[SRU][Noble][PULL] Noble upstream stable patchset 2025-03-13

Koichiro Den koichiro.den at canonical.com
Thu Mar 13 04:26:19 UTC 2025


This pull request (119 commits) includes the following Noble stable patchsets:

        Noble update: upstream stable patchset 2025-03-13
                 Ported from the following upstream stable releases:
                         v6.6.67, v6.12.6
        https://bugs.launchpad.net/bugs/2102181

Note also that the 'stable-next' branch head contains this and all
prior pending upstream stable releases. I recommend fetching and
applying just this reference ('stable-next') instead of each
tags/noble-stable-* reference:

  git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble stable-next

 -Koichiro Den

------------------------------------------------------------------------

The following changes since commit aa9f1738818bd006f15411407d5d88c54270863a:

  UBUNTU: Upstream stable to v6.6.65, v6.6.66, v6.12.4, v6.12.5 (2025-03-12 22:51:00 +0900)

are available in the Git repository at:

  git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble tags/noble-stable-2025-03-13

for you to fetch changes up to 661cdf107c21b54905ee682124ecb10c7bf9abec:

  UBUNTU: Upstream stable to v6.6.67, v6.12.6 (2025-03-13 13:21:44 +0900)

----------------------------------------------------------------
Alexandre Ghiti (1):
      riscv: Fix IPIs usage in kfence_protect_page()

Andrew Cooper (1):
      x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0

Anumula Murali Mohan Reddy (1):
      cxgb4: use port number to set mac addr

Arnaldo Carvalho de Melo (1):
      perf machine: Initialize machine->env to address a segfault

Benjamin Lin (1):
      wifi: mac80211: fix station NSS capability initialization order

Christophe JAILLET (1):
      spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user()

Claudiu Beznea (1):
      serial: sh-sci: Check if TX data was written to device in .tx_empty()

Cong Wang (1):
      netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()

Dan Carpenter (1):
      net/mlx5: DR, prevent potential error pointer dereference

Daniel Borkmann (5):
      bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
      team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
      net, team, bonding: Add netdev_base_features helper
      bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features
      team: Fix initial vlan_feature set in __team_compute_features

Daniel Machon (2):
      net: sparx5: fix FDMA performance issue
      net: sparx5: fix the maximum frame length register

Danielle Ratson (3):
      selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
      selftests: mlxsw: sharedbuffer: Remove duplicate test cases
      selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted

Daniil Tatianin (1):
      ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired

Darrick J. Wong (6):
      xfs: update btree keys correctly when _insrec splits an inode root block
      xfs: don't drop errno values when we fail to ficlone the entire range
      xfs: return from xfs_symlink_verify early on V4 filesystems
      xfs: fix scrub tracepoints when inode-rooted btrees are involved
      xfs: only run precommits once per transaction object
      xfs: return a 64-bit block count from xfs_btree_count_blocks

Eduard Zingerman (1):
      bpf: sync_linked_regs() must preserve subreg_def

Eric Dumazet (1):
      net: lapb: increase LAPB_HEADER_LEN

Eugene Kobyak (1):
      drm/i915: Fix NULL pointer dereference in capture_engine

Frederik Deweerdt (1):
      splice: do not checksum AF_UNIX sockets

Frédéric Danis (1):
      Bluetooth: SCO: Add support for 16 bits transparent voice setting

Haoyu Li (3):
      wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon
      wifi: cfg80211: sme: init n_channels before channels[] access
      gpio: ljca: Initialize num before accessing item in ljca_gpio_config

Hridesh MG (1):
      ALSA: hda/realtek: Fix headset mic on Acer Nitro 5

Ilpo Järvinen (1):
      ACPI: resource: Fix memory resource type union access

Iulia Tanasescu (3):
      Bluetooth: iso: Fix recursive locking warning
      Bluetooth: iso: Always release hdev at the end of iso_listen_bis
      Bluetooth: iso: Fix circular lock in iso_listen_bis

Jaakko Salo (1):
      ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5

James Clark (1):
      libperf: evlist: Fix --cpu argument on hybrid platform

James Morse (1):
      KVM: arm64: Disable MPAM visibility by default and ignore VMM writes

Jann Horn (2):
      bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
      bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()

Jesse Van Gavere (1):
      net: dsa: microchip: KSZ9896 register regmap alignment to 32 bit boundaries

Jesse.zhang at amd.com (2):
      drm/amdkfd: pause autosuspend when creating pdd
      drm/amdkfd: fixed page fault when enable MES shader debugger

Jiasheng Jiang (1):
      drm/i915: Fix memory leak by correcting cache object name in error handler

Jiri Olsa (1):
      bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog

Joe Hattori (3):
      ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
      usb: typec: anx7411: fix fwnode_handle reference leak
      usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe()

Johannes Berg (1):
      wifi: mac80211: clean up 'ret' in sta_link_apply_parameters()

Juergen Gross (12):
      xen/netfront: fix crash when removing device
      x86: make get_cpu_vendor() accessible from Xen code
      objtool/x86: allow syscall instruction
      x86/static-call: provide a way to do very early static-call updates
      x86/xen: don't do PV iret hypercall through hypercall page
      x86/xen: add central hypercall functions
      x86/xen: fix xen_hypercall_hvm() to not clobber %rbx
      x86/xen: add FRAME_END to xen_hypercall_hvm()
      x86/xen: use new hypercall functions instead of hypercall page
      x86/xen: remove hypercall page
      x86/static-call: fix 32-bit build
      x86/asm: Make serialize() always_inline

Kan Liang (1):
      perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG

Kenneth Feng (1):
      drm/amd/pm: Set SMU v13.0.7 default workload type

Koichiro Den (1):
      UBUNTU: Upstream stable to v6.6.67, v6.12.6

Kumar Kartikeya Dwivedi (1):
      bpf: Check size for BTF-based ctx access of pointer members

Lianqin Hu (1):
      usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer

Lijo Lazar (1):
      drm/amdkfd: Use device based logging for errors

Lucas De Marchi (1):
      drm/xe/reg_sr: Remove register pool

Luiz Augusto von Dentz (1):
      Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating

Mark Tomlinson (1):
      usb: host: max3421-hcd: Correctly abort a USB request.

Martin Ottens (1):
      net/sched: netem: account for backlog updates from child qdisc

Michael Chan (2):
      bnxt_en: Fix GSO type for HW GRO packets on 5750X chips
      bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips

Michal Luczaj (3):
      bpf, sockmap: Fix race between element replace and close()
      bpf, sockmap: Fix update element with same
      Bluetooth: Improve setsockopt() handling of malformed user input

Mirsad Todorovac (1):
      drm/xe: fix the ERR_PTR() returned on failure to allocate tiny pt

MoYuanhao (1):
      tcp: check space before adding MPTCP SYN options

Namjae Jeon (1):
      ksmbd: fix racy issue from session lookup and expire

Nathan Chancellor (1):
      blk-iocost: Avoid using clamp() on inuse in __propagate_weights()

Neal Frager (1):
      usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode

Nikita Yushchenko (6):
      net: renesas: rswitch: fix race window between tx start and complete
      net: renesas: rswitch: fix leaked pointer on error path
      net: renesas: rswitch: avoid use-after-put for a device tree node
      net: renesas: rswitch: handle stop vs interrupt race
      net: renesas: rswitch: fix initial MPIC register setting
      net: renesas: rswitch: fix possible early skb release

Paul Barker (1):
      Documentation: PM: Clarify pm_runtime_resume_and_get() return value

Phil Sutter (2):
      netfilter: IDLETIMER: Fix for possible ABBA deadlock
      selftests: netfilter: Stabilize rpath.sh

Remi Pommarel (3):
      batman-adv: Do not send uninitialized TT changes
      batman-adv: Remove uninitialized data in full table TT response
      batman-adv: Do not let TT changes list grows indefinitely

Shung-Hsi Yu (1):
      selftests/bpf: remove use of __xlated()

Stefan Wahren (5):
      usb: dwc2: Fix HCD resume
      usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
      usb: dwc2: Fix HCD port connection race
      qca_spi: Fix clock speed for multiple QCA7000
      qca_spi: Make driver probing reliable

Suraj Sonawane (1):
      acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl

Takashi Iwai (2):
      usb: gadget: midi2: Fix interpretation of is_midi1 bits
      ALSA: control: Avoid WARN() for symlink errors

Thadeu Lima de Souza Cascardo (1):
      Bluetooth: btmtk: avoid UAF in btmtk_process_coredump

Thomas Weißschuh (1):
      ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()

Venkata Prasad Potturu (1):
      ASoC: amd: yc: Fix the wrong return value

Ville Syrjälä (1):
      drm/i915/color: Stop using non-posted DSB writes for legacy LUT

Vitalii Mordan (1):
      usb: ehci-hcd: fix call balance of clocks handling routines

Vladimir Oltean (6):
      net: mscc: ocelot: fix memory leak on ocelot_port_add_txtstamp_skb()
      net: mscc: ocelot: improve handling of TX timestamp for unknown skb
      net: mscc: ocelot: ocelot->ts_id_lock and ocelot_port->tx_skbs.lock are IRQ-safe
      net: mscc: ocelot: be resilient to loss of PTP packets during transmission
      net: mscc: ocelot: perform error cleanup in ocelot_hwstamp_set()
      net: dsa: felix: fix stuck CPU-injected packets with short taprio windows

Weizhao Ouyang (1):
      kselftest/arm64: abi: fix SVCR detection

liuderong (1):
      scsi: ufs: core: Update compl_time_stamp_local_clock after completing a cqe

 Documentation/power/runtime_pm.rst                 |   4 +-
 arch/arm64/kvm/sys_regs.c                          |  52 ++++-
 arch/riscv/include/asm/kfence.h                    |   4 +-
 arch/x86/events/intel/ds.c                         |   2 +-
 arch/x86/include/asm/processor.h                   |   2 +
 arch/x86/include/asm/special_insns.h               |   2 +-
 arch/x86/include/asm/static_call.h                 |  15 ++
 arch/x86/include/asm/sync_core.h                   |   6 +-
 arch/x86/include/asm/xen/hypercall.h               |  36 ++--
 arch/x86/kernel/callthunks.c                       |   5 -
 arch/x86/kernel/cpu/common.c                       |  38 ++--
 arch/x86/kernel/static_call.c                      |   8 +
 arch/x86/xen/enlighten.c                           |  65 ++++++-
 arch/x86/xen/enlighten_hvm.c                       |  13 +-
 arch/x86/xen/enlighten_pv.c                        |   4 +-
 arch/x86/xen/enlighten_pvh.c                       |   7 -
 arch/x86/xen/xen-asm.S                             |  50 ++++-
 arch/x86/xen/xen-head.S                            | 107 ++++++++---
 arch/x86/xen/xen-ops.h                             |   9 +
 block/blk-iocost.c                                 |   9 +-
 debian.master/upstream-stable                      |   4 +-
 drivers/acpi/acpica/evxfregn.c                     |   2 -
 drivers/acpi/nfit/core.c                           |   7 +-
 drivers/acpi/resource.c                            |   6 +-
 drivers/ata/sata_highbank.c                        |   1 +
 drivers/bluetooth/btmtk.c                          |  20 +-
 drivers/gpio/gpio-ljca.c                           |   2 +-
 drivers/gpu/drm/amd/amdkfd/kfd_debug.c             |  17 ++
 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c  |  15 ++
 drivers/gpu/drm/amd/amdkfd/kfd_flat_memory.c       |   3 +-
 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c      |  21 ++-
 drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.c       |   8 +-
 drivers/gpu/drm/amd/amdkfd/kfd_packet_manager.c    |  63 ++++---
 drivers/gpu/drm/amd/amdkfd/kfd_process.c           |  43 ++---
 .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c   |   1 +
 drivers/gpu/drm/i915/display/intel_color.c         |  30 ++-
 drivers/gpu/drm/i915/i915_gpu_error.c              |  18 +-
 drivers/gpu/drm/i915/i915_scheduler.c              |   2 +-
 drivers/gpu/drm/xe/tests/xe_migrate.c              |   4 +-
 drivers/gpu/drm/xe/xe_reg_sr.c                     |  31 +--
 drivers/gpu/drm/xe/xe_reg_sr_types.h               |   6 -
 drivers/net/bonding/bond_main.c                    |  10 +-
 drivers/net/dsa/microchip/ksz_common.c             |  42 ++---
 drivers/net/dsa/ocelot/felix_vsc9959.c             |  17 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          |  14 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt.h          |   9 +-
 drivers/net/ethernet/chelsio/cxgb4/cxgb4.h         |   2 +-
 drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c    |   2 +-
 drivers/net/ethernet/chelsio/cxgb4/t4_hw.c         |   5 +-
 .../mellanox/mlx5/core/steering/dr_domain.c        |   4 +-
 .../net/ethernet/microchip/sparx5/sparx5_main.c    |  11 +-
 .../net/ethernet/microchip/sparx5/sparx5_port.c    |   2 +-
 drivers/net/ethernet/mscc/ocelot_ptp.c             | 209 +++++++++++++--------
 drivers/net/ethernet/qualcomm/qca_spi.c            |  26 ++-
 drivers/net/ethernet/qualcomm/qca_spi.h            |   1 -
 drivers/net/ethernet/renesas/rswitch.c             |  85 +++++----
 drivers/net/ethernet/renesas/rswitch.h             |  14 +-
 drivers/net/team/team.c                            |  11 +-
 drivers/net/xen-netfront.c                         |   5 +-
 drivers/ptp/ptp_kvm_x86.c                          |   6 +-
 drivers/spi/spi-aspeed-smc.c                       |  10 +-
 drivers/tty/serial/sh-sci.c                        |  29 +++
 drivers/ufs/core/ufshcd.c                          |   1 +
 drivers/usb/dwc2/hcd.c                             |  19 +-
 drivers/usb/dwc3/dwc3-xilinx.c                     |   5 +-
 drivers/usb/gadget/function/f_midi2.c              |   6 +-
 drivers/usb/gadget/function/u_serial.c             |   9 +-
 drivers/usb/host/ehci-sh.c                         |   9 +-
 drivers/usb/host/max3421-hcd.c                     |  16 +-
 drivers/usb/typec/anx7411.c                        |  66 ++++---
 fs/smb/server/auth.c                               |   2 +
 fs/smb/server/mgmt/user_session.c                  |   6 +-
 fs/smb/server/server.c                             |   4 +-
 fs/smb/server/smb2pdu.c                            |  27 +--
 fs/xfs/libxfs/xfs_btree.c                          |  33 +++-
 fs/xfs/libxfs/xfs_btree.h                          |   2 +-
 fs/xfs/libxfs/xfs_ialloc_btree.c                   |   4 +-
 fs/xfs/libxfs/xfs_symlink_remote.c                 |   4 +-
 fs/xfs/scrub/agheader.c                            |   6 +-
 fs/xfs/scrub/agheader_repair.c                     |   6 +-
 fs/xfs/scrub/fscounters.c                          |   2 +-
 fs/xfs/scrub/ialloc.c                              |   4 +-
 fs/xfs/scrub/refcount.c                            |   2 +-
 fs/xfs/scrub/trace.h                               |   2 +-
 fs/xfs/xfs_bmap_util.c                             |   2 +-
 fs/xfs/xfs_file.c                                  |   8 +
 fs/xfs/xfs_trans.c                                 |  16 +-
 include/linux/bpf.h                                |  13 +-
 include/linux/compiler.h                           |  37 ++--
 include/linux/dsa/ocelot.h                         |   1 +
 include/linux/netdev_features.h                    |   7 +
 include/linux/static_call.h                        |   6 +
 include/net/bluetooth/bluetooth.h                  |  10 +-
 include/net/lapb.h                                 |   2 +-
 include/soc/mscc/ocelot.h                          |   2 -
 kernel/bpf/btf.c                                   |   6 +
 kernel/bpf/verifier.c                              |   5 +-
 kernel/static_call_inline.c                        |   2 +-
 kernel/trace/bpf_trace.c                           |  11 ++
 kernel/trace/trace_uprobe.c                        |   6 +-
 net/batman-adv/translation-table.c                 |  58 ++++--
 net/bluetooth/hci_event.c                          |  33 ++--
 net/bluetooth/hci_sock.c                           |  14 +-
 net/bluetooth/iso.c                                |  35 ++--
 net/bluetooth/l2cap_sock.c                         |  20 +-
 net/bluetooth/rfcomm/sock.c                        |   9 +-
 net/bluetooth/sco.c                                |  40 ++--
 net/core/sock_map.c                                |   6 +-
 net/ipv4/tcp_output.c                              |   6 +-
 net/mac80211/cfg.c                                 |  11 +-
 net/netfilter/xt_IDLETIMER.c                       |  52 ++---
 net/sched/sch_netem.c                              |  22 ++-
 net/unix/af_unix.c                                 |   1 +
 net/wireless/sme.c                                 |   1 +
 sound/core/control_led.c                           |  14 +-
 sound/pci/hda/patch_realtek.c                      |   1 +
 sound/soc/amd/yc/acp6x-mach.c                      |  13 +-
 sound/usb/quirks.c                                 |   2 +
 tools/lib/perf/evlist.c                            |  18 +-
 tools/objtool/check.c                              |   9 +-
 tools/perf/util/machine.c                          |   2 +
 .../testing/selftests/arm64/abi/syscall-abi-asm.S  |  32 ++--
 .../selftests/bpf/progs/verifier_btf_ctx_access.c  |   4 +-
 .../testing/selftests/bpf/progs/verifier_d_path.c  |   4 +-
 .../selftests/bpf/progs/verifier_scalar_ids.c      |  16 --
 .../selftests/drivers/net/mlxsw/sharedbuffer.sh    |  55 ++++--
 tools/testing/selftests/netfilter/rpath.sh         |  18 +-
 127 files changed, 1362 insertions(+), 759 deletions(-)



More information about the kernel-team mailing list