APPLIED: [SRU][Noble][PULL] Noble upstream stable patchset 2025-12-12
Mehmet Basaran
mehmet.basaran at canonical.com
Mon Dec 15 21:30:35 UTC 2025
Applied 136 (1 previously applied via cves) commits to noble:linux
master-next branch. Thanks.
-------------- next part --------------
Manuel Diewald <manuel.diewald at canonical.com> writes:
> This pull request (137 commits) includes the following Noble stable patchsets:
>
> Noble update: upstream stable patchset 2025-12-12
> Ported from the following upstream stable releases:
> v6.6.98, v6.6.99, v6.12.38, v6.12.39
>
> Note: Both v6.6.98 and v6.12.38 consist of only one patch 'x86/CPU/AMD:
> Properly check the TSA microcode' that is a follow-up fix for a previous
> stable backport and that has been included ahead of time in noble
> patchset 2025-12-11 (LP: #2134640), thus leaving them both empty. They
> are listed here to make it clear that they have been processed. Arguably
> they should have been listed in the previous noble patchset.
>
> https://bugs.launchpad.net/bugs/2135261
>
> Note also that the 'stable-next' branch head contains this and all
> prior pending upstream stable releases. I recommend fetching and
> applying just this reference ('stable-next') instead of each
> tags/noble-stable-* reference:
>
> git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble stable-next
>
> -Manuel
>
> ------------------------------------------------------------------------
>
> The following changes since commit e3b7ad17951ff0d7a86318d2557cbed54d2c7916:
>
> UBUNTU: Upstream stable to v6.6.97, v6.12.37 (2025-12-11 17:31:10 +0100)
>
> are available in the Git repository at:
>
> git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble tags/noble-stable-2025-12-12
>
> for you to fetch changes up to a19888619f1fd39dd7e83c59f4b57e81daff0265:
>
> UBUNTU: Upstream stable to v6.6.98, v6.6.99, v6.12.38, v6.12.39 (2025-12-12 21:24:52 +0100)
>
> ----------------------------------------------------------------
> Achill Gilgenast (1):
> kallsyms: fix build without execinfo
>
> Akira Inoue (1):
> HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
>
> Al Viro (2):
> fix proc_sys_compare() handling of in-lookup dentries
> ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
>
> Alessio Belle (1):
> drm/imagination: Fix kernel crash when hard resetting the GPU
>
> Alexander Gordeev (1):
> mm/vmalloc: leave lazy MMU mode on PTE mapping error
>
> Alok Tiwari (1):
> net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
>
> Arun Raghavan (1):
> ASoC: fsl_sai: Force a software reset when starting in consumer mode
>
> Baolin Wang (1):
> mm: fix the inaccurate memory statistics issue for users
>
> Bartosz Golaszewski (1):
> pinctrl: qcom: msm: mark certain pins as invalid for interrupts
>
> Ben Skeggs (1):
> drm/nouveau/gsp: fix potential leak of memory used during acpi init
>
> Borislav Petkov (AMD) (1):
> KVM: SVM: Set synthesized TSA CPUID flags
>
> Chao Yu (2):
> erofs: fix to add missing tracepoint in erofs_read_folio()
> erofs: fix to add missing tracepoint in erofs_readahead()
>
> Chia-Lin Kao (AceLan) (1):
> HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
>
> Christian König (1):
> drm/ttm: fix error handling in ttm_buffer_object_transfer
>
> Chunhai Guo (1):
> erofs: free pclusters if no cached folio is attached
>
> Dan Carpenter (1):
> ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
>
> Daniel J. Ogorchock (1):
> HID: nintendo: avoid bluetooth suspend/resume stalls
>
> Daniil Dulov (1):
> wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
>
> David Howells (2):
> rxrpc: Fix bug due to prealloc collision
> rxrpc: Fix oops due to non-existence of prealloc backlog struct
>
> David Woodhouse (1):
> KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.
>
> Deren Wu (1):
> wifi: mt76: mt7921: prevent decap offload config before STA initialization
>
> Duanqiang Wen (1):
> net: libwx: fix alloc msix vectors failed
>
> Eric Dumazet (1):
> netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
>
> EricChan (1):
> net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2
>
> Fangrui Song (1):
> riscv: vdso: Exclude .rodata from the PT_DYNAMIC segment
>
> Fengnan Chang (1):
> io_uring: make fallocate be hashed work
>
> Filipe Manana (1):
> btrfs: fix assertion when building free space tree
>
> Flora Cui (2):
> drm/amdgpu/discovery: use specific ip_discovery.bin for legacy asics
> drm/amdgpu/ip_discovery: add missing ip_discovery fw
>
> Florian Fainelli (3):
> scripts/gdb: fix interrupts display after MCP on x86
> scripts/gdb: de-reference per-CPU MCE interrupts
> scripts/gdb: fix interrupts.py after maple tree conversion
>
> Gao Xiang (5):
> erofs: address D-cache aliasing
> erofs: get rid of `z_erofs_next_pcluster_t`
> erofs: tidy up zdata.c
> erofs: refine readahead tracepoint
> erofs: fix rare pcluster memory leak after unmounting
>
> Guillaume Nault (1):
> gre: Fix IPv6 multicast route creation.
>
> Hangbin Liu (1):
> selftests: net: lib: fix shift count out of range
>
> Håkon Bugge (1):
> md/md-bitmap: fix GPF in bitmap_get_stats()
>
> JP Kobryn (1):
> x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
>
> Jakub Kicinski (1):
> netlink: make sure we allow at least one dump skb
>
> Jann Horn (1):
> x86/mm: Disable hugetlb page table sharing on 32-bit
>
> Jianbo Liu (1):
> net/mlx5e: Add new prio for promiscuous mode
>
> Jiawen Wu (1):
> net: wangxun: revert the adjustment of the IRQ vector sequence
>
> Jiayuan Chen (1):
> tcp: Correct signedness in skb remaining space calculation
>
> Johannes Berg (1):
> wifi: mac80211: fix non-transmitted BSSID profile search
>
> Kaustabh Chakraborty (1):
> drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
>
> Kito Xu (1):
> net: appletalk: Fix device refcount leak in atrtr_create()
>
> Kuen-Han Tsai (2):
> usb: gadget: u_serial: Fix race condition in TTY wakeup
> Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"
>
> Kuniyuki Iwashima (6):
> netlink: Fix wraparounds of sk->sk_rmem_alloc.
> tipc: Fix use-after-free in tipc_conn_close().
> atm: clip: Fix potential null-ptr-deref in to_atmarpd().
> atm: clip: Fix memory leak of struct clip_vcc.
> atm: clip: Fix infinite recursive call of clip_push().
> netlink: Fix rmem check in netlink_broadcast_deliver().
>
> Lachlan Hodges (3):
> wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements
> wifi: cfg80211: fix S1G beacon head validation in nl80211
> wifi: mac80211: correctly identify S1G short beacon
>
> Leo Yan (1):
> perf: build: Setup PKG_CONFIG_LIBDIR for cross compilation
>
> Liam Merwick (1):
> KVM: Allow CPU to reschedule while setting per-page memory attributes
>
> Linus Torvalds (1):
> eventpoll: don't decrement ep refcount while still holding the ep mutex
>
> Long Li (1):
> net: mana: Record doorbell physical address in PF mode
>
> Luiz Augusto von Dentz (2):
> Bluetooth: hci_sync: Fix not disabling advertising instance
> Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected
>
> Lukas Wunner (1):
> crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
>
> Luo Gengkun (1):
> perf/core: Fix the WARN_ON_ONCE is out of lock protected region
>
> Manuel Diewald (1):
> UBUNTU: Upstream stable to v6.6.98, v6.6.99, v6.12.38, v6.12.39
>
> Mario Limonciello (1):
> pinctrl: amd: Clear GPIO debounce for suspend
>
> Mark Brown (1):
> arm64: Filter out SME hwcaps when FEAT_SME isn't implemented
>
> Mathy Vanhoef (1):
> wifi: prevent A-MSDU attacks in mesh networks
>
> Matthew Brost (2):
> drm/sched: Increment job count before swapping tail spsc queue
> drm/xe: Allocate PF queue size on pow2 boundary
>
> Michael Jeanson (1):
> rseq: Fix segfault on registration when rseq_cs is non-zero
>
> Michael Lo (1):
> wifi: mt76: mt7925: fix invalid array index in ssid assignment during hw scan
>
> Michal Luczaj (3):
> vsock: Fix transport_{g2h,h2g} TOCTOU
> vsock: Fix transport_* TOCTOU
> vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
>
> Michal Wajdeczko (1):
> drm/xe/pf: Clear all LMTT pages on alloc
>
> Mikhail Paulyshka (1):
> x86/rdrand: Disable RDSEED on AMD Cyan Skillfish
>
> Mikko Perttunen (1):
> drm/tegra: nvdec: Fix dma_alloc_coherent error check
>
> Ming Yen Hsieh (1):
> wifi: mt76: mt7925: fix the wrong config for tx interrupt
>
> Mingming Cao (1):
> ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof
>
> Namjae Jeon (1):
> ksmbd: fix potential use-after-free in oplock/lease break ack
>
> Nicolas Pitre (1):
> vt: add missing notification when switching back to text mode
>
> Nigel Croxon (1):
> raid10: cleanup memleak at raid10_make_request
>
> Oleksij Rempel (5):
> net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
> net: phy: smsc: Force predictable MDI-X state on LAN87xx
> net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
> net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
> net: phy: microchip: Use genphy_soft_reset() to purge stale LPA bits
>
> Paulo Alcantara (3):
> smb: client: avoid unnecessary reconnects when refreshing referrals
> smb: client: fix DFS interlink failover
> smb: client: fix potential race in cifs_put_tcon()
>
> Peter Zijlstra (1):
> perf: Revert to requiring CAP_SYS_ADMIN for uprobes
>
> Petr Machata (1):
> selftests: net: lib: Move logging from forwarding/lib.sh here
>
> Philip Yang (1):
> drm/amdkfd: Don't call mmput from MMU notifier callback
>
> Richard Fitzgerald (1):
> ASoC: cs35l56: probe() should fail if the device ID is not recognized
>
> Ronnie Sahlberg (1):
> ublk: sanity check add_dev input for underflow
>
> Sascha Hauer (1):
> clk: scmi: Handle case where child clocks are initialized before their parents
>
> Sean Christopherson (1):
> KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
>
> Sean Nyekjaer (1):
> can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
>
> Shengjiu Wang (1):
> ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
>
> Shravya KN (1):
> bnxt_en: Fix DCB ETS validation
>
> Shyam Prasad N (1):
> cifs: all initializations for tcon should happen in tcon_info_alloc
>
> Simona Vetter (1):
> drm/gem: Fix race in drm_gem_handle_create_tail()
>
> Somnath Kotur (1):
> bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
>
> Srinivasan Shanmugam (1):
> drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV
>
> Stefan Metzmacher (1):
> smb: server: make use of rdma_destroy_qp()
>
> Stefano Garzarella (1):
> vsock: fix `vsock_proto` declaration
>
> Takashi Iwai (1):
> ALSA: hda/realtek: Add mic-mute LED setup for ASUS UM5606
>
> Thomas Fourier (1):
> atm: idt77252: Add missing `dma_map_error()`
>
> Thomas Zimmermann (2):
> drm/gem: Acquire references on GEM handles for framebuffers
> drm/framebuffer: Acquire internal references on GEM handles
>
> Tim Crawford (1):
> ALSA: hda/realtek: Add quirks for some Clevo laptops
>
> Tiwei Bie (1):
> um: vector: Reduce stack usage in vector_eth_configure()
>
> Uwe Kleine-König (1):
> pwm: mediatek: Ensure to disable clocks in error path
>
> Victor Nogueira (1):
> net/sched: Abort __tc_modify_qdisc if parent class does not exist
>
> Wang Jinchao (1):
> md/raid1: Fix stack memory use after return in raid1_reshape
>
> Wei Yang (1):
> maple_tree: fix mt_destroy_walk() on root leaf node
>
> Willem de Bruijn (2):
> bpf: Adjust free target to avoid global starvation of LRU map
> selftests/bpf: adapt one more case in test_lru_map to the new target_free
>
> Xiaowei Li (1):
> net: usb: qmi_wwan: add SIMCom 8230C composition
>
> Yasmin Fitzgerald (1):
> ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100
>
> Yazen Ghannam (4):
> x86/mce/amd: Add default names for MCA banks and blocks
> x86/mce/amd: Fix threshold limit reset
> x86/mce: Don't remove sysfs if thresholding sysfs init fails
> x86/mce: Ensure user polling settings are honored when restarting timer
>
> Yeoreum Yun (1):
> kasan: remove kasan_find_vm_area() to prevent possible deadlock
>
> Yue Haibing (1):
> atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
>
> Yuzuru10 (1):
> ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic
>
> Zhang Heng (1):
> HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
>
> Zheng Qixing (1):
> nbd: fix uaf in nbd_genl_connect() error path
>
> Documentation/bpf/map_hash.rst | 8 +-
> Documentation/bpf/map_lru_hash_update.dot | 6 +-
> arch/arm64/kernel/cpufeature.c | 35 +--
> arch/riscv/kernel/vdso/vdso.lds.S | 2 +-
> arch/um/drivers/vector_kern.c | 42 +---
> arch/x86/Kconfig | 2 +-
> arch/x86/include/asm/msr-index.h | 1 +
> arch/x86/kernel/cpu/amd.c | 7 +
> arch/x86/kernel/cpu/mce/amd.c | 28 ++-
> arch/x86/kernel/cpu/mce/core.c | 24 +-
> arch/x86/kernel/cpu/mce/intel.c | 1 +
> arch/x86/kvm/cpuid.c | 4 +
> arch/x86/kvm/svm/sev.c | 4 +
> arch/x86/kvm/xen.c | 15 +-
> crypto/ecc.c | 2 +-
> debian.master/upstream-stable | 4 +-
> drivers/atm/idt77252.c | 5 +
> drivers/block/nbd.c | 6 +-
> drivers/block/ublk_drv.c | 3 +-
> drivers/char/ipmi/ipmi_msghandler.c | 3 +-
> drivers/clk/clk-scmi.c | 18 +-
> drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
> drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 30 ++-
> drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c | 5 +-
> drivers/gpu/drm/amd/amdgpu/amdgpu_virt.h | 3 +-
> drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 43 ++--
> drivers/gpu/drm/drm_framebuffer.c | 31 ++-
> drivers/gpu/drm/drm_gem.c | 74 +++++-
> drivers/gpu/drm/drm_internal.h | 2 +
> drivers/gpu/drm/exynos/exynos7_drm_decon.c | 4 +
> drivers/gpu/drm/imagination/pvr_power.c | 4 +-
> drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c | 20 +-
> drivers/gpu/drm/tegra/nvdec.c | 6 +-
> drivers/gpu/drm/ttm/ttm_bo_util.c | 13 +-
> drivers/gpu/drm/xe/xe_gt_pagefault.c | 1 +
> drivers/gpu/drm/xe/xe_lmtt.c | 11 +
> drivers/hid/hid-ids.h | 6 +
> drivers/hid/hid-lenovo.c | 8 +
> drivers/hid/hid-multitouch.c | 8 +-
> drivers/hid/hid-nintendo.c | 38 ++-
> drivers/hid/hid-quirks.c | 3 +
> drivers/md/md-bitmap.c | 3 +-
> drivers/md/raid1.c | 1 +
> drivers/md/raid10.c | 10 +-
> drivers/net/can/m_can/m_can.c | 2 +-
> drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c | 2 +
> drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 2 +-
> drivers/net/ethernet/ibm/ibmvnic.h | 8 +-
> drivers/net/ethernet/mellanox/mlx5/core/en/fs.h | 9 +-
> drivers/net/ethernet/mellanox/mlx5/core/en_fs.c | 2 +-
> drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 13 +-
> drivers/net/ethernet/microsoft/mana/gdma_main.c | 3 +
> drivers/net/ethernet/stmicro/stmmac/dwxgmac2_dma.c | 24 +-
> drivers/net/ethernet/wangxun/libwx/wx_lib.c | 16 +-
> drivers/net/ethernet/wangxun/libwx/wx_type.h | 2 +-
> drivers/net/ethernet/wangxun/ngbe/ngbe_main.c | 2 +-
> drivers/net/ethernet/wangxun/ngbe/ngbe_type.h | 2 +-
> drivers/net/ethernet/wangxun/txgbe/txgbe_irq.c | 4 +-
> drivers/net/ethernet/wangxun/txgbe/txgbe_type.h | 4 +-
> drivers/net/ethernet/xilinx/ll_temac_main.c | 2 +-
> drivers/net/phy/microchip.c | 3 +-
> drivers/net/phy/smsc.c | 57 ++++-
> drivers/net/usb/qmi_wwan.c | 1 +
> .../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 4 +-
> drivers/net/wireless/mediatek/mt76/mt7921/main.c | 3 +
> drivers/net/wireless/mediatek/mt76/mt7925/mcu.c | 4 +-
> drivers/net/wireless/mediatek/mt76/mt7925/regs.h | 2 +-
> drivers/net/wireless/zydas/zd1211rw/zd_mac.c | 6 +-
> drivers/pinctrl/pinctrl-amd.c | 11 +
> drivers/pinctrl/qcom/pinctrl-msm.c | 20 ++
> drivers/pwm/pwm-mediatek.c | 13 +-
> drivers/tty/vt/vt.c | 1 +
> drivers/usb/gadget/function/u_serial.c | 12 +-
> fs/btrfs/free-space-tree.c | 16 +-
> fs/erofs/data.c | 5 +
> fs/erofs/decompressor.c | 12 +-
> fs/erofs/utils.c | 7 +-
> fs/erofs/zdata.c | 278 ++++++++++-----------
> fs/eventpoll.c | 12 +-
> fs/proc/inode.c | 2 +-
> fs/proc/proc_sysctl.c | 18 +-
> fs/proc/task_mmu.c | 14 +-
> fs/smb/client/cifsglob.h | 3 +
> fs/smb/client/cifsproto.h | 13 +-
> fs/smb/client/connect.c | 47 ++--
> fs/smb/client/dfs.c | 73 +++---
> fs/smb/client/dfs.h | 42 ++--
> fs/smb/client/dfs_cache.c | 186 ++++++++------
> fs/smb/client/fs_context.h | 1 +
> fs/smb/client/misc.c | 9 +
> fs/smb/client/namespace.c | 2 +-
> fs/smb/server/smb2pdu.c | 29 +--
> fs/smb/server/transport_rdma.c | 5 +-
> fs/smb/server/vfs.c | 1 +
> include/drm/drm_file.h | 3 +
> include/drm/drm_framebuffer.h | 7 +
> include/drm/spsc_queue.h | 4 +-
> include/linux/ieee80211.h | 110 ++++++--
> include/linux/math.h | 12 +
> include/linux/mm.h | 5 +
> include/net/af_vsock.h | 2 +-
> include/net/netfilter/nf_flow_table.h | 2 +-
> include/trace/events/erofs.h | 2 +-
> io_uring/opdef.c | 1 +
> kernel/bpf/bpf_lru_list.c | 9 +-
> kernel/bpf/bpf_lru_list.h | 1 +
> kernel/events/core.c | 6 +-
> kernel/rseq.c | 60 ++++-
> lib/maple_tree.c | 1 +
> mm/kasan/report.c | 13 +-
> mm/vmalloc.c | 22 +-
> net/appletalk/ddp.c | 1 +
> net/atm/clip.c | 64 +++--
> net/bluetooth/hci_event.c | 3 +
> net/bluetooth/hci_sync.c | 2 +-
> net/ipv4/tcp.c | 2 +-
> net/ipv6/addrconf.c | 9 +-
> net/mac80211/mlme.c | 14 +-
> net/mac80211/scan.c | 11 +-
> net/mac80211/util.c | 6 +-
> net/netlink/af_netlink.c | 82 +++---
> net/rxrpc/call_accept.c | 4 +
> net/sched/sch_api.c | 23 +-
> net/tipc/topsrv.c | 2 +
> net/vmw_vsock/af_vsock.c | 57 ++++-
> net/wireless/nl80211.c | 7 +-
> net/wireless/scan.c | 17 +-
> net/wireless/util.c | 52 +++-
> scripts/gdb/linux/constants.py.in | 7 +
> scripts/gdb/linux/interrupts.py | 16 +-
> scripts/gdb/linux/mapletree.py | 252 +++++++++++++++++++
> scripts/gdb/linux/xarray.py | 28 +++
> sound/pci/hda/patch_realtek.c | 7 +
> sound/soc/amd/yc/acp6x-mach.c | 7 +
> sound/soc/codecs/cs35l56-shared.c | 2 +-
> sound/soc/fsl/fsl_asrc.c | 3 +-
> sound/soc/fsl/fsl_sai.c | 14 +-
> tools/arch/x86/include/asm/msr-index.h | 1 +
> tools/build/feature/Makefile | 25 +-
> tools/include/linux/kallsyms.h | 4 +
> tools/perf/Makefile.perf | 27 +-
> tools/testing/selftests/bpf/test_lru_map.c | 105 ++++----
> tools/testing/selftests/net/forwarding/lib.sh | 108 --------
> tools/testing/selftests/net/lib.sh | 116 +++++++++
> virt/kvm/kvm_main.c | 3 +
> 145 files changed, 1968 insertions(+), 928 deletions(-)
> create mode 100644 scripts/gdb/linux/mapletree.py
> create mode 100644 scripts/gdb/linux/xarray.py
>
> --
> kernel-team mailing list
> kernel-team at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 873 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20251216/44c1a14e/attachment.sig>
More information about the kernel-team
mailing list