APPLIED: [SRU][Noble][PULL] Noble upstream stable patchset 2025-10-21

Stefan Bader stefan.bader at canonical.com
Fri Oct 24 15:03:58 UTC 2025


On 22/10/2025 11:45, Manuel Diewald wrote:
> This pull request (257 commits) includes the following Noble stable patchsets:
> 
>          Noble update: upstream stable patchset 2025-10-21
>                   Ported from the following upstream stable releases:
>                           v6.6.89, v6.12.25, v6.12.26
>          https://bugs.launchpad.net/bugs/2129307
> 
> Note also that the 'stable-next' branch head contains this and all
> prior pending upstream stable releases. I recommend fetching and
> applying just this reference ('stable-next') instead of each
> tags/noble-stable-* reference:
> 
>    git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble stable-next
> 
>   -Manuel
> 
> ------------------------------------------------------------------------
> 
> The following changes since commit 8c5bf558e122b5fc44cfb09ce45659c7b51e11e2:
> 
>    UBUNTU: Upstream stable to v6.6.88, v6.12.24 (2025-10-17 17:01:44 +0200)
> 
> are available in the Git repository at:
> 
>    git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble tags/noble-stable-2025-10-21
> 
> for you to fetch changes up to 0b9eeb65e72b9bd0f747c9953526ebafa89e3a1d:
> 
>    UBUNTU: Upstream stable to v6.6.89, v6.12.25, v6.12.26 (2025-10-21 21:26:50 +0200)
> 
> ----------------------------------------------------------------
> Abdun Nihaal (1):
>        net: txgbe: fix memory leak in txgbe_probe() error path
> 
> Adam Xue (1):
>        USB: serial: option: add Sierra Wireless EM9291
> 
> Al Viro (2):
>        fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
>        qibfs: fix _another_ leak
> 
> Alexander Stein (1):
>        usb: host: max3421-hcd: Add missing spi_device_id table
> 
> Alexander Usyskin (1):
>        mei: me: add panther lake H DID
> 
> Alexei Starovoitov (2):
>        bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
>        bpf: Add namespace to BPF internal symbols
> 
> Alexey Nepomnyashih (1):
>        xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
> 
> Alexis Lothoré (eBPF Foundation) (3):
>        selftests/bpf: fix bpf_map_redirect call for cpu map test
>        selftests/bpf: make xdp_cpumap_attach keep redirect prog attached
>        selftests/bpf: check program redirect in xdp_cpumap_attach
> 
> Anastasia Kovaleva (1):
>        scsi: core: Clear flags for scsi_cmnd that did not complete
> 
> Andrei Kuchynski (2):
>        usb: typec: class: Fix NULL pointer access
>        usb: typec: class: Invalidate USB device pointers on partner unregistration
> 
> Andrew Jones (1):
>        riscv: Provide all alternative macros all the time
> 
> André Apitzsch (6):
>        media: i2c: imx214: Use subdev active state
>        media: i2c: imx214: Simplify with dev_err_probe()
>        media: i2c: imx214: Convert to CCI register access helpers
>        media: i2c: imx214: Replace register addresses with macros
>        media: i2c: imx214: Check number of lanes from device tree
>        media: i2c: imx214: Fix link frequency validation
> 
> Andy Shevchenko (3):
>        usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
>        usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
>        gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
> 
> Anshuman Khandual (6):
>        arm64/sysreg: Update register fields for ID_AA64MMFR0_EL1
>        arm64/sysreg: Add register fields for HDFGRTR2_EL2
>        arm64/sysreg: Add register fields for HDFGWTR2_EL2
>        arm64/sysreg: Add register fields for HFGITR2_EL2
>        arm64/sysreg: Add register fields for HFGRTR2_EL2
>        arm64/sysreg: Add register fields for HFGWTR2_EL2
> 
> Ard Biesheuvel (1):
>        x86/pvh: Call C code via the kernel virtual mapping
> 
> Arnd Bergmann (2):
>        dma/contiguous: avoid warning about unused size_bytes
>        ntb: reduce stack usage in idt_scan_mws
> 
> Aurabindo Pillai (1):
>        drm/amd/display: Temporarily disable hostvm on DCN31
> 
> Baokun Li (1):
>        ext4: goto right label 'out_mmap_sem' in ext4_setattr()
> 
> Basavaraj Natikar (1):
>        ntb_hw_amd: Add NTB PCI ID for new gen CPU
> 
> Björn Töpel (2):
>        riscv: Replace function-like macro by static inline function
>        riscv: uprobes: Add missing fence.i after building the XOL buffer
> 
> Bo-Cun Chen (2):
>        net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
>        net: ethernet: mtk_eth_soc: reapply mdc divider on reset
> 
> Brendan King (2):
>        drm/imagination: fix firmware memory leaks
>        drm/imagination: take paired job reference
> 
> Breno Leitao (2):
>        spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
>        spi: tegra210-quad: add rate limiting and simplify timeout error message
> 
> Brett Creeley (3):
>        pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
>        pds_core: Remove unnecessary check in pds_client_adminq_cmd()
>        pds_core: Prevent possible adminq overflow/stuck condition
> 
> Carlos Maiolino (1):
>        xfs: Do not allow norecovery mount with quotacheck
> 
> ChanWoo Lee (1):
>        scsi: ufs: mcq: Use ufshcd_mcq_req_to_hwq() to simplify updating hwq
> 
> Chenyuan Yang (4):
>        scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
>        pinctrl: renesas: rza2: Fix potential NULL pointer dereference
>        usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
>        scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()
> 
> Christoph Hellwig (3):
>        block: remove rq_list_move
>        xfs: rename xfs_iomap_swapfile_activate to xfs_vm_swap_activate
>        xfs: flush inodegc before swapon
> 
> Claudiu Beznea (1):
>        clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable
> 
> Cong Wang (1):
>        net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
> 
> Craig Hesling (1):
>        USB: serial: simple: add OWON HDS200 series oscilloscope support
> 
> Damien Le Moal (4):
>        ata: libata-scsi: Improve CDL control
>        ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
>        ata: libata-scsi: Fix ata_msense_control_ata_feature()
>        scsi: Improve CDL control
> 
> Dan Carpenter (3):
>        dma-buf/sw_sync: Decrement refcount on error in sw_sync_ioctl_get_deadline()
>        media: i2c: imx214: Fix uninitialized variable in imx214_set_ctrl()
>        usb: typec: class: Unlocked on error in typec_register_partner()
> 
> Daniel Borkmann (1):
>        vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
> 
> Daniel Golle (1):
>        net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
> 
> Daniel Wagner (2):
>        nvmet-fc: take tgtport reference only once
>        nvmet-fc: put ref when assoc->del_work is already scheduled
> 
> David Howells (1):
>        ceph: Fix incorrect flush end position calculation
> 
> Devaraj Rangasamy (1):
>        crypto: ccp - Add support for PCI device 0x1134
> 
> Dmitry Torokhov (3):
>        Revert "drivers: core: synchronize really_probe() and dev_uevent()"
>        driver core: introduce device_set_driver() helper
>        driver core: fix potential NULL pointer dereference in dev_uevent()
> 
> Dominique Martinet (1):
>        9p/net: fix improper handling of bogus negative read/write replies
> 
> Dongli Zhang (2):
>        vhost-scsi: Fix vhost_scsi_send_bad_target()
>        vhost-scsi: Fix vhost_scsi_send_status()
> 
> Eduard Zingerman (5):
>        bpf: add find_containing_subprog() utility function
>        selftests/bpf: test for changing packet data from global functions
>        selftests/bpf: freplace tests for tracking of changes_packet_data
>        selftests/bpf: validate that tail call invalidates packet pointers
>        selftests/bpf: extend changes_pkt_data with cases w/o subprograms
> 
> Edward Adam Davis (1):
>        fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
> 
> Fedor Pchelkin (3):
>        usb: chipidea: ci_hdrc_imx: fix usbmisc handling
>        usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
>        usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
> 
> Fernando Fernandez Mancera (1):
>        x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
> 
> Fiona Klute (1):
>        net: phy: microchip: force IRQ polling mode for lan88xx
> 
> Florian Westphal (1):
>        netfilter: fib: avoid lookup if socket is available
> 
> Frode Isaksen (1):
>        usb: dwc3: gadget: check that event count does not exceed event buffer length
> 
> Gabriel Shahrouzi (1):
>        perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
> 
> Gou Hao (1):
>        iomap: skip unnecessary ifs_block_is_uptodate check
> 
> Gregory CLEMENT (1):
>        MIPS: cm: Detect CM quirks from device tree
> 
> Halil Pasic (1):
>        virtio_console: fix missing byte order handling for cols and rows
> 
> Hans de Goede (1):
>        mei: vsc: Fix fortify-panic caused by invalid counted_by() use
> 
> Haoxiang Li (4):
>        auxdisplay: hd44780: Fix an API misuse in hd44780.c
>        mcb: fix a double free bug in chameleon_parse_gdd()
>        s390/sclp: Add check for get_zeroed_page()
>        s390/tty: Fix a potential memory leak bug
> 
> Heiko Stuebner (1):
>        clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
> 
> Henry Martin (3):
>        cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
>        cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
>        cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
> 
> Herbert Xu (1):
>        crypto: null - Use spin lock instead of mutex
> 
> Herve Codina (1):
>        ASoC: fsl: fsl_qmc_audio: Reset audio data pointers on TRIGGER_START event
> 
> Huacai Chen (1):
>        USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
> 
> Hugo Villeneuve (1):
>        drm: panel: jd9365da: fix reset signal polarity in unprepare
> 
> Huisong Li (1):
>        mailbox: pcc: Fix the possible race in updation of chan_in_use flag
> 
> Ian Abbott (1):
>        comedi: jr3_pci: Fix synchronous deletion of timer
> 
> Ignacio Encinas (1):
>        9p/trans_fd: mark concurrent read and writes to p9_conn->err
> 
> Igor Pylypiv (1):
>        scsi: pm80xx: Set phy_attached to zero when device is gone
> 
> Jakub Kicinski (1):
>        eth: bnxt: fix missing ring index trim on error path
> 
> Jaroslav Kysela (1):
>        ALSA: hda: improve bass speaker support for ASUS Zenbook UM5606WA
> 
> Jason Andryuk (1):
>        xen: Change xen-acpi-processor dom0 dependency
> 
> Jean-Marc Eurin (1):
>        ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
> 
> Jens Axboe (1):
>        io_uring: fix 'sync' handling of io_fallback_tw()
> 
> Johannes Thumshirn (1):
>        btrfs: zoned: return EIO on RAID1 block group write pointer mismatch
> 
> John Stultz (1):
>        sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
> 
> Jonathan Cameron (1):
>        iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
> 
> Josh Poimboeuf (11):
>        objtool: Silence more KCOV warnings
>        objtool, panic: Disable SMAP in __stack_chk_fail()
>        objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
>        objtool, regulator: rk808: Remove potential undefined behavior in rk806_set_mode_dcdc()
>        objtool, lkdtm: Obfuscate the do_nothing() pointer
>        objtool: Stop UNRET validation on UD2
>        x86/bugs: Use SBPB in write_ibpb() if applicable
>        x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
>        x86/bugs: Don't fill RSB on context switch with eIBRS
>        objtool: Ignore end-of-section jumps for KCOV/GCOV
>        objtool: Silence more KCOV warnings, part 2
> 
> Kailang Yang (1):
>        ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
> 
> Krzysztof Kozlowski (1):
>        ASoC: qcom: q6apm-dai: drop unused 'q6apm_dai_rtd' fields
> 
> Lad Prabhakar (1):
>        clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
> 
> Lukas Herbolt (1):
>        xfs: do not check NEEDSREPAIR if ro,norecovery mount.
> 
> Lukas Stockmann (1):
>        rtc: pcf85063: do a SW reset if POR failed
> 
> Luo Gengkun (1):
>        perf/x86: Fix non-sampling (counting) events on certain x86 platforms
> 
> Mahesh Rao (1):
>        firmware: stratix10-svc: Add of_platform_default_populate()
> 
> Manuel Diewald (1):
>        UBUNTU: Upstream stable to v6.6.89, v6.12.25, v6.12.26
> 
> Marc Zyngier (1):
>        cpufreq: cppc: Fix invalid return value in .get() callback
> 
> Marek Behún (8):
>        net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
>        net: dsa: mv88e6xxx: fix VTU methods for 6320 family
>        crypto: atmel-sha204a - Set hwrng quality to lowest possible
>        net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
>        net: dsa: mv88e6xxx: enable PVT for 6321 switch
>        net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
>        net: dsa: mv88e6xxx: enable STU methods for 6320 family
>        Revert "net: dsa: mv88e6xxx: fix internal PHYs for 6320 family"
> 
> Mario Limonciello (4):
>        ACPI: EC: Set ec_no_wakeup for Lenovo Go S
>        platform/x86: amd: pmf: Fix STT limits
>        drm/amd/display: Add HP Elitebook 645 to the quirk list for eDP on DP1
>        drm/amd/display: Add HP Probook 445 and 465 to the quirk list for eDP on DP1
> 
> Martin K. Petersen (1):
>        block: integrity: Do not call set_page_dirty_lock()
> 
> Martin KaFai Lau (1):
>        bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates storage
> 
> Matthew Auld (1):
>        drm/xe/dma_buf: stop relying on placement in unmap
> 
> Matthew Brost (1):
>        drm/xe: Use local fence in error path of xe_migrate_clear
> 
> Miao Li (2):
>        usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
>        usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
> 
> Michael Ehrenreich (1):
>        USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
> 
> Michal Koutný (1):
>        cgroup/cpuset: Expose cpuset filesystem with cpuset v1 only
> 
> Michal Pecio (1):
>        usb: xhci: Fix invalid pointer dereference in Etron workaround
> 
> Mika Westerberg (1):
>        thunderbolt: Scan retimers after device router has been enumerated
> 
> Mike Christie (1):
>        vhost-scsi: Add better resource allocation failure handling
> 
> Mike Looijmans (1):
>        usb: dwc3: xilinx: Prevent spike in reset signal
> 
> Ming Lei (1):
>        selftests: ublk: fix test_stripe_04
> 
> Ming Wang (1):
>        LoongArch: Return NULL from huge_pte_offset() for invalid PMD
> 
> Mostafa Saleh (1):
>        ubsan: Fix panic from test_ubsan_out_of_bounds
> 
> Nathan Chancellor (1):
>        kbuild: Add '-fno-builtin-wcslen'
> 
> Ninad Malwade (1):
>        arm64: tegra: Remove the Orin NX/Nano suspend key
> 
> Ojaswin Mujoo (1):
>        ext4: make block validity check resistent to sb bh corruption
> 
> Oleg Nesterov (1):
>        sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
> 
> Oleksij Rempel (1):
>        net: selftests: initialize TCP header and skb payload with zero
> 
> Oliver Neukum (6):
>        USB: storage: quirk for ADATA Portable HDD CH94
>        USB: VLI disk crashes if LPM is used
>        USB: wdm: handle IO errors in wdm_wwan_port_start
>        USB: wdm: close race between wdm_open and wdm_wwan_port_stop
>        USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
>        USB: wdm: add annotation
> 
> P Praneesh (1):
>        wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
> 
> Pali Rohár (1):
>        cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode
> 
> Pavel Begunkov (1):
>        io_uring: always do atomic put from iowq
> 
> Peter Griffin (4):
>        scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
>        scsi: ufs: exynos: Move UFS shareability value to drvdata
>        scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set
>        scsi: ufs: exynos: Move phy calls to .exit() callback
> 
> Petr Tesarik (1):
>        LoongArch: Remove a bogus reference to ZONE_DMA
> 
> Pi Xiange (1):
>        x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores
> 
> Qingfang Deng (1):
>        net: phy: leds: fix memory leak
> 
> Qiuxu Zhuo (1):
>        selftests/mincore: Allow read-ahead pages to reach the end of the file
> 
> Qu Wenruo (1):
>        btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
> 
> Rafael J. Wysocki (1):
>        cpufreq/sched: Explicitly synchronize limits_changed flag handling
> 
> Ralph Siemsen (1):
>        usb: cdns3: Fix deadlock when using NCM gadget
> 
> Rengarajan S (2):
>        misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
>        misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
> 
> Richard Fitzgerald (1):
>        ALSA: hda/cirrus_scodec_test: Don't select dependencies
> 
> Rob Herring (Arm) (1):
>        of: resolver: Simplify of_resolve_phandles() using __free()
> 
> Robin Murphy (1):
>        iommu: Handle race with default domain setup
> 
> Roger Pau Monne (1):
>        x86/xen: disable CPU idle and frequency drivers for PVH dom0
> 
> Roman Li (2):
>        drm/amd/display: Fix gpu reset in multidisplay config
>        drm/amd/display: Force full update in gpu reset
> 
> Ryo Takakura (1):
>        serial: sifive: lock port in startup()/shutdown() callbacks
> 
> Samuel Holland (2):
>        riscv: module: Fix out-of-bounds relocation access
>        riscv: module: Allocate PLT entries for R_RISCV_PLT32
> 
> Sean Christopherson (5):
>        iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
>        KVM: SVM: Allocate IR data using atomic allocation
>        KVM: x86: Explicitly treat routing entry type changes as changes
>        KVM: x86: Reset IRTE to host control if *new* route isn't postable
>        KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
> 
> Sebastian Andrzej Siewior (1):
>        timekeeping: Add a lockdep override in tick_freeze()
> 
> Sergiu Cuciurean (1):
>        iio: adc: ad7768-1: Fix conversion result sign
> 
> Sewon Nam (1):
>        bpf: bpftool: Setting error code in do_loader()
> 
> Shannon Nelson (1):
>        pds_core: make wait_context part of q_info
> 
> Shengjiu Wang (1):
>        ASoC: fsl_asrc_dma: get codec or cpu dai from backend
> 
> Shigeru Yoshida (1):
>        selftests/bpf: Adjust data size to have ETH_HLEN
> 
> Shuai Xue (1):
>        x86/mce: use is_copy_from_user() to determine copy-from-user context
> 
> Smita Koralahalli (1):
>        cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
> 
> Srinivas Kandagatla (2):
>        ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
>        ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
> 
> Stanley Chu (1):
>        i3c: master: svc: Add support for Nuvoton npcm845 i3c
> 
> Stephan Gerhold (1):
>        serial: msm: Configure correct working mode before starting earlycon
> 
> Steven Rostedt (2):
>        tracing: Add __print_dynamic_array() helper
>        tracing: Verify event formats that have "%*p.."
> 
> Steven Rostedt (Google) (1):
>        tracing: Add __string_len() example
> 
> Sudeep Holla (1):
>        mailbox: pcc: Always clear the platform ack interrupt first
> 
> Suzuki K Poulose (1):
>        irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
> 
> T.J. Mercier (2):
>        splice: remove duplicate noinline from pipe_clear_nowait
>        cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
> 
> Takashi Iwai (1):
>        ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130
> 
> Tamura Dai (1):
>        spi: spi-imx: Add check for spi_imx_setupxfer()
> 
> Thadeu Lima de Souza Cascardo (1):
>        char: misc: register chrdev region with all possible minors
> 
> Thomas Bogendoerfer (1):
>        MIPS: cm: Fix warning if MIPS_CM is disabled
> 
> Thomas Hellström (1):
>        drm/xe: Fix an out-of-bounds shift when invalidating TLB
> 
> Thomas Weißschuh (2):
>        KVM: s390: Don't use %pK through tracepoints
>        KVM: s390: Don't use %pK through debug printing
> 
> Thorsten Leemhuis (1):
>        module: sign with sha512 instead of sha1 by default
> 
> Théo Lebrun (1):
>        usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
> 
> Tianyang Zhang (1):
>        LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
> 
> Tiezhu Yang (2):
>        LoongArch: Make regs_irqs_disabled() more clear
>        LoongArch: Make do_xyz() exception handlers more robust
> 
> Tong Tiangen (1):
>        x86/extable: Remove unused fixup type EX_TYPE_COPY
> 
> Tudor Ambarus (3):
>        soc: qcom: ice: introduce devm_of_qcom_ice_get
>        mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
>        scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
> 
> Tung Nguyen (1):
>        tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
> 
> Uday Shankar (1):
>        nvme: multipath: fix return value of nvme_available_path
> 
> Uwe Kleine-König (1):
>        auxdisplay: hd44780: Convert to platform remove callback returning void
> 
> Vishal Moola (Oracle) (1):
>        mm/compaction: fix bug in hugetlb handling pathway
> 
> Will Pierce (1):
>        riscv: Use kvmalloc_array on relocation_hashtable
> 
> Xiaogang Chen (1):
>        udmabuf: fix a buf size overflow issue during udmabuf creation
> 
> Xingui Yang (1):
>        scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
> 
> Yafang Shao (1):
>        bpf: Reject attaching fexit/fmod_ret to __noreturn functions
> 
> Yu-Chun Lin (1):
>        parisc: PDT: Fix missing prototype warning
> 
> Yuli Wang (1):
>        LoongArch: Select ARCH_USE_MEMTEST
> 
> Yunlong Xing (1):
>        loop: aio inherit the ioprio of original request
> 
> ZhenGuo Yin (1):
>        drm/amdgpu: fix warning of drm_mm_clean
> 
> Zijun Hu (1):
>        of: resolver: Fix device node refcount leakage in of_resolve_phandles()
> 
>   Documentation/bpf/bpf_devel_QA.rst                 |   8 +
>   Makefile                                           |   3 +
>   .../arm64/boot/dts/nvidia/tegra234-p3768-0000.dtsi |   7 -
>   arch/arm64/tools/sysreg                            | 103 +++
>   arch/loongarch/Kconfig                             |   1 +
>   arch/loongarch/include/asm/ptrace.h                |   4 +-
>   arch/loongarch/kernel/traps.c                      |  20 +-
>   arch/loongarch/mm/hugetlbpage.c                    |   3 +-
>   arch/loongarch/mm/init.c                           |   3 -
>   arch/mips/include/asm/mips-cm.h                    |  22 +
>   arch/mips/kernel/mips-cm.c                         |  14 +
>   arch/parisc/kernel/pdt.c                           |   2 +
>   arch/riscv/include/asm/alternative-macros.h        |  19 +-
>   arch/riscv/include/asm/cacheflush.h                |  15 +-
>   arch/riscv/kernel/module-sections.c                |  13 +-
>   arch/riscv/kernel/module.c                         |  11 +-
>   arch/riscv/kernel/probes/uprobes.c                 |  10 +-
>   arch/s390/kvm/intercept.c                          |   2 +-
>   arch/s390/kvm/interrupt.c                          |   8 +-
>   arch/s390/kvm/kvm-s390.c                           |  10 +-
>   arch/s390/kvm/trace-s390.h                         |   4 +-
>   arch/x86/entry/entry.S                             |   2 +-
>   arch/x86/events/core.c                             |   2 +-
>   arch/x86/include/asm/asm.h                         |   3 -
>   arch/x86/include/asm/extable_fixup_types.h         |   2 +-
>   arch/x86/include/asm/intel-family.h                |   2 +
>   arch/x86/kernel/cpu/bugs.c                         |  30 +-
>   arch/x86/kernel/cpu/mce/severity.c                 |  12 +-
>   arch/x86/kernel/i8253.c                            |   3 +-
>   arch/x86/kvm/svm/avic.c                            |  60 +-
>   arch/x86/kvm/vmx/posted_intr.c                     |  28 +-
>   arch/x86/kvm/x86.c                                 |  21 +-
>   arch/x86/mm/extable.c                              |   9 -
>   arch/x86/mm/tlb.c                                  |   6 +-
>   arch/x86/platform/pvh/head.S                       |   7 +-
>   arch/x86/xen/enlighten_pvh.c                       |  19 +-
>   block/bio-integrity.c                              |  16 +-
>   crypto/crypto_null.c                               |  39 +-
>   debian.master/upstream-stable                      |   4 +-
>   drivers/acpi/ec.c                                  |  28 +
>   drivers/acpi/pptt.c                                |   4 +-
>   drivers/ata/libata-scsi.c                          |  25 +-
>   drivers/auxdisplay/hd44780.c                       |   9 +-
>   drivers/base/base.h                                |  17 +
>   drivers/base/bus.c                                 |   2 +-
>   drivers/base/core.c                                |  38 +-
>   drivers/base/dd.c                                  |   6 +-
>   drivers/block/loop.c                               |   2 +-
>   drivers/char/misc.c                                |   2 +-
>   drivers/char/virtio_console.c                      |   7 +-
>   drivers/clk/clk.c                                  |   4 +
>   drivers/clk/renesas/r9a07g043-cpg.c                |  13 +-
>   drivers/clk/renesas/r9a07g044-cpg.c                |   6 +-
>   drivers/comedi/drivers/jr3_pci.c                   |   2 +-
>   drivers/cpufreq/apple-soc-cpufreq.c                |  10 +-
>   drivers/cpufreq/cppc_cpufreq.c                     |   2 +-
>   drivers/cpufreq/scmi-cpufreq.c                     |  10 +-
>   drivers/cpufreq/scpi-cpufreq.c                     |  13 +-
>   drivers/crypto/atmel-sha204a.c                     |   6 +
>   drivers/crypto/ccp/sp-pci.c                        |   1 +
>   drivers/cxl/core/regs.c                            |   4 -
>   drivers/dma-buf/sw_sync.c                          |  19 +-
>   drivers/dma-buf/udmabuf.c                          |   2 +-
>   drivers/firmware/stratix10-svc.c                   |  14 +-
>   drivers/gpio/gpiolib-of.c                          |   6 +-
>   drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |   2 +-
>   drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  |  30 +-
>   .../amd/display/dc/resource/dcn31/dcn31_resource.c |   2 +-
>   drivers/gpu/drm/imagination/pvr_fw.c               |  27 +-
>   drivers/gpu/drm/imagination/pvr_job.c              |   7 +
>   drivers/gpu/drm/imagination/pvr_queue.c            |   4 +
>   drivers/gpu/drm/panel/panel-jadard-jd9365da-h3.c   |   2 +-
>   drivers/gpu/drm/xe/xe_dma_buf.c                    |   5 +-
>   drivers/gpu/drm/xe/xe_gt_tlb_invalidation.c        |  12 +-
>   drivers/gpu/drm/xe/xe_migrate.c                    |   2 +-
>   drivers/i3c/master/svc-i3c-master.c                |  17 +-
>   drivers/iio/adc/ad7768-1.c                         |   5 +-
>   drivers/infiniband/hw/qib/qib_fs.c                 |   1 +
>   drivers/iommu/amd/iommu.c                          |   2 +-
>   drivers/iommu/iommu.c                              |   5 +
>   drivers/irqchip/irq-gic-v2m.c                      |   2 +-
>   drivers/mailbox/pcc.c                              |  15 +-
>   drivers/mcb/mcb-parse.c                            |   2 +-
>   drivers/media/i2c/Kconfig                          |   1 +
>   drivers/media/i2c/imx214.c                         | 978 ++++++++++-----------
>   drivers/misc/lkdtm/perms.c                         |  14 +-
>   drivers/misc/mchp_pci1xxxx/mchp_pci1xxxx_gpio.c    |   8 +-
>   drivers/misc/mei/hw-me-regs.h                      |   1 +
>   drivers/misc/mei/pci-me.c                          |   1 +
>   drivers/misc/mei/vsc-tp.c                          |  26 +-
>   drivers/mmc/host/sdhci-msm.c                       |   2 +-
>   drivers/net/dsa/mt7530.c                           |   6 +-
>   drivers/net/dsa/mv88e6xxx/chip.c                   |  21 +-
>   drivers/net/ethernet/amd/pds_core/adminq.c         |  36 +-
>   drivers/net/ethernet/amd/pds_core/auxbus.c         |   3 -
>   drivers/net/ethernet/amd/pds_core/core.c           |   9 +-
>   drivers/net/ethernet/amd/pds_core/core.h           |   4 +-
>   drivers/net/ethernet/amd/pds_core/devlink.c        |   4 +-
>   drivers/net/ethernet/broadcom/bnxt/bnxt.c          |   2 +-
>   drivers/net/ethernet/mediatek/mtk_eth_soc.c        |  63 +-
>   drivers/net/ethernet/mediatek/mtk_eth_soc.h        |  11 +-
>   drivers/net/ethernet/wangxun/txgbe/txgbe_main.c    |   3 +-
>   drivers/net/phy/microchip.c                        |  46 +-
>   drivers/net/phy/phy_led_triggers.c                 |  23 +-
>   drivers/net/vmxnet3/vmxnet3_xdp.c                  |   2 +-
>   drivers/net/wireless/ath/ath12k/dp_mon.c           |   2 +-
>   drivers/net/xen-netfront.c                         |  17 +-
>   drivers/ntb/hw/amd/ntb_hw_amd.c                    |   1 +
>   drivers/ntb/hw/idt/ntb_hw_idt.c                    |  18 +-
>   drivers/nvme/host/multipath.c                      |   2 +-
>   drivers/nvme/target/fc.c                           |  25 +-
>   drivers/of/resolver.c                              |  37 +-
>   drivers/pinctrl/renesas/pinctrl-rza2.c             |   3 +
>   drivers/platform/x86/amd/pmf/auto-mode.c           |   4 +-
>   drivers/platform/x86/amd/pmf/cnqf.c                |   8 +-
>   drivers/platform/x86/amd/pmf/core.c                |  14 +
>   drivers/platform/x86/amd/pmf/pmf.h                 |   1 +
>   drivers/platform/x86/amd/pmf/sps.c                 |  12 +-
>   drivers/platform/x86/amd/pmf/tee-if.c              |   6 +-
>   drivers/regulator/rk808-regulator.c                |   4 +-
>   drivers/rtc/rtc-pcf85063.c                         |  19 +-
>   drivers/s390/char/sclp_con.c                       |  17 +
>   drivers/s390/char/sclp_tty.c                       |  12 +
>   drivers/scsi/hisi_sas/hisi_sas_main.c              |  20 +
>   drivers/scsi/pm8001/pm8001_sas.c                   |   1 +
>   drivers/scsi/scsi.c                                |  36 +-
>   drivers/scsi/scsi_lib.c                            |   6 +-
>   drivers/soc/qcom/ice.c                             |  48 +
>   drivers/spi/spi-imx.c                              |   5 +-
>   drivers/spi/spi-tegra210-quad.c                    |   6 +-
>   drivers/thunderbolt/tb.c                           |  16 +-
>   drivers/tty/serial/msm_serial.c                    |   6 +
>   drivers/tty/serial/sifive.c                        |   6 +
>   drivers/ufs/core/ufs-mcq.c                         |  12 +-
>   drivers/ufs/core/ufshcd.c                          |   7 +-
>   drivers/ufs/host/ufs-exynos.c                      |  59 +-
>   drivers/ufs/host/ufs-exynos.h                      |   5 +-
>   drivers/ufs/host/ufs-qcom.c                        |   2 +-
>   drivers/usb/cdns3/cdns3-gadget.c                   |   2 +
>   drivers/usb/chipidea/ci_hdrc_imx.c                 |  44 +-
>   drivers/usb/class/cdc-wdm.c                        |  21 +-
>   drivers/usb/core/quirks.c                          |   9 +
>   drivers/usb/dwc3/dwc3-pci.c                        |  10 +
>   drivers/usb/dwc3/dwc3-xilinx.c                     |   4 +-
>   drivers/usb/dwc3/gadget.c                          |  28 +-
>   drivers/usb/gadget/udc/aspeed-vhub/dev.c           |   3 +
>   drivers/usb/host/max3421-hcd.c                     |   7 +
>   drivers/usb/host/ohci-pci.c                        |  23 +
>   drivers/usb/host/xhci-mvebu.c                      |  10 -
>   drivers/usb/host/xhci-mvebu.h                      |   6 -
>   drivers/usb/host/xhci-plat.c                       |   2 +-
>   drivers/usb/host/xhci-ring.c                       |   2 +-
>   drivers/usb/serial/ftdi_sio.c                      |   2 +
>   drivers/usb/serial/ftdi_sio_ids.h                  |   5 +
>   drivers/usb/serial/option.c                        |   3 +
>   drivers/usb/serial/usb-serial-simple.c             |   7 +
>   drivers/usb/storage/unusual_uas.h                  |   7 +
>   drivers/usb/typec/class.c                          |  24 +-
>   drivers/usb/typec/class.h                          |   1 +
>   drivers/vhost/scsi.c                               |  80 +-
>   drivers/xen/Kconfig                                |   2 +-
>   fs/btrfs/file.c                                    |   9 +-
>   fs/btrfs/zoned.c                                   |   1 -
>   fs/ceph/inode.c                                    |   2 +-
>   fs/ext4/block_validity.c                           |   5 +-
>   fs/ext4/inode.c                                    |   9 +-
>   fs/iomap/buffered-io.c                             |   2 +-
>   fs/namespace.c                                     |  69 +-
>   fs/ntfs3/file.c                                    |   1 +
>   fs/smb/client/sess.c                               |  60 +-
>   fs/splice.c                                        |   2 +-
>   fs/xfs/xfs_aops.c                                  |  41 +-
>   fs/xfs/xfs_qm_bhv.c                                |  49 +-
>   fs/xfs/xfs_super.c                                 |   8 +-
>   include/linux/blk-mq.h                             |  17 -
>   include/net/netfilter/nft_fib.h                    |  21 +
>   include/soc/qcom/ice.h                             |   2 +
>   include/trace/stages/stage3_trace_output.h         |   8 +
>   include/trace/stages/stage7_class_define.h         |   1 +
>   init/Kconfig                                       |   2 +-
>   io_uring/io_uring.c                                |  15 +-
>   io_uring/refs.h                                    |   7 +
>   kernel/bpf/bpf_cgrp_storage.c                      |  11 +-
>   kernel/bpf/preload/bpf_preload_kern.c              |   1 +
>   kernel/bpf/syscall.c                               |   6 +-
>   kernel/bpf/verifier.c                              |  60 +-
>   kernel/cgroup/cgroup.c                             |  33 +-
>   kernel/dma/contiguous.c                            |   3 +-
>   kernel/events/core.c                               |   6 +-
>   kernel/module/Kconfig                              |   1 +
>   kernel/panic.c                                     |   6 +
>   kernel/sched/cpufreq_schedutil.c                   |  28 +-
>   kernel/time/tick-common.c                          |  22 +
>   kernel/trace/bpf_trace.c                           |   7 +-
>   kernel/trace/trace_events.c                        |   7 +
>   lib/test_ubsan.c                                   |  18 +-
>   mm/compaction.c                                    |   5 +-
>   net/9p/client.c                                    |  30 +-
>   net/9p/trans_fd.c                                  |  17 +-
>   net/core/selftests.c                               |  18 +-
>   net/ipv4/netfilter/nft_fib_ipv4.c                  |  11 +-
>   net/ipv6/netfilter/nft_fib_ipv6.c                  |  19 +-
>   net/sched/sch_hfsc.c                               |  14 +-
>   net/tipc/monitor.c                                 |   3 +-
>   samples/trace_events/trace-events-sample.h         |  18 +-
>   scripts/Makefile.lib                               |   2 +-
>   sound/pci/hda/Kconfig                              |   4 +-
>   sound/pci/hda/patch_realtek.c                      |  55 +-
>   sound/soc/codecs/wcd934x.c                         |   2 +-
>   sound/soc/fsl/fsl_asrc_dma.c                       |  15 +-
>   sound/soc/fsl/fsl_qmc_audio.c                      |   3 +
>   sound/soc/qcom/qdsp6/q6apm-dai.c                   |  61 +-
>   sound/virtio/virtio_pcm.c                          |  21 +-
>   tools/bpf/bpftool/prog.c                           |   1 +
>   tools/objtool/check.c                              |  36 +-
>   .../selftests/bpf/prog_tests/changes_pkt_data.c    | 107 +++
>   .../selftests/bpf/prog_tests/xdp_cpumap_attach.c   |  44 +-
>   .../testing/selftests/bpf/progs/changes_pkt_data.c |  39 +
>   .../bpf/progs/changes_pkt_data_freplace.c          |  18 +
>   .../bpf/progs/test_xdp_with_cpumap_helpers.c       |   7 +-
>   tools/testing/selftests/bpf/progs/verifier_sock.c  |  56 ++
>   tools/testing/selftests/mincore/mincore_selftest.c |   3 -
>   tools/testing/selftests/ublk/test_stripe_04.sh     |  24 +
>   223 files changed, 2744 insertions(+), 1373 deletions(-)
>   create mode 100644 tools/testing/selftests/bpf/prog_tests/changes_pkt_data.c
>   create mode 100644 tools/testing/selftests/bpf/progs/changes_pkt_data.c
>   create mode 100644 tools/testing/selftests/bpf/progs/changes_pkt_data_freplace.c
>   create mode 100755 tools/testing/selftests/ublk/test_stripe_04.sh
> 

Skipped (already applied):
- spi: spi-imx: Add check for spi_imx_setupxfer() (CVE-2025-37801)

Applied to noble:linux/master-next. Thanks.

-Stefan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xE8675DEECBEECEA3.asc
Type: application/pgp-keys
Size: 48643 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20251024/e391825d/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20251024/e391825d/attachment-0001.sig>


More information about the kernel-team mailing list