APPLIED: [SRU][Jammy][PULL] Jammy update: v5.15.200 upstream stable release
Edoardo Canepa
edoardo.canepa at canonical.com
Fri May 8 18:10:10 UTC 2026
Applied to J:linux/master-next.
commit 3839aed049aa "nvmet-tcp: don't map pages which can't come from
HIGHMEM" context adjusted
Thanks.
On 4/13/26 23:28, Vinicius Peixoto wrote:
> This pull request (67 commits) includes the following Jammy stable patchsets:
>
> Jammy update: v5.15.200 upstream stable release
> https://bugs.launchpad.net/bugs/2147598
>
> Note also that the 'stable-next' branch head contains this and all
> prior pending upstream stable releases. I recommend fetching and
> applying just this reference ('stable-next') instead of each
> tags/jammy-stable-* reference:
>
> git://git.launchpad.net/~vpeixoto/+git/ubuntu-stable-jammy stable-next
>
> -Vinicius
>
> ------------------------------------------------------------------------
>
> The following changes since commit 0dbdfaa273d2e09a9d253094963625cd70d17ad6:
>
> UBUNTU: Ubuntu-5.15.0-176.186 (2026-03-11 14:58:58 +0100)
>
> are available in the Git repository at:
>
> git://git.launchpad.net/~vpeixoto/+git/ubuntu-stable-jammy tags/jammy-stable-v5.15.200
>
> for you to fetch changes up to 35b51e8c8c25274322b2de504e654b090a94222e:
>
> UBUNTU: Upstream stable to v5.15.200 (2026-04-09 03:06:39 -0300)
>
> ----------------------------------------------------------------
> Andrew Cooper (1):
> x86/kfence: fix booting on 32bit non-PAE systems
>
> Andrew Fasano (1):
> netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()
>
> Arnd Bergmann (1):
> hwmon: (occ) Mark occ_init_attribute() as __printf
>
> Baochen Qiang (1):
> wifi: mac80211: collect station statistics earlier when disconnect
>
> Björn Töpel (2):
> riscv: uprobes: Add missing fence.i after building the XOL buffer
> riscv: Replace function-like macro by static inline function
>
> Breno Leitao (5):
> spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer
> spi: tegra210-quad: Move curr_xfer read inside spinlock
> spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one
> spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer
> spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer
>
> Carlos Llamas (1):
> binderfs: fix ida_alloc_max() upper bound
>
> Chris Bainbridge (1):
> ASoC: amd: fix memory leak in acp3x pdm dma ops
>
> Chris Chiu (1):
> HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list
>
> Daniel Gomez (1):
> netfilter: replace -EEXIST with -EBUSY
>
> Daniel Hodges (1):
> tipc: use kfree_sensitive() for session key material
>
> DaytonCL (1):
> HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL
>
> Debarghya Kundu (1):
> gve: Fix stats report corruption on queue count change
>
> Dimitrios Katsaros (1):
> ASoC: tlv320adcx140: Propagate error codes during probe
>
> Ethan Nelson-Moore (1):
> net: usb: sr9700: support devices with virtual driver CD
>
> Fabio M. De Francesco (1):
> nvmet-tcp: don't map pages which can't come from HIGHMEM
>
> Felix Gu (1):
> spi: tegra: Fix a memory leak in tegra_slink_probe()
>
> Greg Kroah-Hartman (1):
> Linux 5.15.200
>
> Ilya Dryomov (1):
> rbd: check for EOD after exclusive lock is ensured to be held
>
> Junrui Luo (2):
> dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero
> dpaa2-switch: add bounds check for if_id in IRQ handler
>
> Kang Chen (1):
> hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
>
> Kaushlendra Kumar (2):
> platform/x86: intel_telemetry: Fix swapped arrays in PSS output
> platform/x86: intel_telemetry: Fix PSS event register mask
>
> Kery Qi (1):
> ASoC: davinci-evm: Fix reference leak in davinci_evm_probe
>
> Lu Baolu (1):
> iommu: disable SVA when CONFIG_X86 is set
>
> Maurizio Lombardi (4):
> scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()
> scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
> nvmet-tcp: add an helper to free the cmd buffers
> nvmet-tcp: fix memory leak when performing a controller reset
>
> Max Yuan (1):
> gve: Correct ethtool rx_dropped calculation
>
> Miri Korenblit (1):
> wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice
>
> Moon Hee Lee (1):
> wifi: mac80211: ocb: skip rx_no_sta when interface is not joined
>
> Pablo Neira Ayuso (1):
> netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
>
> Pauli Virtanen (1):
> Bluetooth: hci_event: call disconnect callback before deleting conn
>
> Peter Åstrand (1):
> wifi: wlcore: ensure skb headroom before skb_push
>
> Pimyn Girgis (1):
> mm/kfence: randomize the freelist on initialization
>
> Rafael J. Wysocki (1):
> platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
>
> Rodrigo Lugathe da Conceição Alves (1):
> HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101)
>
> Ruslan Krupitsa (1):
> ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk
>
> Sagi Grimberg (1):
> nvmet-tcp: fix regression in data_digest calculation
>
> Sean Christopherson (1):
> KVM: Don't clobber irqfd routing type when deassigning irqfd
>
> Siarhei Vishniakou (1):
> HID: playstation: Center initial joystick axes to prevent spurious events
>
> Steven Rostedt (1):
> tracing: Fix ftrace event field alignments
>
> Steven Rostedt (Google) (1):
> timers: Update the documentation to reflect on the new timer_shutdown() API
>
> Thomas Gleixner (4):
> Documentation: Remove bogus claim about del_timer_sync()
> timers: Get rid of del_singleshot_timer_sync()
> Documentation: Replace del_timer/del_timer_sync()
> Bluetooth: hci_qca: Fix the teardown problem for real
>
> Thomas Weissschuh (1):
> ARM: 9468/1: fix memset64() on big-endian
>
> Varun Prakash (1):
> nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page()
>
> Veerendranath Jakkam (1):
> wifi: cfg80211: Fix bitrate calculation overflow for HE rates
>
> Vinicius Peixoto (1):
> UBUNTU: Upstream stable to v5.15.200
>
> Wupeng Ma (1):
> ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free
>
> Yipeng Zou (1):
> timers: Fix NULL function pointer race in timer_shutdown_sync()
>
> YunJe Shin (1):
> nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
>
> Zhang Lixu (1):
> HID: intel-ish-hid: Reset enum_devices_done before enumeration
>
> ZhangGuoDong (1):
> smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()
>
> Zilin Guan (3):
> net: liquidio: Initialize netdev pointer before queue setup
> net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup
> net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup
>
> shechenglong (1):
> block,bfq: fix aux stat accumulation destination
>
> .../RCU/Design/Requirements/Requirements.rst | 2 +-
> Documentation/core-api/local_ops.rst | 2 +-
> Documentation/kernel-hacking/locking.rst | 17 ++--
> Documentation/timers/hrtimers.rst | 2 +-
> .../translations/it_IT/kernel-hacking/locking.rst | 14 ++-
> .../translations/zh_CN/core-api/local_ops.rst | 2 +-
> Makefile | 2 +-
> arch/arm/include/asm/string.h | 5 +-
> arch/riscv/include/asm/cacheflush.h | 15 ++--
> arch/riscv/kernel/probes/uprobes.c | 10 +--
> arch/x86/include/asm/kfence.h | 7 +-
> block/bfq-cgroup.c | 2 +-
> debian.master/upstream-stable | 2 +-
> drivers/android/binderfs.c | 8 +-
> drivers/block/rbd.c | 33 ++++---
> drivers/bluetooth/hci_qca.c | 10 ++-
> drivers/char/tpm/tpm-dev-common.c | 4 +-
> drivers/hid/hid-ids.h | 4 +
> drivers/hid/hid-multitouch.c | 1 +
> drivers/hid/hid-playstation.c | 5 ++
> drivers/hid/hid-quirks.c | 2 +
> drivers/hid/intel-ish-hid/ishtp-hid-client.c | 1 +
> drivers/hwmon/occ/common.c | 1 +
> drivers/iommu/iommu.c | 3 +
> drivers/net/ethernet/cavium/liquidio/lio_main.c | 39 ++++----
> drivers/net/ethernet/cavium/liquidio/lio_vf_main.c | 4 +-
> .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 10 +++
> drivers/net/ethernet/google/gve/gve_ethtool.c | 46 ++++++----
> drivers/net/ethernet/google/gve/gve_main.c | 4 +-
> drivers/net/usb/sr9700.c | 5 ++
> drivers/net/wireless/ti/wlcore/tx.c | 5 ++
> drivers/nvme/target/tcp.c | 100 ++++++++++-----------
> drivers/platform/x86/intel/telemetry/debugfs.c | 4 +-
> drivers/platform/x86/intel/telemetry/pltdrv.c | 2 +-
> drivers/platform/x86/toshiba_haps.c | 2 +-
> drivers/spi/spi-tegra20-slink.c | 6 +-
> drivers/spi/spi-tegra210-quad.c | 36 +++++++-
> drivers/staging/wlan-ng/hfa384x_usb.c | 4 +-
> drivers/staging/wlan-ng/prism2usb.c | 6 +-
> drivers/target/iscsi/iscsi_target_util.c | 10 ++-
> fs/hfsplus/dir.c | 2 +-
> fs/hfsplus/hfsplus_fs.h | 8 +-
> fs/hfsplus/unicode.c | 24 +++--
> fs/hfsplus/xattr.c | 6 +-
> fs/ksmbd/smb2pdu.c | 5 +-
> include/linux/timer.h | 2 -
> kernel/time/timer.c | 9 +-
> kernel/trace/ring_buffer.c | 2 +
> kernel/trace/trace.h | 7 +-
> kernel/trace/trace_entries.h | 14 +--
> kernel/trace/trace_export.c | 21 +++--
> mm/kfence/core.c | 25 +++++-
> net/bluetooth/hci_event.c | 3 +
> net/bridge/netfilter/ebtables.c | 2 +-
> net/mac80211/key.c | 3 +-
> net/mac80211/ocb.c | 3 +
> net/mac80211/sta_info.c | 7 +-
> net/netfilter/nf_log.c | 4 +-
> net/netfilter/nf_tables_api.c | 2 +-
> net/netfilter/nft_set_pipapo.c | 8 ++
> net/netfilter/x_tables.c | 2 +-
> net/sunrpc/xprt.c | 2 +-
> net/tipc/crypto.c | 4 +-
> net/wireless/util.c | 8 +-
> sound/pci/hda/patch_realtek.c | 1 +
> sound/soc/amd/renoir/acp3x-pdm-dma.c | 2 +
> sound/soc/codecs/tlv320adcx140.c | 3 +
> sound/soc/ti/davinci-evm.c | 39 ++++++--
> virt/kvm/eventfd.c | 44 ++++-----
> 69 files changed, 452 insertions(+), 247 deletions(-)
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x20F88172E14F6784.asc
Type: application/pgp-keys
Size: 3167 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20260508/5f31a8c5/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20260508/5f31a8c5/attachment-0001.sig>
More information about the kernel-team
mailing list