This bug was fixed in the package linux-azure - 5.15.0-1096.105
---------------
linux-azure (5.15.0-1096.105) jammy; urgency=medium
* jammy/linux-azure: 5.15.0-1096.105 -proposed tracker (LP: #2120048)
* Packaging resync (LP: #1786013)
- [Packaging] debian.azure/dkms-versions -- update from kernel-versions
(main/2025.08.11)
* [MANA][Backport]net: mana: Record doorbell physical address in PF mode
(LP: #2119680)
- net: mana: Record doorbell physical address in PF mode
* net: mana: Expose additional hardware counters for drop and TC via ethtool
(LP: #2119686)
- ethtool: Implement ethtool_puts()
- net: mana: use ethtool string helpers
- net: mana: Expose additional hardware counters for drop and TC via
ethtool.
* [MANA][Backport] net: mana: Switch to page pool for jumbo frames
(LP: #2118947)
- net: mana: Switch to page pool for jumbo frames
* [MANA][Backport] patch: net: mana: Add debug logs in MANA network driver
(LP: #2119168)
- net: mana: Add debug logs in MANA network driver
* Backporting Linux CIFS dentry leak fix: Avoid race in open_cached_dir with
lease breaks (LP: #2117524)
- smb: client: Avoid race in open_cached_dir with lease breaks
[ Ubuntu: 5.15.0-156.166 ]
* jammy/linux: 5.15.0-156.166 -proposed tracker (LP: #2120207)
* minimal kernel lacks modules for blk disk in arm64 openstack environments
where config_drive is required (LP: #2118499)
- [Config] Enable SYM53C8XX_2 on arm64
[ Ubuntu: 5.15.0-154.164 ]
* jammy/linux: 5.15.0-154.164 -proposed tracker (LP: #2120098)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2025.08.11)
* warning at iommu_dma_unmap_page when running ibv_rc_pingpong
(LP: #2107816)
- RDMA/mlx5: Fix a WARN during dereg_mr for DM type
* dmesg flooded with errors: amdgpu: DP AUX transfer fail:4 (LP: #2115238)
- drm/amd/display: Avoid flooding unnecessary info messages
* Jammy update: v5.15.189 upstream stable release (LP: #2118995)
- ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
- fix proc_sys_compare() handling of in-lookup dentries
- vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also
`transport_local`
- net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
- net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
- atm: clip: Fix memory leak of struct clip_vcc.
- ice: safer stats processing
- rxrpc: Fix oops due to non-existence of prealloc backlog struct
- bpf: fix precision backtracking instruction iteration
- bpf, sockmap: Fix skb refcnt race after locking changes
- xen: replace xen_remap() with memremap()
- x86/mce/amd: Fix threshold limit reset
- x86/mce: Don't remove sysfs if thresholding sysfs init fails
- x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
- gre: Fix IPv6 multicast route creation.
- pinctrl: qcom: msm: mark certain pins as invalid for interrupts
- drm/sched: Increment job count before swapping tail spsc queue
- drm/gem: Fix race in drm_gem_handle_create_tail()
- Revert "ACPI: battery: negate current when discharging"
- btrfs: propagate last_unlink_trans earlier when doing a rmdir
- btrfs: use btrfs_record_snapshot_destroy() during rmdir
- RDMA/mlx5: Fix vport loopback for MPV device
- pwm: mediatek: Ensure to disable clocks in error path
- netlink: Fix rmem check in netlink_broadcast_deliver().
- netlink: make sure we allow at least one dump skb
- xhci: Allow RPM on the USB controller (1022:43f7) by default
- usb: xhci: quirk for data loss in ISOC transfers
- xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
- Input: xpad - support Acer NGR 200 Controller
- usb:cdnsp: remove TRB_FLUSH_ENDPOINT command
- usb: cdnsp: Replace snprintf() with the safer scnprintf() variant
- usb: cdnsp: Fix issue with CV Bad Descriptor test
- usb: dwc3: Abort suspend on soft disconnect failure
- dma-buf: add dma_resv_for_each_fence_unlocked v8
- dma-buf: use new iterator in dma_resv_wait_timeout
- dma-buf: fix timeout handling in dma_resv_wait_timeout v2
- wifi: zd1211rw: Fix potential NULL pointer dereference in
zd_mac_tx_to_dev()
- smb: server: make use of rdma_destroy_qp()
- ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
- net: appletalk: Fix device refcount leak in atrtr_create()
- net: phy: microchip: limit 100M workaround to link-down events on
LAN88xx
- can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to
debug level
- net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
- bnxt_en: Fix DCB ETS validation
- atm: idt77252: Add missing `dma_map_error()`
- um: vector: Reduce stack usage in vector_eth_configure()
- net: usb: qmi_wwan: add SIMCom 8230C composition
- HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
- vt: add missing notification when switching back to text mode
- HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
- HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
- Input: atkbd - do not skip atkbd_deactivate() when skipping
ATKBD_CMD_GETID
- x86/mm: Disable hugetlb page table sharing on 32-bit
- Linux 5.15.189
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2025-38067
- rseq: Fix segfault on registration when rseq_cs is non-zero
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2025-38074
- vhost-scsi: protect vq->log_used with vq->mutex
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2025-38439
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2025-38441
- netfilter: flowtable: account for Ethernet header in
nf_flow_pppoe_proto()
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2025-38443
- nbd: fix uaf in nbd_genl_connect() error path
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2025-38444
- raid10: cleanup memleak at raid10_make_request
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2025-38445
- md/raid1: Fix stack memory use after return in raid1_reshape
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2025-38375
- virtio-net: ensure the received length does not exceed allocated size
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2025-38448
- usb: gadget: u_serial: Fix race condition in TTY wakeup
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2024-44939
- jfs: fix null ptr deref in dtInsertEntry
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2024-26775
- aoe: avoid potential deadlock at set_capacity
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2022-48703
- thermal/int340x_thermal: handle data_vault when the value is
ZERO_SIZE_PTR
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2025-38457
- net/sched: Abort __tc_modify_qdisc if parent class does not exist
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2025-38458
- atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2025-38459
- atm: clip: Fix infinite recursive call of clip_push().
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2025-38460
- atm: clip: Fix potential null-ptr-deref in to_atmarpd().
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2025-38461
- vsock: Fix transport_* TOCTOU
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2025-38462
- vsock: Fix transport_{g2h,h2g} TOCTOU
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2025-38464
- tipc: Fix use-after-free in tipc_conn_close().
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2025-38465
- netlink: Fix wraparounds of sk->sk_rmem_alloc.
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2025-38466
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
* Jammy update: v5.15.189 upstream stable release (LP: #2118995) //
CVE-2025-38467
- drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
* Jammy update: v5.15.188 upstream stable release (LP: #2118993)
- Linux 5.15.188
* Jammy update: v5.15.187 upstream stable release (LP: #2118977)
- cifs: Fix cifs_query_path_info() for Windows NT servers
- NFSv4: Always set NLINK even if the server doesn't support it
- NFSv4.2: fix listxattr to return selinux security label
- mailbox: Not protect module_put with spin_lock_irqsave
- mfd: max14577: Fix wakeup source leaks on device unbind
- leds: multicolor: Fix intensity setting while SW blinking
- hwmon: (pmbus/max34440) Fix support for max34451
- ksmbd: allow a filename to contain special characters on SMB3.1.1 posix
extension
- dmaengine: xilinx_dma: Set dma_device directions
- md/md-bitmap: fix dm-raid max_write_behind setting
- iio: pressure: zpa2326: Use aligned_s64 for the timestamp
- um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h
- coresight: Only check bottom two claim bits
- usb: dwc2: also exit clock_gating when stopping udc while suspended
- usb: potential integer overflow in usbg_make_tpg()
- usb: common: usb-conn-gpio: use a unique name for usb connector device
- usb: Add checks for snprintf() calls in usb_alloc_dev()
- usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
- usb: typec: displayport: Receive DP Status Update NAK request exit dp
altmode
- ALSA: hda: Ignore unsol events for cards being shut down
- ALSA: hda: Add new pci id for AMD GPU display HD audio controller
- ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock
- ceph: fix possible integer overflow in ceph_zero_objects()
- ovl: Check for NULL d_inode() in ovl_dentry_upper()
- fs/jfs: consolidate sanity checking in dbMount
- media: davinci: vpif: Fix memory leak in probe error path
- media: omap3isp: use sgtable-based scatterlist wrappers
- clk: ti: am43xx: Add clkctrl data for am43xx ADC1
- media: imx-jpeg: Drop the first error frames
- f2fs: don't over-report free space or inodes in statvfs
- Drivers: hv: Rename 'alloced' to 'allocated'
- Drivers: hv: vmbus: Add utility function for querying ring size
- uio_hv_generic: Query the ringbuffer size for device
- uio_hv_generic: Align ring size to system page
- fbcon: delete a few unneeded forward decl
- tty/vt: consolemap: rename and document struct uni_pagedir
- vgacon: switch vgacon_scrolldelta() and vgacon_restore_screen()
- vgacon: remove unneeded forward declarations
- tty: vt: make init parameter of consw::con_init() a bool
- tty: vt: sanitize arguments of consw::con_clear()
- tty: vt: make consw::con_switch() return a bool
- dummycon: Trigger redraw when switching consoles with deferred takeover
- platform/x86: ideapad-laptop: use usleep_range() for EC polling
- i2c: tiny-usb: disable zero-length read messages
- i2c: robotfuzz-osif: disable zero-length read messages
- attach_recursive_mnt(): do not lock the covering tree when sliding
something under it
- libbpf: Fix null pointer dereference in btf_dump__free on allocation
failure
- wifi: mac80211: fix beacon interval calculation overflow
- af_unix: Don't set -ECONNRESET for consumed OOB skb.
- vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
- um: ubd: Add missing error check in start_io_thread()
- net: enetc: Correct endianness handling in _enetc_rd_reg64
- net: selftests: fix TCP packet checksum
- staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()
- dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive
- Bluetooth: L2CAP: Fix L2CAP MTU negotiation
- dm-raid: fix variable in journal device check
- btrfs: update superblock's device bytes_used when dropping chunk
- HID: wacom: fix memory leak on kobject creation failure
- HID: wacom: fix memory leak on sysfs attribute creation failure
- HID: wacom: fix kobject reference count leak
- drm/tegra: Assign plane type before registration
- drm/tegra: Fix a possible null pointer dereference
- drm/udl: Unregister device before cleaning up on disconnect
- drm/amdkfd: Fix race in GWS queue scheduling
- drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()
- drm/bridge: cdns-dsi: Fix connecting to next bridge
- drm/bridge: cdns-dsi: Check return value when getting default PHY config
- drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready
- drm/amd/display: Add null pointer check for get_first_active_display()
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time
- media: uvcvideo: Rollback non processed entities on error
- s390/entry: Fix last breaking event handling in case of stack corruption
- s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
- Revert "ipv6: save dontfrag in cork"
- arm64: Restrict pagetable teardown to avoid false warning
- ARM: 9354/1: ptrace: Use bitfield helpers
- rtc: cmos: use spin_lock_irqsave in cmos_interrupt
- vsock/vmci: Clear the vmci transport packet properly when initializing
it
- mmc: sdhci: Add a helper function for dump register in dynamic debug
mode
- Revert "mmc: sdhci: Disable SD card clock before changing parameters"
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
- mtk-sd: Prevent memory corruption from DMA map failure
- mtk-sd: reset host->mrq on prepare_data() error
- platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
- RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
- scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
- scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
- scsi: ufs: core: Fix spelling of a sysfs attribute name
- RDMA/mlx5: Fix CC counters query for MPV
- btrfs: fix missing error handling when searching for inode refs during
log replay
- drm/exynos: fimd: Guard display clock control with runtime PM calls
- spi: spi-fsl-dspi: Clear completion counter before initiating transfer
- drm/i915/selftests: Change mock_request() to return error pointers
- platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs
callbacks
- drm/i915/gt: Fix timeline left held on VMA alloc error
- igc: disable L1.2 PCI-E link substate to avoid performance issue
- lib: test_objagg: Set error message in check_expect_hints_stats()
- amd-xgbe: align CL37 AN sequence as per databook
- enic: fix incorrect MTU comparison in enic_change_mtu()
- rose: fix dangling neighbour pointers in rose_rt_device_down()
- nui: Fix dma_mapping_error() check
- drm/msm: Fix a fence leak in submit error path
- ALSA: sb: Don't allow changing the DMA mode during operations
- ALSA: sb: Force to disable DMAs once when DMA mode is changed
- ata: pata_cs5536: fix build on 32-bit UML
- powerpc: Fix struct termio related ioctl macros
- scsi: target: Fix NULL pointer dereference in
core_scsi3_decode_spec_i_port()
- wifi: mac80211: drop invalid source address OCB frames
- wifi: ath6kl: remove WARN on bad firmware input
- ACPICA: Refuse to evaluate a method if arguments are missing
- mtd: spinand: fix memory leak of ECC engine conf
- rcu: Return early if callback is not specified
- mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier
- regulator: gpio: Add input_supply support in gpio_regulator_config
- regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
- drm/v3d: Disable interrupts before resetting the GPU
- NFSv4/flexfiles: Fix handling of NFS level errors in I/O
- ethernet: atl1: Add missing DMA mapping error checks and count errors
- dpaa2-eth: Update dpni_get_single_step_cfg command
- dpaa2-eth: Update SINGLE_STEP register access
- net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats
- dpaa2-eth: fix xdp_rxq_info leak
- platform/x86: think-lmi: Fix class device unregistration
- platform/x86: dell-wmi-sysman: Fix class device unregistration
- xhci: dbctty: disable ECHO flag by default
- xhci: dbc: Flush queued requests before stopping dbc
- usb: cdnsp: do not disable slot for disabled slot
- i2c/designware: Fix an initialization issue
- Logitech C-270 even more broken
- platform/x86: think-lmi: Create ksets consecutively
- usb: typec: displayport: Fix potential deadlock
- [Config] enable TSA mitigation
- KVM: x86: add support for CPUID leaf 0x80000021
- Linux 5.15.187
* Jammy update: v5.15.187 upstream stable release (LP: #2118977) //
CVE-2024-36350 // CVE-2024-36357
- x86/bugs: Rename MDS machinery to something more generic
- x86/bugs: Add a Transient Scheduler Attacks mitigation
- x86/CPU/AMD: Properly check the TSA microcode
- x86: Fix X86_FEATURE_VERW_CLEAR definition
- KVM: SVM: Advertise TSA CPUID bits to guests
- x86/process: Move the buffer clearing before MONITOR
* Jammy update: v5.15.187 upstream stable release (LP: #2118977) //
CVE-2024-26726
- btrfs: don't drop extent_map for free space inode on write error
* Jammy update: v5.15.187 upstream stable release (LP: #2118977) //
CVE-2025-38245
- atm: Release atm_dev_mutex after removing procfs in
atm_dev_deregister().
* Jammy update: v5.15.187 upstream stable release (LP: #2118977) //
CVE-2025-38249
- ALSA: usb-audio: Fix out-of-bounds read in
snd_usb_get_audioformat_uac3()
* Jammy update: v5.15.187 upstream stable release (LP: #2118977) //
CVE-2025-38251
- atm: clip: prevent NULL deref in clip_push()
* Jammy update: v5.15.187 upstream stable release (LP: #2118977) //
CVE-2025-38257
- s390/pkey: Prevent overflow in size calculation for memdup_user()
* Jammy update: v5.15.187 upstream stable release (LP: #2118977) //
CVE-2025-38230
- jfs: validate AG parameters in dbMount() to prevent crashes
* Jammy update: v5.15.187 upstream stable release (LP: #2118977) //
CVE-2025-38262
- tty: serial: uartlite: register uart driver in init
* Jammy update: v5.15.187 upstream stable release (LP: #2118977) //
CVE-2025-38263
- bcache: fix NULL pointer in cache_set_flush()
* Jammy update: v5.15.186 upstream stable release (LP: #2116904)
- tracing: Fix compilation warning on arm32
- pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31
- pinctrl: armada-37xx: set GPIO output value before setting direction
- acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
- rtc: Make rtc_time64_to_tm() support dates before 1970
- rtc: Fix offset calculation for .start_secs < 0
- usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE
- usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device
- USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB
- usb: usbtmc: Fix timeout value in get_stb
- thunderbolt: Do not double dequeue a configuration request
- gfs2: gfs2_create_inode error handling fix
- perf/core: Fix broken throttling when max_samples_per_tick=1
- crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions
- x86/cpu: Sanitize CPUID(0x80000000) output
- crypto: marvell/cesa - Handle zero-length skcipher requests
- crypto: marvell/cesa - Avoid empty transfer descriptor
- crypto: lrw - Only add ecb if it is not already there
- crypto: xts - Only add ecb if it is not already there
- crypto: sun8i-ce - move fallback ahash_request to the end of the struct
- EDAC/skx_common: Fix general protection fault
- power: reset: at91-reset: Optimize at91_reset()
- PM: wakeup: Delete space in the end of string shown by
pm_show_wakelocks()
- x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges()
- ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
- spi: sh-msiof: Fix maximum DMA transfer size
- drm/amd/pp: Fix potential NULL pointer dereference in
atomctrl_initialize_mc_reg_table
- media: rkvdec: Fix frame size enumeration
- fs/ntfs3: handle hdr_first_de() return value
- m68k: mac: Fix macintosh_config for Mac II
- firmware: psci: Fix refcount leak in psci_dt_init
- selftests/seccomp: fix syscall_restart test for arm compat
- drm: rcar-du: Fix memory leak in rcar_du_vsps_init()
- drm/vkms: Adjust vkms_state->active_planes allocation type
- drm/tegra: rgb: Fix the unbound reference count
- firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES
- wifi: ath11k: fix node corruption in ar->arvifs list
- IB/cm: use rwlock for MAD agent lock
- bpf, sockmap: fix duplicated data transmission
- f2fs: fix to do sanity check on sbi->total_valid_block_count
- net: ncsi: Fix GCPS 64-bit member variables
- libbpf: Fix buffer overflow in bpf_object__init_prog
- wifi: rtw88: do not ignore hardware read error during DPK
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- iommu: Protect against overflow in iommu_pgsize()
- f2fs: clean up w/ fscrypt_is_bounce_page()
- f2fs: fix to detect gcing page in f2fs_is_cp_guaranteed()
- libbpf: Use proper errno value in linker
- netfilter: bridge: Move specific fragmented packet to slow_path instead
of dropping it
- netfilter: nft_quota: match correctly when the quota just depleted
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
- bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ
- clk: qcom: gcc-sm6350: Add *_wait_val values for GDSCs
- clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
- ktls, sockmap: Fix missing uncharge operation
- libbpf: Use proper errno value in nlattr
- pinctrl: at91: Fix possible out-of-boundary access
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz
- s390/bpf: Store backchain even for leaf progs
- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
- wifi: ath9k_htc: Abort software beacon handling if disabled
- netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy
- vfio/type1: Fix error unwind in migration dirty bitmap allocation
- bpf, sockmap: Avoid using sk_socket after free when sending
- netfilter: nft_tunnel: fix geneve_opt dump
- net: usb: aqc111: fix error handling of usbnet read calls
- bpf: Avoid __bpf_prog_ret0_warn when jit fails
- net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy
- calipso: Don't call calipso functions for AF_INET sk.
- net: openvswitch: Fix the dead loop of MPLS parse
- net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames
- f2fs: use d_inode(dentry) cleanup dentry->d_inode
- f2fs: fix to correct check conditions in f2fs_cross_rename
- ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select
- ARM: dts: at91: at91sam9263: fix NAND chip selects
- arm64: dts: imx8mm-beacon: Fix RTC capacitive load
- arm64: dts: imx8mn-beacon: Fix RTC capacitive load
- Squashfs: check return result of sb_min_blocksize
- ocfs2: fix possible memory leak in ocfs2_finish_quota_recovery
- nilfs2: add pointer check for nilfs_direct_propagate()
- nilfs2: do not propagate ENOENT error from nilfs_btree_propagate()
- bus: fsl-mc: fix double-free on mc_dev
- ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon
device
- arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399
Puma with Haikou
- soc: aspeed: lpc: Fix impossible judgment condition
- soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
- fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
- perf build: Warn when libdebuginfod devel files are not available
- perf ui browser hists: Set actions->thread before calling
do_zoom_thread()
- backlight: pm8941: Add NULL check in wled_configure()
- perf scripts python: exported-sql-viewer.py: Fix pattern matching with
Python 3
- remoteproc: qcom_wcnss_iris: Add missing put_device() on error in probe
- rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
- mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in
exynos_lpass_remove()
- mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE
- perf tests switch-tracking: Fix timestamp comparison
- perf record: Fix incorrect --user-regs comments
- nfs: clear SB_RDONLY before getting superblock
- nfs: ignore SB_RDONLY when remounting nfs
- rtc: sh: assign correct interrupts with DT
- PCI: cadence: Fix runtime atomic count underflow
- dmaengine: ti: Add NULL check in udma_probe()
- PCI/DPC: Initialize aer_err_info before using it
- usb: renesas_usbhs: Reorder clock handling and power management in probe
- serial: Fix potential null-ptr-deref in mlb_usio_probe()
- iio: adc: ad7124: Fix 3dB filter frequency reading
- MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a
- vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl()
- net: stmmac: platform: guarantee uniqueness of bus_id
- gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
- net: tipc: fix refcount warning in tipc_aead_encrypt
- driver: net: ethernet: mtk_star_emac: fix suspend/resume issue
- net/mlx4_en: Prevent potential integer overflow calculating Hz
- spi: bcm63xx-spi: fix shared reset
- spi: bcm63xx-hsspi: fix shared reset
- Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION
- ice: create new Tx scheduler nodes for new queues only
- net: dsa: tag_brcm: legacy: fix pskb_may_pull length
- vmxnet3: correctly report gso type for UDP tunnels
- PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
- gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO
- netfilter: nf_set_pipapo_avx2: fix initial map fill
- wireguard: device: enable threaded NAPI
- seg6: Fix validation of nexthop addresses
- fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2)
- do_change_type(): refuse to operate on unmounted/not ours mounts
- pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id()
- Input: synaptics-rmi4 - convert to use sysfs_emit() APIs
- Input: synaptics-rmi - fix crash with unsupported versions of F34
- arm64: dts: ti: k3-am65-main: Drop deprecated ti,otap-del-sel property
- arm64: dts: ti: k3-am65-main: Fix sdhci node properties
- arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0
- serial: sh-sci: Check if TX data was written to device in .tx_empty()
- serial: sh-sci: Move runtime PM enable to sci_probe_single()
- serial: sh-sci: Clean sci_ports[0] after at earlycon exit
- scsi: core: ufs: Fix a hang in the error handler
- ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use()
- ath10k: snoc: fix unbalanced IRQ enable in crash recovery
- scsi: iscsi: Fix incorrect error path labels for flashnode operations
- net_sched: sch_sfq: fix a potential crash on gso_skb handling
- powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap
- powerpc/vas: Return -EINVAL if the offset is non-zero in mmap()
- drm/meson: use unsigned long long / Hz for frequency types
- drm/meson: fix debug log statement when setting the HDMI clocks
- drm/meson: use vclk_freq instead of pixel_freq in debug print
- drm/meson: fix more rounding issues with 59.94Hz modes
- i40e: return false from i40e_reset_vf if reset is in progress
- i40e: retry VFLR handling if there is ongoing VF reset
- net: Fix TOCTOU issue in sk_is_readable()
- macsec: MACsec SCI assignment for ES = 0
- net: mdio: C22 is now optional, EOPNOTSUPP if not provided
- net/mdiobus: Fix potential out-of-bounds read/write access
- net/mlx5: Ensure fw pages are always allocated on same NUMA
- net/mlx5: Fix return value when searching for existing flow group
- net_sched: red: fix a race in __red_change()
- net_sched: tbf: fix a race in tbf_change()
- net_sched: ets: fix a race in ets_qdisc_change()
- fs/filesystems: Fix potential unsigned integer underflow in fs_name()
- nvmet-fcloop: access fcpreq only when holding reqlock
- perf: Ensure bpf_perf_link path is properly serialized
- ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and
posix_cpu_timer_del()
- x86/boot/compressed: prefer cc-option for CFLAGS additions
- MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option
- MIPS: Prefer cc-option for additions to cflags
- kbuild: Update assembler calls to use proper flags and language target
- drm/amd/display: Do not add '-mhard-float' to dml_ccflags for clang
- mips: Include KBUILD_CPPFLAGS in CHECKFLAGS invocation
- kbuild: Add CLANG_FLAGS to as-instr
- kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS
- kbuild: Add KBUILD_CPPFLAGS to as-option invocation
- drm/amd/display: Do not add '-mhard-float' to dcn2{1,0}_resource.o for
clang
- usb: usbtmc: Fix read_stb function and get_stb ioctl
- VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
- usb: cdnsp: Fix issue with detecting command completion event
- usb: cdnsp: Fix issue with detecting USB 3.2 speed
- usb: Flush altsetting 0 endpoints before reinitializating them after
reset.
- usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx()
- xen/arm: call uaccess_ttbr0_enable for dm_op hypercall
- x86/iopl: Cure TIF_IO_BITMAP inconsistencies
- calipso: unlock rcu before returning -EAFNOSUPPORT
- net: usb: aqc111: debug info before sanitation
- drm/meson: Use 1000ULL when operating with mode->clock
- kbuild: userprogs: fix bitsize and target detection on clang
- kbuild: hdrcheck: fix cross build with clang
- xfs: allow inode inactivation during a ro mount log recovery
- configfs: Do not override creating attribute file failure in
populate_attrs()
- crypto: marvell/cesa - Do not chain submitted requests
- gfs2: move msleep to sleepable context
- ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params()
- ASoC: meson: meson-card-utils: use of_property_present() for DT parsing
- powerpc/pseries/msi: Avoid reading PCI device registers in reduced power
states
- net/mlx5_core: Add error handling
inmlx5_query_nic_vport_qkey_viol_cntr()
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
- wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
- nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
- nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723
- media: ov8856: suppress probe deferral errors
- media: ccs-pll: Start VT pre-PLL multiplier search from correct value
- media: ccs-pll: Start OP pre-PLL multiplier search from correct value
- media: ccs-pll: Correct the upper limit of maximum op_pre_pll_clk_div
- media: ccs-pll: Check for too high VT PLL multiplier in dual PLL case
- media: cxusb: no longer judge rbuf when the write fails
- media: gspca: Add error handling for stv06xx_read_sensor()
- media: v4l2-dev: fix error handling in __video_register_device()
- media: venus: Fix probe error handling
- media: videobuf2: use sgtable-based scatterlist wrappers
- media: vidtv: Terminating the subsequent process of initialization
failure
- media: vivid: Change the siize of the composing
- media: uvcvideo: Return the number of processed controls
- media: uvcvideo: Send control events for partial succeeds
- media: uvcvideo: Fix deferred probing error
- ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap()
- ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4
- bus: mhi: host: Fix conflict between power_up and SYSERR
- can: tcan4x5x: fix power regulator retrieval during probe
- ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
- bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device
- bus: fsl-mc: fix GET/SET_TAILDROP command ids
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- ext4: fix calculation of credits for extent tree modification
- ext4: factor out ext4_get_maxbytes()
- ext4: ensure i_size is smaller than maxbytes
- Input: ims-pcu - check record size in ims_pcu_flash_firmware()
- f2fs: prevent kernel warning due to negative i_nlink from corrupted
image
- f2fs: fix to do sanity check on sit_bitmap_size
- NFC: nci: uart: Set tty->disc_data only in success path
- EDAC/altera: Use correct write width with the INTTEST register
- fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
- vgacon: Add check for vc_origin address range in vgacon_scroll()
- parisc: fix building with gcc-15
- clk: meson-g12a: add missing fclk_div2 to spicc
- ipc: fix to protect IPCS lookups using RCU
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
- mm: fix ratelimit_pages update error in dirty_ratio_handler()
- mtd: rawnand: sunxi: Add randomizer configuration in
sunxi_nfc_hw_ecc_write_chunk
- mtd: nand: sunxi: Add randomizer configuration before randomizer enable
- dm-mirror: fix a tiny race condition
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net: ch9200: fix uninitialised access during mii_nway_restart
- staging: iio: ad5933: Correct settling cycles encoding per datasheet
- mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS
- regulator: max14577: Add error check for max14577_read_reg()
- remoteproc: core: Cleanup acquired resources when
rproc_handle_resources() fails in rproc_attach()
- remoteproc: core: Release rproc->clean_table after rproc_attach() fails
- uio_hv_generic: Use correct size for interrupt and monitor pages
- PCI: cadence-ep: Correct PBA offset in .set_msix() callback
- PCI: Add ACS quirk for Loongson PCIe
- PCI: Fix lock symmetry in pci_slot_unlock()
- PCI: dw-rockchip: Fix PHY function call sequence in
rockchip_pcie_phy_deinit()
- iio: accel: fxls8962af: Fix temperature scan element sign
- iio: imu: inv_icm42600: Fix temperature calculation
- iio: adc: ad7606_spi: fix reg write value mask
- ACPICA: fix acpi operand cache leak in dswstate.c
- clocksource: Fix the CPUs' choice in the watchdog per CPU verification
- ACPICA: Avoid sequence overread in call to strncmp()
- ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
- ACPI: bus: Bail out if acpi_kobj registration fails
- ACPICA: fix acpi parse and parseext cache leaks
- power: supply: bq27xxx: Retrieve again when busy
- ACPICA: utilities: Fix overflow check in vsnprintf()
- ASoC: tegra210_ahub: Add check to of_device_get_match_data()
- PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn()
- ACPI: battery: negate current when discharging
- drm/amdgpu/gfx6: fix CSIB handling
- sunrpc: update nextcheck time when adding new cache entries
- drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling
disable_irq()
- exfat: fix double free in delayed_free
- drm/bridge: anx7625: change the gpiod_set_value API
- media: i2c: imx334: Enable runtime PM before sub-device registration
- drm/msm/hdmi: add runtime PM calls to DDC transfer function
- media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition
- drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit()
- drm/msm/a6xx: Increase HFI response timeout
- media: i2c: imx334: Fix runtime PM handling in remove function
- drm/amdgpu/gfx10: fix CSIB handling
- media: ccs-pll: Better validate VT PLL branch
- media: uapi: v4l: Change V4L2_TYPE_IS_CAPTURE condition
- drm/amdgpu/gfx7: fix CSIB handling
- ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in
ext4_ext_remove_space()
- jfs: fix array-index-out-of-bounds read in add_missing_indices
- media: ti: cal: Fix wrong goto on error path
- media: rkvdec: Initialize the m2m context before the controls
- sunrpc: fix race in cache cleanup causing stale nextcheck time
- ext4: prevent stale extent cache entries caused by concurrent get
es_cache
- drm/amdgpu/gfx8: fix CSIB handling
- drm/amdgpu/gfx9: fix CSIB handling
- jfs: Fix null-ptr-deref in jfs_ioc_trim
- drm/msm/dpu: don't select single flush for active CTL blocks
- drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB
- media: tc358743: ignore video while HPD is low
- media: platform: exynos4-is: Add hardware sync wait to
fimc_is_hw_change_mode()
- media: i2c: imx334: update mode_3840x2160_regs array
- nios2: force update_mmu_cache on spurious tlb-permission--related
pagefaults
- pmdomain: ti: Fix STANDBY handling of PER power domain
- thermal/drivers/qcom/tsens: Update conditions to strictly evaluate for
IP v2+
- cpufreq: Force sync policy boost with global boost on sysfs update
- net: macb: Check return value of dma_set_mask_and_coherent()
- tipc: use kfree_sensitive() for aead cleanup
- i2c: designware: Invoke runtime suspend on quick slave re-registration
- emulex/benet: correct command version selection in be_cmd_get_stats()
- wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
- sctp: Do not wake readers in __sctp_write_space()
- cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs
- i2c: npcm: Add clock toggle recovery
- net: dlink: add synchronization for stats update
- tcp: always seek for minimal rtt in tcp_rcv_rtt_update()
- tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows
- ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT
- net: atlantic: generate software timestamp just before the doorbell
- pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name()
- pinctrl: armada-37xx: propagate error from
armada_37xx_gpio_get_direction()
- pinctrl: armada-37xx: propagate error from
armada_37xx_pmx_gpio_set_direction()
- pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
- net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
- wifi: mac80211: do not offer a mesh path if forwarding is disabled
- clk: rockchip: rk3036: mark ddrphy as critical
- libbpf: Add identical pointer detection to btf_dedup_is_equiv()
- scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64
commands
- iommu/amd: Ensure GA log notifier callbacks finish running before module
unload
- net: bridge: mcast: re-implement br_multicast_{enable, disable}_port
functions
- vxlan: Do not treat dst cache initialization errors as fatal
- software node: Correct a OOB check in software_node_get_reference_args()
- pinctrl: mcp23s08: Reset all pins to input at probe
- scsi: lpfc: Use memcpy() for BIOS version
- sock: Correct error checking condition for (assign|release)_proto_idx()
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw
- bpf, sockmap: Fix data lost during EAGAIN retries
- octeontx2-pf: Add error log forcn10k_map_unmap_rq_policer()
- watchdog: da9052_wdt: respect TWDMIN
- bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
- ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
- tee: Prevent size calculation wraparound on 32-bit kernels
- Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices
first"
- platform/x86: dell_rbu: Fix list usage
- platform/x86: dell_rbu: Stop overwriting data buffer
- powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH
recovery
- Revert "x86/bugs: Make spectre user default depend on
MITIGATION_SPECTRE_V2" on v6.6 and older
- drivers/rapidio/rio_cm.c: prevent possible heap overwrite
- jffs2: check that raw node were preallocated before writing summary
- jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
- scsi: storvsc: Increase the timeouts to storvsc_timeout
- scsi: s390: zfcp: Ensure synchronous unit_add
- udmabuf: use sgtable-based scatterlist wrappers
- selftests/x86: Add a test to detect infinite SIGTRAP handler loop
- selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
- atm: Revert atm_account_tx() if copy_from_iter_full() fails.
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
- block: default BLOCK_LEGACY_AUTOLOAD to y
- Input: sparcspkr - avoid unannotated fall-through
- ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound
card
- ALSA: hda/intel: Add Thinkpad E15 to PM deny list
- ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
- iio: accel: fxls8962af: Fix temperature calculation
- mm/hugetlb: unshare page tables during VMA split, not before
- mm: hugetlb: independent PMD page table shared count
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- erofs: remove unused trace event erofs_destroy_inode
- drm/msm/dsi/dsi_phy_10nm: Fix missing initial VCO rate
- drm/nouveau/bl: increase buffer size to avoid truncate warning
- hwmon: (occ) Add soft minimum power cap attribute
- hwmon: (occ) Rework attribute registration for stack usage
- hwmon: (occ) fix unaligned accesses
- pldmfw: Select CRC32 when PLDMFW is selected
- aoe: clean device rq_list in aoedev_downdev()
- net: ice: Perform accurate aRFS flow match
- ptp: fix breakage after ptp_vclock_in_use() rework
- wifi: carl9170: do not ping device which has failed to load firmware
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- atm: atmtcp: Free invalid length skb in atmtcp_c_send().
- tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen()
behavior
- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- net: atm: add lec_mutex
- net: atm: fix /proc/net/atm/lec handling
- ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board
- ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
- ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
- serial: sh-sci: Increment the runtime usage counter for the earlycon
device
- Revert "cpufreq: tegra186: Share policy per cluster"
- arm64: move AARCH64_BREAK_FAULT into insn-def.h
- arm64: insn: add encoders for atomic operations
- arm64: insn: Add support for encoding DSB
- arm64: proton-pack: Expose whether the platform is mitigated by firmware
- arm64: proton-pack: Expose whether the branchy loop k value
- arm64: spectre: increase parameters that can be used to turn off bhb
mitigation individually
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation
- net_sched: sch_sfq: reject invalid perturb period
- mm/huge_memory: fix dereferencing invalid pmd migration entry
- ext4: make 'abort' mount option handling standard
- ext4: avoid remount errors with 'abort' mount option
- net: Fix checksum update for ILA adj-transport
- bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE
- s390/pci: Fix __pcilg_mio_inuser() inline assembly
- perf: Fix sample vs do_exit()
- arm64/ptrace: Fix stack-out-of-bounds read in
regs_get_kernel_stack_nth()
- scsi: elx: efct: Fix memory leak in efct_hw_parse_filter()
- scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
- Linux 5.15.186
* CVE-2024-57996 // CVE-2025-37752
- net_sched: sch_sfq: annotate data-races around q->perturb_period
- net_sched: sch_sfq: handle bigger packets
- net_sched: sch_sfq: don't allow 1 packet limit
- net_sched: sch_sfq: use a temporary work area for validating
configuration
- net_sched: sch_sfq: move the limit validation
* CVE-2025-38350
- net/sched: Always pass notifications when child class becomes empty
* CVE-2024-27407
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
* watchdog: BUG: soft lockup - CPU#6 stuck for 5718s! [wdavdaemon:1134] with
5.15.0-144-generic (LP: #2118407)
- fs/proc: do_task_stat: use __for_each_thread()
-- John Cabaj <john.ca...@canonical.com> Fri, 29 Aug 2025 10:09:49
-0500
** Changed in: linux-azure (Ubuntu Jammy)
Status: Fix Committed => Fix Released
** CVE added: https://cve.org/CVERecord?id=CVE-2022-48703
** CVE added: https://cve.org/CVERecord?id=CVE-2024-26726
** CVE added: https://cve.org/CVERecord?id=CVE-2024-26775
** CVE added: https://cve.org/CVERecord?id=CVE-2024-27407
** CVE added: https://cve.org/CVERecord?id=CVE-2024-36350
** CVE added: https://cve.org/CVERecord?id=CVE-2024-36357
** CVE added: https://cve.org/CVERecord?id=CVE-2024-44939
** CVE added: https://cve.org/CVERecord?id=CVE-2024-57996
** CVE added: https://cve.org/CVERecord?id=CVE-2025-37752
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38230
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38245
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38249
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38251
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38257
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38262
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38263
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38375
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38439
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38441
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38443
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38444
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38445
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38448
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38457
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38458
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38459
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38460
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38461
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38462
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38464
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38465
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38466
** CVE added: https://cve.org/CVERecord?id=CVE-2025-38467
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-azure in Ubuntu.
https://bugs.launchpad.net/bugs/2119680
Title:
[MANA][Backport]net: mana: Record doorbell physical address in PF mode
Status in linux-azure package in Ubuntu:
New
Status in linux-azure-5.15 package in Ubuntu:
New
Status in linux-azure-5.15 source package in Focal:
Fix Committed
Status in linux-azure source package in Jammy:
Fix Released
Status in linux-azure source package in Noble:
Fix Committed
Status in linux-azure source package in Plucky:
Fix Released
Bug description:
SRU Justification
[Impact]
* Microsoft requested patch to record the doorbell physical address
when in PF mode
[Fix]
* Clean cherry-pick of upstream e0fca6f2cebf: "net: mana: Record
doorbell physical address in PF mode"
[Test Plan]
* Compile tested
[Regression potential]
* Changes are localized to MANA. Possible regressions could result in
unexpected behavior of MANA driver.
[Other info]
* SF#00414649
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-azure/+bug/2119680/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
