Public bug reported:

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.5.5 upstream stable release
       from git://git.kernel.org/

iomap: Fix possible overflow condition in iomap_write_delalloc_scan
autofs: fix memory leak of waitqueues in autofs_catatonic_mode
btrfs: handle errors properly in update_inline_extent_backref()
btrfs: output extra debug info if we failed to find an inline backref
locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock
ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
kernel/fork: beware of __put_task_struct() calling context
rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle()
scftorture: Forgive memory-allocation failure if KASAN
ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470
platform/chrome: cros_ec_lpc: Remove EC panic shutdown timeout
x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
s390/boot: cleanup number of page table levels setup
kselftest/arm64: fix a memleak in zt_regs_run()
perf/imx_ddr: speed up overflow frequency of cycle
ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2
hw_breakpoint: fix single-stepping when using bpf_overflow_handler
ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects
selftests/nolibc: fix up kernel parameters support
selftests/nolibc: prevent out of bounds access in expect_vfprintf
spi: sun6i: add quirk for dual and quad SPI modes support
devlink: remove reload failed checks in params get/set callbacks
crypto: lrw,xts - Replace strlcpy with strscpy
ice: Don't tx before switchdev is fully configured
wifi: ath9k: fix fortify warnings
wifi: ath9k: fix printk specifier
wifi: rtw88: delete timer and free skb queue when unloading
wifi: mwifiex: fix fortify warning
mt76: mt7921: don't assume adequate headroom for SDIO headers
wifi: wil6210: fix fortify warnings
can: sun4i_can: Add acceptance register quirk
can: sun4i_can: Add support for the Allwinner D1
UBUNTU: [Config] updateconfigs for CAN_SUN4I
net: Use sockaddr_storage for getsockopt(SO_PEERNAME).
wifi: ath12k: Fix a NULL pointer dereference in ath12k_mac_op_hw_scan()
wifi: ath12k: avoid array overflow of hw mode for preferred_hw_mode
net/ipv4: return the real errno instead of -EINVAL
crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
Bluetooth: btusb: Add device 0489:e0f5 as MT7922 device
Bluetooth: btusb: Add a new VID/PID 0489/e0f6 for MT7922
Bluetooth: btusb: Add new VID/PID 0489/e102 for MT7922
Bluetooth: btusb: Add new VID/PID 04ca/3804 for MT7922
Bluetooth: Fix hci_suspend_sync crash
Bluetooth: btusb: Add support for another MediaTek 7922 VID/PID
netlink: convert nlk->flags to atomic flags
tpm_tis: Resend command to recover from data transfer errors
mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450
alx: fix OOB-read compiler warning
wifi: iwlwifi: pcie: avoid a warning in case prepare card failed
wifi: mac80211: check S1G action frame size
netfilter: ebtables: fix fortify warnings in size_entry_mwt()
wifi: cfg80211: reject auth/assoc to AP with our address
wifi: cfg80211: ocb: don't leave if not joined
wifi: mac80211: check for station first in client probe
wifi: mac80211_hwsim: drop short frames
Revert "wifi: mac80211_hwsim: check the return value of nla_put_u32"
libbpf: Free btf_vmlinux when closing bpf_object
wifi: ath12k: Fix memory leak in rx_desc and tx_desc
wifi: ath12k: add check max message length while scanning with extraie
Fix nomenclature for USB and PCI wireless devices
bpf: Consider non-owning refs trusted
bpf: Consider non-owning refs to refcounted nodes RCU protected
drm/bridge: tc358762: Instruct DSI host to generate HSE packets
drm/edid: Add quirk for OSVR HDK 2.0
drm: bridge: samsung-dsim: Drain command transfer FIFO before transfer
arm64: dts: qcom: sm6125-pdx201: correct ramoops pmsg-size
arm64: dts: qcom: sm6125-sprout: correct ramoops pmsg-size
arm64: dts: qcom: sm6350: correct ramoops pmsg-size
arm64: dts: qcom: sm8150-kumano: correct ramoops pmsg-size
arm64: dts: qcom: sm8250-edo: correct ramoops pmsg-size
drm/amdgpu: Increase soft IH ring size
samples/hw_breakpoint: Fix kernel BUG 'invalid opcode: 0000'
drm/amdgpu: Update ring scheduler info as needed
drm/amd/display: Fix underflow issue on 175hz timing
ASoC: SOF: topology: simplify code to prevent static analysis warnings
ASoC: Intel: sof_sdw: Update BT offload config for soundwire config
ALSA: hda: intel-dsp-cfg: add LunarLake support
drm/amd/display: Use DTBCLK as refclk instead of DPREFCLK
drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31
drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN314
drm/amd/display: Use max memclk variable when setting max memclk
drm/msm/adreno: Use quirk identify hw_apriv
drm/msm/adreno: Use quirk to identify cached-coherent support
drm/exynos: fix a possible null-pointer dereference due to data race in 
exynos_drm_crtc_atomic_disable()
io_uring: annotate the struct io_kiocb slab for appropriate user copy
drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer()
bus: ti-sysc: Configure uart quirks for k3 SoC
arm64: dts: qcom: sc8280xp-x13s: Add camera activity LED
md: raid1: fix potential OOB in raid1_remove_disk()
ext2: fix datatype of block number in ext2_xattr_set2()
blk-mq: fix tags leak when shrink nr_hw_queues
ASoC: SOF: amd: clear panic mask status when panic occurs
x86: bring back rep movsq for user access on CPUs without ERMS
fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
ext4: add two helper functions extent_logical_end() and pa_logical_end()
ext4: avoid overlapping preallocations due to overflow
PCI: dwc: Provide deinit callback for i.MX
ARM: 9317/1: kexec: Make smp stop calls asynchronous
powerpc/pseries: fix possible memory leak in ibmebus_bus_init()
PCI: vmd: Disable bridge window for domain reset
PCI: fu740: Set the number of MSI vectors
media: mdp3: Fix resource leaks in of_find_device_by_node
media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
media: anysee: fix null-ptr-deref in anysee_master_xfer
media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer
scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected
media: tuners: qt1010: replace BUG_ON with a regular error
media: pci: cx23885: replace BUG with error return
usb: cdns3: Put the cdns set active part outside the spin lock
usb: typec: intel_pmc_mux: Add new ACPI ID for Lunar Lake IOM device
usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc
tools: iio: iio_generic_buffer: Fix some integer type and calculation
scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
serial: cpm_uart: Avoid suspicious locking
misc: open-dice: make OPEN_DICE depend on HAS_IOMEM
usb: dwc3: dwc3-octeon: Verify clock divider
usb: ehci: add workaround for chipidea PORTSC.PEC bug
usb: chipidea: add workaround for chipidea PEC bug
media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning
kobject: Add sanity check for kset->kobj.ktype in kset_register()
interconnect: Fix locking for runpm vs reclaim
usb: typec: qcom-pmic-typec: register drm_bridge
printk: Reduce console_unblank() usage in unsafe scenarios
printk: Keep non-panic-CPUs out of console lock
printk: Do not take console lock for console_flush_on_panic()
printk: Consolidate console deferred printing
printk: Rename abandon_console_lock_in_panic() to other_cpu_in_panic()
ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
btrfs: introduce struct to consolidate extent buffer write context
btrfs: zoned: introduce block group context to btrfs_eb_write_context
btrfs: zoned: return int from btrfs_check_meta_write_pointer
btrfs: zoned: defer advancing meta write pointer
btrfs: zoned: activate metadata block group on write time
mtd: spi-nor: spansion: use CLPEF as an alternative to CLSR
mtd: spi-nor: spansion: preserve CFR2V[7] when writing MEMLAT
btrfs: add a helper to read the superblock metadata_uuid
btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super
nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page()
drm: gm12u320: Fix the timeout usage for usb_bulk_msg()
scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir()
md: don't dereference mddev after export_rdev()
md: fix warning for holder mismatch from export_rdev()
efivarfs: fix statfs() on efivarfs
PM: hibernate: Fix the exclusive get block device in test_resume mode
selftests: tracing: Fix to unmount tracefs for recovering environment
x86/ibt: Suppress spurious ENDBR
x86/ibt: Avoid duplicate ENDBR in __put_user_nocheck*()
riscv: kexec: Align the kexeced kernel entry
x86/sched: Restore the SD_ASYM_PACKING flag in the DIE domain
scsi: target: core: Fix target_cmd_counter leak
scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file()
panic: Reenable preemption in WARN slowpath
ata: libata-core: fetch sense data for successful commands iff CDL enabled
x86/boot/compressed: Reserve more memory for page tables
x86/purgatory: Remove LTO flags
samples/hw_breakpoint: fix building without module unloading
blk-mq: prealloc tags when increase tagset nr_hw_queues
blk-mq: fix tags UAF when shrinking q->nr_hw_queues
md/raid1: fix error: ISO C90 forbids mixed declarations
Revert "SUNRPC: Fail faster on bad verifier"
attr: block mode changes of symlinks
ovl: fix failed copyup of fileattr on a symlink
ovl: fix incorrect fdput() on aio completion
io_uring/net: fix iter retargeting for selected buf
nvme: avoid bogus CRTO values
x86/platform/uv: Use alternate source for socket to node data
Revert "firewire: core: obsolete usage of GFP_ATOMIC at building node tree"
drm/amd: Make fence wait in suballocator uninterruptible
Revert "drm/amd: Disable S/G for APUs when 64GB or more host memory"
dm: don't attempt to queue IO under RCU protection
dm: fix a race condition in retrieve_deps
btrfs: fix lockdep splat and potential deadlock after failure running delayed 
items
btrfs: fix a compilation error if DEBUG is defined in btree_dirty_folio
btrfs: fix race between finishing block group creation and its item update
btrfs: release path before inode lookup during the ino lookup ioctl
btrfs: check for BTRFS_FS_ERROR in pending ordered assert
tracing/synthetic: Fix order of struct trace_dynamic_info
tracing: Have tracing_max_latency inc the trace array ref count
tracing: Have event inject files inc the trace array ref count
tracing/synthetic: Print out u64 values properly
tracing: Increase trace array ref count on enable and filter files
tracing: Have current_trace inc the trace array ref count
tracing: Have option files inc the trace array ref count
selinux: fix handling of empty opts in selinux_fs_context_submount()
nfsd: fix change_info in NFSv4 RENAME replies
tracefs: Add missing lockdown check to tracefs_create_dir()
i2c: aspeed: Reset the i2c controller when timeout occurs
ata: libata: disallow dev-initiated LPM transitions to unsupported states
ata: libahci: clear pending interrupt status
scsi: megaraid_sas: Fix deadlock on firmware crashdump
scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id()
scsi: pm8001: Setup IRQs on resume
Revert "comedi: add HAS_IOPORT dependencies"
UBUNTU: [Config] updateconfigs for COMEDI/HAS_IOPORT deps
ext4: fix rec_len verify error
drm/radeon: make fence wait in suballocator uninterrruptable
drm/i915: Only check eDP HPD when AUX CH is shared
drm/amdkfd: Insert missing TLB flush on GFX10 and later
drm/tests: helpers: Avoid a driver uaf
drm/amd/display: Adjust the MST resume flow
drm/amd/display: fix the white screen issue when >= 64GB DRAM
drm/amd/display: Add DPIA Link Encoder Assignment Fix
drm/amd/display: Fix 2nd DPIA encoder Assignment
Revert "memcg: drop kmem.limit_in_bytes"
drm/amdgpu: fix amdgpu_cs_p1_user_fence
interconnect: Teach lockdep about icc_bw_lock order
x86/alternatives: Remove faulty optimization
x86,static_call: Fix static-call vs return-thunk
Linux 6.5.5
UBUNTU: Upstream stable to v6.5.5

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: linux (Ubuntu Mantic)
     Importance: Medium
     Assignee: Kamal Mostafa (kamalmostafa)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Mantic)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu)
       Status: Confirmed => Invalid

** Changed in: linux (Ubuntu Mantic)
       Status: New => In Progress

** Changed in: linux (Ubuntu Mantic)
   Importance: Undecided => Medium

** Changed in: linux (Ubuntu Mantic)
     Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)

** Description changed:

+ SRU Justification
  
-     SRU Justification
+     Impact:
+        The upstream process for stable tree updates is quite similar
+        in scope to the Ubuntu SRU process, e.g., each patch has to
+        demonstrably fix a bug, and each patch is vetted by upstream
+        by originating either directly from a mainline/stable Linux tree or
+        a minimally backported form of that patch. The following upstream
+        stable patches should be included in the Ubuntu kernel:
  
-     Impact:
-        The upstream process for stable tree updates is quite similar
-        in scope to the Ubuntu SRU process, e.g., each patch has to
-        demonstrably fix a bug, and each patch is vetted by upstream
-        by originating either directly from a mainline/stable Linux tree or
-        a minimally backported form of that patch. The following upstream
-        stable patches should be included in the Ubuntu kernel:
+        v6.5.5 upstream stable release
+        from git://git.kernel.org/
  
-        v6.5.5 upstream stable release
-        from git://git.kernel.org/
+ iomap: Fix possible overflow condition in iomap_write_delalloc_scan
+ autofs: fix memory leak of waitqueues in autofs_catatonic_mode
+ btrfs: handle errors properly in update_inline_extent_backref()
+ btrfs: output extra debug info if we failed to find an inline backref
+ locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock
+ ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
+ kernel/fork: beware of __put_task_struct() calling context
+ rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to 
_idle()
+ scftorture: Forgive memory-allocation failure if KASAN
+ ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470
+ platform/chrome: cros_ec_lpc: Remove EC panic shutdown timeout
+ x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
+ perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
+ s390/boot: cleanup number of page table levels setup
+ kselftest/arm64: fix a memleak in zt_regs_run()
+ perf/imx_ddr: speed up overflow frequency of cycle
+ ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2
+ hw_breakpoint: fix single-stepping when using bpf_overflow_handler
+ ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects
+ selftests/nolibc: fix up kernel parameters support
+ selftests/nolibc: prevent out of bounds access in expect_vfprintf
+ spi: sun6i: add quirk for dual and quad SPI modes support
+ devlink: remove reload failed checks in params get/set callbacks
+ crypto: lrw,xts - Replace strlcpy with strscpy
+ ice: Don't tx before switchdev is fully configured
+ wifi: ath9k: fix fortify warnings
+ wifi: ath9k: fix printk specifier
+ wifi: rtw88: delete timer and free skb queue when unloading
+ wifi: mwifiex: fix fortify warning
+ mt76: mt7921: don't assume adequate headroom for SDIO headers
+ wifi: wil6210: fix fortify warnings
+ can: sun4i_can: Add acceptance register quirk
+ can: sun4i_can: Add support for the Allwinner D1
+ UBUNTU: [Config] updateconfigs for CAN_SUN4I
+ net: Use sockaddr_storage for getsockopt(SO_PEERNAME).
+ wifi: ath12k: Fix a NULL pointer dereference in ath12k_mac_op_hw_scan()
+ wifi: ath12k: avoid array overflow of hw mode for preferred_hw_mode
+ net/ipv4: return the real errno instead of -EINVAL
+ crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
+ Bluetooth: btusb: Add device 0489:e0f5 as MT7922 device
+ Bluetooth: btusb: Add a new VID/PID 0489/e0f6 for MT7922
+ Bluetooth: btusb: Add new VID/PID 0489/e102 for MT7922
+ Bluetooth: btusb: Add new VID/PID 04ca/3804 for MT7922
+ Bluetooth: Fix hci_suspend_sync crash
+ Bluetooth: btusb: Add support for another MediaTek 7922 VID/PID
+ netlink: convert nlk->flags to atomic flags
+ tpm_tis: Resend command to recover from data transfer errors
+ mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450
+ alx: fix OOB-read compiler warning
+ wifi: iwlwifi: pcie: avoid a warning in case prepare card failed
+ wifi: mac80211: check S1G action frame size
+ netfilter: ebtables: fix fortify warnings in size_entry_mwt()
+ wifi: cfg80211: reject auth/assoc to AP with our address
+ wifi: cfg80211: ocb: don't leave if not joined
+ wifi: mac80211: check for station first in client probe
+ wifi: mac80211_hwsim: drop short frames
+ Revert "wifi: mac80211_hwsim: check the return value of nla_put_u32"
+ libbpf: Free btf_vmlinux when closing bpf_object
+ wifi: ath12k: Fix memory leak in rx_desc and tx_desc
+ wifi: ath12k: add check max message length while scanning with extraie
+ Fix nomenclature for USB and PCI wireless devices
+ bpf: Consider non-owning refs trusted
+ bpf: Consider non-owning refs to refcounted nodes RCU protected
+ drm/bridge: tc358762: Instruct DSI host to generate HSE packets
+ drm/edid: Add quirk for OSVR HDK 2.0
+ drm: bridge: samsung-dsim: Drain command transfer FIFO before transfer
+ arm64: dts: qcom: sm6125-pdx201: correct ramoops pmsg-size
+ arm64: dts: qcom: sm6125-sprout: correct ramoops pmsg-size
+ arm64: dts: qcom: sm6350: correct ramoops pmsg-size
+ arm64: dts: qcom: sm8150-kumano: correct ramoops pmsg-size
+ arm64: dts: qcom: sm8250-edo: correct ramoops pmsg-size
+ drm/amdgpu: Increase soft IH ring size
+ samples/hw_breakpoint: Fix kernel BUG 'invalid opcode: 0000'
+ drm/amdgpu: Update ring scheduler info as needed
+ drm/amd/display: Fix underflow issue on 175hz timing
+ ASoC: SOF: topology: simplify code to prevent static analysis warnings
+ ASoC: Intel: sof_sdw: Update BT offload config for soundwire config
+ ALSA: hda: intel-dsp-cfg: add LunarLake support
+ drm/amd/display: Use DTBCLK as refclk instead of DPREFCLK
+ drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31
+ drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN314
+ drm/amd/display: Use max memclk variable when setting max memclk
+ drm/msm/adreno: Use quirk identify hw_apriv
+ drm/msm/adreno: Use quirk to identify cached-coherent support
+ drm/exynos: fix a possible null-pointer dereference due to data race in 
exynos_drm_crtc_atomic_disable()
+ io_uring: annotate the struct io_kiocb slab for appropriate user copy
+ drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer()
+ bus: ti-sysc: Configure uart quirks for k3 SoC
+ arm64: dts: qcom: sc8280xp-x13s: Add camera activity LED
+ md: raid1: fix potential OOB in raid1_remove_disk()
+ ext2: fix datatype of block number in ext2_xattr_set2()
+ blk-mq: fix tags leak when shrink nr_hw_queues
+ ASoC: SOF: amd: clear panic mask status when panic occurs
+ x86: bring back rep movsq for user access on CPUs without ERMS
+ fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
+ jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
+ ext4: add two helper functions extent_logical_end() and pa_logical_end()
+ ext4: avoid overlapping preallocations due to overflow
+ PCI: dwc: Provide deinit callback for i.MX
+ ARM: 9317/1: kexec: Make smp stop calls asynchronous
+ powerpc/pseries: fix possible memory leak in ibmebus_bus_init()
+ PCI: vmd: Disable bridge window for domain reset
+ PCI: fu740: Set the number of MSI vectors
+ media: mdp3: Fix resource leaks in of_find_device_by_node
+ media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
+ media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
+ media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
+ media: anysee: fix null-ptr-deref in anysee_master_xfer
+ media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
+ media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer
+ scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected
+ media: tuners: qt1010: replace BUG_ON with a regular error
+ media: pci: cx23885: replace BUG with error return
+ usb: cdns3: Put the cdns set active part outside the spin lock
+ usb: typec: intel_pmc_mux: Add new ACPI ID for Lunar Lake IOM device
+ usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc
+ tools: iio: iio_generic_buffer: Fix some integer type and calculation
+ scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
+ serial: cpm_uart: Avoid suspicious locking
+ misc: open-dice: make OPEN_DICE depend on HAS_IOMEM
+ usb: dwc3: dwc3-octeon: Verify clock divider
+ usb: ehci: add workaround for chipidea PORTSC.PEC bug
+ usb: chipidea: add workaround for chipidea PEC bug
+ media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning
+ kobject: Add sanity check for kset->kobj.ktype in kset_register()
+ interconnect: Fix locking for runpm vs reclaim
+ usb: typec: qcom-pmic-typec: register drm_bridge
+ printk: Reduce console_unblank() usage in unsafe scenarios
+ printk: Keep non-panic-CPUs out of console lock
+ printk: Do not take console lock for console_flush_on_panic()
+ printk: Consolidate console deferred printing
+ printk: Rename abandon_console_lock_in_panic() to other_cpu_in_panic()
+ ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
+ btrfs: introduce struct to consolidate extent buffer write context
+ btrfs: zoned: introduce block group context to btrfs_eb_write_context
+ btrfs: zoned: return int from btrfs_check_meta_write_pointer
+ btrfs: zoned: defer advancing meta write pointer
+ btrfs: zoned: activate metadata block group on write time
+ mtd: spi-nor: spansion: use CLPEF as an alternative to CLSR
+ mtd: spi-nor: spansion: preserve CFR2V[7] when writing MEMLAT
+ btrfs: add a helper to read the superblock metadata_uuid
+ btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super
+ nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page()
+ drm: gm12u320: Fix the timeout usage for usb_bulk_msg()
+ scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir()
+ md: don't dereference mddev after export_rdev()
+ md: fix warning for holder mismatch from export_rdev()
+ efivarfs: fix statfs() on efivarfs
+ PM: hibernate: Fix the exclusive get block device in test_resume mode
+ selftests: tracing: Fix to unmount tracefs for recovering environment
+ x86/ibt: Suppress spurious ENDBR
+ x86/ibt: Avoid duplicate ENDBR in __put_user_nocheck*()
+ riscv: kexec: Align the kexeced kernel entry
+ x86/sched: Restore the SD_ASYM_PACKING flag in the DIE domain
+ scsi: target: core: Fix target_cmd_counter leak
+ scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file()
+ panic: Reenable preemption in WARN slowpath
+ ata: libata-core: fetch sense data for successful commands iff CDL enabled
+ x86/boot/compressed: Reserve more memory for page tables
+ x86/purgatory: Remove LTO flags
+ samples/hw_breakpoint: fix building without module unloading
+ blk-mq: prealloc tags when increase tagset nr_hw_queues
+ blk-mq: fix tags UAF when shrinking q->nr_hw_queues
+ md/raid1: fix error: ISO C90 forbids mixed declarations
+ Revert "SUNRPC: Fail faster on bad verifier"
+ attr: block mode changes of symlinks
+ ovl: fix failed copyup of fileattr on a symlink
+ ovl: fix incorrect fdput() on aio completion
+ io_uring/net: fix iter retargeting for selected buf
+ nvme: avoid bogus CRTO values
+ x86/platform/uv: Use alternate source for socket to node data
+ Revert "firewire: core: obsolete usage of GFP_ATOMIC at building node tree"
+ drm/amd: Make fence wait in suballocator uninterruptible
+ Revert "drm/amd: Disable S/G for APUs when 64GB or more host memory"
+ dm: don't attempt to queue IO under RCU protection
+ dm: fix a race condition in retrieve_deps
+ btrfs: fix lockdep splat and potential deadlock after failure running delayed 
items
+ btrfs: fix a compilation error if DEBUG is defined in btree_dirty_folio
+ btrfs: fix race between finishing block group creation and its item update
+ btrfs: release path before inode lookup during the ino lookup ioctl
+ btrfs: check for BTRFS_FS_ERROR in pending ordered assert
+ tracing/synthetic: Fix order of struct trace_dynamic_info
+ tracing: Have tracing_max_latency inc the trace array ref count
+ tracing: Have event inject files inc the trace array ref count
+ tracing/synthetic: Print out u64 values properly
+ tracing: Increase trace array ref count on enable and filter files
+ tracing: Have current_trace inc the trace array ref count
+ tracing: Have option files inc the trace array ref count
+ selinux: fix handling of empty opts in selinux_fs_context_submount()
+ nfsd: fix change_info in NFSv4 RENAME replies
+ tracefs: Add missing lockdown check to tracefs_create_dir()
+ i2c: aspeed: Reset the i2c controller when timeout occurs
+ ata: libata: disallow dev-initiated LPM transitions to unsupported states
+ ata: libahci: clear pending interrupt status
+ scsi: megaraid_sas: Fix deadlock on firmware crashdump
+ scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id()
+ scsi: pm8001: Setup IRQs on resume
+ Revert "comedi: add HAS_IOPORT dependencies"
+ UBUNTU: [Config] updateconfigs for COMEDI/HAS_IOPORT deps
+ ext4: fix rec_len verify error
+ drm/radeon: make fence wait in suballocator uninterrruptable
+ drm/i915: Only check eDP HPD when AUX CH is shared
+ drm/amdkfd: Insert missing TLB flush on GFX10 and later
+ drm/tests: helpers: Avoid a driver uaf
+ drm/amd/display: Adjust the MST resume flow
+ drm/amd/display: fix the white screen issue when >= 64GB DRAM
+ drm/amd/display: Add DPIA Link Encoder Assignment Fix
+ drm/amd/display: Fix 2nd DPIA encoder Assignment
+ Revert "memcg: drop kmem.limit_in_bytes"
+ drm/amdgpu: fix amdgpu_cs_p1_user_fence
+ interconnect: Teach lockdep about icc_bw_lock order
+ x86/alternatives: Remove faulty optimization
+ x86,static_call: Fix static-call vs return-thunk
+ Linux 6.5.5
+ UBUNTU: Upstream stable to v6.5.5

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2043416

Title:
  Mantic update: v6.5.5 upstream stable release

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Mantic:
  In Progress

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v6.5.5 upstream stable release
         from git://git.kernel.org/

  iomap: Fix possible overflow condition in iomap_write_delalloc_scan
  autofs: fix memory leak of waitqueues in autofs_catatonic_mode
  btrfs: handle errors properly in update_inline_extent_backref()
  btrfs: output extra debug info if we failed to find an inline backref
  locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock
  ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
  kernel/fork: beware of __put_task_struct() calling context
  rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to 
_idle()
  scftorture: Forgive memory-allocation failure if KASAN
  ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470
  platform/chrome: cros_ec_lpc: Remove EC panic shutdown timeout
  x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
  perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
  s390/boot: cleanup number of page table levels setup
  kselftest/arm64: fix a memleak in zt_regs_run()
  perf/imx_ddr: speed up overflow frequency of cycle
  ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2
  hw_breakpoint: fix single-stepping when using bpf_overflow_handler
  ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects
  selftests/nolibc: fix up kernel parameters support
  selftests/nolibc: prevent out of bounds access in expect_vfprintf
  spi: sun6i: add quirk for dual and quad SPI modes support
  devlink: remove reload failed checks in params get/set callbacks
  crypto: lrw,xts - Replace strlcpy with strscpy
  ice: Don't tx before switchdev is fully configured
  wifi: ath9k: fix fortify warnings
  wifi: ath9k: fix printk specifier
  wifi: rtw88: delete timer and free skb queue when unloading
  wifi: mwifiex: fix fortify warning
  mt76: mt7921: don't assume adequate headroom for SDIO headers
  wifi: wil6210: fix fortify warnings
  can: sun4i_can: Add acceptance register quirk
  can: sun4i_can: Add support for the Allwinner D1
  UBUNTU: [Config] updateconfigs for CAN_SUN4I
  net: Use sockaddr_storage for getsockopt(SO_PEERNAME).
  wifi: ath12k: Fix a NULL pointer dereference in ath12k_mac_op_hw_scan()
  wifi: ath12k: avoid array overflow of hw mode for preferred_hw_mode
  net/ipv4: return the real errno instead of -EINVAL
  crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
  Bluetooth: btusb: Add device 0489:e0f5 as MT7922 device
  Bluetooth: btusb: Add a new VID/PID 0489/e0f6 for MT7922
  Bluetooth: btusb: Add new VID/PID 0489/e102 for MT7922
  Bluetooth: btusb: Add new VID/PID 04ca/3804 for MT7922
  Bluetooth: Fix hci_suspend_sync crash
  Bluetooth: btusb: Add support for another MediaTek 7922 VID/PID
  netlink: convert nlk->flags to atomic flags
  tpm_tis: Resend command to recover from data transfer errors
  mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450
  alx: fix OOB-read compiler warning
  wifi: iwlwifi: pcie: avoid a warning in case prepare card failed
  wifi: mac80211: check S1G action frame size
  netfilter: ebtables: fix fortify warnings in size_entry_mwt()
  wifi: cfg80211: reject auth/assoc to AP with our address
  wifi: cfg80211: ocb: don't leave if not joined
  wifi: mac80211: check for station first in client probe
  wifi: mac80211_hwsim: drop short frames
  Revert "wifi: mac80211_hwsim: check the return value of nla_put_u32"
  libbpf: Free btf_vmlinux when closing bpf_object
  wifi: ath12k: Fix memory leak in rx_desc and tx_desc
  wifi: ath12k: add check max message length while scanning with extraie
  Fix nomenclature for USB and PCI wireless devices
  bpf: Consider non-owning refs trusted
  bpf: Consider non-owning refs to refcounted nodes RCU protected
  drm/bridge: tc358762: Instruct DSI host to generate HSE packets
  drm/edid: Add quirk for OSVR HDK 2.0
  drm: bridge: samsung-dsim: Drain command transfer FIFO before transfer
  arm64: dts: qcom: sm6125-pdx201: correct ramoops pmsg-size
  arm64: dts: qcom: sm6125-sprout: correct ramoops pmsg-size
  arm64: dts: qcom: sm6350: correct ramoops pmsg-size
  arm64: dts: qcom: sm8150-kumano: correct ramoops pmsg-size
  arm64: dts: qcom: sm8250-edo: correct ramoops pmsg-size
  drm/amdgpu: Increase soft IH ring size
  samples/hw_breakpoint: Fix kernel BUG 'invalid opcode: 0000'
  drm/amdgpu: Update ring scheduler info as needed
  drm/amd/display: Fix underflow issue on 175hz timing
  ASoC: SOF: topology: simplify code to prevent static analysis warnings
  ASoC: Intel: sof_sdw: Update BT offload config for soundwire config
  ALSA: hda: intel-dsp-cfg: add LunarLake support
  drm/amd/display: Use DTBCLK as refclk instead of DPREFCLK
  drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31
  drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN314
  drm/amd/display: Use max memclk variable when setting max memclk
  drm/msm/adreno: Use quirk identify hw_apriv
  drm/msm/adreno: Use quirk to identify cached-coherent support
  drm/exynos: fix a possible null-pointer dereference due to data race in 
exynos_drm_crtc_atomic_disable()
  io_uring: annotate the struct io_kiocb slab for appropriate user copy
  drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer()
  bus: ti-sysc: Configure uart quirks for k3 SoC
  arm64: dts: qcom: sc8280xp-x13s: Add camera activity LED
  md: raid1: fix potential OOB in raid1_remove_disk()
  ext2: fix datatype of block number in ext2_xattr_set2()
  blk-mq: fix tags leak when shrink nr_hw_queues
  ASoC: SOF: amd: clear panic mask status when panic occurs
  x86: bring back rep movsq for user access on CPUs without ERMS
  fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
  jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
  ext4: add two helper functions extent_logical_end() and pa_logical_end()
  ext4: avoid overlapping preallocations due to overflow
  PCI: dwc: Provide deinit callback for i.MX
  ARM: 9317/1: kexec: Make smp stop calls asynchronous
  powerpc/pseries: fix possible memory leak in ibmebus_bus_init()
  PCI: vmd: Disable bridge window for domain reset
  PCI: fu740: Set the number of MSI vectors
  media: mdp3: Fix resource leaks in of_find_device_by_node
  media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
  media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
  media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
  media: anysee: fix null-ptr-deref in anysee_master_xfer
  media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
  media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer
  scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected
  media: tuners: qt1010: replace BUG_ON with a regular error
  media: pci: cx23885: replace BUG with error return
  usb: cdns3: Put the cdns set active part outside the spin lock
  usb: typec: intel_pmc_mux: Add new ACPI ID for Lunar Lake IOM device
  usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc
  tools: iio: iio_generic_buffer: Fix some integer type and calculation
  scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
  serial: cpm_uart: Avoid suspicious locking
  misc: open-dice: make OPEN_DICE depend on HAS_IOMEM
  usb: dwc3: dwc3-octeon: Verify clock divider
  usb: ehci: add workaround for chipidea PORTSC.PEC bug
  usb: chipidea: add workaround for chipidea PEC bug
  media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning
  kobject: Add sanity check for kset->kobj.ktype in kset_register()
  interconnect: Fix locking for runpm vs reclaim
  usb: typec: qcom-pmic-typec: register drm_bridge
  printk: Reduce console_unblank() usage in unsafe scenarios
  printk: Keep non-panic-CPUs out of console lock
  printk: Do not take console lock for console_flush_on_panic()
  printk: Consolidate console deferred printing
  printk: Rename abandon_console_lock_in_panic() to other_cpu_in_panic()
  ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
  btrfs: introduce struct to consolidate extent buffer write context
  btrfs: zoned: introduce block group context to btrfs_eb_write_context
  btrfs: zoned: return int from btrfs_check_meta_write_pointer
  btrfs: zoned: defer advancing meta write pointer
  btrfs: zoned: activate metadata block group on write time
  mtd: spi-nor: spansion: use CLPEF as an alternative to CLSR
  mtd: spi-nor: spansion: preserve CFR2V[7] when writing MEMLAT
  btrfs: add a helper to read the superblock metadata_uuid
  btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super
  nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page()
  drm: gm12u320: Fix the timeout usage for usb_bulk_msg()
  scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir()
  md: don't dereference mddev after export_rdev()
  md: fix warning for holder mismatch from export_rdev()
  efivarfs: fix statfs() on efivarfs
  PM: hibernate: Fix the exclusive get block device in test_resume mode
  selftests: tracing: Fix to unmount tracefs for recovering environment
  x86/ibt: Suppress spurious ENDBR
  x86/ibt: Avoid duplicate ENDBR in __put_user_nocheck*()
  riscv: kexec: Align the kexeced kernel entry
  x86/sched: Restore the SD_ASYM_PACKING flag in the DIE domain
  scsi: target: core: Fix target_cmd_counter leak
  scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file()
  panic: Reenable preemption in WARN slowpath
  ata: libata-core: fetch sense data for successful commands iff CDL enabled
  x86/boot/compressed: Reserve more memory for page tables
  x86/purgatory: Remove LTO flags
  samples/hw_breakpoint: fix building without module unloading
  blk-mq: prealloc tags when increase tagset nr_hw_queues
  blk-mq: fix tags UAF when shrinking q->nr_hw_queues
  md/raid1: fix error: ISO C90 forbids mixed declarations
  Revert "SUNRPC: Fail faster on bad verifier"
  attr: block mode changes of symlinks
  ovl: fix failed copyup of fileattr on a symlink
  ovl: fix incorrect fdput() on aio completion
  io_uring/net: fix iter retargeting for selected buf
  nvme: avoid bogus CRTO values
  x86/platform/uv: Use alternate source for socket to node data
  Revert "firewire: core: obsolete usage of GFP_ATOMIC at building node tree"
  drm/amd: Make fence wait in suballocator uninterruptible
  Revert "drm/amd: Disable S/G for APUs when 64GB or more host memory"
  dm: don't attempt to queue IO under RCU protection
  dm: fix a race condition in retrieve_deps
  btrfs: fix lockdep splat and potential deadlock after failure running delayed 
items
  btrfs: fix a compilation error if DEBUG is defined in btree_dirty_folio
  btrfs: fix race between finishing block group creation and its item update
  btrfs: release path before inode lookup during the ino lookup ioctl
  btrfs: check for BTRFS_FS_ERROR in pending ordered assert
  tracing/synthetic: Fix order of struct trace_dynamic_info
  tracing: Have tracing_max_latency inc the trace array ref count
  tracing: Have event inject files inc the trace array ref count
  tracing/synthetic: Print out u64 values properly
  tracing: Increase trace array ref count on enable and filter files
  tracing: Have current_trace inc the trace array ref count
  tracing: Have option files inc the trace array ref count
  selinux: fix handling of empty opts in selinux_fs_context_submount()
  nfsd: fix change_info in NFSv4 RENAME replies
  tracefs: Add missing lockdown check to tracefs_create_dir()
  i2c: aspeed: Reset the i2c controller when timeout occurs
  ata: libata: disallow dev-initiated LPM transitions to unsupported states
  ata: libahci: clear pending interrupt status
  scsi: megaraid_sas: Fix deadlock on firmware crashdump
  scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id()
  scsi: pm8001: Setup IRQs on resume
  Revert "comedi: add HAS_IOPORT dependencies"
  UBUNTU: [Config] updateconfigs for COMEDI/HAS_IOPORT deps
  ext4: fix rec_len verify error
  drm/radeon: make fence wait in suballocator uninterrruptable
  drm/i915: Only check eDP HPD when AUX CH is shared
  drm/amdkfd: Insert missing TLB flush on GFX10 and later
  drm/tests: helpers: Avoid a driver uaf
  drm/amd/display: Adjust the MST resume flow
  drm/amd/display: fix the white screen issue when >= 64GB DRAM
  drm/amd/display: Add DPIA Link Encoder Assignment Fix
  drm/amd/display: Fix 2nd DPIA encoder Assignment
  Revert "memcg: drop kmem.limit_in_bytes"
  drm/amdgpu: fix amdgpu_cs_p1_user_fence
  interconnect: Teach lockdep about icc_bw_lock order
  x86/alternatives: Remove faulty optimization
  x86,static_call: Fix static-call vs return-thunk
  Linux 6.5.5
  UBUNTU: Upstream stable to v6.5.5

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2043416/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to