** Changed in: linux-oem-6.1 (Ubuntu Jammy) Status: In Progress => Fix Committed
-- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux-oem-6.1 in Ubuntu. https://bugs.launchpad.net/bugs/2020702 Title: Jammy update: v6.1.30 upstream stable release Status in linux-oem-6.1 package in Ubuntu: Invalid Status in linux-oem-6.1 source package in Jammy: Fix Committed Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.1.30 upstream stable release from git://git.kernel.org/ Linux 6.1.30 drm/amdgpu: reserve the old gc_11_0_*_mes.bin drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 drm/amdgpu: declare firmware for new MES 11.0.4 crypto: testmgr - fix RNG performance in fuzz tests remoteproc: imx_dsp_rproc: Fix kernel test robot sparse warning rethook, fprobe: do not trace rethook related functions rethook: use preempt_{disable, enable}_notrace in rethook_trampoline_handler arm64: mte: Do not set PG_mte_tagged if tags were not initialized s390/qdio: fix do_sqbs() inline assembly constraint s390/crypto: use vector instructions only if available for ChaCha20 s390/dasd: fix command reject error on ESE devices nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() powerpc/64s/radix: Fix soft dirty tracking tpm/tpm_tis: Disable interrupts for more Lenovo devices powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries drm/amdgpu/gfx11: update gpu_clock_counter logic drm/amdgpu: refine get gpu clock counter method drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11 as well drm/amdgpu/gfx10: Disable gfxoff before disabling powergating. drm/amdgpu/gmc11: implement get_vbios_fb_size() drm/amd/pm: fix possible power mode mismatch between driver and PMFW ceph: force updating the msg pointer in non-split case vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF thunderbolt: Clear registers properly when auto clear isn't in use serial: qcom-geni: fix enabling deactivated interrupt serial: 8250_exar: Add support for USR298x PCI Modems serial: Add support for Advantech PCI-1611U card mm: fix zswap writeback race condition maple_tree: make maple state reusable after mas_empty_area() statfs: enforce statfs[64] structure initialization KVM: Fix vcpu_array[0] races ksmbd: fix global-out-of-bounds in smb2_find_context_vals ksmbd: fix wrong UserName check in session_user ksmbd: allocate one more byte for implied bcc[0] ksmbd: smb2: Allow messages padded to 8byte boundary SMB3: drop reference to cfile before sending oplock break SMB3: Close all deferred handles of inode in case of handle lease break wifi: rtw88: use work to update rate to avoid RCU warning can: kvaser_pciefd: Disable interrupts in probe error path can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt can: kvaser_pciefd: Clear listen-only bit if not explicitly requested can: kvaser_pciefd: Empty SRB buffer in probe can: kvaser_pciefd: Call request_irq() before enabling interrupts can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag ALSA: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop ALSA: hda/realtek: Add quirk for HP EliteBook G10 laptops ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 ALSA: hda/realtek: Add quirk for Clevo L140AU ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table ALSA: hda: Fix Oops by 9.1 surround channel names xhci: Fix incorrect tracking of free space on transfer rings xhci-pci: Only run d3cold avoidance quirk for s2idle Revert "usb: gadget: udc: core: Invoke usb_gadget_connect only when started" Revert "usb: gadget: udc: core: Prevent redundant calls to pullup" usb: typec: altmodes/displayport: fix pin_assignment_show usb: gadget: u_ether: Fix host MAC address case usb: dwc3: debugfs: Resume dwc3 before accessing registers usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value usb-storage: fix deadlock when a scsi command timeouts more than once USB: usbtmc: Fix direction for 0-length ioctl control messages ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go bridge: always declare tunnel functions netfilter: nft_set_rbtree: fix null deref on element insertion netfilter: nf_tables: fix nft_trans type confusion net: selftests: Fix optstring net: pcs: xpcs: fix C73 AN not getting enabled net: wwan: iosm: fix NULL pointer dereference when removing device vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() igb: fix bit_shift to be in [1..8] range net: dsa: mv88e6xxx: Fix mv88e6393x EPC write command offset cassini: Fix a memory leak in the error handling path of cas_init_one() tun: Fix memory leak for detached NAPI queue. net: tun: rebuild error handling in tun_get_user scsi: storvsc: Don't pass unused PFNs to Hyper-V host wifi: iwlwifi: mvm: don't trust firmware n_channels wifi: iwlwifi: mvm: fix OEM's name in the tas approved list wifi: iwlwifi: fix OEM's name in the ppag approved list wifi: iwlwifi: fw: fix DBGI dump wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock wifi: mac80211: Abort running color change when stopping the AP wifi: mac80211: fix min center freq offset tracing wifi: mac80211: fortify the spinlock against deadlock by interrupt wifi: cfg80211: Drop entries with invalid BSSIDs in RNR ice: Fix ice VF reset during iavf initialization ice: introduce clear_reset_state operation net: bcmgenet: Restore phy_stop() depending upon suspend/close net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() can: dev: fix missing CAN XL support in can_put_echo_skb() s390/cio: include subchannels without devices also for evaluation tipc: check the bearer min mtu properly when setting it by netlink tipc: do not update mtu if msg_max is too small in mtu negotiation tipc: add tipc_bearer_min_mtu to calculate min mtu virtio_net: Fix error unwinding of XDP initialization virtio-net: Maintain reverse cleanup order net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() drm/exynos: fix g2d_open/close helper function definitions ASoC: SOF: topology: Fix logic for copying tuples ASoC: mediatek: mt8186: Fix use-after-free in driver remove path SUNRPC: Fix trace_svc_register() call site SUNRPC: always free ctxt when freeing deferred request SUNRPC: double free xprt_ctxt while still in use media: netup_unidvb: fix use-after-free at del_timer() net: hns3: fix reset timeout when enable full VF net: hns3: fix reset delay time to avoid configuration timeout net: hns3: fix sending pfc frames after reset issue net: hns3: fix output information incomplete for dumping tx queue info with debugfs net: dsa: rzn1-a5psw: disable learning for standalone ports net: dsa: rzn1-a5psw: fix STP states handling net: dsa: rzn1-a5psw: enable management frames for CPU port erspan: get the proto with the md version for collect_md serial: 8250_bcm7271: fix leak in `brcmuart_probe` serial: 8250_bcm7271: balance clk_enable calls serial: arc_uart: fix of_iomap leak in `arc_serial_probe` tcp: fix possible sk_priority leak in tcp_v4_send_reset() vsock: avoid to close connected socket after the timeout sfc: disable RXFCS and RXALL features by default ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15 wifi: mt76: connac: fix stats->tx_bytes calculation ALSA: firewire-digi00x: prevent potential use after free net: phy: dp83867: add w/a for packet errors seen with short cables net: fec: Better handle pm_runtime_get() failing in .remove() selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test drm/msm: Fix submit error-path leaks af_key: Reject optional tunnel/BEET mode templates in outbound policies xfrm: Reject optional tunnel/BEET mode templates in outbound policies cpupower: Make TSC read per CPU for Mperf monitor ASoC: fsl_micfil: Fix error handler with pm_runtime_enable platform: Provide a remove callback that returns no value dt-bindings: display/msm: dsi-controller-main: Document qcom, master-dsi and qcom, sync-dual-dsi drm/msm/dpu: Remove duplicate register defines from INTF drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header drm/msm/dpu: Assign missing writeback log_mask drm/msm/dp: unregister audio driver during unbind Revert "Fix XFRM-I support for nested ESP tunnels" xfrm: don't check the default policy if the policy allows the packet drm/amdgpu: drop gfx_v11_0_cp_ecc_error_irq_funcs platform/x86: hp-wmi: add micmute to hp_wmi_keymap struct platform/x86: Move existing HP drivers to a new hp subdir parisc: Replace regular spinlock with spin_trylock on panic path mfd: intel-lpss: Add Intel Meteor Lake PCH-S LPSS PCI IDs mfd: dln2: Fix memory leak in dln2_probe() mfd: intel_soc_pmic_chtwc: Add Lenovo Yoga Book X90F to intel_cht_wc_models soundwire: bus: Fix unbalanced pm_runtime_put() causing usage count underflow soundwire: qcom: gracefully handle too many ports in DT phy: st: miphy28lp: use _poll_timeout functions for waits soundwire: dmi-quirks: add remapping for Intel 'Rooks County' NUC M15 recordmcount: Fix memory leaks in the uwrite function lkdtm/stackleak: Fix noinstr violation sched: Fix KCSAN noinstr violation mcb-pci: Reallocate memory region to avoid memory overlapping serial: 8250: Reinit port->pm on port specific driver unbind usb: typec: tcpm: fix multiple times discover svids error HID: wacom: generic: Set battery quirk only when we see battery data HID: Ignore battery for ELAN touchscreen on ROG Flow X13 GV301RA HID: apple: Set the tilde quirk flag on the Geyser 3 ASoC: amd: yc: Add ThinkBook 14 G5+ ARP to quirks list for acp6x ASoC: amd: Add Dell G15 5525 to quirks list ALSA: hda: LNL: add HD Audio PCI ID usb: typec: ucsi: acpi: add quirk for ASUS Zenbook UM325 spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 HID: logitech-hidpp: Reconcile USB and Unifying serials HID: logitech-hidpp: Don't use the USB serial for USB devices ASoC: amd: yc: Add DMI entries to support HP OMEN 16-n0xxx (8A42) staging: axis-fifo: initialize timeouts in init only HID: apple: Set the tilde quirk flag on the Geyser 4 and later staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE Bluetooth: btrtl: Add the support for RTL8851B Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp Bluetooth: Add new quirk for broken set random RPA timeout for ATS2851 Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set Bluetooth: btintel: Add LE States quirk support Bluetooth: btrtl: check for NULL in btrtl_set_quirks() Bluetooth: Improve support for Actions Semi ATS2851 based devices Bluetooth: btrtl: add support for the RTL8723CS Bluetooth: Add new quirk for broken local ext features page 2 Bluetooth: btusb: Add new PID/VID 04ca:3801 for MT7663 ipvs: Update width of source for ip_vs_sync_conn_options nbd: fix incomplete validation of ioctl arg wifi: ath11k: Fix SKB corruption in REO destination ring wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace null_blk: Always check queue mode setting from configfs wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO wifi: ath11k: Ignore frags from uninitialized peer in dp. block, bfq: Fix division by zero error on zero wsum wifi: iwlwifi: mvm: fix ptk_pn memory leak wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf wifi: iwlwifi: add a new PCI device ID for BZ device wifi: iwlwifi: pcie: fix possible NULL pointer dereference md: fix soft lockup in status_resync bpf: Add preempt_count_{sub,add} into btf id deny list samples/bpf: Fix fout leak in hbm's run_bpf_prog f2fs: fix to check readonly condition correctly f2fs: fix to drop all dirty pages during umount() if cp_error is set f2fs: Fix system crash due to lack of free space in LFS crypto: jitter - permanent and intermittent health errors ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() ext4: set goal start correctly in ext4_mb_normalize_request scsi: ufs: ufs-pci: Add support for Intel Lunar Lake gfs2: Fix inode height consistency check scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition lib: cpu_rmap: Avoid use after free on rmap->obj array entries scsi: target: iscsit: Free cmds before session free netdev: Enforce index cap in netdev_get_tx_queue net: Catch invalid index in XPS mapping net: pasemi: Fix return type of pasemi_mac_start_tx() bnxt: avoid overflow in bnxt_get_nvram_directory() scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow ext2: Check block size validity during mount wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex wifi: brcmfmac: pcie: Provide a buffer of random bytes to the device bpf: Annotate data races in bpf_local_storage wifi: ath: Silence memcpy run-time false positive warning media: mediatek: vcodec: Fix potential array out-of-bounds in decoder queue_setup media: Prefer designated initializers over memset for subdev pad ops drm/amdgpu: Fix sdma v4 sw fini error drm/amd: Fix an out of bounds error in BIOS parser drm/amd/display: Correct DML calculation to follow HW SPEC ACPI: video: Remove desktops without backlight DMI quirks irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 arm64: dts: qcom: sdm845-polaris: Drop inexistent properties ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects ACPICA: Avoid undefined behavior: applying zero offset to null pointer drm/msm/dp: Clean up handling of DP AUX interrupts drm/tegra: Avoid potential 32-bit integer overflow remoteproc: stm32_rproc: Add mutex protection for workqueue drm/amd/display: fixed dcn30+ underflow issue ACPI: EC: Fix oops when removing custom query handlers firmware: arm_sdei: Fix sleep from invalid context BUG arm64: dts: imx8mq-librem5: Remove dis_u3_susphy_quirk from usb_dwc3_0 memstick: r592: Fix UAF bug in r592_remove due to race condition drm/rockchip: dw_hdmi: cleanup drm encoder during unbind ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup() media: pvrusb2: VIDEO_PVRUSB2 depends on DVB_CORE to use dvb_* symbols media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() arm64: dts: qcom: msm8996: Add missing DWC3 quirks remoteproc: imx_dsp_rproc: Add custom memory copy implementation for i.MX DSP Cores regmap: cache: Return error in cache sync operations for REGCACHE_NONE drm/amd/display: Use DC_LOG_DC in the trasform pixel function drm/amd/display: Enable HostVM based on rIOMMU active platform/x86: x86-android-tablets: Add Acer Iconia One 7 B1-750 data drm/amd/display: Correct DML calculation to align HW formula drm/amd/display: populate subvp cmd info only for the top pipe drm/displayid: add displayid_get_header() and check bounds better fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() open: return EINVAL for O_DIRECTORY | O_CREAT rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access selftests: cgroup: Add 'malloc' failures checks in test_memcontrol refscale: Move shutdown from wait_event() to wait_event_idle() ext4: allow ext4_get_group_info() to fail ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled ext4: reflect error codes from ext4_multi_mount_protect() to its callers fbdev: arcfb: Fix error handling in arcfb_probe() drm/i915: taint kernel when force probing unsupported devices drm/i915: Expand force_probe to block probe of devices as well. drm/i915/dp: prevent potential div-by-zero drm/i915: Fix NULL ptr deref by checking new_crtc_state drm/i915/guc: Don't capture Gen8 regs on Xe devices af_unix: Fix data races around sk->sk_shutdown. af_unix: Fix a data race of sk->sk_receive_queue->qlen. net: datagram: fix data-races in datagram_poll() net: mscc: ocelot: fix stat counter register values ipvlan:Fix out-of-bounds caused by unclear skb->cb gve: Remove the code of clearing PBA bit tcp: add annotations around sk->sk_shutdown accesses net: add vlan_get_protocol_and_depth() helper net: deal with most data-races in sk_wait_event() net: annotate sk->sk_err write from do_recvmmsg() netlink: annotate accesses to nlk->cb_running bonding: fix send_peer_notif overflow netfilter: conntrack: fix possible bug_on with enable_hooks=1 netfilter: nf_tables: always release netdev hooks from notifier net: phy: bcm7xx: Correct read from expansion register net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). net: stmmac: Initialize MAC_ONEUS_TIC_COUNTER register linux/dim: Do nothing if no time delta between samples tick/broadcast: Make broadcast device replacement work correctly scsi: ufs: core: Fix I/O hang that occurs when BKOPS fails in W-LUN suspend net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() net: skb_partial_csum_set() fix against transport header magic value ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings drm/mipi-dsi: Set the fwnode for mipi_dsi_device drm/fbdev-generic: prohibit potential out-of-bounds access To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-oem-6.1/+bug/2020702/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp