SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.8.7 upstream stable release from git://git.kernel.org/ Linux 6.8.7 drm/amd/display: fix disable otg wa logic in DCN316 drm/amd/display: always reset ODM mode in context when adding first plane drm/amd/display: Return max resolution supported by DWB drm/amd/display: Do not recursively call manual trigger programming drm/amd/display: Set VSC SDP Colorimetry same way for MST and SST drm/amd/display: Program VSC SDP colorimetry for all DP sinks >= 1.4 drm/amdgpu: differentiate external rev id for gfx 11.5.0 drm/amdgpu: fix incorrect number of active RBs for gfx11 drm/amdgpu: always force full reset for SOC21 drm/amdgpu: Reset dGPU if suspend got aborted drm/i915: Disable live M/N updates when using bigjoiner drm/i915: Disable port sync when bigjoiner is used drm/i915/psr: Disable PSR when bigjoiner is used drm/i915/cdclk: Fix CDCLK programming order when pipes are active x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto x86/bugs: Clarify that syscall hardening isn't a BHI mitigation x86/bugs: Fix BHI handling of RRSBA x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES x86/bugs: Fix BHI documentation x86/bugs: Fix return type of spectre_bhi_state() kernfs: annotate different lockdep class for of->mutex of writable files selftests: kselftest: Fix build failure with NOLIBC irqflags: Explicitly ignore lockdep_hrtimer_exit() argument x86/apic: Force native_apic_mem_read() to use the MOV instruction selftests: kselftest: Mark functions that unconditionally call exit() as __noreturn selftests: timers: Fix abs() warning in posix_timers test selftests: timers: Fix posix_timers ksft_print_msg() warning selftests/timers/posix_timers: Reimplement check_timer_distribution() x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n perf/x86: Fix out of range data vhost: Add smp_rmb() in vhost_enable_notify() vhost: Add smp_rmb() in vhost_vq_avail_empty() arm64: dts: imx8-ss-dma: fix spi lpcg indices arm64: dts: imx8-ss-lsio: fix pwm lpcg indices arm64: dts: imx8-ss-dma: fix pwm lpcg indices arm64: dts: imx8-ss-conn: fix usb lpcg indices arm64: dts: imx8-ss-dma: fix adc lpcg indices arm64: dts: imx8-ss-dma: fix can lpcg indices arm64: dts: imx8qm-ss-dma: fix can lpcg indices drm/amdgpu/umsch: reinitialize write pointer in hw init drm/msm/dp: fix runtime PM leak on connect failure drm/msm/dp: fix runtime PM leak on disconnect drm/client: Fully protect modes[] with dev->mode_config.mutex drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr() drm/ast: Fix soft lockup drm/amdkfd: Reset GPU on queue preemption failure drm/i915/vrr: Disable VRR when using bigjoiner drm/vmwgfx: Enable DMA mappings with SEV accel/ivpu: Fix deadlock in context_xa accel/ivpu: Return max freq for DRM_IVPU_PARAM_CORE_CLOCK_RATE accel/ivpu: Put NPU back to D3hot after failed resume accel/ivpu: Fix PCI D0 state entry in resume accel/ivpu: Check return code of ipc->lock init scsi: sg: Avoid race in error handling & drop bogus warn scsi: sg: Avoid sg device teardown race fs/proc: Skip bootloader comment if no embedded kernel parameters fs/proc: remove redundant comments from /proc/bootconfig kprobes: Fix possible use-after-free issue on kprobe registration io_uring/net: restore msg_control on sendzc retry btrfs: qgroup: convert PREALLOC to PERTRANS after record_root_in_trans btrfs: record delayed inode root in transaction btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations btrfs: qgroup: correctly model root qgroup rsv in convert io_uring: disable io-wq execution of multishot NOWAIT requests io_uring: refactor DEFER_TASKRUN multishot checks iommu/vt-d: Fix WARN_ON in iommu probe path iommu/vt-d: Allocate local memory for page request queue iommu/vt-d: Fix wrong use of pasid config tracing: hide unused ftrace_event_id_fops drm/xe/hwmon: Cast result to output precision on left shift of operand drm/xe/display: Fix double mutex initialization net: ena: Set tx_info->xdpf value to NULL net: ena: Fix incorrect descriptor free behavior net: ena: Wrong missing IO completions check order net: ena: Fix potential sign extension issue af_unix: Fix garbage collector racing against connect() af_unix: Do not use atomic ops for unix_sk(sk)->inflight. net: dsa: mt7530: trap link-local frames regardless of ST Port State Revert "s390/ism: fix receive message buffer allocation" net: sparx5: fix wrong config being used when reconfiguring PCS net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit net/mlx5e: HTB, Fix inconsistencies with QoS SQs number net/mlx5e: Fix mlx5e_priv_init() cleanup flow net/mlx5e: RSS, Block changing channels number when RXFH is configured net/mlx5: Correctly compare pkt reformat ids net/mlx5: Properly link new fs rules into the tree net/mlx5: offset comp irq index in name by one net/mlx5: Register devlink first under devlink lock net/mlx5: SF, Stop waiting for FW as teardown was called netfilter: complete validation of user input Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit Bluetooth: hci_sock: Fix not validating setsockopt user input Bluetooth: ISO: Fix not validating setsockopt user input Bluetooth: L2CAP: Fix not validating setsockopt user input Bluetooth: RFCOMM: Fix not validating setsockopt user input Bluetooth: SCO: Fix not validating setsockopt user input Bluetooth: hci_sync: Fix using the same interval and window for Coded PHY Bluetooth: hci_sync: Use QoS to determine which PHY to scan Bluetooth: ISO: Don't reject BT_ISO_QOS if parameters are unset Bluetooth: ISO: Align broadcast sync_timeout with connection timeout pds_core: Fix pdsc_check_pci_health function to use work thread pds_core: use pci_reset_function for health reset ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr ipv4/route: avoid unused-but-set-variable warning ipv6: fib: hide unused 'pn' variable octeontx2-af: Fix NIX SQ mode and BP config af_unix: Clear stale u->oob_skb. net: ks8851: Handle softirqs at the end of IRQ thread to fix hang net: ks8851: Inline ks8851_rx_skb() cxl: Fix retrieving of access_coordinates in PCIe path cxl: Remove checking of iter in cxl_endpoint_get_perf_coordinates() cxl: Split out host bridge access coordinates cxl: Split out combine_coordinates() for common shared usage ACPI: HMAT / cxl: Add retrieval of generic port coordinates for both access classes ACPI: HMAT: Introduce 2 levels of generic port access class base/node / ACPI: Enumerate node access class for 'struct access_coordinate' ACPI: bus: allow _UID matching for integer zero bnxt_en: Reset PTP tx_avail after possible firmware reset bnxt_en: Fix error recovery for RoCE ulp client bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init() s390/ism: fix receive message buffer allocation geneve: fix header validation in geneve[6]_xmit_skb lib: checksum: hide unused expected_csum_ipv6_magic[] block: fix q->blkg_list corruption during disk rebind octeontx2-pf: Fix transmit scheduler resource leak xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file net: openvswitch: fix unwanted error log on timeout policy probing scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() scsi: hisi_sas: Modify the deadline for ata_wait_after_reset() drm/msm/adreno: Set highest_bank_bit for A619 nouveau: fix function cast warning Revert "drm/qxl: simplify qxl_fence_wait" cxl/core: Fix initialization of mbox_cmd.size_out in get event arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order dt-bindings: display/msm: sm8150-mdss: add DP node drm/msm/dpu: make error messages at dpu_core_irq_register_callback() more sensible drm/msm/dpu: don't allow overriding data from catalog drm/msm: Add newlines to some debug prints arm64: dts: freescale: imx8mp-venice-gw73xx-2x: fix USB vbus regulator arm64: dts: freescale: imx8mp-venice-gw72xx-2x: fix USB vbus regulator cxl/core/regs: Fix usage of map->reg_type in cxl_decode_regblock() before assigned cxl/mem: Fix for the index of Clear Event Record Handle firmware: arm_scmi: Make raw debugfs entries non-seekable firmware: arm_ffa: Fix the partition ID check in ffa_notification_info_get() ARM: OMAP2+: fix USB regression on Nokia N8x0 mmc: omap: restore original power up/down steps mmc: omap: fix deferred probe mmc: omap: fix broken slot switch lookup ARM: OMAP2+: fix N810 MMC gpiod table ARM: OMAP2+: fix bogus MMC GPIO labels on Nokia N8x0 btrfs: tests: allocate dummy fs_info and root in test_find_delalloc() media: cec: core: remove length check of Timer Status PM: s2idle: Make sure CPUs will wakeup directly on resume ACPI: scan: Do not increase dep_unmet for already met dependencies platform/chrome: cros_ec_uart: properly fix race condition drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11 Bluetooth: Fix memory leak in hci_req_sync_complete() ring-buffer: Only update pages_touched when a new page is touched raid1: fix use-after-free for original bio in raid1_write_request() ARM: dts: imx7s-warp: Pass OV2680 link-frequencies arm64: tlb: Fix TLBI RANGE operand virtio_net: Do not send RSS key if it is not supported ceph: switch to use cap_delay_lock for the unlink delay list ceph: redirty page before returning AOP_WRITEPAGE_ACTIVATE batman-adv: Avoid infinite loop trying to resize local TT drm/amdgpu/vpe: power on vpe when hw_init ata: libata-scsi: Fix ata_scsi_dev_rescan() error path ata: libata-core: Allow command duration limits detection for ACS-4 drives smb3: fix Open files on server counter going negative