[SRU][Noble][PULL] Noble upstream stable patchset 2026-01-20
Manuel Diewald
manuel.diewald at canonical.com
Tue Jan 20 17:21:15 UTC 2026
This pull request (115 commits) includes the following Noble stable patchsets:
Noble update: upstream stable patchset 2026-01-20
Ported from the following upstream stable releases:
v6.6.107, v6.12.48
https://bugs.launchpad.net/bugs/2138681
Note also that the 'stable-next' branch head contains this and all
prior pending upstream stable releases. I recommend fetching and
applying just this reference ('stable-next') instead of each
tags/noble-stable-* reference:
git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble stable-next
-Manuel
------------------------------------------------------------------------
The following changes since commit db99a4eb4ce906bf49308ec89fbeb0fc3624ac82:
UBUNTU: Upstream stable to v6.6.105, v6.6.106, v6.12.46, v6.12.47 (2026-01-16 16:15:53 +0100)
are available in the Git repository at:
git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble tags/noble-stable-2026-01-20
for you to fetch changes up to f9a16de7f636e88db97f61e623038dbbd579d1b9:
UBUNTU: Upstream stable to v6.6.107, v6.12.48 (2026-01-20 18:09:17 +0100)
----------------------------------------------------------------
Ada Couprie Diaz (1):
kasan: fix GCC mem-intrinsic prefix with sw tags
Alan Stern (1):
USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
Alex Deucher (2):
drm/amdgpu: fix a memory leak in fence cleanup when unloading
drm/amd/display: use udelay rather than fsleep
Alex Markuze (2):
ceph: fix race condition validating r_parent before applying state
ceph: fix race condition where r_parent becomes stale before sending message
Alex Tran (1):
docs: networking: can: change bcm_msg_head frames member to support flexible array
Alexander Dahl (1):
mtd: nand: raw: atmel: Fix comment in timings preparation
Alexander Sverdlin (1):
mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing
Anders Roxell (1):
dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
Andreas Kemnade (1):
regulator: sy7636a: fix lifecycle of power good gpio
Anssi Hannula (1):
can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB
Antoine Tenart (1):
tunnels: reset the GSO metadata before reusing the skb
Aurabindo Pillai (1):
Revert "drm/amd/display: Optimize cursor position updates"
Boris Burkov (2):
btrfs: use readahead_expand() on compressed extents
btrfs: fix squota compressed stats leak
Buday Csaba (1):
net: mdiobus: release reset_gpio in mdiobus_unregister_device()
Chen Ridong (1):
kernfs: Fix UAF in polling when open file is released
Chiasheng Lee (1):
i2c: i801: Hide Intel Birch Stream SoC TCO WDT
Christoffer Sandberg (1):
Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table
Christophe Kerello (2):
mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
mtd: rawnand: stm32_fmc2: fix ECC overwrite
Dan Carpenter (1):
dmaengine: idxd: Fix double free in idxd_setup_wqs()
David Rosca (3):
drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time
drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages
drm/amdgpu: Add back JPEG to video caps for carrizo and newer
Fabian Vogt (1):
tty: hvc_console: Call hvc_kick in hvc_write unconditionally
Fabio Porcedda (2):
USB: serial: option: add Telit Cinterion FN990A w/audio compositions
USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions
Florian Westphal (4):
netfilter: nft_set_rbtree: continue traversal if element is inactive
netfilter: nf_tables: place base_seq in struct net
netfilter: nf_tables: make nft_set_do_lookup available unconditionally
netfilter: nf_tables: restart set lookup on base_seq change
Guenter Roeck (1):
trace/fgraph: Fix error handling
Hangbin Liu (2):
hsr: use rtnl lock when iterating over ports
hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr
Harry Yoo (1):
mm: introduce and use {pgd,p4d}_populate_kernel()
Hugo Villeneuve (1):
serial: sc16is7xx: fix bug in flow control levels init
Ilya Dryomov (1):
libceph: fix invalid accesses to ceph_connection_v1_info
Jakub Kicinski (1):
netlink: specs: mptcp: replace underscores with dashes in names
Jani Nikula (1):
drm/i915/power: fix size for for_each_set_bit() in abox iteration
Jeff LaBundy (1):
Input: iqs7222 - avoid enabling unused interrupts
Jiapeng Chong (2):
hrtimer: Remove unused function
hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active()
Johan Hovold (4):
drm/mediatek: fix potential OF node use-after-free
phy: tegra: xusb: fix device and OF node leak at probe
phy: ti-pipe3: fix device leak at unbind
phy: ti: omap-usb2: fix device leak at unbind
Jonathan Curley (1):
NFSv4/flexfiles: Fix layout merge mirror check.
Justin Worrell (1):
SUNRPC: call xs_sock_process_cmsg for all cmsg
Kohei Enju (1):
igb: fix link test skipping when interface is admin down
Krzysztof Kozlowski (1):
dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks
Kuniyuki Iwashima (2):
net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
Luo Gengkun (1):
tracing: Fix tracing_marker may trigger page fault during preempt_disable
Manuel Diewald (1):
UBUNTU: Upstream stable to v6.6.107, v6.12.48
Mark Tinguely (1):
ocfs2: fix recursive semaphore deadlock in fiemap call
Mathias Nyman (1):
xhci: fix memory leak regression when freeing xhci vdev devices depth first
Matthieu Baerts (NGI0) (3):
netlink: specs: mptcp: add missing 'server-side' attr
netlink: specs: mptcp: clearly mention attributes
netlink: specs: mptcp: fix if-idx attribute type
Maurizio Lombardi (1):
nvme-pci: skip nvme_write_sq_db on empty rqlist
Max Kellermann (1):
fs/nfs/io: make nfs_start_io_*() killable
Miaohe Lin (1):
mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
Miaoqian Lin (1):
dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate
Michal Schmidt (1):
i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
Miklos Szeredi (2):
fuse: check if copy_file_range() returns larger than requested size
fuse: prevent overflow in copy_file_range return value
Mimi Zohar (1):
ima: limit the number of ToMToU integrity violations
Murali Karicheri (1):
net: hsr: Add VLAN CTAG filter support
Namjae Jeon (3):
ksmbd: mark SMB2_SESSION_EXPIRED to session when destroying previous session
ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
ksmbd: fix null pointer dereference in alloc_preauth_hash()
Nathan Chancellor (1):
compiler-clang.h: define __SANITIZE_*__ macros only when undefined
Oleksij Rempel (1):
net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups
Palmer Dabbelt (1):
RISC-V: Remove unnecessary include from compat.h
Paolo Abeni (1):
Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups"
Peilin Ye (1):
bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()
Pengyu Luo (1):
phy: qualcomm: phy-qcom-eusb2-repeater: fix override properties
Petr Machata (1):
net: bridge: Bounce invalid boolopts
Pu Lehui (1):
tracing: Silence warning when chunk allocation fails in trace_pid_write
Qu Wenruo (1):
btrfs: fix corruption reading compressed range when block size is smaller than page size
Quanmin Yan (2):
mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()
mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()
Salah Triki (1):
EDAC/altera: Delete an inappropriate dma_free_coherent() call
Sang-Heon Jeon (1):
mm/damon/core: set quota->charged_from to jiffies at first charge window
Santhosh Kumar K (1):
mtd: spinand: winbond: Fix oob_layout for W25N01JW
Srinivasan Shanmugam (1):
drm/amd/display: Fix error pointers in amdgpu_dm_crtc_mem_type_changed
Stanislav Fort (1):
mm/damon/sysfs: fix use-after-free in state_show()
Stefan Wahren (1):
net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()
Stephan Gerhold (1):
dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
Takashi Iwai (3):
usb: gadget: midi2: Fix missing UMP group attributes initialization
usb: gadget: midi2: Fix MIDI2 IN EP max packet size
ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA
Tetsuo Handa (2):
can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed
can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails
Theodore Ts'o (1):
ext4: introduce linear search for dentries
Thomas Richter (2):
s390/cpum_cf: Deny all sampling events by counter PMU
s390/pai: Deny all events not handled by this PMU
Tigran Mkrtchyan (1):
flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read
Trond Myklebust (8):
NFSv4: Don't clear capabilities that won't be reset
NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set
NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server
NFS: Serialise O_DIRECT i/o and truncate()
NFSv4.2: Serialise O_DIRECT i/o and fallocate()
NFSv4.2: Serialise O_DIRECT i/o and clone range
NFSv4.2: Serialise O_DIRECT i/o and copy range
NFS: nfs_invalidate_folio() must observe the offset and size arguments
Umesh Nerlige Ramappa (1):
drm/i915/pmu: Fix zero delta busyness issue
Vladimir Riabchun (1):
ftrace/samples: Fix function size computation
Wei Yang (1):
mm/khugepaged: fix the address passed to notifier on testing young
Xiongfeng Wang (1):
hrtimers: Unconditionally update target CPU base after offline timer migration
Yi Sun (2):
dmaengine: idxd: Remove improper idxd_free
dmaengine: idxd: Fix refcount underflow on module unload
wangzijie (1):
proc: fix type confusion in pde_set_flags()
.../bindings/serial/brcm,bcm7271-uart.yaml | 2 +-
Documentation/netlink/specs/mptcp_pm.yaml | 52 ++++---
Documentation/networking/can.rst | 2 +-
arch/riscv/include/asm/compat.h | 1 -
arch/s390/kernel/perf_cpum_cf.c | 4 +-
arch/s390/kernel/perf_pai_crypto.c | 4 +-
arch/s390/kernel/perf_pai_ext.c | 2 +-
debian.master/upstream-stable | 4 +-
drivers/dma/dw/rzn1-dmamux.c | 15 +-
drivers/dma/idxd/init.c | 39 ++---
drivers/dma/qcom/bam_dma.c | 8 +-
drivers/dma/ti/edma.c | 4 +-
drivers/edac/altera_edac.c | 1 -
drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 3 -
drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c | 12 +-
drivers/gpu/drm/amd/amdgpu/vcn_v4_0.c | 64 ++++----
drivers/gpu/drm/amd/amdgpu/vi.c | 7 +
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 5 +
drivers/gpu/drm/amd/display/dc/dcn10/dcn10_dpp.c | 7 +-
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hubp.c | 8 +-
.../drm/amd/display/dc/hwss/dcn20/dcn20_hwseq.c | 2 +-
drivers/gpu/drm/i915/display/intel_display_power.c | 6 +-
drivers/gpu/drm/i915/gt/uc/intel_guc_submission.c | 16 ++
drivers/gpu/drm/mediatek/mtk_drm_drv.c | 11 +-
drivers/i2c/busses/i2c-i801.c | 2 +-
drivers/input/misc/iqs7222.c | 3 +
drivers/input/serio/i8042-acpipnpio.h | 14 ++
drivers/mtd/nand/raw/atmel/nand-controller.c | 18 ++-
drivers/mtd/nand/raw/stm32_fmc2_nand.c | 46 +++---
drivers/mtd/nand/spi/winbond.c | 37 ++++-
drivers/net/can/xilinx_can.c | 16 +-
drivers/net/ethernet/freescale/fec_main.c | 3 +-
drivers/net/ethernet/intel/i40e/i40e_main.c | 2 +-
drivers/net/ethernet/intel/igb/igb_ethtool.c | 5 +-
drivers/net/phy/mdio_bus.c | 4 +-
drivers/nvme/host/pci.c | 3 +
drivers/phy/qualcomm/phy-qcom-eusb2-repeater.c | 4 +-
drivers/phy/tegra/xusb-tegra210.c | 6 +-
drivers/phy/ti/phy-omap-usb2.c | 13 ++
drivers/phy/ti/phy-ti-pipe3.c | 13 ++
drivers/regulator/sy7636a-regulator.c | 7 +-
drivers/tty/hvc/hvc_console.c | 6 +-
drivers/tty/serial/sc16is7xx.c | 14 +-
drivers/usb/gadget/function/f_midi2.c | 11 +-
drivers/usb/gadget/udc/dummy_hcd.c | 8 +-
drivers/usb/host/xhci-mem.c | 2 +-
drivers/usb/serial/option.c | 17 ++
fs/btrfs/extent_io.c | 78 ++++++++--
fs/btrfs/qgroup.c | 6 +-
fs/ceph/debugfs.c | 14 +-
fs/ceph/dir.c | 10 +-
fs/ceph/file.c | 10 +-
fs/ceph/inode.c | 81 ++++++++--
fs/ceph/mds_client.c | 172 +++++++++++++--------
fs/ceph/mds_client.h | 18 ++-
fs/ext4/namei.c | 14 +-
fs/fuse/file.c | 5 +-
fs/kernfs/file.c | 54 ++++---
fs/nfs/client.c | 2 +
fs/nfs/direct.c | 21 ++-
fs/nfs/file.c | 21 ++-
fs/nfs/flexfilelayout/flexfilelayout.c | 21 ++-
fs/nfs/inode.c | 4 +-
fs/nfs/internal.h | 17 +-
fs/nfs/io.c | 55 ++++---
fs/nfs/nfs42proc.c | 2 +
fs/nfs/nfs4file.c | 2 +
fs/nfs/nfs4proc.c | 6 +-
fs/nfs/write.c | 1 +
fs/ocfs2/extent_map.c | 10 +-
fs/proc/generic.c | 3 +-
fs/smb/server/connection.c | 34 +++-
fs/smb/server/connection.h | 14 +-
fs/smb/server/mgmt/user_session.c | 36 ++++-
fs/smb/server/mgmt/user_session.h | 3 +
fs/smb/server/smb2pdu.c | 40 ++---
include/linux/compiler-clang.h | 29 +++-
include/linux/fs.h | 10 +-
include/linux/pgalloc.h | 29 ++++
include/linux/pgtable.h | 13 +-
include/net/netfilter/nf_tables.h | 1 -
include/net/netfilter/nf_tables_core.h | 10 +-
include/net/netns/nftables.h | 1 +
include/net/sock.h | 40 ++++-
include/uapi/linux/mptcp_pm.h | 50 +++---
kernel/bpf/helpers.c | 7 +-
kernel/time/hrtimer.c | 50 ++----
kernel/trace/fgraph.c | 3 +-
kernel/trace/trace.c | 10 +-
mm/damon/core.c | 4 +
mm/damon/lru_sort.c | 3 +
mm/damon/reclaim.c | 3 +
mm/damon/sysfs.c | 14 +-
mm/kasan/init.c | 12 +-
mm/khugepaged.c | 4 +-
mm/memory-failure.c | 7 +-
mm/percpu.c | 6 +-
mm/sparse-vmemmap.c | 6 +-
net/bridge/br.c | 7 +
net/can/j1939/bus.c | 5 +-
net/can/j1939/socket.c | 3 +
net/ceph/messenger.c | 7 +-
net/core/sock.c | 5 +
net/hsr/hsr_device.c | 97 +++++++++++-
net/hsr/hsr_main.c | 4 +-
net/hsr/hsr_main.h | 3 +
net/ipv4/ip_tunnel_core.c | 6 +
net/ipv4/tcp_bpf.c | 5 +-
net/netfilter/nf_tables_api.c | 66 ++++----
net/netfilter/nft_lookup.c | 43 +++++-
net/netfilter/nft_set_rbtree.c | 6 +-
net/sunrpc/xprtsock.c | 6 +-
samples/ftrace/ftrace-direct-modify.c | 2 +-
scripts/Makefile.kasan | 12 +-
security/integrity/ima/ima_main.c | 7 +-
security/integrity/integrity.h | 3 +-
sound/pci/hda/patch_realtek.c | 1 +
117 files changed, 1290 insertions(+), 597 deletions(-)
create mode 100644 include/linux/pgalloc.h
More information about the kernel-team
mailing list