[Bug 2139624] Re: Noble update: upstream stable patchset 2026-02-02

** Changed in: linux (Ubuntu Noble)
Status: In Progress => Fix Committed

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2139624

Title:
Noble update: upstream stable patchset 2026-02-02

Status in linux package in Ubuntu:
Invalid
Status in linux source package in Noble:
Fix Committed

Bug description:

SRU Justification

Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:

upstream stable patchset 2026-02-02

Ported from the following upstream stable releases:
v6.6.118, v6.12.60

from git://git.kernel.org/

timers: Fix NULL function pointer race in timer_shutdown_sync()
HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
mtd: rawnand: cadence: fix DMA device NULL pointer dereference
mtdchar: fix integer overflow in read/write ioctls
shmem: fix tmpfs reconfiguration (remount) when noswap is set
exfat: check return value of sb_min_blocksize in exfat_read_boot_sector
mptcp: Disallow MPTCP subflows from sockmap
mptcp: Fix proto fallback detection with BPF
ata: libata-scsi: Fix system suspend for a security locked drive
smb: client: introduce close_cached_dir_locked()
ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan()
be2net: pass wrb_params in case of OS2BMC
net: dsa: microchip: lan937x: Fix RGMII delay tuning
Revert "drm/tegra: dsi: Clear enable register if powered by bootloader"
Input: cros_ec_keyb - fix an invalid memory access
Input: goodix - add support for ACPI ID GDIX1003
Input: imx_sc_key - fix memory corruption on unload
Input: pegasus-notetaker - fix potential out-of-bounds access
nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot
nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl()
nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
scsi: sg: Do not sleep in atomic context
scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
MIPS: Malta: Fix !EVA SOC-it PCI MMIO
dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups
LoongArch: Don't panic if no valid cache info for PCI
mptcp: fix race condition in mptcp_schedule_work()
mptcp: fix ack generation for fallback msk
mptcp: fix premature close in case of fallback
mptcp: avoid unneeded subflow-level drops
mptcp: decouple mptcp fastclose from tcp close
mptcp: do not fallback when OoO is present
drm/tegra: dc: Fix reference leak in tegra_dc_couple()
drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled
drm/amd/display: Increase DPCD read retries
drm/amd/display: Move sleep into each retry for retrieve_link_cap()
xfrm: Determine inner GSO type from packet inner protocol
xfrm: Prevent locally generated packets from direct output in tunnel mode
pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe()
mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
drm/tegra: Add call to put_pid()
net: dsa: hellcreek: fix missing error handling in LED registration
net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get()
net: openvswitch: remove never-working support for setting nsh fields
nvme-multipath: fix lockdep WARN due to partition scan work
s390/ctcm: Fix double-kfree
platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos
net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()
pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc
pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc()
devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
net/mlx5: Clean up only new IRQ glue on request_irq() failure
LoongArch: Use UAPI types in ptrace UAPI header
cifs: fix memory leak in smb3_fs_context_parse_param error path
vsock: Ignore signal/timeout on connect() if already established
bcma: don't register devices disabled in OF
cifs: fix typo in enable_gcm_256 module parameter
scsi: core: Fix a regression triggered by scsi_host_busy()
x86/microcode/AMD: Limit Entrysign signature checking to known generations
selftests: net: use BASH for bareudp testing
net: tls: Cancel RX async resync request on rcd_delta overflow
kconfig/mconf: Initialize the default locale at startup
kconfig/nconf: Initialize the default locale at startup
f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi
s390/mm: Fix __ptep_rdp() inline assembly
f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic
ALSA: usb-audio: fix uac2 clock source at terminal parser
net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error
tracing/tools: Fix incorrcet short option in usage text for --threads
smb: client: fix incomplete backport in cfids_invalidation_worker()
KVM: arm64: Check the untrusted offset in FF-A memory share
uio_hv_generic: Set event for all channels on the device
maple_tree: fix tracepoint string pointers
crash: fix crashkernel resource shrink
selftests: mptcp: join: endpoints: longer transfer
mm/mempool: fix poisoning order>0 pages with HIGHMEM
mptcp: fix a race in mptcp_pm_del_add_timer()
HID: amd_sfh: Stop sensor before starting
arm64: dts: rockchip: fix PCIe 3.3V regulator voltage on orangepi-5
mptcp: fix duplicate reset on fastclose
selftests: mptcp: join: endpoints: longer timeout
selftests: mptcp: join: userspace: longer timeout
drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
drm/amd/display: Clear the CUR_ENABLE register on DCN20 on DPP5
xfrm: set err and extack on failure to create pcpu SA
pinctrl: realtek: Select REGMAP_MMIO for RTD driver
selftests: net: lib: Do not overwrite error messages
idpf: fix possible vport_config NULL pointer deref in remove
af_unix: Cache state->msg in unix_stream_read_generic().
af_unix: Read sk_peek_offset() again after sleeping in unix_stream_read_generic().
net: tls: Change async resync helpers argument
ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check
drm/xe: Prevent BIT() overflow when handling invalid prefetch region
tty/vt: fix up incorrect backport to stable releases
UBUNTU: Upstream stable to v6.6.118, v6.12.60

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2139624/+subscriptions