** Changed in: linux (Ubuntu Oracular)
       Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2089033

Title:
  Oracular update: v6.11.2 upstream stable release

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Oracular:
  Fix Committed

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v6.11.2 upstream stable release
         from git://git.kernel.org/

  wifi: ath11k: use work queue to process beacon tx event
  EDAC/synopsys: Fix error injection on Zynq UltraScale+
  wifi: rtw88: always wait for both firmware loading attempts
  crypto: xor - fix template benchmarking
  crypto: qat - disable IOV in adf_dev_stop()
  crypto: qat - fix recovery flow for VFs
  crypto: qat - ensure correct order in VF restarting handler
  crypto: iaa - Fix potential use after free bug
  ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
  eth: fbnic: select DEVLINK and PAGE_POOL
  wifi: brcmfmac: introducing fwil query functions
  wifi: ath9k: Remove error checks when creating debugfs entries
  wifi: ath12k: fix BSS chan info request WMI command
  wifi: ath12k: match WMI BSS chan info structure with firmware definition
  wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
  hwrng: cn10k - Enable by default CN10K driver if Thunder SoC is enabled
  crypto: x86/aes-gcm - fix PREEMPT_RT issue in gcm_crypt()
  net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
  virtio: rename virtio_config_enabled to virtio_config_core_enabled
  virtio: allow driver to disable the configure change notification
  virtio-net: synchronize operstate with admin state on up/down
  virtio-net: synchronize probe with ndo_set_features
  arm64: signal: Fix some under-bracketed UAPI macros
  wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to 
prevent out-of-bounds reading
  wifi: rtw88: remove CPT execution branch never used
  RISC-V: KVM: Fix sbiret init before forwarding to userspace
  RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data
  RISC-V: KVM: Allow legacy PMU access from guest
  RISC-V: KVM: Fix to allow hpmcounter31 from the guest
  mount: handle OOM on mnt_warn_timestamp_expiry
  autofs: fix missing fput for FSCONFIG_SET_FD
  netfilter: nf_tables: store new sets in dedicated list
  ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
  powercap: intel_rapl: Fix off by one in get_rpi()
  wifi: rtw89: limit the PPDU length for VHT rate to 0x40000
  kselftest/arm64: signal: fix/refactor SVE vector length enumeration
  arm64: smp: smp_send_stop() and crash_smp_send_stop() should try non-NMI first
  thermal: core: Fold two functions into their respective callers
  thermal: core: Fix rounding of delay jiffies
  drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
  perf/dwc_pcie: Fix registration issue in multi PCIe controller instances
  perf/dwc_pcie: Always register for PCIe bus notifier
  crypto: qat - fix "Full Going True" macro definition
  ACPI: video: force native for Apple MacbookPro9,2
  wifi: mac80211_hwsim: correct MODULE_PARM_DESC of multi_radio
  wifi: mac80211: don't use rate mask for offchannel TX either
  wifi: iwlwifi: config: label 'gl' devices as discrete
  wifi: iwlwifi: mvm: set the cipher for secured NDP ranging
  wifi: iwlwifi: mvm: increase the time between ranging measurements
  wifi: cfg80211: fix bug of mapping AF3x to incorrect User Priority
  wifi: mac80211: fix the comeback long retry times
  wifi: iwlwifi: mvm: allow ESR when we the ROC expires
  wifi: mac80211: Check for missing VHT elements only for 5 GHz
  ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE
  ACPICA: executer/exsystem: Don't nag user about every Stall() violating the 
spec
  padata: Honor the caller's alignment in case of chunk_size 0
  drivers/perf: hisi_pcie: Record hardware counts correctly
  drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
  kselftest/arm64: Actually test SME vector length changes via sigreturn
  can: j1939: use correct function name in comment
  wifi: rtw89: wow: fix wait condition for AOAC report request
  ACPI: CPPC: Fix MASK_VAL() usage
  netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
  netfilter: nf_tables: reject element expiration with no timeout
  netfilter: nf_tables: reject expiration higher than timeout
  netfilter: nf_tables: remove annotation to access set timeout while holding 
lock
  netfilter: nft_dynset: annotate data-races around set timeout
  perf/arm-cmn: Refactor node ID handling. Again.
  perf/arm-cmn: Fix CCLA register offset
  perf/arm-cmn: Ensure dtm_idx is big enough
  cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
  thermal: gov_bang_bang: Adjust states of all uninitialized instances
  wifi: mt76: mt7915: fix oops on non-dbdc mt7986
  wifi: mt76: mt7921: fix wrong UNII-4 freq range check for the channel usage
  wifi: mt76: mt7996: use hweight16 to get correct tx antenna
  wifi: mt76: mt7996: fix traffic delay when switching back to working channel
  wifi: mt76: mt7996: fix wmm set of station interface to 3
  wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
  wifi: mt76: mt7996: fix EHT beamforming capability check
  x86/sgx: Fix deadlock in SGX NUMA node search
  pm:cpupower: Add missing powercap_set_enabled() stub function
  crypto: ccp - do not request interrupt on cmd completion when irqs disabled
  crypto: hisilicon/hpre - mask cluster timeout error
  crypto: hisilicon/qm - reset device before enabling it
  crypto: hisilicon/qm - inject error before stopping queue
  wifi: mt76: mt7996: fix handling mbss enable/disable
  wifi: mt76: connac: fix checksum offload fields of connac3 RXD
  wifi: mt76: mt7603: fix mixed declarations and code
  wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
  wifi: mt76: mt7915: fix rx filter setting for bfee functionality
  wifi: mt76: mt7996: fix uninitialized TLV data
  wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
  wifi: wilc1000: fix potential RCU dereference issue in 
wilc_parse_join_bss_param
  af_unix: Don't call skb_get() for OOB skb.
  af_unix: Remove single nest in manage_oob().
  af_unix: Rename unlinked_skb in manage_oob().
  af_unix: Move spin_lock() in manage_oob().
  af_unix: Don't return OOB skb in manage_oob().
  Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
  Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
  sock_map: Add a cond_resched() in sock_hash_free()
  can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
  can: m_can: enable NAPI before enabling interrupts
  can: m_can: m_can_close(): stop clocks after device has been shut down
  Bluetooth: btusb: Fix not handling ZPL/short-transfer
  bareudp: Pull inner IP header in bareudp_udp_encap_recv().
  bareudp: Pull inner IP header on xmit.
  net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
  crypto: n2 - Set err to EINVAL if snprintf fails for hmac
  xsk: fix batch alloc API on non-coherent systems
  netkit: Assign missing bpf_net_context
  net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
  fbnic: Set napi irq value after calling netif_napi_add
  net: tipc: avoid possible garbage value
  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
  ublk: move zone report data out of request pdu
  nbd: fix race between timeout and normal completion
  block, bfq: fix possible UAF for bfqq->bic with merge chain
  block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
  block, bfq: don't break merge chain in bfq_split_bfqq()
  cachefiles: Fix non-taking of sb_writers around set/removexattr
  nbd: correct the maximum value for discard sectors
  erofs: fix incorrect symlink detection in fast symlink
  erofs: fix error handling in z_erofs_init_decompressor
  erofs: handle overlapped pclusters out of crafted images properly
  block, bfq: fix uaf for accessing waker_bfqq after splitting
  block, bfq: fix procress reference leakage for bfqq in merge chain
  io_uring/io-wq: do not allow pinning outside of cpuset
  io_uring/io-wq: inherit cpuset of cgroup in io worker
  block: fix potential invalid pointer dereference in blk_add_partition
  spi: ppc4xx: handle irq_of_parse_and_map() errors
  arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
  arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
  firmware: arm_scmi: Fix double free in OPTEE transport
  spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
  firmware: qcom: scm: Disable SDI and write no dump to dump mode
  regulator: Return actual error in of_regulator_bulk_get_all()
  arm64: dts: renesas: r9a08g045: Correct GICD and GICR sizes
  arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
  arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
  arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
  ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
  arm64: tegra: Correct location of power-sensors for IGX Orin
  arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
  arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
  arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
  spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
  arm64: dts: qcom: x1e80100: Fix PHY for DP2
  ARM: dts: microchip: sama7g5: Fix RTT clock
  ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
  arm64: dts: ti: k3-am654-idk: Fix dtbs_check warning in ICSSG dmas
  ARM: versatile: fix OF node leak in CPUs prepare
  reset: berlin: fix OF node leak in probe() error path
  reset: k210: fix OF node leak in probe() error path
  platform: cznic: turris-omnia-mcu: Fix error check in 
omnia_mcu_register_trng()
  clocksource/drivers/qcom: Add missing iounmap() on errors in 
msm_dt_timer_init()
  arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
  x86/mm: Use IPIs to synchronize LAM enablement
  ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
  ASoC: tas2781: Fix a compiling warning reported by robot kernel test due to 
adding tas2563_dvc_table
  ASoC: tas2781-i2c: Drop weird GPIO code
  ASoC: tas2781-i2c: Get the right GPIO line
  selftests/ftrace: Add required dependency for kprobe tests
  ALSA: hda: cs35l41: fix module autoloading
  selftests/ftrace: Fix test to handle both old and new kernels
  x86/boot/64: Strip percpu address space when setting up GDT descriptors
  m68k: Fix kernel_clone_args.flags in m68k_clone()
  ASoC: loongson: fix error release
  selftests/ftrace: Fix eventfs ownership testcase to find mount point
  selftests:resctrl: Fix build failure on archs without __cpuid_count()
  cgroup/pids: Avoid spurious event notification
  hwmon: (max16065) Fix overflows seen when writing limits
  hwmon: (max16065) Fix alarm attributes
  iommu/arm-smmu: Un-demote unhandled-fault msg
  iommu/arm-smmu-v3: Fix a NULL vs IS_ERR() check
  mtd: slram: insert break after errors in parsing the map
  hwmon: (ntc_thermistor) fix module autoloading
  power: supply: axp20x_battery: Remove design from min and max voltage
  power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
  fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
  iommu/amd: Handle error path in amd_iommu_probe_device()
  iommu/amd: Allocate the page table root using GFP_KERNEL
  iommu/amd: Move allocation of the top table into v1_alloc_pgtable
  iommu/amd: Set the pgsize_bitmap correctly
  iommu/amd: Do not set the D bit on AMD v2 table entries
  mtd: powernv: Add check devm_kasprintf() returned value
  rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
  mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
  mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
  mtd: rawnand: mtk: Fix init error path
  iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
  iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
  iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
  pmdomain: core: Harden inter-column space in debug summary
  pmdomain: core: Fix "managed by" alignment in debug summary
  drm/stm: Fix an error handling path in stm_drm_platform_probe()
  drm/stm: ltdc: check memory returned by devm_kzalloc()
  drm/amd/display: free bo used for dmub bounding box
  drm/amd/display: Check link_res->hpo_dp_link_enc before using it
  drm/amd/display: Add null check for set_output_gamma in 
dcn30_set_output_transfer_func
  drm/amdgpu: properly handle vbios fake edid sizing
  drm/radeon: properly handle vbios fake edid sizing
  drm/amd/display: Reset VRR config during resume
  scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
  scsi: sd: Don't check if a write for REQ_ATOMIC
  scsi: block: Don't check REQ_ATOMIC for reads
  scsi: NCR5380: Check for phase match during PDMA fixup
  drm/amd/amdgpu: Properly tune the size of struct
  drm/amd/display: Improve FAM control for DCN401
  drm/rockchip: vop: Allow 4096px width scaling
  drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
  drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
  drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
  drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
  scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
  jfs: fix out-of-bounds in dbNextAG() and diAlloc()
  drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
  drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
  powerpc/8xx: Fix initial memory mapping
  powerpc/8xx: Fix kernel vs user address comparison
  powerpc/vdso: Inconditionally use CFUNC macro
  drm/msm: Use a7xx family directly in gpu_state
  drm/msm: Dump correct dbgahb clusters on a750
  drm/msm: Fix CP_BV_DRAW_STATE_ADDR name
  drm/msm: Fix incorrect file name output in adreno_request_fw()
  drm/msm/a5xx: disable preemption in submits by default
  drm/msm/a5xx: properly clear preemption records on resume
  drm/msm/a5xx: fix races in preemption evaluation stage
  drm/msm/a5xx: workaround early ring-buffer emptiness check
  ipmi: docs: don't advertise deprecated sysfs entries
  drm/msm/dp: enable widebus on all relevant chipsets
  drm/msm/dsi: correct programming sequence for SM8350 / SM8450
  drm/msm: fix %s null argument error
  platform/x86: ideapad-laptop: Make the scope_guard() clear of its scope
  kselftest: dt: Ignore nodes that have ancestors disabled
  drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
  drm/amdgpu: fix invalid fence handling in amdgpu_vm_tlb_flush
  xen: use correct end address of kernel for conflict checking
  HID: wacom: Support sequence numbers smaller than 16-bit
  HID: wacom: Do not warn about dropped packets for first packet
  ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
  xen: introduce generic helper checking for memory map conflicts
  xen: move max_pfn in xen_memory_setup() out of function scope
  xen: add capability to remap non-RAM pages to different PFNs
  xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
  drm/xe: fix missing 'xe_vm_put'
  xen/swiotlb: add alignment check for dma buffers
  xen/swiotlb: fix allocated size
  tpm: Clean up TPM space after command failure
  sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy
  bpf, x64: Fix tailcall hierarchy
  bpf, arm64: Fix tailcall hierarchy
  bpf, lsm: Add check for BPF LSM return value
  bpf: Fix compare error in function retval_range_within
  selftests/bpf: Workaround strict bpf_lsm return value check.
  selftests/bpf: Fix error linking uprobe_multi on mips
  selftests/bpf: Fix wrong binary in Makefile log output
  tools/runqslower: Fix LDFLAGS and add LDLIBS support
  bpf: Fail verification for sign-extension of packet data/data_end/data_meta
  selftests/bpf: Use pid_t consistently in test_progs.c
  selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
  selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
  selftests/bpf: Drop unneeded error.h includes
  selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
  selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
  selftests/bpf: Fix missing BUILD_BUG_ON() declaration
  selftests/bpf: Fix include of <sys/fcntl.h>
  selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
  selftests/bpf: Fix compiling kfree_skb.c with musl-libc
  selftests/bpf: Fix compiling flow_dissector.c with musl-libc
  selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
  selftests/bpf: Fix compiling core_reloc.c with musl-libc
  selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
  selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
  selftests/bpf: Fix errors compiling crypto_sanity.c with musl libc
  selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
  libbpf: Don't take direct pointers into BTF data from st_ops
  selftests/bpf: Fix arg parsing in veristat, test_progs
  selftests/bpf: Fix error compiling test_lru_map.c
  selftests/bpf: Fix C++ compile error from missing _Bool type
  selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
  selftests/bpf: Fix compile if backtrace support missing in libc
  selftests/bpf: Fix error compiling tc_redirect.c with musl libc
  s390/entry: Move early program check handler to entry.S
  s390/entry: Make early program check handler relocated lowcore aware
  libbpf: Fix license for btf_relocate.c
  samples/bpf: Fix compilation errors with cf-protection option
  selftests/bpf: no need to track next_match_pos in struct test_loader
  selftests/bpf: extract test_loader->expect_msgs as a data structure
  selftests/bpf: allow checking xlated programs in verifier_* tests
  selftests/bpf: __arch_* macro to limit test cases to specific archs
  selftests/bpf: fix to avoid __msg tag de-duplication by clang
  bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
  selftests/bpf: Fix incorrect parameters in NULL pointer checking
  libbpf: Fix bpf_object__open_skeleton()'s mishandling of options
  s390/ap: Fix deadlock caused by recursive lock of the AP bus scan mutex
  libbpf: Ensure new BTF objects inherit input endianness
  xz: cleanup CRC32 edits from 2018
  kthread: fix task state in kthread worker if being frozen
  ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
  bpftool: Fix handling enum64 in btf dump sorting
  sched/deadline: Fix schedstats vs deadline servers
  smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
  ext4: avoid buffer_head leak in ext4_mark_inode_used()
  ext4: avoid potential buffer_head leak in __ext4_new_inode()
  ext4: avoid negative min_clusters in find_group_orlov()
  ext4: return error on ext4_find_inline_entry
  ext4: avoid OOB when system.data xattr changes underneath the filesystem
  ext4: check stripe size compatibility on remount as well
  sched/numa: Fix the vma scan starving issue
  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
  nilfs2: determine empty node blocks as corrupted
  nilfs2: fix potential oob read in nilfs_btree_check_delete()
  sched/pelt: Use rq_clock_task() for hw_pressure
  bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
  bpf: Fix helper writes to read-only maps
  bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
  perf scripts python cs-etm: Restore first sample log in verbose mode
  perf bpf: Move BPF disassembly routines to separate file to avoid clash with 
capstone bpf headers
  perf mem: Free the allocated sort string, fixing a leak
  perf lock contention: Change stack_id type to s32
  perf vendor events: SKX, CLX, SNR uncore cache event fixes
  perf inject: Fix leader sampling inserting additional samples
  perf report: Fix --total-cycles --stdio output error
  perf build: Fix up broken capstone feature detection fast path
  perf sched timehist: Fix missing free of session in perf_sched__timehist()
  perf stat: Display iostat headers correctly
  perf dwarf-aux: Check allowed location expressions when collecting variables
  perf annotate-data: Fix off-by-one in location range check
  perf dwarf-aux: Handle bitfield members from pointer access
  perf hist: Don't set hpp_fmt_value for members in --no-group
  perf sched timehist: Fixed timestamp error when unable to confirm event 
sched_in time
  perf time-utils: Fix 32-bit nsec parsing
  perf mem: Check mem_events for all eligible PMUs
  perf mem: Fix missed p-core mem events on ADL and RPL
  clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
  clk: imx: imx6ul: fix default parent for enet*_ref_sel
  clk: imx: composite-8m: Enable gate clk with mcore_booted
  clk: imx: composite-93: keep root clock on when mcore enabled
  clk: imx: composite-7ulp: Check the PCC present bit
  clk: imx: fracn-gppll: fix fractional part of PLL getting lost
  clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
  clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
  clk: imx: imx8qxp: Parent should be initialized earlier than the clock
  quota: avoid missing put_quota_format when DQUOT_SUSPENDED is passed
  remoteproc: imx_rproc: Correct ddr alias for i.MX8M
  remoteproc: imx_rproc: Initialize workqueue earlier
  clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
  clk: qcom: dispcc-sm8550: fix several supposed typos
  clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
  clk: qcom: dispcc-sm8650: Update the GDSC flags
  clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
  leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
  pinctrl: renesas: rzg2l: Return -EINVAL if the pin doesn't support PIN_CFG_OEN
  pinctrl: ti: ti-iodelay: Fix some error handling paths
  phy: phy-rockchip-samsung-hdptx: Explicitly include pm_runtime.h
  Input: ilitek_ts_i2c - avoid wrong input subsystem sync
  Input: ilitek_ts_i2c - add report id message validation
  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
  media: raspberrypi: VIDEO_RASPBERRYPI_PISP_BE should depend on ARCH_BCM2835
  UBUNTU: [Config] updateconfigs for VIDEO_RASPBERRYPI_PISP_BE
  PCI: Wait for Link before restoring Downstream Buses
  firewire: core: correct range of block for case of switch statement
  PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
  media: staging: media: starfive: camss: Drop obsolete return value 
documentation
  clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
  clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
  leds: pca995x: Use device_for_each_child_node() to access device child nodes
  leds: pca995x: Fix device child node usage in pca995x_probe()
  x86/PCI: Check pcie_find_root_port() return for NULL
  nvdimm: Fix devs leaks in scan_labels()
  PCI: xilinx-nwl: Fix register misspelling
  PCI: xilinx-nwl: Clean up clock on probe failure/removal
  leds: gpio: Set num_leds after allocation
  media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
  pinctrl: single: fix missing error code in pcs_probe()
  clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
  iommufd/selftest: Fix buffer read overrrun in the dirty test
  RDMA/bnxt_re: Fix the table size for PSN/MSN entries
  media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
  media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
  media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
  media: imagination: VIDEO_E5010_JPEG_ENC should depend on ARCH_K3
  UBUNTU: [Config] updateconfigs for VIDEO_E5010_JPEG_ENC
  RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
  clk: ti: dra7-atl: Fix leak of of_nodes
  clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() 
usage
  clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
  nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
  nfsd: fix refcount leak when file is unhashed after being found
  pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
  IB/mlx5: Fix UMR pd cleanup on error flow of driver init
  IB/core: Fix ib_cache_setup_one error flow cleanup
  dt-bindings: PCI: layerscape-pci: Replace fsl,lx2160a-pcie with 
fsl,lx2160ar2-pcie
  iommufd: Check the domain owner of the parent before creating a nesting domain
  PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
  RDMA/erdma: Return QP state in erdma_query_qp
  RDMA/mlx5: Fix counter update on MR cache mkey creation
  RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
  RDMA/mlx5: Drop redundant work canceling from clean_keys()
  RDMA/mlx5: Fix MR cache temp entries cleanup
  watchdog: imx_sc_wdt: Don't disable WDT in suspend
  RDMA/hns: Don't modify rq next block addr in HIP09 QPC
  RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
  RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
  RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
  RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
  RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
  RDMA/hns: Optimize hem allocation performance
  RDMA/hns: Fix restricted __le16 degrades to integer issue
  Input: ims-pcu - fix calling interruptible mutex
  RDMA/mlx5: Obtain upper net device only when needed
  PCI: qcom-ep: Enable controller resources like PHY only after refclk is 
available
  riscv: Fix fp alignment bug in perf_callchain_user()
  RDMA/hns: Fix ah error counter in sw stat not increasing
  RDMA/cxgb4: Added NULL check for lookup_atid
  RDMA/irdma: fix error message in irdma_modify_qp_roce()
  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
  ntb_perf: Fix printk format
  ntb: Force physically contiguous allocation of rx ring buffers
  nfsd: call cache_put if xdr_reserve_space returns NULL
  nfsd: return -EINVAL when namelen is 0
  nfsd: untangle code in nfsd4_deleg_getattr_conflict()
  nfsd: fix initial getattr on write delegation
  crypto: caam - Pad SG length when allocating hash edesc
  crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
  UBUNTU: [Config] disable CRYPTO_AES_GCM_P10
  f2fs: atomic: fix to avoid racing w/ GC
  f2fs: reduce expensive checkpoint trigger frequency
  f2fs: fix to avoid racing in between read and OPU dio write
  f2fs: Create COW inode from parent dentry for atomic write
  f2fs: fix to wait page writeback before setting gcing flag
  f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
  f2fs: compress: don't redirty sparse cluster during {,de}compress
  f2fs: prevent atomic file from being dirtied before commit
  f2fs: get rid of online repaire on corrupted directory
  f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
  spi: airoha: fix dirmap_{read,write} operations
  spi: airoha: fix airoha_snand_{write,read}_data data_len estimation
  spi: atmel-quadspi: Undo runtime PM changes at driver exit time
  spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
  lib/sbitmap: define swap_lock as raw_spinlock_t
  spi: airoha: remove read cache in airoha_snand_dirmap_read()
  spi: atmel-quadspi: Avoid overwriting delay register settings
  NFSv4.2: Fix detection of "Proxying of Times" server support
  nvme-multipath: system fails to create generic nvme device
  iio: adc: ad7606: fix oversampling gpio array
  iio: adc: ad7606: fix standby gpio state to match the documentation
  driver core: Fix error handling in driver API device_rename()
  ABI: testing: fix admv8818 attr description
  iio: chemical: bme680: Fix read/write ops to device by adding mutexes
  iio: magnetometer: ak8975: drop incorrect AK09116 compatible
  dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
  driver core: Fix a potential null-ptr-deref in module_add_driver()
  serial: 8250: omap: Cleanup on error in request_irq
  Coresight: Set correct cs_mode for TPDM to fix disable issue
  Coresight: Set correct cs_mode for dummy source to fix disable issue
  coresight: tmc: sg: Do not leak sg_table
  interconnect: icc-clk: Add missed num_nodes initialization
  interconnect: qcom: sm8250: Enable sync_state
  dm integrity: fix gcc 5 warning
  cxl/pci: Fix to record only non-zero ranges
  vdpa/mlx5: Fix invalid mr resource destroy
  vhost_vdpa: assign irq bypass producer token correctly
  ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
  um: remove ARCH_NO_PREEMPT_DYNAMIC
  Revert "dm: requeue IO if mapping table not yet available"
  net: phy: aquantia: fix -ETIMEDOUT PHY probe failure when firmware not present
  net: xilinx: axienet: Schedule NAPI in two steps
  net: xilinx: axienet: Fix packet counting
  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race 
Condition
  net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
  tcp: check skb is non-NULL in tcp_rto_delta_us()
  net: qrtr: Update packets cloning when broadcasting
  net: phy: aquantia: fix setting active_low bit
  net: phy: aquantia: fix applying active_low bit after reset
  net: ravb: Fix maximum TX frame size for GbEth devices
  net: ravb: Fix R-Car RX frame size limit
  bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
  virtio_net: Fix mismatched buf address when unmapping for small packets
  netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
  netfilter: ctnetlink: compile ctnetlink_label_size with 
CONFIG_NF_CONNTRACK_EVENTS
  netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
  netfilter: nf_tables: missing objects with no memcg accounting
  selftests: netfilter: Avoid hanging ipvs.sh
  io_uring/sqpoll: do not allow pinning outside of cpuset
  io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN
  io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
  fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set
  mm: migrate: annotate data-race in migrate_folio_unmap()
  mm: call the security_mmap_file() LSM hook in remap_file_pages()
  drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
  drm/amd/display: Add DSC Debug Log
  drm/amdgpu/display: Fix a mistake in revert commit
  xen: move checks for e820 conflicts further up
  xen: allow mapping ACPI data using a different physical address
  io_uring/sqpoll: retain test for whether the CPU is valid
  drm/amd/display: disable_hpo_dp_link_output: Check link_res->hpo_dp_link_enc 
before using it
  io_uring/sqpoll: do not put cpumask on stack
  selftests/bpf: correctly move 'log' upon successful match
  Remove *.orig pattern from .gitignore
  PCI: Revert to the original speed after PCIe failed link retraining
  PCI: Clear the LBMS bit after a link retrain
  PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
  PCI: imx6: Fix missing call to phy_power_off() in error handling
  PCI: imx6: Fix establish link failure in EP mode for i.MX8MM and i.MX8MP
  PCI: imx6: Fix i.MX8MP PCIe EP's occasional failure to trigger MSI
  PCI: Correct error reporting with PCIe failed link retraining
  PCI: Use an error code with PCIe failed link retraining
  PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
  PCI: dra7xx: Fix error handling when IRQ request fails in probe
  Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
  ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
  soc: fsl: cpm1: qmc: Update TRNSYNC only in transparent mode
  soc: fsl: cpm1: tsa: Fix tsa_write8()
  soc: versatile: integrator: fix OF node leak in probe() error path
  Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
  iommu/amd: Fix argument order in amd_iommu_dev_flush_pasid_all()
  iommufd: Protect against overflow of ALIGN() during iova allocation
  Input: adp5588-keys - fix check on return code
  Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
  Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
  Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
  KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
  KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
  KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
  KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC)
  KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
  drm/amdgpu/mes12: reduce timeout
  drm/amdgpu/mes11: reduce timeout
  drm/amdkfd: Add SDMA queue quantum support for GFX12
  drm/amdgpu: update golden regs for gfx12
  drm/amdgpu/mes12: set enable_level_process_quantum_check
  drm/amdgpu/vcn: enable AV1 on both instances
  drm/amd/pm: update workload mask after the setting
  drm/amdgpu: fix PTE copy corruption for sdma 7
  drm/amdgpu: bump driver version for cleared VRAM
  drm/amdgpu/mes12: switch SET_SHADER_DEBUGGER pkt to mes schq pipe
  drm/amdgpu: Fix selfring initialization sequence on soc24
  drm/amd/display: Add HDMI DSC native YCbCr422 support
  drm/amd/display: Round calculated vtotal
  drm/amd/display: Clean up dsc blocks in accelerated mode
  drm/amd/display: Block timing sync for different output formats in pmo
  drm/amd/display: Validate backlight caps are sane
  drm/amd/display: Disable SYMCLK32_LE root clock gating
  drm/amd/display: Block dynamic IPS2 on DCN35 for incompatible FW versions
  drm/amd/display: Enable DML2 override_det_buffer_size_kbytes
  drm/amd/display: Skip to enable dsc if it has been off
  drm/amd/display: Fix underflow when setting underscan on DCN401
  drm/amd/display: Update IPS default mode for DCN35/DCN351
  objtool: Handle frame pointer related instructions
  x86/tdx: Fix "in-kernel MMIO" check
  KEYS: prevent NULL pointer dereference in find_asymmetric_key()
  powerpc/atomic: Use YZ constraints for DS-form instructions
  ksmbd: make __dir_empty() compatible with POSIX
  ksmbd: allow write with FILE_APPEND_DATA
  ksmbd: handle caseless file creation
  ata: libata-scsi: Fix ata_msense_control() CDL page reporting
  scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
  scsi: ufs: qcom: Update MODE_MAX cfg_bw value
  scsi: lpfc: Restrict support for 32 byte CDBs to specific HBAs
  scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
  scsi: mac_scsi: Refactor polling loop
  scsi: mac_scsi: Disallow bus errors during PDMA send
  can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
  wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
  usbnet: fix cyclical race on disconnect with work queue
  arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
  arm64: dts: mediatek: mt8395-nio-12l: Mark USB 3.0 on xhci1 as disabled
  USB: appledisplay: close race between probe and completion handler
  USB: misc: cypress_cy7c63: check for short transfer
  USB: class: CDC-ACM: fix race between get_serial and set_serial
  USB: misc: yurex: fix race between read and write
  usb: xhci: fix loss of data on Cadence xHC
  usb: cdnsp: Fix incorrect usb_request status
  usb: xHCI: add XHCI_RESET_ON_RESUME quirk for Phytium xHCI host
  usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
  usb: dwc2: drd: fix clock gating on USB role switch
  bus: integrator-lm: fix OF node leak in probe()
  bus: mhi: host: pci_generic: Update EDL firmware path for Foxconn modems
  bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
  firmware_loader: Block path traversal
  tty: rp2: Fix reset with non forgiving PCIe host bridges
  pps: add an error check in parport_attach
  serial: don't use uninitialized value in uart_poll_init()
  xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
  serial: qcom-geni: fix fifo polling timeout
  serial: qcom-geni: fix false console tx restart
  crypto: qcom-rng - fix support for ACPI-based systems
  crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
  drbd: Fix atomicity violation in drbd_uuid_set_bm()
  drbd: Add NULL check for net_conf to prevent dereference in state validation
  ACPI: sysfs: validate return type of _STR method
  ACPI: resource: Do IRQ override on MECHREV GM7XG0M
  ACPI: resource: Add another DMI match for the TongFang GMxXGxx
  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
  intel_idle: add Granite Rapids Xeon support
  intel_idle: fix ACPI _CST matching for newer Xeon platforms
  x86/entry: Remove unwanted instrumentation in common_interrupt()
  perf/x86/intel: Allow to setup LBR for counting event for BPF
  perf/x86/intel/pt: Fix sampling synchronization
  btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
  wifi: mt76: mt7921: Check devm_kasprintf() returned value
  wifi: mt76: mt7915: check devm_kasprintf() returned value
  wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
  idpf: fix netdev Tx queue stop/wake
  wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
  wifi: rtw88: 8822c: Fix reported RX band width
  wifi: rtw88: 8703b: Fix reported RX band width
  wifi: mt76: mt7615: check devm_kasprintf() returned value
  wifi: mt76: mt7925: fix a potential association failure upon resuming
  debugfs show actual source in /proc/mounts
  debugobjects: Fix conditions in fill_pool()
  btrfs: fix race setting file private on concurrent lseek using same fd
  btrfs: tree-checker: fix the wrong output of data backref objectid
  btrfs: always update fstrim_range on failure in FITRIM ioctl
  f2fs: fix to wait dio completion
  f2fs: fix several potential integer overflows in file offsets
  f2fs: prevent possible int overflow in dir_block_index()
  f2fs: avoid potential int overflow in sanity_check_area_boundary()
  f2fs: Require FMODE_WRITE for atomic write ioctls
  f2fs: check discard support for conventional zones
  f2fs: fix to check atomic_file in f2fs ioctl interfaces
  hwrng: mtk - Use devm_pm_runtime_enable
  hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
  hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
  arm64: esr: Define ESR_ELx_EC_* constants as UL
  arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a
  arm64: dts: mediatek: mt8186-corsola: Disable DPI display interface
  arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
  arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
  arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
  vfs: fix race between evice_inodes() and find_inode()&iput()
  netfs: Delete subtree of 'fs/netfs' when netfs module exits
  fs: Fix file_set_fowner LSM hook inconsistencies
  nfs: fix memory leak in error path of nfs4_do_reclaim
  EDAC/igen6: Fix conversion of system address to physical memory address
  icmp: change the order of rate limits
  eventpoll: Annotate data-race of busy_poll_usecs
  md: Don't flush sync_work in md_write_start()
  cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
  padata: use integer wrap around to prevent deadlock on seq_nr overflow
  lsm: add the inode_free_security_rcu() LSM implementation hook
  spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
  dt-bindings: spi: nxp-fspi: add imx8ulp support
  ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
  ARM: dts: imx6ull-seeed-npi: fix fsl,pins property in tscgrp pinctrl
  tools/nolibc: include arch.h from string.h
  soc: versatile: realview: fix memory leak during device remove
  soc: versatile: realview: fix soc_dev leak during device remove
  usb: typec: ucsi: Call CANCEL from single location
  usb: typec: ucsi: Fix busy loop on ASUS VivoBooks
  soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers
  serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit()
  serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield()
  serial: qcom-geni: fix console corruption
  thermal: core: Store trip sysfs attributes in thermal_trip_desc
  thermal: sysfs: Get to trips via attribute pointers
  thermal: sysfs: Refine the handling of trip hysteresis changes
  thermal: sysfs: Add sanity checks for trip temperature and hysteresis
  bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
  dm-verity: restart or panic on an I/O error
  compiler.h: specify correct attribute for .rodata..c_jump_table
  lockdep: fix deadlock issue between lockdep and rcu
  exfat: resolve memory leak from exfat_create_upcase_table()
  mm/hugetlb_vmemmap: batch HVO work when demoting
  s390/ftrace: Avoid calling unwinder in ftrace_return_address()
  selftest mm/mseal: fix test_seal_mremap_move_dontunmap_anyaddr
  mm: only enforce minimum stack gap size if it's sensible
  spi: fspi: add support for imx8ulp
  module: Fix KCOV-ignored file name
  fbdev: xen-fbfront: Assign fb_info->device
  tpm: export tpm2_sessions_init() to fix ibmvtpm building
  mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway
  mm/huge_memory: ensure huge_zero_folio won't have large_rmappable flag set
  mm: change vmf_anon_prepare() to __vmf_anon_prepare()
  mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu 
read lock
  i2c: aspeed: Update the stop sw state when the bus recovery occurs
  i2c: isch: Add missed 'else'
  i2c: xiic: Try re-initialization on bus busy timeout
  Documentation: KVM: fix warning in "make htmldocs"
  bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
  spi: atmel-quadspi: Fix wrong register value written to MR
  Revert: "dm-verity: restart or panic on an I/O error"
  Linux 6.11.2
  UBUNTU: Upstream stable to v6.11.2

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2089033/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to