This bug was fixed in the package linux - 6.11.0-26.26
---
linux (6.11.0-26.26) oracular; urgency=medium
* oracular/linux: 6.11.0-26.26 -proposed tracker (LP: #2107166)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2025.04.14)
* drm/xe: prevent potential UAF in pf_provision_vf_ggtt() (LP: #2106652)
- drm/xe: prevent potential UAF in pf_provision_vf_ggtt()
* Oracular update: upstream stable patchset 2025-04-09 (LP: #2106703)
- IB/mlx5: Set and get correct qp_num for a DCT QP
- RDMA/mana_ib: Allocate PAGE aligned doorbell index
- scsi: ufs: core: Fix ufshcd_is_ufs_dev_busy() and ufshcd_eh_timed_out()
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- SUNRPC: convert RPC_TASK_* constants to enum
- SUNRPC: Prevent looping due to rpc_signal_task() races
- SUNRPC: Handle -ETIMEDOUT return from tlshd
- RDMA/mlx5: Fix AH static rate parsing
- scsi: core: Clear driver private data when retrying request
- RDMA/mlx5: Fix bind QP error cleanup flow
- sunrpc: suppress warnings for unused procfs functions
- ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports
- Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response
- rxrpc: rxperf: Fix missing decoding of terminal magic cookie
- afs: Fix the server_list to unuse a displaced server rather than putting
it
- net: loopback: Avoid sending IP packets without an Ethernet header
- net: set the minimum for net_hotdata.netdev_budget_usecs
- ipv4: icmp: Pass full DS field to ip_route_input()
- ipv4: icmp: Unmask upper DSCP bits in icmp_route_lookup()
- ipvlan: Unmask upper DSCP bits in ipvlan_process_v4_outbound()
- ipv4: Convert icmp_route_lookup() to dscp_t.
- ipv4: Convert ip_route_input() to dscp_t.
- ipvlan: Prepare ipvlan_process_v4_outbound() to future .flowi4_tos
conversion.
- ipvlan: ensure network headers are in skb linear part
- net: cadence: macb: Synchronize stats calculations
- ASoC: es8328: fix route from DAC to output
- ipvs: Always clear ipvs_property flag in skb_scrub_packet()
- firmware: cs_dsp: Remove async regmap writes
- ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15
- ice: add E830 HW VF mailbox message limit support
- ice: Fix deinitializing VF in error path
- tcp: Defer ts_recent changes until req is owned
- net: Clear old fragment checksum value in napi_reuse_skb
- net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination.
- net/mlx5: IRQ, Fix null string in debug print
- net: ipv6: fix dst ref loop on input in seg6 lwt
- net: ipv6: fix dst ref loop on input in rpl lwt
- net: ti: icss-iep: Reject perout generation request
- perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- io_uring/net: save msg_control for compat
- x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems
- phy: rockchip: naneng-combphy: compatible reset with old DT
- riscv: KVM: Fix hart suspend status check
- riscv: KVM: Fix SBI IPI error generation
- riscv: KVM: Fix SBI TIME error generation
- tracing: Fix bad hist from corrupting named_triggers list
- ftrace: Avoid potential division by zero in function_stat_show()
- ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2
- ALSA: hda/realtek: Fix microphone regression on ASUS N705UD
- perf/core: Add RCU read lock protection to perf_iterate_ctx()
- perf/x86: Fix low freqency setting issue
- perf/core: Fix low freq setting via IOC_PERIOD
- drm/amd/display: Disable PSR-SU on eDP panels
- drm/amd/display: Fix HPD after gpu reset
- i2c: npcm: disable interrupt enable bit before devm_request_irq
- i2c: ls2x: Fix frequency division register access
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- net: enetc: fix the off-by-one issue in enetc_map_tx_buffs()
- net: enetc: keep track of correct Tx BD count in enetc_map_tx_tso_buffs()
- net: enetc: update UDP checksum when updating originTimestamp field
- net: enetc: correct the xdp_tx statistics
- net: enetc: fix the off-by-one issue in enetc_map_tx_tso_buffs()
- phy: tegra: xusb: reset VBUS & ID OVERRIDE
- phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk
- mptcp: always handle address removal under msk socket lock
- mptcp: reset when MPTCP opts are dropped after join
- vmlinux.lds: Ensure that const vars with relocations are mapped R/O
- rcuref: Plug slowpath race in rcuref_put()
- sched/core: Prevent rescheduling when interrupts are disabled
- scsi: ufs: core: bsg: Fix crash when arpmb command fails
- rseq/selftests: Fix riscv rseq_offset_deref_addv inline asm
- riscv/futex: sign extend
