Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2026-03-12
Ported from the following upstream stable releases:
v6.6.121, v6.12.66
from git://git.kernel.org/
NFSD: Fix permission check for read access to executable-only files
nfsd: provide locking for v4_end_grace
atm: Fix dma_free_coherent() size
net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
btrfs: always detect conflicting inodes when logging inode refs
mei: me: add nova lake point S DID
lib/crypto: aes: Fix missing MMU protection for AES S-box
counter: 104-quad-8: Fix incorrect return value in IRQ handler
counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
drm/pl111: Fix error handling in pl111_amba_probe
drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[]
gpio: rockchip: mark the GPIO controller as sleeping
pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
wifi: avoid kernel-infoleak from struct iw_point
libceph: prevent potential out-of-bounds reads in handle_auth_done()
libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
libceph: make free_choose_arg_map() resilient to partial allocation
libceph: return the handler error from mon_handle_auth_done()
libceph: reset sparse-read state in osd_fault()
libceph: make calc_target() set t->paused, not just clear it
net: Add locking to protect skb->dev access in ip_output
nfsd: Fix a regression in nfsd_setattr()
nfsd: Fix NFSv3 atomicity bugs in nfsd_setattr()
nfsd: set security label during create operations
NFSD: NFSv4 file creation neglects setting ACL
tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
csky: fix csky_cmpxchg_fixup not working
ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels
alpha: don't reference obsolete termio struct for TC* constants
dm-snapshot: fix 'scheduling while atomic' on real-time kernels
NFSv4: ensure the open stateid seqid doesn't go backwards
NFS: Fix up the automount fs_context to use the correct cred
smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value
smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value
smb/client: fix NT_STATUS_NO_DATA_DETECTED value
scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset
scsi: ufs: core: Fix EH failure after W-LUN resume error
scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure
scanned in again after probe failed"
arm64: dts: add off-on-delay-us for usdhc2 regulator
ARM: dts: imx6q-ba16: fix RTC interrupt level
arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M
Plus DHCOM
netfilter: nft_synproxy: avoid possible data-race on update operation
gpio: pca953x: Add support for level-triggered interrupts
gpio: pca953x: handle short interrupt pulses on PCAL devices
netfilter: nf_tables: fix memory leak in nf_tables_newrule()
netfilter: nf_conncount: update last_gc only when GC has been performed
net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress
net: mscc: ocelot: Fix crash when adding interface under a lag
inet: ping: Fix icmp out counting
net: sock: fix hardened usercopy panic in sock_recv_errqueue
netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates
net/mlx5e: Don't print error message due to invalid module
net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
bnxt_en: Fix potential data corruption with HW GRO/LRO
net: fix memory leak in skb_segment_list for GRO packets
net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in
qfq_reset
net: usb: pegasus: fix memory leak in update_eth_regs_async()
net: enetc: fix build warning when PAGE_SIZE is greater than 128K
arp: do not assume dev_hard_header() does not change skb->head
ALSA: ac97bus: Use guard() for mutex locks
ALSA: ac97: fix a double free in snd_ac97_controller_register()
NFS: trace: show TIMEDOUT instead of 0x6e
nfs_common: factor out nfs_errtbl and nfs_stat_to_errno
NFSD: Remove NFSERR_EAGAIN
bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K
bpf: Make variables in bpf_prog_test_run_xdp less confusing
bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN
bpf, test_run: Subtract size of xdp_frame from allowed metadata size
bpf: Fix reference count leak in bpf_prog_test_run_xdp()
powercap: fix race condition in register_control_type()
powercap: fix sscanf() error return value handling
netfilter: nf_tables: avoid chain re-validation if possible
can: j1939: make j1939_session_activate() fail if device is no longer registered
ALSA: usb-audio: Update for native DSD support quirks
ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025
ASoC: fsl_sai: Add missing registers to cache default
scsi: sg: Fix occasional bogus elapsed time that exceeds timeout
bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path
ASoC: rockchip: Fix Wvoid-pointer-to-enum-cast warning (again)
btrfs: tracepoints: use btrfs_root_id() to get the id of a root
btrfs: fix NULL dereference on root when tracing inode eviction
crypto: qat - fix duplicate restarting msg during AER error
netfilter: nft_set_pipapo: fix range overlap detection
vsock: Make accept()ed sockets use custom setsockopt()
btrfs: only enforce free space tree if v1 cache is required for bs < ps cases
riscv: pgtable: Cleanup useless VA_USER_XXX definitions
idpf: keep the netdev when a reset fails
net: sfp: extend Potron XGSPON quirk to cover additional EEPROM variant
ata: libata-core: Disable LPM on ST2000DM008-2FR102
drm/amd/display: Fix DP no audio issue
ALSA: hda/realtek: enable woofer speakers on Medion NM14LNL
spi: cadence-quadspi: Prevent lost complete() call during indirect read
ALSA: hda: intel-dsp-config: Prefer legacy driver as fallback
UBUNTU: Upstream stable to v6.6.121, v6.12.66
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Noble)
Importance: Medium
Assignee: Noah Wager (nwager)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Noble)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Noble)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Noble)
Status: New => In Progress
** Changed in: linux (Ubuntu Noble)
Assignee: (unassigned) => Noah Wager (nwager)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2026-03-12
+
+ Ported from the following upstream stable releases:
+ v6.6.121, v6.12.66
+
from git://git.kernel.org/
+
+ NFSD: Fix permission check for read access to executable-only files
+ nfsd: provide locking for v4_end_grace
+ atm: Fix dma_free_coherent() size
+ net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
+ btrfs: always detect conflicting inodes when logging inode refs
+ mei: me: add nova lake point S DID
+ lib/crypto: aes: Fix missing MMU protection for AES S-box
+ counter: 104-quad-8: Fix incorrect return value in IRQ handler
+ counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
+ drm/pl111: Fix error handling in pl111_amba_probe
+ drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[]
+ gpio: rockchip: mark the GPIO controller as sleeping
+ pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
+ wifi: avoid kernel-infoleak from struct iw_point
+ libceph: prevent potential out-of-bounds reads in handle_auth_done()
+ libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
+ libceph: make free_choose_arg_map() resilient to partial allocation
+ libceph: return the handler error from mon_handle_auth_done()
+ libceph: reset sparse-read state in osd_fault()
+ libceph: make calc_target() set t->paused, not just clear it
+ net: Add locking to protect skb->dev access in ip_output
+ nfsd: Fix a regression in nfsd_setattr()
+ nfsd: Fix NFSv3 atomicity bugs in nfsd_setattr()
+ nfsd: set security label during create operations
+ NFSD: NFSv4 file creation neglects setting ACL
+ tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
+ csky: fix csky_cmpxchg_fixup not working
+ ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels
+ alpha: don't reference obsolete termio struct for TC* constants
+ dm-snapshot: fix 'scheduling while atomic' on real-time kernels
+ NFSv4: ensure the open stateid seqid doesn't go backwards
+ NFS: Fix up the automount fs_context to use the correct cred
+ smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value
+ smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value
+ smb/client: fix NT_STATUS_NO_DATA_DETECTED value
+ scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset
+ scsi: ufs: core: Fix EH failure after W-LUN resume error
+ scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure
scanned in again after probe failed"
+ arm64: dts: add off-on-delay-us for usdhc2 regulator
+ ARM: dts: imx6q-ba16: fix RTC interrupt level
+ arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics
i.MX8M Plus DHCOM
+ netfilter: nft_synproxy: avoid possible data-race on update operation
+ gpio: pca953x: Add support for level-triggered interrupts
+ gpio: pca953x: handle short interrupt pulses on PCAL devices
+ netfilter: nf_tables: fix memory leak in nf_tables_newrule()
+ netfilter: nf_conncount: update last_gc only when GC has been performed
+ net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
+ bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress
+ net: mscc: ocelot: Fix crash when adding interface under a lag
+ inet: ping: Fix icmp out counting
+ net: sock: fix hardened usercopy panic in sock_recv_errqueue
+ netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates
+ net/mlx5e: Don't print error message due to invalid module
+ net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
+ bnxt_en: Fix potential data corruption with HW GRO/LRO
+ net: fix memory leak in skb_segment_list for GRO packets
+ net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in
qfq_reset
+ net: usb: pegasus: fix memory leak in update_eth_regs_async()
+ net: enetc: fix build warning when PAGE_SIZE is greater than 128K
+ arp: do not assume dev_hard_header() does not change skb->head
+ ALSA: ac97bus: Use guard() for mutex locks
+ ALSA: ac97: fix a double free in snd_ac97_controller_register()
+ NFS: trace: show TIMEDOUT instead of 0x6e
+ nfs_common: factor out nfs_errtbl and nfs_stat_to_errno
+ NFSD: Remove NFSERR_EAGAIN
+ bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K
+ bpf: Make variables in bpf_prog_test_run_xdp less confusing
+ bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN
+ bpf, test_run: Subtract size of xdp_frame from allowed metadata size
+ bpf: Fix reference count leak in bpf_prog_test_run_xdp()
+ powercap: fix race condition in register_control_type()
+ powercap: fix sscanf() error return value handling
+ netfilter: nf_tables: avoid chain re-validation if possible
+ can: j1939: make j1939_session_activate() fail if device is no longer
registered
+ ALSA: usb-audio: Update for native DSD support quirks
+ ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025
+ ASoC: fsl_sai: Add missing registers to cache default
+ scsi: sg: Fix occasional bogus elapsed time that exceeds timeout
+ bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path
+ ASoC: rockchip: Fix Wvoid-pointer-to-enum-cast warning (again)
+ btrfs: tracepoints: use btrfs_root_id() to get the id of a root
+ btrfs: fix NULL dereference on root when tracing inode eviction
+ crypto: qat - fix duplicate restarting msg during AER error
+ netfilter: nft_set_pipapo: fix range overlap detection
+ vsock: Make accept()ed sockets use custom setsockopt()
+ btrfs: only enforce free space tree if v1 cache is required for bs < ps cases
+ riscv: pgtable: Cleanup useless VA_USER_XXX definitions
+ idpf: keep the netdev when a reset fails
+ net: sfp: extend Potron XGSPON quirk to cover additional EEPROM variant
+ ata: libata-core: Disable LPM on ST2000DM008-2FR102
+ drm/amd/display: Fix DP no audio issue
+ ALSA: hda/realtek: enable woofer speakers on Medion NM14LNL
+ spi: cadence-quadspi: Prevent lost complete() call during indirect read
+ ALSA: hda: intel-dsp-config: Prefer legacy driver as fallback
+ UBUNTU: Upstream stable to v6.6.121, v6.12.66
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2144058
Title:
Noble update: upstream stable patchset 2026-03-12
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2144058/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
