** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Noble)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Noble)
Status: New => In Progress
** Changed in: linux (Ubuntu Noble)
Assignee: (unassigned) => Manuel Diewald (diewald)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2026-01-30
+
+ Ported from the following upstream stable releases:
+ v6.6.117, v6.12.58, v6.12.59
+
from git://git.kernel.org/
+
+ NFSD: Fix crash in nfsd4_read_release()
+ net: usb: asix_devices: Check return value of usbnet_get_endpoints
+ fbcon: Set fb_display[i]->mode to NULL when the mode is released
+ fbdev: atyfb: Check if pll_ops->init_pll failed
+ ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
+ ACPI: button: Call input_free_device() on failing input device registration
+ fbdev: bitblit: bound-check glyph index in bit_putcs*
+ Bluetooth: rfcomm: fix modem control handling
+ wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
+ fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS
+ fbdev: valkyriefb: Fix reference count leak in valkyriefb_init
+ mptcp: drop bogus optimization in __mptcp_check_push()
+ mptcp: restore window probe
+ ASoC: qdsp6: q6asm: do not sleep while atomic
+ smb: client: fix potential cfid UAF in smb2_query_info_compound
+ x86/fpu: Ensure XFD state on signal delivery
+ wifi: ath10k: Fix memory leak on unsupported WMI command
+ wifi: ath11k: Add missing platform IDs for quirk table
+ wifi: ath12k: free skb during idr cleanup callback
+ drm/msm/a6xx: Fix GMU firmware parser
+ ALSA: usb-audio: fix control pipe direction
+ bpf: Sync pending IRQ work before freeing ring buffer
+ scsi: ufs: core: Initialize value of an attribute returned by uic cmd
+ crypto: aspeed - fix double free caused by devm
+ ASoC: Intel: avs: Unprepare a stream when XRUN occurs
+ ASoC: fsl_sai: fix bit order for DSD format
+ libbpf: Fix powerpc's stack register definition in bpf_tracing.h
+ usbnet: Prevents free active kevent
+ Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once
+ Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset
+ Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00
+ Bluetooth: ISO: Fix another instance of dst_type handling
+ Bluetooth: hci_core: Fix tracking of periodic advertisement
+ drm/etnaviv: fix flush sequence logic
+ net: hns3: return error code when function fails
+ sfc: fix potential memory leak in efx_mae_process_mport()
+ drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table()
+ drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji
+ drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland
+ block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL
+ block: make REQ_OP_ZONE_OPEN a write operation
+ regmap: slimbus: fix bus_context pointer in regmap init calls
+ drm/mediatek: Fix device use-after-free on unbind
+ mptcp: fix MSG_PEEK stream corruption
+ cpuidle: governors: menu: Rearrange main loop in menu_select()
+ cpuidle: governors: menu: Select polling state in some more cases
+ net: phy: dp83867: Disable EEE support as not implemented
+ s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP
+ UBUNTU: [Config] disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP for s390x
+ drm/sched: Fix race in drm_sched_entity_select_rq()
+ s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump
+ usb: gadget: f_fs: Fix epfile null pointer access after ep enable.
+ soc: aspeed: socinfo: Add AST27xx silicon IDs
+ soc: qcom: smem: Fix endian-unaware access of num_entries
+ spi: loopback-test: Don't use %pK through printk
+ bpf: Don't use %pK through printk
+ pinctrl: single: fix bias pull up/down handling in pin_config_set
+ mmc: host: renesas_sdhi: Fix the actual clock
+ memstick: Add timeout to prevent indefinite waiting
+ irqchip/sifive-plic: Respect mask state when setting affinity
+ selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2
+ cpufreq/longhaul: handle NULL policy in longhaul_exit
+ arc: Fix __fls() const-foldability via __builtin_clzl()
+ selftests/bpf: Upon failures, exit with code 1 in test_xsk.sh
+ irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment
+ ACPI: PRM: Skip handlers with NULL handler_address or NULL VA
+ ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[]
+ power: supply: qcom_battmgr: add OOI chemistry
+ hwmon: (k10temp) Add device ID for Strix Halo
+ hwmon: (sbtsi_temp) AMD CPU extended temperature range support
+ pinctrl: keembay: release allocated memory in detach path
+ power: supply: sbs-charger: Support multiple devices
+ hwmon: sy7636a: add alias
+ irqchip/loongson-pch-lpc: Use legacy domain for PCH-LPC IRQ controller
+ arm64: zynqmp: Revert usb node drive strength and slew rate for zcu106
+ soc/tegra: fuse: Add Tegra114 nvmem cells and fuse lookups
+ ARM: tegra: transformer-20: add missing magnetometer interrupt
+ ARM: tegra: transformer-20: fix audio-codec interrupt
+ mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card
+ ACPICA: dispatcher: Use acpi_ds_clear_operands() in
acpi_ds_call_control_method()
+ tee: allow a driver to allocate a tee_device without a pool
+ nvmet-fc: avoid scheduling association deletion twice
+ nvme-fc: use lock accessing port_state and rport state
+ bpf: Do not limit bpf_cgroup_from_id to current's namespace
+ video: backlight: lp855x_bl: Set correct EPROM start for LP8556
+ tools/cpupower: fix error return value in cpupower_write_sysfs()
+ pmdomain: apple: Add "apple,t8103-pmgr-pwrstate"
+ power: supply: qcom_battmgr: handle charging state change notifications
+ bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21
+ cpuidle: Fail cpuidle device registration if there is one already
+ futex: Don't leak robust_list pointer on exec race
+ spi: rpc-if: Add resume support for RZ/G3E
+ clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel
+ blk-cgroup: fix possible deadlock while configuring policy
+ riscv: bpf: Fix uninitialized symbol 'retval_off'
+ bpf: Clear pfmemalloc flag when freeing all fragments
+ nvme: Use non zero KATO for persistent discovery connections
+ uprobe: Do not emulate/sstep original instruction when ip is changed
+ hwmon: (asus-ec-sensors) increase timeout for locking ACPI mutex
+ hwmon: (dell-smm) Add support for Dell OptiPlex 7040
+ tools/cpupower: Fix incorrect size in cpuidle_state_disable()
+ tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage
+ tools/power x86_energy_perf_policy: Enhance HWP enable
+ tools/power x86_energy_perf_policy: Prefer driver HWP limits
+ mfd: stmpe: Remove IRQ domain upon removal
+ mfd: stmpe-i2c: Add missing MODULE_LICENSE
+ mfd: madera: Work around false-positive -Wininitialized warning
+ mfd: da9063: Split chip variant reading in two bus transactions
+ drm/amd/display: ensure committing streams is seamless
+ drm/amd/display: Increase AUX Intra-Hop Done Max Wait Duration
+ drm/amd/display: add more cyan skillfish devices
+ drm/amd/display: update dpp/disp clock from smu clock table
+ drm/amd/pm: Use cached metrics data on aldebaran
+ drm/amd/pm: Use cached metrics data on arcturus
+ drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff
+ drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf()
+ PCI: Disable MSI on RDC PCI to PCIe bridges
+ selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8
+ selftests/net: Ensure assert() triggers in psock_tpacket.c
+ wifi: rtw88: sdio: use indirect IO for device registers before power-on
+ drm/amdkfd: return -ENOTTY for unsupported IOCTLs
+ media: pci: ivtv: Don't create fake v4l2_fh
+ media: amphion: Delete v4l2_fh synchronously in .release()
+ drm/tidss: Use the crtc_* timings when programming the HW
+ drm/bridge: cdns-dsi: Fix REG_WAKEUP_TIME value
+ drm/bridge: cdns-dsi: Don't fail on MIPI_DSI_MODE_VIDEO_BURST
+ drm/tidss: Set crtc modesetting parameters with adjusted mode
+ media: i2c: Kconfig: Ensure a dependency on HAVE_CLK for VIDEO_CAMERA_SENSOR
+ x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall
+ net: stmmac: Check stmmac_hw_setup() in stmmac_resume()
+ ice: Don't use %pK through printk or tracepoints
+ thunderbolt: Use is_pciehp instead of is_hotplug_bridge
+ powerpc/eeh: Use result of error_detected() in uevent
+ s390/pci: Use pci_uevent_ers() in PCI recovery
+ bridge: Redirect to backup port when port is administratively down
+ scsi: ufs: host: mediatek: Fix auto-hibern8 timer configuration
+ scsi: ufs: host: mediatek: Assign power mode userdata before FASTAUTO mode
change
+ scsi: ufs: host: mediatek: Change reset sequence for improved stability
+ scsi: ufs: host: mediatek: Fix invalid access in vccqx handling
+ net: ipv6: fix field-spanning memcpy warning in AH output
+ media: imon: make send_packet() more robust
+ drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts
+ drm/amdkfd: Handle lack of READ permissions in SVM mapping
+ iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before
setting register
+ iio: adc: imx93_adc: load calibrated values even calibration failed
+ usb: gadget: f_ncm: Fix MAC assignment NCM ethernet
+ char: misc: Make misc_register() reentry for miscdevice who wants dynamic
minor
+ char: misc: Does not request module for miscdevice with dynamic minor
+ net: When removing nexthops, don't call synchronize_net if it is not necessary
+ net: stmmac: Correctly handle Rx checksum offload errors
+ net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV.
+ PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call
+ ALSA: usb-audio: Add validation of UAC2/UAC3 effect units
+ rds: Fix endianness annotation for RDS_MPATH_HASH
+ scsi: mpi3mr: Fix controller init failure on fault during queue creation
+ scsi: pm80xx: Fix race condition caused by static variables
+ extcon: adc-jack: Fix wakeup source leaks on device unbind
+ remoteproc: wkup_m3: Use devm_pm_runtime_enable() helper
+ net: phy: fixed_phy: let fixed_phy_unregister free the phy_device
+ fuse: zero initialize inode private data
+ drm/amdkfd: fix vram allocation failure for a special case
+ drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption
+ media: fix uninitialized symbol warnings
+ drm/amdgpu: Respect max pixel clock for HDMI and DVI-D (v2)
+ mips: lantiq: danube: add missing properties to cpu node
+ mips: lantiq: danube: add model to EASY50712 dts
+ mips: lantiq: danube: add missing device_type in pci node
+ mips: lantiq: xway: sysctrl: rename stp clock
+ mips: lantiq: danube: rename stp node on EASY50712 reference board
+ crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof()
+ scsi: pm8001: Use int instead of u32 to store error codes
+ ptp: Limit time setting of PTP clocks
+ dmaengine: sh: setup_xref error handling
+ dmaengine: mv_xor: match alloc_wc and free_wc
+ dmaengine: dw-edma: Set status for callback_result
+ drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL
+ drm/msm/dsi/phy_7nm: Fix missing initial VCO rate
+ drm/amdgpu: Allow kfd CRIU with no buffer objects
+ ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled
+ net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms
+ media: adv7180: Add missing lock in suspend callback
+ media: adv7180: Do not write format to device in set_fmt
+ media: adv7180: Only validate format in querystd
+ media: verisilicon: Explicitly disable selection api ioctls for decoders
+ ALSA: usb-audio: apply quirk for MOONDROP Quark2
+ net: call cond_resched() less often in __release_sock()
+ smsc911x: add second read of EEPROM mac when possible corruption seen
+ iommu/apple-dart: Clear stream error indicator bits for T8110 DARTs
+ drm/amd: add more cyan skillfish PCI ids
+ drm/amdgpu: don't enable SMU on cyan skillfish
+ drm/amdgpu: add support for cyan skillfish gpu_info
+ usb: gadget: f_hid: Fix zero length packet transfer
+ usb: cdns3: gadget: Use-after-free during failed initialization and exit of
cdnsp gadget
+ drm/msm: make sure to not queue up recovery more than once
+ char: Use list_del_init() in misc_deregister() to reinitialize list pointer
+ media: ov08x40: Fix the horizontal flip control
+ media: i2c: og01a1b: Specify monochrome media bus format instead of Bayer
+ scsi: ufs: host: mediatek: Enhance recovery on resume failure
+ scsi: ufs: host: mediatek: Enhance recovery on hibernation exit failure
+ net: phy: marvell: Fix 88e1510 downshift counter errata
+ scsi: ufs: host: mediatek: Disable auto-hibern8 during power mode changes
+ ntfs3: pretend $Extend records as regular files
+ wifi: mac80211: Fix HE capabilities element check
+ phy: cadence: cdns-dphy: Enable lower resolutions in dphy
+ phy: renesas: r8a779f0-ether-serdes: add new step added to latest datasheet
+ phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0
+ net: sh_eth: Disable WoL if system can not suspend
+ selftests: net: replace sleeps in fcnal-test with waits
+ media: redrat3: use int type to store negative error codes
+ selftests: traceroute: Use require_command()
+ netfilter: nf_reject: don't reply to icmp error messages
+ x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT
+ selftests: Disable dad for ipv6 in fcnal-test.sh
+ eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP
+ UBUNTU: [Config] disable 8139TOO_PIO for armhf
+ selftests: Replace sleep with slowwait
+ udp_tunnel: use netdev_warn() instead of netdev_WARN()
+ HID: asus: add Z13 folio to generic group for multitouch to work
+ watchdog: s3c2410_wdt: Fix max_timeout being calculated larger
+ crypto: sun8i-ce - remove channel timeout field
+ PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify()
+ crypto: caam - double the entropy delay interval for retry
+ net/cls_cgroup: Fix task_get_classid() during qdisc run
+ wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device
+ wifi: mt76: mt7996: Temporarily disable EPCS
+ ALSA: serial-generic: remove shared static buffer
+ drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl
+ drm/amd: Avoid evicting resources at S5
+ drm/amd/display: Fix DVI-D/HDMI adapters
+ drm/amd/display: Disable VRR on DCE 6
+ page_pool: always add GFP_NOWARN for ATOMIC allocations
+ ethernet: Extend device_get_mac_address() to use NVMEM
+ HID: i2c-hid: Resolve touchpad issues on Dell systems during S4
+ drm/amdgpu: reject gang submissions under SRIOV
+ selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean
net/lib dependency
+ scsi: ufs: core: Disable timestamp functionality if not supported
+ scsi: lpfc: Check return status of lpfc_reset_flush_io_context during
TGT_RESET
+ scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup
+ scsi: lpfc: Define size of debugfs entry for xri rebalancing
+ allow finish_no_open(file, ERR_PTR(-E...))
+ usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs
+ usb: xhci: plat: Facilitate using autosuspend for xhci plat devices
+ f2fs: fix infinite loop in __insert_extent_tree()
+ ipv6: np->rxpmtu race annotation
+ jfs: Verify inode mode when loading from disk
+ jfs: fix uninitialized waitqueue in transaction manager
+ ASoC: qcom: sc8280xp: explicitly set S16LE format in
sc8280xp_be_hw_params_fixup()
+ net: phy: clear link parameters on admin link down
+ net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X
+ iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot()
+ wifi: ath10k: Fix connection after GTK rekeying
+ net: intel: fm10k: Fix parameter idx set but not used
+ PCI: cadence: Check for the existence of cdns_pcie::ops before using it
+ sparc/module: Add R_SPARC_UA64 relocation handling
+ sparc64: fix prototypes of reads[bwl]()
+ vfio: return -ENOTTY for unsupported device feature
+ PCI/PM: Skip resuming to D0 if device is disconnected
+ remoteproc: qcom: q6v5: Avoid handling handover twice
+ wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256
+ drm/amd/display: Add AVI infoframe copy in copy_stream_update_to_stream
+ NFSv4: handle ERR_GRACE on delegation recalls
+ NFSv4.1: fix mount hang after CREATE_SESSION failure
+ nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode
dereferencing
+ net: bridge: Install FDB for bridge MAC on VLAN 0
+ scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill()
+ accel/habanalabs/gaudi2: fix BMON disable configuration
+ scsi: mpt3sas: Add support for 22.5 Gbps SAS link rate
+ accel/habanalabs: return ENOMEM if less than requested pages were pinned
+ accel/habanalabs/gaudi2: read preboot status after recovering from dirty state
+ accel/habanalabs: support mapping cb with vmalloc-backed coherent memory
+ fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock
+ ext4: increase IO priority of fastcommit
+ amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw
+ ASoC: stm32: sai: manage context in set_sysclk callback
+ ASoC: tlv320aic3x: Fix class-D initialization for tlv320aic3007
+ net/mlx5e: Don't query FEC statistics when FEC is disabled
+ net: macb: avoid dealing with endianness in macb_set_hwaddr()
+ Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames
+ Bluetooth: SCO: Fix UAF on sco_conn_free
+ Bluetooth: bcsp: receive data only if registered
+ ALSA: usb-audio: add mono main switch to Presonus S1824c
+ exfat: limit log print for IO error
+ 6pack: drop redundant locking and refcounting
+ page_pool: Clamp pool size to max 16K pages
+ orangefs: fix xattr related buffer overflow...
+ ftrace: Fix softlockup in ftrace_module_enable
+ ksmbd: use sock_create_kern interface to create kernel socket
+ smb: client: transport: avoid reconnects triggered by pending task work
+ ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
+ char: misc: restrict the dynamic range to exclude reserved minors
+ ACPICA: Update dsmethod.c to get rid of unused variable warning
+ RDMA/irdma: Fix SD index calculation
+ RDMA/irdma: Remove unused struct irdma_cq fields
+ RDMA/irdma: Set irdma_cq cq_num field during CQ create
+ RDMA/hns: Fix the modification of max_send_sge
+ RDMA/hns: Fix wrong WQE data when QP wraps around
+ btrfs: mark dirty extent range for out of bound prealloc extents
+ fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink
+ um: Fix help message for ssl-non-raw
+ clk: sunxi-ng: sun6i-rtc: Add A523 specifics
+ rtc: pcf2127: clear minute/second interrupt
+ ARM: at91: pm: save and restore ACR during PLL disable/enable
+ clk: at91: clk-master: Add check for divide by 3
+ clk: at91: clk-sam9x60-pll: force write to PLL_UPDT register
+ clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled
+ NTB: epf: Allow arbitrary BAR mapping
+ 9p: fix /sys/fs/9p/caches overwriting itself
+ cpufreq: tegra186: Initialize all cores to max frequencies
+ 9p: sysfs_init: don't hardcode error to ENOMEM
+ scsi: ufs: core: Include UTP error in INT_FATAL_ERRORS
+ ACPI: property: Return present device nodes only on fwnode interface
+ tools bitmap: Add missing asm-generic/bitsperlong.h include
+ tools: lib: thermal: don't preserve owner in install
+ tools: lib: thermal: use pkg-config to locate libnl3
+ fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
+ rtc: pcf2127: fix watchdog interrupt mask on pcf2131
+ kbuild: uapi: Strip comments before size type check
+ ASoC: meson: aiu-encoder-i2s: fix bit clock polarity
+ ceph: add checking of wait_for_completion_killable() return value
+ ceph: refactor wake_up_bit() pattern of calling
+ ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again
+ media: uvcvideo: Use heuristic to find stream entity
+ net: libwx: fix device bus LAN ID
+ riscv: Improve exception and system call latency
+ riscv: stacktrace: Disable KASAN checks for non-current tasks
+ riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro
+ Bluetooth: hci_event: validate skb length for unknown CC opcode
+ Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2()
+ net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx
+ selftests/net: fix out-of-order delivery of FIN in gro:tcp test
+ selftests/net: use destination options instead of hop-by-hop
+ netdevsim: add Makefile for selftests
+ selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing
ethtool-common.sh
+ net: vlan: sync VLAN features with lower device
+ net: dsa: b53: fix resetting speed and pause on forced link
+ net: dsa: b53: fix enabling ip multicast
+ net: dsa: b53: stop reading ARL entries if search is done
+ sctp: Hold RCU read lock while iterating over address list
+ sctp: Prevent TOCTOU out-of-bounds write
+ sctp: Hold sock lock while iterating over address list
+ net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
+ bnxt_en: Fix a possible memory leak in bnxt_ptp_init
+ wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup
+ net/mlx5e: Use extack in get module eeprom by page callback
+ net/mlx5e: Fix return value in case of module EEPROM read error
+ net/mlx5e: SHAMPO, Fix skb size check for 64K pages
+ net: dsa: microchip: Fix reserved multicast address table programming
+ lan966x: Fix sleeping in atomic context
+ net: bridge: fix use-after-free due to MST port state bypass
+ net: bridge: fix MST static key usage
+ tracing: Fix memory leaks in create_field_var()
+ drm/amd/display: Enable mst when it's detected but yet to be initialized
+ drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb
+ Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()
+ rtc: rx8025: fix incorrect register reference
+ x86/microcode/AMD: Add more known models to entry sign checking
+ smb: client: validate change notify buffer before copy
+ smb: client: fix potential UAF in smb2_close_cached_fid()
+ virtio-net: fix received length check in big packets
+ lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC
+ scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers
+ extcon: adc-jack: Cleanup wakeup source only if it was enabled
+ drm/amdgpu: Fix function header names in amdgpu_connectors.c
+ drm/amd/display: Fix black screen with HDMI outputs
+ riscv: stacktrace: fix backtracing through exceptions
+ selftests: netdevsim: set test timeout to 10 minutes
+ drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD
+ drm/i915: Fix conversion between clock ticks and nanoseconds
+ smb: client: fix refcount leak in smb2_set_path_attr
+ iommufd: Make vfio_compat's unmap succeed if the range is already empty
+ drm/amd: Fix suspend failure with secure display TA
+ compiler_types: Move unused static inline functions warning to W=2
+ RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence
errors
+ riscv: acpi: avoid errors caused by probing DT devices when ACPI is used
+ drm/amd/pm: Disable MCLK switching on SI at high pixel clocks
+ drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices
+ NFS4: Fix state renewals missing after boot
+ HID: quirks: avoid Cooler Master MM712 dongle wakeup bug
+ NFS: check if suid/sgid was cleared after a write as needed
+ HID: quirks: Add ALWAYS_POLL quirk for VRS R295 steering wheel
+ smb/server: fix possible memory leak in smb2_read()
+ smb/server: fix possible refcount leak in smb2_sess_setup()
+ ASoC: max98090/91: fixed max98091 ALSA widget powering up/down
+ wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp()
+ selftests: net: local_termination: Wait for interfaces to come up
+ net: fec: correct rx_bytes statistic for the case SHIFT16 is set
+ Bluetooth: MGMT: cancel mesh send timer when hdev removed
+ Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
+ Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
+ Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion
+ Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions
+ sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
+ net/smc: fix mismatch between CLC header and proposal
+ net/handshake: Fix memory leak in tls_handshake_accept()
+ tipc: Fix use-after-free in tipc_mon_reinit_self().
+ net: mdio: fix resource leak in mdiobus_register_device()
+ wifi: mac80211: skip rate verification for not captured PSDUs
+ af_unix: Initialise scc_index in unix_add_edge().
+ net_sched: act_connmark: use RCU in tcf_connmark_dump()
+ net: sched: act_connmark: initialize struct tc_ife to fix kernel leak
+ net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
+ net/mlx5e: Fix maxrate wraparound in threshold between units
+ net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps
+ net/mlx5e: Fix potentially misleading debug message
+ net_sched: limit try_bulk_dequeue_skb() batches
+ virtio-net: fix incorrect flags recording in big mode
+ hsr: Fix supervision frame sending on HSRv0
+ ACPI: CPPC: Check _CPC validity for only the online CPUs
+ ACPI: CPPC: Perform fast check switch only for online CPUs
+ ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs
+ Bluetooth: L2CAP: export l2cap_chan_hold for modules
+ cifs: stop writeback extension when change of size is detected
+ cifs: Fix uncached read into ITER_KVEC iterator
+ acpi,srat: Fix incorrect device handle check for Generic Initiator
+ regulator: fixed: fix GPIO descriptor leak on register failure
+ ASoC: cs4271: Fix regulator leak on probe failure
+ ASoC: codecs: va-macro: fix resource leak in probe error path
+ drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
+ ASoC: tas2781: fix getting the wrong device number
+ pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect()
+ NFS: enable nconnect for RDMA
+ pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS
+ NFS: sysfs: fix leak when nfs_client kobject add fails
+ NFSv4: Fix an incorrect parameter when calling nfs4_call_sync()
+ ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
+ acpi/hmat: Fix lockdep warning for hmem_register_resource()
+ bpf: Add bpf_prog_run_data_pointers()
+ bpf: account for current allocated stack depth in widen_imprecise_scalars()
+ irqchip/riscv-intc: Add missing free() callback in riscv_intc_domain_ops
+ lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN
+ mtd: onenand: Pass correct pointer to IRQ handler
+ arm64: dts: rockchip: Set correct pinctrl for I2S1 8ch TX on odroid-m1
+ ARM: dts: imx51-zii-rdu1: Fix audmux node names
+ HID: hid-ntrig: Prevent memory leak in ntrig_report_version()
+ ARM: dts: BCM53573: Fix address of Luxul XAP-1440's Ethernet PHY
+ HID: uclogic: Fix potential memory leak in error path
+ KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated
+ NFSD: free copynotify stateid in nfs4_free_ol_stateid()
+ gcov: add support for GCC 15
+ ksmbd: close accepted socket when per-IP limit rejects connection
+ strparser: Fix signed/unsigned mismatch bug
+ dma-mapping: benchmark: Restore padding to ensure uABI remained consistent
+ LoongArch: Use correct accessor to read FWPC/MWPC
+ LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY
+ ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
+ selftests/tracing: Run sample events to clear page cache events
+ wifi: mac80211: reject address change while connecting
+ fs/proc: fix uaf in proc_readdir_de()
+ mm/mm_init: fix hash table order logging in alloc_large_system_hash()
+ mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4
+ ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
+ cifs: client: fix memory leak in smb3_fs_context_parse_param
+ crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value
+ smb: client: fix cifs_pick_channel when channel needs reconnect
+ spi: Try to get ACPI GPIO IRQ earlier
+ x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev
+ selftests/user_events: fix type cast for write_index packed member in
perf_test
+ LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY
+ EDAC/altera: Handle OCRAM ECC enable after warm reset
+ EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection
+ btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe()
+ btrfs: do not update last_log_commit when logging inode due to a new name
+ pmdomain: samsung: plug potential memleak during probe
+ selftests: mptcp: connect: fix fallback note due to OoO
+ selftests: mptcp: join: rm: set backup flag
+ selftests: mptcp: connect: trunc: read all recv data
+ Revert "perf dso: Add missed dso__put to dso__load_kcore"
+ drm/mediatek: Disable AFBC support on Mediatek DRM driver
+ btrfs: ensure no dirty metadata is written back for an fs with errors
+ iommufd: Don't overflow during division for dirty tracking
+ mm, percpu: do not consider sleepable allocations atomic
+ netpoll: remove netpoll_srcu
+ net: netpoll: Individualize the skb pool
+ net: netpoll: flush skb pool during cleanup
+ net: netpoll: fix incorrect refcount handling causing incorrect cleanup
+ f2fs: fix to avoid overflow while left shift operation
+ scsi: ufs: core: Add UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE
+ scsi: ufs: core: fold ufshcd_clear_keyslot() into its caller
+ scsi: ufs: core: Add UFSHCD_QUIRK_BROKEN_CRYPTO_ENABLE
+ scsi: ufs: core: Add fill_crypto_prdt variant op
+ scsi: ufs: core: Add UFSHCD_QUIRK_KEYS_IN_PRDT
+ scsi: ufs: core: Add a quirk for handling broken LSDBS field in controller
capabilities register
+ scsi: ufs: core: Add a quirk to suppress link_startup_again
+ scsi: ufs: ufs-pci: Set UFSHCD_QUIRK_PERFORM_LINK_STARTUP_ONCE for Intel ADL
+ filemap: cap PTE range to be created to allowed zero fill in folio_map_range()
+ mm/memory: do not populate page table entries beyond i_size
+ mm/truncate: unmap large folio on split failure
+ mm/secretmem: fix use-after-free race in fault handler
+ isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
+ net: netpoll: ensure skb_pool list is always initialized
+ memory tiers: use default_dram_perf_ref_source in log message
+ memcg: fix data-race KCSAN bug in rstats
+ s390/pci: Restore IRQ unconditionally for the zPCI device
+ wifi: ath11k: add support for MU EDCA
+ wifi: ath11k: avoid bit operation on key flags
+ wifi: mac80211: don't mark keys for inactive links as uploaded
+ wifi: mac80211: fix key tailroom accounting leak
+ kunit: test_dev_action: Correctly cast 'priv' pointer to long*
+ bpf: Find eligible subprogs for private stack support
+ bpf, x86: Avoid repeated usage of bpf_prog->aux->stack_depth
+ bpf: Do not audit capability check in do_jit()
+ Bluetooth: ISO: Update hci_conn_hash_lookup_big for Broadcast slave
+ Bluetooth: ISO: Fix BIS connection dst_type handling
+ dpll: spec: add missing module-name and clock-id to pin-get reply
+ ASoC: fsl_sai: Fix sync error in consumer mode
+ ACPI: fan: Use ACPI handle when retrieving _FST
+ drm/sysfb: Do not dereference NULL pointer in plane reset
+ drm/sched: avoid killing parent entity on child SIGKILL
+ drm/nouveau: Fix race in nouveau_sched_fini()
+ drm/ast: Clear preserved bits from register output value
+ drm/amd: Check that VPE has reached DPM0 in idle handler
+ drm/amd/display: Fix incorrect return of vblank enable on unconfigured crtc
+ x86/CPU/AMD: Add RDSEED fix for Zen5
+ firmware: qcom: scm: preserve assign_mem() error return value
+ soc: ti: pruss: don't use %pK through printk
+ bpf: Use tnums for JEQ/JNE is_branch_taken logic
+ ACPI: video: force native for Lenovo 82K8
+ libbpf: Fix USDT SIB argument handling causing unrecognized register error
+ ACPI: resource: Skip IRQ override on ASUS Vivobook Pro N6506CU
+ thermal: gov_step_wise: Allow cooling level to be reduced earlier
+ thermal: intel: selftests: workload_hint: Mask unsupported types
+ cpufreq: ondemand: Update the efficient idle check for Intel extended Families
+ pwm: pca9685: Use bulk write to atomicially update registers
+ i3c: mipi-i3c-hci-pci: Add support for Intel Wildcat Lake-U I3C
+ hwmon: (dell-smm) Remove Dell Precision 490 custom config data
+ selftests/bpf: Fix flaky bpf_cookie selftest
+ mfd: core: Increment of_node's refcount before linking it to the platform
device
+ mfd: intel-lpss: Add Intel Wildcat Lake LPSS PCI IDs
+ drm/amdgpu: add range check for RAS bad page address
+ drm/amdgpu: Check vcn sram load return value
+ ASoC: mediatek: Use SND_JACK_AVOUT for HDMI/DP jacks
+ drm/amd/display: Reset apply_eamless_boot_optimization when dpms_off
+ wifi: rtw89: print just once for unknown C2H events
+ PCI/ERR: Update device error_state already after reset
+ tty: serial: ip22zilog: Use platform device for probing
+ scsi: ufs: host: mediatek: Fix PWM mode switch issue
+ HID: pidff: Use direction fix only for conditional effects
+ HID: pidff: PERMISSIVE_CONTROL quirk autodetection
+ drm/amdgpu: fix nullptr err of vm_handle_moved
+ wifi: rtw89: fix BSSID comparison for non-transmitted BSSID
+ dm error: mark as DM_TARGET_PASSES_INTEGRITY
+ f2fs: fix to detect potential corrupted nid in free_nid_list
+ bnxt_en: Add Hyper-V VF ID
+ idpf: do not linearize big TSO packets
+ net: wangxun: limit tx_max_coalesced_frames_irq
+ rpmsg: char: Export alias for RPMSG ID rpmsg-raw from table
+ net: ipv4: allow directed broadcast routes to use dst hint
+ scsi: mpi3mr: Fix I/O failures during controller reset
+ drm/amd/display: Support HW cursor 180 rot for any number of pipe splits
+ media: pci: mgb4: Fix timings comparison in VIDIOC_S_DV_TIMINGS
+ ASoC: SOF: ipc4-pcm: Add fixup for channels
+ drm/amdgpu: Avoid vcn v5.0.1 poison irq call trace on sriov guest
+ inet_diag: annotate data-races in inet_diag_bc_sk()
+ scsi: ufs: exynos: fsd: Gate ref_clk and put UFS device in reset on suspend
+ drm/xe/guc: Increase GuC crash dump buffer size
+ drm: panel-backlight-quirks: Make EDID match optional
+ PCI: imx6: Enable the Vaux supply if available
+ drm/xe/guc: Set upper limit of H2G retries over CTB
+ crypto: ccp: Skip SEV and SNP INIT for kdump boot
+ drm/amd/display: Fix pbn_div Calculation Error
+ tty/vt: Add missing return value for VT_RESIZE in vt_ioctl()
+ PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs
+ selftests: mptcp: join: allow more time to send ADD_ADDR
+ scsi: ufs: host: mediatek: Correct system PM flow
+ selftests: traceroute: Return correct value on failure
+ openrisc: Add R_OR1K_32_PCREL relocation type module support
+ wifi: mt76: mt76_eeprom_override to int
+ wifi: mt76: mt7996: fix memory leak on mt7996_mcu_sta_key_tlv error
+ drm/amd/display: Set up pixel encoding for YCBCR422
+ drm/amd/display: fix dml ms order of operations
+ scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail
+ scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted
+ scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology
+ wifi: rtw89: renew a completion for each H2C command waiting C2H event
+ usb: xhci-pci: add support for hosts with zero USB3 ports
+ RDMA/ipoib: Remove NULL check before dev_{put, hold}
+ IB/ipoib: Ignore L3 master device
+ drm/amdgpu/atom: Check kcalloc() for WS buffer in
amdgpu_atom_execute_table_locked()
+ bus: mhi: core: Improve mhi_sync_power_up handling for SYS_ERR state
+ wifi: mac80211: Track NAN interface start/stop
+ crypto: hisilicon/qm - invalidate queues in use
+ crypto: hisilicon/qm - adjust the internal processing sequence of the vf
enable and disable
+ crypto: hisilicon/qm - clear all VF configurations in the hardware
+ selftests: forwarding: Reorder (ar)ping arguments to obey POSIX getopt
+ net: dsa: microchip: Set SPI as bus interface during reset for KSZ8463
+ drm/amd/display: Init dispclk from bootup clock for DCN314
+ drm/amd/display: Fix for test crash due to power gating
+ drm/amd/display: change dc stream color settings only in atomic commit
+ ACPI: scan: Update honor list for RPMI System MSI
+ vfio/pci: Fix INTx handling on legacy non-PCI 2.3 devices
+ Bluetooth: btusb: Add new VID/PID 13d3/3633 for MT7922
+ net: stmmac: est: Drop frames causing HLBS error
+ exfat: validate cluster allocation bits of the allocation bitmap
+ usb: xhci-pci: Fix USB2-only root hub registration
+ drm/amd/display: Add fallback path for YCBCR422
+ RDMA/hns: Fix recv CQ and QP cache affinity
+ 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
+ clk: clocking-wizard: Fix output clock register offset for Versal platforms
+ LoongArch: Handle new atomic instructions for probes
+ net: wwan: t7xx: add support for HP DRMR-H01
+ ceph: fix potential race condition in ceph_ioctl_lazyio()
+ net: ionic: add dma_wmb() before ringing TX doorbell
+ net: ionic: map SKB after pseudo-header checksum prep
+ bnxt_en: Add mem_valid bit to struct bnxt_ctx_mem_type
+ bnxt_en: Refactor bnxt_free_ctx_mem()
+ bnxt_en: Add a 'force' parameter to bnxt_free_ctx_mem()
+ net: wan: framer: pef2256: Switch to devm_mfd_add_devices()
+ parisc: Avoid crash due to unaligned access in unwinder
+ drm/amdgpu/smu: Handle S0ix for vangogh
+ drm/amd/display: Fix NULL deref in debugfs odm_combine_segments
+ drm/amd/display: update color on atomic commit time
+ drm/mediatek: Add pm_runtime support for GCE power control
+ arm64: kprobes: check the return value of set_memory_rox()
+ drm/amdgpu: remove two invalid BUG_ON()s
+ drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM
+ NFS4: Apply delay_retrans to async operations
+ HID: nintendo: Wait longer for initial probe
+ exfat: fix improper check of dentry.stream.valid_size
+ HID: logitech-hidpp: Add HIDPP_QUIRK_RESET_HI_RES_SCROLL
+ NFSD: Skip close replay processing if XDR encoding fails
+ net: ethernet: ti: am65-cpsw-qos: fix IET verify/response timeout
+ net: ethernet: ti: am65-cpsw-qos: fix IET verify retry mechanism
+ wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in
error path
+ proc: fix the issue of proc_mem_open returning NULL
+ ext4: introduce ITAIL helper
+ ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
+ Bluetooth: MGMT: Fix possible UAFs
+ net: dsa: sja1105: fix kasan out-of-bounds warning in
sja1105_table_delete_entry()
+ LoongArch: KVM: Add delay until timer interrupt injected
+ nfsd: add missing FATTR4_WORD2_CLONE_BLKSIZE from supported attributes
+ ftrace: Fix BPF fexit with livepatch
+ btrfs: zoned: fix conventional zone capacity calculation
+ btrfs: release root after error in data_reloc_print_warning_inode()
+ pmdomain: arm: scmi: Fix genpd leak on provider registration failure
+ pmdomain: imx: Fix reference count leak in imx_gpc_remove
+ selftests: mptcp: join: userspace: longer transfer
+ selftests: mptcp: join: properly kill background tasks
+ wifi: cfg80211: add an hrtimer based delayed work item
+ proc: proc_maps_open allow proc_mem_open to return NULL
+ Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete
+ UBUNTU: Upstream stable to v6.6.117, v6.12.58, v6.12.59
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2139460
Title:
Noble update: upstream stable patchset 2026-01-30
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2139460/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
