APPLIED: [SRU][Noble][PULL] Noble upstream stable patchset 2026-01-20
Stefan Bader
stefan.bader at canonical.com
Fri Jan 23 15:10:16 UTC 2026
On 20/01/2026 18:21, Manuel Diewald wrote:
> This pull request (115 commits) includes the following Noble stable patchsets:
>
> Noble update: upstream stable patchset 2026-01-20
> Ported from the following upstream stable releases:
> v6.6.107, v6.12.48
> https://bugs.launchpad.net/bugs/2138681
>
> Note also that the 'stable-next' branch head contains this and all
> prior pending upstream stable releases. I recommend fetching and
> applying just this reference ('stable-next') instead of each
> tags/noble-stable-* reference:
>
> git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble stable-next
>
> -Manuel
>
> ------------------------------------------------------------------------
>
> The following changes since commit db99a4eb4ce906bf49308ec89fbeb0fc3624ac82:
>
> UBUNTU: Upstream stable to v6.6.105, v6.6.106, v6.12.46, v6.12.47 (2026-01-16 16:15:53 +0100)
>
> are available in the Git repository at:
>
> git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble tags/noble-stable-2026-01-20
>
> for you to fetch changes up to f9a16de7f636e88db97f61e623038dbbd579d1b9:
>
> UBUNTU: Upstream stable to v6.6.107, v6.12.48 (2026-01-20 18:09:17 +0100)
>
> ----------------------------------------------------------------
> Ada Couprie Diaz (1):
> kasan: fix GCC mem-intrinsic prefix with sw tags
>
> Alan Stern (1):
> USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
>
> Alex Deucher (2):
> drm/amdgpu: fix a memory leak in fence cleanup when unloading
> drm/amd/display: use udelay rather than fsleep
>
> Alex Markuze (2):
> ceph: fix race condition validating r_parent before applying state
> ceph: fix race condition where r_parent becomes stale before sending message
>
> Alex Tran (1):
> docs: networking: can: change bcm_msg_head frames member to support flexible array
>
> Alexander Dahl (1):
> mtd: nand: raw: atmel: Fix comment in timings preparation
>
> Alexander Sverdlin (1):
> mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing
>
> Anders Roxell (1):
> dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
>
> Andreas Kemnade (1):
> regulator: sy7636a: fix lifecycle of power good gpio
>
> Anssi Hannula (1):
> can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB
>
> Antoine Tenart (1):
> tunnels: reset the GSO metadata before reusing the skb
>
> Aurabindo Pillai (1):
> Revert "drm/amd/display: Optimize cursor position updates"
>
> Boris Burkov (2):
> btrfs: use readahead_expand() on compressed extents
> btrfs: fix squota compressed stats leak
>
> Buday Csaba (1):
> net: mdiobus: release reset_gpio in mdiobus_unregister_device()
>
> Chen Ridong (1):
> kernfs: Fix UAF in polling when open file is released
>
> Chiasheng Lee (1):
> i2c: i801: Hide Intel Birch Stream SoC TCO WDT
>
> Christoffer Sandberg (1):
> Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table
>
> Christophe Kerello (2):
> mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
> mtd: rawnand: stm32_fmc2: fix ECC overwrite
>
> Dan Carpenter (1):
> dmaengine: idxd: Fix double free in idxd_setup_wqs()
>
> David Rosca (3):
> drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time
> drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages
> drm/amdgpu: Add back JPEG to video caps for carrizo and newer
>
> Fabian Vogt (1):
> tty: hvc_console: Call hvc_kick in hvc_write unconditionally
>
> Fabio Porcedda (2):
> USB: serial: option: add Telit Cinterion FN990A w/audio compositions
> USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions
>
> Florian Westphal (4):
> netfilter: nft_set_rbtree: continue traversal if element is inactive
> netfilter: nf_tables: place base_seq in struct net
> netfilter: nf_tables: make nft_set_do_lookup available unconditionally
> netfilter: nf_tables: restart set lookup on base_seq change
>
> Guenter Roeck (1):
> trace/fgraph: Fix error handling
>
> Hangbin Liu (2):
> hsr: use rtnl lock when iterating over ports
> hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr
>
> Harry Yoo (1):
> mm: introduce and use {pgd,p4d}_populate_kernel()
>
> Hugo Villeneuve (1):
> serial: sc16is7xx: fix bug in flow control levels init
>
> Ilya Dryomov (1):
> libceph: fix invalid accesses to ceph_connection_v1_info
>
> Jakub Kicinski (1):
> netlink: specs: mptcp: replace underscores with dashes in names
>
> Jani Nikula (1):
> drm/i915/power: fix size for for_each_set_bit() in abox iteration
>
> Jeff LaBundy (1):
> Input: iqs7222 - avoid enabling unused interrupts
>
> Jiapeng Chong (2):
> hrtimer: Remove unused function
> hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active()
>
> Johan Hovold (4):
> drm/mediatek: fix potential OF node use-after-free
> phy: tegra: xusb: fix device and OF node leak at probe
> phy: ti-pipe3: fix device leak at unbind
> phy: ti: omap-usb2: fix device leak at unbind
>
> Jonathan Curley (1):
> NFSv4/flexfiles: Fix layout merge mirror check.
>
> Justin Worrell (1):
> SUNRPC: call xs_sock_process_cmsg for all cmsg
>
> Kohei Enju (1):
> igb: fix link test skipping when interface is admin down
>
> Krzysztof Kozlowski (1):
> dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks
>
> Kuniyuki Iwashima (2):
> net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
> tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
>
> Luo Gengkun (1):
> tracing: Fix tracing_marker may trigger page fault during preempt_disable
>
> Manuel Diewald (1):
> UBUNTU: Upstream stable to v6.6.107, v6.12.48
>
> Mark Tinguely (1):
> ocfs2: fix recursive semaphore deadlock in fiemap call
>
> Mathias Nyman (1):
> xhci: fix memory leak regression when freeing xhci vdev devices depth first
>
> Matthieu Baerts (NGI0) (3):
> netlink: specs: mptcp: add missing 'server-side' attr
> netlink: specs: mptcp: clearly mention attributes
> netlink: specs: mptcp: fix if-idx attribute type
>
> Maurizio Lombardi (1):
> nvme-pci: skip nvme_write_sq_db on empty rqlist
>
> Max Kellermann (1):
> fs/nfs/io: make nfs_start_io_*() killable
>
> Miaohe Lin (1):
> mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
>
> Miaoqian Lin (1):
> dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate
>
> Michal Schmidt (1):
> i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
>
> Miklos Szeredi (2):
> fuse: check if copy_file_range() returns larger than requested size
> fuse: prevent overflow in copy_file_range return value
>
> Mimi Zohar (1):
> ima: limit the number of ToMToU integrity violations
>
> Murali Karicheri (1):
> net: hsr: Add VLAN CTAG filter support
>
> Namjae Jeon (3):
> ksmbd: mark SMB2_SESSION_EXPIRED to session when destroying previous session
> ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
> ksmbd: fix null pointer dereference in alloc_preauth_hash()
>
> Nathan Chancellor (1):
> compiler-clang.h: define __SANITIZE_*__ macros only when undefined
>
> Oleksij Rempel (1):
> net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups
>
> Palmer Dabbelt (1):
> RISC-V: Remove unnecessary include from compat.h
>
> Paolo Abeni (1):
> Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups"
>
> Peilin Ye (1):
> bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()
>
> Pengyu Luo (1):
> phy: qualcomm: phy-qcom-eusb2-repeater: fix override properties
>
> Petr Machata (1):
> net: bridge: Bounce invalid boolopts
>
> Pu Lehui (1):
> tracing: Silence warning when chunk allocation fails in trace_pid_write
>
> Qu Wenruo (1):
> btrfs: fix corruption reading compressed range when block size is smaller than page size
>
> Quanmin Yan (2):
> mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()
> mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()
>
> Salah Triki (1):
> EDAC/altera: Delete an inappropriate dma_free_coherent() call
>
> Sang-Heon Jeon (1):
> mm/damon/core: set quota->charged_from to jiffies at first charge window
>
> Santhosh Kumar K (1):
> mtd: spinand: winbond: Fix oob_layout for W25N01JW
>
> Srinivasan Shanmugam (1):
> drm/amd/display: Fix error pointers in amdgpu_dm_crtc_mem_type_changed
>
> Stanislav Fort (1):
> mm/damon/sysfs: fix use-after-free in state_show()
>
> Stefan Wahren (1):
> net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()
>
> Stephan Gerhold (1):
> dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
>
> Takashi Iwai (3):
> usb: gadget: midi2: Fix missing UMP group attributes initialization
> usb: gadget: midi2: Fix MIDI2 IN EP max packet size
> ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA
>
> Tetsuo Handa (2):
> can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed
> can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails
>
> Theodore Ts'o (1):
> ext4: introduce linear search for dentries
>
> Thomas Richter (2):
> s390/cpum_cf: Deny all sampling events by counter PMU
> s390/pai: Deny all events not handled by this PMU
>
> Tigran Mkrtchyan (1):
> flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read
>
> Trond Myklebust (8):
> NFSv4: Don't clear capabilities that won't be reset
> NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set
> NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server
> NFS: Serialise O_DIRECT i/o and truncate()
> NFSv4.2: Serialise O_DIRECT i/o and fallocate()
> NFSv4.2: Serialise O_DIRECT i/o and clone range
> NFSv4.2: Serialise O_DIRECT i/o and copy range
> NFS: nfs_invalidate_folio() must observe the offset and size arguments
>
> Umesh Nerlige Ramappa (1):
> drm/i915/pmu: Fix zero delta busyness issue
>
> Vladimir Riabchun (1):
> ftrace/samples: Fix function size computation
>
> Wei Yang (1):
> mm/khugepaged: fix the address passed to notifier on testing young
>
> Xiongfeng Wang (1):
> hrtimers: Unconditionally update target CPU base after offline timer migration
>
> Yi Sun (2):
> dmaengine: idxd: Remove improper idxd_free
> dmaengine: idxd: Fix refcount underflow on module unload
>
> wangzijie (1):
> proc: fix type confusion in pde_set_flags()
>
> .../bindings/serial/brcm,bcm7271-uart.yaml | 2 +-
> Documentation/netlink/specs/mptcp_pm.yaml | 52 ++++---
> Documentation/networking/can.rst | 2 +-
> arch/riscv/include/asm/compat.h | 1 -
> arch/s390/kernel/perf_cpum_cf.c | 4 +-
> arch/s390/kernel/perf_pai_crypto.c | 4 +-
> arch/s390/kernel/perf_pai_ext.c | 2 +-
> debian.master/upstream-stable | 4 +-
> drivers/dma/dw/rzn1-dmamux.c | 15 +-
> drivers/dma/idxd/init.c | 39 ++---
> drivers/dma/qcom/bam_dma.c | 8 +-
> drivers/dma/ti/edma.c | 4 +-
> drivers/edac/altera_edac.c | 1 -
> drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 3 -
> drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c | 12 +-
> drivers/gpu/drm/amd/amdgpu/vcn_v4_0.c | 64 ++++----
> drivers/gpu/drm/amd/amdgpu/vi.c | 7 +
> drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 5 +
> drivers/gpu/drm/amd/display/dc/dcn10/dcn10_dpp.c | 7 +-
> drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hubp.c | 8 +-
> .../drm/amd/display/dc/hwss/dcn20/dcn20_hwseq.c | 2 +-
> drivers/gpu/drm/i915/display/intel_display_power.c | 6 +-
> drivers/gpu/drm/i915/gt/uc/intel_guc_submission.c | 16 ++
> drivers/gpu/drm/mediatek/mtk_drm_drv.c | 11 +-
> drivers/i2c/busses/i2c-i801.c | 2 +-
> drivers/input/misc/iqs7222.c | 3 +
> drivers/input/serio/i8042-acpipnpio.h | 14 ++
> drivers/mtd/nand/raw/atmel/nand-controller.c | 18 ++-
> drivers/mtd/nand/raw/stm32_fmc2_nand.c | 46 +++---
> drivers/mtd/nand/spi/winbond.c | 37 ++++-
> drivers/net/can/xilinx_can.c | 16 +-
> drivers/net/ethernet/freescale/fec_main.c | 3 +-
> drivers/net/ethernet/intel/i40e/i40e_main.c | 2 +-
> drivers/net/ethernet/intel/igb/igb_ethtool.c | 5 +-
> drivers/net/phy/mdio_bus.c | 4 +-
> drivers/nvme/host/pci.c | 3 +
> drivers/phy/qualcomm/phy-qcom-eusb2-repeater.c | 4 +-
> drivers/phy/tegra/xusb-tegra210.c | 6 +-
> drivers/phy/ti/phy-omap-usb2.c | 13 ++
> drivers/phy/ti/phy-ti-pipe3.c | 13 ++
> drivers/regulator/sy7636a-regulator.c | 7 +-
> drivers/tty/hvc/hvc_console.c | 6 +-
> drivers/tty/serial/sc16is7xx.c | 14 +-
> drivers/usb/gadget/function/f_midi2.c | 11 +-
> drivers/usb/gadget/udc/dummy_hcd.c | 8 +-
> drivers/usb/host/xhci-mem.c | 2 +-
> drivers/usb/serial/option.c | 17 ++
> fs/btrfs/extent_io.c | 78 ++++++++--
> fs/btrfs/qgroup.c | 6 +-
> fs/ceph/debugfs.c | 14 +-
> fs/ceph/dir.c | 10 +-
> fs/ceph/file.c | 10 +-
> fs/ceph/inode.c | 81 ++++++++--
> fs/ceph/mds_client.c | 172 +++++++++++++--------
> fs/ceph/mds_client.h | 18 ++-
> fs/ext4/namei.c | 14 +-
> fs/fuse/file.c | 5 +-
> fs/kernfs/file.c | 54 ++++---
> fs/nfs/client.c | 2 +
> fs/nfs/direct.c | 21 ++-
> fs/nfs/file.c | 21 ++-
> fs/nfs/flexfilelayout/flexfilelayout.c | 21 ++-
> fs/nfs/inode.c | 4 +-
> fs/nfs/internal.h | 17 +-
> fs/nfs/io.c | 55 ++++---
> fs/nfs/nfs42proc.c | 2 +
> fs/nfs/nfs4file.c | 2 +
> fs/nfs/nfs4proc.c | 6 +-
> fs/nfs/write.c | 1 +
> fs/ocfs2/extent_map.c | 10 +-
> fs/proc/generic.c | 3 +-
> fs/smb/server/connection.c | 34 +++-
> fs/smb/server/connection.h | 14 +-
> fs/smb/server/mgmt/user_session.c | 36 ++++-
> fs/smb/server/mgmt/user_session.h | 3 +
> fs/smb/server/smb2pdu.c | 40 ++---
> include/linux/compiler-clang.h | 29 +++-
> include/linux/fs.h | 10 +-
> include/linux/pgalloc.h | 29 ++++
> include/linux/pgtable.h | 13 +-
> include/net/netfilter/nf_tables.h | 1 -
> include/net/netfilter/nf_tables_core.h | 10 +-
> include/net/netns/nftables.h | 1 +
> include/net/sock.h | 40 ++++-
> include/uapi/linux/mptcp_pm.h | 50 +++---
> kernel/bpf/helpers.c | 7 +-
> kernel/time/hrtimer.c | 50 ++----
> kernel/trace/fgraph.c | 3 +-
> kernel/trace/trace.c | 10 +-
> mm/damon/core.c | 4 +
> mm/damon/lru_sort.c | 3 +
> mm/damon/reclaim.c | 3 +
> mm/damon/sysfs.c | 14 +-
> mm/kasan/init.c | 12 +-
> mm/khugepaged.c | 4 +-
> mm/memory-failure.c | 7 +-
> mm/percpu.c | 6 +-
> mm/sparse-vmemmap.c | 6 +-
> net/bridge/br.c | 7 +
> net/can/j1939/bus.c | 5 +-
> net/can/j1939/socket.c | 3 +
> net/ceph/messenger.c | 7 +-
> net/core/sock.c | 5 +
> net/hsr/hsr_device.c | 97 +++++++++++-
> net/hsr/hsr_main.c | 4 +-
> net/hsr/hsr_main.h | 3 +
> net/ipv4/ip_tunnel_core.c | 6 +
> net/ipv4/tcp_bpf.c | 5 +-
> net/netfilter/nf_tables_api.c | 66 ++++----
> net/netfilter/nft_lookup.c | 43 +++++-
> net/netfilter/nft_set_rbtree.c | 6 +-
> net/sunrpc/xprtsock.c | 6 +-
> samples/ftrace/ftrace-direct-modify.c | 2 +-
> scripts/Makefile.kasan | 12 +-
> security/integrity/ima/ima_main.c | 7 +-
> security/integrity/integrity.h | 3 +-
> sound/pci/hda/patch_realtek.c | 1 +
> 117 files changed, 1290 insertions(+), 597 deletions(-)
> create mode 100644 include/linux/pgalloc.h
>
Applied to noble:linux/master-next. Thanks.
-Stefan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xE8675DEECBEECEA3.asc
Type: application/pgp-keys
Size: 52669 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20260123/092ad1ed/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20260123/092ad1ed/attachment-0001.sig>
More information about the kernel-team
mailing list