** Changed in: linux (Ubuntu) Status: Confirmed => Invalid ** Changed in: linux (Ubuntu Oracular) Importance: Undecided => Medium
** Changed in: linux (Ubuntu Oracular) Status: New => In Progress ** Changed in: linux (Ubuntu Oracular) Assignee: (unassigned) => Manuel Diewald (diewald) ** Description changed: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.11.7 upstream stable release from git://git.kernel.org/ - + drm/amdgpu: fix random data corruption for sdma 7 + cgroup: Fix potential overflow issue when checking max_depth + spi: geni-qcom: Fix boot warning related to pm_runtime and devres + slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof + perf trace: Fix non-listed archs in the syscalltbl routines + perf python: Fix up the build on architectures without HAVE_KVM_STAT_SUPPORT + scsi: scsi_debug: Fix do_device_access() handling of unexpected SG copy length + wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd() + mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING + wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys + wifi: ath11k: Fix invalid ring usage in full monitor mode + wifi: rtw89: pci: early chips only enable 36-bit DMA on specific PCI hosts + wifi: brcm80211: BRCM_TRACING should depend on TRACING + RDMA/cxgb4: Dump vendor specific QP details + RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down + RDMA/bnxt_re: Fix the usage of control path spin locks + RDMA/bnxt_re: synchronize the qp-handle table array + wifi: iwlwifi: mvm: don't leak a link on AP removal + wifi: iwlwifi: mvm: really send iwl_txpower_constraints_cmd + wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() + wifi: iwlwifi: mvm: don't add default link in fw restart flow + Revert "wifi: iwlwifi: remove retry loops in start" + ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() + macsec: Fix use-after-free while sending the offloading packet + ASoC: dapm: fix bounds checker error in dapm_widget_list_create + sock_map: fix a NULL pointer dereference in sock_map_link_update_prog() + net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values + net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data + dpll: add Embedded SYNC feature for a pin + ice: add callbacks for Embedded SYNC enablement on dpll pins + ice: fix crash on probe for DPLL enabled E810 LOM + ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() + ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() + gtp: allow -1 to be specified as file description from userspace + bpf: Force checkpoint when jmp history is too long + netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() + net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext() + bpf: Fix out-of-bounds write in trie_get_next_key() + net: fix crash when config small gso_max_size/gso_ipv4_max_size + netfilter: Fix use-after-free in get_info() + netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() + Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs + bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() + bpf: Add bpf_mem_alloc_check_size() helper + bpf: Check the validity of nr_words in bpf_iter_bits_new() + net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension + mlxsw: spectrum_ptp: Add missing verification before pushing Tx header + mlxsw: pci: Sync Rx buffers for CPU + mlxsw: pci: Sync Rx buffers for device + mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address + net: ethernet: mtk_wed: fix path of MT7988 WO firmware + netfilter: nft_payload: sanitize offset and length before calling skb_checksum() + bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled + iomap: improve shared block detection in iomap_unshare_iter + iomap: don't bother unsharing delalloc extents + iomap: share iomap_unshare_iter predicate code with fsdax + fsdax: remove zeroing code from dax_unshare_iter + fsdax: dax_unshare_iter needs to copy entire blocks + iomap: turn iomap_want_unshare_iter into an inline function + kasan: Fix Software Tag-Based KASAN with GCC + firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() + afs: Fix missing subdir edit when renamed between parent dirs + ACPI: CPPC: Make rmw_lock a raw_spin_lock + gpio: sloppy-logic-analyzer: Check for error code from devm_mutex_init() call + smb: client: fix parsing of device numbers + smb: client: set correct device number on nfs reparse points + drm/mediatek: ovl: Remove the color format comment for ovl_fmt_convert() + drm/mediatek: Fix color format MACROs in OVL + drm/mediatek: Fix get efuse issue for MT8188 DPTX + drm/mediatek: Use cmdq_pkt_create() and cmdq_pkt_destroy() + drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() + drm/tegra: Fix NULL vs IS_ERR() check in probe() + cxl/events: Fix Trace DRAM Event Record + PCI: Fix pci_enable_acs() support for the ACS quirks + nvme: module parameter to disable pi with offsets + drm/panthor: Fix firmware initialization on systems with a page size > 4k + drm/panthor: Fail job creation when the group is dead + drm/panthor: Report group as timedout when we fail to properly suspend + ntfs3: Add bounds checking to mi_enum_attr() + fs/ntfs3: Check if more than chunk-size bytes are written + fs/ntfs3: Fix warning possible deadlock in ntfs_set_state + fs/ntfs3: Stale inode instead of bad + fs/ntfs3: Add rough attr alloc_size check + fs/ntfs3: Fix possible deadlock in mi_read + fs/ntfs3: Additional check in ni_clear() + fs/ntfs3: Fix general protection fault in run_is_mapped_full + fs/ntfs3: Additional check in ntfs_file_release + rust: device: change the from_raw() function + scsi: scsi_transport_fc: Allow setting rport state to current state + cifs: Improve creating native symlinks pointing to directory + cifs: Fix creating native symlinks pointing to current or parent directory + ACPI: resource: Fold Asus Vivobook Pro N6506M* DMI quirks together + powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U + thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support + thermal: intel: int340x: processor: Add MMIO RAPL PL4 support + net: amd: mvme147: Fix probe banner message + NFS: remove revoked delegation from server's delegation list + misc: sgi-gru: Don't disable preemption in GRU driver + NFSD: Initialize struct nfsd4_copy earlier + NFSD: Never decrement pending_async_copies on error + rpcrdma: Always release the rpcrdma_device's xa_array + ALSA: usb-audio: Add quirks for Dell WD19 dock + wifi: rtlwifi: rtl8192du: Don't claim USB ID 0bda:8171 + usbip: tools: Fix detach_port() invalid port error path + usb: phy: Fix API devm_usb_put_phy() can not release the phy + usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() + usb: typec: tcpm: restrict SNK_WAIT_CAPABILITIES_TIMEOUT transitions to non self-powered devices + usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes + usb: typec: qcom-pmic-typec: fix missing fwnode removal in error path + phy: qcom: qmp-usb: fix NULL-deref on runtime suspend + phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend + phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend + xhci: Fix Link TRB DMA in command ring stopped completion event + xhci: Use pm_runtime_get to prevent RPM on unsupported systems + Revert "driver core: Fix uevent_show() vs driver detach race" + wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower + wifi: ath10k: Fix memory leak in management tx + wifi: cfg80211: clear wdev->cqm_config pointer on free + wifi: iwlegacy: Clear stale interrupts before resuming device + wifi: iwlwifi: mvm: fix 6 GHz scan construction + staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() + dt-bindings: iio: adc: ad7380: fix ad7380-4 reference supply + iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() + iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() + iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() + iio: light: veml6030: fix microlux value calculation + nilfs2: fix kernel bug due to missing clearing of checked flag + nilfs2: fix potential deadlock with newly created symlinks + RISC-V: ACPI: fix early_ioremap to early_memremap + mm: shmem: fix data-race in shmem_getattr() + tools/mm: -Werror fixes in page-types/slabinfo + mm: shrinker: avoid memleak in alloc_shrinker_info + firmware: microchip: auto-update: fix poll_complete() to not report spurious timeout errors + thunderbolt: Fix KASAN reported stack out-of-bounds read in tb_retimer_scan() + thunderbolt: Honor TMU requirements in the domain when setting TMU mode + soc: qcom: pmic_glink: Handle GLINK intent allocation rejections + cxl/port: Fix use-after-free, permit out-of-order decoder shutdown + cxl/port: Fix CXL port initialization order when the subsystem is built-in + mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function + mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process + block: fix sanity checks in blk_rq_map_user_bvec + cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction + phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check + btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() + btrfs: fix error propagation of split bios + spi: spi-fsl-dspi: Fix crash when not using GPIO chip select + riscv: vdso: Prevent the compiler from inserting calls to memset() + Input: edt-ft5x06 - fix regmap leak when probe fails + ALSA: hda/realtek: Limit internal Mic boost on Dell platform + riscv: efi: Set NX compat flag in PE/COFF header + riscv: Prevent a bad reference count on CPU nodes + riscv: Use '%u' to format the output of 'cpu' + riscv: Remove unused GENERATING_ASM_OFFSETS + riscv: Remove duplicated GET_RM + scsi: ufs: core: Fix another deadlock during RTC update + cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices() + cxl/acpi: Ensure ports ready at cxl_acpi_probe() return + sched/numa: Fix the potential null pointer dereference in task_numa_work() + posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone + iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP + tpm: Return tpm2_sessions_init() when null key creation fails + tpm: Rollback tpm2_load_null() + drm/amd/pm: Vangogh: Fix kernel memory out of bounds write + drm/amdgpu/smu13: fix profile reporting + tpm: Lazily flush the auth session + mptcp: init: protect sched with rcu_read_lock + mei: use kvmalloc for read buffer + fork: do not invoke uffd on fork if error occurs + fork: only invoke khugepaged, ksm hooks if no error + mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves + x86/traps: Enable UBSAN traps on x86 + x86/traps: move kmsan check after instrumentation_begin + ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow + resource,kexec: walk_system_ram_res_rev must retain resource flags + mctp i2c: handle NULL header address + btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids() + accel/ivpu: Fix NOC firewall interrupt handling + xfs: fix finding a last resort AG in xfs_filestream_pick_ag + ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 + ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 + nvmet-auth: assign dh_key to NULL after kfree_sensitive + nvme: re-fix error-handling for io_uring nvme-passthrough + kasan: remove vmalloc_percpu test + drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic() + drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic() + drm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic() + drm/xe: Fix register definition order in xe_regs.h + drm/xe: Kill regs/xe_sriov_regs.h + drm/xe: Add mmio read before GGTT invalidate + drm/xe: Don't short circuit TDR on jobs not started + io_uring/rw: fix missing NOWAIT check for O_DIRECT start write + btrfs: fix extent map merging not happening for adjacent extents + btrfs: fix defrag not merging contiguous extents due to merged extent maps + gpiolib: fix debugfs newline separators + gpiolib: fix debugfs dangling chip separator + vmscan,migrate: fix page count imbalance on node stats when demoting pages + mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes + Input: fix regression when re-registering input handlers + mm: multi-gen LRU: ignore non-leaf pmd_young for force_scan=true + mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats + mm: shrink skip folio mapped by an exiting process + mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify() + riscv: dts: starfive: Update ethernet phy0 delay parameter values for Star64 + riscv: dts: starfive: disable unused csi/camss nodes + arm64: dts: qcom: msm8939: revert use of APCS mbox for RPM + arm64: dts: qcom: x1e80100-yoga-slim7x: fix nvme regulator boot glitch + arm64: dts: qcom: x1e80100: Fix up BAR spaces + arm64: dts: qcom: x1e80100-vivobook-s15: fix nvme regulator boot glitch + arm64: dts: qcom: x1e80100: fix PCIe4 interconnect + arm64: dts: qcom: x1e80100-qcp: fix nvme regulator boot glitch + arm64: dts: qcom: x1e80100-crd: fix nvme regulator boot glitch + arm64: dts: imx8ulp: correct the flexspi compatible string + arm64: dts: qcom: x1e80100: Add Broadcast_AND region in LLCC block + arm64: dts: qcom: x1e80100: fix PCIe4 and PCIe6a PHY clocks + drm/xe/xe2hpg: Add Wa_15016589081 + drm/amdgpu/swsmu: fix ordering for setting workload_mask + drm/amdgpu/swsmu: default to fullscreen 3D profile for dGPUs + fs/ntfs3: Sequential field availability check in mi_enum_attr() + drm/amdgpu: handle default profile on on devices without fullscreen 3D + MIPS: export __cmpxchg_small() + RISC-V: disallow gcc + rust builds + UBUNTU: [Config] updateconfigs after disabling rust with gcc on riscv + rcu/kvfree: Add kvfree_rcu_barrier() API + lib: alloc_tag_module_unload must wait for pending kfree_rcu calls + rcu/kvfree: Refactor kvfree_rcu_queue_batch() Linux 6.11.7 - rcu/kvfree: Refactor kvfree_rcu_queue_batch() - lib: alloc_tag_module_unload must wait for pending kfree_rcu calls - rcu/kvfree: Add kvfree_rcu_barrier() API - RISC-V: disallow gcc + rust builds - MIPS: export __cmpxchg_small() - drm/amdgpu: handle default profile on on devices without fullscreen 3D - fs/ntfs3: Sequential field availability check in mi_enum_attr() - drm/amdgpu/swsmu: default to fullscreen 3D profile for dGPUs - drm/amdgpu/swsmu: fix ordering for setting workload_mask - drm/xe: Write all slices if its mcr register - drm/xe: Define STATELESS_COMPRESSION_CTRL as mcr register - drm/xe/xe2: Add performance turning changes - drm/xe/xe2: Introduce performance changes - drm/xe/xe2hpg: Introduce performance tuning changes for Xe2_HPG - drm/xe: Move enable host l2 VRAM post MCR init - drm/xe/xe2hpg: Add Wa_15016589081 - drm/xe: Support 'nomodeset' kernel command-line option - drm/i915/display: Don't enable decompression on Xe2 with Tile4 - drm/i915/psr: Prevent Panel Replay if CRC calculation is enabled - drm/xe/display: drop unused rawclk_freq and RUNTIME_INFO() - drm/i915: move rawclk from runtime to display runtime info - drm/i915/pps: Disable DPLS_GATING around pps sequence - drm/i915/display/dp: Compute AS SDP when vrr is also enabled - drm/i915/dp: Clear VSC SDP during post ddi disable routine - drm/i915/hdcp: Add encoder check in hdcp2_get_capability - drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability - drm/i915/display: WA for Re-initialize dispcnlunitt1 xosc clock - drm/i915/display: Cache adpative sync caps to use it later - drm/i915: disable fbc due to Wa_16023588340 - drm/i915: Skip programming FIA link enable bits for MTL+ - arm64: dts: qcom: x1e80100: fix PCIe4 and PCIe6a PHY clocks - arm64: dts: qcom: x1e80100: Add Broadcast_AND region in LLCC block - arm64: dts: imx8ulp: correct the flexspi compatible string - arm64: dts: qcom: x1e80100-crd: fix nvme regulator boot glitch - arm64: dts: qcom: x1e80100-qcp: fix nvme regulator boot glitch - arm64: dts: qcom: x1e80100: fix PCIe4 interconnect - arm64: dts: qcom: x1e80100-vivobook-s15: fix nvme regulator boot glitch - arm64: dts: qcom: x1e80100: Fix up BAR spaces - arm64: dts: qcom: x1e80100-yoga-slim7x: fix nvme regulator boot glitch - arm64: dts: qcom: msm8939: revert use of APCS mbox for RPM - riscv: dts: starfive: disable unused csi/camss nodes - riscv: dts: starfive: Update ethernet phy0 delay parameter values for Star64 - mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify() - mm: shrink skip folio mapped by an exiting process - mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats - mm: multi-gen LRU: ignore non-leaf pmd_young for force_scan=true - Input: fix regression when re-registering input handlers - mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes - vmscan,migrate: fix page count imbalance on node stats when demoting pages - gpiolib: fix debugfs dangling chip separator - gpiolib: fix debugfs newline separators - btrfs: fix defrag not merging contiguous extents due to merged extent maps - btrfs: fix extent map merging not happening for adjacent extents - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write - drm/xe: Don't short circuit TDR on jobs not started - drm/xe: Add mmio read before GGTT invalidate - drm/xe: Kill regs/xe_sriov_regs.h - drm/xe: Fix register definition order in xe_regs.h - drm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic() - drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic() - drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic() - kasan: remove vmalloc_percpu test - nvme: re-fix error-handling for io_uring nvme-passthrough - nvmet-auth: assign dh_key to NULL after kfree_sensitive - ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 - ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 - xfs: fix finding a last resort AG in xfs_filestream_pick_ag - accel/ivpu: Fix NOC firewall interrupt handling - btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids() - mctp i2c: handle NULL header address - resource,kexec: walk_system_ram_res_rev must retain resource flags - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow - x86/traps: move kmsan check after instrumentation_begin - x86/traps: Enable UBSAN traps on x86 - mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves - fork: only invoke khugepaged, ksm hooks if no error - fork: do not invoke uffd on fork if error occurs - mei: use kvmalloc for read buffer - mptcp: init: protect sched with rcu_read_lock - tpm: Lazily flush the auth session - drm/amdgpu/smu13: fix profile reporting - drm/amd/pm: Vangogh: Fix kernel memory out of bounds write - tpm: Rollback tpm2_load_null() - tpm: Return tpm2_sessions_init() when null key creation fails - iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone - sched/numa: Fix the potential null pointer dereference in task_numa_work() - cxl/acpi: Ensure ports ready at cxl_acpi_probe() return - cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices() - scsi: ufs: core: Fix another deadlock during RTC update - riscv: Remove duplicated GET_RM - riscv: Remove unused GENERATING_ASM_OFFSETS - riscv: Use '%u' to format the output of 'cpu' - riscv: Prevent a bad reference count on CPU nodes - riscv: efi: Set NX compat flag in PE/COFF header - ALSA: hda/realtek: Limit internal Mic boost on Dell platform - Input: edt-ft5x06 - fix regmap leak when probe fails - riscv: vdso: Prevent the compiler from inserting calls to memset() - spi: spi-fsl-dspi: Fix crash when not using GPIO chip select - btrfs: fix error propagation of split bios - btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() - phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check - cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction - block: fix sanity checks in blk_rq_map_user_bvec - mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process - mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function - cxl/port: Fix CXL port initialization order when the subsystem is built-in - cxl/port: Fix use-after-free, permit out-of-order decoder shutdown - soc: qcom: pmic_glink: Handle GLINK intent allocation rejections - thunderbolt: Honor TMU requirements in the domain when setting TMU mode - thunderbolt: Fix KASAN reported stack out-of-bounds read in tb_retimer_scan() - firmware: microchip: auto-update: fix poll_complete() to not report spurious timeout errors - mm: shrinker: avoid memleak in alloc_shrinker_info - tools/mm: -Werror fixes in page-types/slabinfo - mm: shmem: fix data-race in shmem_getattr() - RISC-V: ACPI: fix early_ioremap to early_memremap - nilfs2: fix potential deadlock with newly created symlinks - nilfs2: fix kernel bug due to missing clearing of checked flag - iio: light: veml6030: fix microlux value calculation - iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() - iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() - iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() - dt-bindings: iio: adc: ad7380: fix ad7380-4 reference supply - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() - wifi: iwlwifi: mvm: fix 6 GHz scan construction - wifi: iwlegacy: Clear stale interrupts before resuming device - wifi: cfg80211: clear wdev->cqm_config pointer on free - wifi: ath10k: Fix memory leak in management tx - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower - Revert "selftests/mm: replace atomic_bool with pthread_barrier_t" - Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM" - Revert "drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35" - Revert "driver core: Fix uevent_show() vs driver detach race" - xhci: Use pm_runtime_get to prevent RPM on unsupported systems - xhci: Fix Link TRB DMA in command ring stopped completion event - phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend - phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend - phy: qcom: qmp-usb: fix NULL-deref on runtime suspend - usb: typec: qcom-pmic-typec: fix missing fwnode removal in error path - usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes - usb: typec: tcpm: restrict SNK_WAIT_CAPABILITIES_TIMEOUT transitions to non self-powered devices - usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() - usb: phy: Fix API devm_usb_put_phy() can not release the phy - usbip: tools: Fix detach_port() invalid port error path - wifi: rtlwifi: rtl8192du: Don't claim USB ID 0bda:8171 - ALSA: usb-audio: Add quirks for Dell WD19 dock - rpcrdma: Always release the rpcrdma_device's xa_array - NFSD: Never decrement pending_async_copies on error - NFSD: Initialize struct nfsd4_copy earlier - misc: sgi-gru: Don't disable preemption in GRU driver - NFS: remove revoked delegation from server's delegation list - net: amd: mvme147: Fix probe banner message - thermal: intel: int340x: processor: Add MMIO RAPL PL4 support - thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support - powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U - ACPI: resource: Fold Asus Vivobook Pro N6506M* DMI quirks together - cifs: Fix creating native symlinks pointing to current or parent directory - cifs: Improve creating native symlinks pointing to directory - scsi: scsi_transport_fc: Allow setting rport state to current state - rust: device: change the from_raw() function - fs/ntfs3: Additional check in ntfs_file_release - fs/ntfs3: Fix general protection fault in run_is_mapped_full - fs/ntfs3: Additional check in ni_clear() - fs/ntfs3: Fix possible deadlock in mi_read - fs/ntfs3: Add rough attr alloc_size check - fs/ntfs3: Stale inode instead of bad - fs/ntfs3: Fix warning possible deadlock in ntfs_set_state - fs/ntfs3: Check if more than chunk-size bytes are written - ntfs3: Add bounds checking to mi_enum_attr() - drm/panthor: Report group as timedout when we fail to properly suspend - drm/panthor: Fail job creation when the group is dead - drm/panthor: Fix firmware initialization on systems with a page size > 4k - nvme: module parameter to disable pi with offsets - PCI: Fix pci_enable_acs() support for the ACS quirks - cxl/events: Fix Trace DRAM Event Record - drm/tegra: Fix NULL vs IS_ERR() check in probe() - drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() - drm/mediatek: Use cmdq_pkt_create() and cmdq_pkt_destroy() - drm/mediatek: Fix get efuse issue for MT8188 DPTX - drm/mediatek: Fix color format MACROs in OVL - drm/mediatek: ovl: Remove the color format comment for ovl_fmt_convert() - smb: client: set correct device number on nfs reparse points - smb: client: fix parsing of device numbers - gpio: sloppy-logic-analyzer: Check for error code from devm_mutex_init() call - ACPI: CPPC: Make rmw_lock a raw_spin_lock - afs: Fix missing subdir edit when renamed between parent dirs - firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() - kasan: Fix Software Tag-Based KASAN with GCC - iomap: turn iomap_want_unshare_iter into an inline function - fsdax: dax_unshare_iter needs to copy entire blocks - fsdax: remove zeroing code from dax_unshare_iter - iomap: share iomap_unshare_iter predicate code with fsdax - iomap: don't bother unsharing delalloc extents - iomap: improve shared block detection in iomap_unshare_iter - bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() - net: ethernet: mtk_wed: fix path of MT7988 WO firmware - mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address - mlxsw: pci: Sync Rx buffers for device - mlxsw: pci: Sync Rx buffers for CPU - mlxsw: spectrum_ptp: Add missing verification before pushing Tx header - net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension - bpf: Check the validity of nr_words in bpf_iter_bits_new() - bpf: Add bpf_mem_alloc_check_size() helper - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() - Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() - netfilter: Fix use-after-free in get_info() - net: fix crash when config small gso_max_size/gso_ipv4_max_size - bpf: Fix out-of-bounds write in trie_get_next_key() - net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext() - netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() - bpf: Force checkpoint when jmp history is too long - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT - gtp: allow -1 to be specified as file description from userspace - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() - ice: fix crash on probe for DPLL enabled E810 LOM - ice: add callbacks for Embedded SYNC enablement on dpll pins - dpll: add Embedded SYNC feature for a pin - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data - net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values - sock_map: fix a NULL pointer dereference in sock_map_link_update_prog() - ASoC: dapm: fix bounds checker error in dapm_widget_list_create - macsec: Fix use-after-free while sending the offloading packet - ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() - Revert "wifi: iwlwifi: remove retry loops in start" - wifi: iwlwifi: mvm: don't add default link in fw restart flow - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() - wifi: iwlwifi: mvm: really send iwl_txpower_constraints_cmd - wifi: iwlwifi: mvm: don't leak a link on AP removal - RDMA/bnxt_re: synchronize the qp-handle table array - RDMA/bnxt_re: Fix the usage of control path spin locks - RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down - RDMA/cxgb4: Dump vendor specific QP details - wifi: brcm80211: BRCM_TRACING should depend on TRACING - wifi: rtw89: pci: early chips only enable 36-bit DMA on specific PCI hosts - wifi: ath11k: Fix invalid ring usage in full monitor mode - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys - mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING - wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd() - scsi: scsi_debug: Fix do_device_access() handling of unexpected SG copy length - perf python: Fix up the build on architectures without HAVE_KVM_STAT_SUPPORT - perf trace: Fix non-listed archs in the syscalltbl routines - slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof - spi: geni-qcom: Fix boot warning related to pm_runtime and devres - cgroup: Fix potential overflow issue when checking max_depth - drm/amdgpu: fix random data corruption for sdma 7 + UBUNTU: Upstream stable to v6.11.7 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2091629 Title: Oracular update: v6.11.7 upstream stable release Status in linux package in Ubuntu: Invalid Status in linux source package in Oracular: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.11.7 upstream stable release from git://git.kernel.org/ drm/amdgpu: fix random data corruption for sdma 7 cgroup: Fix potential overflow issue when checking max_depth spi: geni-qcom: Fix boot warning related to pm_runtime and devres slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof perf trace: Fix non-listed archs in the syscalltbl routines perf python: Fix up the build on architectures without HAVE_KVM_STAT_SUPPORT scsi: scsi_debug: Fix do_device_access() handling of unexpected SG copy length wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd() mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys wifi: ath11k: Fix invalid ring usage in full monitor mode wifi: rtw89: pci: early chips only enable 36-bit DMA on specific PCI hosts wifi: brcm80211: BRCM_TRACING should depend on TRACING RDMA/cxgb4: Dump vendor specific QP details RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down RDMA/bnxt_re: Fix the usage of control path spin locks RDMA/bnxt_re: synchronize the qp-handle table array wifi: iwlwifi: mvm: don't leak a link on AP removal wifi: iwlwifi: mvm: really send iwl_txpower_constraints_cmd wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() wifi: iwlwifi: mvm: don't add default link in fw restart flow Revert "wifi: iwlwifi: remove retry loops in start" ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() macsec: Fix use-after-free while sending the offloading packet ASoC: dapm: fix bounds checker error in dapm_widget_list_create sock_map: fix a NULL pointer dereference in sock_map_link_update_prog() net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data dpll: add Embedded SYNC feature for a pin ice: add callbacks for Embedded SYNC enablement on dpll pins ice: fix crash on probe for DPLL enabled E810 LOM ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() gtp: allow -1 to be specified as file description from userspace bpf: Force checkpoint when jmp history is too long netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext() bpf: Fix out-of-bounds write in trie_get_next_key() net: fix crash when config small gso_max_size/gso_ipv4_max_size netfilter: Fix use-after-free in get_info() netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() bpf: Add bpf_mem_alloc_check_size() helper bpf: Check the validity of nr_words in bpf_iter_bits_new() net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension mlxsw: spectrum_ptp: Add missing verification before pushing Tx header mlxsw: pci: Sync Rx buffers for CPU mlxsw: pci: Sync Rx buffers for device mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address net: ethernet: mtk_wed: fix path of MT7988 WO firmware netfilter: nft_payload: sanitize offset and length before calling skb_checksum() bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled iomap: improve shared block detection in iomap_unshare_iter iomap: don't bother unsharing delalloc extents iomap: share iomap_unshare_iter predicate code with fsdax fsdax: remove zeroing code from dax_unshare_iter fsdax: dax_unshare_iter needs to copy entire blocks iomap: turn iomap_want_unshare_iter into an inline function kasan: Fix Software Tag-Based KASAN with GCC firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() afs: Fix missing subdir edit when renamed between parent dirs ACPI: CPPC: Make rmw_lock a raw_spin_lock gpio: sloppy-logic-analyzer: Check for error code from devm_mutex_init() call smb: client: fix parsing of device numbers smb: client: set correct device number on nfs reparse points drm/mediatek: ovl: Remove the color format comment for ovl_fmt_convert() drm/mediatek: Fix color format MACROs in OVL drm/mediatek: Fix get efuse issue for MT8188 DPTX drm/mediatek: Use cmdq_pkt_create() and cmdq_pkt_destroy() drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() drm/tegra: Fix NULL vs IS_ERR() check in probe() cxl/events: Fix Trace DRAM Event Record PCI: Fix pci_enable_acs() support for the ACS quirks nvme: module parameter to disable pi with offsets drm/panthor: Fix firmware initialization on systems with a page size > 4k drm/panthor: Fail job creation when the group is dead drm/panthor: Report group as timedout when we fail to properly suspend ntfs3: Add bounds checking to mi_enum_attr() fs/ntfs3: Check if more than chunk-size bytes are written fs/ntfs3: Fix warning possible deadlock in ntfs_set_state fs/ntfs3: Stale inode instead of bad fs/ntfs3: Add rough attr alloc_size check fs/ntfs3: Fix possible deadlock in mi_read fs/ntfs3: Additional check in ni_clear() fs/ntfs3: Fix general protection fault in run_is_mapped_full fs/ntfs3: Additional check in ntfs_file_release rust: device: change the from_raw() function scsi: scsi_transport_fc: Allow setting rport state to current state cifs: Improve creating native symlinks pointing to directory cifs: Fix creating native symlinks pointing to current or parent directory ACPI: resource: Fold Asus Vivobook Pro N6506M* DMI quirks together powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support thermal: intel: int340x: processor: Add MMIO RAPL PL4 support net: amd: mvme147: Fix probe banner message NFS: remove revoked delegation from server's delegation list misc: sgi-gru: Don't disable preemption in GRU driver NFSD: Initialize struct nfsd4_copy earlier NFSD: Never decrement pending_async_copies on error rpcrdma: Always release the rpcrdma_device's xa_array ALSA: usb-audio: Add quirks for Dell WD19 dock wifi: rtlwifi: rtl8192du: Don't claim USB ID 0bda:8171 usbip: tools: Fix detach_port() invalid port error path usb: phy: Fix API devm_usb_put_phy() can not release the phy usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() usb: typec: tcpm: restrict SNK_WAIT_CAPABILITIES_TIMEOUT transitions to non self-powered devices usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes usb: typec: qcom-pmic-typec: fix missing fwnode removal in error path phy: qcom: qmp-usb: fix NULL-deref on runtime suspend phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend xhci: Fix Link TRB DMA in command ring stopped completion event xhci: Use pm_runtime_get to prevent RPM on unsupported systems Revert "driver core: Fix uevent_show() vs driver detach race" wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower wifi: ath10k: Fix memory leak in management tx wifi: cfg80211: clear wdev->cqm_config pointer on free wifi: iwlegacy: Clear stale interrupts before resuming device wifi: iwlwifi: mvm: fix 6 GHz scan construction staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() dt-bindings: iio: adc: ad7380: fix ad7380-4 reference supply iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() iio: light: veml6030: fix microlux value calculation nilfs2: fix kernel bug due to missing clearing of checked flag nilfs2: fix potential deadlock with newly created symlinks RISC-V: ACPI: fix early_ioremap to early_memremap mm: shmem: fix data-race in shmem_getattr() tools/mm: -Werror fixes in page-types/slabinfo mm: shrinker: avoid memleak in alloc_shrinker_info firmware: microchip: auto-update: fix poll_complete() to not report spurious timeout errors thunderbolt: Fix KASAN reported stack out-of-bounds read in tb_retimer_scan() thunderbolt: Honor TMU requirements in the domain when setting TMU mode soc: qcom: pmic_glink: Handle GLINK intent allocation rejections cxl/port: Fix use-after-free, permit out-of-order decoder shutdown cxl/port: Fix CXL port initialization order when the subsystem is built-in mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process block: fix sanity checks in blk_rq_map_user_bvec cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() btrfs: fix error propagation of split bios spi: spi-fsl-dspi: Fix crash when not using GPIO chip select riscv: vdso: Prevent the compiler from inserting calls to memset() Input: edt-ft5x06 - fix regmap leak when probe fails ALSA: hda/realtek: Limit internal Mic boost on Dell platform riscv: efi: Set NX compat flag in PE/COFF header riscv: Prevent a bad reference count on CPU nodes riscv: Use '%u' to format the output of 'cpu' riscv: Remove unused GENERATING_ASM_OFFSETS riscv: Remove duplicated GET_RM scsi: ufs: core: Fix another deadlock during RTC update cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices() cxl/acpi: Ensure ports ready at cxl_acpi_probe() return sched/numa: Fix the potential null pointer dereference in task_numa_work() posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP tpm: Return tpm2_sessions_init() when null key creation fails tpm: Rollback tpm2_load_null() drm/amd/pm: Vangogh: Fix kernel memory out of bounds write drm/amdgpu/smu13: fix profile reporting tpm: Lazily flush the auth session mptcp: init: protect sched with rcu_read_lock mei: use kvmalloc for read buffer fork: do not invoke uffd on fork if error occurs fork: only invoke khugepaged, ksm hooks if no error mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves x86/traps: Enable UBSAN traps on x86 x86/traps: move kmsan check after instrumentation_begin ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow resource,kexec: walk_system_ram_res_rev must retain resource flags mctp i2c: handle NULL header address btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids() accel/ivpu: Fix NOC firewall interrupt handling xfs: fix finding a last resort AG in xfs_filestream_pick_ag ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 nvmet-auth: assign dh_key to NULL after kfree_sensitive nvme: re-fix error-handling for io_uring nvme-passthrough kasan: remove vmalloc_percpu test drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic() drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic() drm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic() drm/xe: Fix register definition order in xe_regs.h drm/xe: Kill regs/xe_sriov_regs.h drm/xe: Add mmio read before GGTT invalidate drm/xe: Don't short circuit TDR on jobs not started io_uring/rw: fix missing NOWAIT check for O_DIRECT start write btrfs: fix extent map merging not happening for adjacent extents btrfs: fix defrag not merging contiguous extents due to merged extent maps gpiolib: fix debugfs newline separators gpiolib: fix debugfs dangling chip separator vmscan,migrate: fix page count imbalance on node stats when demoting pages mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes Input: fix regression when re-registering input handlers mm: multi-gen LRU: ignore non-leaf pmd_young for force_scan=true mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats mm: shrink skip folio mapped by an exiting process mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify() riscv: dts: starfive: Update ethernet phy0 delay parameter values for Star64 riscv: dts: starfive: disable unused csi/camss nodes arm64: dts: qcom: msm8939: revert use of APCS mbox for RPM arm64: dts: qcom: x1e80100-yoga-slim7x: fix nvme regulator boot glitch arm64: dts: qcom: x1e80100: Fix up BAR spaces arm64: dts: qcom: x1e80100-vivobook-s15: fix nvme regulator boot glitch arm64: dts: qcom: x1e80100: fix PCIe4 interconnect arm64: dts: qcom: x1e80100-qcp: fix nvme regulator boot glitch arm64: dts: qcom: x1e80100-crd: fix nvme regulator boot glitch arm64: dts: imx8ulp: correct the flexspi compatible string arm64: dts: qcom: x1e80100: Add Broadcast_AND region in LLCC block arm64: dts: qcom: x1e80100: fix PCIe4 and PCIe6a PHY clocks drm/xe/xe2hpg: Add Wa_15016589081 drm/amdgpu/swsmu: fix ordering for setting workload_mask drm/amdgpu/swsmu: default to fullscreen 3D profile for dGPUs fs/ntfs3: Sequential field availability check in mi_enum_attr() drm/amdgpu: handle default profile on on devices without fullscreen 3D MIPS: export __cmpxchg_small() RISC-V: disallow gcc + rust builds UBUNTU: [Config] updateconfigs after disabling rust with gcc on riscv rcu/kvfree: Add kvfree_rcu_barrier() API lib: alloc_tag_module_unload must wait for pending kfree_rcu calls rcu/kvfree: Refactor kvfree_rcu_queue_batch() Linux 6.11.7 UBUNTU: Upstream stable to v6.11.7 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2091629/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp