Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2026-01-28
Ported from the following upstream stable releases:
v6.6.114, v6.12.55
from git://git.kernel.org/
smb: client: Fix refcount leak for cifs_sb_tlink
r8152: add error handling in rtl8152_driver_init
f2fs: fix wrong block mapping for multi-devices
jbd2: ensure that all ongoing I/O complete before freeing blocks
ext4: wait for ongoing I/O to complete before freeing blocks
ext4: detect invalid INLINE_DATA + EXTENTS flag combination
btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running
btrfs: fix incorrect readahead expansion length
btrfs: do not assert we found block group item when creating free space tree
can: gs_usb: gs_make_candev(): populate net_device->dev_port
can: gs_usb: increase max interface to U8_MAX
cifs: parse_dfs_referrals: prevent oob on malformed input
drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
drm/amdgpu: use atomic functions with memory barriers for vm fault info
drm/amd: Check whether secure display TA loaded successfully
cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay
epoll: Remove ep_scan_ready_list() in comments
eventpoll: Replace rwlock with spinlock
drm/msm/adreno: De-spaghettify the use of memory barriers
drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions
drm/exynos: exynos7_drm_decon: properly clear channels during bind
drm/exynos: exynos7_drm_decon: remove ctx->suspended
media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain()
media: nxp: imx8-isi: m2m: Fix streaming cleanup on release
usb: gadget: Store endpoint pointer in usb_request
usb: gadget: Introduce free_usb_request helper
usb: gadget: f_ecm: Refactor bind path to use __free()
usb: gadget: f_acm: Refactor bind path to use __free()
usb: gadget: f_rndis: Refactor bind path to use __free()
HID: multitouch: fix sticky fingers
dax: skip read lock assertion for read-only filesystems
can: m_can: m_can_plat_remove(): add missing pm_runtime_disable()
net: dlink: handle dma_map_single() failure properly
doc: fix seg6_flowlabel path
r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H
net/ip6_tunnel: Prevent perpetual tunnel growth
amd-xgbe: Avoid spurious link down messages during interface toggle
tcp: fix tcp_tso_should_defer() vs large RTT
tg3: prevent use of uninitialized remote_adv and local_adv variables
tls: trim encrypted message to match the plaintext on short splice
net: tls: wait for async completion on last message
tls: wait for async encrypt in case of error during latter iterations of sendmsg
tls: always set record_type in tls_process_cmsg
tls: wait for pending async decryptions if tls_strp_msg_hold fails
tls: don't rely on tx_work during send()
net: usb: lan78xx: Add error handling to lan78xx_init_mac_address
net: usb: lan78xx: fix use of improperly initialized dev->chipid in
lan78xx_reset
nvme-multipath: Skip nr_active increments in RETRY disposition
riscv: kprobes: Fix probe address validation
drm/bridge: lt9211: Drop check for last nibble of version register
ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec
ASoC: nau8821: Cancel jdet_work before handling jack ejection
ASoC: nau8821: Generalize helper to clear IRQ status
ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit
drm/i915/guc: Skip communication warning on reset in progress
drm/amd/powerplay: Fix CIK shutdown temperature
drm/rockchip: vop2: use correct destination rectangle height check
sched/balancing: Rename newidle_balance() => sched_balance_newidle()
sched/fair: Fix pelt lost idle time detection
ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings
accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
selftests/bpf: make arg_parsing.c more robust to crashes
ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card
HID: hid-input: only ignore 0 battery events for digitizers
HID: multitouch: fix name of Stylus input devices
selftests: arg_parsing: Ensure data is flushed to disk before reading.
hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
arm64: cputype: Add Neoverse-V3AE definitions
arm64: errata: Apply workarounds for Neoverse-V3AE
NFSD: Rework encoding and decoding of nfsd4_deviceid
NFSD: Minor cleanup in layoutcommit processing
xfs: rename the old_crc variable in xlog_recover_process
xfs: fix log CRC mismatches between i386 and other architectures
PM: runtime: Add new devm functions
iio: imu: inv_icm42600: Simplify pm_runtime setup
phy: cdns-dphy: Store hs_clk_rate and return it
phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling
iio: imu: inv_icm42600: reorganize DMA aligned buffers in structure
iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended
padata: Reset next CPU when reorder sequence wraps around
quota: remove unneeded return value of register_quota_format
fs: quota: create dedicated workqueue for quota_release_work
NFSD: Define a proc_layoutcommit for the FlexFiles layout type
phy: cadence: cdns-dphy: Update calibration wait time for startup state machine
PCI: Add PCI_VDEVICE_SUB helper macro
ixgbevf: Add support for Intel(R) E610 device
ixgbevf: fix getting link speed data for E610 devices
ixgbevf: fix mailbox API compatibility by negotiating supported features
nfsd: decouple the xprtsec policy check from check_nfsd_access()
PCI/sysfs: Ensure devices are powered for config reads (part 2)
ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL
PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists
PCI: j721e: Fix programming sequence of "strap" settings
drm/xe/guc: Check GuC running state before deregistering exec queue
btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST
perf/core: Fix address filter match with backing files
perf/core: Fix MMAP event path names with backing files
perf/core: Fix MMAP2 event device with backing files
drm/msm/a6xx: Fix PDC sleep sequence
usb: gadget: f_ncm: Refactor bind path to use __free()
can: m_can: m_can_handle_state_errors(): fix CAN state transition to Error
Active
can: m_can: m_can_chip_config(): bring up interface in correct state
drm/amdgpu: add ip offset support for cyan skillfish
drm/amdgpu: add support for cyan skillfish without IP discovery
drm/amdgpu: fix handling of harvesting for ip_discovery firmware
nvme/tcp: handle tls partially sent records in write_space()
nfsd: Use correct error code when decoding extents
nfsd: Drop dprintk in blocklayout xdr functions
NFSD: Implement large extent array support in pNFS
NFSD: Fix last write offset handling in layoutcommit
wifi: rtw89: avoid possible TX wait initialization race
xfs: use deferred intent items for reaping crosslinked blocks
md/raid0: Handle bio_split() errors
md/raid1: Handle bio_split() errors
md/raid10: Handle bio_split() errors
md: fix mssing blktrace bio split events
x86/resctrl: Refactor resctrl_arch_rmid_read()
x86/resctrl: Fix miscount of bandwidth event when reactivating previously
unavailable RMID
d_alloc_parallel(): set DCACHE_PAR_LOOKUP earlier
vfs: Don't leak disconnected dentries on umount
dmaengine: Add missing cleanup on module unload
UBUNTU: Upstream stable to v6.6.114, v6.12.55
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Noble)
Importance: Medium
Assignee: Manuel Diewald (diewald)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Noble)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Noble)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Noble)
Status: New => In Progress
** Changed in: linux (Ubuntu Noble)
Assignee: (unassigned) => Manuel Diewald (diewald)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2026-01-28
+
+ Ported from the following upstream stable releases:
+ v6.6.114, v6.12.55
+
from git://git.kernel.org/
+
+ smb: client: Fix refcount leak for cifs_sb_tlink
+ r8152: add error handling in rtl8152_driver_init
+ f2fs: fix wrong block mapping for multi-devices
+ jbd2: ensure that all ongoing I/O complete before freeing blocks
+ ext4: wait for ongoing I/O to complete before freeing blocks
+ ext4: detect invalid INLINE_DATA + EXTENTS flag combination
+ btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running
+ btrfs: fix incorrect readahead expansion length
+ btrfs: do not assert we found block group item when creating free space tree
+ can: gs_usb: gs_make_candev(): populate net_device->dev_port
+ can: gs_usb: increase max interface to U8_MAX
+ cifs: parse_dfs_referrals: prevent oob on malformed input
+ drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
+ drm/amdgpu: use atomic functions with memory barriers for vm fault info
+ drm/amd: Check whether secure display TA loaded successfully
+ cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay
+ epoll: Remove ep_scan_ready_list() in comments
+ eventpoll: Replace rwlock with spinlock
+ drm/msm/adreno: De-spaghettify the use of memory barriers
+ drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions
+ drm/exynos: exynos7_drm_decon: properly clear channels during bind
+ drm/exynos: exynos7_drm_decon: remove ctx->suspended
+ media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain()
+ media: nxp: imx8-isi: m2m: Fix streaming cleanup on release
+ usb: gadget: Store endpoint pointer in usb_request
+ usb: gadget: Introduce free_usb_request helper
+ usb: gadget: f_ecm: Refactor bind path to use __free()
+ usb: gadget: f_acm: Refactor bind path to use __free()
+ usb: gadget: f_rndis: Refactor bind path to use __free()
+ HID: multitouch: fix sticky fingers
+ dax: skip read lock assertion for read-only filesystems
+ can: m_can: m_can_plat_remove(): add missing pm_runtime_disable()
+ net: dlink: handle dma_map_single() failure properly
+ doc: fix seg6_flowlabel path
+ r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H
+ net/ip6_tunnel: Prevent perpetual tunnel growth
+ amd-xgbe: Avoid spurious link down messages during interface toggle
+ tcp: fix tcp_tso_should_defer() vs large RTT
+ tg3: prevent use of uninitialized remote_adv and local_adv variables
+ tls: trim encrypted message to match the plaintext on short splice
+ net: tls: wait for async completion on last message
+ tls: wait for async encrypt in case of error during latter iterations of
sendmsg
+ tls: always set record_type in tls_process_cmsg
+ tls: wait for pending async decryptions if tls_strp_msg_hold fails
+ tls: don't rely on tx_work during send()
+ net: usb: lan78xx: Add error handling to lan78xx_init_mac_address
+ net: usb: lan78xx: fix use of improperly initialized dev->chipid in
lan78xx_reset
+ nvme-multipath: Skip nr_active increments in RETRY disposition
+ riscv: kprobes: Fix probe address validation
+ drm/bridge: lt9211: Drop check for last nibble of version register
+ ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec
+ ASoC: nau8821: Cancel jdet_work before handling jack ejection
+ ASoC: nau8821: Generalize helper to clear IRQ status
+ ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit
+ drm/i915/guc: Skip communication warning on reset in progress
+ drm/amd/powerplay: Fix CIK shutdown temperature
+ drm/rockchip: vop2: use correct destination rectangle height check
+ sched/balancing: Rename newidle_balance() => sched_balance_newidle()
+ sched/fair: Fix pelt lost idle time detection
+ ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings
+ accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
+ selftests/bpf: make arg_parsing.c more robust to crashes
+ ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card
+ HID: hid-input: only ignore 0 battery events for digitizers
+ HID: multitouch: fix name of Stylus input devices
+ selftests: arg_parsing: Ensure data is flushed to disk before reading.
+ hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
+ arm64: cputype: Add Neoverse-V3AE definitions
+ arm64: errata: Apply workarounds for Neoverse-V3AE
+ NFSD: Rework encoding and decoding of nfsd4_deviceid
+ NFSD: Minor cleanup in layoutcommit processing
+ xfs: rename the old_crc variable in xlog_recover_process
+ xfs: fix log CRC mismatches between i386 and other architectures
+ PM: runtime: Add new devm functions
+ iio: imu: inv_icm42600: Simplify pm_runtime setup
+ phy: cdns-dphy: Store hs_clk_rate and return it
+ phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling
+ iio: imu: inv_icm42600: reorganize DMA aligned buffers in structure
+ iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended
+ padata: Reset next CPU when reorder sequence wraps around
+ quota: remove unneeded return value of register_quota_format
+ fs: quota: create dedicated workqueue for quota_release_work
+ NFSD: Define a proc_layoutcommit for the FlexFiles layout type
+ phy: cadence: cdns-dphy: Update calibration wait time for startup state
machine
+ PCI: Add PCI_VDEVICE_SUB helper macro
+ ixgbevf: Add support for Intel(R) E610 device
+ ixgbevf: fix getting link speed data for E610 devices
+ ixgbevf: fix mailbox API compatibility by negotiating supported features
+ nfsd: decouple the xprtsec policy check from check_nfsd_access()
+ PCI/sysfs: Ensure devices are powered for config reads (part 2)
+ ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL
+ PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists
+ PCI: j721e: Fix programming sequence of "strap" settings
+ drm/xe/guc: Check GuC running state before deregistering exec queue
+ btrfs: fix memory leaks when rejecting a non SINGLE data profile without an
RST
+ perf/core: Fix address filter match with backing files
+ perf/core: Fix MMAP event path names with backing files
+ perf/core: Fix MMAP2 event device with backing files
+ drm/msm/a6xx: Fix PDC sleep sequence
+ usb: gadget: f_ncm: Refactor bind path to use __free()
+ can: m_can: m_can_handle_state_errors(): fix CAN state transition to Error
Active
+ can: m_can: m_can_chip_config(): bring up interface in correct state
+ drm/amdgpu: add ip offset support for cyan skillfish
+ drm/amdgpu: add support for cyan skillfish without IP discovery
+ drm/amdgpu: fix handling of harvesting for ip_discovery firmware
+ nvme/tcp: handle tls partially sent records in write_space()
+ nfsd: Use correct error code when decoding extents
+ nfsd: Drop dprintk in blocklayout xdr functions
+ NFSD: Implement large extent array support in pNFS
+ NFSD: Fix last write offset handling in layoutcommit
+ wifi: rtw89: avoid possible TX wait initialization race
+ xfs: use deferred intent items for reaping crosslinked blocks
+ md/raid0: Handle bio_split() errors
+ md/raid1: Handle bio_split() errors
+ md/raid10: Handle bio_split() errors
+ md: fix mssing blktrace bio split events
+ x86/resctrl: Refactor resctrl_arch_rmid_read()
+ x86/resctrl: Fix miscount of bandwidth event when reactivating previously
unavailable RMID
+ d_alloc_parallel(): set DCACHE_PAR_LOOKUP earlier
+ vfs: Don't leak disconnected dentries on umount
+ dmaengine: Add missing cleanup on module unload
+ UBUNTU: Upstream stable to v6.6.114, v6.12.55
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2139267
Title:
Noble update: upstream stable patchset 2026-01-28
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2139267/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
