Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-02-05
Ported from the following upstream stable releases:
v6.6.68, v6.12.7
from git://git.kernel.org/
p2sb: Factor out p2sb_read_from_cache()
p2sb: Introduce the global flag p2sb_hidden_by_bios
p2sb: Move P2SB hide and unhide code to p2sb_scan_and_cache()
p2sb: Do not scan and remove the P2SB device when it is unhidden
i2c: pnx: Fix timeout in wait functions
tools: hv: change permissions of NetworkManager configuration file
cxl/pci: Fix potential bogus return value upon successful probing
cxl/region: Fix region creation for greater than x2 switches
net/smc: protect link down work from execute after lgr freed
net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
net/smc: check smcd_v2_ext_offset when receiving proposal msg
net/smc: check return value of sock_recvmsg when draining clc data
net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic()
netdevsim: prevent bad user input in nsim_dev_health_break_write()
ionic: Fix netdev notifier unregister on failure
ionic: use ee->offset when returning sprom data
net: renesas: rswitch: rework ts tags management
ksmbd: count all requests in req_running counter
ksmbd: fix broken transfers when exceeding max simultaneous operations
net: hinic: Fix cleanup in create_rxqs/txqs()
net: ethernet: bgmac-platform: fix an OF node reference leak
ipvs: Fix clamp() of ip_vs_conn_tab on small memory systems
netfilter: ipset: Fix for recursive locking warning
selftests: openvswitch: fix tcpdump execution
net: mdiobus: fix an OF node reference leak
mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
mmc: mtk-sd: disable wakeup in .remove() and in the error path of .probe()
EDAC/amd64: Simplify ECC check on unified memory controllers
net: tun: fix tun_napi_alloc_frags()
chelsio/chtls: prevent potential integer overflow on 32bit
i2c: riic: Always round-up when calculating bus period
efivarfs: Fix error on non-existent file
hexagon: Disable constant extender optimization for LLVM prior to 19.1.0
USB: serial: option: add TCL IK512 MBIM & ECM
USB: serial: option: add MeiG Smart SLM770A
USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
USB: serial: option: add MediaTek T7XX compositions
USB: serial: option: add Telit FE910C04 rmnet compositions
thunderbolt: Improve redrive mode handling
drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
drm/panel: novatek-nt35950: fix return value check in nt35950_probe()
i915/guc: Reset engine utilization buffer before registration
i915/guc: Ensure busyness counter increases motonically
i915/guc: Accumulate active runtime on gt reset
hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit
Registers
hwmon: (tmp513) Fix Current Register value interpretation
hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit
Registers
zram: refuse to use zero sized block device as backing device
zram: fix uninitialized ZRAM not releasing backing device
zram: fix potential UAF of zram table
vmalloc: fix accounting with i915
btrfs: tree-checker: reject inline extent items with 0 ref count
Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
KVM: x86: Play nice with protected guests in complete_hypercall_exit()
smb: client: fix TCP timers deadlock after rmmod
tracing: Fix test_event_printk() to process entire print argument
tracing: Add missing helper functions in event pointer dereference check
tracing: Add "%s" check in test_event_printk()
tracing: Have process_string() also allow arrays
selftests/memfd: run sysctl tests when PID namespace support is enabled
selftests/bpf: Use asm constraint "m" for LoongArch
io_uring: Fix registered ring file refcount leak
io_uring: check if iowq is killed before queuing
NFS/pnfs: Fix a live lock between recalled layouts and layoutget
of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent()
of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
nilfs2: fix buffer head leaks in calls to truncate_inode_pages()
nilfs2: prevent use of deleted inode
udmabuf: also check for F_SEAL_FUTURE_WRITE
of: Fix error path in of_parse_phandle_with_args_map()
of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
ceph: validate snapdirname option length when mounting
ceph: improve error handling and short/overflow-read logic in __ceph_sync_read()
ceph: fix memory leaks in __ceph_sync_read()
epoll: Add synchronous wakeup support for ep_poll_callback
net: stmmac: fix TSO DMA API usage causing oops
firmware: arm_ffa: Fix the race around setting ffa_dev->properties
RISC-V: KVM: Fix csr_write -> csr_set for HVIEN PMU overflow bit
s390/ipl: Fix never less than zero warning
erofs: fix PSI memstall accounting
s390/mm: Consider KMSAN modules metadata for paging levels
xfs: sb_spino_align is not verified
xfs: fix sparse inode limits on runt AG
xfs: fix off-by-one error in fsmap's end_daddr usage
xfs: fix sb_spino_align checks for large fsblock sizes
xfs: fix zero byte checking in the superblock scrubber
tools/net/ynl: fix sub-message key lookup for nested attributes
ionic: no double destroy workqueue
netdev: fix repeated netlink messages in queue dump
netdev: fix repeated netlink messages in queue stats
team: Fix feature exposure when no ports are present
net: netdevsim: fix nsim_pp_hold_write()
can: m_can: set init flag earlier in probe
can: m_can: fix missed interrupts with m_can_pci
net: dsa: restore dsa_software_vlan_untag() ability to operate on VLAN-untagged
traffic
netdev-genl: avoid empty messages in queue dump
psample: adjust size if rate_as_probability is set
irqchip/gic-v3: Work around insecure GIC integrations
KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden
KVM: arm64: Fix set_id_regs selftest for ASIDBITS becoming unwritable
net: mctp: handle skb cleanup on sock_queue failures
xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
thunderbolt: Add support for Intel Panther Lake-M/P
thunderbolt: Don't display nvm_version unless upgrade supported
drm/display: use ERR_PTR on DP tunnel manager creation fail
drm/amd: Update strapping for NBIO 2.5.0
drm/amdgpu: fix amdgpu_coredump
drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
udmabuf: udmabuf_create pin folio codestyle cleanup
udmabuf: fix memory leak on last export_udmabuf() error path
dma-buf: Fix __dma_buf_debugfs_list_del argument for !CONFIG_DEBUG_FS
drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference
drm/panel: st7701: Add prepare_prev_first flag to drm_panel
drm/panel: synaptics-r63353: Fix regulator unbalance
drm/amdgpu/nbio7.11: fix IP version check
drm/amdgpu/nbio7.7: fix IP version check
drm/amdgpu/smu14.0.2: fix IP version check
mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in
split_large_buddy()
ring-buffer: Fix overflow in __rb_map_vma
alloc_tag: fix set_codetag_empty() when !CONFIG_MEM_ALLOC_PROFILING_DEBUG
btrfs: split bios to the fs sector size boundary
btrfs: fix improper generation check in snapshot delete
s390/mm: Fix DirectMap accounting
drm/amdgpu/nbio7.0: fix IP version check
drm/amdgpu/gfx12: fix IP version check
drm/amdgpu/mmhub4.1: fix IP version check
fgraph: Still initialize idle shadow stacks when starting
tools: hv: Fix a complier warning in the fcopy uio daemon
x86/hyperv: Fix hv tsc page based sched_clock for hibernation
accel/ivpu: Fix general protection fault in ivpu_bo_list()
accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal()
ocfs2: fix the space leak in LA when releasing LA
udmabuf: fix racy memfd sealing check
of: property: fw_devlink: Do not use interrupt-parent directly
of: address: Preserve the flags portion on 1:1 dma-ranges mapping
ceph: give up on paths longer than PATH_MAX
ceph: fix memory leak in ceph_direct_read_write()
mm: use aligned address in clear_gigantic_page()
mm: use aligned address in copy_user_gigantic_page()
UBUNTU: Upstream stable to v6.6.68, v6.12.7
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Oracular)
Importance: Medium
Assignee: Koichiro Den (koichiroden)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Oracular)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Oracular)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Oracular)
Status: New => In Progress
** Changed in: linux (Ubuntu Oracular)
Assignee: (unassigned) => Koichiro Den (koichiroden)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-02-05
+
+ Ported from the following upstream stable releases:
+ v6.6.68, v6.12.7
+
from git://git.kernel.org/
+
+ p2sb: Factor out p2sb_read_from_cache()
+ p2sb: Introduce the global flag p2sb_hidden_by_bios
+ p2sb: Move P2SB hide and unhide code to p2sb_scan_and_cache()
+ p2sb: Do not scan and remove the P2SB device when it is unhidden
+ i2c: pnx: Fix timeout in wait functions
+ tools: hv: change permissions of NetworkManager configuration file
+ cxl/pci: Fix potential bogus return value upon successful probing
+ cxl/region: Fix region creation for greater than x2 switches
+ net/smc: protect link down work from execute after lgr freed
+ net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
+ net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
+ net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
+ net/smc: check smcd_v2_ext_offset when receiving proposal msg
+ net/smc: check return value of sock_recvmsg when draining clc data
+ net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic()
+ netdevsim: prevent bad user input in nsim_dev_health_break_write()
+ ionic: Fix netdev notifier unregister on failure
+ ionic: use ee->offset when returning sprom data
+ net: renesas: rswitch: rework ts tags management
+ ksmbd: count all requests in req_running counter
+ ksmbd: fix broken transfers when exceeding max simultaneous operations
+ net: hinic: Fix cleanup in create_rxqs/txqs()
+ net: ethernet: bgmac-platform: fix an OF node reference leak
+ ipvs: Fix clamp() of ip_vs_conn_tab on small memory systems
+ netfilter: ipset: Fix for recursive locking warning
+ selftests: openvswitch: fix tcpdump execution
+ net: mdiobus: fix an OF node reference leak
+ mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
+ mmc: mtk-sd: disable wakeup in .remove() and in the error path of .probe()
+ EDAC/amd64: Simplify ECC check on unified memory controllers
+ net: tun: fix tun_napi_alloc_frags()
+ chelsio/chtls: prevent potential integer overflow on 32bit
+ i2c: riic: Always round-up when calculating bus period
+ efivarfs: Fix error on non-existent file
+ hexagon: Disable constant extender optimization for LLVM prior to 19.1.0
+ USB: serial: option: add TCL IK512 MBIM & ECM
+ USB: serial: option: add MeiG Smart SLM770A
+ USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
+ USB: serial: option: add MediaTek T7XX compositions
+ USB: serial: option: add Telit FE910C04 rmnet compositions
+ thunderbolt: Improve redrive mode handling
+ drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
+ drm/panel: novatek-nt35950: fix return value check in nt35950_probe()
+ i915/guc: Reset engine utilization buffer before registration
+ i915/guc: Ensure busyness counter increases motonically
+ i915/guc: Accumulate active runtime on gt reset
+ hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit
Registers
+ hwmon: (tmp513) Fix Current Register value interpretation
+ hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit
Registers
+ zram: refuse to use zero sized block device as backing device
+ zram: fix uninitialized ZRAM not releasing backing device
+ zram: fix potential UAF of zram table
+ vmalloc: fix accounting with i915
+ btrfs: tree-checker: reject inline extent items with 0 ref count
+ Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
+ KVM: x86: Play nice with protected guests in complete_hypercall_exit()
+ smb: client: fix TCP timers deadlock after rmmod
+ tracing: Fix test_event_printk() to process entire print argument
+ tracing: Add missing helper functions in event pointer dereference check
+ tracing: Add "%s" check in test_event_printk()
+ tracing: Have process_string() also allow arrays
+ selftests/memfd: run sysctl tests when PID namespace support is enabled
+ selftests/bpf: Use asm constraint "m" for LoongArch
+ io_uring: Fix registered ring file refcount leak
+ io_uring: check if iowq is killed before queuing
+ NFS/pnfs: Fix a live lock between recalled layouts and layoutget
+ of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent()
+ of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
+ nilfs2: fix buffer head leaks in calls to truncate_inode_pages()
+ nilfs2: prevent use of deleted inode
+ udmabuf: also check for F_SEAL_FUTURE_WRITE
+ of: Fix error path in of_parse_phandle_with_args_map()
+ of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
+ ceph: validate snapdirname option length when mounting
+ ceph: improve error handling and short/overflow-read logic in
__ceph_sync_read()
+ ceph: fix memory leaks in __ceph_sync_read()
+ epoll: Add synchronous wakeup support for ep_poll_callback
+ net: stmmac: fix TSO DMA API usage causing oops
+ firmware: arm_ffa: Fix the race around setting ffa_dev->properties
+ RISC-V: KVM: Fix csr_write -> csr_set for HVIEN PMU overflow bit
+ s390/ipl: Fix never less than zero warning
+ erofs: fix PSI memstall accounting
+ s390/mm: Consider KMSAN modules metadata for paging levels
+ xfs: sb_spino_align is not verified
+ xfs: fix sparse inode limits on runt AG
+ xfs: fix off-by-one error in fsmap's end_daddr usage
+ xfs: fix sb_spino_align checks for large fsblock sizes
+ xfs: fix zero byte checking in the superblock scrubber
+ tools/net/ynl: fix sub-message key lookup for nested attributes
+ ionic: no double destroy workqueue
+ netdev: fix repeated netlink messages in queue dump
+ netdev: fix repeated netlink messages in queue stats
+ team: Fix feature exposure when no ports are present
+ net: netdevsim: fix nsim_pp_hold_write()
+ can: m_can: set init flag earlier in probe
+ can: m_can: fix missed interrupts with m_can_pci
+ net: dsa: restore dsa_software_vlan_untag() ability to operate on
VLAN-untagged traffic
+ netdev-genl: avoid empty messages in queue dump
+ psample: adjust size if rate_as_probability is set
+ irqchip/gic-v3: Work around insecure GIC integrations
+ KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden
+ KVM: arm64: Fix set_id_regs selftest for ASIDBITS becoming unwritable
+ net: mctp: handle skb cleanup on sock_queue failures
+ xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
+ thunderbolt: Add support for Intel Panther Lake-M/P
+ thunderbolt: Don't display nvm_version unless upgrade supported
+ drm/display: use ERR_PTR on DP tunnel manager creation fail
+ drm/amd: Update strapping for NBIO 2.5.0
+ drm/amdgpu: fix amdgpu_coredump
+ drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
+ udmabuf: udmabuf_create pin folio codestyle cleanup
+ udmabuf: fix memory leak on last export_udmabuf() error path
+ dma-buf: Fix __dma_buf_debugfs_list_del argument for !CONFIG_DEBUG_FS
+ drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference
+ drm/panel: st7701: Add prepare_prev_first flag to drm_panel
+ drm/panel: synaptics-r63353: Fix regulator unbalance
+ drm/amdgpu/nbio7.11: fix IP version check
+ drm/amdgpu/nbio7.7: fix IP version check
+ drm/amdgpu/smu14.0.2: fix IP version check
+ mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in
split_large_buddy()
+ ring-buffer: Fix overflow in __rb_map_vma
+ alloc_tag: fix set_codetag_empty() when !CONFIG_MEM_ALLOC_PROFILING_DEBUG
+ btrfs: split bios to the fs sector size boundary
+ btrfs: fix improper generation check in snapshot delete
+ s390/mm: Fix DirectMap accounting
+ drm/amdgpu/nbio7.0: fix IP version check
+ drm/amdgpu/gfx12: fix IP version check
+ drm/amdgpu/mmhub4.1: fix IP version check
+ fgraph: Still initialize idle shadow stacks when starting
+ tools: hv: Fix a complier warning in the fcopy uio daemon
+ x86/hyperv: Fix hv tsc page based sched_clock for hibernation
+ accel/ivpu: Fix general protection fault in ivpu_bo_list()
+ accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal()
+ ocfs2: fix the space leak in LA when releasing LA
+ udmabuf: fix racy memfd sealing check
+ of: property: fw_devlink: Do not use interrupt-parent directly
+ of: address: Preserve the flags portion on 1:1 dma-ranges mapping
+ ceph: give up on paths longer than PATH_MAX
+ ceph: fix memory leak in ceph_direct_read_write()
+ mm: use aligned address in clear_gigantic_page()
+ mm: use aligned address in copy_user_gigantic_page()
+ UBUNTU: Upstream stable to v6.6.68, v6.12.7
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2097413
Title:
Oracular update: upstream stable patchset 2025-02-05
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2097413/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
