-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 22 Apr 2023 20:48:02 +0200 Source: linux-signed-arm64 Architecture: source Version: 6.1.25+1 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Changes: linux-signed-arm64 (6.1.25+1) unstable; urgency=medium . * Sign kernel from linux 6.1.25-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.21 - xfrm: Allow transport-mode states with AF_UNSPEC selector - drm/virtio: Pass correct device to dma_sync_sgtable_for_device() - drm/msm/gem: Prevent blocking within shrinker loop - [arm64,armhf] drm/panfrost: Don't sync rpm suspension after mmu flushing - cifs: Move the in_send statistic to __smb_send_rqst() - [arm64] drm/meson: fix 1px pink line on GXM when scaling video overlay - [x86] ASoC: SOF: Intel: MTL: Fix the device description - [x86] ASoC: SOF: Intel: HDA: Fix device description - [x86] ASoC: SOF: Intel: SKL: Fix device description - [x86] ASOC: SOF: Intel: pci-tgl: Fix device description - docs: Correct missing "d_" prefix for dentry_operations member d_weak_revalidate - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() - ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU() - netfilter: nft_nat: correct length for loading protocol registers - netfilter: nft_masq: correct length for loading protocol registers - netfilter: nft_redir: correct length for loading protocol registers - netfilter: nft_redir: correct value of inet type `.maxattrs` - scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD - scsi: core: Fix a procfs host directory removal regression - ftrace,kcfi: Define ftrace_stub_graph conditionally - tcp: tcp_make_synack() can be called from process context - wifi: nl80211: fix NULL-ptr deref in offchan check - wifi: cfg80211: fix MLO connection ownership - nfc: pn533: initialize struct pn533_out_arg properly - ipvlan: Make skb->skb_iif track skb->dev for l3s mode - i40e: Fix kernel crash during reboot when adapter is in recovery mode - [s390x] PCI: s390: Fix use-after-free of PCI resources with per-function hotplug - [x86] drm/i915/psr: Use calculated io and fast wake lines - [x86] drm/i915/sseu: fix max_subslices array-index-out-of-bounds access - net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler() - qed/qed_dev: guard against a possible division by zero - block: do not reverse request order when flushing plug list - loop: Fix use-after-free issues - net: tunnels: annotate lockless accesses to dev->needed_headroom - net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails - tcp: Fix bind() conflict check for dual-stack wildcard address. - net/smc: fix deadlock triggered by cancel_delayed_work_syn() - net: usb: smsc75xx: Limit packet length to skb->len - drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc - [powerpc*] mm: Fix false detection of read faults - nvme: fix handling single range discard request - nvmet: avoid potential UAF in nvmet_req_complete() - block: sunvdc: add check for mdesc_grab() returning NULL - net/mlx5e: Fix macsec ASO context alignment - net/mlx5e: Don't cache tunnel offloads capability - net/mlx5: Fix setting ec_function bit in MANAGE_PAGES - net/mlx5: Disable eswitch before waiting for VF pages - net/mlx5e: Support Geneve and GRE with VF tunnel offload - net/mlx5: E-switch, Fix wrong usage of source port rewrite in split rules - net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port - net/mlx5e: Fix cleanup null-ptr deref on encap lock - net/mlx5: Set BREAK_FW_WAIT flag first when removing driver - veth: Fix use after free in XDP_REDIRECT - ice: xsk: disable txq irq before flushing hw - [arm64,armhf] net: dsa: don't error out when drivers return ETH_DATA_LEN in .port_max_mtu() - [arm64,armhf] net: dsa: mv88e6xxx: fix max_mtu of 1492 on 6165, 6191, 6220, 6250, 6290 - sh_eth: avoid PHY being resumed when interface is not up - ipv4: Fix incorrect table ID in IOCTL path - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull - net: atlantic: Fix crash when XDP is enabled but no program is loaded - [s390x] net/iucv: Fix size of interrupt data - qed/qed_mng_tlv: correctly zero out ->min instead of ->hour - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails - hwmon: (adt7475) Display smoothing attributes in correct order - hwmon: (adt7475) Fix masking of hysteresis registers - jffs2: correct logic when creating a hole in jffs2_write_begin - ext4: fail ext4_iget if special inode unallocated - ext4: update s_journal_inum if it changes after journal replay - ext4: fix task hung in ext4_xattr_delete_inode - net/9p: fix bug in client create for .L - drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini - drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes - ext4: fix possible double unlock when moving a directory - [arm64] tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted - serial: 8250_fsl: fix handle_irq locking - [arm64] firmware: xilinx: don't make a sleepable memory allocation from an atomic context - [arm64,armhf] memory: tegra: fix interconnect registration race - [armhf] memory: tegra124-emc: fix interconnect registration race - drm/ttm: Fix a NULL pointer dereference - [arm64,armhf] interconnect: fix icc_provider_del() error handling - [arm64,armhf] interconnect: fix provider registration API - [arm64] interconnect: imx: fix registration race - [arm64,armhf] interconnect: fix mem leak when freeing nodes - md: select BLOCK_LEGACY_AUTOLOAD - cifs: generate signkey for the channel that's reconnecting - tracing: Make splice_read available again - tracing: Check field value in hist_field_name() - tracing: Make tracepoint lockdep check actually test something - cifs: Fix smb2_set_path_size() - [x86] KVM: SVM: Fix a benign off-by-one bug in AVIC physical table mask - [x86] KVM: SVM: Modify AVIC GATag to support max number of 512 vCPUs - [x86] KVM: nVMX: add missing consistency checks for CR0 and CR4 - ALSA: hda: intel-dsp-config: add MTL PCI id - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro - ALSA: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP platform - drm/shmem-helper: Remove another errant put in error path - [arm64,armhf] drm/sun4i: fix missing component unbind on bind errors - [x86] drm/i915/active: Fix misuse of non-idle barriers as fence trackers - [x86] drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz - drm/amdgpu: Don't resume IOMMU after incomplete init - drm/amd/pm: Fix sienna cichlid incorrect OD volage after resume - drm/amd/pm: bump SMU 13.0.4 driver_if header version - drm/amd/display: Do not set DRR on pipe Commit - drm/amd/display: disconnect MPCC only on OTG change - mptcp: fix possible deadlock in subflow_error_report - mptcp: add ro_after_init for tcp{,v6}_prot_override - mptcp: avoid setting TCP_CLOSE state twice - mptcp: fix lockdep false positive in mptcp_pm_nl_create_listen_socket() - ftrace: Fix invalid address access in lookup_rec() when index is 0 - ocfs2: fix data corruption after failed write - nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV3000 - ice: avoid bonding causing auxiliary plug/unplug under RTNL lock - mm/userfaultfd: propagate uffd-wp bit when PTE-mapping the huge zeropage - mm: teach mincore_hugetlb about pte markers - trace/hwlat: Do not wipe the contents of per-cpu thread data - trace/hwlat: Do not start per-cpu thread if it is already running - [arm64] ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent - fbdev: Fix incorrect page mapping clearance at fb_deferred_io_release() - [arm64] cpuidle: psci: Iterate backwards over list in psci_pd_remove() - [x86] ASoC: Intel: soc-acpi: fix copy-paste issue in topology names - [x86] mce: Make sure logged MCEs are processed after sysfs update - [x86] mm: Fix use of uninitialized buffer in sme_enable() - [x86] resctrl: Clear staged_config[] before and after it is used - powerpc: Pass correct CPU reference to assembler - [amd64] virt/coco/sev-guest: Check SEV_SNP attribute at probe time - [amd64] virt/coco/sev-guest: Simplify extended guest request handling - [amd64] virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() - [amd64] virt/coco/sev-guest: Carve out the request issuing logic into a helper - [amd64] virt/coco/sev-guest: Do some code style cleanups - [amd64] virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case - [amd64] virt/coco/sev-guest: Add throttling awareness - io_uring/msg_ring: let target know allocated index - perf: Fix check before add_event_to_groups() in perf_group_detach() https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.22 - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output - perf: fix perf_event_context->time - drm/amd/display: Include virtual signal to set k1 and k2 values - drm/amd/display: fix k1 k2 divider programming for phantom streams - drm/amd/display: Remove OTG DIV register write for Virtual signals. - mptcp: refactor passive socket initialization - mptcp: use the workqueue to destroy unaccepted sockets - mptcp: fix UaF in listener shutdown - drm/amd/display: Fix DP MST sinks removal issue - [x86] power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition - [arm64] dts: imx8dxl-evk: Disable hibernation mode of AR8031 for EQOS - [arm64] dts: imx8dxl-evk: Fix eqos phy reset gpio - NFS: Fix /proc/PID/io read_bytes for buffered reads - xsk: Add missing overflow check in xdp_umem_reg - iavf: fix inverted Rx hash condition leading to disabled hash - iavf: fix non-tunneled IPv6 UDP packet type and hashing - iavf: do not track VLAN 0 filters - intel/igbvf: free irq on the error path in igbvf_request_msix() - igbvf: Regard vf reset nack as success - igc: fix the validation logic for taprio's gate list - [arm64] i2c: imx-lpi2c: check only for enabled interrupt flags - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() - nfsd: don't replace page in rq_pages if it's a continuation of last page - net: usb: smsc95xx: Limit packet length to skb->len - efi/libstub: smbios: Use length member instead of record struct size - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info - net: phy: Ensure state transitions are processed from phy_stop() - net: mdio: fix owner field for mdio buses registered using device-tree - net: mdio: fix owner field for mdio buses registered using ACPI - net: stmmac: Fix for mismatched host/device DMA address width - [x86] drm/i915: Print return value on error - [x86] drm/i915/fbdev: lock the fbdev obj before vma pin - [x86] drm/i915/guc: Rename GuC register state capture node to be more obvious - [x86] drm/i915/guc: Fix missing ecodes - [x86] drm/i915/gt: perform uc late init after probe error injection - [arm64] net: qcom/emac: Fix use after free bug in emac_remove due to race condition - net: usb: lan78xx: Limit packet length to skb->len - keys: Do not cache key in task struct if key is requested from kernel thread - ice: check if VF exists before mode check - iavf: fix hang on reboot with ice - i40e: fix flow director packet filter programming - bpf: Adjust insufficient default bpf_jit_limit - net/mlx5e: Set uplink rep as NETNS_LOCAL - net/mlx5e: Block entering switchdev mode with ns inconsistency - net/mlx5: Fix steering rules cleanup - net/mlx5e: Overcome slow response for first macsec ASO WQE - net/mlx5: Read the TC mapping of all priorities on ETS query - net/mlx5: E-Switch, Fix an Oops in error handling code - [armhf] net: dsa: tag_brcm: legacy: fix daisy-chained switches - atm: idt77252: fix kmemleak when rmmod idt77252 - erspan: do not use skb_mac_header() in ndo_start_xmit() - nvme-tcp: fix nvme_tcp_term_pdu to match spec - hvc/xen: prevent concurrent accesses to the shared ring - ksmbd: add low bound validation to FSCTL_SET_ZERO_DATA - ksmbd: add low bound validation to FSCTL_QUERY_ALLOCATED_RANGES - ksmbd: fix possible refcount leak in smb2_open() - Bluetooth: hci_sync: Resume adv with no RPA when active scan - Bluetooth: hci_core: Detect if an ACL packet is in fact an ISO packet - Bluetooth: btusb: Remove detection of ISO packets over bulk - Bluetooth: ISO: fix timestamped HCI ISO data packet parsing - Bluetooth: Remove "Power-on" check from Mesh feature - [amd64,arm64] gve: Cache link_speed value from device - net: asix: fix modprobe "sysfs: cannot create duplicate filename" - [arm64] net: mdio: thunder: Add missing fwnode_handle_put() - drm/amd/display: Set dcn32 caps.seamless_odm - Bluetooth: btqcomsmd: Fix command timeout after setting BD address - Bluetooth: L2CAP: Fix responding with wrong PDU type - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (CVE-2023-1989) - Bluetooth: mgmt: Fix MGMT add advmon with RSSI command - platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl - entry: Fix noinstr warning in __enter_from_user_mode() - [x86] perf/x86/amd/core: Always clear status for idx - entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up - hwmon: fix potential sensor registration fail if of_node is missing - [x86] hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs - scsi: qla2xxx: Synchronize the IOCB count to be in order - scsi: qla2xxx: Perform lockless command completion in abort path - smb3: lower default deferred close timeout to address perf regression - smb3: fix unusable share after force unmount failure - [x86] thunderbolt: Use scale field when allocating USB3 bandwidth - [x86] thunderbolt: Call tb_check_quirks() after initializing adapters - [x86] thunderbolt: Add quirk to disable CLx - [x86] thunderbolt: Fix memory leak in margining - [x86] thunderbolt: Disable interrupt auto clear for rings - [x86] thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access - [x86] thunderbolt: Use const qualifier for `ring_interrupt_index` - [x86] thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit - [x86] ASoC: amd: yp: Add OMEN by HP Gaming Laptop 16z-n000 to quirks - [x86] ASoC: amd: yc: Add DMI entries to support HP OMEN 16-n0xxx (8A43) - [x86] ACPI: x86: Drop quirk for HP Elitebook - [x86] ACPI: x86: utils: Add Cezanne to the list for forcing StorageD3Enable - drm/cirrus: NULL-check pipe->plane.state->fb in cirrus_pipe_update() - HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded - HID: logitech-hidpp: Add support for Logitech MX Master 3S mouse - [amd64] HID: intel-ish-hid: ipc: Fix potential use-after-free in work function - scsi: target: iscsi: Fix an error message in iscsi_check_key() - scsi: qla2xxx: Add option to disable FC2 Target support - [arm64] scsi: hisi_sas: Check devm_add_action() return value - scsi: ufs: core: Add soft dependency on governor_simpleondemand - scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() - scsi: lpfc: Avoid usage of list iterator variable after loop - scsi: mpi3mr: Driver unload crashes host when enhanced logging is enabled - scsi: mpi3mr: Wait for diagnostic save during controller init - scsi: mpi3mr: NVMe command size greater than 8K fails - scsi: mpi3mr: Bad drive in topology results kernel crash - scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file - net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 - net: usb: qmi_wwan: add Telit 0x1080 composition - drm/amd/display: Update clock table to include highest clock setting - drm/amdgpu: Fix call trace warning and hang when removing amdgpu device - drm/amd: Fix initialization mistake for NBIO 7.3.0 - cifs: lock chan_lock outside match_session - cifs: append path to open_enter trace event - cifs: do not poll server interfaces too regularly - cifs: empty interface list when server doesn't support query interfaces - cifs: dump pending mids for all channels in DebugData - cifs: print session id while listing open files - cifs: fix dentry lookups in directory handle cache - [x86] fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() - scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR - [arm64] usb: dwc2: drd: fix inconsistent mode if role-switch-default-mode="host" - [arm64,armhf] usb: dwc2: fix a devres leak in hw_enable upon suspend resume - usb: gadget: u_audio: don't let userspace block driver unbind - btrfs: zoned: fix btrfs_can_activate_zone() to support DUP profile - Bluetooth: Fix race condition in hci_cmd_sync_clear - efi: sysfb_efi: Fix DMI quirks not working for simpledrm - mm/slab: Fix undefined init_cache_node_node() for NUMA and !SMP - fscrypt: destroy keyring after security_sb_delete() - fsverity: Remove WQ_UNBOUND from fsverity read workqueue - lockd: set file_lock start and end when decoding nlm4 testargs - [arm64] dts: imx8mm-nitrogen-r2: fix WM8960 clock name - igb: revert rtnl_lock() that causes deadlock - dm thin: fix deadlock when swapping to thin device - usb: typec: tcpm: fix create duplicate source-capabilities file - usb: typec: tcpm: fix warning when handle discover_identity message - [arm64,armhf] usb: chipdea: core: fix return -EINVAL if request role is the same with current role - [arm64,armhf] usb: chipidea: core: fix possible concurrent when switch role - [arm64,armhf] usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC - io_uring/net: avoid sending -ECONNABORTED on repeated connection requests - io_uring/rsrc: fix null-ptr-deref in io_file_bitmap_get() (CVE-2023-1583) - maple_tree: fix mas_skip_node() end slot detection - ksmbd: fix wrong signingkey creation when encryption is AES256 - ksmbd: set FILE_NAMED_STREAMS attribute in FS_ATTRIBUTE_INFORMATION - ksmbd: don't terminate inactive sessions after a few seconds - ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect - ksmbd: return unsupported error on smb1 mount - wifi: mac80211: fix qos on mesh interfaces - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() - drm/amd/display: fix wrong index used in dccg32_set_dpstreamclk - [arm64] drm/meson: fix missing component unbind on bind errors - drm/amdgpu/nv: Apply ASPM quirk on Intel ADL + AMD Navi - [x86] drm/i915/active: Fix missing debug object activation - [x86] drm/i915: Preserve crtc_state->inherited during state clearing - drm/amdgpu: skip ASIC reset for APUs when go to S4 - drm/amdgpu: reposition the gpu reset checking for reuse - [arm64] firmware: arm_scmi: Fix device node validation for mailbox transport - mm/ksm: fix race with VMA iteration and mm_struct teardown - [arm64] i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (CVE-2023-2194) - dm stats: check for and propagate alloc_percpu failure - dm crypt: add cond_resched() to dmcrypt_write() - dm crypt: avoid accessing uninitialized tasklet - sched/fair: sanitize vruntime of entity being placed - sched/fair: Sanitize vruntime of entity being migrated https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.23 - [x86] thunderbolt: Limit USB3 bandwidth of certain Intel USB4 host routers - cifs: update ip_addr for ses only for primary chan setup - cifs: prevent data race in cifs_reconnect_tcon() - cifs: avoid race conditions with parallel reconnects - zonefs: Reorganize code - zonefs: Simplify IO error handling - zonefs: Reduce struct zonefs_inode_info size - zonefs: Separate zone information from inode information - zonefs: Fix error message in zonefs_file_dio_append() - fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY - btrfs: rename BTRFS_FS_NO_OVERCOMMIT to BTRFS_FS_ACTIVE_ZONE_TRACKING - btrfs: zoned: count fresh BG region as zone unusable - [armhf] dts: aspeed: p10bmc: Update battery node name - [arm64] drm/msm/dpu: Refactor sc7280_pp location - [arm64] drm/msm/dpu: correct sm8250 and sm8350 scaler - [arm64] drm/msm/disp/dpu: fix sc7280_pp base offset - [arm64] tty: serial: fsl_lpuart: switch to new dmaengine_terminate_* API - [arm64] tty: serial: fsl_lpuart: fix race on RX DMA shutdown - tracing: Add .percent suffix option to histogram values - tracing: Add .graph suffix option to histogram value - tracing: Do not let histogram values have some modifiers - [arm64] net: mscc: ocelot: fix stats region batching - [arm64] efi: Set NX compat flag in PE/COFF header - cifs: fix missing unload_nls() in smb2_reconnect() - xfrm: Zero padding when dumping algos and encap - zstd: Fix definition of assert() - ACPI: video: Add backlight=native DMI quirk for Dell Vostro 15 3535 - [x86] ASoC: SOF: ipc3: Check for upper size limit for the received message - [x86] ASoC: SOF: ipc4-topology: Fix incorrect sample rate print unit - [x86] ASoC: SOF: Intel: pci-tng: revert invalid bar size setting - [x86] ASoC: SOF: IPC4: update gain ipc msg definition to align with fw - md: avoid signed overflow in slot_store() - [amd64] x86/PVH: obtain VGA console info in Dom0 - ALSA: asihpi: check pao in control_message() - ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() - sched_getaffinity: don't assume 'cpumask_size()' is fully initialized - nvme-pci: add NVME_QUIRK_BOGUS_NID for Lexar NM620 - net/mlx5e: Lower maximum allowed MTU in XSK to match XDP prerequisites - tracing: Fix wrong return in kprobe_event_gen_test.c - btrfs: fix uninitialized variable warning in btrfs_update_block_group - btrfs: use temporary variable for space_info in btrfs_update_block_group - ALSA: usb-audio: Fix recursive locking at XRUN during syncing - [arm64,armhf] PCI: dwc: Fix PORT_LINK_CONTROL update when CDM check enabled - [x86] platform/x86: think-lmi: add missing type attribute - [x86] platform/x86: think-lmi: use correct possible_values delimiters - [x86] platform/x86: think-lmi: only display possible_values if available - [x86] platform/x86: think-lmi: Add possible_values for ThinkStation - [x86] platform/surface: aggregator: Add missing fwnode_handle_put() - SUNRPC: fix shutdown of NFS TCP client socket - sfc: ef10: don't overwrite offload features at NIC reset - scsi: megaraid_sas: Fix crash after a double completion - scsi: mpt3sas: Don't print sense pool info twice - [arm64] ptp_qoriq: fix memory leak in probe() - r8169: fix RTL8168H and RTL8107E rx crc error - [arm*] regulator: Handle deferred clk - net/net_failover: fix txq exceeding warning - net: stmmac: don't reject VLANs when IFF_PROMISC is set - [x86] drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state - [x86] platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write - ACPI: bus: Rework system-level device notification handling - loop: LOOP_CONFIGURE: send uevents for partitions - [arm64,armhf] net: mvpp2: classifier flow fix fragmentation flags - [arm64,armhf] net: mvpp2: parser fix QinQ - [arm64,armhf] net: mvpp2: parser fix PPPoE - [arm64,armhf] smsc911x: avoid PHY being resumed when interface is not up - ice: Fix ice_cfg_rdma_fltr() to only update relevant fields - ice: add profile conflict check for AVF FDIR - ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() - ALSA: ymfpci: Create card with device-managed snd_devm_card_new() - ALSA: ymfpci: Fix BUG_ON in probe function - i40e: fix registers dump after run ethtool adapter self test - bnxt_en: Fix reporting of test result in ethtool selftest - bnxt_en: Fix typo in PCI id to device description string mapping - bnxt_en: Add missing 200G link speed reporting - [arm64,armhf] net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only - Input: xpad - fix incorrectly applied patch for MAP_PROFILE_BUTTON - [amd64] iommu/vt-d: Allow zero SAGAW if second-stage not supported - Input: alps - fix compatibility with -funsigned-char - Input: focaltech - use explicitly signed char type - cifs: prevent infinite recursion in CIFSGetDFSRefer() - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL - Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table - btrfs: fix deadlock when aborting transaction during relocation with scrub - btrfs: fix race between quota disable and quota assign ioctls (CVE-2023-1611) - btrfs: scan device in non-exclusive mode - zonefs: Do not propagate iomap_dio_rw() ENOTBLK error to user space - block/io_uring: pass in issue_flags for uring_cmd task_work handling - io_uring/poll: clear single/double poll flags on poll arming - io_uring/rsrc: fix rogue rsrc node grabbing - io_uring: fix poll/netmsg alloc caches - vmxnet3: use gro callback when UPT is enabled - zonefs: Always invalidate last cached page on append write - dm: fix __send_duplicate_bios() to always allow for splitting IO - can: j1939: prevent deadlock by moving j1939_sk_errqueue() - xen/netback: don't do grant copy across page boundary - modpost: Fix processing of CRCs on 32-bit build machines (Closes: #1033329) - pinctrl: amd: Disable and mask interrupts on resume - [x86] platform/x86: ideapad-laptop: Stop sending KEY_TOUCHPAD_TOGGLE - [powerpc*] Don't try to copy PPR for task with NULL pt_regs - [powerpc*] pseries/vas: Ignore VAS update for DLPAR if copy/paste is not enabled - NFSv4: Fix hangs when recovering open state after a server reboot - ALSA: hda/conexant: Partial revert of a quirk for Lenovo - ALSA: usb-audio: Fix regression on detection of Roland VS-100 - ALSA: hda/realtek: Add quirks for some Clevo laptops - ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z - rcu: Fix rcu_torture_read ftrace event - [s390x] uaccess: add missing earlyclobber annotations to __clear_user() - [arm64,armhf] drm/etnaviv: fix reference leak when mmaping imported buffer - drm/amdgpu: allow more APUs to do mode2 reset when go to S4 - drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub - drm/amd/display: Take FEC Overhead into Timeslot Calculation - [x86] drm/i915/gem: Flush lmem contents after construction - [x86] drm/i915/dpt: Treat the DPT BO as a framebuffer - [x86] drm/i915: Disable DC states for all commits - [x86] drm/i915: Move CSC load back into .color_commit_arm() when PSR is enabled on skl/glk - [arm64] KVM: arm64: PMU: Fix GET_ONE_REG for vPMC regs to return the current value - [arm64] KVM: arm64: Disable interrupts while walking userspace PTs - [arm64,armhf] net: dsa: mv88e6xxx: read FID when handling ATU violations - [arm64,armhf] net: dsa: mv88e6xxx: replace ATU violation prints with trace points - [arm64,armhf] net: dsa: mv88e6xxx: replace VTU violation prints with trace points - usb: ucsi: Fix ucsi->connector race - [amd64] x86/PVH: avoid 32-bit build warning when obtaining VGA console info - Revert "cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*" https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.24 - dm cache: Add some documentation to dm-cache-background-tracker.h - dm integrity: Remove bi_sector that's only used by commented debug code - dm: change "unsigned" to "unsigned int" - dm: fix improper splitting for abnormal bios - [arm64] KVM: arm64: PMU: Align chained counter implementation with architecture pseudocode - [arm64] KVM: arm64: PMU: Distinguish between 64bit counter and 64bit overflow - [arm64] KVM: arm64: PMU: Sanitise PMCR_EL0.LP on first vcpu run - [arm64] KVM: arm64: PMU: Don't save PMCR_EL0.{C,P} for the vCPU - Drivers: vmbus: Check for channel allocation before looking up relids - [x86] ASoC: SOF: ipc4: Ensure DSP is in D0I0 during sof_ipc4_set_get_data() - pwm: Make .get_state() callback return an error code - [arm64] pwm: cros-ec: Explicitly set .polarity in .get_state() - [arm64,armhf] pwm: meson: Explicitly set .polarity in .get_state() - [s390x] KVM: s390: pv: fix external interruption loop not always detected - wifi: mac80211: fix the size calculation of ieee80211_ie_len_eht_cap() - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta - net: qrtr: Fix a refcount bug in qrtr_recvmsg() - net: phylink: add phylink_expects_phy() method - net: stmmac: check if MAC needs to attach to a PHY - net: stmmac: remove redundant fixup to support fixed-link mode - l2tp: generate correct module alias strings - wifi: brcmfmac: Fix SDIO suspend/resume regression - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - nfsd: call op_release, even when op_func returns an error - icmp: guard against too small mtu - ALSA: hda/hdmi: Preserve the previous PCM device upon re-enablement - net: don't let netpoll invoke NAPI if in xmit context - [arm64,armhf] net: dsa: mv88e6xxx: Reset mv88e6393x force WD event bit - sctp: check send stream number after wait_for_sndbuf - net: qrtr: Do not do DEL_SERVER broadcast after DEL_CLIENT - ipv6: Fix an uninit variable access bug in __ip6_make_skb() - [x86] platform/x86: think-lmi: Fix memory leak when showing current settings - [x86] platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings - [x86] platform/x86: think-lmi: Clean up display of current_value on Thinkstation - net: stmmac: fix up RX flow hash indirection table when setting channels - sunrpc: only free unix grouplist after RCU settles - NFSD: callback request does not use correct credential for AUTH_SYS - ice: fix wrong fallback logic for FDIR - ice: Reset FDIR counter in FDIR init stage - raw: use net_hash_mix() in hash function - raw: Fix NULL deref in raw_get_next(). - ping: Fix potentail NULL deref for /proc/net/icmp. - ethtool: reset #lanes when lanes is omitted - netlink: annotate lockless accesses to nlk->max_recvmsg_len - [amd64,arm64] gve: Secure enough bytes in the first TX desc for all TCP pkts - [arm64] compat: Work around uninitialized variable warning - net: stmmac: check fwnode for phy device before scanning for phy - cxl/pci: Fix CDAT retrieval on big endian - cxl/pci: Handle truncated CDAT header - cxl/pci: Handle truncated CDAT entries - cxl/pci: Handle excessive CDAT length - [arm64,armhf] usb: xhci: tegra: fix sleep in atomic call - xhci: Free the command allocated for setting LPM if we return early - xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu - USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs - usb: typec: altmodes/displayport: Fix configure initial pin assignment - USB: serial: option: add Telit FE990 compositions - USB: serial: option: add Quectel RM500U-CN modem - drivers: iio: adc: ltc2497: fix LSB shift - iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip - iio: buffer: correctly return bytes written in output buffers - iio: buffer: make sure O_NONBLOCK is respected - iio: light: cm32181: Unregister second I2C client if present - [arm64] tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() - nilfs2: fix sysfs interface lifetime - serial: 8250: Prevent starting up DMA Rx on THRI interrupt - ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN - ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr - ALSA: hda/realtek: Add quirk for Clevo X370SNW - ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook - x86/ACPI/boot: Use FADT version to check support for online capable - [x86] KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection - [x86] KVM: nVMX: Do not report error code when synthesizing VM-Exit from Real Mode - [arm64] coresight: etm4x: Do not access TRCIDR1 for identification - [arm64] coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug - blk-mq: directly poll requests - iio: adc: ad7791: fix IRQ flags - io_uring: fix return value when removing provided buffers - io_uring: fix memory leak when removing provided buffers - scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() - nvme: fix discard support without oncs - cifs: sanitize paths in cifs_update_super_prepath. - block: don't set GD_NEED_PART_SCAN if scan partition failed - perf/core: Fix the same task check in perf_event_set_output - ftrace: Mark get_lock_parent_ip() __always_inline - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() - fs: drop peer group ids under namespace lock - can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access - can: isotp: fix race between isotp_sendsmg() and isotp_release() - can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events - can: isotp: isotp_recvmsg(): use sock_recv_cmsgs() to get SOCK_RXQ_OVFL infos - ACPI: video: Add auto_detect arg to __acpi_video_get_backlight_type() - ACPI: video: Make acpi_backlight=video work independent from GPU driver - ACPI: video: Add acpi_backlight=video quirk for Apple iMac14,1 and iMac14,2 - ACPI: video: Add acpi_backlight=video quirk for Lenovo ThinkPad W530 - net: stmmac: Add queue reset into stmmac_xdp_open() function - tracing/synthetic: Fix races on freeing last_cmd - tracing/timerlat: Notify new max thread latency - tracing: Free error logs of tracing instances - [x86] ASoC: hdac_hdmi: use set_stream() instead of set_tdm_slots() - tracing/synthetic: Make lastcmd_mutex static - mm: vmalloc: avoid warn_alloc noise caused by fatal signal - wifi: mt76: ignore key disable commands - [arm64,armhf] drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path - drm/nouveau/disp: Support more modes by checking with lower bpc - [x86] drm/i915: Fix context runtime accounting - [x86] drm/i915: fix race condition UAF in i915_perf_add_config_ioctl - ring-buffer: Fix race while reader and writer are on the same page - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() - mm/hugetlb: fix uffd wr-protection for CoW optimization path - maple_tree: fix get wrong data_end in mtree_lookup_walk() - maple_tree: fix a potential concurrency bug in RCU mode - blk-throttle: Fix that bps of child could exceed bps limited in parent - drm/amd/display: Clear MST topology if it fails to resume - drm/amdgpu: for S0ix, skip SDMA 5.x+ suspend/resume - drm/amdgpu: skip psp suspend for IMU enabled ASICs mode2 reset - [x86] drm/display/dp_mst: Handle old/new payload states in drm_dp_remove_payload() - [x86] drm/i915/dp_mst: Fix payload removal during output disabling - [x86] drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR - [x86] drm/i915: Split icl_color_commit_noarm() from skl_color_commit_noarm() - mm: take a page reference when removing device exclusive entries - maple_tree: remove GFP_ZERO from kmem_cache_alloc() and kmem_cache_alloc_bulk() - maple_tree: fix potential rcu issue - maple_tree: reduce user error potential - maple_tree: fix handle of invalidated state in mas_wr_store_setup() - maple_tree: fix mas_prev() and mas_find() state handling - maple_tree: be more cautious about dead nodes - maple_tree: refine ma_state init from mas_start() - maple_tree: detect dead nodes in mas_start() - maple_tree: fix freeing of nodes in rcu mode - maple_tree: remove extra smp_wmb() from mas_dead_leaves() - maple_tree: add smp_rmb() to dead node detection - maple_tree: add RCU lock checking to rcu callback functions - mm: enable maple tree RCU mode by default. https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.25 - Revert "pinctrl: amd: Disable and mask interrupts on resume" - drm/amd/display: Pass the right info to drm_dp_remove_payload - ALSA: emu10k1: fix capture interrupt handler unlinking - ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard - ALSA: i2c/cs8427: fix iec958 mixer control deactivation - ALSA: hda: patch_realtek: add quirk for Asus N7601ZM - ALSA: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2 - ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() - ALSA: emu10k1: don't create old pass-through playback device on Audigy - ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards - ALSA: hda/hdmi: disable KAE for Intel DG2 - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} - Bluetooth: Fix race condition in hidp_session_thread - bluetooth: btbcm: Fix logic error in forming the board name. - Bluetooth: Free potentially unfreed SCO connection - Bluetooth: hci_conn: Fix possible UAF - btrfs: restore the thread_pool= behavior in remount for the end I/O workqueues - btrfs: fix fast csum implementation detection - fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace - mtdblock: tolerate corrected bit-flips - [armhf] mtd: rawnand: stm32_fmc2: remove unsupported EDO mode - [armhf] mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min - [arm64] KVM: arm64: PMU: Restore the guest's EL0 event counting after migration - fbcon: Fix error paths in set_con2fb_map - fbcon: set_con2fb_map needs to set con2fb_map! - [x86] drm/i915/dsi: fix DSS CTL register offsets for TGL+ - RDMA/irdma: Do not generate SW completions for NOPs - RDMA/irdma: Fix memory leak of PBLE objects - RDMA/irdma: Increase iWARP CM default rexmit count - RDMA/irdma: Add ipv4 check to irdma_find_listener() - IB/mlx5: Add support for 400G_8X lane speed - RDMA/cma: Allow UD qp_type to join multicast only - bpf: tcp: Use sock_gen_put instead of sock_put in bpf_iter_tcp - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition (CVE-2023-1859) - [arm64] bpf, arm64: Fixed a BTI error on returning to patched function - [arm64] KVM: arm64: Initialise hypervisor copies of host symbols unconditionally - [arm64] KVM: arm64: Advertise ID_AA64PFR0_EL1.CSV2/3 to protected VMs - niu: Fix missing unwind goto in niu_alloc_channels() - tcp: restrict net.ipv4.tcp_app_win - bonding: fix ns validation on backup slaves - iavf: refactor VLAN filter states - iavf: remove active_cvlans and active_svlans bitmaps - net: openvswitch: fix race on port output - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure - Bluetooth: Fix printing errors if LE Connection times out - Bluetooth: SCO: Fix possible circular locking dependency sco_sock_getsockopt - Bluetooth: Set ISO Data Path on broadcast sink - [armhf] drm/armada: Fix a potential double free in an error handling path - qlcnic: check pci_reset_function result - net: wwan: iosm: Fix error handling path in ipc_pcie_probe() - cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex - net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() - sctp: fix a potential overflow in sctp_ifwdtsn_skip - RDMA/core: Fix GID entry ref leak when create_ah fails - udp6: fix potential access to stale information - [arm64] net: macb: fix a memory corruption in extended buffer descriptor mode - skbuff: Fix a race between coalescing and releasing SKBs - [arm64] power: supply: rk817: Fix unsigned comparison with less than zero - [arm64] power: supply: cros_usbpd: reclassify "default case!" as debug - [x86] power: supply: axp288_fuel_gauge: Added check for negative values - wifi: mwifiex: mark OF related data as maybe unused - [arm64] i2c: imx-lpi2c: clean rx/tx buffers upon new message - efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L - [x86] ACPI: video: Add backlight=native DMI quirk for Acer Aspire 3830TG - drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F - [arm64] hwmon: (xgene) Fix ioremap and memremap leak - [amd64] verify_pefile: relax wrapper length check - asymmetric_keys: log on fatal failures in PE/pkcs7 - nvme: send Identify with CNS 06h only to I/O controllers - wifi: iwlwifi: mvm: fix mvmtxq->stopped handling - wifi: iwlwifi: mvm: protect TXQ list manipulation - drm/amdgpu: add mes resume when do gfx post soft reset - drm/amdgpu: Force signal hw_fences that are embedded in non-sched jobs - drm/amdgpu/gfx: set cg flags to enter/exit safe mode - ACPI: resource: Add Medion S17413 to IRQ override quirk - [x86] hyperv: Move VMCB enlightenment definitions to hyperv-tlfs.h - [x86] KVM: SVM: Add a proper field for Hyper-V VMCB enlightenments - [x86] hyperv: KVM: Rename "hv_enlightenments" to "hv_vmcb_enlightenments" - [x86] KVM: SVM: Flush Hyper-V TLB when required - tracing: Add trace_array_puts() to write into instance - tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance - maple_tree: fix write memory barrier of nodes once dead for RCU mode - ksmbd: avoid out of bounds access in decode_preauth_ctxt() - [riscv64] add icache flush for nommu sigreturn trampoline - [amd64] HID: intel-ish-hid: Fix kernel panic during warm reset - net: sfp: initialize sfp->i2c_block_size at sfp allocation - scsi: ses: Handle enclosure with just a primary component gracefully - [x86] PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot - cgroup: fix display of forceidle time at root - cgroup/cpuset: Fix partition root's cpuset.cpus update bug - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() - mptcp: use mptcp_schedule_work instead of open-coding it - mptcp: stricter state check in mptcp_worker - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size - ubi: Fix deadlock caused by recursively holding work_sem - [powerpc*] papr_scm: Update the NUMA distance table for the target node - sched/fair: Fix imbalance overflow - [x86] rtc: Remove __init for runtime functions - i2c: ocores: generate stop condition after timeout in polling mode - cifs: fix negotiate context parsing - nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN - nvme-pci: add NVME_QUIRK_BOGUS_NID for T-FORCE Z330 SSD - cgroup/cpuset: Skip spread flags update on v2 - cgroup/cpuset: Make cpuset_fork() handle CLONE_INTO_CGROUP properly - cgroup/cpuset: Add cpuset_can_fork() and cpuset_cancel_fork() methods . [ Salvatore Bonaccorso ] * Bump ABI to 8 * [arm64] drivers/net/can: Enable CAN_C_CAN, CAN_C_CAN_PLATFORM, CAN_M_CAN and CAN_M_CAN_PLATFORM as module. Move configuration enablement to arm64 specific configuration. . [ Cyril Brulebois ] * fbdev/offb: Update expected device name (Closes: #1033058) This fixes the hang/black screen in Debian Installer on ppc64el, with thanks to Frédéric Bonnard for the detailed bug report. Checksums-Sha1: 007167434e26b338f9b3deeda017243417eb0fe3 7359 linux-signed-arm64_6.1.25+1.dsc 1eef0788e07afd204077bcbfb78b6861e74c53d4 2783460 linux-signed-arm64_6.1.25+1.tar.xz Checksums-Sha256: 98b4308c69ad8f84af60e530344a5172567a77aa50777101289a1b85a1d1b4c5 7359 linux-signed-arm64_6.1.25+1.dsc 4d2e89817f749bde86ba60f440fc0a64ac808ed1ac844416cb19210cec3df25b 2783460 linux-signed-arm64_6.1.25+1.tar.xz Files: 2ab830e4368c0d50a820ccd9d863c068 7359 kernel optional linux-signed-arm64_6.1.25+1.dsc 7d81918212bd213cb9525a1fffada549 2783460 kernel optional linux-signed-arm64_6.1.25+1.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfKFfvHEI+gkU+E+di0FRiLdONzYFAmRGPicACgkQi0FRiLdO NzYLcBAApLgckozcGLJdaWVGanT00ES3AwLej16YO8mA5DN+f/JLgP5IENmqHJO8 WJhBH7hM3WJ0ZIQ5bGmJuKsr4vp53ukyq1YOYclKURnhEJcg/WNwHpW1pPT9iz4I uBxKSsSriw43ifxfaOMB1eK4BXPPrJO/88W1vEIGRzW8IaOtz5Ulpb/X+oJMcwR0 YLWddbAOJx/DWRka1iS7HgZwyVX19XO0kd7RsMAuVlzBuZVDPhk9ZbOjEGvZ/PCD f8i1xzMrzuuEuTvPmKGhbav8maWkeeRM3QPu5QQZZRElj56pyhaBM6aJhtXuX9B5 6rkaiTFK0BxpGGhDeHZv5m1RkbQ9V/1fjYka6LwoR55md6/kM65fXDxBEJG3bwZ1 FMXjQhLnQSiDTx7ZNrK7wNHXpP+JGfgjUcFeszOp/UzJ7NMOo9erBmAwu7KJ3D1C Wew1xIeZpbBCdCxtLXoI2X2BLUzQUPSb8GL0TGozcE+DPc239NZIfMmN52ywZh3O eqgoCrdg1AkH040zNAKntC/uQad2Z/m0OloczHzDRPZIFwjhXc0Ikgk7+W68YJDp dHwc7DUBM9SQgkzrpN7MOEvmn+rvUZ1FadZkaQdqqcyPEzlFz7cHcOIOsSLv3KrQ 0LQ/gVrhwdAVTGh7SPWq0jzRdTkqd+GhPLNMLTSAtgKrIbtKrRM= =Uh9p -----END PGP SIGNATURE-----