** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Oracular)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Oracular)
Status: New => In Progress
** Changed in: linux (Ubuntu Oracular)
Assignee: (unassigned) => Noah Wager (nwager)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v6.11.6 upstream stable release
from git://git.kernel.org/
-
+ bpf: Use raw_spinlock_t in ringbuf
+ iio: accel: bma400: Fix uninitialized variable field_value in tap event
handling.
+ reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC
+ bpf: sync_linked_regs() must preserve subreg_def
+ bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
+ irqchip/riscv-imsic: Fix output text of base address
+ bpf: devmap: provide rxq after redirect
+ cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
+ lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
+ bpf: Fix memory leak in bpf_core_apply
+ RDMA/bnxt_re: Fix a possible memory leak
+ RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
+ RDMA/bnxt_re: Add a check for memory allocation
+ x86/resctrl: Avoid overflow in MB settings in bw_validate()
+ ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
+ clk: rockchip: fix finding of maximum clock ID
+ bpf: Check the remaining info_cnt before repeating btf fields
+ bpf: fix unpopulated name_len field in perf_event link info
+ selftests/bpf: fix perf_event link info name_len assertion
+ riscv, bpf: Fix possible infinite tailcall when CONFIG_CFI_CLANG is enabled
+ s390/pci: Handle PCI error codes other than 0x3a
+ bpf: fix kfunc btf caching for modules
+ iio: frequency: {admv4420,adrf6780}: format Kconfig entries
+ iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
+ drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
+ selftests/bpf: Fix cross-compiling urandom_read
+ bpf: Fix unpopulated path_size when uprobe_multi fields unset
+ sched/core: Disable page allocation in task_tick_mm_cid()
+ ALSA: hda/cs8409: Fix possible NULL dereference
+ firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
+ RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
+ RDMA/irdma: Fix misspelling of "accept*"
+ RDMA/srpt: Make slab cache names unique
+ elevator: do not request_module if elevator exists
+ elevator: Remove argument from elevator_find_get
+ ipv4: give an IPv4 dev to blackhole_netdev
+ net: sparx5: fix source port register when mirroring
+ RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
+ RDMA/bnxt_re: Fix out of bound check
+ RDMA/bnxt_re: Fix incorrect dereference of srq in async event
+ RDMA/bnxt_re: Return more meaningful error
+ RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop
+ RDMA/bnxt_re: Get the toggle bits from SRQ events
+ RDMA/bnxt_re: Change the sequence of updating the CQ toggle value
+ RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
+ RDMA/bnxt_re: Fix the GID table length
+ accel/qaic: Fix the for loop used to walk SG table
+ drm/panel: himax-hx83102: Adjust power and gamma to optimize brightness
+ drm/msm/dpu: make sure phys resources are properly initialized
+ drm/msm/dpu: move CRTC resource assignment to dpu_encoder_virt_atomic_check
+ drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
+ drm/msm/dsi: improve/fix dsc pclk calculation
+ drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
+ drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
+ drm/msm: Allocate memory for disp snapshot with kvzalloc()
+ firmware: arm_scmi: Queue in scmi layer for mailbox implementation
+ net/smc: Fix memory leak when using percpu refs
+ [PATCH} hwmon: (jc42) Properly detect TSE2004-compliant devices again
+ net: usb: usbnet: fix race in probe failure
+ net: stmmac: dwmac-tegra: Fix link bring-up sequence
+ octeontx2-af: Fix potential integer overflows on integer shifts
+ ring-buffer: Fix reader locking when changing the sub buffer order
+ drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
+ macsec: don't increment counters for an unrelated SA
+ netdevsim: use cond_resched() in nsim_dev_trap_report_work()
+ net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
+ net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
+ net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
+ net: ethernet: rtsn: fix potential memory leak in rtsn_start_xmit()
+ bpf: Fix truncation bug in coerce_reg_to_size_sx()
+ net: systemport: fix potential memory leak in bcm_sysport_xmit()
+ irqchip/renesas-rzg2l: Fix missing put_device
+ drm/msm/dpu: Don't always set merge_3d pending flush
+ drm/msm/dpu: don't always program merge_3d block
+ net: bcmasp: fix potential memory leak in bcmasp_xmit()
+ drm/msm/a6xx+: Insert a fence wait before SMMU table update
+ tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
+ net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
+ genetlink: hold RCU in genlmsg_mcast()
+ ravb: Remove setting of RX software timestamp
+ net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
+ net: dsa: vsc73xx: fix reception from VLAN-unaware bridges
+ scsi: target: core: Fix null-ptr-deref in target_alloc_device()
+ smb: client: fix possible double free in smb2_set_ea()
+ smb: client: fix OOBs when building SMB2_IOCTL request
+ usb: typec: altmode should keep reference to parent
+ s390: Initialize psw mask in perf_arch_fetch_caller_regs()
+ drm/xe: fix unbalanced rpm put() with fence_fini()
+ drm/xe: fix unbalanced rpm put() with declare_wedged()
+ drm/xe: Take job list lock in xe_sched_add_pending_job
+ drm/xe: Don't free job in TDR
+ drm/xe: Use bookkeep slots for external BO's in exec IOCTL
+ bpf: Fix link info netfilter flags to populate defrag flag
+ Bluetooth: bnep: fix wild-memory-access in proto_unregister
+ vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
+ net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init
+ net/mlx5: Check for invalid vector index on EQ creation
+ net/mlx5: Fix command bitmask initialization
+ net/mlx5: Unregister notifier on eswitch init failure
+ net/mlx5e: Don't call cleanup on profile rollback failure
+ bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
+ vsock: Update rx_bytes on read_skb()
+ vsock: Update msg_count on read_skb()
+ bpf, vsock: Drop static vsock_bpf_prot initialization
+ riscv, bpf: Make BPF_CMPXCHG fully ordered
+ nvme-pci: fix race condition between reset and nvme_dev_disable()
+ bpf: Fix iter/task tid filtering
+ bpf: Fix incorrect delta propagation between linked registers
+ bpf: Fix print_reg_state's constant scalar dump
+ cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
+ fgraph: Allocate ret_stack_list with proper size
+ mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
+ mm: shmem: move shmem_huge_global_enabled() into shmem_allowable_huge_orders()
+ mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw()
+ mm: don't install PMD mappings when THPs are disabled by the hw/process/vma
+ iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
+ xhci: dbgtty: remove kfifo_out() wrapper
+ xhci: dbgtty: use kfifo from tty_port struct
+ xhci: dbc: honor usb transfer size boundaries.
+ uprobe: avoid out-of-bounds memory access of fetching args
+ drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real
VLA
+ ASoC: amd: yc: Add quirk for HP Dragonfly pro one
+ ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default
regs values
+ ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
+ arm64: Force position-independent veneers
+ udf: refactor udf_current_aext() to handle error
+ udf: refactor udf_next_aext() to handle error
+ udf: refactor inode_bmap() to handle error
+ udf: fix uninit-value use in udf_get_fileshortad
+ ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
+ fsnotify: Avoid data race between fsnotify_recalc_mask() and
fsnotify_object_watched()
+ drm/xe/mcr: Use Xe2_LPM steering tables for Xe2_HPM
+ cifs: Validate content of NFS reparse point buffer
+ LoongArch: Don't crash in stack_top() for tasks without vDSO
+ objpool: fix choosing allocation for percpu slots
+ jfs: Fix sanity check in dbMount
+ tracing/probes: Fix MAX_TRACE_ARGS limit handling
+ tracing: Consider the NULL character when validating the event length
+ xfrm: extract dst lookup parameters into a struct
+ xfrm: respect ip protocols rules criteria when performing dst lookups
+ xfrm: validate new SA's prefixlen using SA family when sel.family is unset
+ netfilter: bpf: must hold reference on net namespace
+ net: pse-pd: Fix out of bound for loop
+ net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
+ be2net: fix potential memory leak in be_xmit()
+ net: plip: fix break; causing plip to never transmit
+ bnxt_en: replace ptp_lock with irqsave variant
+ octeon_ep: Implement helper for iterating packets in Rx queue
+ octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
+ net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
+ bpf, arm64: Fix address emission with tag-based KASAN enabled
+ fsl/fman: Save device references taken in mac_probe()
+ fsl/fman: Fix refcount handling of fman-related devices
+ netfilter: xtables: fix typo causing some targets not to load on IPv6
+ net: wwan: fix global oob in wwan_rtnl_policy
+ net: fix races in netdev_tx_sent_queue()/dev_watchdog()
+ virtio_net: fix integer overflow in stats
+ mlxsw: spectrum_router: fix xa_store() error checking
+ net: usb: usbnet: fix name regression
+ bpf: Preserve param->string when parsing mount options
+ bpf: Add MEM_WRITE attribute
+ bpf: Fix overloading of MEM_UNINIT's meaning
+ bpf: Remove MEM_UNINIT from skb/xdp MTU helpers
+ net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created
by classifiers
+ net: sched: fix use-after-free in taprio_change()
+ net: sched: use RCU read-side critical section in taprio_dump()
+ r8169: avoid unsolicited interrupts
+ posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
+ Bluetooth: hci_core: Disable works on hci_unregister_dev
+ Bluetooth: SCO: Fix UAF on sco_sock_timeout
+ Bluetooth: ISO: Fix UAF on iso_sock_timeout
+ bpf,perf: Fix perf_event_detach_bpf_prog error handling
+ bpf: fix do_misc_fixups() for bpf_get_branch_snapshot()
+ net: dsa: microchip: disable EEE for KSZ879x/KSZ877x/KSZ876x
+ net: dsa: mv88e6xxx: group cycle counter coefficients
+ net: dsa: mv88e6xxx: read cycle counter period from hardware
+ net: dsa: mv88e6xxx: support 4000ps cycle counter period
+ bpf: Add the missing BPF_LINK_TYPE invocation for sockmap
+ ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
+ ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
+ ASoC: loongson: Fix component check failed on FDT systems
+ ASoC: topology: Bump minimal topology ABI version
+ ASoC: max98388: Fix missing increment of variable slot_found
+ ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
+ PCI: Hold rescan lock while adding devices during host probe
+ fs: pass offset and result to backing_file end_write() callback
+ fuse: update inode size after extending passthrough write
+ ASoC: fsl_micfil: Add a flag to distinguish with different volume control
types
+ ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
+ fbdev: wm8505fb: select CONFIG_FB_IOMEM_FOPS
+ powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
+ nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
+ ALSA: hda/realtek: Update default depop procedure
+ smb: client: Handle kstrdup failures for passwords
+ cifs: fix warning when destroy 'cifs_io_request_pool'
+ PCI/pwrctl: Add WCN6855 support
+ PCI/pwrctl: Abandon QCom WCN probe on pre-pwrseq device-trees
+ cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
+ btrfs: qgroup: set a more sane default value for subtree drop threshold
+ btrfs: clear force-compress on remount when compress mount option is given
+ btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
+ perf/x86/rapl: Fix the energy-pkg event for AMD CPUs
+ btrfs: reject ro->rw reconfiguration if there are hard ro requirements
+ btrfs: zoned: fix zone unusable accounting for freed reserved extent
+ btrfs: fix read corruption due to race with extent map merging
+ drm/amd: Guard against bad data for ATIF ACPI method
+ ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
+ ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
+ ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid
detection issue
+ nilfs2: fix kernel bug due to missing clearing of buffer delay flag
+ fs: don't try and remove empty rbtree node
+ xfs: don't fail repairs on metadata files with no attr fork
+ openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)
+ KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
+ KVM: arm64: Unregister redistributor for failed vCPU creation
+ KVM: arm64: Fix shift-out-of-bounds bug
+ KVM: arm64: Don't eagerly teardown the vgic on init error
+ firewire: core: fix invalid port index for parent device
+ x86/lam: Disable ADDRESS_MASKING in most cases
+ UBUNTU: [Config] updateconfigs to disable ADDRESS_MASKING
+ x86/sev: Ensure that RMP table fixups are reserved
+ ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
+ ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
+ LoongArch: Get correct cores_per_package for SMT systems
+ LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
+ LoongArch: Make KASAN usable for variable cpu_vabits
+ xfrm: fix one more kernel-infoleak in algo dumping
+ hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
+ md/raid10: fix null ptr dereference in raid10_size()
+ drm/bridge: Fix assignment of the of_node of the parent to aux bridge
+ drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
+ platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid
addresses
+ fgraph: Fix missing unlock in register_ftrace_graph()
+ fgraph: Change the name of cpuhp state to "fgraph:online"
+ net: phy: dp83822: Fix reset pin definitions
+ nfsd: fix race between laundromat and free_stateid
+ drm/amd/display: temp w/a for DP Link Layer compliance
+ ata: libata: Set DID_TIME_OUT for commands that actually timed out
+ ASoC: SOF: Intel: hda-loader: do not wait for HDaudio IOC
+ ASoC: SOF: Intel: hda: Handle prepare without close for non-HDA DAI's
+ ASoC: SOF: Intel: hda: Always clean up link DMA during stop
+ ASoC: SOF: ipc4-topology: Do not set ALH node_id for aggregated DAIs
+ ASoC: dapm: avoid container_of() to get component
+ ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc
+ ASoC: qcom: sdm845: add missing soundwire runtime stream alloc
+ ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
+ Revert " fs/9p: mitigate inode collisions"
+ Revert "fs/9p: remove redundant pointer v9ses"
+ Revert "fs/9p: fix uaf in in v9fs_stat2inode_dotl"
+ Revert "fs/9p: simplify iget to remove unnecessary paths"
+ soundwire: intel_ace2x: Send PDI stream number during prepare
+ x86: support user address masking instead of non-speculative conditional
+ x86: fix whitespace in runtime-const assembler output
+ x86: fix user address masking non-canonical speculation issue
+ platform/x86: dell-wmi: Ignore suspend notifications
+ ACPI: PRM: Clean up guid type in struct prm_handler_info
+ ASoC: qcom: Select missing common Soundwire module code on SDM845
Linux 6.11.6
- ASoC: qcom: Select missing common Soundwire module code on SDM845
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- platform/x86: dell-wmi: Ignore suspend notifications
- x86: fix user address masking non-canonical speculation issue
- x86: fix whitespace in runtime-const assembler output
- x86: support user address masking instead of non-speculative conditional
- soundwire: intel_ace2x: Send PDI stream number during prepare
- Revert "fs/9p: simplify iget to remove unnecessary paths"
- Revert "fs/9p: fix uaf in in v9fs_stat2inode_dotl"
- Revert "fs/9p: remove redundant pointer v9ses"
- Revert " fs/9p: mitigate inode collisions"
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- ASoC: qcom: sdm845: add missing soundwire runtime stream alloc
- ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc
- ASoC: dapm: avoid container_of() to get component
- ASoC: SOF: ipc4-topology: Do not set ALH node_id for aggregated DAIs
- ASoC: SOF: Intel: hda: Always clean up link DMA during stop
- ASoC: SOF: Intel: hda: Handle prepare without close for non-HDA DAI's
- ASoC: SOF: Intel: hda-loader: do not wait for HDaudio IOC
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- drm/amd/display: temp w/a for DP Link Layer compliance
- nfsd: fix race between laundromat and free_stateid
- net: phy: dp83822: Fix reset pin definitions
- fgraph: Change the name of cpuhp state to "fgraph:online"
- fgraph: Fix missing unlock in register_ftrace_graph()
- platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid
addresses
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- drm/bridge: Fix assignment of the of_node of the parent to aux bridge
- md/raid10: fix null ptr dereference in raid10_size()
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- xfrm: fix one more kernel-infoleak in algo dumping
- LoongArch: Make KASAN usable for variable cpu_vabits
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Get correct cores_per_package for SMT systems
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- x86/sev: Ensure that RMP table fixups are reserved
- x86/lam: Disable ADDRESS_MASKING in most cases
- firewire: core: fix invalid port index for parent device
- KVM: arm64: Don't eagerly teardown the vgic on init error
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: arm64: Unregister redistributor for failed vCPU creation
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)
- xfs: don't fail repairs on metadata files with no attr fork
- fs: don't try and remove empty rbtree node
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid
detection issue
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- drm/amd: Guard against bad data for ATIF ACPI method
- btrfs: fix read corruption due to race with extent map merging
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- btrfs: reject ro->rw reconfiguration if there are hard ro requirements
- perf/x86/rapl: Fix the energy-pkg event for AMD CPUs
- x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- btrfs: clear force-compress on remount when compress mount option is given
- btrfs: qgroup: set a more sane default value for subtree drop threshold
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- PCI/pwrctl: Abandon QCom WCN probe on pre-pwrseq device-trees
- PCI/pwrctl: Add WCN6855 support
- cifs: fix warning when destroy 'cifs_io_request_pool'
- smb: client: Handle kstrdup failures for passwords
- ALSA: hda/realtek: Update default depop procedure
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- fbdev: wm8505fb: select CONFIG_FB_IOMEM_FOPS
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control
types
- fuse: update inode size after extending passthrough write
- fs: pass offset and result to backing_file end_write() callback
- PCI: Hold rescan lock while adding devices during host probe
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: topology: Bump minimal topology ABI version
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- bpf: Add the missing BPF_LINK_TYPE invocation for sockmap
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: group cycle counter coefficients
- net: dsa: microchip: disable EEE for KSZ879x/KSZ877x/KSZ876x
- bpf: fix do_misc_fixups() for bpf_get_branch_snapshot()
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: hci_core: Disable works on hci_unregister_dev
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- r8169: avoid unsolicited interrupts
- net: sched: use RCU read-side critical section in taprio_dump()
- net: sched: fix use-after-free in taprio_change()
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created
by classifiers
- bpf: Remove MEM_UNINIT from skb/xdp MTU helpers
- bpf: Fix overloading of MEM_UNINIT's meaning
- bpf: Add MEM_WRITE attribute
- bpf: Preserve param->string when parsing mount options
- net: usb: usbnet: fix name regression
- mlxsw: spectrum_router: fix xa_store() error checking
- virtio_net: fix integer overflow in stats
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net: wwan: fix global oob in wwan_rtnl_policy
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- fsl/fman: Fix refcount handling of fman-related devices
- fsl/fman: Save device references taken in mac_probe()
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- octeon_ep: Implement helper for iterating packets in Rx queue
- bnxt_en: replace ptp_lock with irqsave variant
- net: plip: fix break; causing plip to never transmit
- be2net: fix potential memory leak in be_xmit()
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- net: pse-pd: Fix out of bound for loop
- netfilter: bpf: must hold reference on net namespace
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- xfrm: respect ip protocols rules criteria when performing dst lookups
- xfrm: extract dst lookup parameters into a struct
- tracing: Consider the NULL character when validating the event length
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- jfs: Fix sanity check in dbMount
- objpool: fix choosing allocation for percpu slots
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- platform/x86: dell-sysman: add support for alienware products
- cifs: Validate content of NFS reparse point buffer
- drm/xe/mcr: Use Xe2_LPM steering tables for Xe2_HPM
- fsnotify: Avoid data race between fsnotify_recalc_mask() and
fsnotify_object_watched()
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- udf: fix uninit-value use in udf_get_fileshortad
- udf: refactor inode_bmap() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor udf_current_aext() to handle error
- arm64: Force position-independent veneers
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default
regs values
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real
VLA
- uprobe: avoid out-of-bounds memory access of fetching args
- xhci: dbc: honor usb transfer size boundaries.
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbgtty: remove kfifo_out() wrapper
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- mm: don't install PMD mappings when THPs are disabled by the hw/process/vma
- mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw()
- mm: shmem: move shmem_huge_global_enabled() into shmem_allowable_huge_orders()
- mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
- fgraph: Allocate ret_stack_list with proper size
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- bpf: Fix print_reg_state's constant scalar dump
- bpf: Fix incorrect delta propagation between linked registers
- bpf: Fix iter/task tid filtering
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- bpf, vsock: Drop static vsock_bpf_prot initialization
- vsock: Update msg_count on read_skb()
- vsock: Update rx_bytes on read_skb()
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- net/mlx5e: Don't call cleanup on profile rollback failure
- net/mlx5: Unregister notifier on eswitch init failure
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Check for invalid vector index on EQ creation
- net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- bpf: Fix link info netfilter flags to populate defrag flag
- drm/xe: Use bookkeep slots for external BO's in exec IOCTL
- drm/xe: Don't free job in TDR
- drm/xe: Take job list lock in xe_sched_add_pending_job
- drm/xe: fix unbalanced rpm put() with declare_wedged()
- drm/xe: fix unbalanced rpm put() with fence_fini()
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- usb: typec: altmode should keep reference to parent
- smb: client: fix OOBs when building SMB2_IOCTL request
- smb: client: fix possible double free in smb2_set_ea()
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- net: dsa: vsc73xx: fix reception from VLAN-unaware bridges
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- ravb: Remove setting of RX software timestamp
- genetlink: hold RCU in genlmsg_mcast()
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- drm/msm/a6xx+: Insert a fence wait before SMMU table update
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- drm/msm/dpu: don't always program merge_3d block
- drm/msm/dpu: Don't always set merge_3d pending flush
- irqchip/renesas-rzg2l: Fix missing put_device
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- net: ethernet: rtsn: fix potential memory leak in rtsn_start_xmit()
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- macsec: don't increment counters for an unrelated SA
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- ring-buffer: Fix reader locking when changing the sub buffer order
- octeontx2-af: Fix potential integer overflows on integer shifts
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- net: usb: usbnet: fix race in probe failure
- [PATCH} hwmon: (jc42) Properly detect TSE2004-compliant devices again
- net/smc: Fix memory leak when using percpu refs
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dpu: move CRTC resource assignment to dpu_encoder_virt_atomic_check
- drm/msm/dpu: make sure phys resources are properly initialized
- drm/panel: himax-hx83102: Adjust power and gamma to optimize brightness
- accel/qaic: Fix the for loop used to walk SG table
- RDMA/bnxt_re: Fix the GID table length
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Change the sequence of updating the CQ toggle value
- RDMA/bnxt_re: Get the toggle bits from SRQ events
- RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix incorrect dereference of srq in async event
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- net: sparx5: fix source port register when mirroring
- ipv4: give an IPv4 dev to blackhole_netdev
- elevator: Remove argument from elevator_find_get
- elevator: do not request_module if elevator exists
- RDMA/srpt: Make slab cache names unique
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- ALSA: hda/cs8409: Fix possible NULL dereference
- sched/core: Disable page allocation in task_tick_mm_cid()
- bpf: Fix unpopulated path_size when uprobe_multi fields unset
- selftests/bpf: Fix cross-compiling urandom_read
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- bpf: fix kfunc btf caching for modules
- s390/pci: Handle PCI error codes other than 0x3a
- riscv, bpf: Fix possible infinite tailcall when CONFIG_CFI_CLANG is enabled
- selftests/bpf: fix perf_event link info name_len assertion
- bpf: fix unpopulated name_len field in perf_event link info
- bpf: Check the remaining info_cnt before repeating btf fields
- clk: rockchip: fix finding of maximum clock ID
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- x86/resctrl: Avoid overflow in MB settings in bw_validate()
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- RDMA/bnxt_re: Add a check for memory allocation
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Fix a possible memory leak
- bpf: Fix memory leak in bpf_core_apply
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- bpf: devmap: provide rxq after redirect
- irqchip/riscv-imsic: Fix output text of base address
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- bpf: sync_linked_regs() must preserve subreg_def
- reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC
- iio: accel: bma400: Fix uninitialized variable field_value in tap event
handling.
- bpf: Use raw_spinlock_t in ringbuf
+ UBUNTU: Upstream stable to v6.11.6
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2091386
Title:
Oracular update: v6.11.6 upstream stable release
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2091386/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
