APPLIED: [SRU][Noble][PULL] Noble upstream stable patchset 2026-01-23
Edoardo Canepa
edoardo.canepa at canonical.com
Thu Feb 5 14:29:16 UTC 2026
Applied to noble:linux/master-next. Thanks.
On 1/23/26 16:11, Manuel Diewald wrote:
> This pull request (98 commits) includes the following Noble stable patchsets:
>
> Noble update: upstream stable patchset 2026-01-23
> Ported from the following upstream stable releases:
> v6.6.109, v6.6.110, v6.12.50, v6.12.51
> https://bugs.launchpad.net/bugs/2138938
>
> Note also that the 'stable-next' branch head contains this and all
> prior pending upstream stable releases. I recommend fetching and
> applying just this reference ('stable-next') instead of each
> tags/noble-stable-* reference:
>
> git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble stable-next
>
> -Manuel
>
> ------------------------------------------------------------------------
>
> The following changes since commit 44b3cfee1f500f79142439fba7ff2955483e6931:
>
> UBUNTU: Upstream stable to v6.6.108, v6.12.49 (2026-01-21 21:59:00 +0100)
>
> are available in the Git repository at:
>
> git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble tags/noble-stable-2026-01-23
>
> for you to fetch changes up to 1934f14228b5c8229877563d5034308ed2b44728:
>
> UBUNTU: Upstream stable to v6.6.109, v6.6.110, v6.12.50, v6.12.51 (2026-01-22 20:52:13 +0100)
>
> ----------------------------------------------------------------
> Aleksander Jan Bajkowski (1):
> net: sfp: add quirk for FLYPRO copper SFP+ module
>
> Alok Tiwari (2):
> scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE
> bnxt_en: correct offset handling for IPv6 destination address
>
> Amit Chaudhari (1):
> HID: asus: add support for missing PX series fn keys
>
> Basavaraj Natikar (1):
> HID: amd_sfh: Add sync across amd sfh work functions
>
> Benoît Monin (1):
> mmc: sdhci-cadence: add Mobileye eyeQ support
>
> Breno Leitao (1):
> crypto: sha256 - fix crash at kexec
>
> Charan Teja Kalla (1):
> mm: swap: check for stable address space before operating on the VMA
>
> Chen Ni (1):
> ALSA: usb-audio: Convert comma to semicolon
>
> Chris Morgan (1):
> net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick
>
> Christian Loehle (1):
> cpufreq: Initialize cpufreq-based invariance before subsys
>
> Cristian Ciocaltea (7):
> ALSA: usb-audio: Fix block comments in mixer_quirks
> ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks
> ALSA: usb-audio: Avoid multiple assignments in mixer_quirks
> ALSA: usb-audio: Simplify NULL comparison in mixer_quirks
> ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks
> ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5
> ALSA: usb-audio: Fix code alignment in mixer_quirks
>
> Cryolitia PukNgae (1):
> ALSA: usb-audio: move mixer_quirks' min_mute into common quirk
>
> Dan Carpenter (1):
> octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()
>
> Daniel Lee (1):
> platform/x86: lg-laptop: Fix WMAB call in fan_mode_store()
>
> David Laight (6):
> minmax.h: add whitespace around operators and after commas
> minmax.h: update some comments
> minmax.h: reduce the #define expansion of min(), max() and clamp()
> minmax.h: move all the clamp() definitions after the min/max() ones
> minmax.h: simplify the variants of clamp()
> minmax.h: remove some #defines that are only expanded once
>
> Duoming Zhou (1):
> media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
>
> Eric Biggers (1):
> kmsan: fix out-of-bounds access to shadow memory
>
> Florian Fainelli (1):
> ARM: bcm: Select ARM_GIC_V3 for ARCH_BRCMSTB
>
> Geert Uytterhoeven (1):
> can: rcar_can: rcar_can_resume(): fix s2ram with PSCI
>
> Guenter Roeck (1):
> drm/i915/backlight: Return immediately when scale() finds invalid parameters
>
> Hans de Goede (1):
> gpiolib: Extend software-node support to support secondary software-nodes
>
> Heikki Krogerus (1):
> i2c: designware: Add quirk for Intel Xe
>
> Hugh Dickins (3):
> mm/gup: check ref_count instead of lru before migration
> mm/gup: local lru_add_drain() to avoid lru_add_drain_all()
> mm: folio_may_be_lru_cached() unless folio_test_large()
>
> Ido Schimmel (2):
> nexthop: Forbid FDB status change while nexthop is in a group
> selftests: fib_nexthops: Fix creation of non-FDB nexthops
>
> Jakub Acs (1):
> fs/proc/task_mmu: check p->vec_buf for NULL
>
> James Guan (1):
> wifi: virt_wifi: Fix page fault on connect
>
> Jan Kara (1):
> loop: Avoid updating block size under exclusive owner
>
> Jason Baron (1):
> net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS
>
> Jiayi Li (1):
> usb: core: Add 0x prefix to quirks debug output
>
> Jihed Chaibi (1):
> ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients
>
> Jinjiang Tu (1):
> mm/hugetlb: fix folio is still mapped when deleted
>
> Kees Cook (1):
> gcc-plugins: Remove TODO_verify_il for GCC >= 16
>
> Leon Hwang (1):
> bpf: Reject bpf_timer for PREEMPT_RT
>
> Linus Torvalds (5):
> minmax: make generic MIN() and MAX() macros available everywhere
> minmax: simplify min()/max()/clamp() implementation
> minmax: don't use max() in situations that want a C constant expression
> minmax: improve macro expansion and type checking
> minmax: fix up min3() and max3() too
>
> Luiz Augusto von Dentz (2):
> Bluetooth: hci_sync: Fix hci_resume_advertising_sync
> Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
>
> Lukasz Czapnik (8):
> i40e: fix idx validation in i40e_validate_queue_map
> i40e: fix idx validation in config queues msg
> i40e: fix input validation logic for action_meta
> i40e: fix validation of VF state in get resources
> i40e: add max boundary check for VF filters
> i40e: add mask to apply valid bits for itr_idx
> i40e: improve VF MAC filters accounting
> i40e: add validation for ring_len param
>
> Manuel Diewald (1):
> UBUNTU: Upstream stable to v6.6.109, v6.6.110, v6.12.50, v6.12.51
>
> Marc Kleine-Budde (1):
> net: fec: rename struct fec_devinfo fec_imx6x_info -> fec_imx6sx_info
>
> Martin Schiller (1):
> net: dsa: lantiq_gswip: do also enable or disable cpu port
>
> Masami Hiramatsu (Google) (1):
> tracing: dynevent: Add a missing lockdown check on dynevent
>
> Matvey Kovalev (1):
> wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()
>
> Nathan Chancellor (1):
> s390/cpum_cf: Fix uninitialized warning after backport of ce971233242b
>
> Nirmoy Das (1):
> drm/ast: Use msleep instead of mdelay for edid read
>
> Nobuhiro Iwamatsu (1):
> ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address
>
> Or Har-Toov (1):
> IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions
>
> Peng Fan (1):
> arm64: dts: imx8mp: Correct thermal sensor index
>
> Petr Malat (1):
> ethernet: rvu-af: Remove slash from the driver name
>
> Sabrina Dubroca (1):
> xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
>
> Samasth Norway Ananda (1):
> fbcon: fix integer overflow in fbcon_do_set_font
>
> Sebastian Andrzej Siewior (2):
> vhost: Take a reference on the task in struct vhost_task.
> futex: Prevent use-after-free during requeue-PI
>
> Shivank Garg (1):
> mm: add folio_expected_ref_count() for reference count calculation
>
> Srinivas Kandagatla (1):
> ASoC: qcom: audioreach: fix potential null pointer dereference
>
> Stefan Binding (1):
> ALSA: hda/realtek: Add support for ASUS NUC using CS35L41 HDA
>
> Stefan Metzmacher (1):
> smb: server: don't use delayed_work for post_recv_credits_work
>
> Stéphane Grosjean (1):
> can: peak_usb: fix shift-out-of-bounds issue
>
> Takashi Iwai (1):
> ALSA: usb-audio: Fix build with CONFIG_INPUT=n
>
> Takashi Sakamoto (1):
> firewire: core: fix overlooked update of subsystem ABI version
>
> Thadeu Lima de Souza Cascardo (1):
> media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
>
> Thomas Zimmermann (1):
> fbcon: Fix OOB access in font allocation
>
> Vincent Mailhol (4):
> can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
> can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
> can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
> can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
>
> Vladimir Oltean (2):
> net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup()
> net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port
>
> Wang Haoran (1):
> scsi: target: target_core_configfs: Add length check to avoid buffer overflow
>
> Zabelin Nikita (1):
> drm/gma500: Fix null dereference in hdmi teardown
>
> Zhen Ni (1):
> afs: Fix potential null pointer dereference in afs_put_server
>
> noble.yang (1):
> ALSA: usb-audio: Add DSD support for Comtrue USB Audio device
>
> qaqland (1):
> ALSA: usb-audio: Add mute TLV for playback volumes on more devices
>
> Documentation/admin-guide/laptops/lg-laptop.rst | 4 +-
> .../dts/intel/socfpga/socfpga_cyclone5_sodia.dts | 6 +-
> .../boot/dts/marvell/kirkwood-openrd-client.dts | 2 +-
> arch/arm/mach-bcm/Kconfig | 1 +
> arch/arm64/boot/dts/freescale/imx8mp.dtsi | 4 +-
> arch/s390/kernel/perf_cpum_cf.c | 4 +-
> arch/um/drivers/mconsole_user.c | 2 +
> debian.master/upstream-stable | 4 +-
> drivers/block/loop.c | 40 +-
> drivers/cpufreq/cpufreq.c | 20 +-
> drivers/edac/skx_common.h | 1 -
> drivers/firewire/core-cdev.c | 2 +-
> drivers/gpio/gpiolib.c | 19 +-
> drivers/gpu/drm/amd/amdgpu/amdgpu.h | 4 +
> .../gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c | 2 +
> drivers/gpu/drm/amd/pm/powerplay/hwmgr/ppevvmath.h | 14 +-
> .../drm/amd/pm/swsmu/smu11/sienna_cichlid_ppt.c | 4 +
> .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 4 +
> .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 4 +
> drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c | 2 +-
> drivers/gpu/drm/ast/ast_dp.c | 2 +-
> drivers/gpu/drm/gma500/oaktrail_hdmi.c | 2 +-
> drivers/gpu/drm/i915/display/intel_backlight.c | 5 +-
> drivers/gpu/drm/radeon/evergreen_cs.c | 2 +
> drivers/hid/amd-sfh-hid/amd_sfh_client.c | 12 +-
> drivers/hid/amd-sfh-hid/amd_sfh_common.h | 3 +
> drivers/hid/amd-sfh-hid/amd_sfh_pcie.c | 4 +
> drivers/hid/hid-asus.c | 3 +
> drivers/hwmon/adt7475.c | 24 +-
> drivers/i2c/busses/i2c-designware-platdrv.c | 7 +-
> drivers/infiniband/hw/mlx5/devx.c | 1 +
> drivers/input/touchscreen/cyttsp4_core.c | 2 +-
> drivers/irqchip/irq-sun6i-r.c | 2 +-
> drivers/media/dvb-frontends/stv0367_priv.h | 3 +
> drivers/media/pci/b2c2/flexcop-pci.c | 2 +-
> drivers/media/usb/uvc/uvc_driver.c | 73 ++-
> drivers/media/usb/uvc/uvcvideo.h | 2 +
> drivers/mmc/host/sdhci-cadence.c | 11 +
> drivers/net/can/rcar/rcar_can.c | 8 +-
> drivers/net/can/spi/hi311x.c | 1 +
> drivers/net/can/sun4i_can.c | 1 +
> drivers/net/can/usb/etas_es58x/es58x_core.c | 3 +-
> drivers/net/can/usb/etas_es58x/es58x_devlink.c | 2 +-
> drivers/net/can/usb/mcba_usb.c | 1 +
> drivers/net/can/usb/peak_usb/pcan_usb_core.c | 2 +-
> drivers/net/dsa/lantiq_gswip.c | 37 +-
> drivers/net/ethernet/broadcom/bnxt/bnxt_tc.c | 2 +-
> drivers/net/ethernet/freescale/fec_main.c | 4 +-
> drivers/net/ethernet/intel/i40e/i40e.h | 3 +-
> drivers/net/ethernet/intel/i40e/i40e_main.c | 26 +-
> drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 110 +++--
> drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.h | 3 +-
> drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 3 +-
> .../net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 2 +-
> drivers/net/fjes/fjes_main.c | 4 +-
> drivers/net/phy/sfp.c | 24 +-
> drivers/net/wireless/ath/ath11k/qmi.c | 2 +-
> drivers/net/wireless/virtual/virt_wifi.c | 4 +-
> drivers/nfc/pn544/i2c.c | 2 -
> drivers/platform/x86/lg-laptop.c | 34 +-
> drivers/platform/x86/sony-laptop.c | 1 -
> drivers/scsi/isci/init.c | 6 +-
> .../pci/hive_isp_css_include/math_support.h | 5 -
> drivers/target/target_core_configfs.c | 2 +-
> drivers/ufs/core/ufs-mcq.c | 4 +-
> drivers/usb/core/quirks.c | 2 +-
> drivers/video/fbdev/core/fbcon.c | 13 +-
> fs/afs/server.c | 3 +-
> fs/btrfs/tree-checker.c | 2 +-
> fs/hugetlbfs/inode.c | 10 +-
> fs/proc/task_mmu.c | 3 +
> fs/smb/server/transport_rdma.c | 18 +-
> include/crypto/sha256_base.h | 2 +-
> include/linux/compiler.h | 9 +
> include/linux/minmax.h | 221 +++++----
> include/linux/mm.h | 55 +++
> include/linux/swap.h | 10 +
> include/net/bluetooth/hci_core.h | 21 +
> kernel/bpf/verifier.c | 4 +
> kernel/futex/requeue.c | 6 +-
> kernel/trace/preemptirq_delay_test.c | 2 -
> kernel/trace/trace_dynevent.c | 4 +
> kernel/vhost_task.c | 3 +-
> lib/btree.c | 1 -
> lib/decompress_unlzma.c | 2 +
> lib/vsprintf.c | 2 +-
> mm/gup.c | 14 +-
> mm/kmsan/core.c | 10 +-
> mm/kmsan/kmsan_test.c | 16 +
> mm/mlock.c | 6 +-
> mm/swap.c | 4 +-
> mm/swapfile.c | 3 +
> mm/zsmalloc.c | 2 -
> net/bluetooth/hci_event.c | 26 +-
> net/bluetooth/hci_sync.c | 7 +
> net/core/skbuff.c | 2 +-
> net/ipv4/nexthop.c | 7 +
> net/xfrm/xfrm_state.c | 3 +
> scripts/gcc-plugins/gcc-common.h | 7 +
> sound/pci/hda/patch_realtek.c | 11 +
> sound/soc/qcom/qdsp6/topology.c | 4 +-
> sound/usb/mixer_quirks.c | 545 +++++++++++++++------
> sound/usb/quirks.c | 24 +-
> sound/usb/usbaudio.h | 4 +
> tools/testing/selftests/mm/mremap_test.c | 2 +
> tools/testing/selftests/net/fib_nexthops.sh | 12 +-
> tools/testing/selftests/seccomp/seccomp_bpf.c | 2 +
> 107 files changed, 1203 insertions(+), 500 deletions(-)
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x20F88172E14F6784.asc
Type: application/pgp-keys
Size: 3167 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20260205/93ab5a02/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20260205/93ab5a02/attachment-0001.sig>
More information about the kernel-team
mailing list