UbuntuUpdates.org

Package "linux-nvidia-tegra"

Name: linux-nvidia-tegra

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Header files related to Linux kernel version 6.8.0
  • Header files related to Linux kernel version 6.8.0
  • Header files related to Linux kernel version 6.8.0
  • Header files related to Linux kernel version 6.8.0

Latest version: 6.8.0-1020.20
Release: noble (24.04)
Level: security
Repository: universe

Links



Other versions of "linux-nvidia-tegra" in Noble

Repository Area Version
security main 6.8.0-1008.8
updates main 6.8.0-1008.8
updates universe 6.8.0-1020.20
proposed universe 6.8.0-1020.20
proposed main 6.8.0-1008.8

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 6.8.0-1020.20 2026-03-23 20:08:27 UTC

  linux-nvidia-tegra (6.8.0-1020.20) noble; urgency=medium

  [ Ubuntu-realtime: 6.8.1-1045.46 ]

  [ Ubuntu: 6.8.0-106.106 ]
  * Miscellaneous upstream changes
    - apparmor: validate DFA start states are in bounds in unpack_pdb
    - apparmor: fix memory leak in verify_header
    - apparmor: replace recursive profile removal with iterative approach
    - apparmor: fix: limit the number of levels of policy namespaces
    - apparmor: fix side-effect bug in match_char() macro usage
    - apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
    - apparmor: Fix double free of ns_name in aa_replace_profiles()
    - apparmor: fix unprivileged local user can do privileged policy
      management
    - apparmor: fix differential encoding verification
    - apparmor: fix race on rawdata dereference
    - apparmor: fix race between freeing data and fs accessing it

 -- Jacob Martin <email address hidden> Fri, 06 Mar 2026 21:20:37 -0600

Source diff to previous version

Version: 6.8.0-1016.16 2026-02-23 14:08:40 UTC

  linux-nvidia-tegra (6.8.0-1016.16) noble; urgency=medium

  * noble/linux-nvidia-tegra: 6.8.0-1016.16 -proposed tracker (LP: #2140352)

  * apply NVIDIA k6.8 patches Feb 3, 2026 (LP: #2140033)
    - NVIDIA: SAUCE: iommu/dma: Check for valid page before accessing P2PDMA
      state

Source diff to previous version
2140033 apply NVIDIA k6.8 patches Feb 3, 2026

Version: 6.8.0-1013.13 2026-01-08 14:08:09 UTC

  linux-nvidia-tegra (6.8.0-1013.13) noble; urgency=medium

  * noble/linux-nvidia-tegra: 6.8.0-1013.13 -proposed tracker (LP: #2131246)

  * NVIDIA k6.8 patches Oct 9, 2025 (LP: #2127135)
    - NVIDIA: SAUCE: ASoC: tegra: Increasing max period/buffer size
    - Revert "NVIDIA: SAUCE: usb: host: xhci: Fix USB2 HW LPM port number"
    - xhci: stored cached port capability values in one place
    - xhci: remove xhci_check_usb2_port_capability helper
    - Revert "NVIDIA: SAUCE: usb: gadget: serial: Fix possible race with
      close"
    - Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"
    - usb: gadget: u_serial: Fix race condition in TTY wakeup
    - NVIDIA: SAUCE: i2c: tegra: Do not mark ACPI devices and PREEMPT_RT as
      irq safe
    - NVIDIA: SAUCE: kconfig: Add config for production build
    - NVIDIA: SAUCE: arm64: configs: Update recovery defconfig
    - NVIDIA: SAUCE: pwm: tegra: Fix types of input arguments
    - NVIDIA: SAUCE: tegra_hv: Add sysfs to trigger HVC
    - NVIDIA: SAUCE: arch: arm64: configs: Sanitize the defconfig
    - NVIDIA: SAUCE: arch: arm64: configs: Disable Unsupported Tegra configs
    - NVIDIA: SAUCE: arch: arm64: Enable kprobes config
    - NVIDIA: SAUCE: ARM64: configs: Disable frequency governor configs
    - NVIDIA: SAUCE: arm64: prod_defconfig: Enable PCIe hotplug
    - NVIDIA: SAUCE: arm64: configs: tegra: enable Yama
    - NVIDIA: SAUCE: arm64: prod_defconfig: add T264 support
    - NVIDIA: SAUCE: arm64: prod_defconfig: Remove unused CONFIGs
    - NVIDIA: SAUCE: tegra_prod_defconfig: Disable configs
    - iommu/arm-smmu-v3: Issue a batch of commands to the same cmdq
    - iommu/arm-smmu-v3: Pass in cmdq pointer to arm_smmu_cmdq_build_sync_cmd
    - iommu/arm-smmu-v3: Pass in cmdq pointer to arm_smmu_cmdq_init
    - iommu/arm-smmu-v3: Make symbols public for CONFIG_TEGRA241_CMDQV
    - iommu/arm-smmu-v3: Add ARM_SMMU_OPT_TEGRA241_CMDQV
    - iommu/arm-smmu-v3: Add acpi_smmu_iort_probe_model for impl
    - iommu/arm-smmu-v3: Add struct arm_smmu_impl_ops
    - iommu/arm-smmu-v3: Add in-kernel support for NVIDIA Tegra241 (Grace)
      CMDQV
    - iommu/arm-smmu-v3: Start a new batch if new command is not supported
    - iommu/tegra241-cmdqv: Limit CMDs for VCMDQs of a guest owned VINTF
    - iommu/tegra241-cmdqv: Fix -Wformat-truncation warnings in
      lvcmdq_error_header
    - iommu/tegra241-cmdqv: Fix ioremap() error handling in probe()
    - iommu/tegra241-cmdqv: Drop static at local variable
    - iommu/tegra241-cmdqv: Do not allocate vcmdq until
      dma_set_mask_and_coherent
    - iommu/tegra241-cmdqv: Staticize cmdqv_debugfs_dir
    - iommu/tegra241-cmdqv: Fix unused variable warning
    - iommu/tegra241-cmdqv: Fix alignment failure at max_n_shift
    - iommu/tegra241-cmdqv: do not use smp_processor_id in preemptible context
    - iommu/tegra241-cmdqv: Read SMMU IDR1.CMDQS instead of hardcoding
    - iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent()
    - NVIDIA: SAUCE: mmc: sd: Add quirk for SanDisk SR64G Extreme Pro power
      off notify timeout
    - NVIDIA: SAUCE: i2c: tegra: Fix the order of mutex unlock
    - i2c: tegra: Fix reset error handling with ACPI
    - i2c: tegra: Use internal reset when reset property is not available
    - NVIDIA: SAUCE: i2c: tegra: Add Tegra256 I2C controller support
    - NVIDIA: SAUCE: serial: amba-pl011: Do not use IBRD
    - Revert "NVIDIA: SAUCE: arm64: configs: Enable ext* xattr & ACL"
    - NVIDIA: SAUCE: iommu/arm-smmu-v3: use reserved memory for allocations
    - NVIDIA: SAUCE: tegra_hv: cert & misra fixes in tegra_hv.c drv
    - NVIDIA: SAUCE: virt: add sanity checks for ivc info's metadata
    - NVIDIA: SAUCE: tegra_hv: don't expose mempool and ivc address in logs
    - NVIDIA: SAUCE: tegra_hv: add support of async error diagnostics in
      tegra_hv driver
    - NVIDIA: SAUCE: tegra_hv: use prod kernel flag exposed by defconfig
    - NVIDIA: SAUCE: tegra_hv: add max number of vmid check
    - NVIDIA: SAUCE: t256s: gpio: add gpio support for tegra256
    - NVIDIA: SAUCE: gpio-tegra: add is_tegra_hypervisor check
    - Revert "NVIDIA: SAUCE: iommu/arm-smmu-v3: add suspend/resume support"
    - NVIDIA: SAUCE: iommu/arm-smmu-v3: add suspend/resume support
    - NVIDIA: SAUCE: iommu/arm-smmu-v3: Add pm suspend op
    - NVIDIA: SAUCE: ivc: generate warning instead of panicing the target
    - NVIDIA: SAUCE: ivc: fix comments raised by secure code inspection
    - NVIDIA: SAUCE: ivc: cert & misra fixes in ivc.c drv
    - NVIDIA: SAUCE: tegra_hv: use kzalloc instead of kmalloc
    - NVIDIA: SAUCE: tegra_hv: remove tegra_hv_ivc_convert_cookie API
    - NVIDIA: SAUCE: tegra_hv: clear out memory before release
    - NVIDIA: SAUCE: tegra_hv: stop logging total mempool & ivc memory size
    - NVIDIA: SAUCE: tegra_hv: cert & misra fixes
    - NVIDIA: SAUCE: iommu/arm-smmu-v3: Add device-tree support in
      tegra241-cmdqv driver
    - NVIDIA: SAUCE: iommu/tegra241-cmdqv: WAR for 64-bit writes on NV HV
    - NVIDIA: SAUCE: iommu/arm-smmu-v3: Retain prod and cons after resume
    - NVIDIA: SAUCE: arm64: configs: Enable SCSI_UFS_DWC_TC_PLATFORM support
    - NVIDIA: SAUCE: PCI: of: Use of_property_present()
    - NVIDIA: SAUCE: i2c: tegra: Use of_property_present()
    - NVIDIA: SAUCE: arm64: configs: Enable CMDQV
    - NVIDIA: SAUCE: tegra_hv: doxygen comment fixes in hv drivers
    - NVIDIA: SAUCE: hv-ivc: add doxygen comment
    - NVIDIA: SAUCE: tegra_hv: clear out memory while unreserving ivc queue
    - NVIDIA: SAUCE: tegra_hv: cert & misra fixes
    - NVIDIA: SAUCE: i2c: tegra: Use separate variables for fast and fastplus
    - NVIDIA: SAUCE: i2c: tegra: Use fast mode for master code byte of HS mode
    - NVIDIA: SAUCE: i2c: tegra: Fix SCL low time violation in FM
    - Revert "NVIDIA: SAUCE: PCI: tegra194: Refactor EP initialization
      completion"
    - NVIDIA: SAUCE: PCI: tegra194: Fix core_clk rate set
    - NVIDIA: SAUCE: pci: Move dw_pcie_

Source diff to previous version
2127135 NVIDIA k6.8 patches Oct 9, 2025
2130195 Disable upstream rtl8852 drivers to avoid conflict with OOTM
2129989 Don't need to blacklist snd_soc_tegra_audio_graph_card
2121337 Enable Xilinx PS UART configs
2112469 Fix ARL-U/H suspend issues
2123901 r8169 can not wake on LAN via SFP moudule
2126659 Add pvpanic kernel modules to linux-modules
2126698 Fix failure to build TDX module
2123815 Ubuntu 24.04.2: error in audit_log_object_context keep printing in the kernel and console
2125444 ensure mptcp keepalives are honored when set
2103680 System hangs when running the memory stress test
2125053 UBUNTU: fan: fail to check kmalloc() return could cause a NULL pointer dereference
2122592 jammy:linux-riscv-6.8 is FTBFS because of wrong include
2122006 Performance degrades rapidly when spawning more processes to run benchmark
2124105 VMSCAPE CVE-2025-40300
CVE-2025-21729 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion The rtwdev-
CVE-2025-38227 In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Terminating the subsequent process of initialization failure syzb
CVE-2025-38678 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject duplicate device on updates A chain/flowtable upda
CVE-2025-38616 In the Linux kernel, the following vulnerability has been resolved: tls: handle data disappearing from under the TLS ULP TLS expects that it owns t
CVE-2025-37838 In the Linux kernel, the following vulnerability has been resolved: HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due t
CVE-2025-40300 In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that ex
CVE-2025-38352 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer
CVE-2025-38118 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete This reworks MGMT_

Version: 6.8.0-1012.12 2025-11-17 17:07:28 UTC

  linux-nvidia-tegra (6.8.0-1012.12) noble; urgency=medium

  * noble/linux-nvidia-tegra: 6.8.0-1012.12 -proposed tracker (LP: #2127978)

  * Enable KVM on noble:linux-nvidia-tegra (LP: #2127981)
    - [Config] nvidia-tegra: Enable KVM

  * Packaging resync (LP: #1786013)
    - [Packaging] nvidia-tegra: Remove dwarfdump from Build-Depends

  * NVIDIA k6.8 patches Oct 9, 2025 (LP: #2127135)
    - NVIDIA: SAUCE: tegra-epl: Map mission status reg if only required
    - NVIDIA: SAUCE: tegra-epl: allow tegra-epl to be built as module
    - NVIDIA: SAUCE: tegra-epl: add plausibility checks and improve error
      handling
    - NVIDIA: SAUCE: soc/tegra: pmc: Remove reset status sysfs nodes
    - NVIDIA: SAUCE: soc/tegra: pmc: Add sysfs nodes to select boot chain

  [ Ubuntu-realtime: 6.8.1-1037.38 ]

  * noble/linux-realtime: 6.8.1-1037.38 -proposed tracker (LP: #2127430)
  * Packaging resync (LP: #1786013)
    - [Packaging] realtime: Remove dwarfdump from Build-Depends
  [ Ubuntu: 6.8.0-87.88 ]
  * noble/linux: 6.8.0-87.88 -proposed tracker (LP: #2127436)
  * CVE-2025-37838
    - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol
      Driver Due to Race Condition
  * VMSCAPE CVE-2025-40300 (LP: #2124105) // CVE-2025-40300
    - Documentation/hw-vuln: Add VMSCAPE documentation
    - x86/vmscape: Enumerate VMSCAPE bug
    - x86/vmscape: Add conditional IBPB mitigation
    - x86/vmscape: Enable the mitigation
    - x86/bugs: Move cpu_bugs_smt_update() down
    - x86/vmscape: Warn when STIBP is disabled with SMT
    - x86/vmscape: Add old Intel CPUs to affected list
  * VMSCAPE CVE-2025-40300 (LP: #2124105)
    - [Config] Enable MITIGATION_VMSCAPE config
  * CVE-2025-38352
    - posix-cpu-timers: fix race between handle_posix_cpu_timers() and
      posix_cpu_timer_del()
  * CVE-2025-38118
    - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
    - Bluetooth: MGMT: Fix sparse errors

  [ Ubuntu-realtime: 6.8.1-1036.37 ]

  * noble/linux-realtime: 6.8.1-1036.37 -proposed tracker (LP: #2125385)
  [ Ubuntu: 6.8.0-86.87 ]
  * noble/linux: 6.8.0-86.87 -proposed tracker (LP: #2125391)
    - Fix FTBS caused by incorrect pick/backport of
      "perf dso: fix dso__is_kallsyms() check"
  * noble ubuntu_ftrace_smoke_test:mmiotrace timeout on aws:r5.metal
    (LP: #2121673)
    - mm: memcg: add NULL check to obj_cgroup_put()
    - memcg: drain obj stock on cpu hotplug teardown
  * [25.04 FEAT] [post announcement] [KRN2304] CPU-MF Counters for new IBM Z
    hardware - perf part (LP: #2103415)
    - perf list: Add IBM z17 event descriptions
  * memory leaks when configuring a small rate limit in audit (LP: #2122554)
    - audit: fix skb leak when audit rate limit is exceeded
  * [UBUNTU 24.04] PAI/NNPA support for new IBM z17 (LP: #2121956)
    - s390/pai: export number of sysfs attribute files
    - s390/pai_crypto: Add support for MSA 10 and 11 pai counters
    - s390/pai_ext: Update PAI extension 1 counters
  * [UBUNTU 24.04] s390/pci: Don't abort recovery for user-space drivers
    (LP: #2121150)
    - s390/pci: Allow automatic recovery with minimal driver support
  * [UBUNTU 24.04] s390/pci: Fix stale function handles in error handling
    (LP: #2121149)
    - s390/pci: Fix stale function handles in error handling
    - s390/pci: Do not try re-enabling load/store if device is disabled
  * [UBUNTU 24.04] vfio/pci: fix 8-byte PCI loads and stores (LP: #2121146)
    - vfio/pci: Extract duplicated code into macro
    - vfio/pci: Support 8-byte PCI loads and stores
    - vfio/pci: Fix typo in macro to declare accessors
  * x86 systems with PCIe BAR addresses located outside a certain range see
    P2PDMA allocation failures and CUDA initialization errors (LP: #2120209)
    - x86/kaslr: Reduce KASLR entropy on most x86 systems
    - x86/mm/init: Handle the special case of device private pages in
      add_pages(), to not increase max_pfn and trigger
      dma_addressing_limited() bounce buffers
  * sources list generation using dwarfdump takes up to 0.5hr in build process
    (LP: #2104911)
    - [Packaging] Don't generate list of source files
  * [SRU] Apparmor: Unshifted uids for hardlinks and unix sockets in user
    namespaces (LP: #2121257)
    - apparmor: shift ouid when mediating hard links in userns
    - apparmor: shift uid when mediating af_unix in userns
  * UBSAN: shift-out-of-bounds in drivers/edac/skx_common.c:452:16
    (LP: #2119713)
    - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
  * [IdeaPad Slim 5 13ARP10 , 83J2] Microphone on AMD Ryzen 7 7735HS does not
    work (LP: #2102749)
    - ASoC: amd: yc: update quirk data for new Lenovo model
  * Fix compilation failure because of incomplete backport (LP: #2120561)
    - SAUCE: netfilter: ctnetlink: Fix -Wuninitialized in
      ctnetlink_secctx_size()
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716)
    - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
    - cpufreq: scpi: compare kHz instead of Hz
    - smack: dont compile ipv6 code unless ipv6 is configured
    - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
    - EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald
      Rapids
    - x86/fpu: Fix guest FPU state buffer allocation size
    - x86/fpu: Avoid copying dynamic FP state from init_task in
      arch_dup_task_struct()
    - x86/platform: Only allow CONFIG_EISA for 32-bit
    - [Config] updateconfigs after disabling CONFIG_EISA for amd64
    - x86/sev: Add missing RIP_REL_REF() invocations during sme_enable()
    - lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock
    - PM: sleep: Adjust check before setting power.must_resume
    - RISC-V: KVM: Disable the kernel perf counter during configure
    - selinux: Chain up tool resolving errors in install_policy.sh
    - EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
    - EDAC/ie31200: Fix the DIMM size mask for several SoCs
    - EDAC/ie312

Source diff to previous version
2127981 Enable KVM on noble:linux-nvidia-tegra
1786013 Packaging resync
2127135 NVIDIA k6.8 patches Oct 9, 2025
2124105 VMSCAPE CVE-2025-40300
2121673 noble ubuntu_ftrace_smoke_test:mmiotrace timeout on aws:r5.metal
2103415 [25.04 FEAT] [post announcement] [KRN2304] CPU-MF Counters for new IBM Z hardware - perf part
2122554 memory leaks when configuring a small rate limit in audit
2121956 [UBUNTU 24.04] PAI/NNPA support for new IBM z17
2121150 [UBUNTU 24.04] s390/pci: Don't abort recovery for user-space drivers
2121149 [UBUNTU 24.04] s390/pci: Fix stale function handles in error handling
2121146 [UBUNTU 24.04] vfio/pci: fix 8-byte PCI loads and stores
2120209 x86 systems with PCIe BAR addresses located outside a certain range see P2PDMA allocation failures and CUDA initialization errors
2104911 sources list generation using dwarfdump takes up to 0.5hr in build process
2121257 [SRU] Apparmor: Unshifted uids for hardlinks and unix sockets in user namespaces
2119713 UBSAN: shift-out-of-bounds in drivers/edac/skx_common.c:452:16
2102749 [IdeaPad Slim 5 13ARP10 , 83J2] Microphone on AMD Ryzen 7 7735HS does not work
2120561 Fix compilation failure because of incomplete backport
2121716 Noble update: upstream stable patchset 2025-09-01
2120877 Noble update: upstream stable patchset 2025-08-18
2120516 TLS socket disconnection causes various issues
2121515 Linux refcount imbalance in af_unix subsystem
CVE-2025-37838 In the Linux kernel, the following vulnerability has been resolved: HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due t
CVE-2025-40300 In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that ex
CVE-2025-38352 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer
CVE-2025-38118 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete This reworks MGMT_
CVE-2025-22028 In the Linux kernel, the following vulnerability has been resolved: media: vimc: skip .s_stream() for stopped entities Syzbot reported [1] a warnin
CVE-2025-22036 In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after get_block When get_block is called wit
CVE-2025-22039 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix overflow in dacloffset bounds check The dacloffset field was origina
CVE-2025-22062 In the Linux kernel, the following vulnerability has been resolved: sctp: add mutual exclusion in proc_sctp_do_udp_port() We must serialize calls t
CVE-2025-22065 In the Linux kernel, the following vulnerability has been resolved: idpf: fix adapter NULL pointer dereference on reboot With SRIOV enabled, idpf e
CVE-2025-22068 In the Linux kernel, the following vulnerability has been resolved: ublk: make sure ubq->canceling is set when queue is frozen Now ublk driver depe
CVE-2025-22070 In the Linux kernel, the following vulnerability has been resolved: fs/9p: fix NULL pointer dereference on mkdir When a 9p tree was mounted with op
CVE-2025-40114 In the Linux kernel, the following vulnerability has been resolved: iio: light: Add check for array bounds in veml6075_read_int_time_ms The array c
CVE-2025-22025 In the Linux kernel, the following vulnerability has been resolved: nfsd: put dl_stid if fail to queue dl_recall Before calling nfsd4_run_cb to que
CVE-2025-22027 In the Linux kernel, the following vulnerability has been resolved: media: streamzap: fix race between device disconnection and urb callback Syzkal
CVE-2025-39735 In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in ea_get() During the "size_check" label in e
CVE-2025-22033 In the Linux kernel, the following vulnerability has been resolved: arm64: Don't call NULL in do_compat_alignment_fixup() do_alignment_t32_to_handl
CVE-2025-22035 In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in print_graph_function_flags during tracer switchin
CVE-2025-22038 In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate zero num_subauth before sub_auth is accessed Access psid->sub_a
CVE-2025-22040 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix session use-after-free in multichannel connection There is a race co
CVE-2025-22041 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_sessions_deregister() In multichannel mode,
CVE-2025-22042 In the Linux kernel, the following vulnerability has been resolved: ksmbd: add bounds check for create lease context Add missing bounds check for c
CVE-2025-22044 In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: fix narrowing conversion in acpi_nfit_ctl Syzkaller has reported a
CVE-2025-22045 In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs On the followin
CVE-2025-22050 In the Linux kernel, the following vulnerability has been resolved: usbnet:fix NPE during rx_complete Missing usbnet_going_away Check in Critical P
CVE-2025-22053 In the Linux kernel, the following vulnerability has been resolved: net: ibmveth: make veth_pool_store stop hanging v2: - Created a single error ha
CVE-2025-22054 In the Linux kernel, the following vulnerability has been resolved: arcnet: Add NULL check in com20020pci_probe() devm_kasprintf() returns NULL whe
CVE-2025-22055 In the Linux kernel, the following vulnerability has been resolved: net: fix geneve_opt length integer overflow struct geneve_opt uses 5 bit length
CVE-2025-22056 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix geneve_opt type confusion addition When handling mul
CVE-2025-22057 In the Linux kernel, the following vulnerability has been resolved: net: decrease cached dst counters in dst_release Upstream fix ac888d58869b ("ne
CVE-2025-22058 In the Linux kernel, the following vulnerability has been resolved: udp: Fix memory accounting leak. Matt Dowling reported a weird UDP memory usage
CVE-2025-22060 In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: Prevent parser TCAM memory corruption Protect the parser TCAM/SRAM
CVE-2025-38637 In the Linux kernel, the following vulnerability has been resolved: net_sched: skbprio: Remove overly strict queue assertions In the current implem
CVE-2025-22063 In the Linux kernel, the following vulnerability has been resolved: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets When cal
CVE-2025-22064 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't unregister hook when table is dormant When nf_table
CVE-2025-22066 In the Linux kernel, the following vulnerability has been resolved: ASoC: imx-card: Add NULL check in imx_card_probe() devm_kasprintf() returns NUL
CVE-2023-53034 In the Linux kernel, the following vulnerability has been resolved: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans There i
CVE-2025-22071 In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak in spufs_create_context() Leak fixes back in 2008 missed one
CVE-2025-22072 In the Linux kernel, the following vulnerability has been resolved: spufs: fix gang directory lifetimes prior to "[POWERPC] spufs: Fix gang destroy
CVE-2025-22073 In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak on spufs_new_file() failure It's called from spufs_fill_dir()
CVE-2025-38575 In the Linux kernel, the following vulnerability has been resolved: ksmbd: use aead_request_free to match aead_request_alloc Use aead_request_free(
CVE-2025-22075 In the Linux kernel, the following vulnerability has been resolved: rtnetlink: Allocate vfinfo size for VF GUIDs when supported Commit 30aad41721e0
CVE-2025-37937 In the Linux kernel, the following vulnerability has been resolved: objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() If dib8000
CVE-2025-22079 In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate l_tree_depth to avoid out-of-bounds access The l_tree_depth fie
CVE-2025-22080 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Prevent integer overflow in hdr_first_de() The "de_off" and "used" va
CVE-2025-22081 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix a couple integer overflows on 32bit systems On 32bit systems the
CVE-2025-22083 In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint If vhost_
CVE-2025-22086 In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow When cur_qp isn't NULL, in or
CVE-2025-22089 In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Don't expose hw_counters outside of init net namespace Commit 467f43
CVE-2025-39728 In the Linux kernel, the following vulnerability has been resolved: clk: samsung: Fix UBSAN panic in samsung_clk_init() With UBSAN_ARRAY_BOUNDS=y,
CVE-2025-22090 In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() If track
CVE-2025-38152 In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Clear table_sz when rproc_shutdown There is case as below cou
CVE-2025-38240 In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr The function
CVE-2025-22095 In the Linux kernel, the following vulnerability has been resolved: PCI: brcmstb: Fix error path after a call to regulator_bulk_get() If the regula
CVE-2025-22097 In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initia
CVE-2025-23136 In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: Add NULL check for adev Not all devices have an ACPI companio
CVE-2025-23138 In the Linux kernel, the following vulnerability has been resolved: watch_queue: fix pipe accounting mismatch Currently, watch_queue_set_size() mod
CVE-2025-39682 In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call mus
CVE-2025-38500 In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm interface co
CVE-2025-37756 In the Linux kernel, the following vulnerability has been resolved: net: tls: explicitly disallow disconnect syzbot discovered that it can disconne
CVE-2025-38477 In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix race condition on qfq_aggregate A race condition can oc
CVE-2025-38618 In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to au
CVE-2025-38617 In the Linux kernel, the following vulnerability has been resolved: net/packet: fix a race in packet_set_ring() and packet_notifier() When packet_s
CVE-2025-37785 In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounting a corrupted filesystem wit

Version: 6.8.0-1010.10 2025-10-01 20:08:04 UTC

  linux-nvidia-tegra (6.8.0-1010.10) noble; urgency=medium

  * noble/linux-nvidia-tegra: 6.8.0-1010.10 -proposed tracker (LP: #2121952)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log

  * n/nvidia-tegra: Migrate embargoed patches from n/nvidia-tegra-pvw
    (LP: #2120190)
    - NVIDIA: SAUCE: arm64: configs: Enable ARM_FFA config
    - NVIDIA: SAUCE: arm64: configs: Align prod_defconfig with k6.1
    - NVIDIA: SAUCE: arm64: configs: Enable platform keyring configs
    - NVIDIA: SAUCE: arm64: configs: Enable oops/panic logs to block device
    - NVIDIA: SAUCE: arm64: configs: Enable ZRAM config as module
    - NVIDIA: SAUCE: arm64: configs: enable PSTORE ramoops logging
    - NVIDIA: SAUCE: arm64: configs: Enable CX7 dependent modules
    - NVIDIA: SAUCE: arm64: configs: Enable MLX INFINIBAND modules
    - NVIDIA: SAUCE: arm64: configs: enable CONFIG_IP_NF_TARGET_REDIRECT
    - NVIDIA: SAUCE: arm64: configs: additional kubernetes related configs
    - NVIDIA: SAUCE: arm64: configs: Enable CONFIG_EXFAT_FS
    - NVIDIA: SAUCE: arm64: configs: Enable sync sched macro
    - NVIDIA: SAUCE: arm64: configs: disable LOGO
    - NVIDIA: SAUCE: arm64: configs: enable joystick driver
    - NVIDIA: SAUCE: arm64: configs: Enable CONFIG_CRYPTO_USER_API_* as module
    - NVIDIA: SAUCE: arm64: configs: enable cfs bandwidth for k8s
    - NVIDIA: SAUCE: arm64: configs: enable few matches for netfliter
    - NVIDIA: SAUCE: arm64: configs: enable QFMT_V2 for quota
    - NVIDIA: SAUCE: arm64: configs: Enable userspace I/O driver
    - NVIDIA: SAUCE: arm64: configs: enable USB tethering
    - NVIDIA: SAUCE: arm64: configs: Enable usb UAS support
    - NVIDIA: SAUCE: arm64: configs: Enable ext* xattr & ACL
    - NVIDIA: SAUCE: arm64: configs: Enable fuzzing configs
    - NVIDIA: SAUCE: arm64: configs: enable CONFIG_ARCH_TEGRA_264_SOC
    - NVIDIA: SAUCE: net: phy: aquantia: Remove polling PHY system side
      interface
    - NVIDIA: SAUCE: net: phy: aquantia: Fix PHY interfaces
    - NVIDIA: SAUCE: bpmp: ABI headers update
    - NVIDIA: SAUCE: dmaengine: tegra: Use struct for register offsets
    - NVIDIA: SAUCE: dmaengine: tegra: Support more than 40 bits address width
    - NVIDIA: SAUCE: dmaengine: tegra: Add Tegra264 support
    - NVIDIA: SAUCE: dmaengine: tegra: Remove reset control
    - NVIDIA: SAUCE: tegra: ADMA: Add tegra264 support
    - NVIDIA: SAUCE: i2c: tegra: Add HS mode support
    - NVIDIA: SAUCE: i2c: tegra: Add SW Mutex support in Tegra264
    - NVIDIA: SAUCE: i2c: tegra: Add Tegra264 support
    - NVIDIA: SAUCE: tty/serial: tegra-utc: Add Tegra UTC driver
    - NVIDIA: SAUCE: tty/serial: tegra-utc: Add support for earlycon
    - NVIDIA: SAUCE: tty/serial: tegra-utc: Add support for polling
    - NVIDIA: SAUCE: cpufreq: tegra194: Add support for Tegra264
    - NVIDIA: SAUCE: mailbox: tegra-hsp: Define dimensioning masks in soc data
    - NVIDIA: SAUCE: mailbox: tegra-hsp: Add virtualization support for
      Tegra264
    - NVIDIA: SAUCE: mmc: tegra: use gpio for voltage switching on fpga
    - NVIDIA: SAUCE: sdhci-tegra: t264: Add T264 support for SDMMC1 IP
    - NVIDIA: SAUCE: drivers: nv_ist: Add IST debugfs options
    - NVIDIA: SAUCE: hte: Add tegra264 GTE support
    - NVIDIA: SAUCE: soc/tegra: pmc: Configure internal regulators for
      sdmmc1-hv pad
    - Revert "NVIDIA: SAUCE: soc/tegra: fuse: Add tegra_fuse_control_read"
    - NVIDIA: SAUCE: soc: tegra: cbb: Add support for CBB Chiplet fabrics in
      Tegra264
    - NVIDIA: SAUCE: soc: tegra: cbb: make error interrupt enable and status
      per SoC
    - NVIDIA: SAUCE: soc: tegra: cbb: clear error force register with error
      status
    - NVIDIA: SAUCE: soc: tegra: cbb: update register offsets for NET06
    - NVIDIA: SAUCE: soc: tegra: cbb: update offsets for Vision fabric for
      NET06
    - NVIDIA: SAUCE: soc: tegra: cbb: update register offsets for NET07
    - NVIDIA: SAUCE: soc: tegra: cbb: update register offsets for NET09
    - NVIDIA: SAUCE: soc/tegra: pmc: Add Tegra264 PMC driver
    - NVIDIA: SAUCE: soc: tegra: cbb: update register offsets for NET10
    - NVIDIA: SAUCE: soc: tegra: cbb: handle fabric_id table per soc
    - NVIDIA: SAUCE: soc: tegra: cbb: skip checking slave_map if missing
    - NVIDIA: SAUCE: soc/tegra: pmc: Add Tegra264 ethernet wake event
    - NVIDIA: SAUCE: soc/tegra: pmc: Add Tegra264 PMU wake event
    - NVIDIA: SAUCE: nvmem: Add Tegra efuse driver
    - NVIDIA: SAUCE: ALSA: hda/tegra: Add Tegra264 support
    - NVIDIA: SAUCE: ASoC: tegra: CIF: Add tegra264 support
    - NVIDIA: SAUCE: ASoC: tegra: AMX: Add tegra264 support
    - NVIDIA: SAUCE: ASoC: tegra: ADX: Add tegra264 support
    - NVIDIA: SAUCE: ASoC: tegra: ADMAIF: Add tegra264 support
    - NVIDIA: SAUCE: ASoC: tegra: I2S: Add tegra264 support
    - NVIDIA: SAUCE: ASoC: tegra: AHUB: Add tegra264 support
    - NVIDIA: SAUCE: ASoC: tegra: ASRC: Update ARAM address
    - NVIDIA: SAUCE: ASoC: Update PLL rate for T264
    - NVIDIA: SAUCE: perf: arm_cspmu: add pmpidr support
    - NVIDIA: SAUCE: perf: arm_cspmu: nvidia: add revision id matching
    - NVIDIA: SAUCE: perf: arm_cspmu: nvidia: change event filter as optional
    - NVIDIA: SAUCE: perf: arm_cspmu: add stop counters to impl ops
    - NVIDIA: SAUCE: perf arm-spe: Add Poseidon-AE to neoverse list
    - NVIDIA: SAUCE: phy: tegra: xusb: Add Tegra264 support
    - NVIDIA: SAUCE: usb: gadget: udc: Add Tegra264 support
    - NVIDIA: SAUCE: usb: host: xhci-tegra: Add Tegra264 XHCI support
    - NVIDIA: SAUCE: usb: xhci: skip mbox configuration
    - NVIDIA: SAUCE: phy: xusb: skip USB2 PAD tracking and fuse
    - NVIDIA: SAUCE: xudc: skip SSPX programming in xudc
    - NVIDIA: SAUCE: usb: gadget: xudc: Enable u1/u2 for Tegra264
    - NVIDIA: SAUCE: usb: gadget: xudc: Set the u1 timeout default value to
      0xff
    - NVIDIA: SAUCE: usb: host: xhci: Fix USB2 HW LPM port number
    - NVIDIA: SAUCE: usb: gadget: xudc: ACK ST_RC after clearing CTRL_RUN
    

1786013 Packaging resync
2120190 n/nvidia-tegra: Migrate embargoed patches from n/nvidia-tegra-pvw
2111521 nvme no longer detected on boot after upgrade to 6.8.0-60
2118499 minimal kernel lacks modules for blk disk in arm64 openstack environments where config_drive is required
2117123 rcu: Eliminate deadlocks involving do_exit() and RCU tasks
2118965 BPF header file in wrong location
2117716 i915: support ARL-H gpu
2115447 Ubuntu 24.04.2: NULL pointer dereference with Ceph and selinux
2119458 Noble update: upstream stable patchset 2025-08-04
2118927 Noble update: upstream stable patchset 2025-07-28
2117533 Noble update: upstream stable patchset 2025-07-22
2116878 Noble update: upstream stable patchset 2025-07-14
2120330 Incorrect backport for CVE-2025-21861 causes kernel hangs
CVE-2025-21872 In the Linux kernel, the following vulnerability has been resolved: efi: Don't map the entire mokvar table to determine its size Currently, when va
CVE-2025-21880 In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: fix EFAULT handling Currently we treat EFAULT from hmm_range_fa
CVE-2025-21890 In the Linux kernel, the following vulnerability has been resolved: idpf: fix checksums set in idpf_rx_rsc() idpf_rx_rsc() uses skb_transport_offse
CVE-2025-21885 In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers Whil
CVE-2025-21888 In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix a WARN during dereg_mr for DM type Memory regions (MR) of type D
CVE-2025-21892 In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix the recovery flow of the UMR QP This patch addresses an issue in
CVE-2025-21873 In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: bsg: Fix crash when arpmb command fails If the device doesn't
CVE-2024-58090 In the Linux kernel, the following vulnerability has been resolved: sched/core: Prevent rescheduling when interrupts are disabled David reported a
CVE-2025-21875 In the Linux kernel, the following vulnerability has been resolved: mptcp: always handle address removal under msk socket lock Syzkaller reported a
CVE-2025-21877 In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix endpoint checking in genelink_bind() Syzbot reports [1] a w
CVE-2025-21878 In the Linux kernel, the following vulnerability has been resolved: i2c: npcm: disable interrupt enable bit before devm_request_irq The customer re
CVE-2025-21889 In the Linux kernel, the following vulnerability has been resolved: perf/core: Add RCU read lock protection to perf_iterate_ctx() The perf_iterate_
CVE-2025-21898 In the Linux kernel, the following vulnerability has been resolved: ftrace: Avoid potential division by zero in function_stat_show() Check whether
CVE-2025-21899 In the Linux kernel, the following vulnerability has been resolved: tracing: Fix bad hist from corrupting named_triggers list The following command
CVE-2025-21881 In the Linux kernel, the following vulnerability has been resolved: uprobes: Reject the shared zeropage in uprobe_write_opcode() We triggered the f
CVE-2025-21895 In the Linux kernel, the following vulnerability has been resolved: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list Syska
CVE-2025-21883 In the Linux kernel, the following vulnerability has been resolved: ice: Fix deinitializing VF in error path If ice_ena_vfs() fails after calling i
CVE-2025-21891 In the Linux kernel, the following vulnerability has been resolved: ipvlan: ensure network headers are in skb linear part syzbot found that ipvlan_
CVE-2024-57996 In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: don't allow 1 packet limit The current implementation does
CVE-2025-37752 In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: move the limit validation It is not sufficient to directly
CVE-2025-38350 In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain cla
CVE-2025-21887 In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up The iss
CVE-2025-21861 In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize



About   -   Send Feedback to @ubuntu_updates