Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v6.17.11 upstream stable release
from git://git.kernel.org/
Linux 6.17.11
spi: cadence-quadspi: Fix cqspi_probe() error handling for runtime pm
Revert "ACPI: Suppress misleading SPCR console message when SPCR table is
absent"
usb: gadget: udc: fix use-after-free in usb_gadget_state_work
usb: udc: Add trace event for usb_gadget_set_state
mm: swap: remove duplicate nr_swap_pages decrement in get_swap_page_of_type()
libceph: replace BUG_ON with bounds check for map->max_osd
libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
libceph: fix potential use-after-free in have_mon_and_osd_map()
net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}()
net: dsa: microchip: Free previously initialized ports on init failures
net: dsa: microchip: Don't free uninitialized ksz_irq
net: dsa: microchip: ptp: Fix checks on irq_find_mapping()
net: dsa: microchip: common: Fix checks on irq_find_mapping()
drm/amd/display: Increase EDID read retries
drm/amd/display: Don't change brightness for disabled connectors
drm/amd/display: Check NULL before accessing
drm/amd/amdgpu: reserve vm invalidation engine for uni_mes
drm/amdgpu: attach tlb fence to the PTs update
drm/xe/guc: Fix stack_depot usage
drm/i915/psr: Reject async flips when selective fetch is enabled
drm: sti: fix device leaks at component probe
USB: serial: option: add support for Rolling RW101R-GL
USB: serial: ftdi_sio: add support for u-blox EVK-M101
xhci: dbgtty: fix device unregister
xhci: dbgtty: Fix data corruption when transmitting data form DbC to host
xhci: fix stale flag preventig URBs after link state error is cleared
usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call
paths
usb: dwc3: pci: Sort out the Intel device IDs
usb: dwc3: pci: add support for the Intel Nova Lake -S
usb: uas: fix urb unmapping issue when the uas device is remove during ongoing
data transfer
usb: typec: ucsi: psy: Set max current to zero when disconnected
usb: storage: sddr55: Reject out-of-bound new_pba
USB: storage: Remove subclass and protocol overrides from Novatek quirk
usb: storage: Fix memory leak in USB bulk transport
usb: renesas_usbhs: Fix synchronous external abort on unbind
usb: gadget: f_eem: Fix memory leak in eem_unwrap
usb: cdns3: Fix double resource release in cdns3_pci_probe
most: usb: fix double free on late probe failure
serial: amba-pl011: prefer dma_mapping_error() over explicit address checking
serial: 8250: Fix 8250_rsa symbol loop
mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in
mptcp_do_fastclose().
mptcp: clear scheduled subflows on retransmit
mmc: sdhci-of-dwcmshc: Promote the th1520 reset handling to ip level
mm/memfd: fix information leak in hugetlb folios
mm/huge_memory: fix NULL pointer deference when splitting folio
iommufd/driver: Fix counter initialization for counted_by annotation
firmware: stratix10-svc: fix bug in saving controller data
io_uring/net: ensure vectored buffer node import is tied to notification
regulator: rtq2208: Correct LDO2 logic judgment bits
regulator: rtq2208: Correct buck group2 phase mapping logic
r8169: fix RTL8127 hang on suspend/shutdown
pmdomain: tegra: Add GENPD_FLAG_NO_STAY_ON flag
nvmem: layouts: fix nvmem_layout_bus_uevent
slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves
thunderbolt: Add support for Intel Wildcat Lake
smb: client: fix memory leak in cifs_construct_tcon()
drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup
drivers/usb/dwc3: fix PCI parent check
dm-verity: fix unreliable memory allocation
counter: microchip-tcb-capture: Allow shared IRQ for multi-channel TCBs
ceph: fix crash in process_v2_sparse_read() for encrypted directories
can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
can: sja1000: fix max irq loop handling
can: rcar_canfd: Fix CAN-FD mode as default
Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref
atm/fore200e: Fix possible data race in fore200e_open()
ARM: dts: nxp: imx6ul: correct SAI3 interrupt line
arm64: dts: imx8qm-mek: fix mux-controller select/enable-gpios polarity
arm64: dts: imx8dxl: Correct pcie-ep interrupt number
arm64: dts: imx8dxl-ss-conn: swap interrupts number of eqos
ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230
ALSA: hda/cirrus fix cs420x MacPro 6,1 inverted jack detection
tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs
vhost: rewind next_avail_head while discarding descriptors
virtio-net: avoid unnecessary checksum calculation on guest RX
MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow
MIPS: mm: Prevent a TLB shutdown on initial uniquification
iio: adc: rtq6056: Correct the sign bit index
iio: adc: ad7380: fix SPI offload trigger rate
iio: adc: ad7280a: fix ad7280_store_balance_timer()
iio: adc: ad7124: fix temperature channel
iio: adc: ad4030: Fix _scale value for common-mode channels
iio: accel: fix ADXL355 startup race condition
iio: accel: bmc150: Fix irq assumption regression
iio: adc: stm32-dfsdm: fix st,adc-alt-channel property handling
iio:common:ssp_sensors: Fix an error handling path ssp_probe()
iio: pressure: bmp280: correct meas_time_us calculation
iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields
iio: humditiy: hdc3020: fix units for thresholds and hysteresis
iio: humditiy: hdc3020: fix units for temperature and humidity measurement
iio: buffer: support getting dma channel from the buffer
iio: buffer-dmaengine: enable .get_dma_dev()
iio: buffer-dma: support getting the DMA channel
Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
Revert "drm/amd/display: Move setup_stream_attribute"
timekeeping: Fix error code in tk_aux_sysfs_init()
afs: Fix uninit var in afs_alloc_anon_key()
spi: bcm63xx: fix premature CS deassertion on RX-only transactions
spi: nxp-fspi: Propagate fwnode in ACPI case as well
spi: spi-nxp-fspi: Add OCT-DTR mode support
spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors
spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA
riscv: dts: allwinner: d1: fix vlenb property
ovl: fail ovl_lock_rename_workdir() if either target is unhashed
afs: Fix delayed allocation of a cell's anonymous key
fs/namespace: fix reference leak in grab_requested_mnt_ns
spi: spi-cadence-quadspi: Enable pm runtime earlier to avoid imbalance
spi: spi-cadence-quadspi: Remove duplicate pm_runtime_put_autosuspend() call
mailbox: pcc: don't zero error register
mailbox: mtk-cmdq: Refine DMA address handling for the command buffer
mailbox: mailbox-test: Fix debugfs_create_dir error checking
usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors
iio: st_lsm6dsx: Fixed calibrated timestamp calculation
net: fec: do not register PPS event for PEROUT
net: fec: do not allow enabling PPS and PEROUT simultaneously
net: fec: do not update PEROUT if it is enabled
net: fec: cancel perout_timer when PEROUT is disabled
net: mctp: unconditionally set skb->dev on dst output
net: atlantic: fix fragment overflow handling in RX path
eth: fbnic: Fix counter roll-over issue
net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic
net: wwan: mhi: Keep modem name match with Foxconn T99W640
dma-direct: Fix missing sg_dma_len assignment in P2PDMA bus mappings
drm/amdgpu: fix cyan_skillfish2 gpu info fw handling
xsk: avoid data corruption on cq descriptor number
xsk: avoid overwriting skb fields for multi-buffer traffic
net: sxgbe: fix potential NULL dereference in sxgbe_rx()
team: Move team device type change at the end of team_port_add
net/mlx5e: Fix validation logic in rate limiting
drm/xe: Fix conversion from clock ticks to milliseconds
net: lan966x: Fix the initialization of taprio
net: phy: mxl-gpy: fix link properties on USXGMII and internal PHYs
net: aquantia: Add missing descriptor cache invalidation on ATL2
platform/x86: intel: punit_ipc: fix memory corruption
net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY
drm/bridge: sii902x: Fix HDMI detection with DRM_BRIDGE_ATTACH_NO_CONNECTOR
veth: reduce XDP no_direct return section to fix race
Bluetooth: SMP: Fix not generating mackey and ltk when repairing
Bluetooth: hci_core: lookup hci_conn on RX path on protocol side
Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOP
Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface
can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before
accessing data
can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before
accessing header
can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs
can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Confirmed
** Affects: linux (Ubuntu Questing)
Importance: Undecided
Status: New
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Questing)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2138824
Title:
Questing update: v6.17.11 upstream stable release
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2138824/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
