Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v7.0.9 upstream stable release
Ported from the following upstream stable releases:
v7.0.8, v7.0.9
from git://git.kernel.org/
Linux 7.0.8
HID: playstation: Clamp num_touch_reports
HID: appletb-kbd: fix UAF in inactivity-timer cleanup path
HID: appletb-kbd: run inactivity autodim from workqueues
HID: pidff: Fix integer overflow in pidff_rescale
media: uvcvideo: Enable VB2_DMABUF for metadata stream
drm/msm/hdmi: Fix wrong CTRL1 register used in writing info frames
media: rzv2h-ivc: Avoid double job scheduling
media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0
media: rzv2h-ivc: Write AXIRX_PIXFMT once
media: rzv2h-ivc: Fix FM_STOP register write
media: rzv2h-ivc: Fix concurrent buffer list access
media: mali-c55: Initialize the ISP in enable_streams()
media: mali-c55: Fix Iridix bypass macros
media: renesas: vsp1: Fix NULL pointer deref on module unload
media: renesas: vin: Fix RAW8 (again)
media: i2c: ov8856: free control handler on error in ov8856_init_controls()
media: dt-bindings: rockchip,vdec: Add alternative reg-names order for
RK35{76,88}
media: dt-bindings: rockchip,vdec: Mark reg-names required for RK35{76,88}
media: chips-media: wave5: fix a potential memory leak in wave5_vdi_init()
media: chips-media: wave5: add missing spinlock protection for send_eos_event()
media: chips-media: wave5: add missing spinlock protection for
handle_dynamic_resolution_change()
arm64: dts: freescale: imx95-toradex-smarc: fix PMIC_SD2_VSEL label position
drm/gpusvm: Allow device pages to be mapped in mixed mappings after system pages
drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages
spi: bcm63xx: fix controller deregistration
spi: atmel: fix controller deregistration
arm64: dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio pinmux
staging: media: atomisp: Disallow all private IOCTLs
regulator: mt6357: fix OF node reference imbalance
spi: st-ssc4: fix controller deregistration
regulator: max77650: fix OF node reference imbalance
media: ti: vpe: Add missing v4l2_device_unregister in vip_remove()
media: rc: xbox_remote: heed DMA restrictions
media: rc: streamzap: Error handling in probe
media: i2c: ov5647: Fix runtime PM refcount leak in s_ctrl
media: i2c: imx283: Enter full standby when stopping streaming
regulator: bq257xx: fix OF node reference imbalance
regulator: rk808: fix OF node reference imbalance
media: videobuf2: Set vma_flags in vb2_dma_sg_mmap
media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads
media: mali-c55: Fully reset the ISP configuration
media: intel/ipu6: fix error pointer dereference
media: i2c: imx283: Fix hang when going from large to small resolution
regulator: act8945a: fix OF node reference imbalance
regulator: s2dos05: fix OF node reference imbalance
regulator: bd9571mwv: fix OF node reference imbalance
spi: lantiq-ssc: fix controller deregistration
spi: meson-spicc: fix controller deregistration
spi: qup: fix controller deregistration
arm64: dts: ti: k3-am69-aquila-clover: Fix DP regulator enable GPIO
spi: at91-usart: fix controller deregistration
media: ipu-bridge: Add upside-down sensor DMI quirk for Dell XPS 13 9340 and
XPS 14 9440
media: saa7164: add ioremap return checks and cleanups
spi: amlogic-spisg: fix controller deregistration
spi: aspeed-smc: fix controller deregistration
drm/colorop: Preserve bypass value in duplicate_state()
drm/atomic: Add affected colorops with affected planes
platform/x86: hp-wmi: Ignore backlight and FnLock events
vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating bytes to copy
arm64: dts: broadcom: bcm2712-d-rpi-5-b: add fixes for pinctrl/pinctrl_aon
arm64: dts: broadcom: bcm2712-d-rpi-5-b: update uart10 interrupt
media: pci: zoran: fix potential memory leak in zoran_probe()
media: dib8000: avoid division by 0 in dib8000_set_dds()
media: i2c: imx412: Assert reset GPIO during probe
media: staging: imx: request mbus_config in csi_start
media: i2c: ov08d10: fix image vertical start setting
media: i2c: ov08d10: fix runtime PM handling in probe
media: omap3isp: drop the use count of v4l2 pipeline
media: iris: fix QCOM_MDT_LOADER dependency
media: iris: Fix use-after-free in iris_release_internal_buffers()
media: qcom: camss: Fix csid clock configuration for sa8775p
media: qcom: camss: Fix csid IRQ offset for sa8775p
media: qcom: iris: increase H265D_MAX_SLICE to fix H.265 decoding on SC7280
media: venus: fix QCOM_MDT_LOADER dependency
media: iris: Fix dma_free_attrs() size in iris_hfi_queues_init()
media: iris: fix use-after-free of fmt_src during MBPF check
media: iris: switch to hardware mode after firmware boot
media: qcom: camss: Add missing clocks for VFE lite on sa8775p
drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status()
spi: mxs: fix controller deregistration
spi: mt65xx: fix controller deregistration
spi: dln2: fix controller deregistration
spi: s3c64xx: fix controller deregistration
spi: fsl-espi: fix controller deregistration
spi: omap2-mcspi: fix controller deregistration
spi: pic32: fix controller deregistration
spi: ep93xx: fix controller deregistration
spi: mtk-nor: fix controller deregistration
spi: pl022: fix controller deregistration
spi: ch341: fix devres lifetime
spi: sh-hspi: fix controller deregistration
spi: fsl: fix controller deregistration
spi: bcmbca-hsspi: fix controller deregistration
spi: coldfire-qspi: fix controller deregistration
spi: npcm-pspi: fix controller deregistration
spi: cavium-thunderx: fix controller deregistration
spi: pic32-sqi: fix controller deregistration
spi: sprd: fix controller deregistration
spi: rspi: fix controller deregistration
spi: sh-msiof: fix controller deregistration
spi: slave-mt27xx: fix controller deregistration
spi: img-spfi: fix controller deregistration
spi: mpfs: fix controller deregistration
spi: octeon: fix controller deregistration
spi: imx: fix runtime pm leak on probe deferral
spi: mxic: fix controller deregistration
spi: orion: fix controller deregistration
spi: orion: fix runtime pm leak on unbind
spi: orion: fix clock imbalance on registration failure
spi: mpc52xx: fix use-after-free on registration failure
spi: mpc52xx: fix controller deregistration
spi: mpc52xx: fix use-after-free on unbind
spi: cadence: fix controller deregistration
spi: cadence-quadspi: fix controller deregistration
spi: cadence: fix unclocked access on unbind
spi: cadence: fix clock imbalance on probe failure
spi: cadence-quadspi: fix runtime pm disable imbalance on probe failure
spi: cadence-quadspi: fix clock imbalance on probe failure
spi: cadence-quadspi: fix runtime pm and clock imbalance on unbind
spi: cadence-quadspi: fix unclocked access on unbind
drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata()
drm/colorop: Fix blob property reference tracking in state lifecycle
drm/imx: parallel-display: Prefer bus format set via legacy "interface-pix-fmt"
DT property
drm/msm: always recover the gpu
drm/v3d: Reject empty multisync extension to prevent infinite loop
drm/i915/psr: Init variable to avoid early exit from et alignment loop
drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure
drm/amd/display: fix math_mod() using arg1 instead of arg2
drm/amd: Add missing firmware declaration for PSP v15.0.0
drm/amdgpu: Use NBIF offset for register RCC_STRAP0_RCC_DEV0_EPF0_STRAP0 .
drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count.
drm/amdgpu: gate VM CPU HDP flush on reset lock
drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x
drm/amdkfd: Add upper bound check for num_of_nodes
drm/amdgpu: Add bounds checking to ib_{get,set}_value
drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
drm/amdgpu/vce: Prevent partial address patches
drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg
drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
drm/amd/display: Change dither policy for 10 bpc output back to dithering
drm/gem: Fix inconsistent plane dimension calculation in
drm_gem_fb_init_with_funcs()
drm/appletbdrm: Use kvzalloc for big allocations
drm/amdkfd: validate SVM ioctl nattr against buffer size
drm/amdgpu: Avoid reset in AMDGPU unload path for APUs with GFX V11 and higher.
drm/udl: Increase GET_URB_TIMEOUT
drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure
drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked()
drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()
drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked()
drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise
drm: Set old handle to NULL before prime swap in change_handle
drm/radeon: add missing revision check for CI
drm/amdgpu: zero-initialize GART table on allocation
drm/exynos: remove bridge when component_add fails
drm/amdgpu/userq: fix access to stale wptr mapping
drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds
drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ
drm/bridge: tda998x: Use __be32 for audio port OF property pointer
drm/sti: remove bridge when sti_hda component_add fails
drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds
drm/amdkfd: Make all TLB-flushes heavy-weight
drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission
drm/amdgpu/pm: add missing revision check for CI
drm/amdgpu/pm: align Hawaii mclk workaround with radeon
arm64: dts: qcom: kodiak: Fix PCIe1 PHY ref clock voting
arm64: dts: qcom: lemans: Correct QUP interrupt numbers
arm64: dts: ti: k3-am62a7-sk: Fix pin name in comment from M19 to N22
arm64: dts: ti: k3-am69-aquila-dev: Fix DP regulator enable GPIO
sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
batman-adv: fix integer overflow on buff_pos
batman-adv: reject new tp_meter sessions during teardown
batman-adv: stop tp_meter sessions during mesh teardown
batman-adv: stop caching unowned originator pointers in BAT IV
batman-adv: tp_meter: fix tp_num leak on kmalloc failure
batman-adv: bla: prevent use-after-free when deleting claims
batman-adv: bla: only purge non-released claims
batman-adv: bla: put backbone reference on failed claim hash insert
sched_ext: Use HK_TYPE_DOMAIN_BOOT to detect isolcpus= domain isolation
usb: typec: tcpm: reset internal port states on soft reset AMS
io_uring/zcrx: use guards for locking
io_uring/zcrx: warn on freelist violations
kho: fix error handling in kho_add_subtree()
EDAC/versalnet: Refactor memory controller initialization and cleanup
EDAC/versalnet: Fix device name memory leak
spi: uniphier: Simplify clock handling with devm_clk_get_enabled()
spi: uniphier: fix controller deregistration
cgroup: Increment nr_dying_subsys_* from rmdir context
cgroup: Defer css percpu_ref kill on rmdir until cgroup is depopulated
sched_ext: Skip tasks with stale task_rq in bypass_lb_cpu()
perf build: fix "argument list too long" in second location
mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap()
vsock: fix buffer size clamping order
vsock/virtio: fix length and offset in tap skb for split packets
vsock/virtio: fix empty payload in tap skb for non-linear buffers
vsock/virtio: fix accept queue count leak on transport mismatch
drm/amdgpu/vcn3: Avoid overflow on msg bound check
drm/amdgpu/vcn4: Avoid overflow on msg bound check
Linux 7.0.9
UBUNTU: Upstream stable to v7.0.8, v7.0.9
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Resolute)
Importance: Medium
Assignee: Noah Wager (nwager)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Also affects: linux (Ubuntu Resolute)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Resolute)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Resolute)
Status: New => In Progress
** Changed in: linux (Ubuntu Resolute)
Assignee: (unassigned) => Noah Wager (nwager)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v7.0.9 upstream stable release
+
+ Ported from the following upstream stable releases:
+ v7.0.8, v7.0.9
+
from git://git.kernel.org/
-
+ Linux 7.0.8
+ HID: playstation: Clamp num_touch_reports
+ HID: appletb-kbd: fix UAF in inactivity-timer cleanup path
+ HID: appletb-kbd: run inactivity autodim from workqueues
+ HID: pidff: Fix integer overflow in pidff_rescale
+ media: uvcvideo: Enable VB2_DMABUF for metadata stream
+ drm/msm/hdmi: Fix wrong CTRL1 register used in writing info frames
+ media: rzv2h-ivc: Avoid double job scheduling
+ media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0
+ media: rzv2h-ivc: Write AXIRX_PIXFMT once
+ media: rzv2h-ivc: Fix FM_STOP register write
+ media: rzv2h-ivc: Fix concurrent buffer list access
+ media: mali-c55: Initialize the ISP in enable_streams()
+ media: mali-c55: Fix Iridix bypass macros
+ media: renesas: vsp1: Fix NULL pointer deref on module unload
+ media: renesas: vin: Fix RAW8 (again)
+ media: i2c: ov8856: free control handler on error in ov8856_init_controls()
+ media: dt-bindings: rockchip,vdec: Add alternative reg-names order for
RK35{76,88}
+ media: dt-bindings: rockchip,vdec: Mark reg-names required for RK35{76,88}
+ media: chips-media: wave5: fix a potential memory leak in wave5_vdi_init()
+ media: chips-media: wave5: add missing spinlock protection for
send_eos_event()
+ media: chips-media: wave5: add missing spinlock protection for
handle_dynamic_resolution_change()
+ arm64: dts: freescale: imx95-toradex-smarc: fix PMIC_SD2_VSEL label position
+ drm/gpusvm: Allow device pages to be mapped in mixed mappings after system
pages
+ drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages
+ spi: bcm63xx: fix controller deregistration
+ spi: atmel: fix controller deregistration
+ arm64: dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio pinmux
+ staging: media: atomisp: Disallow all private IOCTLs
+ regulator: mt6357: fix OF node reference imbalance
+ spi: st-ssc4: fix controller deregistration
+ regulator: max77650: fix OF node reference imbalance
+ media: ti: vpe: Add missing v4l2_device_unregister in vip_remove()
+ media: rc: xbox_remote: heed DMA restrictions
+ media: rc: streamzap: Error handling in probe
+ media: i2c: ov5647: Fix runtime PM refcount leak in s_ctrl
+ media: i2c: imx283: Enter full standby when stopping streaming
+ regulator: bq257xx: fix OF node reference imbalance
+ regulator: rk808: fix OF node reference imbalance
+ media: videobuf2: Set vma_flags in vb2_dma_sg_mmap
+ media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads
+ media: mali-c55: Fully reset the ISP configuration
+ media: intel/ipu6: fix error pointer dereference
+ media: i2c: imx283: Fix hang when going from large to small resolution
+ regulator: act8945a: fix OF node reference imbalance
+ regulator: s2dos05: fix OF node reference imbalance
+ regulator: bd9571mwv: fix OF node reference imbalance
+ spi: lantiq-ssc: fix controller deregistration
+ spi: meson-spicc: fix controller deregistration
+ spi: qup: fix controller deregistration
+ arm64: dts: ti: k3-am69-aquila-clover: Fix DP regulator enable GPIO
+ spi: at91-usart: fix controller deregistration
+ media: ipu-bridge: Add upside-down sensor DMI quirk for Dell XPS 13 9340 and
XPS 14 9440
+ media: saa7164: add ioremap return checks and cleanups
+ spi: amlogic-spisg: fix controller deregistration
+ spi: aspeed-smc: fix controller deregistration
+ drm/colorop: Preserve bypass value in duplicate_state()
+ drm/atomic: Add affected colorops with affected planes
+ platform/x86: hp-wmi: Ignore backlight and FnLock events
+ vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating bytes to copy
+ arm64: dts: broadcom: bcm2712-d-rpi-5-b: add fixes for pinctrl/pinctrl_aon
+ arm64: dts: broadcom: bcm2712-d-rpi-5-b: update uart10 interrupt
+ media: pci: zoran: fix potential memory leak in zoran_probe()
+ media: dib8000: avoid division by 0 in dib8000_set_dds()
+ media: i2c: imx412: Assert reset GPIO during probe
+ media: staging: imx: request mbus_config in csi_start
+ media: i2c: ov08d10: fix image vertical start setting
+ media: i2c: ov08d10: fix runtime PM handling in probe
+ media: omap3isp: drop the use count of v4l2 pipeline
+ media: iris: fix QCOM_MDT_LOADER dependency
+ media: iris: Fix use-after-free in iris_release_internal_buffers()
+ media: qcom: camss: Fix csid clock configuration for sa8775p
+ media: qcom: camss: Fix csid IRQ offset for sa8775p
+ media: qcom: iris: increase H265D_MAX_SLICE to fix H.265 decoding on SC7280
+ media: venus: fix QCOM_MDT_LOADER dependency
+ media: iris: Fix dma_free_attrs() size in iris_hfi_queues_init()
+ media: iris: fix use-after-free of fmt_src during MBPF check
+ media: iris: switch to hardware mode after firmware boot
+ media: qcom: camss: Add missing clocks for VFE lite on sa8775p
+ drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status()
+ spi: mxs: fix controller deregistration
+ spi: mt65xx: fix controller deregistration
+ spi: dln2: fix controller deregistration
+ spi: s3c64xx: fix controller deregistration
+ spi: fsl-espi: fix controller deregistration
+ spi: omap2-mcspi: fix controller deregistration
+ spi: pic32: fix controller deregistration
+ spi: ep93xx: fix controller deregistration
+ spi: mtk-nor: fix controller deregistration
+ spi: pl022: fix controller deregistration
+ spi: ch341: fix devres lifetime
+ spi: sh-hspi: fix controller deregistration
+ spi: fsl: fix controller deregistration
+ spi: bcmbca-hsspi: fix controller deregistration
+ spi: coldfire-qspi: fix controller deregistration
+ spi: npcm-pspi: fix controller deregistration
+ spi: cavium-thunderx: fix controller deregistration
+ spi: pic32-sqi: fix controller deregistration
+ spi: sprd: fix controller deregistration
+ spi: rspi: fix controller deregistration
+ spi: sh-msiof: fix controller deregistration
+ spi: slave-mt27xx: fix controller deregistration
+ spi: img-spfi: fix controller deregistration
+ spi: mpfs: fix controller deregistration
+ spi: octeon: fix controller deregistration
+ spi: imx: fix runtime pm leak on probe deferral
+ spi: mxic: fix controller deregistration
+ spi: orion: fix controller deregistration
+ spi: orion: fix runtime pm leak on unbind
+ spi: orion: fix clock imbalance on registration failure
+ spi: mpc52xx: fix use-after-free on registration failure
+ spi: mpc52xx: fix controller deregistration
+ spi: mpc52xx: fix use-after-free on unbind
+ spi: cadence: fix controller deregistration
+ spi: cadence-quadspi: fix controller deregistration
+ spi: cadence: fix unclocked access on unbind
+ spi: cadence: fix clock imbalance on probe failure
+ spi: cadence-quadspi: fix runtime pm disable imbalance on probe failure
+ spi: cadence-quadspi: fix clock imbalance on probe failure
+ spi: cadence-quadspi: fix runtime pm and clock imbalance on unbind
+ spi: cadence-quadspi: fix unclocked access on unbind
+ drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata()
+ drm/colorop: Fix blob property reference tracking in state lifecycle
+ drm/imx: parallel-display: Prefer bus format set via legacy
"interface-pix-fmt" DT property
+ drm/msm: always recover the gpu
+ drm/v3d: Reject empty multisync extension to prevent infinite loop
+ drm/i915/psr: Init variable to avoid early exit from et alignment loop
+ drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure
+ drm/amd/display: fix math_mod() using arg1 instead of arg2
+ drm/amd: Add missing firmware declaration for PSP v15.0.0
+ drm/amdgpu: Use NBIF offset for register RCC_STRAP0_RCC_DEV0_EPF0_STRAP0 .
+ drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count.
+ drm/amdgpu: gate VM CPU HDP flush on reset lock
+ drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x
+ drm/amdkfd: Add upper bound check for num_of_nodes
+ drm/amdgpu: Add bounds checking to ib_{get,set}_value
+ drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
+ drm/amdgpu/vce: Prevent partial address patches
+ drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg
+ drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
+ drm/amd/display: Change dither policy for 10 bpc output back to dithering
+ drm/gem: Fix inconsistent plane dimension calculation in
drm_gem_fb_init_with_funcs()
+ drm/appletbdrm: Use kvzalloc for big allocations
+ drm/amdkfd: validate SVM ioctl nattr against buffer size
+ drm/amdgpu: Avoid reset in AMDGPU unload path for APUs with GFX V11 and
higher.
+ drm/udl: Increase GET_URB_TIMEOUT
+ drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure
+ drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked()
+ drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()
+ drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked()
+ drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise
+ drm: Set old handle to NULL before prime swap in change_handle
+ drm/radeon: add missing revision check for CI
+ drm/amdgpu: zero-initialize GART table on allocation
+ drm/exynos: remove bridge when component_add fails
+ drm/amdgpu/userq: fix access to stale wptr mapping
+ drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds
+ drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ
+ drm/bridge: tda998x: Use __be32 for audio port OF property pointer
+ drm/sti: remove bridge when sti_hda component_add fails
+ drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds
+ drm/amdkfd: Make all TLB-flushes heavy-weight
+ drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission
+ drm/amdgpu/pm: add missing revision check for CI
+ drm/amdgpu/pm: align Hawaii mclk workaround with radeon
+ arm64: dts: qcom: kodiak: Fix PCIe1 PHY ref clock voting
+ arm64: dts: qcom: lemans: Correct QUP interrupt numbers
+ arm64: dts: ti: k3-am62a7-sk: Fix pin name in comment from M19 to N22
+ arm64: dts: ti: k3-am69-aquila-dev: Fix DP regulator enable GPIO
+ sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
+ batman-adv: fix integer overflow on buff_pos
+ batman-adv: reject new tp_meter sessions during teardown
+ batman-adv: stop tp_meter sessions during mesh teardown
+ batman-adv: stop caching unowned originator pointers in BAT IV
+ batman-adv: tp_meter: fix tp_num leak on kmalloc failure
+ batman-adv: bla: prevent use-after-free when deleting claims
+ batman-adv: bla: only purge non-released claims
+ batman-adv: bla: put backbone reference on failed claim hash insert
+ sched_ext: Use HK_TYPE_DOMAIN_BOOT to detect isolcpus= domain isolation
+ usb: typec: tcpm: reset internal port states on soft reset AMS
+ io_uring/zcrx: use guards for locking
+ io_uring/zcrx: warn on freelist violations
+ kho: fix error handling in kho_add_subtree()
+ EDAC/versalnet: Refactor memory controller initialization and cleanup
+ EDAC/versalnet: Fix device name memory leak
+ spi: uniphier: Simplify clock handling with devm_clk_get_enabled()
+ spi: uniphier: fix controller deregistration
+ cgroup: Increment nr_dying_subsys_* from rmdir context
+ cgroup: Defer css percpu_ref kill on rmdir until cgroup is depopulated
+ sched_ext: Skip tasks with stale task_rq in bypass_lb_cpu()
+ perf build: fix "argument list too long" in second location
+ mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap()
+ vsock: fix buffer size clamping order
+ vsock/virtio: fix length and offset in tap skb for split packets
+ vsock/virtio: fix empty payload in tap skb for non-linear buffers
+ vsock/virtio: fix accept queue count leak on transport mismatch
+ drm/amdgpu/vcn3: Avoid overflow on msg bound check
+ drm/amdgpu/vcn4: Avoid overflow on msg bound check
Linux 7.0.9
- drm/amdgpu/vcn4: Avoid overflow on msg bound check
- drm/amdgpu/vcn3: Avoid overflow on msg bound check
- vsock/virtio: fix accept queue count leak on transport mismatch
- vsock/virtio: fix empty payload in tap skb for non-linear buffers
- vsock/virtio: fix length and offset in tap skb for split packets
- vsock: fix buffer size clamping order
- mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap()
- perf build: fix "argument list too long" in second location
- sched_ext: Skip tasks with stale task_rq in bypass_lb_cpu()
- cgroup: Defer css percpu_ref kill on rmdir until cgroup is depopulated
- cgroup: Increment nr_dying_subsys_* from rmdir context
- spi: uniphier: fix controller deregistration
- spi: uniphier: Simplify clock handling with devm_clk_get_enabled()
- EDAC/versalnet: Fix device name memory leak
- EDAC/versalnet: Refactor memory controller initialization and cleanup
- kho: fix error handling in kho_add_subtree()
- io_uring/zcrx: warn on freelist violations
- io_uring/zcrx: use guards for locking
- usb: typec: tcpm: reset internal port states on soft reset AMS
- sched_ext: Use HK_TYPE_DOMAIN_BOOT to detect isolcpus= domain isolation
- batman-adv: bla: put backbone reference on failed claim hash insert
- batman-adv: bla: only purge non-released claims
- batman-adv: bla: prevent use-after-free when deleting claims
- batman-adv: tp_meter: fix tp_num leak on kmalloc failure
- batman-adv: stop caching unowned originator pointers in BAT IV
- batman-adv: stop tp_meter sessions during mesh teardown
- batman-adv: reject new tp_meter sessions during teardown
- batman-adv: fix integer overflow on buff_pos
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
- arm64: dts: ti: k3-am69-aquila-dev: Fix DP regulator enable GPIO
- arm64: dts: ti: k3-am62a7-sk: Fix pin name in comment from M19 to N22
- arm64: dts: qcom: lemans: Correct QUP interrupt numbers
- arm64: dts: qcom: kodiak: Fix PCIe1 PHY ref clock voting
- drm/amdgpu/pm: align Hawaii mclk workaround with radeon
- drm/amdgpu/pm: add missing revision check for CI
- drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission
- drm/amdkfd: Make all TLB-flushes heavy-weight
- drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds
- drm/sti: remove bridge when sti_hda component_add fails
- drm/bridge: tda998x: Use __be32 for audio port OF property pointer
- drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ
- drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds
- drm/amdgpu/userq: fix access to stale wptr mapping
- drm/exynos: remove bridge when component_add fails
- drm/amdgpu: zero-initialize GART table on allocation
- drm/radeon: add missing revision check for CI
- drm: Set old handle to NULL before prime swap in change_handle
- drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise
- drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked()
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()
- drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked()
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure
- drm/udl: Increase GET_URB_TIMEOUT
- drm/amdgpu: Avoid reset in AMDGPU unload path for APUs with GFX V11 and
higher.
- drm/amdkfd: validate SVM ioctl nattr against buffer size
- drm/appletbdrm: Use kvzalloc for big allocations
- drm/gem: Fix inconsistent plane dimension calculation in
drm_gem_fb_init_with_funcs()
- drm/amd/display: Change dither policy for 10 bpc output back to dithering
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg
- drm/amdgpu/vce: Prevent partial address patches
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
- drm/amdgpu: Add bounds checking to ib_{get,set}_value
- drm/amdkfd: Add upper bound check for num_of_nodes
- drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x
- drm/amdgpu: gate VM CPU HDP flush on reset lock
- drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count.
- drm/amdgpu: Use NBIF offset for register RCC_STRAP0_RCC_DEV0_EPF0_STRAP0 .
- drm/amd: Add missing firmware declaration for PSP v15.0.0
- drm/amd/display: fix math_mod() using arg1 instead of arg2
- drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure
- drm/i915/psr: Init variable to avoid early exit from et alignment loop
- drm/v3d: Reject empty multisync extension to prevent infinite loop
- drm/msm: always recover the gpu
- drm/imx: parallel-display: Prefer bus format set via legacy
"interface-pix-fmt" DT property
- drm/colorop: Fix blob property reference tracking in state lifecycle
- drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata()
- spi: cadence-quadspi: fix unclocked access on unbind
- spi: cadence-quadspi: fix runtime pm and clock imbalance on unbind
- spi: cadence-quadspi: fix clock imbalance on probe failure
- spi: cadence-quadspi: fix runtime pm disable imbalance on probe failure
- spi: cadence: fix clock imbalance on probe failure
- spi: cadence: fix unclocked access on unbind
- spi: cadence-quadspi: fix controller deregistration
- spi: cadence: fix controller deregistration
- spi: mpc52xx: fix use-after-free on unbind
- spi: mpc52xx: fix controller deregistration
- spi: mpc52xx: fix use-after-free on registration failure
- spi: orion: fix clock imbalance on registration failure
- spi: orion: fix runtime pm leak on unbind
- spi: orion: fix controller deregistration
- spi: mxic: fix controller deregistration
- spi: imx: fix runtime pm leak on probe deferral
- spi: octeon: fix controller deregistration
- spi: mpfs: fix controller deregistration
- spi: img-spfi: fix controller deregistration
- spi: slave-mt27xx: fix controller deregistration
- spi: sh-msiof: fix controller deregistration
- spi: rspi: fix controller deregistration
- spi: sprd: fix controller deregistration
- spi: pic32-sqi: fix controller deregistration
- spi: cavium-thunderx: fix controller deregistration
- spi: npcm-pspi: fix controller deregistration
- spi: coldfire-qspi: fix controller deregistration
- spi: bcmbca-hsspi: fix controller deregistration
- spi: fsl: fix controller deregistration
- spi: sh-hspi: fix controller deregistration
- spi: ch341: fix devres lifetime
- spi: pl022: fix controller deregistration
- spi: mtk-nor: fix controller deregistration
- spi: ep93xx: fix controller deregistration
- spi: pic32: fix controller deregistration
- spi: omap2-mcspi: fix controller deregistration
- spi: fsl-espi: fix controller deregistration
- spi: s3c64xx: fix controller deregistration
- spi: dln2: fix controller deregistration
- spi: mt65xx: fix controller deregistration
- spi: mxs: fix controller deregistration
- drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status()
- media: qcom: camss: Add missing clocks for VFE lite on sa8775p
- media: iris: switch to hardware mode after firmware boot
- media: iris: fix use-after-free of fmt_src during MBPF check
- media: iris: Fix dma_free_attrs() size in iris_hfi_queues_init()
- media: venus: fix QCOM_MDT_LOADER dependency
- media: qcom: iris: increase H265D_MAX_SLICE to fix H.265 decoding on SC7280
- media: qcom: camss: Fix csid IRQ offset for sa8775p
- media: qcom: camss: Fix csid clock configuration for sa8775p
- media: iris: Fix use-after-free in iris_release_internal_buffers()
- media: iris: fix QCOM_MDT_LOADER dependency
- media: omap3isp: drop the use count of v4l2 pipeline
- media: i2c: ov08d10: fix runtime PM handling in probe
- media: i2c: ov08d10: fix image vertical start setting
- media: staging: imx: request mbus_config in csi_start
- media: i2c: imx412: Assert reset GPIO during probe
- media: dib8000: avoid division by 0 in dib8000_set_dds()
- media: pci: zoran: fix potential memory leak in zoran_probe()
- arm64: dts: broadcom: bcm2712-d-rpi-5-b: update uart10 interrupt
- arm64: dts: broadcom: bcm2712-d-rpi-5-b: add fixes for pinctrl/pinctrl_aon
- vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating bytes to copy
- platform/x86: hp-wmi: Ignore backlight and FnLock events
- drm/atomic: Add affected colorops with affected planes
- drm/colorop: Preserve bypass value in duplicate_state()
- spi: aspeed-smc: fix controller deregistration
- spi: amlogic-spisg: fix controller deregistration
- media: saa7164: add ioremap return checks and cleanups
- media: ipu-bridge: Add upside-down sensor DMI quirk for Dell XPS 13 9340 and
XPS 14 9440
- spi: at91-usart: fix controller deregistration
- arm64: dts: ti: k3-am69-aquila-clover: Fix DP regulator enable GPIO
- spi: qup: fix controller deregistration
- spi: meson-spicc: fix controller deregistration
- spi: lantiq-ssc: fix controller deregistration
- regulator: bd9571mwv: fix OF node reference imbalance
- regulator: s2dos05: fix OF node reference imbalance
- regulator: act8945a: fix OF node reference imbalance
- media: i2c: imx283: Fix hang when going from large to small resolution
- media: intel/ipu6: fix error pointer dereference
- media: mali-c55: Fully reset the ISP configuration
- media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads
- media: videobuf2: Set vma_flags in vb2_dma_sg_mmap
- regulator: rk808: fix OF node reference imbalance
- regulator: bq257xx: fix OF node reference imbalance
- media: i2c: imx283: Enter full standby when stopping streaming
- media: i2c: ov5647: Fix runtime PM refcount leak in s_ctrl
- media: rc: streamzap: Error handling in probe
- media: rc: xbox_remote: heed DMA restrictions
- media: ti: vpe: Add missing v4l2_device_unregister in vip_remove()
- regulator: max77650: fix OF node reference imbalance
- spi: st-ssc4: fix controller deregistration
- regulator: mt6357: fix OF node reference imbalance
- staging: media: atomisp: Disallow all private IOCTLs
- arm64: dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio pinmux
- spi: atmel: fix controller deregistration
- spi: bcm63xx: fix controller deregistration
- drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages
- drm/gpusvm: Allow device pages to be mapped in mixed mappings after system
pages
- arm64: dts: freescale: imx95-toradex-smarc: fix PMIC_SD2_VSEL label position
- media: chips-media: wave5: add missing spinlock protection for
handle_dynamic_resolution_change()
- media: chips-media: wave5: add missing spinlock protection for
send_eos_event()
- media: chips-media: wave5: fix a potential memory leak in wave5_vdi_init()
- media: dt-bindings: rockchip,vdec: Mark reg-names required for RK35{76,88}
- media: dt-bindings: rockchip,vdec: Add alternative reg-names order for
RK35{76,88}
- media: i2c: ov8856: free control handler on error in ov8856_init_controls()
- media: renesas: vin: Fix RAW8 (again)
- media: renesas: vsp1: Fix NULL pointer deref on module unload
- media: mali-c55: Fix Iridix bypass macros
- media: mali-c55: Initialize the ISP in enable_streams()
- media: rzv2h-ivc: Fix concurrent buffer list access
- media: rzv2h-ivc: Fix FM_STOP register write
- media: rzv2h-ivc: Write AXIRX_PIXFMT once
- media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0
- media: rzv2h-ivc: Avoid double job scheduling
- drm/msm/hdmi: Fix wrong CTRL1 register used in writing info frames
- media: uvcvideo: Enable VB2_DMABUF for metadata stream
- HID: pidff: Fix integer overflow in pidff_rescale
- HID: appletb-kbd: run inactivity autodim from workqueues
- HID: appletb-kbd: fix UAF in inactivity-timer cleanup path
- HID: playstation: Clamp num_touch_reports
+ UBUNTU: Upstream stable to v7.0.8, v7.0.9
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2156006
Title:
Resolute update: v7.0.9 upstream stable release
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2156006/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
