APPLIED: [SRU][Noble][PULL] Noble upstream stable patchset 2026-01-28
Edoardo Canepa
edoardo.canepa at canonical.com
Fri Feb 6 10:03:02 UTC 2026
Applied to noble:linux/master-next. Thanks.
Skipped:
901352f82cbb padata: Reset next CPU when reorder sequence wraps around
(newer and unaffected version of kernel/padata.c was introduced in
0211656025e0 padata: Fix pd UAF once and for all)
On 1/28/26 10:30, Manuel Diewald wrote:
> This pull request (122 commits) includes the following Noble stable patchsets:
>
> Noble update: upstream stable patchset 2026-01-28
> Ported from the following upstream stable releases:
> v6.6.114, v6.12.55
> https://bugs.launchpad.net/bugs/2139267
>
> Note also that the 'stable-next' branch head contains this and all
> prior pending upstream stable releases. I recommend fetching and
> applying just this reference ('stable-next') instead of each
> tags/noble-stable-* reference:
>
> git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble stable-next
>
> -Manuel
>
> ------------------------------------------------------------------------
>
> The following changes since commit 0a4ed860bb3839bfa9aff855c176fb2661e62def:
>
> UBUNTU: Upstream stable to v6.6.113, v6.12.54 (2026-01-27 16:02:37 +0100)
>
> are available in the Git repository at:
>
> git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble tags/noble-stable-2026-01-28
>
> for you to fetch changes up to 1d6cda4e79e44714275639e24349c02280f9afa3:
>
> UBUNTU: Upstream stable to v6.6.114, v6.12.55 (2026-01-27 19:37:05 +0100)
>
> ----------------------------------------------------------------
> Adrian Hunter (3):
> perf/core: Fix address filter match with backing files
> perf/core: Fix MMAP event path names with backing files
> perf/core: Fix MMAP2 event device with backing files
>
> Akhil P Oommen (1):
> drm/msm/a6xx: Fix PDC sleep sequence
>
> Al Viro (1):
> d_alloc_parallel(): set DCACHE_PAR_LOOKUP earlier
>
> Alex Deucher (3):
> drm/amdgpu: add ip offset support for cyan skillfish
> drm/amdgpu: add support for cyan skillfish without IP discovery
> drm/amdgpu: fix handling of harvesting for ip_discovery firmware
>
> Alexey Simakov (1):
> tg3: prevent use of uninitialized remote_adv and local_adv variables
>
> Alok Tiwari (1):
> drm/rockchip: vop2: use correct destination rectangle height check
>
> Amit Chaudhary (1):
> nvme-multipath: Skip nr_active increments in RETRY disposition
>
> Andrii Nakryiko (1):
> selftests/bpf: make arg_parsing.c more robust to crashes
>
> Babu Moger (2):
> x86/resctrl: Refactor resctrl_arch_rmid_read()
> x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID
>
> Bence Csókás (1):
> PM: runtime: Add new devm functions
>
> Benjamin Tissoires (1):
> HID: multitouch: fix sticky fingers
>
> Boris Burkov (1):
> btrfs: fix incorrect readahead expansion length
>
> Brian Norris (1):
> PCI/sysfs: Ensure devices are powered for config reads (part 2)
>
> Celeste Liu (2):
> can: gs_usb: gs_make_candev(): populate net_device->dev_port
> can: gs_usb: increase max interface to U8_MAX
>
> Christoph Hellwig (2):
> xfs: rename the old_crc variable in xlog_recover_process
> xfs: fix log CRC mismatches between i386 and other architectures
>
> Christophe Leroy (1):
> ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec
>
> Chuck Lever (1):
> NFSD: Define a proc_layoutcommit for the FlexFiles layout type
>
> Cristian Ciocaltea (3):
> ASoC: nau8821: Cancel jdet_work before handling jack ejection
> ASoC: nau8821: Generalize helper to clear IRQ status
> ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit
>
> Darrick J. Wong (1):
> xfs: use deferred intent items for reaping crosslinked blocks
>
> Deepanshu Kartikey (1):
> ext4: detect invalid INLINE_DATA + EXTENTS flag combination
>
> Devarsh Thakkar (2):
> phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling
> phy: cadence: cdns-dphy: Update calibration wait time for startup state machine
>
> Dmitry Safonov (1):
> net/ip6_tunnel: Prevent perpetual tunnel growth
>
> Dmitry Torokhov (1):
> HID: hid-input: only ignore 0 battery events for digitizers
>
> Eric Dumazet (1):
> tcp: fix tcp_tso_should_defer() vs large RTT
>
> Eugene Korenevsky (1):
> cifs: parse_dfs_referrals: prevent oob on malformed input
>
> Fabian Vogt (1):
> riscv: kprobes: Fix probe address validation
>
> Fedor Pchelkin (1):
> wifi: rtw89: avoid possible TX wait initialization race
>
> Filipe Manana (2):
> btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running
> btrfs: do not assert we found block group item when creating free space tree
>
> Guenter Roeck (1):
> dmaengine: Add missing cleanup on module unload
>
> Gui-Dong Han (1):
> drm/amdgpu: use atomic functions with memory barriers for vm fault info
>
> Guoniu Zhou (1):
> media: nxp: imx8-isi: m2m: Fix streaming cleanup on release
>
> Huang Xiaojia (1):
> epoll: Remove ep_scan_ready_list() in comments
>
> I Viswanath (1):
> net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset
>
> Ingo Molnar (1):
> sched/balancing: Rename newidle_balance() => sched_balance_newidle()
>
> Jaegeuk Kim (1):
> f2fs: fix wrong block mapping for multi-devices
>
> Jan Kara (1):
> vfs: Don't leak disconnected dentries on umount
>
> Jean-Baptiste Maneyrol (1):
> iio: imu: inv_icm42600: reorganize DMA aligned buffers in structure
>
> Jedrzej Jagielski (2):
> ixgbevf: fix getting link speed data for E610 devices
> ixgbevf: fix mailbox API compatibility by negotiating supported features
>
> Jiaming Zhang (1):
> ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card
>
> John Garry (3):
> md/raid0: Handle bio_split() errors
> md/raid1: Handle bio_split() errors
> md/raid10: Handle bio_split() errors
>
> Kaustabh Chakraborty (3):
> drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions
> drm/exynos: exynos7_drm_decon: properly clear channels during bind
> drm/exynos: exynos7_drm_decon: remove ctx->suspended
>
> Kemeng Shi (1):
> quota: remove unneeded return value of register_quota_format
>
> Konrad Dybcio (1):
> drm/msm/adreno: De-spaghettify the use of memory barriers
>
> Kuen-Han Tsai (6):
> usb: gadget: Store endpoint pointer in usb_request
> usb: gadget: Introduce free_usb_request helper
> usb: gadget: f_ecm: Refactor bind path to use __free()
> usb: gadget: f_acm: Refactor bind path to use __free()
> usb: gadget: f_rndis: Refactor bind path to use __free()
> usb: gadget: f_ncm: Refactor bind path to use __free()
>
> Laurent Pinchart (1):
> media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain()
>
> Linmao Li (1):
> r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H
>
> Manuel Diewald (1):
> UBUNTU: Upstream stable to v6.6.114, v6.12.55
>
> Marc Kleine-Budde (3):
> can: m_can: m_can_plat_remove(): add missing pm_runtime_disable()
> can: m_can: m_can_handle_state_errors(): fix CAN state transition to Error Active
> can: m_can: m_can_chip_config(): bring up interface in correct state
>
> Marek Vasut (1):
> drm/bridge: lt9211: Drop check for last nibble of version register
>
> Mario Limonciello (1):
> drm/amd: Check whether secure display TA loaded successfully
>
> Mark Rutland (2):
> arm64: cputype: Add Neoverse-V3AE definitions
> arm64: errata: Apply workarounds for Neoverse-V3AE
>
> Miquel Sabaté Solà (1):
> btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST
>
> Nam Cao (1):
> eventpoll: Replace rwlock with spinlock
>
> Namjae Jeon (1):
> ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL
>
> Nicolas Dichtel (1):
> doc: fix seg6_flowlabel path
>
> Oleksij Rempel (1):
> net: usb: lan78xx: Add error handling to lan78xx_init_mac_address
>
> Piotr Kwapulinski (2):
> PCI: Add PCI_VDEVICE_SUB helper macro
> ixgbevf: Add support for Intel(R) E610 device
>
> Rafael J. Wysocki (1):
> cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay
>
> Raju Rangoju (1):
> amd-xgbe: Avoid spurious link down messages during interface toggle
>
> Randy Dunlap (1):
> ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings
>
> Sabrina Dubroca (5):
> tls: trim encrypted message to match the plaintext on short splice
> tls: wait for async encrypt in case of error during latter iterations of sendmsg
> tls: always set record_type in tls_process_cmsg
> tls: wait for pending async decryptions if tls_strp_msg_hold fails
> tls: don't rely on tx_work during send()
>
> Sascha Hauer (1):
> net: tls: wait for async completion on last message
>
> Scott Mayhew (1):
> nfsd: decouple the xprtsec policy check from check_nfsd_access()
>
> Sean Nyekjaer (2):
> iio: imu: inv_icm42600: Simplify pm_runtime setup
> iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended
>
> Sergey Bashirov (6):
> NFSD: Rework encoding and decoding of nfsd4_deviceid
> NFSD: Minor cleanup in layoutcommit processing
> nfsd: Use correct error code when decoding extents
> nfsd: Drop dprintk in blocklayout xdr functions
> NFSD: Implement large extent array support in pNFS
> NFSD: Fix last write offset handling in layoutcommit
>
> Shashank A P (1):
> fs: quota: create dedicated workqueue for quota_release_work
>
> Shuhao Fu (1):
> smb: client: Fix refcount leak for cifs_sb_tlink
>
> Shuicheng Lin (1):
> drm/xe/guc: Check GuC running state before deregistering exec queue
>
> Siddharth Vadapalli (2):
> PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists
> PCI: j721e: Fix programming sequence of "strap" settings
>
> Thadeu Lima de Souza Cascardo (1):
> HID: multitouch: fix name of Stylus input devices
>
> Timur Kristóf (1):
> drm/amd/powerplay: Fix CIK shutdown temperature
>
> Tomi Valkeinen (1):
> phy: cdns-dphy: Store hs_clk_rate and return it
>
> Tvrtko Ursulin (1):
> drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
>
> Viacheslav Dubeyko (1):
> hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
>
> Vincent Guittot (1):
> sched/fair: Fix pelt lost idle time detection
>
> Wilfred Mallawa (1):
> nvme/tcp: handle tls partially sent records in write_space()
>
> Xiao Liang (1):
> padata: Reset next CPU when reorder sequence wraps around
>
> Xing Guo (1):
> selftests: arg_parsing: Ensure data is flushed to disk before reading.
>
> Yeounsu Moon (1):
> net: dlink: handle dma_map_single() failure properly
>
> Yi Cong (1):
> r8152: add error handling in rtl8152_driver_init
>
> Youssef Samir (1):
> accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
>
> Yu Kuai (1):
> md: fix mssing blktrace bio split events
>
> Yuezhang Mo (1):
> dax: skip read lock assertion for read-only filesystems
>
> Zhang Yi (2):
> jbd2: ensure that all ongoing I/O complete before freeing blocks
> ext4: wait for ongoing I/O to complete before freeing blocks
>
> Zhanjun Dong (1):
> drm/i915/guc: Skip communication warning on reset in progress
>
> Documentation/arch/arm64/silicon-errata.rst | 2 +
> Documentation/networking/seg6-sysctl.rst | 3 +
> arch/arm64/Kconfig | 1 +
> arch/arm64/include/asm/cputype.h | 2 +
> arch/arm64/kernel/cpu_errata.c | 1 +
> arch/riscv/kernel/probes/kprobes.c | 13 +-
> arch/x86/kernel/cpu/resctrl/monitor.c | 40 ++--
> debian.master/upstream-stable | 4 +-
> drivers/accel/qaic/qaic_control.c | 2 +-
> drivers/base/power/runtime.c | 44 ++++
> drivers/cpufreq/cppc_cpufreq.c | 14 +-
> drivers/dma/idxd/init.c | 2 +
> drivers/gpu/drm/amd/amdgpu/Makefile | 3 +-
> drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 5 +-
> drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 48 ++++-
> drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 2 +-
> .../gpu/drm/amd/amdgpu/cyan_skillfish_reg_init.c | 56 +++++
> drivers/gpu/drm/amd/amdgpu/gmc_v7_0.c | 7 +-
> drivers/gpu/drm/amd/amdgpu/gmc_v8_0.c | 7 +-
> drivers/gpu/drm/amd/amdgpu/nv.h | 1 +
> .../gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.c | 3 +-
> drivers/gpu/drm/bridge/lontium-lt9211.c | 3 +-
> drivers/gpu/drm/exynos/exynos7_drm_decon.c | 98 ++++-----
> drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c | 9 +-
> drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 32 +--
> drivers/gpu/drm/msm/adreno/a6xx_gmu.h | 6 +
> drivers/gpu/drm/msm/adreno/a6xx_gpu.c | 10 +-
> drivers/gpu/drm/rockchip/rockchip_drm_vop2.c | 2 +-
> drivers/gpu/drm/scheduler/sched_main.c | 13 +-
> drivers/gpu/drm/xe/xe_guc_submit.c | 13 +-
> drivers/hid/hid-input.c | 5 +-
> drivers/hid/hid-multitouch.c | 28 +--
> drivers/iio/imu/inv_icm42600/inv_icm42600.h | 8 +-
> drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 35 ++--
> drivers/md/raid0.c | 16 ++
> drivers/md/raid1.c | 37 +++-
> drivers/md/raid10.c | 55 ++++-
> drivers/md/raid5.c | 2 +
> .../media/platform/nxp/imx8-isi/imx8-isi-core.h | 2 +-
> drivers/media/platform/nxp/imx8-isi/imx8-isi-hw.c | 2 +-
> drivers/media/platform/nxp/imx8-isi/imx8-isi-m2m.c | 225 +++++++++------------
> .../media/platform/nxp/imx8-isi/imx8-isi-pipe.c | 2 +-
> drivers/net/can/m_can/m_can.c | 55 +++--
> drivers/net/can/m_can/m_can_platform.c | 2 +-
> drivers/net/can/usb/gs_usb.c | 23 +--
> drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 1 -
> drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 1 +
> drivers/net/ethernet/broadcom/tg3.c | 5 +-
> drivers/net/ethernet/dlink/dl2k.c | 23 ++-
> drivers/net/ethernet/intel/ixgbevf/defines.h | 6 +-
> drivers/net/ethernet/intel/ixgbevf/ipsec.c | 10 +
> drivers/net/ethernet/intel/ixgbevf/ixgbevf.h | 13 +-
> drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 46 ++++-
> drivers/net/ethernet/intel/ixgbevf/mbx.h | 8 +
> drivers/net/ethernet/intel/ixgbevf/vf.c | 194 +++++++++++++++---
> drivers/net/ethernet/intel/ixgbevf/vf.h | 5 +-
> drivers/net/ethernet/realtek/r8169_main.c | 5 +-
> drivers/net/usb/lan78xx.c | 38 +++-
> drivers/net/usb/r8152.c | 7 +-
> drivers/net/wireless/realtek/rtw89/core.c | 39 ++--
> drivers/net/wireless/realtek/rtw89/core.h | 6 +-
> drivers/net/wireless/realtek/rtw89/mac80211.c | 2 +-
> drivers/net/wireless/realtek/rtw89/pci.c | 2 -
> drivers/nvme/host/multipath.c | 6 +-
> drivers/nvme/host/tcp.c | 3 +
> drivers/pci/controller/cadence/pci-j721e.c | 64 +++++-
> drivers/pci/pci-sysfs.c | 10 +-
> drivers/phy/cadence/cdns-dphy.c | 131 +++++++++---
> drivers/usb/gadget/function/f_acm.c | 42 ++--
> drivers/usb/gadget/function/f_ecm.c | 48 ++---
> drivers/usb/gadget/function/f_ncm.c | 78 +++----
> drivers/usb/gadget/function/f_rndis.c | 85 ++++----
> drivers/usb/gadget/udc/core.c | 3 +
> fs/btrfs/extent_io.c | 2 +-
> fs/btrfs/free-space-tree.c | 15 +-
> fs/btrfs/relocation.c | 13 +-
> fs/btrfs/zoned.c | 2 +-
> fs/dax.c | 2 +-
> fs/dcache.c | 12 +-
> fs/eventpoll.c | 145 +++----------
> fs/ext4/ext4_jbd2.c | 11 +-
> fs/ext4/inode.c | 8 +
> fs/f2fs/data.c | 2 +-
> fs/hfsplus/unicode.c | 24 +++
> fs/jbd2/transaction.c | 13 +-
> fs/nfsd/blocklayout.c | 33 +--
> fs/nfsd/blocklayoutxdr.c | 171 ++++++++++------
> fs/nfsd/blocklayoutxdr.h | 8 +-
> fs/nfsd/export.c | 60 +++++-
> fs/nfsd/export.h | 2 +
> fs/nfsd/flexfilelayout.c | 8 +
> fs/nfsd/flexfilelayoutxdr.c | 3 +-
> fs/nfsd/nfs4layouts.c | 1 -
> fs/nfsd/nfs4proc.c | 36 ++--
> fs/nfsd/nfs4xdr.c | 25 +--
> fs/nfsd/nfsd.h | 1 +
> fs/nfsd/nfsfh.c | 12 +-
> fs/nfsd/pnfs.h | 1 +
> fs/nfsd/xdr4.h | 39 +++-
> fs/ocfs2/super.c | 6 +-
> fs/quota/dquot.c | 13 +-
> fs/quota/quota_v1.c | 3 +-
> fs/quota/quota_v2.c | 9 +-
> fs/smb/client/inode.c | 6 +-
> fs/smb/client/misc.c | 17 ++
> fs/smb/client/smb2ops.c | 8 +-
> fs/smb/server/ksmbd_netlink.h | 3 +-
> fs/smb/server/server.h | 1 +
> fs/smb/server/smb2pdu.c | 4 +
> fs/smb/server/transport_ipc.c | 1 +
> fs/smb/server/transport_tcp.c | 69 +++----
> fs/smb/server/transport_tcp.h | 1 +
> fs/xfs/libxfs/xfs_log_format.h | 30 ++-
> fs/xfs/libxfs/xfs_ondisk.h | 2 +
> fs/xfs/scrub/reap.c | 9 +-
> fs/xfs/xfs_log.c | 8 +-
> fs/xfs/xfs_log_priv.h | 4 +-
> fs/xfs/xfs_log_recover.c | 34 +++-
> include/linux/cpufreq.h | 3 +
> include/linux/pci.h | 14 ++
> include/linux/pm_runtime.h | 4 +
> include/linux/quota.h | 2 +-
> include/linux/usb/gadget.h | 25 +++
> include/net/ip_tunnels.h | 15 ++
> kernel/events/core.c | 8 +-
> kernel/padata.c | 6 +-
> kernel/sched/fair.c | 38 ++--
> mm/shmem.c | 7 +-
> net/ipv4/ip_tunnel.c | 14 --
> net/ipv4/tcp_output.c | 19 +-
> net/ipv6/ip6_tunnel.c | 3 +-
> net/tls/tls_main.c | 7 +-
> net/tls/tls_sw.c | 33 ++-
> sound/firewire/amdtp-stream.h | 2 +-
> sound/soc/codecs/idt821034.c | 12 +-
> sound/soc/codecs/nau8821.c | 53 +++--
> sound/usb/card.c | 10 +-
> .../testing/selftests/bpf/prog_tests/arg_parsing.c | 12 +-
> 138 files changed, 1928 insertions(+), 1060 deletions(-)
> create mode 100644 drivers/gpu/drm/amd/amdgpu/cyan_skillfish_reg_init.c
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x20F88172E14F6784.asc
Type: application/pgp-keys
Size: 3167 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20260206/04f0eb65/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20260206/04f0eb65/attachment-0001.sig>
More information about the kernel-team
mailing list