APPLIED: [SRU][Resolute][PULL] Resolute upstream stable patchset 2026-09-04
Stefan Bader
stefan.bader at canonical.com
Wed Sep 16 09:43:59 UTC 2026
On 04/09/2026 18:25, Alice C. Munduruca via kernel-team wrote:
> This pull request (72 commits) includes the following Resolute stable patchsets:
>
> Resolute update: upstream stable patchset 2026-09-04
> Ported from the following upstream stable releases:
> v6.18.49, v7.1.13
> https://bugs.launchpad.net/bugs/2166517
>
> Note also that the 'stable-next' branch head contains this and all
> prior pending upstream stable releases. I recommend fetching and
> applying just this reference ('stable-next') instead of each
> tags/resolute-stable-* reference:
>
> git://git.launchpad.net/~ubuntu-kernel-stable/+git/resolute stable-next
>
> - Alice C. Munduruca
>
> ------------------------------------------------------------------------
>
> The following changes since commit bf75b8bb5ecf5bc92558d30149111799491a7f28:
>
> UBUNTU: Upstream stable to v6.18.47, v6.18.48, v7.1.11, v7.1.12 (2026-09-03 10:25:00 -0400)
>
> are available in the Git repository at:
>
> git://git.launchpad.net/~ubuntu-kernel-stable/+git/resolute tags/resolute-stable-2026-09-04
>
> for you to fetch changes up to 0a0f447b43a852563b7ad0c687829f9926ef6d14:
>
> UBUNTU: Upstream stable to v6.18.49, v7.1.13 (2026-09-04 12:21:53 -0400)
>
> ----------------------------------------------------------------
> Aleksandr Nogikh (1):
> usb: usbtest: disable dynamic ID support
>
> Alice C. Munduruca (1):
> UBUNTU: Upstream stable to v6.18.49, v7.1.13
>
> Asim Viladi Oglu Manizada (1):
> xfrm: ah6: validate routing header segments_left
>
> Baokun Li (2):
> fuse: fix invalidate lock leak on setattr writeback failure
> fuse: fix invalidate lock leak on open O_TRUNC DAX failure
>
> Bartosz Golaszewski (1):
> crypto: qce - Remove unsafe/deprecated algorithms
>
> Breno Leitao (1):
> usb: xhci: bail out of setup if the controller is inaccessible
>
> Bryam Vargas (3):
> selinux: reject a permission value exceeding the class permission count
> selinux: require a class's permission values to cover its permission count
> crypto: virtio - bound the akcipher result length
>
> Christian Borntraeger (1):
> KVM: s390: vsie: zero stale crypto bits
>
> Christian Göttsche (2):
> selinux: use u16 for security classes
> selinux: more strict policy parsing
>
> DaeMyung Kang (1):
> ksmbd: harden file lifetime during session teardown
>
> Devin Wittmayer (1):
> wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb
>
> Dmitry Bogdanov (1):
> nvme-tcp: fix usage of page_frag_cache
>
> Eric Biggers (6):
> netfilter: nft_set_pipapo_avx2: add missing vzeroupper
> mm/swap: reject swapon() on filesystem-level encrypted files
> kunit: irq: Continue increasing hrtimer interval for longer
> crypto: qcom-rng - Enable clock in hwrng case
> crypto: qcom-rng - Remove crypto_rng interface
> crypto: qcom-rng - Allow zero as a random number
>
> Fourie Zhang (1):
> netfilter: nf_tables: don't queue packet path object notifications
>
> Giovanni Cabiddu (1):
> crypto: iaa - fall back to software for multi-entry scatterlists
>
> Griffin Kroah-Hartman (3):
> fpga: dfl: fme: add error handling
> usb: core: Add lock to usb_wakeup_notification()
> usb: core: Strengthen error handling in hub_hub_status()
>
> Haoxiang Li (1):
> accessibility: speakup: unregister tty ldisc on later init failures
>
> Hyunwoo Kim (1):
> net/tcp-ao: fix use-after-free of current_key on reconnect to another peer
>
> Ibrahim Hashimov (1):
> RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp
>
> Jan Sebastian Götte (1):
> crypto: krb5 - use kfree_sensitive() for derived key buffers
>
> Jesper Dangaard Brouer (1):
> veth: fix OOB txq access in veth_poll() with asymmetric queue counts
>
> Jiale Yao (1):
> USB: serial: option: fix slab OOB read in interrupt URB callback
>
> Jiayuan Chen (2):
> tls: device: fix out-of-bounds write in tls_append_frag()
> net: advertise TCP MSS from the configured MTU, not the learned PMTU
>
> Jinu Kim (1):
> KVM: x86/mmu: Check write tracking in all address spaces
>
> Johan Hovold (1):
> USB: serial: spcp8x5: drop broken carrier detect support
>
> Kyle Zeng (4):
> ipv6: seg6: clear IPv4 control block on IPIP decapsulation
> batman-adv: reject unrepresentable multicast TVLV offsets
> vxlan: keep the last remote linked during FDB flush
> net/packet: defer vmalloc TX_RING free until skbs finish
>
> Lucas De Marchi (2):
> xhci: dbgtty: Fix unregister on tty_register_driver() failure
> xhci: dbgtty: Fix unregister on tty_alloc_driver() failure
>
> Marouane El Moufid (1):
> ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()
>
> Md Sadre Alam (1):
> crypto: qce - fix CCM AAD buffer underallocation
>
> Michal Pecio (1):
> usb: xhci: Handle bogus TRB pointers in Missed Service Error events
>
> Miguel Peñaranda (1):
> usb: usbfs: fix use-after-free of usb_device in usbdev_release()
>
> Norbert Szetei (1):
> net: bridge: mcast: fix use-after-free of a master VLAN's multicast context
>
> Pankaj Gupta (1):
> KVM: SEV: Drop FOLL_WRITE for encrypted region registration
>
> Peiyang He (1):
> RDMA/rxe: Fix OOB in free_rd_atomic_resources()
>
> Pratik Vishwakarma (1):
> x86/CPU/AMD: Carve out a Zen5 models range
>
> Qing Ming (2):
> gtp: serialize PDP context updates
> tcp: fix AO info use-after-free in tcp_ao_connect_init()
>
> Rastislav Szabo (1):
> net/tcp: fix TCP-AO key deletion in VRFs
>
> Sabrina Dubroca (1):
> xfrm: espintcp: fix UAF during close
>
> Sean Christopherson (4):
> KVM: SEV: Track the GPA of the guest-controlled VMSA used for SNP guests
> KVM: SEV: Extract loading of guest-provided VMSA to a separate helper
> KVM: SEV: Mark vCPU RUNNABLE after AP_CREATE, even if VMSA is unusable
> KVM: SEV: Wire up kvm_x86_ops.gmem_xxx() if and only if CONFIG_KVM_AMD_SEV=y
>
> Semih Baskan (1):
> usb: xhci: Handle USB3 port events when there is one roothub
>
> Shuangpeng Bai (2):
> usb: gadget: f_tcm: keep port count until LUN teardown completes
> USB: c67x00: fix use-after-free in c67x00_add_iso_urb()
>
> Stephen Smalley (1):
> selinux: switch two allocations to use kzalloc_objs()
>
> Thorsten Blum (2):
> crypto: atmel-tdes - use scatterlist length before DMA mapping
> crypto: mxs-dcp - fix source scatterlist length access
>
> Wentao Guan (1):
> Revert "selinux: reject a permission value exceeding the class permission count"
>
> Will Porter (1):
> ALSA: usb-audio: Complete cleanup after system-resume errors
>
> Yong Wang (1):
> tcp: clamp route advmss to TCP_MIN_MSS
>
> Zhiling Zou (1):
> xfrm: drop ESP-in-TCP packets with no ingress device
>
> Zihan Xi (3):
> xfrm: avoid lock inversion in nat keepalive work
> xfrm: fix xfrm_state_construct() auth-trunc leak
> xfrm: bound nat keepalive state collection
>
> Documentation/filesystems/fscrypt.rst | 4 +
> arch/s390/kvm/vsie.c | 1 +
> arch/x86/kernel/cpu/amd.c | 1 +
> arch/x86/kvm/mmu/page_track.c | 32 ++-
> arch/x86/kvm/svm/sev.c | 76 +++---
> arch/x86/kvm/svm/svm.c | 8 +-
> arch/x86/kvm/svm/svm.h | 13 +-
> crypto/krb5/krb5_api.c | 8 +-
> debian.master/upstream-stable | 4 +-
> drivers/accessibility/speakup/main.c | 1 +
> drivers/crypto/Kconfig | 1 -
> drivers/crypto/atmel-tdes.c | 5 +-
> drivers/crypto/intel/iaa/iaa_crypto_main.c | 111 ++++-----
> drivers/crypto/intel/iaa/iaa_crypto_stats.c | 9 +
> drivers/crypto/intel/iaa/iaa_crypto_stats.h | 2 +
> drivers/crypto/mxs-dcp.c | 2 +-
> drivers/crypto/qce/aead.c | 58 +----
> drivers/crypto/qce/common.c | 55 +----
> drivers/crypto/qce/common.h | 16 +-
> drivers/crypto/qce/regs-v5.h | 4 -
> drivers/crypto/qce/sha.c | 30 +--
> drivers/crypto/qce/sha.h | 1 -
> drivers/crypto/qce/skcipher.c | 97 +-------
> drivers/crypto/qcom-rng.c | 156 ++-----------
> .../crypto/virtio/virtio_crypto_akcipher_algs.c | 3 +-
> drivers/fpga/dfl-fme-perf.c | 2 +
> drivers/infiniband/sw/rxe/rxe_qp.c | 18 +-
> drivers/net/gtp.c | 21 +-
> drivers/net/veth.c | 3 +-
> drivers/net/vxlan/vxlan_core.c | 9 +-
> drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 4 +
> drivers/nvme/host/tcp.c | 8 +
> drivers/target/target_core_fabric_configfs.c | 8 +
> drivers/usb/c67x00/c67x00-sched.c | 4 +-
> drivers/usb/core/devio.c | 2 +-
> drivers/usb/core/hub.c | 7 +-
> drivers/usb/gadget/function/f_tcm.c | 2 +-
> drivers/usb/host/xhci-dbgtty.c | 15 +-
> drivers/usb/host/xhci-ring.c | 20 +-
> drivers/usb/host/xhci.c | 11 +-
> drivers/usb/misc/usbtest.c | 1 +
> drivers/usb/serial/option.c | 20 +-
> drivers/usb/serial/spcp8x5.c | 13 --
> fs/fuse/dir.c | 9 +-
> fs/fuse/file.c | 4 +-
> fs/smb/server/smb2pdu.c | 6 +-
> fs/smb/server/vfs_cache.c | 179 +++++++++++++--
> fs/smb/server/vfs_cache.h | 4 +-
> include/kunit/run-in-irq-context.h | 10 +-
> include/linux/skbuff.h | 24 ++
> include/net/ip.h | 25 ++
> include/net/ip6_route.h | 37 +++
> include/net/tcp.h | 5 +
> include/target/target_core_fabric.h | 2 +
> mm/swapfile.c | 7 +
> net/batman-adv/tvlv.c | 5 +-
> net/bridge/br_multicast.c | 4 +-
> net/ipv4/route.c | 4 +-
> net/ipv4/tcp_ao.c | 19 +-
> net/ipv4/tcp_ipv4.c | 2 +-
> net/ipv4/tcp_minisocks.c | 2 +-
> net/ipv4/tcp_output.c | 6 +-
> net/ipv6/ah6.c | 29 ++-
> net/ipv6/route.c | 2 +-
> net/ipv6/seg6_local.c | 7 +
> net/ipv6/tcp_ipv6.c | 2 +-
> net/netfilter/nf_tables_api.c | 36 +--
> net/netfilter/nft_set_pipapo_avx2.c | 17 +-
> net/packet/af_packet.c | 96 +++++++-
> net/tls/tls_device.c | 3 +-
> net/xfrm/espintcp.c | 9 +-
> net/xfrm/xfrm_nat_keepalive.c | 53 ++++-
> net/xfrm/xfrm_user.c | 2 +-
> security/selinux/include/security.h | 1 +
> security/selinux/ss/avtab.c | 35 ++-
> security/selinux/ss/avtab.h | 13 ++
> security/selinux/ss/conditional.c | 22 +-
> security/selinux/ss/constraint.h | 1 +
> security/selinux/ss/policydb.c | 254 +++++++++++++++++----
> security/selinux/ss/policydb.h | 31 ++-
> security/selinux/ss/services.c | 8 +-
> sound/usb/card.c | 14 +-
> sound/usb/midi.c | 2 +
> 83 files changed, 1146 insertions(+), 711 deletions(-)
>
Applied to resolute:linux/master-next. Thanks.
-Stefan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20260916/20dac352/attachment.sig>
More information about the kernel-team
mailing list