Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-02-27
Ported from the following upstream stable releases:
v6.6.61, v6.11.8
from git://git.kernel.org/
arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
arm64: dts: rockchip: Remove undocumented supports-emmc property
arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
arm64: dts: imx8mp: correct sdhc ipg clk
firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
ARM: dts: rockchip: fix rk3036 acodec node
ARM: dts: rockchip: drop grf reference from rk3036 hdmi
ARM: dts: rockchip: Fix the spi controller on rk3036
ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
HID: core: zero-initialize the report buffer
platform/x86/amd/pmc: Detect when STB is not available
sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
NFSv3: only use NFS timeout for MOUNT when protocols are compatible
nfs: avoid i_lock contention in nfs_clear_invalid_mapping
security/keys: fix slab-out-of-bounds in key_task_permission
regulator: rtq2208: Fix uninitialized use of regulator_config
net: enetc: set MAC address to the VF net_device
dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
sctp: properly validate chunk size in sctp_sf_ootb()
net: enetc: allocate vf_state during PF probes
can: c_can: fix {rx,tx}_errors statistics
can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails
ice: change q_index variable type to s16 to store -1 value
i40e: fix race condition by adding filter's intermediate sync state
e1000e: Remove Meteor Lake SMBUS workarounds
net: hns3: fix kernel crash when uninstalling driver
net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
netfilter: nf_tables: wait for rcu grace period on net_device removal
netfilter: nf_tables: do not defer rule destruction via call_rcu
virtio_net: Add hash_key_length check
net: arc: fix the device for dma_map_single/dma_unmap_single
net: arc: rockchip: fix emac mdio node support
rxrpc: Fix missing locking causing hanging calls
drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
media: stb0899_algo: initialize cfr before using it
media: dvbdev: prevent the risk of out of memory access
media: dvb_frontend: don't play tricks with underflow values
media: adv7604: prevent underflow condition when reporting colorspace
scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
tools/lib/thermal: Fix sampling handler context ptr
thermal/of: support thermal zones w/o trips subnode
ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
media: ar0521: don't overflow when checking PLL values
media: s5p-jpeg: prevent buffer overflows
media: cx24116: prevent overflows on SNR calculus
media: pulse8-cec: fix data timestamp at pulse8_setup()
media: v4l2-tpg: prevent the risk of a division by zero
media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when
switching CAN modes
ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
ksmbd: check outstanding simultaneous SMB operations
ksmbd: count all requests in req_running counter
ksmbd: fix broken transfers when exceeding max simultaneous operations
ksmbd: Fix the missing xa_store error check
ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
pwm: imx-tpm: Use correct MODULO value for EPWM mode
rpmsg: glink: Handle rejected intent request better
drm/amdgpu: Adjust debugfs eviction and IB access permissions
drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
drm/amdgpu: Adjust debugfs register access permissions
drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
thermal/drivers/qcom/lmh: Remove false lockdep backtrace
dm cache: correct the number of origin blocks to match the target length
dm cache: fix flushing uninitialized delayed_work on cache_ctr error
dm cache: fix out-of-bounds access to the dirty bitset when resizing
dm cache: optimize dirty bit checking with find_next_bit when resizing
dm cache: fix potential out-of-bounds access on the first resume
dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
nfs: Fix KMSAN warning in decode_getfattr_attrs()
net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
net: vertexcom: mse102x: Fix possible double free of TX skb
mptcp: use sock_kfree_s instead of kfree
arm64/sve: Discard stale CPU state when handling SVE traps
arm64: Kconfig: Make SME depend on BROKEN for now
UBUNTU: [Config] updateconfigs for ARM64_SME
arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
btrfs: reinitialize delayed ref list after deleting it from the list
Revert "wifi: mac80211: fix RCU list iterations"
media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in
uvc_parse_format
filemap: Fix bounds checking in filemap_read()
i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
signal: restore the override_rlimit logic
usb: musb: sunxi: Fix accessing an released usb phy
usb: dwc3: fix fault at system suspend if device was already runtime suspended
usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
USB: serial: io_edgeport: fix use after free in debug printk
USB: serial: qcserial: add support for Sierra Wireless EM86xx
USB: serial: option: add Fibocom FG132 0x0112 composition
USB: serial: option: add Quectel RG650V
irqchip/gic-v3: Force propagation of the active state with a read-back
ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
ucounts: fix counter leak in inc_rlimit_get_ucounts()
ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
arm64: dts: rockchip: Designate Turing RK1's system power controller
EDAC/qcom: Make irq configuration optional
arm64: dts: rockchip: Drop regulator-init-microvolt from two boards
net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd tracepoint
net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts
virtio_net: Sync rss config to device when virtnet_probe
media: dvb-core: add missing buffer index check
media: mgb4: protect driver against spectre
media: av7110: fix a spectre vulnerability
media: vivid: fix buffer overwrite when using > 32 buffers
drm/xe: Fix possible exec queue leak in exec IOCTL
drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL
drm/xe: Set mask bits for CCS_MODE register
tpm: Lock TPM chip in tpm_pm_suspend() first
drm/amd/display: Fix brightness level not retained over reboot
drm/imagination: Add a per-file PVR context list
drm/imagination: Break an object reference loop
mptcp: no admin perm to list endpoints
scsi: ufs: core: Start the RTC update work later
KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before running it to avoid
spurious interrupts
idpf: avoid vport access in idpf_get_link_ksettings
btrfs: fix the length of reserved qgroup to free
btrfs: fix per-subvolume RO/RW flags with new mount API
clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
clk: qcom: clk-alpha-pll: Fix pll post div mask when width is not set
objpool: fix to make percpu slot allocation more robust
mm/damon/core: avoid overflow in damon_feed_loop_next_input()
mm/damon/core: handle zero {aggregation,ops_update} intervals
mm/damon/core: handle zero schemes apply interval
mm/mlock: set the correct prev on failure
clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks
staging: vchiq_arm: Get the rid off struct vchiq_2835_state
staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation
drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
drm/xe: Move LNL scheduling WA to xe_device.h
drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout
drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout
xtensa: Emulate one-byte cmpxchg
UBUNTU: Upstream stable to v6.6.61, v6.11.8
** Affects: linux (Ubuntu)
Importance: Undecided
Status: New
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-02-27
+
+ Ported from the following upstream stable releases:
+ v6.6.61, v6.11.8
+
from git://git.kernel.org/
+
+ arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
+ arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
+ arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
+ arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
+ arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
+ arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
+ arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
+ arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
+ arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
+ arm64: dts: rockchip: Remove undocumented supports-emmc property
+ arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
+ arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
+ arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
+ arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
+ arm64: dts: imx8mp: correct sdhc ipg clk
+ firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
+ arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
+ ARM: dts: rockchip: fix rk3036 acodec node
+ ARM: dts: rockchip: drop grf reference from rk3036 hdmi
+ ARM: dts: rockchip: Fix the spi controller on rk3036
+ ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
+ arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
+ HID: core: zero-initialize the report buffer
+ platform/x86/amd/pmc: Detect when STB is not available
+ sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
+ NFSv3: only use NFS timeout for MOUNT when protocols are compatible
+ nfs: avoid i_lock contention in nfs_clear_invalid_mapping
+ security/keys: fix slab-out-of-bounds in key_task_permission
+ regulator: rtq2208: Fix uninitialized use of regulator_config
+ net: enetc: set MAC address to the VF net_device
+ dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
+ sctp: properly validate chunk size in sctp_sf_ootb()
+ net: enetc: allocate vf_state during PF probes
+ can: c_can: fix {rx,tx}_errors statistics
+ can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails
+ ice: change q_index variable type to s16 to store -1 value
+ i40e: fix race condition by adding filter's intermediate sync state
+ e1000e: Remove Meteor Lake SMBUS workarounds
+ net: hns3: fix kernel crash when uninstalling driver
+ net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
+ net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
+ netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
+ netfilter: nf_tables: wait for rcu grace period on net_device removal
+ netfilter: nf_tables: do not defer rule destruction via call_rcu
+ virtio_net: Add hash_key_length check
+ net: arc: fix the device for dma_map_single/dma_unmap_single
+ net: arc: rockchip: fix emac mdio node support
+ rxrpc: Fix missing locking causing hanging calls
+ drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
+ Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
+ media: stb0899_algo: initialize cfr before using it
+ media: dvbdev: prevent the risk of out of memory access
+ media: dvb_frontend: don't play tricks with underflow values
+ media: adv7604: prevent underflow condition when reporting colorspace
+ scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
+ ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
+ tools/lib/thermal: Fix sampling handler context ptr
+ thermal/of: support thermal zones w/o trips subnode
+ ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
+ ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
+ media: ar0521: don't overflow when checking PLL values
+ media: s5p-jpeg: prevent buffer overflows
+ media: cx24116: prevent overflows on SNR calculus
+ media: pulse8-cec: fix data timestamp at pulse8_setup()
+ media: v4l2-tpg: prevent the risk of a division by zero
+ media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
+ can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
+ can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
+ can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when
switching CAN modes
+ ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
+ ksmbd: check outstanding simultaneous SMB operations
+ ksmbd: count all requests in req_running counter
+ ksmbd: fix broken transfers when exceeding max simultaneous operations
+ ksmbd: Fix the missing xa_store error check
+ ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
+ pwm: imx-tpm: Use correct MODULO value for EPWM mode
+ rpmsg: glink: Handle rejected intent request better
+ drm/amdgpu: Adjust debugfs eviction and IB access permissions
+ drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
+ drm/amdgpu: Adjust debugfs register access permissions
+ drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
+ drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
+ thermal/drivers/qcom/lmh: Remove false lockdep backtrace
+ dm cache: correct the number of origin blocks to match the target length
+ dm cache: fix flushing uninitialized delayed_work on cache_ctr error
+ dm cache: fix out-of-bounds access to the dirty bitset when resizing
+ dm cache: optimize dirty bit checking with find_next_bit when resizing
+ dm cache: fix potential out-of-bounds access on the first resume
+ dm-unstriped: cast an operand to sector_t to prevent potential uint32_t
overflow
+ ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
+ nfs: Fix KMSAN warning in decode_getfattr_attrs()
+ net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
+ net: vertexcom: mse102x: Fix possible double free of TX skb
+ mptcp: use sock_kfree_s instead of kfree
+ arm64/sve: Discard stale CPU state when handling SVE traps
+ arm64: Kconfig: Make SME depend on BROKEN for now
+ UBUNTU: [Config] updateconfigs for ARM64_SME
+ arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
+ btrfs: reinitialize delayed ref list after deleting it from the list
+ Revert "wifi: mac80211: fix RCU list iterations"
+ media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in
uvc_parse_format
+ filemap: Fix bounds checking in filemap_read()
+ i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
+ fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
+ signal: restore the override_rlimit logic
+ usb: musb: sunxi: Fix accessing an released usb phy
+ usb: dwc3: fix fault at system suspend if device was already runtime suspended
+ usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
+ usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
+ USB: serial: io_edgeport: fix use after free in debug printk
+ USB: serial: qcserial: add support for Sierra Wireless EM86xx
+ USB: serial: option: add Fibocom FG132 0x0112 composition
+ USB: serial: option: add Quectel RG650V
+ irqchip/gic-v3: Force propagation of the active state with a read-back
+ ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
+ ucounts: fix counter leak in inc_rlimit_get_ucounts()
+ ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
+ arm64: dts: rockchip: Designate Turing RK1's system power controller
+ EDAC/qcom: Make irq configuration optional
+ arm64: dts: rockchip: Drop regulator-init-microvolt from two boards
+ net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd tracepoint
+ net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts
+ virtio_net: Sync rss config to device when virtnet_probe
+ media: dvb-core: add missing buffer index check
+ media: mgb4: protect driver against spectre
+ media: av7110: fix a spectre vulnerability
+ media: vivid: fix buffer overwrite when using > 32 buffers
+ drm/xe: Fix possible exec queue leak in exec IOCTL
+ drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL
+ drm/xe: Set mask bits for CCS_MODE register
+ tpm: Lock TPM chip in tpm_pm_suspend() first
+ drm/amd/display: Fix brightness level not retained over reboot
+ drm/imagination: Add a per-file PVR context list
+ drm/imagination: Break an object reference loop
+ mptcp: no admin perm to list endpoints
+ scsi: ufs: core: Start the RTC update work later
+ KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before running it to avoid
spurious interrupts
+ idpf: avoid vport access in idpf_get_link_ksettings
+ btrfs: fix the length of reserved qgroup to free
+ btrfs: fix per-subvolume RO/RW flags with new mount API
+ clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
+ clk: qcom: clk-alpha-pll: Fix pll post div mask when width is not set
+ objpool: fix to make percpu slot allocation more robust
+ mm/damon/core: avoid overflow in damon_feed_loop_next_input()
+ mm/damon/core: handle zero {aggregation,ops_update} intervals
+ mm/damon/core: handle zero schemes apply interval
+ mm/mlock: set the correct prev on failure
+ clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks
+ staging: vchiq_arm: Get the rid off struct vchiq_2835_state
+ staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation
+ drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
+ drm/xe: Move LNL scheduling WA to xe_device.h
+ drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout
+ drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout
+ xtensa: Emulate one-byte cmpxchg
+ UBUNTU: Upstream stable to v6.6.61, v6.11.8
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2100292
Title:
Noble update: upstream stable patchset 2025-02-27
Status in linux package in Ubuntu:
New
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-02-27
Ported from the following upstream stable releases:
v6.6.61, v6.11.8
from git://git.kernel.org/
arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
arm64: dts: rockchip: Remove undocumented supports-emmc property
arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
arm64: dts: imx8mp: correct sdhc ipg clk
firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
ARM: dts: rockchip: fix rk3036 acodec node
ARM: dts: rockchip: drop grf reference from rk3036 hdmi
ARM: dts: rockchip: Fix the spi controller on rk3036
ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
HID: core: zero-initialize the report buffer
platform/x86/amd/pmc: Detect when STB is not available
sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
NFSv3: only use NFS timeout for MOUNT when protocols are compatible
nfs: avoid i_lock contention in nfs_clear_invalid_mapping
security/keys: fix slab-out-of-bounds in key_task_permission
regulator: rtq2208: Fix uninitialized use of regulator_config
net: enetc: set MAC address to the VF net_device
dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
sctp: properly validate chunk size in sctp_sf_ootb()
net: enetc: allocate vf_state during PF probes
can: c_can: fix {rx,tx}_errors statistics
can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails
ice: change q_index variable type to s16 to store -1 value
i40e: fix race condition by adding filter's intermediate sync state
e1000e: Remove Meteor Lake SMBUS workarounds
net: hns3: fix kernel crash when uninstalling driver
net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
netfilter: nf_tables: wait for rcu grace period on net_device removal
netfilter: nf_tables: do not defer rule destruction via call_rcu
virtio_net: Add hash_key_length check
net: arc: fix the device for dma_map_single/dma_unmap_single
net: arc: rockchip: fix emac mdio node support
rxrpc: Fix missing locking causing hanging calls
drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
media: stb0899_algo: initialize cfr before using it
media: dvbdev: prevent the risk of out of memory access
media: dvb_frontend: don't play tricks with underflow values
media: adv7604: prevent underflow condition when reporting colorspace
scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
tools/lib/thermal: Fix sampling handler context ptr
thermal/of: support thermal zones w/o trips subnode
ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
media: ar0521: don't overflow when checking PLL values
media: s5p-jpeg: prevent buffer overflows
media: cx24116: prevent overflows on SNR calculus
media: pulse8-cec: fix data timestamp at pulse8_setup()
media: v4l2-tpg: prevent the risk of a division by zero
media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when
switching CAN modes
ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
ksmbd: check outstanding simultaneous SMB operations
ksmbd: count all requests in req_running counter
ksmbd: fix broken transfers when exceeding max simultaneous operations
ksmbd: Fix the missing xa_store error check
ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
pwm: imx-tpm: Use correct MODULO value for EPWM mode
rpmsg: glink: Handle rejected intent request better
drm/amdgpu: Adjust debugfs eviction and IB access permissions
drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
drm/amdgpu: Adjust debugfs register access permissions
drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
thermal/drivers/qcom/lmh: Remove false lockdep backtrace
dm cache: correct the number of origin blocks to match the target length
dm cache: fix flushing uninitialized delayed_work on cache_ctr error
dm cache: fix out-of-bounds access to the dirty bitset when resizing
dm cache: optimize dirty bit checking with find_next_bit when resizing
dm cache: fix potential out-of-bounds access on the first resume
dm-unstriped: cast an operand to sector_t to prevent potential uint32_t
overflow
ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
nfs: Fix KMSAN warning in decode_getfattr_attrs()
net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
net: vertexcom: mse102x: Fix possible double free of TX skb
mptcp: use sock_kfree_s instead of kfree
arm64/sve: Discard stale CPU state when handling SVE traps
arm64: Kconfig: Make SME depend on BROKEN for now
UBUNTU: [Config] updateconfigs for ARM64_SME
arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
btrfs: reinitialize delayed ref list after deleting it from the list
Revert "wifi: mac80211: fix RCU list iterations"
media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in
uvc_parse_format
filemap: Fix bounds checking in filemap_read()
i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
signal: restore the override_rlimit logic
usb: musb: sunxi: Fix accessing an released usb phy
usb: dwc3: fix fault at system suspend if device was already runtime suspended
usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
USB: serial: io_edgeport: fix use after free in debug printk
USB: serial: qcserial: add support for Sierra Wireless EM86xx
USB: serial: option: add Fibocom FG132 0x0112 composition
USB: serial: option: add Quectel RG650V
irqchip/gic-v3: Force propagation of the active state with a read-back
ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
ucounts: fix counter leak in inc_rlimit_get_ucounts()
ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
arm64: dts: rockchip: Designate Turing RK1's system power controller
EDAC/qcom: Make irq configuration optional
arm64: dts: rockchip: Drop regulator-init-microvolt from two boards
net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd tracepoint
net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts
virtio_net: Sync rss config to device when virtnet_probe
media: dvb-core: add missing buffer index check
media: mgb4: protect driver against spectre
media: av7110: fix a spectre vulnerability
media: vivid: fix buffer overwrite when using > 32 buffers
drm/xe: Fix possible exec queue leak in exec IOCTL
drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL
drm/xe: Set mask bits for CCS_MODE register
tpm: Lock TPM chip in tpm_pm_suspend() first
drm/amd/display: Fix brightness level not retained over reboot
drm/imagination: Add a per-file PVR context list
drm/imagination: Break an object reference loop
mptcp: no admin perm to list endpoints
scsi: ufs: core: Start the RTC update work later
KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before running it to avoid
spurious interrupts
idpf: avoid vport access in idpf_get_link_ksettings
btrfs: fix the length of reserved qgroup to free
btrfs: fix per-subvolume RO/RW flags with new mount API
clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
clk: qcom: clk-alpha-pll: Fix pll post div mask when width is not set
objpool: fix to make percpu slot allocation more robust
mm/damon/core: avoid overflow in damon_feed_loop_next_input()
mm/damon/core: handle zero {aggregation,ops_update} intervals
mm/damon/core: handle zero schemes apply interval
mm/mlock: set the correct prev on failure
clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks
staging: vchiq_arm: Get the rid off struct vchiq_2835_state
staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation
drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
drm/xe: Move LNL scheduling WA to xe_device.h
drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout
drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout
xtensa: Emulate one-byte cmpxchg
UBUNTU: Upstream stable to v6.6.61, v6.11.8
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2100292/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
