Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       upstream stable patchset 2025-09-04

                Ported from the following upstream stable releases:
                        v6.12.37, v6.15.6

       from git://git.kernel.org/

rtc: pcf2127: add missing semicolon after statement
rtc: pcf2127: fix SPI command byte for PCF2131
rtc: cmos: use spin_lock_irqsave in cmos_interrupt
virtio-net: xsk: rx: fix the frame's length check
virtio-net: ensure the received length does not exceed allocated size
s390/pci: Fix stale function handles in error handling
s390/pci: Do not try re-enabling load/store if device is disabled
net: txgbe: request MISC IRQ in ndo_open
vsock/vmci: Clear the vmci transport packet properly when initializing it
net: libwx: fix the incorrect display of the queue number
mmc: sdhci: Add a helper function for dump register in dynamic debug mode
Revert "mmc: sdhci: Disable SD card clock before changing parameters"
mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier
Bluetooth: HCI: Set extended advertising data synchronously
Bluetooth: hci_sync: revert some mesh modifications
Bluetooth: MGMT: set_mesh: update LE scan interval and window
Bluetooth: MGMT: mesh_send: check instances prior disabling advertising
iommufd/selftest: Fix iommufd_dirty_tracking with large hugepage sizes
regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt()
usb: typec: altmodes/displayport: do not index invalid pin_assignments
mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
mtk-sd: Prevent memory corruption from DMA map failure
mtk-sd: reset host->mrq on prepare_data() error
drm/v3d: Disable interrupts before resetting the GPU
firmware: arm_ffa: Fix memory leak by freeing notifier callback node
firmware: arm_ffa: Move memory allocation outside the mutex locking
firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context
arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename
platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling
RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
scsi: sd: Fix VPD page 0xb7 length check
scsi: ufs: core: Fix spelling of a sysfs attribute name
RDMA/mlx5: Fix HW counters query for non-representor devices
RDMA/mlx5: Fix CC counters query for MPV
RDMA/mlx5: Fix vport loopback for MPV device
platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1
platform/mellanox: nvsw-sn2201: Fix bus number in adapter error message
Bluetooth: Prevent unintended pause by checking if advertising is active
btrfs: fix missing error handling when searching for inode refs during log 
replay
btrfs: fix iteration of extrefs during log replay
btrfs: return a btrfs_inode from btrfs_iget_logging()
btrfs: return a btrfs_inode from read_one_inode()
btrfs: fix invalid inode pointer dereferences during log replay
btrfs: fix inode lookup error handling during log replay
btrfs: record new subvolume in parent dir earlier to avoid dir logging races
btrfs: propagate last_unlink_trans earlier when doing a rmdir
btrfs: use btrfs_record_snapshot_destroy() during rmdir
ethernet: atl1: Add missing DMA mapping error checks and count errors
dpaa2-eth: fix xdp_rxq_info leak
drm/exynos: fimd: Guard display clock control with runtime PM calls
spi: spi-fsl-dspi: Clear completion counter before initiating transfer
drm/i915/selftests: Change mock_request() to return error pointers
nvme: Fix incorrect cdw15 value in passthru error logging
nvmet: fix memory leak of bio integrity
platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
platform/x86: hp-bioscfg: Fix class device unregistration
platform/x86: think-lmi: Fix class device unregistration
platform/x86: dell-wmi-sysman: Fix class device unregistration
platform/mellanox: mlxreg-lc: Fix logic error in power state check
drm/bridge: aux-hpd-bridge: fix assignment of the of_node
net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
drm/i915/gt: Fix timeline left held on VMA alloc error
drm/i915/gsc: mei interrupt top half should be in irq disabled context
idpf: return 0 size for RSS key if not supported
idpf: convert control queue mutex to a spinlock
igc: disable L1.2 PCI-E link substate to avoid performance issue
smb: client: set missing retry flag in smb2_writev_callback()
smb: client: set missing retry flag in cifs_readv_callback()
smb: client: set missing retry flag in cifs_writev_callback()
netfs: Fix i_size updating
lib: test_objagg: Set error message in check_expect_hints_stats()
amd-xgbe: align CL37 AN sequence as per databook
enic: fix incorrect MTU comparison in enic_change_mtu()
rose: fix dangling neighbour pointers in rose_rt_device_down()
nui: Fix dma_mapping_error() check
amd-xgbe: do not double read link status
smb: client: fix race condition in negotiate timeout by using more precise 
timing
crypto: iaa - Remove dst_null support
crypto: iaa - Do not clobber req->base.data
kunit: qemu_configs: sparc: use Zilog console
kunit: qemu_configs: sparc: Explicitly enable CONFIG_SPARC32=y
kunit: qemu_configs: Disable faulting tests on 32-bit SPARC
gfs2: Decode missing glock flags in tracepoints
gfs2: Add GLF_PENDING_REPLY flag
gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE
gfs2: deallocate inodes in gfs2_create_inode
btrfs: prepare btrfs_page_mkwrite() for large folios
btrfs: fix wrong start offset for delalloc space release during mmap write
ASoC: tas2764: Extend driver to SN012776
ASoC: tas2764: Reinit cache on part reset
ACPI: thermal: Fix stale comment regarding trip points
ACPI: thermal: Execute _SCP before reading trip points
RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup" bug
sched_ext: Make scx_group_set_weight() always update tg->scx.weight
drm/msm: Fix a fence leak in submit error path
drm/msm: Fix another leak in the submit error path
ALSA: sb: Don't allow changing the DMA mode during operations
ALSA: sb: Force to disable DMAs once when DMA mode is changed
ata: libata-acpi: Do not assume 40 wire cable if no devices are enabled
ata: pata_cs5536: fix build on 32-bit UML
ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic
platform/x86/amd/pmc: Add PCSpecialist Lafite Pro V 14M to 8042 quirks list
genirq/irq_sim: Initialize work context pointers properly
powerpc: Fix struct termio related ioctl macros
ASoC: amd: yc: update quirk data for HP Victus
regulator: fan53555: add enable_time support and soft-start times
scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
aoe: defer rexmit timer downdev work to workqueue
wifi: mac80211: drop invalid source address OCB frames
wifi: ath6kl: remove WARN on bad firmware input
ACPICA: Refuse to evaluate a method if arguments are missing
mtd: spinand: fix memory leak of ECC engine conf
rcu: Return early if callback is not specified
module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper
fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
RDMA/mlx5: Fix cache entry update on dereg error
IB/mlx5: Fix potential deadlock in MR deregistration
NFSv4/flexfiles: Fix handling of NFS level errors in I/O
usb: xhci: Skip xhci_reset in xhci_resume if xhci is being removed
Revert "usb: xhci: Implement xhci_handshake_check_state() helper"
usb: xhci: quirk for data loss in ISOC transfers
xhci: dbctty: disable ECHO flag by default
xhci: dbc: Flush queued requests before stopping dbc
xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
Input: xpad - support Acer NGR 200 Controller
Input: iqs7222 - explicitly define number of external channels
usb: cdnsp: do not disable slot for disabled slot
usb: cdnsp: Fix issue with CV Bad Descriptor test
usb: dwc3: Abort suspend on soft disconnect failure
usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume
usb: acpi: fix device link removal
smb: client: fix readdir returning wrong type with POSIX extensions
cifs: all initializations for tcon should happen in tcon_info_alloc
dma-buf: fix timeout handling in dma_resv_wait_timeout v2
i2c/designware: Fix an initialization issue
Logitech C-270 even more broken
optee: ffa: fix sleep in atomic context
iommu/rockchip: prevent iommus dead loop when two masters share one IOMMU
powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed
riscv: cpu_ops_sbi: Use static array for boot_data
platform/x86: think-lmi: Create ksets consecutively
platform/x86: think-lmi: Fix kobject cleanup
platform/x86: think-lmi: Fix sysfs group cleanup
mm/vmalloc: fix data race in show_numa_info()
x86/bugs: Rename MDS machinery to something more generic
x86/microcode/AMD: Add TSA microcode SHAs
x86/process: Move the buffer clearing before MONITOR
iommufd/selftest: Add missing close(mfd) in memfd_mmap()
iommufd/selftest: Add asserts testing global mfd
xfs: actually use the xfs_growfs_check_rtgeom tracepoint
mmc: sdhci-uhs2: Adjust some error messages and register dump for SD UHS-II card
mmc: core: Adjust some error messages for SD UHS-II cards
RDMA/mlx5: reduce stack usage in mlx5_ib_ufile_hw_cleanup
scsi: core: Enforce unlimited max_segment_size when virt_boundary_mask is set
btrfs: fix failure to rebuild free space tree using multiple transactions
nvme-pci: refresh visible attrs after being checked
drm/bridge: panel: move prepare_prev_first handling to 
drm_panel_bridge_add_typed
netfs: Fix hang due to missing case in final DIO read result collection
netfs: Fix looping in wait functions
netfs: Fix ref leak on inserted extra subreq in write retry
drm/xe/guc: Enable w/a 16026508708
drm/xe/guc_pc: Add _locked variant for min/max freq
drm/xe: Split xe_device_td_flush()
drm/xe/bmg: Update Wa_14022085890
drm/xe/bmg: Update Wa_22019338487
net: ipv4: fix stat increase when udp early demux drops the packet
smb: client: fix native SMB symlink traversal
netfs: Fix double put of request
drm/xe: Allow dropping kunit dependency as built-in
x86/platform/amd: move final timeout check to after final sleep
usb: dwc3: gadget: Fix TRB reclaim logic for short transfers and ZLPs
dt-bindings: i2c: realtek,rtl9301: Fix missing 'reg' constraint
x86/bugs: Add a Transient Scheduler Attacks mitigation
UBUNTU: [Config] Enable MITIGATION_TSA
KVM: x86: Sort CPUID_8000_0021_EAX leaf bits properly
KVM: SVM: Advertise TSA CPUID bits to guests
UBUNTU: Upstream stable to v6.12.37, v6.15.6

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: linux (Ubuntu Plucky)
     Importance: Medium
     Assignee: Noah Wager (nwager)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Plucky)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu)
       Status: Confirmed => Invalid

** Changed in: linux (Ubuntu Plucky)
   Importance: Undecided => Medium

** Changed in: linux (Ubuntu Plucky)
       Status: New => In Progress

** Changed in: linux (Ubuntu Plucky)
     Assignee: (unassigned) => Noah Wager (nwager)

** Description changed:

  
      SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
         upstream stable patchset 2025-09-04
+ 
+                 Ported from the following upstream stable releases:
+                         v6.12.37, v6.15.6
+ 
         from git://git.kernel.org/
+ 
+ rtc: pcf2127: add missing semicolon after statement
+ rtc: pcf2127: fix SPI command byte for PCF2131
+ rtc: cmos: use spin_lock_irqsave in cmos_interrupt
+ virtio-net: xsk: rx: fix the frame's length check
+ virtio-net: ensure the received length does not exceed allocated size
+ s390/pci: Fix stale function handles in error handling
+ s390/pci: Do not try re-enabling load/store if device is disabled
+ net: txgbe: request MISC IRQ in ndo_open
+ vsock/vmci: Clear the vmci transport packet properly when initializing it
+ net: libwx: fix the incorrect display of the queue number
+ mmc: sdhci: Add a helper function for dump register in dynamic debug mode
+ Revert "mmc: sdhci: Disable SD card clock before changing parameters"
+ mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier
+ Bluetooth: HCI: Set extended advertising data synchronously
+ Bluetooth: hci_sync: revert some mesh modifications
+ Bluetooth: MGMT: set_mesh: update LE scan interval and window
+ Bluetooth: MGMT: mesh_send: check instances prior disabling advertising
+ iommufd/selftest: Fix iommufd_dirty_tracking with large hugepage sizes
+ regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
+ Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt()
+ usb: typec: altmodes/displayport: do not index invalid pin_assignments
+ mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
+ mtk-sd: Prevent memory corruption from DMA map failure
+ mtk-sd: reset host->mrq on prepare_data() error
+ drm/v3d: Disable interrupts before resetting the GPU
+ firmware: arm_ffa: Fix memory leak by freeing notifier callback node
+ firmware: arm_ffa: Move memory allocation outside the mutex locking
+ firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context
+ arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename
+ platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
+ RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling
+ RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
+ nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
+ NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
+ scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
+ scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
+ scsi: sd: Fix VPD page 0xb7 length check
+ scsi: ufs: core: Fix spelling of a sysfs attribute name
+ RDMA/mlx5: Fix HW counters query for non-representor devices
+ RDMA/mlx5: Fix CC counters query for MPV
+ RDMA/mlx5: Fix vport loopback for MPV device
+ platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1
+ platform/mellanox: nvsw-sn2201: Fix bus number in adapter error message
+ Bluetooth: Prevent unintended pause by checking if advertising is active
+ btrfs: fix missing error handling when searching for inode refs during log 
replay
+ btrfs: fix iteration of extrefs during log replay
+ btrfs: return a btrfs_inode from btrfs_iget_logging()
+ btrfs: return a btrfs_inode from read_one_inode()
+ btrfs: fix invalid inode pointer dereferences during log replay
+ btrfs: fix inode lookup error handling during log replay
+ btrfs: record new subvolume in parent dir earlier to avoid dir logging races
+ btrfs: propagate last_unlink_trans earlier when doing a rmdir
+ btrfs: use btrfs_record_snapshot_destroy() during rmdir
+ ethernet: atl1: Add missing DMA mapping error checks and count errors
+ dpaa2-eth: fix xdp_rxq_info leak
+ drm/exynos: fimd: Guard display clock control with runtime PM calls
+ spi: spi-fsl-dspi: Clear completion counter before initiating transfer
+ drm/i915/selftests: Change mock_request() to return error pointers
+ nvme: Fix incorrect cdw15 value in passthru error logging
+ nvmet: fix memory leak of bio integrity
+ platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
+ platform/x86: hp-bioscfg: Fix class device unregistration
+ platform/x86: think-lmi: Fix class device unregistration
+ platform/x86: dell-wmi-sysman: Fix class device unregistration
+ platform/mellanox: mlxreg-lc: Fix logic error in power state check
+ drm/bridge: aux-hpd-bridge: fix assignment of the of_node
+ net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
+ drm/i915/gt: Fix timeline left held on VMA alloc error
+ drm/i915/gsc: mei interrupt top half should be in irq disabled context
+ idpf: return 0 size for RSS key if not supported
+ idpf: convert control queue mutex to a spinlock
+ igc: disable L1.2 PCI-E link substate to avoid performance issue
+ smb: client: set missing retry flag in smb2_writev_callback()
+ smb: client: set missing retry flag in cifs_readv_callback()
+ smb: client: set missing retry flag in cifs_writev_callback()
+ netfs: Fix i_size updating
+ lib: test_objagg: Set error message in check_expect_hints_stats()
+ amd-xgbe: align CL37 AN sequence as per databook
+ enic: fix incorrect MTU comparison in enic_change_mtu()
+ rose: fix dangling neighbour pointers in rose_rt_device_down()
+ nui: Fix dma_mapping_error() check
+ amd-xgbe: do not double read link status
+ smb: client: fix race condition in negotiate timeout by using more precise 
timing
+ crypto: iaa - Remove dst_null support
+ crypto: iaa - Do not clobber req->base.data
+ kunit: qemu_configs: sparc: use Zilog console
+ kunit: qemu_configs: sparc: Explicitly enable CONFIG_SPARC32=y
+ kunit: qemu_configs: Disable faulting tests on 32-bit SPARC
+ gfs2: Decode missing glock flags in tracepoints
+ gfs2: Add GLF_PENDING_REPLY flag
+ gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE
+ gfs2: deallocate inodes in gfs2_create_inode
+ btrfs: prepare btrfs_page_mkwrite() for large folios
+ btrfs: fix wrong start offset for delalloc space release during mmap write
+ ASoC: tas2764: Extend driver to SN012776
+ ASoC: tas2764: Reinit cache on part reset
+ ACPI: thermal: Fix stale comment regarding trip points
+ ACPI: thermal: Execute _SCP before reading trip points
+ RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup" bug
+ sched_ext: Make scx_group_set_weight() always update tg->scx.weight
+ drm/msm: Fix a fence leak in submit error path
+ drm/msm: Fix another leak in the submit error path
+ ALSA: sb: Don't allow changing the DMA mode during operations
+ ALSA: sb: Force to disable DMAs once when DMA mode is changed
+ ata: libata-acpi: Do not assume 40 wire cable if no devices are enabled
+ ata: pata_cs5536: fix build on 32-bit UML
+ ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic
+ platform/x86/amd/pmc: Add PCSpecialist Lafite Pro V 14M to 8042 quirks list
+ genirq/irq_sim: Initialize work context pointers properly
+ powerpc: Fix struct termio related ioctl macros
+ ASoC: amd: yc: update quirk data for HP Victus
+ regulator: fan53555: add enable_time support and soft-start times
+ scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
+ aoe: defer rexmit timer downdev work to workqueue
+ wifi: mac80211: drop invalid source address OCB frames
+ wifi: ath6kl: remove WARN on bad firmware input
+ ACPICA: Refuse to evaluate a method if arguments are missing
+ mtd: spinand: fix memory leak of ECC engine conf
+ rcu: Return early if callback is not specified
+ module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper
+ fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
+ RDMA/mlx5: Fix cache entry update on dereg error
+ IB/mlx5: Fix potential deadlock in MR deregistration
+ NFSv4/flexfiles: Fix handling of NFS level errors in I/O
+ usb: xhci: Skip xhci_reset in xhci_resume if xhci is being removed
+ Revert "usb: xhci: Implement xhci_handshake_check_state() helper"
+ usb: xhci: quirk for data loss in ISOC transfers
+ xhci: dbctty: disable ECHO flag by default
+ xhci: dbc: Flush queued requests before stopping dbc
+ xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
+ Input: xpad - support Acer NGR 200 Controller
+ Input: iqs7222 - explicitly define number of external channels
+ usb: cdnsp: do not disable slot for disabled slot
+ usb: cdnsp: Fix issue with CV Bad Descriptor test
+ usb: dwc3: Abort suspend on soft disconnect failure
+ usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume
+ usb: acpi: fix device link removal
+ smb: client: fix readdir returning wrong type with POSIX extensions
+ cifs: all initializations for tcon should happen in tcon_info_alloc
+ dma-buf: fix timeout handling in dma_resv_wait_timeout v2
+ i2c/designware: Fix an initialization issue
+ Logitech C-270 even more broken
+ optee: ffa: fix sleep in atomic context
+ iommu/rockchip: prevent iommus dead loop when two masters share one IOMMU
+ powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be 
changed
+ riscv: cpu_ops_sbi: Use static array for boot_data
+ platform/x86: think-lmi: Create ksets consecutively
+ platform/x86: think-lmi: Fix kobject cleanup
+ platform/x86: think-lmi: Fix sysfs group cleanup
+ mm/vmalloc: fix data race in show_numa_info()
+ x86/bugs: Rename MDS machinery to something more generic
+ x86/microcode/AMD: Add TSA microcode SHAs
+ x86/process: Move the buffer clearing before MONITOR
+ iommufd/selftest: Add missing close(mfd) in memfd_mmap()
+ iommufd/selftest: Add asserts testing global mfd
+ xfs: actually use the xfs_growfs_check_rtgeom tracepoint
+ mmc: sdhci-uhs2: Adjust some error messages and register dump for SD UHS-II 
card
+ mmc: core: Adjust some error messages for SD UHS-II cards
+ RDMA/mlx5: reduce stack usage in mlx5_ib_ufile_hw_cleanup
+ scsi: core: Enforce unlimited max_segment_size when virt_boundary_mask is set
+ btrfs: fix failure to rebuild free space tree using multiple transactions
+ nvme-pci: refresh visible attrs after being checked
+ drm/bridge: panel: move prepare_prev_first handling to 
drm_panel_bridge_add_typed
+ netfs: Fix hang due to missing case in final DIO read result collection
+ netfs: Fix looping in wait functions
+ netfs: Fix ref leak on inserted extra subreq in write retry
+ drm/xe/guc: Enable w/a 16026508708
+ drm/xe/guc_pc: Add _locked variant for min/max freq
+ drm/xe: Split xe_device_td_flush()
+ drm/xe/bmg: Update Wa_14022085890
+ drm/xe/bmg: Update Wa_22019338487
+ net: ipv4: fix stat increase when udp early demux drops the packet
+ smb: client: fix native SMB symlink traversal
+ netfs: Fix double put of request
+ drm/xe: Allow dropping kunit dependency as built-in
+ x86/platform/amd: move final timeout check to after final sleep
+ usb: dwc3: gadget: Fix TRB reclaim logic for short transfers and ZLPs
+ dt-bindings: i2c: realtek,rtl9301: Fix missing 'reg' constraint
+ x86/bugs: Add a Transient Scheduler Attacks mitigation
+ UBUNTU: [Config] Enable MITIGATION_TSA
+ KVM: x86: Sort CPUID_8000_0021_EAX leaf bits properly
+ KVM: SVM: Advertise TSA CPUID bits to guests
+ UBUNTU: Upstream stable to v6.12.37, v6.15.6

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2122072

Title:
  Plucky update: upstream stable patchset 2025-09-04

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2122072/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to