[SRU][Jammy][PULL] Jammy update: v5.15.194 upstream stable release
alice.munduruca at canonical.com
alice.munduruca at canonical.com
Wed Oct 15 14:36:27 UTC 2025
This pull request (154 commits) includes the following Jammy stable patchsets:
Jammy update: v5.15.194 upstream stable release
https://bugs.launchpad.net/bugs/2127866
Note also that the 'stable-next' branch head contains this and all
prior pending upstream stable releases. I recommend fetching and
applying just this reference ('stable-next') instead of each
tags/jammy-stable-* reference:
git://git.launchpad.net/~cremfuelled/+git/ubuntu-kernel-stable-jammy stable-next
- Alice C. Munduruca
------------------------------------------------------------------------
The following changes since commit d3c7c6a9c592d7d13e522f97278a6a8d92a5e74a:
UBUNTU: Upstream stable to v5.15.193 (2025-10-08 12:50:18 -0500)
are available in the Git repository at:
git://git.launchpad.net/~cremfuelled/+git/ubuntu-kernel-stable-jammy tags/jammy-stable-v5.15.194
for you to fetch changes up to 68c930d57a48d2ddd7c632f3be32b6780ba07975:
UBUNTU: Upstream stable to v5.15.194 (2025-10-14 11:17:52 -0400)
----------------------------------------------------------------
Alan Stern (1):
USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
Alex Deucher (1):
drm/amdgpu: fix a memory leak in fence cleanup when unloading
Alexander Dahl (1):
mtd: nand: raw: atmel: Fix comment in timings preparation
Alexander Sverdlin (1):
mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing
Alexey Nepomnyashih (1):
net: liquidio: fix overflow in octeon_init_instr_queue()
Alice C. Munduruca (1):
UBUNTU: Upstream stable to v5.15.194
Alok Tiwari (1):
bnxt_en: correct offset handling for IPv6 destination address
Anders Roxell (1):
dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
Andreas Kemnade (1):
regulator: sy7636a: fix lifecycle of power good gpio
André Apitzsch (1):
media: i2c: imx214: Fix link frequency validation
Anssi Hannula (1):
can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB
Antoine Tenart (1):
tunnels: reset the GSO metadata before reusing the skb
Arnd Bergmann (1):
media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
Bjorn Andersson (1):
soc: qcom: mdt_loader: Deal with zero e_shentsize
Boris Ostrovsky (1):
KVM: SVM: Return TSA_SQ_NO and TSA_L1_NO bits in __do_cpuid_func()
Borislav Petkov (AMD) (1):
KVM: SVM: Set synthesized TSA CPUID flags
Brett A C Sheffield (1):
Revert "fbdev: Disable sysfb device registration when removing conflicting FBs"
Charles Keepax (2):
ASoC: wm8940: Correct typo in control name
ASoC: wm8974: Correct PLL rate rounding
Chen Ni (1):
ALSA: usb-audio: Convert comma to semicolon
Chen Ridong (1):
cgroup: split cgroup_destroy_wq into 3 workqueues
Christian Loehle (1):
cpufreq: Initialize cpufreq-based invariance before subsys
Christoffer Sandberg (1):
Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table
Christophe Kerello (2):
mtd: rawnand: stm32_fmc2: fix ECC overwrite
mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
Colin Ian King (1):
ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message
Cristian Ciocaltea (6):
ALSA: usb-audio: Fix block comments in mixer_quirks
ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks
ALSA: usb-audio: Avoid multiple assignments in mixer_quirks
ALSA: usb-audio: Simplify NULL comparison in mixer_quirks
ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks
ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5
David Hildenbrand (2):
mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
Duoming Zhou (1):
cnic: Fix use-after-free bugs in cnic_delete_task
Eric Biggers (1):
crypto: af_alg - Fix incorrect boolean values in af_alg_ctx
Eric Sandeen (1):
xfs: short circuit xfs_growfs_data_private() if delta is zero
Fabian Vogt (1):
tty: hvc_console: Call hvc_kick in hvc_write unconditionally
Fabio Porcedda (2):
USB: serial: option: add Telit Cinterion FN990A w/audio compositions
USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions
Geert Uytterhoeven (2):
pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch
can: rcar_can: rcar_can_resume(): fix s2ram with PSCI
Greg Kroah-Hartman (1):
Linux 5.15.194
Guenter Roeck (1):
drm/i915/backlight: Return immediately when scale() finds invalid parameters
H. Nikolaus Schaller (2):
power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery
power: supply: bq27xxx: restrict no-battery detection to bq27000
Hangbin Liu (2):
hsr: use rtnl lock when iterating over ports
hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr
Hans de Goede (1):
net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
Harry Yoo (1):
mm: introduce and use {pgd,p4d}_populate_kernel()
Herbert Xu (1):
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
Hugo Villeneuve (1):
serial: sc16is7xx: fix bug in flow control levels init
Håkon Bugge (1):
rds: ib: Increment i_fastreg_wrs before bailing out
Ido Schimmel (2):
nexthop: Forbid FDB status change while nexthop is in a group
selftests: fib_nexthops: Fix creation of non-FDB nexthops
Ilya Dryomov (1):
libceph: fix invalid accesses to ceph_connection_v1_info
Ioana Ciornei (1):
dpaa2-switch: fix buffer pool seeding for control traffic
Jack Wang (1):
mtd: rawnand: stm32_fmc2: Fix dma_map_sg error check
Jakob Koschel (1):
usb: gadget: dummy_hcd: remove usage of list iterator past the loop body
Jamie Bainbridge (1):
qed: Don't collect too many protection override GRC elements
Jani Nikula (1):
drm/i915/power: fix size for for_each_set_bit() in abox iteration
Jiapeng Chong (2):
hrtimer: Remove unused function
hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active()
Jiayi Li (1):
usb: core: Add 0x prefix to quirks debug output
Jinjiang Tu (1):
mm/hugetlb: fix folio is still mapped when deleted
Johan Hovold (3):
phy: tegra: xusb: fix device and OF node leak at probe
phy: ti-pipe3: fix device leak at unbind
phy: ti: omap-usb2: fix device leak at unbind
Jonathan Curley (1):
NFSv4/flexfiles: Fix layout merge mirror check.
Justin Bronder (1):
i40e: increase max descriptors for XL710
Kim Phillips (1):
KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
Kohei Enju (1):
igb: fix link test skipping when interface is admin down
Krister Johansen (1):
mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN
Krzysztof Kozlowski (2):
dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks
phy: broadcom: ns-usb3: fix Wvoid-pointer-to-enum-cast warning
Kuniyuki Iwashima (4):
net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
af_unix: Don't leave consecutive consumed OOB skbs.
Leon Hwang (1):
bpf: Reject bpf_timer for PREEMPT_RT
Liao Yuanhong (1):
wifi: mac80211: fix incorrect type for ret
Loic Poulain (1):
drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
Lukasz Czapnik (7):
i40e: fix idx validation in i40e_validate_queue_map
i40e: fix input validation logic for action_meta
i40e: add max boundary check for VF filters
i40e: add mask to apply valid bits for itr_idx
i40e: fix validation of VF state in get resources
i40e: fix idx validation in config queues msg
i40e: add validation for ring_len param
Luo Gengkun (1):
tracing: Fix tracing_marker may trigger page fault during preempt_disable
Maciej Fijalkowski (1):
i40e: remove redundant memory barrier when cleaning Tx descs
Maciej S. Szmigiero (1):
KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active
Mark Tinguely (1):
ocfs2: fix recursive semaphore deadlock in fiemap call
Martin Schiller (1):
net: dsa: lantiq_gswip: do also enable or disable cpu port
Masami Hiramatsu (Google) (1):
tracing: dynevent: Add a missing lockdown check on dynevent
Mathias Nyman (2):
xhci: dbc: decouple endpoint allocation from initialization
xhci: dbc: Fix full DbC transfer ring after several reconnects
Matthieu Baerts (NGI0) (2):
mptcp: set remote_deny_join_id0 on SYN recv
mptcp: propagate shutdown to subflows when possible
Miaohe Lin (1):
mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
Miaoqian Lin (1):
um: virtio_uml: Fix use-after-free after put_device in probe
Michal Schmidt (1):
i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
Miklos Szeredi (2):
fuse: check if copy_file_range() returns larger than requested size
fuse: prevent overflow in copy_file_range return value
Murali Karicheri (2):
net: hsr: Add support for MC filtering at the slave device
net: hsr: Add VLAN CTAG filter support
Namjae Jeon (1):
ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
Nathan Chancellor (2):
compiler-clang.h: define __SANITIZE_*__ macros only when undefined
nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
Nitesh Narayan Lal (1):
i40e: Use irq_update_affinity_hint()
Or Har-Toov (1):
IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions
Peng Fan (1):
arm64: dts: imx8mp: Correct thermal sensor index
Petr Malat (1):
ethernet: rvu-af: Remove slash from the driver name
Philipp Zabel (1):
net: rfkill: gpio: add DT support
Qi Xi (1):
drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path
Qu Wenruo (1):
btrfs: tree-checker: fix the incorrect inode ref size check
Ravi Gunasekaran (2):
net: hsr: Disable promiscuous mode in offload mode
net: hsr: hsr_slave: Fix the promiscuous mode in offload mode
Rob Herring (1):
phy: Use device_get_match_data()
Salah Triki (1):
EDAC/altera: Delete an inappropriate dma_free_coherent() call
Samasth Norway Ananda (1):
fbcon: fix integer overflow in fbcon_do_set_font
Stefan Wahren (1):
net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()
Stephan Gerhold (1):
dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
Steven Rostedt (1):
tracing: Do not add length to print format in synthetic events
Stéphane Grosjean (1):
can: peak_usb: fix shift-out-of-bounds issue
Takashi Iwai (1):
ALSA: usb-audio: Fix build with CONFIG_INPUT=n
Takashi Sakamoto (1):
ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported
Tariq Toukan (1):
Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set"
Tetsuo Handa (2):
can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed
can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails
Thomas Fourier (1):
mmc: mvsdio: Fix dma_unmap_sg() nents value
Thomas Gleixner (1):
genirq: Provide new interfaces for affinity hints
Thomas Zimmermann (1):
fbcon: Fix OOB access in font allocation
Tigran Mkrtchyan (1):
flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read
Trond Myklebust (3):
NFSv4: Don't clear capabilities that won't be reset
NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set
NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server
Vincent Mailhol (10):
can: bittiming: allow TDC{V,O} to be zero and add can_tdc_const::tdc{v,o,f}_min
can: bittiming: replace CAN units with the generic ones from linux/units.h
can: dev: add generic function can_ethtool_op_get_ts_info_hwts()
can: dev: add generic function can_eth_ioctl_hwts()
can: etas_es58x: advertise timestamping capabilities and add ioctl support
can: etas_es58x: sort the includes by alphabetic order
can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
Vladimir Oltean (2):
net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup()
net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port
Wei Yang (1):
mm/khugepaged: fix the address passed to notifier on testing young
Xiongfeng Wang (1):
hrtimers: Unconditionally update target CPU base after offline timer migration
Yeoreum Yun (1):
kunit: kasan_test: disable fortify string checker on kasan_strings() test
Yeounsu Moon (1):
net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure
Zabelin Nikita (1):
drm/gma500: Fix null dereference in hdmi teardown
.../bindings/serial/brcm,bcm7271-uart.yaml | 2 +-
Makefile | 2 +-
arch/arm64/boot/dts/freescale/imx8mp.dtsi | 4 +-
arch/um/drivers/virtio_uml.c | 6 +-
arch/x86/kvm/cpuid.c | 31 ++-
arch/x86/kvm/svm/svm.c | 3 +-
crypto/af_alg.c | 7 +
debian.master/upstream-stable | 2 +-
drivers/cpufreq/cpufreq.c | 20 +-
drivers/dma/qcom/bam_dma.c | 8 +-
drivers/dma/ti/edma.c | 4 +-
drivers/edac/altera_edac.c | 1 -
drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 2 -
drivers/gpu/drm/bridge/analogix/anx7625.c | 6 +-
.../gpu/drm/bridge/cadence/cdns-mhdp8546-core.c | 6 +-
drivers/gpu/drm/gma500/oaktrail_hdmi.c | 2 +-
drivers/gpu/drm/i915/display/intel_backlight.c | 5 +-
drivers/gpu/drm/i915/display/intel_display_power.c | 6 +-
drivers/infiniband/hw/mlx5/devx.c | 1 +
drivers/input/serio/i8042-acpipnpio.h | 14 +
drivers/media/i2c/imx214.c | 27 +-
.../media/platform/mtk-vcodec/venc/venc_h264_if.c | 6 +-
drivers/mmc/host/mvsdio.c | 2 +-
drivers/mtd/nand/raw/atmel/nand-controller.c | 18 +-
drivers/mtd/nand/raw/stm32_fmc2_nand.c | 48 ++--
drivers/net/can/dev/bittiming.c | 15 +-
drivers/net/can/dev/dev.c | 50 ++++
drivers/net/can/rcar/rcar_can.c | 8 +-
drivers/net/can/spi/hi311x.c | 1 +
drivers/net/can/sun4i_can.c | 1 +
drivers/net/can/usb/etas_es58x/es581_4.c | 9 +-
drivers/net/can/usb/etas_es58x/es58x_core.c | 16 +-
drivers/net/can/usb/etas_es58x/es58x_core.h | 8 +-
drivers/net/can/usb/etas_es58x/es58x_fd.c | 16 +-
drivers/net/can/usb/mcba_usb.c | 1 +
drivers/net/can/usb/peak_usb/pcan_usb_core.c | 2 +-
drivers/net/can/xilinx_can.c | 16 +-
drivers/net/dsa/lantiq_gswip.c | 37 +--
drivers/net/ethernet/broadcom/bnxt/bnxt_tc.c | 2 +-
drivers/net/ethernet/broadcom/cnic.c | 3 +-
.../net/ethernet/cavium/liquidio/request_manager.c | 2 +-
.../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 2 +-
drivers/net/ethernet/freescale/fec_main.c | 3 +-
drivers/net/ethernet/intel/i40e/i40e.h | 1 +
drivers/net/ethernet/intel/i40e/i40e_ethtool.c | 25 +-
drivers/net/ethernet/intel/i40e/i40e_main.c | 10 +-
drivers/net/ethernet/intel/i40e/i40e_txrx.c | 3 -
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 45 +++-
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.h | 3 +-
drivers/net/ethernet/intel/igb/igb_ethtool.c | 5 +-
drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 3 +-
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 2 -
drivers/net/ethernet/natsemi/ns83820.c | 13 +-
drivers/net/ethernet/qlogic/qed/qed_debug.c | 7 +-
drivers/pcmcia/omap_cf.c | 8 +-
drivers/phy/broadcom/phy-bcm-ns-usb3.c | 9 +-
drivers/phy/marvell/phy-berlin-usb.c | 7 +-
drivers/phy/ralink/phy-ralink-usb.c | 10 +-
drivers/phy/rockchip/phy-rockchip-pcie.c | 11 +-
drivers/phy/rockchip/phy-rockchip-usb.c | 10 +-
drivers/phy/tegra/xusb-tegra210.c | 6 +-
drivers/phy/ti/phy-omap-control.c | 9 +-
drivers/phy/ti/phy-omap-usb2.c | 24 +-
drivers/phy/ti/phy-ti-pipe3.c | 27 +-
drivers/power/supply/bq27xxx_battery.c | 4 +-
drivers/regulator/sy7636a-regulator.c | 7 +-
drivers/soc/qcom/mdt_loader.c | 12 +-
drivers/tty/hvc/hvc_console.c | 6 +-
drivers/tty/serial/sc16is7xx.c | 14 +-
drivers/usb/core/quirks.c | 2 +-
drivers/usb/gadget/udc/dummy_hcd.c | 25 +-
drivers/usb/host/xhci-dbgcap.c | 94 +++++--
drivers/usb/serial/option.c | 17 ++
drivers/video/fbdev/core/fbcon.c | 13 +-
drivers/video/fbdev/core/fbmem.c | 12 -
fs/btrfs/tree-checker.c | 4 +-
fs/fuse/file.c | 5 +-
fs/hugetlbfs/inode.c | 14 +-
fs/ksmbd/transport_rdma.c | 17 +-
fs/nfs/client.c | 2 +
fs/nfs/flexfilelayout/flexfilelayout.c | 21 +-
fs/nfs/nfs4proc.c | 6 +-
fs/nilfs2/sysfs.c | 4 +-
fs/nilfs2/sysfs.h | 8 +-
fs/ocfs2/extent_map.c | 10 +-
fs/xfs/xfs_fsops.c | 4 +
include/crypto/if_alg.h | 10 +-
include/linux/can/bittiming.h | 69 +++--
include/linux/can/dev.h | 8 +
include/linux/compiler-clang.h | 29 ++-
include/linux/interrupt.h | 53 +++-
include/linux/pgalloc.h | 29 +++
include/linux/pgtable.h | 13 +-
include/net/sock.h | 40 ++-
include/uapi/linux/can/netlink.h | 2 +
kernel/bpf/verifier.c | 4 +
kernel/cgroup/cgroup.c | 43 +++-
kernel/irq/manage.c | 8 +-
kernel/time/hrtimer.c | 50 +---
kernel/trace/trace.c | 4 +-
kernel/trace/trace_dynevent.c | 4 +
kernel/trace/trace_events_synth.c | 2 -
lib/test_kasan.c | 1 +
mm/kasan/init.c | 12 +-
mm/khugepaged.c | 2 +-
mm/memory-failure.c | 7 +-
mm/migrate.c | 12 +-
mm/rmap.c | 2 +-
mm/sparse-vmemmap.c | 6 +-
net/can/j1939/bus.c | 5 +-
net/can/j1939/socket.c | 3 +
net/ceph/messenger.c | 7 +-
net/core/sock.c | 5 +
net/hsr/hsr_device.c | 163 +++++++++++-
net/hsr/hsr_main.c | 4 +-
net/hsr/hsr_main.h | 4 +
net/hsr/hsr_slave.c | 18 +-
net/ipv4/ip_tunnel_core.c | 6 +
net/ipv4/nexthop.c | 7 +
net/ipv4/tcp.c | 5 +
net/ipv4/tcp_bpf.c | 5 +-
net/mac80211/driver-ops.h | 2 +-
net/mptcp/protocol.c | 15 ++
net/mptcp/sockopt.c | 11 +-
net/mptcp/subflow.c | 3 +
net/rds/ib_frmr.c | 20 +-
net/rfkill/rfkill-gpio.c | 22 +-
net/unix/af_unix.c | 15 +-
sound/firewire/motu/motu-hwdep.c | 2 +-
sound/soc/codecs/wm8940.c | 2 +-
sound/soc/codecs/wm8974.c | 8 +-
sound/soc/sof/intel/hda-stream.c | 2 +-
sound/usb/mixer_quirks.c | 285 ++++++++++++++++++++-
tools/testing/selftests/net/fib_nexthops.sh | 12 +-
134 files changed, 1469 insertions(+), 536 deletions(-)
create mode 100644 include/linux/pgalloc.h
More information about the kernel-team
mailing list