[SRU][Noble][PULL] Noble upstream stable patchset 2026-02-02

Manuel Diewald manuel.diewald at canonical.com
Mon Feb 2 18:30:02 UTC 2026


This pull request (95 commits) includes the following Noble stable patchsets:

        Noble update: upstream stable patchset 2026-02-02
                 Ported from the following upstream stable releases:
                         v6.6.118, v6.12.60
        https://bugs.launchpad.net/bugs/2139624

Note also that the 'stable-next' branch head contains this and all
prior pending upstream stable releases. I recommend fetching and
applying just this reference ('stable-next') instead of each
tags/noble-stable-* reference:

  git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble stable-next

 -Manuel

------------------------------------------------------------------------

The following changes since commit d6efa121dad602faeed75294d1a2cf10f4596e09:

  UBUNTU: Upstream stable to v6.6.117, v6.12.58, v6.12.59 (2026-02-02 16:40:56 +0100)

are available in the Git repository at:

  git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble tags/noble-stable-2026-02-02

for you to fetch changes up to d9b45637b43c8a56c8b8795ef3431a3e40c4604f:

  UBUNTU: Upstream stable to v6.6.118, v6.12.60 (2026-02-02 19:22:37 +0100)

----------------------------------------------------------------
Aleksei Nikiforov (1):
      s390/ctcm: Fix double-kfree

Andrey Vatoropin (1):
      be2net: pass wrb_params in case of OS2BMC

Bart Van Assche (2):
      scsi: sg: Do not sleep in atomic context
      scsi: core: Fix a regression triggered by scsi_host_busy()

Borislav Petkov (AMD) (1):
      x86/microcode/AMD: Limit Entrysign signature checking to known generations

Dan Carpenter (2):
      mtdchar: fix integer overflow in read/write ioctls
      Input: imx_sc_key - fix memory corruption on unload

Diogo Ivo (1):
      Revert "drm/tegra: dsi: Clear enable register if powered by bootloader"

Emil Tantilov (1):
      idpf: fix possible vport_config NULL pointer deref in remove

Eric Dumazet (2):
      mptcp: fix race condition in mptcp_schedule_work()
      mptcp: fix a race in mptcp_pm_del_add_timer()

Ewan D. Milne (2):
      nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl()
      nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()

Hamza Mahfooz (1):
      scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()

Hans de Goede (1):
      Input: goodix - add support for ACPI ID GDIX1003

Haotian Zhang (2):
      pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe()
      platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos

Heiko Carstens (1):
      s390/mm: Fix __ptep_rdp() inline assembly

Henrique Carvalho (2):
      smb: client: introduce close_cached_dir_locked()
      smb: client: fix incomplete backport in cfids_invalidation_worker()

Huacai Chen (1):
      LoongArch: Don't panic if no valid cache info for PCI

Ido Schimmel (1):
      selftests: net: lib: Do not overwrite error messages

Ilya Maximets (1):
      net: openvswitch: remove never-working support for setting nsh fields

Ivan Lipski (1):
      drm/amd/display: Clear the CUR_ENABLE register on DCN20 on DPP5

Jakub Horký (2):
      kconfig/mconf: Initialize the default locale at startup
      kconfig/nconf: Initialize the default locale at startup

Jared Kangas (2):
      pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc
      pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc()

Jari Ruusu (1):
      tty/vt: fix up incorrect backport to stable releases

Jianbo Liu (2):
      xfrm: Determine inner GSO type from packet inner protocol
      xfrm: Prevent locally generated packets from direct output in tunnel mode

Jiayuan Chen (2):
      mptcp: Disallow MPTCP subflows from sockmap
      mptcp: Fix proto fallback detection with BPF

Krzysztof Kozlowski (1):
      dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups

Kuniyuki Iwashima (2):
      af_unix: Cache state->msg in unix_stream_read_generic().
      af_unix: Read sk_peek_offset() again after sleeping in unix_stream_read_generic().

Long Li (1):
      uio_hv_generic: Set event for all channels on the device

Ma Ke (1):
      drm/tegra: dc: Fix reference leak in tegra_dc_couple()

Maciej W. Rozycki (1):
      MIPS: Malta: Fix !EVA SOC-it PCI MMIO

Manuel Diewald (1):
      UBUNTU: Upstream stable to v6.6.118, v6.12.60

Mario Limonciello (AMD) (3):
      drm/amd/display: Increase DPCD read retries
      drm/amd/display: Move sleep into each retry for retrieve_link_cap()
      HID: amd_sfh: Stop sensor before starting

Martin Kaiser (1):
      maple_tree: fix tracepoint string pointers

Matthieu Baerts (NGI0) (3):
      selftests: mptcp: join: endpoints: longer transfer
      selftests: mptcp: join: endpoints: longer timeout
      selftests: mptcp: join: userspace: longer timeout

Michal Luczaj (1):
      vsock: Ignore signal/timeout on connect() if already established

Mike Yuan (1):
      shmem: fix tmpfs reconfiguration (remount) when noswap is set

Mykola Kvach (1):
      arm64: dts: rockchip: fix PCIe 3.3V regulator voltage on orangepi-5

Nam Cao (1):
      nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot

Niklas Cassel (1):
      ata: libata-scsi: Fix system suspend for a security locked drive

Niravkumar L Rabara (1):
      mtd: rawnand: cadence: fix DMA device NULL pointer dereference

Nishanth Menon (1):
      net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error

Oleksij Rempel (1):
      net: dsa: microchip: lan937x: Fix RGMII delay tuning

Paolo Abeni (6):
      mptcp: fix ack generation for fallback msk
      mptcp: fix premature close in case of fallback
      mptcp: avoid unneeded subflow-level drops
      mptcp: decouple mptcp fastclose from tcp close
      mptcp: do not fallback when OoO is present
      mptcp: fix duplicate reset on fastclose

Pavel Zhigulin (3):
      net: dsa: hellcreek: fix missing error handling in LED registration
      net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get()
      net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()

Po-Hsu Lin (1):
      selftests: net: use BASH for bareudp testing

Pradyumn Rahar (1):
      net/mlx5: Clean up only new IRQ glue on request_irq() failure

Prateek Agarwal (1):
      drm/tegra: Add call to put_pid()

Rafał Miłecki (1):
      bcma: don't register devices disabled in OF

René Rebe (1):
      ALSA: usb-audio: fix uac2 clock source at terminal parser

Robert McClinton (1):
      drm/radeon: delete radeon_fence_process in is_signaled, no deadlock

Sabrina Dubroca (1):
      xfrm: set err and extack on failure to create pcpu SA

Sebastian Ene (1):
      KVM: arm64: Check the untrusted offset in FF-A memory share

Seungjin Bae (1):
      Input: pegasus-notetaker - fix potential out-of-bounds access

Shahar Shitrit (2):
      net: tls: Cancel RX async resync request on rcd_delta overflow
      net: tls: Change async resync helpers argument

Shaurya Rane (1):
      cifs: fix memory leak in smb3_fs_context_parse_param error path

Shay Drory (1):
      devlink: rate: Unset parent pointer in devl_rate_nodes_destroy

Shin'ichiro Kawasaki (1):
      nvme-multipath: fix lockdep WARN due to partition scan work

Shuicheng Lin (1):
      drm/xe: Prevent BIT() overflow when handling invalid prefetch region

Sourabh Jain (1):
      crash: fix crashkernel resource shrink

Steve French (1):
      cifs: fix typo in enable_gcm_256 module parameter

Takashi Iwai (1):
      ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check

Thomas Weißschuh (1):
      LoongArch: Use UAPI types in ptrace UAPI header

Tzung-Bi Shih (1):
      Input: cros_ec_keyb - fix an invalid memory access

Vlastimil Babka (1):
      mm/mempool: fix poisoning order>0 pages with HIGHMEM

Yifan Zha (1):
      drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled

Yihang Li (1):
      ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan()

Yipeng Zou (1):
      timers: Fix NULL function pointer race in timer_shutdown_sync()

Yongpeng Yang (1):
      exfat: check return value of sb_min_blocksize in exfat_read_boot_sector

Yu-Chun Lin (1):
      pinctrl: realtek: Select REGMAP_MMIO for RTD driver

Zhang Chujun (1):
      tracing/tools: Fix incorrcet short option in usage text for --threads

Zhang Heng (1):
      HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155

Zhiguo Niu (2):
      f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi
      f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic

Zilin Guan (1):
      mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()

 .../bindings/pinctrl/toshiba,visconti-pinctrl.yaml | 26 +++----
 .../arm64/boot/dts/rockchip/rk3588s-orangepi-5.dts |  4 +-
 arch/arm64/kvm/hyp/nvhe/ffa.c                      |  9 ++-
 arch/loongarch/include/uapi/asm/ptrace.h           | 40 +++++------
 arch/loongarch/pci/pci.c                           |  8 +--
 arch/mips/mti-malta/malta-init.c                   | 20 ++++--
 arch/s390/include/asm/pgtable.h                    | 12 ++--
 arch/s390/mm/pgtable.c                             |  4 +-
 arch/x86/kernel/cpu/microcode/amd.c                | 20 +++++-
 debian.master/upstream-stable                      |  4 +-
 drivers/ata/libata-scsi.c                          | 11 ++-
 drivers/bcma/main.c                                |  6 ++
 drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c             |  4 +-
 .../drm/amd/display/dc/hwss/dcn20/dcn20_hwseq.c    |  8 +++
 .../display/dc/link/protocols/link_dp_capability.c | 11 +--
 drivers/gpu/drm/nouveau/nvkm/falcon/fw.c           |  2 +
 drivers/gpu/drm/radeon/radeon_fence.c              |  7 --
 drivers/gpu/drm/tegra/dc.c                         |  1 +
 drivers/gpu/drm/tegra/dsi.c                        |  9 ---
 drivers/gpu/drm/tegra/uapi.c                       |  7 +-
 drivers/gpu/drm/xe/xe_vm.c                         |  4 +-
 drivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_init.c      |  2 +
 drivers/hid/hid-ids.h                              |  4 +-
 drivers/hid/hid-quirks.c                           | 13 +++-
 drivers/input/keyboard/cros_ec_keyb.c              |  6 ++
 drivers/input/keyboard/imx_sc_key.c                |  2 +-
 drivers/input/tablet/pegasus_notetaker.c           |  9 +++
 drivers/input/touchscreen/goodix.c                 |  1 +
 drivers/mtd/mtdchar.c                              |  6 +-
 drivers/mtd/nand/raw/cadence-nand-controller.c     |  3 +-
 drivers/net/dsa/hirschmann/hellcreek_ptp.c         | 14 +++-
 drivers/net/dsa/microchip/lan937x_main.c           |  1 +
 drivers/net/ethernet/emulex/benet/be_main.c        |  7 +-
 drivers/net/ethernet/intel/idpf/idpf_main.c        |  2 +
 .../ethernet/mellanox/mlx5/core/en_accel/ktls_rx.c |  9 ++-
 drivers/net/ethernet/mellanox/mlx5/core/pci_irq.c  |  6 +-
 .../net/ethernet/mellanox/mlxsw/core_linecards.c   |  2 +
 .../net/ethernet/mellanox/mlxsw/spectrum_flower.c  |  6 +-
 drivers/net/ethernet/qlogic/qede/qede_fp.c         |  5 +-
 drivers/net/ethernet/ti/netcp_core.c               | 10 +--
 drivers/nvme/host/fc.c                             | 15 ++--
 drivers/nvme/host/multipath.c                      |  2 +-
 drivers/pinctrl/cirrus/pinctrl-cs42l43.c           | 23 ++++--
 drivers/pinctrl/nxp/pinctrl-s32cc.c                |  3 +-
 drivers/pinctrl/realtek/Kconfig                    |  1 +
 .../x86/intel/speed_select_if/isst_if_mmio.c       |  4 +-
 drivers/s390/net/ctcm_mpc.c                        |  1 -
 drivers/scsi/hosts.c                               |  5 +-
 drivers/scsi/sg.c                                  | 10 ++-
 drivers/soc/ti/knav_dma.c                          | 14 ++--
 drivers/target/loopback/tcm_loop.c                 |  3 +
 drivers/tty/vt/vt_ioctl.c                          |  4 +-
 drivers/uio/uio_hv_generic.c                       | 21 ++++--
 fs/exfat/super.c                                   |  5 +-
 fs/f2fs/compress.c                                 | 74 +++++++++----------
 fs/f2fs/f2fs.h                                     |  2 +
 fs/smb/client/cached_dir.c                         | 43 +++++++++--
 fs/smb/client/cifsfs.c                             |  2 +-
 fs/smb/client/fs_context.c                         |  4 ++
 include/linux/ata.h                                |  1 +
 include/net/tls.h                                  | 25 +++----
 include/net/xfrm.h                                 |  3 +-
 kernel/kexec_core.c                                |  2 +-
 kernel/time/timer.c                                |  7 +-
 lib/maple_tree.c                                   | 32 +++++----
 mm/mempool.c                                       | 32 +++++++--
 mm/shmem.c                                         | 15 ++--
 net/devlink/rate.c                                 |  4 +-
 net/ipv4/esp4_offload.c                            |  6 +-
 net/ipv6/esp6_offload.c                            |  6 +-
 net/mptcp/options.c                                | 54 +++++++++++++-
 net/mptcp/pm_netlink.c                             | 20 ++++--
 net/mptcp/protocol.c                               | 83 +++++++++++++++-------
 net/mptcp/protocol.h                               |  3 +-
 net/mptcp/subflow.c                                |  8 +++
 net/openvswitch/actions.c                          | 68 +-----------------
 net/openvswitch/flow_netlink.c                     | 64 +++--------------
 net/openvswitch/flow_netlink.h                     |  2 -
 net/tls/tls_device.c                               |  4 +-
 net/unix/af_unix.c                                 | 36 +++++-----
 net/vmw_vsock/af_vsock.c                           | 40 ++++++++---
 net/xfrm/xfrm_output.c                             |  6 +-
 net/xfrm/xfrm_user.c                               |  5 +-
 scripts/kconfig/mconf.c                            |  3 +
 scripts/kconfig/nconf.c                            |  3 +
 sound/usb/endpoint.c                               |  3 +-
 sound/usb/mixer.c                                  |  2 +-
 tools/testing/selftests/net/bareudp.sh             |  2 +-
 tools/testing/selftests/net/lib.sh                 |  2 +-
 tools/testing/selftests/net/mptcp/mptcp_join.sh    | 20 +++---
 tools/tracing/latency/latency-collector.c          |  2 +-
 91 files changed, 677 insertions(+), 447 deletions(-)



More information about the kernel-team mailing list