Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-04-09
Ported from the following upstream stable releases:
v6.6.70, v6.12.9
from git://git.kernel.org/
smb/client: rename cifs_ntsd to smb_ntsd
smb/client: rename cifs_sid to smb_sid
smb/client: rename cifs_acl to smb_acl
smb/client: rename cifs_ace to smb_ace
fs/smb/client: implement chmod() for SMB3 POSIX Extensions
smb: client: stop flooding dmesg in smb2_calc_signature()
smb: client: fix use-after-free of signing key
media: uvcvideo: Force UVC version to 1.0a for 0408:4033
Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925
watchdog: rzg2l_wdt: Remove reset de-assert from probe
watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset
watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler
ALSA: ump: Use guard() for locking
ALSA: ump: Don't open legacy substream for an inactive group
scsi: mpi3mr: Use ida to manage mrioc ID
scsi: mpi3mr: Start controller indexing from 0
ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
x86/ptrace: Cleanup the definition of the pt_regs structure
x86/ptrace: Add FRED additional information to the pt_regs structure
x86/fred: Clear WFE in missing-ENDBRANCH #CPs
Bluetooth: btusb: add callback function in btusb suspend/resume
Bluetooth: btusb: mediatek: add callback function in btusb_disconnect
platform/x86: mlx-platform: call pci_dev_put() to balance the refcount
selinux: ignore unknown extended permissions
mmc: sdhci-msm: fix crypto key eviction
tracing: Handle old buffer mappings for event strings and functions
tracing: Fix trace_check_vprintf() when tp_printk is used
tracing: Check "%s" dereference via the field and not the TP_printk format
RDMA/bnxt_re: Allow MSN table capability check
RDMA/bnxt_re: Remove always true dattr validity check
RDMA/mlx5: Enforce same type port association for multiport RoCE
RDMA/bnxt_re: Avoid initializing the software queue for user queues
RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters
nvme-pci: 512 byte aligned dma pool segment quirk
RDMA/bnxt_re: Fix the check for 9060 condition
RDMA/bnxt_re: Add check for path mtu in modify_qp
RDMA/bnxt_re: Fix reporting hw_ver in query_device
RDMA/bnxt_re: Fix max_qp_wrs reported
RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters
RDMA/bnxt_re: Disable use of reserved wqes
RDMA/bnxt_re: Add send queue size check for variable wqe
RDMA/bnxt_re: Fix MSN table size for variable wqe mode
drm/bridge: adv7511_audio: Update Audio InfoFrame properly
net: dsa: microchip: Fix KSZ9477 set_ageing_time function
net: dsa: microchip: Fix LAN937X set_ageing_time function
RDMA/hns: Refactor mtr find
RDMA/hns: Remove unused parameters and variables
RDMA/hns: Fix mapping error of zero-hop WQE buffer
RDMA/hns: Fix warning storm caused by invalid input in IO path
RDMA/hns: Fix missing flush CQE for DWQE
net: fix memory leak in tcp_conn_request()
ip_tunnel: annotate data-races around t->parms.link
ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev()
ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit()
ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit()
net: Fix netns for ip_tunnel_init_flow()
netrom: check buffer length before accessing it
net/mlx5: DR, select MSIX vector 0 for completion queue creation
net/mlx5e: macsec: Maintain TX SA from encoding_sa
net/mlx5e: Skip restore TC rules for vport rep without loaded flag
drm/i915/dg1: Fix power gate sequence.
net: llc: reset skb->transport_header
ALSA: usb-audio: US16x08: Initialize array before use
eth: bcmsysport: fix call balance of priv->clk handling routines
net: mv643xx_eth: fix an OF node reference leak
net: wwan: t7xx: Fix FSM command timeout issue
RDMA/rtrs: Ensure 'ib_sge list' is accessible
net: sfc: Correct key_len for efx_tc_ct_zone_ht_params
net: restrict SO_REUSEPORT to inet sockets
net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
af_packet: fix vlan_get_tci() vs MSG_PEEK
af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
ila: serialize calls to nf_register_net_hooks()
net: ti: icssg-prueth: Fix clearing of IEP_CMP_CFG registers during iep_init
wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
wifi: mac80211: wake the queues in case of failure in resume
drm/amdkfd: Correct the migration DMA map direction
btrfs: flush delalloc workers queue before stopping cleaner kthread during
unmount
ALSA: hda/ca0132: Use standard HD-audio quirk matching helpers
ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model
sound: usb: enable DSD output for ddHiFi TC44C
sound: usb: format: don't warn that raw DSD is unsupported
bpf: fix potential error return
ksmbd: retry iterate_dir in smb2_query_dir
ksmbd: set ATTR_CTIME flags when setting mtime
smb: client: destroy cfid_put_wq on module exit
net: usb: qmi_wwan: add Telit FE910C04 compositions
irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
ARC: build: Try to guess GCC variant of cross compiler
RDMA/bnxt_re: Fix the max WQE size for static WQE support
modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
modpost: fix the missed iteration for the max bit in do_input()
ALSA: seq: Check UMP support for midi_version change
ALSA hda/realtek: Add quirk for Framework F111:000C
ALSA: seq: oss: Fix races at processing SysEx messages
ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
kcov: mark in_softirq_really() as __always_inline
scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
RDMA/uverbs: Prevent integer overflow issue
pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
sky2: Add device ID 11ab:4373 for Marvell 88E8075
net/sctp: Prevent autoclose integer overflow in sctp_association_init()
drm: adv7511: Drop dsi single lane support
dt-bindings: display: adi,adv7533: Drop single lane support
drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
fs/proc/task_mmu: fix pagemap flags with PMD THP entries on 32bit
gve: guard XSK operations on the existence of queues
gve: guard XDP xmit NDO on existence of xdp queues
mm/readahead: fix large folio support in async readahead
mm/kmemleak: fix sleeping function called from invalid context at print message
mm: vmscan: account for free pages to prevent infinite Loop in
throttle_direct_reclaim()
mptcp: fix TCP options overflow.
mptcp: fix recvbuffer adjust on sleeping rcvmsg
mptcp: don't always assume copied data in mptcp_cleanup_rbuf()
RDMA/bnxt_re: Fix max SGEs for the Work Request
scsi: hisi_sas: Remove redundant checks for automatic debugfs dump
platform/x86: hp-wmi: Add thermal profile support for 8BAD boards
platform/x86: hp-wmi: Fix platform profile option switch bug on Omen and Victus
laptops
platform/x86: hp-wmi: Fix implementation of the platform_profile_omen_get
function
platform/x86: hp-wmi: mark 8A15 board for timed OMEN thermal profile
RDMA/core: Fix ENODEV error for iWARP test over vlan
net: phy: micrel: Dynamically control external clock of KSZ PHY
netdev-genl: avoid empty messages in napi get
net: stmmac: restructure the error path of stmmac_probe_config_dt()
net/mlx5e: Fix netif state handling
net/mlx5e: Keep netdev when leave switchdev for devlink set legacy only
drm/i915/cx0_phy: Fix C10 pll programming sequence
RDMA/bnxt_re: Fix error recovery sequence
btrfs: allow swap activation to be interruptible
perf/x86/intel: Add Arrow Lake U support
wifi: cfg80211: clear link ID from bitmap during link delete after clean up
ALSA: hda: cs35l56: Remove calls to
cs35l56_force_sync_asp1_registers_from_cache()
ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio
spi: spi-cadence-qspi: Disable STIG mode for Altera SoCFPGA.
ARC: build: disallow invalid PAE40 + 4K page config
bpf: refactor bpf_helper_changes_pkt_data to use helper number
bpf: consider that tail calls invalidate packet pointers
maple_tree: reload mas before the second call for mas_empty_area
io_uring/rw: fix downgraded mshot read
wifi: iwlwifi: mvm: Fix __counted_by usage in cfg80211_wowlan_nd_*
net: ethernet: ti: am65-cpsw: default to round-robin for host port receive
gve: process XSK TX descriptors as part of RX NAPI
gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup
mm: reinstate ability to map write-sealed memfd mappings read-only
UBUNTU: Upstream stable to v6.6.70, v6.12.9
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Noble)
Importance: Medium
Assignee: Manuel Diewald (diewald)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Noble)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Noble)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Noble)
Status: New => In Progress
** Changed in: linux (Ubuntu Noble)
Assignee: (unassigned) => Manuel Diewald (diewald)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2025-04-09
+
+ Ported from the following upstream stable releases:
+ v6.6.70, v6.12.9
+
from git://git.kernel.org/
+
+ smb/client: rename cifs_ntsd to smb_ntsd
+ smb/client: rename cifs_sid to smb_sid
+ smb/client: rename cifs_acl to smb_acl
+ smb/client: rename cifs_ace to smb_ace
+ fs/smb/client: implement chmod() for SMB3 POSIX Extensions
+ smb: client: stop flooding dmesg in smb2_calc_signature()
+ smb: client: fix use-after-free of signing key
+ media: uvcvideo: Force UVC version to 1.0a for 0408:4033
+ Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925
+ watchdog: rzg2l_wdt: Remove reset de-assert from probe
+ watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset
+ watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler
+ ALSA: ump: Use guard() for locking
+ ALSA: ump: Don't open legacy substream for an inactive group
+ scsi: mpi3mr: Use ida to manage mrioc ID
+ scsi: mpi3mr: Start controller indexing from 0
+ ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
+ ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
+ x86/ptrace: Cleanup the definition of the pt_regs structure
+ x86/ptrace: Add FRED additional information to the pt_regs structure
+ x86/fred: Clear WFE in missing-ENDBRANCH #CPs
+ Bluetooth: btusb: add callback function in btusb suspend/resume
+ Bluetooth: btusb: mediatek: add callback function in btusb_disconnect
+ platform/x86: mlx-platform: call pci_dev_put() to balance the refcount
+ selinux: ignore unknown extended permissions
+ mmc: sdhci-msm: fix crypto key eviction
+ tracing: Handle old buffer mappings for event strings and functions
+ tracing: Fix trace_check_vprintf() when tp_printk is used
+ tracing: Check "%s" dereference via the field and not the TP_printk format
+ RDMA/bnxt_re: Allow MSN table capability check
+ RDMA/bnxt_re: Remove always true dattr validity check
+ RDMA/mlx5: Enforce same type port association for multiport RoCE
+ RDMA/bnxt_re: Avoid initializing the software queue for user queues
+ RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters
+ nvme-pci: 512 byte aligned dma pool segment quirk
+ RDMA/bnxt_re: Fix the check for 9060 condition
+ RDMA/bnxt_re: Add check for path mtu in modify_qp
+ RDMA/bnxt_re: Fix reporting hw_ver in query_device
+ RDMA/bnxt_re: Fix max_qp_wrs reported
+ RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters
+ RDMA/bnxt_re: Disable use of reserved wqes
+ RDMA/bnxt_re: Add send queue size check for variable wqe
+ RDMA/bnxt_re: Fix MSN table size for variable wqe mode
+ drm/bridge: adv7511_audio: Update Audio InfoFrame properly
+ net: dsa: microchip: Fix KSZ9477 set_ageing_time function
+ net: dsa: microchip: Fix LAN937X set_ageing_time function
+ RDMA/hns: Refactor mtr find
+ RDMA/hns: Remove unused parameters and variables
+ RDMA/hns: Fix mapping error of zero-hop WQE buffer
+ RDMA/hns: Fix warning storm caused by invalid input in IO path
+ RDMA/hns: Fix missing flush CQE for DWQE
+ net: fix memory leak in tcp_conn_request()
+ ip_tunnel: annotate data-races around t->parms.link
+ ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev()
+ ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit()
+ ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit()
+ net: Fix netns for ip_tunnel_init_flow()
+ netrom: check buffer length before accessing it
+ net/mlx5: DR, select MSIX vector 0 for completion queue creation
+ net/mlx5e: macsec: Maintain TX SA from encoding_sa
+ net/mlx5e: Skip restore TC rules for vport rep without loaded flag
+ drm/i915/dg1: Fix power gate sequence.
+ net: llc: reset skb->transport_header
+ ALSA: usb-audio: US16x08: Initialize array before use
+ eth: bcmsysport: fix call balance of priv->clk handling routines
+ net: mv643xx_eth: fix an OF node reference leak
+ net: wwan: t7xx: Fix FSM command timeout issue
+ RDMA/rtrs: Ensure 'ib_sge list' is accessible
+ net: sfc: Correct key_len for efx_tc_ct_zone_ht_params
+ net: restrict SO_REUSEPORT to inet sockets
+ net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
+ af_packet: fix vlan_get_tci() vs MSG_PEEK
+ af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
+ ila: serialize calls to nf_register_net_hooks()
+ net: ti: icssg-prueth: Fix clearing of IEP_CMP_CFG registers during iep_init
+ wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
+ wifi: mac80211: wake the queues in case of failure in resume
+ drm/amdkfd: Correct the migration DMA map direction
+ btrfs: flush delalloc workers queue before stopping cleaner kthread during
unmount
+ ALSA: hda/ca0132: Use standard HD-audio quirk matching helpers
+ ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model
+ sound: usb: enable DSD output for ddHiFi TC44C
+ sound: usb: format: don't warn that raw DSD is unsupported
+ bpf: fix potential error return
+ ksmbd: retry iterate_dir in smb2_query_dir
+ ksmbd: set ATTR_CTIME flags when setting mtime
+ smb: client: destroy cfid_put_wq on module exit
+ net: usb: qmi_wwan: add Telit FE910C04 compositions
+ irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
+ ARC: build: Try to guess GCC variant of cross compiler
+ RDMA/bnxt_re: Fix the max WQE size for static WQE support
+ modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
+ modpost: fix the missed iteration for the max bit in do_input()
+ ALSA: seq: Check UMP support for midi_version change
+ ALSA hda/realtek: Add quirk for Framework F111:000C
+ ALSA: seq: oss: Fix races at processing SysEx messages
+ ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
+ kcov: mark in_softirq_really() as __always_inline
+ scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
+ RDMA/uverbs: Prevent integer overflow issue
+ pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
+ sky2: Add device ID 11ab:4373 for Marvell 88E8075
+ net/sctp: Prevent autoclose integer overflow in sctp_association_init()
+ drm: adv7511: Drop dsi single lane support
+ dt-bindings: display: adi,adv7533: Drop single lane support
+ drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
+ fs/proc/task_mmu: fix pagemap flags with PMD THP entries on 32bit
+ gve: guard XSK operations on the existence of queues
+ gve: guard XDP xmit NDO on existence of xdp queues
+ mm/readahead: fix large folio support in async readahead
+ mm/kmemleak: fix sleeping function called from invalid context at print
message
+ mm: vmscan: account for free pages to prevent infinite Loop in
throttle_direct_reclaim()
+ mptcp: fix TCP options overflow.
+ mptcp: fix recvbuffer adjust on sleeping rcvmsg
+ mptcp: don't always assume copied data in mptcp_cleanup_rbuf()
+ RDMA/bnxt_re: Fix max SGEs for the Work Request
+ scsi: hisi_sas: Remove redundant checks for automatic debugfs dump
+ platform/x86: hp-wmi: Add thermal profile support for 8BAD boards
+ platform/x86: hp-wmi: Fix platform profile option switch bug on Omen and
Victus laptops
+ platform/x86: hp-wmi: Fix implementation of the platform_profile_omen_get
function
+ platform/x86: hp-wmi: mark 8A15 board for timed OMEN thermal profile
+ RDMA/core: Fix ENODEV error for iWARP test over vlan
+ net: phy: micrel: Dynamically control external clock of KSZ PHY
+ netdev-genl: avoid empty messages in napi get
+ net: stmmac: restructure the error path of stmmac_probe_config_dt()
+ net/mlx5e: Fix netif state handling
+ net/mlx5e: Keep netdev when leave switchdev for devlink set legacy only
+ drm/i915/cx0_phy: Fix C10 pll programming sequence
+ RDMA/bnxt_re: Fix error recovery sequence
+ btrfs: allow swap activation to be interruptible
+ perf/x86/intel: Add Arrow Lake U support
+ wifi: cfg80211: clear link ID from bitmap during link delete after clean up
+ ALSA: hda: cs35l56: Remove calls to
cs35l56_force_sync_asp1_registers_from_cache()
+ ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio
+ spi: spi-cadence-qspi: Disable STIG mode for Altera SoCFPGA.
+ ARC: build: disallow invalid PAE40 + 4K page config
+ bpf: refactor bpf_helper_changes_pkt_data to use helper number
+ bpf: consider that tail calls invalidate packet pointers
+ maple_tree: reload mas before the second call for mas_empty_area
+ io_uring/rw: fix downgraded mshot read
+ wifi: iwlwifi: mvm: Fix __counted_by usage in cfg80211_wowlan_nd_*
+ net: ethernet: ti: am65-cpsw: default to round-robin for host port receive
+ gve: process XSK TX descriptors as part of RX NAPI
+ gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup
+ mm: reinstate ability to map write-sealed memfd mappings read-only
+ UBUNTU: Upstream stable to v6.6.70, v6.12.9
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2106632
Title:
Noble update: upstream stable patchset 2025-04-09
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2106632/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
