[Bug 2173009] Re: Resolute update: upstream stable patchset 2026-11-02

** Tags added: kernel-daily-bug -- You received this bug notification because you are subscribed to linux in Ubuntu. Matching subscriptions: Bgg, Bmail, Nb https://bugs.launchpad.net/bugs/2173009 Title: Resolute update: upstream stable patchset 2026-11-02 Status in linux package in Ubuntu: Invalid Status in linux source package in Resolute: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2026-11-02 Ported from the following upstream stable releases: v6.18.59, v7.2.13 from git://git.kernel.org/ ALSA: ctxfi: Rename SPDIFI1 to SPDIFI_BAY ALSA: ctxfi: Use correct DAIO type for da_desc ax25: bound REJ-driven fast retransmits with the existing N2 counter rose: purge rose_neigh->queue on final teardown i2c: qcom-geni: Restore the source-clock selection policy soc/tegra: fuse: Add missing newline to APBMISC error message ARM: dts: ti/omap: dra7: fix PCIe PHY clock divider definition power: supply: Fix maintenance charge table kernel-doc power: supply: ds2780: Fix ds2780_get_capacity() returning raw value Drivers: hv: Avoid infinite retry loop in init_vp_index() x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() Drivers: hv: Don't reset VMBus connection state on error/exit paths pinctrl: qcom: qcs8300: Fix intr_target_width pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13 tools/power turbostat: Fix fd_perf leak on reset tools/power turbostat: Fix CWF PMT off-by-one tools/power turbostat: Fix PMT error path fd handling tools/power turbostat: Fix add_counter issue if > 24 counters. power: supply: generic-adc-battery: Fix temperature IIO channel conversion power: supply: core: prevent unregistering a power supply while a callback runs pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12 pinctrl: sunxi: dt: do not accumulate npins across probe attempts drm/vc4: hdmi: Move packet RAM enable to PM runtime gpio: nct6694: Mark the GPIO controller as sleeping vsock: treat TCP_CLOSING as once-established net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure ASoC: Intel: avs: Reset the stream unless it is already prepared ASoC: stm32: spdifrx: fix synchronization state check ASoC: cs42l56: Put the Limiter Cushion control on the limiter register ASoC: cs42l52: Fix the NG Type Switch bit ASoC: pcm3168a: Fix the DAC zero flag polarity bit ASoC: max98371: Fix the Speaker DHT Min Volume bits ASoC: wm8978: Fix the 128x oversampling switch bits ASoC: nau8822: Fix the 128x oversampling switch bits regmap: Drop map lock during cache init and exit netlink: reset skb headers before unicast and multicast filtering accel/rocket: clear rdev on device init failure net/mlx5: HWS, release L2 to L3 tunnel reformats to their own pool net/mlx5: HWS, fix flow meter offset within its bulk ASoC: amd: yc: disable MSI on resume drm/xe: skip eviction of a BO with no resource drm/xe/oa: Zero OA buffer at allocation spi: tegra114: assert CS GPIO for every transfer in a message nios2: fix __wsum type degradation in csum_fold() scsi: st: Save the visited block for the partition the drive is in scsi: target: iscsi: Fix race in discovery auth updates drm/panthor: fix immortalis condition ocfs2/dlm: Protect the recovery list during debugfs reads samples: pidfd: fix userprogs typo pipe: preserve existing fasync readers on writer setup failure tracing: probes: error if BTF is required but unavailable scsi: libsas: Fix SMP IO deadlock during HA resume netlink: avoid hashing the network namespace pointer net: bcmgenet: unshare the skb before writing the control block calipso: keep BIG TCP payload_len in calipso_skbuff_setattr() gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths gpio: mxc: fix race between chained IRQ handler install and probe completion gpio: mxc: fix both_edges bit operations gpio: mxc: use BIT() macro gpio: mxc: fix wakeup_pads bit operations gpio: mxc: fix race between gpiochip registration and IRQ domain setup perf: Fix perf_pmu_migrate_context() leaving events behind printk: Postpone kthread startup PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV accel/rocket: search every core slot when a core is removed afs: free the super info after a grace period autofs: ignore notification errors from a replaced pipe bootconfig: give the footer size static_assert a message unicode: free the map after a grace period watch_queue: Fix note pool publication race in watch_queue_set_size() x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry fsnotify: prevent mark additions during connector teardown pid_namespace: make zap_pid_ns_processes() freezable eventfs: Free the eventfs_inode after an rcu grace period too namei: test for a negative dentry the way traverse_mounts() does lib/crypto: arm64: Fix lost Poly1305 carry when resuming NEON state lib/crypto: poly1305: Use memzero_explicit() in poly1305_final() net/sched: fix use-after-free in __tcf_action_put() net: rds: fix uninitialized trans dereference in CM event handler pinctrl: amd: Clear S4 wake bits when firmware has _AEI sctp: revalidate output stream after association connect wait tools: gpio: fix building from the top level with O= tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields i2c: qcom-cci: Fix HALT_ACK reset request being dropped i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() perf: Track the perf mlock gift separately perf: Update cgroup time when rotating multiplexed events ring-buffer: Do not show buffer_meta for CPUs without a buffer ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx() ring-buffer: Fix false warning in ring_buffer_map_get_reader() scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies scsi: xen/scsifront: Check for a NULL shadow entry on a backend response scsi: libiscsi: Reject a negative task index from parse_pdu_itt scsi: libiscsi: Validate the ITT reflected in a Reject PDU scsi: libiscsi: Validate the task named by a management response drm/amd/pm: add zero fan stop temperature support on smu 14.0.2 drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr drm/amdgpu: report the BO alignment in bytes in GEM_LIST_HANDLES drm/exec: don't immediately add prelocked obj to array of locked objs drm/i915/cx0_phy: Fix ARL-S host bridge detection drm/i915/dmc: Add sanity check for DMC load address drm/xe: Bump LRU for external objects on exec and rebind tracing: Fix the shift out of bounds in the log2 histogram modifier tracing: Take trace_types_lock when dropping the buffer_meta reference tracing: Check operator stack capacity before pushing tracing: Do not initialize tracefs work if tracing is disabled tracing: Fix hist trigger timestamps for buffered events wifi: p54: validate firmware record lengths tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION) tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO) cgroup: fix spurious SIGKILL of CLONE_INTO_CGROUP children cifs: don't update i_size in cifs_do_truncate without a cached handle dm cache: fix demotion stats in passthrough mode dm cache: fix issue with background work locking dm-crypt: fix a tiny race condition in crypt_dec_pending dm-ebs: fix incorrect device offset check in ebs_ctr() dm-integrity: fix infinite loop on discard with large tag size dm-integrity: require stable writes for internal hash modes mac802154: fix data race and NULL deref on local->assoc_dev net/iucv: fix the recvmsg window update xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf xfs: fix capability check in xfs xfs: fix zoned write iomap flags assignments netlink: specs: fix the conntrack filter type netlink: specs: add missing mask attributes for conntrack dump workqueue: Use raise_softirq() to trigger softirq in irq_work handler workqueue: Annotate cb_lock nesting when draining a dead BH pool tipc: protect node reset trace dump with node lock sctp: validate chunk length in the inqueue parser page_pool: keep frag_offset aligned for odd-sized requests s390/ctcm: Prevent XID null dereference s390/pci: Fix leak of uninitialized kernel data in SCLP report ipv4: avoid divide by zero in fib_rebalance drm/amdgpu: Fix VCE 3 ring align_mask netfilter: nft_byteorder: remove multi-register support KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes drm/amdgpu: keep the eviction fence until the last handle is closed futex: Fix mm reuse handling for FUT_OFF_MMSHARED ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture ext4: free the sbi after a grace period net: bridge: mcast: don't truncate the port group walk on teardown net: psp: do not inherit the Rx association on clone ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in net/sched: cls_flower: validate mask pointer after nla_next() smb: client: fix heap overflow in cifs_do_set_acl() smb: client: fix multiuser mount with krb5 scsi: st: Fix use-after-free race between st_remove() and st_open() ntfs3: free the sbi after a grace period drm/i915/dmc: Harden DMC firmware payload parsing sched_ext: idle: Respect task affinity in restricted CPU selection tracing: Fix ignored return value of resize_buffer_duplicate_size() tracing: Keep the predicate limit separate from program capacity drm/amdgpu: free the userptr ranges when a CS fails after parser_bos sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQ smb/client: refresh allocation size after duplicate extents cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() io_uring/cancel: don't spin on local work the task can't run workqueue: release pwq pools by pool type workqueue: Fix unbound pool lifetime for pending pwqs vsock/virtio: validate packet source for connected sockets ipv4: udp: Create exceptions before socket matching vsock/vmci: validate packet source for connected sockets smb: client: fix data corruption with concurrent writes and O_TRUNC smb: client: drain outstanding I/O before truncating on O_TRUNC open ARM: configs: sama5: enable current Microchip KSZ DSA symbols pinctrl: qcom: spmi-gpio: make direction changes exclusive tools/power turbostat: Warn, but don't Err on out-dated perf systems accel/amdxdna: Fix Kconfig invalid configuration sched/core: Call wakeup_preempt() for queued tasks during class change iommupt/kunit: Use if_changed_rule for the kunit exit: fix lost-update race on the child_subreaper bitfields ring-buffer: Skip si_mem_available() for persistent and remote buffers ring-buffer: Use subbuf_order in available memory estimation net: stmmac: dwmac1000: clear the RGMII status interrupt perf/x86/intel/uncore: Fix DMR CXL CM invert filter x86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx() firewire: core: fix race condition in split transaction handling accel/rocket: search every core slot when looking up a scheduler ASoC: SOF: sof-client: Use event-handler mutex consistently ipc: drop the mqueue mount with kern_unmount() on setup failure mshv_vtl: Check per-CPU register page before mmap power: sequencing: qcom-wcn: power off WLAN at probe spi: imx: fix slab corruption from undersized DMA bounce buffers tools/power turbostat: Read complete CPU lists gpio: shared: fix use-after-free bug when adding shared proxies gpio: shared: gracefully handle no-device lookup of shared GPIOs drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set drm/amdgpu: destroy mutex when tearing down ttm buffer entity drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl drm/amdgpu: fix sched entity leak in ttm buffer entity init tracing: Fix crash in print_graph_function_event() selinux: fix BPF token permission checks s390/pai: Handle multiple PMU stop callback invocations drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction drm/amdgpu/userq: actually validate userq BOs smb: client: reject SetEA requests that do not fit the request buffer drm/amdgpu: Remove the bo list mutex UBUNTU: Upstream stable to v6.18.59, v7.2.13 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2173009/+subscriptions