-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 21 Aug 2024 22:29:42 +0200 Source: linux Architecture: source Version: 6.1.106-1 Distribution: bookworm Urgency: medium Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1039883 1076576 Changes: linux (6.1.106-1) bookworm; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.100 - Compiler Attributes: Add __uninitialized macro - mm: prevent derefencing NULL ptr in pfn_section_valid() - cachefiles: propagate errors from vfs_getxattr() to avoid infinite loop - cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode - cachefiles: stop sending new request when dropping object - cachefiles: cancel all requests for the object that is being dropped - cachefiles: wait for ondemand_object_worker to finish when dropping object - cachefiles: cyclic allocation of msg_id to avoid reuse - cachefiles: add missing lock protection when polling - filelock: fix potential use-after-free in posix_lock_inode - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading - vfs: don't mod negative dentry count when on shrinker list - tcp: fix incorrect undo caused by DSACK of TLP retransmit - net: phy: microchip: lan87xx: reinit PHY after cable test - skmsg: Skip zero length skb in sk_msg_recvmsg - net: fix rc7's __skb_datagram_iter() - i40e: Fix XDP program unloading while removing the driver - net: ethernet: lantiq_etop: fix double free in detach - bpf: Refactor some inode/task/sk storage functions for reuse - bpf: Reduce smap->elem_size - bpf: use bpf_map_kvcalloc in bpf_local_storage - bpf: Remove __bpf_local_storage_map_alloc - bpf: fix order of args in call to bpf_map_kvcalloc - net: ethernet: mtk-star-emac: set mac_managed_pm when probing - ppp: reject claimed-as-LCP but actually malformed packets - ethtool: netlink: do not return SQI value if link is down - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). - net/sched: Fix UAF when resolving a clash - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket - [s390x] Mark psw in __load_psw_mask() as __unitialized - firmware: cs_dsp: Fix overflow checking of wmfw header - firmware: cs_dsp: Return error if block header overflows file - firmware: cs_dsp: Validate payload length before processing block - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files - cifs: fix setting SecurityFlags to true - Revert "sched/fair: Make sure to try to detach at least one movable task" - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() - tcp: avoid too many retransmit packets (CVE-2024-41007) - USB: serial: option: add Telit generic core-dump composition - USB: serial: option: add Telit FN912 rmnet compositions - USB: serial: option: add Fibocom FM350-GL - USB: serial: option: add support for Foxconn T99W651 - USB: serial: option: add Netprisma LCUK54 series modules - USB: serial: option: add Rolling RW350-GL variants - USB: serial: mos7840: fix crash on resume - USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor - hpet: Support 32-bit userspace - xhci: always resume roothubs if xHC was reset during resume - ksmbd: discard write access to the directory open - nvmem: rmem: Fix return value of rmem_read() - nvmem: meson-efuse: Fix return value of nvmem callbacks - nvmem: core: only change name to fram for current attribute - [x86] platform/x86: toshiba_acpi: Fix array out-of-bounds access - ALSA: hda/realtek: add quirk for Clevo V5[46]0TU - ALSA: hda/realtek: Enable Mute LED on HP 250 G7 - ALSA: hda/realtek: Limit mic boost on VAIO PRO PX - Fix userfaultfd_api to return EINVAL as expected - libceph: fix race between delayed_work() and ceph_monc_stop() - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency - wireguard: selftests: use acpi=off instead of -no-acpi for recent QEMU - wireguard: allowedips: avoid unaligned 64-bit memory accesses - wireguard: queueing: annotate intentional data race in cpu round robin - wireguard: send: annotate intentional data race in checking empty queue - [x86] retpoline: Move a NOENDBR annotation to the SRSO dummy return thunk - bpf: Allow reads from uninit stack - nilfs2: fix kernel bug on rename operation of broken directory - sched: Move psi_account_irqtime() out of update_rq_clock_task() hotpath - i2c: mark HostNotify target address as used - [x86] entry/64: Remove obsolete comment on tracing vs. SYSRET - [x86] bhi: Avoid warning in #DB handler due to BHI mitigation - kbuild: Make ld-version.sh more robust against version string changes https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.101 - minmax: sanity check constant bounds when clamping - minmax: clamp more efficiently by avoiding extra comparison - minmax: fix header inclusions - minmax: allow min()/max()/clamp() if the arguments have the same signedness. - minmax: allow comparisons of 'int' against 'unsigned char/short' - minmax: relax check to allow comparison between unsigned arguments and signed constants - gcc-plugins: Rename last_stmt() for GCC 14+ - filelock: Remove locks reliably when fcntl/close race is detected (CVE-2024-41012) - scsi: core: alua: I/O errors for ALUA state transitions - scsi: qedf: Don't process stag work during unload and recovery - scsi: qedf: Wait for stag work during unload - scsi: qedf: Set qed_slowpath_params to zero before use - efi/libstub: zboot.lds: Discard .discard sections - ACPI: EC: Abort address space access upon error - ACPI: EC: Avoid returning AE_OK on errors in address space handler - tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata - wifi: mac80211: apply mcast rate only if interface is up - wifi: mac80211: handle tasklet frames before stopping - wifi: cfg80211: fix 6 GHz scan request building - wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup - wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd - wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option - wifi: iwlwifi: mvm: Fix scan abort handling with HW rfkill - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() - of/irq: Factor out parsing of interrupt-map parent phandle+args from of_irq_parse_raw() - Input: silead - Always support 10 fingers - net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() - ila: block BH in ila_output() - null_blk: fix validation of block size - kconfig: gconf: give a proper initial state to the Save button - kconfig: remove wrong expr_trans_bool() - HID: Ignore battery for ELAN touchscreens 2F2C and 4116 - NFSv4: Fix memory leak in nfs4_set_security_label - nfs: propagate readlink errors in nfs_symlink_filler - nfs: don't invalidate dentries on transient errors - cachefiles: add consistency check for copen/cread - cachefiles: Set object to close if ondemand_id < 0 in copen - cachefiles: make on-demand read killable - fs/file: fix the check in find_next_fd() - mei: demote client disconnect warning on suspend to debug - iomap: Fix iomap_adjust_read_range for plen calculation - drm: panel-orientation-quirks: Add quirk for Aya Neo KUN - nvme: avoid double free special payload - nvmet: always initialize cqe.result - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check - [powerpc*] KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() - drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency - ALSA: hda/realtek: Add more codec ID to no shutup pins list - [mips*] fix compat_sys_lseek syscall - Input: elantech - fix touchpad state on resume for Lenovo N24 - Input: i8042 - add Ayaneo Kun to i8042 quirk table - ASoC: topology: Fix references to freed memory - ASoC: topology: Do not assign fields that are already set - bytcr_rt5640 : inverse jack detect for Archos 101 cesium - ALSA: dmaengine: Synchronize dma channel after drop() - ASoC: ti: davinci-mcasp: Set min period size using FIFO config - ASoC: ti: omap-hdmi: Fix too long driver name - [x86] ASoC: SOF: sof-audio: Skip unprepare for in-use widgets on error rollback - can: kvaser_usb: fix return value for hif_usb_send_regout - gpio: pca953x: fix pca953x_irq_bus_sync_unlock race - [s390x] sclp: Fix sclp_init() cleanup on failure - [x86] platform/x86: wireless-hotkey: Add support for LG Airplane Button - [x86] platform/x86: lg-laptop: Remove LGEX0815 hotkey handling - [x86] platform/x86: lg-laptop: Change ACPI device id - [x86] platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB - btrfs: qgroup: fix quota root leak after quota disable failure - ALSA: PCM: Allow resume only for suspended streams - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx - ALSA: dmaengine_pcm: terminate dmaengine before synchronize - [x86] ASoC: amd: yc: Fix non-functional mic on ASUS M5602RA - net: usb: qmi_wwan: add Telit FN912 compositions - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() - [powerpc*] pseries: Whitelist dtl slub object for copying to userspace - [powerpc*] eeh: avoid possible crash when edev->pdev changes - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed - [arm64] tee: optee: ffa: Fix missing-field-initializers warning - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() - bluetooth/l2cap: sync sock recv cb and release - erofs: ensure m_llen is reset to 0 if metadata is invalid - drm/amd/display: Account for cursor prefetch BW in DML1 mode support - drm/radeon: check bo_va->bo is non-NULL before using it - fs: better handle deep ancestor chains in is_subdir() - wifi: iwlwifi: properly set WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK - drivers/perf: riscv: Reset the counter to hpmevent mapping while starting cpus - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices - ksmbd: return FILE_DEVICE_DISK instead of super magic - hfsplus: fix uninit-value in copy_name - spi: mux: set ctlr->bits_per_word_mask - cifs: fix noisy message on copy_file_range - [arm*] 9324/1: fix get_user() broken with veneer - Bluetooth: L2CAP: Fix deadlock - of/irq: Disable "interrupt-map" parsing for PASEMI Nemo - wifi: cfg80211: wext: set ssids=NULL for passive scans - wifi: mac80211: disable softirqs for queued frame handling - netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() - cachefiles: fix slab-use-after-free in fscache_withdraw_volume() - cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.102 - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() - f2fs: avoid dead loop in f2fs_issue_checkpoint() - ocfs2: add bounds checking to ocfs2_check_dir_entry() - jfs: don't walk off the end of ealist - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 - [arm64] dts: qcom: msm8996: Disable SS instance in Parkmode for USB - [arm64] dts: qcom: ipq6018: Disable SS instance in Parkmode for USB - [arm64] dts: qcom: sdm630: Disable SS instance in Parkmode for USB - [arm64,armhf] ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused - filelock: Fix fcntl/close race recovery compat path - btrfs: do not BUG_ON on failure to get dir index for new snapshot - tun: add missing verification for short frame (CVE-2024-41091) - tap: add missing verification for short frame (CVE-2024-41090) https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.103 - [amd64] EDAC, i10nm: make skx_common.o a separate module - rcu/tasks: Fix stale task snaphot for Tasks Trace - md: fix deadlock between mddev_suspend and flush bio - platform/chrome: cros_ec_debugfs: fix wrong EC message version - block: refactor to use helper - block: cleanup bio_integrity_prep - block: initialize integrity buffer to zero before writing it to media - hfsplus: fix to avoid false alarm of circular locking - [x86] of: Return consistent error type from x86_of_pci_irq_enable() - [x86] pci/intel_mid_pci: Fix PCIBIOS_* return code handling - [x86] pci/xen: Fix PCIBIOS_* return code handling - [x86] platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos - kernfs: fix all kernel-doc warnings and multiple typos - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() - cgroup/cpuset: Prevent UAF in proc_cpuset_show() - hwmon: (adt7475) Fix default duty on fan is disabled - nvmet-auth: fix nvmet_auth hash error handling - [arm64] drm/meson: fix canvas release in bind function - [arm64] dts: qcom: sdm845: add power-domain to UFS PHY - [arm64] dts: qcom: sm6350: add power-domain to UFS PHY - [arm64] dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings - [arm64] dts: qcom: sm8250: add power-domain to UFS PHY - [arm64] dts: qcom: sm8450: add power-domain to UFS PHY - [arm64] dts: qcom: msm8996-xiaomi-common: drop excton from the USB PHY - [arm64] dts: qcom: msm8998: enable adreno_smmu by default - [arm64] soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers - [arm64] dts: rockchip: Add sdmmc related properties on rk3308-rock-pi-s - [arm64] dts: rockchip: Add pinctrl for UART0 to rk3308-rock-pi-s - [arm64] dts: rockchip: Add mdio and ethernet-phy nodes to rk3308-rock-pi-s - [arm64] dts: rockchip: Update WIFi/BT related nodes on rk3308-rock-pi-s - [arm64] dts: qcom: msm8996: specify UFS core_clk frequencies - [arm64] soc: xilinx: rename cpu_number1 to dummy_cpu_number - cpufreq: ti-cpufreq: Handle deferred probe with dev_err_probe() - [armhf] OPP: ti: Fix ti_opp_supply_probe wrong return values - [arm64] dts: rockchip: Increase VOP clk rate on RK3328 - [arm64] dts: amlogic: sm1: fix spdif compatibles - [arm64] dts: mediatek: mt8183-kukui: Drop bogus output-enable property - [arm64] dts: mediatek: mt7622: fix "emmc" pinctrl mux - [arm64] dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625 - [arm64] dts: amlogic: gx: correct hdmi clocks - [arm64] dts: rockchip: Drop invalid mic-in-differential on rk3568-rock-3a - [arm64] dts: rockchip: Fix mic-in-differential usage on rk3568-evb1-v10 - [arm64] dts: renesas: r8a779g0: Add L3 cache controller - [arm64] dts: renesas: r8a779g0: Add secondary CA76 CPU cores - [arm64] dts: renesas: Drop specifying the GIC_CPU_MASK_SIMPLE() for GICv3 systems - [arm64] dts: renesas: r8a779a0: Add missing hypervisor virtual timer IRQ - [arm64] dts: renesas: r8a779f0: Add missing hypervisor virtual timer IRQ - [arm64] dts: renesas: r8a779g0: Add missing hypervisor virtual timer IRQ - [arm64] dts: renesas: r9a07g043u: Add missing hypervisor virtual timer IRQ - [arm64] dts: renesas: r9a07g044: Add missing hypervisor virtual timer IRQ - [arm64] dts: renesas: r9a07g054: Add missing hypervisor virtual timer IRQ - [x86] xen: Convert comma to semicolon - [arm64] dts: rockchip: Add missing power-domains for rk356x vop_mmu - [arm64] dts: qcom: sm6350: Add missing qcom,non-secure-domain property - vmlinux.lds.h: catch .bss..L* sections into BSS") - [arm64] firmware: turris-mox-rwtm: Do not complete if there are no waiters - [arm64] firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() - [arm64] firmware: turris-mox-rwtm: Initialize completion before mailbox - wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device - bpftool: Un-const bpf_func_info to fix it for llvm 17 and newer - net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP - tcp: annotate lockless accesses to sk->sk_err_soft - tcp: annotate lockless access to sk->sk_err - tcp: add tcp_done_with_error() helper - tcp: fix race in tcp_write_err() - tcp: fix races in tcp_v[46]_err() - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined - lib: objagg: Fix general protection fault - [x86] perf/x86: Serialize set_attr_rdpmc() - jump_label: Use atomic_try_cmpxchg() in static_key_slow_inc_cpuslocked() - jump_label: Prevent key->enabled int overflow - jump_label: Fix concurrency issues in static_key_slow_dec() - wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers - wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() - net: fec: Refactor: #define magic constants - net: fec: Fix FEC_ECR_EN1588 being cleared on link-down - libbpf: Checking the btf_type kind when fixing variable offsets - ipvs: Avoid unnecessary calls to skb_is_gso_sctp - netfilter: nf_tables: rise cap on SELinux secmark context - bpftool: Mount bpffs when pinmaps path not under the bpffs - [x86] perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation - perf: Fix perf_aux_size() for greater-than 32-bit size - perf: Prevent passing zero nr_pages to rb_alloc_aux() - perf: Fix default aux_watermark calculation - [x86] perf/x86/intel/cstate: Fix Alderlake/Raptorlake/Meteorlake - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() - wifi: virt_wifi: avoid reporting connection success with wrong SSID - gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey - wifi: virt_wifi: don't use strlen() in const context - locking/rwsem: Add __always_inline annotation to __down_write_common() and inlined callers - bpf: annotate BTF show functions with __printf - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures - bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o - bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT - xdp: fix invalid wait context of page_pool_destroy() - net: bridge: mst: Check vlan state for egress decision - [arm64] drm/rockchip: vop2: Fix the port mux of VP2 - drm/mipi-dsi: Fix mipi_dsi_dcs_write_seq() macro definition format - drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_dcs_write_seq() - drm/amd/pm: Fix aldebaran pcie speed reporting - drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit - drm/amdgpu: Remove GC HW IP 9.3.0 from noretry=1 - drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators - drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare() - media: pci: ivtv: Add check for DMA map result - media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() - media: imon: Fix race getting ictx->lock - media: i2c: Fix imx412 exposure control - media: v4l: async: Fix NULL pointer dereference in adding ancillary links - [s390x] mm: Convert make_page_secure to use a folio - [s390x] mm: Convert gmap_make_secure to use a folio - [s390x] uv: Don't call folio_wait_writeback() without a folio reference - saa7134: Unchecked i2c_transfer function result fixed - media: uvcvideo: Override default flags - media: renesas: vsp1: Fix _irqsave and _irq mix - media: renesas: vsp1: Store RPF partition configuration per RPF instance - leds: trigger: Unregister sysfs attributes before calling deactivate() - [arm64] drm/msm/dsi: set VIDEO_COMPRESSION_MODE_CTRL_WC - [arm64] drm/msm/dpu: drop validity checks for clear_pending_flush() ctl op - perf test: Replace arm callgraph fp test workload with leafloop - perf tests arm_callgraph_fp: Address shellcheck warnings about signal names and adding double quotes for expression - perf tests: Fix test_arm_callgraph_fp variable expansion - perf test: Make test_arm_callgraph_fp.sh more robust - perf report: Fix condition in sort__sym_cmp() - [arm64,armhf] drm/etnaviv: fix DMA direction handling for cached RW buffers - drm/qxl: Add check for drm_cvt_mode - Revert "leds: led-core: Fix refcount leak in of_led_get()" - ext4: fix infinite loop when replaying fast_commit - media: venus: flush all buffers in output plane streamoff - perf intel-pt: Fix aux_watermark calculation for 64-bit size - perf intel-pt: Fix exclude_guest setting - mfd: rsmu: Split core code into separate module - mfd: omap-usb-tll: Use struct_size to allocate tll - xprtrdma: Fix rpcrdma_reqs_reset() - SUNRPC: avoid soft lockup when transmitting UDP to reachable server. - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server - ext4: don't track ranges in fast_commit if inode has inlined data (Closes: #1039883) - ext4: avoid writing unitialized memory to disk in EA inodes - SUNRPC: Fixup gss_status tracepoint error output - PCI: Fix resource double counting on remove & rescan - PCI: keystone: Relocate ks_pcie_set/clear_dbi_mode() - PCI: keystone: Don't enable BAR 0 for AM654x - PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs() - PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup() - clk: qcom: branch: Add helper functions for setting retain bits - clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock - clk: qcom: camcc-sc7280: Add parent dependency to all camera GDSCs - iio: frequency: adrf6780: rm clk provider include - coresight: Fix ref leak when of_coresight_parse_endpoint() fails - RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE - [powerpc*] pseries: Fix alignment of PLPKS structures and buffers - [powerpc*] pseries: Move plpks.h to include directory - [powerpc*] pseries: Expose PLPKS config values, support additional fields - [powerpc*] pseries: Add helper to get PLPKS password length - [powerpc*] kexec: make the update_cpus_node() function public - [powerpc*] kexec_file: fix cpus node update to FDT - RDMA/cache: Release GID table even if leak is detected - clk: qcom: gpucc-sm8350: Park RCG's clk source at XO during disable - interconnect: qcom: qcm2290: Fix mas_snoc_bimc RPM master ID - Input: qt1050 - handle CHIP_ID reading error - RDMA/mlx4: Fix truncated output warning in mad.c - RDMA/mlx4: Fix truncated output warning in alias_GUID.c - RDMA/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled - RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs - [arm64] ASoC: qcom: Adjust issues in case of DT error in asoc_qcom_lpass_cpu_platform_probe() - [powerpc*] prom: Add CPU info to hardware description string later - mtd: make mtd_test.c a separate module - RDMA/device: Return error earlier if port in not valid - Input: elan_i2c - do not leave interrupt disabled on suspend failure - ASoC: amd: Adjust error handling in case of absent codec device - PCI: endpoint: Clean up error handling in vpci_scan_bus() - PCI: endpoint: Fix error handling in epf_ntb_epc_cleanup() - vhost/vsock: always initialize seqpacket_allow - net: missing check virtio - [x86] crypto: qat - extend scope of lock in adf_cfg_add_key_value_param() - clk: qcom: Park shared RCGs upon registration - clk: en7523: fix rate divider for slic and spi clocks - PCI: qcom-ep: Disable resources unconditionally during PERST# assert - PCI: dwc: Fix index 0 incorrectly being interpreted as a free ATU slot - [powerpc*] xmon: Fix disassembly CPU feature checks - [arm64] RDMA/hns: Check atomic wr length - [arm64] RDMA/hns: Fix unmatch exception handling when init eq table fails - [arm64] RDMA/hns: Fix missing pagesize and alignment check in FRMR - [arm64] RDMA/hns: Fix shift-out-bounds when max_inline_data is 0 - [arm64] RDMA/hns: Fix undifined behavior caused by invalid max_sge - [arm64] RDMA/hns: Fix insufficient extend DB for VFs. - [amd64] iommu/vt-d: Fix to convert mm pfn to dma pfn - [amd64] iommu/vt-d: Fix identity map bounds in si_domain_init() - bnxt_re: Fix imm_data endianness - netfilter: ctnetlink: use helper function to calculate expect ID - netfilter: nft_set_pipapo: constify lookup fn args where possible - netfilter: nf_set_pipapo: fix initial map fill - net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE - ipv4: Fix incorrect TOS in route get reply - ipv4: Fix incorrect TOS in fibmatch route get reply - net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports - net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports - pinctrl: rockchip: update rk3308 iomux routes - pinctrl: core: fix possible memory leak when pinctrl_enable() fails - pinctrl: single: fix possible memory leak when pinctrl_enable() fails - pinctrl: ti: ti-iodelay: Drop if block with always false condition - pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails - pinctrl: freescale: mxs: Fix refcount of child - fs/ntfs3: Replace inode_trylock with inode_lock - fs/ntfs3: Fix field-spanning write in INDEX_HDR - pinctrl: renesas: r8a779g0: Fix CANFD5 suffix - pinctrl: renesas: r8a779g0: Fix FXR_TXEN[AB] suffixes - pinctrl: renesas: r8a779g0: Fix (H)SCIF1 suffixes - pinctrl: renesas: r8a779g0: Fix (H)SCIF3 suffixes - pinctrl: renesas: r8a779g0: Fix IRQ suffixes - pinctrl: renesas: r8a779g0: FIX PWM suffixes - pinctrl: renesas: r8a779g0: Fix TCLK suffixes - pinctrl: renesas: r8a779g0: Fix TPU suffixes - fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP - nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro - rtc: interface: Add RTC offset to alarm after fix-up - [s390x] dasd: fix error checks in dasd_copy_pair_store() - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code - sbitmap: use READ_ONCE to access map->word - sbitmap: fix io hung due to race on sbitmap_word::cleared - landlock: Don't lose track of restrictions on cred_transfer - mm/hugetlb: fix possible recursive locking detected warning - mm/mglru: fix div-by-zero in vmpressure_calc_level() - mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer - [x86] efistub: Avoid returning EFI_SUCCESS on error - [x86] efistub: Revert to heap allocated boot_params for PE entrypoint - dt-bindings: thermal: correct thermal zone node name limit - tick/broadcast: Make takeover of broadcast hrtimer reliable - net: netconsole: Disable target before netpoll cleanup - af_packet: Handle outgoing VLAN packets without hardware offloading - kernel: rerun task_work while freezing in get_signal() - ipv4: fix source address selection with route leak - ipv6: take care of scope when choosing the src addr - sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks - fuse: verify {g,u}id mount options correctly - char: tpm: Fix possible memory leak in tpm_bios_measurements_open() - media: venus: fix use after free in vdec_close - ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() - [x86] drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes - [x86] drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes - scsi: qla2xxx: Fix optrom version displayed in FDMI - drm/amd/display: Check for NULL pointer - sched/fair: Use all little CPUs for CPU-bound workloads - apparmor: use kvfree_sensitive to free data->data - cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path - cifs: fix reconnect with SMB1 UNIX Extensions - cifs: mount with "unix" mount option for SMB1 incorrectly handled - task_work: s/task_work_cancel()/task_work_cancel_func()/ - task_work: Introduce task_work_cancel() again - udf: Avoid using corrupted block bitmap buffer - ext4: check dot and dotdot of dx_root before making dir indexed - ext4: make sure the first directory block is not a hole - io_uring: tighten task exit cancellations - trace/pid_list: Change gfp flags in pid_list_fill_irq() - wifi: mwifiex: Fix interface type change - drivers: soc: xilinx: check return status of get_api_version() - leds: ss4200: Convert PCIBIOS_* return codes to errnos - leds: mt6360: Fix memory leak in mt6360_init_isnk_properties() - jbd2: make jbd2_journal_get_max_txn_bufs() internal - media: uvcvideo: Fix integer overflow calculating timestamp - [x86] KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked() - [x86] KVM: nVMX: Request immediate exit iff pending nested event needs injection - ALSA: usb-audio: Fix microphone sound on HD webcam. - ALSA: usb-audio: Move HD Webcam quirk to the right place - ALSA: usb-audio: Add a quirk for Sonix HD USB Camera - tools/memory-model: Fix bug in lock.cat - hwrng: amd - Convert PCIBIOS_* return codes to errnos - PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN - PCI: dw-rockchip: Fix initial PERST# GPIO value - PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio - PCI: loongson: Enable MSI in LS7A Root Complex - [arm*] binder: fix hang of unregistered readers - dev/parport: fix the array out-of-bounds risk - scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds - f2fs: fix to force buffered IO on inline_data inode - f2fs: fix to don't dirty inode for readonly filesystem - f2fs: fix return value of f2fs_convert_inline_inode() - clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use - ubi: eba: properly rollback inside self_check_eba - decompress_bunzip2: fix rare decompression failure - kbuild: Fix '-S -c' in x86 stack protector scripts - [x86] ASoC: amd: yc: Support mic on Lenovo Thinkpad E16 Gen 2 - kobject_uevent: Fix OOB access within zap_modalias_env() - gve: Fix an edge case for TSO skb validity check - ice: Add a per-VF limit on number of FDIR filters - devres: Fix devm_krealloc() wasting memory - devres: Fix memory leakage caused by driver API devm_free_percpu() - irqchip/imx-irqsteer: Handle runtime power management correctly - mm/numa_balancing: teach mpol_to_str about the balancing mode - rtc: cmos: Fix return value of nvmem callbacks - scsi: qla2xxx: During vport delete send async logout explicitly - scsi: qla2xxx: Unable to act on RSCN for port online - scsi: qla2xxx: Fix for possible memory corruption - scsi: qla2xxx: Use QP lock to search for bsg - scsi: qla2xxx: Fix flash read failure - scsi: qla2xxx: Complete command early within lock - scsi: qla2xxx: validate nvme_local_port correctly - perf: Fix event leak upon exit - perf: Fix event leak upon exec and file release - [x86] perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR - [x86] perf/x86/intel/pt: Fix topa_entry base length - [x86] perf/x86/intel/pt: Fix a topa_entry base address calculation - [x86] drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8 - drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell - drm/dp_mst: Fix all mstb marked as not probed after suspend/resume - drm/i915/dp: Reset intel_dp->link_trained before retraining the link - rtc: isl1208: Fix return value of nvmem callbacks - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs - dm-verity: fix dm_is_verity_target() when dm-verity is builtin - rbd: don't assume rbd_is_lock_owner() for exclusive mappings - remoteproc: stm32_rproc: Fix mailbox interrupts queuing - remoteproc: imx_rproc: Skip over memory region when node value is NULL - remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init - [arm64,armhf] drm/etnaviv: don't block scheduler when GPU is still active - [arm64,armhf] drm/panfrost: Mark simple_ondemand governor as softdep - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings - bpf: Synchronize dispatcher update with bpf_dispatcher_xdp_func - Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 - nilfs2: handle inconsistent state in nilfs_btnode_create_block() - PCI: Introduce cleanup helpers for device reference counts and locks - PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal - io_uring/io-wq: limit retrying worker initialisation - wifi: mac80211: Allow NSS change only up to capability - wifi: mac80211: track capability/opmode NSS separately - wifi: mac80211: check basic rates validity - jfs: Fix array-index-out-of-bounds in diFree - dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels - phy: cadence-torrent: Check return value on register read - f2fs: fix start segno of large section - watchdog: rzg2l_wdt: Use pm_runtime_resume_and_get() - watchdog: rzg2l_wdt: Check return status of pm_runtime_put() - f2fs: fix to update user block counts in block_operations() - kbuild: avoid build error when single DTB is turned into composite DTB - libbpf: Fix no-args func prototype BTF dumping syntax - af_unix: Disable MSG_OOB handling for sockets in sockmap/sockhash - dma: fix call order in dmam_free_coherent - bpf, events: Use prog to emit ksymbol event for main program - ipv4: Fix incorrect source address in Record Route option - net: bonding: correctly annotate RCU in bond_should_notify_peers() - netfilter: nft_set_pipapo_avx2: disable softinterrupts - tipc: Return non-zero value from tipc_udp_addr2str() on error - net: stmmac: Correct byte order of perfect_match - net: nexthop: Initialize all fields in dumped nexthops - bpf: Fix a segment issue when downgrading gso_size - mISDN: Fix a use after free in hfcmulti_tx() - apparmor: Fix null pointer deref when receiving skb during sock creation - powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() - lirc: rc_dev_get_from_fd(): fix file leak - auxdisplay: ht16k33: Drop reference after LED registration - spi: microchip-core: fix the issues in the isr - spi: microchip-core: only disable SPI controller when register value change requires it - spi: microchip-core: switch to use modern name - spi: microchip-core: fix init function not setting the master and motorola modes - nvme-pci: Fix the instructions for disabling power management - spidev: Add Silicon Labs EM3581 device compatible - spi: spidev: order compatibles alphabetically - spi: spidev: add correct compatible for Rohm BH2228FV - [x86] ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable - ceph: fix incorrect kmalloc size of pagevec mempool - [s390x] pci: Refactor arch_setup_msi_irqs() - [s390x] pci: Allow allocation of more than 1 MSI interrupt - iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en - io_uring: fix io_match_task must_hold - nvme-pci: add missing condition check for existence of mapped data - fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT - [powerpc*] pseries: Avoid hcall in plpks_is_available() on non-pseries https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.104 - [arm64] dts: qcom: msm8998: switch USB QMP PHY to new style of bindings - [arm64] dts: qcom: msm8998: Disable SS instance in Parkmode for USB - [arm64] dts: qcom: ipq8074: Disable SS instance in Parkmode for USB - sysctl: allow change system v ipc sysctls inside ipc namespace - sysctl: allow to change limits for posix messages queues - sysctl: treewide: drop unused argument ctl_table_root::set_ownership(table) - sysctl: always initialize i_uid/i_gid - ext4: make ext4_es_insert_extent() return void - ext4: refactor ext4_da_map_blocks() - ext4: convert to exclusive lock while inserting delalloc extents - ext4: factor out a common helper to query extent map - ext4: check the extent status again before inserting delalloc block - leds: trigger: Remove unused function led_trigger_rename_static() - leds: trigger: Store brightness set by led_trigger_event() - leds: trigger: Call synchronize_rcu() before calling trig->activate() - leds: triggers: Flush pending brightness before activating trigger - mm: restrict the pcp batch scale factor to avoid too long latency - mm: page_alloc: control latency caused by zone PCP draining - mm/page_alloc: fix pcp->count race between drain_pages_zone() vs __rmqueue_pcplist() - f2fs: fix to avoid use SSR allocate when do defragment - f2fs: assign CURSEG_ALL_DATA_ATGC if blkaddr is valid - irqdomain: Fixed unbalanced fwnode get and put - drm/udl: Rename struct udl_drm_connector to struct udl_connector - drm/udl: Test pixel limit in mode-config's mode-valid function - drm/udl: Use USB timeout constant when reading EDID - drm/udl: Various improvements to the connector - drm/udl: Move connector to modesetting code - drm/udl: Remove DRM_CONNECTOR_POLL_HPD - [x86] drm/i915/dp: Don't switch the LTTPR mode on an active link - [amd64] HID: amd_sfh: Remove duplicate cleanup - [amd64] HID: amd_sfh: Split sensor and HID initialization - [amd64] HID: amd_sfh: Move sensor discovery before HID device initialization - drm/nouveau: prime: fix refcount underflow - drm/vmwgfx: Fix overlay when using Screen Targets - drm/vmwgfx: Trigger a modeset when the screen moves - sched: act_ct: take care of padding in struct zones_ht_key - ALSA: hda: conexant: Fix headset auto detect fail in the polling mode - Bluetooth: hci_sync: Fix suspending with wrong filter policy - net: axienet: start napi before enabling Rx/Tx - rtnetlink: Don't ignore IFLA_TARGET_NETNSID when ifname is specified in rtnl_dellink(). - ice: respect netif readiness in AF_XDP ZC related ndo's - ice: don't busy wait for Rx queue disable in ice_qp_dis() - ice: replace synchronize_rcu with synchronize_net - ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog - net/iucv: fix use after free in iucv_sock_close() - [x86] drm/i915/hdcp: Fix HDCP2_STREAM_STATUS macro - net: mvpp2: Don't re-use loop iterator - ALSA: hda: Conditionally use snooping for AMD HDMI - netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). - netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). - net/mlx5: Lag, don't use the hardcoded value of the first port - net/mlx5: Fix missing lock on sync reset reload - net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys - ipv6: fix ndisc_is_useropt() handling for PIO - [arm64] jump_label: Ensure patched jump_labels are visible to all CPUs - platform/chrome: cros_ec_proto: Lock device when updating MKBP version - HID: wacom: Modify pen IDs - btrfs: zoned: fix zone_unusable accounting on making block group read-write again - protect the fetch of ->fd[fd] in do_dup2() from mispredictions - mptcp: sched: check both directions for backup - ALSA: usb-audio: Correct surround channels in UAC1 channel map - ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G - Revert "ALSA: firewire-lib: obsolete workqueue for period update" - Revert "ALSA: firewire-lib: operate for period elapse event in process context" - drm/vmwgfx: Fix a deadlock in dma buf fence polling - [x86] drm/i915: Fix possible int overflow in skl_ddi_calculate_wrpll() - net: usb: sr9700: fix uninitialized variable use in sr_mdio_read - r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY - mptcp: fix user-space PM announced address accounting - mptcp: distinguish rcv vs sent backup flag in requests - mptcp: fix NL PM announced address accounting - mptcp: fix bad RCVPRUNED mib accounting - mptcp: pm: only set request_bkup flag when sending MP_PRIO - mptcp: fix duplicate data handling - netfilter: ipset: Add list flush to cancel_gc https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.105 - irqchip/mbigen: Fix mbigen node address layout - [x86] platform/x86/intel/ifs: Gen2 Scan test support - [x86] platform/x86/intel/ifs: Initialize union ifs_status to zero - jump_label: Fix the fix, brown paper bags galore - [x86] mm: Fix pti_clone_pgtable() alignment assumption - [x86] mm: Fix pti_clone_entry_text() for i386 - sctp: Fix null-ptr-deref in reuseport_add_sock(). - net: usb: qmi_wwan: fix memory leak for not ip packets - net: bridge: mcast: wait for previous gc cycles when removing port - net: linkwatch: use system_unbound_wq - Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() - Bluetooth: hci_sync: avoid dup filtering when passive scanning with adv monitor - [armhf] net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() - l2tp: fix lockdep splat - net: fec: Stop PPS on driver remove - rcutorture: Fix rcu_torture_fwd_cb_cr() data race - md: do not delete safemode_timer in mddev_suspend - md/raid5: avoid BUG_ON() while continue reshape after reassembling - block: change rq_integrity_vec to respect the iterator - rcu: Fix rcu_barrier() VS post CPUHP_TEARDOWN_CPU invocation - clocksouqrce/drivers/sh_cmt: Address race condition for clock events - ACPI: battery: create alarm sysfs attribute atomically - [x86] ACPI: SBS: manage alarm sysfs attribute through psy core - wifi: nl80211: disallow setting special AP channel widths - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink - af_unix: Don't retry after unix_state_lock_nested() in unix_stream_connect(). - PCI: Add Edimax Vendor ID to pci_ids.h - udf: prevent integer overflow in udf_bitmap_free_blocks() - wifi: nl80211: don't give key data to userspace - can: mcp251xfd: tef: prepare to workaround broken TEF FIFO tail index erratum - can: mcp251xfd: tef: update workaround for erratum DS80000789E 6 of mcp2518fd - btrfs: fix bitmap leak when loading free space cache on duplicate entry - drm/amdgpu/pm: Fix the param type of set_power_profile_mode - drm/amdgpu/pm: Fix the null pointer dereference for smu7 - drm/amdgpu: Fix the null pointer dereference to ras_manager - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules - drm/amdgpu: Add lock around VF RLCG interface - drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr - media: amphion: Remove lock in s_ctrl callback - drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update - drm/amd/display: Add null checker before passing variables - media: uvcvideo: Ignore empty TS packets - media: uvcvideo: Fix the bandwdith quirk on USB 3.x - media: xc2028: avoid use-after-free in load_firmware_cb() - ext4: fix uninitialized variable in ext4_inlinedir_to_tree - jbd2: avoid memleak in jbd2_journal_write_metadata_buffer - [s390x] sclp: Prevent release of buffer in I/O - SUNRPC: Fix a race to wake a sync task - bus: mhi: host: pci_generic: add support for Telit FE990 modem - Revert "bpftool: Mount bpffs when pinmaps path not under the bpffs" - profiling: remove profile=sleep support - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES - [arm64,armhf] irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t' - sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime - ext4: fix wrong unit use in ext4_mb_find_by_goal - [arm64] Add Neoverse-V2 part - [arm64] barrier: Restore spec_bar() macro - [arm64] cputype: Add Cortex-X4 definitions - [arm64] cputype: Add Neoverse-V3 definitions - [arm64] errata: Add workaround for Arm errata 3194386 and 3312417 - [arm64] cputype: Add Cortex-X3 definitions - [arm64] cputype: Add Cortex-A720 definitions - [arm64] cputype: Add Cortex-X925 definitions - [arm64] errata: Unify speculative SSBS errata logic - [arm64] errata: Expand speculative SSBS workaround - [arm64] cputype: Add Cortex-X1C definitions - [arm64] cputype: Add Cortex-A725 definitions - [arm64] errata: Expand speculative SSBS workaround (again) - i2c: smbus: Improve handling of stuck alerts - spi: spidev: Add missing spi_device_id for bh2228fv - i2c: smbus: Send alert notifications to all devices if source not found - bpf: kprobe: remove unused declaring of bpf_kprobe_override - kprobes: Fix to check symbol prefixes correctly - [arm64] i2c: qcom-geni: add desc struct to prepare support for I2C Master Hub variant - [arm64] i2c: qcom-geni: Add missing clk_disable_unprepare in geni_i2c_runtime_resume - [arm64] i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume - spi: spi-fsl-lpspi: Fix scldiv calculation - ALSA: usb-audio: Re-add ScratchAmp quirk entries - [arm64] ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT - drm/amd/display: Skip Recompute DSC Params if no Stream on Link - drm/client: fix null pointer dereference in drm_client_modeset_probe - ALSA: line6: Fix racy access to midibuf - ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list - ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks - ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 - usb: vhci-hcd: Do not drop references before new references are gained - USB: serial: debug: do not echo input by default - usb: gadget: core: Check for unset descriptor - usb: gadget: u_serial: Set start_delayed during suspend - usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. - scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES - scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic - tick/broadcast: Move per CPU pointer access into the atomic section - ntp: Clamp maxerror and esterror to operating range - torture: Enable clocksource watchdog with "tsc=watchdog" - clocksource: Scale the watchdog read retries automatically - clocksource: Fix brown-bag boolean thinko in cs_watchdog_read() - driver core: Fix uevent_show() vs driver detach race - ntp: Safeguard against time_constant overflow - timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() - serial: core: check uartclk for zero to avoid divide by zero - [x86] ASoC: amd: yc: Add quirk entry for OMEN by HP Gaming Laptop 16-n0xxx - kcov: properly check for softirq context - irqchip/xilinx: Fix shift out of bounds - genirq/irqdesc: Honor caller provided affinity in alloc_desc() - [x86] power: supply: axp288_charger: Fix constant_charge_voltage writes - [x86] power: supply: axp288_charger: Round constant_charge_voltage writes down - tracing: Fix overflow in get_free_elt() - padata: Fix possible divide-by-0 panic in padata_mt_helper() - smb3: fix setting SecurityFlags when encryption is required - btrfs: avoid using fixed char array size for tree names - [x86] mtrr: Check if fixed MTRRs exist before saving them - sched/smt: Introduce sched_smt_present_inc/dec() helper - sched/smt: Fix unbalance sched_smt_present dec/inc - drm/bridge: analogix_dp: properly handle zero sized AUX transactions - drm/dp_mst: Skip CSN if topology probing is not done yet - [arm64,armhf] drm/lima: Mark simple_ondemand governor as softdep - [x86] drm/mgag200: Set DDC timeout in milliseconds - [x86] drm/mgag200: Bind I2C lifetime to DRM device - mptcp: mib: count MPJ with backup flag - mptcp: export local_address - mptcp: pm: fix backup support in signal endpoints - mptcp: pm: deny endp with signal + subflow + port - block: use the right type for stub rq_integrity_vec() - Revert "drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update" - mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines (CVE-2024-42258) - btrfs: fix corruption after buffer fault in during direct IO append write - ipv6: fix source address selection with route leak - tools headers arm64: Sync arm64's cputype.h with the kernel sources - mm/hugetlb: fix potential race in __update_and_free_hugetlb_folio() - block: Call .limit_depth() after .hctx has been set - block/mq-deadline: Fix the tag reservation code - xfs: fix log recovery buffer allocation for the legacy h_size fixup (CVE-2024-39472) - netfilter: nf_tables: bail out if stateful expression provides no .clone - netfilter: nf_tables: allow clone callbacks to sleep - netfilter: nf_tables: prefer nft_chain_validate (CVE-2024-41042) - i2c: qcom-geni: fix missing clk_disable_unprepare() and geni_se_resources_off() - btrfs: fix double inode unlock for direct IO sync writes https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.106 - mptcp: pass addr to mptcp_pm_alloc_anno_list - mptcp: pm: reduce indentation blocks - mptcp: pm: don't try to create sf if alloc failed - mptcp: pm: do not ignore 'subflow' if 'signal' flag is also set - [x86] ASoC: topology: Clean up route loading - [x86] ASoC: topology: Fix route memory corruption - exec: Fix ToCToU between perm check and set-uid/gid usage - nfsd: move reply cache initialization into nfsd startup - nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net - NFSD: Refactor nfsd_reply_cache_free_locked() - NFSD: Rename nfsd_reply_cache_alloc() - NFSD: Replace nfsd_prune_bucket() - NFSD: Refactor the duplicate reply cache shrinker - NFSD: Rewrite synopsis of nfsd_percpu_counters_init() - NFSD: Fix frame size warning in svc_export_parse() - sunrpc: don't change ->sv_stats if it doesn't exist - nfsd: stop setting ->pg_stats for unused stats - sunrpc: pass in the sv_stats struct through svc_create_pooled - sunrpc: remove ->pg_stats from svc_program - sunrpc: use the struct net as the svc proc private - nfsd: rename NFSD_NET_* to NFSD_STATS_* - nfsd: expose /proc/net/sunrpc/nfsd in net namespaces - nfsd: make all of the nfsd stats per-network namespace - nfsd: remove nfsd_stats, make th_cnt a global counter - nfsd: make svc_stat per-network namespace instead of global - nvme/pci: Add APST quirk for Lenovo N60z laptop - mptcp: fully established after ADD_ADDR echo on MPJ - [x86] drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (CVE-2024-42259) - cgroup: Make operations on the cgroup root_list RCU safe - [x86] drm/i915: Add a function to mmap framebuffer obj - [x86] drm/i915: Fix a NULL vs IS_ERR() bug - [x86] drm/i915/gem: Adjust vma offset for framebuffer mmap offset - binfmt_flat: Fix corruption when not offsetting data start - cgroup: Move rcu_head up near the top of cgroup_root - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (CVE-2024-42114) - [arm64] KVM: arm64: Don't pass a TLBI level hint when zapping table entries - media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()" - Revert "ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error" . [ Salvatore Bonaccorso ] * Bump ABI to 24 . [ Bastian Blank ] * Backport changes in Microsoft Azure Network Adapter from 6.10. (closes: #1076576) * [arm64] Enable MICROSOFT_MANA. Checksums-Sha1: 7e22a9c0af61b72fb6af33e0c57aff3b1e39683b 290930 linux_6.1.106-1.dsc b3a9f13e8ebcc0719ebb94ee0c0674b6f6d3cb43 137654360 linux_6.1.106.orig.tar.xz a235ae47bbf76831aee61c3ab9a06b8c9e5a629f 1665276 linux_6.1.106-1.debian.tar.xz a6134abb47abf6b19dfc5abaa101c56bdfc4257d 7177 linux_6.1.106-1_source.buildinfo Checksums-Sha256: a89dac0ce5b7545ad80a0f369d158956aa58cabd13180207a664c6d11151ba28 290930 linux_6.1.106-1.dsc e1e3b721db72464aba403b218ff20a256d06ba5686b03bf0d6282ad372dfb330 137654360 linux_6.1.106.orig.tar.xz b8a96c16e2b3be0228e2420e60a9068a8eac9a043185a2ec9e37d7c795ee7a16 1665276 linux_6.1.106-1.debian.tar.xz e5b7e0fc674ff13d54737598a9a9e323ce16a17b75a41bc71d81ed6d87b955da 7177 linux_6.1.106-1_source.buildinfo Files: 38f2667f98e77b3d68635e3d70552135 290930 kernel optional linux_6.1.106-1.dsc 0e69be7d0c8c9d4de547e675e5eab10b 137654360 kernel optional linux_6.1.106.orig.tar.xz 681aca79dc5b33019460140f1d7c6647 1665276 kernel optional linux_6.1.106-1.debian.tar.xz 27b9eae3a38028e56e8a82624e94b4eb 7177 kernel optional linux_6.1.106-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmbGUPhfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89ElrMQAImKCDNZ7WciuZmBlT/nOnktpzS4vU/X tsW2ixDdNwzB5jsQqwzSEOUqIs4JZdM1fYXcRMkR1xmAaQISVvSo53Ri01UcACpy n07jgb1LILpaqo8TbJcb302ctBxNInKuT9K+tuE1+b6GLjs+YCRek/XzLA3/GYoM SYMoSxB1qK+rWyaCUsUEroEpZqEK3D+aA51EMKEW+NFdMebFbKcWLkpNEgdJ9yMo 3jAQ2jh2AkPuK/dPafk08021vLDb8BpiQseLMJ41gfjW83gzee6dLxV7Bzom/u6x wK5F/ukuqvj5ST0Na7Uu2hVbuflYU2937xdAAb4uVUdAqA4TGm6jKwWmM4XW93Pb oxZC0pd/LW5Quv5BQ8wnv31pNkYPAkT7fqfY1QTh4FWMNpZ91ZkQfksd2R59b3Ea vHBjkHXXe+TR6igen9NSXShYQsfIMvfM1oiVjf70v3rOSBWMXV7jjjYPKiqPnXfH 0E8iQCmqkinqvn4wQZu5TpPaZCcem2aAtULVt6e425OpVv/nlTlW/Iub/GPu99tr 2DIrcNMCh7Wuk+CCeFMqGKOpFpSFs+CybfIgwFomV90f0saCs1AeUPUT6QDioPmq j+yOus/st/C+Db4cnBHg43eZSWt0k7s6PUV1ZjFs7LJxftU1qhiZzijsNuDO8BQh FOiU/NIlxOmH =jusB -----END PGP SIGNATURE-----
