APPLIED/Cmnt: [SRU][Jammy][PULL] Jammy update: v5.15.194 upstream stable release
Stefan Bader
stefan.bader at canonical.com
Fri Oct 24 15:18:02 UTC 2025
On 15/10/2025 16:36, alice.munduruca at canonical.com wrote:
> This pull request (154 commits) includes the following Jammy stable patchsets:
>
> Jammy update: v5.15.194 upstream stable release
> https://bugs.launchpad.net/bugs/2127866
>
> Note also that the 'stable-next' branch head contains this and all
> prior pending upstream stable releases. I recommend fetching and
> applying just this reference ('stable-next') instead of each
> tags/jammy-stable-* reference:
>
> git://git.launchpad.net/~cremfuelled/+git/ubuntu-kernel-stable-jammy stable-next
>
> - Alice C. Munduruca
>
> ------------------------------------------------------------------------
>
> The following changes since commit d3c7c6a9c592d7d13e522f97278a6a8d92a5e74a:
>
> UBUNTU: Upstream stable to v5.15.193 (2025-10-08 12:50:18 -0500)
>
> are available in the Git repository at:
>
> git://git.launchpad.net/~cremfuelled/+git/ubuntu-kernel-stable-jammy tags/jammy-stable-v5.15.194
>
> for you to fetch changes up to 68c930d57a48d2ddd7c632f3be32b6780ba07975:
>
> UBUNTU: Upstream stable to v5.15.194 (2025-10-14 11:17:52 -0400)
>
> ----------------------------------------------------------------
> Alan Stern (1):
> USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
>
> Alex Deucher (1):
> drm/amdgpu: fix a memory leak in fence cleanup when unloading
>
> Alexander Dahl (1):
> mtd: nand: raw: atmel: Fix comment in timings preparation
>
> Alexander Sverdlin (1):
> mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing
>
> Alexey Nepomnyashih (1):
> net: liquidio: fix overflow in octeon_init_instr_queue()
>
> Alice C. Munduruca (1):
> UBUNTU: Upstream stable to v5.15.194
>
> Alok Tiwari (1):
> bnxt_en: correct offset handling for IPv6 destination address
>
> Anders Roxell (1):
> dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
>
> Andreas Kemnade (1):
> regulator: sy7636a: fix lifecycle of power good gpio
>
> André Apitzsch (1):
> media: i2c: imx214: Fix link frequency validation
>
> Anssi Hannula (1):
> can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB
>
> Antoine Tenart (1):
> tunnels: reset the GSO metadata before reusing the skb
>
> Arnd Bergmann (1):
> media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
>
> Bjorn Andersson (1):
> soc: qcom: mdt_loader: Deal with zero e_shentsize
>
> Boris Ostrovsky (1):
> KVM: SVM: Return TSA_SQ_NO and TSA_L1_NO bits in __do_cpuid_func()
>
> Borislav Petkov (AMD) (1):
> KVM: SVM: Set synthesized TSA CPUID flags
>
> Brett A C Sheffield (1):
> Revert "fbdev: Disable sysfb device registration when removing conflicting FBs"
>
> Charles Keepax (2):
> ASoC: wm8940: Correct typo in control name
> ASoC: wm8974: Correct PLL rate rounding
>
> Chen Ni (1):
> ALSA: usb-audio: Convert comma to semicolon
>
> Chen Ridong (1):
> cgroup: split cgroup_destroy_wq into 3 workqueues
>
> Christian Loehle (1):
> cpufreq: Initialize cpufreq-based invariance before subsys
>
> Christoffer Sandberg (1):
> Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table
>
> Christophe Kerello (2):
> mtd: rawnand: stm32_fmc2: fix ECC overwrite
> mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
>
> Colin Ian King (1):
> ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message
>
> Cristian Ciocaltea (6):
> ALSA: usb-audio: Fix block comments in mixer_quirks
> ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks
> ALSA: usb-audio: Avoid multiple assignments in mixer_quirks
> ALSA: usb-audio: Simplify NULL comparison in mixer_quirks
> ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks
> ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5
>
> David Hildenbrand (2):
> mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
> mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
>
> Duoming Zhou (1):
> cnic: Fix use-after-free bugs in cnic_delete_task
>
> Eric Biggers (1):
> crypto: af_alg - Fix incorrect boolean values in af_alg_ctx
>
> Eric Sandeen (1):
> xfs: short circuit xfs_growfs_data_private() if delta is zero
>
> Fabian Vogt (1):
> tty: hvc_console: Call hvc_kick in hvc_write unconditionally
>
> Fabio Porcedda (2):
> USB: serial: option: add Telit Cinterion FN990A w/audio compositions
> USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions
>
> Geert Uytterhoeven (2):
> pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch
> can: rcar_can: rcar_can_resume(): fix s2ram with PSCI
>
> Greg Kroah-Hartman (1):
> Linux 5.15.194
>
> Guenter Roeck (1):
> drm/i915/backlight: Return immediately when scale() finds invalid parameters
>
> H. Nikolaus Schaller (2):
> power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery
> power: supply: bq27xxx: restrict no-battery detection to bq27000
>
> Hangbin Liu (2):
> hsr: use rtnl lock when iterating over ports
> hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr
>
> Hans de Goede (1):
> net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
>
> Harry Yoo (1):
> mm: introduce and use {pgd,p4d}_populate_kernel()
>
> Herbert Xu (1):
> crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
>
> Hugo Villeneuve (1):
> serial: sc16is7xx: fix bug in flow control levels init
>
> Håkon Bugge (1):
> rds: ib: Increment i_fastreg_wrs before bailing out
>
> Ido Schimmel (2):
> nexthop: Forbid FDB status change while nexthop is in a group
> selftests: fib_nexthops: Fix creation of non-FDB nexthops
>
> Ilya Dryomov (1):
> libceph: fix invalid accesses to ceph_connection_v1_info
>
> Ioana Ciornei (1):
> dpaa2-switch: fix buffer pool seeding for control traffic
>
> Jack Wang (1):
> mtd: rawnand: stm32_fmc2: Fix dma_map_sg error check
>
> Jakob Koschel (1):
> usb: gadget: dummy_hcd: remove usage of list iterator past the loop body
>
> Jamie Bainbridge (1):
> qed: Don't collect too many protection override GRC elements
>
> Jani Nikula (1):
> drm/i915/power: fix size for for_each_set_bit() in abox iteration
>
> Jiapeng Chong (2):
> hrtimer: Remove unused function
> hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active()
>
> Jiayi Li (1):
> usb: core: Add 0x prefix to quirks debug output
>
> Jinjiang Tu (1):
> mm/hugetlb: fix folio is still mapped when deleted
>
> Johan Hovold (3):
> phy: tegra: xusb: fix device and OF node leak at probe
> phy: ti-pipe3: fix device leak at unbind
> phy: ti: omap-usb2: fix device leak at unbind
>
> Jonathan Curley (1):
> NFSv4/flexfiles: Fix layout merge mirror check.
>
> Justin Bronder (1):
> i40e: increase max descriptors for XL710
>
> Kim Phillips (1):
> KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
>
> Kohei Enju (1):
> igb: fix link test skipping when interface is admin down
>
> Krister Johansen (1):
> mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN
>
> Krzysztof Kozlowski (2):
> dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks
> phy: broadcom: ns-usb3: fix Wvoid-pointer-to-enum-cast warning
>
> Kuniyuki Iwashima (4):
> net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
> tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
> tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
> af_unix: Don't leave consecutive consumed OOB skbs.
>
> Leon Hwang (1):
> bpf: Reject bpf_timer for PREEMPT_RT
>
> Liao Yuanhong (1):
> wifi: mac80211: fix incorrect type for ret
>
> Loic Poulain (1):
> drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
>
> Lukasz Czapnik (7):
> i40e: fix idx validation in i40e_validate_queue_map
> i40e: fix input validation logic for action_meta
> i40e: add max boundary check for VF filters
> i40e: add mask to apply valid bits for itr_idx
> i40e: fix validation of VF state in get resources
> i40e: fix idx validation in config queues msg
> i40e: add validation for ring_len param
>
> Luo Gengkun (1):
> tracing: Fix tracing_marker may trigger page fault during preempt_disable
>
> Maciej Fijalkowski (1):
> i40e: remove redundant memory barrier when cleaning Tx descs
>
> Maciej S. Szmigiero (1):
> KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active
>
> Mark Tinguely (1):
> ocfs2: fix recursive semaphore deadlock in fiemap call
>
> Martin Schiller (1):
> net: dsa: lantiq_gswip: do also enable or disable cpu port
>
> Masami Hiramatsu (Google) (1):
> tracing: dynevent: Add a missing lockdown check on dynevent
>
> Mathias Nyman (2):
> xhci: dbc: decouple endpoint allocation from initialization
> xhci: dbc: Fix full DbC transfer ring after several reconnects
>
> Matthieu Baerts (NGI0) (2):
> mptcp: set remote_deny_join_id0 on SYN recv
> mptcp: propagate shutdown to subflows when possible
>
> Miaohe Lin (1):
> mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
>
> Miaoqian Lin (1):
> um: virtio_uml: Fix use-after-free after put_device in probe
>
> Michal Schmidt (1):
> i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
>
> Miklos Szeredi (2):
> fuse: check if copy_file_range() returns larger than requested size
> fuse: prevent overflow in copy_file_range return value
>
> Murali Karicheri (2):
> net: hsr: Add support for MC filtering at the slave device
> net: hsr: Add VLAN CTAG filter support
>
> Namjae Jeon (1):
> ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
>
> Nathan Chancellor (2):
> compiler-clang.h: define __SANITIZE_*__ macros only when undefined
> nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
>
> Nitesh Narayan Lal (1):
> i40e: Use irq_update_affinity_hint()
>
> Or Har-Toov (1):
> IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions
>
> Peng Fan (1):
> arm64: dts: imx8mp: Correct thermal sensor index
>
> Petr Malat (1):
> ethernet: rvu-af: Remove slash from the driver name
>
> Philipp Zabel (1):
> net: rfkill: gpio: add DT support
>
> Qi Xi (1):
> drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path
>
> Qu Wenruo (1):
> btrfs: tree-checker: fix the incorrect inode ref size check
>
> Ravi Gunasekaran (2):
> net: hsr: Disable promiscuous mode in offload mode
> net: hsr: hsr_slave: Fix the promiscuous mode in offload mode
>
> Rob Herring (1):
> phy: Use device_get_match_data()
>
> Salah Triki (1):
> EDAC/altera: Delete an inappropriate dma_free_coherent() call
>
> Samasth Norway Ananda (1):
> fbcon: fix integer overflow in fbcon_do_set_font
>
> Stefan Wahren (1):
> net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()
>
> Stephan Gerhold (1):
> dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
>
> Steven Rostedt (1):
> tracing: Do not add length to print format in synthetic events
>
> Stéphane Grosjean (1):
> can: peak_usb: fix shift-out-of-bounds issue
>
> Takashi Iwai (1):
> ALSA: usb-audio: Fix build with CONFIG_INPUT=n
>
> Takashi Sakamoto (1):
> ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported
>
> Tariq Toukan (1):
> Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set"
>
> Tetsuo Handa (2):
> can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed
> can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails
>
> Thomas Fourier (1):
> mmc: mvsdio: Fix dma_unmap_sg() nents value
>
> Thomas Gleixner (1):
> genirq: Provide new interfaces for affinity hints
>
> Thomas Zimmermann (1):
> fbcon: Fix OOB access in font allocation
>
> Tigran Mkrtchyan (1):
> flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read
>
> Trond Myklebust (3):
> NFSv4: Don't clear capabilities that won't be reset
> NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set
> NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server
>
> Vincent Mailhol (10):
> can: bittiming: allow TDC{V,O} to be zero and add can_tdc_const::tdc{v,o,f}_min
> can: bittiming: replace CAN units with the generic ones from linux/units.h
> can: dev: add generic function can_ethtool_op_get_ts_info_hwts()
> can: dev: add generic function can_eth_ioctl_hwts()
> can: etas_es58x: advertise timestamping capabilities and add ioctl support
> can: etas_es58x: sort the includes by alphabetic order
> can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
> can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
> can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
> can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
>
> Vladimir Oltean (2):
> net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup()
> net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port
>
> Wei Yang (1):
> mm/khugepaged: fix the address passed to notifier on testing young
>
> Xiongfeng Wang (1):
> hrtimers: Unconditionally update target CPU base after offline timer migration
>
> Yeoreum Yun (1):
> kunit: kasan_test: disable fortify string checker on kasan_strings() test
>
> Yeounsu Moon (1):
> net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure
>
> Zabelin Nikita (1):
> drm/gma500: Fix null dereference in hdmi teardown
>
> .../bindings/serial/brcm,bcm7271-uart.yaml | 2 +-
> Makefile | 2 +-
> arch/arm64/boot/dts/freescale/imx8mp.dtsi | 4 +-
> arch/um/drivers/virtio_uml.c | 6 +-
> arch/x86/kvm/cpuid.c | 31 ++-
> arch/x86/kvm/svm/svm.c | 3 +-
> crypto/af_alg.c | 7 +
> debian.master/upstream-stable | 2 +-
> drivers/cpufreq/cpufreq.c | 20 +-
> drivers/dma/qcom/bam_dma.c | 8 +-
> drivers/dma/ti/edma.c | 4 +-
> drivers/edac/altera_edac.c | 1 -
> drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 2 -
> drivers/gpu/drm/bridge/analogix/anx7625.c | 6 +-
> .../gpu/drm/bridge/cadence/cdns-mhdp8546-core.c | 6 +-
> drivers/gpu/drm/gma500/oaktrail_hdmi.c | 2 +-
> drivers/gpu/drm/i915/display/intel_backlight.c | 5 +-
> drivers/gpu/drm/i915/display/intel_display_power.c | 6 +-
> drivers/infiniband/hw/mlx5/devx.c | 1 +
> drivers/input/serio/i8042-acpipnpio.h | 14 +
> drivers/media/i2c/imx214.c | 27 +-
> .../media/platform/mtk-vcodec/venc/venc_h264_if.c | 6 +-
> drivers/mmc/host/mvsdio.c | 2 +-
> drivers/mtd/nand/raw/atmel/nand-controller.c | 18 +-
> drivers/mtd/nand/raw/stm32_fmc2_nand.c | 48 ++--
> drivers/net/can/dev/bittiming.c | 15 +-
> drivers/net/can/dev/dev.c | 50 ++++
> drivers/net/can/rcar/rcar_can.c | 8 +-
> drivers/net/can/spi/hi311x.c | 1 +
> drivers/net/can/sun4i_can.c | 1 +
> drivers/net/can/usb/etas_es58x/es581_4.c | 9 +-
> drivers/net/can/usb/etas_es58x/es58x_core.c | 16 +-
> drivers/net/can/usb/etas_es58x/es58x_core.h | 8 +-
> drivers/net/can/usb/etas_es58x/es58x_fd.c | 16 +-
> drivers/net/can/usb/mcba_usb.c | 1 +
> drivers/net/can/usb/peak_usb/pcan_usb_core.c | 2 +-
> drivers/net/can/xilinx_can.c | 16 +-
> drivers/net/dsa/lantiq_gswip.c | 37 +--
> drivers/net/ethernet/broadcom/bnxt/bnxt_tc.c | 2 +-
> drivers/net/ethernet/broadcom/cnic.c | 3 +-
> .../net/ethernet/cavium/liquidio/request_manager.c | 2 +-
> .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 2 +-
> drivers/net/ethernet/freescale/fec_main.c | 3 +-
> drivers/net/ethernet/intel/i40e/i40e.h | 1 +
> drivers/net/ethernet/intel/i40e/i40e_ethtool.c | 25 +-
> drivers/net/ethernet/intel/i40e/i40e_main.c | 10 +-
> drivers/net/ethernet/intel/i40e/i40e_txrx.c | 3 -
> drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 45 +++-
> drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.h | 3 +-
> drivers/net/ethernet/intel/igb/igb_ethtool.c | 5 +-
> drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 3 +-
> drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 2 -
> drivers/net/ethernet/natsemi/ns83820.c | 13 +-
> drivers/net/ethernet/qlogic/qed/qed_debug.c | 7 +-
> drivers/pcmcia/omap_cf.c | 8 +-
> drivers/phy/broadcom/phy-bcm-ns-usb3.c | 9 +-
> drivers/phy/marvell/phy-berlin-usb.c | 7 +-
> drivers/phy/ralink/phy-ralink-usb.c | 10 +-
> drivers/phy/rockchip/phy-rockchip-pcie.c | 11 +-
> drivers/phy/rockchip/phy-rockchip-usb.c | 10 +-
> drivers/phy/tegra/xusb-tegra210.c | 6 +-
> drivers/phy/ti/phy-omap-control.c | 9 +-
> drivers/phy/ti/phy-omap-usb2.c | 24 +-
> drivers/phy/ti/phy-ti-pipe3.c | 27 +-
> drivers/power/supply/bq27xxx_battery.c | 4 +-
> drivers/regulator/sy7636a-regulator.c | 7 +-
> drivers/soc/qcom/mdt_loader.c | 12 +-
> drivers/tty/hvc/hvc_console.c | 6 +-
> drivers/tty/serial/sc16is7xx.c | 14 +-
> drivers/usb/core/quirks.c | 2 +-
> drivers/usb/gadget/udc/dummy_hcd.c | 25 +-
> drivers/usb/host/xhci-dbgcap.c | 94 +++++--
> drivers/usb/serial/option.c | 17 ++
> drivers/video/fbdev/core/fbcon.c | 13 +-
> drivers/video/fbdev/core/fbmem.c | 12 -
> fs/btrfs/tree-checker.c | 4 +-
> fs/fuse/file.c | 5 +-
> fs/hugetlbfs/inode.c | 14 +-
> fs/ksmbd/transport_rdma.c | 17 +-
> fs/nfs/client.c | 2 +
> fs/nfs/flexfilelayout/flexfilelayout.c | 21 +-
> fs/nfs/nfs4proc.c | 6 +-
> fs/nilfs2/sysfs.c | 4 +-
> fs/nilfs2/sysfs.h | 8 +-
> fs/ocfs2/extent_map.c | 10 +-
> fs/xfs/xfs_fsops.c | 4 +
> include/crypto/if_alg.h | 10 +-
> include/linux/can/bittiming.h | 69 +++--
> include/linux/can/dev.h | 8 +
> include/linux/compiler-clang.h | 29 ++-
> include/linux/interrupt.h | 53 +++-
> include/linux/pgalloc.h | 29 +++
> include/linux/pgtable.h | 13 +-
> include/net/sock.h | 40 ++-
> include/uapi/linux/can/netlink.h | 2 +
> kernel/bpf/verifier.c | 4 +
> kernel/cgroup/cgroup.c | 43 +++-
> kernel/irq/manage.c | 8 +-
> kernel/time/hrtimer.c | 50 +---
> kernel/trace/trace.c | 4 +-
> kernel/trace/trace_dynevent.c | 4 +
> kernel/trace/trace_events_synth.c | 2 -
> lib/test_kasan.c | 1 +
> mm/kasan/init.c | 12 +-
> mm/khugepaged.c | 2 +-
> mm/memory-failure.c | 7 +-
> mm/migrate.c | 12 +-
> mm/rmap.c | 2 +-
> mm/sparse-vmemmap.c | 6 +-
> net/can/j1939/bus.c | 5 +-
> net/can/j1939/socket.c | 3 +
> net/ceph/messenger.c | 7 +-
> net/core/sock.c | 5 +
> net/hsr/hsr_device.c | 163 +++++++++++-
> net/hsr/hsr_main.c | 4 +-
> net/hsr/hsr_main.h | 4 +
> net/hsr/hsr_slave.c | 18 +-
> net/ipv4/ip_tunnel_core.c | 6 +
> net/ipv4/nexthop.c | 7 +
> net/ipv4/tcp.c | 5 +
> net/ipv4/tcp_bpf.c | 5 +-
> net/mac80211/driver-ops.h | 2 +-
> net/mptcp/protocol.c | 15 ++
> net/mptcp/sockopt.c | 11 +-
> net/mptcp/subflow.c | 3 +
> net/rds/ib_frmr.c | 20 +-
> net/rfkill/rfkill-gpio.c | 22 +-
> net/unix/af_unix.c | 15 +-
> sound/firewire/motu/motu-hwdep.c | 2 +-
> sound/soc/codecs/wm8940.c | 2 +-
> sound/soc/codecs/wm8974.c | 8 +-
> sound/soc/sof/intel/hda-stream.c | 2 +-
> sound/usb/mixer_quirks.c | 285 ++++++++++++++++++++-
> tools/testing/selftests/net/fib_nexthops.sh | 12 +-
> 134 files changed, 1469 insertions(+), 536 deletions(-)
> create mode 100644 include/linux/pgalloc.h
>
Skipped (already applied):
- mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN (LP:
#2125444)
- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
(CVE-2025-39964)
- crypto: af_alg - Fix incorrect boolean values in af_alg_ctx
(CVE-2025-39964)
Applied to jammy:linux/master-next. Thanks.
-Stefan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xE8675DEECBEECEA3.asc
Type: application/pgp-keys
Size: 48643 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20251024/1bc3b105/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20251024/1bc3b105/attachment-0001.sig>
More information about the kernel-team
mailing list