Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.11.7 upstream stable release from git://git.kernel.org/ Linux 6.11.7 rcu/kvfree: Refactor kvfree_rcu_queue_batch() lib: alloc_tag_module_unload must wait for pending kfree_rcu calls rcu/kvfree: Add kvfree_rcu_barrier() API RISC-V: disallow gcc + rust builds MIPS: export __cmpxchg_small() drm/amdgpu: handle default profile on on devices without fullscreen 3D fs/ntfs3: Sequential field availability check in mi_enum_attr() drm/amdgpu/swsmu: default to fullscreen 3D profile for dGPUs drm/amdgpu/swsmu: fix ordering for setting workload_mask drm/xe: Write all slices if its mcr register drm/xe: Define STATELESS_COMPRESSION_CTRL as mcr register drm/xe/xe2: Add performance turning changes drm/xe/xe2: Introduce performance changes drm/xe/xe2hpg: Introduce performance tuning changes for Xe2_HPG drm/xe: Move enable host l2 VRAM post MCR init drm/xe/xe2hpg: Add Wa_15016589081 drm/xe: Support 'nomodeset' kernel command-line option drm/i915/display: Don't enable decompression on Xe2 with Tile4 drm/i915/psr: Prevent Panel Replay if CRC calculation is enabled drm/xe/display: drop unused rawclk_freq and RUNTIME_INFO() drm/i915: move rawclk from runtime to display runtime info drm/i915/pps: Disable DPLS_GATING around pps sequence drm/i915/display/dp: Compute AS SDP when vrr is also enabled drm/i915/dp: Clear VSC SDP during post ddi disable routine drm/i915/hdcp: Add encoder check in hdcp2_get_capability drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability drm/i915/display: WA for Re-initialize dispcnlunitt1 xosc clock drm/i915/display: Cache adpative sync caps to use it later drm/i915: disable fbc due to Wa_16023588340 drm/i915: Skip programming FIA link enable bits for MTL+ arm64: dts: qcom: x1e80100: fix PCIe4 and PCIe6a PHY clocks arm64: dts: qcom: x1e80100: Add Broadcast_AND region in LLCC block arm64: dts: imx8ulp: correct the flexspi compatible string arm64: dts: qcom: x1e80100-crd: fix nvme regulator boot glitch arm64: dts: qcom: x1e80100-qcp: fix nvme regulator boot glitch arm64: dts: qcom: x1e80100: fix PCIe4 interconnect arm64: dts: qcom: x1e80100-vivobook-s15: fix nvme regulator boot glitch arm64: dts: qcom: x1e80100: Fix up BAR spaces arm64: dts: qcom: x1e80100-yoga-slim7x: fix nvme regulator boot glitch arm64: dts: qcom: msm8939: revert use of APCS mbox for RPM riscv: dts: starfive: disable unused csi/camss nodes riscv: dts: starfive: Update ethernet phy0 delay parameter values for Star64 mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify() mm: shrink skip folio mapped by an exiting process mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats mm: multi-gen LRU: ignore non-leaf pmd_young for force_scan=true Input: fix regression when re-registering input handlers mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes vmscan,migrate: fix page count imbalance on node stats when demoting pages gpiolib: fix debugfs dangling chip separator gpiolib: fix debugfs newline separators btrfs: fix defrag not merging contiguous extents due to merged extent maps btrfs: fix extent map merging not happening for adjacent extents io_uring/rw: fix missing NOWAIT check for O_DIRECT start write drm/xe: Don't short circuit TDR on jobs not started drm/xe: Add mmio read before GGTT invalidate drm/xe: Kill regs/xe_sriov_regs.h drm/xe: Fix register definition order in xe_regs.h drm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic() drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic() drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic() kasan: remove vmalloc_percpu test nvme: re-fix error-handling for io_uring nvme-passthrough nvmet-auth: assign dh_key to NULL after kfree_sensitive ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 xfs: fix finding a last resort AG in xfs_filestream_pick_ag accel/ivpu: Fix NOC firewall interrupt handling btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids() mctp i2c: handle NULL header address resource,kexec: walk_system_ram_res_rev must retain resource flags ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow x86/traps: move kmsan check after instrumentation_begin x86/traps: Enable UBSAN traps on x86 mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves fork: only invoke khugepaged, ksm hooks if no error fork: do not invoke uffd on fork if error occurs mei: use kvmalloc for read buffer mptcp: init: protect sched with rcu_read_lock tpm: Lazily flush the auth session drm/amdgpu/smu13: fix profile reporting drm/amd/pm: Vangogh: Fix kernel memory out of bounds write tpm: Rollback tpm2_load_null() tpm: Return tpm2_sessions_init() when null key creation fails iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone sched/numa: Fix the potential null pointer dereference in task_numa_work() cxl/acpi: Ensure ports ready at cxl_acpi_probe() return cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices() scsi: ufs: core: Fix another deadlock during RTC update riscv: Remove duplicated GET_RM riscv: Remove unused GENERATING_ASM_OFFSETS riscv: Use '%u' to format the output of 'cpu' riscv: Prevent a bad reference count on CPU nodes riscv: efi: Set NX compat flag in PE/COFF header ALSA: hda/realtek: Limit internal Mic boost on Dell platform Input: edt-ft5x06 - fix regmap leak when probe fails riscv: vdso: Prevent the compiler from inserting calls to memset() spi: spi-fsl-dspi: Fix crash when not using GPIO chip select btrfs: fix error propagation of split bios btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction block: fix sanity checks in blk_rq_map_user_bvec mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function cxl/port: Fix CXL port initialization order when the subsystem is built-in cxl/port: Fix use-after-free, permit out-of-order decoder shutdown soc: qcom: pmic_glink: Handle GLINK intent allocation rejections thunderbolt: Honor TMU requirements in the domain when setting TMU mode thunderbolt: Fix KASAN reported stack out-of-bounds read in tb_retimer_scan() firmware: microchip: auto-update: fix poll_complete() to not report spurious timeout errors mm: shrinker: avoid memleak in alloc_shrinker_info tools/mm: -Werror fixes in page-types/slabinfo mm: shmem: fix data-race in shmem_getattr() RISC-V: ACPI: fix early_ioremap to early_memremap nilfs2: fix potential deadlock with newly created symlinks nilfs2: fix kernel bug due to missing clearing of checked flag iio: light: veml6030: fix microlux value calculation iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() dt-bindings: iio: adc: ad7380: fix ad7380-4 reference supply staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() wifi: iwlwifi: mvm: fix 6 GHz scan construction wifi: iwlegacy: Clear stale interrupts before resuming device wifi: cfg80211: clear wdev->cqm_config pointer on free wifi: ath10k: Fix memory leak in management tx wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Revert "selftests/mm: replace atomic_bool with pthread_barrier_t" Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM" Revert "drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35" Revert "driver core: Fix uevent_show() vs driver detach race" xhci: Use pm_runtime_get to prevent RPM on unsupported systems xhci: Fix Link TRB DMA in command ring stopped completion event phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend phy: qcom: qmp-usb: fix NULL-deref on runtime suspend usb: typec: qcom-pmic-typec: fix missing fwnode removal in error path usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes usb: typec: tcpm: restrict SNK_WAIT_CAPABILITIES_TIMEOUT transitions to non self-powered devices usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() usb: phy: Fix API devm_usb_put_phy() can not release the phy usbip: tools: Fix detach_port() invalid port error path wifi: rtlwifi: rtl8192du: Don't claim USB ID 0bda:8171 ALSA: usb-audio: Add quirks for Dell WD19 dock rpcrdma: Always release the rpcrdma_device's xa_array NFSD: Never decrement pending_async_copies on error NFSD: Initialize struct nfsd4_copy earlier misc: sgi-gru: Don't disable preemption in GRU driver NFS: remove revoked delegation from server's delegation list net: amd: mvme147: Fix probe banner message thermal: intel: int340x: processor: Add MMIO RAPL PL4 support thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U ACPI: resource: Fold Asus Vivobook Pro N6506M* DMI quirks together cifs: Fix creating native symlinks pointing to current or parent directory cifs: Improve creating native symlinks pointing to directory scsi: scsi_transport_fc: Allow setting rport state to current state rust: device: change the from_raw() function fs/ntfs3: Additional check in ntfs_file_release fs/ntfs3: Fix general protection fault in run_is_mapped_full fs/ntfs3: Additional check in ni_clear() fs/ntfs3: Fix possible deadlock in mi_read fs/ntfs3: Add rough attr alloc_size check fs/ntfs3: Stale inode instead of bad fs/ntfs3: Fix warning possible deadlock in ntfs_set_state fs/ntfs3: Check if more than chunk-size bytes are written ntfs3: Add bounds checking to mi_enum_attr() drm/panthor: Report group as timedout when we fail to properly suspend drm/panthor: Fail job creation when the group is dead drm/panthor: Fix firmware initialization on systems with a page size > 4k nvme: module parameter to disable pi with offsets PCI: Fix pci_enable_acs() support for the ACS quirks cxl/events: Fix Trace DRAM Event Record drm/tegra: Fix NULL vs IS_ERR() check in probe() drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() drm/mediatek: Use cmdq_pkt_create() and cmdq_pkt_destroy() drm/mediatek: Fix get efuse issue for MT8188 DPTX drm/mediatek: Fix color format MACROs in OVL drm/mediatek: ovl: Remove the color format comment for ovl_fmt_convert() smb: client: set correct device number on nfs reparse points smb: client: fix parsing of device numbers gpio: sloppy-logic-analyzer: Check for error code from devm_mutex_init() call ACPI: CPPC: Make rmw_lock a raw_spin_lock afs: Fix missing subdir edit when renamed between parent dirs firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() kasan: Fix Software Tag-Based KASAN with GCC iomap: turn iomap_want_unshare_iter into an inline function fsdax: dax_unshare_iter needs to copy entire blocks fsdax: remove zeroing code from dax_unshare_iter iomap: share iomap_unshare_iter predicate code with fsdax iomap: don't bother unsharing delalloc extents iomap: improve shared block detection in iomap_unshare_iter bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled netfilter: nft_payload: sanitize offset and length before calling skb_checksum() net: ethernet: mtk_wed: fix path of MT7988 WO firmware mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address mlxsw: pci: Sync Rx buffers for device mlxsw: pci: Sync Rx buffers for CPU mlxsw: spectrum_ptp: Add missing verification before pushing Tx header net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension bpf: Check the validity of nr_words in bpf_iter_bits_new() bpf: Add bpf_mem_alloc_check_size() helper bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() netfilter: Fix use-after-free in get_info() net: fix crash when config small gso_max_size/gso_ipv4_max_size bpf: Fix out-of-bounds write in trie_get_next_key() net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext() netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() bpf: Force checkpoint when jmp history is too long net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT gtp: allow -1 to be specified as file description from userspace ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() ice: fix crash on probe for DPLL enabled E810 LOM ice: add callbacks for Embedded SYNC enablement on dpll pins dpll: add Embedded SYNC feature for a pin net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values sock_map: fix a NULL pointer dereference in sock_map_link_update_prog() ASoC: dapm: fix bounds checker error in dapm_widget_list_create macsec: Fix use-after-free while sending the offloading packet ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() Revert "wifi: iwlwifi: remove retry loops in start" wifi: iwlwifi: mvm: don't add default link in fw restart flow wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() wifi: iwlwifi: mvm: really send iwl_txpower_constraints_cmd wifi: iwlwifi: mvm: don't leak a link on AP removal RDMA/bnxt_re: synchronize the qp-handle table array RDMA/bnxt_re: Fix the usage of control path spin locks RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down RDMA/cxgb4: Dump vendor specific QP details wifi: brcm80211: BRCM_TRACING should depend on TRACING wifi: rtw89: pci: early chips only enable 36-bit DMA on specific PCI hosts wifi: ath11k: Fix invalid ring usage in full monitor mode wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd() scsi: scsi_debug: Fix do_device_access() handling of unexpected SG copy length perf python: Fix up the build on architectures without HAVE_KVM_STAT_SUPPORT perf trace: Fix non-listed archs in the syscalltbl routines slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof spi: geni-qcom: Fix boot warning related to pm_runtime and devres cgroup: Fix potential overflow issue when checking max_depth drm/amdgpu: fix random data corruption for sdma 7 ** Affects: linux (Ubuntu) Importance: Undecided Status: Confirmed ** Affects: linux (Ubuntu Oracular) Importance: Undecided Status: New ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Oracular) Importance: Undecided Status: New -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2091629 Title: Oracular update: v6.11.7 upstream stable release Status in linux package in Ubuntu: Confirmed Status in linux source package in Oracular: New Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.11.7 upstream stable release from git://git.kernel.org/ Linux 6.11.7 rcu/kvfree: Refactor kvfree_rcu_queue_batch() lib: alloc_tag_module_unload must wait for pending kfree_rcu calls rcu/kvfree: Add kvfree_rcu_barrier() API RISC-V: disallow gcc + rust builds MIPS: export __cmpxchg_small() drm/amdgpu: handle default profile on on devices without fullscreen 3D fs/ntfs3: Sequential field availability check in mi_enum_attr() drm/amdgpu/swsmu: default to fullscreen 3D profile for dGPUs drm/amdgpu/swsmu: fix ordering for setting workload_mask drm/xe: Write all slices if its mcr register drm/xe: Define STATELESS_COMPRESSION_CTRL as mcr register drm/xe/xe2: Add performance turning changes drm/xe/xe2: Introduce performance changes drm/xe/xe2hpg: Introduce performance tuning changes for Xe2_HPG drm/xe: Move enable host l2 VRAM post MCR init drm/xe/xe2hpg: Add Wa_15016589081 drm/xe: Support 'nomodeset' kernel command-line option drm/i915/display: Don't enable decompression on Xe2 with Tile4 drm/i915/psr: Prevent Panel Replay if CRC calculation is enabled drm/xe/display: drop unused rawclk_freq and RUNTIME_INFO() drm/i915: move rawclk from runtime to display runtime info drm/i915/pps: Disable DPLS_GATING around pps sequence drm/i915/display/dp: Compute AS SDP when vrr is also enabled drm/i915/dp: Clear VSC SDP during post ddi disable routine drm/i915/hdcp: Add encoder check in hdcp2_get_capability drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability drm/i915/display: WA for Re-initialize dispcnlunitt1 xosc clock drm/i915/display: Cache adpative sync caps to use it later drm/i915: disable fbc due to Wa_16023588340 drm/i915: Skip programming FIA link enable bits for MTL+ arm64: dts: qcom: x1e80100: fix PCIe4 and PCIe6a PHY clocks arm64: dts: qcom: x1e80100: Add Broadcast_AND region in LLCC block arm64: dts: imx8ulp: correct the flexspi compatible string arm64: dts: qcom: x1e80100-crd: fix nvme regulator boot glitch arm64: dts: qcom: x1e80100-qcp: fix nvme regulator boot glitch arm64: dts: qcom: x1e80100: fix PCIe4 interconnect arm64: dts: qcom: x1e80100-vivobook-s15: fix nvme regulator boot glitch arm64: dts: qcom: x1e80100: Fix up BAR spaces arm64: dts: qcom: x1e80100-yoga-slim7x: fix nvme regulator boot glitch arm64: dts: qcom: msm8939: revert use of APCS mbox for RPM riscv: dts: starfive: disable unused csi/camss nodes riscv: dts: starfive: Update ethernet phy0 delay parameter values for Star64 mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify() mm: shrink skip folio mapped by an exiting process mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats mm: multi-gen LRU: ignore non-leaf pmd_young for force_scan=true Input: fix regression when re-registering input handlers mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes vmscan,migrate: fix page count imbalance on node stats when demoting pages gpiolib: fix debugfs dangling chip separator gpiolib: fix debugfs newline separators btrfs: fix defrag not merging contiguous extents due to merged extent maps btrfs: fix extent map merging not happening for adjacent extents io_uring/rw: fix missing NOWAIT check for O_DIRECT start write drm/xe: Don't short circuit TDR on jobs not started drm/xe: Add mmio read before GGTT invalidate drm/xe: Kill regs/xe_sriov_regs.h drm/xe: Fix register definition order in xe_regs.h drm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic() drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic() drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic() kasan: remove vmalloc_percpu test nvme: re-fix error-handling for io_uring nvme-passthrough nvmet-auth: assign dh_key to NULL after kfree_sensitive ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 xfs: fix finding a last resort AG in xfs_filestream_pick_ag accel/ivpu: Fix NOC firewall interrupt handling btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids() mctp i2c: handle NULL header address resource,kexec: walk_system_ram_res_rev must retain resource flags ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow x86/traps: move kmsan check after instrumentation_begin x86/traps: Enable UBSAN traps on x86 mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves fork: only invoke khugepaged, ksm hooks if no error fork: do not invoke uffd on fork if error occurs mei: use kvmalloc for read buffer mptcp: init: protect sched with rcu_read_lock tpm: Lazily flush the auth session drm/amdgpu/smu13: fix profile reporting drm/amd/pm: Vangogh: Fix kernel memory out of bounds write tpm: Rollback tpm2_load_null() tpm: Return tpm2_sessions_init() when null key creation fails iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone sched/numa: Fix the potential null pointer dereference in task_numa_work() cxl/acpi: Ensure ports ready at cxl_acpi_probe() return cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices() scsi: ufs: core: Fix another deadlock during RTC update riscv: Remove duplicated GET_RM riscv: Remove unused GENERATING_ASM_OFFSETS riscv: Use '%u' to format the output of 'cpu' riscv: Prevent a bad reference count on CPU nodes riscv: efi: Set NX compat flag in PE/COFF header ALSA: hda/realtek: Limit internal Mic boost on Dell platform Input: edt-ft5x06 - fix regmap leak when probe fails riscv: vdso: Prevent the compiler from inserting calls to memset() spi: spi-fsl-dspi: Fix crash when not using GPIO chip select btrfs: fix error propagation of split bios btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction block: fix sanity checks in blk_rq_map_user_bvec mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function cxl/port: Fix CXL port initialization order when the subsystem is built-in cxl/port: Fix use-after-free, permit out-of-order decoder shutdown soc: qcom: pmic_glink: Handle GLINK intent allocation rejections thunderbolt: Honor TMU requirements in the domain when setting TMU mode thunderbolt: Fix KASAN reported stack out-of-bounds read in tb_retimer_scan() firmware: microchip: auto-update: fix poll_complete() to not report spurious timeout errors mm: shrinker: avoid memleak in alloc_shrinker_info tools/mm: -Werror fixes in page-types/slabinfo mm: shmem: fix data-race in shmem_getattr() RISC-V: ACPI: fix early_ioremap to early_memremap nilfs2: fix potential deadlock with newly created symlinks nilfs2: fix kernel bug due to missing clearing of checked flag iio: light: veml6030: fix microlux value calculation iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() dt-bindings: iio: adc: ad7380: fix ad7380-4 reference supply staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() wifi: iwlwifi: mvm: fix 6 GHz scan construction wifi: iwlegacy: Clear stale interrupts before resuming device wifi: cfg80211: clear wdev->cqm_config pointer on free wifi: ath10k: Fix memory leak in management tx wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Revert "selftests/mm: replace atomic_bool with pthread_barrier_t" Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM" Revert "drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35" Revert "driver core: Fix uevent_show() vs driver detach race" xhci: Use pm_runtime_get to prevent RPM on unsupported systems xhci: Fix Link TRB DMA in command ring stopped completion event phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend phy: qcom: qmp-usb: fix NULL-deref on runtime suspend usb: typec: qcom-pmic-typec: fix missing fwnode removal in error path usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes usb: typec: tcpm: restrict SNK_WAIT_CAPABILITIES_TIMEOUT transitions to non self-powered devices usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() usb: phy: Fix API devm_usb_put_phy() can not release the phy usbip: tools: Fix detach_port() invalid port error path wifi: rtlwifi: rtl8192du: Don't claim USB ID 0bda:8171 ALSA: usb-audio: Add quirks for Dell WD19 dock rpcrdma: Always release the rpcrdma_device's xa_array NFSD: Never decrement pending_async_copies on error NFSD: Initialize struct nfsd4_copy earlier misc: sgi-gru: Don't disable preemption in GRU driver NFS: remove revoked delegation from server's delegation list net: amd: mvme147: Fix probe banner message thermal: intel: int340x: processor: Add MMIO RAPL PL4 support thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U ACPI: resource: Fold Asus Vivobook Pro N6506M* DMI quirks together cifs: Fix creating native symlinks pointing to current or parent directory cifs: Improve creating native symlinks pointing to directory scsi: scsi_transport_fc: Allow setting rport state to current state rust: device: change the from_raw() function fs/ntfs3: Additional check in ntfs_file_release fs/ntfs3: Fix general protection fault in run_is_mapped_full fs/ntfs3: Additional check in ni_clear() fs/ntfs3: Fix possible deadlock in mi_read fs/ntfs3: Add rough attr alloc_size check fs/ntfs3: Stale inode instead of bad fs/ntfs3: Fix warning possible deadlock in ntfs_set_state fs/ntfs3: Check if more than chunk-size bytes are written ntfs3: Add bounds checking to mi_enum_attr() drm/panthor: Report group as timedout when we fail to properly suspend drm/panthor: Fail job creation when the group is dead drm/panthor: Fix firmware initialization on systems with a page size > 4k nvme: module parameter to disable pi with offsets PCI: Fix pci_enable_acs() support for the ACS quirks cxl/events: Fix Trace DRAM Event Record drm/tegra: Fix NULL vs IS_ERR() check in probe() drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() drm/mediatek: Use cmdq_pkt_create() and cmdq_pkt_destroy() drm/mediatek: Fix get efuse issue for MT8188 DPTX drm/mediatek: Fix color format MACROs in OVL drm/mediatek: ovl: Remove the color format comment for ovl_fmt_convert() smb: client: set correct device number on nfs reparse points smb: client: fix parsing of device numbers gpio: sloppy-logic-analyzer: Check for error code from devm_mutex_init() call ACPI: CPPC: Make rmw_lock a raw_spin_lock afs: Fix missing subdir edit when renamed between parent dirs firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() kasan: Fix Software Tag-Based KASAN with GCC iomap: turn iomap_want_unshare_iter into an inline function fsdax: dax_unshare_iter needs to copy entire blocks fsdax: remove zeroing code from dax_unshare_iter iomap: share iomap_unshare_iter predicate code with fsdax iomap: don't bother unsharing delalloc extents iomap: improve shared block detection in iomap_unshare_iter bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled netfilter: nft_payload: sanitize offset and length before calling skb_checksum() net: ethernet: mtk_wed: fix path of MT7988 WO firmware mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address mlxsw: pci: Sync Rx buffers for device mlxsw: pci: Sync Rx buffers for CPU mlxsw: spectrum_ptp: Add missing verification before pushing Tx header net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension bpf: Check the validity of nr_words in bpf_iter_bits_new() bpf: Add bpf_mem_alloc_check_size() helper bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() netfilter: Fix use-after-free in get_info() net: fix crash when config small gso_max_size/gso_ipv4_max_size bpf: Fix out-of-bounds write in trie_get_next_key() net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext() netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() bpf: Force checkpoint when jmp history is too long net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT gtp: allow -1 to be specified as file description from userspace ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() ice: fix crash on probe for DPLL enabled E810 LOM ice: add callbacks for Embedded SYNC enablement on dpll pins dpll: add Embedded SYNC feature for a pin net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values sock_map: fix a NULL pointer dereference in sock_map_link_update_prog() ASoC: dapm: fix bounds checker error in dapm_widget_list_create macsec: Fix use-after-free while sending the offloading packet ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() Revert "wifi: iwlwifi: remove retry loops in start" wifi: iwlwifi: mvm: don't add default link in fw restart flow wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() wifi: iwlwifi: mvm: really send iwl_txpower_constraints_cmd wifi: iwlwifi: mvm: don't leak a link on AP removal RDMA/bnxt_re: synchronize the qp-handle table array RDMA/bnxt_re: Fix the usage of control path spin locks RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down RDMA/cxgb4: Dump vendor specific QP details wifi: brcm80211: BRCM_TRACING should depend on TRACING wifi: rtw89: pci: early chips only enable 36-bit DMA on specific PCI hosts wifi: ath11k: Fix invalid ring usage in full monitor mode wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd() scsi: scsi_debug: Fix do_device_access() handling of unexpected SG copy length perf python: Fix up the build on architectures without HAVE_KVM_STAT_SUPPORT perf trace: Fix non-listed archs in the syscalltbl routines slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof spi: geni-qcom: Fix boot warning related to pm_runtime and devres cgroup: Fix potential overflow issue when checking max_depth drm/amdgpu: fix random data corruption for sdma 7 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2091629/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp