[SRU][Noble][PULL] Noble upstream stable patchset 2026-01-22
Manuel Diewald
manuel.diewald at canonical.com
Thu Jan 22 10:58:01 UTC 2026
This pull request (82 commits) includes the following Noble stable patchsets:
Noble update: upstream stable patchset 2026-01-22
Ported from the following upstream stable releases:
v6.6.108, v6.12.49
https://bugs.launchpad.net/bugs/2138867
Note also that the 'stable-next' branch head contains this and all
prior pending upstream stable releases. I recommend fetching and
applying just this reference ('stable-next') instead of each
tags/noble-stable-* reference:
git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble stable-next
-Manuel
------------------------------------------------------------------------
The following changes since commit f9a16de7f636e88db97f61e623038dbbd579d1b9:
UBUNTU: Upstream stable to v6.6.107, v6.12.48 (2026-01-20 18:09:17 +0100)
are available in the Git repository at:
git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble tags/noble-stable-2026-01-22
for you to fetch changes up to 44b3cfee1f500f79142439fba7ff2955483e6931:
UBUNTU: Upstream stable to v6.6.108, v6.12.49 (2026-01-21 21:59:00 +0100)
----------------------------------------------------------------
Ajay.Kathat at microchip.com (1):
wifi: wilc1000: avoid buffer overflow in WID string configuration
Alexey Nepomnyashih (1):
net: liquidio: fix overflow in octeon_init_instr_queue()
Amadeusz Sławiński (1):
ASoC: Intel: catpt: Expose correct bit depth to userspace
Anderson Nascimento (1):
net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR
Antheas Kapenekakis (2):
platform/x86: asus-wmi: Fix ROG button mapping, tablet mode on ASUS ROG Z13
platform/x86: asus-wmi: Re-add extra keys to ignore_key_wlan quirk
Borislav Petkov (1):
x86/bugs: KVM: Add support for SRSO_MSR_FIX
Borislav Petkov (AMD) (1):
x86/bugs: Add SRSO_USER_KERNEL_NO support
Bruno Thomsen (1):
rtc: pcf2127: fix SPI command byte for PCF2131 backport
Charles Keepax (3):
ASoC: wm8940: Correct PLL rate rounding
ASoC: wm8940: Correct typo in control name
ASoC: wm8974: Correct PLL rate rounding
Chen Ridong (1):
cgroup: split cgroup_destroy_wq into 3 workqueues
Christoph Hellwig (1):
nvme: fix PI insert on write
Colin Ian King (1):
ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message
Dan Carpenter (1):
drm/xe: Fix a NULL vs IS_ERR() in xe_vm_add_compute_exec_queue()
Duoming Zhou (2):
cnic: Fix use-after-free bugs in cnic_delete_task
octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()
Eugene Koira (1):
iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page()
Filipe Manana (1):
btrfs: fix invalid extref key setup when replaying dentry
Geert Uytterhoeven (1):
pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch
Geliang Tang (1):
selftests: mptcp: sockopt: fix error messages
H. Nikolaus Schaller (2):
power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery
power: supply: bq27xxx: restrict no-battery detection to bq27000
Hangbin Liu (2):
bonding: set random address only when slaves already exist
bonding: don't set oif to bond dev when getting NS target destination
Hans de Goede (1):
net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
Herbert Xu (1):
crypto: af_alg - Set merge to zero early in af_alg_sendmsg
Huacai Chen (1):
LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled
Hugh Dickins (1):
mm: revert "mm: vmscan.c: fix OOM on swap stress test"
Håkon Bugge (1):
rds: ib: Increment i_fastreg_wrs before bailing out
Ioana Ciornei (1):
dpaa2-switch: fix buffer pool seeding for control traffic
Jacob Keller (2):
ice: store max_frame and rx_buf_len only in ice_rx_ring
ice: fix Rx page leak on multi-buffer frames
Jakub Kicinski (1):
tls: make sure to abort the stream if headers are bogus
Jamie Bainbridge (1):
qed: Don't collect too many protection override GRC elements
Jens Axboe (2):
io_uring: backport io_should_terminate_tw()
io_uring: include dying ring in task_work "should cancel" state
Jianbo Liu (1):
net/mlx5e: Harden uplink netdev access against device unbind
Krzysztof Kozlowski (1):
ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed
Kuniyuki Iwashima (1):
tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
Lachlan Hodges (1):
wifi: mac80211: increase scan_ies_len for S1G
Liao Yuanhong (1):
wifi: mac80211: fix incorrect type for ret
Linus Torvalds (3):
minmax: avoid overly complicated constant expressions in VM code
minmax: simplify and clarify min_t()/max_t() implementation
minmax: add a few more MIN_T/MAX_T users
Loic Poulain (1):
drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
Maciej Fijalkowski (1):
i40e: remove redundant memory barrier when cleaning Tx descs
Maciej S. Szmigiero (1):
KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active
Manuel Diewald (1):
UBUNTU: Upstream stable to v6.6.108, v6.12.49
Mathias Nyman (2):
xhci: dbc: decouple endpoint allocation from initialization
xhci: dbc: Fix full DbC transfer ring after several reconnects
Matthieu Baerts (NGI0) (7):
selftests: mptcp: connect: catch IO errors on listen side
selftests: mptcp: avoid spurious errors on TCP disconnect
selftests: mptcp: userspace pm: validate deny-join-id0 flag
mptcp: propagate shutdown to subflows when possible
mptcp: set remote_deny_join_id0 on SYN recv
mptcp: tfo: record 'deny join id0' info
mptcp: pm: nl: announce deny-join-id0 flag
Miaoqian Lin (1):
um: virtio_uml: Fix use-after-free after put_device in probe
Mikulas Patocka (2):
dm-raid: don't set io_min and io_opt for raid1
dm-stripe: fix a possible integer overflow
Mohammad Rafi Shaik (2):
ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface
ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S
Namjae Jeon (1):
ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
Nathan Chancellor (1):
nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
Paulo Alcantara (1):
smb: client: fix filename matching of deferred files
Praful Adiga (1):
ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx
Qi Xi (1):
drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path
Qu Wenruo (1):
btrfs: tree-checker: fix the incorrect inode ref size check
Sankararaman Jayaraman (1):
vmxnet3: unregister xdp rxq info in the reset path
Sathesh B Edara (1):
octeon_ep: fix VF MAC address lifecycle handling
Sean Christopherson (1):
KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions
Stefan Metzmacher (3):
ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size
smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)
Takashi Sakamoto (1):
ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported
Tao Cui (1):
LoongArch: Check the return value when creating kobj
Thomas Fourier (1):
mmc: mvsdio: Fix dma_unmap_sg() nents value
Tiezhu Yang (1):
LoongArch: Update help info of ARCH_STRICT_ALIGN
Vasant Hegde (1):
iommu/amd/pgtbl: Fix possible race while increase page table level
Yeounsu Moon (1):
net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure
Documentation/admin-guide/hw-vuln/srso.rst | 13 +++
Documentation/netlink/specs/mptcp_pm.yaml | 4 +-
arch/loongarch/Kconfig | 8 +-
arch/loongarch/include/asm/acenv.h | 7 +-
arch/loongarch/kernel/env.c | 2 +
arch/um/drivers/virtio_uml.c | 6 +-
arch/x86/include/asm/cpufeatures.h | 5 ++
arch/x86/include/asm/msr-index.h | 1 +
arch/x86/kernel/cpu/bugs.c | 28 ++++++-
arch/x86/kvm/svm/svm.c | 68 +++++++++++++++-
arch/x86/kvm/svm/svm.h | 2 +
arch/x86/lib/msr.c | 2 +
arch/x86/mm/pgtable.c | 2 +-
crypto/af_alg.c | 3 +-
debian.master/upstream-stable | 4 +-
drivers/edac/sb_edac.c | 4 +-
drivers/gpu/drm/bridge/analogix/anx7625.c | 6 +-
.../gpu/drm/bridge/cadence/cdns-mhdp8546-core.c | 6 +-
drivers/gpu/drm/drm_color_mgmt.c | 2 +-
drivers/gpu/drm/xe/xe_vm.c | 4 +-
drivers/iommu/amd/amd_iommu_types.h | 1 +
drivers/iommu/amd/io_pgtable.c | 26 +++++-
drivers/iommu/intel/iommu.c | 7 +-
drivers/md/dm-integrity.c | 6 +-
drivers/md/dm-raid.c | 6 +-
drivers/md/dm-stripe.c | 9 ++-
drivers/mmc/host/mvsdio.c | 2 +-
drivers/net/bonding/bond_main.c | 2 +-
drivers/net/ethernet/broadcom/cnic.c | 3 +-
.../net/ethernet/cavium/liquidio/request_manager.c | 2 +-
.../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 2 +-
drivers/net/ethernet/intel/i40e/i40e_txrx.c | 3 -
drivers/net/ethernet/intel/ice/ice.h | 3 -
drivers/net/ethernet/intel/ice/ice_base.c | 34 ++++----
drivers/net/ethernet/intel/ice/ice_txrx.c | 80 ++++++++----------
drivers/net/ethernet/intel/ice/ice_txrx.h | 4 +-
drivers/net/ethernet/intel/ice/ice_virtchnl.c | 7 +-
.../ethernet/marvell/octeon_ep/octep_pfvf_mbox.c | 3 +
.../net/ethernet/marvell/octeontx2/nic/otx2_ptp.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 27 +++++--
drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c | 1 +
drivers/net/ethernet/mellanox/mlx5/core/lib/mlx5.h | 15 +++-
drivers/net/ethernet/natsemi/ns83820.c | 13 ++-
drivers/net/ethernet/qlogic/qed/qed_debug.c | 7 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 2 +-
drivers/net/vmxnet3/vmxnet3_drv.c | 10 +--
drivers/net/wireless/microchip/wilc1000/wlan_cfg.c | 37 ++++++---
drivers/net/wireless/microchip/wilc1000/wlan_cfg.h | 5 +-
drivers/nvme/host/core.c | 18 +++--
drivers/pcmcia/omap_cf.c | 8 +-
drivers/platform/x86/asus-nb-wmi.c | 25 +++++-
drivers/platform/x86/asus-wmi.h | 3 +-
drivers/power/supply/bq27xxx_battery.c | 4 +-
drivers/rtc/rtc-pcf2127.c | 10 +--
drivers/usb/host/xhci-dbgcap.c | 94 +++++++++++++++-------
fs/btrfs/tree-checker.c | 4 +-
fs/btrfs/tree-log.c | 2 +-
fs/nilfs2/sysfs.c | 4 +-
fs/nilfs2/sysfs.h | 8 +-
fs/smb/client/cifsproto.h | 5 +-
fs/smb/client/inode.c | 6 +-
fs/smb/client/misc.c | 38 ++++-----
fs/smb/client/smbdirect.c | 7 +-
fs/smb/server/transport_rdma.c | 26 ++++--
include/linux/minmax.h | 26 ++++--
include/linux/mlx5/driver.h | 1 +
include/linux/pageblock-flags.h | 2 +-
include/uapi/linux/mptcp.h | 2 +
include/uapi/linux/mptcp_pm.h | 4 +-
io_uring/io_uring.c | 7 +-
io_uring/io_uring.h | 13 +++
io_uring/poll.c | 3 +-
io_uring/timeout.c | 2 +-
kernel/cgroup/cgroup.c | 43 ++++++++--
mm/vmscan.c | 2 +-
net/ipv4/proc.c | 2 +-
net/ipv4/tcp.c | 5 ++
net/ipv4/tcp_ao.c | 4 +-
net/ipv6/proc.c | 2 +-
net/mac80211/driver-ops.h | 2 +-
net/mac80211/main.c | 7 +-
net/mptcp/options.c | 6 +-
net/mptcp/pm_netlink.c | 7 ++
net/mptcp/protocol.c | 16 ++++
net/mptcp/subflow.c | 4 +
net/rds/ib_frmr.c | 20 +++--
net/rfkill/rfkill-gpio.c | 4 +-
net/tls/tls.h | 1 +
net/tls/tls_strp.c | 14 ++--
net/tls/tls_sw.c | 3 +-
sound/firewire/motu/motu-hwdep.c | 2 +-
sound/pci/hda/patch_realtek.c | 1 +
sound/soc/codecs/wm8940.c | 9 ++-
sound/soc/codecs/wm8974.c | 8 +-
sound/soc/intel/catpt/pcm.c | 23 ++++--
sound/soc/qcom/qdsp6/audioreach.c | 1 +
sound/soc/qcom/qdsp6/q6apm-lpass-dais.c | 7 +-
sound/soc/sof/intel/hda-stream.c | 2 +-
tools/testing/selftests/net/mptcp/mptcp_connect.c | 11 +--
tools/testing/selftests/net/mptcp/mptcp_sockopt.c | 16 ++--
tools/testing/selftests/net/mptcp/pm_nl_ctl.c | 7 ++
tools/testing/selftests/net/mptcp/userspace_pm.sh | 14 +++-
102 files changed, 734 insertions(+), 327 deletions(-)
More information about the kernel-team
mailing list