[Bug 2156312] Re: Internal display black screen on Intel Lunar Lake with eDP panel

This seems to have broken backlight settings on my Samsung 940X with i5-3317U cpu. Booting to linux-image-7.0.0-28-generic fails to set backlight brightness. Going back to linux-image-7.0.0-27-generic can set the backlight. -- You received this bug notification because you are subscribed to linux in Ubuntu. Matching subscriptions: Bgg, Bmail, Nb https://bugs.launchpad.net/bugs/2156312 Title: Internal display black screen on Intel Lunar Lake with eDP panel Status in HWE Next: New Status in linux package in Ubuntu: Invalid Status in linux-oem-6.17 package in Ubuntu: Invalid Status in linux source package in Noble: Invalid Status in linux-oem-6.17 source package in Noble: Fix Released Status in linux source package in Questing: Fix Released Status in linux-oem-6.17 source package in Questing: Invalid Status in linux source package in Resolute: Fix Released Status in linux-oem-6.17 source package in Resolute: Invalid Bug description: [Impact] Internal display goes black after login on Intel Lunar Lake systems with an eDP panel. The external monitor works. The internal display shows as disabled in display settings and cannot be enabled. Hits 100% on affected hardware (3 units, 15/15 attempts). The bug is caused by LOBF (Link Off Between Frames) being enabled on platforms that use the legacy VRR timing generator. Those platforms do not meet the bspec requirement for LOBF (Always-on VRR TG with fixed refresh rate mode). Enabling LOBF incorrectly causes the display to go dark. [Fix] Replace the raw vmin/vmax/flipline comparison with the proper bspec checks: - intel_vrr_always_use_vrr_tg() to gate LOBF on platforms with Always-on VRR TG - intel_vrr_is_fixed_rr() to confirm fixed refresh rate mode Backported from upstream commit 8a517b1e6d8b, merged in v7.1-rc1. [Test Plan] Boot on affected Intel Lunar Lake hardware with an eDP panel. Without patch: internal display is black after login; shows as disabled in display settings. With patch: internal display works normally after login. [Where problems could occur] Could affect intel_alpm.c LOBF configuration logic in the i915 driver. If intel_vrr_always_use_vrr_tg() or intel_vrr_is_fixed_rr() return wrong results on a platform, LOBF would be incorrectly blocked, and Panel Replay power savings would be lost on those machines. The display would still work — it would just not enter LOBF mode. To manage notifications about this bug go to: https://bugs.launchpad.net/hwe-next/+bug/2156312/+subscriptions

[Bug 2161196] [NEW] Lenovo ThinkCentre M82 powers on about 5 seconds after S5 poweroff unless firmware DSDT _PTS(5) is bypassed

Public bug reported: ## Title Lenovo ThinkCentre M82 powers on about 5 seconds after S5 poweroff unless firmware DSDT `_PTS(5)` is bypassed ## Description On a Lenovo ThinkCentre M82 (machine type 2929AB9), a normal Linux poweroff completes and the machine visibly turns off, but it powers itself on again about five seconds later. The problem is reproducible and also occurs with a forced systemd poweroff path. Powering the machine off with the front-panel button while inside BIOS setup leaves it off. This isolates the problem to the Linux ACPI S5 path rather than general hardware, power-loss recovery, or an external wake event. The machine is already running Lenovo's latest available BIOS, 9SKT9CAUS dated 2018-12-11. An initrd DSDT override that returns immediately from the top-level `_PTS` method only when `Arg0 == 0x05` fixes the problem. Normal Linux GUI poweroff then leaves the machine off, and Wake-on-LAN still works. The kernel confirms that the override is loaded. ## Expected result After selecting Power Off, the machine should enter S5 and remain powered off until the power button is pressed or a valid Wake-on-LAN magic packet is received. ## Actual result The machine powers off, then powers itself on again after approximately five seconds without a magic packet or other configured wake event. ## Steps to reproduce 1. Boot Linux normally on a Lenovo ThinkCentre M82 type 2929AB9 without the supplied DSDT override. 2. Select Power Off in the desktop, or run `systemctl poweroff`. 3. Observe that shutdown completes and power is removed. 4. Wait approximately five seconds. 5. The machine powers on again by itself. ## System information - System: Lenovo ThinkCentre M82, type 2929AB9 - Board: LENOVO MAHOBAY - BIOS: LENOVO 9SKT9CAUS, 2018-12-11 (latest available Lenovo BIOS) - CPU: Intel Core i5-3470 - Chipset: Intel Q75 - Network adapter: Intel 82579LM, PCI ID 8086:1502 - Distribution: Linux Mint 22.3, Ubuntu 24.04 (noble) base - Reproduced on Ubuntu kernel package 6.17.0-40-generic (`6.17.13`, package `6.17.0-40.40~24.04.1`) - It was also reproduced with an older installed kernel during diagnosis. ## Isolation already performed - Updated the BIOS from 9SKT70AUS (2013) to 9SKT9CAUS (2018-12-11): no change. - BIOS `After Power Loss` is set to `Power Off`. - RTC, PCI/modem/serial automatic wake and Intel AMT/manageability were disabled: no change. - Disabling Wake-on-LAN and disconnecting the Ethernet cable did not prevent the automatic power-on. - ACPI wake sources including GLAN, EHC, XHC and PWRB were tested/disabled: no change. - Broad service groups, NetworkManager and Cloudflare WARP were stopped/disabled for controlled tests: no change. - A forced poweroff path also reproduced the problem. - Powering off from BIOS setup using the front-panel button leaves the machine off. ## ACPI finding and working workaround The original firmware table contains: ```asl Method (_PTS, 1, NotSerialized) { P80D = Zero P8XH (Zero, Arg0) PTS (Arg0) ... } ``` The effective S5 workaround is: ```asl Method (_PTS, 1, NotSerialized) { If ((Arg0 == 0x05)) { Return (Zero) } P80D = Zero P8XH (Zero, Arg0) PTS (Arg0) ... } ``` A previous experiment removed only the nested `RPOP(Arg0)` call from the firmware `PTS` method. That did **not** fix S5. Bypassing the complete top-level firmware `_PTS(5)` path did fix it. The attached working override still contains the earlier `RPOP` experiment for non-S5 states; this is not required for the effective S5 bypass and should not be treated as the proposed upstream change. The DSDT OEM revision was increased from `0x1620` to `0x1622` so the initrd override is accepted. Kernel evidence after boot: ```text ACPI: DSDT ACPI table found in initrd [kernel/firmware/acpi/DSDT.aml][0x12504] ACPI: Table Upgrade: override [DSDT-LENOVO-TC-9S ] ACPI: DSDT ... 012504 (v02 LENOVO TC-9S 00001622 INTL 20230628) ``` SHA-256: ```text d563d2b026580bedaf49807790448ce7510cf118e3618b6b0aa99669e48ef8e8 DSDT-original.aml bee0eba47e0bcdfc66ee826ef008387812306a48c81fd01564fa96a13ca084c4 DSDT-working-override.aml ``` With the override active, normal GUI poweroff remains off and Wake-on- LAN still works. This appears suitable for investigation as a DMI- specific ACPI S5 quirk for this firmware/platform, if bypassing `_PTS(5)` is considered safe by the ACPI maintainers. ## Attachments - `DSDT-original.aml`: unmodified firmware DSDT - `DSDT-original.dsl`: disassembled original DSDT - `DSDT-working-override.aml`: tested working override - `DSDT-working-override.dsl`: disassembled working source - `acpi-s5-effective-change.patch`: concise effective S5 change - `hardware-summary.txt`: sanitized hardware and kernel details ## Testing limitation The issue has not yet been retested without the override on the current newest Ubuntu kernel offered by the repositories. The installed 6.17 kernel has since been superseded in the repository, which prevents Apport from accepting an automatic report for that package version. A current-kernel retest can be added as requested by the Ubuntu kernel team. ** Affects: linux (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are subscribed to linux in Ubuntu. Matching subscriptions: Bgg, Bmail, Nb https://bugs.launchpad.net/bugs/2161196 Title: Lenovo ThinkCentre M82 powers on about 5 seconds after S5 poweroff unless firmware DSDT _PTS(5) is bypassed Status in linux package in Ubuntu: New Bug description: ## Title Lenovo ThinkCentre M82 powers on about 5 seconds after S5 poweroff unless firmware DSDT `_PTS(5)` is bypassed ## Description On a Lenovo ThinkCentre M82 (machine type 2929AB9), a normal Linux poweroff completes and the machine visibly turns off, but it powers itself on again about five seconds later. The problem is reproducible and also occurs with a forced systemd poweroff path. Powering the machine off with the front-panel button while inside BIOS setup leaves it off. This isolates the problem to the Linux ACPI S5 path rather than general hardware, power-loss recovery, or an external wake event. The machine is already running Lenovo's latest available BIOS, 9SKT9CAUS dated 2018-12-11. An initrd DSDT override that returns immediately from the top-level `_PTS` method only when `Arg0 == 0x05` fixes the problem. Normal Linux GUI poweroff then leaves the machine off, and Wake-on-LAN still works. The kernel confirms that the override is loaded. ## Expected result After selecting Power Off, the machine should enter S5 and remain powered off until the power button is pressed or a valid Wake-on-LAN magic packet is received. ## Actual result The machine powers off, then powers itself on again after approximately five seconds without a magic packet or other configured wake event. ## Steps to reproduce 1. Boot Linux normally on a Lenovo ThinkCentre M82 type 2929AB9 without the supplied DSDT override. 2. Select Power Off in the desktop, or run `systemctl poweroff`. 3. Observe that shutdown completes and power is removed. 4. Wait approximately five seconds. 5. The machine powers on again by itself. ## System information - System: Lenovo ThinkCentre M82, type 2929AB9 - Board: LENOVO MAHOBAY - BIOS: LENOVO 9SKT9CAUS, 2018-12-11 (latest available Lenovo BIOS) - CPU: Intel Core i5-3470 - Chipset: Intel Q75 - Network adapter: Intel 82579LM, PCI ID 8086:1502 - Distribution: Linux Mint 22.3, Ubuntu 24.04 (noble) base - Reproduced on Ubuntu kernel package 6.17.0-40-generic (`6.17.13`, package `6.17.0-40.40~24.04.1`) - It was also reproduced with an older installed kernel during diagnosis. ## Isolation already performed - Updated the BIOS from 9SKT70AUS (2013) to 9SKT9CAUS (2018-12-11): no change. - BIOS `After Power Loss` is set to `Power Off`. - RTC, PCI/modem/serial automatic wake and Intel AMT/manageability were disabled: no change. - Disabling Wake-on-LAN and disconnecting the Ethernet cable did not prevent the automatic power-on. - ACPI wake sources including GLAN, EHC, XHC and PWRB were tested/disabled: no change. - Broad service groups, NetworkManager and Cloudflare WARP were stopped/disabled for controlled tests: no change. - A forced poweroff path also reproduced the problem. - Powering off from BIOS setup using the front-panel button leaves the machine off. ## ACPI finding and working workaround The original firmware table contains: ```asl Method (_PTS, 1, NotSerialized) { P80D = Zero P8XH (Zero, Arg0) PTS (Arg0) ... } ``` The effective S5 workaround is: ```asl Method (_PTS, 1, NotSerialized) { If ((Arg0 == 0x05)) { Return (Zero) } P80D = Zero P8XH (Zero, Arg0) PTS (Arg0) ... } ``` A previous experiment removed only the nested `RPOP(Arg0)` call from the firmware `PTS` method. That did **not** fix S5. Bypassing the complete top-level firmware `_PTS(5)` path did fix it. The attached working override still contains the earlier `RPOP` experiment for non-S5 states; this is not required for the effective S5 bypass and should not be treated as the proposed upstream change. The DSDT OEM revision was increased from `0x1620` to `0x1622` so the initrd override is accepted. Kernel evidence after boot: ```text ACPI: DSDT ACPI table found in initrd [kernel/firmware/acpi/DSDT.aml][0x12504] ACPI: Table Upgrade: override [DSDT-LENOVO-TC-9S ] ACPI: DSDT ... 012504 (v02 LENOVO TC-9S 00001622 INTL 20230628) ``` SHA-256: ```text d563d2b026580bedaf49807790448ce7510cf118e3618b6b0aa99669e48ef8e8 DSDT-original.aml bee0eba47e0bcdfc66ee826ef008387812306a48c81fd01564fa96a13ca084c4 DSDT-working-override.aml ``` With the override active, normal GUI poweroff remains off and Wake-on- LAN still works. This appears suitable for investigation as a DMI- specific ACPI S5 quirk for this firmware/platform, if bypassing `_PTS(5)` is considered safe by the ACPI maintainers. ## Attachments - `DSDT-original.aml`: unmodified firmware DSDT - `DSDT-original.dsl`: disassembled original DSDT - `DSDT-working-override.aml`: tested working override - `DSDT-working-override.dsl`: disassembled working source - `acpi-s5-effective-change.patch`: concise effective S5 change - `hardware-summary.txt`: sanitized hardware and kernel details ## Testing limitation The issue has not yet been retested without the override on the current newest Ubuntu kernel offered by the repositories. The installed 6.17 kernel has since been superseded in the repository, which prevents Apport from accepting an automatic report for that package version. A current-kernel retest can be added as requested by the Ubuntu kernel team. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2161196/+subscriptions

[Bug 1786013] Autopkgtest regression report (linux-meta-nvidia-tegra/6.8.0-1030.31)

All autopkgtests for the newly accepted linux-meta-nvidia-tegra (6.8.0-1030.31) for noble have finished running. The following regressions have been reported in tests triggered by the package: glibc/2.39-0ubuntu8.7 (arm64) linux-nvidia-tegra/6.8.0-1030.31 (arm64) zfs-linux/unknown (arm64) Please visit the excuses page listed below and investigate the failures, proceeding afterwards as per the StableReleaseUpdates policy regarding autopkgtest regressions [1]. https://ubuntu-archive-team.ubuntu.com/proposed- migration/noble/update_excuses.html#linux-meta-nvidia-tegra [1] https://documentation.ubuntu.com/project/SRU/howto/autopkgtest- failure/ Thank you! -- You received this bug notification because you are subscribed to linux in Ubuntu. Matching subscriptions: Bgg, Bmail, Nb https://bugs.launchpad.net/bugs/1786013 Title: Packaging resync Status in linux package in Ubuntu: Fix Released Status in linux-azure package in Ubuntu: Fix Released Status in linux-azure-edge package in Ubuntu: Fix Released Status in linux source package in Precise: Fix Released Status in linux-azure source package in Precise: Won't Fix Status in linux-azure-edge source package in Precise: Won't Fix Status in linux source package in Trusty: Fix Released Status in linux-azure source package in Trusty: Fix Released Status in linux-azure-edge source package in Trusty: Won't Fix Status in linux source package in Xenial: Fix Released Status in linux-azure source package in Xenial: Fix Released Status in linux-azure-edge source package in Xenial: Fix Released Status in linux source package in Bionic: Fix Released Status in linux-azure source package in Bionic: Fix Released Status in linux-azure-edge source package in Bionic: Fix Released Status in linux source package in Cosmic: Fix Released Status in linux-azure source package in Cosmic: Fix Released Status in linux-azure-edge source package in Cosmic: Won't Fix Status in linux source package in Disco: Fix Released Status in linux-azure source package in Disco: Fix Released Status in linux-azure-edge source package in Disco: Won't Fix Bug description: Ongoing packaging resyncs. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1786013/+subscriptions

[Bug 2161193] [NEW] Fingerprint sensor not working on Dell Latitude 5320

Public bug reported: So the fingerprint sensor of this laptop is not working probably because there is no driver for it. ** Affects: linux (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are subscribed to linux in Ubuntu. Matching subscriptions: Bgg, Bmail, Nb https://bugs.launchpad.net/bugs/2161193 Title: Fingerprint sensor not working on Dell Latitude 5320 Status in linux package in Ubuntu: New Bug description: So the fingerprint sensor of this laptop is not working probably because there is no driver for it. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2161193/+subscriptions

[Bug 2161148] Re: [SRU] intel_backlight (i915/eDP AUX-DPCD) stops responding to live brightness writes in 7.0.0-28-generic (works in 6.17.0-40-generic)

I can also confirm this issue. Reverting to 6.17.0-40-generic fixed my issue as well. System: Kernel: 7.0.0-28-generic arch: x86_64 Desktop: Cinnamon v: 6.6.7 Distro: Linux Mint 22.3 Zena base: Ubuntu 24.04 noble -- You received this bug notification because you are subscribed to linux in Ubuntu. Matching subscriptions: Bgg, Bmail, Nb https://bugs.launchpad.net/bugs/2161148 Title: [SRU] intel_backlight (i915/eDP AUX-DPCD) stops responding to live brightness writes in 7.0.0-28-generic (works in 6.17.0-40-generic) Status in linux package in Ubuntu: New Bug description: After the kernel update to 7.0.0-28-generic (HWE, arrived alongside a KDE Plasma update), the internal laptop screen brightness became stuck at maximum. The /sys/class/backlight/intel_backlight/brightness sysfs value still changes correctly (both via the KDE Plasma slider and via manual echo > brightness), and org.kde.powerdevil.backlighthelper is invoked successfully each time, but the physical panel brightness no longer follows the value at runtime. Booting the previous kernel (6.17.0-40-generic) with the exact same GRUB configuration (no special kernel parameters) restores correct behaviour immediately: both the slider and manual sysfs writes change the physical screen brightness as expected. This points to a regression in the i915 driver's eDP AUX/DPCD backlight write path in 7.0.0-28-generic, not an issue with KDE Plasma/powerdevil (which was ruled out — see tests below). System information Laptop: Dell Vostro 15 3510 GPU: Intel UHD Graphics G4 (Tiger Lake-LP GT2, 48EU) — i915 0000:00:02.0, device ID 9a78, "tigerlake/uy" OS: Ubuntu Noble 24.04 (KDE neon on top) Desktop: KDE Plasma (recently updated) Broken kernel: linux-image-7.0.0-28-generic (7.0.0-28.28~24.04.1, via linux-generic-hwe-24.04) Working kernel: linux-image-6.17.0-40-generic (6.17.0-40.40~24.04.1) GRUB config: default, no special parameters (GRUB_CMDLINE_LINUX_DEFAULT="quiet splash") Steps to reproduce (on 7.0.0-28-generic) Boot into 7.0.0-28-generic with a clean/default GRUB command line. Check the sysfs interface: ls /sys/class/backlight/ → intel_backlight cat /sys/class/backlight/intel_backlight/brightness cat /sys/class/backlight/intel_backlight/max_brightness → e.g. 410 / 1023 Change brightness via the KDE Plasma slider, or manually: echo 200 | sudo tee /sys/class/backlight/intel_backlight/brightness Observe: the sysfs value updates correctly (confirmed by reading it back), and org.kde.powerdevil.backlighthelper is activated successfully in the journal, but the physical screen brightness does not change — it stays at the level set at boot time by systemd-backlight. Steps to reproduce the working case (6.17.0-40-generic) Boot into 6.17.0-40-generic with the same, unmodified GRUB command line. Note the sysfs interface uses a different (raw PWM-like) brightness scale on this kernel, e.g. max_brightness in the tens of thousands rather than 1023. Repeat the same slider / manual echo test. Observe: the physical screen brightness follows the value correctly, both from the KDE Plasma slider and from manual sysfs writes. What we ruled out KDE Plasma / powerdevil is not at fault. org.kde.powerdevil.backlighthelper is called successfully via D-Bus/KAuth every time the slider is moved, on both kernels, and the sysfs value is written correctly in both cases. The failure is purely between "sysfs value" and "physical panel output", which is below the desktop environment / kernel userspace boundary. Not a permissions issue. /sys/class/backlight/intel_backlight/brightness write succeeds (verified via direct sudo tee), the value persists when re-read. Tried acpi_backlight=native and acpi_backlight=vendor kernel parameters on 7.0.0-28-generic: acpi_backlight=vendor → intel_backlight sysfs interface disappears entirely (i915: [drm] Skipping intel_backlight registration in dmesg), no backlight class device is exposed at all on this hardware. acpi_backlight=native → interface present, sysfs value changes, but no physical brightness change (same broken behaviour as default). Tried i915.enable_dpcd_backlight=1 and =3 (note: per modinfo i915, this parameter is actually boolean, so both likely evaluated to the same "enabled" state) combined with acpi_backlight=native: Fixed the boot-time initial brightness (screen now dims to the value saved/restored by systemd-backlight at boot, instead of being stuck at 100%). Did not fix live/runtime updates — slider and manual sysfs writes still don't change the physical brightness after boot. dmesg during a live brightness write shows no relevant AUX/DPCD/backlight error messages on 7.0.0-28-generic (driver does not log at that verbosity by default) — happy to gather more verbose i915 debug logs if useful (e.g. via drm.debug). Expected behaviour Writing to /sys/class/backlight/intel_backlight/brightness (whether via the desktop environment or directly) should change the physical panel brightness at runtime, as it does on 6.17.0-40-generic with identical hardware and GRUB configuration. Actual behaviour On 7.0.0-28-generic, only the kernel's own boot-time backlight restoration (systemd-backlight@backlight:intel_backlight.service) succeeds in setting a correct initial physical brightness (and only when acpi_backlight=native i915.enable_dpcd_backlight=1 is set); all subsequent runtime writes to the sysfs brightness file are silently ignored by the hardware, even though the sysfs value itself updates. Current workaround Pinning/holding the working kernel as default via GRUB (GRUB_DEFAULT=saved + grub-set-default) and holding the linux- image-7.0.0-28-generic / linux-generic-hwe-24.04 packages to prevent apt from reactivating the broken kernel on the next update. Additional info available on request Full journalctl -b output around powerdevil/backlight activity on both kernels dmesg output on both kernels Willing to test additional kernel parameters or debug builds if it helps narrow down the regression To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2161148/+subscriptions

[Bug 2161184] Re: Regression: Screen brightness no longer works on Acer Aspire A715-76G after upgrading from Linux 6.17.0-40 to 7.0.0-28

** Package changed: linux (Ubuntu) => linux-hwe-7.0 (Ubuntu) -- You received this bug notification because you are subscribed to linux in Ubuntu. Matching subscriptions: Bgg, Bmail, Nb https://bugs.launchpad.net/bugs/2161184 Title: Regression: Screen brightness no longer works on Acer Aspire A715-76G after upgrading from Linux 6.17.0-40 to 7.0.0-28 Status in linux-hwe-7.0 package in Ubuntu: New Bug description: Hardware: - Acer Aspire A715-76G - Intel Alder Lake iGPU - NVIDIA GeForce RTX 3050 Laptop GPU - Ubuntu 24.04 LTS - X11 Working kernel: 6.17.0-40-generic Broken kernel: 7.0.0-28-generic Problem: Brightness control stopped working after upgrading to Linux 7.0.0-28. The GNOME brightness slider moves normally. brightnessctl successfully changes: /sys/class/backlight/intel_backlight/brightness Example: brightnessctl set 10% reports success and the brightness value changes, but the physical display brightness never changes. Booting back into Linux 6.17.0-40 restores correct brightness control immediately. This appears to be a regression introduced in Linux 7.0. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-hwe-7.0/+bug/2161184/+subscriptions

[Bug 2161184] [NEW] Regression: Screen brightness no longer works on Acer Aspire A715-76G after upgrading from Linux 6.17.0-40 to 7.0.0-28

Public bug reported: Hardware: - Acer Aspire A715-76G - Intel Alder Lake iGPU - NVIDIA GeForce RTX 3050 Laptop GPU - Ubuntu 24.04 LTS - X11 Working kernel: 6.17.0-40-generic Broken kernel: 7.0.0-28-generic Problem: Brightness control stopped working after upgrading to Linux 7.0.0-28. The GNOME brightness slider moves normally. brightnessctl successfully changes: /sys/class/backlight/intel_backlight/brightness Example: brightnessctl set 10% reports success and the brightness value changes, but the physical display brightness never changes. Booting back into Linux 6.17.0-40 restores correct brightness control immediately. This appears to be a regression introduced in Linux 7.0. ** Affects: linux (Ubuntu) Importance: Undecided Assignee: Tran Vo Anh Tuan (jacktuan) Status: New ** Changed in: linux (Ubuntu) Assignee: (unassigned) => Tran Vo Anh Tuan (jacktuan) -- You received this bug notification because you are subscribed to linux in Ubuntu. Matching subscriptions: Bgg, Bmail, Nb https://bugs.launchpad.net/bugs/2161184 Title: Regression: Screen brightness no longer works on Acer Aspire A715-76G after upgrading from Linux 6.17.0-40 to 7.0.0-28 Status in linux package in Ubuntu: New Bug description: Hardware: - Acer Aspire A715-76G - Intel Alder Lake iGPU - NVIDIA GeForce RTX 3050 Laptop GPU - Ubuntu 24.04 LTS - X11 Working kernel: 6.17.0-40-generic Broken kernel: 7.0.0-28-generic Problem: Brightness control stopped working after upgrading to Linux 7.0.0-28. The GNOME brightness slider moves normally. brightnessctl successfully changes: /sys/class/backlight/intel_backlight/brightness Example: brightnessctl set 10% reports success and the brightness value changes, but the physical display brightness never changes. Booting back into Linux 6.17.0-40 restores correct brightness control immediately. This appears to be a regression introduced in Linux 7.0. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2161184/+subscriptions

[Bug 2161182] [NEW] Internal Intel eDP panel is extremely dim after upgrading the kernel.

Public bug reported: 7.0.0-28-generic: internal panel remains extremely dim 7.0.0-22-generic: works normally External monitors are unaffected. On the bad kernel: /sys/class/backlight/intel_backlight/brightness = 1023 actual_brightness = 1023 max_brightness = 1023 bl_power = 0 Writing to brightness directly can reduce brightness further, but not increase it beyond 1023. Previously systemd-backlight had saved brightness 36001, while the bad kernel exposes a maximum of 1023. journalctl has the following entries relevant to display stuff: Jul 18 12:33:46 hostname kernel: ACPI: bus type drm_connector registered Jul 18 12:33:46 hostname kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 18 12:33:46 hostname kernel: simple-framebuffer simple-framebuffer.0: [drm] Registered 1 planes with drm panic Jul 18 12:33:46 hostname kernel: [drm] Initialized simpledrm 1.0.0 for simple-framebuffer.0 on minor 0 Jul 18 12:33:46 hostname kernel: simple-framebuffer simple-framebuffer.0: [drm] fb0: simpledrmdrmfb frame buffer device Jul 18 12:33:46 hostname systemd[1]: modprobe@drm.service - Load Kernel Module drm skipped, unmet condition check ConditionKernelModuleLoaded=!drm Jul 18 12:33:48 hostname kernel: i915 0000:00:02.0: [drm] Found coffeelake (device ID 3e9b) integrated display version 9.00 stepping N/A Jul 18 12:33:48 hostname kernel: i915 0000:00:02.0: [drm] VT-d active for gfx access Jul 18 12:33:48 hostname kernel: [drm] [nvidia-drm] [GPU ID 0x00000100] Loading driver Jul 18 12:33:48 hostname kernel: i915 0000:00:02.0: vgaarb: deactivate vga console Jul 18 12:33:48 hostname kernel: i915 0000:00:02.0: [drm] Using Transparent Hugepages Jul 18 12:33:48 hostname kernel: i915 0000:00:02.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem Jul 18 12:33:48 hostname kernel: i915 0000:00:02.0: [drm] Finished loading DMC firmware i915/kbl_dmc_ver1_04.bin (v1.4) Jul 18 12:33:48 hostname kernel: mei_hdcp 0000:00:16.0-b638ab7e-94e2-4ea2-a552-d1c54b627f04: bound 0000:00:02.0 (ops i915_hdcp_ops [i915]) Jul 18 12:33:48 hostname kernel: i915 0000:00:02.0: [drm] Registered 3 planes with drm panic Jul 18 12:33:48 hostname kernel: [drm] Initialized i915 1.6.0 for 0000:00:02.0 on minor 1 Jul 18 12:33:48 hostname kernel: fbcon: i915drmfb (fb0) is primary device Jul 18 12:33:48 hostname kernel: i915 0000:00:02.0: [drm] fb0: i915drmfb frame buffer device Jul 18 12:33:49 hostname kernel: snd_hda_intel 0000:00:1f.3: bound 0000:00:02.0 (ops intel_audio_component_bind_ops [i915]) Jul 18 12:33:49 hostname kernel: [drm] Initialized nvidia-drm 0.0.0 for 0000:01:00.0 on minor 2 Jul 18 12:33:49 hostname kernel: nvidia 0000:01:00.0: [drm] Cannot find any crtc or sizes ProblemType: Bug DistroRelease: Ubuntu 26.04 Package: linux-image-7.0.0-28-generic 7.0.0-28.28 ProcVersionSignature: Ubuntu 7.0.0-28.28-generic 7.0.12 Uname: Linux 7.0.0-28-generic x86_64 ApportVersion: 2.34.0-0ubuntu2 Architecture: amd64 AudioDevicesInUse: USER PID ACCESS COMMAND /dev/snd/controlC1: rene 2375 F.... wireplumber /dev/snd/controlC0: rene 2375 F.... wireplumber /dev/snd/seq: rene 2371 F.... pipewire CasperMD5CheckResult: unknown CurrentDesktop: KDE Date: Sat Jul 18 12:35:33 2026 InstallationDate: Installed on 2026-06-20 (28 days ago) InstallationMedia: Kubuntu 26.04 "Resolute Raccoon" - Release amd64 (20260423) MachineType: Dell Inc. G5 5590 ProcFB: 0 i915drmfb ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-7.0.0-28-generic root=UUID=f7fa5d66-47e3-49b6-b017-d62f3f9e602b ro rootflags=subvol=@ quiet cryptdevice=UUID=746ff933-7259-443d-89a5-45702252db53:luks-746ff933-7259-443d-89a5-45702252db53 root=/dev/mapper/luks-746ff933-7259-443d-89a5-45702252db53 splash PulseList: Error: command ['pacmd', 'list'] failed with exit code 1: No PulseAudio daemon running, or not running as session daemon. SourcePackage: linux UpgradeStatus: No upgrade log present (probably fresh install) dmi.bios.date: 03/15/2022 dmi.bios.release: 1.19 dmi.bios.vendor: Dell Inc. dmi.bios.version: 1.19.0 dmi.board.name: 0CNDTP dmi.board.vendor: Dell Inc. dmi.board.version: A04 dmi.chassis.type: 10 dmi.chassis.vendor: Dell Inc. dmi.modalias: dmi:bvnDellInc.:bvr1.19.0:bd03/15/2022:br1.19:svnDellInc.:pnG55590:pvr:rvnDellInc.:rn0CNDTP:rvrA04:cvnDellInc.:ct10:cvr:sku08EA:pfaGSeries: dmi.product.family: GSeries dmi.product.name: G5 5590 dmi.product.sku: 08EA dmi.sys.vendor: Dell Inc. ** Affects: linux (Ubuntu) Importance: Undecided Status: New ** Tags: amd64 apport-bug resolute wayland-session -- You received this bug notification because you are subscribed to linux in Ubuntu. Matching subscriptions: Bgg, Bmail, Nb https://bugs.launchpad.net/bugs/2161182 Title: Internal Intel eDP panel is extremely dim after upgrading the kernel. Status in linux package in Ubuntu: New Bug description: 7.0.0-28-generic: internal panel remains extremely dim 7.0.0-22-generic: works normally External monitors are unaffected. On the bad kernel: /sys/class/backlight/intel_backlight/brightness = 1023 actual_brightness = 1023 max_brightness = 1023 bl_power = 0 Writing to brightness directly can reduce brightness further, but not increase it beyond 1023. Previously systemd-backlight had saved brightness 36001, while the bad kernel exposes a maximum of 1023. journalctl has the following entries relevant to display stuff: Jul 18 12:33:46 hostname kernel: ACPI: bus type drm_connector registered Jul 18 12:33:46 hostname kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 18 12:33:46 hostname kernel: simple-framebuffer simple-framebuffer.0: [drm] Registered 1 planes with drm panic Jul 18 12:33:46 hostname kernel: [drm] Initialized simpledrm 1.0.0 for simple-framebuffer.0 on minor 0 Jul 18 12:33:46 hostname kernel: simple-framebuffer simple-framebuffer.0: [drm] fb0: simpledrmdrmfb frame buffer device Jul 18 12:33:46 hostname systemd[1]: modprobe@drm.service - Load Kernel Module drm skipped, unmet condition check ConditionKernelModuleLoaded=!drm Jul 18 12:33:48 hostname kernel: i915 0000:00:02.0: [drm] Found coffeelake (device ID 3e9b) integrated display version 9.00 stepping N/A Jul 18 12:33:48 hostname kernel: i915 0000:00:02.0: [drm] VT-d active for gfx access Jul 18 12:33:48 hostname kernel: [drm] [nvidia-drm] [GPU ID 0x00000100] Loading driver Jul 18 12:33:48 hostname kernel: i915 0000:00:02.0: vgaarb: deactivate vga console Jul 18 12:33:48 hostname kernel: i915 0000:00:02.0: [drm] Using Transparent Hugepages Jul 18 12:33:48 hostname kernel: i915 0000:00:02.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem Jul 18 12:33:48 hostname kernel: i915 0000:00:02.0: [drm] Finished loading DMC firmware i915/kbl_dmc_ver1_04.bin (v1.4) Jul 18 12:33:48 hostname kernel: mei_hdcp 0000:00:16.0-b638ab7e-94e2-4ea2-a552-d1c54b627f04: bound 0000:00:02.0 (ops i915_hdcp_ops [i915]) Jul 18 12:33:48 hostname kernel: i915 0000:00:02.0: [drm] Registered 3 planes with drm panic Jul 18 12:33:48 hostname kernel: [drm] Initialized i915 1.6.0 for 0000:00:02.0 on minor 1 Jul 18 12:33:48 hostname kernel: fbcon: i915drmfb (fb0) is primary device Jul 18 12:33:48 hostname kernel: i915 0000:00:02.0: [drm] fb0: i915drmfb frame buffer device Jul 18 12:33:49 hostname kernel: snd_hda_intel 0000:00:1f.3: bound 0000:00:02.0 (ops intel_audio_component_bind_ops [i915]) Jul 18 12:33:49 hostname kernel: [drm] Initialized nvidia-drm 0.0.0 for 0000:01:00.0 on minor 2 Jul 18 12:33:49 hostname kernel: nvidia 0000:01:00.0: [drm] Cannot find any crtc or sizes ProblemType: Bug DistroRelease: Ubuntu 26.04 Package: linux-image-7.0.0-28-generic 7.0.0-28.28 ProcVersionSignature: Ubuntu 7.0.0-28.28-generic 7.0.12 Uname: Linux 7.0.0-28-generic x86_64 ApportVersion: 2.34.0-0ubuntu2 Architecture: amd64 AudioDevicesInUse: USER PID ACCESS COMMAND /dev/snd/controlC1: rene 2375 F.... wireplumber /dev/snd/controlC0: rene 2375 F.... wireplumber /dev/snd/seq: rene 2371 F.... pipewire CasperMD5CheckResult: unknown CurrentDesktop: KDE Date: Sat Jul 18 12:35:33 2026 InstallationDate: Installed on 2026-06-20 (28 days ago) InstallationMedia: Kubuntu 26.04 "Resolute Raccoon" - Release amd64 (20260423) MachineType: Dell Inc. G5 5590 ProcFB: 0 i915drmfb ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-7.0.0-28-generic root=UUID=f7fa5d66-47e3-49b6-b017-d62f3f9e602b ro rootflags=subvol=@ quiet cryptdevice=UUID=746ff933-7259-443d-89a5-45702252db53:luks-746ff933-7259-443d-89a5-45702252db53 root=/dev/mapper/luks-746ff933-7259-443d-89a5-45702252db53 splash PulseList: Error: command ['pacmd', 'list'] failed with exit code 1: No PulseAudio daemon running, or not running as session daemon. SourcePackage: linux UpgradeStatus: No upgrade log present (probably fresh install) dmi.bios.date: 03/15/2022 dmi.bios.release: 1.19 dmi.bios.vendor: Dell Inc. dmi.bios.version: 1.19.0 dmi.board.name: 0CNDTP dmi.board.vendor: Dell Inc. dmi.board.version: A04 dmi.chassis.type: 10 dmi.chassis.vendor: Dell Inc. dmi.modalias: dmi:bvnDellInc.:bvr1.19.0:bd03/15/2022:br1.19:svnDellInc.:pnG55590:pvr:rvnDellInc.:rn0CNDTP:rvrA04:cvnDellInc.:ct10:cvr:sku08EA:pfaGSeries: dmi.product.family: GSeries dmi.product.name: G5 5590 dmi.product.sku: 08EA dmi.sys.vendor: Dell Inc. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2161182/+subscriptions

[Bug 2161181] [NEW] [Regression] LUKS root passphrase rejected on kernel 7.0.0-28, works on 7.0.0-27

Public bug reported: LUKS root volume fails to unlock with kernel 7.0.0-28-generic, but works with 7.0.0-27-generic. After upgrading from 7.0.0-27.27 to 7.0.0-28.28, the Plymouth LUKS prompt rejects the correct passphrase with: cryptsetup: ERROR: dm_crypt-0: cryptsetup failed, bad password or options? The same passphrase and the same LUKS2 volume work correctly when booting 7.0.0-27-generic and when opening the volume from an Ubuntu Live system using cryptsetup. I recreated the initramfs for 7.0.0-28-generic: sudo update-initramfs -c -k 7.0.0-28-generic sudo update-grub Both commands completed without errors, but the issue persists. Affected kernel: 7.0.0-28-generic Working kernel: 7.0.0-27-generic LUKS device: /dev/nvme0n1p3 LUKS version: LUKS2 The crypttab UUID matches the actual LUKS UUID. ProblemType: Bug DistroRelease: Ubuntu 26.04 Package: linux-image-7.0.0-27-generic 7.0.0-27.27 ProcVersionSignature: Ubuntu 7.0.0-27.27-generic 7.0.6 Uname: Linux 7.0.0-27-generic x86_64 ApportVersion: 2.34.0-0ubuntu2 Architecture: amd64 AudioDevicesInUse: USER PID ACCESS COMMAND /dev/snd/controlC2: gpad 4459 F.... wireplumber /dev/snd/controlC1: gpad 4459 F.... wireplumber /dev/snd/controlC0: gpad 4459 F.... wireplumber /dev/snd/seq: gpad 4436 F.... pipewire CasperMD5CheckResult: pass CurrentDesktop: ubuntu:GNOME Date: Sat Jul 18 12:01:56 2026 InstallationDate: Installed on 2025-08-20 (332 days ago) InstallationMedia: Ubuntu 25.04 "Plucky Puffin" - Release amd64 (20250415.3) MachineType: SANTECH PCX0DX ProcEnviron: LANG=en_US.UTF-8 PATH=(custom, no user) SHELL=/bin/bash TERM=xterm-256color XDG_RUNTIME_DIR=<set> ProcFB: 0 i915drmfb 1 nvidia-drmdrmfb ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-7.0.0-27-generic root=/dev/mapper/ubuntu--vg-ubuntu--lv ro quiet splash crashkernel=2G-4G:320M,4G-32G:512M,32G-64G:1024M,64G-128G:2048M,128G-:4096M SourcePackage: linux UpgradeStatus: Upgraded to resolute on 2026-06-04 (44 days ago) dmi.bios.date: 05/20/2020 dmi.bios.release: 7.3 dmi.bios.vendor: INSYDE Corp. dmi.bios.version: 1.07.03TSAS dmi.board.asset.tag: Tag 12345 dmi.board.name: PCX0DX dmi.board.vendor: SANTECH dmi.board.version: Not Applicable dmi.chassis.asset.tag: No Asset Tag dmi.chassis.type: 10 dmi.chassis.vendor: SANTECH dmi.chassis.version: N/A dmi.ec.firmware.release: 7.2 dmi.modalias: dmi:bvnINSYDECorp.:bvr1.07.03TSAS:bd05/20/2020:br7.3:efr7.2:svnSANTECH:pnPCX0DX:pvrNotApplicable:rvnSANTECH:rnPCX0DX:rvrNotApplicable:cvnSANTECH:ct10:cvrN/A:skuNotApplicable:pfaNotApplicable: dmi.product.family: Not Applicable dmi.product.name: PCX0DX dmi.product.sku: Not Applicable dmi.product.version: Not Applicable dmi.sys.vendor: SANTECH ** Affects: linux (Ubuntu) Importance: Undecided Status: New ** Tags: amd64 apport-bug resolute wayland-session -- You received this bug notification because you are subscribed to linux in Ubuntu. Matching subscriptions: Bgg, Bmail, Nb https://bugs.launchpad.net/bugs/2161181 Title: [Regression] LUKS root passphrase rejected on kernel 7.0.0-28, works on 7.0.0-27 Status in linux package in Ubuntu: New Bug description: LUKS root volume fails to unlock with kernel 7.0.0-28-generic, but works with 7.0.0-27-generic. After upgrading from 7.0.0-27.27 to 7.0.0-28.28, the Plymouth LUKS prompt rejects the correct passphrase with: cryptsetup: ERROR: dm_crypt-0: cryptsetup failed, bad password or options? The same passphrase and the same LUKS2 volume work correctly when booting 7.0.0-27-generic and when opening the volume from an Ubuntu Live system using cryptsetup. I recreated the initramfs for 7.0.0-28-generic: sudo update-initramfs -c -k 7.0.0-28-generic sudo update-grub Both commands completed without errors, but the issue persists. Affected kernel: 7.0.0-28-generic Working kernel: 7.0.0-27-generic LUKS device: /dev/nvme0n1p3 LUKS version: LUKS2 The crypttab UUID matches the actual LUKS UUID. ProblemType: Bug DistroRelease: Ubuntu 26.04 Package: linux-image-7.0.0-27-generic 7.0.0-27.27 ProcVersionSignature: Ubuntu 7.0.0-27.27-generic 7.0.6 Uname: Linux 7.0.0-27-generic x86_64 ApportVersion: 2.34.0-0ubuntu2 Architecture: amd64 AudioDevicesInUse: USER PID ACCESS COMMAND /dev/snd/controlC2: gpad 4459 F.... wireplumber /dev/snd/controlC1: gpad 4459 F.... wireplumber /dev/snd/controlC0: gpad 4459 F.... wireplumber /dev/snd/seq: gpad 4436 F.... pipewire CasperMD5CheckResult: pass CurrentDesktop: ubuntu:GNOME Date: Sat Jul 18 12:01:56 2026 InstallationDate: Installed on 2025-08-20 (332 days ago) InstallationMedia: Ubuntu 25.04 "Plucky Puffin" - Release amd64 (20250415.3) MachineType: SANTECH PCX0DX ProcEnviron: LANG=en_US.UTF-8 PATH=(custom, no user) SHELL=/bin/bash TERM=xterm-256color XDG_RUNTIME_DIR=<set> ProcFB: 0 i915drmfb 1 nvidia-drmdrmfb ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-7.0.0-27-generic root=/dev/mapper/ubuntu--vg-ubuntu--lv ro quiet splash crashkernel=2G-4G:320M,4G-32G:512M,32G-64G:1024M,64G-128G:2048M,128G-:4096M SourcePackage: linux UpgradeStatus: Upgraded to resolute on 2026-06-04 (44 days ago) dmi.bios.date: 05/20/2020 dmi.bios.release: 7.3 dmi.bios.vendor: INSYDE Corp. dmi.bios.version: 1.07.03TSAS dmi.board.asset.tag: Tag 12345 dmi.board.name: PCX0DX dmi.board.vendor: SANTECH dmi.board.version: Not Applicable dmi.chassis.asset.tag: No Asset Tag dmi.chassis.type: 10 dmi.chassis.vendor: SANTECH dmi.chassis.version: N/A dmi.ec.firmware.release: 7.2 dmi.modalias: dmi:bvnINSYDECorp.:bvr1.07.03TSAS:bd05/20/2020:br7.3:efr7.2:svnSANTECH:pnPCX0DX:pvrNotApplicable:rvnSANTECH:rnPCX0DX:rvrNotApplicable:cvnSANTECH:ct10:cvrN/A:skuNotApplicable:pfaNotApplicable: dmi.product.family: Not Applicable dmi.product.name: PCX0DX dmi.product.sku: Not Applicable dmi.product.version: Not Applicable dmi.sys.vendor: SANTECH To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2161181/+subscriptions

[Bug 2161173] [NEW] Jammy update: v5.15.210 upstream stable release

Public bug reported: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.15.210 upstream stable release from git://git.kernel.org/ Linux 5.15.210 netfilter: require Ethernet MAC header before using eth_hdr() batman-adv: tp_meter: avoid role confusion in tp_list batman-adv: tp_meter: fix race condition in send error reporting ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops Bluetooth: MGMT: Fix backward compatibility with userspace media: rc: igorplugusb: fix control request setup packet batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown media: rc: ttusbir: fix inverted error logic x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function apparmor: validate default DFA states are in bounds fbdev: vt8500lcdfb: Fix dma_free_coherent() cpu_addr parameter mptcp: close TOCTOU race while computing rcv_wnd arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU arm64: errata: Mitigate TLBI errata on various Arm CPUs arm64: cputype: Add C1-Premium definitions arm64: cputype: Add C1-Ultra definitions arm64: cputype: Add NVIDIA Olympus definitions selinux: enable genfscon labeling for securityfs ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache ksmbd: Compare MACs in constant time net/ipv6: ioam6: prevent schema length wraparound in trace fill batman-adv: tp_meter: fix tp_num leak on kmalloc failure batman-adv: stop tp_meter sessions during mesh teardown blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init ipvs: skip ipv6 extension headers for csum checks mm/huge_memory: update file PMD counter before folio_put() RDMA/umem: Fix truncation for block sizes >= 4G RDMA: Move DMA block iterator logic into dedicated files RDMA/umem: fix kernel-doc warnings hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf netfilter: nft_fib: fix stale stack leak via the OIFNAME register scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() serial: qcom-geni: fix UART_RX_PAR_EN bit position tty: serial: qcom-geni-serial: align #define values tty: serial: qcom-geni-serial: remove unused symbols serial: altera_jtaguart: handle uart_add_one_port() failures serial: altera_jtaguart: Use platform_get_irq_optional() to get the interrupt drm/hyperv: validate resolution_count and fix WIN8 fallback drm/hyperv: Remove support for Hyper-V 2008 and 2008R2/Win7 usb: typec: ucsi: Check if power role change actually happened before handling scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() usb: gadget: f_hid: fix device reference leak in hidg_alloc() usb: gadget: f_hid: tidy error handling in hidg_alloc usb: dwc3: xilinx: fix error handling in zynqmp init error paths tty: serial: samsung: Remove redundant port lock acquisition in rx helpers tty: serial: samsung: use u32 for register interactions serial: samsung_tty: Use port lock wrappers net: skbuff: fix missing zerocopy reference in pskb_carve helpers usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy acquisition failure iio: dac: ad5686: fix ref bit initialization for single-channel parts iio: chemical: scd30: fix division by zero in write_raw iio: chemical: scd30: Use guard(mutex) to allow early returns iio: gyro: adis16260: fix division by zero in write_raw Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() phy: tegra: xusb: Fix per-pad high-speed termination calibration phy: tegra: xusb: Disable trk clk when not in use arm64: tlb: Flush walk cache when unsharing PMD tables spi: qup: fix error pointer deref after DMA setup failure spi: qup: switch to use modern name octeontx2-pf: avoid double free of pool->stack on AQ init failure octeontx2-af: CGX: add bounds check to cgx_speed_mbps index mptcp: do not drop partial packets selftests: mptcp: drop nanoseconds width specifier mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient use less confusing names for iov_iter direction initializers ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() ipv6/addrconf: annotate data-races around devconf fields (II) ice: fix VF queue configuration with low MTU values net: hsr: defer node table free until after RCU readers Bluetooth: serialize accept_q access Bluetooth: Init sk_peer_* on bt_sock_alloc Bluetooth: Consolidate code around sk_alloc into a helper function qed: fix double free in qed_cxt_tables_alloc() qed: Use the bitmap API to simplify some functions Bluetooth: MGMT: validate Add Extended Advertising Data length Bluetooth: hci_sync: Make use of hci_cmd_sync_queue set 2 Bluetooth: hci_qca: Convert timeout from jiffies to ms Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() smb: client: require net admin for CIFS SWN netlink genetlink: Use internal flags for multicast groups spi: lantiq-ssc: fix controller deregistration spi: st-ssc4: fix controller deregistration f2fs: fix false alarm of lockdep on cp_global_sem lock f2fs: fix incorrect file address mapping when inline inode is unwritten mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker mptcp: pm: ADD_ADDR rtx: fix potential data-race mptcp: pm: prio: skip closed subflows smb: client: Use FullSessionKey for AES-256 encryption key derivation btrfs: fix missing last_unlink_trans update when removing a directory smb: client: validate dacloffset before building DACL pointers pmdomain: core: Fix detach procedure for virtual devices in genpd tracing/probes: Limit size of event probe to 3K btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak spi: topcliff-pch: fix controller deregistration spi: topcliff-pch: Convert to platform remove callback returning void fbcon: Avoid OOB font access if console rotation fails mm/hugetlb_cma: round up per_node before logging it spi: uniphier: fix controller deregistration spi: tegra20-sflash: fix controller deregistration spi: tegra114: fix controller deregistration spi: sun6i: fix controller deregistration spi: zynq-qspi: fix controller deregistration spi: ti-qspi: fix controller deregistration spi: spi-ti-qspi: Convert to platform remove callback returning void spi: sun4i: fix controller deregistration spi: syncuacer: fix controller deregistration xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete xfrm: ah: account for ESN high bits in async callbacks net: ipv6: stop checking crypto_ahash_alignmask net: ipv4: stop checking crypto_ahash_alignmask usb: dwc3: Move GUID programming after PHY initialization wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task usb: typec: tcpm: reset internal port states on soft reset AMS smb: client: validate the whole DACL before rewriting it in cifsacl tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() crypto: caam - guard HMAC key hex dumps in hash_digest_key printk: add print_hex_dump_devel() ALSA: aloop: Fix peer runtime UAF during format-change stop ceph: only d_add() negative dentries when they are unhashed erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() can: ucan: fix devres lifetime can: ucan: fix typos in comments Bluetooth: hci_event: fix potential UAF in SSP passkey handlers hfsplus: fix held lock freed on hfsplus_fill_super() hfsplus: fix uninit-value by validating catalog record size udf: fix partition descriptor append bookkeeping mtd: spi-nor: sst: Fix write enable before AAI sequence mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration randomize_kstack: Maintain kstack_offset per task fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info net: bridge: use a stable FDB dst snapshot in RCU readers net: qrtr: ns: Limit the total number of nodes net: mctp: fix don't require received header reserved bits to be zero net: qrtr: ns: Free the node during ctrl_cmd_bye() net: qrtr: ns: Change servers radix tree to xarray net: qrtr: ns: Limit the maximum number of lookups ALSA: core: Fix potential data race at fasync handling sched: Use u64 for bandwidth ratio calculations media: rc: igorplugusb: heed coherency rules erofs: fix the out-of-bounds nameoff handling for trailing dirents ALSA: aoa: Skip devices with no codecs in i2sbus_resume() media: rc: ttusbir: respect DMA coherency rules ALSA: aoa: i2sbus: clear stale prepared state ALSA: aoa: Use guard() for mutex locks wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() thermal: core: Fix thermal zone governor cleanup issues wifi: rtw88: check for PCI upstream bridge existence rtw88: 8821ce: Disable PCIe ASPM L1 for 8821CE using chip ID arm64/mm: Enable batched TLB flush in unmap_hotplug_range() net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() ksmbd: require minimum ACE size in smb_check_perm_dacl() smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path smb: client: require a full NFS mode SID before reading mode bits smb: server: fix max_connections off-by-one in tcp accept path smb: server: fix active_num_conn leak on transport allocation failure f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() net/tcp-md5: Fix MAC comparison to be constant-time io_uring/poll: fix signed comparison in io_poll_get_ownership() mm/damon/ops-common: call folio_test_lru() after folio_get() fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling drm/amd/display: Use krealloc_array() in dal_vector_reserve() drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs drm/amd/display: Clamp VBIOS HDMI retimer register count to array size drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock thunderbolt: Limit XDomain response copy to actual frame size thunderbolt: Clamp XDomain response data copy to allocation size thunderbolt: Bound root directory content to block size thunderbolt: Reject zero-length property entries in validator sctp: stream: fully roll back denied add-stream state sctp: diag: reject stale associations in dump_one path mmc: sdhci: add signal voltage switch in sdhci_resume_host mmc: renesas_sdhi: Add OF entry for RZ/G2H SoC mmc: core: Fix host controller programming for fixed driver type net: rds: clear i_sends on setup unwind net: mv643xx: fix OF node refcount net: bonding: fix NULL pointer dereference in bond_do_ioctl() misc: fastrpc: fix DMA address corruption due to find_vma misuse misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context ipc/shm: serialize orphan cleanup with shm_nattch updates Input: atkbd - skip deactivate for HONOR BCC-N's internal keyboard Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK) i2c: tegra: Fix NOIRQ suspend/resume i2c: stm32f7: fix timing computation ignoring i2c-analog-filter i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() fuse: reject fuse_notify() pagecache ops on directories pidfd: refuse access to tasks that have started exiting harder IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN bnxt_en: Fix NULL pointer dereference vsock/vmci: fix sk_ack_backlog leak on failed handshake mptcp: sockopt: check timestamping ret value mptcp: fix retransmission loop when csum is enabled ARM: 9474/1: io: avoid KASAN instrumentation of raw halfword I/O ARM: socfpga: Fix OF node refcount leak in SMP setup RDMA/srp: bound SRP_RSP sense copy by the received length drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info() ALSA: timer: Fix UAF at snd_timer_user_params() USB: serial: kl5kusb105: fix bulk-out buffer overflow USB: serial: option: add usb-id for Dell Wireless DW5826e-m USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() USB: serial: io_ti: fix heap overflow in get_manuf_info() xfrm: espintcp: do not reuse an in-progress partial send drm/i915/gem: Fix phys BO pread/pwrite with offset Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig netfilter: nft_tunnel: fix use-after-free on object destroy drm/vc4: fix krealloc() memory leak net: mvpp2: build skb from XDP-adjusted data on XDP_PASS net: mvpp2: refill RX buffers before XDP or skb use net: mvpp2: Add metadata support for xdp mode net: mvpp2: limit XDP frame size to the RX buffer net: mvpp2: sync RX data at the hardware packet offset netfilter: nft_exthdr: fix register tracking for F_PRESENT flag netfilter: nf_log: validate MAC header was set before dumping it netfilter: x_tables: avoid leaking percpu counter pointers rds: mark snapshot pages dirty in rds_info_getsockopt() ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion net: guard timestamp cmsgs to real error queue skbs sctp: fix uninit-value in __sctp_rcv_asconf_lookup() net: openvswitch: fix possible kfree_skb of ERR_PTR ipv6: sit: reload inner IPv6 header after GSO offloads net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove netlabel: validate unlabeled address and mask attribute lengths xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI arm64: tlb: Allow XZR argument to TLBI ops KVM: arm64: Remove VPIPT I-cache handling tun: free page on build_skb failure in tun_xdp_one() tap: free page on error paths in tap_get_user_xdp() nfsd: don't ignore the return code of svc_proc_register() fs/ntfs3: Return error for inconsistent extended attributes ext4: validate p_idx bounds in ext4_ext_correct_indexes time: Fix off-by-one in settimeofday() usec validation signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() sctp: purge outqueue on stale COOKIE-ECHO handling net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options Bluetooth: fix memory leak in error path of hci_alloc_dev() Bluetooth: bnep: reject short frames before parsing Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling Bluetooth: RFCOMM: validate skb length in MCC handlers Bluetooth: MGMT: validate advertising TLV before type checks Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() net: lan743x: permit VLAN-tagged packets up to configured MTU net: garp: fix unsigned integer underflow in garp_pdu_parse_attr pcnet32: stop holding device spin lock during napi_complete_done drm/imx: Fix three kernel-doc warnings in dcss-scaler.c 6lowpan: fix off-by-one in multicast context address compression net/sched: act_api: use RCU with deferred freeing for action lifecycle dm cache policy smq: check allocation under invalidate lock netfilter: bridge: make ebt_snat ARP rewrite writable netfilter: conntrack_irc: fix possible out-of-bounds read netfilter: synproxy: add mutex to guard hook reference counting ipvs: clear the svc scheduler ptr early on edit netfilter: xt_NFQUEUE: prefer raw_smp_processor_id tee: optee: prevent use-after-free when the client exits before the supplicant ipv6: mcast: Fix use-after-free when processing MLD queries i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl Disable -Wattribute-alias for clang-23 and newer compiler-clang.h: Add __diag infrastructure for clang USB: serial: mct_u232: fix memory corruption with small endpoint bpf: Free reuseport cBPF prog after RCU grace period. usb: core: Fix SuperSpeed root hub wMaxPacketSize serial: dz: Fix bootconsole handover lockup xhci: tegra: Fix ghost USB device on dual-role port unplug USB: serial: digi_acceleport: fix memory corruption with small endpoints HID: core: Fix size_t specifier in hid_report_raw_event() HID: pass the buffer size to hid_report_raw_event HID: core: Add printk_ratelimited variants to hid_warn() etc USB: serial: cypress_m8: fix memory corruption with small endpoint serial: zs: Switch to using channel reset serial: zs: Fix bootconsole handover lockup serial: dz: Fix bootconsole message clobbering at chip reset serial: fsl_lpuart: fix rx buffer and DMA map leaks in start_rx_dma serial: zs: Fix swapped RI/DSR modem line transition counting serial: sh-sci: fix memory region release in error path drm/hyperv: validate VMBus packet size in receive callback scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() usb: gadget: f_fs: copy only received bytes on short ep0 read usb: gadget: dummy_hcd: Reject hub port requests for non-existent ports usb: gadget: net2280: Fix double free in probe error path USB: serial: mct_u232: fix missing interrupt-in transfer sanity check USB: serial: mxuport: fix memory corruption with small endpoint USB: serial: keyspan: fix missing indat transfer sanity check USB: serial: cypress_m8: validate interrupt packet headers USB: serial: belkin_sa: validate interrupt status length USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL USB: serial: option: add MeiG SRM813Q usb: usbtmc: reject interrupt endpoints with small wMaxPacketSize usb: usbtmc: check URB actual_length for interrupt-IN notifications usbip: vudc: Fix use after free bug in vudc_remove due to race condition usb: storage: Add quirks for PNY Elite Portable SSD USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2 hub controllers usb: core: Fix up Interrupt IN endpoints with bogus wBytesPerInterval usb: chipidea: core: convert ci_role_switch to local variable tty: serial: pch_uart: add check for dma_alloc_coherent() comedi: comedi_test: Fix limiting of convert_arg in waveform_ai_cmdtest() comedi: comedi_test: fix check for valid scan_begin_src in waveform_ai_cmdtest() Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad E490 Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem xfrm: esp: restore combined single-frag length gate ASoC: qcom: q6asm-dai: do not set stream state in event and trigger callbacks ASoC: qcom: q6asm-dai: close stream only when running netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check xfrm: ah: use skb_to_full_sk in async output callbacks xfrm: route MIGRATE notifications to caller's netns nfc: hci: fix out-of-bounds read in HCP header parsing iommu, debugobjects: avoid gcc-16.1 section mismatch warnings HID: wacom: Fix OOB write in wacom_hid_set_device_mode() ip6: vti: Use ip6_tnl.net in vti6_changelink(). xfrm: input: hold netns during deferred transport reinjection ipv6: validate extension header length before copying to cmsg ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). ipv6: exthdrs: refresh nh after handling HAO option ASoC: qcom: q6asm-dai: fix error handling in prepare and set_params ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() macsec: fix replay protection at XPN lower-PN wrap bpf: sockmap: fix tail fragment offset in bpf_msg_push_data Input: elan_i2c - validate firmware size before use usb: dwc2: Fix use after free in debug code usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call permanently leaks the runtime PM usage counter across bind/unbind cycles usb: cdns3: gadget: fix request skipping after clearing halt USB: serial: omninet: fix memory corruption with small endpoint iio: buffer: hw-consumer: fix use-after-free in error path iio: light: cm3323: fix reg_conf not being initialized correctly iio: magnetometer: st_magn: fix default DRDY pin selection for LIS2MDL iio: temperature: tsys01: fix broken PROM checksum validation iio: ssp_sensors: cancel delayed work_refresh on remove iio: gyro: itg3200: fix i2c read into the wrong stack location iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw wireguard: send: append trailer after expanding head iio: dac: ad5686: fix input raw value check iio: dac: max5821: fix return value check in powerdown sync iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for dual mux parport: Fix race between port and client registration Bluetooth: HIDP: fix missing length checks in hidp_input_report() Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn ipc: limit next_id allocation to the valid ID range hpfs: fix a crash if hpfs_map_dnode_bitmap fails Bluetooth: btusb: Allow firmware re-download when version matches Input: ims-pcu - fix usb_free_coherent() size in ims_pcu_buffers_free() USB: serial: safe_serial: fix memory corruption with small endpoint usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() usb: typec: altmodes/displayport: validate count before reading Status Update VDO usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO usb: typec: ucsi: ccg: reject firmware images without a ':' record header iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path phy: mscc: Use PHY_ID_MATCH_EXACT for VSC8584, VSC8582, VSC8575, VSC856X phy: mscc: Use PHY_ID_MATCH_VENDOR to minimize PHY ID table RDMA/rxe: Fix double free in rxe_srq_from_init Revert "RDMA/rxe: Fix double free in rxe_srq_from_init" drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used drm/dp: Add eDP 1.5 bit definition drm/i915/psr: Read Intel DPCD workaround register drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work batman-adv: bla: avoid double decrement of bla.num_requests batman-adv: tt: avoid empty VLAN responses batman-adv: tt: fix TOCTOU race for reported vlans batman-adv: tp_meter: directly shut down timer on cleanup selftests: forwarding: lib: Add helpers for checksum handling batman-adv: iv: recover OGM scheduling after forward packet error batman-adv: tvlv: reject oversized TVLV packets batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface batman-adv: tvlv: abort OGM send on tvlv append failure batman-adv: v: stop OGMv2 on disabled interface sctp: fix race between sctp_wait_for_connect and peeloff gpio: rockchip: convert bank->clk to devm_clk_get_enabled() Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() ethtool: eeprom: add more safeties to EEPROM Netlink fallback bonding: refuse to enslave CAN devices Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() ASoC: codecs: simple-mux: Fix enum control bounds check tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() net/iucv: fix locking in .getsockopt net/smc: Do not re-initialize smc hashtables net: netlink: don't set nsid on local notifications net: netlink: fix sending unassigned nsid after assigned one tun: free page on short-frame rejection in tun_xdp_one() netfilter: ebtables: fix OOB read in compat_mtw_from_user netfilter: xt_cpu: prefer raw_smp_processor_id netfilter: synproxy: refresh tcphdr after skb_ensure_writable nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems xfrm: Check for underflow in xfrm_state_mtu nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() nfc: llcp: Fix use-after-free in llcp_sock_release() net: cpsw_new: Fix potential unregister of netdev that has not been registered yet dmaengine: idxd: Fix not releasing workqueue on .release() drm: Remove plane hsub/vsub alignment requirement for core helpers net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked net: mctp: ensure our nlmsg responses are initialised net/sched: cls_fw: fix NULL dereference of "old" filters before change() Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size ** Affects: linux (Ubuntu) Importance: Undecided Status: Confirmed ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are subscribed to linux in Ubuntu. Matching subscriptions: Bgg, Bmail, Nb https://bugs.launchpad.net/bugs/2161173 Title: Jammy update: v5.15.210 upstream stable release Status in linux package in Ubuntu: Confirmed Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.15.210 upstream stable release from git://git.kernel.org/ Linux 5.15.210 netfilter: require Ethernet MAC header before using eth_hdr() batman-adv: tp_meter: avoid role confusion in tp_list batman-adv: tp_meter: fix race condition in send error reporting ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops Bluetooth: MGMT: Fix backward compatibility with userspace media: rc: igorplugusb: fix control request setup packet batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown media: rc: ttusbir: fix inverted error logic x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function apparmor: validate default DFA states are in bounds fbdev: vt8500lcdfb: Fix dma_free_coherent() cpu_addr parameter mptcp: close TOCTOU race while computing rcv_wnd arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU arm64: errata: Mitigate TLBI errata on various Arm CPUs arm64: cputype: Add C1-Premium definitions arm64: cputype: Add C1-Ultra definitions arm64: cputype: Add NVIDIA Olympus definitions selinux: enable genfscon labeling for securityfs ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache ksmbd: Compare MACs in constant time net/ipv6: ioam6: prevent schema length wraparound in trace fill batman-adv: tp_meter: fix tp_num leak on kmalloc failure batman-adv: stop tp_meter sessions during mesh teardown blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init ipvs: skip ipv6 extension headers for csum checks mm/huge_memory: update file PMD counter before folio_put() RDMA/umem: Fix truncation for block sizes >= 4G RDMA: Move DMA block iterator logic into dedicated files RDMA/umem: fix kernel-doc warnings hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf netfilter: nft_fib: fix stale stack leak via the OIFNAME register scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() serial: qcom-geni: fix UART_RX_PAR_EN bit position tty: serial: qcom-geni-serial: align #define values tty: serial: qcom-geni-serial: remove unused symbols serial: altera_jtaguart: handle uart_add_one_port() failures serial: altera_jtaguart: Use platform_get_irq_optional() to get the interrupt drm/hyperv: validate resolution_count and fix WIN8 fallback drm/hyperv: Remove support for Hyper-V 2008 and 2008R2/Win7 usb: typec: ucsi: Check if power role change actually happened before handling scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() usb: gadget: f_hid: fix device reference leak in hidg_alloc() usb: gadget: f_hid: tidy error handling in hidg_alloc usb: dwc3: xilinx: fix error handling in zynqmp init error paths tty: serial: samsung: Remove redundant port lock acquisition in rx helpers tty: serial: samsung: use u32 for register interactions serial: samsung_tty: Use port lock wrappers net: skbuff: fix missing zerocopy reference in pskb_carve helpers usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy acquisition failure iio: dac: ad5686: fix ref bit initialization for single-channel parts iio: chemical: scd30: fix division by zero in write_raw iio: chemical: scd30: Use guard(mutex) to allow early returns iio: gyro: adis16260: fix division by zero in write_raw Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() phy: tegra: xusb: Fix per-pad high-speed termination calibration phy: tegra: xusb: Disable trk clk when not in use arm64: tlb: Flush walk cache when unsharing PMD tables spi: qup: fix error pointer deref after DMA setup failure spi: qup: switch to use modern name octeontx2-pf: avoid double free of pool->stack on AQ init failure octeontx2-af: CGX: add bounds check to cgx_speed_mbps index mptcp: do not drop partial packets selftests: mptcp: drop nanoseconds width specifier mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient use less confusing names for iov_iter direction initializers ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() ipv6/addrconf: annotate data-races around devconf fields (II) ice: fix VF queue configuration with low MTU values net: hsr: defer node table free until after RCU readers Bluetooth: serialize accept_q access Bluetooth: Init sk_peer_* on bt_sock_alloc Bluetooth: Consolidate code around sk_alloc into a helper function qed: fix double free in qed_cxt_tables_alloc() qed: Use the bitmap API to simplify some functions Bluetooth: MGMT: validate Add Extended Advertising Data length Bluetooth: hci_sync: Make use of hci_cmd_sync_queue set 2 Bluetooth: hci_qca: Convert timeout from jiffies to ms Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() smb: client: require net admin for CIFS SWN netlink genetlink: Use internal flags for multicast groups spi: lantiq-ssc: fix controller deregistration spi: st-ssc4: fix controller deregistration f2fs: fix false alarm of lockdep on cp_global_sem lock f2fs: fix incorrect file address mapping when inline inode is unwritten mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker mptcp: pm: ADD_ADDR rtx: fix potential data-race mptcp: pm: prio: skip closed subflows smb: client: Use FullSessionKey for AES-256 encryption key derivation btrfs: fix missing last_unlink_trans update when removing a directory smb: client: validate dacloffset before building DACL pointers pmdomain: core: Fix detach procedure for virtual devices in genpd tracing/probes: Limit size of event probe to 3K btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak spi: topcliff-pch: fix controller deregistration spi: topcliff-pch: Convert to platform remove callback returning void fbcon: Avoid OOB font access if console rotation fails mm/hugetlb_cma: round up per_node before logging it spi: uniphier: fix controller deregistration spi: tegra20-sflash: fix controller deregistration spi: tegra114: fix controller deregistration spi: sun6i: fix controller deregistration spi: zynq-qspi: fix controller deregistration spi: ti-qspi: fix controller deregistration spi: spi-ti-qspi: Convert to platform remove callback returning void spi: sun4i: fix controller deregistration spi: syncuacer: fix controller deregistration xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete xfrm: ah: account for ESN high bits in async callbacks net: ipv6: stop checking crypto_ahash_alignmask net: ipv4: stop checking crypto_ahash_alignmask usb: dwc3: Move GUID programming after PHY initialization wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task usb: typec: tcpm: reset internal port states on soft reset AMS smb: client: validate the whole DACL before rewriting it in cifsacl tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() crypto: caam - guard HMAC key hex dumps in hash_digest_key printk: add print_hex_dump_devel() ALSA: aloop: Fix peer runtime UAF during format-change stop ceph: only d_add() negative dentries when they are unhashed erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() can: ucan: fix devres lifetime can: ucan: fix typos in comments Bluetooth: hci_event: fix potential UAF in SSP passkey handlers hfsplus: fix held lock freed on hfsplus_fill_super() hfsplus: fix uninit-value by validating catalog record size udf: fix partition descriptor append bookkeeping mtd: spi-nor: sst: Fix write enable before AAI sequence mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration randomize_kstack: Maintain kstack_offset per task fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info net: bridge: use a stable FDB dst snapshot in RCU readers net: qrtr: ns: Limit the total number of nodes net: mctp: fix don't require received header reserved bits to be zero net: qrtr: ns: Free the node during ctrl_cmd_bye() net: qrtr: ns: Change servers radix tree to xarray net: qrtr: ns: Limit the maximum number of lookups ALSA: core: Fix potential data race at fasync handling sched: Use u64 for bandwidth ratio calculations media: rc: igorplugusb: heed coherency rules erofs: fix the out-of-bounds nameoff handling for trailing dirents ALSA: aoa: Skip devices with no codecs in i2sbus_resume() media: rc: ttusbir: respect DMA coherency rules ALSA: aoa: i2sbus: clear stale prepared state ALSA: aoa: Use guard() for mutex locks wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() thermal: core: Fix thermal zone governor cleanup issues wifi: rtw88: check for PCI upstream bridge existence rtw88: 8821ce: Disable PCIe ASPM L1 for 8821CE using chip ID arm64/mm: Enable batched TLB flush in unmap_hotplug_range() net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() ksmbd: require minimum ACE size in smb_check_perm_dacl() smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path smb: client: require a full NFS mode SID before reading mode bits smb: server: fix max_connections off-by-one in tcp accept path smb: server: fix active_num_conn leak on transport allocation failure f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() net/tcp-md5: Fix MAC comparison to be constant-time io_uring/poll: fix signed comparison in io_poll_get_ownership() mm/damon/ops-common: call folio_test_lru() after folio_get() fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling drm/amd/display: Use krealloc_array() in dal_vector_reserve() drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs drm/amd/display: Clamp VBIOS HDMI retimer register count to array size drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock thunderbolt: Limit XDomain response copy to actual frame size thunderbolt: Clamp XDomain response data copy to allocation size thunderbolt: Bound root directory content to block size thunderbolt: Reject zero-length property entries in validator sctp: stream: fully roll back denied add-stream state sctp: diag: reject stale associations in dump_one path mmc: sdhci: add signal voltage switch in sdhci_resume_host mmc: renesas_sdhi: Add OF entry for RZ/G2H SoC mmc: core: Fix host controller programming for fixed driver type net: rds: clear i_sends on setup unwind net: mv643xx: fix OF node refcount net: bonding: fix NULL pointer dereference in bond_do_ioctl() misc: fastrpc: fix DMA address corruption due to find_vma misuse misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context ipc/shm: serialize orphan cleanup with shm_nattch updates Input: atkbd - skip deactivate for HONOR BCC-N's internal keyboard Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK) i2c: tegra: Fix NOIRQ suspend/resume i2c: stm32f7: fix timing computation ignoring i2c-analog-filter i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() fuse: reject fuse_notify() pagecache ops on directories pidfd: refuse access to tasks that have started exiting harder IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN bnxt_en: Fix NULL pointer dereference vsock/vmci: fix sk_ack_backlog leak on failed handshake mptcp: sockopt: check timestamping ret value mptcp: fix retransmission loop when csum is enabled ARM: 9474/1: io: avoid KASAN instrumentation of raw halfword I/O ARM: socfpga: Fix OF node refcount leak in SMP setup RDMA/srp: bound SRP_RSP sense copy by the received length drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info() ALSA: timer: Fix UAF at snd_timer_user_params() USB: serial: kl5kusb105: fix bulk-out buffer overflow USB: serial: option: add usb-id for Dell Wireless DW5826e-m USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() USB: serial: io_ti: fix heap overflow in get_manuf_info() xfrm: espintcp: do not reuse an in-progress partial send drm/i915/gem: Fix phys BO pread/pwrite with offset Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig netfilter: nft_tunnel: fix use-after-free on object destroy drm/vc4: fix krealloc() memory leak net: mvpp2: build skb from XDP-adjusted data on XDP_PASS net: mvpp2: refill RX buffers before XDP or skb use net: mvpp2: Add metadata support for xdp mode net: mvpp2: limit XDP frame size to the RX buffer net: mvpp2: sync RX data at the hardware packet offset netfilter: nft_exthdr: fix register tracking for F_PRESENT flag netfilter: nf_log: validate MAC header was set before dumping it netfilter: x_tables: avoid leaking percpu counter pointers rds: mark snapshot pages dirty in rds_info_getsockopt() ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion net: guard timestamp cmsgs to real error queue skbs sctp: fix uninit-value in __sctp_rcv_asconf_lookup() net: openvswitch: fix possible kfree_skb of ERR_PTR ipv6: sit: reload inner IPv6 header after GSO offloads net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove netlabel: validate unlabeled address and mask attribute lengths xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI arm64: tlb: Allow XZR argument to TLBI ops KVM: arm64: Remove VPIPT I-cache handling tun: free page on build_skb failure in tun_xdp_one() tap: free page on error paths in tap_get_user_xdp() nfsd: don't ignore the return code of svc_proc_register() fs/ntfs3: Return error for inconsistent extended attributes ext4: validate p_idx bounds in ext4_ext_correct_indexes time: Fix off-by-one in settimeofday() usec validation signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() sctp: purge outqueue on stale COOKIE-ECHO handling net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options Bluetooth: fix memory leak in error path of hci_alloc_dev() Bluetooth: bnep: reject short frames before parsing Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling Bluetooth: RFCOMM: validate skb length in MCC handlers Bluetooth: MGMT: validate advertising TLV before type checks Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() net: lan743x: permit VLAN-tagged packets up to configured MTU net: garp: fix unsigned integer underflow in garp_pdu_parse_attr pcnet32: stop holding device spin lock during napi_complete_done drm/imx: Fix three kernel-doc warnings in dcss-scaler.c 6lowpan: fix off-by-one in multicast context address compression net/sched: act_api: use RCU with deferred freeing for action lifecycle dm cache policy smq: check allocation under invalidate lock netfilter: bridge: make ebt_snat ARP rewrite writable netfilter: conntrack_irc: fix possible out-of-bounds read netfilter: synproxy: add mutex to guard hook reference counting ipvs: clear the svc scheduler ptr early on edit netfilter: xt_NFQUEUE: prefer raw_smp_processor_id tee: optee: prevent use-after-free when the client exits before the supplicant ipv6: mcast: Fix use-after-free when processing MLD queries i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl Disable -Wattribute-alias for clang-23 and newer compiler-clang.h: Add __diag infrastructure for clang USB: serial: mct_u232: fix memory corruption with small endpoint bpf: Free reuseport cBPF prog after RCU grace period. usb: core: Fix SuperSpeed root hub wMaxPacketSize serial: dz: Fix bootconsole handover lockup xhci: tegra: Fix ghost USB device on dual-role port unplug USB: serial: digi_acceleport: fix memory corruption with small endpoints HID: core: Fix size_t specifier in hid_report_raw_event() HID: pass the buffer size to hid_report_raw_event HID: core: Add printk_ratelimited variants to hid_warn() etc USB: serial: cypress_m8: fix memory corruption with small endpoint serial: zs: Switch to using channel reset serial: zs: Fix bootconsole handover lockup serial: dz: Fix bootconsole message clobbering at chip reset serial: fsl_lpuart: fix rx buffer and DMA map leaks in start_rx_dma serial: zs: Fix swapped RI/DSR modem line transition counting serial: sh-sci: fix memory region release in error path drm/hyperv: validate VMBus packet size in receive callback scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() usb: gadget: f_fs: copy only received bytes on short ep0 read usb: gadget: dummy_hcd: Reject hub port requests for non-existent ports usb: gadget: net2280: Fix double free in probe error path USB: serial: mct_u232: fix missing interrupt-in transfer sanity check USB: serial: mxuport: fix memory corruption with small endpoint USB: serial: keyspan: fix missing indat transfer sanity check USB: serial: cypress_m8: validate interrupt packet headers USB: serial: belkin_sa: validate interrupt status length USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL USB: serial: option: add MeiG SRM813Q usb: usbtmc: reject interrupt endpoints with small wMaxPacketSize usb: usbtmc: check URB actual_length for interrupt-IN notifications usbip: vudc: Fix use after free bug in vudc_remove due to race condition usb: storage: Add quirks for PNY Elite Portable SSD USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2 hub controllers usb: core: Fix up Interrupt IN endpoints with bogus wBytesPerInterval usb: chipidea: core: convert ci_role_switch to local variable tty: serial: pch_uart: add check for dma_alloc_coherent() comedi: comedi_test: Fix limiting of convert_arg in waveform_ai_cmdtest() comedi: comedi_test: fix check for valid scan_begin_src in waveform_ai_cmdtest() Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad E490 Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem xfrm: esp: restore combined single-frag length gate ASoC: qcom: q6asm-dai: do not set stream state in event and trigger callbacks ASoC: qcom: q6asm-dai: close stream only when running netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check xfrm: ah: use skb_to_full_sk in async output callbacks xfrm: route MIGRATE notifications to caller's netns nfc: hci: fix out-of-bounds read in HCP header parsing iommu, debugobjects: avoid gcc-16.1 section mismatch warnings HID: wacom: Fix OOB write in wacom_hid_set_device_mode() ip6: vti: Use ip6_tnl.net in vti6_changelink(). xfrm: input: hold netns during deferred transport reinjection ipv6: validate extension header length before copying to cmsg ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). ipv6: exthdrs: refresh nh after handling HAO option ASoC: qcom: q6asm-dai: fix error handling in prepare and set_params ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() macsec: fix replay protection at XPN lower-PN wrap bpf: sockmap: fix tail fragment offset in bpf_msg_push_data Input: elan_i2c - validate firmware size before use usb: dwc2: Fix use after free in debug code usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call permanently leaks the runtime PM usage counter across bind/unbind cycles usb: cdns3: gadget: fix request skipping after clearing halt USB: serial: omninet: fix memory corruption with small endpoint iio: buffer: hw-consumer: fix use-after-free in error path iio: light: cm3323: fix reg_conf not being initialized correctly iio: magnetometer: st_magn: fix default DRDY pin selection for LIS2MDL iio: temperature: tsys01: fix broken PROM checksum validation iio: ssp_sensors: cancel delayed work_refresh on remove iio: gyro: itg3200: fix i2c read into the wrong stack location iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw wireguard: send: append trailer after expanding head iio: dac: ad5686: fix input raw value check iio: dac: max5821: fix return value check in powerdown sync iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for dual mux parport: Fix race between port and client registration Bluetooth: HIDP: fix missing length checks in hidp_input_report() Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn ipc: limit next_id allocation to the valid ID range hpfs: fix a crash if hpfs_map_dnode_bitmap fails Bluetooth: btusb: Allow firmware re-download when version matches Input: ims-pcu - fix usb_free_coherent() size in ims_pcu_buffers_free() USB: serial: safe_serial: fix memory corruption with small endpoint usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() usb: typec: altmodes/displayport: validate count before reading Status Update VDO usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO usb: typec: ucsi: ccg: reject firmware images without a ':' record header iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path phy: mscc: Use PHY_ID_MATCH_EXACT for VSC8584, VSC8582, VSC8575, VSC856X phy: mscc: Use PHY_ID_MATCH_VENDOR to minimize PHY ID table RDMA/rxe: Fix double free in rxe_srq_from_init Revert "RDMA/rxe: Fix double free in rxe_srq_from_init" drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used drm/dp: Add eDP 1.5 bit definition drm/i915/psr: Read Intel DPCD workaround register drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work batman-adv: bla: avoid double decrement of bla.num_requests batman-adv: tt: avoid empty VLAN responses batman-adv: tt: fix TOCTOU race for reported vlans batman-adv: tp_meter: directly shut down timer on cleanup selftests: forwarding: lib: Add helpers for checksum handling batman-adv: iv: recover OGM scheduling after forward packet error batman-adv: tvlv: reject oversized TVLV packets batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface batman-adv: tvlv: abort OGM send on tvlv append failure batman-adv: v: stop OGMv2 on disabled interface sctp: fix race between sctp_wait_for_connect and peeloff gpio: rockchip: convert bank->clk to devm_clk_get_enabled() Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() ethtool: eeprom: add more safeties to EEPROM Netlink fallback bonding: refuse to enslave CAN devices Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() ASoC: codecs: simple-mux: Fix enum control bounds check tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() net/iucv: fix locking in .getsockopt net/smc: Do not re-initialize smc hashtables net: netlink: don't set nsid on local notifications net: netlink: fix sending unassigned nsid after assigned one tun: free page on short-frame rejection in tun_xdp_one() netfilter: ebtables: fix OOB read in compat_mtw_from_user netfilter: xt_cpu: prefer raw_smp_processor_id netfilter: synproxy: refresh tcphdr after skb_ensure_writable nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems xfrm: Check for underflow in xfrm_state_mtu nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() nfc: llcp: Fix use-after-free in llcp_sock_release() net: cpsw_new: Fix potential unregister of netdev that has not been registered yet dmaengine: idxd: Fix not releasing workqueue on .release() drm: Remove plane hsub/vsub alignment requirement for core helpers net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked net: mctp: ensure our nlmsg responses are initialised net/sched: cls_fw: fix NULL dereference of "old" filters before change() Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2161173/+subscriptions

[Bug 2160183] Re: Suspend resume time is too long on EliteBook 8 G1a 13

This bug is awaiting verification that the linux-oem-6.17/6.17.0-1030.30 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-noble-linux-oem-6.17' to 'verification-done- noble-linux-oem-6.17'. If the problem still exists, change the tag 'verification-needed-noble-linux-oem-6.17' to 'verification-failed- noble-linux-oem-6.17'. If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you! ** Tags added: kernel-spammed-noble-linux-oem-6.17-v2 verification-needed-noble-linux-oem-6.17 -- You received this bug notification because you are subscribed to linux in Ubuntu. Matching subscriptions: Bgg, Bmail, Nb https://bugs.launchpad.net/bugs/2160183 Title: Suspend resume time is too long on EliteBook 8 G1a 13 Status in linux package in Ubuntu: New Status in linux-oem-6.17 package in Ubuntu: New Status in linux source package in Noble: Invalid Status in linux-oem-6.17 source package in Noble: Fix Committed Status in linux source package in Resolute: New Status in linux-oem-6.17 source package in Resolute: Invalid Bug description: [Summary] Suspend resume time is too long on EliteBook 8 G1a 13. Suspend time is normal at 0.616 seconds, but resume takes 20.888 seconds. I also found some suspicious log in journal log. Jul 09 01:52:28 localhost kernel: mhi mhi0: MHI did not load image over BHI, ret: -5 Jul 09 01:52:28 localhost kernel: ath12k_pci 0000:01:00.0: failed to set mhi state: POWER_ON(2) Jul 09 01:52:28 localhost kernel: ath12k_pci 0000:01:00.0: failed to start mhi: -110 Jul 09 01:52:28 localhost kernel: PM: suspend of devices complete after 107.286 msecs .. .. .. Jul 09 01:52:28 localhost kernel: PM: noirq resume of devices complete after 424.651 msecs Jul 09 01:52:28 localhost kernel: ath12k_pci 0000:01:00.0: failed to set mhi state INIT(0) in current mhi state (0x1) Jul 09 01:52:28 localhost kernel: ath12k_pci 0000:01:00.0: failed to set mhi state: INIT(0) Jul 09 01:52:28 localhost kernel: ath12k_pci 0000:01:00.0: failed to start mhi: -22 Jul 09 01:52:28 localhost kernel: ath12k_pci 0000:01:00.0: failed to power up hif during resume: -22 Jul 09 01:52:28 localhost kernel: ath12k_pci 0000:01:00.0: failed to early resume core: -22 Jul 09 01:52:28 localhost kernel: ath12k_pci 0000:01:00.0: PM: dpm_run_callback(): pci_pm_resume_early returns -22 Jul 09 01:52:28 localhost kernel: ath12k_pci 0000:01:00.0: PM: failed to resume async early: error -22 [Reproduce steps] Run the following command: sudo fwts s3 --s3-sleep-delay=30 --s3-device-check --s3-device-check-delay=45 Wait for the suspend/resume test to complete. Check the reported suspend and resume timing. Observe that resume takes 20.888 seconds. [Failure rate] 1/1 [Affected machines] https://certification.canonical.com/hardware/202503-36556/ ProblemType: Bug DistroRelease: Ubuntu 24.04 Package: linux-image-6.17.0-1029-oem 6.17.0-1029.29 ProcVersionSignature: Ubuntu 6.17.0-1029.29-oem 6.17.13 Uname: Linux 6.17.0-1029-oem x86_64 ApportVersion: 2.28.2-0ubuntu0.1 Architecture: amd64 AudioDevicesInUse: USER PID ACCESS COMMAND /dev/snd/controlC1: ubuntu 1730 F.... wireplumber /dev/snd/controlC0: ubuntu 1730 F.... wireplumber /dev/snd/seq: ubuntu 1726 F.... pipewire CasperMD5CheckMismatches: ./casper/initrd ./casper/vmlinuz ./casper/minimal.standard.live.hotfix.manifest ./casper/minimal.standard.live.hotfix.size ./casper/minimal.standard.live.size ./casper/minimal.manifest ./casper/minimal.standard.manifest ./casper/minimal.standard.size ./casper/minimal.hotfix.size ./casper/minimal.standard.live.hotfix.squashfs ./casper/minimal.standard.hotfix.squashfs ./casper/minimal.standard.hotfix.size ./casper/minimal.standard.hotfix.manifest ./casper/minimal.hotfix.squashfs ./casper/minimal.standard.live.manifest ./casper/minimal.size ./boot/grub/grub.cfg CasperMD5CheckResult: fail Date: Thu Jul 9 02:55:05 2026 DistributionChannelDescriptor: # This is the distribution channel descriptor for Ubuntu 24.04 for HP # For more information see http://wiki.ubuntu.com/DistributionChannelDescriptor canonical-oem-stella-noble-oem-24.04b-proposed-20250605-516 InstallationDate: Installed on 2026-07-06 (3 days ago) InstallationMedia: Ubuntu OEM 24.04.2 LTS "Noble Numbat" - Release amd64 (20250603) MachineType: HP HP EliteBook 8 G1a 13 inch Notebook AI PC ProcEnviron: LANG=en_US.UTF-8 PATH=(custom, no user) SHELL=/bin/bash TERM=xterm-256color ProcFB: 0 amdgpudrmfb ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-6.17.0-1029-oem root=UUID=776bf8ec-29ed-465b-8999-6df82c789332 ro quiet splash vt.handoff=7 RelatedPackageVersions: linux-restricted-modules-6.17.0-1029-oem N/A linux-backports-modules-6.17.0-1029-oem N/A linux-firmware 20240318.git3b128b60-0ubuntu2.27 SourcePackage: linux-oem-6.17 UpgradeStatus: No upgrade log present (probably fresh install) dmi.bios.date: 05/23/2025 dmi.bios.release: 2.1 dmi.bios.vendor: HP dmi.bios.version: X81 Ver. 01.02.01 dmi.board.name: 8E14 dmi.board.vendor: HP dmi.board.version: KBC Version 54.24.00 dmi.chassis.type: 10 dmi.chassis.vendor: HP dmi.ec.firmware.release: 84.36 dmi.modalias: dmi:bvnHP:bvrX81Ver.01.02.01:bd05/23/2025:br2.1:efr84.36:svnHP:pnHPEliteBook8G1a13inchNotebookAIPC:pvrSBKPF,SBKPFV2:rvnHP:rn8E14:rvrKBCVersion54.24.00:cvnHP:ct10:cvr:sku1234567#ABA: dmi.product.family: 103C_5336AN HP EliteBook dmi.product.name: HP EliteBook 8 G1a 13 inch Notebook AI PC dmi.product.sku: 1234567#ABA dmi.product.version: SBKPF,SBKPFV2 dmi.sys.vendor: HP To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2160183/+subscriptions