** Changed in: linux (Ubuntu Noble) Status: In Progress => Fix Committed
-- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2097301 Title: Noble update: upstream stable patchset 2025-02-03 Status in linux package in Ubuntu: Invalid Status in linux source package in Noble: Fix Committed Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2025-02-03 Ported from the following upstream stable releases: v6.6.56, v6.11.1, v6.11.2, v6.11.3, v6.11.4 from git://git.kernel.org/ Revert "perf callchain: Fix stitch LBR memory leaks" ASoC: amd: acp: add ZSC control register programming sequence virtio: rename virtio_config_enabled to virtio_config_core_enabled virtio: allow driver to disable the configure change notification virtio-net: synchronize operstate with admin state on up/down virtio-net: synchronize probe with ndo_set_features wifi: rtw89: limit the PPDU length for VHT rate to 0x40000 af_unix: Don't call skb_get() for OOB skb. af_unix: Remove single nest in manage_oob(). af_unix: Rename unlinked_skb in manage_oob(). af_unix: Move spin_lock() in manage_oob(). af_unix: Don't return OOB skb in manage_oob(). iommu/amd: Move allocation of the top table into v1_alloc_pgtable iommu/amd: Set the pgsize_bitmap correctly drm/xe: Move and export xe_hw_engine lookup. drm/msm/dp: rename wide_bus_en to wide_bus_supported drm/msm/dp: enable widebus on all relevant chipsets bpf, arm64: Fix tailcall hierarchy libbpf: Don't take direct pointers into BTF data from st_ops s390/entry: Move early program check handler to entry.S selftests/bpf: fix to avoid __msg tag de-duplication by clang libbpf: Ensure new BTF objects inherit input endianness PCI: dwc: ep: Rename dw_pcie_ep_exit() to dw_pcie_ep_deinit() PCI: qcom-ep: Enable controller resources like PHY only after refclk is available net: ravb: Fix maximum TX frame size for GbEth devices ravb: Make it clear the information relates to maximum frame size net: ravb: Fix R-Car RX frame size limit netfilter: nf_tables: missing objects with no memcg accounting PCI: dra7xx: Fix error handling when IRQ request fails in probe KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) intel_idle: fix ACPI _CST matching for newer Xeon platforms wifi: mt76: mt7925: fix a potential association failure upon resuming f2fs: fix to wait dio completion cifs: Remove intermediate object of failed create reparse call drm/amd/display: Disable replay if VRR capability is false drm/amd/display: Fix VRR cannot enable l2tp: free sessions using rcu net: skbuff: sprinkle more __GFP_NOWARN on ingress allocs nvme: fix metadata handling in nvme-passthrough wifi: wilc1000: Do not operate uninitialized hardware during suspend/resume cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value x86/apic: Remove logical destination mode for 64-bit pmdomain: core: Use dev_name() instead of kobject_get_path() in debugfs drm/amd/display: Check null pointers before used drm/amd/display: Check null pointers before multiple uses drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe drm/xe: Name and document Wa_14019789679 drm/xe: Add timeout to preempt fences drm/amd/display: Deallocate DML memory if allocation fails drm/amd/display: Fix possible overflow in integer multiplication drm/amd/display: Check stream_status before it is used ext4: filesystems without casefold feature cannot be mounted with siphash ext4: fix error message when rejecting the default hash power: supply: Drop use_cnt check from power_supply_property_is_writeable() ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8 drm/xe: Generate oob before compiling anything clk: qcom: gcc-sc8180x: Register QUPv3 RCGs for DFS on sc8180x drm/amd/display: Restore Optimized pbn Value if Failed to Disable DSC drm/xe/vm: move xa_alloc to prevent UAF Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link" pmdomain: core: Reduce debug summary table width unicode: Don't special case ignorable code points fs/ntfs3: Do not call file_modified if collapse range failed fs/ntfs3: Optimize large writes into sparse file fs/ntfs3: Fix sparse warning in ni_fiemap fs/ntfs3: Refactor enum_rstbl to suppress static checker virtio_console: fix misc probe bugs ntfs3: Change to non-blocking allocation in ntfs_d_hash zram: free secondary algorithms names bpf: Call the missed btf_record_free() when map creation fails selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test bpf: Check percpu map value size first s390/facility: Disable compile time optimization for decompressor code s390/mm: Add cond_resched() to cmm_alloc/free_pages() bpf, x64: Fix a jit convergence issue ext4: don't set SB_RDONLY after filesystem errors ext4: nested locking for xattr inode s390/cpum_sf: Remove WARN_ON_ONCE statements bpf: Prevent tail call between progs attached to different hooks ktest.pl: Avoid false positives with grub2 skip regex RDMA/mad: Improve handling of timed out WRs of mad agent soundwire: intel_bus_common: enable interrupts before exiting reset PCI: Add function 0 DMA alias quirk for Glenfly Arise chip RDMA/rtrs-srv: Avoid null pointer deref during path establishment clk: bcm: bcm53573: fix OF node leak in init PCI: Add ACS quirk for Qualcomm SA8775P i2c: i801: Use a different adapter-name for IDF adapters PCI: Mark Creative Labs EMU20k2 INTx masking as broken i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t io_uring: check if we need to reschedule during overflow flush ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict mfd: intel-lpss: Add Intel Arrow Lake-H LPSS PCI IDs mfd: intel-lpss: Rename SPI intel_lpss_platform_info structs mfd: intel-lpss: Add Intel Panther Lake LPSS PCI IDs riscv: Omit optimized string routines when using KASAN riscv: avoid Imbalance in RAS RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults PCI: qcom: Disable mirroring of DBI and iATU register space in BAR region PCI: endpoint: Assign PCI domain number for endpoint controllers soundwire: cadence: re-check Peripheral status with delayed_work riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put() remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D serial: protect uart_port_dtr_rts() in uart_shutdown() too usb: typec: tipd: Free IRQ only if it was requested before usb: chipidea: udc: enable suspend interrupt after usb reset usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario xhci: dbc: Fix STALL transfer event handling usb: host: xhci-plat: Parse xhci-missing_cas_quirk and apply quirk comedi: ni_routing: tools: Check when the file could not be opened LoongArch: Fix memleak in pci_acpi_scan_root() netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n virtio_pmem: Check device status before requesting flush tools/iio: Add memory allocation failure check for trigger_name staging: vme_user: added bound check to geoid usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c driver core: bus: Fix double free in driver API bus_register() driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd() scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to KERN_WARNING drm/xe/oa: Fix overflow in oa batch buffer drm/amd/display: Check null pointer before dereferencing se fbcon: Fix a NULL pointer dereference issue in fbcon_putcs smb: client: fix UAF in async decryption fbdev: sisfb: Fix strbuf array overflow NFSD: Mark filecache "down" if init fails nfsd: nfsd_destroy_serv() must call svc_destroy() even if nfsd_startup_net() failed ice: set correct dst VSI in only LAN filters ice: clear port vlan config during reset ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins ice: fix VLAN replay after reset SUNRPC: Fix integer overflow in decode_rc_list() NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() net: phy: dp83869: fix memory corruption when enabling fiber tcp: fix to allow timestamp undo if no retransmits were sent tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out rxrpc: Fix uninitialised variable in rxrpc_send_data() netfilter: br_netfilter: fix panic with metadata_dst skb selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change Bluetooth: btusb: Don't fail external suspend requests net: phy: bcm84881: Fix some error handling paths thermal: intel: int340x: processor: Fix warning during module unload Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled" net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo() net: dsa: b53: fix jumbo frame mtu check net: dsa: b53: fix max MTU for 1g switches net: dsa: b53: fix max MTU for BCM5325/BCM5365 net: dsa: b53: allow lower MTUs on BCM5325/5365 net: dsa: b53: fix jumbo frames on 10/100 ports drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device nouveau/dmem: Fix privileged error in copy engine channel gpio: aspeed: Add the flush write to ensure the write complete. gpio: aspeed: Use devm_clk api to manage clock source powercap: intel_rapl_tpmi: Ignore minor version change ice: Fix netif_is_ice() in Safe Mode ice: Flush FDB entries before reset ice: Fix increasing MSI-X on VF i40e: Fix macvlan leak by synchronizing access to mac_filter_hash igb: Do not bring the device up after non-fatal error e1000e: change I219 (19) devices to ADP net/sched: accept TCA_STAB only for root qdisc net: ibm: emac: mal: fix wrong goto btrfs: zoned: fix missing RCU locking in error message when loading zone info sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start netfilter: xtables: avoid NFPROTO_UNSPEC where needed netfilter: fib: check correct rtable in vrf setups net: ibm: emac: mal: add dcr_unmap to _remove net: dsa: refuse cross-chip mirroring operations net: do not delay dst_entries_add() in dst_release() rtnetlink: Add bulk registration helpers for rtnetlink message handlers. vxlan: Handle error of rtnl_register_module(). bridge: Handle error of rtnl_register_module(). mctp: Handle error of rtnl_register_module(). mpls: Handle error of rtnl_register_module(). phonet: Handle error of rtnl_register_module(). ppp: fix ppp_async_encode() illegal access slip: make slhc_remember() more robust against malicious packets rcu/nocb: Fix rcuog wake-up from offline softirq x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h HID: multitouch: Add support for lenovo Y9000P Touchpad hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature hwmon: (tmp513) Add missing dependency on REGMAP_I2C hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C hwmon: (adm9240) Add missing dependency on REGMAP_I2C hwmon: (adt7470) Add missing dependency on REGMAP_I2C hwmon: (ltc2991) Add missing dependency on REGMAP_I2C HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() HID: plantronics: Workaround for an unexcepted opposite volume key Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant" usb: dwc3: core: Stop processing of pending events if controller is halted usb: xhci: Fix problem with xhci resume from suspend usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip usb: dwc3: re-enable runtime PM after failed resume usb: gadget: core: force synchronous registration hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma ACPI: resource: Make Asus ExpertBook B2402 matches cover more models ACPI: resource: Make Asus ExpertBook B2502 matches cover more models drm/v3d: Stop the active perfmon before being destroyed drm/vc4: Stop the active perfmon before being destroyed drm/amdkfd: Fix an eviction fence leak drm/amd/display: fix hibernate entry for DCN35+ drm/xe/guc_submit: fix xa_store() error checking drm/i915/hdcp: fix connector refcounting drm/xe/ct: prevent UAF in send_recv() drm/xe/ct: fix xa_store() error checking Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync thermal: core: Reference count the zone in thermal_zone_get_by_id() thermal: core: Free tzp copy along with the thermal zone scsi: wd33c93: Don't use stale scsi_pointer value scsi: fnic: Move flush_work initialization out of if block scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb() mmc: sdhci-of-dwcmshc: Prevent stale command interrupt handling mptcp: fallback when MPTCP opts are dropped after 1st data ata: libata: avoid superfluous disk spin down + spin up during hibernation OPP: fix error code in dev_pm_opp_set_config() net: explicitly clear the sk pointer, when pf->create fails net: Fix an unsafe loop on the list net: dsa: lan9303: ensure chip reset and wait for READY status net: phy: Remove LED entry from LEDs list on unregister mptcp: handle consistently DSS corruption mptcp: pm: do not remove closing subflows device-dax: correct pgoff align in dax_set_mapping() ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins() ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count() nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error powercap: intel_rapl_tpmi: Fix bogus register reading selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test selftests/rseq: Fix mm_cid test failure btrfs: split remaining space to discard in chunks btrfs: add cancellation points to trim loops kthread: unpark only parked kthread fs/proc/kcore.c: allow translation of physical memory addresses secretmem: disable memfd_secret() if arch cannot set direct map io_uring/rw: fix cflags posting for single issue multishot read UBUNTU: Upstream stable to v6.6.56, v6.11.1, v6.11.2, v6.11.3, v6.11.4 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2097301/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp