** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Questing)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Questing)
Status: New => In Progress
** Changed in: linux (Ubuntu Questing)
Assignee: (unassigned) => Bethany Jamison (bjamison)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v6.17.11 upstream stable release
from git://git.kernel.org/
-
+ can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
+ can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs
+ can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before
accessing header
+ can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before
accessing data
+ Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface
+ Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOP
+ Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
+ Bluetooth: hci_core: lookup hci_conn on RX path on protocol side
+ Bluetooth: SMP: Fix not generating mackey and ltk when repairing
+ veth: reduce XDP no_direct return section to fix race
+ drm/bridge: sii902x: Fix HDMI detection with DRM_BRIDGE_ATTACH_NO_CONNECTOR
+ net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY
+ platform/x86: intel: punit_ipc: fix memory corruption
+ net: aquantia: Add missing descriptor cache invalidation on ATL2
+ net: phy: mxl-gpy: fix link properties on USXGMII and internal PHYs
+ net: lan966x: Fix the initialization of taprio
+ drm/xe: Fix conversion from clock ticks to milliseconds
+ net/mlx5e: Fix validation logic in rate limiting
+ team: Move team device type change at the end of team_port_add
+ net: sxgbe: fix potential NULL dereference in sxgbe_rx()
+ xsk: avoid overwriting skb fields for multi-buffer traffic
+ xsk: avoid data corruption on cq descriptor number
+ drm/amdgpu: fix cyan_skillfish2 gpu info fw handling
+ dma-direct: Fix missing sg_dma_len assignment in P2PDMA bus mappings
+ net: wwan: mhi: Keep modem name match with Foxconn T99W640
+ net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic
+ eth: fbnic: Fix counter roll-over issue
+ net: atlantic: fix fragment overflow handling in RX path
+ net: mctp: unconditionally set skb->dev on dst output
+ net: fec: cancel perout_timer when PEROUT is disabled
+ net: fec: do not update PEROUT if it is enabled
+ net: fec: do not allow enabling PPS and PEROUT simultaneously
+ net: fec: do not register PPS event for PEROUT
+ iio: st_lsm6dsx: Fixed calibrated timestamp calculation
+ usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors
+ mailbox: mailbox-test: Fix debugfs_create_dir error checking
+ mailbox: mtk-cmdq: Refine DMA address handling for the command buffer
+ mailbox: pcc: don't zero error register
+ spi: spi-cadence-quadspi: Remove duplicate pm_runtime_put_autosuspend() call
+ spi: spi-cadence-quadspi: Enable pm runtime earlier to avoid imbalance
+ fs/namespace: fix reference leak in grab_requested_mnt_ns
+ afs: Fix delayed allocation of a cell's anonymous key
+ ovl: fail ovl_lock_rename_workdir() if either target is unhashed
+ riscv: dts: allwinner: d1: fix vlenb property
+ spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA
+ spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors
+ spi: spi-nxp-fspi: Add OCT-DTR mode support
+ spi: nxp-fspi: Propagate fwnode in ACPI case as well
+ spi: bcm63xx: fix premature CS deassertion on RX-only transactions
+ afs: Fix uninit var in afs_alloc_anon_key()
+ timekeeping: Fix error code in tk_aux_sysfs_init()
+ Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
+ iio: buffer-dma: support getting the DMA channel
+ iio: buffer-dmaengine: enable .get_dma_dev()
+ iio: buffer: support getting dma channel from the buffer
+ iio: humditiy: hdc3020: fix units for temperature and humidity measurement
+ iio: humditiy: hdc3020: fix units for thresholds and hysteresis
+ iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields
+ iio: pressure: bmp280: correct meas_time_us calculation
+ iio:common:ssp_sensors: Fix an error handling path ssp_probe()
+ iio: adc: stm32-dfsdm: fix st,adc-alt-channel property handling
+ iio: accel: bmc150: Fix irq assumption regression
+ iio: accel: fix ADXL355 startup race condition
+ iio: adc: ad4030: Fix _scale value for common-mode channels
+ iio: adc: ad7124: fix temperature channel
+ iio: adc: ad7280a: fix ad7280_store_balance_timer()
+ iio: adc: ad7380: fix SPI offload trigger rate
+ iio: adc: rtq6056: Correct the sign bit index
+ MIPS: mm: Prevent a TLB shutdown on initial uniquification
+ MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow
+ virtio-net: avoid unnecessary checksum calculation on guest RX
+ vhost: rewind next_avail_head while discarding descriptors
+ tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs
+ ALSA: hda/cirrus fix cs420x MacPro 6,1 inverted jack detection
+ ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230
+ arm64: dts: imx8dxl-ss-conn: swap interrupts number of eqos
+ arm64: dts: imx8dxl: Correct pcie-ep interrupt number
+ arm64: dts: imx8qm-mek: fix mux-controller select/enable-gpios polarity
+ ARM: dts: nxp: imx6ul: correct SAI3 interrupt line
+ atm/fore200e: Fix possible data race in fore200e_open()
+ Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref
+ can: rcar_canfd: Fix CAN-FD mode as default
+ can: sja1000: fix max irq loop handling
+ can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
+ ceph: fix crash in process_v2_sparse_read() for encrypted directories
+ counter: microchip-tcb-capture: Allow shared IRQ for multi-channel TCBs
+ dm-verity: fix unreliable memory allocation
+ drivers/usb/dwc3: fix PCI parent check
+ drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup
+ smb: client: fix memory leak in cifs_construct_tcon()
+ thunderbolt: Add support for Intel Wildcat Lake
+ slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves
+ nvmem: layouts: fix nvmem_layout_bus_uevent
+ pmdomain: tegra: Add GENPD_FLAG_NO_STAY_ON flag
+ r8169: fix RTL8127 hang on suspend/shutdown
+ regulator: rtq2208: Correct buck group2 phase mapping logic
+ regulator: rtq2208: Correct LDO2 logic judgment bits
+ io_uring/net: ensure vectored buffer node import is tied to notification
+ firmware: stratix10-svc: fix bug in saving controller data
+ iommufd/driver: Fix counter initialization for counted_by annotation
+ mm/huge_memory: fix NULL pointer deference when splitting folio
+ mm/memfd: fix information leak in hugetlb folios
+ mmc: sdhci-of-dwcmshc: Promote the th1520 reset handling to ip level
+ mptcp: clear scheduled subflows on retransmit
+ mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in
mptcp_do_fastclose().
+ serial: 8250: Fix 8250_rsa symbol loop
+ serial: amba-pl011: prefer dma_mapping_error() over explicit address checking
+ most: usb: fix double free on late probe failure
+ usb: cdns3: Fix double resource release in cdns3_pci_probe
+ usb: gadget: f_eem: Fix memory leak in eem_unwrap
+ usb: renesas_usbhs: Fix synchronous external abort on unbind
+ usb: storage: Fix memory leak in USB bulk transport
+ USB: storage: Remove subclass and protocol overrides from Novatek quirk
+ usb: storage: sddr55: Reject out-of-bound new_pba
+ usb: typec: ucsi: psy: Set max current to zero when disconnected
+ usb: uas: fix urb unmapping issue when the uas device is remove during
ongoing data transfer
+ usb: dwc3: pci: add support for the Intel Nova Lake -S
+ usb: dwc3: pci: Sort out the Intel device IDs
+ usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call
paths
+ xhci: fix stale flag preventig URBs after link state error is cleared
+ xhci: dbgtty: Fix data corruption when transmitting data form DbC to host
+ xhci: dbgtty: fix device unregister
+ USB: serial: ftdi_sio: add support for u-blox EVK-M101
+ USB: serial: option: add support for Rolling RW101R-GL
+ drm: sti: fix device leaks at component probe
+ drm/i915/psr: Reject async flips when selective fetch is enabled
+ drm/xe/guc: Fix stack_depot usage
+ drm/amdgpu: attach tlb fence to the PTs update
+ drm/amd/amdgpu: reserve vm invalidation engine for uni_mes
+ drm/amd/display: Check NULL before accessing
+ drm/amd/display: Don't change brightness for disabled connectors
+ drm/amd/display: Increase EDID read retries
+ net: dsa: microchip: common: Fix checks on irq_find_mapping()
+ net: dsa: microchip: ptp: Fix checks on irq_find_mapping()
+ net: dsa: microchip: Don't free uninitialized ksz_irq
+ net: dsa: microchip: Free previously initialized ports on init failures
+ net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}()
+ libceph: fix potential use-after-free in have_mon_and_osd_map()
+ libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
+ libceph: replace BUG_ON with bounds check for map->max_osd
+ mm: swap: remove duplicate nr_swap_pages decrement in get_swap_page_of_type()
+ usb: udc: Add trace event for usb_gadget_set_state
+ usb: gadget: udc: fix use-after-free in usb_gadget_state_work
+ Revert "ACPI: Suppress misleading SPCR console message when SPCR table is
absent"
+ spi: cadence-quadspi: Fix cqspi_probe() error handling for runtime pm
Linux 6.17.11
- spi: cadence-quadspi: Fix cqspi_probe() error handling for runtime pm
- Revert "ACPI: Suppress misleading SPCR console message when SPCR table is
absent"
- usb: gadget: udc: fix use-after-free in usb_gadget_state_work
- usb: udc: Add trace event for usb_gadget_set_state
- mm: swap: remove duplicate nr_swap_pages decrement in get_swap_page_of_type()
- libceph: replace BUG_ON with bounds check for map->max_osd
- libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
- libceph: fix potential use-after-free in have_mon_and_osd_map()
- net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}()
- net: dsa: microchip: Free previously initialized ports on init failures
- net: dsa: microchip: Don't free uninitialized ksz_irq
- net: dsa: microchip: ptp: Fix checks on irq_find_mapping()
- net: dsa: microchip: common: Fix checks on irq_find_mapping()
- drm/amd/display: Increase EDID read retries
- drm/amd/display: Don't change brightness for disabled connectors
- drm/amd/display: Check NULL before accessing
- drm/amd/amdgpu: reserve vm invalidation engine for uni_mes
- drm/amdgpu: attach tlb fence to the PTs update
- drm/xe/guc: Fix stack_depot usage
- drm/i915/psr: Reject async flips when selective fetch is enabled
- drm: sti: fix device leaks at component probe
- USB: serial: option: add support for Rolling RW101R-GL
- USB: serial: ftdi_sio: add support for u-blox EVK-M101
- xhci: dbgtty: fix device unregister
- xhci: dbgtty: Fix data corruption when transmitting data form DbC to host
- xhci: fix stale flag preventig URBs after link state error is cleared
- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call
paths
- usb: dwc3: pci: Sort out the Intel device IDs
- usb: dwc3: pci: add support for the Intel Nova Lake -S
- usb: uas: fix urb unmapping issue when the uas device is remove during
ongoing data transfer
- usb: typec: ucsi: psy: Set max current to zero when disconnected
- usb: storage: sddr55: Reject out-of-bound new_pba
- USB: storage: Remove subclass and protocol overrides from Novatek quirk
- usb: storage: Fix memory leak in USB bulk transport
- usb: renesas_usbhs: Fix synchronous external abort on unbind
- usb: gadget: f_eem: Fix memory leak in eem_unwrap
- usb: cdns3: Fix double resource release in cdns3_pci_probe
- most: usb: fix double free on late probe failure
- serial: amba-pl011: prefer dma_mapping_error() over explicit address checking
- serial: 8250: Fix 8250_rsa symbol loop
- mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in
mptcp_do_fastclose().
- mptcp: clear scheduled subflows on retransmit
- mmc: sdhci-of-dwcmshc: Promote the th1520 reset handling to ip level
- mm/memfd: fix information leak in hugetlb folios
- mm/huge_memory: fix NULL pointer deference when splitting folio
- iommufd/driver: Fix counter initialization for counted_by annotation
- firmware: stratix10-svc: fix bug in saving controller data
- io_uring/net: ensure vectored buffer node import is tied to notification
- regulator: rtq2208: Correct LDO2 logic judgment bits
- regulator: rtq2208: Correct buck group2 phase mapping logic
- r8169: fix RTL8127 hang on suspend/shutdown
- pmdomain: tegra: Add GENPD_FLAG_NO_STAY_ON flag
- nvmem: layouts: fix nvmem_layout_bus_uevent
- slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves
- thunderbolt: Add support for Intel Wildcat Lake
- smb: client: fix memory leak in cifs_construct_tcon()
- drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup
- drivers/usb/dwc3: fix PCI parent check
- dm-verity: fix unreliable memory allocation
- counter: microchip-tcb-capture: Allow shared IRQ for multi-channel TCBs
- ceph: fix crash in process_v2_sparse_read() for encrypted directories
- can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
- can: sja1000: fix max irq loop handling
- can: rcar_canfd: Fix CAN-FD mode as default
- Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref
- atm/fore200e: Fix possible data race in fore200e_open()
- ARM: dts: nxp: imx6ul: correct SAI3 interrupt line
- arm64: dts: imx8qm-mek: fix mux-controller select/enable-gpios polarity
- arm64: dts: imx8dxl: Correct pcie-ep interrupt number
- arm64: dts: imx8dxl-ss-conn: swap interrupts number of eqos
- ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230
- ALSA: hda/cirrus fix cs420x MacPro 6,1 inverted jack detection
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs
- vhost: rewind next_avail_head while discarding descriptors
- virtio-net: avoid unnecessary checksum calculation on guest RX
- MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow
- MIPS: mm: Prevent a TLB shutdown on initial uniquification
- iio: adc: rtq6056: Correct the sign bit index
- iio: adc: ad7380: fix SPI offload trigger rate
- iio: adc: ad7280a: fix ad7280_store_balance_timer()
- iio: adc: ad7124: fix temperature channel
- iio: adc: ad4030: Fix _scale value for common-mode channels
- iio: accel: fix ADXL355 startup race condition
- iio: accel: bmc150: Fix irq assumption regression
- iio: adc: stm32-dfsdm: fix st,adc-alt-channel property handling
- iio:common:ssp_sensors: Fix an error handling path ssp_probe()
- iio: pressure: bmp280: correct meas_time_us calculation
- iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields
- iio: humditiy: hdc3020: fix units for thresholds and hysteresis
- iio: humditiy: hdc3020: fix units for temperature and humidity measurement
- iio: buffer: support getting dma channel from the buffer
- iio: buffer-dmaengine: enable .get_dma_dev()
- iio: buffer-dma: support getting the DMA channel
- Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
- Revert "drm/amd/display: Move setup_stream_attribute"
- timekeeping: Fix error code in tk_aux_sysfs_init()
- afs: Fix uninit var in afs_alloc_anon_key()
- spi: bcm63xx: fix premature CS deassertion on RX-only transactions
- spi: nxp-fspi: Propagate fwnode in ACPI case as well
- spi: spi-nxp-fspi: Add OCT-DTR mode support
- spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors
- spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA
- riscv: dts: allwinner: d1: fix vlenb property
- ovl: fail ovl_lock_rename_workdir() if either target is unhashed
- afs: Fix delayed allocation of a cell's anonymous key
- fs/namespace: fix reference leak in grab_requested_mnt_ns
- spi: spi-cadence-quadspi: Enable pm runtime earlier to avoid imbalance
- spi: spi-cadence-quadspi: Remove duplicate pm_runtime_put_autosuspend() call
- mailbox: pcc: don't zero error register
- mailbox: mtk-cmdq: Refine DMA address handling for the command buffer
- mailbox: mailbox-test: Fix debugfs_create_dir error checking
- usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors
- iio: st_lsm6dsx: Fixed calibrated timestamp calculation
- net: fec: do not register PPS event for PEROUT
- net: fec: do not allow enabling PPS and PEROUT simultaneously
- net: fec: do not update PEROUT if it is enabled
- net: fec: cancel perout_timer when PEROUT is disabled
- net: mctp: unconditionally set skb->dev on dst output
- net: atlantic: fix fragment overflow handling in RX path
- eth: fbnic: Fix counter roll-over issue
- net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic
- net: wwan: mhi: Keep modem name match with Foxconn T99W640
- dma-direct: Fix missing sg_dma_len assignment in P2PDMA bus mappings
- drm/amdgpu: fix cyan_skillfish2 gpu info fw handling
- xsk: avoid data corruption on cq descriptor number
- xsk: avoid overwriting skb fields for multi-buffer traffic
- net: sxgbe: fix potential NULL dereference in sxgbe_rx()
- team: Move team device type change at the end of team_port_add
- net/mlx5e: Fix validation logic in rate limiting
- drm/xe: Fix conversion from clock ticks to milliseconds
- net: lan966x: Fix the initialization of taprio
- net: phy: mxl-gpy: fix link properties on USXGMII and internal PHYs
- net: aquantia: Add missing descriptor cache invalidation on ATL2
- platform/x86: intel: punit_ipc: fix memory corruption
- net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY
- drm/bridge: sii902x: Fix HDMI detection with DRM_BRIDGE_ATTACH_NO_CONNECTOR
- veth: reduce XDP no_direct return section to fix race
- Bluetooth: SMP: Fix not generating mackey and ltk when repairing
- Bluetooth: hci_core: lookup hci_conn on RX path on protocol side
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
- Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOP
- Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface
- can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before
accessing data
- can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before
accessing header
- can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs
- can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
+ UBUNTU: Upstream stable to v6.17.11
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2138824
Title:
Questing update: v6.17.11 upstream stable release
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2138824/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
