Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2026-06-09
Ported from the following upstream stable releases:
v6.12.67, v6.18.7
from git://git.kernel.org/
efi/cper: Fix cper_bits_to_str buffer handling and return value
x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1
ASoC: codecs: wsa884x: fix codec initialisation
ASoC: codecs: wsa883x: fix unnecessary initialisation
virtio_net: Fix misalignment bug in struct virtnet_info
io_uring: move local task_work in exit cancel loop
xfrm: Fix inner mode lookup in tunnel mode GSO segmentation
xfrm: set ipv4 no_pmtu_disc flag only on output sa when direction is set
pNFS: Fix a deadlock when returning a delegation during open()
NFS: Fix a deadlock involving nfs_release_folio()
pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
pnfs/blocklayout: Fix memory leak in bl_parse_scsi()
drm/bridge: dw-hdmi-qp: Fix spurious IRQ on resume
drm/vmwgfx: Fix KMS with 3D on HW version 10
drm/vmwgfx: Merge vmw_bo_release and vmw_bo_free functions
drm/rockchip: vop2: Add delay between poll registers
drm/rockchip: vop2: Only wait for changed layer cfg done when there is pending
cfgdone bits
PM: EM: Fix incorrect description of the cost field in struct em_perf_state
ipv4: ip_tunnel: spread netdev_lockdep_set_classes()
can: etas_es58x: allow partial RX URB allocation to succeed
nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
btrfs: release path before iget_failed() in btrfs_read_locked_inode()
btrfs: send: check for inline extents in range_is_hole_in_parent()
Bluetooth: hci_sync: enable PA Sync Lost event
net: bridge: annotate data-races around fdb->{updated,used}
ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
net: update netdev_lock_{type,name}
macvlan: fix possible UAF in macvlan_forward_source()
block: zero non-PI portion of auto integrity buffer
ipv4: ip_gre: make ipgre_header() robust
vsock/test: add a final full barrier after run all tests
net/mlx5e: Fix crash on profile change rollback failure
net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv
net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv
net/mlx5e: Restore destroying state bit after profile cleanup
btrfs: fix memory leaks in create_space_info() error paths
cxl/hdm: Fix potential infinite loop in __cxl_dpa_reserve()
net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback
ALSA: hda/cirrus_scodec_test: Fix incorrect setup of gpiochip
ALSA: hda/cirrus_scodec_test: Fix test suite name
net: hv_netvsc: reject RSS hash key programming without RX indirection table
dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()
ipv6: Fix use-after-free in inet6_addr_del().
selftests: drv-net: fix RPS mask handling for high CPU numbers
net/sched: sch_qfq: do not free existing class in qfq_change_class()
ASoC: sdw_utils: cs42l43: Enable Headphone pin for LINEOUT jack type
ASoC: tlv320adcx140: fix null pointer
ASoC: tlv320adcx140: fix word length
drm/amdgpu: fix drm panic null pointer when driver not support atomic
drm/amd/display: Show link name in PSR status message
drm/amd/pm: fix smu overdrive data type wrong issue on smu 14.0.2
drm/amdkfd: No need to suspend whole MES to evict process
drm/amdgpu/userq: Fix fence reference leak on queue teardown v2
mm: describe @flags parameter in memalloc_flags_save()
textsearch: describe @list member in ts_ops search
mm, kfence: describe @slab parameter in __kfence_obj_info()
mips: fix HIGHMEM initialization
drivers/dax: add some missing kerneldoc comment fields for struct dev_dax
NFS: Fix size read races in truncate, fallocate and copy offload
dmaengine: xilinx: xdma: Fix regmap max_register
dmaengine: tegra-adma: Fix use-after-free
dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth"
property is missing
phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it
phy: qcom-qusb2: Fix NULL pointer dereference on early suspend
phy: stm32-usphyc: Fix off by one in probe()
phy: ti: da8xx-usb: Handle devm_pm_runtime_enable() errors
landlock: Fix TCP handling of short AF_UNSPEC addresses
selftests/landlock: Fix TCP bind(AF_UNSPEC) test case
selftests/landlock: Remove invalid unix socket bind()
landlock: Fix wrong type usage
phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again)
selftests/landlock: Properly close a file descriptor
dmaengine: omap-dma: fix dma_pool resource leak in error paths
soundwire: bus: fix off-by-one when allocating slave IDs
i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA
i2c: imx-lpi2c: change to PIO mode in system-wide suspend/resume progress
sched/deadline: Avoid double update_rq_clock()
sched: Deadline has dynamic priority
HID: usbhid: paper over wrong bNumDescriptor field
selftests/bpf: Fix selftest verif_scale_strobemeta failure with llvm22
scsi: core: Fix error handler encryption support
selftests: kvm: replace numbered sync points with actions
selftests: kvm: try getting XFD and XSAVE state out of sync
ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer
ALSA: hda/tas2781: Skip UEFI calibration on ASUS ROG Xbox Ally X
ALSA: hda/realtek: Add quirk for HP Pavilion x360 to enable mute LED
null_blk: fix kmemleak by releasing references to fault configfs items
can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit.
net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon
receiving the second rts
tools/testing/selftests: add tests for !tgt, src mremap() merges
tools/testing/selftests: add forked (un)/faulted VMA merge tests
tools/testing/selftests: fix gup_longterm for unknown fs
ftrace: Do not over-allocate ftrace memory
xfs: set max_agbno to allow sparse alloc of last full inode chunk
xfs: Fix the return value of xfs_rtcopy_summary()
virtio-net: don't schedule delayed refill worker
lib/buildid: use __kernel_read() for sleepable context
x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers
phy: rockchip: inno-usb2: fix communication disruption in gadget mode
phy: ti: gmii-sel: fix regmap leak on probe failure
phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()
phy: freescale: imx8m-pcie: assert phy reset during power on
phy: rockchip: inno-usb2: fix disconnection in gadget mode
phy: fsl-imx8mq-usb: fix typec orientation switch when built as module
phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7
xhci: sideband: don't dereference freed ring when removing sideband endpoint
usb: gadget: uvc: fix interval_duration calculation
usb: gadget: uvc: fix req_payload_size calculation
usb: dwc3: Check for USB4 IP_NAME
usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor
USB: OHCI/UHCI: Add soft dependencies on ehci_platform
USB: serial: option: add Telit LE910 MBIM composition
USB: serial: ftdi_sio: add support for PICAXE AXE027 cable
nvme-pci: disable secondary temp for Wodposit WPBSNM8
ASoC: codecs: wsa881x: fix unnecessary initialisation
ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
hrtimer: Fix softirq base check in update_needs_ipi()
EDAC/x38: Fix a resource leak in x38_probe1()
EDAC/i3200: Fix a resource leak in i3200_probe1()
i2c: riic: Move suspend handling to NOIRQ phase
x86/resctrl: Add missing resctrl initialization for Hygon
x86/resctrl: Fix memory bandwidth counter width for Hygon
nvme: fix PCIe subsystem reset controller state transition
mm: kmsan: fix poisoning of high-order non-compound pages
mm: numa,memblock: include <asm/numa.h> for 'numa_nodes_parsed'
mm/zswap: fix error pointer free in zswap_cpu_comp_prepare()
mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free
mm/damon/core: remove call_control in inactive contexts
mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure
mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup
failure
mm/damon/sysfs: cleanup intervals subdirs on attrs dir setup failure
mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure
LoongArch: Fix PMU counter allocation for mixed-type event groups
LoongArch: dts: Describe PCI sideband IRQ through interrupt-extended
drm/amd/display: Bump the HDMI clock to 340MHz
drm/amd/display: Initialise backlight level values from hw
drm/amd: Clean up kfd node on surprise disconnect
drm/amdgpu: make sure userqs are enabled in userq IOCTLs
drm/amdkfd: fix a memory leak in device_queue_manager_init()
drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare
drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
drm/panel: simple: restore connector_type fallback
drm/sysfb: Remove duplicate declarations
drm/vmwgfx: Fix an error return check in vmw_compat_shader_add()
LoongArch: dts: loongson-2k0500: Add default interrupt controller address cells
LoongArch: dts: loongson-2k1000: Add default interrupt controller address cells
LoongArch: dts: loongson-2k1000: Fix i2c-gpio node names
LoongArch: dts: loongson-2k2000: Add default interrupt controller address cells
LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy()
LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy()
LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy()
dmaengine: apple-admac: Add "apple,t8103-admac" compatible
dmaengine: at_hdmac: fix device leak on of_dma_xlate()
dmaengine: bcm-sba-raid: fix device leak on probe
dmaengine: cv1800b-dmamux: fix device leak on route allocation
dmaengine: dw: dmamux: fix OF node leak on route allocation failure
dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure
dmaengine: idxd: fix device leaks on compat bind and unbind
dmaengine: lpc18xx-dmamux: fix device leak on route allocation
dmaengine: lpc32xx-dmamux: fix device leak on route allocation
dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()
dmaengine: sh: rz-dmac: fix device leak on probe failure
dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all()
dmaengine: stm32: dmamux: fix device leak on route allocation
dmaengine: stm32: dmamux: fix OF node leak on route allocation failure
dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation
dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
dmaengine: ti: k3-udma: fix device leak on udma lookup
x86/mm: use 'ptdesc' when freeing PMD pages
x86/mm: use pagetable_free()
HID: intel-ish-hid: Fix -Wcast-function-type-strict in
devm_ishtp_alloc_workqueue()
btrfs: fix deadlock in wait_current_trans() due to ignored transaction type
mm/page_alloc/vmstat: simplify refresh_cpu_vm_stats change detection
mm/page_alloc: batch page freeing in decay_pcp_high
mm/page_alloc: prevent pcp corruption with SMP=n
UBUNTU: Upstream stable to v6.12.67, v6.18.7
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Questing)
Importance: Medium
Assignee: Bethany Jamison (bjamison)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Also affects: linux (Ubuntu Questing)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Questing)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Questing)
Status: New => In Progress
** Changed in: linux (Ubuntu Questing)
Assignee: (unassigned) => Bethany Jamison (bjamison)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2026-06-09
+
+ Ported from the following upstream stable releases:
+ v6.12.67, v6.18.7
+
from git://git.kernel.org/
+
+ efi/cper: Fix cper_bits_to_str buffer handling and return value
+ x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1
+ ASoC: codecs: wsa884x: fix codec initialisation
+ ASoC: codecs: wsa883x: fix unnecessary initialisation
+ virtio_net: Fix misalignment bug in struct virtnet_info
+ io_uring: move local task_work in exit cancel loop
+ xfrm: Fix inner mode lookup in tunnel mode GSO segmentation
+ xfrm: set ipv4 no_pmtu_disc flag only on output sa when direction is set
+ pNFS: Fix a deadlock when returning a delegation during open()
+ NFS: Fix a deadlock involving nfs_release_folio()
+ pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
+ pnfs/blocklayout: Fix memory leak in bl_parse_scsi()
+ drm/bridge: dw-hdmi-qp: Fix spurious IRQ on resume
+ drm/vmwgfx: Fix KMS with 3D on HW version 10
+ drm/vmwgfx: Merge vmw_bo_release and vmw_bo_free functions
+ drm/rockchip: vop2: Add delay between poll registers
+ drm/rockchip: vop2: Only wait for changed layer cfg done when there is
pending cfgdone bits
+ PM: EM: Fix incorrect description of the cost field in struct em_perf_state
+ ipv4: ip_tunnel: spread netdev_lockdep_set_classes()
+ can: etas_es58x: allow partial RX URB allocation to succeed
+ nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
+ btrfs: release path before iget_failed() in btrfs_read_locked_inode()
+ btrfs: send: check for inline extents in range_is_hole_in_parent()
+ Bluetooth: hci_sync: enable PA Sync Lost event
+ net: bridge: annotate data-races around fdb->{updated,used}
+ ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
+ net: update netdev_lock_{type,name}
+ macvlan: fix possible UAF in macvlan_forward_source()
+ block: zero non-PI portion of auto integrity buffer
+ ipv4: ip_gre: make ipgre_header() robust
+ vsock/test: add a final full barrier after run all tests
+ net/mlx5e: Fix crash on profile change rollback failure
+ net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv
+ net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv
+ net/mlx5e: Restore destroying state bit after profile cleanup
+ btrfs: fix memory leaks in create_space_info() error paths
+ cxl/hdm: Fix potential infinite loop in __cxl_dpa_reserve()
+ net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback
+ ALSA: hda/cirrus_scodec_test: Fix incorrect setup of gpiochip
+ ALSA: hda/cirrus_scodec_test: Fix test suite name
+ net: hv_netvsc: reject RSS hash key programming without RX indirection table
+ dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()
+ ipv6: Fix use-after-free in inet6_addr_del().
+ selftests: drv-net: fix RPS mask handling for high CPU numbers
+ net/sched: sch_qfq: do not free existing class in qfq_change_class()
+ ASoC: sdw_utils: cs42l43: Enable Headphone pin for LINEOUT jack type
+ ASoC: tlv320adcx140: fix null pointer
+ ASoC: tlv320adcx140: fix word length
+ drm/amdgpu: fix drm panic null pointer when driver not support atomic
+ drm/amd/display: Show link name in PSR status message
+ drm/amd/pm: fix smu overdrive data type wrong issue on smu 14.0.2
+ drm/amdkfd: No need to suspend whole MES to evict process
+ drm/amdgpu/userq: Fix fence reference leak on queue teardown v2
+ mm: describe @flags parameter in memalloc_flags_save()
+ textsearch: describe @list member in ts_ops search
+ mm, kfence: describe @slab parameter in __kfence_obj_info()
+ mips: fix HIGHMEM initialization
+ drivers/dax: add some missing kerneldoc comment fields for struct dev_dax
+ NFS: Fix size read races in truncate, fallocate and copy offload
+ dmaengine: xilinx: xdma: Fix regmap max_register
+ dmaengine: tegra-adma: Fix use-after-free
+ dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth"
property is missing
+ phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it
+ phy: qcom-qusb2: Fix NULL pointer dereference on early suspend
+ phy: stm32-usphyc: Fix off by one in probe()
+ phy: ti: da8xx-usb: Handle devm_pm_runtime_enable() errors
+ landlock: Fix TCP handling of short AF_UNSPEC addresses
+ selftests/landlock: Fix TCP bind(AF_UNSPEC) test case
+ selftests/landlock: Remove invalid unix socket bind()
+ landlock: Fix wrong type usage
+ phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again)
+ selftests/landlock: Properly close a file descriptor
+ dmaengine: omap-dma: fix dma_pool resource leak in error paths
+ soundwire: bus: fix off-by-one when allocating slave IDs
+ i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA
+ i2c: imx-lpi2c: change to PIO mode in system-wide suspend/resume progress
+ sched/deadline: Avoid double update_rq_clock()
+ sched: Deadline has dynamic priority
+ HID: usbhid: paper over wrong bNumDescriptor field
+ selftests/bpf: Fix selftest verif_scale_strobemeta failure with llvm22
+ scsi: core: Fix error handler encryption support
+ selftests: kvm: replace numbered sync points with actions
+ selftests: kvm: try getting XFD and XSAVE state out of sync
+ ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer
+ ALSA: hda/tas2781: Skip UEFI calibration on ASUS ROG Xbox Ally X
+ ALSA: hda/realtek: Add quirk for HP Pavilion x360 to enable mute LED
+ null_blk: fix kmemleak by releasing references to fault configfs items
+ can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
+ can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit.
+ net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon
receiving the second rts
+ tools/testing/selftests: add tests for !tgt, src mremap() merges
+ tools/testing/selftests: add forked (un)/faulted VMA merge tests
+ tools/testing/selftests: fix gup_longterm for unknown fs
+ ftrace: Do not over-allocate ftrace memory
+ xfs: set max_agbno to allow sparse alloc of last full inode chunk
+ xfs: Fix the return value of xfs_rtcopy_summary()
+ virtio-net: don't schedule delayed refill worker
+ lib/buildid: use __kernel_read() for sleepable context
+ x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers
+ phy: rockchip: inno-usb2: fix communication disruption in gadget mode
+ phy: ti: gmii-sel: fix regmap leak on probe failure
+ phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()
+ phy: freescale: imx8m-pcie: assert phy reset during power on
+ phy: rockchip: inno-usb2: fix disconnection in gadget mode
+ phy: fsl-imx8mq-usb: fix typec orientation switch when built as module
+ phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7
+ xhci: sideband: don't dereference freed ring when removing sideband endpoint
+ usb: gadget: uvc: fix interval_duration calculation
+ usb: gadget: uvc: fix req_payload_size calculation
+ usb: dwc3: Check for USB4 IP_NAME
+ usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor
+ USB: OHCI/UHCI: Add soft dependencies on ehci_platform
+ USB: serial: option: add Telit LE910 MBIM composition
+ USB: serial: ftdi_sio: add support for PICAXE AXE027 cable
+ nvme-pci: disable secondary temp for Wodposit WPBSNM8
+ ASoC: codecs: wsa881x: fix unnecessary initialisation
+ ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
+ hrtimer: Fix softirq base check in update_needs_ipi()
+ EDAC/x38: Fix a resource leak in x38_probe1()
+ EDAC/i3200: Fix a resource leak in i3200_probe1()
+ i2c: riic: Move suspend handling to NOIRQ phase
+ x86/resctrl: Add missing resctrl initialization for Hygon
+ x86/resctrl: Fix memory bandwidth counter width for Hygon
+ nvme: fix PCIe subsystem reset controller state transition
+ mm: kmsan: fix poisoning of high-order non-compound pages
+ mm: numa,memblock: include <asm/numa.h> for 'numa_nodes_parsed'
+ mm/zswap: fix error pointer free in zswap_cpu_comp_prepare()
+ mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free
+ mm/damon/core: remove call_control in inactive contexts
+ mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure
+ mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup
failure
+ mm/damon/sysfs: cleanup intervals subdirs on attrs dir setup failure
+ mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure
+ LoongArch: Fix PMU counter allocation for mixed-type event groups
+ LoongArch: dts: Describe PCI sideband IRQ through interrupt-extended
+ drm/amd/display: Bump the HDMI clock to 340MHz
+ drm/amd/display: Initialise backlight level values from hw
+ drm/amd: Clean up kfd node on surprise disconnect
+ drm/amdgpu: make sure userqs are enabled in userq IOCTLs
+ drm/amdkfd: fix a memory leak in device_queue_manager_init()
+ drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare
+ drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
+ drm/panel: simple: restore connector_type fallback
+ drm/sysfb: Remove duplicate declarations
+ drm/vmwgfx: Fix an error return check in vmw_compat_shader_add()
+ LoongArch: dts: loongson-2k0500: Add default interrupt controller address
cells
+ LoongArch: dts: loongson-2k1000: Add default interrupt controller address
cells
+ LoongArch: dts: loongson-2k1000: Fix i2c-gpio node names
+ LoongArch: dts: loongson-2k2000: Add default interrupt controller address
cells
+ LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy()
+ LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy()
+ LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy()
+ dmaengine: apple-admac: Add "apple,t8103-admac" compatible
+ dmaengine: at_hdmac: fix device leak on of_dma_xlate()
+ dmaengine: bcm-sba-raid: fix device leak on probe
+ dmaengine: cv1800b-dmamux: fix device leak on route allocation
+ dmaengine: dw: dmamux: fix OF node leak on route allocation failure
+ dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure
+ dmaengine: idxd: fix device leaks on compat bind and unbind
+ dmaengine: lpc18xx-dmamux: fix device leak on route allocation
+ dmaengine: lpc32xx-dmamux: fix device leak on route allocation
+ dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()
+ dmaengine: sh: rz-dmac: fix device leak on probe failure
+ dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all()
+ dmaengine: stm32: dmamux: fix device leak on route allocation
+ dmaengine: stm32: dmamux: fix OF node leak on route allocation failure
+ dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation
+ dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
+ dmaengine: ti: k3-udma: fix device leak on udma lookup
+ x86/mm: use 'ptdesc' when freeing PMD pages
+ x86/mm: use pagetable_free()
+ HID: intel-ish-hid: Fix -Wcast-function-type-strict in
devm_ishtp_alloc_workqueue()
+ btrfs: fix deadlock in wait_current_trans() due to ignored transaction type
+ mm/page_alloc/vmstat: simplify refresh_cpu_vm_stats change detection
+ mm/page_alloc: batch page freeing in decay_pcp_high
+ mm/page_alloc: prevent pcp corruption with SMP=n
+ UBUNTU: Upstream stable to v6.12.67, v6.18.7
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2156193
Title:
Questing update: upstream stable patchset 2026-06-09
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2156193/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
