[Bug 2062951] Re: Random flickering with Intel i915 (Gen9 GPUs in 6th-8th gen CPUs) on Linux 6.8

This bug was fixed in the package linux-hwe-6.8 - 6.8.0-48.48~22.04.1

---------------
linux-hwe-6.8 (6.8.0-48.48~22.04.1) jammy; urgency=medium

* jammy/linux-hwe-6.8: 6.8.0-48.48~22.04.1 -proposed tracker (LP:
#2082436)

[ Ubuntu: 6.8.0-48.48 ]

* noble/linux: 6.8.0-48.48 -proposed tracker (LP: #2082437)
* [SRU][Noble] Bad EPP defaults cause performance regressions on select Intel
CPUs (LP: #2077470)
- x86/cpu/vfm: Update arch/x86/include/asm/intel-family.h
- cpufreq: intel_pstate: Allow model specific EPPs
- cpufreq: intel_pstate: Update default EPPs for Meteor Lake
- cpufreq: intel_pstate: Switch to new Intel CPU model defines
- cpufreq: intel_pstate: Update Meteor Lake EPPs
- cpufreq: intel_pstate: Use Meteor Lake EPPs for Arrow Lake
- cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids
* power: Enable intel_rapl driver (LP: #2078834)
- powercap: intel_rapl: Add support for ArrowLake-H platform
* x86/vmware: Add TDX hypercall support (LP: #2077729)
- x86/vmware: Introduce VMware hypercall API
- x86/vmware: Add TDX hypercall support
* Guest crashes post migration with migrate_misplaced_folio+0x4cc/0x5d0
(LP: #2076866)
- mm/mempolicy: use numa_node_id() instead of cpu_to_node()
- mm/numa_balancing: allow migrate on protnone reference with
MPOL_PREFERRED_MANY policy
- mm: convert folio_estimated_sharers() to folio_likely_mapped_shared()
- mm: factor out the numa mapping rebuilding into a new helper
- mm: support multi-size THP numa balancing
- mm/migrate: make migrate_misplaced_folio() return 0 on success
- mm/migrate: move NUMA hinting fault folio isolation + checks under PTL
- mm: fix possible OOB in numa_rebuild_large_mapping()
* Add 'mm: hold PTL from the first PTE while reclaiming a large folio' to fix
L2 Guest hang during LTP Test (LP: #2076147)
- mm: hold PTL from the first PTE while reclaiming a large folio
* KOP L2 guest fails to boot with 1 core - SMT8 topology (LP: #2070329)
- KVM: PPC: Book3S HV nestedv2: Add DPDES support in helper library for Guest
state buffer
- KVM: PPC: Book3S HV nestedv2: Fix doorbell emulation
* L2 Guest migration: continuously dumping while running NFS guest migration
(LP: #2076406)
- KVM: PPC: Book3S HV: Fix the set_one_reg for MMCR3
- KVM: PPC: Book3S HV: Fix the get_one_reg of SDAR
- KVM: PPC: Book3S HV: Add one-reg interface for DEXCR register
- KVM: PPC: Book3S HV nestedv2: Keep nested guest DEXCR in sync
- KVM: PPC: Book3S HV: Add one-reg interface for HASHKEYR register
- KVM: PPC: Book3S HV nestedv2: Keep nested guest HASHKEYR in sync
- KVM: PPC: Book3S HV: Add one-reg interface for HASHPKEYR register
- KVM: PPC: Book3S HV nestedv2: Keep nested guest HASHPKEYR in sync
* perf build disables tracepoint support (LP: #2076190)
- [Packaging] perf: reenable libtraceevent
* Please backport the more restrictive XSAVES deactivation for Zen1/2 arch
(LP: #2077321)
- x86/CPU/AMD: Improve the erratum 1386 workaround
* Fix alsa scarlett2 driver in 6.8 (LP: #2076402)
- ALSA: scarlett2: Move initialisation code lower in the source
- ALSA: scarlett2: Implement handling of the ACK notification
* rtw89: reset IDMEM mode to prevent download firmware failure (LP: #2077396)
- wifi: rtw89: 885xb: reset IDMEM mode to prevent download firmware failure
* CVE-2024-43858
- jfs: Fix array-index-out-of-bounds in diFree
* CVE-2024-42280
- mISDN: Fix a use after free in hfcmulti_tx()
* CVE-2024-42271
- net/iucv: fix use after free in iucv_sock_close()
* [Ubuntu-24.04] FADump with recommended crash size is making the L1 hang
(LP: #2060039)
- powerpc/64s/radix/kfence: map __kfence_pool at page granularity
* Noble update: upstream stable patchset 2024-09-09 (LP: #2079945)
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- jfs: don't walk off the end of ealist
- fs/ntfs3: Add a check for attr_names and oatbl
- fs/ntfs3: Validate ff offset
- usb: gadget: midi2: Fix incorrect default MIDI2 protocol setup
- ALSA: hda/realtek: Enable headset mic on Positivo SU C1400
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
- arm64: dts: qcom: qrb4210-rb2: switch I2C2 to i2c-gpio
- arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB
- arm64: dts: qcom: sm6350: Disable SS instance in Parkmode for USB
- arm64: dts: qcom: ipq6018: Disable SS instance in Parkmode for USB
- arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB
- ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused
- ALSA: seq: ump: Skip useless ports for static blocks
- filelock: Fix fcntl/close race recovery compat path
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception()
- ALSA: hda/tas2781: Add new quirk for Lenovo Hera2 Laptop
- arm64: dts: qcom: sc7180: Disable SuperSpeed instances in park mode
- arm64: dts: qcom: sc7280: Disable SuperSpeed instances in park mode
- arm64: dts: qcom: qrb2210-rb1: switch I2C2 to i2c-gpio
- arm64: dts: qcom: msm8998: Disable SS instance in Parkmode for USB
- arm64: dts: qcom: ipq8074: Disable SS instance in Parkmode for USB
- arm64: dts: qcom: sdm845: Disable SS instance in Parkmode for USB
- Upstream stable to v6.6.43, v6.9.12
* Noble update: upstream stable patchset 2024-09-02 (LP: #2078304)
- filelock: Remove locks reliably when fcntl/close race is detected
- scsi: core: alua: I/O errors for ALUA state transitions
- scsi: sr: Fix unintentional arithmetic wraparound
- scsi: qedf: Don't process stag work during unload and recovery
- scsi: qedf: Wait for stag work during unload
- scsi: qedf: Set qed_slowpath_params to zero before use
- efi/libstub: zboot.lds: Discard .discard sections
- ACPI: EC: Abort address space access upon error
- ACPI: EC: Avoid returning AE_OK on errors in address space handler
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata
- wifi: mac80211: apply mcast rate only if interface is up
- wifi: mac80211: handle tasklet frames before stopping
- wifi: cfg80211: fix 6 GHz scan request building
- wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup
- wifi: iwlwifi: mvm: remove stale STA link data during restart
- wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd
- wifi: iwlwifi: mvm: handle BA session teardown in RF-kill
- wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option
- wifi: iwlwifi: mvm: Fix scan abort handling with HW rfkill
- wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan()
- selftests: cachestat: Fix build warnings on ppc64
- selftests/openat2: Fix build warnings on ppc64
- selftests/futex: pass _GNU_SOURCE without a value to the compiler
- of/irq: Factor out parsing of interrupt-map parent phandle+args from
of_irq_parse_raw()
- Input: silead - Always support 10 fingers
- net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input()
- ila: block BH in ila_output()
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- null_blk: fix validation of block size
- kconfig: gconf: give a proper initial state to the Save button
- kconfig: remove wrong expr_trans_bool()
- input: Add event code for accessibility key
- input: Add support for "Do Not Disturb"
- HID: Ignore battery for ELAN touchscreens 2F2C and 4116
- NFSv4: Fix memory leak in nfs4_set_security_label
- nfs: propagate readlink errors in nfs_symlink_filler
- nfs: Avoid flushing many pages with NFS_FILE_SYNC
- nfs: don't invalidate dentries on transient errors
- cachefiles: add consistency check for copen/cread
- cachefiles: Set object to close if ondemand_id < 0 in copen
- cachefiles: make on-demand read killable
- fs/file: fix the check in find_next_fd()
- mei: demote client disconnect warning on suspend to debug
- iomap: Fix iomap_adjust_read_range for plen calculation
- drm/exynos: dp: drop driver owner initialization
- drm: panel-orientation-quirks: Add quirk for Aya Neo KUN
- drm/mediatek: Call drm_atomic_helper_shutdown() at shutdown time
- nvme: avoid double free special payload
- nvmet: always initialize cqe.result
- ALSA: hda: cs35l56: Fix lifecycle of codec pointer
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- ALSA: hda/realtek: Support Lenovo Thinkbook 16P Gen 5
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency
- ALSA: hda/realtek: Add more codec ID to no shutup pins list
- spi: Fix OCTAL mode support
- cpumask: limit FORCE_NR_CPUS to just the UP case
- [Config] Remove FORCE_NR_CPUS
- selftests: openvswitch: Set value to nla flags.
- drm/amdgpu: Indicate CU havest info to CP
- ALSA: hda: cs35l56: Select SERIAL_MULTI_INSTANTIATE
- mips: fix compat_sys_lseek syscall
- Input: elantech - fix touchpad state on resume for Lenovo N24
- Input: i8042 - add Ayaneo Kun to i8042 quirk table
- ASoC: rt722-sdca-sdw: add silence detection register as volatile
- Input: xpad - add support for ASUS ROG RAIKIRI PRO
- ASoC: topology: Fix references to freed memory
- ASoC: topology: Do not assign fields that are already set
- bytcr_rt5640 : inverse jack detect for Archos 101 cesium
- ALSA: dmaengine: Synchronize dma channel after drop()
- ASoC: ti: davinci-mcasp: Set min period size using FIFO config
- ASoC: ti: omap-hdmi: Fix too long driver name
- ASoC: SOF: sof-audio: Skip unprepare for in-use widgets on error rollback
- ASoC: rt722-sdca-sdw: add debounce time for type detection
- nvme: fix NVME_NS_DEAC may incorrectly identifying the disk as EXT_LBA.
- Input: ads7846 - use spi_device_id table
- can: kvaser_usb: fix return value for hif_usb_send_regout
- gpio: pca953x: fix pca953x_irq_bus_sync_unlock race
- octeontx2-pf: Fix coverity and klockwork issues in octeon PF driver
- s390/sclp: Fix sclp_init() cleanup on failure
- platform/mellanox: nvsw-sn2201: Add check for platform_device_add_resources
- platform/x86: wireless-hotkey: Add support for LG Airplane Button
- platform/x86: lg-laptop: Remove LGEX0815 hotkey handling
- platform/x86: lg-laptop: Change ACPI device id
- platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB
- btrfs: qgroup: fix quota root leak after quota disable failure
- ibmvnic: Add tx check to prevent skb leak
- ALSA: PCM: Allow resume only for suspended streams
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx
- ALSA: dmaengine_pcm: terminate dmaengine before synchronize
- ASoC: amd: yc: Fix non-functional mic on ASUS M5602RA
- net: usb: qmi_wwan: add Telit FN912 compositions
- net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and
DEV_STATS_ADD()
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- powerpc/eeh: avoid possible crash when edev->pdev changes
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in
again after probe failed
- tee: optee: ffa: Fix missing-field-initializers warning
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- Bluetooth: btnxpuart: Enable Power Save feature on startup
- bluetooth/l2cap: sync sock recv cb and release
- erofs: ensure m_llen is reset to 0 if metadata is invalid
- drm/amd/display: Add refresh rate range check
- drm/amd/display: Account for cursor prefetch BW in DML1 mode support
- drm/amd/display: Fix refresh rate range for some panel
- drm/radeon: check bo_va->bo is non-NULL before using it
- fs: better handle deep ancestor chains in is_subdir()
- wifi: iwlwifi: properly set WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK
- drivers/perf: riscv: Reset the counter to hpmevent mapping while starting
cpus
- riscv: stacktrace: fix usage of ftrace_graph_ret_addr()
- spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices
- ksmbd: return FILE_DEVICE_DISK instead of super magic
- ASoC: SOF: Intel: hda-pcm: Limit the maximum number of periods by
MAX_BDL_ENTRIES
- selftest/timerns: fix clang build failures for abs() calls
- selftests/vDSO: fix clang build errors and warnings
- hfsplus: fix uninit-value in copy_name
- selftests/bpf: Extend tcx tests to cover late tcx_entry release
- spi: mux: set ctlr->bits_per_word_mask
- ALSA: hda: Use imply for suggesting CONFIG_SERIAL_MULTI_INSTANTIATE
- [Config] Update CONFIG_SERIAL_MULTI_INSTANTIATE
- cifs: fix noisy message on copy_file_range
- Bluetooth: L2CAP: Fix deadlock
- of/irq: Disable "interrupt-map" parsing for PASEMI Nemo
- wifi: cfg80211: wext: set ssids=NULL for passive scans
- wifi: mac80211: disable softirqs for queued frame handling
- wifi: iwlwifi: mvm: don't wake up rx_sync_waitq upon RFKILL
- cachefiles: fix slab-use-after-free in fscache_withdraw_volume()
- cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie()
- btrfs: ensure fast fsync waits for ordered extents after a write failure
- PNP: Hide pnp_bus_type from the non-PNP code
- ACPI: AC: Properly notify powermanagement core about changes
- selftests/overlayfs: Fix build error on ppc64
- nvme-fabrics: use reserved tag for reg read/write command
- LoongArch: Fix GMAC's phy-mode definitions in dts
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- vfio: Create vfio_fs_type with inode per device
- vfio/pci: Use unmap_mapping_range()
- parport: amiga: Mark driver struct with __refdata to prevent section
mismatch
- drm: renesas: shmobile: Call drm_atomic_helper_shutdown() at shutdown time
- vfio/pci: Insert full vma on mmap'd MMIO fault
- ALSA: hda: cs35l41: Support Lenovo Thinkbook 16P Gen 5
- ALSA: hda: cs35l41: Support Lenovo Thinkbook 13x Gen 4
- ALSA: hda/realtek: Support Lenovo Thinkbook 13x Gen 4
- wifi: mac80211: Avoid address calculations via out of bounds array indexing
- drm/amd/display: change dram_clock_latency to 34us for dcn35
- closures: Change BUG_ON() to WARN_ON()
- ASoC: codecs: ES8326: Solve headphone detection issue
- ASoC: Intel: avs: Fix route override
- net: mvpp2: fill-in dev_port attribute
- btrfs: scrub: handle RST lookup error correctly
- clk: qcom: apss-ipq-pll: remove 'config_ctl_hi_val' from Stromer pll configs
- drm/amd/display: Update efficiency bandwidth for dcn351
- drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport
- btrfs: fix uninitialized return value in the ref-verify tool
- spi: davinci: Unset POWERDOWN bit when releasing resources
- mm: page_ref: remove folio_try_get_rcu()
- ALSA: hda: cs35l41: Fix swapped l/r audio channels for Lenovo ThinBook 13x
Gen4
- netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume()
- Upstream stable to v6.6.42, v6.9.11
* CVE-2024-27022
- Revert "Revert "fork: defer linking file vma until vma is fully
initialized""
* UBSAN: array-index-out-of-bounds in /build/linux-Z1RxaK/linux-
6.8.0/drivers/gpu/drm/amd/amdgpu/../pm/powerplay/hwmgr/processpptables.c:124
9:61 (LP: #2078041)
- drm/amdgpu/pptable: convert some variable sized arrays to [] style
- drm/amdgpu: convert some variable sized arrays to [] style
- drm/amdgpu/pptable: Fix UBSAN array-index-out-of-bounds
* alsa: Headphone and Speaker couldn't output sound intermittently
(LP: #2077690)
- ALSA: hda/realtek - Fixed ALC256 headphone no sound
- ALSA: hda/realtek - FIxed ALC285 headphone no sound
* Fix ethernet performance on JSL and EHL (LP: #2077858)
- intel_idle: Disable promotion to C1E on Jasper Lake and Elkhart Lake
* Noble update: upstream stable patchset 2024-08-29 (LP: #2078289)
- Revert "usb: xhci: prevent potential failure in handle_tx_event() for
Transfer events without TRB"
- Compiler Attributes: Add __uninitialized macro
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- scsi: ufs: core: Fix ufshcd_clear_cmd racing issue
- scsi: ufs: core: Fix ufshcd_abort_one racing issue
- vfio/pci: Init the count variable in collecting hot-reset devices
- cachefiles: propagate errors from vfs_getxattr() to avoid infinite loop
- cachefiles: stop sending new request when dropping object
- cachefiles: cancel all requests for the object that is being dropped
- cachefiles: wait for ondemand_object_worker to finish when dropping object
- cachefiles: cyclic allocation of msg_id to avoid reuse
- cachefiles: add missing lock protection when polling
- dsa: lan9303: Fix mapping between DSA port number and PHY address
- filelock: fix potential use-after-free in posix_lock_inode
- fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading
- vfs: don't mod negative dentry count when on shrinker list
- net: bcmasp: Fix error code in probe()
- tcp: fix incorrect undo caused by DSACK of TLP retransmit
- bpf: Fix too early release of tcx_entry
- net: phy: microchip: lan87xx: reinit PHY after cable test
- skmsg: Skip zero length skb in sk_msg_recvmsg
- octeontx2-af: Fix incorrect value output on error path in
rvu_check_rsrc_availability()
- net: fix rc7's __skb_datagram_iter()
- i40e: Fix XDP program unloading while removing the driver
- net: ethernet: lantiq_etop: fix double free in detach
- bpf: fix order of args in call to bpf_map_kvcalloc
- bpf: make timer data struct more generic
- bpf: replace bpf_timer_init with a generic helper
- bpf: Fail bpf_timer_cancel when callback is being cancelled
- net: ethernet: mtk-star-emac: set mac_managed_pm when probing
- ppp: reject claimed-as-LCP but actually malformed packets
- ethtool: netlink: do not return SQI value if link is down
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- net, sunrpc: Remap EPERM in case of connection failure in
xs_tcp_setup_socket
- s390: Mark psw in __load_psw_mask() as __unitialized
- arm64: dts: qcom: sc8180x: Fix LLCC reg property again
- firmware: cs_dsp: Fix overflow checking of wmfw header
- firmware: cs_dsp: Return error if block header overflows file
- firmware: cs_dsp: Validate payload length before processing block
- firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
- ASoC: SOF: Intel: hda: fix null deref on system suspend entry
- firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files
- ARM: davinci: Convert comma to semicolon
- octeontx2-af: replace cpt slot with lf id on reg write
- octeontx2-af: fix a issue with cpt_lf_alloc mailbox
- octeontx2-af: fix detection of IP layer
- octeontx2-af: fix issue with IPv6 ext match for RSS
- octeontx2-af: fix issue with IPv4 match for RSS
- cifs: fix setting SecurityFlags to true
- Revert "sched/fair: Make sure to try to detach at least one movable task"
- tcp: avoid too many retransmit packets
- net: ks8851: Fix deadlock with the SPI chip variant
- net: ks8851: Fix potential TX stall after interface reopen
- USB: serial: option: add Telit generic core-dump composition
- USB: serial: option: add Telit FN912 rmnet compositions
- USB: serial: option: add Fibocom FM350-GL
- USB: serial: option: add support for Foxconn T99W651
- USB: serial: option: add Netprisma LCUK54 series modules
- USB: serial: option: add Rolling RW350-GL variants
- USB: serial: mos7840: fix crash on resume
- USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
- usb: dwc3: pci: add support for the Intel Panther Lake
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the
descriptor
- misc: microchip: pci1xxxx: Fix return value of nvmem callbacks
- hpet: Support 32-bit userspace
- xhci: always resume roothubs if xHC was reset during resume
- s390/mm: Add NULL pointer check to crst_table_free() base_crst_free()
- mm: vmalloc: check if a hash-index is in cpu_possible_mask
- mm/filemap: skip to create PMD-sized page cache if needed
- mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray
- ksmbd: discard write access to the directory open
- iio: trigger: Fix condition for own trigger
- arm64: dts: qcom: sa8775p: Correct IRQ number of EL2 non-secure physical
timer
- arm64: dts: qcom: sc8280xp-x13s: fix touchscreen power on
- nvmem: rmem: Fix return value of rmem_read()
- nvmem: meson-efuse: Fix return value of nvmem callbacks
- nvmem: core: only change name to fram for current attribute
- platform/x86: toshiba_acpi: Fix array out-of-bounds access
- tty: serial: ma35d1: Add a NULL check for of_node
- ALSA: hda/realtek: add quirk for Clevo V5[46]0TU
- ALSA: hda/realtek: Enable Mute LED on HP 250 G7
- ALSA: hda/realtek: Limit mic boost on VAIO PRO PX
- Fix userfaultfd_api to return EINVAL as expected
- pmdomain: qcom: rpmhpd: Skip retention level for Power Domains
- libceph: fix race between delayed_work() and ceph_monc_stop()
- ACPI: processor_idle: Fix invalid comparison with insertion sort for latency
- cpufreq: ACPI: Mark boost policy as enabled when setting boost
- cpufreq: Allow drivers to advertise boost enabled
- wireguard: selftests: use acpi=off instead of -no-acpi for recent QEMU
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- wireguard: queueing: annotate intentional data race in cpu round robin
- wireguard: send: annotate intentional data race in checking empty queue
- misc: fastrpc: Fix DSP capabilities request
- misc: fastrpc: Avoid updating PD type for capability request
- misc: fastrpc: Copy the complete capability structure to user
- misc: fastrpc: Fix memory leak in audio daemon attach operation
- misc: fastrpc: Fix ownership reassignment of remote heap
- misc: fastrpc: Restrict untrusted app to attach to privileged PD
- mm/shmem: disable PMD-sized page cache if needed
- mm/damon/core: merge regions aggressively when max_nr_regions is unmet
- selftests/net: fix gro.c compilation failure due to non-existent
opt_ipproto_off
- ext4: avoid ptr null pointer dereference
- sched: Move psi_account_irqtime() out of update_rq_clock_task() hotpath
- i2c: rcar: bring hardware to known state when probing
- i2c: mark HostNotify target address as used
- i2c: rcar: ensure Gen3+ reset does not disturb local targets
- i2c: testunit: avoid re-issued work after read message
- i2c: rcar: clear NO_RXDMA flag after resetting
- x86/bhi: Avoid warning in #DB handler due to BHI mitigation
- kbuild: Make ld-version.sh more robust against version string changes
- spi: axi-spi-engine: fix sleep calculation
- minixfs: Fix minixfs_rename with HIGHMEM
- bpf: Defer work in bpf_timer_cancel_and_free
- netfilter: nf_tables: prefer nft_chain_validate
- arm64: dts: qcom: x1e80100-*: Allocate some CMA buffers
- arm64: dts: qcom: sm6115: add iommu for sdhc_1
- arm64: dts: qcom: qdu1000: Fix LLCC reg property
- net: ethtool: Fix RSS setting
- nilfs2: fix kernel bug on rename operation of broken directory
- cachestat: do not flush stats in recency check
- mm: fix crashes from deferred split racing folio migration
- nvmem: core: limit cell sysfs permissions to main attribute ones
- serial: imx: ensure RTS signal is not left active after shutdown
- mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE
- mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length
- mm/readahead: limit page cache size in page_cache_ra_order()
- Revert "dt-bindings: cache: qcom,llcc: correct QDU1000 reg entries"
- sched/deadline: Fix task_struct reference leak
- Upstream stable to v6.6.40, v6.6.41, v6.9.10
* [SRU][HPE 24.04] Intel FVL NIC FW flash fails with inbox driver, causing
driver not detected (LP: #2076675) // Noble update: upstream stable patchset
2024-08-29 (LP: #2078289)
- i40e: fix: remove needless retries of NVM update
* CVE-2024-41022
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
* Deadlock occurs while suspending md raid (LP: #2073695)
- md: change the return value type of md_write_start to void
- md: fix deadlock between mddev_suspend and flush bio
* Lenovo X12 Detachable Gen 2 unresponsive under light load (LP: #2076361)
- drm/i915: Enable Wa_16019325821
- drm/i915/guc: Add support for w/a KLVs
- drm/i915/guc: Enable Wa_14019159160
* Regression: unable to reach low idle states on Tiger Lake (LP: #2072679)
- SAUCE: PCI: ASPM: Allow OS to configure ASPM where BIOS is incapable of
- SAUCE: PCI: vmd: Let OS control ASPM for devices under VMD domain
* Noble update: upstream stable patchset 2024-08-22 (LP: #2077600)
- locking/mutex: Introduce devm_mutex_init()
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- crypto: hisilicon/debugfs - Fix debugfs uninit process issue
- drm/lima: fix shared irq handling on driver remove
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- media: dvb: as102-fe: Fix as10x_register_addr packing
- media: dvb-usb: dib0700_devices: Add missing release_firmware()
- IB/core: Implement a limit on UMAD receive List
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- selftests/bpf: adjust dummy_st_ops_success to detect additional error
- selftests/bpf: do not pass NULL for non-nullable params in dummy_st_ops
- selftests/bpf: dummy_st_ops should reject 0 for non-nullable params
- RISC-V: KVM: Fix the initial sample period value
- crypto: aead,cipher - zeroize key buffer after use
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- drm/amdgpu: Fix uninitialized variable warnings
- drm/amdgpu: Initialize timestamp for some legacy SOCs
- drm/amd/display: Check index msg_id before read or write
- drm/amd/display: Check pipe offset before setting vblank
- drm/amd/display: Skip finding free audio for unknown engine_id
- drm/amd/display: Fix uninitialized variables in DM
- drm/amdgpu: fix uninitialized scalar variable warning
- drm/amdgpu: fix the warning about the expression (int)size - len
- media: dw2102: Don't translate i2c read into write
- riscv: Apply SiFive CIP-1200 workaround to single-ASID sfence.vma
- sctp: prefer struct_size over open coded arithmetic
- firmware: dmi: Stop decoding on broken entry
- Input: ff-core - prefer struct_size over open coded arithmetic
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: mt76: mt7996: add sanity checks for background radar trigger
- thermal/drivers/mediatek/lvts_thermal: Check NULL ptr on lvts_data
- media: dvb-frontends: tda18271c2dd: Remove casting during div
- media: s2255: Use refcount_t instead of atomic_t for num_channels
- media: dvb-frontends: tda10048: Fix integer overflow
- i2c: i801: Annotate apanel_addr as __ro_after_init
- powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
- orangefs: fix out-of-bounds fsid access
- kunit: Fix timeout message
- powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
- selftests/net: fix uninitialized variables
- igc: fix a log entry using uninitialized netdev
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- serial: imx: Raise TX trigger level to 8
- jffs2: Fix potential illegal address access in jffs2_free_inode
- s390/pkey: Wipe sensitive data on failure
- btrfs: scrub: initialize ret in scrub_simple_mirror() to fix compilation
warning
- cdrom: rearrange last_media_change check to avoid unintentional overflow
- tools/power turbostat: Remember global max_die_id
- vhost: Use virtqueue mutex for swapping worker
- vhost: Release worker mutex during flushes
- vhost_task: Handle SIGKILL by flushing work and exiting
- mac802154: fix time calculation in ieee802154_configure_durations()
- net: phy: phy_device: Fix PHY LED blinking code comment
- UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
- net/mlx5: E-switch, Create ingress ACL when needed
- net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup()
- Bluetooth: hci_event: Fix setting of unicast qos interval
- Bluetooth: Ignore too large handle values in BIG
- Bluetooth: ISO: Check socket flag instead of hcon
- bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX
- KVM: s390: fix LPSWEY handling
- e1000e: Fix S0ix residency on corporate systems
- gpiolib: of: fix lookup quirk for MIPS Lantiq
- net: allow skb_datagram_iter to be called from any context
- net: txgbe: initialize num_q_vectors for MSI/INTx interrupts
- net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from
__netif_rx()
- gpio: mmio: do not calculate bgpio_bits via "ngpios"
- wifi: wilc1000: fix ies_len type in connect path
- riscv: kexec: Avoid deadlock in kexec crash path
- netfilter: nf_tables: unconditionally flush pending work before notifier
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- selftests: fix OOM in msg_zerocopy selftest
- selftests: make order checking verbose in msg_zerocopy selftest
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI
file
- gpiolib: of: add polarity quirk for TSC2005
- cpu: Fix broken cmdline "nosmp" and "maxcpus=0"
- platform/x86: toshiba_acpi: Fix quickstart quirk handling
- Revert "igc: fix a log entry using uninitialized netdev"
- nilfs2: fix inode number range checks
- nilfs2: add missing check for inode numbers on directory entries
- mm: optimize the redundant loop of mm_update_owner_next()
- mm: avoid overflows in dirty throttling logic
- btrfs: fix adding block group to a reclaim list and the unused list during
reclaim
- scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add()
- Bluetooth: hci_bcm4377: Fix msgid release
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
- fsnotify: Do not generate events for O_PATH file descriptors
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(),
again"
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- drm/amdgpu/atomfirmware: silence UBSAN warning
- drm: panel-orientation-quirks: Add quirk for Valve Galileo
- clk: qcom: gcc-ipq9574: Add BRANCH_HALT_VOTED flag
- clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common
- powerpc/pseries: Fix scv instruction crash with kexec
- powerpc/64s: Fix unnecessary copy to 0 when kernel is booted at address 0
- mtd: rawnand: Ensure ECC configuration is propagated to upper layers
- mtd: rawnand: Fix the nand_read_data_op() early check
- mtd: rawnand: Bypass a couple of sanity checks during NAND identification
- mtd: rawnand: rockchip: ensure NVDDR timings are rejected
- net: stmmac: dwmac-qcom-ethqos: fix error array size
- arm64: dts: rockchip: Fix the DCDC_REG2 minimum voltage on Quartz64 Model B
- media: dw2102: fix a potential buffer overflow
- clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents
- clk: qcom: clk-alpha-pll: set ALPHA_EN bit for Stromer Plus PLLs
- clk: mediatek: mt8183: Only enable runtime PM on mt8183-mfgcfg
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- fs/ntfs3: Mark volume as dirty if xattr is broken
- ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
- vhost-scsi: Handle vhost_vq_work_queue failures for events
- nvme-multipath: find NUMA path only for online numa-node
- dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails
- connector: Fix invalid conversion in cn_proc.h
- nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
- regmap-i2c: Subtract reg size from max_write
- platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6"
tablet
- platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- kbuild: fix short log for AS in link-vmlinux.sh
- nfc/nci: Add the inconsistency check between the input data length and count
- spi: cadence: Ensure data lines set to low during dummy-cycle period
- ALSA: ump: Set default protocol when not given explicitly
- drm/amdgpu: silence UBSAN warning
- null_blk: Do not allow runt zone with zone capacity smaller then zone size
- nilfs2: fix incorrect inode allocation from reserved inodes
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- net: dql: Avoid calling BUG() when WARN() is enough
- drm/xe: Add outer runtime_pm protection to xe_live_ktest@xe_dma_buf
- bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable
- drm/amdgpu: fix double free err_addr pointer warnings
- drm/amd/display: Fix overlapping copy within dml_core_mode_programming
- drm/amd/display: update pipe topology log to support subvp
- drm/amd/display: Do not return negative stream id for array
- drm/amd/display: ASSERT when failing to find index by plane/stream id
- usb: xhci: prevent potential failure in handle_tx_event() for Transfer
events without TRB
- media: i2c: st-mipid02: Use the correct div function
- media: tc358746: Use the correct div_ function
- crypto: hisilicon/sec2 - fix for register offset
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- s390/pkey: Wipe copies of clear-key structures on failure
- s390/pkey: Wipe copies of protected- and secure-keys
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- wifi: mac80211: fix BSS_CHANGED_UNSOL_BCAST_PROBE_RESP
- net: txgbe: remove separate irq request for MSI and INTx
- net: txgbe: add extra handle for MSI/INTx into thread irq handle
- net: txgbe: free isb resources at the right time
- btrfs: always do the basic checks for btrfs_qgroup_inherit structure
- net: phy: aquantia: add missing include guards
- drm/fbdev-generic: Fix framebuffer on big endian devices
- net: stmmac: enable HW-accelerated VLAN stripping for gmac4 only
- net: rswitch: Avoid use-after-free in rswitch_poll()
- ice: use proper macro for testing bit
- drm/xe/mcr: Avoid clobbering DSS steering
- tcp: Don't flag tcp_sk(sk)->rx_opt.saw_unknown for TCP AO.
- btrfs: zoned: fix calc_available_free_space() for zoned mode
- btrfs: fix folio refcount in __alloc_dummy_extent_buffer()
- Bluetooth: Add quirk to ignore reserved PHY bits in LE Extended Adv Report
- drm/xe: fix error handling in xe_migrate_update_pgtables
- drm/ttm: Always take the bo delayed cleanup path for imported bos
- fs: don't misleadingly warn during thaw operations
- drm/amdkfd: Let VRAM allocations go to GTT domain on small APUs
- drm/amdgpu: correct hbm field in boot status
- Upstream stable to v6.6.38, v6.6.39, v6.9.9
* Panels show garbage or flickering when i915.psr2 enabled (LP: #2069993)
- SAUCE: drm/i915/display/psr: add a psr2 disable quirk table
- SAUCE: drm/i915/display/psr: disable psr2 for panel_0x4d_0x10_0x93_0x15
- SAUCE: drm/i915/display/psr: disable psr2 for panel_0x30_0xe4_0x8b_0x07
- SAUCE: drm/i915/display/psr: disable psr2 for panel_0x30_0xe4_0x78_0x07
- SAUCE: drm/i915/display/psr: disable psr2 for panel_0x30_0xe4_0x8c_0x07
- SAUCE: drm/i915/display/psr: disable psr2 for panel_0x06_0xaf_0x9a_0xf9
- SAUCE: drm/i915/display/psr: disable psr2 for panel_0x4d_0x10_0x8f_0x15
- SAUCE: drm/i915/display/psr: disable psr2 for panel_0x06_0xaf_0xa3_0xc3
* Random flickering with Intel i915 (Gen9 GPUs in 6th-8th gen CPUs) on Linux
6.8 (LP: #2062951)
- SAUCE: iommu/intel: disable DMAR for SKL integrated gfx
* [SRU][22.04.5]: mpi3mr driver update (LP: #2073583)
- scsi: mpi3mr: HDB allocation and posting for hardware and firmware buffers
- scsi: mpi3mr: Trigger support
- scsi: mpi3mr: Add ioctl support for HDB
- scsi: mpi3mr: Support PCI Error Recovery callback handlers
- scsi: mpi3mr: Prevent PCI writes from driver during PCI error recovery
- scsi: mpi3mr: Driver version update
* Fix power consumption while using HW accelerated video decode on AMD
platforms (LP: #2073282)
- drm/amdgpu/vcn: identify unified queue in sw init
- drm/amdgpu/vcn: not pause dpg for unified queue
* Noble update: upstream stable patchset 2024-08-09 (LP: #2076435)
- usb: typec: ucsi: Never send a lone connector change ack
- usb: typec: ucsi: Ack also failed Get Error commands
- Input: ili210x - fix ili251x_read_touch_data() return value
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins
- pinctrl: rockchip: use dedicated pinctrl type for RK3328
- pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set
- MIPS: pci: lantiq: restore reset gpio polarity
- ASoC: rockchip: i2s-tdm: Fix trcm mode by setting clock on right mclk
- ASoC: mediatek: mt8183-da7219-max98357: Fix kcontrol name collision
- ASoC: atmel: atmel-classd: Re-add dai_link->platform to fix card init
- workqueue: Increase worker desc's length to 32
- ASoC: q6apm-lpass-dai: close graph on prepare errors
- bpf: Add missed var_off setting in set_sext32_default_val()
- bpf: Add missed var_off setting in coerce_subreg_to_size_sx()
- s390/pci: Add missing virt_to_phys() for directed DIBV
- ASoC: amd: acp: add a null check for chip_pdev structure
- ASoC: amd: acp: remove i2s configuration check in acp_i2s_probe()
- ASoC: fsl-asoc-card: set priv->pdev before using it
- net: dsa: microchip: fix initial port flush problem
- openvswitch: get related ct labels from its master if it is not confirmed
- mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems
- ibmvnic: Free any outstanding tx skbs during scrq reset
- net: phy: micrel: add Microchip KSZ 9477 to the device table
- net: dsa: microchip: use collision based back pressure mode
- ice: Rebuild TC queues on VSI queue reconfiguration
- xdp: Remove WARN() from __xdp_reg_mem_model()
- netfilter: fix undefined reference to 'netfilter_lwtunnel_*' when
CONFIG_SYSCTL=n
- btrfs: use NOFS context when getting inodes during logging and log replay
- Fix race for duplicate reqsk on identical SYN
- ALSA: seq: Fix missing channel at encoding RPN/NRPN MIDI2 messages
- net: dsa: microchip: fix wrong register write when masking interrupt
- sparc: fix old compat_sys_select()
- sparc: fix compat recv/recvfrom syscalls
- parisc: use correct compat recv/recvfrom syscalls
- powerpc: restore some missing spu syscalls
- tcp: fix tcp_rcv_fastopen_synack() to enter TCP_CA_Loss for failed TFO
- ALSA: seq: Fix missing MSB in MIDI2 SPP conversion
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data
registers
- net: mana: Fix possible double free in error handling path
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- vduse: validate block features only with block devices
- vduse: Temporarily fail if control queue feature requested
- x86/fpu: Fix AMD X86_BUG_FXSAVE_LEAK fixup
- mtd: partitions: redboot: Added conversion of operands to a larger type
- wifi: ieee80211: check for NULL in ieee80211_mle_size_ok()
- bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
- RDMA/restrack: Fix potential invalid address access
- net/iucv: Avoid explicit cpumask var allocation on stack
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- crypto: ecdh - explicitly zeroize private_key
- ALSA: emux: improve patch ioctl data validation
- media: dvbdev: Initialize sbuf
- irqchip/loongson: Select GENERIC_IRQ_EFFECTIVE_AFF_MASK if SMP for
IRQ_LOONGARCH_CPU
- soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message
- gfs2: Fix NULL pointer dereference in gfs2_log_flush
- drm/radeon/radeon_display: Decrease the size of allocated memory
- nvme: fixup comment for nvme RDMA Provider Type
- drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA
- gpio: davinci: Validate the obtained number of IRQs
- RISC-V: fix vector insn load/store width mask
- drm/amdgpu: Fix pci state save during mode-1 reset
- riscv: stacktrace: convert arch_stack_walk() to noinstr
- gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1)
- randomize_kstack: Remove non-functional per-arch entropy filtering
- x86: stop playing stack games in profile_pc()
- parisc: use generic sys_fanotify_mark implementation
- Revert "MIPS: pci: lantiq: restore reset gpio polarity"
- pinctrl: qcom: spmi-gpio: drop broken pm8008 support
- ocfs2: fix DIO failure due to insufficient transaction credits
- nfs: drop the incorrect assertion in nfs_swap_rw()
- mm: fix incorrect vbq reference in purge_fragmented_block
- mmc: sdhci-pci-o2micro: Convert PCIBIOS_* return codes to errnos
- mmc: sdhci-brcmstb: check R1_STATUS for erase/trim/discard
- mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos
- mmc: sdhci: Do not invert write-protect twice
- mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro()
- iio: xilinx-ams: Don't include ams_ctrl_channels in scan_mask
- counter: ti-eqep: enable clock at probe
- kbuild: doc: Update default INSTALL_MOD_DIR from extra to updates
- kbuild: Fix build target deb-pkg: ln: failed to create hard link
- i2c: testunit: don't erase registers after STOP
- i2c: testunit: discard write requests while old command is running
- ata: libata-core: Fix null pointer dereference on error
- ata,scsi: libata-core: Do not leak memory for ata_port struct members
- iio: adc: ad7266: Fix variable checking bug
- iio: accel: fxls8962af: select IIO_BUFFER & IIO_KFIFO_BUF
- iio: chemical: bme680: Fix pressure value output
- iio: chemical: bme680: Fix calibration data variable
- iio: chemical: bme680: Fix overflows in compensate() functions
- iio: chemical: bme680: Fix sensor data read operation
- net: usb: ax88179_178a: improve link status logs
- usb: gadget: printer: SS+ support
- usb: gadget: printer: fix races against disable
- usb: musb: da8xx: fix a resource leak in probe()
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to
avoid deadlock
- usb: gadget: aspeed_udc: fix device address configuration
- usb: typec: ucsi: glink: fix child node release in probe function
- usb: ucsi: stm32: fix command completion handling
- usb: dwc3: core: Add DWC31 version 2.00a controller
- usb: dwc3: core: Workaround for CSR read timeout
- Revert "serial: core: only stop transmit when HW fifo is empty"
- serial: 8250_omap: Implementation of Errata i2310
- serial: imx: set receiver level before starting uart
- serial: core: introduce uart_port_tx_limited_flags()
- serial: bcm63xx-uart: fix tx after conversion to uart_port_tx_limited()
- tty: mcf: MCF54418 has 10 UARTS
- net: can: j1939: Initialize unused data in j1939_send_one()
- net: can: j1939: recover socket queue on CAN bus error during BAM
transmission
- net: can: j1939: enhanced error handling for tightly received RTS messages
in xtp_rx_rts_session_new
- PCI/MSI: Fix UAF in msi_capability_init
- cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing
- irqchip/loongson-eiointc: Use early_cpu_to_node() instead of cpu_to_node()
- cpu/hotplug: Fix dynstate assignment in __cpuhp_setup_state_cpuslocked()
- irqchip/loongson-liointc: Set different ISRs for different cores
- kbuild: Install dtb files as 0644 in Makefile.dtbinst
- sh: rework sync_file_range ABI
- btrfs: zoned: fix initial free space detection
- csky, hexagon: fix broken sys_sync_file_range
- hexagon: fix fadvise64_64 calling conventions
- drm/drm_file: Fix pid refcounting race
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- drm/fbdev-dma: Only set smem_start is enable per module option
- drm/amdgpu: avoid using null object of framebuffer
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- drm/amd/display: Send DP_TOTAL_LTTPR_CNT during detection if LTTPR is
present
- drm/amdgpu/atomfirmware: fix parsing of vram_info
- batman-adv: Don't accept TT entries for out-of-spec VIDs
- can: mcp251xfd: fix infinite loop when xmit fails
- ata: ahci: Clean up sysfs file on error
- ata: libata-core: Fix double free on error
- ftruncate: pass a signed offset
- syscalls: fix compat_sys_io_pgetevents_time64 usage
- syscalls: fix sys_fanotify_mark prototype
- Revert "cpufreq: amd-pstate: Fix the inconsistency in max frequency units"
- mm/page_alloc: Separate THP PCP into movable and non-movable categories
- arm64: dts: rockchip: Fix SD NAND and eMMC init on rk3308-rock-pi-s
- arm64: dts: rockchip: Rename LED related pinctrl nodes on rk3308-rock-pi-s
- arm64: dts: rockchip: Fix the value of `dlg,jack-det-rate` mismatch on
rk3399-gru
- ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node
- arm64: dts: rockchip: make poweroff(8) work on Radxa ROCK 5A
- arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E
- arm64: dts: rockchip: Add sound-dai-cells for RK3368
- cxl/region: Move cxl_dpa_to_region() work to the region driver
- cxl/region: Avoid null pointer dereference in region lookup
- cxl/region: check interleave capability
- serial: imx: only set receiver level if it is zero
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset()
- pwm: stm32: Improve precision of calculation in .apply()
- pwm: stm32: Fix for settings using period > UINT32_MAX
- pwm: stm32: Calculate prescaler with a division instead of a loop
- pwm: stm32: Refuse too small period requests
- ASoC: cs42l43: Increase default type detect time and button delay
- ASoC: amd: acp: move chip->flag variable assignment
- bonding: fix incorrect software timestamping report
- mlxsw: pci: Fix driver initialization with Spectrum-4
- vxlan: Pull inner IP header in vxlan_xmit_one().
- ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link
- af_unix: Stop recv(MSG_PEEK) at consumed OOB skb.
- af_unix: Don't stop recv(MSG_DONTWAIT) if consumed OOB skb is at the head.
- af_unix: Don't stop recv() at consumed ex-OOB skb.
- af_unix: Fix wrong ioctl(SIOCATMARK) when consumed OOB skb is at the head.
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: Take return from set_memory_rox() into account with
bpf_jit_binary_lock_ro()
- drm/xe: Fix potential integer overflow in page size calculation
- drm/xe: Add a NULL check in xe_ttm_stolen_mgr_init
- drm/amd/display: correct hostvm flag
- drm/amd/display: Skip pipe if the pipe idx not set properly
- bpf: Add a check for struct bpf_fib_lookup size
- drm/xe/xe_devcoredump: Check NULL before assignments
- iommu/arm-smmu-v3: Do not allow a SVA domain to be set on the wrong PASID
- evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509
- drm/xe: Check pat.ops before dumping PAT settings
- nvmet: do not return 'reserved' for empty TSAS values
- nvmet: make 'tsas' attribute idempotent for RDMA
- iommu/amd: Fix GT feature enablement again
- gpiolib: cdev: Ignore reconfiguration without direction
- kasan: fix bad call to unpoison_slab_object
- mm/memory: don't require head page for do_set_pmd()
- SUNRPC: Fix backchannel reply, again
- Revert "usb: gadget: u_ether: Re-attach netif device to mirror detachment"
- Revert "usb: gadget: u_ether: Replace netif_stop_queue with
netif_device_detach"
- tty: serial: 8250: Fix port count mismatch with the device
- tty: mxser: Remove __counted_by from mxser_board.ports[]
- nvmet-fc: Remove __counted_by from nvmet_fc_tgt_queue.fod[]
- ata: libata-core: Add ATA_HORKAGE_NOLPM for all Crucial BX SSD1 models
- bcachefs: Fix sb_field_downgrade validation
- bcachefs: Fix sb-downgrade validation
- bcachefs: Fix bch2_sb_downgrade_update()
- bcachefs: Fix setting of downgrade recovery passes/errors
- bcachefs: btree_gc can now handle unknown btrees
- pwm: stm32: Fix calculation of prescaler
- pwm: stm32: Fix error message to not describe the previous error path
- cxl/region: Convert cxl_pmem_region_alloc to scope-based resource management
- cxl/mem: Fix no cxl_nvd during pmem region auto-assembling
- arm64: dts: rockchip: Fix the i2c address of es8316 on Cool Pi 4B
- netfs: Fix netfs_page_mkwrite() to check folio->mapping is valid
- netfs: Fix netfs_page_mkwrite() to flush conflicting data, not wait
- Upstream stable to v6.6.37, v6.9.8
* [UBUNTU 22.04] s390/cpum_cf: make crypto counters upward compatible
(LP: #2074380)
- s390/cpum_cf: make crypto counters upward compatible across machine types
* CVE-2024-45016
- netem: fix return value if duplicate enqueue fails

-- Stefan Bader <stefan.bader@canonical.com> Mon, 07 Oct 2024 11:56:42
+0200

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2062951

Title:
Random flickering with Intel i915 (Gen9 GPUs in 6th-8th gen CPUs) on
Linux 6.8

Status in Linux:
New
Status in linux package in Ubuntu:
Fix Released
Status in linux-hwe-6.8 package in Ubuntu:
Invalid
Status in linux source package in Jammy:
Invalid
Status in linux-hwe-6.8 source package in Jammy:
Fix Released
Status in linux source package in Noble:
Fix Released
Status in linux-hwe-6.8 source package in Noble:
Invalid
Status in linux source package in Oracular:
Fix Released
Status in linux-hwe-6.8 source package in Oracular:
Invalid

Bug description:
SRU Justification

[Impact]
The flickering predominantly occurs when the mouse cursor is in the bottom quarter of the screen and stops when the cursor leaves this area.
Extensive testing across various kernel versions revealed that the issue became apparent from kernel version 6.8.0 onward, correlating with the mentioned configuration changes, CONFIG_INTEL_IOMMU_DEFAULT_ON and CONFIG_INTEL_IOMMU_SCALABLE_MODE_DEFAULT_ON.
The problem persists in the latest drm tip.

[Fix]
As an immediate workaround, adding 'intel_iommu=igfx_off' to the kernel command line has been found to effectively eliminate the flickering issue.
This patch proposes the same behavior as 'intel_iommu=igfx_off' and apply the rule to all Intel SKL GPU IDs.

[Test]
1. Boot up to desktop with 6.8.0-x kernels
2. Moving cursor around the desktop
3. There should be no flicker while cursor is moving

[Where problems could occur]
For virtualized environments using hardware-assisted virtualization for graphics (such as VFIO or mediated pass-through), disabling IOMMU for graphics could either disable these features or reduce their security and efficiency.
Usually, users pass the 'intel_iommu=on' by themselves when they are using related features. So, the impact of this change is minimal.

===========

After migrating Mantic 23.10 install to Linux 6.8.0, I am experiencing heavy flickering at random.
It happens after a moderate to heavy on screen activity like window switching, scrolling etc.
It never happens when playing video or when there is no interaction using keyboard/pointer.

It tend to happen when the mouse cursor is in the bottom quarter of the screen and stops immediately when the cursor leaves that screen region.
Around the same time the following appears in kernel log:
kernel: i915 0000:00:02.0: [drm] *ERROR* CPU pipe A FIFO underrun

Happens on both X11 and Wayland on both KDE plasma and Mate (though
less).

I first encountered the issue with Linux 6.8.0-11 and it still happens with Ubunutu's 6.8.0-28 and Mainline 6.8.7.
Kernels 6.6, 6.5, 6.1 and older did not have that issue.

Hardware is: Dell XPS 9350, Vendor Intel, Driver i915, Skylake GT2 [HD Graphics 520]
Software: Ubuntu 23.10, KDE Plasma 5.27.10 / Mate 1.26

Attaching kernel log for 6.8.0-28

To manage notifications about this bug go to:
https://bugs.launchpad.net/linux/+bug/2062951/+subscriptions