Skipped "ext4: no need to continue when the number of entries is 1" since it is already applied as CVE-2024-49967.
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-49967 ** Changed in: linux (Ubuntu Oracular) Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2089052 Title: Oracular update: v6.11.3 upstream stable release Status in linux package in Ubuntu: Invalid Status in linux source package in Oracular: Fix Committed Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.11.3 upstream stable release from git://git.kernel.org/ static_call: Handle module init failure correctly in static_call_del_module() static_call: Replace pointless WARN_ON() in static_call_module_notify() jump_label: Fix static_key_slow_dec() yet again scsi: st: Fix input/output error on empty drive reset scsi: pm8001: Do not overwrite PCI queue mapping drm/i915/psr: Do not wait for PSR being idle on on Panel Replay drm/i915/display: BMG supports UHBR13.5 drm/i915/dp: Fix AUX IO power enabling for eDP PSR drm/amdgpu: Fix get each xcp macro drm/amd/display: handle nulled pipe context in DCE110's set_drr() ksmbd: fix warning: comparison of distinct pointer types lacks a cast mailbox: ARM_MHU_V3 should depend on ARM64 UBUNTU: [Config] updateconfigs for ARM_MHU_V3 mailbox: rockchip: fix a typo in module autoloading mailbox: bcm2835: Fix timeout during suspend mode ceph: fix a memory leak on cap_auths in MDS client ceph: remove the incorrect Fw reference check when dirtying pages drm/i915/dp: Fix colorimetry detection ieee802154: Fix build error net: sparx5: Fix invalid timestamps net/mlx5: Fix error path in multi-packet WQE transmit net/mlx5: Added cond_resched() to crdump collection net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() net/mlx5e: SHAMPO, Fix overflow of hd_per_wq net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq() net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable() selftests: netfilter: Fix nft_audit.sh for newer nft binaries netfilter: nf_tables: prevent nf_skb_duplicated corruption selftests: netfilter: Add missing return value Bluetooth: MGMT: Fix possible crash on mgmt_index_removed Bluetooth: L2CAP: Fix uaf in l2cap_connect Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() afs: Fix missing wire-up of afs_retry_request() afs: Fix the setting of the server responding flag net: dsa: improve shutdown sequence net: Add netif_get_gro_max_size helper for GRO net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size net: ethernet: lantiq_etop: fix memory disclosure net: fec: Restart PPS after link state change net: fec: Reload PTP registers after link-state change net: avoid potential underflow in qdisc_pkt_len_init() with UFO net: add more sanity checks to qdisc_pkt_len_init() net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check ipv4: ip_gre: Fix drops of small packets in ipgre_xmit netfs: Fix missing wakeup after issuing writes net: test for not too small csum_start in virtio_net_hdr_to_skb() ppp: do not assume bh is held in ppp_channel_bridge_input() net: phy: realtek: Check the index value in led_hw_control_get bridge: mcast: Fail MDB get request on empty entry net/ncsi: Disable the ncsi work before freeing the associated structure iomap: constrain the file range passed to iomap_file_unshare dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start ASoC: topology: Fix incorrect addressing assignments drm/panthor: Fix race when converting group handle to group object ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized drm/connector: hdmi: Fix writing Dynamic Range Mastering infoframes io_uring: fix memory leak when cache init fail rust: kbuild: split up helpers.c rust: kbuild: auto generate helper exports rust: mutex: fix __mutex_init() usage in case of PREEMPT_RT ALSA: mixer_oss: Remove some incorrect kfree_const() usages ALSA: hda/realtek: Fix the push button function for the ALC257 cifs: Remove intermediate object of failed create reparse call ASoC: Intel: soc-acpi-intel-rpl-match: add missing empty item drm/panthor: Lock the VM resv before calling drm_gpuvm_bo_obtain_prealloc() ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m drm/xe: Restore pci state upon resume drm/xe/guc_submit: add missing locking in wedged_fini drm/xe: Resume TDR after GT reset drm/xe: Prevent null pointer access in xe_migrate_copy cifs: Fix buffer overflow when parsing NFS reparse points cifs: Do not convert delimiter when parsing NFS-style symlinks gpiolib: Fix potential NULL pointer dereference in gpiod_get_label() tools/rtla: Fix installation from out-of-tree build ALSA: gus: Fix some error handling paths related to get_bpos() usage ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin drm/amd/display: Disable replay if VRR capability is false drm/amd/display: Fix VRR cannot enable drm/amd/display: Re-enable panel replay feature e1000e: avoid failing the system during pm_suspend l2tp: prevent possible tunnel refcount underflow wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() wifi: rtw89: avoid to add interface to list twice when SER wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit crypto: x86/sha256 - Add parentheses around macros' single arguments crypto: octeontx - Fix authenc setkey crypto: octeontx2 - Fix authenc setkey ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node() wifi: iwlwifi: mvm: Fix a race in scan abort flow wifi: iwlwifi: mvm: drop wrong STA selection in TX wifi: cfg80211: Set correct chandef when starting CAC net/xen-netback: prevent UAF in xenvif_flush_hash() net: hisilicon: hip04: fix OF node leak in probe() net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info() net: hisilicon: hns_mdio: fix OF node leak in probe() ACPI: PAD: fix crash in exit_round_robin() ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails ACPICA: Fix memory leak if acpi_ps_get_next_field() fails exec: don't WARN for racy path_noexec check fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name ACPI: resource: Skip IRQ override on Asus Vivobook Go E1404GAB wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable net: sched: consistently use rcu_replace_pointer() in taprio_change() Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122 Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18 ACPI: CPPC: Add support for setting EPP register in FFH blk_iocost: fix more out of bound shifts btrfs: don't readahead the relocation inode on RST wifi: ath12k: fix array out-of-bound access in SoC stats wifi: ath11k: fix array out-of-bound access in SoC stats wifi: rtw88: select WANT_DEV_COREDUMP l2tp: free sessions using rcu l2tp: use rcu list add/del when updating lists ACPI: EC: Do not release locks during operation region accesses ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() tipc: guard against string buffer overrun net: skbuff: sprinkle more __GFP_NOWARN on ingress allocs net: mvpp2: Increase size of queue_name buffer bnxt_en: Extend maximum length of version string by 1 byte ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR). wifi: rtw89: correct base HT rate mask for firmware netfilter: nf_tables: do not remove elements if set backend implements .abort ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family nvme-keyring: restrict match length for version '1' identifiers nvme-tcp: sanitize TLS key handling nvme-tcp: check for invalidated or revoked key net: atlantic: Avoid warning about potential string truncation crypto: simd - Do not call crypto_alloc_tfm during registration netpoll: Ensure clean state on setup failures tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process wifi: iwlwifi: mvm: use correct key iteration wifi: iwlwifi: allow only CN mcc from WRDD wifi: iwlwifi: mvm: avoid NULL pointer dereference virt: sev-guest: Ensure the SNP guest messages do not exceed a page wifi: mac80211: fix RCU list iterations ACPICA: iasl: handle empty connection_node proc: add config & param to block forcing mem writes UBUNTU: [Config] updateconfigs to select PROC_MEM_ALWAYS_FORCE vfs: use RCU in ilookup drivers/perf: arm_spe: Use perf_allow_kernel() for permissions nvme: fix metadata handling in nvme-passthrough can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode netdev-genl: Set extack and fix error on napi-get wifi: wilc1000: Do not operate uninitialized hardware during suspend/resume block: fix integer overflow in BLKSECDISCARD cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value cpufreq: loongson3: Use raw_smp_processor_id() in do_service_request() arm64: trans_pgd: mark PTEs entries as valid to avoid dead kexec() net: phy: Check for read errors in SIOCGMIIREG wifi: rtw89: avoid reading out of bounds when loading TX power FW elements x86/bugs: Add missing NO_SSB flag x86/bugs: Fix handling when SRSO mitigation is disabled net: napi: Prevent overflow of napi_defer_hard_irqs crypto: hisilicon - fix missed error branch wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() netfs: Cancel dirty folios that have no storage destination nfp: Use IRQF_NO_AUTOEN flag in request_irq() ALSA: usb-audio: Add input value sanity checks for standard types x86/ioapic: Handle allocation failures gracefully x86/apic: Remove logical destination mode for 64-bit ALSA: usb-audio: Define macros for quirk table entries ALSA: usb-audio: Replace complex quirk lines with macros ALSA: usb-audio: Add quirk for RME Digiface USB ALSA: usb-audio: Add mixer quirk for RME Digiface USB ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init ALSA: usb-audio: Add logitech Audio profile quirk ASoC: codecs: wsa883x: Handle reading version failure ALSA: control: Take power_ref lock primarily tools/x86/kcpuid: Protect against faulty "max subleaf" values x86/pkeys: Add PKRU as a parameter in signal handling functions x86/pkeys: Restore altstack access in sigreturn() x86/kexec: Add EFI config table identity mapping for kexec kernel x86/mm/ident_map: Use gbpages only where full GB page should be mapped. ALSA: asihpi: Fix potential OOB array access ALSA: hdsp: Break infinite MIDI input flush loop tools/nolibc: powerpc: limit stack-protector workaround to GCC selftests/nolibc: avoid passing NULL to printf("%s") x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments() ASoC: Intel: boards: always check the result of acpi_dev_get_first_match_dev() rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb() hwmon: (nct6775) add G15CF to ASUS WMI monitoring list fbdev: efifb: Register sysfs groups through driver core fbdev: pxafb: Fix possible use after free in pxafb_task() pmdomain: core: Don't hold the genpd-lock when calling dev_pm_domain_set() pmdomain: core: Use dev_name() instead of kobject_get_path() in debugfs rcuscale: Provide clear error when async specified without primitives power: reset: brcmstb: Do not go into infinite loop if reset fails iommu/arm-smmu-v3: Match Stall behaviour for S2 iommu/vt-d: Always reserve a domain ID for identity setup iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count iommu/vt-d: Unconditionally flush device TLB for pasid table updates iommu/arm-smmu-v3: Do not use devm for the cd table allocations drm/stm: Avoid use-after-free issues with crtc and plane drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags drm/amd/display: Check null pointers before using them drm/amd/display: Check null pointers before used drm/amd/display: Check null pointers before multiple uses drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn401_init_hw drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces ata: pata_serverworks: Do not use the term blacklist ata: sata_sil: Rename sil_blacklist to sil_quirks selftests/bpf: fix uprobe.path leak in bpf_testmod scsi: smartpqi: Add new controller PCI IDs HID: Ignore battery for all ELAN I2C-HID devices drm/amd/display: Underflow Seen on DCN401 eGPU drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func drm/amd/display: Add NULL check for function pointer in dcn401_set_output_transfer_func drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func drm/amd/display: fix a UBSAN warning in DML2.1 drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2) drm/amd/display: Check null pointers before using dc->clk_mgr drm/amd/display: Check null pointer before try to access it drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2) drm/xe: Name and document Wa_14019789679 drm/amd/display: fix double free issue during amdgpu module unload drm/amdgpu: add list empty check to avoid null pointer issue jfs: UBSAN: shift-out-of-bounds in dbFindBits jfs: Fix uaf in dbFreeBits jfs: check if leafidx greater than num leaves per dmap tree scsi: smartpqi: correct stream detection scsi: smartpqi: add new controller PCI IDs drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs jfs: Fix uninit-value access of new_ea in ea_buffer drm/amdgpu: add raven1 gfxoff quirk drm/amdgpu: enable gfxoff quirk on HP 705G4 drm/amdkfd: Fix resource leak in criu restore queue HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio platform/x86: touchscreen_dmi: add nanote-next quirk platform/x86/amd: pmf: Add quirk for TUF Gaming A14 drm/stm: ltdc: reset plane transparency after plane disable drm/amd/display: Initialize denominators' default to 1 drm/amd/display: Check null-initialized variables drm/amd/display: Check phantom_stream before it is used drm/amd/display: Check stream before comparing them drm/amd/display: Deallocate DML memory if allocation fails drm/amd/display: Increase array size of dummy_boolean drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation drm/amd/display: Fix index out of bounds in degamma hardware format translation drm/amd/display: Implement bounds check for stream encoder creation in DCN401 drm/amd/display: Fix index out of bounds in DCN30 color transformation drm/amdgpu/gfx12: properly handle error ints on all pipes drm/amdgpu/gfx9: properly handle error ints on all pipes drm/amd/display: Fix possible overflow in integer multiplication drm/amd/display: Check stream_status before it is used drm/amd/display: Avoid overflow assignment in link_dp_cts drm/amd/display: Initialize get_bytes_per_element's default to 1 drm/printer: Allow NULL data in devcoredump printer perf,x86: avoid missing caller address in stack traces captured in uprobe scsi: aacraid: Rearrange order of struct aac_srb_unit scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology scsi: lpfc: Update PRLO handling in direct attached topology drm/amd/display: Force enable 3DLUT DMA check for dcn401 in DML drm/amdgpu: fix unchecked return value warning for amdgpu_gfx drm/amdgpu: fix unchecked return value warning for amdgpu_atombios perf: Fix event_function_call() locking scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers drm/radeon/r100: Handle unknown family in r100_cp_init_microcode() drm/amd/display: Unlock Pipes Based On DET Allocation drm/amdgpu: fix ptr check warning in gfx9 ip_dump drm/amdgpu: fix ptr check warning in gfx10 ip_dump drm/amdgpu: fix ptr check warning in gfx11 ip_dump drm/amdgpu: Block MMR_READ IOCTL in reset drm/amdgpu/gfx9: use rlc safe mode for soft recovery drm/amdgpu/gfx11: enter safe mode before touching CP_INT_CNTL drm/xe: Use topology to determine page fault queue size drm/amd/pm: ensure the fw_info is not null before using it drm/amdkfd: Check int source id for utcl2 poison event of/irq: Refer to actual buffer size in of_irq_parse_one() drm/amd/display: guard write a 0 post_divider value to HW powerpc/pseries: Use correct data types from pseries_hp_errorlog struct ovl: fsync after metadata copy-up drm/amdgpu/gfx12: use rlc safe mode for soft recovery drm/amdgpu/gfx11: use rlc safe mode for soft recovery drm/amdgpu/gfx10: use rlc safe mode for soft recovery platform/x86: lenovo-ymc: Ignore the 0x0 state tools/hv: Add memory allocation check in hv_fcopy_start HID: i2c-hid: ensure various commands do not interfere with each other ksmbd: add refcnt to ksmbd_conn struct platform/mellanox: mlxbf-pmc: fix lockdep warning platform/x86: x86-android-tablets: Adjust Xiaomi Pad 2 bottom bezel touch buttons LED ext4: filesystems without casefold feature cannot be mounted with siphash bpf: Make the pointer returned by iter next method valid ext4: ext4_search_dir should return a proper error ext4: avoid use-after-free in ext4_ext_show_leaf() ext4: fix i_data_sem unlock order in ext4_ind_migrate() bpftool: Fix undefined behavior caused by shifting into the sign bit iomap: handle a post-direct I/O invalidate race in iomap_write_delalloc_release bpftool: Fix undefined behavior in qsort(NULL, 0, ...) bpf: Fix a sdiv overflow issue EINJ, CXL: Fix CXL device SBDF calculation spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled spi: spi-cadence: Fix missing spi_controller_is_target() check selftest: hid: add missing run-hid-tools-tests.sh spi: s3c64xx: fix timeout counters in flush_fifo kselftest/devices/probe: Fix SyntaxWarning in regex strings for Python3 selftests: breakpoints: use remaining time to check if suspend succeed accel/ivpu: Add missing MODULE_FIRMWARE metadata spi: rpc-if: Add missing MODULE_DEVICE_TABLE ALSA: control: Fix power_ref lock order for compat code, too perf callchain: Fix stitch LBR memory leaks perf: Really fix event_function_call() locking drm/xe: fixup xe_alloc_pf_queue drm/xe: Fix memory leak on xe_alloc_pf_queue failure selftests: vDSO: fix vDSO name for powerpc selftests: vDSO: fix vdso_config for powerpc selftests: vDSO: fix vDSO symbols lookup for powerpc64 ext4: fix error message when rejecting the default hash selftests/mm: fix charge_reserved_hugetlb.sh test nvme-tcp: fix link failure for TCP auth f2fs: add write priority option based on zone UFS f2fs: fix to don't panic system for no free segment fault injection powerpc/vdso: Fix VDSO data access when running in a non-root time namespace selftests: vDSO: fix ELF hash table entry size for s390x selftests: vDSO: fix vdso_config for s390 f2fs: make BG GC more aggressive for zoned devices f2fs: introduce migration_window_granularity f2fs: increase BG GC migration window granularity when boosted for zoned devices f2fs: do FG_GC when GC boosting is required for zoned devices f2fs: forcibly migrate to secure space for zoned device file pinning Revert "ALSA: hda: Conditionally use snooping for AMD HDMI" platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug KVM: arm64: Fix kvm_has_feat*() handling of negative features i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq() i2c: xiic: Wait for TX empty to avoid missed TX NAKs media: i2c: ar0521: Use cansleep version of gpiod_set_value() i2c: core: Lock address during client device instantiation i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled i2c: synquacer: Deal with optional PCLK correctly rust: sync: require `T: Sync` for `LockedBy::access` ovl: fail if trusted xattrs are needed but caller lacks permission firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp() memory: tegra186-emc: drop unused to_tegra186_emc() dt-bindings: clock: exynos7885: Fix duplicated binding spi: bcm63xx: Fix module autoloading spi: bcm63xx: Fix missing pm_runtime_disable() power: supply: hwmon: Fix missing temp1_max_alarm attribute mm, slub: avoid zeroing kmalloc redzone power: supply: Drop use_cnt check from power_supply_property_is_writeable() perf/core: Fix small negative period being ignored drm/v3d: Prevent out of bounds access in performance query extensions parisc: Fix itlb miss handler for 64-bit programs drm/mediatek: ovl_adaptor: Add missing of_node_put() drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop ALSA: core: add isascii() check to card ID generator ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET ALSA: usb-audio: Add native DSD support for Luxman D-08u ALSA: line6: add hw monitor volume control to POD HD500X ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8 ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9 ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200 ext4: no need to continue when the number of entries is 1 ext4: correct encrypted dentry name hash when not casefolded ext4: fix slab-use-after-free in ext4_split_extent_at() ext4: propagate errors from ext4_find_extent() in ext4_insert_range() ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible() ext4: dax: fix overflowing extents beyond inode size when partially writing ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free ext4: aovid use-after-free in ext4_ext_insert_extent() ext4: fix double brelse() the buffer of the extents path ext4: fix timer use-after-free on failed mount ext4: fix access to uninitialised lock in fc replay path ext4: update orig_path in ext4_find_extent() ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list() ext4: fix fast commit inode enqueueing during a full journal commit ext4: use handle to mark fc as ineligible in __track_dentry_update() ext4: mark fc as ineligible using an handle in ext4_xattr_set() ext4: fix off by one issue in alloc_flex_gd() parisc: Fix 64-bit userspace syscall path parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards parisc: Fix stack start for ADDR_NO_RANDOMIZE personality drm/rockchip: vop: clear DMA stop bit on RK3066 of: address: Report error on resource bounds overflow of/irq: Support #msi-cells=<0> in of_msi_get_domain drm: omapdrm: Add missing check for alloc_ordered_workqueue resource: fix region_intersects() vs add_memory_driver_managed() lib/buildid: harden build ID parsing logic jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit mm: krealloc: consider spare memory for __GFP_ZERO ocfs2: fix the la space leak when unmounting an ocfs2 volume ocfs2: fix uninit-value in ocfs2_get_block() ocfs2: reserve space for inline xattr before attaching reflink tree ocfs2: cancel dqi_sync_work before freeing oinfo ocfs2: remove unreasonable unlock in ocfs2_read_blocks ocfs2: fix null-ptr-deref when journal load failed. ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate scripts/gdb: fix timerlist parsing issue scripts/gdb: add iteration function for rbtree scripts/gdb: fix lx-mounts command error arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386 drm/xe: fix UAF around queue destruction drm/xe/oa: Don't reset OAC_CONTEXT_ENABLE on OA stream close sched/deadline: Comment sched_dl_entity::dl_server variable sched/core: Add clearing of ->dl_server in put_prev_task_balance() sched/core: Clear prev->dl_server in CFS pick fast path sched: psi: fix bogus pressure spikes from aggregation race riscv: define ILLEGAL_POINTER_VALUE for 64bit UBUNTU: [Config] updateconfigs for ILLEGAL_POINTER_VALUE on riscv exfat: fix memory leak in exfat_load_bitmap() perf python: Disable -Wno-cast-function-type-mismatch if present on clang perf hist: Update hist symbol when updating maps nfsd: fix delegation_blocked() to block correctly for at least 30 seconds nfsd: map the EBADMSG to nfserr_io to avoid warning NFSD: Fix NFSv4's PUTPUBFH operation i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition sysctl: avoid spurious permanent empty tables RDMA/mana_ib: use the correct page table index based on hardware page size RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page drivers/perf: riscv: Align errno for unsupported perf event riscv: Fix kernel stack size when KASAN is enabled aoe: fix the potential use-after-free problem in more places media: imx335: Fix reset-gpio handling clk: rockchip: fix error for unknown clocks leds: pca9532: Remove irrelevant blink configuration error message remoteproc: k3-r5: Fix error handling when power-up failed gfs2: fix double destroy_workqueue error media: videobuf2: Drop minimum allocation requirement of 2 buffers clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks media: sun4i_csi: Implement link validate for sun4i_csi subdev clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable() media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x clk: qcom: gcc-sc8180x: Register QUPv3 RCGs for DFS on sc8180x clk: qcom: clk-rpmh: Fix overflow in BCM vote clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src media: venus: fix use after free bug in venus_remove due to race condition clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable() clk: qcom: gcc-sc8180x: Add GPLL9 support clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL drm/amd/display: avoid set dispclk to 0 smb: client: use actual path when queryfs smb3: fix incorrect mode displayed for read-only files iio: magnetometer: ak8975: Fix reading for ak099xx sensors iio: pressure: bmp280: Fix regmap for BMP280 device iio: pressure: bmp280: Fix waiting time for BMP3xx configuration vrf: revert "vrf: Remove unnecessary RCU-bh critical section" net: gso: fix tcp fraglist segmentation after pull from frag_list gso: fix udp gso fraglist segmentation after pull from frag_list tomoyo: fallback to realpath if symlink's pathname does not exist kselftests: mm: fix wrong __NR_userfaultfd value net: stmmac: Fix zero-division error when disabling tc cbs rtc: at91sam9: fix OF node leak in probe() error path mm/filemap: fix filemap_get_folios_contig THP panic mm/hugetlb: fix memfd_pin_folios free_huge_pages leak mm/hugetlb: fix memfd_pin_folios resv_huge_pages leak mm/gup: fix memfd_pin_folios hugetlb page allocation mm/gup: fix memfd_pin_folios alloc race panic mm/hugetlb: simplify refs in memfd_alloc_folio Input: adp5589-keys - fix NULL pointer dereference Input: adp5589-keys - fix adp5589_gpio_get_value() HID: bpf: fix cfi stubs for hid_bpf_ops cachefiles: fix dentry leak in cachefiles_open_file() pidfs: check for valid pid namespace ACPI: video: Add backlight=native quirk for Dell OptiPlex 5480 AIO ACPI: resource: Remove duplicate Asus E1504GAB IRQ override ACPI: resource: Loosen the Asus E1404GAB DMI match to also cover the E1404GA ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] btrfs: send: fix buffer overflow detection when copying path to cache entry btrfs: fix a NULL pointer dereference when failed to start a new trasacntion btrfs: drop the backref cache during relocation if we commit btrfs: send: fix invalid clone operation for file that got its size decreased btrfs: wait for fixup workers before stopping cleaner kthread during umount cpufreq: Avoid a bad reference count on CPU node cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock gpio: davinci: fix lazy disable net: pcs: xpcs: fix the wrong register that was written back Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE mac802154: Fix potential RCU dereference issue in mac802154_scan_worker io_uring/net: harden multishot termination case for recv ceph: fix cap ref leak via netfs init_request tracing/hwlat: Fix a race during cpuhp processing tracing/timerlat: Drop interface_lock in stop_kthread() tracing/timerlat: Fix a race during cpuhp processing tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline rtla: Fix the help text in osnoise and timerlat top tools firmware/sysfb: Disable sysfb for firmware buffers with unknown parent close_range(): fix the logics in descriptor table trimming drm/i915/gem: fix bitwise and logical AND mixup drm/panthor: Don't add write fences to the shared BOs drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup() drm/panthor: Don't declare a queue blocked if deferred operations are pending drm/sched: Fix dynamic job-flow control race drm/sched: Add locking to drm_sched_entity_modify_sched drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job drm/sched: Always increment correct scheduler score drm/amd/display: Restore Optimized pbn Value if Failed to Disable DSC drm/amd/display: Add HDR workaround for specific eDP drm/amd/display: Enable idle workqueue for more IPS modes drm/amd/display: Fix system hang while resume with TBT monitor kconfig: fix infinite loop in sym_calc_choice() kconfig: qconf: move conf_read() before drawing tree pain kconfig: qconf: fix buffer overflow in debug links arm64: cputype: Add Neoverse-N3 definitions arm64: errata: Expand speculative SSBS workaround once more uprobes: fix kernel info leak via "[uprobes]" vma mm: z3fold: deprecate CONFIG_Z3FOLD UBUNTU: [Config] updateconfigs after deprecating Z3FOLD drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT` sunrpc: change sp_nrthreads from atomic_t to unsigned int. NFSD: Async COPY result needs to return a write verifier NFSD: Limit the number of concurrent async COPY operations remoteproc: k3-r5: Acquire mailbox handle during probe routine remoteproc: k3-r5: Delay notification of wakeup event r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun" r8169: add tally counter fields added with RTL8125 ACPI: battery: Simplify battery hook locking ACPI: battery: Fix possible crash when unregistering a battery hook drm/xe: Clean up VM / exec queue file lock usage. drm/xe/vm: move xa_alloc to prevent UAF drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066 drm/xe/vram: fix ccs offset calculation drm/sched: revert "Always increment correct scheduler score" rxrpc: Fix a race between socket set up and I/O thread creation vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() ALSA: control: Fix leftover snd_power_unref() crypto: octeontx* - Select CRYPTO_AUTHENC drm/amd/display: Revert Avoid overflow assignment perf report: Fix segfault when 'sym' sort key is not used pmdomain: core: Reduce debug summary table width perf python: Allow checking for the existence of warning options in clang Linux 6.11.3 UBUNTU: Upstream stable to v6.11.3 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2089052/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
