Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.1.7 upstream stable release from git://git.kernel.org/ Linux 6.1.7 pinctrl: amd: Add dynamic debugging for active GPIOs Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout" block: handle bio_split_to_limits() NULL return io_uring/io-wq: only free worker if it was allocated for creation io_uring/io-wq: free worker if task_work creation is canceled drm/i915: Fix CFI violations in gt_sysfs io_uring/poll: attempt request issue after racy poll wakeup io_uring: lock overflowing for IOPOLL efi: fix NULL-deref in init error path ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() platform/x86/amd: Fix refcount leak in amd_pmc_probe platform/surface: aggregator: Add missing call to ssam_request_sync_free() bnxt: make sure we return pages to the pool net: hns3: fix wrong use of rss size during VF rss config net: lan966x: check for ptp to be enabled in lan966x_ptp_deinit() igc: Fix PPS delta between two synchronized end-points perf kmem: Support field "node" in evsel__process_alloc_event() coping with recent tracepoint restructuring perf kmem: Support legacy tracepoints perf build: Properly guard libbpf includes octeontx2-pf: Fix resource leakage in VF driver unbind selftests/net: l2_tos_ttl_inherit.sh: Ensure environment cleanup on failure. selftests/net: l2_tos_ttl_inherit.sh: Run tests in their own netns. selftests/net: l2_tos_ttl_inherit.sh: Set IPv6 addresses with "nodad". net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) net/mlx5e: Fix macsec ssci attribute handling in offload path net/mlx5e: Don't support encap rules with gbp option net/mlx5: Fix ptp max frequency adjustment range net/mlx5e: IPoIB, Fix child PKEY interface stats on rx path net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent net/mlx5e: IPoIB, Block queue count configuration when sub interfaces are present net/mlx5e: Verify dev is present for fix features ndo net/mlx5: Fix command stats access after free net/mlx5e: TC, Keep mod hdr actions after mod hdr alloc net/mlx5: check attr pointer validity before dereferencing it Revert "r8169: disable detection of chip version 36" net/sched: act_mpls: Fix warning during failed attribute validation drm/vmwgfx: Remove rcu locks from user resources drm/vmwgfx: Remove vmwgfx_hashtab drm/vmwgfx: Refactor ttm reference object hashtable to use linux/hashtable. drm/vmwgfx: Refactor resource validation hashtable to use linux/hashtable implementation. drm/vmwgfx: Remove ttm object hashtable drm/vmwgfx: Refactor resource manager's hashtable to use linux/hashtable implementation. drm/vmwgfx: Write the driver id registers ice: Add check for kzalloc ice: Fix potential memory leak in ice_gnss_tty_write() drm/amdgpu: Fix potential NULL dereference tools/nolibc: fix the O_* fcntl/open macro definitions for riscv tools/nolibc: restore mips branch ordering in the _start block ASoC: qcom: Fix building APQ8016 machine driver without SOUNDWIRE af_unix: selftest: Fix the size of the parameter to connect() gro: take care of DODGY packets gro: avoid checking for a failed search nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() hvc/xen: lock console list traversal sched/core: Fix arch_scale_freq_tick() on tickless systems octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable nfsd: fix handling of cached open files in nfsd4_open codepath nfsd: rework refcounting in filecache NFSD: Add an nfsd_file_fsync tracepoint nfsd: reorganize filecache.c nfsd: remove the pages_flushed statistic from filecache NFSD: Add an NFSD_FILE_GC flag to enable nfsd_file garbage collection NFSD: Revert "NFSD: NFSv4 CLOSE should release an nfsd_file immediately" NFSD: Pass the target nfsd_file to nfsd_commit() tipc: fix unexpected link reset due to discovery messages stmmac: dwmac-mediatek: remove the dwmac_fix_mac_speed ALSA: usb-audio: Relax hw constraints for implicit fb sync ALSA: usb-audio: Make sure to stop endpoints before closing EPs mtd: cfi: allow building spi-intel standalone mtd: parsers: scpart: fix __udivdi3 undefined on mips ASoC: wm8904: fix wrong outputs volume after power reactivation drm/msm/dpu: Fix memory leak in msm_mdss_parse_data_bus_icc_path drm/msm/dpu: Fix some kernel-doc comments ASoC: Intel: sof-nau8825: fix module alias overflow ASoC: Intel: sof_nau8825: support rt1015p speaker amplifier ASoC: Intel: fix sof-nau8825 link failure scsi: ufs: core: WLUN suspend SSU/enter hibern8 fail recovery scsi: mpi3mr: Refer CONFIG_SCSI_MPI3MR in Makefile scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM regulator: da9211: Use irq handler when ready x86/resctrl: Fix event counts regression in reused RMIDs x86/resctrl: Fix task CLOSID/RMID update race x86/pat: Fix pat_x_mtrr_type() for MTRR disabled case EDAC/device: Fix period calculation in edac_device_reset_delay_period() x86/boot: Avoid using Intel mnemonics in AT&T syntax asm powerpc/imc-pmu: Fix use of mutex in IRQs disabled section selftests: netfilter: fix transaction test script timeout handling netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. sched/core: Fix use-after-free bug in dup_user_cpus_ptr() iommu/arm-smmu: Report IOMMU_CAP_CACHE_COHERENCY even betterer iommu/arm-smmu: Don't unregister on shutdown iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() iommu/arm-smmu-v3: Don't unregister on shutdown iommu/iova: Fix alloc iova overflows issue mm: Always release pages to the buddy allocator in memblock_free_late(). drm/amdgpu: enable VCN DPG for GC IP v11.0.4 drm/amdgpu: Enable pg/cg flags on GC11_0_4 for VCN drm/amdgpu: add soc21 common ip block support for GC 11.0.4 drm/amd/pm: enable GPO dynamic control support for SMU13.0.7 drm/amd/pm: enable GPO dynamic control support for SMU13.0.0 drm/amd/pm: Enable bad memory page/channel recording support for smu v13_0_0 drm/amd/pm: enable mode1 reset on smu_v13_0_10 usb: ulpi: defer ulpi_register on ulpi_read_id timeout drm/i915/gt: Cleanup partial engine discovery failures iavf/iavf_main: actually log ->src mask when talking about it ipv6: raw: Deduct extension header length in rawv6_push_pending_frames ixgbe: fix pci device refcount leak platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe dt-bindings: msm/dsi: Don't require vcca-supply on 14nm PHY dt-bindings: msm/dsi: Don't require vdds-supply on 10nm PHY drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer platform/x86: ideapad-laptop: Add Legion 5 15ARH05 DMI id to set_fn_lock_led_list[] arm64/mm: fix incorrect file_map_count for invalid pmd arm64: ptrace: Use ARM64_SME to guard the SME register enumerations dt-bindings: msm: dsi-phy-28nm: Add missing qcom, dsi-phy-regulator-ldo-mode arm64/mm: add pud_user_exec() check in pud_user_accessible_page() arm64/signal: Always accept SVE signal frames on SME only systems dt-bindings: msm: dsi-controller-main: Fix description of core clock dt-bindings: msm: dsi-controller-main: Fix power-domain constraint arm64/signal: Always allocate SVE signal frames on SME only systems drm/msm/adreno: Make adreno quirks not overwrite each other firmware/psci: Don't register with debugfs if PSCI isn't available firmware/psci: Fix MEM_PROTECT_RANGE function numbers drm/msm: another fix for the headless Adreno GPU dt-bindings: msm: dsi-controller-main: Fix operating-points-v2 constraint platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting platform/x86: asus-wmi: Don't load fan curves without fan platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode platform/x86: int3472/discrete: Ensure the clk/power enable pins are in output mode platform/surface: aggregator: Ignore command messages not intended for us platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER if present ACPI: video: Allow selecting NVidia-WMI-EC or Apple GMUX backlight from the cmdline ASoC: rt9120: Make dev PM runtime bind AsoC component PM io_uring/fdinfo: include locked hash table in fdinfo output cifs: fix double free on failed kerberos auth cifs: do not query ifaces on smb1 mounts cifs: fix file info setting in cifs_open_file() cifs: fix file info setting in cifs_query_path_info() cifs: Fix uninitialized memory read for smb311 posix symlink create Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10 properly"" drm/amd/display: move remaining FPU code to dml folder drm/amd/pm: add the missing mapping for PPT feature on SMU13.0.0 and 13.0.7 drm/amd/pm: correct the reference clock for fan speed(rpm) calculation drm/amdgpu: Fixed bug on error when unloading amdgpu drm/amd: Delay removal of the firmware framebuffer drm/i915: Fix potential context UAFs drm/i915: Reserve enough fence slot for i915_vma_unbind_async drm/i915/gt: Reset twice drm: Optimize drm buddy top-down allocation method drm/amd/pm/smu13: BACO is supported when it's in BACO state drm/virtio: Fix GEM handle creation UAF s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops cpufreq: amd-pstate: fix kernel hang issue while amd-pstate unregistering elfcore: Add a cprm parameter to elf_core_extra_{phdrs,data_size} ASoC: qcom: lpass-cpu: Fix fallback SD line index handling brcmfmac: Prefer DT board type over DMI board type s390/kexec: fix ipl report address for kdump perf auxtrace: Fix address filter duplicate symbol selection net: stmmac: add aux timestamps fifo clearance wait ACPI: Fix selecting wrong ACPI fwnode for the iGPU on some Dell laptops arm64: cmpxchg_double*: hazard against entire exchange variable arm64: mte: Avoid the racy walk of the vma list during core dump arm64: mte: Fix double-freeing of the temporary tag storage during coredump io_uring/poll: add hash if ready poll request can't complete inline docs: Fix the docs build with Sphinx 6.0 efi: tpm: Avoid READ_ONCE() for accessing the event log efi: fix userspace infinite retry read efivars after EFI runtime services page fault KVM: arm64: Fix S1PTW handling on RO memslots KVM: x86: Do not return host topology information from KVM_GET_SUPPORTED_CPUID ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx ALSA: hda/realtek - Turn on power early ALSA: usb-audio: Always initialize fixed_rate in snd_usb_find_implicit_fb_sync_format() ALSA: control-led: use strscpy in set_led_id() Revert "ALSA: usb-audio: Drop superfluous interface setup at parsing" netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits ** Affects: linux (Ubuntu) Importance: Undecided Status: Confirmed ** Affects: linux (Ubuntu Lunar) Importance: Undecided Status: Confirmed ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Lunar) Importance: Undecided Status: Confirmed -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2004146 Title: Lunar update: v6.1.7 upstream stable release Status in linux package in Ubuntu: Confirmed Status in linux source package in Lunar: Confirmed Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.1.7 upstream stable release from git://git.kernel.org/ Linux 6.1.7 pinctrl: amd: Add dynamic debugging for active GPIOs Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout" block: handle bio_split_to_limits() NULL return io_uring/io-wq: only free worker if it was allocated for creation io_uring/io-wq: free worker if task_work creation is canceled drm/i915: Fix CFI violations in gt_sysfs io_uring/poll: attempt request issue after racy poll wakeup io_uring: lock overflowing for IOPOLL efi: fix NULL-deref in init error path ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() platform/x86/amd: Fix refcount leak in amd_pmc_probe platform/surface: aggregator: Add missing call to ssam_request_sync_free() bnxt: make sure we return pages to the pool net: hns3: fix wrong use of rss size during VF rss config net: lan966x: check for ptp to be enabled in lan966x_ptp_deinit() igc: Fix PPS delta between two synchronized end-points perf kmem: Support field "node" in evsel__process_alloc_event() coping with recent tracepoint restructuring perf kmem: Support legacy tracepoints perf build: Properly guard libbpf includes octeontx2-pf: Fix resource leakage in VF driver unbind selftests/net: l2_tos_ttl_inherit.sh: Ensure environment cleanup on failure. selftests/net: l2_tos_ttl_inherit.sh: Run tests in their own netns. selftests/net: l2_tos_ttl_inherit.sh: Set IPv6 addresses with "nodad". net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) net/mlx5e: Fix macsec ssci attribute handling in offload path net/mlx5e: Don't support encap rules with gbp option net/mlx5: Fix ptp max frequency adjustment range net/mlx5e: IPoIB, Fix child PKEY interface stats on rx path net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent net/mlx5e: IPoIB, Block queue count configuration when sub interfaces are present net/mlx5e: Verify dev is present for fix features ndo net/mlx5: Fix command stats access after free net/mlx5e: TC, Keep mod hdr actions after mod hdr alloc net/mlx5: check attr pointer validity before dereferencing it Revert "r8169: disable detection of chip version 36" net/sched: act_mpls: Fix warning during failed attribute validation drm/vmwgfx: Remove rcu locks from user resources drm/vmwgfx: Remove vmwgfx_hashtab drm/vmwgfx: Refactor ttm reference object hashtable to use linux/hashtable. drm/vmwgfx: Refactor resource validation hashtable to use linux/hashtable implementation. drm/vmwgfx: Remove ttm object hashtable drm/vmwgfx: Refactor resource manager's hashtable to use linux/hashtable implementation. drm/vmwgfx: Write the driver id registers ice: Add check for kzalloc ice: Fix potential memory leak in ice_gnss_tty_write() drm/amdgpu: Fix potential NULL dereference tools/nolibc: fix the O_* fcntl/open macro definitions for riscv tools/nolibc: restore mips branch ordering in the _start block ASoC: qcom: Fix building APQ8016 machine driver without SOUNDWIRE af_unix: selftest: Fix the size of the parameter to connect() gro: take care of DODGY packets gro: avoid checking for a failed search nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() hvc/xen: lock console list traversal sched/core: Fix arch_scale_freq_tick() on tickless systems octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable nfsd: fix handling of cached open files in nfsd4_open codepath nfsd: rework refcounting in filecache NFSD: Add an nfsd_file_fsync tracepoint nfsd: reorganize filecache.c nfsd: remove the pages_flushed statistic from filecache NFSD: Add an NFSD_FILE_GC flag to enable nfsd_file garbage collection NFSD: Revert "NFSD: NFSv4 CLOSE should release an nfsd_file immediately" NFSD: Pass the target nfsd_file to nfsd_commit() tipc: fix unexpected link reset due to discovery messages stmmac: dwmac-mediatek: remove the dwmac_fix_mac_speed ALSA: usb-audio: Relax hw constraints for implicit fb sync ALSA: usb-audio: Make sure to stop endpoints before closing EPs mtd: cfi: allow building spi-intel standalone mtd: parsers: scpart: fix __udivdi3 undefined on mips ASoC: wm8904: fix wrong outputs volume after power reactivation drm/msm/dpu: Fix memory leak in msm_mdss_parse_data_bus_icc_path drm/msm/dpu: Fix some kernel-doc comments ASoC: Intel: sof-nau8825: fix module alias overflow ASoC: Intel: sof_nau8825: support rt1015p speaker amplifier ASoC: Intel: fix sof-nau8825 link failure scsi: ufs: core: WLUN suspend SSU/enter hibern8 fail recovery scsi: mpi3mr: Refer CONFIG_SCSI_MPI3MR in Makefile scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM regulator: da9211: Use irq handler when ready x86/resctrl: Fix event counts regression in reused RMIDs x86/resctrl: Fix task CLOSID/RMID update race x86/pat: Fix pat_x_mtrr_type() for MTRR disabled case EDAC/device: Fix period calculation in edac_device_reset_delay_period() x86/boot: Avoid using Intel mnemonics in AT&T syntax asm powerpc/imc-pmu: Fix use of mutex in IRQs disabled section selftests: netfilter: fix transaction test script timeout handling netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. sched/core: Fix use-after-free bug in dup_user_cpus_ptr() iommu/arm-smmu: Report IOMMU_CAP_CACHE_COHERENCY even betterer iommu/arm-smmu: Don't unregister on shutdown iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() iommu/arm-smmu-v3: Don't unregister on shutdown iommu/iova: Fix alloc iova overflows issue mm: Always release pages to the buddy allocator in memblock_free_late(). drm/amdgpu: enable VCN DPG for GC IP v11.0.4 drm/amdgpu: Enable pg/cg flags on GC11_0_4 for VCN drm/amdgpu: add soc21 common ip block support for GC 11.0.4 drm/amd/pm: enable GPO dynamic control support for SMU13.0.7 drm/amd/pm: enable GPO dynamic control support for SMU13.0.0 drm/amd/pm: Enable bad memory page/channel recording support for smu v13_0_0 drm/amd/pm: enable mode1 reset on smu_v13_0_10 usb: ulpi: defer ulpi_register on ulpi_read_id timeout drm/i915/gt: Cleanup partial engine discovery failures iavf/iavf_main: actually log ->src mask when talking about it ipv6: raw: Deduct extension header length in rawv6_push_pending_frames ixgbe: fix pci device refcount leak platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe dt-bindings: msm/dsi: Don't require vcca-supply on 14nm PHY dt-bindings: msm/dsi: Don't require vdds-supply on 10nm PHY drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer platform/x86: ideapad-laptop: Add Legion 5 15ARH05 DMI id to set_fn_lock_led_list[] arm64/mm: fix incorrect file_map_count for invalid pmd arm64: ptrace: Use ARM64_SME to guard the SME register enumerations dt-bindings: msm: dsi-phy-28nm: Add missing qcom, dsi-phy-regulator-ldo-mode arm64/mm: add pud_user_exec() check in pud_user_accessible_page() arm64/signal: Always accept SVE signal frames on SME only systems dt-bindings: msm: dsi-controller-main: Fix description of core clock dt-bindings: msm: dsi-controller-main: Fix power-domain constraint arm64/signal: Always allocate SVE signal frames on SME only systems drm/msm/adreno: Make adreno quirks not overwrite each other firmware/psci: Don't register with debugfs if PSCI isn't available firmware/psci: Fix MEM_PROTECT_RANGE function numbers drm/msm: another fix for the headless Adreno GPU dt-bindings: msm: dsi-controller-main: Fix operating-points-v2 constraint platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting platform/x86: asus-wmi: Don't load fan curves without fan platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode platform/x86: int3472/discrete: Ensure the clk/power enable pins are in output mode platform/surface: aggregator: Ignore command messages not intended for us platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER if present ACPI: video: Allow selecting NVidia-WMI-EC or Apple GMUX backlight from the cmdline ASoC: rt9120: Make dev PM runtime bind AsoC component PM io_uring/fdinfo: include locked hash table in fdinfo output cifs: fix double free on failed kerberos auth cifs: do not query ifaces on smb1 mounts cifs: fix file info setting in cifs_open_file() cifs: fix file info setting in cifs_query_path_info() cifs: Fix uninitialized memory read for smb311 posix symlink create Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10 properly"" drm/amd/display: move remaining FPU code to dml folder drm/amd/pm: add the missing mapping for PPT feature on SMU13.0.0 and 13.0.7 drm/amd/pm: correct the reference clock for fan speed(rpm) calculation drm/amdgpu: Fixed bug on error when unloading amdgpu drm/amd: Delay removal of the firmware framebuffer drm/i915: Fix potential context UAFs drm/i915: Reserve enough fence slot for i915_vma_unbind_async drm/i915/gt: Reset twice drm: Optimize drm buddy top-down allocation method drm/amd/pm/smu13: BACO is supported when it's in BACO state drm/virtio: Fix GEM handle creation UAF s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops cpufreq: amd-pstate: fix kernel hang issue while amd-pstate unregistering elfcore: Add a cprm parameter to elf_core_extra_{phdrs,data_size} ASoC: qcom: lpass-cpu: Fix fallback SD line index handling brcmfmac: Prefer DT board type over DMI board type s390/kexec: fix ipl report address for kdump perf auxtrace: Fix address filter duplicate symbol selection net: stmmac: add aux timestamps fifo clearance wait ACPI: Fix selecting wrong ACPI fwnode for the iGPU on some Dell laptops arm64: cmpxchg_double*: hazard against entire exchange variable arm64: mte: Avoid the racy walk of the vma list during core dump arm64: mte: Fix double-freeing of the temporary tag storage during coredump io_uring/poll: add hash if ready poll request can't complete inline docs: Fix the docs build with Sphinx 6.0 efi: tpm: Avoid READ_ONCE() for accessing the event log efi: fix userspace infinite retry read efivars after EFI runtime services page fault KVM: arm64: Fix S1PTW handling on RO memslots KVM: x86: Do not return host topology information from KVM_GET_SUPPORTED_CPUID ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx ALSA: hda/realtek - Turn on power early ALSA: usb-audio: Always initialize fixed_rate in snd_usb_find_implicit_fb_sync_format() ALSA: control-led: use strscpy in set_led_id() Revert "ALSA: usb-audio: Drop superfluous interface setup at parsing" netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2004146/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp