UbuntuUpdates.org

Package "linux-bpf-dev"

This package belongs to a PPA: Canonical Kernel Team

Name: linux-bpf-dev

Description:

Headers for BPF development

Latest version: 6.14.0-34.34
Release: plucky (25.04)
Level: base
Repository: main
Head package: linux

Links


Download "linux-bpf-dev"


Other versions of "linux-bpf-dev" in Plucky

Repository Area Version
base main 6.14.0-15.15
security main 6.14.0-29.29
updates main 6.14.0-29.29
proposed main 6.14.0-32.32

Changelog

Version: 6.14.0-34.34 2025-09-17 12:08:13 UTC

 linux (6.14.0-34.34) plucky; urgency=medium
 .
   * plucky/linux: 6.14.0-34.34 -proposed tracker (LP: #2123945)
 .
   * [25.04 FEAT] [post announcement] [KRN2304] CPU-MF Counters for new IBM Z
     hardware - perf part (LP: #2103415)
     - perf list: Add IBM z17 event descriptions
 .
   * Kernel fails to build when coresight is enabled (LP: #2122527)
     - Coresight: Introduce a new struct coresight_path
     - Coresight: Change functions to accept the coresight_path
     - coresight: change coresight_device lock type to raw_spinlock_t
 .
   * memory leaks when configuring a small rate limit in audit (LP: #2122554)
     - audit: fix skb leak when audit rate limit is exceeded
 .
   * [UBUNTU 24.04] s390/pci: Don't abort recovery for user-space drivers
     (LP: #2121150)
     - s390/pci: Allow automatic recovery with minimal driver support
 .
   * [AMDGPU] Call trace occurs when unplugging a HDMI/DP/VGA cable on Dell
     platforms (LP: #2116908)
     - drm/amd/display: limit clear_update_flags to dcn32 and above
     - drm/amd/display: Allow DCN301 to clear update flags
 .
   * sources list generation using dwarfdump takes up to 0.5hr in build process
     (LP: #2104911)
     - [Packaging] Don't generate list of source files
 .
   * [SRU] Apparmor: Unshifted uids for hardlinks and unix sockets in user
     namespaces (LP: #2121257)
     - apparmor: shift ouid when mediating hard links in userns
     - apparmor: shift uid when mediating af_unix in userns
 .
   * Plucky update: upstream stable patchset 2025-09-04 (LP: #2122072)
     - rtc: pcf2127: add missing semicolon after statement
     - rtc: pcf2127: fix SPI command byte for PCF2131
     - rtc: cmos: use spin_lock_irqsave in cmos_interrupt
     - virtio-net: xsk: rx: fix the frame's length check
     - virtio-net: ensure the received length does not exceed allocated size
     - net: txgbe: request MISC IRQ in ndo_open
     - vsock/vmci: Clear the vmci transport packet properly when initializing
       it
     - net: libwx: fix the incorrect display of the queue number
     - mmc: sdhci: Add a helper function for dump register in dynamic debug
       mode
     - Revert "mmc: sdhci: Disable SD card clock before changing parameters"
     - mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier
     - Bluetooth: HCI: Set extended advertising data synchronously
     - Bluetooth: hci_sync: revert some mesh modifications
     - Bluetooth: MGMT: set_mesh: update LE scan interval and window
     - Bluetooth: MGMT: mesh_send: check instances prior disabling advertising
     - iommufd/selftest: Fix iommufd_dirty_tracking with large hugepage sizes
     - regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
     - Input: cs40l50-vibra - fix potential NULL dereference in
       cs40l50_upload_owt()
     - usb: typec: altmodes/displayport: do not index invalid pin_assignments
     - mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
     - mtk-sd: Prevent memory corruption from DMA map failure
     - mtk-sd: reset host->mrq on prepare_data() error
     - drm/v3d: Disable interrupts before resetting the GPU
     - firmware: arm_ffa: Fix memory leak by freeing notifier callback node
     - firmware: arm_ffa: Move memory allocation outside the mutex locking
     - firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic
       context
     - arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename
     - platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
     - RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling
     - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
     - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
     - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
     - scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
     - scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
     - scsi: sd: Fix VPD page 0xb7 length check
     - scsi: ufs: core: Fix spelling of a sysfs attribute name
     - RDMA/mlx5: Fix HW counters query for non-representor devices
     - RDMA/mlx5: Fix CC counters query for MPV
     - RDMA/mlx5: Fix vport loopback for MPV device
     - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1
     - platform/mellanox: nvsw-sn2201: Fix bus number in adapter error message
     - Bluetooth: Prevent unintended pause by checking if advertising is active
     - btrfs: fix missing error handling when searching for inode refs during
       log replay
     - btrfs: fix iteration of extrefs during log replay
     - btrfs: return a btrfs_inode from btrfs_iget_logging()
     - btrfs: return a btrfs_inode from read_one_inode()
     - btrfs: fix invalid inode pointer dereferences during log replay
     - btrfs: fix inode lookup error handling during log replay
     - btrfs: record new subvolume in parent dir earlier to avoid dir logging
       races
     - btrfs: propagate last_unlink_trans earlier when doing a rmdir
     - btrfs: use btrfs_record_snapshot_destroy() during rmdir
     - ethernet: atl1: Add missing DMA mapping error checks and count errors
     - dpaa2-eth: fix xdp_rxq_info leak
     - drm/exynos: fimd: Guard display clock control with runtime PM calls
     - spi: spi-fsl-dspi: Clear completion counter before initiating transfer
     - drm/i915/selftests: Change mock_request() to return error pointers
     - nvme: Fix incorrect cdw15 value in passthru error logging
     - nvmet: fix memory leak of bio integrity
     - platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs
       callbacks
     - platform/x86: hp-bioscfg: Fix class device unregistration
     - platform/x86: think-lmi: Fix class device unregistration
     - platform/x86: dell-wmi-sysman: Fix class device unregistration
     - platform/mellanox: mlxreg-lc: Fix logic error in power state check
     - drm/bridge: aux-hpd-bridge: fix assignment of the of_node
     - net: usb: lan78xx: fix WARN in __netif

Source diff to previous version
2103415 [25.04 FEAT] [post announcement] [KRN2304] CPU-MF Counters for new IBM Z hardware - perf part
2122527 Kernel fails to build when coresight is enabled
2122554 memory leaks when configuring a small rate limit in audit
2121150 [UBUNTU 24.04] s390/pci: Don't abort recovery for user-space drivers
2104911 sources list generation using dwarfdump takes up to 0.5hr in build process
2121257 [SRU] Apparmor: Unshifted uids for hardlinks and unix sockets in user namespaces
2122072 Plucky update: upstream stable patchset 2025-09-04
2121149 [UBUNTU 24.04] s390/pci: Fix stale function handles in error handling
2121266 Plucky update: upstream stable patchset 2025-08-22
2120812 Plucky update: upstream stable patchset 2025-08-18
1786013 Packaging resync
CVE-2025-39682 In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call mus
CVE-2025-38541 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init() devm_kasprintf(
CVE-2025-38477 In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix race condition on qfq_aggregate A race condition can oc
CVE-2025-38500 In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm interface co
CVE-2025-38617 In the Linux kernel, the following vulnerability has been resolved: net/packet: fix a race in packet_set_ring() and packet_notifier() When packet_s
CVE-2025-38618 In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to au

Version: 6.14.0-32.32 2025-08-29 16:09:00 UTC

 linux (6.14.0-32.32) plucky; urgency=medium
 .
   * plucky/linux: 6.14.0-32.32 -proposed tracker (LP: #2121653)
 .
   * Packaging resync (LP: #1786013)
     - [Packaging] debian.master/dkms-versions -- update from kernel-versions
       (main/2025.08.11)
 .
   * Pytorch reports incorrect GPU memory causing "HIP Out of Memory" errors
     (LP: #2120454)
     - drm/amdkfd: add a new flag to manage where VRAM allocations go
     - drm/amdkfd: use GTT for VRAM on APUs only if GTT is larger
 .
   * nvme no longer detected on boot after upgrade to 6.8.0-60 (LP: #2111521)
     - SAUCE: PCI: Disable RRS polling for Intel SSDPE2KX020T8 nvme
 .
   * kernel panic when reloading apparmor 5.0.0 profiles (LP: #2120233)
     - SAUCE: apparmor5.0.0 [59/53]: apparmor: prevent profile->disconnected
       double free in aa_free_profile
 .
   * [SRU] Add support for ALC1708 codec on TRBL platform (LP: #2116247)
     - ASoC: Intel: soc-acpi-intel-lnl-match: add rt1320_l12_rt714_l0 support
 .
   * [SRU] Add waiting latency for USB port resume (LP: #2115478)
     - usb: hub: fix detection of high tier USB3 devices behind suspended hubs
     - usb: hub: Fix flushing and scheduling of delayed work that tunes runtime
       pm
     - usb: hub: Fix flushing of delayed work used for post resume purposes
 .
   * minimal kernel lacks modules for blk disk in arm64 openstack environments
     where config_drive is required (LP: #2118499)
     - [Config] Enable SYM53C8XX_2 on arm64
 .
   * Support xe2_hpg (LP: #2116175)
     - drm/xe/xe2_hpg: Add PCI IDs for xe2_hpg
     - drm/xe/xe2_hpg: Define additional Xe2_HPG GMD_ID
     - drm/xe/xe2_hpg: Add set of workarounds
     - drm/xe/xe2hpg: Add Wa_16025250150
 .
   * drm/xe: Lite restore breaks fdinfo drm-cycles-rcs reporting (LP: #2119526)
     - drm/xe: Add WA BB to capture active context utilization
     - drm/xe/lrc: Use a temporary buffer for WA BB
 .
   * No IP Address assigned after hot-plugging Ethernet cable on HP Platform
     (LP: #2115393)
     - Revert "e1000e: change k1 configuration on MTP and later platforms"
 .
   * I/O performance regression on NVMes under same bridge (dual port nvme)
     (LP: #2115738)
     - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes
     - iommu/vt-d: Split intel_iommu_domain_alloc_paging_flags()
     - iommu/vt-d: Create unique domain ops for each stage
     - iommu/vt-d: Split intel_iommu_enforce_cache_coherency()
     - iommu/vt-d: Split paging_domain_compatible()
     - iommu/vt-d: Make iotlb_sync_map a static property of dmar_domain
 .
   * BPF header file in wrong location (LP: #2118965)
     - [Packaging] Install bpf header to correct location
 .
   * Internal microphone not working on ASUS VivoBook with Realtek ALC256
     (Ubuntu 24.04 + kernel 6.15) (LP: #2112330)
     - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA
 .
   * Documentation update for [Ubuntu25.04] "virsh attach-interface" requires
     a reboot to reflect the attached interfaces on the guest (LP: #2111231)
     - powerpc/pseries/dlpar: Search DRC index from ibm, drc-indexes for IO add
 .
   * Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603)
     - tools/x86/kcpuid: Fix error handling
     - x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in
       mwait_idle_with_hints() and prefer_mwait_c1_over_halt()
     - crypto: sun8i-ce-hash - fix error handling in sun8i_ce_hash_run()
     - sched: Fix trace_sched_switch(.prev_state)
     - perf/x86/amd/uncore: Remove unused 'struct amd_uncore_ctx::node' member
     - perf/x86/amd/uncore: Prevent UMC counters from saturating
     - gfs2: replace sd_aspace with sd_inode
     - gfs2: gfs2_create_inode error handling fix
     - perf/core: Fix broken throttling when max_samples_per_tick=1
     - crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions
     - powerpc: do not build ppc_save_regs.o always
     - powerpc/crash: Fix non-smp kexec preparation
     - sched/core: Tweak wait_task_inactive() to force dequeue sched_delayed
       tasks
     - x86/microcode/AMD: Do not return error when microcode update is not
       necessary
     - crypto: sun8i-ce - undo runtime PM changes during driver removal
     - x86/cpu: Sanitize CPUID(0x80000000) output
     - x86/insn: Fix opcode map (!REX2) superscript tags
     - brd: fix aligned_sector from brd_do_discard()
     - brd: fix discard end sector
     - kselftest: cpufreq: Get rid of double suspend in rtcwake case
     - crypto: marvell/cesa - Avoid empty transfer descriptor
     - erofs: fix file handle encoding for 64-bit NIDs
     - powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view
     - btrfs: scrub: update device stats when an error is detected
     - btrfs: scrub: fix a wrong error type when metadata bytenr mismatches
     - btrfs: fix invalid data space release when truncating block in NOCOW
       mode
     - rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture
     - crypto: lrw - Only add ecb if it is not already there
     - crypto: xts - Only add ecb if it is not already there
     - crypto: sun8i-ce - move fallback ahash_request to the end of the struct
     - kunit: Fix wrong parameter to kunit_deactivate_static_stub()
     - crypto: api - Redo lookup on EEXIST
     - ACPICA: exserial: don't forget to handle FFixedHW opregions for reading
     - ASoC: tas2764: Enable main IRQs
     - EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo
       channel 0
     - spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers
     - spi: tegra210-quad: remove redundant error handling code
     - spi: tegra210-quad: modify chip select (CS) deactivation
     - power: reset: at91-reset: Optimize at91_reset()
     - ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation type
     - ASoC: SOF: amd: add missing acp descriptor field
     - PM: wakeup: Delete space in the end of string shown by
       pm_show_wakelocks()
     - ACPI: resource:

Source diff to previous version
1786013 Packaging resync
2120454 Pytorch reports incorrect GPU memory causing \
2111521 nvme no longer detected on boot after upgrade to 6.8.0-60
2120233 kernel panic when reloading apparmor 5.0.0 profiles
2115478 [SRU] Add waiting latency for USB port resume
2118499 minimal kernel lacks modules for blk disk in arm64 openstack environments where config_drive is required
2116175 Support xe2_hpg
2119526 drm/xe: Lite restore breaks fdinfo drm-cycles-rcs reporting
2115738 I/O performance regression on NVMes under same bridge (dual port nvme)
2118965 BPF header file in wrong location
2112330 Internal microphone not working on ASUS VivoBook with Realtek ALC256 (Ubuntu 24.04 + kernel 6.15)
2111231 Documentation update for [Ubuntu25.04] \
2119603 Plucky update: upstream stable patchset 2025-08-06
2119039 Plucky update: v6.14.11 upstream stable release
2119010 Plucky update: v6.14.10 upstream stable release
2115678 Plucky update: v6.14.9 upstream stable release
2121449 Unable to put display on standby after resuming from hibernate
CVE-2025-38105 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Kill timer properly at removal The USB-audio MIDI code initial
CVE-2025-38114 In the Linux kernel, the following vulnerability has been resolved: e1000: Move cancel_work_sync to avoid deadlock Previously, e1000_down called ca
CVE-2025-38116 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix uaf in ath12k_core_init() When the execution of ath12k_core_h
CVE-2025-38306 In the Linux kernel, the following vulnerability has been resolved: fs/fhandle.c: fix a race in call of has_locked_children() may_decode_fh() is ca
CVE-2025-38272 In the Linux kernel, the following vulnerability has been resolved: net: dsa: b53: do not enable EEE on bcm63xx BCM63xx internal switches do not su
CVE-2025-38311 In the Linux kernel, the following vulnerability has been resolved: iavf: get rid of the crit lock Get rid of the crit lock. That frees us from the
CVE-2025-38128 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: reject malformed HCI_CMD_SYNC commands In 'mgmt_hci_cmd_sync()
CVE-2025-38130 In the Linux kernel, the following vulnerability has been resolved: drm/connector: only call HDMI audio helper plugged cb if non-null On driver rem
CVE-2025-38132 In the Linux kernel, the following vulnerability has been resolved: coresight: holding cscfg_csdev_lock while removing cscfg from csdev There'll be
CVE-2025-38137 In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Cancel outstanding rescan work when unregistering It's possible to
CVE-2025-38139 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix oops in write-retry from mis-resetting the subreq iterator Fix the r
CVE-2025-38140 In the Linux kernel, the following vulnerability has been resolved: dm: limit swapping tables for devices with zone write plugs dm_revalidate_zones
CVE-2025-38279 In the Linux kernel, the following vulnerability has been resolved: bpf: Do not include stack ptr register in precision backtracking bookkeeping Yi
CVE-2025-38314 In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The resul
CVE-2025-38316 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: avoid NULL pointer dereference in mt7996_set_monitor() The
CVE-2025-38281 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Add NULL check in mt7996_thermal_init devm_kasprintf() can
CVE-2025-38284 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: configure manual DAC mode via PCI config API only To support
CVE-2025-38287 In the Linux kernel, the following vulnerability has been resolved: IB/cm: Drop lockdep assert and WARN when freeing old msg The send completion ha
CVE-2025-38289 In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk Smatch d
CVE-2025-38291 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Prevent sending WMI commands to firmware during firmware crash Cu
CVE-2025-38294 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix NULL access in assign channel context handler Currently, when
CVE-2025-38296 In the Linux kernel, the following vulnerability has been resolved: ACPI: platform_profile: Avoid initializing on non-ACPI platforms The platform p
CVE-2025-38100 In the Linux kernel, the following vulnerability has been resolved: x86/iopl: Cure TIF_IO_BITMAP inconsistencies io_bitmap_exit() is invoked from e
CVE-2025-38101 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() Enlarge the c
CVE-2025-38267 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not trigger WARN_ON() due to a commit_overrun When reading a me
CVE-2025-38268 In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: move tcpm_queue_vdm_unlocked to asynchronous work A state che
CVE-2025-38102 In the Linux kernel, the following vulnerability has been resolved: VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify During
CVE-2025-38301 In the Linux kernel, the following vulnerability has been resolved: nvmem: zynqmp_nvmem: unbreak driver after cleanup Commit 29be47fcd6a0 ("nvmem:
CVE-2025-38352 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer
CVE-2025-38103 In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() Update str
CVE-2025-38302 In the Linux kernel, the following vulnerability has been resolved: block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work Bios queu
CVE-2025-38106 In the Linux kernel, the following vulnerability has been resolved: io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() syzbot r
CVE-2025-38269 In the Linux kernel, the following vulnerability has been resolved: btrfs: exit after state insertion failure at btrfs_convert_extent_bit() If inse
CVE-2025-38270 In the Linux kernel, the following vulnerability has been resolved: net: drv: netdevsim: don't napi_complete() from netpoll netdevsim supports netp
CVE-2025-38107 In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: fix a race in ets_qdisc_change() Gerrard Tai reported a race co
CVE-2025-38108 In the Linux kernel, the following vulnerability has been resolved: net_sched: red: fix a race in __red_change() Gerrard Tai reported a race condit
CVE-2025-38109 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a
CVE-2025-38303 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix possible crashes on eir_create_adv_data eir_create_adv_data
CVE-2025-38304 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix NULL pointer deference on eir_get_service_data The len parameter
CVE-2025-38110 In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access When using
CVE-2025-38111 In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds read/write access When using publicly
CVE-2025-38112 In the Linux kernel, the following vulnerability has been resolved: net: Fix TOCTOU issue in sk_is_readable() sk->sk_prot->sock_is_readable is a va
CVE-2025-38113 In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used With nosmp in cmdli
CVE-2025-38088 In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap memtrace mma
CVE-2025-38115 In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: fix a potential crash on gso_skb handling SFQ has an assump
CVE-2025-38414 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 GCC_GCC_PCIE_HOT_
CVE-2025-38305 In the Linux kernel, the following vulnerability has been resolved: ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() There is no disag
CVE-2025-38117 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Protect mgmt_pending list with its own lock This uses a mutex
CVE-2025-38118 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete This reworks MGMT_
CVE-2025-38119 In the Linux kernel, the following vulnerability has been resolved: scsi: core: ufs: Fix a hang in the error handler ufshcd_err_handling_prepare()
CVE-2025-38307 In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Verify content returned by parse_int_array() The first elemen
CVE-2025-38310 In the Linux kernel, the following vulnerability has been resolved: seg6: Fix validation of nexthop addresses The kernel currently validates that t
CVE-2025-38120 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_set_pipapo_avx2: fix initial map fill If the first field doesn't
CVE-2025-38122 In the Linux kernel, the following vulnerability has been resolved: gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO gve_alloc_
CVE-2025-38123 In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Fix napi rx poll issue When driver handles the napi rx polling
CVE-2025-38124 In the Linux kernel, the following vulnerability has been resolved: net: fix udp gso skb_segment after pull from frag_list Commit a1e40ac5b5e9 ("ne
CVE-2025-38125 In the Linux kernel, the following vulnerability has been resolved: net: stmmac: make sure that ptp_rate is not 0 before configuring EST If the ptp
CVE-2025-38126 In the Linux kernel, the following vulnerability has been resolved: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping T
CVE-2025-38127 In the Linux kernel, the following vulnerability has been resolved: ice: fix Tx scheduler error handling in XDP callback When the XDP program is lo
CVE-2025-38129 In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix use-after-free in page_pool_recycle_in_ring syzbot reported a ua
CVE-2025-38131 In the Linux kernel, the following vulnerability has been resolved: coresight: prevent deactivate active config while enabling the config While ena
CVE-2025-38274 In the Linux kernel, the following vulnerability has been resolved: fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt() fpga_mgr
CVE-2025-38134 In the Linux kernel, the following vulnerability has been resolved: usb: acpi: Prevent null pointer dereference in usb_acpi_add_usb4_devlink() As d
CVE-2025-38135 In the Linux kernel, the following vulnerability has been resolved: serial: Fix potential null-ptr-deref in mlb_usio_probe() devm_ioremap() can ret
CVE-2025-38136 In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: Reorder clock handling and power management in probe Reorde
CVE-2025-38138 In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: Add NULL check in udma_probe() devm_kasprintf() returns NULL whe
CVE-2025-38275 In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug The qmp_usb_iomap() helper funct
CVE-2025-38141 In the Linux kernel, the following vulnerability has been resolved: dm: fix dm_blk_report_zones If dm_get_live_table() returned NULL, dm_put_live_t
CVE-2025-38142 In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus-ec-sensors) check sensor index in read_string() Prevent a potentia
CVE-2025-38277 In the Linux kernel, the following vulnerability has been resolved: mtd: nand: ecc-mxic: Fix use of uninitialized variable ret If ctx->steps is zer
CVE-2025-38143 In the Linux kernel, the following vulnerability has been resolved: backlight: pm8941: Add NULL check in wled_configure() devm_kasprintf() returns
CVE-2025-38312 In the Linux kernel, the following vulnerability has been resolved: fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() In fb_find_mode_cvt
CVE-2025-38145 In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() devm_kasprintf() retur
CVE-2025-38313 In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: fix double-free on mc_dev The blamed commit tried to simplify how
CVE-2025-38415 In the Linux kernel, the following vulnerability has been resolved: Squashfs: check return result of sb_min_blocksize Syzkaller reports an "UBSAN:
CVE-2025-38146 In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix the dead loop of MPLS parse The unexpected MPLS packet ma
CVE-2025-38147 In the Linux kernel, the following vulnerability has been resolved: calipso: Don't call calipso functions for AF_INET sk. syzkaller reported a null
CVE-2025-38278 In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback This patch addresses
CVE-2025-38148 In the Linux kernel, the following vulnerability has been resolved: net: phy: mscc: Fix memory leak when using one step timestamping Fix memory lea
CVE-2025-38149 In the Linux kernel, the following vulnerability has been resolved: net: phy: clear phydev->devlink when the link is deleted There is a potential c
CVE-2025-38280 In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid __bpf_prog_ret0_warn when jit fails syzkaller reported an issue: WA
CVE-2025-38151 In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work The cited com
CVE-2025-38153 In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: fix error handling of usbnet read calls Syzkaller, courtesy o
CVE-2025-38154 In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Avoid using sk_socket after free when sending The sk->sk_socket i
CVE-2025-38315 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Check dsbr size from EFI variable Since the size of struct
CVE-2025-38155 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() devm_ioremap()
CVE-2025-38156 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init() devm_ioremap()
CVE-2025-38282 In the Linux kernel, the following vulnerability has been resolved: kernfs: Relax constraint in draining guard The active reference lifecycle provi
CVE-2025-38157 In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: Abort software beacon handling if disabled A malicious USB dev
CVE-2025-38283 In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: bugfix live migration function without VF device driver If t
CVE-2025-38158 In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: fix XQE dma address error The dma addresses of EQE and AEQE
CVE-2025-38159 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds Set the
CVE-2025-38285 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix WARN() in get_bpf_raw_tp_regs syzkaller reported an issue: WARNING: C
CVE-2025-38286 In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91_gpio_probe() doesn't ch
CVE-2025-38160 In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() devm_kasprintf() re
CVE-2025-38161 In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction Upon RQ dest
CVE-2025-38162 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation When cal
CVE-2025-38288 In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels Corre
CVE-2025-38290 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix node corruption in ar->arvifs list In current WLAN recovery c
CVE-2025-38292 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid access to memory In ath12k_dp_rx_msdu_coalesce(), rxc
CVE-2025-38163 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sbi->total_valid_block_count syzbot reported a
CVE-2025-38317 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix buffer overflow in debugfs If the user tries to write more th
CVE-2025-38164 In the Linux kernel, the following vulnerability has been resolved: f2fs: zone: fix to avoid inconsistence in between SIT and SSA w/ below testcase
CVE-2025-38165 In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skb_linearize The panic can be reproduced
CVE-2025-38166 In the Linux kernel, the following vulnerability has been resolved: bpf: fix ktls panic with sockmap [ 2172.936997] ------------[ cut here ]-------
CVE-2025-38293 In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix node corruption in ar->arvifs list In current WLAN recovery c
CVE-2025-38295 In the Linux kernel, the following vulnerability has been resolved: perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_dd
CVE-2025-38167 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: handle hdr_first_de() return value The hdr_first_de() function return
CVE-2025-38318 In the Linux kernel, the following vulnerability has been resolved: perf: arm-ni: Fix missing platform_set_drvdata() Add missing platform_set_drvda
CVE-2025-38168 In the Linux kernel, the following vulnerability has been resolved: perf: arm-ni: Unregister PMUs on probe failure When a resource allocation fails
CVE-2025-38169 In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP On system with S
CVE-2025-38170 In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Discard stale CPU state when handling SME traps The logic for han
CVE-2025-38319 In the Linux kernel, the following vulnerability has been resolved: drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg
CVE-2025-38297 In the Linux kernel, the following vulnerability has been resolved: PM: EM: Fix potential division-by-zero error in em_compute_costs() When the dev
CVE-2025-38298 In the Linux kernel, the following vulnerability has been resolved: EDAC/skx_common: Fix general protection fault After loading i10nm_edac (which a
CVE-2025-38299 In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY() ETDM2_IN_BE and ETDM
CVE-2025-38172 In the Linux kernel, the following vulnerability has been resolved: erofs: avoid using multiple devices with different type For multiple devices, b
CVE-2025-38173 In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/cesa - Handle zero-length skcipher requests Do not access rando
CVE-2025-38300 In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() Fix t
CVE-2025-38174 In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Do not double dequeue a configuration request Some of our devices
CVE-2025-38175 In the Linux kernel, the following vulnerability has been resolved: binder: fix yet another UAF in binder_devices Commit e77aff5528a18 ("binderfs:
CVE-2025-38176 In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in binderfs_evict_inode() Running 'stress-ng --binde
CVE-2025-38265 In the Linux kernel, the following vulnerability has been resolved: serial: jsm: fix NPE during jsm_uart_port_init No device was set which caused s
CVE-2025-38092 In the Linux kernel, the following vulnerability has been resolved: ksmbd: use list_first_entry_or_null for opinfo_get_list() The list_first_entry(
CVE-2025-38091 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check stream id dml21 wrapper to get plane_id [Why & How] Fix
CVE-2025-38082 In the Linux kernel, the following vulnerability has been resolved: gpio: virtuser: fix potential out-of-bound write If the caller wrote more chara
CVE-2025-38050 In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb foli
CVE-2025-38029 In the Linux kernel, the following vulnerability has been resolved: kasan: avoid sleepable page allocation from atomic context apply_to_pte_range()
CVE-2025-38076 In the Linux kernel, the following vulnerability has been resolved: alloc_tag: allocate percpu counters for module tags dynamically When a module g
CVE-2025-38051 In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifs_fill_dirent There is a race condition i
CVE-2025-38077 In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
CVE-2025-38078 In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix race of buffer access at PCM OSS layer The PCM OSS layer tries t
CVE-2025-38003 In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu read protection for procfs content When the procfs co
CVE-2025-38004 In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking for bcm_op runtime updates The CAN broadcast manager (CAN
CVE-2025-38031 In the Linux kernel, the following vulnerability has been resolved: padata: do not leak refcount in reorder_work A recent patch that addressed a UA
CVE-2025-38079 In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on s
CVE-2025-38052 In the Linux kernel, the following vulnerability has been resolved: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Syzbot reporte
CVE-2025-38053 In the Linux kernel, the following vulnerability has been resolved: idpf: fix null-ptr-deref in idpf_features_check idpf_features_check is used to
CVE-2025-38032 In the Linux kernel, the following vulnerability has been resolved: mr: consolidate the ipmr_can_free_table() checks. Guoyu Yin reported a splat in
CVE-2025-38054 In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Limit signal/freq counts in summary output functions The debugfs summ
CVE-2025-38055 In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq Currently, using
CVE-2025-38057 In the Linux kernel, the following vulnerability has been resolved: espintcp: fix skb leaks A few error paths are missing a kfree_skb.
CVE-2025-38058 In the Linux kernel, the following vulnerability has been resolved: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock ... or
CVE-2025-38033 In the Linux kernel, the following vulnerability has been resolved: x86/Kconfig: make CFI_AUTO_DEFAULT depend on !RUST or Rust >= 1.88 Calling core
CVE-2025-38059 In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid NULL pointer dereference if no valid csum tree [BUG] When trying r
CVE-2025-38034 In the Linux kernel, the following vulnerability has been resolved: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref btrfs_pre
CVE-2025-38035 In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: don't restore null sk_state_change queue->state_change is set as par
CVE-2025-38036 In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Perform early GT MMIO initialization to read GMDID VFs need to commu
CVE-2025-38037 In the Linux kernel, the following vulnerability has been resolved: vxlan: Annotate FDB data races The 'used' and 'updated' fields in the FDB entry
CVE-2025-38038 In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost set_boost is a
CVE-2025-38039 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled When
CVE-2025-38080 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Increase block_sequence array size [Why] It's possible to gene
CVE-2025-38060 In the Linux kernel, the following vulnerability has been resolved: bpf: copy_verifier_state() should copy 'loop_entry' field The bpf_verifier_stat
CVE-2025-38040 In the Linux kernel, the following vulnerability has been resolved: serial: mctrl_gpio: split disable_ms into sync and no_sync APIs The following s
CVE-2025-38061 In the Linux kernel, the following vulnerability has been resolved: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() H
CVE-2025-38062 In the Linux kernel, the following vulnerability has been resolved: genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie T
CVE-2025-38041 In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: h616: Reparent GPU clock during frequency changes The H616 manua
CVE-2025-38063 In the Linux kernel, the following vulnerability has been resolved: dm: fix unconditional IO throttle caused by REQ_PREFLUSH When a bio with REQ_PR
CVE-2025-38064 In the Linux kernel, the following vulnerability has been resolved: virtio: break and reset virtio devices on device_shutdown() Hongyu reported a h
CVE-2025-38042 In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_c
CVE-2025-38043 In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Set dma_mask for ffa devices Set dma_mask for FFA devices, o
CVE-2025-38044 In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: set device_caps for 417 The video_device for the MPEG encoder d
CVE-2025-38065 In the Linux kernel, the following vulnerability has been resolved: orangefs: Do not truncate file size 'len' is used to store the result of i_size
CVE-2025-38066 In the Linux kernel, the following vulnerability has been resolved: dm cache: prevent BUG_ON by blocking retries on failed device resumes A cache d
CVE-2025-38067 In the Linux kernel, the following vulnerability has been resolved: rseq: Fix segfault on registration when rseq_cs is non-zero The rseq_cs field i
CVE-2025-38068 In the Linux kernel, the following vulnerability has been resolved: crypto: lzo - Fix compression buffer overrun Unlike the decompression code, the
CVE-2025-38069 In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops Fix a k
CVE-2025-38045 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix debug actions order The order of actions taken for debug was
CVE-2025-38070 In the Linux kernel, the following vulnerability has been resolved: ASoC: sma1307: Add NULL check in sma1307_setting_loaded() All varibale allocate
CVE-2025-38071 In the Linux kernel, the following vulnerability has been resolved: x86/mm: Check return value from memblock_phys_alloc_range() At least with CONFI
CVE-2025-38072 In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Fix divide error in nd_label_data_init() If a faulty CXL memo
CVE-2025-38081 In the Linux kernel, the following vulnerability has been resolved: spi-rockchip: Fix register out of bounds access Do not write native chip select
CVE-2025-38047 In the Linux kernel, the following vulnerability has been resolved: x86/fred: Fix system hang during S4 resume with FRED enabled Upon a wakeup from
CVE-2025-38073 In the Linux kernel, the following vulnerability has been resolved: block: fix race between set_blocksize and read paths With the new large sector
CVE-2025-38074 In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: protect vq->log_used with vq->mutex The vhost-scsi completion path
CVE-2025-38048 In the Linux kernel, the following vulnerability has been resolved: virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN syzbot
CVE-2025-38075 In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix timeout on deleted connection NOPIN response timer may
CVE-2025-38350 In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain cla

Version: 6.14.0-30.30 2025-08-13 18:08:20 UTC

 linux (6.14.0-30.30) plucky; urgency=medium
 .
   * plucky/linux: 6.14.0-30.30 -proposed tracker (LP: #2120126)
 .
   * Packaging resync (LP: #1786013)
     - [Packaging] debian.master/dkms-versions -- update from kernel-versions
       (main/2025.08.11)
 .
   * kernel panic when reloading apparmor 5.0.0 profiles (LP: #2120233)
     - SAUCE: apparmor5.0.0 [59/53]: apparmor: prevent profile->disconnected
       double free in aa_free_profile
 .
   * [SRU] Add support for ALC1708 codec on TRBL platform (LP: #2116247)
     - ASoC: Intel: soc-acpi-intel-lnl-match: add rt1320_l12_rt714_l0 support
 .
   * [SRU] Add waiting latency for USB port resume (LP: #2115478)
     - usb: hub: fix detection of high tier USB3 devices behind suspended hubs
     - usb: hub: Fix flushing and scheduling of delayed work that tunes runtime
       pm
     - usb: hub: Fix flushing of delayed work used for post resume purposes
 .
   * minimal kernel lacks modules for blk disk in arm64 openstack environments
     where config_drive is required (LP: #2118499)
     - [Config] Enable SYM53C8XX_2 on arm64
 .
   * Support xe2_hpg (LP: #2116175)
     - drm/xe/xe2_hpg: Add PCI IDs for xe2_hpg
     - drm/xe/xe2_hpg: Define additional Xe2_HPG GMD_ID
     - drm/xe/xe2_hpg: Add set of workarounds
     - drm/xe/xe2hpg: Add Wa_16025250150
 .
   * drm/xe: Lite restore breaks fdinfo drm-cycles-rcs reporting (LP: #2119526)
     - drm/xe: Add WA BB to capture active context utilization
     - drm/xe/lrc: Use a temporary buffer for WA BB
 .
   * No IP Address assigned after hot-plugging Ethernet cable on HP Platform
     (LP: #2115393)
     - Revert "e1000e: change k1 configuration on MTP and later platforms"
 .
   * I/O performance regression on NVMes under same bridge (dual port nvme)
     (LP: #2115738)
     - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes
     - iommu/vt-d: Split intel_iommu_domain_alloc_paging_flags()
     - iommu/vt-d: Create unique domain ops for each stage
     - iommu/vt-d: Split intel_iommu_enforce_cache_coherency()
     - iommu/vt-d: Split paging_domain_compatible()
     - iommu/vt-d: Make iotlb_sync_map a static property of dmar_domain
 .
   * BPF header file in wrong location (LP: #2118965)
     - [Packaging] Install bpf header to correct location
 .
   * Internal microphone not working on ASUS VivoBook with Realtek ALC256
     (Ubuntu 24.04 + kernel 6.15) (LP: #2112330)
     - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA
 .
   * Documentation update for [Ubuntu25.04] "virsh attach-interface" requires
     a reboot to reflect the attached interfaces on the guest (LP: #2111231)
     - powerpc/pseries/dlpar: Search DRC index from ibm, drc-indexes for IO add
 .
   * Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603)
     - tools/x86/kcpuid: Fix error handling
     - x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in
       mwait_idle_with_hints() and prefer_mwait_c1_over_halt()
     - crypto: sun8i-ce-hash - fix error handling in sun8i_ce_hash_run()
     - sched: Fix trace_sched_switch(.prev_state)
     - perf/x86/amd/uncore: Remove unused 'struct amd_uncore_ctx::node' member
     - perf/x86/amd/uncore: Prevent UMC counters from saturating
     - gfs2: replace sd_aspace with sd_inode
     - gfs2: gfs2_create_inode error handling fix
     - perf/core: Fix broken throttling when max_samples_per_tick=1
     - crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions
     - powerpc: do not build ppc_save_regs.o always
     - powerpc/crash: Fix non-smp kexec preparation
     - sched/core: Tweak wait_task_inactive() to force dequeue sched_delayed
       tasks
     - x86/microcode/AMD: Do not return error when microcode update is not
       necessary
     - crypto: sun8i-ce - undo runtime PM changes during driver removal
     - x86/cpu: Sanitize CPUID(0x80000000) output
     - x86/insn: Fix opcode map (!REX2) superscript tags
     - brd: fix aligned_sector from brd_do_discard()
     - brd: fix discard end sector
     - kselftest: cpufreq: Get rid of double suspend in rtcwake case
     - crypto: marvell/cesa - Avoid empty transfer descriptor
     - erofs: fix file handle encoding for 64-bit NIDs
     - powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view
     - btrfs: scrub: update device stats when an error is detected
     - btrfs: scrub: fix a wrong error type when metadata bytenr mismatches
     - btrfs: fix invalid data space release when truncating block in NOCOW
       mode
     - rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture
     - crypto: lrw - Only add ecb if it is not already there
     - crypto: xts - Only add ecb if it is not already there
     - crypto: sun8i-ce - move fallback ahash_request to the end of the struct
     - kunit: Fix wrong parameter to kunit_deactivate_static_stub()
     - crypto: api - Redo lookup on EEXIST
     - ACPICA: exserial: don't forget to handle FFixedHW opregions for reading
     - ASoC: tas2764: Enable main IRQs
     - EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo
       channel 0
     - spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers
     - spi: tegra210-quad: remove redundant error handling code
     - spi: tegra210-quad: modify chip select (CS) deactivation
     - power: reset: at91-reset: Optimize at91_reset()
     - ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation type
     - ASoC: SOF: amd: add missing acp descriptor field
     - PM: wakeup: Delete space in the end of string shown by
       pm_show_wakelocks()
     - ACPI: resource: fix a typo for MECHREVO in
       irq1_edge_low_force_override[]
     - x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges()
     - PM: sleep: Print PM debug messages during hibernation
     - thermal/drivers/mediatek/lvts: Fix debugfs unregister on failure
     - ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
     - spi: sh-msiof: Fix maximum DMA t

Source diff to previous version
1786013 Packaging resync
2120233 kernel panic when reloading apparmor 5.0.0 profiles
2115478 [SRU] Add waiting latency for USB port resume
2118499 minimal kernel lacks modules for blk disk in arm64 openstack environments where config_drive is required
2116175 Support xe2_hpg
2119526 drm/xe: Lite restore breaks fdinfo drm-cycles-rcs reporting
2115738 I/O performance regression on NVMes under same bridge (dual port nvme)
2118965 BPF header file in wrong location
2112330 Internal microphone not working on ASUS VivoBook with Realtek ALC256 (Ubuntu 24.04 + kernel 6.15)
2111231 Documentation update for [Ubuntu25.04] \
2119603 Plucky update: upstream stable patchset 2025-08-06
2119039 Plucky update: v6.14.11 upstream stable release
2119010 Plucky update: v6.14.10 upstream stable release
2115678 Plucky update: v6.14.9 upstream stable release
CVE-2025-38105 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Kill timer properly at removal The USB-audio MIDI code initial
CVE-2025-38114 In the Linux kernel, the following vulnerability has been resolved: e1000: Move cancel_work_sync to avoid deadlock Previously, e1000_down called ca
CVE-2025-38116 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix uaf in ath12k_core_init() When the execution of ath12k_core_h
CVE-2025-38306 In the Linux kernel, the following vulnerability has been resolved: fs/fhandle.c: fix a race in call of has_locked_children() may_decode_fh() is ca
CVE-2025-38272 In the Linux kernel, the following vulnerability has been resolved: net: dsa: b53: do not enable EEE on bcm63xx BCM63xx internal switches do not su
CVE-2025-38311 In the Linux kernel, the following vulnerability has been resolved: iavf: get rid of the crit lock Get rid of the crit lock. That frees us from the
CVE-2025-38128 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: reject malformed HCI_CMD_SYNC commands In 'mgmt_hci_cmd_sync()
CVE-2025-38130 In the Linux kernel, the following vulnerability has been resolved: drm/connector: only call HDMI audio helper plugged cb if non-null On driver rem
CVE-2025-38132 In the Linux kernel, the following vulnerability has been resolved: coresight: holding cscfg_csdev_lock while removing cscfg from csdev There'll be
CVE-2025-38137 In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Cancel outstanding rescan work when unregistering It's possible to
CVE-2025-38139 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix oops in write-retry from mis-resetting the subreq iterator Fix the r
CVE-2025-38140 In the Linux kernel, the following vulnerability has been resolved: dm: limit swapping tables for devices with zone write plugs dm_revalidate_zones
CVE-2025-38279 In the Linux kernel, the following vulnerability has been resolved: bpf: Do not include stack ptr register in precision backtracking bookkeeping Yi
CVE-2025-38314 In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The resul
CVE-2025-38316 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: avoid NULL pointer dereference in mt7996_set_monitor() The
CVE-2025-38281 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Add NULL check in mt7996_thermal_init devm_kasprintf() can
CVE-2025-38284 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: configure manual DAC mode via PCI config API only To support
CVE-2025-38287 In the Linux kernel, the following vulnerability has been resolved: IB/cm: Drop lockdep assert and WARN when freeing old msg The send completion ha
CVE-2025-38289 In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk Smatch d
CVE-2025-38291 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Prevent sending WMI commands to firmware during firmware crash Cu
CVE-2025-38294 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix NULL access in assign channel context handler Currently, when
CVE-2025-38296 In the Linux kernel, the following vulnerability has been resolved: ACPI: platform_profile: Avoid initializing on non-ACPI platforms The platform p
CVE-2025-38100 In the Linux kernel, the following vulnerability has been resolved: x86/iopl: Cure TIF_IO_BITMAP inconsistencies io_bitmap_exit() is invoked from e
CVE-2025-38101 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() Enlarge the c
CVE-2025-38267 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not trigger WARN_ON() due to a commit_overrun When reading a me
CVE-2025-38268 In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: move tcpm_queue_vdm_unlocked to asynchronous work A state che
CVE-2025-38102 In the Linux kernel, the following vulnerability has been resolved: VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify During
CVE-2025-38301 In the Linux kernel, the following vulnerability has been resolved: nvmem: zynqmp_nvmem: unbreak driver after cleanup Commit 29be47fcd6a0 ("nvmem:
CVE-2025-38352 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer
CVE-2025-38103 In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() Update str
CVE-2025-38302 In the Linux kernel, the following vulnerability has been resolved: block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work Bios queu
CVE-2025-38106 In the Linux kernel, the following vulnerability has been resolved: io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() syzbot r
CVE-2025-38269 In the Linux kernel, the following vulnerability has been resolved: btrfs: exit after state insertion failure at btrfs_convert_extent_bit() If inse
CVE-2025-38270 In the Linux kernel, the following vulnerability has been resolved: net: drv: netdevsim: don't napi_complete() from netpoll netdevsim supports netp
CVE-2025-38107 In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: fix a race in ets_qdisc_change() Gerrard Tai reported a race co
CVE-2025-38108 In the Linux kernel, the following vulnerability has been resolved: net_sched: red: fix a race in __red_change() Gerrard Tai reported a race condit
CVE-2025-38109 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a
CVE-2025-38303 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix possible crashes on eir_create_adv_data eir_create_adv_data
CVE-2025-38304 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix NULL pointer deference on eir_get_service_data The len parameter
CVE-2025-38110 In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access When using
CVE-2025-38111 In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds read/write access When using publicly
CVE-2025-38112 In the Linux kernel, the following vulnerability has been resolved: net: Fix TOCTOU issue in sk_is_readable() sk->sk_prot->sock_is_readable is a va
CVE-2025-38113 In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used With nosmp in cmdli
CVE-2025-38088 In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap memtrace mma
CVE-2025-38115 In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: fix a potential crash on gso_skb handling SFQ has an assump
CVE-2025-38414 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 GCC_GCC_PCIE_HOT_
CVE-2025-38305 In the Linux kernel, the following vulnerability has been resolved: ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() There is no disag
CVE-2025-38117 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Protect mgmt_pending list with its own lock This uses a mutex
CVE-2025-38118 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete This reworks MGMT_
CVE-2025-38119 In the Linux kernel, the following vulnerability has been resolved: scsi: core: ufs: Fix a hang in the error handler ufshcd_err_handling_prepare()
CVE-2025-38307 In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Verify content returned by parse_int_array() The first elemen
CVE-2025-38310 In the Linux kernel, the following vulnerability has been resolved: seg6: Fix validation of nexthop addresses The kernel currently validates that t
CVE-2025-38120 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_set_pipapo_avx2: fix initial map fill If the first field doesn't
CVE-2025-38122 In the Linux kernel, the following vulnerability has been resolved: gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO gve_alloc_
CVE-2025-38123 In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Fix napi rx poll issue When driver handles the napi rx polling
CVE-2025-38124 In the Linux kernel, the following vulnerability has been resolved: net: fix udp gso skb_segment after pull from frag_list Commit a1e40ac5b5e9 ("ne
CVE-2025-38125 In the Linux kernel, the following vulnerability has been resolved: net: stmmac: make sure that ptp_rate is not 0 before configuring EST If the ptp
CVE-2025-38126 In the Linux kernel, the following vulnerability has been resolved: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping T
CVE-2025-38127 In the Linux kernel, the following vulnerability has been resolved: ice: fix Tx scheduler error handling in XDP callback When the XDP program is lo
CVE-2025-38129 In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix use-after-free in page_pool_recycle_in_ring syzbot reported a ua
CVE-2025-38131 In the Linux kernel, the following vulnerability has been resolved: coresight: prevent deactivate active config while enabling the config While ena
CVE-2025-38274 In the Linux kernel, the following vulnerability has been resolved: fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt() fpga_mgr
CVE-2025-38134 In the Linux kernel, the following vulnerability has been resolved: usb: acpi: Prevent null pointer dereference in usb_acpi_add_usb4_devlink() As d
CVE-2025-38135 In the Linux kernel, the following vulnerability has been resolved: serial: Fix potential null-ptr-deref in mlb_usio_probe() devm_ioremap() can ret
CVE-2025-38136 In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: Reorder clock handling and power management in probe Reorde
CVE-2025-38138 In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: Add NULL check in udma_probe() devm_kasprintf() returns NULL whe
CVE-2025-38275 In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug The qmp_usb_iomap() helper funct
CVE-2025-38141 In the Linux kernel, the following vulnerability has been resolved: dm: fix dm_blk_report_zones If dm_get_live_table() returned NULL, dm_put_live_t
CVE-2025-38142 In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus-ec-sensors) check sensor index in read_string() Prevent a potentia
CVE-2025-38277 In the Linux kernel, the following vulnerability has been resolved: mtd: nand: ecc-mxic: Fix use of uninitialized variable ret If ctx->steps is zer
CVE-2025-38143 In the Linux kernel, the following vulnerability has been resolved: backlight: pm8941: Add NULL check in wled_configure() devm_kasprintf() returns
CVE-2025-38312 In the Linux kernel, the following vulnerability has been resolved: fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() In fb_find_mode_cvt
CVE-2025-38145 In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() devm_kasprintf() retur
CVE-2025-38313 In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: fix double-free on mc_dev The blamed commit tried to simplify how
CVE-2025-38415 In the Linux kernel, the following vulnerability has been resolved: Squashfs: check return result of sb_min_blocksize Syzkaller reports an "UBSAN:
CVE-2025-38146 In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix the dead loop of MPLS parse The unexpected MPLS packet ma
CVE-2025-38147 In the Linux kernel, the following vulnerability has been resolved: calipso: Don't call calipso functions for AF_INET sk. syzkaller reported a null
CVE-2025-38278 In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback This patch addresses
CVE-2025-38148 In the Linux kernel, the following vulnerability has been resolved: net: phy: mscc: Fix memory leak when using one step timestamping Fix memory lea
CVE-2025-38149 In the Linux kernel, the following vulnerability has been resolved: net: phy: clear phydev->devlink when the link is deleted There is a potential c
CVE-2025-38280 In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid __bpf_prog_ret0_warn when jit fails syzkaller reported an issue: WA
CVE-2025-38151 In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work The cited com
CVE-2025-38153 In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: fix error handling of usbnet read calls Syzkaller, courtesy o
CVE-2025-38154 In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Avoid using sk_socket after free when sending The sk->sk_socket i
CVE-2025-38315 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Check dsbr size from EFI variable Since the size of struct
CVE-2025-38155 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() devm_ioremap()
CVE-2025-38156 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init() devm_ioremap()
CVE-2025-38282 In the Linux kernel, the following vulnerability has been resolved: kernfs: Relax constraint in draining guard The active reference lifecycle provi
CVE-2025-38157 In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: Abort software beacon handling if disabled A malicious USB dev
CVE-2025-38283 In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: bugfix live migration function without VF device driver If t
CVE-2025-38158 In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: fix XQE dma address error The dma addresses of EQE and AEQE
CVE-2025-38159 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds Set the
CVE-2025-38285 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix WARN() in get_bpf_raw_tp_regs syzkaller reported an issue: WARNING: C
CVE-2025-38286 In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91_gpio_probe() doesn't ch
CVE-2025-38160 In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() devm_kasprintf() re
CVE-2025-38161 In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction Upon RQ dest
CVE-2025-38162 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation When cal
CVE-2025-38288 In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels Corre
CVE-2025-38290 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix node corruption in ar->arvifs list In current WLAN recovery c
CVE-2025-38292 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid access to memory In ath12k_dp_rx_msdu_coalesce(), rxc
CVE-2025-38163 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sbi->total_valid_block_count syzbot reported a
CVE-2025-38317 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix buffer overflow in debugfs If the user tries to write more th
CVE-2025-38164 In the Linux kernel, the following vulnerability has been resolved: f2fs: zone: fix to avoid inconsistence in between SIT and SSA w/ below testcase
CVE-2025-38165 In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skb_linearize The panic can be reproduced
CVE-2025-38166 In the Linux kernel, the following vulnerability has been resolved: bpf: fix ktls panic with sockmap [ 2172.936997] ------------[ cut here ]-------
CVE-2025-38293 In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix node corruption in ar->arvifs list In current WLAN recovery c
CVE-2025-38295 In the Linux kernel, the following vulnerability has been resolved: perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_dd
CVE-2025-38167 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: handle hdr_first_de() return value The hdr_first_de() function return
CVE-2025-38318 In the Linux kernel, the following vulnerability has been resolved: perf: arm-ni: Fix missing platform_set_drvdata() Add missing platform_set_drvda
CVE-2025-38168 In the Linux kernel, the following vulnerability has been resolved: perf: arm-ni: Unregister PMUs on probe failure When a resource allocation fails
CVE-2025-38169 In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP On system with S
CVE-2025-38170 In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Discard stale CPU state when handling SME traps The logic for han
CVE-2025-38319 In the Linux kernel, the following vulnerability has been resolved: drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg
CVE-2025-38297 In the Linux kernel, the following vulnerability has been resolved: PM: EM: Fix potential division-by-zero error in em_compute_costs() When the dev
CVE-2025-38298 In the Linux kernel, the following vulnerability has been resolved: EDAC/skx_common: Fix general protection fault After loading i10nm_edac (which a
CVE-2025-38299 In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY() ETDM2_IN_BE and ETDM
CVE-2025-38172 In the Linux kernel, the following vulnerability has been resolved: erofs: avoid using multiple devices with different type For multiple devices, b
CVE-2025-38173 In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/cesa - Handle zero-length skcipher requests Do not access rando
CVE-2025-38300 In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() Fix t
CVE-2025-38174 In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Do not double dequeue a configuration request Some of our devices
CVE-2025-38175 In the Linux kernel, the following vulnerability has been resolved: binder: fix yet another UAF in binder_devices Commit e77aff5528a18 ("binderfs:
CVE-2025-38176 In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in binderfs_evict_inode() Running 'stress-ng --binde
CVE-2025-38265 In the Linux kernel, the following vulnerability has been resolved: serial: jsm: fix NPE during jsm_uart_port_init No device was set which caused s
CVE-2025-38092 In the Linux kernel, the following vulnerability has been resolved: ksmbd: use list_first_entry_or_null for opinfo_get_list() The list_first_entry(
CVE-2025-38091 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check stream id dml21 wrapper to get plane_id [Why & How] Fix
CVE-2025-38082 In the Linux kernel, the following vulnerability has been resolved: gpio: virtuser: fix potential out-of-bound write If the caller wrote more chara
CVE-2025-38050 In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb foli
CVE-2025-38029 In the Linux kernel, the following vulnerability has been resolved: kasan: avoid sleepable page allocation from atomic context apply_to_pte_range()
CVE-2025-38076 In the Linux kernel, the following vulnerability has been resolved: alloc_tag: allocate percpu counters for module tags dynamically When a module g
CVE-2025-38051 In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifs_fill_dirent There is a race condition i
CVE-2025-38077 In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
CVE-2025-38078 In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix race of buffer access at PCM OSS layer The PCM OSS layer tries t
CVE-2025-38003 In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu read protection for procfs content When the procfs co
CVE-2025-38004 In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking for bcm_op runtime updates The CAN broadcast manager (CAN
CVE-2025-38031 In the Linux kernel, the following vulnerability has been resolved: padata: do not leak refcount in reorder_work A recent patch that addressed a UA
CVE-2025-38079 In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on s
CVE-2025-38052 In the Linux kernel, the following vulnerability has been resolved: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Syzbot reporte
CVE-2025-38053 In the Linux kernel, the following vulnerability has been resolved: idpf: fix null-ptr-deref in idpf_features_check idpf_features_check is used to
CVE-2025-38032 In the Linux kernel, the following vulnerability has been resolved: mr: consolidate the ipmr_can_free_table() checks. Guoyu Yin reported a splat in
CVE-2025-38054 In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Limit signal/freq counts in summary output functions The debugfs summ
CVE-2025-38055 In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq Currently, using
CVE-2025-38057 In the Linux kernel, the following vulnerability has been resolved: espintcp: fix skb leaks A few error paths are missing a kfree_skb.
CVE-2025-38058 In the Linux kernel, the following vulnerability has been resolved: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock ... or
CVE-2025-38033 In the Linux kernel, the following vulnerability has been resolved: x86/Kconfig: make CFI_AUTO_DEFAULT depend on !RUST or Rust >= 1.88 Calling core
CVE-2025-38059 In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid NULL pointer dereference if no valid csum tree [BUG] When trying r
CVE-2025-38034 In the Linux kernel, the following vulnerability has been resolved: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref btrfs_pre
CVE-2025-38035 In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: don't restore null sk_state_change queue->state_change is set as par
CVE-2025-38036 In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Perform early GT MMIO initialization to read GMDID VFs need to commu
CVE-2025-38037 In the Linux kernel, the following vulnerability has been resolved: vxlan: Annotate FDB data races The 'used' and 'updated' fields in the FDB entry
CVE-2025-38038 In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost set_boost is a
CVE-2025-38039 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled When
CVE-2025-38080 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Increase block_sequence array size [Why] It's possible to gene
CVE-2025-38060 In the Linux kernel, the following vulnerability has been resolved: bpf: copy_verifier_state() should copy 'loop_entry' field The bpf_verifier_stat
CVE-2025-38040 In the Linux kernel, the following vulnerability has been resolved: serial: mctrl_gpio: split disable_ms into sync and no_sync APIs The following s
CVE-2025-38061 In the Linux kernel, the following vulnerability has been resolved: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() H
CVE-2025-38062 In the Linux kernel, the following vulnerability has been resolved: genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie T
CVE-2025-38041 In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: h616: Reparent GPU clock during frequency changes The H616 manua
CVE-2025-38063 In the Linux kernel, the following vulnerability has been resolved: dm: fix unconditional IO throttle caused by REQ_PREFLUSH When a bio with REQ_PR
CVE-2025-38064 In the Linux kernel, the following vulnerability has been resolved: virtio: break and reset virtio devices on device_shutdown() Hongyu reported a h
CVE-2025-38042 In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_c
CVE-2025-38043 In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Set dma_mask for ffa devices Set dma_mask for FFA devices, o
CVE-2025-38044 In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: set device_caps for 417 The video_device for the MPEG encoder d
CVE-2025-38065 In the Linux kernel, the following vulnerability has been resolved: orangefs: Do not truncate file size 'len' is used to store the result of i_size
CVE-2025-38066 In the Linux kernel, the following vulnerability has been resolved: dm cache: prevent BUG_ON by blocking retries on failed device resumes A cache d
CVE-2025-38067 In the Linux kernel, the following vulnerability has been resolved: rseq: Fix segfault on registration when rseq_cs is non-zero The rseq_cs field i
CVE-2025-38068 In the Linux kernel, the following vulnerability has been resolved: crypto: lzo - Fix compression buffer overrun Unlike the decompression code, the
CVE-2025-38069 In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops Fix a k
CVE-2025-38045 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix debug actions order The order of actions taken for debug was
CVE-2025-38070 In the Linux kernel, the following vulnerability has been resolved: ASoC: sma1307: Add NULL check in sma1307_setting_loaded() All varibale allocate
CVE-2025-38071 In the Linux kernel, the following vulnerability has been resolved: x86/mm: Check return value from memblock_phys_alloc_range() At least with CONFI
CVE-2025-38072 In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Fix divide error in nd_label_data_init() If a faulty CXL memo
CVE-2025-38081 In the Linux kernel, the following vulnerability has been resolved: spi-rockchip: Fix register out of bounds access Do not write native chip select
CVE-2025-38047 In the Linux kernel, the following vulnerability has been resolved: x86/fred: Fix system hang during S4 resume with FRED enabled Upon a wakeup from
CVE-2025-38073 In the Linux kernel, the following vulnerability has been resolved: block: fix race between set_blocksize and read paths With the new large sector
CVE-2025-38074 In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: protect vq->log_used with vq->mutex The vhost-scsi completion path
CVE-2025-38048 In the Linux kernel, the following vulnerability has been resolved: virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN syzbot
CVE-2025-38075 In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix timeout on deleted connection NOPIN response timer may
CVE-2025-38350 In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain cla

Version: 6.14.0-28.28 2025-07-23 14:08:03 UTC

 linux (6.14.0-28.28) plucky; urgency=medium
 .
   * plucky/linux: 6.14.0-28.28 -proposed tracker (LP: #2117649)
 .
   * Packaging resync (LP: #1786013)
     - [Packaging] update annotations scripts
     - [Packaging] debian.master/dkms-versions -- update from kernel-versions
       (main/2025.07.14)
 .
   * Dell AIO backlight is not working, dell_uart_backlight module is missing
     (LP: #2083800)
     - [Config] enable CONFIG_DELL_UART_BACKLIGHT
 .
   * integrated I219-LM network adapter appears to be running too fast, causing
     synchronization issues when using the I219-LM PTP feature (LP: #2116072)
     - e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13
 .
   * Audio broken on ThinkPad X13s (LP: #2115898)
     - SAUCE: Revert "UBUNTU: SAUCE: Change: cracking sound fix"
 .
   * Ubuntu 24.04+ arm64: screen resolution fixed to 1024x768 with last kernel
     update (LP: #2115068)
     - [Config] Replace FB_HYPERV with DRM_HYPERV
 .
   * [SRU][HPE 24.04] Patch Request for HPE iLO7 VGA device for Gen12 Servers
     (LP: #2114516)
     - drm/mgag200: Added support for the new device G200eH5
 .
   * A process exiting with an open /dev/snapshot fd causes a NULL pointer
     dereference caught by ubuntu_stress_smoke_test:sut-scan (LP: #2113990)
     - libfs: export find_next_child()
     - efivarfs: support freeze/thaw
 .
   * [SRU] Add support for new hotkey of F9 on Thinkpad X9 (LP: #2115022)
     - platform/x86: thinkpad-acpi: Add support for new hotkey for camera
       shutter switch
 .
   * [SRU] Fix GT0: Engine reset when suspend on Intel LNL (LP: #2114697)
     - drm/xe/sched: stop re-submitting signalled jobs
 .
   * CVE-2025-38056
     - devres: Introduce devm_kmemdup_array()
     - ASoC: SOF: Intel: hda: Fix UAF when reloading module
 .
   * Handle IOMMU IVRS entries with mismatched UID on AMD Strix or newer
     platforms (LP: #2115174)
     - iommu/amd: Allow matching ACPI HID devices without matching UIDs
 .
   * [UBUNTU 22.04] kernel: Fix z17 elf platform recognition (LP: #2114450)
     - s390: Add z17 elf platform
 .
   * [UBUNTU 24.04] Kernel: Add CPUMF extended counter set for z17
     (LP: #2114258)
     - s390/cpumf: Update CPU Measurement facility extended counter set support
 .
   * Plucky update: v6.14.8 upstream stable release (LP: #2115266)
     - arm64: dts: rockchip: Assign RT5616 MCLK rate on rk3588-friendlyelec-
       cm3588
     - fs/xattr.c: fix simple_xattr_list to always include security.* xattrs
     - drivers/platform/x86/amd: pmf: Check for invalid sideloaded Smart PC
       Policies
     - drivers/platform/x86/amd: pmf: Check for invalid Smart PC Policies
     - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE
     - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive
       drivers
     - arm64: dts: rockchip: fix Sige5 RTC interrupt pin
     - riscv: dts: sophgo: fix DMA data-width configuration for CV18xx
     - binfmt_elf: Move brk for static PIE even if ASLR disabled
     - platform/x86/amd/pmc: Declare quirk_spurious_8042 for MECHREVO Wujie
       14XA (GX4HRXL)
     - platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection
     - arm64: dts: imx8mp-var-som: Fix LDO5 shutdown causing SD card timeout
     - cgroup/cpuset: Extend kthread_is_per_cpu() check to all
       PF_NO_SETAFFINITY tasks
     - tracing: fprobe: Fix RCU warning message in list traversal
     - tracing: probes: Fix a possible race in trace_probe_log APIs
     - tpm: tis: Double the timeout B to 4s
     - iio: adc: ad7606: move the software mode configuration
     - iio: adc: ad7606: move software functions into common file
     - HID: thrustmaster: fix memory leak in thrustmaster_interrupts()
     - spi: loopback-test: Do not split 1024-byte hexdumps
     - Bluetooth: MGMT: Fix MGMT_OP_ADD_DEVICE invalid device flags
     - drm/meson: Use 1000ULL when operating with mode->clock
     - tools/net/ynl: ethtool: fix crash when Hardware Clock info is missing
     - tests/ncdevmem: Fix double-free of queue array
     - net: mctp: Ensure keys maintain only one ref to corresponding dev
     - ALSA: seq: Fix delivery of UMP events to group ports
     - ALSA: ump: Fix a typo of snd_ump_stream_msg_device_info
     - net: cadence: macb: Fix a possible deadlock in macb_halt_tx.
     - net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING
     - nvme-pci: make nvme_pci_npages_prp() __always_inline
     - nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable
     - ALSA: sh: SND_AICA should depend on SH_DMA_API
     - net: dsa: b53: prevent standalone from trying to forward to other ports
     - vsock/test: Fix occasional failure in SIOCOUTQ tests
     - qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd()
     - octeontx2-pf: Fix ethtool support for SDP representors
     - drm/xe: Save CTX_TIMESTAMP mmio value instead of LRC value
     - netlink: specs: tc: fix a couple of attribute names
     - netlink: specs: tc: all actions are indexed arrays
     - octeontx2-pf: macsec: Fix incorrect max transmit size in TX secy
     - net: ethernet: mtk_eth_soc: fix typo for declaration MT7988 ESW
       capability
     - octeontx2-af: Fix CGX Receive counters
     - octeontx2-pf: Do not reallocate all ntuple filters
     - tsnep: fix timestamping with a stacked DSA driver
     - ublk: fix dead loop when canceling io command
     - NFSv4/pnfs: Reset the layout state after a layoutreturn
     - dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when
       interrupted"
     - Revert "kbuild, rust: use -fremap-path-prefix to make paths relative"
     - udf: Make sure i_lenExtents is uptodate on inode eviction
     - HID: amd_sfh: Fix SRA sensor when it's the only sensor
     - LoongArch: Prevent cond_resched() occurring within kernel-fpu
     - LoongArch: Move __arch_cpu_idle() to .cpuidle.text section
     - LoongArch: Save and restore CSR.CNTC for hibernation
     - LoongArch: Fix MAX_REG_OFFSET calculatio

Source diff to previous version
1786013 Packaging resync
2083800 Dell AIO backlight is not working, dell_uart_backlight module is missing
2116072 integrated I219-LM network adapter appears to be running too fast, causing synchronization issues when using the I219-LM PTP feature
2115898 Audio broken on ThinkPad X13s
2115068 Ubuntu 24.04+ arm64: screen resolution fixed to 1024x768 with last kernel update
2114516 [SRU][HPE 24.04] Patch Request for HPE iLO7 VGA device for Gen12 Servers
2113990 A process exiting with an open /dev/snapshot fd causes a NULL pointer dereference caught by ubuntu_stress_smoke_test:sut-scan
2114450 [UBUNTU 22.04] kernel: Fix z17 elf platform recognition
2114258 [UBUNTU 24.04] Kernel: Add CPUMF extended counter set for z17
2115266 Plucky update: v6.14.8 upstream stable release
2115252 Plucky update: v6.14.7 upstream stable release
2113992 Creating a VXLAN interface with a Fan mapping causes a NULL pointer dereference caught by ubuntu_fan_smoke_test:sut-scan
2117494 [Regression Updates] \
2116061 [UBUNTU 25.04] lszcrypt output shows no cards because ap module has to be loaded manually
CVE-2025-38056 In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix UAF when reloading module hda_generic_machine_select
CVE-2025-38008 In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: fix race condition in unaccepted memory handling The page alloca
CVE-2025-38014 In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper The idxd_clean
CVE-2025-38015 In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc Memory al
CVE-2025-38005 In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma: Add missing locking Recent kernels complain about a mis
CVE-2025-38009 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: disable napi on driver removal A warning on driver removal started
CVE-2025-38010 In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking The current i
CVE-2025-38011 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: csa unmap use uninterruptible lock After process exit to unmap csa
CVE-2025-38016 In the Linux kernel, the following vulnerability has been resolved: HID: bpf: abort dispatch if device destroyed The current HID bpf implementation
CVE-2025-38012 In the Linux kernel, the following vulnerability has been resolved: sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator BPF program
CVE-2025-38018 In the Linux kernel, the following vulnerability has been resolved: net/tls: fix kernel panic when alloc_page failed We cannot set frag_list to NUL
CVE-2025-38019 In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices The dr
CVE-2025-38013 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request Ma
CVE-2025-38002 In the Linux kernel, the following vulnerability has been resolved: io_uring/fdinfo: grab ctx->uring_lock around io_uring_show_fdinfo() Not everyth
CVE-2025-38027 In the Linux kernel, the following vulnerability has been resolved: regulator: max20086: fix invalid memory access max20086_parse_regulators_dt() c
CVE-2025-38020 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Disable MACsec offload for uplink representor profile MACsec offload
CVE-2025-38021 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check of pipe_ctx->plane_state for update_dchubp_dpp
CVE-2025-38006 In the Linux kernel, the following vulnerability has been resolved: net: mctp: Don't access ifa_index when missing In mctp_dump_addrinfo, ifa_index
CVE-2025-37992 In the Linux kernel, the following vulnerability has been resolved: net_sched: Flush gso_skb list too during ->change() Previously, when reducing a
CVE-2025-38022 In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
CVE-2025-38028 In the Linux kernel, the following vulnerability has been resolved: NFS/localio: Fix a race in nfs_local_open_fh() Once the clp->cl_uuid.lock has b
CVE-2025-38023 In the Linux kernel, the following vulnerability has been resolved: nfs: handle failure of nfs_get_lock_context in unlock path When memory is insuf
CVE-2025-38007 In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Add NULL check in uclogic_input_configured() devm_kasprintf() ret
CVE-2025-38024 In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug Call Trace: <T
CVE-2025-38025 In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7606: check for NULL before calling sw_mode_config() Check that the
CVE-2025-37963 In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users Support fo
CVE-2025-37948 In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs A malicious BP
CVE-2025-37994 In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix NULL pointer access This patch ensures that
CVE-2025-37967 In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix deadlock This patch introduces the ucsi_con_
CVE-2025-37950 In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix panic in failed foilio allocation commit 7e119cff9d0a ("ocfs2: conve
CVE-2025-37995 In the Linux kernel, the following vulnerability has been resolved: module: ensure that kobject_put() is safe for module type kobjects In 'lookup_o
CVE-2025-37960 In the Linux kernel, the following vulnerability has been resolved: memblock: Accept allocated memory before use in memblock_double_array() When in
CVE-2025-37996 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort() Commit fce88
CVE-2025-37949 In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track req lifetime Marek reported seeing a NULL pointer fau
CVE-2025-37954 In the Linux kernel, the following vulnerability has been resolved: smb: client: Avoid race in open_cached_dir with lease breaks A pre-existing val
CVE-2025-37965 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix invalid context error in dml helper [Why] "BUG: sleeping f
CVE-2025-37951 In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Add job to pending list if the reset was skipped When a CL/CSD job tim
CVE-2025-37968 In the Linux kernel, the following vulnerability has been resolved: iio: light: opt3001: fix deadlock due to concurrent flag access The threaded IR
CVE-2025-37969 In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo Preven
CVE-2025-37970 In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo Prevent st_ls
CVE-2025-37966 In the Linux kernel, the following vulnerability has been resolved: riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL When userspace does PR_S
CVE-2025-37957 In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception Previously, commit e
CVE-2025-37958 In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix dereferencing invalid pmd migration entry When migrating a
CVE-2025-37964 In the Linux kernel, the following vulnerability has been resolved: x86/mm: Eliminate window where TLB flushes may be inadvertently skipped tl;dr:
CVE-2025-37971 In the Linux kernel, the following vulnerability has been resolved: staging: bcm2835-camera: Initialise dev in v4l2_dev Commit 42a2f6664e18 ("stagi
CVE-2025-37972 In the Linux kernel, the following vulnerability has been resolved: Input: mtk-pmic-keys - fix possible null pointer dereference In mtk_pmic_keys_p
CVE-2025-37959 In the Linux kernel, the following vulnerability has been resolved: bpf: Scrub packet on bpf_redirect_peer When bpf_redirect_peer is used to redire
CVE-2025-37961 In the Linux kernel, the following vulnerability has been resolved: ipvs: fix uninit-value for saddr in do_output_route4 syzbot reports for uninit-
CVE-2025-37993 In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe Th
CVE-2025-37955 In the Linux kernel, the following vulnerability has been resolved: virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() The selftests
CVE-2025-37962 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leak in parse_lease_state() The previous patch that added bou
CVE-2025-37998 In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix unsafe attribute parsing in output_userspace() This patch repl
CVE-2025-37952 In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix UAF in __close_file_table_ids A use-after-free is possible if one th
CVE-2025-37947 In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by validating *pos ksmbd_vfs_stream_
CVE-2025-37956 In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent rename with empty string Client can send empty newname string to
CVE-2025-37973 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentati
CVE-2025-37999 In the Linux kernel, the following vulnerability has been resolved: fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio() If bio_ad
CVE-2025-38083 In the Linux kernel, the following vulnerability has been resolved: net_sched: prio: fix a race in prio_tune() Gerrard Tai reported a race conditio

Version: 6.14.0-26.26 2025-07-11 17:08:51 UTC

 linux (6.14.0-26.26) plucky; urgency=medium
 .
   * plucky/linux: 6.14.0-26.26 -proposed tracker (LP: #2116604)
 .
   * Packaging resync (LP: #1786013)
     - [Packaging] update annotations scripts
     - [Packaging] debian.master/dkms-versions -- update from kernel-versions
       (main/2025.07.14)
 .
   * Dell AIO backlight is not working, dell_uart_backlight module is missing
     (LP: #2083800)
     - [Config] enable CONFIG_DELL_UART_BACKLIGHT
 .
   * integrated I219-LM network adapter appears to be running too fast, causing
     synchronization issues when using the I219-LM PTP feature (LP: #2116072)
     - e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13
 .
   * Audio broken on ThinkPad X13s (LP: #2115898)
     - SAUCE: Revert "UBUNTU: SAUCE: Change: cracking sound fix"
 .
   * Ubuntu 24.04+ arm64: screen resolution fixed to 1024x768 with last kernel
     update (LP: #2115068)
     - [Config] Replace FB_HYPERV with DRM_HYPERV
 .
   * [SRU][HPE 24.04] Patch Request for HPE iLO7 VGA device for Gen12 Servers
     (LP: #2114516)
     - drm/mgag200: Added support for the new device G200eH5
 .
   * A process exiting with an open /dev/snapshot fd causes a NULL pointer
     dereference caught by ubuntu_stress_smoke_test:sut-scan (LP: #2113990)
     - libfs: export find_next_child()
     - efivarfs: support freeze/thaw
 .
   * [SRU] Add support for new hotkey of F9 on Thinkpad X9 (LP: #2115022)
     - platform/x86: thinkpad-acpi: Add support for new hotkey for camera
       shutter switch
 .
   * [SRU] Fix GT0: Engine reset when suspend on Intel LNL (LP: #2114697)
     - drm/xe/sched: stop re-submitting signalled jobs
 .
   * CVE-2025-38056
     - devres: Introduce devm_kmemdup_array()
     - ASoC: SOF: Intel: hda: Fix UAF when reloading module
 .
   * Handle IOMMU IVRS entries with mismatched UID on AMD Strix or newer
     platforms (LP: #2115174)
     - iommu/amd: Allow matching ACPI HID devices without matching UIDs
 .
   * [UBUNTU 22.04] kernel: Fix z17 elf platform recognition (LP: #2114450)
     - s390: Add z17 elf platform
 .
   * [UBUNTU 24.04] Kernel: Add CPUMF extended counter set for z17
     (LP: #2114258)
     - s390/cpumf: Update CPU Measurement facility extended counter set support
 .
   * Plucky update: v6.14.8 upstream stable release (LP: #2115266)
     - arm64: dts: rockchip: Assign RT5616 MCLK rate on rk3588-friendlyelec-
       cm3588
     - fs/xattr.c: fix simple_xattr_list to always include security.* xattrs
     - drivers/platform/x86/amd: pmf: Check for invalid sideloaded Smart PC
       Policies
     - drivers/platform/x86/amd: pmf: Check for invalid Smart PC Policies
     - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE
     - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive
       drivers
     - arm64: dts: rockchip: fix Sige5 RTC interrupt pin
     - riscv: dts: sophgo: fix DMA data-width configuration for CV18xx
     - binfmt_elf: Move brk for static PIE even if ASLR disabled
     - platform/x86/amd/pmc: Declare quirk_spurious_8042 for MECHREVO Wujie
       14XA (GX4HRXL)
     - platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection
     - arm64: dts: imx8mp-var-som: Fix LDO5 shutdown causing SD card timeout
     - cgroup/cpuset: Extend kthread_is_per_cpu() check to all
       PF_NO_SETAFFINITY tasks
     - tracing: fprobe: Fix RCU warning message in list traversal
     - tracing: probes: Fix a possible race in trace_probe_log APIs
     - tpm: tis: Double the timeout B to 4s
     - iio: adc: ad7606: move the software mode configuration
     - iio: adc: ad7606: move software functions into common file
     - HID: thrustmaster: fix memory leak in thrustmaster_interrupts()
     - spi: loopback-test: Do not split 1024-byte hexdumps
     - Bluetooth: MGMT: Fix MGMT_OP_ADD_DEVICE invalid device flags
     - drm/meson: Use 1000ULL when operating with mode->clock
     - tools/net/ynl: ethtool: fix crash when Hardware Clock info is missing
     - tests/ncdevmem: Fix double-free of queue array
     - net: mctp: Ensure keys maintain only one ref to corresponding dev
     - ALSA: seq: Fix delivery of UMP events to group ports
     - ALSA: ump: Fix a typo of snd_ump_stream_msg_device_info
     - net: cadence: macb: Fix a possible deadlock in macb_halt_tx.
     - net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING
     - nvme-pci: make nvme_pci_npages_prp() __always_inline
     - nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable
     - ALSA: sh: SND_AICA should depend on SH_DMA_API
     - net: dsa: b53: prevent standalone from trying to forward to other ports
     - vsock/test: Fix occasional failure in SIOCOUTQ tests
     - qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd()
     - octeontx2-pf: Fix ethtool support for SDP representors
     - drm/xe: Save CTX_TIMESTAMP mmio value instead of LRC value
     - netlink: specs: tc: fix a couple of attribute names
     - netlink: specs: tc: all actions are indexed arrays
     - octeontx2-pf: macsec: Fix incorrect max transmit size in TX secy
     - net: ethernet: mtk_eth_soc: fix typo for declaration MT7988 ESW
       capability
     - octeontx2-af: Fix CGX Receive counters
     - octeontx2-pf: Do not reallocate all ntuple filters
     - tsnep: fix timestamping with a stacked DSA driver
     - ublk: fix dead loop when canceling io command
     - NFSv4/pnfs: Reset the layout state after a layoutreturn
     - dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when
       interrupted"
     - Revert "kbuild, rust: use -fremap-path-prefix to make paths relative"
     - udf: Make sure i_lenExtents is uptodate on inode eviction
     - HID: amd_sfh: Fix SRA sensor when it's the only sensor
     - LoongArch: Prevent cond_resched() occurring within kernel-fpu
     - LoongArch: Move __arch_cpu_idle() to .cpuidle.text section
     - LoongArch: Save and restore CSR.CNTC for hibernation
     - LoongArch: Fix MAX_REG_OFFSET calculatio

1786013 Packaging resync
2083800 Dell AIO backlight is not working, dell_uart_backlight module is missing
2116072 integrated I219-LM network adapter appears to be running too fast, causing synchronization issues when using the I219-LM PTP feature
2115898 Audio broken on ThinkPad X13s
2115068 Ubuntu 24.04+ arm64: screen resolution fixed to 1024x768 with last kernel update
2114516 [SRU][HPE 24.04] Patch Request for HPE iLO7 VGA device for Gen12 Servers
2113990 A process exiting with an open /dev/snapshot fd causes a NULL pointer dereference caught by ubuntu_stress_smoke_test:sut-scan
2114450 [UBUNTU 22.04] kernel: Fix z17 elf platform recognition
2114258 [UBUNTU 24.04] Kernel: Add CPUMF extended counter set for z17
2115266 Plucky update: v6.14.8 upstream stable release
2115252 Plucky update: v6.14.7 upstream stable release
2113992 Creating a VXLAN interface with a Fan mapping causes a NULL pointer dereference caught by ubuntu_fan_smoke_test:sut-scan
2116061 [UBUNTU 25.04] lszcrypt output shows no cards because ap module has to be loaded manually
CVE-2025-38056 In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix UAF when reloading module hda_generic_machine_select
CVE-2025-38008 In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: fix race condition in unaccepted memory handling The page alloca
CVE-2025-38014 In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper The idxd_clean
CVE-2025-38015 In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc Memory al
CVE-2025-38005 In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma: Add missing locking Recent kernels complain about a mis
CVE-2025-38009 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: disable napi on driver removal A warning on driver removal started
CVE-2025-38010 In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking The current i
CVE-2025-38011 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: csa unmap use uninterruptible lock After process exit to unmap csa
CVE-2025-38016 In the Linux kernel, the following vulnerability has been resolved: HID: bpf: abort dispatch if device destroyed The current HID bpf implementation
CVE-2025-38012 In the Linux kernel, the following vulnerability has been resolved: sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator BPF program
CVE-2025-38018 In the Linux kernel, the following vulnerability has been resolved: net/tls: fix kernel panic when alloc_page failed We cannot set frag_list to NUL
CVE-2025-38019 In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices The dr
CVE-2025-38013 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request Ma
CVE-2025-38002 In the Linux kernel, the following vulnerability has been resolved: io_uring/fdinfo: grab ctx->uring_lock around io_uring_show_fdinfo() Not everyth
CVE-2025-38027 In the Linux kernel, the following vulnerability has been resolved: regulator: max20086: fix invalid memory access max20086_parse_regulators_dt() c
CVE-2025-38020 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Disable MACsec offload for uplink representor profile MACsec offload
CVE-2025-38021 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check of pipe_ctx->plane_state for update_dchubp_dpp
CVE-2025-38006 In the Linux kernel, the following vulnerability has been resolved: net: mctp: Don't access ifa_index when missing In mctp_dump_addrinfo, ifa_index
CVE-2025-37992 In the Linux kernel, the following vulnerability has been resolved: net_sched: Flush gso_skb list too during ->change() Previously, when reducing a
CVE-2025-38022 In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
CVE-2025-38028 In the Linux kernel, the following vulnerability has been resolved: NFS/localio: Fix a race in nfs_local_open_fh() Once the clp->cl_uuid.lock has b
CVE-2025-38023 In the Linux kernel, the following vulnerability has been resolved: nfs: handle failure of nfs_get_lock_context in unlock path When memory is insuf
CVE-2025-38007 In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Add NULL check in uclogic_input_configured() devm_kasprintf() ret
CVE-2025-38024 In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug Call Trace: <T
CVE-2025-38025 In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7606: check for NULL before calling sw_mode_config() Check that the
CVE-2025-37963 In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users Support fo
CVE-2025-37948 In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs A malicious BP
CVE-2025-37994 In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix NULL pointer access This patch ensures that
CVE-2025-37967 In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix deadlock This patch introduces the ucsi_con_
CVE-2025-37950 In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix panic in failed foilio allocation commit 7e119cff9d0a ("ocfs2: conve
CVE-2025-37995 In the Linux kernel, the following vulnerability has been resolved: module: ensure that kobject_put() is safe for module type kobjects In 'lookup_o
CVE-2025-37960 In the Linux kernel, the following vulnerability has been resolved: memblock: Accept allocated memory before use in memblock_double_array() When in
CVE-2025-37996 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort() Commit fce88
CVE-2025-37949 In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track req lifetime Marek reported seeing a NULL pointer fau
CVE-2025-37954 In the Linux kernel, the following vulnerability has been resolved: smb: client: Avoid race in open_cached_dir with lease breaks A pre-existing val
CVE-2025-37965 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix invalid context error in dml helper [Why] "BUG: sleeping f
CVE-2025-37951 In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Add job to pending list if the reset was skipped When a CL/CSD job tim
CVE-2025-37968 In the Linux kernel, the following vulnerability has been resolved: iio: light: opt3001: fix deadlock due to concurrent flag access The threaded IR
CVE-2025-37969 In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo Preven
CVE-2025-37970 In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo Prevent st_ls
CVE-2025-37966 In the Linux kernel, the following vulnerability has been resolved: riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL When userspace does PR_S
CVE-2025-37957 In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception Previously, commit e
CVE-2025-37958 In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix dereferencing invalid pmd migration entry When migrating a
CVE-2025-37964 In the Linux kernel, the following vulnerability has been resolved: x86/mm: Eliminate window where TLB flushes may be inadvertently skipped tl;dr:
CVE-2025-37971 In the Linux kernel, the following vulnerability has been resolved: staging: bcm2835-camera: Initialise dev in v4l2_dev Commit 42a2f6664e18 ("stagi
CVE-2025-37972 In the Linux kernel, the following vulnerability has been resolved: Input: mtk-pmic-keys - fix possible null pointer dereference In mtk_pmic_keys_p
CVE-2025-37959 In the Linux kernel, the following vulnerability has been resolved: bpf: Scrub packet on bpf_redirect_peer When bpf_redirect_peer is used to redire
CVE-2025-37961 In the Linux kernel, the following vulnerability has been resolved: ipvs: fix uninit-value for saddr in do_output_route4 syzbot reports for uninit-
CVE-2025-37993 In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe Th
CVE-2025-37955 In the Linux kernel, the following vulnerability has been resolved: virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() The selftests
CVE-2025-37962 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leak in parse_lease_state() The previous patch that added bou
CVE-2025-37998 In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix unsafe attribute parsing in output_userspace() This patch repl
CVE-2025-37952 In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix UAF in __close_file_table_ids A use-after-free is possible if one th
CVE-2025-37947 In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by validating *pos ksmbd_vfs_stream_
CVE-2025-37956 In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent rename with empty string Client can send empty newname string to
CVE-2025-37973 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentati
CVE-2025-37999 In the Linux kernel, the following vulnerability has been resolved: fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio() If bio_ad
CVE-2025-38083 In the Linux kernel, the following vulnerability has been resolved: net_sched: prio: fix a race in prio_tune() Gerrard Tai reported a race conditio



About   -   Send Feedback to @ubuntu_updates