APPLIED/Cmnt: [SRU][Noble][PULL] Noble upstream stable patchset 2026-06-08

[Alice C. Munduruca]

Hello Nicolas,

On Mon, 28 Sept 2026 at 10:52, Nicolas Dichtel
<nicolas.dichtel at 6wind.com> wrote:
>
> Le 09/06/2026 à 18:18, Stefan Bader via kernel-team a écrit :
> > On 08/06/2026 21:05, Alice C. Munduruca via kernel-team wrote:
> >> This pull request (195 commits) includes the following Noble stable patchsets:
> >>
> >>          Noble update: upstream stable patchset 2026-06-08
> >>                   Ported from the following upstream stable releases:
> >>                           v6.6.132, v6.6.133, v6.12.81
> >>          https://bugs.launchpad.net/bugs/2155958
> >>
> >> Note also that the 'stable-next' branch head contains this and all
> >> prior pending upstream stable releases. I recommend fetching and
> >> applying just this reference ('stable-next') instead of each
> >> tags/noble-stable-* reference:
> >>
> >>    git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble stable-next
> >>
> >>   - Alice C. Munduruca
> >>
> >> ------------------------------------------------------------------------
> >>
> >> The following changes since commit 3f7af0b31f3cb335e1e54b30ea0755ddc2e04304:
> >>
> >>    UBUNTU: Upstream stable to v6.6.131, v6.12.78, v6.12.79, v6.12.80
> >> (2026-06-08 11:03:43 -0400)
> >>
> >> are available in the Git repository at:
> >>
> >>    git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble tags/noble-
> >> stable-2026-06-08
> >>
> >> for you to fetch changes up to 07e79522fe3467a40ef89743047ebb7c99693c43:
> >>
> >>    UBUNTU: Upstream stable to v6.6.132, v6.6.133, v6.12.81 (2026-06-08
> >> 11:04:05 -0400)
> >>
> >> ----------------------------------------------------------------
> [snip]
>
> >> Pablo Neira Ayuso (7):
> >>        netfilter: flowtable: strictly check for maximum number of actions
> >>        netfilter: nf_conntrack_expect: honor expectation helper field
> This commit ...
>
> >>        netfilter: nf_conntrack_expect: use expect->helper
> >>        netfilter: nf_conntrack_expect: store netns and zone in expectation
> >>        netfilter: ctnetlink: ignore explicit helper on new expectations
> ... and this one have introduced a regression.
>
> It has been fixed upstream in v7.1 in commit dcb0f9aefdd6 ("netfilter:
> nf_conntrack_expect: restore helper propagation via expectation").

This commit has landed in upstream stable branches we track for these
upstream stable patchsets. Some time this/next week, we will release a
patchset containing changes from v6.6.151 and v6.12.103, both of which
contain backports of this fix.

Once that patchset is applied, you will be able to test the kernel
built with its changes a week later, available in -proposed. [1] After
two weeks it will be released at large. [2]

>
> https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dcb0f9aefdd6
>
> Should I open a launchpad entry to request a backport to the noble (6.8) kernel?

No launchpad bug is thus necessary, although thanks for letting us know :)

>
> Regards,
> Nicolas

Thanks and have a nice day,
 - Alice C. Munduruca

[1]: https://ubuntu.com/kernel/docs/how-to/testing-verification/test-pre-release-kernels/
[2]: https://canonical.com/blog/accelerating-delivery-of-cve-fixes-with-a-new-kernel-release-strategy