Skipped (already applied) - x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT (bug #2126698) - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition (CVE-2025-37838)
** CVE added: https://cve.org/CVERecord?id=CVE-2025-37838 ** Changed in: linux (Ubuntu Noble) Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2128722 Title: Noble update: upstream stable patchset 2025-10-17 Status in linux package in Ubuntu: Invalid Status in linux source package in Noble: Fix Committed Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2025-10-17 Ported from the following upstream stable releases: v6.6.88, v6.12.24 from git://git.kernel.org/ selftests/futex: futex_waitv wouldblock test should fail drm/i915/dg2: wait for HuC load completion before running selftests drm/i915: Disable RPG during live selftest ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret() tipc: fix memory leak in tipc_link_xmit octeontx2-pf: qos: fix VF root node parent queue index tc: Ensure we have enough buffer space when sending filter netlink notifications net: ethtool: Don't call .cleanup_data when prepare_data fails drm/tests: modeset: Fix drm_display_mode memory leak drm/tests: helpers: Add atomic helpers drm/tests: Add helper to create mock plane drm/tests: Add helper to create mock crtc drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic() drm/tests: helpers: Fix compiler warning drm/tests: helpers: Create kunit helper to destroy a drm_display_mode drm/tests: cmdline: Fix drm_display_mode memory leak drm/tests: modes: Fix drm_display_mode memory leak drm/tests: probe-helper: Fix drm_display_mode memory leak net: libwx: handle page_pool_dev_alloc_pages error ata: sata_sx4: Add error handling in pdc20621_i2c_read() drm/i915/huc: Fix fence not released on early probe errors nvmet-fcloop: swap list_add_tail arguments net_sched: sch_sfq: use a temporary work area for validating configuration Revert "net_sched: sch_sfq: move the limit validation" net_sched: sch_sfq: move the limit validation ipv6: Align behavior across nexthops during path selection net: ppp: Add bound checking for skb data on ppp_sync_txmung nft_set_pipapo: fix incorrect avx2 match of 5th field octet iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group fs: consistently deref the files table with rcu_dereference_raw() umount: Allow superblock owners to force umount pm: cpupower: bench: Prevent NULL dereference on malloc failure x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW x86/ia32: Leave NULL selector values 0~3 unchanged x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine perf: arm_pmu: Don't disable counter in armpmu_add() arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD xen/mcelog: Add __nonstring annotations for unterminated strings zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault ASoC: SOF: topology: Use krealloc_array() to replace krealloc() HID: pidff: Convert infinite length from Linux API to PID standard HID: pidff: Do not send effect envelope if it's empty HID: pidff: Add MISSING_DELAY quirk and its detection HID: pidff: Add MISSING_PBO quirk and its detection HID: pidff: Add PERMISSIVE_CONTROL quirk HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol HID: pidff: Add FIX_WHEEL_DIRECTION quirk HID: Add hid-universal-pidff driver and supported device ids UBUNTU: [Config] enable hid-universal-pidff driver HID: pidff: Add PERIODIC_SINE_ONLY quirk HID: pidff: Fix null pointer dereference in pidff_find_fields ALSA: hda: intel: Fix Optimus when GPU has no sound ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist ASoC: fsl_audmix: register card device depends on 'dais' property media: uvcvideo: Add quirk for Actions UVC05 mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves ALSA: usb-audio: Fix CME quirk for UF series keyboards ASoC: amd: Add DMI quirk for ACP6X mic support ASoC: amd: yc: update quirk data for new Lenovo model f2fs: don't retry IO for corrupted data scenario scsi: target: spc: Fix RSOC parameter data header size net: usb: asix_devices: add FiberGecko DeviceID page_pool: avoid infinite loop to schedule delayed worker jfs: Fix uninit-value access of imap allocated in the diMount() function fs/jfs: cast inactags to s64 to prevent potential overflow fs/jfs: Prevent integer overflow in AG size calculation jfs: Prevent copying of nlink with value 0 from disk inode jfs: add sanity check for agwidth in dbMount ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode net: sfp: add quirk for 2.5G OEM BX SFP wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() ahci: add PCI ID for Marvell 88SE9215 SATA Controller ext4: protect ext4_release_dquot against freezing Revert "f2fs: rebuild nat_bits during umount" ext4: ignore xattrs past end cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk scsi: st: Fix array overflow in st_setup() wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table net: vlan: don't propagate flags on open tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER Bluetooth: hci_uart: fix race during initialization Bluetooth: qca: simplify WCN399x NVM loading drm: allow encoder mode_set even when connectors change for crtc drm/amd/display: Update Cursor request mode to the beginning prefetch always drm/amd/display: add workaround flag to link to force FFE preset drm: panel-orientation-quirks: Add support for AYANEO 2S drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB drm: panel-orientation-quirks: Add quirk for AYA NEO Slide drm: panel-orientation-quirks: Add new quirk for GPD Win 2 drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel) drm/bridge: panel: forbid initializing a panel with unknown connector type drivers: base: devres: Allow to release group on device release drm/amdkfd: clamp queue size to minimum drm/amdkfd: Fix mode1 reset crash issue drm/amdkfd: Fix pqm_destroy_queue race with GPU reset drm/amdkfd: debugfs hang_hws skip GPU with MES drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type drm/amdgpu: grab an additional reference on the gang fence v2 fbdev: omapfb: Add 'plane' value check tracing: probe-events: Add comments about entry data storing code ktest: Fix Test Failures Due to Missing LOG_FILE Directories tpm, tpm_tis: Workaround failed command reception on Infineon devices pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() pwm: rcar: Improve register calculation pwm: fsl-ftm: Handle clk_get_rate() returning 0 bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags ext4: don't treat fhandle lookup of ea_inode as FS corruption dt-bindings: media: st,stmipid02: correct lane-polarities maxItems media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning media: i2c: adv748x: Fix test pattern selection mask media: venus: hfi: add a check to handle OOB in sfr region media: venus: hfi: add check to handle incorrect queue size media: vim2m: print device name after registering device media: siano: Fix error handling in smsdvb_module_init() xenfs/xensyms: respect hypervisor's "next" indication arm64: cputype: Add MIDR_CORTEX_A76AE arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list KVM: arm64: Tear down vGIC on failed vCPU creation spi: cadence-qspi: Fix probe on AM62A LP SK mtd: rawnand: brcmnand: fix PM resume warning tpm, tpm_tis: Fix timeout handling when waiting for TPM status media: streamzap: prevent processing IR data on URB failure media: visl: Fix ERANGE error when setting enum controls media: platform: stm32: Add check for clk_enable() media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() media: i2c: ccs: Set the device's runtime PM status correctly in remove media: i2c: ccs: Set the device's runtime PM status correctly in probe media: i2c: ov7251: Set enable GPIO low in probe media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO media: venus: hfi_parser: add check to avoid out of bound access media: venus: hfi_parser: refactor hfi packet parsing logic media: i2c: imx219: Rectify runtime PM handling in probe and remove mptcp: sockopt: fix getting IPV6_V6ONLY mtd: Add check for devm_kcalloc() net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family mtd: Replace kcalloc() with devm_kcalloc() clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup wifi: mt76: Add check for devm_kstrdup() wifi: mac80211: fix integer overflow in hwmp_route_info_get() io_uring/kbuf: reject zero sized provided buffers ASoC: q6apm: add q6apm_get_hw_pointer helper ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment. ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns. ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path bus: mhi: host: Fix race between unprepare and queue_buf ext4: fix off-by-one error in do_split f2fs: fix to avoid atomicity corruption of atomic file vdpa/mlx5: Fix oversized null mkey longer than 32bit udf: Fix inode_getblk() return value tpm: do not start chip while suspended soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() smb311 client: fix missing tcon check when mounting with linux/posix extensions i3c: master: svc: Use readsb helper for reading MDB i3c: Add NULL pointer check in i3c_master_queue_ibi() jbd2: remove wrong sb->s_sequence check leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs mfd: ene-kb3930: Fix a potential NULL pointer dereference mailbox: tegra-hsp: Define dimensioning masks in SoC data locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class() lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets mptcp: fix NULL pointer in can_accept_new_subflow mptcp: only inc MPJoinAckHMacFailure for HMAC failures mtd: inftlcore: Add error check for inftl_read_oob() mtd: rawnand: Add status chack in r852_ready() arm64: mm: Correct the update of max_pfn arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers btrfs: zoned: fix zone activation with missing devices btrfs: zoned: fix zone finishing with missing devices iommufd: Fix uninitialized rc in iommufd_access_rw() sparc/mm: disable preemption in lazy mmu mode sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes mm/rmap: reject hugetlb folios in folio_make_device_exclusive() mm: make page_mapped_in_vma() hugetlb walk aware mm: fix lazy mmu docs and usage mm/mremap: correctly handle partial mremap() of VMA starting at 0 mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock mm/userfaultfd: fix release hang over concurrent GUP mm/hwpoison: do not send SIGBUS to processes with recovered clean pages mm/hugetlb: move hugetlb_sysctl_init() to the __init section sctp: detect and prevent references to a freed transport in sendmsg x86/xen: fix balloon target initialization for PVH dom0 tracing: Do not add length to print format in synthetic events thermal/drivers/rockchip: Add missing rk3328 mapping entry cifs: avoid NULL pointer dereference in dbg call cifs: fix integer overflow in match_server() clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks clk: qcom: gdsc: Release pm subdomains in reverse add order clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code clk: qcom: gdsc: Set retain_ff before moving to HW CTRL crypto: ccp - Fix check for the primary ASP device dm-ebs: fix prefetch-vs-suspend race dm-integrity: set ti->error on memory allocation failure dm-verity: fix prefetch-vs-suspend race dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg' dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg' ftrace: Add cond_resched() to ftrace_graph_set_hash() gpio: tegra186: fix resource handling in ACPI probe path gpio: zynq: Fix wakeup source leaks on device unbind gve: handle overflow when reporting TX consumed descriptors KVM: x86: Explicitly zero-initialize on-stack CPUID unions KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses ntb: use 64-bit arithmetic for the MSI doorbell mask of/irq: Fix device node refcount leakage in API of_irq_parse_one() of/irq: Fix device node refcount leakage in API of_irq_parse_raw() of/irq: Fix device node refcount leakages in of_irq_count() of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() of/irq: Fix device node refcount leakages in of_irq_init() PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe() PCI: Fix reference leak in pci_alloc_child_bus() phy: freescale: imx8m-pcie: assert phy reset and perst in power off pinctrl: qcom: Clear latched interrupt status when changing IRQ type selftests: mptcp: close fd_in before returning in main_loop selftests: mptcp: fix incorrect fd checks in main_loop arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT ACPI: platform-profile: Fix CFI violation when accessing sysfs files iommufd: Fail replace if device has not been attached x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef noinline Bluetooth: hci_uart: Fix another race during initialization HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition scsi: hisi_sas: Enable force phy when SATA disk directly connected wifi: at76c50x: fix use after free access in at76_disconnect wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() wifi: mac80211: Purge vif txq in ieee80211_do_stop() wifi: wl1251: fix memory leak in wl1251_tx_work scsi: iscsi: Fix missing scsi_host_put() in error path md/raid10: fix missing discard IO accounting md/md-bitmap: fix stats collection for external bitmaps ASoC: dwc: always enable/disable i2s irqs ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() ovl: remove unused forward declaration RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe() RDMA/hns: Fix wrong maximum DMA segment size ASoC: cs42l43: Reset clamp override on jack removal RDMA/core: Silence oversized kvmalloc() warning Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address Bluetooth: btrtl: Prevent potential NULL dereference Bluetooth: l2cap: Check encryption key size on incoming connection Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" igc: fix PTM cycle trigger logic igc: increase wait time before retrying PTM igc: move ktime snapshot into PTM retry loop igc: handle the IGC_PTP_ENABLED flag correctly igc: cleanup PTP module if probe fails igc: add lock preventing multiple simultaneous PTM transactions test suite: use %zu to print size_t pds_core: fix memory leak in pdsc_debugfs_add_qcq() net: mctp: Set SOCK_RCU_FREE block: fix resource leak in blk_register_queue() error path net: openvswitch: fix nested key length validation in the set() action net: ngbe: fix memory leak in ngbe_probe() error path net: ethernet: ti: am65-cpsw-nuss: rename phy_node -> port_np net: ethernet: ti: am65-cpsw: fix port_np reference counting ata: libata-sata: Save all fields from sense data descriptor cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path netlink: specs: rt-link: add an attr layer around alt-ifname netlink: specs: rt-link: adjust mctp attribute naming net: b53: enable BPDU reception for management port net: bridge: switchdev: do not notify new brentries as changed net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported net: dsa: clean up FDB, MDB, VLAN entries on unbind net: dsa: free routing table on probe failure net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails ptp: ocp: fix start time alignment in ptp_ocp_signal_set net: ti: icss-iep: Add pwidth configuration for perout signal net: ti: icss-iep: Add phase offset configuration for perout signal net: ti: icss-iep: Fix possible NULL pointer dereference for perout request net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for 100Mbps net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings riscv: Properly export reserved regions in /proc/iomem kunit: qemu_configs: SH: Respect kunit cmdline riscv: KGDB: Do not inline arch_kgdb_breakpoint() riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS writeback: fix false warning in inode_to_wb() ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels ASoC: qcom: Fix sc7280 lpass potential buffer overflow asus-laptop: Fix an uninitialized variable nfs: add missing selections of CONFIG_CRC32 nfsd: decrease sc_count directly if fail to queue dl_recall i2c: atr: Fix wrong include ftrace: fix incorrect hash size in register_ftrace_direct() Bluetooth: l2cap: Process valid commands in too long frame Bluetooth: vhci: Avoid needless snprintf() calls btrfs: correctly escape subvol in btrfs_show_options() crypto: caam/qi - Fix drv_ctx refcount bug Revert "UBUNTU: SAUCE: fs: hfs/hfsplus: add key_len boundary check to hfs_bnode_read_key" hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key i2c: cros-ec-tunnel: defer probe if parent EC is not present isofs: Prevent the use of too small fid loop: properly send KOBJ_CHANGED uevent for disk device loop: LOOP_SET_FD: send uevents for partitions mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() mm: fix filemap_get_folios_contig returning batches of identical folios mm: fix apply_to_existing_page_range() ovl: don't allow datadir only ksmbd: Fix dangling pointer in krb_authenticate ksmbd: Prevent integer overflow in calculation of deadtime ksmbd: fix the warning from __kernel_write_iter Revert "smb: client: fix TCP timers deadlock after rmmod" riscv: Avoid fortify warning in syscall_get_arguments() selftests/mm: generate a temporary mountpoint for cgroup filesystem smb3 client: fix open hardlink on deferred close file error string: Add load_unaligned_zeropad() code path to sized_strscpy() tracing: Fix filter string testing virtiofs: add filesystem context source name check x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches x86/cpu/amd: Fix workaround for erratum 1054 x86/boot/sev: Avoid shared GHCB page for early memory acceptance scsi: megaraid_sas: Block zero-length ATA VPD inquiry scsi: ufs: exynos: Ensure consistent phy reference counts RDMA/cma: Fix workqueue crash in cma_netevent_work_handler perf/x86/intel: Allow to update user space GPRs from PEBS records perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR drm/repaper: fix integer overflows in repeat functions drm/msm/a6xx: Fix stale rpmh votes from GPU drm/amd: Handle being compiled without SI or CIK support better drm/amd/pm: Prevent division by zero drm/amd/pm/powerplay: Prevent division by zero drm/amd/pm/smu11: Prevent division by zero drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero drm/amdgpu/dma_buf: fix page_link check drm/nouveau: prime: fix ttm_bo_delayed_delete oops drm/sti: remove duplicate object names drm/i915/gvt: fix unterminated-string-initialization warning io_uring/net: fix accept multishot handling cpufreq: Reference count policy in cpufreq_update_limits() kbuild: Add '-fno-builtin-wcslen' md: fix mddev uaf while iterating all_mddevs list mptcp: sockopt: fix getting freebind & transparent misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32 x86/xen: move xen_reserve_extra_memory() x86/xen: fix memblock_reserve() usage on PVH x86/split_lock: Fix the delayed detection logic LoongArch: Eliminate superfluous get_numa_distances_cnt() Revert "usb: typec: fix potential array underflow in ucsi_ccg_sync_control()" usb: typec: fix potential array underflow in ucsi_ccg_sync_control() usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() landlock: Add the errata interface nvmet-fc: Remove unused functions xdp: Reset bpf_redirect_info before running a xdp's BPF prog. sign-file,extract-cert: move common SSL helper functions to a header sign-file,extract-cert: avoid using deprecated ERR_get_error_line() sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3 MIPS: dec: Declare which_prom() as static MIPS: cevt-ds1287: Add missing ds1287.h include MIPS: ds1287: Match ds1287_set_base_clock() function types drm/tests: Build KMS helpers when DRM_KUNIT_TEST_HELPERS is enabled ASoC: Intel: adl: add 2xrt1316 audio configuration cgroup/cpuset: Fix incorrect isolated_cpus update in update_parent_effective_cpumask() cgroup/cpuset: Correct invalid remote parition prs cgroup/cpuset: Fix error handling in remote_partition_disable() cgroup/cpuset: Revert "Allow suppression of sched domain rebuild in update_cpumasks_hier()" cgroup/cpuset: Enforce at most one rebuild_sched_domains_locked() call per operation cgroup/cpuset: Further optimize code if CONFIG_CPUSETS_V1 not set cgroup/cpuset: Fix race between newly created partition and dying one gpiolib: of: Fix the choice for Ingenic NAND quirk ublk: refactor recovery configuration flag helpers ublk: fix handling recovery & reissue in ublk_abort_queue() net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY iommu/exynos: Fix suspend/resume with IDENTITY domain perf/dwc_pcie: fix some unreleased resources PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() Flush console log from kernel_power_off() ASoC: amd: ps: use macro for ACP6.3 pci revision id media: s5p-mfc: Corrected NV12M/NV21M plane-sizes wifi: ath11k: Fix DMA buffer allocation to resolve SWIOTLB issues wifi: ath11k: fix memory leak in ath11k_xxx_remove() wifi: ath12k: fix memory leak in ath12k_pci_remove() scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue wifi: mac80211: ensure sdata->work is canceled before initialized. can: flexcan: Add quirk to handle separate interrupt lines for mailboxes can: flexcan: add NXP S32G2/S32G3 SoC support btrfs: harden block_group::bg_list against list_del() races Bluetooth: btusb: Add 2 HWIDs for MT7922 Bluetooth: Add quirk for broken READ_VOICE_SETTING Bluetooth: Add quirk for broken READ_PAGE_SCAN_TYPE drm/debugfs: fix printk format for bridge index drm/amd/display: stop DML2 from removing pipes based on planes drm/xe/xelp: Move Wa_16011163337 from tunings to workarounds PCI: Add Rockchip Vendor ID HID: pidff: Clamp PERIODIC effect period to device's logical range HID: pidff: Stop all effects before enabling actuators HID: pidff: Completely rework and fix pidff_reset function HID: pidff: Simplify pidff_upload_effect function HID: pidff: Define values used in pidff_find_special_fields HID: pidff: Rescale time values to match field units HID: pidff: Factor out code for setting gain HID: pidff: Move all hid-pidff definitions to a dedicated header HID: pidff: Simplify pidff_rescale_signed HID: pidff: Use macros instead of hardcoded min/max values for shorts HID: pidff: Factor out pool report fetch and remove excess declaration HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX HID: hid-universal-pidff: Add Asetek wheelbases support HID: pidff: Comment and code style update HID: pidff: Support device error response from PID_BLOCK_LOAD HID: pidff: Remove redundant call to pidff_find_special_keys HID: pidff: Rename two functions to align them with naming convention HID: pidff: Clamp effect playback LOOP_COUNT value HID: pidff: Compute INFINITE value instead of using hardcoded 0xffff HID: pidff: Fix 90 degrees direction name North -> East HID: pidff: Fix set_device_control() media: mgb4: Fix CMT registers update logic media: mgb4: Fix switched CMT frequency range "magic values" sets media: rockchip: rga: fix rga offset lookup media: v4l: Add a helper for setting up link-frequencies control media: v4l2-common.h: kerneldoc: correctly format return values media: imx219: Adjust PLL settings based on the number of MIPI lanes media: nuvoton: Fix reference handling of ece_node media: nuvoton: Fix reference handling of ece_pdev media: i2c: imx319: Rectify runtime PM handling probe and remove media: i2c: imx214: Rectify probe error handling related to runtime PM media: chips-media: wave5: Fix gray color on screen media: chips-media: wave5: Fix a hang after seeking wifi: mt76: mt7925: ensure wow pattern command align fw format wifi: mt76: mt7925: fix country count limitation for CLC ALSA: hda/realtek: Enable Mute LED on HP OMEN 16 Laptop xd000xx accel/ivpu: Fix warning in ivpu_ipc_send_receive_internal() ima: limit the number of open-writers integrity violations arm64: mops: Do not dereference src reg for a set operation arm64: dts: exynos: gs101: disable pinctrl_gsacore node btrfs: tests: fix chunk map leak after failure to add it to the tree mm/damon/ops: have damon_get_folio return folio even for tail pages CIFS: Propagate min offload along with other parameters from primary to secondary channels. dm-integrity: fix non-constant-time tag verification landlock: Move code to ease future backports landlock: Add erratum for TCP fix misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error net: mana: Switch to page pool for jumbo frames PCI: j721e: Fix the value of .linkdown_irq_regfield for J784S4 PCI: Fix reference leak in pci_register_host_bridge() pinctrl: samsung: add support for eint_fltcon_offset s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues thermal/drivers/mediatek/lvts_thermal: Allow early empty sensor slots thermal/drivers/mediatek/lvts_thermal: Fix wrong lvts_ctrl index thermal/drivers/mediatek/lvts: Disable monitor mode during suspend thermal/drivers/mediatek/lvts: Disable Stage 3 thermal threshold NFSD: fix decoding in nfs4_xdr_dec_cb_getattr nfsd: don't ignore the return code of svc_proc_register() libbpf: Prevent compiler warnings/errors UBUNTU: Upstream stable to v6.6.88, v6.12.24 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2128722/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp

