This bug was fixed in the package linux-nvidia-6.17 - 6.17.0-1029.29
---------------
linux-nvidia-6.17 (6.17.0-1029.29) noble; urgency=medium
* noble/linux-nvidia-6.17: 6.17.0-1029.29 -proposed tracker (LP:
#2158812)
* Backport PCI/MSI: Enable memory decoding before restoring MSI-X messages
(LP: #2158328)
- NVIDIA: SAUCE: PCI/MSI: Enable memory decoding before restoring MSI-X
messages
* Add CXL Type-2 device support, RAS error handling, reset, state
save/restore, and interleaving support (LP: #2143032)
- NVIDIA: VR: SAUCE: cxl: Guard unlinked memdev endpoints
* Backport vlan and log fix for lan743x driver (LP: #2156928)
- net: lan743x: avoid netdev-based logging before netdev registration
- net: lan743x: permit VLAN-tagged packets up to configured MTU
* Backport perf tool_pmu: Use old_count when computing count values for time
events (LP: #2158038)
- perf tool_pmu: Use old_count when computing count values for time events
* NVIDIA: SAUCE: arm_mpam: Fix mbm_total_bytes and MBM counter assignment
(LP: #2157922)
- NVIDIA: SAUCE: arm_mpam: Fix mbm_total_bytes and MBM counter assignment
- NVIDIA: SAUCE: arm_mpam: Fix monitor capability and MBM assign for MB
events
* NVIDIA: Backport arm_mpam: Consider overflow in bandwidth counter state
(LP: #2157912)
- arm_mpam: Consider overflow in bandwidth counter state
- arm_mpam: Use long MBWU counters if supported
* Packaging resync (LP: #1786013)
- [Packaging] update variants
- [Packaging] debian.nvidia-6.17/dkms-versions -- update from kernel-
versions (main/d2026.05.20)
- [Packaging] debian.nvidia-6.17/dkms-versions -- update from kernel-
versions (main/d2026.06.15)
* Backport: writeback: Avoid contention on wb->list_lock when switching
inodes (LP: #2156922)
- writeback: Avoid contention on wb->list_lock when switching inodes
- writeback: Fix use after free in inode_switch_wbs_work_fn()
* Backport: Mitigate TLBI errata on various Arm CPUs (LP: #2156557) // CVE-
Enable ARM64_ERRATUM_4118414 to mitigate 2025-10263 on NVIDIA platforms.
- NVIDIA: [Config] Enable ARM64_ERRATUM_4118414
* Backport: Mitigate TLBI errata on various Arm CPUs (LP: #2156557) //
CVE-2025-10263. The existing ARM64_ERRATUM_4118414 handling already uses
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
* Backport: Mitigate TLBI errata on various Arm CPUs (LP: #2156557)
- arm64: cputype: Add C1-Ultra definitions
- arm64: cputype: Add C1-Premium definitions
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
* PCI: mirror PI7C9X3G606GPC Port 4 BAR0 (LP: #2154457)
- NVIDIA: SAUCE: PCI: quirks: mirror PI7C9X3G606GPC Port 4 BAR0
* Backport PCI/CXL: Hide SBR from reset_methods if masked by CXL
(LP: #2154302)
- PCI/CXL: Hide SBR from reset_methods if masked by CXL
* linux-nvidia: backport FF-A partition info descriptor size fix
(LP: #2154045)
- firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies
- firmware: arm_ffa: Honor partition info descriptor size
* CXL VFIO: Add CXL Type-2 device passthrough support (LP: #2152222)
- crypto: hisilicon - qm updates BAR configuration
- hisi_acc_vfio_pci: adapt to new migration configuration
- vfio/nvgrace-gpu: fix grammatical error
- vfio: Provide a get_region_info op
- vfio/hisi: Convert to the get_region_info op
- vfio/virtio: Convert to the get_region_info op
- vfio/nvgrace: Convert to the get_region_info op
- vfio/pci: Fill in the missing get_region_info ops
- vfio/mtty: Provide a get_region_info op
- vfio/mdpy: Provide a get_region_info op
- vfio/mbochs: Provide a get_region_info op
- vfio/platform: Provide a get_region_info op
- vfio/fsl: Provide a get_region_info op
- vfio/cdx: Provide a get_region_info op
- vfio/ccw: Provide a get_region_info op
- vfio/gvt: Provide a get_region_info op
- vfio: Require drivers to implement get_region_info
- vfio: Add get_region_info_caps op
- vfio/mbochs: Convert mbochs to use vfio_info_add_capability()
- vfio/gvt: Convert to get_region_info_caps
- vfio/ccw: Convert to get_region_info_caps
- vfio/pci: Convert all PCI drivers to get_region_info_caps
- vfio/platform: Convert to get_region_info_caps
- vfio: Move the remaining drivers to get_region_info_caps
- vfio: Remove the get_region_info op
- NVIDIA: VR: SAUCE: cxl: Add cxl_get_hdm_info() for HDM decoder metadata
- NVIDIA: VR: SAUCE: cxl: Declare cxl_find_regblock and
cxl_probe_component_regs in public header
- NVIDIA: VR: SAUCE: cxl: Move component/HDM register defines to
uapi/cxl/cxl_regs.h
- NVIDIA: VR: SAUCE: cxl: Split cxl_await_range_active() from media-ready
wait
- NVIDIA: VR: SAUCE: cxl: Record BIR and BAR offset in cxl_register_map
- NVIDIA: VR: SAUCE: vfio: UAPI for CXL-capable PCI device assignment
- NVIDIA: VR: SAUCE: vfio/pci: Add CXL state to vfio_pci_core_device
- NVIDIA: VR: SAUCE: vfio/pci: Add CONFIG_VFIO_CXL_CORE and stub CXL hooks
- NVIDIA: VR: SAUCE: vfio/cxl: Detect CXL DVSEC and probe HDM block
- NVIDIA: VR: SAUCE: vfio/pci: Export config access helpers
- NVIDIA: VR: SAUCE: vfio/cxl: Introduce HDM decoder register emulation
framework
- NVIDIA: VR: SAUCE: vfio/cxl: Wait for HDM ranges and create memdev
- NVIDIA: VR: SAUCE: vfio/cxl: CXL region management support
- NVIDIA: VR: SAUCE: vfio/cxl: DPA VFIO region with demand fault mmap and
reset zap
- NVIDIA: VR: SAUCE: vfio/cxl: Virtualize CXL DVSEC config writes
- NVIDIA: VR: SAUCE: vfio/cxl: Register regions with VFIO layer
- NVIDIA: VR: SAUCE: vfio/pci: Advertise CXL cap and sparse component BAR
to userspace
- NVIDIA: VR: SAUCE: vfio/cxl: Provide opt-out for CXL feature
- NVIDIA: VR: SAUCE: docs: vfio-pci: Document CXL Type-2 device
passthrough
- NVIDIA: VR: SAUCE: cxl: Export the CXL reset helpers for VFIO users
- NVIDIA: VR: SAUCE: vfio/pci: Wire CXL DPA reset handling
- NVIDIA: VR: SAUCE: vfio/cxl: Ensure PCI Memory Space is enabled before
post-reset BAR access
- NVIDIA: VR: SAUCE: vfio/cxl: preserve HDM decoder base addresses across
reset
- NVIDIA: VR: SAUCE: vfio/cxl: virtualize DVSEC STATUS2 register in
vconfig shadow
- NVIDIA: VR: SAUCE: vfio/cxl: Implement vfio_cxl_reset()
- NVIDIA: VR: SAUCE: config: Enable CONFIG_VFIO_CXL_CORE for CXL Type-2
passthrough
* Refresh series: Allow ATS to be always on for certain ATS-capable devices
(LP: #2150727)
- Revert "NVIDIA: VR: SAUCE: iommu/arm-smmu-v3: Allow ATS to be always on"
- Revert "NVIDIA: VR: SAUCE: PCI: Allow ATS to be always on for non-CXL
NVIDIA GPUs"
- Revert "NVIDIA: VR: SAUCE: PCI: Allow ATS to be always on for CXL.cache
capable devices"
- NVIDIA: VR: SAUCE: PCI: Allow ATS to be always on for CXL.cache capable
devices
- NVIDIA: VR: SAUCE: PCI: Allow ATS to be always on for pre-CXL devices
- NVIDIA: VR: SAUCE: iommu/arm-smmu-v3: Allow ATS to be always on
* Backport lan743x driver patches (LP: #2152064)
- net: microchip: lan743x: add ethtool nway_reset support
- net: lan743x: fix SGMII detection on PCI1xxxx B0+ during warm reset
- net: lan743x: fix duplex configuration in mac_link_up
- net: lan743x: rename chip_rev to fpga_rev
[ Ubuntu: 6.17.0-40.40 ]
* questing/linux: 6.17.0-40.40 -proposed tracker (LP: #2157631)
* CVE-2026-43037
- ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
[ Ubuntu: 6.17.0-39.39 ]
* questing/linux: 6.17.0-39.39 -proposed tracker (LP: #2157145)
* Packaging resync (LP: #1786013)
- [Packaging] update annotations scripts
* CVE-2026-45988
- rxrpc: Fix re-decryption of RESPONSE packets
* CVE-2026-46135
- nvmet-tcp: fix race between ICReq handling and queue teardown
* CVE-2026-46195
- smb: client: validate dacloffset before building DACL pointers
* CVE-2026-31402
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
* CVE-2026-43378
- smb: server: fix use-after-free in smb2_open()
* CVE-2026-31657
- batman-adv: hold claim backbone gateways by reference
* CVE-2026-46266
- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP
* CVE-2026-46289
- lib/scatterlist: fix length calculations in extract_kvec_to_sg
* CVE-2026-31436
- dmaengine: idxd: fix possible wrong descriptor completion in
llist_abort_desc()
* CVE-2026-31649
- net: stmmac: fix integer underflow in chain mode
* CVE-2026-31659
- batman-adv: reject oversized global TT response buffers
* CVE-2026-31448
- ext4: avoid infinite loops caused by residual data
* CVE-2026-43071
- dcache: Limit the minimal number of bucket to two
* CVE-2026-31478
- ksmbd: replace hardcoded hdr2_len with offsetof() in
smb2_calc_max_out_buf_len()
* CVE-2026-31682
- bridge: br_nd_send: linearize skb before parsing ND options
* CVE-2026-43117
- btrfs: tracepoints: get correct superblock from dentry in event
btrfs_sync_file()
* CVE-2026-31669
- mptcp: fix slab-use-after-free in __inet_lookup_established
* CVE-2026-46115
- block: add pgmap check to biovec_phys_mergeable
* CVE-2026-45898
- RDMA/iwcm: Fix workqueue list corruption by removing work_list
* CVE-2026-46244
- netfilter: nft_inner: Fix IPv6 inner_thoff desync
* CVE-2026-43493
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests
* CVE-2026-43186
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()
* CVE-2026-31685
- netfilter: ip6t_eui64: reject invalid MAC header for all packets
* CVE-2026-43114
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on
expiry
* CVE-2026-46325
- RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE
* CVE-2026-31668
- seg6: separate dst_cache for input and output paths in seg6 lwtunnel
* CVE-2026-43197
- netconsole: avoid OOB reads, msg is not nul-terminated
* CVE-2026-43083
- net: ioam6: fix OOB and missing lock
* CVE-2026-46043
- RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv
* CVE-2026-23428
- ksmbd: fix use-after-free of share_conf in compound request
* CVE-2026-23450
- net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
* CVE-2026-46185
- smb/client: fix out-of-bounds read in symlink_data()
* CVE-2026-23455
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()
* CVE-2026-46119
- libceph: Fix slab-out-of-bounds access in auth message processing
* CVE-2026-46039
- rxgk: Fix potential integer overflow in length check
* CVE-2026-23427
- ksmbd: fix use-after-free in durable v2 replay of active file handles
* CVE-2026-31718
- ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger
* CVE-2026-31637
- rxrpc: reject undecryptable rxkad response tickets
* CVE-2026-43011
- net/x25: Fix potential double free of skb
* CVE-2026-43038
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
* CVE-2026-31635
- rxrpc: fix oversized RESPONSE authenticator length check
* CVE-2026-43501
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows
* CVE-2026-43125
- dlm: validate length in dlm_search_rsb_tree
* CVE-2026-46316
- KVM: arm64: vgic-its: Drop the translation cache reference only for the
erased entry
* CVE-2026-43185
- ksmbd: fix signededness bug in smb_direct_prepare_negotiation()
* CVE-2026-43341
- net/ipv6: ioam6: prevent schema length wraparound in trace fill
* CVE-2026-31607
- usbip: validate number_of_packets in usbip_pack_ret_submit()
* CVE-2026-43402
- kthread: consolidate kthread exit paths to prevent use-after-free
* CVE-2026-43384
- net/tcp-ao: Fix MAC comparison to be constant-time
* CVE-2026-43383
- net/tcp-md5: Fix MAC comparison to be constant-time
* CVE-2026-43376
- ksmbd: fix use-after-free by using call_rcu() for oplock_info
* CVE-2026-46243
- smb: client: reject userspace cifs.spnego descriptions
* CVE-2026-43414
- scsi: qla2xxx: Completely fix fcport double free
* CVE-2026-43407
- libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
* CVE-2026-43406
- libceph: prevent potential out-of-bounds reads in
process_message_header()
* CVE-2026-43304
- libceph: define and enforce CEPH_MAX_KEY_LEN
* CVE-2026-22984
- libceph: prevent potential out-of-bounds reads in handle_auth_done()
[ Ubuntu: 6.17.0-38.38 ]
* questing/linux: 6.17.0-38.38 -proposed tracker (LP: #2154532)
* Generic questing kernel oops on bootup with newer Nvidia machines
(LP: #2154481)
- nouveau: don't attempt fwsec on sb on newer platforms.
* Kernel regression (6.8.0-117.generic) (LP: #2153556)
- bonding: do not set usable_slaves for broadcast mode
* powerpc-build in ubuntu_kernel_selftests fails to build due to
uninitialized value (LP: #2129844)
- selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
* iptables connlimit traffic loss (LP: #2149872)
- netfilter: nf_conncount: fix tracking of connections from localhost
* On Dell system, the internal OLED display drops to a visibly low FPS after
suspend/resume (LP: #2144712)
- drm/i915/psr: Disable Panel Replay on Dell XPS 14 DA14260 as a quirk
- drm/i915/psr: Fixes for Dell XPS DA14260 quirk
* CVE-2026-23272
- netfilter: nf_tables: unconditionally bump set->nelems before insertion
* CVE-2026-31418
- netfilter: ipset: drop logically empty buckets in mtype_del
* CVE-2026-23392
- netfilter: nf_tables: release flowtable after rcu grace period on error
* CVE-2026-23278
- netfilter: nf_tables: always walk all pending catchall elements
* GRO managed-frag use-after-free leading to local privilege escalation
(LP: #2154172)
- net: gro: don't merge zcopy skbs
* AppArmor Vulnerabilities (LP: #2151747)
- SAUCE: apparmor: pass big_resp to handler
- SAUCE: apparmor: remove redundant kref_init for listener->count
- SAUCE: apparmor: fix NULL pointer dereference in unpack_pdb
* AppArmor Vulnerabilities (LP: #2151747) // CVE-2026-47337
- SAUCE: apparmor: fix NULL pointer dereference in bind_map_addr
* AppArmor Vulnerabilities (LP: #2151747) // CVE-2026-47334
- SAUCE: apparmor: fix sleep prone memory allocation under a spin_lock
* AppArmor Vulnerabilities (LP: #2151747) // CVE-2026-47333
- SAUCE: apparmor: fix dfa unpacking size of the notification filter
* AppArmor Vulnerabilities (LP: #2151747) // CVE-2026-47332
- SAUCE: apparmor: fix size check against type instead of pointer
* apparmor: LLVM/clang build failure due to uninitialized variable in
notify.c (LP: #2148809) // CVE-2026-47330
- SAUCE: apparmor: initialize variable used in uninitialized context
* AppArmor Vulnerabilities (LP: #2151747) // CVE-2026-47329
- SAUCE: apparmor: fix name validation bypass on notification
* AppArmor Vulnerabilities (LP: #2151747) // CVE-2026-47327 //
CVE-2026-47328
- SAUCE: apparmor: fix glob memory leak after kstrdup
* AppArmor Vulnerabilities (LP: #2151747) // CVE-2026-47326
- SAUCE: apparmor: fix inverted NULL check after aa_get_buffer
* CVE-2026-46300
- net: skbuff: preserve shared-frag marker during coalescing
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
* net/rds: reset op_nents when zerocopy page pin fails (LP: #2153962)
- net/rds: reset op_nents when zerocopy page pin fails
* CVE-2026-46333
- ptrace: slightly saner 'get_dumpable()' logic
* CVE-2026-43500
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets
- rxrpc: Fix potential UAF after skb_unshare() failure
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
* CVE-2026-31676 // CVE-2026-43500
- rxrpc: only handle RESPONSE during service challenge
* CVE-2026-43284
- xfrm: esp: avoid in-place decrypt on shared skb frags
* CVE-2026-31419
- net: bonding: fix use-after-free in bond_xmit_broadcast()
* CVE-2026-31431
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place
decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- crypto: algif_aead - Fix minimum RX size check for decryption
* CVE-2026-31533
- net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
* CVE-2026-31504
- net: fix fanout UAF in packet_release() via NETDEV_UP race
[ Ubuntu: 6.17.0-28.28 ]
* questing/linux: 6.17.0-28.28 -proposed tracker (LP: #2150051)
* Linux kernel 6.17.0-22.22 breaks amdxdna (LP: #2149766)
- Revert "iommu: disable SVA when CONFIG_X86 is set"
[ Ubuntu: 6.17.0-24.24 ]
* questing/linux: 6.17.0-24.24 -proposed tracker (LP: #2148025)
* Remount ext4 to readonly with data=journal mode may dump call trace
(LP: #2147400)
- ext4: fix stale xarray tags after writeback
* System hangs during stress-ng stack test (LP: #2137755)
- mm, swap: fix swap cache index error when retrying reclaim
* BUG: kernel NULL pointer dereference when starting VM inside a container
(LP: #2147374)
- apparmor: fix NULL pointer dereference in __unix_needs_revalidation
* BUG: kernel NULL pointer dereference in amdgpu (LP: #2144577)
- drm/amdgpu: validate the flush_gpu_tlb_pasid()
- drm/amdgpu: Fix validating flush_gpu_tlb_pasid()
* Jellyfin Desktop Flatpak doesn't work with the current AppArmor profile
(LP: #2142956)
- SAUCE: apparmor5.0.0 [53/57]: apparmor: fix af_unix local addr mediation
binding
* Fine grained network mediation was broken if v8/v9 was used (LP: #2142860)
- SAUCE: apparmor5.0.0 [29/57]: apparmor: fix fine grained inet mediation
sock_file_perm
* Enable CirrusLogic audio solution CS42L45+CS35L63 on AMD and Intel PTL
(LP: #2143104)
- ASoC: amd: acp: Add ACP7.0 match entries for cs35l56 and cs42l43
- ASoC: amd: acp: soc-acpi: add is_device_rt712_vb() helper
- ASoC: amd: acp: Sort match table into most specific first
- ASoC: amd: acp: Rename Cirrus Logic component match entries to include
link and uid
- ASoC: amd: acp: Sort Cirrus Logic match entries
- ASoC: amd: acp: Add ACP7.0 match entries for Cirrus Logic parts
- ASoC: amd: acp: Fix Kconfig dependencies for
SND_SOC_ACPI_AMD_SDCA_QUIRKS
- [Config] Enable SND_SOC_ACPI_AMD_SDCA_QUIRKS
- soundwire: amd: add clock init control function
- soundwire: amd: refactor bandwidth calculation logic
* CVE-2026-23112
- nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
* Canonical Kmod 2025 key rotation (LP: #2147447)
- [Packaging] ubuntu-compatible-signing -- make Ubuntu-Compatible-Signing
extensible
- [Packaging] ubuntu-compatible-signing -- allow consumption of positive
certs
- [Packaging] ubuntu-compatible-signing -- report the livepatch:2025 key
- [Config] prepare for Canonical Kmod key rotation
- [Packaging] ubuntu-compatible-signing -- report the kmod:2025 key
- [Packaging] ensure our cert rollups are always fresh
* Questing update: upstream stable patchset 2026-03-24 (LP: #2146193)
- mptcp: fallback earlier on simult connection
- mm: consider non-anon swap cache folios in folio_expected_ref_count()
- mptcp: ensure context reset on disconnect()
- wifi: mac80211: Discard Beacon frames to non-broadcast address
- net: phy: mediatek: fix nvmem cell reference leak in
mt798x_phy_calibration
- drm/amdgpu: Forward VMID reservation errors
- sched/fair: Small cleanup to sched_balance_newidle()
- sched/fair: Small cleanup to update_newidle_cost()
- sched/fair: Proportional newidle balance
- Revert "iommu/amd: Skip enabling command/event buffers for kdump"
- sched/proxy: Yield the donor task
- drm: nova: depend on CONFIG_64BIT
- sched/core: Add comment explaining force-idle vruntime snapshots
- mm/huge_memory: merge uniform_split_supported() and
non_uniform_split_supported()
- drm/amdgpu: don't attach the tlb fence for SI
- sched_ext: fix uninitialized ret on alloc_percpu() failure
- idpf: fix LAN memory regions command on some NVMs
- Bluetooth: MGMT: report BIS capability flags in supported settings
- powerpc/tools: drop `-o pipefail` in gcc check scripts
- net: airoha: Move net_devs registration in a dedicated routine
- net: wangxun: move PHYLINK dependency
- platform/x86/intel/pmt: Fix kobject memory leak on init failure
- bng_en: update module description
- mcb: Add missing modpost build support
- net: mdio: rtl9300: use scoped for loops
- tools/sched_ext: fix scx_show_state.py for scx_root change
- platform/x86/intel/pmt/discovery: use valid device pointer in
dev_err_probe
- net: fib: restore ECMP balance from loopback
- RDMA/mana_ib: check cqe length for kernel CQs
- drm/gem-shmem: Fix the MODULE_LICENSE() string
- kunit: Enforce task execution in {soft,hard}irq contexts
- ublk: don't pass q_id to ublk_queue_cmd_buf_size()
- ublk: implement NUMA-aware memory allocation
- ublk: scan partition in async way
- drm/xe/guc: READ/WRITE_ONCE g2h_fence->done
- IB/rxe: Fix missing umem_odp->umem_mutex unlock on error path
- hisi_acc_vfio_pci: Add .match_token_uuid callback in
hisi_acc_vfio_pci_migrn_ops
- mm, swap: do not perform synchronous discard during allocation
- clk: qcom: mmcc-sdm660: Add missing MDSS reset
- clk: qcom: Fix SM_VIDEOCC_6350 dependencies
- [Config] set CONFIG_SM_GCC_6350, CONFIG_SM_VIDEOCC_6350 to '-'
- clk: qcom: Fix dependencies of QCS_{DISP,GPU,VIDEO}CC_615
- [Config] set CONFIG_QCS_{DISP,GPU,VIDEO}CC_615 to '-'
- arm64: dts: ti: k3-am62d2-evm: Fix regulator properties
- arm64: dts: ti: k3-am62d2-evm: Fix PMIC padconfig
- arm64: dts: st: Add memory-region-names property for stm32mp257f-ev1
- arm64: dts: qcom: sm6350: Fix wrong order of freq-table-hz for UFS
- NFSD: Make FILE_SYNC WRITEs comply with spec
- nvmet: pci-epf: move DMA initialization to EPC init callback
- PCI: dwc: Add support for ELBI resource mapping
- PCI: meson: Fix parsing the DBI register region
- power: supply: max77705: Fix potential IRQ chip conflict when probing
two devices
- media: iris: Refine internal buffer reconfiguration logic for resolution
change
- LoongArch: Fix arch_dup_task_struct() for CONFIG_RANDSTRUCT
- mm/damon/tests/core-kunit: fix memory leak in
damon_test_set_filters_default_reject()
- mm/damon/tests/core-kunit: handle alloc failures on
damon_test_set_filters_default_reject()
- mm/damon/tests/core-kunit: handle alloc failures on
damos_test_filter_out()
- af_unix: don't post cmsg for SO_INQ unless explicitly asked for
- kernel/kexec: change the prototype of kimage_map_segment()
- selftests/mm: fix thread state check in uffd-unit-tests
- LoongArch: BPF: Save return address register ra to t0 before trampoline
- LoongArch: BPF: Enable trampoline-based tracing for module functions
- LoongArch: BPF: Adjust the jump offset of tail calls
- platform/x86: samsung-galaxybook: Fix problematic pointer cast
- platform/x86: alienware-wmi-wmax: Add support for new Area-51 laptops
- platform/x86: alienware-wmi-wmax: Add AWCC support for Alienware x16
- platform/x86: alienware-wmi-wmax: Add support for Alienware 16X Aurora
- drm/amdgpu/sdma6: Update SDMA 6.0.3 FW version to include UMQ protected-
fence fix
- drm/rockchip: Set VOP for the DRM DMA device
- drm/mediatek: mtk_hdmi: Fix probe device leaks
- drm/mediatek: ovl_adaptor: Fix probe device leaks
- drm/amd: Fix unbind/rebind for VCN 4.0.5
- drm/rockchip: vop2: Use OVL_LAYER_SEL configuration instead of use
win_mask calculate used layers
- drm/bridge: ti-sn65dsi83: ignore PLL_UNLOCK errors
- drm/nouveau/gsp: Allocate fwsec-sb at boot
- drm/xe/eustall: Disallow 0 EU stall property values
- drm/xe/svm: Fix a debug printout
- powercap: intel_rapl: Add support for Wildcat Lake platform
- powercap: intel_rapl: Add support for Nova Lake processors
- LoongArch: BPF: Enhance the bpf_arch_text_poke() function
- SAUCE: remove git merge section marker
- Upstream stable to v6.12.65, v6.18.4
* Questing update: upstream stable patchset 2026-03-24 (LP: #2146193) //
CVE-2025-71141
- drm/tilcdc: Fix removal actions in case of failed probe
* Questing update: upstream stable patchset 2026-03-24 (LP: #2146193) //
CVE-2025-71090
- nfsd: fix nfsd_file reference leak in nfsd4_add_rdaccess_to_wrdeleg()
* Questing update: upstream stable patchset 2026-03-24 (LP: #2146193) //
CVE-2025-71139
- kernel/kexec: fix IMA when allocation happens in CMA area
* Questing update: upstream stable patchset 2026-03-24 (LP: #2146193) //
CVE-2025-71152
- net: dsa: properly keep track of conduit reference
* Questing update: upstream stable patchset 2026-03-24 (LP: #2146193) //
CVE-2025-71142
- cpuset: fix warning when disabling remote partition
* Questing update: upstream stable patchset 2026-03-24 (LP: #2146193) //
CVE-2025-71155
- KVM: s390: Fix gmap_helper_zap_one_page() again
* Questing update: upstream stable patchset 2026-03-24 (LP: #2146193) //
CVE-2025-71134
- mm/page_alloc: change all pageblocks migrate type on coalescing
* CVE-2026-23394
- af_unix: Give up GC if MSG_PEEK intervened.
* [SRU] MIPI camera is not working after upgrading to 6.17-oem
(LP: #2145171)
- SAUCE: ACPI: respect items already in honor_dep before skipping
* ADATA SU680 causes repeated SATA resets and I/O errors on Ubuntu unless
link power management is forced to max_performance (LP: #2144060)
- ata: libata-core: disable LPM on ADATA SU680 SSD
* [SRU] Fix for i915 PSR issue on SDC panels on Intel PTL (LP: #2144637)
- drm/i915/psr: Panel Replay SU cap dpcd read return value
- drm/i915/psr: Add panel granularity information into intel_connector
- drm/i915/psr: Use SU granularity information available in
intel_connector
- drm/dp: Add definition for Panel Replay full-line granularity
- drm/i915/psr: Fix for Panel Replay X granularity DPCD register handling
* Got black screen after clicked logout button (LP: #2143100)
- drm/i915/alpm: ALPM disable fixes
* Dell Machines cannot boot into OS with 6.17.0-1012-oem (LP: #2144522)
- drm/amd: Disable MES LR compute W/A
- drm/amd: Set minimum version for set_hw_resource_1 on gfx11 to 0x52
* [SRU] Duplicated entries in /proc/<pid>/mountinfo (LP: #2143083)
- namespace: fix proc mount iteration
* CVE-2026-23274
- netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
* macvlan: observe an RCU grace period in macvlan_common_newlink() error
path (LP: #2144380) // CVE-2026-23209
- macvlan: observe an RCU grace period in macvlan_common_newlink() error
path
* CVE-2026-23351
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
* CVE-2026-23231
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
-- Jacob Martin <[email protected]> Tue, 30 Jun 2026 16:32:10
-0500
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2150727
Title:
Refresh series: Allow ATS to be always on for certain ATS-capable
devices
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-nvidia-6.17/+bug/2150727/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
