** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Noble)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Noble)
Status: New => In Progress
** Summary changed:
- Noble update: upstream stable patchset 2026-01-19
+ Noble update: upstream stable patchset 2026-01-20
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
- upstream stable patchset 2026-01-19
+ upstream stable patchset 2026-01-20
+
+ Ported from the following upstream stable releases:
+ v6.6.107, v6.12.48
+
from git://git.kernel.org/
+
+ mm: introduce and use {pgd,p4d}_populate_kernel()
+ kasan: fix GCC mem-intrinsic prefix with sw tags
+ net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
+ ima: limit the number of ToMToU integrity violations
+ flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read
+ SUNRPC: call xs_sock_process_cmsg for all cmsg
+ NFSv4: Don't clear capabilities that won't be reset
+ NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set
+ NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server
+ tracing: Fix tracing_marker may trigger page fault during preempt_disable
+ ftrace/samples: Fix function size computation
+ fs/nfs/io: make nfs_start_io_*() killable
+ NFS: Serialise O_DIRECT i/o and truncate()
+ NFSv4.2: Serialise O_DIRECT i/o and fallocate()
+ NFSv4.2: Serialise O_DIRECT i/o and clone range
+ NFSv4.2: Serialise O_DIRECT i/o and copy range
+ NFSv4/flexfiles: Fix layout merge mirror check.
+ tracing: Silence warning when chunk allocation fails in trace_pid_write
+ s390/cpum_cf: Deny all sampling events by counter PMU
+ bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()
+ tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate
psock->cork.
+ proc: fix type confusion in pde_set_flags()
+ EDAC/altera: Delete an inappropriate dma_free_coherent() call
+ compiler-clang.h: define __SANITIZE_*__ macros only when undefined
+ ocfs2: fix recursive semaphore deadlock in fiemap call
+ i2c: i801: Hide Intel Birch Stream SoC TCO WDT
+ net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM
wakeups
+ mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
+ mtd: rawnand: stm32_fmc2: fix ECC overwrite
+ fuse: check if copy_file_range() returns larger than requested size
+ fuse: prevent overflow in copy_file_range return value
+ mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
+ mm/damon/core: set quota->charged_from to jiffies at first charge window
+ drm/mediatek: fix potential OF node use-after-free
+ drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time
+ drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages
+ mtd: nand: raw: atmel: Fix comment in timings preparation
+ mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing
+ libceph: fix invalid accesses to ceph_connection_v1_info
+ mm/damon/sysfs: fix use-after-free in state_show()
+ mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()
+ mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()
+ btrfs: use readahead_expand() on compressed extents
+ btrfs: fix corruption reading compressed range when block size is smaller
than page size
+ mm/khugepaged: fix the address passed to notifier on testing young
+ kernfs: Fix UAF in polling when open file is released
+ Input: iqs7222 - avoid enabling unused interrupts
+ Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table
+ tty: hvc_console: Call hvc_kick in hvc_write unconditionally
+ serial: sc16is7xx: fix bug in flow control levels init
+ dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks
+ USB: serial: option: add Telit Cinterion FN990A w/audio compositions
+ USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions
+ net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()
+ net: bridge: Bounce invalid boolopts
+ tunnels: reset the GSO metadata before reusing the skb
+ docs: networking: can: change bcm_msg_head frames member to support flexible
array
+ igb: fix link test skipping when interface is admin down
+ i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
+ can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when
j1939_local_ecu_get() failed
+ can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get()
fails
+ can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB
+ net: hsr: Add VLAN CTAG filter support
+ hsr: use rtnl lock when iterating over ports
+ hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr
+ dmaengine: idxd: Remove improper idxd_free
+ dmaengine: idxd: Fix refcount underflow on module unload
+ dmaengine: idxd: Fix double free in idxd_setup_wqs()
+ dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
+ regulator: sy7636a: fix lifecycle of power good gpio
+ hrtimer: Remove unused function
+ hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active()
+ hrtimers: Unconditionally update target CPU base after offline timer migration
+ RISC-V: Remove unnecessary include from compat.h
+ xhci: fix memory leak regression when freeing xhci vdev devices depth first
+ USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
+ usb: gadget: midi2: Fix missing UMP group attributes initialization
+ usb: gadget: midi2: Fix MIDI2 IN EP max packet size
+ dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
+ dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate
+ phy: tegra: xusb: fix device and OF node leak at probe
+ phy: ti-pipe3: fix device leak at unbind
+ ksmbd: mark SMB2_SESSION_EXPIRED to session when destroying previous session
+ ksmbd: fix race condition between destroy_previous_session() and smb2
operations()
+ ksmbd: fix null pointer dereference in alloc_preauth_hash()
+ net: mdiobus: release reset_gpio in mdiobus_unregister_device()
+ drm/amdgpu: fix a memory leak in fence cleanup when unloading
+ drm/i915/power: fix size for for_each_set_bit() in abox iteration
+ nvme-pci: skip nvme_write_sq_db on empty rqlist
+ ext4: introduce linear search for dentries
+ drm/i915/pmu: Fix zero delta busyness issue
+ drm/amd/display: Fix error pointers in amdgpu_dm_crtc_mem_type_changed
+ Revert "drm/amd/display: Optimize cursor position updates"
+ ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA
+ drm/amdgpu: Add back JPEG to video caps for carrizo and newer
+ trace/fgraph: Fix error handling
+ NFS: nfs_invalidate_folio() must observe the offset and size arguments
+ s390/pai: Deny all events not handled by this PMU
+ btrfs: fix squota compressed stats leak
+ netlink: specs: mptcp: add missing 'server-side' attr
+ netlink: specs: mptcp: clearly mention attributes
+ netlink: specs: mptcp: replace underscores with dashes in names
+ netlink: specs: mptcp: fix if-idx attribute type
+ ceph: fix race condition validating r_parent before applying state
+ ceph: fix race condition where r_parent becomes stale before sending message
+ mtd: spinand: winbond: Fix oob_layout for W25N01JW
+ Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime
PM wakeups"
+ drm/amd/display: use udelay rather than fsleep
+ netfilter: nft_set_rbtree: continue traversal if element is inactive
+ netfilter: nf_tables: place base_seq in struct net
+ netfilter: nf_tables: make nft_set_do_lookup available unconditionally
+ netfilter: nf_tables: restart set lookup on base_seq change
+ phy: qualcomm: phy-qcom-eusb2-repeater: fix override properties
+ phy: ti: omap-usb2: fix device leak at unbind
+ UBUNTU: Upstream stable to v6.6.107, v6.12.48
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2138681
Title:
Noble update: upstream stable patchset 2026-01-20
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2138681/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
