[Bug 2139267] Re: Noble update: upstream stable patchset 2026-01-28

Skipped:
901352f82cbb padata: Reset next CPU when reorder sequence wraps around (newer and unaffected version of kernel/padata.c was introduced in 0211656025e0 padata: Fix pd UAF once and for all)

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2139267

Title:
Noble update: upstream stable patchset 2026-01-28

Status in linux package in Ubuntu:
Invalid
Status in linux source package in Noble:
In Progress

Bug description:

SRU Justification

Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:

upstream stable patchset 2026-01-28

Ported from the following upstream stable releases:
v6.6.114, v6.12.55

from git://git.kernel.org/

smb: client: Fix refcount leak for cifs_sb_tlink
r8152: add error handling in rtl8152_driver_init
f2fs: fix wrong block mapping for multi-devices
jbd2: ensure that all ongoing I/O complete before freeing blocks
ext4: wait for ongoing I/O to complete before freeing blocks
ext4: detect invalid INLINE_DATA + EXTENTS flag combination
btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running
btrfs: fix incorrect readahead expansion length
btrfs: do not assert we found block group item when creating free space tree
can: gs_usb: gs_make_candev(): populate net_device->dev_port
can: gs_usb: increase max interface to U8_MAX
cifs: parse_dfs_referrals: prevent oob on malformed input
drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
drm/amdgpu: use atomic functions with memory barriers for vm fault info
drm/amd: Check whether secure display TA loaded successfully
cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay
epoll: Remove ep_scan_ready_list() in comments
eventpoll: Replace rwlock with spinlock
drm/msm/adreno: De-spaghettify the use of memory barriers
drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions
drm/exynos: exynos7_drm_decon: properly clear channels during bind
drm/exynos: exynos7_drm_decon: remove ctx->suspended
media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain()
media: nxp: imx8-isi: m2m: Fix streaming cleanup on release
usb: gadget: Store endpoint pointer in usb_request
usb: gadget: Introduce free_usb_request helper
usb: gadget: f_ecm: Refactor bind path to use __free()
usb: gadget: f_acm: Refactor bind path to use __free()
usb: gadget: f_rndis: Refactor bind path to use __free()
HID: multitouch: fix sticky fingers
dax: skip read lock assertion for read-only filesystems
can: m_can: m_can_plat_remove(): add missing pm_runtime_disable()
net: dlink: handle dma_map_single() failure properly
doc: fix seg6_flowlabel path
r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H
net/ip6_tunnel: Prevent perpetual tunnel growth
amd-xgbe: Avoid spurious link down messages during interface toggle
tcp: fix tcp_tso_should_defer() vs large RTT
tg3: prevent use of uninitialized remote_adv and local_adv variables
tls: trim encrypted message to match the plaintext on short splice
net: tls: wait for async completion on last message
tls: wait for async encrypt in case of error during latter iterations of sendmsg
tls: always set record_type in tls_process_cmsg
tls: wait for pending async decryptions if tls_strp_msg_hold fails
tls: don't rely on tx_work during send()
net: usb: lan78xx: Add error handling to lan78xx_init_mac_address
net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset
nvme-multipath: Skip nr_active increments in RETRY disposition
riscv: kprobes: Fix probe address validation
drm/bridge: lt9211: Drop check for last nibble of version register
ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec
ASoC: nau8821: Cancel jdet_work before handling jack ejection
ASoC: nau8821: Generalize helper to clear IRQ status
ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit
drm/i915/guc: Skip communication warning on reset in progress
drm/amd/powerplay: Fix CIK shutdown temperature
drm/rockchip: vop2: use correct destination rectangle height check
sched/balancing: Rename newidle_balance() => sched_balance_newidle()
sched/fair: Fix pelt lost idle time detection
ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings
accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
selftests/bpf: make arg_parsing.c more robust to crashes
ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card
HID: hid-input: only ignore 0 battery events for digitizers
HID: multitouch: fix name of Stylus input devices
selftests: arg_parsing: Ensure data is flushed to disk before reading.
hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
arm64: cputype: Add Neoverse-V3AE definitions
arm64: errata: Apply workarounds for Neoverse-V3AE
NFSD: Rework encoding and decoding of nfsd4_deviceid
NFSD: Minor cleanup in layoutcommit processing
xfs: rename the old_crc variable in xlog_recover_process
xfs: fix log CRC mismatches between i386 and other architectures
PM: runtime: Add new devm functions
iio: imu: inv_icm42600: Simplify pm_runtime setup
phy: cdns-dphy: Store hs_clk_rate and return it
phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling
iio: imu: inv_icm42600: reorganize DMA aligned buffers in structure
iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended
padata: Reset next CPU when reorder sequence wraps around
quota: remove unneeded return value of register_quota_format
fs: quota: create dedicated workqueue for quota_release_work
NFSD: Define a proc_layoutcommit for the FlexFiles layout type
phy: cadence: cdns-dphy: Update calibration wait time for startup state machine
PCI: Add PCI_VDEVICE_SUB helper macro
ixgbevf: Add support for Intel(R) E610 device
ixgbevf: fix getting link speed data for E610 devices
ixgbevf: fix mailbox API compatibility by negotiating supported features
nfsd: decouple the xprtsec policy check from check_nfsd_access()
PCI/sysfs: Ensure devices are powered for config reads (part 2)
ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL
PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists
PCI: j721e: Fix programming sequence of "strap" settings
drm/xe/guc: Check GuC running state before deregistering exec queue
btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST
perf/core: Fix address filter match with backing files
perf/core: Fix MMAP event path names with backing files
perf/core: Fix MMAP2 event device with backing files
drm/msm/a6xx: Fix PDC sleep sequence
usb: gadget: f_ncm: Refactor bind path to use __free()
can: m_can: m_can_handle_state_errors(): fix CAN state transition to Error Active
can: m_can: m_can_chip_config(): bring up interface in correct state
drm/amdgpu: add ip offset support for cyan skillfish
drm/amdgpu: add support for cyan skillfish without IP discovery
drm/amdgpu: fix handling of harvesting for ip_discovery firmware
nvme/tcp: handle tls partially sent records in write_space()
nfsd: Use correct error code when decoding extents
nfsd: Drop dprintk in blocklayout xdr functions
NFSD: Implement large extent array support in pNFS
NFSD: Fix last write offset handling in layoutcommit
wifi: rtw89: avoid possible TX wait initialization race
xfs: use deferred intent items for reaping crosslinked blocks
md/raid0: Handle bio_split() errors
md/raid1: Handle bio_split() errors
md/raid10: Handle bio_split() errors
md: fix mssing blktrace bio split events
x86/resctrl: Refactor resctrl_arch_rmid_read()
x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID
d_alloc_parallel(): set DCACHE_PAR_LOOKUP earlier
vfs: Don't leak disconnected dentries on umount
dmaengine: Add missing cleanup on module unload
UBUNTU: Upstream stable to v6.6.114, v6.12.55

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2139267/+subscriptions