Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.1.36 upstream stable release from git://git.kernel.org/ Linux 6.1.36 smb: move client and server files to common directory fs/smb i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys KVM: arm64: Restore GICv2-on-GICv3 functionality vhost_net: revert upend_idx only on retriable error vhost_vdpa: tell vqs about the negotiated drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl drm/exynos: vidi: fix a wrong error return null_blk: Fix: memory release when memory_backed=1 ARM: dts: Fix erroneous ADS touchscreen polarities i2c: mchp-pci1xxxx: Avoid cast to incompatible function type ALSA: hda/realtek: Add "Intel Reference board" and "NUC 13" SSID in the ALC256 ASoC: fsl_sai: Enable BCI bit if SAI works on synchronous mode with BYP asserted s390/purgatory: disable branch profiling gfs2: Don't get stuck writing page onto itself under direct I/O ASoC: amd: yc: Add Thinkpad Neo14 to quirks list for acp6x ASoC: nau8824: Add quirk to active-high jack-detect soundwire: qcom: add proper error paths in qcom_swrm_startup() soundwire: dmi-quirks: add new mapping for HP Spectre x360 ASoC: simple-card: Add missing of_node_put() in case of error ASoC: codecs: wcd938x-sdw: do not set can_multi_write flag spi: lpspi: disable lpspi module irq in DMA mode s390/cio: unregister device when the only path is gone arm64: dts: qcom: sc7280-qcard: drop incorrect dai-cells from WCD938x SDW arm64: dts: qcom: sc7280-idp: drop incorrect dai-cells from WCD938x SDW Input: soc_button_array - add invalid acpi_index DMI quirk handling nvme: improve handling of long keep alives nvme: check IO start time when deciding to defer KA nvme: double KA polling frequency to avoid KATO with TBKAS on usb: gadget: udc: fix NULL dereference in remove() btrfs: fix an uninitialized variable warning in btrfs_log_inode nfcsim.c: Fix error checking for debugfs_create_dir media: cec: core: don't set last_initiator if tx in progress media: cec: core: disable adapter in cec_devnode_unregister smb3: missing null check in SMB2_change_notify arm64: Add missing Set/Way CMO encodings HID: wacom: Add error check to wacom_parse_and_register() scsi: target: iscsi: Prevent login threads from racing between each other gpiolib: Fix irq_domain resource tracking for gpiochip_irqchip_add_domain() gpio: sifive: add missing check for platform_get_irq gpiolib: Fix GPIO chip IRQ initialization restriction arm64: dts: rockchip: fix nEXTRST on SOQuartz arm64: dts: rockchip: Enable GPU on SOQuartz CM4 revert "net: align SO_RCVMARK required privileges with SO_MARK" sch_netem: acquire qdisc lock in netem_change() platform/x86/amd/pmf: Register notify handler only if SPS is enabled selftests: forwarding: Fix race condition in mirror installation io_uring/net: use the correct msghdr union member in io_sendmsg_copy_hdr bpf: Force kprobe multi expected_attach_type for kprobe_multi link bpf/btf: Accept function names that contain dots Revert "net: phy: dp83867: perform soft reset and retain established link" netfilter: nfnetlink_osf: fix module autoload netfilter: nf_tables: disallow updates of anonymous sets netfilter: nf_tables: reject unbound chain set before commit phase netfilter: nf_tables: reject unbound anonymous set before commit phase netfilter: nf_tables: disallow element updates of bound anonymous sets netfilter: nft_set_pipapo: .walk does not deal with generations netfilter: nf_tables: drop map element references from preparation phase netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain netfilter: nf_tables: fix chain binding transaction logic be2net: Extend xmit workaround to BE3 chip net: dsa: mt7530: fix handling of LLDP frames net: dsa: mt7530: fix handling of BPDUs on MT7530 switch net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch ipvs: align inner_mac_header for encapsulation mmc: usdhi60rol0: fix deferred probing mmc: sh_mmcif: fix deferred probing mmc: sdhci-acpi: fix deferred probing mmc: owl: fix deferred probing mmc: omap_hsmmc: fix deferred probing mmc: omap: fix deferred probing mmc: mvsdio: fix deferred probing mmc: mtk-sd: fix deferred probing net: qca_spi: Avoid high load if QCA7000 is not available sfc: use budget for TX completions net/mlx5: DR, Fix wrong action data allocation in decap action xfrm: Linearize the skb after offloading if needed. selftests: net: fcnal-test: check if FIPS mode is enabled selftests: net: vrf-xfrm-tests: change authentication and encryption algos selftests: net: tls: check if FIPS mode is enabled bpf: Fix a bpf_jit_dump issue for x86_64 with sysctl bpf_jit_enable. xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets bpf: Fix verifier id tracking of scalars on spill bpf: track immediate values written to stack by BPF_ST instruction KVM: arm64: PMU: Restore the host's PMUSERENR_EL0 xfrm: Ensure policies always checked on XFRM-I input path xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c xfrm: Treat already-verified secpath entries as optional ieee802154: hwsim: Fix possible memory leaks mmc: meson-gx: fix deferred probing memfd: check for non-NULL file_seals in memfd_create() syscall x86/mm: Avoid using set_pgd() outside of real PGD pages nilfs2: prevent general protection fault in nilfs_clear_dirty_page() io_uring/poll: serialize poll linked timer start with poll removal arm64: dts: rockchip: Fix rk356x PCIe register and range mappings regmap: spi-avmm: Fix regmap_bus max_raw_write regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK spi: spi-geni-qcom: correctly handle -EPROBE_DEFER from dma_request_chan() wifi: iwlwifi: pcie: Handle SO-F device for PCI id 0x7AF0 bpf: ensure main program has an extable mmc: sunxi: fix deferred probing mmc: bcm2835: fix deferred probing mmc: sdhci-spear: fix deferred probing mmc: mmci: stm32: fix max busy timeout calculation mmc: meson-gx: remove redundant mmc_request_done() call from irq context mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 mmc: litex_mmc: set PROBE_PREFER_ASYNCHRONOUS cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex in freezer_css_{online,offline}() cgroup: Do not corrupt task iteration when rebinding subsystem mptcp: consolidate fallback and non fallback state machine mptcp: fix possible list corruption on passive MPJ mptcp: fix possible divide by zero in recvmsg() mptcp: handle correctly disconnect() failures io_uring/net: disable partial retries for recvmsg with cmsg io_uring/net: clear msg_controllen on partial sendmsg retry PCI: hv: Add a per-bus mutex state_lock PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally" PCI: hv: Fix a race condition bug in hv_pci_query_relations() Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails KVM: Avoid illegal stage2 mapping on invalid memory slot ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep() nilfs2: fix buffer corruption due to concurrent device reads scripts: fix the gfp flags header path in gfp-translate writeback: fix dereferencing NULL mapping->host on writeback_page_template selftests: mptcp: join: fix "userspace pm add & remove address" selftests: mptcp: join: skip fail tests if not supported selftests: mptcp: join: skip userspace PM tests if not supported selftests: mptcp: join: skip test if iptables/tc cmds fail selftests: mptcp: sockopt: skip TCP_INQ checks if not supported selftests: mptcp: diag: skip listen tests if not supported selftests/mount_setattr: fix redefine struct mount_attr build error selftests: mptcp: join: skip MPC backups tests if not supported selftests: mptcp: join: skip fullmesh flag tests if not supported selftests: mptcp: join: skip backup if set flag on ID not supported selftests: mptcp: join: skip implicit tests if not supported selftests: mptcp: join: support RM_ADDR for used endpoints or not selftests: mptcp: join: skip Fastclose tests if not supported selftests: mptcp: join: support local endpoint being tracked or not selftests: mptcp: join: skip check if MIB counter not supported selftests: mptcp: join: helpers to skip tests selftests: mptcp: join: use 'iptables-legacy' if available selftests: mptcp: lib: skip if not below kernel version selftests: mptcp: userspace pm: skip if not supported selftests: mptcp: userspace pm: skip if 'ip' tool is unavailable selftests: mptcp: sockopt: skip getsockopt checks if not supported selftests: mptcp: sockopt: relax expected returned size selftests: mptcp: pm nl: skip fullmesh flag checks if not supported selftests: mptcp: pm nl: remove hardcoded default limits selftests: mptcp: connect: skip disconnect tests if not supported selftests: mptcp: connect: skip transp tests if not supported selftests: mptcp: lib: skip if missing symbol selftests: mptcp: join: fix ShellCheck warnings selftests: mptcp: remove duplicated entries in usage tick/common: Align tick period during sched_timer setup ksmbd: validate session id and tree id in the compound request ksmbd: fix out-of-bound read in smb2_write ksmbd: validate command payload size tpm_crb: Add support for CRB devices based on Pluton tpm, tpm_tis: Claim locality in interrupt handler mm: Fix copy_from_user_nofault(). ata: libata-scsi: Avoid deadlock on rescan after device resume tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms drm/amd/display: fix the system hang while disable PSR drm/amd/display: Add wrapper to call planes and stream update drm/amd/display: Use dc_update_planes_and_stream ** Affects: linux-oem-6.1 (Ubuntu) Importance: Undecided Status: Confirmed ** Affects: linux-oem-6.1 (Ubuntu Jammy) Importance: Undecided Status: New ** Tags: kernel-stable-tracking-bug ** Changed in: linux-oem-6.1 (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux-oem-6.1 (Ubuntu Jammy) Importance: Undecided Status: New -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux-oem-6.1 in Ubuntu. https://bugs.launchpad.net/bugs/2025710 Title: Jammy update: v6.1.36 upstream stable release Status in linux-oem-6.1 package in Ubuntu: Confirmed Status in linux-oem-6.1 source package in Jammy: New Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.1.36 upstream stable release from git://git.kernel.org/ Linux 6.1.36 smb: move client and server files to common directory fs/smb i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys KVM: arm64: Restore GICv2-on-GICv3 functionality vhost_net: revert upend_idx only on retriable error vhost_vdpa: tell vqs about the negotiated drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl drm/exynos: vidi: fix a wrong error return null_blk: Fix: memory release when memory_backed=1 ARM: dts: Fix erroneous ADS touchscreen polarities i2c: mchp-pci1xxxx: Avoid cast to incompatible function type ALSA: hda/realtek: Add "Intel Reference board" and "NUC 13" SSID in the ALC256 ASoC: fsl_sai: Enable BCI bit if SAI works on synchronous mode with BYP asserted s390/purgatory: disable branch profiling gfs2: Don't get stuck writing page onto itself under direct I/O ASoC: amd: yc: Add Thinkpad Neo14 to quirks list for acp6x ASoC: nau8824: Add quirk to active-high jack-detect soundwire: qcom: add proper error paths in qcom_swrm_startup() soundwire: dmi-quirks: add new mapping for HP Spectre x360 ASoC: simple-card: Add missing of_node_put() in case of error ASoC: codecs: wcd938x-sdw: do not set can_multi_write flag spi: lpspi: disable lpspi module irq in DMA mode s390/cio: unregister device when the only path is gone arm64: dts: qcom: sc7280-qcard: drop incorrect dai-cells from WCD938x SDW arm64: dts: qcom: sc7280-idp: drop incorrect dai-cells from WCD938x SDW Input: soc_button_array - add invalid acpi_index DMI quirk handling nvme: improve handling of long keep alives nvme: check IO start time when deciding to defer KA nvme: double KA polling frequency to avoid KATO with TBKAS on usb: gadget: udc: fix NULL dereference in remove() btrfs: fix an uninitialized variable warning in btrfs_log_inode nfcsim.c: Fix error checking for debugfs_create_dir media: cec: core: don't set last_initiator if tx in progress media: cec: core: disable adapter in cec_devnode_unregister smb3: missing null check in SMB2_change_notify arm64: Add missing Set/Way CMO encodings HID: wacom: Add error check to wacom_parse_and_register() scsi: target: iscsi: Prevent login threads from racing between each other gpiolib: Fix irq_domain resource tracking for gpiochip_irqchip_add_domain() gpio: sifive: add missing check for platform_get_irq gpiolib: Fix GPIO chip IRQ initialization restriction arm64: dts: rockchip: fix nEXTRST on SOQuartz arm64: dts: rockchip: Enable GPU on SOQuartz CM4 revert "net: align SO_RCVMARK required privileges with SO_MARK" sch_netem: acquire qdisc lock in netem_change() platform/x86/amd/pmf: Register notify handler only if SPS is enabled selftests: forwarding: Fix race condition in mirror installation io_uring/net: use the correct msghdr union member in io_sendmsg_copy_hdr bpf: Force kprobe multi expected_attach_type for kprobe_multi link bpf/btf: Accept function names that contain dots Revert "net: phy: dp83867: perform soft reset and retain established link" netfilter: nfnetlink_osf: fix module autoload netfilter: nf_tables: disallow updates of anonymous sets netfilter: nf_tables: reject unbound chain set before commit phase netfilter: nf_tables: reject unbound anonymous set before commit phase netfilter: nf_tables: disallow element updates of bound anonymous sets netfilter: nft_set_pipapo: .walk does not deal with generations netfilter: nf_tables: drop map element references from preparation phase netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain netfilter: nf_tables: fix chain binding transaction logic be2net: Extend xmit workaround to BE3 chip net: dsa: mt7530: fix handling of LLDP frames net: dsa: mt7530: fix handling of BPDUs on MT7530 switch net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch ipvs: align inner_mac_header for encapsulation mmc: usdhi60rol0: fix deferred probing mmc: sh_mmcif: fix deferred probing mmc: sdhci-acpi: fix deferred probing mmc: owl: fix deferred probing mmc: omap_hsmmc: fix deferred probing mmc: omap: fix deferred probing mmc: mvsdio: fix deferred probing mmc: mtk-sd: fix deferred probing net: qca_spi: Avoid high load if QCA7000 is not available sfc: use budget for TX completions net/mlx5: DR, Fix wrong action data allocation in decap action xfrm: Linearize the skb after offloading if needed. selftests: net: fcnal-test: check if FIPS mode is enabled selftests: net: vrf-xfrm-tests: change authentication and encryption algos selftests: net: tls: check if FIPS mode is enabled bpf: Fix a bpf_jit_dump issue for x86_64 with sysctl bpf_jit_enable. xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets bpf: Fix verifier id tracking of scalars on spill bpf: track immediate values written to stack by BPF_ST instruction KVM: arm64: PMU: Restore the host's PMUSERENR_EL0 xfrm: Ensure policies always checked on XFRM-I input path xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c xfrm: Treat already-verified secpath entries as optional ieee802154: hwsim: Fix possible memory leaks mmc: meson-gx: fix deferred probing memfd: check for non-NULL file_seals in memfd_create() syscall x86/mm: Avoid using set_pgd() outside of real PGD pages nilfs2: prevent general protection fault in nilfs_clear_dirty_page() io_uring/poll: serialize poll linked timer start with poll removal arm64: dts: rockchip: Fix rk356x PCIe register and range mappings regmap: spi-avmm: Fix regmap_bus max_raw_write regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK spi: spi-geni-qcom: correctly handle -EPROBE_DEFER from dma_request_chan() wifi: iwlwifi: pcie: Handle SO-F device for PCI id 0x7AF0 bpf: ensure main program has an extable mmc: sunxi: fix deferred probing mmc: bcm2835: fix deferred probing mmc: sdhci-spear: fix deferred probing mmc: mmci: stm32: fix max busy timeout calculation mmc: meson-gx: remove redundant mmc_request_done() call from irq context mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 mmc: litex_mmc: set PROBE_PREFER_ASYNCHRONOUS cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex in freezer_css_{online,offline}() cgroup: Do not corrupt task iteration when rebinding subsystem mptcp: consolidate fallback and non fallback state machine mptcp: fix possible list corruption on passive MPJ mptcp: fix possible divide by zero in recvmsg() mptcp: handle correctly disconnect() failures io_uring/net: disable partial retries for recvmsg with cmsg io_uring/net: clear msg_controllen on partial sendmsg retry PCI: hv: Add a per-bus mutex state_lock PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally" PCI: hv: Fix a race condition bug in hv_pci_query_relations() Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails KVM: Avoid illegal stage2 mapping on invalid memory slot ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep() nilfs2: fix buffer corruption due to concurrent device reads scripts: fix the gfp flags header path in gfp-translate writeback: fix dereferencing NULL mapping->host on writeback_page_template selftests: mptcp: join: fix "userspace pm add & remove address" selftests: mptcp: join: skip fail tests if not supported selftests: mptcp: join: skip userspace PM tests if not supported selftests: mptcp: join: skip test if iptables/tc cmds fail selftests: mptcp: sockopt: skip TCP_INQ checks if not supported selftests: mptcp: diag: skip listen tests if not supported selftests/mount_setattr: fix redefine struct mount_attr build error selftests: mptcp: join: skip MPC backups tests if not supported selftests: mptcp: join: skip fullmesh flag tests if not supported selftests: mptcp: join: skip backup if set flag on ID not supported selftests: mptcp: join: skip implicit tests if not supported selftests: mptcp: join: support RM_ADDR for used endpoints or not selftests: mptcp: join: skip Fastclose tests if not supported selftests: mptcp: join: support local endpoint being tracked or not selftests: mptcp: join: skip check if MIB counter not supported selftests: mptcp: join: helpers to skip tests selftests: mptcp: join: use 'iptables-legacy' if available selftests: mptcp: lib: skip if not below kernel version selftests: mptcp: userspace pm: skip if not supported selftests: mptcp: userspace pm: skip if 'ip' tool is unavailable selftests: mptcp: sockopt: skip getsockopt checks if not supported selftests: mptcp: sockopt: relax expected returned size selftests: mptcp: pm nl: skip fullmesh flag checks if not supported selftests: mptcp: pm nl: remove hardcoded default limits selftests: mptcp: connect: skip disconnect tests if not supported selftests: mptcp: connect: skip transp tests if not supported selftests: mptcp: lib: skip if missing symbol selftests: mptcp: join: fix ShellCheck warnings selftests: mptcp: remove duplicated entries in usage tick/common: Align tick period during sched_timer setup ksmbd: validate session id and tree id in the compound request ksmbd: fix out-of-bound read in smb2_write ksmbd: validate command payload size tpm_crb: Add support for CRB devices based on Pluton tpm, tpm_tis: Claim locality in interrupt handler mm: Fix copy_from_user_nofault(). ata: libata-scsi: Avoid deadlock on rescan after device resume tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms drm/amd/display: fix the system hang while disable PSR drm/amd/display: Add wrapper to call planes and stream update drm/amd/display: Use dc_update_planes_and_stream To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-oem-6.1/+bug/2025710/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp