[Bug 2137664] Re: Noble update: upstream stable patchset 2026-01-07

This bug was fixed in the package linux - 6.8.0-106.106

---------------
linux (6.8.0-106.106) noble; urgency=medium

* Miscellaneous upstream changes
- apparmor: validate DFA start states are in bounds in unpack_pdb
- apparmor: fix memory leak in verify_header
- apparmor: replace recursive profile removal with iterative approach
- apparmor: fix: limit the number of levels of policy namespaces
- apparmor: fix side-effect bug in match_char() macro usage
- apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
- apparmor: Fix double free of ns_name in aa_replace_profiles()
- apparmor: fix unprivileged local user can do privileged policy
management
- apparmor: fix differential encoding verification
- apparmor: fix race on rawdata dereference
- apparmor: fix race between freeing data and fs accessing it

-- Mehmet Basaran <mehmet.basaran@canonical.com> Fri, 06 Mar 2026
03:43:25 +0300

** Changed in: linux (Ubuntu Noble)
Status: Fix Committed => Fix Released

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2137664

Title:
Noble update: upstream stable patchset 2026-01-07

Status in linux package in Ubuntu:
Invalid
Status in linux source package in Noble:
Fix Released

Bug description:

SRU Justification

Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:

upstream stable patchset 2026-01-07

Ported from the following upstream stable releases:
v6.6.104, v6.12.45

from git://git.kernel.org/

of: dynamic: Fix memleak when of_pci_add_properties() failed
pinctrl: STMFX: add missing HAS_IOMEM dependency
mips: dts: lantiq: danube: add missing burst length property
mips: lantiq: xway: sysctrl: rename the etop node
of: Add a helper to free property struct
of: dynamic: Fix use after free in of_changeset_add_prop_helper()
ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
scsi: core: sysfs: Correct sysfs attributes access rights
smb: client: fix race with concurrent opens in unlink(2)
smb: client: fix race with concurrent opens in rename(2)
ASoC: codecs: tx-macro: correct tx_macro_component_drv name
erofs: fix atomic context detection when !CONFIG_DEBUG_LOCK_ALLOC
ACPI: EC: Add device to acpi_ec_no_wakeup[] qurik list
nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
NFS: Fix a race when updating an existing write
vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put()
net: ipv4: fix regression in local-broadcast routes
drm/msm: Defer fd_install in SUBMIT ioctl
powerpc/kvm: Fix ifdef to remove build warning
HID: input: rename hidinput_set_battery_charge_status()
HID: input: report battery status changes immediately
Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as success
Bluetooth: hci_event: Mark connection as closed during suspend disconnect
Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced
Bluetooth: hci_sync: fix set_local_name race condition
atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
drm/nouveau: remove unused increment in gm200_flcn_pio_imem_wr
drm/nouveau: remove unused memory target test
ice: fix incorrect counter for buffer allocation failures
dt-bindings: display/msm: qcom,mdp5: drop lut clock
net: dlink: fix multicast stats being counted incorrectly
phy: mscc: Fix when PTP clock is register and unregister
net/mlx5: Reload auxiliary drivers on fw_activate
net/mlx5: Add device cap for supporting hot reset in sync reset flow
net/mlx5: Add support for sync reset using hot reset
net/mlx5: Fix lockdep assertion on sync reset unload event
net/mlx5: Nack sync reset when SFs are present
net/mlx5e: Set local Xoff after FW update
net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts
net: stmmac: Rename phylink_get_caps() callback to update_caps()
net: stmmac: xgmac: Correct supported speed modes
net: stmmac: Set CIC bit only for TX queues with COE
net: rose: split remove and free operations in rose_remove_neigh()
net: rose: convert 'use' field to refcount_t
net: rose: include node references in rose_neigh refcount
sctp: initialize more fields in sctp_v6_from_sk()
efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
KVM: x86: use array_index_nospec with indices that come from guest
x86/microcode/AMD: Handle the case of no BIOS microcode
HID: asus: fix UAF via HID_CLAIMED_INPUT validation
HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
HID: quirks: add support for Legion Go dual dinput modes
HID: logitech: Add ids for G PRO 2 LIGHTSPEED
HID: wacom: Add a new Art Pen 2
HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()
dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted
fs/smb: Fix inconsistent refcnt update
net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions
smb3 client: fix return code mapping of remap_file_range
drm/nouveau/disp: Always accept linear modifier
net: rose: fix a typo in rose_clear_routes()
xfs: do not propagate ENODATA disk errors into xattr code
trace/fgraph: Fix the warning caused by missing unregister notifier
perf symbol-minimal: Fix ehdr reading in filename__read_build_id
vhost: Fix ioctl # for VHOST_[GS]ET_FORK_FROM_OWNER
drm/msm/kms: move snapshot init earlier in KMS init
drm/mediatek: Add error handling for old state CRTC in atomic_disable
net: macb: fix unregister_netdev call order in macb_remove()
efi: stmm: Fix incorrect buffer allocation method
drm/xe/xe_sync: avoid race during ufence signaling
drm/xe: Don't trigger rebind on initial dma-buf validation
bnxt_en: Fix memory corruption when FW resources change during ifdown
bnxt_en: Adjust TX rings if reservation is less than requested
hv_netvsc: Link queues to NAPIs
net: hv_netvsc: fix loss of early receive events from host during channel open.
net: macb: Disable clocks once
RISC-V: KVM: fix stack overrun when loading vlenb
drm/xe/vm: Clear the scratch_pt pointer on error
drm/nouveau: fix error path in nvkm_gsp_fwsec_v2
drm/mediatek: Fix device/node reference count leaks in mtk_drm_get_all_drm_priv
drm/amd/amdgpu: disable hwmon power1_cap* for gfx 11.0.3 on vf mode
PCI: Add PCIE_RESET_CONFIG_DEVICE_WAIT_MS waiting time value
PCI: Rename PCIE_RESET_CONFIG_DEVICE_WAIT_MS to PCIE_RESET_CONFIG_WAIT_MS
PCI: dwc: Rename 'dw_pcie::link_gen' to 'dw_pcie::max_link_speed'
PCI: dwc: Ensure that dw_pcie_wait_for_link() waits 100 ms after link up
thermal/drivers/mediatek/lvts_thermal: Change lvts commands array to static const
thermal/drivers/mediatek/lvts_thermal: Add lvts commands and their sizes to driver data
thermal/drivers/mediatek/lvts_thermal: Add mt7988 lvts commands
UBUNTU: Upstream stable to v6.6.104, v6.12.45

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2137664/+subscriptions