UbuntuUpdates.org

Package "linux-image-unsigned-6.8.0-86-generic"

This package belongs to a PPA: Canonical Kernel Team

Name: linux-image-unsigned-6.8.0-86-generic

Description:

Linux kernel image for version 6.8.0 on 64 bit x86 SMP
Latest version: 6.8.0-86.87~22.04.1
Release: jammy (22.04)
Level: base
Repository: main
Head package: linux-hwe-6.8

Links

All versions of this package
Bug fixes

Repository home page

Download "linux-image-unsigned-6.8.0-86-generic"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "linux-image-unsigned-6.8.0-86-generic" in Jammy

Repository Area Version
proposed main 6.8.0-86.87~22.04.1

Changelog

Version: 6.8.0-86.87~22.04.1 2025-09-29 12:08:16 UTC

 linux-hwe-6.8 (6.8.0-86.87~22.04.1) jammy; urgency=medium
 .
   * jammy/linux-hwe-6.8: 6.8.0-86.87~22.04.1 -proposed tracker (LP: #2125389)
 .
   [ Ubuntu: 6.8.0-86.87 ]
 .
   * noble/linux: 6.8.0-86.87 -proposed tracker (LP: #2125391)
     - Fix FTBS caused by incorrect pick/backport of
       "perf dso: fix dso__is_kallsyms() check"
   * noble ubuntu_ftrace_smoke_test:mmiotrace timeout on aws:r5.metal
     (LP: #2121673)
     - mm: memcg: add NULL check to obj_cgroup_put()
     - memcg: drain obj stock on cpu hotplug teardown
   * [25.04 FEAT] [post announcement] [KRN2304] CPU-MF Counters for new IBM Z
     hardware - perf part (LP: #2103415)
     - perf list: Add IBM z17 event descriptions
   * memory leaks when configuring a small rate limit in audit (LP: #2122554)
     - audit: fix skb leak when audit rate limit is exceeded
   * [UBUNTU 24.04] PAI/NNPA support for new IBM z17 (LP: #2121956)
     - s390/pai: export number of sysfs attribute files
     - s390/pai_crypto: Add support for MSA 10 and 11 pai counters
     - s390/pai_ext: Update PAI extension 1 counters
   * [UBUNTU 24.04] s390/pci: Don't abort recovery for user-space drivers
     (LP: #2121150)
     - s390/pci: Allow automatic recovery with minimal driver support
   * [UBUNTU 24.04] s390/pci: Fix stale function handles in error handling
     (LP: #2121149)
     - s390/pci: Fix stale function handles in error handling
     - s390/pci: Do not try re-enabling load/store if device is disabled
   * [UBUNTU 24.04] vfio/pci: fix 8-byte PCI loads and stores (LP: #2121146)
     - vfio/pci: Extract duplicated code into macro
     - vfio/pci: Support 8-byte PCI loads and stores
     - vfio/pci: Fix typo in macro to declare accessors
   * x86 systems with PCIe BAR addresses located outside a certain range see
     P2PDMA allocation failures and CUDA initialization errors (LP: #2120209)
     - x86/kaslr: Reduce KASLR entropy on most x86 systems
     - x86/mm/init: Handle the special case of device private pages in
       add_pages(), to not increase max_pfn and trigger
       dma_addressing_limited() bounce buffers
   * sources list generation using dwarfdump takes up to 0.5hr in build process
     (LP: #2104911)
     - [Packaging] Don't generate list of source files
   * [SRU] Apparmor: Unshifted uids for hardlinks and unix sockets in user
     namespaces (LP: #2121257)
     - apparmor: shift ouid when mediating hard links in userns
     - apparmor: shift uid when mediating af_unix in userns
   * UBSAN: shift-out-of-bounds in drivers/edac/skx_common.c:452:16
     (LP: #2119713)
     - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
   * [IdeaPad Slim 5 13ARP10 , 83J2] Microphone on AMD Ryzen 7 7735HS does not
     work (LP: #2102749)
     - ASoC: amd: yc: update quirk data for new Lenovo model
   * Fix compilation failure because of incomplete backport (LP: #2120561)
     - SAUCE: netfilter: ctnetlink: Fix -Wuninitialized in
       ctnetlink_secctx_size()
   * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716)
     - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
     - cpufreq: scpi: compare kHz instead of Hz
     - smack: dont compile ipv6 code unless ipv6 is configured
     - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
     - EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald
       Rapids
     - x86/fpu: Fix guest FPU state buffer allocation size
     - x86/fpu: Avoid copying dynamic FP state from init_task in
       arch_dup_task_struct()
     - x86/platform: Only allow CONFIG_EISA for 32-bit
     - [Config] updateconfigs after disabling CONFIG_EISA for amd64
     - x86/sev: Add missing RIP_REL_REF() invocations during sme_enable()
     - lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock
     - PM: sleep: Adjust check before setting power.must_resume
     - RISC-V: KVM: Disable the kernel perf counter during configure
     - selinux: Chain up tool resolving errors in install_policy.sh
     - EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
     - EDAC/ie31200: Fix the DIMM size mask for several SoCs
     - EDAC/ie31200: Fix the error path order of ie31200_init()
     - PM: sleep: Fix handling devices with direct_complete set on errors
     - lockdep: Don't disable interrupts on RT in
       disable_irq_nosync_lockdep.*()
     - perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
     - x86/traps: Make exc_double_fault() consistently noreturn
     - x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures
     - media: verisilicon: HEVC: Initialize start_bit field
     - media: platform: allgro-dvt: unregister v4l2_device on the error path
     - platform/x86: dell-ddv: Fix temperature calculation
     - ASoC: cs35l41: check the return value from spi_setup()
     - HID: remove superfluous (and wrong) Makefile entry for
       CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
     - dt-bindings: vendor-prefixes: add GOcontroll
     - ALSA: hda/realtek: Always honor no_shutup_pins
     - ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio
       compatible
     - drm/bridge: ti-sn65dsi86: Fix multiple instances
     - drm/dp_mst: Fix drm RAD print
     - drm: xlnx: zynqmp: Fix max dma segment size
     - PCI: Use downstream bridges for distributing resources
     - drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
     - drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
     - drm/msm/dpu: don't use active in atomic_check()
     - drm/msm/dsi: Use existing per-interface slice count in DSC timing
     - drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host
     - drm/amdkfd: Fix Circular Locking Dependency in
       'svm_range_cpu_invalidate_pagetables'
     - PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data
       payload
     - PCI: brcmstb: Use internal register to change link capability
     - PCI: brcmstb: Fix potential premature regulator dis
Source diff to previous version
2121673 noble ubuntu_ftrace_smoke_test:mmiotrace timeout on aws:r5.metal
2103415 [25.04 FEAT] [post announcement] [KRN2304] CPU-MF Counters for new IBM Z hardware - perf part
2122554 memory leaks when configuring a small rate limit in audit
2121956 [UBUNTU 24.04] PAI/NNPA support for new IBM z17
2121150 [UBUNTU 24.04] s390/pci: Don't abort recovery for user-space drivers
2121149 [UBUNTU 24.04] s390/pci: Fix stale function handles in error handling
2121146 [UBUNTU 24.04] vfio/pci: fix 8-byte PCI loads and stores
2120209 x86 systems with PCIe BAR addresses located outside a certain range see P2PDMA allocation failures and CUDA initialization errors
2104911 sources list generation using dwarfdump takes up to 0.5hr in build process
2121257 [SRU] Apparmor: Unshifted uids for hardlinks and unix sockets in user namespaces
2119713 UBSAN: shift-out-of-bounds in drivers/edac/skx_common.c:452:16
2102749 [IdeaPad Slim 5 13ARP10 , 83J2] Microphone on AMD Ryzen 7 7735HS does not work
2120561 Fix compilation failure because of incomplete backport
2121716 Noble update: upstream stable patchset 2025-09-01
2120877 Noble update: upstream stable patchset 2025-08-18
2120516 TLS socket disconnection causes various issues
1786013 Packaging resync
CVE-2025-22028 In the Linux kernel, the following vulnerability has been resolved: media: vimc: skip .s_stream() for stopped entities Syzbot reported [1] a warnin
CVE-2025-22036 In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after get_block When get_block is called wit
CVE-2025-22039 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix overflow in dacloffset bounds check The dacloffset field was origina
CVE-2025-22062 In the Linux kernel, the following vulnerability has been resolved: sctp: add mutual exclusion in proc_sctp_do_udp_port() We must serialize calls t
CVE-2025-22065 In the Linux kernel, the following vulnerability has been resolved: idpf: fix adapter NULL pointer dereference on reboot With SRIOV enabled, idpf e
CVE-2025-22068 In the Linux kernel, the following vulnerability has been resolved: ublk: make sure ubq->canceling is set when queue is frozen Now ublk driver depe
CVE-2025-22070 In the Linux kernel, the following vulnerability has been resolved: fs/9p: fix NULL pointer dereference on mkdir When a 9p tree was mounted with op
CVE-2025-40114 In the Linux kernel, the following vulnerability has been resolved: iio: light: Add check for array bounds in veml6075_read_int_time_ms The array c
CVE-2025-22025 In the Linux kernel, the following vulnerability has been resolved: nfsd: put dl_stid if fail to queue dl_recall Before calling nfsd4_run_cb to que
CVE-2025-22027 In the Linux kernel, the following vulnerability has been resolved: media: streamzap: fix race between device disconnection and urb callback Syzkal
CVE-2025-39735 In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in ea_get() During the "size_check" label in e
CVE-2025-22033 In the Linux kernel, the following vulnerability has been resolved: arm64: Don't call NULL in do_compat_alignment_fixup() do_alignment_t32_to_handl
CVE-2025-22035 In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in print_graph_function_flags during tracer switchin
CVE-2025-22038 In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate zero num_subauth before sub_auth is accessed Access psid->sub_a
CVE-2025-22040 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix session use-after-free in multichannel connection There is a race co
CVE-2025-22041 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_sessions_deregister() In multichannel mode,
CVE-2025-22042 In the Linux kernel, the following vulnerability has been resolved: ksmbd: add bounds check for create lease context Add missing bounds check for c
CVE-2025-22044 In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: fix narrowing conversion in acpi_nfit_ctl Syzkaller has reported a
CVE-2025-22045 In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs On the followin
CVE-2025-22050 In the Linux kernel, the following vulnerability has been resolved: usbnet:fix NPE during rx_complete Missing usbnet_going_away Check in Critical P
CVE-2025-22053 In the Linux kernel, the following vulnerability has been resolved: net: ibmveth: make veth_pool_store stop hanging v2: - Created a single error ha
CVE-2025-22054 In the Linux kernel, the following vulnerability has been resolved: arcnet: Add NULL check in com20020pci_probe() devm_kasprintf() returns NULL whe
CVE-2025-22055 In the Linux kernel, the following vulnerability has been resolved: net: fix geneve_opt length integer overflow struct geneve_opt uses 5 bit length
CVE-2025-22056 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix geneve_opt type confusion addition When handling mul
CVE-2025-22057 In the Linux kernel, the following vulnerability has been resolved: net: decrease cached dst counters in dst_release Upstream fix ac888d58869b ("ne
CVE-2025-22058 In the Linux kernel, the following vulnerability has been resolved: udp: Fix memory accounting leak. Matt Dowling reported a weird UDP memory usage
CVE-2025-22060 In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: Prevent parser TCAM memory corruption Protect the parser TCAM/SRAM
CVE-2025-38637 In the Linux kernel, the following vulnerability has been resolved: net_sched: skbprio: Remove overly strict queue assertions In the current implem
CVE-2025-22063 In the Linux kernel, the following vulnerability has been resolved: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets When cal
CVE-2025-22064 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't unregister hook when table is dormant When nf_table
CVE-2025-22066 In the Linux kernel, the following vulnerability has been resolved: ASoC: imx-card: Add NULL check in imx_card_probe() devm_kasprintf() returns NUL
CVE-2023-53034 In the Linux kernel, the following vulnerability has been resolved: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans There i
CVE-2025-22071 In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak in spufs_create_context() Leak fixes back in 2008 missed one
CVE-2025-22072 In the Linux kernel, the following vulnerability has been resolved: spufs: fix gang directory lifetimes prior to "[POWERPC] spufs: Fix gang destroy
CVE-2025-22073 In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak on spufs_new_file() failure It's called from spufs_fill_dir()
CVE-2025-38575 In the Linux kernel, the following vulnerability has been resolved: ksmbd: use aead_request_free to match aead_request_alloc Use aead_request_free(
CVE-2025-22075 In the Linux kernel, the following vulnerability has been resolved: rtnetlink: Allocate vfinfo size for VF GUIDs when supported Commit 30aad41721e0
CVE-2025-37937 In the Linux kernel, the following vulnerability has been resolved: objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() If dib8000
CVE-2025-22079 In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate l_tree_depth to avoid out-of-bounds access The l_tree_depth fie
CVE-2025-22080 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Prevent integer overflow in hdr_first_de() The "de_off" and "used" va
CVE-2025-22081 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix a couple integer overflows on 32bit systems On 32bit systems the
CVE-2025-22083 In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint If vhost_
CVE-2025-22086 In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow When cur_qp isn't NULL, in or
CVE-2025-22089 In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Don't expose hw_counters outside of init net namespace Commit 467f43
CVE-2025-39728 In the Linux kernel, the following vulnerability has been resolved: clk: samsung: Fix UBSAN panic in samsung_clk_init() With UBSAN_ARRAY_BOUNDS=y,
CVE-2025-22090 In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() If track
CVE-2025-38152 In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Clear table_sz when rproc_shutdown There is case as below cou
CVE-2025-38240 In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr The function
CVE-2025-22095 In the Linux kernel, the following vulnerability has been resolved: PCI: brcmstb: Fix error path after a call to regulator_bulk_get() If the regula
CVE-2025-22097 In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initia
CVE-2025-23136 In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: Add NULL check for adev Not all devices have an ACPI companio
CVE-2025-23138 In the Linux kernel, the following vulnerability has been resolved: watch_queue: fix pipe accounting mismatch Currently, watch_queue_set_size() mod
CVE-2025-39682 In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call mus
CVE-2025-38500 In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm interface co
CVE-2025-37756 In the Linux kernel, the following vulnerability has been resolved: net: tls: explicitly disallow disconnect syzbot discovered that it can disconne
CVE-2025-38477 In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix race condition on qfq_aggregate A race condition can oc
CVE-2025-38618 In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to au
CVE-2025-38617 In the Linux kernel, the following vulnerability has been resolved: net/packet: fix a race in packet_set_ring() and packet_notifier() When packet_s
CVE-2025-37785 In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounting a corrupted filesystem wit

Version: 6.8.0-81.81~22.04.1 2025-09-01 16:53:01 UTC

 linux-hwe-6.8 (6.8.0-81.81~22.04.1) jammy; urgency=medium
 .
   * jammy/linux-hwe-6.8: 6.8.0-81.81~22.04.1 -proposed tracker (LP: #2120037)
 .
   * Packaging resync (LP: #1786013)
     - [Packaging] debian.hwe-6.8/dkms-versions -- update from kernel-versions
       (main/2025.08.11)
 .
   [ Ubuntu: 6.8.0-81.81 ]
 .
   * noble/linux: 6.8.0-81.81 -proposed tracker (LP: #2121671)
   * Packaging resync (LP: #1786013)
     - [Packaging] debian.master/dkms-versions -- update from kernel-versions
       (main/2025.08.11)
   * nvme no longer detected on boot after upgrade to 6.8.0-60 (LP: #2111521)
     - SAUCE: PCI: Disable RRS polling for Intel SSDPE2KX020T8 nvme
   * No IP Address assigned after hot-plugging Ethernet cable on HP Platform
     (LP: #2115393)
     - Revert "e1000e: change k1 configuration on MTP and later platforms"
   * minimal kernel lacks modules for blk disk in arm64 openstack environments
     where config_drive is required (LP: #2118499)
     - [Config] Enable SYM53C8XX_2 on arm64
   * rcu: Eliminate deadlocks involving do_exit() and RCU tasks (LP: #2117123)
     - rcu-tasks: Initialize callback lists at rcu_init() time
     - rcu-tasks: Maintain lists to eliminate RCU-tasks/do_exit() deadlocks
     - rcu-tasks: Eliminate deadlocks involving do_exit() and RCU tasks
     - rcu-tasks: Maintain real-time response in rcu_tasks_postscan()
   * BPF header file in wrong location (LP: #2118965)
     - [Packaging] Install bpf header to correct location
   * i915: support ARL-H gpu (LP: #2117716)
     - drm/i915: Add additional ARL PCI IDs
     - drm/i915/mtl: Add fake PCH for Meteor Lake
     - drm/i915/mtl: Wake GT before sending H2G message
     - drm/i915/xelpg: Add workaround 14019877138
     - drm/i915/xelpg: Extend driver code of Xe_LPG to Xe_LPG+
     - drm/i915/display: correct dual pps handling for MTL_PCH+
   * Ubuntu 24.04.2: NULL pointer dereference with Ceph and selinux
     (LP: #2115447)
     - SAUCE: fs/ceph, selinux: fix NULL pointer dereference on CephFS write
       with SELinux in permissive mode
   * Noble update: upstream stable patchset 2025-08-04 (LP: #2119458)
     - clockevents/drivers/i8253: Fix stop sequence for timer 0
     - sched/isolation: Prevent boot crash when the boot CPU is nohz_full
     - hrtimer: Use and report correct timerslack values for realtime tasks
     - mm: add nommu variant of vm_insert_pages()
     - io_uring: get rid of remap_pfn_range() for mapping rings/sqes
     - io_uring: don't attempt to mmap larger than what the user asks for
     - io_uring: fix corner case forgetting to vunmap
     - io_uring: use vmap() for ring mapping
     - io_uring: unify io_pin_pages()
     - io_uring/kbuf: vmap pinned buffer ring
     - io_uring/kbuf: use vm_insert_pages() for mmap'ed pbuf ring
     - io_uring: use unpin_user_pages() where appropriate
     - io_uring: fix error pbuf checking
     - rust: Disallow BTF generation with Rust + LTO
     - rust: init: fix `Zeroable` implementation for `Option>` and
       `Option>`
     - lib/buildid: Handle memfd_secret() files in build_id_parse()
     - mm: split critical region in remap_file_pages() and invoke LSMs in
       between
     - stmmac: loongson: Pass correct arg to PCI function
     - rust: lockdep: Remove support for dynamically allocated LockClassKeys
     - netfilter: nf_tables: allow clone callbacks to sleep
     - drm/amd/display: should support dmub hw lock on Replay
     - drm/amd/display: Use HW lock mgr for PSR1 when only one eDP
     - KVM: arm64: Calculate cptr_el2 traps on activating traps
     - KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
     - KVM: arm64: Remove host FPSIMD saving for non-protected KVM
     - KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN
     - KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN
     - KVM: arm64: Refactor exit handlers
     - KVM: arm64: Eagerly switch ZCR_EL{1,2}
     - Revert "sched/core: Reduce cost of sched_move_task when config
       autogroup"
     - wifi: iwlwifi: support BIOS override for 5G9 in CA also in LARI version
       8
     - netfilter: nft_counter: Use u64_stats_t for statistic.
     - firmware: imx-scu: fix OF node leak in .probe()
     - arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply
     - arm64: dts: rockchip: remove supports-cqe from rk3588 jaguar
     - xfrm: fix tunnel mode TX datapath in packet offload mode
     - xfrm_output: Force software GSO only in tunnel mode
     - soc: imx8m: Remove global soc_uid
     - soc: imx8m: Use devm_* to simplify probe failure handling
     - soc: imx8m: Unregister cpufreq and soc dev in cleanup path
     - ARM: dts: bcm2711: Fix xHCI power-domain
     - ARM: dts: bcm2711: PL011 UARTs are actually r1p5
     - arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1
     - RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
     - RDMA/mlx5: Handle errors returned from mlx5r_ib_rate()
     - ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP
     - ARM: dts: bcm2711: Don't mark timer regs unconfigured
     - dma-mapping: fix missing clear bdr in check_ram_in_range_map()
     - RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
     - RDMA/hns: Fix soft lockup during bt pages loop
     - RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
     - RDMA/hns: Fix a missing rollback in error path of
       hns_roce_create_qp_common()
     - RDMA/hns: Fix missing xa_destroy()
     - RDMA/hns: Fix wrong value of max_sge_rd
     - Bluetooth: Fix error code in chan_alloc_skb_cb()
     - Bluetooth: hci_event: Fix connection regression between LE and non-LE
       adapters
     - accel/qaic: Fix possible data corruption in BOs > 2G
     - ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX
     - ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
     - ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
     - devlink: fix xa_alloc_cyclic() error handling
     - dpll
Source diff to previous version
1786013 Packaging resync
2111521 nvme no longer detected on boot after upgrade to 6.8.0-60
2118499 minimal kernel lacks modules for blk disk in arm64 openstack environments where config_drive is required
2117123 rcu: Eliminate deadlocks involving do_exit() and RCU tasks
2118965 BPF header file in wrong location
2117716 i915: support ARL-H gpu
2115447 Ubuntu 24.04.2: NULL pointer dereference with Ceph and selinux
2119458 Noble update: upstream stable patchset 2025-08-04
2118927 Noble update: upstream stable patchset 2025-07-28
2117533 Noble update: upstream stable patchset 2025-07-22
2116878 Noble update: upstream stable patchset 2025-07-14
CVE-2025-21872 In the Linux kernel, the following vulnerability has been resolved: efi: Don't map the entire mokvar table to determine its size Currently, when va
CVE-2025-21880 In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: fix EFAULT handling Currently we treat EFAULT from hmm_range_fa
CVE-2025-21890 In the Linux kernel, the following vulnerability has been resolved: idpf: fix checksums set in idpf_rx_rsc() idpf_rx_rsc() uses skb_transport_offse
CVE-2025-21885 In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers Whil
CVE-2025-21888 In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix a WARN during dereg_mr for DM type Memory regions (MR) of type D
CVE-2025-21892 In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix the recovery flow of the UMR QP This patch addresses an issue in
CVE-2025-21873 In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: bsg: Fix crash when arpmb command fails If the device doesn't
CVE-2024-58090 In the Linux kernel, the following vulnerability has been resolved: sched/core: Prevent rescheduling when interrupts are disabled David reported a
CVE-2025-21875 In the Linux kernel, the following vulnerability has been resolved: mptcp: always handle address removal under msk socket lock Syzkaller reported a
CVE-2025-21877 In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix endpoint checking in genelink_bind() Syzbot reports [1] a w
CVE-2025-21878 In the Linux kernel, the following vulnerability has been resolved: i2c: npcm: disable interrupt enable bit before devm_request_irq The customer re
CVE-2025-21889 In the Linux kernel, the following vulnerability has been resolved: perf/core: Add RCU read lock protection to perf_iterate_ctx() The perf_iterate_
CVE-2025-21898 In the Linux kernel, the following vulnerability has been resolved: ftrace: Avoid potential division by zero in function_stat_show() Check whether
CVE-2025-21899 In the Linux kernel, the following vulnerability has been resolved: tracing: Fix bad hist from corrupting named_triggers list The following command
CVE-2025-21881 In the Linux kernel, the following vulnerability has been resolved: uprobes: Reject the shared zeropage in uprobe_write_opcode() We triggered the f
CVE-2025-21895 In the Linux kernel, the following vulnerability has been resolved: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list Syska
CVE-2025-21883 In the Linux kernel, the following vulnerability has been resolved: ice: Fix deinitializing VF in error path If ice_ena_vfs() fails after calling i
CVE-2025-21891 In the Linux kernel, the following vulnerability has been resolved: ipvlan: ensure network headers are in skb linear part syzbot found that ipvlan_
CVE-2024-57996 In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: don't allow 1 packet limit The current implementation does
CVE-2025-37752 In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: move the limit validation It is not sufficient to directly
CVE-2025-38350 In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain cla
CVE-2025-21887 In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up The iss

Version: 6.8.0-78.78~22.04.1 2025-08-13 17:08:17 UTC

 linux-hwe-6.8 (6.8.0-78.78~22.04.1) jammy; urgency=medium
 .
   * jammy/linux-hwe-6.8: 6.8.0-78.78~22.04.1 -proposed tracker (LP: #2120403)
 .
   [ Ubuntu: 6.8.0-78.78 ]
 .
   * noble/linux: 6.8.0-78.78 -proposed tracker (LP: #2120405)
   * Incorrect backport for CVE-2025-21861 causes kernel hangs
     (LP: #2120330) // CVE-2025-21861
     - mm/migrate_device: don't add folio to be freed to LRU in
       migrate_device_finalize()
   * Incorrect backport for CVE-2025-21861 causes kernel hangs (LP: #2120330)
     - SAUCE: Revert "mm/migrate_device: don't add folio to be freed to LRU in
       migrate_device_finalize()"
     - mm: migrate_device: use more folio in migrate_device_finalize()
 .

Source diff to previous version
2120330 Incorrect backport for CVE-2025-21861 causes kernel hangs
CVE-2025-21861 In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize

Version: 6.8.0-72.72~22.04.1 2025-07-25 12:08:01 UTC

 linux-hwe-6.8 (6.8.0-72.72~22.04.1) jammy; urgency=medium
 .
   * jammy/linux-hwe-6.8: 6.8.0-72.72~22.04.1 -proposed tracker (LP: #2117689)
 .
   [ Ubuntu: 6.8.0-72.72 ]
 .
   * noble/linux: 6.8.0-72.72 -proposed tracker (LP: #2117691)
   * Packaging resync (LP: #1786013)
     - [Packaging] update annotations scripts
     - [Packaging] debian.master/dkms-versions -- update from kernel-versions
       (main/2025.07.14)
   * NVMe namespace ID mismatch on repeated map/unmap (LP: #2115209)
     - nvme: requeue namespace scan on missed AENs
     - nvme: re-read ANA log page after ns scan completes
     - nvme: fixup scan failure for non-ANA multipath controllers
   * integrated I219-LM network adapter appears to be running too fast, causing
     synchronization issues when using the I219-LM PTP feature (LP: #2116072)
     - e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13
   * intel_rapl: support ARL-H hardware (LP: #2115652)
     - powercap: intel_rapl_msr: Add PL4 support for ArrowLake-H
   * Ubuntu 24.04+ arm64: screen resolution fixed to 1024x768 with last kernel
     update (LP: #2115068)
     - [Config] Replace FB_HYPERV with DRM_HYPERV
   * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212)
     - arm64: mte: Do not allow PROT_MTE on MAP_HUGETLB user mappings
     - xfs: assert a valid limit in xfs_rtfind_forw
     - xfs: validate inumber in xfs_iget
     - xfs: fix a sloppy memory handling bug in xfs_iroot_realloc
     - xfs: fix a typo
     - xfs: skip background cowblock trims on inodes open for write
     - xfs: don't free cowblocks from under dirty pagecache on unshare
     - xfs: merge xfs_attr_leaf_try_add into xfs_attr_leaf_addname
     - xfs: return bool from xfs_attr3_leaf_add
     - xfs: distinguish extra split from real ENOSPC from xfs_attr3_leaf_split
     - xfs: distinguish extra split from real ENOSPC from
       xfs_attr_node_try_addname
     - xfs: fold xfs_bmap_alloc_userdata into xfs_bmapi_allocate
     - xfs: don't ifdef around the exact minlen allocations
     - xfs: call xfs_bmap_exact_minlen_extent_alloc from xfs_bmap_btalloc
     - xfs: support lowmode allocations in xfs_bmap_exact_minlen_extent_alloc
     - xfs: Use try_cmpxchg() in xlog_cil_insert_pcp_aggregate()
     - xfs: Remove empty declartion in header file
     - xfs: pass the exact range to initialize to xfs_initialize_perag
     - xfs: update the file system geometry after recoverying superblock
       buffers
     - xfs: error out when a superblock buffer update reduces the agcount
     - xfs: don't use __GFP_RETRY_MAYFAIL in xfs_initialize_perag
     - xfs: update the pag for the last AG at recovery time
     - xfs: Reduce unnecessary searches when searching for the best extents
     - xfs: streamline xfs_filestream_pick_ag
     - xfs: Check for delayed allocations before setting extsize
     - md/md-bitmap: replace md_bitmap_status() with a new helper
       md_bitmap_get_stats()
     - md/md-cluster: fix spares warnings for __le64
     - md/md-bitmap: add 'sync_size' into struct md_bitmap_stats
     - mm: update mark_victim tracepoints fields
     - cpufreq: dt-platdev: add missing MODULE_DESCRIPTION() macro
     - cpufreq: fix using cpufreq-dt as module
     - Bluetooth: qca: Support downloading board id specific NVM for WCN7850
     - Bluetooth: qca: Update firmware-name to support board specific nvm
     - Bluetooth: qca: Fix poor RF performance for WCN6855
     - Input: serio - define serio_pause_rx guard to pause and resume serio
       ports
     - ASoC: renesas: rz-ssi: Add a check for negative sample_space
     - ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB]
     - powerpc/64s/mm: Move __real_pte stubs into hash-4k.h
     - powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
     - ALSA: seq: Drop UMP events when no UMP-conversion is set
     - ibmvnic: Return error code on TX scrq flush fail
     - ibmvnic: Introduce send sub-crq direct
     - ibmvnic: Add stat for tx direct vs tx batched
     - vsock/bpf: Warn on socket without transport
     - tcp: adjust rcvq_space after updating scaling ratio
     - geneve: Suppress list corruption splat in geneve_destroy_tunnels().
     - flow_dissector: Fix handling of mixed port and port-range keys
     - flow_dissector: Fix port range key handling in BPF conversion
     - net: Add non-RCU dev_getbyhwaddr() helper
     - arp: switch to dev_getbyhwaddr() in arp_req_set_public()
     - net: axienet: Set mac_managed_pm
     - bpf: unify VM_WRITE vs VM_MAYWRITE use in BPF map mmaping logic
     - strparser: Add read_sock callback
     - bpf: Fix wrong copied_seq calculation
     - bpf: Disable non stream socket for strparser
     - power: supply: da9150-fg: fix potential overflow
     - nouveau/svm: fix missing folio unlock + put after
       make_device_exclusive_range()
     - drm/msm: Avoid rounding up to one jiffy
     - nvme/ioctl: add missing space in err message
     - bpf: skip non exist keys in generic_map_lookup_batch
     - drm/nouveau/pmu: Fix gp10b firmware guard
     - drm/msm/dpu: Disable dither in phys encoder cleanup
     - drm/i915: Make sure all planes in use by the joiner have their crtc
       included
     - drm/i915/dp: Fix error handling during 128b/132b link training
     - soc: loongson: loongson2_guts: Add check for devm_kstrdup()
     - lib/iov_iter: fix import_iovec_ubuf iovec management
     - ASoC: fsl_micfil: Enable default case in micfil_set_quality()
     - ALSA: hda: Add error check for snd_ctl_rename_id() in
       snd_hda_create_dig_out_ctls()
     - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
     - ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close
     - acct: block access to kernel internal filesystems
     - mm,madvise,hugetlb: check for 0-length range after end address
       adjustment
     - mtd: rawnand: cadence: fix error code in cadence_nand_init()
     - mtd: rawnand: cadence: use dma_map_resource
Source diff to previous version
1786013 Packaging resync
2115209 NVMe namespace ID mismatch on repeated map/unmap
2116072 integrated I219-LM network adapter appears to be running too fast, causing synchronization issues when using the I219-LM PTP feature
2115652 intel_rapl: support ARL-H hardware
2115068 Ubuntu 24.04+ arm64: screen resolution fixed to 1024x768 with last kernel update
2116212 Noble update: upstream stable patchset 2025-07-09
2114785 [SRU]Request E825-C driver into latest LTS of Ubuntu OS 24.04
2114450 [UBUNTU 22.04] kernel: Fix z17 elf platform recognition
2114258 [UBUNTU 24.04] Kernel: Add CPUMF extended counter set for z17
2115616 Noble update: upstream stable patchset 2025-06-29
2114849 Noble update: upstream stable patchset 2025-06-17
2117494 [Regression Updates] \
CVE-2025-21861 In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize
CVE-2025-21868 In the Linux kernel, the following vulnerability has been resolved: net: allow small head cache usage with large MAX_SKB_FRAGS values Sabrina repor
CVE-2025-21869 In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Disable KASAN report during patching via temporary mm Er
CVE-2025-21870 In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers Other, non DA
CVE-2025-21844 In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for next_buffer in receive_encrypted_standard() Add chec
CVE-2025-21846 In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue In [1] it was reported that the acct(2)
CVE-2025-21847 In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() The null
CVE-2025-21848 In the Linux kernel, the following vulnerability has been resolved: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() Add check for the return value
CVE-2025-21862 In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix incorrect initialization order Syzkaller reports the followin
CVE-2025-21871 In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix supplicant wait loop OP-TEE supplicant is a user-space daemon a
CVE-2025-21863 In the Linux kernel, the following vulnerability has been resolved: io_uring: prevent opcode speculation sqe->opcode is used for different tables,
CVE-2024-58088 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix deadlock when freeing cgroup storage The following commit bc235cdb423a
CVE-2025-21853 In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freeze_mutex during mmap operation We use map->freeze_mutex
CVE-2025-21867 In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() KMSAN reported a
CVE-2025-21864 In the Linux kernel, the following vulnerability has been resolved: tcp: drop secpath at the same time as we currently drop dst Xiumei reported hit
CVE-2025-21854 In the Linux kernel, the following vulnerability has been resolved: sockmap, vsock: For connectible sockets allow only connected sockmap expects al
CVE-2025-21855 In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Don't reference skb after sending to VIOS Previously, after successful
CVE-2025-21856 In the Linux kernel, the following vulnerability has been resolved: s390/ism: add release function for struct device According to device_release()
CVE-2025-21857 In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: fix error handling causing NULL dereference tcf_exts_miss_c
CVE-2025-21858 In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in geneve_find_dev(). syzkaller reported a use-after
CVE-2025-21866 In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_AL
CVE-2025-21859 In the Linux kernel, the following vulnerability has been resolved: USB: gadget: f_midi: f_midi_complete to call queue_work When using USB MIDI, a
CVE-2025-21746 In the Linux kernel, the following vulnerability has been resolved: Input: synaptics - fix crash when enabling pass-through port When enabling a pa
CVE-2024-57977 In the Linux kernel, the following vulnerability has been resolved: memcg: fix soft lockup in the OOM process A soft lockup issue was found in the
CVE-2025-21712 In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime After commit
CVE-2024-58093 In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix link state exit during switch upstream function removal Before 45
CVE-2025-38083 In the Linux kernel, the following vulnerability has been resolved: net_sched: prio: fix a race in prio_tune() Gerrard Tai reported a race conditio
CVE-2025-37797 In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a U

Version: 6.8.0-70.70~22.04.1 2025-07-17 16:08:51 UTC

 linux-hwe-6.8 (6.8.0-70.70~22.04.1) jammy; urgency=medium
 .
   * jammy/linux-hwe-6.8: 6.8.0-70.70~22.04.1 -proposed tracker (LP: #2116643)
 .
   * Packaging resync (LP: #1786013)
     - [Packaging] debian.hwe-6.8/dkms-versions -- update from kernel-versions
       (main/2025.07.14)
 .
   [ Ubuntu: 6.8.0-70.70 ]
 .
   * noble/linux: 6.8.0-70.70 -proposed tracker (LP: #2116645)
   * Packaging resync (LP: #1786013)
     - [Packaging] update annotations scripts
     - [Packaging] debian.master/dkms-versions -- update from kernel-versions
       (main/2025.07.14)
   * NVMe namespace ID mismatch on repeated map/unmap (LP: #2115209)
     - nvme: requeue namespace scan on missed AENs
     - nvme: re-read ANA log page after ns scan completes
     - nvme: fixup scan failure for non-ANA multipath controllers
   * integrated I219-LM network adapter appears to be running too fast, causing
     synchronization issues when using the I219-LM PTP feature (LP: #2116072)
     - e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13
   * intel_rapl: support ARL-H hardware (LP: #2115652)
     - powercap: intel_rapl_msr: Add PL4 support for ArrowLake-H
   * Ubuntu 24.04+ arm64: screen resolution fixed to 1024x768 with last kernel
     update (LP: #2115068)
     - [Config] Replace FB_HYPERV with DRM_HYPERV
   * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212)
     - arm64: mte: Do not allow PROT_MTE on MAP_HUGETLB user mappings
     - xfs: assert a valid limit in xfs_rtfind_forw
     - xfs: validate inumber in xfs_iget
     - xfs: fix a sloppy memory handling bug in xfs_iroot_realloc
     - xfs: fix a typo
     - xfs: skip background cowblock trims on inodes open for write
     - xfs: don't free cowblocks from under dirty pagecache on unshare
     - xfs: merge xfs_attr_leaf_try_add into xfs_attr_leaf_addname
     - xfs: return bool from xfs_attr3_leaf_add
     - xfs: distinguish extra split from real ENOSPC from xfs_attr3_leaf_split
     - xfs: distinguish extra split from real ENOSPC from
       xfs_attr_node_try_addname
     - xfs: fold xfs_bmap_alloc_userdata into xfs_bmapi_allocate
     - xfs: don't ifdef around the exact minlen allocations
     - xfs: call xfs_bmap_exact_minlen_extent_alloc from xfs_bmap_btalloc
     - xfs: support lowmode allocations in xfs_bmap_exact_minlen_extent_alloc
     - xfs: Use try_cmpxchg() in xlog_cil_insert_pcp_aggregate()
     - xfs: Remove empty declartion in header file
     - xfs: pass the exact range to initialize to xfs_initialize_perag
     - xfs: update the file system geometry after recoverying superblock
       buffers
     - xfs: error out when a superblock buffer update reduces the agcount
     - xfs: don't use __GFP_RETRY_MAYFAIL in xfs_initialize_perag
     - xfs: update the pag for the last AG at recovery time
     - xfs: Reduce unnecessary searches when searching for the best extents
     - xfs: streamline xfs_filestream_pick_ag
     - xfs: Check for delayed allocations before setting extsize
     - md/md-bitmap: replace md_bitmap_status() with a new helper
       md_bitmap_get_stats()
     - md/md-cluster: fix spares warnings for __le64
     - md/md-bitmap: add 'sync_size' into struct md_bitmap_stats
     - mm: update mark_victim tracepoints fields
     - cpufreq: dt-platdev: add missing MODULE_DESCRIPTION() macro
     - cpufreq: fix using cpufreq-dt as module
     - Bluetooth: qca: Support downloading board id specific NVM for WCN7850
     - Bluetooth: qca: Update firmware-name to support board specific nvm
     - Bluetooth: qca: Fix poor RF performance for WCN6855
     - Input: serio - define serio_pause_rx guard to pause and resume serio
       ports
     - ASoC: renesas: rz-ssi: Add a check for negative sample_space
     - ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB]
     - powerpc/64s/mm: Move __real_pte stubs into hash-4k.h
     - powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
     - ALSA: seq: Drop UMP events when no UMP-conversion is set
     - ibmvnic: Return error code on TX scrq flush fail
     - ibmvnic: Introduce send sub-crq direct
     - ibmvnic: Add stat for tx direct vs tx batched
     - vsock/bpf: Warn on socket without transport
     - tcp: adjust rcvq_space after updating scaling ratio
     - geneve: Suppress list corruption splat in geneve_destroy_tunnels().
     - flow_dissector: Fix handling of mixed port and port-range keys
     - flow_dissector: Fix port range key handling in BPF conversion
     - net: Add non-RCU dev_getbyhwaddr() helper
     - arp: switch to dev_getbyhwaddr() in arp_req_set_public()
     - net: axienet: Set mac_managed_pm
     - bpf: unify VM_WRITE vs VM_MAYWRITE use in BPF map mmaping logic
     - strparser: Add read_sock callback
     - bpf: Fix wrong copied_seq calculation
     - bpf: Disable non stream socket for strparser
     - power: supply: da9150-fg: fix potential overflow
     - nouveau/svm: fix missing folio unlock + put after
       make_device_exclusive_range()
     - drm/msm: Avoid rounding up to one jiffy
     - nvme/ioctl: add missing space in err message
     - bpf: skip non exist keys in generic_map_lookup_batch
     - drm/nouveau/pmu: Fix gp10b firmware guard
     - drm/msm/dpu: Disable dither in phys encoder cleanup
     - drm/i915: Make sure all planes in use by the joiner have their crtc
       included
     - drm/i915/dp: Fix error handling during 128b/132b link training
     - soc: loongson: loongson2_guts: Add check for devm_kstrdup()
     - lib/iov_iter: fix import_iovec_ubuf iovec management
     - ASoC: fsl_micfil: Enable default case in micfil_set_quality()
     - ALSA: hda: Add error check for snd_ctl_rename_id() in
       snd_hda_create_dig_out_ctls()
     - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
     - ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close
     - acct: block access to kernel internal filesystems
     - mm,madvise,hugetlb: check for 0-length range after end

1786013 Packaging resync
2115209 NVMe namespace ID mismatch on repeated map/unmap
2116072 integrated I219-LM network adapter appears to be running too fast, causing synchronization issues when using the I219-LM PTP feature
2115652 intel_rapl: support ARL-H hardware
2115068 Ubuntu 24.04+ arm64: screen resolution fixed to 1024x768 with last kernel update
2116212 Noble update: upstream stable patchset 2025-07-09
2114785 [SRU]Request E825-C driver into latest LTS of Ubuntu OS 24.04
2114450 [UBUNTU 22.04] kernel: Fix z17 elf platform recognition
2114258 [UBUNTU 24.04] Kernel: Add CPUMF extended counter set for z17
2115616 Noble update: upstream stable patchset 2025-06-29
2114849 Noble update: upstream stable patchset 2025-06-17
CVE-2025-21861 In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize
CVE-2025-21868 In the Linux kernel, the following vulnerability has been resolved: net: allow small head cache usage with large MAX_SKB_FRAGS values Sabrina repor
CVE-2025-21869 In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Disable KASAN report during patching via temporary mm Er
CVE-2025-21870 In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers Other, non DA
CVE-2025-21844 In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for next_buffer in receive_encrypted_standard() Add chec
CVE-2025-21846 In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue In [1] it was reported that the acct(2)
CVE-2025-21847 In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() The null
CVE-2025-21848 In the Linux kernel, the following vulnerability has been resolved: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() Add check for the return value
CVE-2025-21862 In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix incorrect initialization order Syzkaller reports the followin
CVE-2025-21871 In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix supplicant wait loop OP-TEE supplicant is a user-space daemon a
CVE-2025-21863 In the Linux kernel, the following vulnerability has been resolved: io_uring: prevent opcode speculation sqe->opcode is used for different tables,
CVE-2024-58088 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix deadlock when freeing cgroup storage The following commit bc235cdb423a
CVE-2025-21853 In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freeze_mutex during mmap operation We use map->freeze_mutex
CVE-2025-21867 In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() KMSAN reported a
CVE-2025-21864 In the Linux kernel, the following vulnerability has been resolved: tcp: drop secpath at the same time as we currently drop dst Xiumei reported hit
CVE-2025-21854 In the Linux kernel, the following vulnerability has been resolved: sockmap, vsock: For connectible sockets allow only connected sockmap expects al
CVE-2025-21855 In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Don't reference skb after sending to VIOS Previously, after successful
CVE-2025-21856 In the Linux kernel, the following vulnerability has been resolved: s390/ism: add release function for struct device According to device_release()
CVE-2025-21857 In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: fix error handling causing NULL dereference tcf_exts_miss_c
CVE-2025-21858 In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in geneve_find_dev(). syzkaller reported a use-after
CVE-2025-21866 In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_AL
CVE-2025-21859 In the Linux kernel, the following vulnerability has been resolved: USB: gadget: f_midi: f_midi_complete to call queue_work When using USB MIDI, a
CVE-2025-21746 In the Linux kernel, the following vulnerability has been resolved: Input: synaptics - fix crash when enabling pass-through port When enabling a pa
CVE-2024-57977 In the Linux kernel, the following vulnerability has been resolved: memcg: fix soft lockup in the OOM process A soft lockup issue was found in the
CVE-2025-21712 In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime After commit
CVE-2025-37797 In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a U
CVE-2024-58093 In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix link state exit during switch upstream function removal Before 45
CVE-2025-38083 In the Linux kernel, the following vulnerability has been resolved: net_sched: prio: fix a race in prio_tune() Gerrard Tai reported a race conditio


About   -   Send Feedback to @ubuntu_updates