** Merge proposal linked: https://code.launchpad.net/~canonical-kernel-team/ubuntu-cve-tracker/+git/ubuntu-cve-tracker/+merge/493168
-- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2117533 Title: Noble update: upstream stable patchset 2025-07-22 Status in linux package in Ubuntu: Invalid Status in linux source package in Noble: Fix Committed Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2025-07-22 Ported from the following upstream stable releases: v6.6.82, v6.12.19 from git://git.kernel.org/ x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() gpio: vf610: use generic device_get_match_data() gpio: vf610: add locking to gpio direction functions cifs: Remove symlink member from cifs_open_info_data union smb311: failure to open files of length 1040 when mounting with SMB3.1.1 POSIX extensions btrfs: fix data overwriting bug during buffered write when block size < page size x86/microcode/AMD: Add some forgotten models to the SHA check rust: workqueue: remove unneeded ``#[allow(clippy::new_ret_no_self)]` rust: init: remove unneeded `#[allow(clippy::disallowed_names)]` rust: introduce `.clippy.toml` rust: replace `clippy::dbg_macro` with `disallowed_macros` rust: provide proper code documentation titles rust: enable Clippy's `check-private-items` Documentation: rust: add coding guidelines on lints Documentation: rust: discuss `#[expect(...)]` in the guidelines rust: error: make conversion functions public rust: error: optimize error type to use nonzero rust: error: check for config `test` in `Error::name` rust: fix size_t in bindgen prototypes of C builtins rust: map `__kernel_size_t` and friends also to usize/isize tracing: tprobe-events: Fix a memory leak when tprobe with $retval LoongArch: Convert unreachable() to BUG() LoongArch: Use polling play_dead() when resuming from hibernation LoongArch: Set max_pfn with the PFN of the last page LoongArch: KVM: Add interrupt checking for AVEC LoongArch: KVM: Reload guest CSR registers after sleep LoongArch: KVM: Fix GPA size issue about VM HID: appleir: Fix potential NULL dereference at raw event handle ksmbd: fix type confusion via race condition when using ipc_msg_send_request ksmbd: fix out-of-bounds in parse_sec_desc() ksmbd: fix use-after-free in smb2_lock ksmbd: fix bug on trap in smb2_lock gpio: rcar: Use raw_spinlock to protect register access ALSA: seq: Avoid module auto-load handling at event delivery ALSA: hda: intel: Add Dell ALC3271 to power_save denylist ALSA: hda/realtek: update ALC222 depop optimize btrfs: fix a leaked chunk map issue in read_one_chunk() hwmon: (peci/dimmtemp) Do not provide fake thresholds data drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params drm/imagination: avoid deadlock on fence release drm/imagination: Hold drm_gem_gpuva lock for unmap drm/imagination: only init job done fences once drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e x86/cacheinfo: Validate CPUID leaf 0x2 EDX output x86/cpu: Validate CPUID leaf 0x2 EDX output x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63 Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name() Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected() wifi: cfg80211: regulatory: improve invalid hints checking wifi: nl80211: reject cooked mode if it is set along with other flags rapidio: add check for rio_add_net() in rio_scan_alloc_net() rapidio: fix an API misues when rio_add_net() fails dma: kmsan: export kmsan_handle_dma() for modules s390/traps: Fix test_monitor_call() inline assembly NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback userfaultfd: do not block on locking a large folio with raised refcount block: fix conversion of GPT partition name to 7-bit mm/page_alloc: fix uninitialized variable mm: don't skip arch_sync_kernel_mappings() in error paths wifi: iwlwifi: mvm: don't try to talk to a dead firmware wifi: iwlwifi: limit printed string from FW file HID: google: fix unused variable warning under !CONFIG_ACPI HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() bluetooth: btusb: Initialize .owner field of force_poll_sync_fops nvme-tcp: add basic support for the C2HTermReq PDU nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() net: gso: fix ownership in __udp_gso_segment caif_virtio: fix wrong pointer check in cfv_probe() perf/core: Fix pmus_lock vs. pmus_srcu ordering hwmon: (pmbus) Initialise page count in pmbus_identify() hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table hwmon: (ad7314) Validate leading zero bits and return error tracing: probe-events: Remove unused MAX_ARG_BUF_LEN macro drm/imagination: Fix timestamps in firmware traces ALSA: usx2y: validate nrpacks module parameter on probe llc: do not use skb_get() before dev_queue_xmit() hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe() drm/sched: Fix preprocessor guard be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error net: ipa: Fix v4.7 resource group names net: ipa: Fix QSB data for v4.7 net: ipa: Enable checksum for IPA_ENDPOINT_AP_MODEM_{RX,TX} for v4.7 ppp: Fix KMSAN uninit-value warning with bpf vlan: enforce underlying device type x86/sgx: Fix size overflows in sgx_encl_create() exfat: fix soft lockup in exfat_clear_bitmap exfat: short-circuit zero-byte writes in exfat_file_write_iter net-timestamp: support TCP GSO case for a few missing flags ublk: set_params: properly check if parameters can be applied sched/fair: Fix potential memory corruption in child_cfs_rq_on_list nvme-tcp: fix signedness bug in nvme_tcp_init_connection() net: dsa: mt7530: Fix traffic flooding for MMIO devices mctp i3c: handle NULL header address net: ipv6: fix dst ref loop in ila lwtunnel net: ipv6: fix missing dst ref drop in ila lwtunnel gpio: rcar: Fix missing of_node_put() call usb: renesas_usbhs: Call clk_put() usb: renesas_usbhs: Use devm_usb_get_phy() usb: hub: lack of clearing xHC resources usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader usb: typec: ucsi: Fix NULL pointer access usb: renesas_usbhs: Flush the notify_hotplug_work usb: gadget: u_ether: Set is_suspend flag if remote wakeup fails usb: atm: cxacru: fix a flaw in existing endpoint checks usb: dwc3: Set SUSPENDENABLE soon after phy init usb: dwc3: gadget: Prevent irq storm when TH re-executes usb: typec: ucsi: increase timeout for PPM reset operations usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality usb: gadget: Set self-powered based on MaxPower and bmAttributes usb: gadget: Fix setting self-powered state on suspend usb: gadget: Check bmAttributes only if configuration is valid kbuild: userprogs: use correct lld when linking through clang xhci: pci: Fix indentation in the PCI device ID definitions usb: xhci: Enable the TRB overfetch quirk on VIA VL805 KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value KVM: SVM: Suppress DEBUGCTL.BTF on AMD KVM: x86: Snapshot the host's DEBUGCTL in common x86 KVM: SVM: Manually context switch DEBUGCTL if LBR virtualization is disabled KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM cdx: Fix possible UAF error in driver_override_show() mei: me: add panther lake P DID mei: vsc: Use "wakeuphostint" when getting the host wakeup GPIO intel_th: pci: Add Arrow Lake support intel_th: pci: Add Panther Lake-H support intel_th: pci: Add Panther Lake-P/U support slimbus: messaging: Free transaction ID in delayed interrupt scenario bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock eeprom: digsy_mtc: Make GPIO lookup table match the device drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl iio: filter: admv8818: Force initialization of SDO iio: dac: ad3552r: clear reset status flag iio: adc: ad7192: fix channel select iio: adc: at91-sama5d2_adc: fix sama7g5 realbits value kbuild: hdrcheck: fix cross build with clang nvme-tcp: Fix a C2HTermReq error message docs: rust: remove spurious item in `expect` list UBUNTU: Upstream stable to v6.6.82, v6.12.19 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2117533/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
