-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Jan 2025 17:09:32 +0100 Source: linux Architecture: source Version: 6.12.8-1 Distribution: unstable Urgency: medium Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1087900 Changes: linux (6.12.8-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.7 - net: sched: fix ordering of qlen adjustment (CVE-2024-53164) - net: stmmac: fix TSO DMA API usage causing oops (CVE-2024-56719) - firmware: arm_ffa: Fix the race around setting ffa_dev->properties - [riscv64] KVM: Fix csr_write -> csr_set for HVIEN PMU overflow bit - sched/fair: Fix NEXT_BUDDY - sched/fair: Fix sched_can_stop_tick() for fair tasks - sched/eevdf: More PELT vs DELAYED_DEQUEUE - [amd64] p2sb: Factor out p2sb_read_from_cache() - [amd64] p2sb: Introduce the global flag p2sb_hidden_by_bios - [amd64] p2sb: Move P2SB hide and unhide code to p2sb_scan_and_cache() - [amd64] p2sb: Do not scan and remove the P2SB device when it is unhidden - i2c: pnx: Fix timeout in wait functions - [s390x] ipl: Fix never less than zero warning - erofs: fix PSI memstall accounting - sched/dlserver: Fix dlserver double enqueue - sched/dlserver: Fix dlserver time accounting - [s390x] mm: Consider KMSAN modules metadata for paging levels - erofs: add erofs_sb_free() helper - erofs: use `struct erofs_device_info` for the primary device - erofs: reference `struct erofs_device_info` for erofs_map_dev - erofs: use buffered I/O for file-backed mounts by default - xfs: sb_spino_align is not verified - xfs: fix sparse inode limits on runt AG - xfs: fix off-by-one error in fsmap's end_daddr usage - xfs: fix sb_spino_align checks for large fsblock sizes - xfs: fix zero byte checking in the superblock scrubber - cxl/pci: Fix potential bogus return value upon successful probing - cxl/region: Fix region creation for greater than x2 switches - net/smc: protect link down work from execute after lgr freed (CVE-2024-56718) - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg - net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg - net/smc: check smcd_v2_ext_offset when receiving proposal msg - net/smc: check return value of sock_recvmsg when draining clc data - [arm64] net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic() - ionic: Fix netdev notifier unregister on failure (CVE-2024-56715) - ionic: no double destroy workqueue (CVE-2024-56714) - ionic: use ee->offset when returning sprom data - ksmbd: count all requests in req_running counter - ksmbd: fix broken transfers when exceeding max simultaneous operations - netdev: fix repeated netlink messages in queue dump - netdev: fix repeated netlink messages in queue stats - team: Fix feature exposure when no ports are present - [amd64,arm64] net: hinic: Fix cleanup in create_rxqs/txqs() - net: ethernet: bgmac-platform: fix an OF node reference leak - can: m_can: set init flag earlier in probe - can: m_can: fix missed interrupts with m_can_pci - ipvs: Fix clamp() of ip_vs_conn_tab on small memory systems - netfilter: ipset: Fix for recursive locking warning - net: dsa: restore dsa_software_vlan_untag() ability to operate on VLAN-untagged traffic - netdev-genl: avoid empty messages in queue dump - psample: adjust size if rate_as_probability is set - net: mdiobus: fix an OF node reference leak - [arm64,armhf] mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk - [arm64] mmc: mtk-sd: disable wakeup in .remove() and in the error path of .probe() - irqchip/gic-v3: Work around insecure GIC integrations - [amd64] EDAC/amd64: Simplify ECC check on unified memory controllers - [arm64] KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden - [amd64] KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init - net: tun: fix tun_napi_alloc_frags() - chelsio/chtls: prevent potential integer overflow on 32bit - net: mctp: handle skb cleanup on sock_queue failures - block: Revert "block: Fix potential deadlock while freezing queue and acquiring sysfs_lock" - i2c: riic: Always round-up when calculating bus period - efivarfs: Fix error on non-existent file - USB: serial: option: add TCL IK512 MBIM & ECM - USB: serial: option: add MeiG Smart SLM770A - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready - USB: serial: option: add MediaTek T7XX compositions - USB: serial: option: add Telit FE910C04 rmnet compositions - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic - [amd64] thunderbolt: Add support for Intel Panther Lake-M/P - [amd64] thunderbolt: Improve redrive mode handling - [amd64] thunderbolt: Don't display nvm_version unless upgrade supported - drm/display: use ERR_PTR on DP tunnel manager creation fail - drm/amd: Update strapping for NBIO 2.5.0 - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() - drm/amdgpu: fix amdgpu_coredump - drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update - [amd64] udmabuf: udmabuf_create pin folio codestyle cleanup - [amd64] udmabuf: fix memory leak on last export_udmabuf() error path - dma-buf: Fix __dma_buf_debugfs_list_del argument for !CONFIG_DEBUG_FS - [amd64] i915/guc: Reset engine utilization buffer before registration - [amd64] i915/guc: Ensure busyness counter increases motonically - [amd64] i915/guc: Accumulate active runtime on gt reset - drm/amdgpu: don't access invalid sched - hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers - hwmon: (tmp513) Fix Current Register value interpretation - hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers - block: avoid to reuse `hctx` not removed from cpuhp callback list - trace/ring-buffer: Do not use TP_printk() formatting for boot mapped buffers - drm/amdgpu/nbio7.11: fix IP version check - drm/amdgpu/nbio7.7: fix IP version check - drm/amdgpu/smu14.0.2: fix IP version check - zram: refuse to use zero sized block device as backing device - zram: fix uninitialized ZRAM not releasing backing device - vmalloc: fix accounting with i915 - mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in split_large_buddy() - ring-buffer: Fix overflow in __rb_map_vma - alloc_tag: fix set_codetag_empty() when !CONFIG_MEM_ALLOC_PROFILING_DEBUG - btrfs: split bios to the fs sector size boundary - btrfs: fix improper generation check in snapshot delete - btrfs: tree-checker: reject inline extent items with 0 ref count - [s390x] mm: Fix DirectMap accounting - drm/amdgpu/nbio7.0: fix IP version check - drm/amdgpu/gfx12: fix IP version check - drm/amdgpu/mmhub4.1: fix IP version check - fgraph: Still initialize idle shadow stacks when starting - Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet - tools: hv: Fix a complier warning in the fcopy uio daemon - [x86] hyperv: Fix hv tsc page based sched_clock for hibernation - [x86] KVM: x86: Play nice with protected guests in complete_hypercall_exit() - smb: client: fix TCP timers deadlock after rmmod - accel/ivpu: Fix general protection fault in ivpu_bo_list() - accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal() - tracing: Fix test_event_printk() to process entire print argument - tracing: Add missing helper functions in event pointer dereference check - tracing: Add "%s" check in test_event_printk() - tracing: Check "%s" dereference via the field and not the TP_printk format - io_uring: Fix registered ring file refcount leak - io_uring: check if iowq is killed before queuing (CVE-2024-56709) - NFS/pnfs: Fix a live lock between recalled layouts and layoutget - [x86] KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits - of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent() - of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() - ocfs2: fix the space leak in LA when releasing LA - nilfs2: fix buffer head leaks in calls to truncate_inode_pages() - nilfs2: prevent use of deleted inode - [amd64] udmabuf: fix racy memfd sealing check - [amd64] udmabuf: also check for F_SEAL_FUTURE_WRITE - of: property: fw_devlink: Do not use interrupt-parent directly - of: address: Preserve the flags portion on 1:1 dma-ranges mapping - of: Fix error path in of_parse_phandle_with_args_map() - of: Fix refcount leakage for OF node returned by __of_get_dma_parent() - ceph: give up on paths longer than PATH_MAX - ceph: validate snapdirname option length when mounting - ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() - ceph: fix memory leaks in __ceph_sync_read() - ceph: fix memory leak in ceph_direct_read_write() (CVE-2024-56710) - mm: use aligned address in clear_gigantic_page() - mm: use aligned address in copy_user_gigantic_page() - mm: shmem: fix ShmemHugePages at swapout - mm: convert partially_mapped set/clear operations to be atomic - epoll: Add synchronous wakeup support for ep_poll_callback https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.8 - media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg - ceph: allocate sparse_ext map only for sparse reads - [arm64] dts: broadcom: Fix L2 linesize for Raspberry Pi 5 - bpf: Fix bpf_get_smp_processor_id() on !CONFIG_SMP - fork: avoid inappropriate uprobe access to invalid mm - mm/vmstat: fix a W=1 clang compiler warning - smb: client: Deduplicate "select NETFS_SUPPORT" in Kconfig - smb: fix bytes written value in /proc/fs/cifs/Stats - tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress() - tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection - bpf: Check negative offsets in __bpf_skb_min_len() - nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work" - nfsd: restore callback functionality for NFSv4.0 - mtd: diskonchip: Cast an operand to prevent potential overflow - [arm64] phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP - phy: core: Fix an OF node refcount leakage in _of_phy_get() - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() - phy: core: Fix that API devm_phy_put() fails to release the phy - phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy - phy: usb: Toggle the PHY power during init - [arm64] phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM - [arm64] phy: rockchip: naneng-combphy: fix phy reset - ALSA: memalloc: prefer dma_mapping_error() over explicit address checking - [arm64,armhf] dmaengine: mv_xor: fix child node refcount handling in early exit - [amd64] dmaengine: dw: Select only supported masters for ACPI devices - dmaengine: amd: qdma: Remove using the private get and set dma_ops APIs - [arm64] dmaengine: fsl-edma: implement the cleanup path of fsl_edma3_attach_pd() - [amd64] ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP - [amd64] platform/chrome: cros_ec_lpc: fix product identity for early Framework Laptops - [amd64] ASoC: amd: ps: Fix for enabling DMIC on acp63 platform via _DSD entry - [amd64] ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 21QA and 21QB - ASoC: dt-bindings: realtek,rt5645: Fix CPVDD voltage comment - [amd64] ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 21Q6 and 21Q7 - [powerpc*] pseries/vas: Add close() callback in vas_vm_ops struct - power: supply: bq24190: Fix BQ24296 Vbus regulator support - stddef: make __struct_group() UAPI C++-friendly - tracing/kprobe: Make trace_kprobe's module callback called after jump_label update - watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04 - watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler - Revert "watchdog: s3c2410_wdt: use exynos_get_pmu_regmap_by_phandle() for PMU regs" - watchdog: mediatek: Add support for MT6735 TOPRGU/WDT - scsi: qla1280: Fix hw revision numbering for ISP1020/1040 - scsi: megaraid_sas: Fix for a potential deadlock - udf: Skip parent dir link count update if corrupted - udf: Verify inode link counts before performing rename - ALSA: ump: Don't open legacy substream for an inactive group - ALSA: ump: Indicate the inactive group in legacy substream names - ALSA: ump: Update legacy substream names upon FB info update - ALSA: hda/conexant: fix Z60MR100 startup pop issue - ALSA: sh: Use standard helper for buffer accesses - smb: server: Fix building with GCC 15 - regmap: Use correct format specifier for logging range errors - [x86] platform/x86: asus-nb-wmi: Ignore unknown event 0xCF - bpf: Zero index arg error string for dynptr and iter - spi: intel: Add Panther Lake SPI controller support - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time - scsi: mpi3mr: Synchronize access to ioctl data buffer - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs - scsi: mpi3mr: Start controller indexing from 0 - scsi: mpi3mr: Handling of fault code for insufficient power - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error - ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A - [arm64,armhf] spi: omap2-mcspi: Fix the IS_ERR() bug for devm_clk_get_optional_enabled() - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() - virtio-blk: don't keep queue frozen during system suspend - blk-mq: register cpuhp callback after hctx is added to xarray table - wifi: iwlwifi: be less noisy if the NIC is dead in S3 - ublk: detach gendisk from ublk device if add_disk() fails - drm/xe: Take PM ref in delayed snapshot capture worker - drm/xe: Move the coredump registration to the worker thread - objtool: Add bch2_trans_unlocked_error() to bcachefs noreturns - freezer, sched: Report frozen tasks as 'D' instead of 'R' - [x86] perf/x86/intel/uncore: Add Clearwater Forest support - tracing: Constify string literal data member in struct trace_event_call - tracing: Prevent bad count for tracing_cpumask_write - rtla/timerlat: Fix histogram ALL for zero samples - io_uring/sqpoll: fix sqpoll error handling races - i2c: microchip-core: actually use repeated sends - [x86] fred: Clear WFE in missing-ENDBRANCH #CPs - virt: tdx-guest: Just leak decrypted memory on unrecoverable errors - PCI/MSI: Handle lack of irqdomain gracefully - [x86] perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC - i2c: imx: add imx7d compatible string for applying erratum ERR007805 - i2c: microchip-core: fix "ghost" detections - [x86] perf/x86/intel/ds: Add PEBS format 6 - power: supply: cros_charge-control: add mutex for driver data - power: supply: cros_charge-control: allow start_threshold == end_threshold - power: supply: cros_charge-control: hide start threshold on v2 cmd - power: supply: gpio-charger: Fix set charge current limits - btrfs: fix race with memory mapped writes when activating swap file - btrfs: avoid monopolizing a core when activating a swap file - btrfs: fix swap file activation failure due to extents that used to be shared - btrfs: fix transaction atomicity bug when enabling simple quotas - btrfs: sysfs: fix direct super block member reads - btrfs: fix use-after-free when COWing tree bock and tracing is enabled - btrfs: check folio mapping after unlock in put_file_data() - btrfs: check folio mapping after unlock in relocate_one_folio() - Bluetooth: btusb: mediatek: move Bluetooth power off command position - Bluetooth: btusb: mediatek: add callback function in btusb_disconnect - Bluetooth: btusb: mediatek: add intf release flow when usb disconnect - Bluetooth: btusb: mediatek: change the conditions for ISO interface - ALSA: ump: Shut up truncated string warning - ALSA: sh: Fix wrong argument order for copy_from_iter() . [ Salvatore Bonaccorso ] * debian/salsa-ci.yml: Include run of .build-after-script from common pipeline. * nfsd: fix legacy client tracking initialization (Closes: #1087900) * drivers/nvme/host: Enable NVME_HOST_AUTH * drivers/nvme/target: Enable NVME_TARGET_AUTH * drivers/nvme/host: Enable NVME_TCP_TLS * drivers/nvme/target: Enable NVME_TARGET_TCP_TLS * debian/salsa-ci.yml: Reference .build-after-script from after_script section Checksums-Sha1: 85b6073c568410bce59742a2393689c2e23d38f7 204594 linux_6.12.8-1.dsc 4218ac7bd0d7c736a6e369e92f2f7c22a3496912 150933284 linux_6.12.8.orig.tar.xz 0707a121b88544861328a80a1032442bc5f6e753 1566816 linux_6.12.8-1.debian.tar.xz 2049068fe4b465200571c3feef35c834032d785d 7473 linux_6.12.8-1_source.buildinfo Checksums-Sha256: b3bb191e2a309680cd7990bc7c2d1df6016fcae41aa479fbecef12f69d74a616 204594 linux_6.12.8-1.dsc 3f258de1f486f02871255d100e8cdf0b9daec4d14994b9fe46184d984120f254 150933284 linux_6.12.8.orig.tar.xz e3ca49b6bc0e0db2844bd85c72f623e805a1c9dfe08489164a046bd38c845f13 1566816 linux_6.12.8-1.debian.tar.xz 0697e3d45e99b115c139ace08fc0aa31c557439c2de757f41d73db74ea18fc12 7473 linux_6.12.8-1_source.buildinfo Files: 058c74935487581b319197a053adb68f 204594 kernel optional linux_6.12.8-1.dsc 39b617f9d4fa65c13002a3254c8afacc 150933284 kernel optional linux_6.12.8.orig.tar.xz 51749e08d75bfad2ca09b84ce168bf83 1566816 kernel optional linux_6.12.8-1.debian.tar.xz 37eb37bab09f189b3484e03251b0a4b8 7473 kernel optional linux_6.12.8-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmd2uzdfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89ErZgP/RnXW6NIzDUgAXE030sbpJhzIyyPAPPy mQl19Ak6o9YKMA+2cuuY7nOHnZGI4lhaqYKBa5taEifnaBB0xNoeSBcekkT6owWh CboVPN/QRzui7V2Yr+N2RNsc++GFeOHzl8f3/8cSi4CwUZ35GsthMTWuE3J5sNDN qkUlpIEusL0jVtllnx9MOU0Mj9/779FeVnDlX8Wt5INFXyxzQpMYucQAHQaSmqHD suNp3iFm63L/KtryUQdyJarC3Zc3wtxJeUKcJ7wbzTqBThqbwDBVipbcuuqZIGRc XrcGj8qdrdLj0geEtObsglyzgnQikb6A05K1XYFq3Z8Xj68xziTLCM5/jjBAqisb fwA9JeZc23vQGWTI9vXhKk/W3cblF1A9K3n4uE5e20ykOI5v3jZ1nWniW1EfYlt1 RgGpnSC4Au2XtebTDx679NVX/vutcDbcQMikgzvdWTFNAOpAuW78mc+aBhRSesH4 ziUZT9IWLXb+hnsSULgzNYV0nGrMsrrxfbH614iawurGk3xQVUKssqPWpGqJsBj+ cVaGaHgyca4Etvlk5mT2Qj5Bxi/ku07E+bUv0KC4T0gJexEuNIMeaGzKzCSCtwKB 86on9uQsoYTL/bDfXSFfdkO/BonMIHzLiv/PtD6ee2HOgxdX5tmQQHWUkyjeE6Is f07RwkYHhjRs =NJwS -----END PGP SIGNATURE-----