[Bug 2100292] Re: Noble update: upstream stable patchset 2025-02-27

** Tags removed: verification-needed-noble-linux
** Tags added: verification-done-noble-linux

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2100292

Title:
Noble update: upstream stable patchset 2025-02-27

Status in linux package in Ubuntu:
Invalid
Status in linux source package in Noble:
Fix Committed

Bug description:

SRU Justification

Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:

upstream stable patchset 2025-02-27

Ported from the following upstream stable releases:
v6.6.61, v6.11.8

from git://git.kernel.org/

arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
arm64: dts: rockchip: Remove undocumented supports-emmc property
arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
arm64: dts: imx8mp: correct sdhc ipg clk
firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
ARM: dts: rockchip: fix rk3036 acodec node
ARM: dts: rockchip: drop grf reference from rk3036 hdmi
ARM: dts: rockchip: Fix the spi controller on rk3036
ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
HID: core: zero-initialize the report buffer
platform/x86/amd/pmc: Detect when STB is not available
sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
NFSv3: only use NFS timeout for MOUNT when protocols are compatible
nfs: avoid i_lock contention in nfs_clear_invalid_mapping
security/keys: fix slab-out-of-bounds in key_task_permission
regulator: rtq2208: Fix uninitialized use of regulator_config
net: enetc: set MAC address to the VF net_device
dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
sctp: properly validate chunk size in sctp_sf_ootb()
net: enetc: allocate vf_state during PF probes
can: c_can: fix {rx,tx}_errors statistics
can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails
ice: change q_index variable type to s16 to store -1 value
i40e: fix race condition by adding filter's intermediate sync state
e1000e: Remove Meteor Lake SMBUS workarounds
net: hns3: fix kernel crash when uninstalling driver
net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
netfilter: nf_tables: wait for rcu grace period on net_device removal
netfilter: nf_tables: do not defer rule destruction via call_rcu
virtio_net: Add hash_key_length check
net: arc: fix the device for dma_map_single/dma_unmap_single
net: arc: rockchip: fix emac mdio node support
rxrpc: Fix missing locking causing hanging calls
drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
media: stb0899_algo: initialize cfr before using it
media: dvbdev: prevent the risk of out of memory access
media: dvb_frontend: don't play tricks with underflow values
media: adv7604: prevent underflow condition when reporting colorspace
scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
tools/lib/thermal: Fix sampling handler context ptr
thermal/of: support thermal zones w/o trips subnode
ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
media: ar0521: don't overflow when checking PLL values
media: s5p-jpeg: prevent buffer overflows
media: cx24116: prevent overflows on SNR calculus
media: pulse8-cec: fix data timestamp at pulse8_setup()
media: v4l2-tpg: prevent the risk of a division by zero
media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes
ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
ksmbd: check outstanding simultaneous SMB operations
ksmbd: count all requests in req_running counter
ksmbd: fix broken transfers when exceeding max simultaneous operations
ksmbd: Fix the missing xa_store error check
ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
pwm: imx-tpm: Use correct MODULO value for EPWM mode
rpmsg: glink: Handle rejected intent request better
drm/amdgpu: Adjust debugfs eviction and IB access permissions
drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
drm/amdgpu: Adjust debugfs register access permissions
drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
thermal/drivers/qcom/lmh: Remove false lockdep backtrace
dm cache: correct the number of origin blocks to match the target length
dm cache: fix flushing uninitialized delayed_work on cache_ctr error
dm cache: fix out-of-bounds access to the dirty bitset when resizing
dm cache: optimize dirty bit checking with find_next_bit when resizing
dm cache: fix potential out-of-bounds access on the first resume
dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
nfs: Fix KMSAN warning in decode_getfattr_attrs()
net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
net: vertexcom: mse102x: Fix possible double free of TX skb
mptcp: use sock_kfree_s instead of kfree
arm64/sve: Discard stale CPU state when handling SVE traps
arm64: Kconfig: Make SME depend on BROKEN for now
UBUNTU: [Config] updateconfigs for ARM64_SME
arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
btrfs: reinitialize delayed ref list after deleting it from the list
Revert "wifi: mac80211: fix RCU list iterations"
media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
filemap: Fix bounds checking in filemap_read()
i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
signal: restore the override_rlimit logic
usb: musb: sunxi: Fix accessing an released usb phy
usb: dwc3: fix fault at system suspend if device was already runtime suspended
usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
USB: serial: io_edgeport: fix use after free in debug printk
USB: serial: qcserial: add support for Sierra Wireless EM86xx
USB: serial: option: add Fibocom FG132 0x0112 composition
USB: serial: option: add Quectel RG650V
irqchip/gic-v3: Force propagation of the active state with a read-back
ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
ucounts: fix counter leak in inc_rlimit_get_ucounts()
ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
arm64: dts: rockchip: Designate Turing RK1's system power controller
EDAC/qcom: Make irq configuration optional
arm64: dts: rockchip: Drop regulator-init-microvolt from two boards
net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd tracepoint
net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts
virtio_net: Sync rss config to device when virtnet_probe
media: dvb-core: add missing buffer index check
media: mgb4: protect driver against spectre
media: av7110: fix a spectre vulnerability
media: vivid: fix buffer overwrite when using > 32 buffers
drm/xe: Fix possible exec queue leak in exec IOCTL
drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL
drm/xe: Set mask bits for CCS_MODE register
tpm: Lock TPM chip in tpm_pm_suspend() first
drm/amd/display: Fix brightness level not retained over reboot
drm/imagination: Add a per-file PVR context list
drm/imagination: Break an object reference loop
mptcp: no admin perm to list endpoints
scsi: ufs: core: Start the RTC update work later
KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before running it to avoid spurious interrupts
idpf: avoid vport access in idpf_get_link_ksettings
btrfs: fix the length of reserved qgroup to free
btrfs: fix per-subvolume RO/RW flags with new mount API
clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
clk: qcom: clk-alpha-pll: Fix pll post div mask when width is not set
objpool: fix to make percpu slot allocation more robust
mm/damon/core: avoid overflow in damon_feed_loop_next_input()
mm/damon/core: handle zero {aggregation,ops_update} intervals
mm/damon/core: handle zero schemes apply interval
mm/mlock: set the correct prev on failure
clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks
staging: vchiq_arm: Get the rid off struct vchiq_2835_state
staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation
drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
drm/xe: Move LNL scheduling WA to xe_device.h
drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout
drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout
xtensa: Emulate one-byte cmpxchg
UBUNTU: Upstream stable to v6.6.61, v6.11.8

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2100292/+subscriptions