APPLIED: [SRU][Noble][PULL] Noble upstream stable patchset 2026-01-22
Stefan Bader
stefan.bader at canonical.com
Fri Jan 23 15:13:57 UTC 2026
On 22/01/2026 11:58, Manuel Diewald wrote:
> This pull request (82 commits) includes the following Noble stable patchsets:
>
> Noble update: upstream stable patchset 2026-01-22
> Ported from the following upstream stable releases:
> v6.6.108, v6.12.49
> https://bugs.launchpad.net/bugs/2138867
>
> Note also that the 'stable-next' branch head contains this and all
> prior pending upstream stable releases. I recommend fetching and
> applying just this reference ('stable-next') instead of each
> tags/noble-stable-* reference:
>
> git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble stable-next
>
> -Manuel
>
> ------------------------------------------------------------------------
>
> The following changes since commit f9a16de7f636e88db97f61e623038dbbd579d1b9:
>
> UBUNTU: Upstream stable to v6.6.107, v6.12.48 (2026-01-20 18:09:17 +0100)
>
> are available in the Git repository at:
>
> git://git.launchpad.net/~ubuntu-kernel-stable/+git/noble tags/noble-stable-2026-01-22
>
> for you to fetch changes up to 44b3cfee1f500f79142439fba7ff2955483e6931:
>
> UBUNTU: Upstream stable to v6.6.108, v6.12.49 (2026-01-21 21:59:00 +0100)
>
> ----------------------------------------------------------------
> Ajay.Kathat at microchip.com (1):
> wifi: wilc1000: avoid buffer overflow in WID string configuration
>
> Alexey Nepomnyashih (1):
> net: liquidio: fix overflow in octeon_init_instr_queue()
>
> Amadeusz Sławiński (1):
> ASoC: Intel: catpt: Expose correct bit depth to userspace
>
> Anderson Nascimento (1):
> net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR
>
> Antheas Kapenekakis (2):
> platform/x86: asus-wmi: Fix ROG button mapping, tablet mode on ASUS ROG Z13
> platform/x86: asus-wmi: Re-add extra keys to ignore_key_wlan quirk
>
> Borislav Petkov (1):
> x86/bugs: KVM: Add support for SRSO_MSR_FIX
>
> Borislav Petkov (AMD) (1):
> x86/bugs: Add SRSO_USER_KERNEL_NO support
>
> Bruno Thomsen (1):
> rtc: pcf2127: fix SPI command byte for PCF2131 backport
>
> Charles Keepax (3):
> ASoC: wm8940: Correct PLL rate rounding
> ASoC: wm8940: Correct typo in control name
> ASoC: wm8974: Correct PLL rate rounding
>
> Chen Ridong (1):
> cgroup: split cgroup_destroy_wq into 3 workqueues
>
> Christoph Hellwig (1):
> nvme: fix PI insert on write
>
> Colin Ian King (1):
> ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message
>
> Dan Carpenter (1):
> drm/xe: Fix a NULL vs IS_ERR() in xe_vm_add_compute_exec_queue()
>
> Duoming Zhou (2):
> cnic: Fix use-after-free bugs in cnic_delete_task
> octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()
>
> Eugene Koira (1):
> iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page()
>
> Filipe Manana (1):
> btrfs: fix invalid extref key setup when replaying dentry
>
> Geert Uytterhoeven (1):
> pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch
>
> Geliang Tang (1):
> selftests: mptcp: sockopt: fix error messages
>
> H. Nikolaus Schaller (2):
> power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery
> power: supply: bq27xxx: restrict no-battery detection to bq27000
>
> Hangbin Liu (2):
> bonding: set random address only when slaves already exist
> bonding: don't set oif to bond dev when getting NS target destination
>
> Hans de Goede (1):
> net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
>
> Herbert Xu (1):
> crypto: af_alg - Set merge to zero early in af_alg_sendmsg
>
> Huacai Chen (1):
> LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled
>
> Hugh Dickins (1):
> mm: revert "mm: vmscan.c: fix OOM on swap stress test"
>
> Håkon Bugge (1):
> rds: ib: Increment i_fastreg_wrs before bailing out
>
> Ioana Ciornei (1):
> dpaa2-switch: fix buffer pool seeding for control traffic
>
> Jacob Keller (2):
> ice: store max_frame and rx_buf_len only in ice_rx_ring
> ice: fix Rx page leak on multi-buffer frames
>
> Jakub Kicinski (1):
> tls: make sure to abort the stream if headers are bogus
>
> Jamie Bainbridge (1):
> qed: Don't collect too many protection override GRC elements
>
> Jens Axboe (2):
> io_uring: backport io_should_terminate_tw()
> io_uring: include dying ring in task_work "should cancel" state
>
> Jianbo Liu (1):
> net/mlx5e: Harden uplink netdev access against device unbind
>
> Krzysztof Kozlowski (1):
> ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed
>
> Kuniyuki Iwashima (1):
> tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
>
> Lachlan Hodges (1):
> wifi: mac80211: increase scan_ies_len for S1G
>
> Liao Yuanhong (1):
> wifi: mac80211: fix incorrect type for ret
>
> Linus Torvalds (3):
> minmax: avoid overly complicated constant expressions in VM code
> minmax: simplify and clarify min_t()/max_t() implementation
> minmax: add a few more MIN_T/MAX_T users
>
> Loic Poulain (1):
> drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
>
> Maciej Fijalkowski (1):
> i40e: remove redundant memory barrier when cleaning Tx descs
>
> Maciej S. Szmigiero (1):
> KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active
>
> Manuel Diewald (1):
> UBUNTU: Upstream stable to v6.6.108, v6.12.49
>
> Mathias Nyman (2):
> xhci: dbc: decouple endpoint allocation from initialization
> xhci: dbc: Fix full DbC transfer ring after several reconnects
>
> Matthieu Baerts (NGI0) (7):
> selftests: mptcp: connect: catch IO errors on listen side
> selftests: mptcp: avoid spurious errors on TCP disconnect
> selftests: mptcp: userspace pm: validate deny-join-id0 flag
> mptcp: propagate shutdown to subflows when possible
> mptcp: set remote_deny_join_id0 on SYN recv
> mptcp: tfo: record 'deny join id0' info
> mptcp: pm: nl: announce deny-join-id0 flag
>
> Miaoqian Lin (1):
> um: virtio_uml: Fix use-after-free after put_device in probe
>
> Mikulas Patocka (2):
> dm-raid: don't set io_min and io_opt for raid1
> dm-stripe: fix a possible integer overflow
>
> Mohammad Rafi Shaik (2):
> ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface
> ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S
>
> Namjae Jeon (1):
> ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
>
> Nathan Chancellor (1):
> nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
>
> Paulo Alcantara (1):
> smb: client: fix filename matching of deferred files
>
> Praful Adiga (1):
> ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx
>
> Qi Xi (1):
> drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path
>
> Qu Wenruo (1):
> btrfs: tree-checker: fix the incorrect inode ref size check
>
> Sankararaman Jayaraman (1):
> vmxnet3: unregister xdp rxq info in the reset path
>
> Sathesh B Edara (1):
> octeon_ep: fix VF MAC address lifecycle handling
>
> Sean Christopherson (1):
> KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions
>
> Stefan Metzmacher (3):
> ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size
> smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
> smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)
>
> Takashi Sakamoto (1):
> ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported
>
> Tao Cui (1):
> LoongArch: Check the return value when creating kobj
>
> Thomas Fourier (1):
> mmc: mvsdio: Fix dma_unmap_sg() nents value
>
> Tiezhu Yang (1):
> LoongArch: Update help info of ARCH_STRICT_ALIGN
>
> Vasant Hegde (1):
> iommu/amd/pgtbl: Fix possible race while increase page table level
>
> Yeounsu Moon (1):
> net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure
>
> Documentation/admin-guide/hw-vuln/srso.rst | 13 +++
> Documentation/netlink/specs/mptcp_pm.yaml | 4 +-
> arch/loongarch/Kconfig | 8 +-
> arch/loongarch/include/asm/acenv.h | 7 +-
> arch/loongarch/kernel/env.c | 2 +
> arch/um/drivers/virtio_uml.c | 6 +-
> arch/x86/include/asm/cpufeatures.h | 5 ++
> arch/x86/include/asm/msr-index.h | 1 +
> arch/x86/kernel/cpu/bugs.c | 28 ++++++-
> arch/x86/kvm/svm/svm.c | 68 +++++++++++++++-
> arch/x86/kvm/svm/svm.h | 2 +
> arch/x86/lib/msr.c | 2 +
> arch/x86/mm/pgtable.c | 2 +-
> crypto/af_alg.c | 3 +-
> debian.master/upstream-stable | 4 +-
> drivers/edac/sb_edac.c | 4 +-
> drivers/gpu/drm/bridge/analogix/anx7625.c | 6 +-
> .../gpu/drm/bridge/cadence/cdns-mhdp8546-core.c | 6 +-
> drivers/gpu/drm/drm_color_mgmt.c | 2 +-
> drivers/gpu/drm/xe/xe_vm.c | 4 +-
> drivers/iommu/amd/amd_iommu_types.h | 1 +
> drivers/iommu/amd/io_pgtable.c | 26 +++++-
> drivers/iommu/intel/iommu.c | 7 +-
> drivers/md/dm-integrity.c | 6 +-
> drivers/md/dm-raid.c | 6 +-
> drivers/md/dm-stripe.c | 9 ++-
> drivers/mmc/host/mvsdio.c | 2 +-
> drivers/net/bonding/bond_main.c | 2 +-
> drivers/net/ethernet/broadcom/cnic.c | 3 +-
> .../net/ethernet/cavium/liquidio/request_manager.c | 2 +-
> .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 2 +-
> drivers/net/ethernet/intel/i40e/i40e_txrx.c | 3 -
> drivers/net/ethernet/intel/ice/ice.h | 3 -
> drivers/net/ethernet/intel/ice/ice_base.c | 34 ++++----
> drivers/net/ethernet/intel/ice/ice_txrx.c | 80 ++++++++----------
> drivers/net/ethernet/intel/ice/ice_txrx.h | 4 +-
> drivers/net/ethernet/intel/ice/ice_virtchnl.c | 7 +-
> .../ethernet/marvell/octeon_ep/octep_pfvf_mbox.c | 3 +
> .../net/ethernet/marvell/octeontx2/nic/otx2_ptp.c | 2 +-
> drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 27 +++++--
> drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c | 1 +
> drivers/net/ethernet/mellanox/mlx5/core/lib/mlx5.h | 15 +++-
> drivers/net/ethernet/natsemi/ns83820.c | 13 ++-
> drivers/net/ethernet/qlogic/qed/qed_debug.c | 7 +-
> drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 2 +-
> drivers/net/vmxnet3/vmxnet3_drv.c | 10 +--
> drivers/net/wireless/microchip/wilc1000/wlan_cfg.c | 37 ++++++---
> drivers/net/wireless/microchip/wilc1000/wlan_cfg.h | 5 +-
> drivers/nvme/host/core.c | 18 +++--
> drivers/pcmcia/omap_cf.c | 8 +-
> drivers/platform/x86/asus-nb-wmi.c | 25 +++++-
> drivers/platform/x86/asus-wmi.h | 3 +-
> drivers/power/supply/bq27xxx_battery.c | 4 +-
> drivers/rtc/rtc-pcf2127.c | 10 +--
> drivers/usb/host/xhci-dbgcap.c | 94 +++++++++++++++-------
> fs/btrfs/tree-checker.c | 4 +-
> fs/btrfs/tree-log.c | 2 +-
> fs/nilfs2/sysfs.c | 4 +-
> fs/nilfs2/sysfs.h | 8 +-
> fs/smb/client/cifsproto.h | 5 +-
> fs/smb/client/inode.c | 6 +-
> fs/smb/client/misc.c | 38 ++++-----
> fs/smb/client/smbdirect.c | 7 +-
> fs/smb/server/transport_rdma.c | 26 ++++--
> include/linux/minmax.h | 26 ++++--
> include/linux/mlx5/driver.h | 1 +
> include/linux/pageblock-flags.h | 2 +-
> include/uapi/linux/mptcp.h | 2 +
> include/uapi/linux/mptcp_pm.h | 4 +-
> io_uring/io_uring.c | 7 +-
> io_uring/io_uring.h | 13 +++
> io_uring/poll.c | 3 +-
> io_uring/timeout.c | 2 +-
> kernel/cgroup/cgroup.c | 43 ++++++++--
> mm/vmscan.c | 2 +-
> net/ipv4/proc.c | 2 +-
> net/ipv4/tcp.c | 5 ++
> net/ipv4/tcp_ao.c | 4 +-
> net/ipv6/proc.c | 2 +-
> net/mac80211/driver-ops.h | 2 +-
> net/mac80211/main.c | 7 +-
> net/mptcp/options.c | 6 +-
> net/mptcp/pm_netlink.c | 7 ++
> net/mptcp/protocol.c | 16 ++++
> net/mptcp/subflow.c | 4 +
> net/rds/ib_frmr.c | 20 +++--
> net/rfkill/rfkill-gpio.c | 4 +-
> net/tls/tls.h | 1 +
> net/tls/tls_strp.c | 14 ++--
> net/tls/tls_sw.c | 3 +-
> sound/firewire/motu/motu-hwdep.c | 2 +-
> sound/pci/hda/patch_realtek.c | 1 +
> sound/soc/codecs/wm8940.c | 9 ++-
> sound/soc/codecs/wm8974.c | 8 +-
> sound/soc/intel/catpt/pcm.c | 23 ++++--
> sound/soc/qcom/qdsp6/audioreach.c | 1 +
> sound/soc/qcom/qdsp6/q6apm-lpass-dais.c | 7 +-
> sound/soc/sof/intel/hda-stream.c | 2 +-
> tools/testing/selftests/net/mptcp/mptcp_connect.c | 11 +--
> tools/testing/selftests/net/mptcp/mptcp_sockopt.c | 16 ++--
> tools/testing/selftests/net/mptcp/pm_nl_ctl.c | 7 ++
> tools/testing/selftests/net/mptcp/userspace_pm.sh | 14 +++-
> 102 files changed, 734 insertions(+), 327 deletions(-)
>
Applied to noble:linux/master-next. Thanks.
-Stefan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xE8675DEECBEECEA3.asc
Type: application/pgp-keys
Size: 52669 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20260123/84fa4747/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20260123/84fa4747/attachment-0001.sig>
More information about the kernel-team
mailing list