[ubuntu/resolute-updates] linux-oem-7.0 7.0.0-1005.5 (Accepted)
Andy Whitcroft
apw at canonical.com
Thu May 28 08:48:24 UTC 2026
linux-oem-7.0 (7.0.0-1005.5) resolute; urgency=medium
* resolute/linux-oem-7.0: 7.0.0-1005.5 -proposed tracker (LP: #2151285)
[ Ubuntu: 7.0.0-17.17 ]
* resolute/linux: 7.0.0-17.17 -proposed tracker (LP: #2150786)
* Resolute update: v7.0.2 upstream stable release (LP: #2150553)
- crypto: authencesn - Fix src offset when decrypting in-place
- pwm: th1520: fix `CLIPPY=1` warning
- drm/amdgpu: replace PASID IDR with XArray
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch
- crypto: krb5enc - fix async decrypt skipping hash verification
- ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger
- ksmbd: validate owner of durable handle on reconnect
- scripts: generate_rust_analyzer.py: define scripts
- scripts/dtc: Remove unused dts_version in dtc-lexer.l
- fs/ntfs3: validate rec->used in journal-replay file record check
- f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally
- f2fs: fix UAF caused by decrementing sbi->nr_pages[] in
f2fs_write_end_io()
- f2fs: fix to avoid memory leak in f2fs_rename()
- f2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer
- fuse: reject oversized dirents in page cache
- fuse: abort on fatal signal during sync init
- fuse: Check for large folio with SPLICE_F_MOVE
- fuse: quiet down complaints in fuse_conn_limit_write
- fuse: fuse_dev_ioctl_clone() should wait for device file to be
initialized
- ksmbd: require minimum ACE size in smb_check_perm_dacl()
- smb: server: fix active_num_conn leak on transport allocation failure
- smb: client: fix dir separator in SMB1 UNIX mounts
- smb: server: fix max_connections off-by-one in tcp accept path
- smb: client: require a full NFS mode SID before reading mode bits
- smb: client: validate the whole DACL before rewriting it in cifsacl
- smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
- ksmbd: validate response sizes in ipc_validate_msg()
- ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()
- ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment
- ksmbd: use check_add_overflow() to prevent u16 DACL size overflow
- ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id()
- writeback: Fix use after free in inode_switch_wbs_work_fn()
- f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()
- ALSA: usb-audio: apply quirk for MOONDROP JU Jiu
- ALSA: hda/realtek: Add quirk for Legion S7 15IMH
- ALSA: caiaq: take a reference on the USB device in create_card()
- net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
- crypto: ccp: Don't attempt to copy CSR to userspace if PSP command
failed
- crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command
failed
- crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
- rxrpc: Fix missing validation of ticket length in non-XDR key preparsing
- mshv_vtl: Fix vmemmap_shift exceeding MAX_FOLIO_ORDER
- Linux 7.0.2
* Resolute update: v7.0.1 upstream stable release (LP: #2150547)
- nfc: llcp: add missing return after LLCP_CLOSED checks
- x86/CPU: Fix FPDSS on Zen1
- can: raw: fix ro->uniq use-after-free in raw_rcv()
- i2c: s3c24xx: check the size of the SMBUS message before using it
- staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()
- HID: alps: fix NULL pointer dereference in alps_raw_event()
- HID: core: clamp report_size in s32ton() to avoid undefined shift
- net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()
- NFC: digital: Bounds check NFC-A cascade depth in SDD response handler
- drm/vc4: platform_get_irq_byname() returns an int
- bnge: return after auxiliary_device_uninit() in error path
- ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0
- ALSA: fireworks: bound device-supplied status before string array lookup
- fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
- usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()
- usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()
- usb: gadget: renesas_usb3: validate endpoint index in standard request
handlers
- smb: client: fix off-by-8 bounds check in check_wsl_eas()
- smb: client: fix OOB reads parsing symlink error response
- ksmbd: validate EaNameLength in smb2_get_ea()
- ksmbd: require 3 sub-authorities before reading sub_auth[2]
- ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc
- smb: client: avoid double-free in smbd_free_send_io() after
smbd_send_batch_flush()
- smb: server: avoid double-free in smb_direct_free_sendmsg after
smb_direct_flush_send_list()
- usbip: validate number_of_packets in usbip_pack_ret_submit()
- usb: typec: fusb302: Switch to threaded IRQ handler
- usb: storage: Expand range of matched versions for VL817 quirks entry
- USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen
- usb: gadget: f_hid: don't call cdev_init while cdev in use
- usb: port: add delay after usb_hub_set_port_power()
- fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
- scripts/gdb/symbols: handle module path parameters
- scripts: generate_rust_analyzer.py: avoid FD leak
- wifi: rtw88: fix device leak on probe failure
- staging: sm750fb: fix division by zero in ps_to_hz()
- selftests/mm: hmm-tests: don't hardcode THP size to 2MB
- USB: serial: option: add Telit Cinterion FN990A MBIM composition
- Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates
race
- Docs/admin-guide/mm/damon/lru_sort: warn commit_inputs vs param updates
race
- ALSA: ctxfi: Limit PTP to a single page
- dcache: Limit the minimal number of bucket to two
- vfio/xe: Reorganize the init to decouple migration from reset
- arm64: mm: Handle invalid large leaf mappings correctly
- media: vidtv: fix NULL pointer dereference in
vidtv_channel_pmt_match_sections
- ocfs2: fix possible deadlock between unlink and dio_end_io_write
- ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY
- ocfs2: handle invalid dinode in ocfs2_group_extend
- PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in
epf_ntb_epc_cleanup
- PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown
- KVM: selftests: Remove duplicate LAUNCH_UPDATE_VMSA call in SEV-ES
migrate test
- KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted
vCPU
- KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock
- KVM: SEV: Disallow LAUNCH_FINISH if vCPUs are actively being created
- KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish
- KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION
- mm: call ->free_folio() directly in folio_unmap_invalidate()
- checkpatch: add support for Assisted-by tag
- x86-64: rename misleadingly named '__copy_user_nocache()' function
- x86: rename and clean up __copy_from_user_inatomic_nocache()
- x86-64/arm64/powerpc: clean up and rename __copy_from_user_flushcache
- KVM: x86: Use scratch field in MMIO fragment to hold small write values
- ASoC: qcom: q6apm: move component registration to unmanaged version
- mm/kasan: fix double free for kasan pXds
- mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
- media: vidtv: fix nfeeds state corruption on start_streaming failure
- media: mediatek: vcodec: fix use-after-free in encoder release path
- media: em28xx: fix use-after-free in em28xx_v4l2_open()
- hwmon: (powerz) Fix use-after-free on USB disconnect
- ALSA: 6fire: fix use-after-free on disconnect
- bcache: fix cached_dev.sb_bio use-after-free and crash
- wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in
pre_exit
- media: as102: fix to not free memory after the device is registered in
as102_usb_probe()
- nilfs2: fix NULL i_assoc_inode dereference in
nilfs_mdt_save_to_shadow_map
- media: vidtv: fix pass-by-value structs causing MSAN warnings
- media: hackrf: fix to not free memory after the device is registered in
hackrf_probe()
- mm/userfaultfd: fix hugetlb fault mutex hash calculation
- clockevents: Add missing resets of the next_event_forced flag
- Linux 7.0.1
* Miscellaneous upstream changes
- Revert "UBUNTU: SAUCE: cdc-acm: Exclude Exar USB serial ports"
- Revert "UBUNTU: SAUCE: import Huawei ES3000_V2 (2.1.0.23)"
Date: 2026-05-07 07:43:15.181223+00:00
Changed-By: LEE KUAN-YING <kuan-ying.lee at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-oem-7.0/7.0.0-1005.5
-------------- next part --------------
Sorry, changesfile not available.
More information about the Resolute-changes
mailing list