linux-nvidia (7.0.0-1010.10) resolute; urgency=medium

  * resolute/linux-nvidia: 7.0.0-1008.8 -proposed tracker (LP: #2153496)

  * GRO managed-frag use-after-free leading to local privilege escalation
    (LP: #2154172)
    - net: gro: don't merge zcopy skbs

  * apparmor (LP: #2151747)
    - SAUCE: apparmor: pass big_resp to handler
    - SAUCE: apparmor: remove redundant kref_init for listener->count
    - SAUCE: apparmor: fix NULL pointer dereference in unpack_pdb

  * apparmor (LP: #2151747) // CVE-2026-47337
    - SAUCE: apparmor: fix NULL pointer dereference in bind_map_addr

  * apparmor (LP: #2151747) // CVE-2026-47334
    - SAUCE: apparmor: fix sleep prone memory allocation under a spin_lock

  * apparmor (LP: #2151747) // CVE-2026-47333
    - SAUCE: apparmor: fix dfa unpacking size of the notification filter

  * apparmor (LP: #2151747) // CVE-2026-47332
    - SAUCE: apparmor: fix size check against type instead of pointer

  * apparmor: LLVM/clang build failure due to uninitialized variable in
    notify.c (LP: #2148809) // CVE-2026-47330
    - SAUCE: apparmor: initialize variable used in uninitialized context

  * apparmor (LP: #2151747) // CVE-2026-47329
    - SAUCE: apparmor: fix name validation bypass on notification

  * apparmor (LP: #2151747) // CVE-2026-47327 // CVE-2026-47328
    - SAUCE: apparmor: fix glob memory leak after kstrdup

  * apparmor (LP: #2151747) // CVE-2026-47326
    - SAUCE: apparmor: fix inverted NULL check after aa_get_buffer

  * CVE-2026-46300
    - net: skbuff: preserve shared-frag marker during coalescing
    - net: skbuff: propagate shared-frag marker through frag-transfer helpers

  * net/rds: reset op_nents when zerocopy page pin fails (LP: #2153962)
    - net/rds: reset op_nents when zerocopy page pin fails

  * CVE-2026-46333
    - ptrace: slightly saner 'get_dumpable()' logic

  * CVE-2026-43500
    - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets
    - rxrpc: Fix potential UAF after skb_unshare() failure
    - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets
    - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present

  * CVE-2026-43284
    - xfrm: esp: avoid in-place decrypt on shared skb frags

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - [Packaging] debian.nvidia/dkms-versions -- update from kernel-versions
      (adhoc/d2026.05.20)

  * Installer fails internally with a RSync error due to page fault
    (LP: #2150640)
    - NVIDIA: SAUCE: ovl: keep err zero after successful ovl_cache_get()

  * Pull CPPC mailing list patches for Spark (LP: #2131705)
    - ACPI: CPPC: Add cppc_get_perf() API to read performance controls
    - ACPI: CPPC: Warn on missing mandatory DESIRED_PERF register
    - ACPI: CPPC: Extend cppc_set_epp_perf() for FFH/SystemMemory
    - cpufreq: CPPC: Update cached perf_ctrls on sysfs write
    - cpufreq: cppc: Update MIN_PERF/MAX_PERF in target callbacks
    - ACPI: CPPC: add APIs and sysfs interface for perf_limited
    - cpufreq: CPPC: Add sysfs documentation for perf_limited
    - ACPI: CPPC: Move reference performance to capabilities
    - ACPI: CPPC: Fix uninitialized ref variable in cppc_get_perf_caps()
    - ACPI: CPPC: Check cpc_read() return values consistently
    - cpufreq: Remove max_freq_req update for pre-existing policy
    - cpufreq: Add boost_freq_req QoS request
    - cpufreq: Allocate QoS freq_req objects with policy
    - cpufreq/amd-pstate: Cache the max frequency in cpudata
    - NVIDIA: SAUCE: cpufreq: Extract cpufreq_policy_init_qos() function
    - NVIDIA: SAUCE: cpufreq: Set default policy->min/max values for all
      drivers
    - NVIDIA: SAUCE: cpufreq: Remove driver default policy->min/max init
    - NVIDIA: SAUCE: cpufreq: Use policy->min/max init as QoS request
    - NVIDIA: SAUCE: cpufreq: CPPC: add autonomous mode boot parameter support

  * Backport lan743x driver patches (LP: #2152064)
    - net: microchip: lan743x: add ethtool nway_reset support
    - net: lan743x: fix SGMII detection on PCI1xxxx B0+ during warm reset
    - net: lan743x: rename chip_rev to fpga_rev

  * Backport SMT-aware asymmetric CPU capacity idle selection (LP: #2150671)
    - NVIDIA: VR: SAUCE: sched/fair: Attach sched_domain_shared to
      sd_asym_cpucapacity
    - NVIDIA: VR: SAUCE: sched/fair: Prefer fully-idle SMT cores in asym-
      capacity idle selection
    - NVIDIA: VR: SAUCE: sched/fair: Reject misfit pulls onto busy SMT
      siblings on asym-capacity
    - NVIDIA: VR: SAUCE: sched/fair: Add SIS_UTIL support to
      select_idle_capacity()

  * Introduce a sharded cache affinity scope  (LP: #2150467)
    - workqueue: fix parse_affn_scope() prefix matching bug
    - workqueue: fix typo in WQ_AFFN_SMT comment
    - workqueue: add WQ_AFFN_CACHE_SHARD affinity scope
    - workqueue: set WQ_AFFN_CACHE_SHARD as the default affinity scope
    - tools/workqueue: add CACHE_SHARD support to wq_dump.py
    - workqueue: add test_workqueue benchmark module
    - docs: workqueue: document WQ_AFFN_CACHE_SHARD affinity scope
    - workqueue: avoid unguarded 64-bit division
    - workqueue: validate cpumask_first() result in
      llc_populate_cpu_shard_id()
    - [Config] nvidia: Defaults for CONFIG_TEST_WORKQUEUE

  * UBUNTU: [Config] nvidia: Disable default CMA reservation (LP: #2150898)
    - [Config] nvidia: Disable default CMA reservation

  * Backport Use device ID range for DGX Spark iGPU (LP: #2150487)
    - NVIDIA: SAUCE: iommu/arm-smmu-v3: Use device ID range for DGX Spark iGPU
      iommu quirk

  * Backport NVIDIA: SAUCE: iommu/arm-smmu-v3: Use identity domain for ASPEED
    BMC devices (LP: #2150470)
    - NVIDIA: SAUCE: iommu/arm-smmu-v3: Use identity domain for ASPEED BMC
      devices

  * Update GDS/NVMe SAUCE for v6.17 (LP: #2134960) // [linux-nvidia-7.0]:
    Forward-port GDS/NVFS content (LP: #2150289)
    - NVIDIA: SAUCE: Patch NVMe/NVMeoF driver to support GDS on Linux 7.0
      Kernel

  * serial: 8250_mtk: Update ACPI support to add NVDA0240 device ID
    (LP: #2148607)
    - Revert "NVIDIA: SAUCE: serial: 8250_mtk: Add ACPI support"
    - NVIDIA: SAUCE: MEDIATEK: serial: 8250_mtk: Add ACPI support

  * fix r8169 vs r8127 contention for Spark (LP: #2144345)
    - NVIDIA: SAUCE: r8169: remove PCI IDs claimed by r8127 driver

  [ Ubuntu: 7.0.0-15.15 ]

  * resolute/linux: 7.0.0-15.15 -proposed tracker (LP: #2148866)
  * Qualcomm X1E: Speaker overdrive causes hardware protection shutdown
    (LP: #2149808)
    - SAUCE: ASoC: qcom: x1e80100: limit speaker volumes
  * intel-ipu7 / intel-ipu7-isys modules are shipped unsigned in latest
    Resolute kernels, breaking Secure Boot systems  (LP: #2148718)
    - [packaging] add intel-ipu7 to signature inclusion list

 -- Jacob Martin <jacob.martin@canonical.com>  Wed, 27 May 2026 16:30:06 -0500

linux-nvidia (7.0.0-1006.6) resolute; urgency=medium

  * resolute/linux-nvidia: 7.0.0-1006.6 -proposed tracker (LP: #2148214)

  [ Ubuntu: 7.0.0-14.14 ]

  * resolute/linux: 7.0.0-14.14 -proposed tracker (LP: #2148159)
  * support vflip/hflip for Sony IMX471 camera sensor (LP: #2138841)
    - SAUCE: media: ipu-bridge: add TBE20A0 ACPI id for Sony IMX471
  * AA: disable SECURITY_APPARMOR_PACKET_MEDIATION_ENABLED (LP: #2147533)
    - [Config] disable SECURITY_APPARMOR_PACKET_MEDIATION_ENABLED
  * System doesn't response with mt76 call trace (LP: #2137448)
    - wifi: mt76: mt792x: Fix a potential deadlock in high-load situations
  * The second tbt storage plugged on the dock will not be recognized
    (LP: #2139572)
    - SAUCE: thunderbolt: Fix PCIe device enumeration with delayed rescan
  * dma-buf filesystem flags fix (LP: #2139656)
    - SAUCE: dma-buf: set SB_I_NOEXEC and SB_I_NODEV on dmabuf filesystem
  * Bluetooth device (MT7925) not detected on USB bus with linux-oem-6.17
    (LP: #2145164)
    - SAUCE: USB: hub: call ACPI _PRR reset during port power-cycle on
      enumeration failure
  * drm/i915/lnl+/tc: Fix false disconnect of active DP-alt TC port during
    long HPD pulse (LP: #2143879)
    - SAUCE: drm/i915/lnl+/tc: Fix false disconnect of active DP-alt TC port
      during long HPD pulse
  * i915 WARN_ON call trace during CB/WB on MTL/ARL platforms (LP: #2144537)
    - SAUCE: drm/i915/xelpdp/tc: Convert TCSS power check WARN to a debug
      message
  * Miscellaneous Ubuntu changes
    - [Packaging] Add support for per-flavour depends
    - [Packaging] Don't hard-code lmm zfs dependency
    - [Config] updateconfigs following v7.0 release

  [ Ubuntu: 7.0.0-13.13 ]

  * resolute/linux: 7.0.0-13.13 -proposed tracker (LP: #2147403)
  * ubuntu_kselftests:_net/net:gre_gso.sh failing (LP: #2136820)
    - SAUCE increase socat timeout in gre_gso.sh
  * Canonical Kmod 2025 key rotation (LP: #2147447)
    - [Packaging] ubuntu-compatible-signing -- make Ubuntu-Compatible-Signing
      extensible
    - [Packaging] ubuntu-compatible-signing -- allow consumption of positive
      certs
    - [Packaging] ubuntu-compatible-signing -- report the livepatch:2025 key
    - [Config] prepare for Canonical Kmod key rotation
    - [Packaging] ubuntu-compatible-signing -- report the kmod:2025 key
    - [Packaging] ensure our cert rollups are always fresh
  * On Dell system, the internal OLED display drops to a visibly low FPS after
    suspend/resume (LP: #2144712)
    - drm/i915/psr: Disable Panel Replay on Dell XPS 14 DA14260 as a quirk
    - drm/i915/psr: Fixes for Dell XPS DA14260 quirk
  * Realtek RTL8116AF SFP option module fails to get connected (LP: #2116144)
    - SAUCE: r8169: add quirk for RTL8116af SerDes
  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs following v7.0-rc7 rebase

 -- Jacob Martin <jacob.martin@canonical.com>  Tue, 14 Apr 2026 16:19:48 -0500

linux-nvidia (7.0.0-1005.5) resolute; urgency=medium

  * resolute/linux-nvidia: 7.0.0-1005.5 -proposed tracker (LP: #2145971)

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants

  * Please make dracut the default initrd generator (LP: #2142775)
    - [Packaging] recommends dracut instead of initramfs-tools

  [ Ubuntu: 7.0.0-12.12 ]

  * resolute/linux: 7.0.0-12.12 -proposed tracker (LP: #2146778)
  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
  * linux-generic does not run scripts in /usr/share/kernel/*.d (LP: #2147005)
    - [Packaging] templates: Use consistent indentation
    - [Packaging] templates: Run scripts in /usr/share/kernel/*.d too
  * RISC-V kernel config is out of sync with other archs (LP: #1981437)
    - [Config] riscv64: Enable COUNTER=m
    - [Config] riscv64: Use GENDWARFKSYMS like other architectures
  * unconfined profile denies userns_create for chromium based processes
    (LP: #1990064)
    - [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
  * FFe: add network interface mediation to 26.04 (LP: #2144679)
    - SAUCE: apparmor5.0.0 [57/57]: apparmor: add the ability to use interface
      in network mediation.
  * Jellyfin Desktop Flatpak doesn't work with the current AppArmor profile
    (LP: #2142956)
    - SAUCE: apparmor5.0.0 [29/57]: apparmor: fix fine grained inet mediation
      sock_file_perm
    - SAUCE: apparmor5.0.0 [30/57]: apparmor-next 7.1: aapparmor: use target
      task's context in apparmor_getprocattr()
    - SAUCE: apparmor5.0.0 [31/57]: apparmor-next 7.1: apparmor: return error
      on namespace mismatch in verify_header
    - SAUCE: apparmor5.0.0 [32/57]: apparmor-next 7.1: apparmor: enable
      differential encoding
    - SAUCE: apparmor5.0.0 [33/57]: apparmor-next 7.1: apparmor: propagate
      -ENOMEM correctly in unpack_table
    - SAUCE: apparmor5.0.0 [34/57]: apparmor-next 7.1: apparmor: Replace
      memcpy + NUL termination with kmemdup_nul in do_setattr
    - SAUCE: apparmor5.0.0 [35/57]: apparmor-next 7.1: apparmor: Remove
      redundant if check in sk_peer_get_label
    - SAUCE: apparmor5.0.0 [36/57]: apparmor-next 7.1: apparmor: use
      __label_make_stale in __aa_proxy_redirect
    - SAUCE: apparmor5.0.0 [37/57]: apparmor-next 7.1: apparmor: fix net.h and
      policy.h circular include pattern
    - SAUCE: apparmor5.0.0 [39/57]: apparmor-next 7.1: apparmor: make include
      headers self-contained
    - SAUCE: apparmor5.0.0 [40/57]: apparmor-next 7.1: apparmor: Use
      sysfs_emit in param_get_{audit,mode}
    - SAUCE: apparmor5.0.0 [41/57]: apparmor-next 7.1: apparmor: fix
      rawdata_f_data implicit flex array
    - SAUCE: apparmor5.0.0 [42/57]: apparmor-next 7.1: apparmor: free rawdata
      as soon as possible
    - SAUCE: apparmor5.0.0 [43/57]: apparmor-next 7.1: apparmor: Initial
      support for compressed policies
    - SAUCE: apparmor5.0.0 [44/57]: apparmor-next 7.1: apparmor: fix potential
      UAF in aa_replace_profiles
    - SAUCE: apparmor5.0.0 [45/57]: apparmor-next 7.1: apparmor: hide unused
      get_loaddata_common_ref() function
    - SAUCE: apparmor5.0.0 [46/57]: apparmor-next 7.1: apparmor: Fix string
      overrun due to missing termination
    - SAUCE: apparmor5.0.0 [47/57]: apparmor: fix packed tag on v5 header
      struct
    - SAUCE: apparmor5.0.0 [48/57]: apparmor: add temporal caching to audit
      responses.
    - SAUCE: apparmor5.0.0 [49/57]: apparmor: change fn_label_build() call to
      not return NULL
    - SAUCE: apparmor5.0.0 [50/57]: apparmor: make fn_label_build() capable of
      handling not supported
    - SAUCE: apparmor5.0.0 [51/57]: apparmor: move netfilter functions next to
      the LSM network operations
    - SAUCE: apparmor5.0.0 [52/57]: apparmor: move sock_rvc_skb() next to
      inet_conn_request
    - SAUCE: apparmor5.0.0 [53/57]: apparmor: fix af_unix local addr mediation
      binding
    - SAUCE: apparmor5.0.0 [54/57]: cleanups of apparmor af_unix mediation
    - SAUCE: apparmor5.0.0 [55/57]: apparmor: fix apparmor_secmark_check()
      when !inet and secmark defined.
    - SAUCE: apparmor5.0.0 [56/57]: apparmor: fix auditing of non-mediation
      falures
  * snap service cannot change apparmor hat (LP: #2139664) // Jellyfin Desktop
    Flatpak doesn't work with the current AppArmor profile (LP: #2142956)
    - SAUCE: apparmor5.0.0 [38/57]: apparmor-next 7.1: apparmor: grab ns lock
      and refresh when looking up changehat child profiles
  * AppArmor blocks write(2) to network sockets with Linux 6.19 (LP: #2141298)
    - SAUCE: apparmor5.0.0 [28/57]: apparmor: fix aa_label_sk_perm to check
      for RULE_MEDIATES_NET
  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor5.0.0 [1/57]: Stacking: LSM: Single calls in secid hooks
    - SAUCE: apparmor5.0.0 [2/57]: Stacking: LSM: Exclusive secmark usage
    - SAUCE: apparmor5.0.0 [3/57]: Stacking: AppArmor: Remove the exclusive
      flag
    - SAUCE: apparmor5.0.0 [4/57]: Revert "apparmor: fix dbus permission
      queries to v9 ABI"
    - SAUCE: apparmor5.0.0 [5/57]: Revert "apparmor: gate make fine grained
      unix mediation behind v9 abi"
    - SAUCE: apparmor5.0.0 [6/57]: apparmor: net: patch to provide
      compatibility with v2.x net rules
    - SAUCE: apparmor5.0.0 [7/57]: apparmor: net: add fine grained ipv4/ipv6
      mediation
    - SAUCE: apparmor5.0.0 [8/57]: apparmor: lift compatibility check out of
      profile_af_perm
    - SAUCE: apparmor5.0.0 [9/57]: apparmor: userns: add unprivileged user ns
      mediation
    - SAUCE: apparmor5.0.0 [10/57]: apparmor: userns: Add sysctls for
      additional controls of unpriv userns restrictions
    - SAUCE: apparmor5.0.0 [12/57]: apparmor: userns: open userns related
      sysctl so lxc can check if restriction are in place
    - SAUCE: apparmor5.0.0 [13/57]: apparmor: userns: allow profile to be
      transitioned when a userns is created
    - SAUCE: apparmor5.0.0 [14/57]: apparmor: mqueue: call
      security_inode_init_security on inode creation
    - SAUCE: apparmor5.0.0 [15/57]: apparmor: mqueue: add fine grained
      mediation of posix mqueues
    - SAUCE: apparmor5.0.0 [16/57]: apparmor: uring: add io_uring mediation
    - SAUCE: apparmor5.0.0 [19/57]: apparmor: prompt: setup slab cache for
      audit data
    - SAUCE: apparmor5.0.0 [20/57]: apparmor: prompt: add the ability for
      profiles to have a learning cache
    - SAUCE: apparmor5.0.0 [21/57]: apparmor: prompt: enable userspace upcall
      for mediation
    - SAUCE: apparmor5.0.0 [22/57]: apparmor: prompt: pass prompt boolean
      through into path_name as well
    - SAUCE: apparmor5.0.0 [23/57]: apparmor: check for supported version in
      notification messages.
    - SAUCE: apparmor5.0.0 [24/57]: apparmor: refactor building notice so it
      is easier to extend
    - SAUCE: apparmor5.0.0 [25/57]: apparmor: switch from ENOTSUPP to
      EPROTONOSUPPORT
    - SAUCE: apparmor5.0.0 [26/57]: apparmor: add support for meta data tags
    - SAUCE: apparmor5.0.0 [27/57]: apparmor: prevent profile->disconnected
      double free in aa_free_profile
  * update apparmor and LSM stacking patch set (LP: #2028253) // Installation
    of AppArmor on a 6.14 kernel produces error message "Illegal number: yes"
    (LP: #2102680)
    - SAUCE: apparmor5.0.0 [17/57]: apparmor: create an
      AA_SFS_TYPE_BOOLEAN_INTPRINT sysctl variant
    - SAUCE: apparmor5.0.0 [18/57]: apparmor: Use AA_SFS_FILE_BOOLEAN_INTPRINT
      for userns and io_uring sysctls
  * update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
    apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in
    mantic (LP: #2032602)
    - SAUCE: apparmor5.0.0 [11/57]: apparmor: userns - make it so special
      unconfined profiles can mediate user namespaces
  * Enable new Intel WCL soundwire support (LP: #2143301)
    - ASoC: sdw_utils: Add CS42L43B codec info
    - ASoC: dt-bindings: cirrus, cs42l43: Add CS42L43B variant
    - mfd: cs42l43: Add support for the B variant
    - ASoC: cs42l43: Add support for the B variant
  * Enable audio functions on Dell Huracan/Renegade platforms w/o built-in
    microphone (LP: #2143902)
    - ASoC: SDCA: Add default value for mipi-sdca-function-reset-max-delay
    - ASoC: SDCA: Update counting of SU/GE DAPM routes
    - ASoC: SDCA: Improve mapping of Q7.8 SDCA volumes
    - ASoC: SDCA: Pull the Q7.8 volume helpers out of soc-ops
    - ASoC: add snd_soc_lookup_component_by_name helper
    - ASoC: soc_sdw_utils: partial match the codec name
    - ASoC: soc_sdw_utils: remove index from sdca codec name
  * [SRU] MIPI camera is not working after upgrading to 6.17-oem
    (LP: #2145171)
    - SAUCE: ACPI: respect items already in honor_dep before skipping
  * linux-tools: consider linking perf against LLVM (LP: #2138328)
    - [Packaging] Actually enable llvm for perf
  * Pull patch in qla2xxx to Resolute  (LP: #2144856)
    - scsi: qla2xxx: Add support to report MPI FW state
  * Ubuntu Resolute Desktop image arm64 - Boot on SC8280XP stalls with gpi-dma
    errors (LP: #2142403)
    - Revert "arm64: dts: qcom: sc8280xp: Enable GPI DMA"
  * 26.04 Snapdragon X Elite: Sync concept kernel changes  (LP: #2144643)
    - SAUCE: arm64: dts: add missing denali-oled.dtb to Makefile
    - SAUCE: dt-bindings: phy: qcom: Add CSI2 C-PHY/DPHY schema
    - SAUCE: phy: qcom-mipi-csi2: Add a CSI2 MIPI DPHY driver
    - SAUCE: dt-bindings: media: qcom,x1e80100-camss: Add simple-mfd
      compatible
    - SAUCE: dt-bindings: media: qcom,x1e80100-camss: Add optional PHY handle
      definitions
    - SAUCE: dt-bindings: media: qcom,x1e80100-camss: Add support for combo-
      mode endpoints
    - SAUCE: dt-bindings: media: qcom,x1e80100-camss: Describe iommu entries
    - SAUCE: media: qcom: camss: Add legacy_phy flag to SoC definition
      structures
    - SAUCE: media: qcom: camss: Add support for PHY API devices
    - SAUCE: media: qcom: camss: Drop legacy PHY descriptions from x1e
    - SAUCE: arm64: dts: qcom: x1e80100: Add CAMCC block definition
    - SAUCE: arm64: dts: qcom: x1e80100: Add CCI definitions
    - SAUCE: arm64: dts: qcom: x1e80100: Add CAMSS block definition
    - SAUCE: arm64: dts: qcom: x1e80100-crd: Add pm8010 CRD pmic,id=m
      regulators
    - SAUCE: arm64: dts: qcom: x1e80100-crd: Add ov08x40 RGB sensor on CSIPHY4
    - SAUCE: arm64: dts: qcom: x1e80100-t14s: Add pm8010 camera PMIC with
      voltage levels for IR and RGB camera
    - SAUCE: arm64: dts: qcom: x1e80100-t14s: Add on ov02c10 RGB sensor on
      CSIPHY4
    - SAUCE: arm64: dts: qcom: x1e80100-lenovo-yoga-slim7x: Add pm8010 camera
      PMIC with voltage levels for IR and RGB camera
    - SAUCE: arm64: dts: qcom: x1e80100-lenovo-yoga-slim7x: Add l7b_2p8
      voltage regulator for RGB camera
    - SAUCE: arm64: dts: qcom: x1e80100-lenovo-yoga-slim7x: Add ov02c10 RGB
      sensor on CSIPHY4
    - SAUCE: arm64: dts: qcom: x1e80100-dell-inspiron14-7441: Switch on CAMSS
      RGB sensor
    - SAUCE: arm64: dts: qcom: x1-asus-zenbook-a14: Add on OV02C10 RGB sensor
      on CSIPHY4
    - SAUCE: arm64: dts: qcom: x1e80100-dell-xps13-9345: add camera support
    - SAUCE: arm64: dts: qcom: x1e78100-t14s: enable camera privacy indicator
    - SAUCE: arm64: dts: qcom: x1e80100-lenovo-yoga-slim7x: enable camera
      privacy indicator
    - SAUCE: arm64: dts: qcom: x1e80100-dell-xps13-9345: enable camera privacy
      indicator
    - SAUCE: dt-bindings: arm: qcom: Add ASUS Vivobook X1P42100 variant
    - SAUCE: arm64: dts: qcom: x1-vivobook-s15: create a common dtsi for Hamoa
      and Purwa variants
    - SAUCE: arm64: dts: qcom: x1-vivobook-s15: add Purwa-compatible device
      tree
    - SAUCE: firmware: qcom: scm: allow QSEECOM on ASUS Vivobook X1P42100
      variant
    - SAUCE: arm64: dts: qcom: hamoa: Move PCIe PERST and Wake GPIOs to port
      nodes
    - SAUCE: arm64: dts: qcom: x1e-acer-swift-14: Move PCIe PERST and Wake
      GPIOs to port nodes
  * 25.10 Snapdragon X Elite: Sync concept kernel changes (LP: #2121477)
    - SAUCE: wip: arm64: dts: qcom: x1e78100-t14s: enable bluetooth
  * Miscellaneous Ubuntu changes
    - SAUCE: dt-bindings: arm: qcom: Document HP EliteBook 6 G1q
    - SAUCE: firmware: qcom: scm: Allow QSEECOM for HP EliteBook 6 G1q
    - SAUCE: arm64: dts: qcom: x1p42100-hp-elitebook-6-g1q: DT for HP
      EliteBook 6 G1q
    - [Config] PHY_QCOM_MIPI_CSI2=m
    - SAUCE: arm64: dts: x1e80100-lenovo-yoga-slim7x: Fix RGB camera supplies
    - [Config] toolchain version update
    - Update Changes.md after v7.0-rc5 rebase
    - [Packaging] update Ubuntu.md
    - [Config] enable SECURITY_APPARMOR_PACKET_MEDIATION_ENABLED
    - [Packaging] Add linux-main-modules-zfs to linux-modules depends
  * Miscellaneous upstream changes
    - Revert "UBUNTU: SAUCE: Add Bluetooth support for the Lenovo Yoga Slim
      7x"

  [ Ubuntu: 7.0.0-10.10 ]

  * resolute/linux: 7.0.0-10.10 -proposed tracker (LP: #2144865)
  * Miscellaneous upstream changes
    - Revert "powerpc: fix KUAP warning in VMX usercopy path"

  [ Ubuntu: 7.0.0-9.9 ]

  * resolute/linux: 7.0.0-9.9 -proposed tracker (LP: #2144735)
  * Please make dracut the default initrd generator (LP: #2142775)
    - [Packaging] recommends dracut instead of initramfs-tools
  * Miscellaneous Ubuntu changes
    - SAUCE: Change RISC-V target to RVA23 (riscv64a23-unknown-linux-gnu)

  [ Ubuntu: 7.0.0-8.8 ]

  * resolute/linux: 7.0.0-8.8 -proposed tracker (LP: #2144652)
  * UBUNTU: SAUCE: igc: Increase Thunderbolt MAC passthrough delay to 1000ms
    (LP: #2143197)
    - SAUCE: igc: Increase Thunderbolt MAC passthrough delay to 1000ms
  * [usrmerge] evaluate kernel owned packages for DEP17 compliance
    (LP: #2139276)
    - [Packaging] Install modules in /usr/lib/modules
  * Miscellaneous Ubuntu changes
    - [Config] hardening: enable LIST_HARDENED
    - [Config] hardening: disable LDISC_AUTOLOAD
    - [Config] hardening: disable LEGACY_PTYS
    - [Config] updateconfigs following v7.0-rc4 rebase

  [ Ubuntu: 7.0.0-7.7 ]

  * resolute/linux: 7.0.0-7.7 -proposed tracker (LP: #2143974)
  * unconfined profile denies userns_create for chromium based processes
    (LP: #1990064)
    - [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
  * Jellyfin Desktop Flatpak doesn't work with the current AppArmor profile
    (LP: #2142956)
    - SAUCE: apparmor5.0.0 [29/29]: apparmor: fix fine grained inet mediation
      sock_file_perm
  * AppArmor blocks write(2) to network sockets with Linux 6.19 (LP: #2141298)
    - SAUCE: apparmor5.0.0 [28/29]: apparmor: fix aa_label_sk_perm to check
      for RULE_MEDIATES_NET
  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor5.0.0 [1/29]: Stacking: LSM: Single calls in secid hooks
    - SAUCE: apparmor5.0.0 [2/29]: Stacking: LSM: Exclusive secmark usage
    - SAUCE: apparmor5.0.0 [3/29]: Stacking: AppArmor: Remove the exclusive
      flag
    - SAUCE: apparmor5.0.0 [4/29]: Revert "apparmor: fix dbus permission
      queries to v9 ABI"
    - SAUCE: apparmor5.0.0 [5/29]: Revert "apparmor: gate make fine grained
      unix mediation behind v9 abi"
    - SAUCE: apparmor5.0.0 [6/29]: apparmor: net: patch to provide
      compatibility with v2.x net rules
    - SAUCE: apparmor5.0.0 [7/29]: apparmor: net: add fine grained ipv4/ipv6
      mediation
    - SAUCE: apparmor5.0.0 [8/29]: apparmor: lift compatibility check out of
      profile_af_perm
    - SAUCE: apparmor5.0.0 [9/29]: apparmor: userns: add unprivileged user ns
      mediation
    - SAUCE: apparmor5.0.0 [10/29]: apparmor: userns: Add sysctls for
      additional controls of unpriv userns restrictions
    - SAUCE: apparmor5.0.0 [12/29]: apparmor: userns: open userns related
      sysctl so lxc can check if restriction are in place
    - SAUCE: apparmor5.0.0 [13/29]: apparmor: userns: allow profile to be
      transitioned when a userns is created
    - SAUCE: apparmor5.0.0 [14/29]: apparmor: mqueue: call
      security_inode_init_security on inode creation
    - SAUCE: apparmor5.0.0 [15/29]: apparmor: mqueue: add fine grained
      mediation of posix mqueues
    - SAUCE: apparmor5.0.0 [16/29]: apparmor: uring: add io_uring mediation
    - SAUCE: apparmor5.0.0 [19/29]: apparmor: prompt: setup slab cache for
      audit data
    - SAUCE: apparmor5.0.0 [20/29]: apparmor: prompt: add the ability for
      profiles to have a learning cache
    - SAUCE: apparmor5.0.0 [21/29]: apparmor: prompt: enable userspace upcall
      for mediation
    - SAUCE: apparmor5.0.0 [22/29]: apparmor: prompt: pass prompt boolean
      through into path_name as well
    - SAUCE: apparmor5.0.0 [23/29]: apparmor: check for supported version in
      notification messages.
    - SAUCE: apparmor5.0.0 [24/29]: apparmor: refactor building notice so it
      is easier to extend
    - SAUCE: apparmor5.0.0 [25/29]: apparmor: switch from ENOTSUPP to
      EPROTONOSUPPORT
    - SAUCE: apparmor5.0.0 [26/29]: apparmor: add support for meta data tags
    - SAUCE: apparmor5.0.0 [27/29]: apparmor: prevent profile->disconnected
      double free in aa_free_profile
  * update apparmor and LSM stacking patch set (LP: #2028253) // Installation
    of AppArmor on a 6.14 kernel produces error message "Illegal number: yes"
    (LP: #2102680)
    - SAUCE: apparmor5.0.0 [17/29]: apparmor: create an
      AA_SFS_TYPE_BOOLEAN_INTPRINT sysctl variant
    - SAUCE: apparmor5.0.0 [18/29]: apparmor: Use AA_SFS_FILE_BOOLEAN_INTPRINT
      for userns and io_uring sysctls
  * update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
    apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in
    mantic (LP: #2032602)
    - SAUCE: apparmor5.0.0 [11/29]: apparmor: userns - make it so special
      unconfined profiles can mediate user namespaces
  * NPU utilization on amdxdna is missing (LP: #2143243)
    - SAUCE: accel/amdxdna: Add IOCTL to retrieve realtime NPU power estimate
    - SAUCE: accel/amdxdna: Support sensors for column utilization
    - SAUCE: accel/amdxdna: Import AMD_PMF namespace
  * Adopting dark mode by default for OLED panel (LP: #2143203)
    - SAUCE: drm/connector: Add a new 'panel_type' property
    - SAUCE: drm/amd/display: Attach OLED property to eDP panels
  * Support AMD Image Signal Processing (ISP) unit V4.0 (LP: #2110092)
    - SAUCE: media: platform: amd: Introduce amd isp4 capture driver
    - SAUCE: media: platform: amd: low level support for isp4 firmware
    - SAUCE: media: platform: amd: Add isp4 fw and hw interface
    - SAUCE: media: platform: amd: isp4 subdev and firmware loading handling
      added
    - SAUCE: media: platform: amd: isp4 video node and buffers handling added
    - SAUCE: Documentation: add documentation of AMD isp 4 driver
    - SAUCE: media: platform: amd: isp4 debug fs logging and more descriptive
      errors
    - [Config] Enable VIDEO_AMD_ISP4_CAPTURE
  * Miscellaneous Ubuntu changes
    - [Config] temporarily disable OBJTOOL_WERROR

 -- Jacob Martin <jacob.martin@canonical.com>  Thu, 02 Apr 2026 10:48:01 -0500

linux-nvidia (7.0.0-1003.3) resolute; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] debian.nvidia/dkms-versions -- update from kernel-versions
      (adhoc/d2026.02.16)

  * Backport NVIDIA: SAUCE: vfio/nvgrace-egm: split zapping EGM into 1GB
    chunks (LP: #2142160)
    - NVIDIA: SAUCE: vfio/nvgrace-egm: split zapping EGM into 1GB chunks

  * r8127 module unload triggers NAPI WARN in netif_napi_del_locked()
    (LP: #2141780)
    - NVIDIA: SAUCE: r8127: fix NAPI warning on module removal

  * Enable Coresight in Perf (LP: #2093957)
    - [Packaging] Enable coresight in Perf if arm64
    - [Packaging] Add libopencsd-dev as a build dependency

  * Backport nvgrace-gpu hugepfnmap, ecc patches and miscellaneous cleanups
    (LP: #2138892)
    - NVIDIA: SAUCE: vfio/nvgrace-egm: register EGM PFNMAP range with
      memory_failure
    - NVIDIA: SAUCE: vfio: Remove vfio_device_from_file() declaration

  * missing prototype for vfio_device_from_file()  (LP: #2138132)
    - NVIDIA: SAUCE: vfio: Fix missing prototype warning

  * r8127: Downgrade GPL claim to info (LP: #2137588)
    - NVIDIA: SAUCE: r8127: print GPL_CLAIM with KERN_INFO

  * mt7925: Incorrect MLO mode in firmware control (LP: #2138755)
    - NVIDIA: SAUCE: wifi: mt76: mt7925: Fix incorrect MLO mode in firmware
      control

  * Enable GDS in the 6.8 based linux-nvidia kernel (LP: #2059814)
    - NVIDIA: [Packaging] Add nvidia-fs build dependencies

  * Add PCIe Hotplug Driver for CX7 on DGX Spark (LP: #2138269)
    - NVIDIA: SAUCE: MEDIATEK: platform: Add PCIe Hotplug Driver for CX7 on
      DGX Spark

  * Backport support for Grace MPAM (LP: #2122432)
    - NVIDIA: SAUCE: DT: cacheinfo: Expose the code to generate a cache-id
      from a device_node
    - NVIDIA: SAUCE: DT: dt-bindings: arm: Add MPAM MSC binding
    - NVIDIA: SAUCE: arm64: mpam: Context switch the MPAM registers
    - NVIDIA: SAUCE: arm64: mpam: Re-initialise MPAM regs when CPU comes
      online
    - NVIDIA: SAUCE: arm64: mpam: Advertise the CPUs MPAM limits to the driver
    - NVIDIA: SAUCE: arm64: mpam: Add cpu_pm notifier to restore MPAM sysregs
    - NVIDIA: SAUCE: arm64: mpam: Add helpers to change a tasks and cpu mpam
      partid/pmg values
    - NVIDIA: SAUCE: cacheinfo: Add helper to find the cache size from
      cpu+level
    - NVIDIA: SAUCE: arm_mpam: resctrl: Add boilerplate cpuhp and domain
      allocation
    - NVIDIA: SAUCE: arm_mpam: resctrl: Pick the caches we will use as resctrl
      resources
    - NVIDIA: SAUCE: arm_mpam: resctrl: Implement
      resctrl_arch_reset_all_ctrls()
    - NVIDIA: SAUCE: arm_mpam: resctrl: Add resctrl_arch_get_config()
    - NVIDIA: SAUCE: arm_mpam: resctrl: Implement helpers to update
      configuration
    - NVIDIA: SAUCE: arm_mpam: resctrl: Add plumbing against arm64 task and
      cpu hooks
    - NVIDIA: SAUCE: arm_mpam: resctrl: Add CDP emulation
    - NVIDIA: SAUCE: arm_mpam: resctrl: Add rmid index helpers
    - NVIDIA: SAUCE: arm_mpam: resctrl: Convert to/from MPAMs bitmaps and
      fixed-point formats
    - NVIDIA: SAUCE: arm_mpam: resctrl: Add support for 'MB' resource
    - NVIDIA: SAUCE: arm_mpam: resctrl: Reject oversized memory bandwidth
      portion bitmaps
    - NVIDIA: SAUCE: arm_mpam: resctrl: Fix MB min_bandwidth value exposed to
      userspace
    - NVIDIA: SAUCE: arm_mpam: resctrl: Add kunit test for control format
      conversions
    - NVIDIA: SAUCE: arm_mpam: resctrl: Add support for csu counters
    - NVIDIA: SAUCE: arm_mpam: resctrl: Pre-allocate free running monitors
    - NVIDIA: SAUCE: arm_mpam: resctrl: Pre-allocate assignable monitors
    - NVIDIA: SAUCE: arm_mpam: resctrl: Add kunit test for ABMC/CDP
      interactions
    - NVIDIA: SAUCE: arm_mpam: resctrl: Add resctrl_arch_config_cntr() for
      ABMC use
    - NVIDIA: SAUCE: arm_mpam: resctrl: Allow resctrl to allocate monitors
    - NVIDIA: SAUCE: arm_mpam: resctrl: Add resctrl_arch_rmid_read() and
      resctrl_arch_reset_rmid()
    - NVIDIA: SAUCE: arm_mpam: resctrl: Add resctrl_arch_cntr_read() &
      resctrl_arch_reset_cntr()
    - NVIDIA: SAUCE: untested: arm_mpam: resctrl: Allow monitors to be
      configured with filters
    - NVIDIA: SAUCE: arm_mpam: resctrl: Add empty definitions for fine-grained
      enables
    - NVIDIA: SAUCE: arm64: mpam: Select ARCH_HAS_CPU_RESCTRL
    - NVIDIA: SAUCE: fs/resctrl: Don't touch rmid_ptrs[] in free_rmid() when
      there are no monitors
    - NVIDIA: SAUCE: fs/resctrl: Avoid a race with dom_data_exit() and
      closid_num_dirty_rmid[]
    - NVIDIA: SAUCE: fs/resctrl: Avoid a race with dom_data_exit() and
      rmid_ptrs[]
    - NVIDIA: SAUCE: perf/arm-cmn: Stop claiming all the resources
    - NVIDIA: SAUCE: arm_mpam: resctrl: Call resctrl_init() on platforms that
      can support resctrl
    - NVIDIA: SAUCE: arm_mpam: resctrl: Call resctrl_exit() in the event of
      errors
    - NVIDIA: SAUCE: arm_mpam: resctrl: Update the rmid reallocation limit
    - NVIDIA: SAUCE: arm_mpam: resctrl: Sort the order of the domain lists
    - NVIDIA: SAUCE: arm_mpam: Generate a configuration for min controls
    - NVIDIA: SAUCE: arm_mpam: Add quirk framework
    - NVIDIA: SAUCE: arm_mpam: Add workaround for T241-MPAM-1
    - NVIDIA: SAUCE: arm_mpam: Add workaround for T241-MPAM-4
    - NVIDIA: SAUCE: arm_mpam: Add workaround for T241-MPAM-6
    - NVIDIA: SAUCE: arm_mpam: Quirk CMN-650's CSU NRDY behaviour
    - NVIDIA: SAUCE: debugfs: Add helpers for creating cpumask entries in
      debugfs
    - NVIDIA: SAUCE: arm_mpam: Add debugfs entries to show the MSC/RIS the
      driver discovered
    - NVIDIA: SAUCE: arm_mpam: Add force-disable debugfs trigger
    - NVIDIA: SAUCE: arm_mpam: Expose the number of NRDY retries in debugfs
    - NVIDIA: SAUCE: arm_mpam: Add resctrl_arch_round_bw()
    - NVIDIA: SAUCE: fs/resctrl,x86/resctrl: Factor mba rounding to be per-
      arch
    - NVIDIA: SAUCE: arm_mpam: Relax num_rmids parameter advertised to
      userspace
    - NVIDIA: SAUCE: arm_mpam: Split the locking around the mon_sel registers
    - NVIDIA: SAUCE: arm_mpam: Allow the maximum partid to be overridden from
      the command line
    - NVIDIA: SAUCE: arm_mpam: Allow MSC to be forced to have an unknown
      location
    - NVIDIA: SAUCE: fs/resctrl: Add this_is_not_abi mount option
    - NVIDIA: SAUCE: iommu/arm-smmu-v3: Register SMMU capabilities with MPAM
    - NVIDIA: SAUCE: iommu/arm-smmu-v3: Add mpam helpers to query and set
      state
    - NVIDIA: SAUCE: iommu: Add helpers to get and set the QoS state
    - NVIDIA: SAUCE: iommu: Add helpers to retrieve iommu_groups by id or
      kobject
    - NVIDIA: SAUCE: iommu: Add helper to retrieve iommu kset
    - NVIDIA: SAUCE: kobject: Add kset_get_next_obj() to allow a kset to be
      walked
    - NVIDIA: SAUCE: arm_mpam: resctrl: Add iommu helpers to get/set the
      partid and pmg
    - NVIDIA: SAUCE: fs/resctrl: Add support for assigning iommu_groups to
      resctrl groups
    - NVIDIA: SAUCE: firmware: arm_scmi: add MPAM-FB SCMI protocol stub
    - NVIDIA: SAUCE: arm_mpam: add MPAM-FB MSC firmware access support
    - NVIDIA: SAUCE: arm_mpam: Allow duplicate PCC subspace_ids
    - NVIDIA: SAUCE: untested: mpam: Convert pcc_channels list to XArray and
      cleanup
    - NVIDIA: SAUCE: x86/resctrl: Add stub to allow other architecture to
      disable monitor overflow
    - NVIDIA: SAUCE: arm_mpam: resctrl: Determine if any exposed counter can
      overflow
    - NVIDIA: SAUCE: fs/restrl: Allow the overflow handler to be disabled
    - NVIDIA: SAUCE: fs/resctrl: Uniform data type of
      component_id/domid/id/cache_id
    - NVIDIA: SAUCE: arm_mpam: Allow cmax/cmin to be configured
    - NVIDIA: SAUCE: arm_mpam: Rename mbw conversion to 'fract16' for code re-
      use
    - NVIDIA: SAUCE: fs/resctrl: Group all the MBA specific properties in a
      separate struct
    - NVIDIA: SAUCE: fs/resctrl: Abstract duplicate domain test to a helper
    - NVIDIA: SAUCE: fs/resctrl: Move MBA supported check to parse_line()
      instead of parse_bw()
    - NVIDIA: SAUCE: fs/resctrl: Rename resctrl_get_default_ctrl() to include
      resource
    - NVIDIA: SAUCE: fs/resctrl: Add a schema format to the schema, allowing
      it to be different
    - NVIDIA: SAUCE: fs/resctrl: Use schema format to check the resource is a
      bitmap
    - NVIDIA: SAUCE: fs/resctrl: Add specific schema types for 'range'
    - NVIDIA: SAUCE: x86/resctrl: Move over to specifying MBA control formats
    - NVIDIA: SAUCE: arm_mpam: resctrl: Convert MB resource to use percentage
    - NVIDIA: SAUCE: fs/resctrl: Remove 'range' schema format
    - NVIDIA: SAUCE: fs/resctrl: Add additional files for percentage and
      bitmap controls
    - NVIDIA: SAUCE: fs/resctrl: Add fflags_from_schema() for files based on
      schema format
    - NVIDIA: SAUCE: fs/resctrl: Expose the schema format to user-space
    - NVIDIA: SAUCE: fs/resctrl: Add L2 and L3 'MAX' resource schema
    - NVIDIA: SAUCE: arm_mpam: resctrl: Add the glue code to convert to/from
      cmax
    - NVIDIA: SAUCE: mm,memory_hotplug: Add lockdep assertion helper
    - NVIDIA: SAUCE: fs/resctrl: Take memory hotplug lock whenever taking CPU
      hotplug lock
    - NVIDIA: SAUCE: fs/resctrl: Add mount option for mb_uses_numa_nid and
      arch stubs
    - NVIDIA: SAUCE: Fix unused variable warning
    - NVIDIA: SAUCE: arm_mpam: resctrl: Pick whether MB can use NUMA nid
      instead of cache-id
    - NVIDIA: SAUCE: arm_mpam: resctrl: Change domain_hdr online/offline to
      work with a set of CPUs
    - NVIDIA: SAUCE: untested: arm_mpam: resctrl: Split
      mpam_resctrl_alloc_domain() to have CPU and node
    - NVIDIA: SAUCE: arm_mpam: resctrl: Add NUMA node notifier for domain
      online/offline
    - NVIDIA: SAUCE: untested: arm_mpam: resctrl: Allow resctrl to enable NUMA
      nid as MB domain-id
    - NVIDIA: SAUCE: [Config] RESCTRL configs added to annotations
    - NVIDIA: SAUCE: arm_mpam: Fix missing SHIFT definitions
    - NVIDIA: SAUCE: arm_mpam: resctrl: Fix MPAM kunit
    - NVIDIA: SAUCE: resctrl/mpam: Align packed mpam_props to fix arm64 KUnit
      alignment fault
    - NVIDIA: SAUCE: resctrl/tests: mpam_devices: compare only meaningful
      bytes of mpam_props

  * r8127: fix for LTS test panic (LP: #2134991)
    - NVIDIA: SAUCE: r8127: Remove registers2 proc entry

  * Add two more Spark iGPU IDs for the existing iommu quirk (LP: #2132033)
    - NVIDIA: SAUCE: iommu/arm-smmu-v3: Add two more DGX Spark iGPU IDs for
      existing iommu quirk

  * Pull CPPC mailing list patches for Spark (LP: #2131705)
    - NVIDIA: SAUCE: ACPI: CPPC: Add cppc_get_perf() API to read performance
      controls
    - NVIDIA: SAUCE: ACPI: CPPC: extend APIs to support auto_sel and epp
    - NVIDIA: SAUCE: ACPI: CPPC: add APIs and sysfs interface for min/max_perf
    - NVIDIA: SAUCE: ACPI: CPPC: add APIs and sysfs interface for perf_limited
      register
    - NVIDIA: SAUCE: cpufreq: CPPC: Add sysfs for min/max_perf and
      perf_limited
    - NVIDIA: SAUCE: cpufreq: CPPC: update policy min/max when toggling
      auto_select
    - NVIDIA: SAUCE: cpufreq: CPPC: add autonomous mode boot parameter support

  * r8127: fix kernel panic when dump all registers (LP: #2130445)
    - NVIDIA: SAUCE: r8127: fix a kernel panic when dump all registers
    - NVIDIA: SAUCE: r8127: add support for RTL8127 cable diagnostic test

  * Set CONFIG_IOMMU_DEFAULT_PASSTHROUGH as default for Nvidia CPUs
    (LP: #2129776)
    - NVIDIA: SAUCE: iommu/arm-smmu-v3: Set DGX Spark iGPU default domain type
      to DMA
    - [Config] nvidia: Update annotations to set
      CONFIG_IOMMU_DEFAULT_PASSTHROUGH

  * mt7925: Introduce CSA support in non-MLO mode (LP: #2129209)
    - NVIDIA: SAUCE: wifi: mt76: mt7925: introduce CSA support in non-MLO mode

  * IOMMU: Support contiguous bit in translation tables (LP: #2112600)
    - NVIDIA: SAUCE: iommu/io-pgtable-arm: backport contiguous bit support

  * NVIDIA: SAUCE: MEDIATEK: usb: host: xhci-hub: fix MT89xx SoCs return
    PORTLI value (LP: #2125126)
    - NVIDIA: SAUCE: MEDIATEK: usb: host: xhci-hub: fix MT89xx SoCs return
      PORTLI value

  * NVIDIA: SAUCE: ffa notification count initialization fix (LP: #2123861)
    - NVIDIA: SAUCE: Fix FFA notification count initialization

  * Pull-request for setting CPU frequency gov to performance (LP: #2028576)
    - [Config] nvidia: Use performance CPU frequency governor on amd64

  * Set CONFIG_IOMMU_DEFAULT_DMA_LAZY as default for Nvidia CPUs
    (LP: #2119661)
    - [Config] nvidia: Update annotations to set CONFIG_IOMMU_DEFAULT_DMA_LAZY

  * Backport support for Grace virtualization features: vEVENTQ, HW QUEUE, and
    vEGM (LP: #2119656)
    - NVIDIA: SAUCE: arm64: configs: Build NVGRACE_GPU_VFIO_PCI as LKM
    - NVIDIA: SAUCE: arm64: configs: Enable IOMMUFD and VFIO_DEVICE_CDEV
    - NVIDIA: SAUCE: vfio/nvgrace-egm: Introduce module to manage EGM
    - NVIDIA: SAUCE: vfio/nvgrace-egm: Handle pages with ECC errors on the EGM
    - NVIDIA: SAUCE: arm64: configs: Build CONFIG_NVGRACE_EGM as LKM
    - NVIDIA: SAUCE: vfio/nvgrace-egm: Move the egm header file to include
    - NVIDIA: SAUCE: vfio/nvgrace-egm: Free region memory during
      unregistration
    - NVIDIA: SAUCE: vfio/nvgrace-egm: Move region hash initialization
    - NVIDIA: SAUCE: vfio/nvgrace-egm: Handle and convey EGM registration
      errors
    - NVIDIA: SAUCE: vfio/nvgrace-gpu: Handle EGM registration failure
    - NVIDIA: SAUCE: vfio/nvgrace-egm: Address sparse errors
    - NVIDIA: SAUCE: vfio/nvgrace-gpu: Address smatch errors
    - NVIDIA: SAUCE: vfio/nvgrace-egm: Ensure ACPI value reads are successful
    - NVIDIA: SAUCE: vfio/nvgrace-egm: Avoid invalid retired pages base
    - NVIDIA: SAUCE: vfio/nvgrace-egm: Update EGM unregistration API
    - NVIDIA: SAUCE: vfio/nvgrace-egm: track GPUs associated with the EGM
      regions
    - NVIDIA: SAUCE: vfio/nvgrace-egm: list gpus through sysfs
    - NVIDIA: SAUCE: vfio/nvgrace-egm: expose the egm size through sysfs
    - NVIDIA: SAUCE: arm64: configs: enable NVGRACE_EGM as module

  * Backport support for arm64 BRBE and a future NVIDIA CPU ID (LP: #2118663)
    - [Config] nvidia: Enable BRBE

  * nvidia-ffa-ec: Fix FFH data response length (LP: #2118357)
    - NVIDIA: SAUCE: Fix FFH data response length

  * Add pincontrol driver for MT8901 chip (LP: #2117784)
    - NVIDIA: SAUCE: MEDIATEK: pinctrl: mediatek: Add gpio-range record in
      pinctrl driver
    - NVIDIA: SAUCE: MEDIATEK: pinctrl: mediatek: Add acpi support
    - NVIDIA: SAUCE: MEDIATEK: pinctrl: mt8901: Add pinctrl driver
    - [Config] nvidia: Update annotations to enable CONFIG_PINCTRL_MT8901

  * NVIDIA: SAUCE: Add FFA and EC Secure Service Driver to -nvidia kernel
    (LP: #2114230)
    - NVIDIA: SAUCE: Add support for custom ARM FFH offset handler
    - NVIDIA: SAUCE: Add nvidia ffa driver for EC communication
    - NVIDIA: SAUCE: Add ffa driver for each secure EC service
    - NVIDIA: SAUCE: Add support for EC secure service communication
    - NVIDIA: SAUCE: Rescan acpi devices that uses secure EC communication
    - NVIDIA: SAUCE: irqchip/gic-v3: Allow unused SGIs for drivers/modules
    - NVIDIA: SAUCE: Add support for notifications from secure EC services
    - [Config] nvidia: Update annotations to enable NVIDIA FFA EC driver

  * Backport: TPM Service Command Response Buffer Interface Over FF-A
    (LP: #2111511)
    - [Config] nvidia-6.14: Update annotations to enable TPM over FFA

  * Backport: ALSA: hda - Add new driver for HDA controllers listed via ACPI
    (LP: #2111447)
    - NVIDIA: SAUCE: [Config] nvidia: CONFIG_SND_HDA_ACPI=m on arm64

  * Pull request to enable GPU passthrough for CUDA (LP: #2095028)
    - NVIDIA: SAUCE: WAR: iommufd/pages: Bypass PFNMAP
    - NVIDIA: SAUCE: [Config] nvidia: Update annotations for Grace I/O
      virtualization
    - [Config] nvidia-6.14: Drop CONFIG_TEGRA241_CMDQV from annotations

  * Add Realtek r8127 ethernet driver (LP: #2109730)
    - NVIDIA: SAUCE: r8127: Add Realtek r8127 ethernet driver
    - NVIDIA: SAUCE: r8127: Remove Realtek r8127 non required files
    - NVIDIA: SAUCE: r8127: Moved files from r8127/src to r8127 folder
    - NVIDIA: SAUCE: Add r8127 in kernel build
    - [Config] nvidia-6.11: Update annotations to enable realtek R8127 module

  * Pull request: Add quirk and disable SBR on Gen5 ports (LP: #2107509)
    - NVIDIA: SAUCE: MEDIATEK: usb: host: xhci-plat: support usb3 bulks stream
      low power

  * Apply backport of upstream commit to enable Realtek Bluetooth module
    (LP: #2096882)
    - NVIDIA: SAUCE: Adds MT7925 BT devices

  * Apply SAUCE patch to enable 8250 serial device (LP: #2096888)
    - NVIDIA: SAUCE: serial: 8250_mtk: Add ACPI support

  * Backport: "Add support for AArch64 AMUv1-based average freq" Series
    (LP: #2100032)
    - NVIDIA: [Config] set CONFIG_CPUFREQ_ARCH_CUR_FREQ=y for x86

  * MANA: include driver fixes and enable module on ARM64 (LP: #2084598)
    - [Config] nvidia-6.17: Enable MANA configs on x86 and arm64

  * Apply patch to set CONFIG_EFI_CAPSULE_LOADER=y for arm64 (LP: #2067111)
    - NVIDIA: [Config] EFI: set CAPSULE_LOADER=y for arm64

  * linux-nvidia-6.5_6.5.0-1014.14 breaks with earlier BIOS release, and
    modeset/resolutions are wrong (LP: #2061930) // Blacklist coresight_etm4x
    (LP: #2067106)
    - [Packaging] blacklist coresight_etm4x

  * backport arm64 THP improvements from 6.9 (LP: #2059316)
    - NVIDIA: [Config] arm64: ARM64_CONTPTE=y

  * Reapply the linux-nvidia kernel config options from the 5.15 and 6.5
    kernels (LP: #2060327)
    - NVIDIA: [Config]: Disable the NOUVEAU driver which is not used with
      -nvidia kernels
    - NVIDIA: [Config]: Adding CORESIGHT and ARM64_ERRATUM configs to
      annotations

  [ Ubuntu: 7.0.0-6.6 ]

  * resolute/linux: 7.0.0-6.6 -proposed tracker (LP: #2143745)
  * Miscellaneous Ubuntu changes
    - [Packaging] drop unstable suffix

  [ Ubuntu: 7.0.0-5.5 ]

  * resolute/linux-unstable: 7.0.0-5.5 -proposed tracker (LP: #2143700)
  * Resolute real-time patchset: 7.0-rc1-rt1 (LP: #2143181)
    - SAUCE: Reapply "serial: 8250: Switch to nbcon console"
    - SAUCE: Reapply "serial: 8250: Revert "drop lockdep annotation from
      serial8250_clear_IER()""
    - SAUCE: drm/i915: Use preempt_disable/enable_rt() where recommended
    - SAUCE: drm/i915: Don't disable interrupts on PREEMPT_RT during atomic
      updates
    - SAUCE: drm/i915: Disable tracing points on PREEMPT_RT
    - SAUCE: drm/i915/gt: Use spin_lock_irq() instead of local_irq_disable() +
      spin_lock()
    - SAUCE: drm/i915: Drop the irqs_disabled() check
    - SAUCE: drm/i915/guc: Consider also RCU depth in busy loop.
    - SAUCE: drm/i915: Consider RCU read section as atomic.
    - SAUCE: Revert "drm/i915: Depend on !PREEMPT_RT."
    - SAUCE: sysfs: Add /sys/kernel/realtime entry
    - Real-time patchset 7.0-rc1-rt1
  * Miscellaneous Ubuntu changes
    - [Config] rust toolchain version update

  [ Ubuntu-unstable: 7.0.0-4.4 ]

  * resolute/linux-unstable: 7.0.0-4.4 -proposed tracker (LP: #2143123)
  * efi: Fix swapped arguments to bsearch() in efi_status_to_*() SAUCE patch
    (LP: #2141276)
    - SAUCE efi: Fix swapped arguments to bsearch() in efi_status_to_*()
  * Plucky preinstalled server fails to boot on rb3gen2 (LP: #2106681) //
    Questing preinstalled server fails to boot on sa8775p boards
    (LP: #2121347)
    - [Config] move more qcom interconnect/pinctrl/gcc options to builtin
  * linux-tools: consider linking perf against LLVM (LP: #2138328)
    - [Packaging] Add llvm-21-dev to build-depends for perf
  * Miscellaneous Ubuntu changes
    - [Packaging] Add intel-speed-select to linux-tools
    - [Packaging] remove stale debian/dkms-versions
    - [Packaging] remove stale debian/dkms-versions scripting

  [ Ubuntu-unstable: 7.0.0-3.3 ]

  * resolute/linux-unstable: 7.0.0-3.3 -proposed tracker (LP: #2143020)
  * Miscellaneous Ubuntu changes
    - [Config] updateconfig after rebase to v7.0-rc2
    - [Config] switch to PREEMPT_LAZY

  [ Ubuntu-unstable: 7.0.0-2.2 ]

  * resolute/linux-unstable: 7.0.0-2.2 -proposed tracker (LP: #2142764)

  [ Ubuntu-unstable: 7.0.0-1.1 ]

  * resolute/linux-unstable: 7.0.0-1.1 -proposed tracker (LP: #2142402)
  * Miscellaneous Ubuntu changes
    - [packaging] rename to linux-unstable
    - [Config] updateconfig after rebase to v7.0-rc1
    - Update Changes.md
    - [Packaging] add libbpf-dev to Build-Depends
    - [Config] disable AMD_ISP4, FTBFS
    - [Packaging] debian.master/dkms-versions -- temporarily remove zfs FTBFS
    - [Packaging] debian.master/dkms-versions -- temporarily remove evdi FTBFS
    - [Config] updateconfig after rebase to v7.0-rc1
    - [Config] update toolchain version

 -- Jacob Martin <jacob.martin@canonical.com>  Thu, 26 Mar 2026 11:14:51 -0500

linux-nvidia (6.19.0-1001.1) resolute; urgency=medium

  * linux-tools: consider linking perf against LLVM (LP: #2138328)
    - [Packaging] Add llvm-21-dev to build-depends for perf

  [ Ubuntu: 6.19.0-6.6 ]

  * resolute/linux: 6.19.0-6.6 -proposed tracker (LP: #2142114)
  * Resolute update: v6.19.2 upstream stable release (LP: #2142112)
    - Revert "driver core: enforce device_lock for driver_match_device()"
    - Linux 6.19.2
  * Resolute update: v6.19.1 upstream stable release (LP: #2142111)
    - io_uring/io-wq: add exit-on-idle state
    - io_uring: allow io-wq workers to exit when unused
    - smb: client: split cached_fid bitfields to avoid shared-byte RMW races
    - ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error
      paths
    - ksmbd: add chann_lock to protect ksmbd_chann_list xarray
    - smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()
    - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available
    - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.*
    - smb: server: make use of smbdirect_socket.recv_io.credits.available
    - smb: server: let recv_done() queue a refill when the peer is low on
      credits
    - smb: server: make use of smbdirect_socket.send_io.bcredits
    - smb: server: fix last send credit problem causing disconnects
    - smb: server: let send_done handle a completion without IB_SEND_SIGNALED
    - smb: client: make use of smbdirect_socket.recv_io.credits.available
    - smb: client: let recv_done() queue a refill when the peer is low on
      credits
    - smb: client: let smbd_post_send() make use of request->wr
    - smb: client: remove pointless sc->recv_io.credits.count rollback
    - smb: client: remove pointless sc->send_io.pending handling in
      smbd_post_send_iter()
    - smb: client: port and use the wait_for_credits logic used by server
    - smb: client: split out smbd_ib_post_send()
    - smb: client: introduce and use smbd_{alloc, free}_send_io()
    - smb: client: use smbdirect_send_batch processing
    - smb: client: make use of smbdirect_socket.send_io.bcredits
    - smb: client: fix last send credit problem causing disconnects
    - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send()
    - smb: client: let send_done handle a completion without IB_SEND_SIGNALED
    - driver core: enforce device_lock for driver_match_device()
    - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB
    - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4
    - crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode
    - crypto: octeontx - Fix length check to avoid truncation in
      ucode_load_store
    - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly
    - crypto: virtio - Add spinlock protection with virtqueue notification
    - crypto: virtio - Remove duplicated virtqueue_kick in
      virtio_crypto_skcipher_crypt_req
    - nilfs2: Fix potential block overflow that cause system hang
    - hfs: ensure sb->s_fs_info is always cleaned up
    - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon()
    - scsi: qla2xxx: Validate sp before freeing associated memory
    - scsi: qla2xxx: Allow recovery for tape devices
    - scsi: qla2xxx: Delay module unload while fabric scan in progress
    - scsi: qla2xxx: Free sp in error path to fix system crash
    - scsi: qla2xxx: Query FW again before proceeding with login
    - sched/mmcid: Don't assume CID is CPU owned on mode switch
    - bus: fsl-mc: fix use-after-free in driver_override_show()
    - erofs: fix UAF issue for file-backed mounts w/ directio option
    - xfs: fix UAF in xchk_btree_check_block_owner
    - drm/exynos: vidi: use ctx->lock to protect struct vidi_context member
      variables related to memory alloc/free
    - PCI: endpoint: Avoid creating sub-groups asynchronously
    - wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add
    - Linux 6.19.1
  * AppArmor blocks write(2) to network sockets with Linux 6.19 (LP: #2141298)
    - SAUCE: apparmor: fix aa_label_sk_perm to check for RULE_MEDIATES_NET

 -- Jacob Martin <jacob.martin@canonical.com>  Tue, 03 Mar 2026 11:01:18 -0600

linux-nvidia (6.19.0-1000.0) resolute; urgency=medium

  * Initial changelog entry.

 -- Jacob Martin <jacob.martin@canonical.com>  Fri, 27 Feb 2026 14:49:42 -0600

linux (6.19.0-6.6) resolute; urgency=medium

  * resolute/linux: 6.19.0-6.6 -proposed tracker (LP: #2142114)

  * Resolute update: v6.19.2 upstream stable release (LP: #2142112)
    - Revert "driver core: enforce device_lock for driver_match_device()"
    - Linux 6.19.2

  * Resolute update: v6.19.1 upstream stable release (LP: #2142111)
    - io_uring/io-wq: add exit-on-idle state
    - io_uring: allow io-wq workers to exit when unused
    - smb: client: split cached_fid bitfields to avoid shared-byte RMW races
    - ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error
      paths
    - ksmbd: add chann_lock to protect ksmbd_chann_list xarray
    - smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()
    - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available
    - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.*
    - smb: server: make use of smbdirect_socket.recv_io.credits.available
    - smb: server: let recv_done() queue a refill when the peer is low on
      credits
    - smb: server: make use of smbdirect_socket.send_io.bcredits
    - smb: server: fix last send credit problem causing disconnects
    - smb: server: let send_done handle a completion without IB_SEND_SIGNALED
    - smb: client: make use of smbdirect_socket.recv_io.credits.available
    - smb: client: let recv_done() queue a refill when the peer is low on
      credits
    - smb: client: let smbd_post_send() make use of request->wr
    - smb: client: remove pointless sc->recv_io.credits.count rollback
    - smb: client: remove pointless sc->send_io.pending handling in
      smbd_post_send_iter()
    - smb: client: port and use the wait_for_credits logic used by server
    - smb: client: split out smbd_ib_post_send()
    - smb: client: introduce and use smbd_{alloc, free}_send_io()
    - smb: client: use smbdirect_send_batch processing
    - smb: client: make use of smbdirect_socket.send_io.bcredits
    - smb: client: fix last send credit problem causing disconnects
    - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send()
    - smb: client: let send_done handle a completion without IB_SEND_SIGNALED
    - driver core: enforce device_lock for driver_match_device()
    - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB
    - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4
    - crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode
    - crypto: octeontx - Fix length check to avoid truncation in
      ucode_load_store
    - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly
    - crypto: virtio - Add spinlock protection with virtqueue notification
    - crypto: virtio - Remove duplicated virtqueue_kick in
      virtio_crypto_skcipher_crypt_req
    - nilfs2: Fix potential block overflow that cause system hang
    - hfs: ensure sb->s_fs_info is always cleaned up
    - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon()
    - scsi: qla2xxx: Validate sp before freeing associated memory
    - scsi: qla2xxx: Allow recovery for tape devices
    - scsi: qla2xxx: Delay module unload while fabric scan in progress
    - scsi: qla2xxx: Free sp in error path to fix system crash
    - scsi: qla2xxx: Query FW again before proceeding with login
    - sched/mmcid: Don't assume CID is CPU owned on mode switch
    - bus: fsl-mc: fix use-after-free in driver_override_show()
    - erofs: fix UAF issue for file-backed mounts w/ directio option
    - xfs: fix UAF in xchk_btree_check_block_owner
    - drm/exynos: vidi: use ctx->lock to protect struct vidi_context member
      variables related to memory alloc/free
    - PCI: endpoint: Avoid creating sub-groups asynchronously
    - wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add
    - Linux 6.19.1

  * AppArmor blocks write(2) to network sockets with Linux 6.19 (LP: #2141298)
    - SAUCE: apparmor: fix aa_label_sk_perm to check for RULE_MEDIATES_NET

 -- Timo Aaltonen <timo.aaltonen@canonical.com>  Wed, 18 Feb 2026 14:31:48 +0200
