** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Questing)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Questing)
Status: New => In Progress
** Changed in: linux (Ubuntu Questing)
Assignee: (unassigned) => Bethany Jamison (bjamison)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2026-06-01
+
+ Ported from the following upstream stable releases:
+ v6.12.66, v6.18.5, v6.18.6
+
from git://git.kernel.org/
+
+ NFSD: Fix permission check for read access to executable-only files
+ nfsd: provide locking for v4_end_grace
+ nfsd: use correct loop termination in nfsd4_revoke_states()
+ nfsd: check that server is running in unlock_filesystem
+ NFSD: net ref data still needs to be freed even if net hasn't startup
+ NFSD: Remove NFSERR_EAGAIN
+ atm: Fix dma_free_coherent() size
+ net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
+ net: do not write to msg_get_inq in callee
+ arm64: Fix cleared E0POE bit after cpu_suspend()/resume()
+ btrfs: always detect conflicting inodes when logging inode refs
+ mei: me: add nova lake point S DID
+ lib/crypto: aes: Fix missing MMU protection for AES S-box
+ counter: 104-quad-8: Fix incorrect return value in IRQ handler
+ counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
+ tracing: Add recursion protection in kernel stack trace recording
+ riscv: boot: Always make Image from vmlinux, not vmlinux.unstripped
+ nouveau: don't attempt fwsec on sb on newer platforms.
+ Revert "drm/atomic-helper: Re-order bridge chain pre-enable and post-disable"
+ ALSA: ac97bus: Use guard() for mutex locks
+ ALSA: ac97: fix a double free in snd_ac97_controller_register()
+ ALSA: hda/tas2781: properly initialize speaker_id for TAS2563
+ arm64: dts: imx95: correct I3C2 pclk to IMX95_CLK_BUSWAKEUP
+ drm/amd/display: Apply e4479aecf658 to dml
+ drm/amdgpu: Fix query for VPE block_type and ip_count
+ drm/atomic-helper: Export and namespace some functions
+ drm/pl111: Fix error handling in pl111_amba_probe
+ drm/tidss: Fix enable/disable order
+ drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[]
+ gpio: rockchip: mark the GPIO controller as sleeping
+ io_uring/io-wq: fix incorrect io_wq_for_each_worker() termination logic
+ PCI: meson: Report that link is up while in ASPM L0s and L1 states
+ pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
+ PM: hibernate: Fix crash when freeing invalid crypto compressor
+ Revert "drm/mediatek: dsi: Fix DSI host and panel bridge pre-enable order"
+ wifi: avoid kernel-infoleak from struct iw_point
+ wifi: mac80211: restore non-chanctx injection behaviour
+ libceph: prevent potential out-of-bounds reads in handle_auth_done()
+ libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
+ libceph: make free_choose_arg_map() resilient to partial allocation
+ libceph: return the handler error from mon_handle_auth_done()
+ libceph: reset sparse-read state in osd_fault()
+ libceph: make calc_target() set t->paused, not just clear it
+ ublk: reorder tag_set initialization before queue allocation
+ ALSA: hda: intel-dsp-config: Prefer legacy driver as fallback
+ csky: fix csky_cmpxchg_fixup not working
+ ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels
+ alpha: don't reference obsolete termio struct for TC* constants
+ dm-verity: disable recursive forward error correction
+ dm-snapshot: fix 'scheduling while atomic' on real-time kernels
+ NFSv4: ensure the open stateid seqid doesn't go backwards
+ ASoC: rockchip: Fix Wvoid-pointer-to-enum-cast warning (again)
+ NFS: Fix up the automount fs_context to use the correct cred
+ ALSA: hda/realtek: Add support for ASUS UM3406GA
+ drm/amd/display: shrink struct members
+ smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value
+ smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value
+ smb/client: fix NT_STATUS_NO_DATA_DETECTED value
+ scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset
+ scsi: ufs: core: Fix EH failure after W-LUN resume error
+ scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure
scanned in again after probe failed"
+ btrfs: fix qgroup_snapshot_quick_inherit() squota bug
+ btrfs: qgroup: update all parent qgroups when doing quick inherit
+ btrfs: fix NULL dereference on root when tracing inode eviction
+ of: unittest: Fix memory leak in unittest_data_add()
+ arm64: dts: ti: k3-am642-phyboard-electra-x27-gpio1-spi1-uart3: Fix schema
warnings
+ arm64: dts: ti: k3-am62-lp-sk-nand: Rename pinctrls to fix schema warnings
+ gpio: it87: balance superio enter/exit calls in error path
+ HID: Intel-thc-hid: Intel-thc: fix dma_unmap_sg() nents value
+ HID: Intel-thc-hid: Intel-thc: Fix wrong register reading
+ netfs: Fix early read unlock of page with EOF in middle
+ pinctrl: mediatek: mt8189: restore previous register base name array order
+ crypto: qat - fix duplicate restarting msg during AER error
+ arm64: dts: imx8qm-mek: correct the light sensor interrupt type to low level
+ arm64: dts: add off-on-delay-us for usdhc2 regulator
+ ARM: dts: imx6q-ba16: fix RTC interrupt level
+ arm64: dts: freescale: moduline-display: fix compatible
+ arm64: dts: freescale: tx8p-ml81: fix eqos nvmem-cells
+ arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics
i.MX8M Plus DHCOM
+ arm64: dts: imx8qm-ss-dma: correct the dma channels of lpuart
+ arm64: dts: mba8mx: Fix Ethernet PHY IRQ support
+ netfilter: nft_set_pipapo: fix range overlap detection
+ netfilter: nft_synproxy: avoid possible data-race on update operation
+ gpiolib: remove unnecessary 'out of memory' messages
+ gpiolib: add support to register sparse pin range
+ gpiolib: add a common prefix to GPIO descriptor flags
+ gpiolib: rename GPIO chip printk macros
+ gpiolib: fix race condition for gdev->srcu
+ gpio: pca953x: handle short interrupt pulses on PCAL devices
+ netfilter: nf_tables: fix memory leak in nf_tables_newrule()
+ netfilter: nf_conncount: update last_gc only when GC has been performed
+ net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
+ bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress
+ net: mscc: ocelot: Fix crash when adding interface under a lag
+ inet: ping: Fix icmp out counting
+ net: phy: mxl-86110: Add power management and soft reset support
+ net: sock: fix hardened usercopy panic in sock_recv_errqueue
+ netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates
+ net/mlx5: Lag, multipath, give priority for routes with smaller network prefix
+ net/mlx5e: Don't gate FEC histograms on ppcnt_statistical_group
+ net/mlx5e: Don't print error message due to invalid module
+ net/ena: fix missing lock when update devlink params
+ net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
+ bnxt_en: Fix potential data corruption with HW GRO/LRO
+ virtio_net: fix device mismatch in devm_kzalloc/devm_kfree
+ perf: Ensure swevent hrtimer is properly destroyed
+ drm/amd/pm: fix wrong pcie parameter on navi1x
+ drm/amd/pm: force send pcie parmater on navi1x
+ vsock: Make accept()ed sockets use custom setsockopt()
+ btrfs: release path before initializing extent tree in
btrfs_read_locked_inode()
+ btrfs: only enforce free space tree if v1 cache is required for bs < ps cases
+ riscv: cpufeature: Fix Zk bundled extension missing Zknh
+ riscv: pgtable: Cleanup useless VA_USER_XXX definitions
+ net: fix memory leak in skb_segment_list for GRO packets
+ PCI/VGA: Don't assume the only VGA device on a system is `boot_vga`
+ idpf: keep the netdev when a reset fails
+ idpf: convert vport state to bitmap
+ idpf: detach and close netdevs while handling a reset
+ idpf: fix memory leak in idpf_vport_rel()
+ idpf: fix memory leak in idpf_vc_core_deinit()
+ idpf: fix error handling in the init_task on load
+ idpf: fix memory leak of flow steer list on rmmod
+ idpf: fix issue with ethtool -n command display
+ idpf: Fix RSS LUT NULL pointer crash on early ethtool operations
+ idpf: Fix RSS LUT configuration on down interfaces
+ idpf: Fix RSS LUT NULL ptr issue after soft reset
+ idpf: Fix error handling in idpf_vport_open()
+ idpf: cap maximum Rx buffer size
+ idpf: fix aux device unplugging when rdma is not supported by vport
+ Revert "dsa: mv88e6xxx: make serdes SGMII/Fiber tx amplitude configurable"
+ net: sfp: return the number of written bytes for smbus single byte access
+ net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy
+ net: netdevsim: fix inconsistent carrier state after link/unlink
+ block: don't merge bios with different app_tags
+ trace: ftrace_dump_on_oops[] is not exported, make it static
+ net: airoha: Fix schedule while atomic in airoha_ppe_deinit()
+ net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in
qfq_reset
+ net: usb: pegasus: fix memory leak in update_eth_regs_async()
+ net: enetc: fix build warning when PAGE_SIZE is greater than 128K
+ ublk: fix use-after-free in ublk_partition_scan_work
+ irqchip/gic-v5: Fix gicv5_its_map_event() ITTE read endianness
+ erofs: don't bother with s_stack_depth increasing for now
+ erofs: fix file-backed mounts no longer working on EROFS partitions
+ btrfs: truncate ordered extent when skipping writeback past i_size
+ btrfs: use variable for end offset in extent_writepage_io()
+ btrfs: fix beyond-EOF write handling
+ gpio: mpsse: ensure worker is torn down
+ gpio: mpsse: add quirk support
+ gpio: mpsse: fix reference leak in gpio_mpsse_probe() error paths
+ bpf: Fix reference count leak in bpf_prog_test_run_xdp()
+ net: sfp: extend Potron XGSPON quirk to cover additional EEPROM variant
+ powercap: fix race condition in register_control_type()
+ powercap: fix sscanf() error return value handling
+ netfilter: nf_tables: avoid chain re-validation if possible
+ accel/amdxdna: Block running under a hypervisor
+ drm/amd/display: Fix DP no audio issue
+ spi: mt65xx: Use IRQF_ONESHOT with threaded IRQ
+ drm/amdkfd: Fix improper NULL termination of queue restore SMI event string
+ can: j1939: make j1939_session_activate() fail if device is no longer
registered
+ block: validate pi_offset integrity limit
+ ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025
+ ALSA: hda/realtek: enable woofer speakers on Medion NM14LNL
+ ASoC: fsl_sai: Add missing registers to cache default
+ scsi: sg: Fix occasional bogus elapsed time that exceeds timeout
+ spi: cadence-quadspi: Prevent lost complete() call during indirect read
+ bpf: Make variables in bpf_prog_test_run_xdp less confusing
+ bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN
+ bpf, test_run: Subtract size of xdp_frame from allowed metadata size
+ ata: libata-core: Disable LPM on ST2000DM008-2FR102
+ ALSA: usb-audio: Update for native DSD support quirks
+ bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path
+ UBUNTU: Upstream stable to v6.12.66, v6.18.5, v6.18.6
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2154749
Title:
Questing update: upstream stable patchset 2026-06-01
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2154749/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
