** Tags added: kernel-daily-bug
--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2137586
Title:
Noble update: upstream stable patchset 2026-01-06
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Noble:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2026-01-06
Ported from the following upstream stable releases:
v6.6.103, v6.12.43, v6.12.44
from git://git.kernel.org/
io_uring: don't use int for ABI
ALSA: usb-audio: Validate UAC3 power domain descriptors, too
ALSA: usb-audio: Validate UAC3 cluster segment descriptors
ALSA: hda/realtek: Fix headset mic on HONOR BRB-X
ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks
smb3: fix for slab out of bounds on mount to ksmbd
smb: client: remove redundant lstrp update in negotiate protocol
gpio: virtio: Fix config space reading.
gpio: mlxbf2: use platform_get_irq_optional()
gpio: mlxbf3: use platform_get_irq_optional()
netlink: avoid infinite retry looping in netlink_unicast()
net: phy: micrel: fix KSZ8081/KSZ8091 cable test
net: gianfar: fix device leak when querying time stamp info
net: enetc: fix device and OF node leak at probe
net: mtk_eth_soc: fix device leak at probe
net: ti: icss-iep: fix device and OF node leaks at probe
net: dpaa: fix device leak when querying time stamp info
net: usb: asix_devices: add phy_mask for ax88772 mdio bus
io_uring/net: commit partial buffers on retry
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
NFSD: detect mismatch of file handle and delegation stateid in OPEN op
NFS: Fix the setting of capabilities when automounting a new filesystem
PCI: Extend isolated function probing to LoongArch
LoongArch: BPF: Fix jump offset calculation in tailcall
sunvdc: Balance device refcount in vdc_port_mpgroup_check
fs: Prevent file descriptor table allocations exceeding INT_MAX
eventpoll: Fix semi-unbounded recursion
Documentation: ACPI: Fix parent device references
ACPI: processor: perflib: Fix initial _PPC limit application
ACPI: processor: perflib: Move problematic pr->performance check
smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection()
smb: client: don't wait for info->send_pending == 0 on error
KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint
KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer exits
KVM: VMX: Handle forced exit due to preemption timer in fastpath
KVM: x86: Move handling of is_guest_mode() into fastpath exit handlers
KVM: VMX: Handle KVM-induced preemption timer exits in fastpath for L2
KVM: x86: Fully defer to vendor code to decide how to force immediate exit
KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap
KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag
KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported
KVM: VMX: Extract checking of guest's DEBUGCTL into helper
KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter
KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs
KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest
udp: also consider secpath when evaluating ipsec use for checksumming
netfilter: ctnetlink: fix refcount leak on table dump
net: ti: icss-iep: Fix incorrect type for return value in extts_enable()
sctp: linearize cloned gso packets in sctp_rcv
intel_idle: Allow loading ACPI tables for any family
ptp: prevent possible ABBA deadlock in ptp_clock_freerun()
hfs: fix general protection fault in hfs_find_init()
hfs: fix slab-out-of-bounds in hfs_bnode_read()
hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
arm64: Handle KCOV __init vs inline mismatches
smb/server: avoid deadlock when linking with ReplaceIfExists
nvme-pci: try function level reset on init failure
gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops
udf: Verify partition map count
drbd: add missing kref_get in handle_write_conflicts
hfs: fix not erasing deleted b-tree node issue
better lockdep annotations for simple_recursive_removal()
ata: libata-sata: Disallow changing LPM state if not supported
fs/ntfs3: Add sanity check for file name
fs/ntfs3: correctly create symlink for relative path
ext2: Handle fiemap on empty files to prevent EINVAL
fix locking in efi_secret_unlink()
securityfs: don't pin dentries twice, once is enough...
tracefs: Add d_delete to remove negative dentries
usb: xhci: print xhci->xhc_state when queue_command failed
platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list
cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
usb: xhci: Avoid showing warnings for dying controller
usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
usb: xhci: Avoid showing errors during surprise removal
soc: qcom: rpmh-rsc: Add RSC version 4 support
ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU
gpio: wcd934x: check the return value of regmap_update_bits()
cpufreq: Exit governor when failed to start old governor
ARM: rockchip: fix kernel hang during smp initialization
PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
EDAC/synopsys: Clear the ECC counters on init
ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required
tools/nolibc: define time_t in terms of __kernel_old_time_t
iio: adc: ad_sigma_delta: don't overallocate scan buffer
gpio: tps65912: check the return value of regmap_update_bits()
ARM: tegra: Use I/O memcpy to write to IRAM
tools/build: Fix s390(x) cross-compilation with clang
selftests: tracing: Use mutex_unlock for testing glob filter
ACPI: PRM: Reduce unnecessary printing to avoid user confusion
firmware: tegra: Fix IVC dependency problems
PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
thermal: sysfs: Return ENODATA instead of EAGAIN for reads
PM: sleep: console: Fix the black screen issue
ACPI: processor: fix acpi_object initialization
mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
pps: clients: gpio: fix interrupt handling order in remove path
reset: brcmstb: Enable reset drivers for ARCH_BCM2835
char: misc: Fix improper and inaccurate error code returned by misc_init()
mei: bus: Check for still connected devices in mei_cl_bus_dev_release()
mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
ALSA: hda: Handle the jack polling always via a work
ALSA: hda: Disable jack polling at shutdown
x86/bugs: Avoid warning when overriding return thunk
ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
usb: core: usb_submit_urb: downgrade type check
pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
imx8m-blk-ctrl: set ISI panic write hurry level
soc: qcom: mdt_loader: Actually use the e_phoff
platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
platform/chrome: cros_ec_typec: Defer probe on missing EC parent
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
ASoC: codecs: rt5640: Retry DEVICE_ID verification
ASoC: qcom: use drvdata instead of component to keep id
powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64
Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie()
xen/netfront: Fix TX response spurious interrupts
net: usb: cdc-ncm: check for filtering capability
wifi: ath12k: Correct tid cleanup when tid setup fails
ktest.pl: Prevent recursion of default variable options
wifi: cfg80211: reject HTC bit for management frames
s390/time: Use monotonic clock in get_cycles()
be2net: Use correct byte order and format string for TCP seq and ack_seq
wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB
et131x: Add missing check after DMA map
net: ag71xx: Add missing check after DMA map
net/mlx5e: Properly access RCU protected qdisc_sleeping variable
arm64: Mark kernel as tainted on SAE and SError panic
rcu: Protect ->defer_qs_iw_pending from data race
net: mctp: Prevent duplicate binds
wifi: cfg80211: Fix interface type validation
net: ipv4: fix incorrect MTU in broadcast routes
net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
net: phy: micrel: Add ksz9131_resume()
perf/cxlpmu: Remove unintended newline from IRQ name format string
wifi: iwlwifi: mvm: set gtk id also in older FWs
um: Re-evaluate thread flags repeatedly
wifi: iwlwifi: mvm: fix scan request validation
s390/stp: Remove udelay from stp_sync_clock()
sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails
wifi: mac80211: don't complete management TX on SAE commit
(powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc().
wifi: mac80211: fix rx link assignment for non-MLO stations
drm/msm: use trylock for debugfs
wifi: rtw89: Fix rtw89_mac_power_switch() for USB
wifi: rtw89: Disable deep power saving for USB/SDIO
wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch
kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace
net: thunderbolt: Enable end-to-end flow control also in transmit
net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths()
xfrm: Duplicate SPI Handling
net: atlantic: add set_power to fw_ops for atl2 to fix wol
net: fec: allow disable coalescing
drm/amd/display: Separate set_gsl from set_gsl_source_select
wifi: ath12k: Add memset and update default rate value in wmi tx completion
wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
drm/amd/display: Fix 'failed to blank crtc!'
wifi: mac80211: update radar_required in channel context after channel switch
wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0
wifi: ath12k: Decrement TID on RX peer frag setup error handling
powerpc: floppy: Add missing checks after DMA map
netmem: fix skb_frag_address_safe with unreadable skbs
wifi: iwlegacy: Check rate_idx range after addition
neighbour: add support for NUD_PERMANENT proxy entries
dpaa_eth: don't use fixed_phy_change_carrier
drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual
net: vlan: Make is_vlan_dev() a stub when VLAN is not configured
net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
gve: Return error for unknown admin queue command
net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
net: dsa: b53: prevent DIS_LEARNING access on BCM5325
net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
bpftool: Fix JSON writer resource leak in version command
ptp: Use ratelimite for freerun error message
wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
ionic: clean dbpage in de-init
net: ncsi: Fix buffer overflow in fetching version id
drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range
drm/ttm: Should to return the evict error
uapi: in6: restore visibility of most IPv6 socket options
bpf: Make reg_not_null() true for CONST_PTR_TO_MAP
selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size
drm/amd/display: Avoid trying AUX transactions on disconnected ports
drm/ttm: Respect the shrinker core free target
rcu: Fix rcu_read_unlock() deadloop due to IRQ work
net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page
vhost: fail early when __vhost_add_used() fails
drm/amd/display: Only finalize atomic_obj if it was initialized
drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported
watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition
cifs: Fix calling CIFSFindFirst() for root path without msearch
fbdev: fix potential buffer overflow in do_register_framebuffer()
crypto: hisilicon/hpre - fix dma unmap sequence
ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
clk: tegra: periph: Fix error handling and resolve unsigned compare warning
mfd: axp20x: Set explicit ID for AXP313 regulator
phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal
scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
fs/orangefs: use snprintf() instead of sprintf()
watchdog: dw_wdt: Fix default timeout
hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state
clk: qcom: ipq5018: keep XO clock always on
MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
watchdog: iTCO_wdt: Report error if timeout configuration fails
scsi: bfa: Double-free fix
jfs: truncate good inode pages when hard link is 0
jfs: Regular file corruption check
jfs: upper bound check of tree index in dbAllocAG
crypto: jitter - fix intermediary handling
MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
MIPS: lantiq: falcon: sysctrl: fix request memory check logic
media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control
leds: leds-lp50xx: Handle reg to get correct multi_index
dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs
RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
RDMA/core: reduce stack using in nldev_stat_get_doit()
scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
power: supply: qcom_battmgr: Add lithium-polymer entry
scsi: mpt3sas: Correctly handle ATA device errors
scsi: mpi3mr: Correctly handle ATA device errors
pinctrl: stm32: Manage irq affinity settings
media: tc358743: Check I2C succeeded during probe
media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
media: tc358743: Increase FIFO trigger level to 374
media: usb: hdpvr: disable zero-length read messages
media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
media: uvcvideo: Fix bandwidth issue for Alcor camera
crypto: octeontx2 - add timeout for load_fvc completion poll
soundwire: amd: serialize amd manager resume sequence during pm_prepare
soundwire: Move handle_nested_irq outside of sdw_dev_lock
md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
module: Prevent silent truncation of module name in delete_module(2)
i3c: add missing include to internal header
rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
i3c: don't fail if GETHDRCAP is unsupported
i3c: master: Initialize ret in i3c_i2c_notifier_call()
dm-mpath: don't print the "loaded" message if registering fails
dm-table: fix checking for rq stackable devices
apparmor: use the condition in AA_BUG_FMT even with debug disabled
i2c: Force DLL0945 touchpad i2c freq to 100khz
exfat: add cluster chain loop check for dir
f2fs: check the generic conditions first
kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
vfio/type1: conditional rescheduling while pinning
kconfig: nconf: Ensure null termination where strncpy is used
scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
scsi: target: core: Generate correct identifiers for PR OUT transport IDs
scsi: aacraid: Stop using PCI_IRQ_AFFINITY
vfio/mlx5: fix possible overflow in tracking max message size
ipmi: Use dev_warn_ratelimited() for incorrect message warnings
kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
kconfig: gconf: fix potential memory leak in renderer_edited()
kconfig: lxdialog: fix 'space' to (de)select options
ipmi: Fix strcpy source and destination the same
net: phy: smsc: add proper reset flags for LAN8710A
ASoC: Intel: avs: Fix uninitialized pointer error in probe()
block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
pNFS: Fix stripe mapping in block/scsi layout
pNFS: Fix disk addr range check in block/scsi layout
pNFS: Handle RPC size limit for layoutcommits
pNFS: Fix uninited ptr deref in block/scsi layout
rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
scsi: lpfc: Remove redundant assignment to avoid memory leak
ASoC: fsl_sai: replace regmap_write with regmap_update_bits
cifs: reset iface weights when we cannot find a candidate
iommu/arm-smmu-qcom: Add SM6115 MDSS compatible
iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range
iommufd: Prevent ALIGN() overflow
ext4: fix zombie groups in average fragment size lists
ext4: fix largest free orders lists corruption on mb_optimize_scan switch
usb: core: config: Prevent OOB read in SS endpoint companion parsing
misc: rtsx: usb: Ensure mmc child device is active when card is present
usb: typec: ucsi: Update power_supply on power role change
comedi: fix race between polling and detaching
thunderbolt: Fix copy+paste error in match_service_id()
cdc-acm: fix race between initial clearing halt and open
btrfs: zoned: use filesystem size not disk size for reclaim decision
btrfs: abort transaction during log replay if walk_log_tree() failed
btrfs: zoned: do not remove unwritten non-data block group
btrfs: clear dirty status from extent buffer on error at insert_new_root()
btrfs: fix log tree replay failure due to file with 0 links and extents
btrfs: zoned: do not select metadata BG as finish target
btrfs: do not allow relocation of partially dropped subvolumes
fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
hv_netvsc: Fix panic during namespace deletion with VF
parisc: Makefile: fix a typo in palo.conf
mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
media: venus: Fix OOB read due to missing payload bound check
media: uvcvideo: Do not mark valid metadata as invalid
tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros
RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages
HID: magicmouse: avoid setting up battery timer when not needed
HID: apple: avoid setting up battery timer for devices without battery
rcu: Fix racy re-initialization of irq_work causing hangs
serial: 8250: fix panic due to PSLVERR
cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
m68k: Fix lost column on framebuffer debug console
usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
usb: gadget: udc: renesas_usb3: fix device leak at unbind
usb: musb: omap2430: fix device leak at unbind
usb: dwc3: meson-g12a: fix device leaks at unbind
bus: mhi: host: Fix endianness of BHI vector table
bus: mhi: host: Detect events pointing to unexpected TREs
vt: keyboard: Don't process Unicode characters in K_OFF mode
vt: defkeymap: Map keycodes above 127 to K_HOLE
lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
crypto: qat - lower priority for skcipher and aead algorithms
crypto: qat - flush misc workqueue during device shutdown
ksmbd: fix refcount leak causing resource not released
ksmbd: extend the connection limiting mechanism to support IPv6
tracing: fprobe-event: Sanitize wildcard for fprobe event name
ext4: check fast symlink for ea_inode correctly
ext4: fix fsmap end of range reporting with bigalloc
ext4: fix reserved gdt blocks handling in fsmap
ext4: don't try to clear the orphan_present feature block device is r/o
ext4: use kmalloc_array() for array space allocation
ext4: fix hole length calculation overflow in non-extent inodes
btrfs: zoned: fix write time activation failure for metadata block group
arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default
arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1
arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses
dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints
dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints
scsi: mpi3mr: Fix race between config read submit and interrupt completion
ata: libata-scsi: Fix ata_to_sense_error() status handling
scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers
scsi: ufs: ufs-pci: Fix default runtime and system PM levels
ata: libata-scsi: Fix CDL control
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
zynq_fpga: use sgtable-based scatterlist wrappers
iio: imu: bno055: fix OOB access of hw_xlate array
iio: adc: ad_sigma_delta: change to buffer predisable
wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
wifi: ath12k: fix dest ring-buffer corruption
wifi: ath12k: fix source ring-buffer corruption
wifi: ath12k: fix dest ring-buffer corruption when ring is full
wifi: ath11k: fix dest ring-buffer corruption
wifi: ath11k: fix source ring-buffer corruption
wifi: ath11k: fix dest ring-buffer corruption when ring is full
pwm: imx-tpm: Reset counter if CMOD is 0
pwm: mediatek: Handle hardware enable and clock enable separately
pwm: mediatek: Fix duty and period setting
hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
mtd: spi-nor: Fix spi_nor_try_unlock_all()
mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
mtd: rawnand: fsmc: Add missing check after DMA map
mtd: rawnand: renesas: Add missing check after DMA map
PCI: endpoint: Fix configfs group list head handling
PCI: endpoint: Fix configfs group removal on driver teardown
vsock/virtio: Validate length in packet header before skb_put()
vhost/vsock: Avoid allocating arbitrarily-sized SKBs
phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence
f2fs: fix to avoid out-of-boundary access in dnode page
jbd2: prevent softlockup in jbd2_log_do_checkpoint()
soc/tegra: pmc: Ensure power-domains are in a known state
parisc: Check region is readable by user in raw_copy_from_user()
parisc: Define and use set_pte_at()
parisc: Drop WARN_ON_ONCE() from flush_cache_vmap
parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers
parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c
parisc: Revise __get_user() to probe user read access
parisc: Revise gateway LWS calls to probe user read access
parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault()
parisc: Update comments in make_insert_tlb
media: gspca: Add bounds checking to firmware parser
media: hi556: correct the test pattern configuration
media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
media: vivid: fix wrong pixel_array control size
media: verisilicon: Fix AV1 decoder clock frequency
media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
media: usbtv: Lock resolution while streaming
media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
media: ov2659: Fix memory leaks in ov2659_probe()
media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
media: qcom: camss: cleanup media device allocated resource on error path
media: venus: Add a check for packet size after reading from shared memory
media: venus: hfi: explicitly release IRQ during teardown
media: venus: protect against spurious interrupts during probe
media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
media: venus: venc: Clamp param smaller than 1fps and bigger than 240
drm/amd: Restore cached power limit during resume
drm/amdgpu: update mmhub 3.0.1 client id mappings
drm/amdkfd: Destroy KFD debugfs after destroy KFD wq
drm/amd/display: Add primary plane to commits for correct VRR handling
drm/amd/display: Don't overwrite dce60_clk_mgr
net, hsr: reject HSR frame if skb can't hold tag
ipv6: sr: Fix MAC comparison to be constant-time
ACPI: pfr_update: Fix the driver update version check
mptcp: drop skb if MPTCP skb extension allocation fails
mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
selftests/memfd: add test for mapping write-sealed memfd read-only
net: Add net_passive_inc() and net_passive_dec().
net: better track kernel sockets lifetime
smb: client: fix netns refcount leak after net_passive changes
net_sched: sch_ets: implement lockless ets_dump()
net/sched: ets: use old 'nbands' while purging unused classes
leds: flash: leds-qcom-flash: Limit LED current based on thermal condition
leds: flash: leds-qcom-flash: Fix registry access after re-bind
fscrypt: Don't use problematic non-inline crypto engines
block: Make REQ_OP_ZONE_FINISH a write operation
usb: typec: fusb302: cache PD RX state
btrfs: don't ignore inode missing when replaying log tree
btrfs: move transaction aborts to the error site in add_block_group_free_space()
btrfs: always abort transaction on failure to add block group to free space tree
btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()
xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags
btrfs: fix ssd_spread overallocation
btrfs: constify more pointer parameters
btrfs: populate otime when logging an inode item
btrfs: send: factor out common logic when sending xattrs
btrfs: send: only use boolean variables at process_recorded_refs()
btrfs: send: add and use helper to rename current inode when processing refs
btrfs: send: keep the current inode's path cached
btrfs: send: avoid path allocation for the current inode when issuing commands
btrfs: send: use fallocate for hole punching with send stream v2
btrfs: send: make fs_path_len() inline and constify its argument
wifi: mac80211: check basic rates validity in sta_link_apply_parameters
mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
usb: dwc3: imx8mp: fix device leak at unbind
ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
PM: runtime: Take active children into account in pm_runtime_get_if_in_use()
ata: libata-scsi: Return aborted command when missing sense and result TF
kbuild: userprogs: use correct linker when mixing clang and GNU ld
memstick: Fix deadlock by moving removing flag earlier
mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
squashfs: fix memory leak in squashfs_fill_super
mm/debug_vm_pgtable: clear page table entries at destroy_args()
mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
s390/sclp: Fix SCCB present check
drm/amd/display: Avoid a NULL pointer dereference
drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
soc: qcom: mdt_loader: Fix error return values in mdt_header_valid()
PCI: rockchip: Use standard PCIe definitions
PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining
PCI: imx6: Delay link start until configfs 'start' written
PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features
scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
ext4: preserve SB_I_VERSION on remount
arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support
smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
fs/buffer: fix use-after-free when call bh_read() helper
mptcp: remove duplicate sk_reset_timer call
mptcp: disable add_addr retransmission when timeout is 0
selftests: mptcp: pm: check flush doesn't reset limits
mmc: sdhci-pci-gli: Use PCI AER definitions, not hard-coded values
mmc: sdhci-pci-gli: Add a new function to simplify the code
cpuidle: menu: Remove iowait influence
cpuidle: governors: menu: Avoid selecting states with too much latency
fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
ftrace: Also allocate and copy hash for reading of filter files
iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
iio: proximity: isl29501: fix buffered read on big-endian systems
most: core: Drop device reference after usage in get_channel()
cdx: Fix off-by-one error in cdx_rpmsg_probe()
usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
comedi: Make insn_rw_emulate_bits() do insn->n samples
comedi: pcl726: Prevent invalid irq number
comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test
usb: renesas-xhci: Fix External ROM access timeouts
USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
usb: storage: realtek_cr: Use correct byte order for bcs->Residue
USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
usb: dwc3: Remove WARN_ON for device endpoint command timeouts
usb: dwc3: pci: add support for the Intel Wildcat Lake
drm/amd/display: Don't overclock DCE 6 by 15%
compiler: remove __ADDRESSABLE_ASM{_STR,}() again
mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER
powerpc/boot: Fix build with gcc 15
tracing: Remove unneeded goto out logic
tracing: Limit access to parser->buffer when trace_get_user failed
iio: light: as73211: Ensure buffer holes are zeroed
iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read()
iio: imu: inv_icm42600: switch timestamp type from int64_t __aligned(8) to aligned_s64
iio: imu: inv_icm42600: use = { } instead of memset()
iio: imu: inv_icm42600: Convert to uXX and sXX integer types
iio: imu: inv_icm42600: change invalid data error to -EBUSY
usb: xhci: Fix slot_id resource race conflict
usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean
usb: typec: maxim_contaminant: disable low power mode when reading comparator values
x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
spi: spi-fsl-lpspi: Clamp too high speed_hz
drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().
cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
iosys-map: Fix undefined behavior in iosys_map_clear()
RDMA/erdma: Fix ignored return value of init_kernel_qp
RDMA/bnxt_re: Fix to do SRQ armena by default
RDMA/bnxt_re: Fix to remove workload check in SRQ limit path
RDMA/bnxt_re: Fix to initialize the PBL array
net: bridge: fix soft lockup in br_multicast_query_expired()
scsi: qla4xxx: Prevent a potential error pointer dereference
iommu/amd: Avoid stack buffer overflow from kernel cmdline
Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established
Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync()
mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
drm/hisilicon/hibmc: fix the hibmc loaded failed bug
ALSA: usb-audio: Fix size validation in convert_chmap_v3()
drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path
ppp: fix race conditions in ppp_fill_forward_path
phy: mscc: Fix timestamping for vsc8584
net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
gve: prevent ethtool ops after shutdown
net/smc: fix UAF on smcsk after smc_listen_out()
LoongArch: Optimize module load time by optimizing PLT/GOT counting
ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
igc: fix disabling L1.2 PCI-E link substate on I226 on init
net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
bonding: update LACP activity flag after setting lacp_active
bonding: Add independent control state machine
bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU
Octeontx2-af: Skip overlap check for SPI field
net/mlx5: Base ECVF devlink port attrs from 0
net/mlx5e: Preserve shared buffer capacity during headroom updates
ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
s390/hypfs: Avoid unnecessary ioctl registration in debugfs
s390/hypfs: Enable limited access during lockdown
netfilter: nf_reject: don't leak dst refcount for loopback packets
alloc_fdtable(): change calling conventions.
LoongArch: Avoid in-place string operation on FDT content
clk: samsung: gs101: fix CLK_DOUT_CMU_G3D_BUSD
mm/memory-tier: fix abstract distance calculation overflow
habanalabs: fix UAF in export_dmabuf()
nvme-tcp: log TLS handshake failures at error level
gfs2: Validate i_depth for exhash directories
ata: ahci: Disallow LPM policy control if not supported
ata: ahci: Disable DIPM if host lacks support
usb: typec: tcpm/tcpci_maxim: fix irq wake usage
pmdomain: ti: Select PM_GENERIC_DOMAINS
cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
platform/chrome: cros_ec_sensorhub: Retries when a sensor is not ready
ASoC: SOF: topology: Parse the dapm_widget_tokens in case of DSPless mode
tty: serial: fix print format specifiers
netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps
wifi: iwlwifi: mvm: avoid outdated reorder buffer head_sn
idpf: preserve coalescing settings across resets
drm/amd/pm: fix null pointer access
wifi: mac80211: don't unreserve never reserved chanctx
sched/deadline: Fix accounting after global limits change
bpf: Forget ranges when refining tnum after JSET
wifi: mac80211: avoid weird state in error path
rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access
drm/msm: Add error handling for krealloc in metadata setup
perf/arm: Add missing .suppress_bind_attrs
drm/imagination: Clear runtime PM errors while resetting the GPU
drm/xe/xe_query: Use separate iterator while filling GT list
wifi: ath10k: shutdown driver when hardware is unreliable
wifi: ath12k: Fix station association with MBSSID Non-TX BSS
lib: packing: Include necessary headers
arm64: stacktrace: Check kretprobe_find_ret_addr() return value
net: dsa: b53: ensure BCM5325 PHYs are enabled
drm/xe: Make dma-fences compliant with the safe access rules
drm/amd/display: Update DMCUB loading sequence for DCN3.5
drm/amd/display: Disable dsc_power_gate for dcn314 by default
RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM
media: ipu-bridge: Add _HID for OV5670
scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk
media: uvcvideo: Add quirk for HP Webcam HD 2300
crypto: ccp - Add missing bootloader info reg for pspv6
soundwire: amd: cancel pending slave status handling workqueue during remove sequence
tools/power turbostat: Fix build with musl
tools/power turbostat: Handle cap_get_proc() ENOSYS
smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection
lib/sbitmap: convert shallow_depth from one word to the whole sbitmap
drm/amdgpu: fix vram reservation issue
btrfs: qgroup: set quota enabled bit if quota disable fails flushing reservations
btrfs: qgroup: fix qgroup create ioctl returning success after quotas disabled
btrfs: don't skip remaining extrefs if dir not found during log replay
btrfs: error on missing block group when unaccounting log tree extent buffers
btrfs: fix iteration bug in __qgroup_excl_accounting()
xfs: fix scrub trace with null pointer in quotacheck
userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry
media: v4l2: Add support for NV12M tiled variants to v4l2_format_info()
PCI: Store all PCIe Supported Link Speeds
PCI: Allow PCI bridges to go to D3Hot on all non-x86
PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
ata: libata-sata: Add link_power_management_supported sysfs attribute
io_uring/rw: cast rw->flags assignment to rwf_t
PCI: Honor Max Link Speed when determining supported speeds
ACPI: Return -ENODEV from acpi_parse_spcr() when SPCR support is disabled
crypto: octeontx2 - Fix address alignment issue on ucode loading
crypto: octeontx2 - Fix address alignment on CN10K A0/A1 and OcteonTX2
crypto: octeontx2 - Fix address alignment on CN10KB and CN10KA-B0
btrfs: fix incorrect log message for nobarrier mount option
btrfs: restore mount option info messages during mount
btrfs: fix printing of mount info messages for NODATACOW/NODATASUM
apparmor: Fix 8-byte alignment for initial dfa blob streams
PCI/portdrv: Use is_pciehp instead of is_hotplug_bridge
PCI: imx6: Remove apps_reset toggling from imx_pcie_{assert/deassert}_core_reset
amdgpu/amdgpu_discovery: increase timeout limit for IFWI init
ASoC: SOF: amd: acp-loader: Use GFP_KERNEL for DMA allocations in resume context
media: mt9m114: Fix deadlock in get_frame_interval/set_frame_interval
drm/amdgpu/discovery: fix fw based ip discovery
drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities
drm/amd/display: fix a Null pointer dereference vulnerability
lib/string_choices: Add str_true_false()/str_false_true() helper
USB: typec: Use str_enable_disable-like helpers
btrfs: qgroup: drop unused parameter fs_info from __del_qgroup_rb()
btrfs: qgroup: fix race between quota disable and quota rescan ioctl
btrfs: explicitly ref count block_group on new_bgs list
btrfs: codify pattern for adding block_group to bg_list
btrfs: zoned: requeue to unused block group list if zone finish failed
io_uring/futex: ensure io_futex_wait() cleans up properly on failure
drm/vblank: Introduce drm_crtc_vblank_crtc()
drm/vblank: add dynamic per-crtc vblank configuration support
drm/amd/display: Fix Xorg desktop unresponsive on Replay panel
arch: consolidate existing CONFIG_PAGE_SIZE_*KB definitions
arch: simplify architecture specific page size configuration
UBUNTU: [Config] update page size configuration
arch: define CONFIG_PAGE_SIZE_*KB on all architectures
UBUNTU: [Config] update page size on all architectures
Mark xe driver as BROKEN if kernel page size is not 4kB
UBUNTU: [Config] disable xe driver where page size is not 4kB
btrfs: subpage: keep TOWRITE tag until folio is cleaned
arm64: dts: ti: k3-am6*: Add boot phase flag to support MMC boot
arm64: dts: ti: k3-am62*: Add non-removable flag for eMMC
arm64: dts: ti: k3-am6*: Add bootph-all property in MMC node
arm64: dts: ti: k3-am6*: Remove DLL properties for soft PHYs
arm64: dts: ti: k3-am6*: Remove disable-wp for eMMC
arm64: dts: ti: k3-am62*: Move eMMC pinmux to top level board file
kcov, usb: Don't disable interrupts in kcov_remote_start_usb_softirq()
drm/i915/icl+/tc: Convert AUX powered WARN to a debug message
drm/i915/display: add intel_encoder_is_*() and _to_*() functions
drm/i915/icl+/tc: Cache the max lane count value
ovl: use I_MUTEX_PARENT when locking parent in ovl_create_temp()
cgroup/cpuset: Fix a partition error with CPU hotplug
drm/tests: Fix endian warning
RDMA/bnxt_re: Fix a possible memory leak in the driver
RDMA/hns: Fix dip entries leak on devices newer than hip09
net: xilinx: axienet: Fix RX skb ring management in DMAengine mode
drm/hisilicon/hibmc: refactored struct hibmc_drm_private
drm/hisilicon/hibmc: fix the i2c device resource leak when vdac init failed
drm/amd/display: Don't print errors for nonexistent connectors
net: dsa: microchip: Fix KSZ9477 HSR port setup issue
net/mlx5: Relocate function declarations from port.h to mlx5_core.h
net/mlx5e: Extract checking of FEC support for a link mode
net/mlx5e: Support FEC settings for 100G/lane modes
net/mlx5: Add IFC bits and enums for buf_ownership
net/mlx5e: Query FW for buffer ownership
UBUNTU: Upstream stable to v6.6.103, v6.12.43, v6.12.44
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2137586/+subscriptions
Комментариев нет:
Отправить комментарий