+ drm/amd/display: Temporarily disable hostvm on DCN31
+ Revert "wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process"
+ bpf: add find_containing_subprog() utility function
+ bpf: track changes_pkt_data property for global functions
+ selftests/bpf: test for changing packet data from global functions
+ bpf: check changes_pkt_data property for extension programs
+ selftests/bpf: freplace tests for tracking of changes_packet_data
+ selftests/bpf: validate that tail call invalidates packet pointers
+ bpf: fix null dereference when computing changes_pkt_data of prog w/o subprogs
+ selftests/bpf: extend changes_pkt_data with cases w/o subprograms
+ UBUNTU: Upstream stable to v6.6.88, v6.12.25
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2112612
Title:
Oracular update: upstream stable patchset 2025-06-05
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2112612/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
