[SRU][Noble][PULL] Noble upstream stable patchset 2025-12-12
Manuel Diewald
manuel.diewald at canonical.com
Mon Dec 15 13:52:35 UTC 2025
This pull request (137 commits) includes the following Noble stable patchsets:
Noble update: upstream stable patchset 2025-12-12
Ported from the following upstream stable releases:
v6.6.98, v6.6.99, v6.12.38, v6.12.39
Note: Both v6.6.98 and v6.12.38 consist of only one patch 'x86/CPU/AMD:
Properly check the TSA microcode' that is a follow-up fix for a previous
stable backport and that has been included ahead of time in noble
patchset 2025-12-11 (LP: #2134640), thus leaving them both empty. They
are listed here to make it clear that they have been processed. Arguably
they should have been listed in the previous noble patchset.
https://bugs.launchpad.net/bugs/2135261
Note also that the 'stable-next' branch head contains this and all
prior pending upstream stable releases. I recommend fetching and
applying just this reference ('stable-next') instead of each
tags/noble-stable-* reference:
git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble stable-next
-Manuel
------------------------------------------------------------------------
The following changes since commit e3b7ad17951ff0d7a86318d2557cbed54d2c7916:
UBUNTU: Upstream stable to v6.6.97, v6.12.37 (2025-12-11 17:31:10 +0100)
are available in the Git repository at:
git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble tags/noble-stable-2025-12-12
for you to fetch changes up to a19888619f1fd39dd7e83c59f4b57e81daff0265:
UBUNTU: Upstream stable to v6.6.98, v6.6.99, v6.12.38, v6.12.39 (2025-12-12 21:24:52 +0100)
----------------------------------------------------------------
Achill Gilgenast (1):
kallsyms: fix build without execinfo
Akira Inoue (1):
HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
Al Viro (2):
fix proc_sys_compare() handling of in-lookup dentries
ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
Alessio Belle (1):
drm/imagination: Fix kernel crash when hard resetting the GPU
Alexander Gordeev (1):
mm/vmalloc: leave lazy MMU mode on PTE mapping error
Alok Tiwari (1):
net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
Arun Raghavan (1):
ASoC: fsl_sai: Force a software reset when starting in consumer mode
Baolin Wang (1):
mm: fix the inaccurate memory statistics issue for users
Bartosz Golaszewski (1):
pinctrl: qcom: msm: mark certain pins as invalid for interrupts
Ben Skeggs (1):
drm/nouveau/gsp: fix potential leak of memory used during acpi init
Borislav Petkov (AMD) (1):
KVM: SVM: Set synthesized TSA CPUID flags
Chao Yu (2):
erofs: fix to add missing tracepoint in erofs_read_folio()
erofs: fix to add missing tracepoint in erofs_readahead()
Chia-Lin Kao (AceLan) (1):
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
Christian König (1):
drm/ttm: fix error handling in ttm_buffer_object_transfer
Chunhai Guo (1):
erofs: free pclusters if no cached folio is attached
Dan Carpenter (1):
ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
Daniel J. Ogorchock (1):
HID: nintendo: avoid bluetooth suspend/resume stalls
Daniil Dulov (1):
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
David Howells (2):
rxrpc: Fix bug due to prealloc collision
rxrpc: Fix oops due to non-existence of prealloc backlog struct
David Woodhouse (1):
KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.
Deren Wu (1):
wifi: mt76: mt7921: prevent decap offload config before STA initialization
Duanqiang Wen (1):
net: libwx: fix alloc msix vectors failed
Eric Dumazet (1):
netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
EricChan (1):
net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2
Fangrui Song (1):
riscv: vdso: Exclude .rodata from the PT_DYNAMIC segment
Fengnan Chang (1):
io_uring: make fallocate be hashed work
Filipe Manana (1):
btrfs: fix assertion when building free space tree
Flora Cui (2):
drm/amdgpu/discovery: use specific ip_discovery.bin for legacy asics
drm/amdgpu/ip_discovery: add missing ip_discovery fw
Florian Fainelli (3):
scripts/gdb: fix interrupts display after MCP on x86
scripts/gdb: de-reference per-CPU MCE interrupts
scripts/gdb: fix interrupts.py after maple tree conversion
Gao Xiang (5):
erofs: address D-cache aliasing
erofs: get rid of `z_erofs_next_pcluster_t`
erofs: tidy up zdata.c
erofs: refine readahead tracepoint
erofs: fix rare pcluster memory leak after unmounting
Guillaume Nault (1):
gre: Fix IPv6 multicast route creation.
Hangbin Liu (1):
selftests: net: lib: fix shift count out of range
Håkon Bugge (1):
md/md-bitmap: fix GPF in bitmap_get_stats()
JP Kobryn (1):
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
Jakub Kicinski (1):
netlink: make sure we allow at least one dump skb
Jann Horn (1):
x86/mm: Disable hugetlb page table sharing on 32-bit
Jianbo Liu (1):
net/mlx5e: Add new prio for promiscuous mode
Jiawen Wu (1):
net: wangxun: revert the adjustment of the IRQ vector sequence
Jiayuan Chen (1):
tcp: Correct signedness in skb remaining space calculation
Johannes Berg (1):
wifi: mac80211: fix non-transmitted BSSID profile search
Kaustabh Chakraborty (1):
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
Kito Xu (1):
net: appletalk: Fix device refcount leak in atrtr_create()
Kuen-Han Tsai (2):
usb: gadget: u_serial: Fix race condition in TTY wakeup
Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"
Kuniyuki Iwashima (6):
netlink: Fix wraparounds of sk->sk_rmem_alloc.
tipc: Fix use-after-free in tipc_conn_close().
atm: clip: Fix potential null-ptr-deref in to_atmarpd().
atm: clip: Fix memory leak of struct clip_vcc.
atm: clip: Fix infinite recursive call of clip_push().
netlink: Fix rmem check in netlink_broadcast_deliver().
Lachlan Hodges (3):
wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements
wifi: cfg80211: fix S1G beacon head validation in nl80211
wifi: mac80211: correctly identify S1G short beacon
Leo Yan (1):
perf: build: Setup PKG_CONFIG_LIBDIR for cross compilation
Liam Merwick (1):
KVM: Allow CPU to reschedule while setting per-page memory attributes
Linus Torvalds (1):
eventpoll: don't decrement ep refcount while still holding the ep mutex
Long Li (1):
net: mana: Record doorbell physical address in PF mode
Luiz Augusto von Dentz (2):
Bluetooth: hci_sync: Fix not disabling advertising instance
Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected
Lukas Wunner (1):
crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
Luo Gengkun (1):
perf/core: Fix the WARN_ON_ONCE is out of lock protected region
Manuel Diewald (1):
UBUNTU: Upstream stable to v6.6.98, v6.6.99, v6.12.38, v6.12.39
Mario Limonciello (1):
pinctrl: amd: Clear GPIO debounce for suspend
Mark Brown (1):
arm64: Filter out SME hwcaps when FEAT_SME isn't implemented
Mathy Vanhoef (1):
wifi: prevent A-MSDU attacks in mesh networks
Matthew Brost (2):
drm/sched: Increment job count before swapping tail spsc queue
drm/xe: Allocate PF queue size on pow2 boundary
Michael Jeanson (1):
rseq: Fix segfault on registration when rseq_cs is non-zero
Michael Lo (1):
wifi: mt76: mt7925: fix invalid array index in ssid assignment during hw scan
Michal Luczaj (3):
vsock: Fix transport_{g2h,h2g} TOCTOU
vsock: Fix transport_* TOCTOU
vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
Michal Wajdeczko (1):
drm/xe/pf: Clear all LMTT pages on alloc
Mikhail Paulyshka (1):
x86/rdrand: Disable RDSEED on AMD Cyan Skillfish
Mikko Perttunen (1):
drm/tegra: nvdec: Fix dma_alloc_coherent error check
Ming Yen Hsieh (1):
wifi: mt76: mt7925: fix the wrong config for tx interrupt
Mingming Cao (1):
ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof
Namjae Jeon (1):
ksmbd: fix potential use-after-free in oplock/lease break ack
Nicolas Pitre (1):
vt: add missing notification when switching back to text mode
Nigel Croxon (1):
raid10: cleanup memleak at raid10_make_request
Oleksij Rempel (5):
net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
net: phy: smsc: Force predictable MDI-X state on LAN87xx
net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
net: phy: microchip: Use genphy_soft_reset() to purge stale LPA bits
Paulo Alcantara (3):
smb: client: avoid unnecessary reconnects when refreshing referrals
smb: client: fix DFS interlink failover
smb: client: fix potential race in cifs_put_tcon()
Peter Zijlstra (1):
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Petr Machata (1):
selftests: net: lib: Move logging from forwarding/lib.sh here
Philip Yang (1):
drm/amdkfd: Don't call mmput from MMU notifier callback
Richard Fitzgerald (1):
ASoC: cs35l56: probe() should fail if the device ID is not recognized
Ronnie Sahlberg (1):
ublk: sanity check add_dev input for underflow
Sascha Hauer (1):
clk: scmi: Handle case where child clocks are initialized before their parents
Sean Christopherson (1):
KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
Sean Nyekjaer (1):
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
Shengjiu Wang (1):
ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
Shravya KN (1):
bnxt_en: Fix DCB ETS validation
Shyam Prasad N (1):
cifs: all initializations for tcon should happen in tcon_info_alloc
Simona Vetter (1):
drm/gem: Fix race in drm_gem_handle_create_tail()
Somnath Kotur (1):
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
Srinivasan Shanmugam (1):
drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV
Stefan Metzmacher (1):
smb: server: make use of rdma_destroy_qp()
Stefano Garzarella (1):
vsock: fix `vsock_proto` declaration
Takashi Iwai (1):
ALSA: hda/realtek: Add mic-mute LED setup for ASUS UM5606
Thomas Fourier (1):
atm: idt77252: Add missing `dma_map_error()`
Thomas Zimmermann (2):
drm/gem: Acquire references on GEM handles for framebuffers
drm/framebuffer: Acquire internal references on GEM handles
Tim Crawford (1):
ALSA: hda/realtek: Add quirks for some Clevo laptops
Tiwei Bie (1):
um: vector: Reduce stack usage in vector_eth_configure()
Uwe Kleine-König (1):
pwm: mediatek: Ensure to disable clocks in error path
Victor Nogueira (1):
net/sched: Abort __tc_modify_qdisc if parent class does not exist
Wang Jinchao (1):
md/raid1: Fix stack memory use after return in raid1_reshape
Wei Yang (1):
maple_tree: fix mt_destroy_walk() on root leaf node
Willem de Bruijn (2):
bpf: Adjust free target to avoid global starvation of LRU map
selftests/bpf: adapt one more case in test_lru_map to the new target_free
Xiaowei Li (1):
net: usb: qmi_wwan: add SIMCom 8230C composition
Yasmin Fitzgerald (1):
ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100
Yazen Ghannam (4):
x86/mce/amd: Add default names for MCA banks and blocks
x86/mce/amd: Fix threshold limit reset
x86/mce: Don't remove sysfs if thresholding sysfs init fails
x86/mce: Ensure user polling settings are honored when restarting timer
Yeoreum Yun (1):
kasan: remove kasan_find_vm_area() to prevent possible deadlock
Yue Haibing (1):
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
Yuzuru10 (1):
ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic
Zhang Heng (1):
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
Zheng Qixing (1):
nbd: fix uaf in nbd_genl_connect() error path
Documentation/bpf/map_hash.rst | 8 +-
Documentation/bpf/map_lru_hash_update.dot | 6 +-
arch/arm64/kernel/cpufeature.c | 35 +--
arch/riscv/kernel/vdso/vdso.lds.S | 2 +-
arch/um/drivers/vector_kern.c | 42 +---
arch/x86/Kconfig | 2 +-
arch/x86/include/asm/msr-index.h | 1 +
arch/x86/kernel/cpu/amd.c | 7 +
arch/x86/kernel/cpu/mce/amd.c | 28 ++-
arch/x86/kernel/cpu/mce/core.c | 24 +-
arch/x86/kernel/cpu/mce/intel.c | 1 +
arch/x86/kvm/cpuid.c | 4 +
arch/x86/kvm/svm/sev.c | 4 +
arch/x86/kvm/xen.c | 15 +-
crypto/ecc.c | 2 +-
debian.master/upstream-stable | 4 +-
drivers/atm/idt77252.c | 5 +
drivers/block/nbd.c | 6 +-
drivers/block/ublk_drv.c | 3 +-
drivers/char/ipmi/ipmi_msghandler.c | 3 +-
drivers/clk/clk-scmi.c | 18 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 30 ++-
drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c | 5 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_virt.h | 3 +-
drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 43 ++--
drivers/gpu/drm/drm_framebuffer.c | 31 ++-
drivers/gpu/drm/drm_gem.c | 74 +++++-
drivers/gpu/drm/drm_internal.h | 2 +
drivers/gpu/drm/exynos/exynos7_drm_decon.c | 4 +
drivers/gpu/drm/imagination/pvr_power.c | 4 +-
drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c | 20 +-
drivers/gpu/drm/tegra/nvdec.c | 6 +-
drivers/gpu/drm/ttm/ttm_bo_util.c | 13 +-
drivers/gpu/drm/xe/xe_gt_pagefault.c | 1 +
drivers/gpu/drm/xe/xe_lmtt.c | 11 +
drivers/hid/hid-ids.h | 6 +
drivers/hid/hid-lenovo.c | 8 +
drivers/hid/hid-multitouch.c | 8 +-
drivers/hid/hid-nintendo.c | 38 ++-
drivers/hid/hid-quirks.c | 3 +
drivers/md/md-bitmap.c | 3 +-
drivers/md/raid1.c | 1 +
drivers/md/raid10.c | 10 +-
drivers/net/can/m_can/m_can.c | 2 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c | 2 +
drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 2 +-
drivers/net/ethernet/ibm/ibmvnic.h | 8 +-
drivers/net/ethernet/mellanox/mlx5/core/en/fs.h | 9 +-
drivers/net/ethernet/mellanox/mlx5/core/en_fs.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 13 +-
drivers/net/ethernet/microsoft/mana/gdma_main.c | 3 +
drivers/net/ethernet/stmicro/stmmac/dwxgmac2_dma.c | 24 +-
drivers/net/ethernet/wangxun/libwx/wx_lib.c | 16 +-
drivers/net/ethernet/wangxun/libwx/wx_type.h | 2 +-
drivers/net/ethernet/wangxun/ngbe/ngbe_main.c | 2 +-
drivers/net/ethernet/wangxun/ngbe/ngbe_type.h | 2 +-
drivers/net/ethernet/wangxun/txgbe/txgbe_irq.c | 4 +-
drivers/net/ethernet/wangxun/txgbe/txgbe_type.h | 4 +-
drivers/net/ethernet/xilinx/ll_temac_main.c | 2 +-
drivers/net/phy/microchip.c | 3 +-
drivers/net/phy/smsc.c | 57 ++++-
drivers/net/usb/qmi_wwan.c | 1 +
.../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 4 +-
drivers/net/wireless/mediatek/mt76/mt7921/main.c | 3 +
drivers/net/wireless/mediatek/mt76/mt7925/mcu.c | 4 +-
drivers/net/wireless/mediatek/mt76/mt7925/regs.h | 2 +-
drivers/net/wireless/zydas/zd1211rw/zd_mac.c | 6 +-
drivers/pinctrl/pinctrl-amd.c | 11 +
drivers/pinctrl/qcom/pinctrl-msm.c | 20 ++
drivers/pwm/pwm-mediatek.c | 13 +-
drivers/tty/vt/vt.c | 1 +
drivers/usb/gadget/function/u_serial.c | 12 +-
fs/btrfs/free-space-tree.c | 16 +-
fs/erofs/data.c | 5 +
fs/erofs/decompressor.c | 12 +-
fs/erofs/utils.c | 7 +-
fs/erofs/zdata.c | 278 ++++++++++-----------
fs/eventpoll.c | 12 +-
fs/proc/inode.c | 2 +-
fs/proc/proc_sysctl.c | 18 +-
fs/proc/task_mmu.c | 14 +-
fs/smb/client/cifsglob.h | 3 +
fs/smb/client/cifsproto.h | 13 +-
fs/smb/client/connect.c | 47 ++--
fs/smb/client/dfs.c | 73 +++---
fs/smb/client/dfs.h | 42 ++--
fs/smb/client/dfs_cache.c | 186 ++++++++------
fs/smb/client/fs_context.h | 1 +
fs/smb/client/misc.c | 9 +
fs/smb/client/namespace.c | 2 +-
fs/smb/server/smb2pdu.c | 29 +--
fs/smb/server/transport_rdma.c | 5 +-
fs/smb/server/vfs.c | 1 +
include/drm/drm_file.h | 3 +
include/drm/drm_framebuffer.h | 7 +
include/drm/spsc_queue.h | 4 +-
include/linux/ieee80211.h | 110 ++++++--
include/linux/math.h | 12 +
include/linux/mm.h | 5 +
include/net/af_vsock.h | 2 +-
include/net/netfilter/nf_flow_table.h | 2 +-
include/trace/events/erofs.h | 2 +-
io_uring/opdef.c | 1 +
kernel/bpf/bpf_lru_list.c | 9 +-
kernel/bpf/bpf_lru_list.h | 1 +
kernel/events/core.c | 6 +-
kernel/rseq.c | 60 ++++-
lib/maple_tree.c | 1 +
mm/kasan/report.c | 13 +-
mm/vmalloc.c | 22 +-
net/appletalk/ddp.c | 1 +
net/atm/clip.c | 64 +++--
net/bluetooth/hci_event.c | 3 +
net/bluetooth/hci_sync.c | 2 +-
net/ipv4/tcp.c | 2 +-
net/ipv6/addrconf.c | 9 +-
net/mac80211/mlme.c | 14 +-
net/mac80211/scan.c | 11 +-
net/mac80211/util.c | 6 +-
net/netlink/af_netlink.c | 82 +++---
net/rxrpc/call_accept.c | 4 +
net/sched/sch_api.c | 23 +-
net/tipc/topsrv.c | 2 +
net/vmw_vsock/af_vsock.c | 57 ++++-
net/wireless/nl80211.c | 7 +-
net/wireless/scan.c | 17 +-
net/wireless/util.c | 52 +++-
scripts/gdb/linux/constants.py.in | 7 +
scripts/gdb/linux/interrupts.py | 16 +-
scripts/gdb/linux/mapletree.py | 252 +++++++++++++++++++
scripts/gdb/linux/xarray.py | 28 +++
sound/pci/hda/patch_realtek.c | 7 +
sound/soc/amd/yc/acp6x-mach.c | 7 +
sound/soc/codecs/cs35l56-shared.c | 2 +-
sound/soc/fsl/fsl_asrc.c | 3 +-
sound/soc/fsl/fsl_sai.c | 14 +-
tools/arch/x86/include/asm/msr-index.h | 1 +
tools/build/feature/Makefile | 25 +-
tools/include/linux/kallsyms.h | 4 +
tools/perf/Makefile.perf | 27 +-
tools/testing/selftests/bpf/test_lru_map.c | 105 ++++----
tools/testing/selftests/net/forwarding/lib.sh | 108 --------
tools/testing/selftests/net/lib.sh | 116 +++++++++
virt/kvm/kvm_main.c | 3 +
145 files changed, 1968 insertions(+), 928 deletions(-)
create mode 100644 scripts/gdb/linux/mapletree.py
create mode 100644 scripts/gdb/linux/xarray.py
More information about the kernel-team
mailing list