[Bug 2139633] Re: Noble update: upstream stable patchset 2026-02-03

** Changed in: linux (Ubuntu Noble)
Status: In Progress => Fix Committed

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2139633

Title:
Noble update: upstream stable patchset 2026-02-03

Status in linux package in Ubuntu:
Invalid
Status in linux source package in Noble:
Fix Committed

Bug description:

SRU Justification

Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:

upstream stable patchset 2026-02-03

Ported from the following upstream stable releases:
v6.6.119, v6.12.61

from git://git.kernel.org/

can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs
can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header
can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data
Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
Bluetooth: SMP: Fix not generating mackey and ltk when repairing
net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY
platform/x86: intel: punit_ipc: fix memory corruption
net: aquantia: Add missing descriptor cache invalidation on ATL2
net: lan966x: Fix the initialization of taprio
net/mlx5e: Fix validation logic in rate limiting
net: sxgbe: fix potential NULL dereference in sxgbe_rx()
drm/amdgpu: fix cyan_skillfish2 gpu info fw handling
net: dsa: sja1105: simplify static configuration reload
net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic
net: atlantic: fix fragment overflow handling in RX path
net: fec: cancel perout_timer when PEROUT is disabled
net: fec: do not update PEROUT if it is enabled
net: fec: do not allow enabling PPS and PEROUT simultaneously
net: fec: do not register PPS event for PEROUT
iio: st_lsm6dsx: Fixed calibrated timestamp calculation
usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors
mailbox: mailbox-test: Fix debugfs_create_dir error checking
mailbox: pcc: Refactor error handling in irq handler into separate function
mailbox: pcc: don't zero error register
spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA
spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors
spi: spi-mem: Allow specifying the byte order in Octal DTR mode
spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency
spi: spi-mem: Add a new controller capability
spi: nxp-fspi: Support per spi-mem operation frequency switches
spi: nxp-fspi: Propagate fwnode in ACPI case as well
spi: bcm63xx: fix premature CS deassertion on RX-only transactions
Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields
iio:common:ssp_sensors: Fix an error handling path ssp_probe()
iio: accel: bmc150: Fix irq assumption regression
iio: accel: fix ADXL355 startup race condition
iio: adc: ad7280a: fix ad7280_store_balance_timer()
MIPS: mm: Prevent a TLB shutdown on initial uniquification
MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow
ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230
ARM: dts: nxp: imx6ul: correct SAI3 interrupt line
atm/fore200e: Fix possible data race in fore200e_open()
can: sja1000: fix max irq loop handling
can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
ceph: fix crash in process_v2_sparse_read() for encrypted directories
dm-verity: fix unreliable memory allocation
drivers/usb/dwc3: fix PCI parent check
smb: client: fix memory leak in cifs_construct_tcon()
thunderbolt: Add support for Intel Wildcat Lake
slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves
firmware: stratix10-svc: fix bug in saving controller data
mptcp: clear scheduled subflows on retransmit
serial: amba-pl011: prefer dma_mapping_error() over explicit address checking
most: usb: fix double free on late probe failure
usb: cdns3: Fix double resource release in cdns3_pci_probe
usb: gadget: f_eem: Fix memory leak in eem_unwrap
usb: renesas_usbhs: Fix synchronous external abort on unbind
usb: storage: Fix memory leak in USB bulk transport
USB: storage: Remove subclass and protocol overrides from Novatek quirk
usb: storage: sddr55: Reject out-of-bound new_pba
usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer
usb: dwc3: pci: add support for the Intel Nova Lake -S
usb: dwc3: pci: Sort out the Intel device IDs
usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths
xhci: dbgtty: Fix data corruption when transmitting data form DbC to host
xhci: dbgtty: fix device unregister
USB: serial: ftdi_sio: add support for u-blox EVK-M101
USB: serial: option: add support for Rolling RW101R-GL
drm: sti: fix device leaks at component probe
drm/amd/display: Check NULL before accessing
net: dsa: microchip: common: Fix checks on irq_find_mapping()
net: dsa: microchip: ptp: Fix checks on irq_find_mapping()
libceph: fix potential use-after-free in have_mon_and_osd_map()
libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
libceph: replace BUG_ON with bounds check for map->max_osd
nfsd: Replace clamp_t in nfsd4_get_drc_mem()
usb: udc: Add trace event for usb_gadget_set_state
usb: gadget: udc: fix use-after-free in usb_gadget_state_work
usb: typec: ucsi: psy: Set max current to zero when disconnected
can: rcar_canfd: Fix CAN-FD mode as default
iio: adc: rtq6056: Correct the sign bit index
ksmbd: fix use-after-free in session logoff
net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}()
net: dsa: microchip: Free previously initialized ports on init failures
team: Move team device type change at the end of team_port_add
mailbox: mtk-cmdq: Refine DMA address handling for the command buffer
iio: humditiy: hdc3020: fix units for temperature and humidity measurement
arm64: dts: imx8dxl-ss-conn: swap interrupts number of eqos
nvmem: layouts: fix nvmem_layout_bus_uevent
xhci: fix stale flag preventig URBs after link state error is cleared
drm/amd/display: Don't change brightness for disabled connectors
KVM: SVM: Introduce svm_recalc_lbr_msr_intercepts()
KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv()
KVM: nSVM: Fix and simplify LBR virtualization handling with nested
KVM: SVM: Fix redundant updates of LBR MSR intercepts
wifi: ath12k: correctly handle mcast packets for clients
drm/i915/dp: Initialize the source OUI write timestamp always
UBUNTU: SAUCE: bpf: introduce __MAX_BPF_PROG_TYPE delimiter
UBUNTU: Upstream stable to v6.6.119, v6.12.61

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2139633/+subscriptions