[Bug 2147841] Re: Noble update: upstream stable patchset 2026-04-10

** Tags added: kernel-daily-bug -- You received this bug notification because you are subscribed to linux in Ubuntu. Matching subscriptions: Bgg, Bmail, Nb https://bugs.launchpad.net/bugs/2147841 Title: Noble update: upstream stable patchset 2026-04-10 Status in linux package in Ubuntu: Invalid Status in linux source package in Noble: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2026-04-10 Ported from the following upstream stable releases: v6.6.124, v6.12.70 from git://git.kernel.org/ nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec x86/kfence: fix booting on 32bit non-PAE systems platform/x86: intel_telemetry: Fix swapped arrays in PSS output pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains rbd: check for EOD after exclusive lock is ensured to be held ARM: 9468/1: fix memset64() on big-endian Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" KVM: Don't clobber irqfd routing type when deassigning irqfd netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() binder: fix BR_FROZEN_REPLY error log binderfs: fix ida_alloc_max() upper bound KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures gve: Fix stats report corruption on queue count change tracing: Fix ftrace event field alignments wifi: mac80211: ocb: skip rx_no_sta when interface is not joined wifi: wlcore: ensure skb headroom before skb_push net: usb: sr9700: support devices with virtual driver CD block,bfq: fix aux stat accumulation destination smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED LoongArch: Enable exception fixup for specific ADE subcode HID: intel-ish-hid: Update ishtp bus match to support device ID table HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL btrfs: fix reservation leak in some error paths when inserting inline extent HID: intel-ish-hid: Reset enum_devices_done before enumeration HID: playstation: Center initial joystick axes to prevent spurious events ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk netfilter: replace -EEXIST with -EBUSY HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free wifi: mac80211: collect station statistics earlier when disconnect ASoC: davinci-evm: Fix reference leak in davinci_evm_probe nvme-fc: release admin tagset if init fails nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() ASoC: amd: yc: Fix microphone on ASUS M6500RE ASoC: tlv320adcx140: Propagate error codes during probe spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization regmap: maple: free entry on mas_store_gfp() failure wifi: cfg80211: Fix bitrate calculation overflow for HE rates scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() wifi: mac80211: correctly check if CSA is active wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice platform/x86: toshiba_haps: Fix memory leaks in add/remove routines platform/x86: intel_telemetry: Fix PSS event register mask platform/x86: hp-bioscfg: Skip empty attribute names smb/client: fix memory leak in smb2_open_file() net: add skb_header_pointer_careful() helper net/sched: cls_u32: use skb_header_pointer_careful() dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero net: liquidio: Initialize netdev pointer before queue setup net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup dpaa2-switch: add bounds check for if_id in IRQ handler net: don't touch dev->stats in BPF redirect paths tipc: use kfree_sensitive() for session key material net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() net: gro: fix outer network offset drm/mgag200: fix mgag200_bmc_stop_scanout() hwmon: (occ) Mark occ_init_attribute() as __printf ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF ASoC: amd: fix memory leak in acp3x pdm dma ops gve: Correct ethtool rx_dropped calculation spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer spi: tegra210-quad: Move curr_xfer read inside spinlock spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer spi: tegra: Fix a memory leak in tegra_slink_probe() spi: tegra114: Preserve SPI mode bits in def_command1_reg ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. x86/vmware: Fix hypercall clobbers ALSA: aloop: Fix racy access at PCM trigger PCI/ERR: Ensure error recoverability at all times ublk: fix deadlock when reading partition table md: suspend array while updating raid_disks via sysfs ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55 PCI: qcom: Remove ASPM L0s support for MSM8996 SoC drm/amd/pm: Disable MMIO access during SMU Mode 1 reset HID: logitech: add HID++ support for Logitech MX Anywhere 3S btrfs: reject new transactions if the fs is fully read-only ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio net: phy: add phy_interface_weight() net: phy: add phy_interface_copy() net: sfp: pre-parse the module support net: sfp: enhance quirk for Fibrestore 2.5G copper SFP module net: sfp: convert sfp quirks to modify struct sfp_module_support net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module drm/amd/display: fix wrong color value mapping on MCM shaper LUT drm/xe/query: Fix topology query pointer advance ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update() gpiolib-acpi: Update file references in the Documentation and MAINTAINERS UBUNTU: Upstream stable to v6.6.124, v6.12.70 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2147841/+subscriptions