UbuntuUpdates.org

Package "linux-libc-dev"

This package belongs to a PPA: Canonical Kernel Team

Name: linux-libc-dev

Description:

Linux Kernel Headers for development
Latest version: 6.17.0-24.24
Release: questing (25.10)
Level: base
Repository: main
Head package: linux

Links

All versions of this package
Bug fixes

Repository home page

Download "linux-libc-dev"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "linux-libc-dev" in Questing

Repository Area Version
base main 6.17.0-5.5
security main 6.17.0-22.22
updates main 6.17.0-22.22
proposed main 6.17.0-22.22

Changelog

Version: 6.17.0-24.24 2026-04-12 05:09:01 UTC

 linux (6.17.0-24.24) questing; urgency=medium
 .
   * questing/linux: 6.17.0-24.24 -proposed tracker (LP: #2148025)
 .
   * Remount ext4 to readonly with data=journal mode may dump call trace
     (LP: #2147400)
     - ext4: fix stale xarray tags after writeback
 .
   * System hangs during stress-ng stack test (LP: #2137755)
     - mm, swap: fix swap cache index error when retrying reclaim
 .
   * BUG: kernel NULL pointer dereference when starting VM inside a container
     (LP: #2147374)
     - apparmor: fix NULL pointer dereference in __unix_needs_revalidation
 .
   * BUG: kernel NULL pointer dereference in amdgpu (LP: #2144577)
     - drm/amdgpu: validate the flush_gpu_tlb_pasid()
     - drm/amdgpu: Fix validating flush_gpu_tlb_pasid()
 .
   * Jellyfin Desktop Flatpak doesn't work with the current AppArmor profile
     (LP: #2142956)
     - SAUCE: apparmor5.0.0 [53/57]: apparmor: fix af_unix local addr mediation
       binding
 .
   * Fine grained network mediation was broken if v8/v9 was used (LP: #2142860)
     - SAUCE: apparmor5.0.0 [29/57]: apparmor: fix fine grained inet mediation
       sock_file_perm
 .
   * Enable CirrusLogic audio solution CS42L45+CS35L63 on AMD and Intel PTL
     (LP: #2143104)
     - ASoC: amd: acp: Add ACP7.0 match entries for cs35l56 and cs42l43
     - ASoC: amd: acp: soc-acpi: add is_device_rt712_vb() helper
     - ASoC: amd: acp: Sort match table into most specific first
     - ASoC: amd: acp: Rename Cirrus Logic component match entries to include
       link and uid
     - ASoC: amd: acp: Sort Cirrus Logic match entries
     - ASoC: amd: acp: Add ACP7.0 match entries for Cirrus Logic parts
     - ASoC: amd: acp: Fix Kconfig dependencies for
       SND_SOC_ACPI_AMD_SDCA_QUIRKS
     - [Config] Enable SND_SOC_ACPI_AMD_SDCA_QUIRKS
     - soundwire: amd: add clock init control function
     - soundwire: amd: refactor bandwidth calculation logic
 .
   * CVE-2026-23112
     - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
 .
   * Canonical Kmod 2025 key rotation (LP: #2147447)
     - [Packaging] ubuntu-compatible-signing -- make Ubuntu-Compatible-Signing
       extensible
     - [Packaging] ubuntu-compatible-signing -- allow consumption of positive
       certs
     - [Packaging] ubuntu-compatible-signing -- report the livepatch:2025 key
     - [Config] prepare for Canonical Kmod key rotation
     - [Packaging] ubuntu-compatible-signing -- report the kmod:2025 key
     - [Packaging] ensure our cert rollups are always fresh
 .
   * Questing update: upstream stable patchset 2026-03-24 (LP: #2146193)
     - mptcp: fallback earlier on simult connection
     - mm: consider non-anon swap cache folios in folio_expected_ref_count()
     - mptcp: ensure context reset on disconnect()
     - wifi: mac80211: Discard Beacon frames to non-broadcast address
     - net: phy: mediatek: fix nvmem cell reference leak in
       mt798x_phy_calibration
     - drm/amdgpu: Forward VMID reservation errors
     - sched/fair: Small cleanup to sched_balance_newidle()
     - sched/fair: Small cleanup to update_newidle_cost()
     - sched/fair: Proportional newidle balance
     - Revert "iommu/amd: Skip enabling command/event buffers for kdump"
     - sched/proxy: Yield the donor task
     - drm: nova: depend on CONFIG_64BIT
     - sched/core: Add comment explaining force-idle vruntime snapshots
     - mm/huge_memory: merge uniform_split_supported() and
       non_uniform_split_supported()
     - drm/amdgpu: don't attach the tlb fence for SI
     - sched_ext: fix uninitialized ret on alloc_percpu() failure
     - idpf: fix LAN memory regions command on some NVMs
     - Bluetooth: MGMT: report BIS capability flags in supported settings
     - powerpc/tools: drop `-o pipefail` in gcc check scripts
     - net: airoha: Move net_devs registration in a dedicated routine
     - net: wangxun: move PHYLINK dependency
     - platform/x86/intel/pmt: Fix kobject memory leak on init failure
     - bng_en: update module description
     - mcb: Add missing modpost build support
     - net: mdio: rtl9300: use scoped for loops
     - tools/sched_ext: fix scx_show_state.py for scx_root change
     - platform/x86/intel/pmt/discovery: use valid device pointer in
       dev_err_probe
     - net: fib: restore ECMP balance from loopback
     - RDMA/mana_ib: check cqe length for kernel CQs
     - drm/gem-shmem: Fix the MODULE_LICENSE() string
     - kunit: Enforce task execution in {soft,hard}irq contexts
     - ublk: don't pass q_id to ublk_queue_cmd_buf_size()
     - ublk: implement NUMA-aware memory allocation
     - ublk: scan partition in async way
     - drm/xe/guc: READ/WRITE_ONCE g2h_fence->done
     - IB/rxe: Fix missing umem_odp->umem_mutex unlock on error path
     - hisi_acc_vfio_pci: Add .match_token_uuid callback in
       hisi_acc_vfio_pci_migrn_ops
     - mm, swap: do not perform synchronous discard during allocation
     - clk: qcom: mmcc-sdm660: Add missing MDSS reset
     - clk: qcom: Fix SM_VIDEOCC_6350 dependencies
     - [Config] set CONFIG_SM_GCC_6350, CONFIG_SM_VIDEOCC_6350 to '-'
     - clk: qcom: Fix dependencies of QCS_{DISP,GPU,VIDEO}CC_615
     - [Config] set CONFIG_QCS_{DISP,GPU,VIDEO}CC_615 to '-'
     - arm64: dts: ti: k3-am62d2-evm: Fix regulator properties
     - arm64: dts: ti: k3-am62d2-evm: Fix PMIC padconfig
     - arm64: dts: st: Add memory-region-names property for stm32mp257f-ev1
     - arm64: dts: qcom: sm6350: Fix wrong order of freq-table-hz for UFS
     - NFSD: Make FILE_SYNC WRITEs comply with spec
     - nvmet: pci-epf: move DMA initialization to EPC init callback
     - PCI: dwc: Add support for ELBI resource mapping
     - PCI: meson: Fix parsing the DBI register region
     - power: supply: max77705: Fix potential IRQ chip conflict when probing
       two devices
     - media: iris: Refine internal buffer reconfiguration logic for resolution
       change
     - LoongArch: Fix arch_dup_task_struct() for CONFIG_RANDSTRUCT
     - mm/damon/tests/co
Source diff to previous version
2147400 Remount ext4 to readonly with data=journal mode may dump call trace
2137755 System hangs during stress-ng stack test
2147374 BUG: kernel NULL pointer dereference when starting VM inside a container
2144577 BUG: kernel NULL pointer dereference in amdgpu
2142956 Jellyfin Desktop Flatpak doesn't work with the current AppArmor profile
2142860 Fine grained network mediation was broken if v8/v9 was used
2147447 Canonical Kmod 2025 key rotation
2146193 Questing update: upstream stable patchset 2026-03-24
2145171 [SRU] MIPI camera is not working after upgrading to 6.17-oem
2144060 ADATA SU680 causes repeated SATA resets and I/O errors on Ubuntu unless link power management is forced to max_performance
2144637 [SRU] Fix for i915 PSR issue on SDC panels on Intel PTL
2143100 Got black screen after clicked logout button
2144522 Dell Machines cannot boot into OS with 6.17.0-1012-oem
2143083 [SRU] Duplicated entries in /proc/\u003cpid\u003e/mountinfo
2144380 macvlan: observe an RCU grace period in macvlan_common_newlink() error path
CVE-2026-23112 In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec nvmet_tcp_build_pdu_i
CVE-2025-71141 In the Linux kernel, the following vulnerability has been resolved: drm/tilcdc: Fix removal actions in case of failed probe The drm_kms_helper_poll
CVE-2025-71090 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd_file reference leak in nfsd4_add_rdaccess_to_wrdeleg() nfsd4_add
CVE-2025-71139 In the Linux kernel, the following vulnerability has been resolved: kernel/kexec: fix IMA when allocation happens in CMA area *** Bug description *
CVE-2025-71152 In the Linux kernel, the following vulnerability has been resolved: net: dsa: properly keep track of conduit reference Problem description --------
CVE-2025-71142 In the Linux kernel, the following vulnerability has been resolved: cpuset: fix warning when disabling remote partition A warning was triggered as
CVE-2025-71155 In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix gmap_helper_zap_one_page() again A few checks were missing in gm
CVE-2025-71134 In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: change all pageblocks migrate type on coalescing When a page is
CVE-2026-23394 In the Linux kernel, the following vulnerability has been resolved: af_unix: Give up GC if MSG_PEEK intervened. Igor Ushakov reported that GC purge
CVE-2026-23274 In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels IDLETIMER revi
CVE-2026-23209 In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlan_common_newlink() valis provided a nice r
CVE-2026-23351 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Yiming Qian r
CVE-2026-23231 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() nf_tables_addc

Version: 6.17.0-22.22 2026-03-13 14:09:18 UTC

 linux (6.17.0-22.22) questing; urgency=medium
 .
   * questing/linux: 6.17.0-22.22 -proposed tracker (LP: #2143428)
 .
   * Questing preinstalled server fails to boot on QCS8300 based boards
     (LP: #2134400)
     - [Config] move qcom interconnect/pinctrl/gcc as built-in for QCS8300
 .
   * TBT call trace while connecting TBT4 monitor on TBT5 port (LP: #2137613)
     - SAUCE: thunderbolt: log path activation failures without WARN backtraces
 .
   * efi: Fix swapped arguments to bsearch() in efi_status_to_*() SAUCE patch
     (LP: #2141276)
     - SAUCE efi: Fix swapped arguments to bsearch() in efi_status_to_*()
 .
   * [SRU]Fix xe GPU suspend/resume crash on Battlemage (LP: #2141377)
     - drm/xe: make xe_gt_idle_disable_c6() handle the forcewake internally
 .
   * Accumulative updates for Intel PTL-H component enabling PV rev3.0
     (LP: #2137272)
     - drm/i915/display: Optimize panel power-on wait time
     - HID: intel-ish-hid: Use dedicated unbound workqueues to prevent resume
       blocking
     - drm/xe/guc: Recommend GUC v70.49.4 for PTL, BMG
     - HID: Intel-thc-hid: Intel-thc: Use str_true_false() helper
     - HID: intel-thc-hid: intel-quicki2c: support ACPI config for advanced
       features
     - usb: typec: ucsi: Add SET_POWER_LEVEL UCSI command to debugfs
 .
   * Questing update: upstream stable patchset 2026-03-04 (LP: #2142250)
     - bpf: Fix sleepable context for async callbacks
     - bpf: extract generic helper from process_timer_func()
     - bpf: Fix handling maps with no BTF and non-constant offsets for the
       bpf_wq
     - irqchip: Drop leftover brackets
     - irqchip: Pass platform device to platform drivers
     - arm64: dts: exynos: gs101: fix clock module unit reg sizes
     - ice: move service task start out of ice_init_pf()
     - ice: move ice_init_interrupt_scheme() prior ice_init_pf()
     - ice: ice_init_pf: destroy mutexes and xarrays on memory alloc failure
     - ice: move udp_tunnel_nic and misc IRQ setup into ice_init_pf()
     - ice: move ice_init_pf() out of ice_init_dev()
     - ice: extract ice_init_dev() from ice_init()
     - ice: move ice_deinit_dev() to the end of deinit paths
     - ice: remove duplicate call to ice_deinit_hw() on error paths
     - arm64: dts: qcom: lemans: Add missing quirk for HS only USB controller
     - tools/nolibc: x86: fix section mismatch caused by asm "mem*" functions
     - arm64: dts: ti: k3-j784s4: Fix I2C pinmux pull configuration
     - wifi: ath12k: enforce vdev limit in ath12k_mac_vdev_create()
     - ARM: dts: am33xx: Add missing serial console speed
     - arm64: tegra: Add pinctrl definitions for pcie-ep nodes
     - arm64: mm: Move KPTI helpers to mmu.c
     - arm64/mm: Allow __create_pgd_mapping() to propagate pgtable_alloc()
       errors
     - pwm: Simplify printf to emit chip->npwm in $debugfs/pwm
     - pwm: Use %u to printf unsigned int pwm_chip::npwm and pwm_chip::id
     - soc/tegra: fuse: speedo-tegra210: Update speedo IDs
     - iio: core: add missing mutex_destroy in iio_dev_release()
     - iio: core: Clean up device correctly on iio_device_alloc() failure
     - iommu/vt-d: Set INTEL_IOMMU_FLOPPY_WA depend on BLK_DEV_FD
     - of/fdt: Fix the len check in early_init_dt_check_for_elfcorehdr()
     - of/fdt: Fix the len check in early_init_dt_check_for_usable_mem_range()
     - rtla/tests: Extend action tests to 5s
     - rtla: Fix -a overriding -t argument
     - btrfs: make sure extent and csum paths are always released in
       scrub_raid56_parity_stripe()
     - iomap: allocate s_dio_done_wq for async reads as well
     - RDMA/irdma: Remove doorbell elision logic
     - selftests/landlock: Fix makefile header list
     - io_uring/kbuf: use READ_ONCE() for userspace-mapped memory
     - ALSA: wavefront: Clear substream pointers on close
     - btrfs: do not skip logging new dentries when logging a new name
     - btrfs: fix a potential path leak in print_data_reloc_error()
     - bpf, arm64: Do not audit capability check in do_jit()
     - btrfs: fix memory leak of fs_devices in degraded seed device path
     - iomap: account for unaligned end offsets when truncating read range
     - scripts/faddr2line: Fix "Argument list too long" error
     - sched/fair: Revert max_newidle_lb_cost bump
     - x86/ptrace: Always inline trivial accessors
     - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint()
       only
     - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist
     - ACPI: fan: Workaround for 64-bit firmware bug
     - cpufreq: s5pv210: fix refcount leak
     - cpuidle: menu: Use residency threshold in polling state override
       decisions
     - livepatch: Match old_sympos 0 and 1 in klp_find_func()
     - fs/ntfs3: Support timestamps prior to epoch
     - kbuild: Use objtree for module signing key path
     - hfsplus: fix volume corruption issue for generic/070
     - hfsplus: fix volume corruption issue for generic/073
     - fs/ntfs3: check for shutdown in fsync
     - wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU
     - wifi: cfg80211: stop radar detection in cfg80211_leave()
     - wifi: cfg80211: use cfg80211_leave() in iftype change
     - wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING after CLC
       load
     - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet
     - btrfs: scrub: always update btrfs_scrub_progress::last_physical
     - gfs2: fix remote evict for read-only filesystems
     - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad"
     - smb/server: fix return value of smb2_ioctl()
     - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
     - Bluetooth: btusb: MT7922: Add VID/PID 0489/e170
     - Bluetooth: btusb: MT7920: Add VID/PID 0489/e135
     - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
     - Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT
     - net: fec: ERR007885 Workaround for XDP TX path
     - ipvlan: Ignore P
Source diff to previous version
2134400 Questing preinstalled server fails to boot on QCS8300 based boards
2141276 efi: Fix swapped arguments to bsearch() in efi_status_to_*() SAUCE patch
2141377 [SRU]Fix xe GPU suspend/resume crash on Battlemage
2142250 Questing update: upstream stable patchset 2026-03-04
CVE-2025-68791 In the Linux kernel, the following vulnerability has been resolved: fuse: missing copy_finish in fuse-over-io-uring argument copies Fix a possible
CVE-2025-68805 In the Linux kernel, the following vulnerability has been resolved: fuse: fix io-uring list corruption for terminated non-committed requests When a
CVE-2025-68812 In the Linux kernel, the following vulnerability has been resolved: media: iris: Add sanity check for stop streaming Add sanity check in iris_vb2_s
CVE-2025-71117 In the Linux kernel, the following vulnerability has been resolved: block: Remove queue freezing from several sysfs store callbacks Freezing the re
CVE-2025-71070 In the Linux kernel, the following vulnerability has been resolved: ublk: clean up user copy references on ublk server exit If a ublk server proces
CVE-2025-71124 In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: move preempt_prepare_postamble after error check Move the call to
CVE-2025-71115 In the Linux kernel, the following vulnerability has been resolved: um: init cpu_tasks[] earlier This is currently done in uml_finishsetup(), but e
CVE-2025-68823 In the Linux kernel, the following vulnerability has been resolved: ublk: fix deadlock when reading partition table When one process(such as udev)
CVE-2025-68793 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix a job->pasid access race in gpu recovery Avoid a possible UAF i
CVE-2025-68807 In the Linux kernel, the following vulnerability has been resolved: block: fix race between wbt_enable_default and IO submission When wbt_enable_de
CVE-2025-68768 In the Linux kernel, the following vulnerability has been resolved: inet: frags: flush pending skbs in fqdir_pre_exit() We have been seeing occasio
CVE-2025-71140 In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Use spinlock for context list protection lock Previous
CVE-2025-71156 In the Linux kernel, the following vulnerability has been resolved: gve: defer interrupt enabling until NAPI registration Currently, interrupts are
CVE-2024-36347 Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious micr
CVE-2025-71068 In the Linux kernel, the following vulnerability has been resolved: svcrdma: bound check rq_pages index in inline path svc_rdma_copy_inline_range i
CVE-2025-68772 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid updating compression context during writeback Bai, Shuangpen
CVE-2025-71105 In the Linux kernel, the following vulnerability has been resolved: f2fs: use global inline_xattr_slab instead of per-sb slab cache As Hong Yun rep
CVE-2025-71130 In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer Initia
CVE-2025-71138 In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add missing NULL pointer check for pingpong interface It is checke
CVE-2025-71083 In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Avoid NULL pointer deref for evicted BOs It is possible for a BO to ex
CVE-2025-71099 In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() In xe_oa_add_config_io
CVE-2025-71079 In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write A dea
CVE-2025-71129 In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Sign extend kfunc call arguments The kfunc calls are native cal
CVE-2025-71093 In the Linux kernel, the following vulnerability has been resolved: e1000: fix OOB in e1000_tbi_should_accept() In e1000_tbi_should_accept() we rea
CVE-2025-71084 In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix leaking the multicast GID table reference If the CM ID is destroye
CVE-2025-71096 In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly The netlink res
CVE-2025-71136 In the Linux kernel, the following vulnerability has been resolved: media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_st
CVE-2025-71143 In the Linux kernel, the following vulnerability has been resolved: clk: samsung: exynos-clkout: Assign .num before accessing .hws Commit f316cdff8
CVE-2025-71078 In the Linux kernel, the following vulnerability has been resolved: powerpc/64s/slb: Fix SLB multihit issue during SLB preload On systems using the
CVE-2025-71089 In the Linux kernel, the following vulnerability has been resolved: iommu: disable SVA when CONFIG_X86 is set Patch series "Fix stale IOTLB entries
CVE-2025-71081 In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: sai: fix OF node leak on probe The reference taken to the sync pro
CVE-2025-71153 In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix memory leak in get_file_all_info() In get_file_all_info(), if vfs_ge
CVE-2025-71135 In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt
CVE-2025-71157 In the Linux kernel, the following vulnerability has been resolved: RDMA/core: always drop device refcount in ib_del_sub_device_and_put() Since nld
CVE-2025-71133 In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: avoid invalid read in irdma_net_event irdma_net_event() should not
CVE-2025-71080 In the Linux kernel, the following vulnerability has been resolved: ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT On PREEMPT_RT kernels,
CVE-2025-71086 In the Linux kernel, the following vulnerability has been resolved: net: rose: fix invalid array index in rose_kill_by_device() rose_kill_by_device
CVE-2025-71097 In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix reference count leak when using error routes with nexthop objects Whe
CVE-2025-71085 In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() There exi
CVE-2025-71095 In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix the crash issue for zero copy XDP_TX action There is a crash i
CVE-2025-71137 In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" This patch ensures that th
CVE-2025-71101 In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing
CVE-2025-71094 In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: validate PHY address before use The ASIX driver reads the PHY a
CVE-2025-71132 In the Linux kernel, the following vulnerability has been resolved: smc91x: fix broken irq-context in PREEMPT_RT When smc91x.c is built with PREEMP
CVE-2025-71154 In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix memory leak on usb_submit_urb() failure In async_set_reg
CVE-2025-71091 In the Linux kernel, the following vulnerability has been resolved: team: fix check for port enabled in team_queue_override_port_prio_changed() The
CVE-2025-71098 In the Linux kernel, the following vulnerability has been resolved: ip6_gre: make ip6gre_header() robust Over the years, syzbot found many ways to
CVE-2025-71082 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: revert use of devm_kzalloc in btusb This reverts commit 98921
CVE-2025-71131 In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req->iv after crypto_aead_encrypt As soon as crypto_
CVE-2025-71087 In the Linux kernel, the following vulnerability has been resolved: iavf: fix off-by-one issues in iavf_config_rss_reg() There are off-by-one bugs
CVE-2025-71100 In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() TID getti
CVE-2025-68821 In the Linux kernel, the following vulnerability has been resolved: fuse: fix readahead reclaim deadlock Commit e26ee4efbc79 ("fuse: allocate ff->r
CVE-2025-71071 In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: fix use-after-free on probe deferral The driver is dropping the
CVE-2025-71111 In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83791d) Convert macros to functions to avoid TOCTOU The macro FAN_FROM
CVE-2025-71113 In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - zero initialize memory allocated via sock_kmalloc Several cryp
CVE-2025-71149 In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: correctly handle io_poll_add() return value on update When the c
CVE-2025-68778 In the Linux kernel, the following vulnerability has been resolved: btrfs: don't log conflicting inode if it's a dir moved in the current transactio
CVE-2025-71119 In the Linux kernel, the following vulnerability has been resolved: powerpc/kexec: Enable SMT before waking offline CPUs If SMT is disabled or a pa
CVE-2025-71120 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy
CVE-2025-68811 In the Linux kernel, the following vulnerability has been resolved: svcrdma: use rc_pageoff for memcpy byte offset svc_rdma_copy_inline_range added
CVE-2025-68803 In the Linux kernel, the following vulnerability has been resolved: NFSD: NFSv4 file creation neglects setting ACL An NFSv4 client that sets an ACL
CVE-2025-71148 In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshake_req_submit() repl
CVE-2025-68788 In the Linux kernel, the following vulnerability has been resolved: fsnotify: do not generate ACCESS/MODIFY events on child for special files inoti
CVE-2025-71125 In the Linux kernel, the following vulnerability has been resolved: tracing: Do not register unsupported perf events Synthetic events currently do
CVE-2025-68784 In the Linux kernel, the following vulnerability has been resolved: xfs: fix a UAF problem in xattr repair The xchk_setup_xattr_buf function can al
CVE-2025-71104 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
CVE-2025-71116 In the Linux kernel, the following vulnerability has been resolved: libceph: make decode_pool() more resilient against corrupted osdmaps If the osd
CVE-2025-71121 In the Linux kernel, the following vulnerability has been resolved: parisc: Do not reprogram affinitiy on ASP chip The ASP chip is a very old varia
CVE-2025-71102 In the Linux kernel, the following vulnerability has been resolved: scs: fix a wrong parameter in __scs_magic __scs_magic() needs a 'void *' variab
CVE-2025-68804 In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver After unbinding
CVE-2025-68771 In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix kernel BUG in ocfs2_find_victim_chain syzbot reported a kernel BUG i
CVE-2025-68808 In the Linux kernel, the following vulnerability has been resolved: media: vidtv: initialize local pointers upon transfer of memory ownership vidtv
CVE-2025-68810 In the Linux kernel, the following vulnerability has been resolved: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot Reject attemp
CVE-2025-68769 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix return value of f2fs_recover_fsync_data() With below scripts, it will
CVE-2025-71069 In the Linux kernel, the following vulnerability has been resolved: f2fs: invalidate dentry cache on failed whiteout creation F2FS can mount filesy
CVE-2025-68796 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid updating zero-sized extent in extent cache As syzbot reporte
CVE-2025-71065 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential deadlock As Jiaming Zhang and syzbot reported, the
CVE-2025-71107 In the Linux kernel, the following vulnerability has been resolved: f2fs: ensure node page reads complete before f2fs_put_super() finishes Xfstests
CVE-2025-68782 In the Linux kernel, the following vulnerability has been resolved: scsi: target: Reset t_task_cdb pointer in error case If allocation of cmd->t_ta
CVE-2025-71075 In the Linux kernel, the following vulnerability has been resolved: scsi: aic94xx: fix use-after-free in device removal path The asd_pci_remove() f
CVE-2025-68818 In the Linux kernel, the following vulnerability has been resolved: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
CVE-2025-68797 In the Linux kernel, the following vulnerability has been resolved: char: applicom: fix NULL pointer dereference in ac_ioctl Discovered by Atuin -
CVE-2025-68781 In the Linux kernel, the following vulnerability has been resolved: usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal The
CVE-2025-68819 In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() rlen value is a
CVE-2025-71126 In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid deadlock on fallback while reinjecting Jakub reported an MPTCP dea
CVE-2025-68820 In the Linux kernel, the following vulnerability has been resolved: ext4: xattr: fix null pointer deref in ext4_raw_inode() If ext4_get_inode_loc()
CVE-2025-71123 In the Linux kernel, the following vulnerability has been resolved: ext4: fix string copying in parse_apply_sb_mount_options() strscpy_pad() can't
CVE-2025-71077 In the Linux kernel, the following vulnerability has been resolved: tpm: Cap the number of PCR banks tpm2_get_pcr_allocation() does not cap any upp
CVE-2025-68814 In the Linux kernel, the following vulnerability has been resolved: io_uring: fix filename leak in __io_openat_prep() __io_openat_prep() allocates
CVE-2025-71147 In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix a memory leak in tpm2_load_cmd 'tpm2_load_cmd' allocates a t
CVE-2025-71151 In the Linux kernel, the following vulnerability has been resolved: cifs: Fix memory and information leak in smb3_reconfigure() In smb3_reconfigure
CVE-2025-71109 In the Linux kernel, the following vulnerability has been resolved: MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits Since
CVE-2025-71108 In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Handle incorrect num_connectors capability The UCSI spec stat
CVE-2025-71114 In the Linux kernel, the following vulnerability has been resolved: via_wdt: fix critical boot hang due to unnamed resource allocation The VIA watc
CVE-2025-68783 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-mixer: us16x08: validate meter packet indices get_meter_levels_from_u
CVE-2025-68776 In the Linux kernel, the following vulnerability has been resolved: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() prp_get_untag
CVE-2025-68773 In the Linux kernel, the following vulnerability has been resolved: spi: fsl-cpm: Check length parity before switching to 16 bit mode Commit fc96ec
CVE-2025-68822 In the Linux kernel, the following vulnerability has been resolved: Input: alps - fix use-after-free bugs caused by dev3_register_work The dev3_reg
CVE-2025-71073 In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing device lkkbd_interrupt() sch
CVE-2025-68777 In the Linux kernel, the following vulnerability has been resolved: Input: ti_am335x_tsc - fix off-by-one error in wire_order validation The curren
CVE-2025-68806 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix buffer validation by including null terminator size in EA length The
CVE-2025-71150 In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix refcount leak when invalid session is found on session lookup When a
CVE-2025-68786 In the Linux kernel, the following vulnerability has been resolved: ksmbd: skip lock-range check on equal size to avoid size==0 underflow When size
CVE-2025-71076 In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Limit num_syncs to prevent oversized allocations The OA open paramet
CVE-2025-68802 In the Linux kernel, the following vulnerability has been resolved: drm/xe: Limit num_syncs to prevent oversized allocations The exec and vm_bind i
CVE-2025-71112 In the Linux kernel, the following vulnerability has been resolved: net: hns3: add VLAN id validation before using Currently, the VLAN id may be us
CVE-2025-71064 In the Linux kernel, the following vulnerability has been resolved: net: hns3: using the num_tqps in the vf driver to apply for resources Currently
CVE-2025-68775 In the Linux kernel, the following vulnerability has been resolved: net/handshake: duplicate handshake cancellations leak socket When a handshake r
CVE-2025-68816 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fw_tracer, Validate format string parameters Add validation for forma
CVE-2025-68795 In the Linux kernel, the following vulnerability has been resolved: ethtool: Avoid overflowing userspace buffer on stats query The ethtool -S comma
CVE-2025-71122 In the Linux kernel, the following vulnerability has been resolved: iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED syzkaller fo
CVE-2025-68815 In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Remove drr class from the active list if it changes to strict W
CVE-2025-68799 In the Linux kernel, the following vulnerability has been resolved: caif: fix integer underflow in cffrml_receive() The cffrml_receive() function e
CVE-2025-68813 In the Linux kernel, the following vulnerability has been resolved: ipvs: fix ipv4 null-ptr-deref in route error path The IPv4 code path in __ip_vs
CVE-2025-68785 In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix middle attribute validation in push_nsh() action The push
CVE-2025-68770 In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix XDP_TX path For XDP_TX action in bnxt_rx_xdp(), clearing of the ev
CVE-2025-68800 In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats Cite
CVE-2025-68801 In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_router: Fix neighbour use-after-free We sometimes observe use-a
CVE-2025-71066 In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in ets_qdis
CVE-2025-68787 In the Linux kernel, the following vulnerability has been resolved: netrom: Fix memory leak in nr_sendmsg() syzbot reported a memory leak [1]. Whe
CVE-2025-68809 In the Linux kernel, the following vulnerability has been resolved: ksmbd: vfs: fix race on m_flags in vfs_cache ksmbd maintains delete-on-close an
CVE-2025-68817 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency Under hig
CVE-2025-68767 In the Linux kernel, the following vulnerability has been resolved: hfsplus: Verify inode mode when loading from disk syzbot is reporting that S_IF
CVE-2025-68774 In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create When sync() and link
CVE-2025-71067 In the Linux kernel, the following vulnerability has been resolved: ntfs: set dummy blocksize to read boot_block when mounting When mounting, sb->s
CVE-2025-71118 In the Linux kernel, the following vulnerability has been resolved: ACPICA: Avoid walking the Namespace if start_node is NULL Although commit 0c999
CVE-2025-68780 In the Linux kernel, the following vulnerability has been resolved: sched/deadline: only set free_cpus for online runqueues Commit 16b269436b72 ("s
CVE-2025-68798 In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Check event before enable to avoid GPF On AMD machines cpuc->even
CVE-2025-68794 In the Linux kernel, the following vulnerability has been resolved: iomap: adjust read range correctly for non-block-aligned positions iomap_adjust
CVE-2025-71072 In the Linux kernel, the following vulnerability has been resolved: shmem: fix recovery on rename failures maple_tree insertions can fail if we are
CVE-2025-68351 In the Linux kernel, the following vulnerability has been resolved: exfat: fix refcount leak in exfat_find Fix refcount leaks in `exfat_find` relat
CVE-2025-68736 In the Linux kernel, the following vulnerability has been resolved: landlock: Fix handling of disconnected directories Disconnected files or direct
CVE-2025-68353 In the Linux kernel, the following vulnerability has been resolved: net: vxlan: prevent NULL deref in vxlan_xmit_one Neither sock4 nor sock6 pointe
CVE-2025-68745 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Commit aefed3e5548f ("scsi: qla2xxx:
CVE-2025-68365 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize allocated memory before use KMSAN reports: Multiple uninit
CVE-2025-68368 In the Linux kernel, the following vulnerability has been resolved: md: init bioset in mddev_init IO operations may be needed before md_run(), such
CVE-2025-68725 In the Linux kernel, the following vulnerability has been resolved: bpf: Do not let BPF test infra emit invalid GSO types to stack Yinhao et al. re
CVE-2026-23111 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()
CVE-2026-23209 In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlan_common_newlink() valis provided a nice r
CVE-2026-23074 In the Linux kernel, the following vulnerability has been resolved: net/sched: Enforce that teql can only be used as root qdisc Design intent of te
CVE-2026-23060 In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec au

Version: 6.17.0-18.18 2026-03-06 19:09:01 UTC

 linux (6.17.0-18.18) questing; urgency=medium
 .
   * questing/linux: 6.17.0-18.18 -proposed tracker (LP: #2143428)
 .
   * Questing preinstalled server fails to boot on QCS8300 based boards
     (LP: #2134400)
     - [Config] move qcom interconnect/pinctrl/gcc as built-in for QCS8300
 .
   * TBT call trace while connecting TBT4 monitor on TBT5 port (LP: #2137613)
     - SAUCE: thunderbolt: log path activation failures without WARN backtraces
 .
   * efi: Fix swapped arguments to bsearch() in efi_status_to_*() SAUCE patch
     (LP: #2141276)
     - SAUCE efi: Fix swapped arguments to bsearch() in efi_status_to_*()
 .
   * [SRU]Fix xe GPU suspend/resume crash on Battlemage (LP: #2141377)
     - drm/xe: make xe_gt_idle_disable_c6() handle the forcewake internally
 .
   * Accumulative updates for Intel PTL-H component enabling PV rev3.0
     (LP: #2137272)
     - drm/i915/display: Optimize panel power-on wait time
     - HID: intel-ish-hid: Use dedicated unbound workqueues to prevent resume
       blocking
     - drm/xe/guc: Recommend GUC v70.49.4 for PTL, BMG
     - HID: Intel-thc-hid: Intel-thc: Use str_true_false() helper
     - HID: intel-thc-hid: intel-quicki2c: support ACPI config for advanced
       features
     - usb: typec: ucsi: Add SET_POWER_LEVEL UCSI command to debugfs
 .
   * Questing update: upstream stable patchset 2026-03-04 (LP: #2142250)
     - bpf: Fix sleepable context for async callbacks
     - bpf: extract generic helper from process_timer_func()
     - bpf: Fix handling maps with no BTF and non-constant offsets for the
       bpf_wq
     - irqchip: Drop leftover brackets
     - irqchip: Pass platform device to platform drivers
     - arm64: dts: exynos: gs101: fix clock module unit reg sizes
     - ice: move service task start out of ice_init_pf()
     - ice: move ice_init_interrupt_scheme() prior ice_init_pf()
     - ice: ice_init_pf: destroy mutexes and xarrays on memory alloc failure
     - ice: move udp_tunnel_nic and misc IRQ setup into ice_init_pf()
     - ice: move ice_init_pf() out of ice_init_dev()
     - ice: extract ice_init_dev() from ice_init()
     - ice: move ice_deinit_dev() to the end of deinit paths
     - ice: remove duplicate call to ice_deinit_hw() on error paths
     - arm64: dts: qcom: lemans: Add missing quirk for HS only USB controller
     - tools/nolibc: x86: fix section mismatch caused by asm "mem*" functions
     - arm64: dts: ti: k3-j784s4: Fix I2C pinmux pull configuration
     - wifi: ath12k: enforce vdev limit in ath12k_mac_vdev_create()
     - ARM: dts: am33xx: Add missing serial console speed
     - arm64: tegra: Add pinctrl definitions for pcie-ep nodes
     - arm64: mm: Move KPTI helpers to mmu.c
     - arm64/mm: Allow __create_pgd_mapping() to propagate pgtable_alloc()
       errors
     - pwm: Simplify printf to emit chip->npwm in $debugfs/pwm
     - pwm: Use %u to printf unsigned int pwm_chip::npwm and pwm_chip::id
     - soc/tegra: fuse: speedo-tegra210: Update speedo IDs
     - iio: core: add missing mutex_destroy in iio_dev_release()
     - iio: core: Clean up device correctly on iio_device_alloc() failure
     - iommu/vt-d: Set INTEL_IOMMU_FLOPPY_WA depend on BLK_DEV_FD
     - of/fdt: Fix the len check in early_init_dt_check_for_elfcorehdr()
     - of/fdt: Fix the len check in early_init_dt_check_for_usable_mem_range()
     - rtla/tests: Extend action tests to 5s
     - rtla: Fix -a overriding -t argument
     - btrfs: make sure extent and csum paths are always released in
       scrub_raid56_parity_stripe()
     - iomap: allocate s_dio_done_wq for async reads as well
     - RDMA/irdma: Remove doorbell elision logic
     - selftests/landlock: Fix makefile header list
     - io_uring/kbuf: use READ_ONCE() for userspace-mapped memory
     - ALSA: wavefront: Clear substream pointers on close
     - btrfs: do not skip logging new dentries when logging a new name
     - btrfs: fix a potential path leak in print_data_reloc_error()
     - bpf, arm64: Do not audit capability check in do_jit()
     - btrfs: fix memory leak of fs_devices in degraded seed device path
     - iomap: account for unaligned end offsets when truncating read range
     - scripts/faddr2line: Fix "Argument list too long" error
     - sched/fair: Revert max_newidle_lb_cost bump
     - x86/ptrace: Always inline trivial accessors
     - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint()
       only
     - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist
     - ACPI: fan: Workaround for 64-bit firmware bug
     - cpufreq: s5pv210: fix refcount leak
     - cpuidle: menu: Use residency threshold in polling state override
       decisions
     - livepatch: Match old_sympos 0 and 1 in klp_find_func()
     - fs/ntfs3: Support timestamps prior to epoch
     - kbuild: Use objtree for module signing key path
     - hfsplus: fix volume corruption issue for generic/070
     - hfsplus: fix volume corruption issue for generic/073
     - fs/ntfs3: check for shutdown in fsync
     - wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU
     - wifi: cfg80211: stop radar detection in cfg80211_leave()
     - wifi: cfg80211: use cfg80211_leave() in iftype change
     - wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING after CLC
       load
     - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet
     - btrfs: scrub: always update btrfs_scrub_progress::last_physical
     - gfs2: fix remote evict for read-only filesystems
     - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad"
     - smb/server: fix return value of smb2_ioctl()
     - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
     - Bluetooth: btusb: MT7922: Add VID/PID 0489/e170
     - Bluetooth: btusb: MT7920: Add VID/PID 0489/e135
     - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
     - Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT
     - net: fec: ERR007885 Workaround for XDP TX path
     - ipvlan: Ignore P
Source diff to previous version
2134400 Questing preinstalled server fails to boot on QCS8300 based boards
2141276 efi: Fix swapped arguments to bsearch() in efi_status_to_*() SAUCE patch
2141377 [SRU]Fix xe GPU suspend/resume crash on Battlemage
2142250 Questing update: upstream stable patchset 2026-03-04
CVE-2025-68791 In the Linux kernel, the following vulnerability has been resolved: fuse: missing copy_finish in fuse-over-io-uring argument copies Fix a possible
CVE-2025-68805 In the Linux kernel, the following vulnerability has been resolved: fuse: fix io-uring list corruption for terminated non-committed requests When a
CVE-2025-68812 In the Linux kernel, the following vulnerability has been resolved: media: iris: Add sanity check for stop streaming Add sanity check in iris_vb2_s
CVE-2025-71117 In the Linux kernel, the following vulnerability has been resolved: block: Remove queue freezing from several sysfs store callbacks Freezing the re
CVE-2025-71070 In the Linux kernel, the following vulnerability has been resolved: ublk: clean up user copy references on ublk server exit If a ublk server proces
CVE-2025-71124 In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: move preempt_prepare_postamble after error check Move the call to
CVE-2025-71115 In the Linux kernel, the following vulnerability has been resolved: um: init cpu_tasks[] earlier This is currently done in uml_finishsetup(), but e
CVE-2025-68823 In the Linux kernel, the following vulnerability has been resolved: ublk: fix deadlock when reading partition table When one process(such as udev)
CVE-2025-68793 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix a job->pasid access race in gpu recovery Avoid a possible UAF i
CVE-2025-68807 In the Linux kernel, the following vulnerability has been resolved: block: fix race between wbt_enable_default and IO submission When wbt_enable_de
CVE-2025-68768 In the Linux kernel, the following vulnerability has been resolved: inet: frags: flush pending skbs in fqdir_pre_exit() We have been seeing occasio
CVE-2025-71140 In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Use spinlock for context list protection lock Previous
CVE-2025-71156 In the Linux kernel, the following vulnerability has been resolved: gve: defer interrupt enabling until NAPI registration Currently, interrupts are
CVE-2024-36347 Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious micr
CVE-2025-71068 In the Linux kernel, the following vulnerability has been resolved: svcrdma: bound check rq_pages index in inline path svc_rdma_copy_inline_range i
CVE-2025-68772 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid updating compression context during writeback Bai, Shuangpen
CVE-2025-71105 In the Linux kernel, the following vulnerability has been resolved: f2fs: use global inline_xattr_slab instead of per-sb slab cache As Hong Yun rep
CVE-2025-71130 In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer Initia
CVE-2025-71138 In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add missing NULL pointer check for pingpong interface It is checke
CVE-2025-71083 In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Avoid NULL pointer deref for evicted BOs It is possible for a BO to ex
CVE-2025-71099 In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() In xe_oa_add_config_io
CVE-2025-71079 In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write A dea
CVE-2025-71129 In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Sign extend kfunc call arguments The kfunc calls are native cal
CVE-2025-71093 In the Linux kernel, the following vulnerability has been resolved: e1000: fix OOB in e1000_tbi_should_accept() In e1000_tbi_should_accept() we rea
CVE-2025-71084 In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix leaking the multicast GID table reference If the CM ID is destroye
CVE-2025-71096 In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly The netlink res
CVE-2025-71136 In the Linux kernel, the following vulnerability has been resolved: media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_st
CVE-2025-71143 In the Linux kernel, the following vulnerability has been resolved: clk: samsung: exynos-clkout: Assign .num before accessing .hws Commit f316cdff8
CVE-2025-71078 In the Linux kernel, the following vulnerability has been resolved: powerpc/64s/slb: Fix SLB multihit issue during SLB preload On systems using the
CVE-2025-71089 In the Linux kernel, the following vulnerability has been resolved: iommu: disable SVA when CONFIG_X86 is set Patch series "Fix stale IOTLB entries
CVE-2025-71081 In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: sai: fix OF node leak on probe The reference taken to the sync pro
CVE-2025-71153 In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix memory leak in get_file_all_info() In get_file_all_info(), if vfs_ge
CVE-2025-71135 In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt
CVE-2025-71157 In the Linux kernel, the following vulnerability has been resolved: RDMA/core: always drop device refcount in ib_del_sub_device_and_put() Since nld
CVE-2025-71133 In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: avoid invalid read in irdma_net_event irdma_net_event() should not
CVE-2025-71080 In the Linux kernel, the following vulnerability has been resolved: ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT On PREEMPT_RT kernels,
CVE-2025-71086 In the Linux kernel, the following vulnerability has been resolved: net: rose: fix invalid array index in rose_kill_by_device() rose_kill_by_device
CVE-2025-71097 In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix reference count leak when using error routes with nexthop objects Whe
CVE-2025-71085 In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() There exi
CVE-2025-71095 In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix the crash issue for zero copy XDP_TX action There is a crash i
CVE-2025-71137 In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" This patch ensures that th
CVE-2025-71101 In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing
CVE-2025-71094 In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: validate PHY address before use The ASIX driver reads the PHY a
CVE-2025-71132 In the Linux kernel, the following vulnerability has been resolved: smc91x: fix broken irq-context in PREEMPT_RT When smc91x.c is built with PREEMP
CVE-2025-71154 In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix memory leak on usb_submit_urb() failure In async_set_reg
CVE-2025-71091 In the Linux kernel, the following vulnerability has been resolved: team: fix check for port enabled in team_queue_override_port_prio_changed() The
CVE-2025-71098 In the Linux kernel, the following vulnerability has been resolved: ip6_gre: make ip6gre_header() robust Over the years, syzbot found many ways to
CVE-2025-71082 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: revert use of devm_kzalloc in btusb This reverts commit 98921
CVE-2025-71131 In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req->iv after crypto_aead_encrypt As soon as crypto_
CVE-2025-71087 In the Linux kernel, the following vulnerability has been resolved: iavf: fix off-by-one issues in iavf_config_rss_reg() There are off-by-one bugs
CVE-2025-71100 In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() TID getti
CVE-2025-68821 In the Linux kernel, the following vulnerability has been resolved: fuse: fix readahead reclaim deadlock Commit e26ee4efbc79 ("fuse: allocate ff->r
CVE-2025-71071 In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: fix use-after-free on probe deferral The driver is dropping the
CVE-2025-71111 In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83791d) Convert macros to functions to avoid TOCTOU The macro FAN_FROM
CVE-2025-71113 In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - zero initialize memory allocated via sock_kmalloc Several cryp
CVE-2025-71149 In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: correctly handle io_poll_add() return value on update When the c
CVE-2025-68778 In the Linux kernel, the following vulnerability has been resolved: btrfs: don't log conflicting inode if it's a dir moved in the current transactio
CVE-2025-71119 In the Linux kernel, the following vulnerability has been resolved: powerpc/kexec: Enable SMT before waking offline CPUs If SMT is disabled or a pa
CVE-2025-71120 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy
CVE-2025-68811 In the Linux kernel, the following vulnerability has been resolved: svcrdma: use rc_pageoff for memcpy byte offset svc_rdma_copy_inline_range added
CVE-2025-68803 In the Linux kernel, the following vulnerability has been resolved: NFSD: NFSv4 file creation neglects setting ACL An NFSv4 client that sets an ACL
CVE-2025-71148 In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshake_req_submit() repl
CVE-2025-68788 In the Linux kernel, the following vulnerability has been resolved: fsnotify: do not generate ACCESS/MODIFY events on child for special files inoti
CVE-2025-71125 In the Linux kernel, the following vulnerability has been resolved: tracing: Do not register unsupported perf events Synthetic events currently do
CVE-2025-68784 In the Linux kernel, the following vulnerability has been resolved: xfs: fix a UAF problem in xattr repair The xchk_setup_xattr_buf function can al
CVE-2025-71104 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
CVE-2025-71116 In the Linux kernel, the following vulnerability has been resolved: libceph: make decode_pool() more resilient against corrupted osdmaps If the osd
CVE-2025-71121 In the Linux kernel, the following vulnerability has been resolved: parisc: Do not reprogram affinitiy on ASP chip The ASP chip is a very old varia
CVE-2025-71102 In the Linux kernel, the following vulnerability has been resolved: scs: fix a wrong parameter in __scs_magic __scs_magic() needs a 'void *' variab
CVE-2025-68804 In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver After unbinding
CVE-2025-68771 In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix kernel BUG in ocfs2_find_victim_chain syzbot reported a kernel BUG i
CVE-2025-68808 In the Linux kernel, the following vulnerability has been resolved: media: vidtv: initialize local pointers upon transfer of memory ownership vidtv
CVE-2025-68810 In the Linux kernel, the following vulnerability has been resolved: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot Reject attemp
CVE-2025-68769 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix return value of f2fs_recover_fsync_data() With below scripts, it will
CVE-2025-71069 In the Linux kernel, the following vulnerability has been resolved: f2fs: invalidate dentry cache on failed whiteout creation F2FS can mount filesy
CVE-2025-68796 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid updating zero-sized extent in extent cache As syzbot reporte
CVE-2025-71065 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential deadlock As Jiaming Zhang and syzbot reported, the
CVE-2025-71107 In the Linux kernel, the following vulnerability has been resolved: f2fs: ensure node page reads complete before f2fs_put_super() finishes Xfstests
CVE-2025-68782 In the Linux kernel, the following vulnerability has been resolved: scsi: target: Reset t_task_cdb pointer in error case If allocation of cmd->t_ta
CVE-2025-71075 In the Linux kernel, the following vulnerability has been resolved: scsi: aic94xx: fix use-after-free in device removal path The asd_pci_remove() f
CVE-2025-68818 In the Linux kernel, the following vulnerability has been resolved: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
CVE-2025-68797 In the Linux kernel, the following vulnerability has been resolved: char: applicom: fix NULL pointer dereference in ac_ioctl Discovered by Atuin -
CVE-2025-68781 In the Linux kernel, the following vulnerability has been resolved: usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal The
CVE-2025-68819 In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() rlen value is a
CVE-2025-71126 In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid deadlock on fallback while reinjecting Jakub reported an MPTCP dea
CVE-2025-68820 In the Linux kernel, the following vulnerability has been resolved: ext4: xattr: fix null pointer deref in ext4_raw_inode() If ext4_get_inode_loc()
CVE-2025-71123 In the Linux kernel, the following vulnerability has been resolved: ext4: fix string copying in parse_apply_sb_mount_options() strscpy_pad() can't
CVE-2025-71077 In the Linux kernel, the following vulnerability has been resolved: tpm: Cap the number of PCR banks tpm2_get_pcr_allocation() does not cap any upp
CVE-2025-68814 In the Linux kernel, the following vulnerability has been resolved: io_uring: fix filename leak in __io_openat_prep() __io_openat_prep() allocates
CVE-2025-71147 In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix a memory leak in tpm2_load_cmd 'tpm2_load_cmd' allocates a t
CVE-2025-71151 In the Linux kernel, the following vulnerability has been resolved: cifs: Fix memory and information leak in smb3_reconfigure() In smb3_reconfigure
CVE-2025-71109 In the Linux kernel, the following vulnerability has been resolved: MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits Since
CVE-2025-71108 In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Handle incorrect num_connectors capability The UCSI spec stat
CVE-2025-71114 In the Linux kernel, the following vulnerability has been resolved: via_wdt: fix critical boot hang due to unnamed resource allocation The VIA watc
CVE-2025-68783 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-mixer: us16x08: validate meter packet indices get_meter_levels_from_u
CVE-2025-68776 In the Linux kernel, the following vulnerability has been resolved: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() prp_get_untag
CVE-2025-68773 In the Linux kernel, the following vulnerability has been resolved: spi: fsl-cpm: Check length parity before switching to 16 bit mode Commit fc96ec
CVE-2025-68822 In the Linux kernel, the following vulnerability has been resolved: Input: alps - fix use-after-free bugs caused by dev3_register_work The dev3_reg
CVE-2025-71073 In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing device lkkbd_interrupt() sch
CVE-2025-68777 In the Linux kernel, the following vulnerability has been resolved: Input: ti_am335x_tsc - fix off-by-one error in wire_order validation The curren
CVE-2025-68806 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix buffer validation by including null terminator size in EA length The
CVE-2025-71150 In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix refcount leak when invalid session is found on session lookup When a
CVE-2025-68786 In the Linux kernel, the following vulnerability has been resolved: ksmbd: skip lock-range check on equal size to avoid size==0 underflow When size
CVE-2025-71076 In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Limit num_syncs to prevent oversized allocations The OA open paramet
CVE-2025-68802 In the Linux kernel, the following vulnerability has been resolved: drm/xe: Limit num_syncs to prevent oversized allocations The exec and vm_bind i
CVE-2025-71112 In the Linux kernel, the following vulnerability has been resolved: net: hns3: add VLAN id validation before using Currently, the VLAN id may be us
CVE-2025-71064 In the Linux kernel, the following vulnerability has been resolved: net: hns3: using the num_tqps in the vf driver to apply for resources Currently
CVE-2025-68775 In the Linux kernel, the following vulnerability has been resolved: net/handshake: duplicate handshake cancellations leak socket When a handshake r
CVE-2025-68816 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fw_tracer, Validate format string parameters Add validation for forma
CVE-2025-68795 In the Linux kernel, the following vulnerability has been resolved: ethtool: Avoid overflowing userspace buffer on stats query The ethtool -S comma
CVE-2025-71122 In the Linux kernel, the following vulnerability has been resolved: iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED syzkaller fo
CVE-2025-68815 In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Remove drr class from the active list if it changes to strict W
CVE-2025-68799 In the Linux kernel, the following vulnerability has been resolved: caif: fix integer underflow in cffrml_receive() The cffrml_receive() function e
CVE-2025-68813 In the Linux kernel, the following vulnerability has been resolved: ipvs: fix ipv4 null-ptr-deref in route error path The IPv4 code path in __ip_vs
CVE-2025-68785 In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix middle attribute validation in push_nsh() action The push
CVE-2025-68770 In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix XDP_TX path For XDP_TX action in bnxt_rx_xdp(), clearing of the ev
CVE-2025-68800 In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats Cite
CVE-2025-68801 In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_router: Fix neighbour use-after-free We sometimes observe use-a
CVE-2025-71066 In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in ets_qdis
CVE-2025-68787 In the Linux kernel, the following vulnerability has been resolved: netrom: Fix memory leak in nr_sendmsg() syzbot reported a memory leak [1]. Whe
CVE-2025-68809 In the Linux kernel, the following vulnerability has been resolved: ksmbd: vfs: fix race on m_flags in vfs_cache ksmbd maintains delete-on-close an
CVE-2025-68817 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency Under hig
CVE-2025-68767 In the Linux kernel, the following vulnerability has been resolved: hfsplus: Verify inode mode when loading from disk syzbot is reporting that S_IF
CVE-2025-68774 In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create When sync() and link
CVE-2025-71067 In the Linux kernel, the following vulnerability has been resolved: ntfs: set dummy blocksize to read boot_block when mounting When mounting, sb->s
CVE-2025-71118 In the Linux kernel, the following vulnerability has been resolved: ACPICA: Avoid walking the Namespace if start_node is NULL Although commit 0c999
CVE-2025-68780 In the Linux kernel, the following vulnerability has been resolved: sched/deadline: only set free_cpus for online runqueues Commit 16b269436b72 ("s
CVE-2025-68798 In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Check event before enable to avoid GPF On AMD machines cpuc->even
CVE-2025-68794 In the Linux kernel, the following vulnerability has been resolved: iomap: adjust read range correctly for non-block-aligned positions iomap_adjust
CVE-2025-71072 In the Linux kernel, the following vulnerability has been resolved: shmem: fix recovery on rename failures maple_tree insertions can fail if we are
CVE-2025-68351 In the Linux kernel, the following vulnerability has been resolved: exfat: fix refcount leak in exfat_find Fix refcount leaks in `exfat_find` relat
CVE-2025-68736 In the Linux kernel, the following vulnerability has been resolved: landlock: Fix handling of disconnected directories Disconnected files or direct
CVE-2025-68353 In the Linux kernel, the following vulnerability has been resolved: net: vxlan: prevent NULL deref in vxlan_xmit_one Neither sock4 nor sock6 pointe
CVE-2025-68745 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Commit aefed3e5548f ("scsi: qla2xxx:
CVE-2025-68365 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize allocated memory before use KMSAN reports: Multiple uninit
CVE-2025-68368 In the Linux kernel, the following vulnerability has been resolved: md: init bioset in mddev_init IO operations may be needed before md_run(), such
CVE-2025-68725 In the Linux kernel, the following vulnerability has been resolved: bpf: Do not let BPF test infra emit invalid GSO types to stack Yinhao et al. re
CVE-2026-23111 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()
CVE-2026-23209 In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlan_common_newlink() valis provided a nice r
CVE-2026-23074 In the Linux kernel, the following vulnerability has been resolved: net/sched: Enforce that teql can only be used as root qdisc Design intent of te
CVE-2026-23060 In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec au

Version: 6.17.0-16.16 2026-02-07 13:09:07 UTC

 linux (6.17.0-16.16) questing; urgency=medium
 .
   * questing/linux: 6.17.0-16.16 -proposed tracker (LP: #2141148)
 .
   * Packaging resync (LP: #1786013)
     - [Packaging] debian.master/dkms-versions -- update from kernel-versions
       (main/2026.02.09)
 .
   * Support Intel Scorpius Peak, Whale Peak WiFi/Bluetooth for Intel Panther
     Lake platforms (LP: #2116169)
     - Bluetooth: btintel_pcie: Add Bluetooth core/platform as comments
     - Bluetooth: btintel_pcie: Add id of Scorpious, Panther Lake-H484
 .
   * Boot up hang with ucsi call trace while plug power cord or device on tbt5
     port (LP: #2127764)
     - SAUCE: usb: typec: ucsi: Fix workqueue destruction race during connector
       cleanup
 .
   * net:rtnetlink.sh in ubuntu_kernel_selftests failed with FAIL: address
     proto IPv4 / IPv6 (LP: #2031531)
     - selftests: rtnetlink: skip tests if tools or feats are missing
 .
   * TBT call trace while connecting TBT4 monitor on TBT5 port (LP: #2137613)
     - drm/i915/psr: Do not unnecessarily remove underrun on idle PSR WA
 .
   * No output on external monitor when connecting to dell dock (LP: #2131066)
     - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC
     - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links
     - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is
       required
     - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config
     - drm/i915/dp_mst: Track DSC enabled status on the MST link
     - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the
       link
     - drm/i915/psr: Underrun on idle PSR wa only when pkgc latency > delayed
       vblank
     - drm/i915/display: Remove unused declarations of intel_io_*
     - drm/i915/dp: Fix panel replay when DSC is enabled
 .
   * [questing] kernel BUG at lib/string_helpers.c:1043! (LP: #2129580)
     - erspan: Initialize options_len before referencing options.
 .
   * Hotplug dock with monitor leads to call trace (LP: #2130998)
     - drm/i915/psr: Check pause counter before continuing to PSR activation
     - drm/i915/psr: Check PSR pause counter in __psr_wait_for_idle_locked
 .
   * [SRU] Fix the error during suspend on cs42l43 (LP: #2138423)
     - mfd: cs42l43: Remove IRQ masking in suspend
     - ASoC: cs42l43: Rename system suspend callback and fix debug print
     - ASoC: cs42l43: Store IRQ domain in codec private data
     - ASoC: cs42l43: Disable IRQs in system suspend
     - ASoC: cs42l43: Shutdown jack detection on suspend
 .
   * noble/plucky: ubuntu_kselftests_ftrace fails 7 ftrace:test.d tests for
     riscv64 on openstack:riscv64.vm (LP: #2124276)
     - riscv: Enable ARCH_HAVE_NMI_SAFE_CMPXCHG
     - [Config] Enable ARCH_HAVE_NMI_SAFE_CMPXCHG for riscv64
 .
   * Got call trace when plug in device/AC in type-c port(both TBT5/TBT4)
     (LP: #2138192)
     - usb: typec: ucsi: Add support for READ_POWER_LEVEL command
     - usb: typec: ucsi: Add check for UCSI version
 .
   * Export CWSR size to userspace (LP: #2134491)
     - drm/amdkfd: bump minimum vgpr size for gfx1151
     - drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace
 .
   * [SRU] add pmc c6 support of Arrow Lake (LP: #2137615)
     - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID
     - platform/x86:intel/pmc: Add support for multiple DMU GUIDs
     - platform/x86:intel/pmc: Add DMU GUID to Arrow Lake U/H
 .
   * net:tap in ubuntu_kselftests_net fails on Noble (buffer overflow detected)
     (LP: #2067642)
     - SAUCE: selftests: net: fix "buffer overflow detected" for tap.c
 .
   * MT7925 wifi is hard blocked on HP's machine (LP: #2127044)
     - SAUCE: wifi: mt76: mt7925: add DMI quirk for HP Z2 Mini G1a Workstation
 .
   * No on-screen keyboard on dell tablets (LP: #2122398)
     - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI
       quirks
 .
   * Enable RTL ASPM for more new Dell platforms (LP: #2133144)
     - SAUCE: r8169: Add more Dell platforms to enable ASPM
 .
   * Enable RTL ASPM for new Dell platforms (LP: #2121200)
     - SAUCE: r8169: enable ASPM on all new Dell platforms
 .
   * Questing update: v6.17.13 upstream stable release (LP: #2139960)
     - smack: deduplicate "does access rule request transmutation"
     - smack: fix bug: SMACK64TRANSMUTE set on non-directory
     - smack: deduplicate xattr setting in smack_inode_init_security()
     - smack: always "instantiate" inode in smack_inode_init_security()
     - smack: fix bug: invalid label of unix socket file
     - smack: fix bug: setting task label silently ignores input garbage
     - accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail
     - drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq
     - drm/panel: visionox-rm69299: Don't clear all mode flags
     - accel/ivpu: Rework bind/unbind of imported buffers
     - accel/ivpu: Make function parameter names consistent
     - accel/ivpu: Fix DCT active percent format
     - bpf: Cleanup unused func args in rqspinlock implementation
     - tools/nolibc: handle NULL wstatus argument to waitpid()
     - USB: Fix descriptor count when handling invalid MBIM extended descriptor
     - perf bpf_counter: Fix opening of "any"(-1) CPU events
     - ima: Attach CREDS_CHECK IMA hook to bprm_creds_from_file LSM hook
     - pinctrl: renesas: rzg2l: Fix PMC restore
     - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback
     - clk: renesas: cpg-mssr: Read back reset registers to assure values
       latched
     - drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler()
     - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync()
     - remoteproc: imx_rproc: Fix runtime PM cleanup and improve remove path
     - objtool: Fix standalone --hacks=jump_label
     - objtool: Fix weak symbol detection
     - accel/ivpu: Fix race condition when mapping dmabuf
     - perf parse-events: Fix legacy cache events if even
1786013 Packaging resync
2031531 net:rtnetlink.sh in ubuntu_kernel_selftests failed with FAIL: address proto IPv4 / IPv6
2129580 [questing] kernel BUG at lib/string_helpers.c:1043!
2138423 [SRU] Fix the error during suspend on cs42l43
2138192 Got call trace when plug in device/AC in type-c port(both TBT5/TBT4)
2137615 [SRU] add pmc c6 support of Arrow Lake
2067642 net:tap in ubuntu_kselftests_net fails on Noble (buffer overflow detected)
2139960 Questing update: v6.17.13 upstream stable release
2139373 Questing update: v6.17.12 upstream stable release
2138824 Questing update: v6.17.11 upstream stable release
2137723 Questing update: v6.17.10 upstream stable release
2136979 Intel,External monitor flickers or no output when connected to WD25 dock
CVE-2025-68344 In the Linux kernel, the following vulnerability has been resolved: ALSA: wavefront: Fix integer overflow in sample size validation The wavefront_s
CVE-2025-68345 In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() The
CVE-2025-68346 In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detect_stream_formats() The function detect_
CVE-2025-68323 In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: fix use-after-free caused by uec->work The delayed work uec->
CVE-2025-68766 In the Linux kernel, the following vulnerability has been resolved: irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() If irq_domain_trans
CVE-2025-68324 In the Linux kernel, the following vulnerability has been resolved: scsi: imm: Fix use-after-free bug caused by unfinished delayed work The delayed
CVE-2025-68756 In the Linux kernel, the following vulnerability has been resolved: block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock blk
CVE-2025-68753 In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: add bounds check in put_user loop for DSP events In the DS
CVE-2025-68347 In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP e
CVE-2025-68348 In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in __blkdev_issue_zero_pages Move the fatal signal check
CVE-2025-68764 In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags When a f
CVE-2025-68735 In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Prevent potential UAF in group creation This commit prevents the p
CVE-2025-68349 In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixe
CVE-2025-68754 In the Linux kernel, the following vulnerability has been resolved: rtc: amlogic-a4: fix double free caused by devm The clock obtained via devm_clk
CVE-2025-68325 In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop In cake_drop(),
CVE-2025-68762 In the Linux kernel, the following vulnerability has been resolved: net: netpoll: initialize work queue before error checks Prevent a kernel warnin
CVE-2025-68352 In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix out-of-bounds memory access in ch341_transfer_one Discovered by
CVE-2025-68752 In the Linux kernel, the following vulnerability has been resolved: iavf: Implement settime64 with -EOPNOTSUPP ptp_clock_settime() assumes every pt
CVE-2025-68354 In the Linux kernel, the following vulnerability has been resolved: regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
CVE-2025-68356 In the Linux kernel, the following vulnerability has been resolved: gfs2: Prevent recursive memory reclaim Function new_inode() returns a new inode
CVE-2025-68758 In the Linux kernel, the following vulnerability has been resolved: backlight: led-bl: Add devlink to supplier LEDs LED Backlight is a consumer of
CVE-2025-68358 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() From the memory
CVE-2025-68359 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free of qgroup record after failure to add delayed ref head I
CVE-2025-68765 In the Linux kernel, the following vulnerability has been resolved: mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() In mt7615_mcu_wtbl_s
CVE-2025-68360 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks MT7996
CVE-2025-68738 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx() If a link does n
CVE-2025-68361 In the Linux kernel, the following vulnerability has been resolved: erofs: limit the level of fs stacking for file-backed mounts Otherwise, it coul
CVE-2025-68739 In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: hisi: Fix potential UAF in OPP handling Ensure all required data
CVE-2025-68763 In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Correctly handle return of sg_nents_for_len The return value
CVE-2025-68740 In the Linux kernel, the following vulnerability has been resolved: ima: Handle error code returned by ima_filter_rule_match() In ima_match_rules()
CVE-2025-68362 In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() The r
CVE-2025-68741 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix improper freeing of purex item In qla2xxx_process_purls_iocb
CVE-2025-68742 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix invalid prog->stats access when update_effective_progs fails Syzkaller
CVE-2025-68759 In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() In rtl8180_
CVE-2025-68743 In the Linux kernel, the following vulnerability has been resolved: mshv: Fix create memory region overlap check The current check is incorrect; it
CVE-2025-68363 In the Linux kernel, the following vulnerability has been resolved: bpf: Check skb->transport_header is set in bpf_skb_check_mtu The bpf_skb_check_
CVE-2025-68751 In the Linux kernel, the following vulnerability has been resolved: s390/fpu: Fix false-positive kmsan report in fpu_vstl() A false-positive kmsan
CVE-2025-68744 In the Linux kernel, the following vulnerability has been resolved: bpf: Free special fields when update [lru_,]percpu_hash maps As [lru_,]percpu_h
CVE-2025-68364 In the Linux kernel, the following vulnerability has been resolved: ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() In '__ocfs2_move_e
CVE-2025-68366 In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect There is one use-after-free warnin
CVE-2025-68367 In the Linux kernel, the following vulnerability has been resolved: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse The following
CVE-2025-68369 In the Linux kernel, the following vulnerability has been resolved: ntfs3: init run lock for extend inode After setting the inode mode of $Extend t
CVE-2025-68370 In the Linux kernel, the following vulnerability has been resolved: coresight: tmc: add the handle of the event to the path The handle is essential
CVE-2025-68755 In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver The MOST I2C driver has been completely
CVE-2025-68371 In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix device resources accessed after device removal Correct poss
CVE-2025-68372 In the Linux kernel, the following vulnerability has been resolved: nbd: defer config put in recv_work There is one uaf issue in recv_work when run
CVE-2025-68373 In the Linux kernel, the following vulnerability has been resolved: md: avoid repeated calls to del_gendisk There is a uaf problem which is found b
CVE-2025-68374 In the Linux kernel, the following vulnerability has been resolved: md: fix rcu protection in md_wakeup_thread We attempted to use RCU to protect t
CVE-2025-68375 In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix NULL event access and potential PEBS record loss When intel_pmu_d
CVE-2025-68376 In the Linux kernel, the following vulnerability has been resolved: coresight: ETR: Fix ETR buffer use-after-free issue When ETR is enabled as CS_M
CVE-2025-68746 In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeout handling When the CPU that the QSPI interrupt h
CVE-2025-68760 In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show In iommu_mmio_wr
CVE-2025-68747 In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF on kernel BO VA nodes If the MMU is down, panthor_vm_unmap
CVE-2025-68748 In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF race between device unplug and FW event processing The fun
CVE-2025-68749 In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix race condition when unbinding BOs Fix 'Memory manager not clean
CVE-2025-68378 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stackmap overflow check in __bpf_get_stackid() Syzkaller reported a KA
CVE-2025-68379 In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure A NULL pointer d
CVE-2025-68380 In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix peer HE MCS assignment In ath11k_wmi_send_peer_assoc_cmd(), p
CVE-2025-68724 In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id Use ch
CVE-2025-68726 In the Linux kernel, the following vulnerability has been resolved: crypto: aead - Fix reqsize handling Commit afddce13ce81d ("crypto: api - Add re
CVE-2025-68727 In the Linux kernel, the following vulnerability has been resolved: ntfs3: Fix uninit buffer allocated by __getname() Fix uninit errors caused afte
CVE-2025-68728 In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix uninit memory after failed mi_read in mi_format_new Fix a KMSAN un-i
CVE-2025-68729 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix MSDU buffer types handling in RX error path Currently, packet
CVE-2025-68757 In the Linux kernel, the following vulnerability has been resolved: drm/vgem-fence: Fix potential deadlock on release A timer that expires a vgem f
CVE-2025-68730 In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context() Don't add B
CVE-2025-68732 In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix race in syncpt alloc/free Fix race condition between host1x_sy
CVE-2025-68733 In the Linux kernel, the following vulnerability has been resolved: smack: fix bug: unprivileged task can create labels If an unprivileged task is
CVE-2025-68282 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: fix use-after-free in usb_gadget_state_work A race condition
CVE-2025-68283 In the Linux kernel, the following vulnerability has been resolved: libceph: replace BUG_ON with bounds check for map->max_osd OSD indexes come fro
CVE-2025-68284 In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() Th
CVE-2025-68285 In the Linux kernel, the following vulnerability has been resolved: libceph: fix potential use-after-free in have_mon_and_osd_map() The wait loop i
CVE-2025-68338 In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: Don't free uninitialized ksz_irq If something goes wrong a
CVE-2025-68286 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check NULL before accessing [WHAT] IGT kms_cursor_legacy's lon
CVE-2025-68326 In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Fix stack_depot usage Add missing stack_depot_init() call when CONF
CVE-2025-68287 In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call pat
CVE-2025-68331 In the Linux kernel, the following vulnerability has been resolved: usb: uas: fix urb unmapping issue when the uas device is remove during ongoing d
CVE-2025-40345 In the Linux kernel, the following vulnerability has been resolved: usb: storage: sddr55: Reject out-of-bound new_pba Discovered by Atuin - Automat
CVE-2025-68288 In the Linux kernel, the following vulnerability has been resolved: usb: storage: Fix memory leak in USB bulk transport A kernel memory leak was id
CVE-2025-68327 In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: Fix synchronous external abort on unbind A synchronous exte
CVE-2025-68289 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_eem: Fix memory leak in eem_unwrap The existing code did not han
CVE-2025-68290 In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure The MOST subsystem has a non-s
CVE-2025-68292 In the Linux kernel, the following vulnerability has been resolved: mm/memfd: fix information leak in hugetlb folios When allocating hugetlb folios
CVE-2025-68293 In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix NULL pointer deference when splitting folio Commit c010d47f
CVE-2025-68328 In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: fix bug in saving controller data Fix the incorrect us
CVE-2025-68294 In the Linux kernel, the following vulnerability has been resolved: io_uring/net: ensure vectored buffer node import is tied to notification When s
CVE-2025-68295 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix memory leak in cifs_construct_tcon() When having a multiuser m
CVE-2025-68296 In the Linux kernel, the following vulnerability has been resolved: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup Protect vga_swi
CVE-2025-68297 In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash in process_v2_sparse_read() for encrypted directories The crash
CVE-2025-68298 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref In btus
CVE-2025-68339 In the Linux kernel, the following vulnerability has been resolved: atm/fore200e: Fix possible data race in fore200e_open() Protect access to fore2
CVE-2025-68329 In the Linux kernel, the following vulnerability has been resolved: tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs When a VMA is
CVE-2025-68330 In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: Fix irq assumption regression The code in bmc150-accel-core
CVE-2025-68299 In the Linux kernel, the following vulnerability has been resolved: afs: Fix delayed allocation of a cell's anonymous key The allocation of a cell'
CVE-2025-68300 In the Linux kernel, the following vulnerability has been resolved: fs/namespace: fix reference leak in grab_requested_mnt_ns lookup_mnt_ns() alrea
CVE-2025-68301 In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix fragment overflow handling in RX path The atlantic driver ca
CVE-2025-40290 In the Linux kernel, the following vulnerability has been resolved: xsk: avoid data corruption on cq descriptor number Since commit 30f241fcf52a ("
CVE-2025-68302 In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: fix potential NULL dereference in sxgbe_rx() Currently, when skb is
CVE-2025-68340 In the Linux kernel, the following vulnerability has been resolved: team: Move team device type change at the end of team_port_add Attempting to ad
CVE-2025-68303 In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel: punit_ipc: fix memory corruption This passes the address o
CVE-2025-68341 In the Linux kernel, the following vulnerability has been resolved: veth: reduce XDP no_direct return section to fix race As explain in commit fa34
CVE-2025-68304 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: lookup hci_conn on RX path on protocol side The hdev lock/
CVE-2025-68305 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: Prevent race in socket write iter and sock bind There is a
CVE-2025-68306 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface W
CVE-2025-68342 In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessin
CVE-2025-68343 In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessin
CVE-2025-68307 In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs Th
CVE-2025-68308 In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb: leaf: Fix potential infinite loop in command parsers The `kvas
CVE-2025-68221 In the Linux kernel, the following vulnerability has been resolved: mptcp: fix address removal logic in mptcp_pm_nl_rm_addr Fix inverted WARN_ON_ON
CVE-2025-40246 In the Linux kernel, the following vulnerability has been resolved: xfs: fix out of bounds memory read error in symlink repair xfs/286 produced thi
CVE-2025-68230 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix gpu page fault after hibernation on PF passthrough On PF passth
CVE-2025-68220 In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on er
CVE-2025-68236 In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3) According t
CVE-2025-40247 In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix pgtable prealloc error path The following splat was reported:
CVE-2025-40248 In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore signal/timeout on connect() if already established During connect
CVE-2025-68219 In the Linux kernel, the following vulnerability has been resolved: cifs: fix memory leak in smb3_fs_context_parse_param error path Add proper clea
CVE-2025-40249 In the Linux kernel, the following vulnerability has been resolved: gpio: cdev: make sure the cdev fd is still active before emitting events With t
CVE-2025-40250 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clean up only new IRQ glue on request_irq() failure The mlx5_irq_allo
CVE-2025-40251 In the Linux kernel, the following vulnerability has been resolved: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy The function dev
CVE-2025-68222 In the Linux kernel, the following vulnerability has been resolved: pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc s32_pinctrl_desc i
CVE-2025-68215 In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP cleanup on driver removal in error path Improve the cleanup on rel
CVE-2025-68213 In the Linux kernel, the following vulnerability has been resolved: idpf: fix possible vport_config NULL pointer deref in remove Attempting to remo
CVE-2025-40252 In the Linux kernel, the following vulnerability has been resolved: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_t
CVE-2025-40253 In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Fix double-kfree The function 'mpc_rcvd_sweep_req(mpcginfo)' is call
CVE-2025-68218 In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix lockdep WARN due to partition scan work Blktests test cases
CVE-2025-68232 In the Linux kernel, the following vulnerability has been resolved: veth: more robust handing of race to avoid txq getting stuck Commit dc82a33297f
CVE-2025-40254 In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: remove never-working support for setting nsh fields The valid
CVE-2025-68233 In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Add call to put_pid() Add a call to put_pid() corresponding to get_t
CVE-2025-40255 In the Linux kernel, the following vulnerability has been resolved: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() The ethtool tsc
CVE-2025-68228 In the Linux kernel, the following vulnerability has been resolved: drm/plane: Fix create_in_format_blob() return value create_in_format_blob() is
CVE-2025-68223 In the Linux kernel, the following vulnerability has been resolved: drm/radeon: delete radeon_fence_process in is_signaled, no deadlock Delete the
CVE-2025-40257 In the Linux kernel, the following vulnerability has been resolved: mptcp: fix a race in mptcp_pm_del_add_timer() mptcp_pm_del_add_timer() can call
CVE-2025-40258 In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race condition in mptcp_schedule_work() syzbot reported use-after-fr
CVE-2025-68216 In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Disable trampoline for kernel module function trace The current
CVE-2025-68229 In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() If the allo
CVE-2025-40259 In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Do not sleep in atomic context sg_finish_rem_req() calls blk_rq_unmap
CVE-2025-40260 In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix scx_enable() crash on helper kthread creation failure A crash wa
CVE-2025-40261 In the Linux kernel, the following vulnerability has been resolved: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() nvme_f
CVE-2025-68235 In the Linux kernel, the following vulnerability has been resolved: nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot nvkm_falcon_fw::b
CVE-2025-68231 In the Linux kernel, the following vulnerability has been resolved: mm/mempool: fix poisoning order>0 pages with HIGHMEM The kernel test has report
CVE-2025-68217 In the Linux kernel, the following vulnerability has been resolved: Input: pegasus-notetaker - fix potential out-of-bounds access In the pegasus_no
CVE-2025-40262 In the Linux kernel, the following vulnerability has been resolved: Input: imx_sc_key - fix memory corruption on unload This is supposed to be "pri
CVE-2025-40263 In the Linux kernel, the following vulnerability has been resolved: Input: cros_ec_keyb - fix an invalid memory access If cros_ec_keyb_register_mat
CVE-2025-68234 In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd_net: fix wrong argument types for skb_queue_splice() If timestamp
CVE-2025-40264 In the Linux kernel, the following vulnerability has been resolved: be2net: pass wrb_params in case of OS2BMC be_insert_vlan_in_pkt() is called wit
CVE-2025-68225 In the Linux kernel, the following vulnerability has been resolved: lib/test_kho: check if KHO is enabled We must check whether KHO is enabled prio
CVE-2025-68227 In the Linux kernel, the following vulnerability has been resolved: mptcp: Fix proto fallback detection with BPF The sockmap feature allows bpf sys
CVE-2025-68237 In the Linux kernel, the following vulnerability has been resolved: mtdchar: fix integer overflow in read/write ioctls The "req.start" and "req.len
CVE-2025-68212 In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized 'offp' in statmount_string() In statmount_string(), most
CVE-2025-68238 In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix DMA device NULL pointer dereference The DMA device p
CVE-2025-40265 In the Linux kernel, the following vulnerability has been resolved: vfat: fix missing sb_min_blocksize() return value checks When emulating an nvme
CVE-2025-68214 In the Linux kernel, the following vulnerability has been resolved: timers: Fix NULL function pointer race in timer_shutdown_sync() There is a race
CVE-2025-40266 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the untrusted offset in FF-A memory share Verify the offset t

Version: *DELETED* 2026-02-07 11:09:11 UTC
No changelog for deleted or moved packages.


About   -   Send Feedback to @ubuntu_updates