-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 25 Apr 2025 17:07:45 +0200
Source: linux-signed-amd64
Architecture: source
Version: 6.12.25+1
Distribution: sid
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
linux-signed-amd64 (6.12.25+1) unstable; urgency=medium
.
* Sign kernel from linux 6.12.25-1
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.23
- watch_queue: fix pipe accounting mismatch
- [x86] mm/pat: cpa-test: fix length for CPA_ARRAY test
- cpufreq: scpi: compare kHz instead of Hz
- sched: Cancel the slice protection of the idle entity
- sched/eevdf: Force propagating min_slice of cfs_rq when {en,de}queue tasks
- cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
- [amd64] EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald
Rapids
- [x86] fpu: Fix guest FPU state buffer allocation size
- [x86] fpu: Avoid copying dynamic FP state from init_task in
arch_dup_task_struct()
- [x86] platform: Only allow CONFIG_EISA for 32-bit
- [x86] sev: Add missing RIP_REL_REF() invocations during sme_enable()
- lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock
- PM: sleep: Adjust check before setting power.must_resume
- cpufreq: tegra194: Allow building for Tegra234
- [riscv64] KVM: Disable the kernel perf counter during configure
- watchdog/hardlockup/perf: Fix perf_event memory leak
- selinux: Chain up tool resolving errors in install_policy.sh
- [amd64] EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
- [amd64] EDAC/ie31200: Fix the DIMM size mask for several SoCs
- [amd64] EDAC/ie31200: Fix the error path order of ie31200_init()
- [x86] resctrl: Fix allocation of cleanest CLOSID on platforms with no
monitors
- thermal: int340x: Add NULL check for adev
- PM: sleep: Fix handling devices with direct_complete set on errors
- lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
- perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
- [x86] traps: Make exc_double_fault() consistently noreturn
- [x86] fpu/xstate: Fix inconsistencies in guest FPU xfeatures
- [x86] entry: Add __init to ia32_emulation_override_cmdline()
- [arm64] regulator: pca9450: Fix enable register for LDO5
- [arm64,armhf] media: verisilicon: HEVC: Initialize start_bit field
- [x86] platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: Make symbol
static
- [x86] platform/x86: dell-uart-backlight: Make dell_uart_bl_serdev_driver
static
- [x86] platform/x86: dell-ddv: Fix temperature calculation
- [amd64] ASoC: cs35l41: check the return value from spi_setup()
- dt-bindings: vendor-prefixes: add GOcontroll
- ALSA: hda/realtek: Always honor no_shutup_pins
- ALSA: timer: Don't take register_mutex with copy_from/to_user()
- [arm64] drm/bridge: ti-sn65dsi86: Fix multiple instances
- drm/dp_mst: Fix drm RAD print
- [arm64] drm/bridge: it6505: fix HDCP V match check is not performed
correctly
- [arm64] gpu: cdns-mhdp8546: fix call balance of mhdp->clk handling
routines
- drm/amdgpu: refine smu send msg debug log format
- drm/amdgpu/umsch: fix ucode check
- PCI: Use downstream bridges for distributing resources
- PCI: Remove add_align overwrite unrelated to size0
- [arm64] drm/mediatek: mtk_hdmi: Unregister audio platform device on
failure
- [arm64] drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
- PCI/ASPM: Fix link state exit during switch upstream function removal
- PCI/ACS: Fix 'pci=config_acs=' parameter
- [arm64] drm/amd/display: fix an indent issue in DML21
- [arm64] drm/msm/dpu: don't use active in atomic_check()
- [arm64] drm/msm/dsi/phy: Program clock inverters in correct register
- [arm64] drm/msm/dsi: Use existing per-interface slice count in DSC timing
- [arm64] drm/msm/dsi: Set PHY usescase (and mode) before registering DSI
host
- [arm64] PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without
data payload
- [arm64] PCI: brcmstb: Set generation limit before PCIe link up
- [arm64] PCI: brcmstb: Use internal register to change link capability
- [arm64] PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
- [arm64] PCI: brcmstb: Fix potential premature regulator disabling
- PCI/portdrv: Only disable pciehp interrupts early when needed
- PCI: Avoid reset when disabled via sysfs
- drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
- [arm64] drm/msm/a6xx: Fix a6xx indexed-regs in devcoreduump
- [powerpc*] crypto: powerpc: Mark ghashp8-ppc.o as an
OBJECT_FILES_NON_STANDARD
- [powerpc*] kexec: fix physical address calculation in clear_utlb_entry()
- PCI: Remove stray put_device() in pci_register_host_bridge()
- [arm64] drm/mediatek: Fix config_updating flag never false when no mbox
channel
- [arm64] drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
- [arm64] drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
- drm/amd/display: avoid NPD when ASIC does not support DMUB
- [arm64] PCI: dwc: ep: Return -ENOMEM for allocation failures
- PCI: Fix BAR resizing when VF BARs are assigned
- PCI: pciehp: Don't enable HPIE when resuming in poll mode
- mdacon: rework dependency list
- fbdev: sm501fb: Add some geometry checks.
- [amd64] crypto: iaa - Test the correct request flag
- [amd64] crypto: qat - set parity error mask for qat_420xx
- crypto: bpf - Add MODULE_DESCRIPTION for skcipher
- clk: amlogic: gxbb: drop incorrect flag on 32k clock
- RDMA/mlx5: Fix page_size variable overflow
- remoteproc: core: Clear table_sz when rproc_shutdown
- of: property: Increase NR_FWNODE_REFERENCE_ARGS
- pinctrl: renesas: rzg2l: Suppress binding attributes
- remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
- libbpf: Fix hypothetical STT_SECTION extern NULL deref case
- [x86] mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()
- [arm64] clk: renesas: r8a08g045: Check the source of the CPU PLL settings
- remoteproc: qcom: pas: add minidump_id to SC7280 WPSS
- [arm64] clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
- [s390x] Remove ioremap_wt() and pgprot_writethrough()
- RDMA/mana_ib: Ensure variable err is initialized
- remoteproc: qcom_q6v5_pas: Use resource with CX PD for MSM8226
- [arm64] clk: qcom: gcc-x1e80100: Unregister
GCC_GPU_CFG_AHB_CLK/GCC_DISP_XO_CLK
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- lib: 842: Improve error handling in sw842_compress()
- RDMA/mlx5: Fix MR cache initialization error flow
- [arm64] clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
- RDMA/core: Don't expose hw_counters outside of init net namespace
- RDMA/mlx5: Fix calculation of total invalidated pages
- RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
- remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
- power: supply: bq27xxx_battery: do not update cached flags prematurely
- crypto: api - Fix larval relookup type and mask
- IB/mad: Check available slots before posting receive WRs
- [arm64,armhf] pinctrl: tegra: Set SFIO mode to Mux Register
- [arm64] clk: amlogic: g12b: fix cluster A parent data
- [arm64] clk: amlogic: gxbb: drop non existing 32k clock parent
- [amd64] crypto: qat - remove access to parity register for QAT GEN4
- [arm64] clk: clk-imx8mp-audiomix: fix dsp/ocram_a clock parents
- [arm64] clk: amlogic: g12a: fix mmc A peripheral clock
- [x86] entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
- power: supply: max77693: Fix wrong conversion of charge input threshold
value
- crypto: nx - Fix uninitialised hv_nxc on error
- bpf: Fix array bounds error with may_goto
- RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
- [arm64] pinctrl: renesas: rzv2m: Fix missing of_node_put() call
- [mips64el] mfd: sm501: Switch to BIT() to mitigate integer overflows
- leds: Fix LED_OFF brightness race
- [x86] dumpstack: Fix inaccurate unwinding from exception stacks due to
misplaced assignment
- RDMA/core: Fix use-after-free when rename device name
- [amd64] pinctrl: intel: Fix wrong bypass assignment in
intel_pinctrl_probe_pwm()
- perf stat: Fix find_stat for mixed legacy/non-legacy events
- perf: Always feature test reallocarray
- w1: fix NULL pointer dereference in probe
- fs/ntfs3: Update inode->i_mapping->a_ops on compression state
- [arm64] phy: phy-rockchip-samsung-hdptx: Don't use dt aliases to determine
phy-id
- isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
- soundwire: slave: fix an OF node reference leak in soundwire slave device
- perf report: Switch data file correctly in TUI
- [arm64,armhf] coresight: catu: Fix number of pages while using 64k pages
- vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- [arm64,armhf] coresight-etm4x: add isb() before reading the TRCSTATR
- perf pmu: Don't double count common sysfs and json events
- [x86] tools/x86: Fix linux/unaligned.h include path in lib/insn.c
- perf build: Fix in-tree build due to symbolic link
- ucsi_ccg: Don't show failed to get FW build information error
- iio: accel: mma8452: Ensure error return on failure to matching
oversampling ratio
- iio: accel: msa311: Fix failure to release runtime pm if direct mode claim
fails.
- iio: backend: make sure to NULL terminate stack buffer
- perf bench: Fix perf bench syscall loop count
- usb: xhci: correct debug message page size calculation
- fs/ntfs3: Fix a couple integer overflows on 32bit systems
- fs/ntfs3: Prevent integer overflow in hdr_first_de()
- [arm64] dmaengine: fsl-edma: cleanup chan after
dma_async_device_unregister
- [arm64] dmaengine: fsl-edma: free irq correctly in remove path
- iio: adc: ad4130: Fix comparison of channel setups
- iio: adc: ad7124: Fix comparison of channel configs
- iio: adc: ad7173: Fix comparison of channel configs
- iio: adc: ad7768-1: set MOSI idle state to prevent accidental reset
- iio: light: Add check for array bounds in veml6075_read_int_time_ms
- perf debug: Avoid stack overflow in recursive error message
- perf evlist: Add success path to evlist__create_syswide_maps
- perf units: Fix insufficient array space
- kernel/events/uprobes: handle device-exclusive entries correctly in
__replace_page()
- kexec: initialize ELF lowest address to ULONG_MAX
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- NFSv4: Don't trigger uneccessary scans for return-on-close delegations
- NFSv4: Avoid unnecessary scans of filesystems for returning delegations
- NFSv4: Avoid unnecessary scans of filesystems for expired delegations
- NFSv4: Avoid unnecessary scans of filesystems for delayed delegations
- NFS: fix open_owner_id_maxsz and related fields.
- fuse: fix dax truncate/punch_hole fault path
- i3c: master: svc: Fix missing the IBI rules
- perf python: Fixup description of sample.id event member
- perf python: Decrement the refcount of just created event on failure
- perf python: Don't keep a raw_data pointer to consumed ring buffer space
- perf python: Check if there is space to copy all the event
- perf dso: fix dso__is_kallsyms() check
- perf: intel-tpebs: Fix incorrect usage of zfree()
- [arm*] staging: vchiq_arm: Register debugfs after cdev
- [arm*] staging: vchiq_arm: Fix possible NPR of keep-alive thread
- tty: n_tty: use uint for space returned by tty_write_room()
- perf vendor events arm64 AmpereOneX: Fix frontend_bound calculation
- fs/procfs: fix the comment above proc_pid_wchan()
- perf tools: annotate asm_pure_loop.S
- perf bpf-filter: Fix a parsing error with comma
- thermal: core: Remove duplicate struct declaration
- objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show()
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- NFS: Shut down the nfs_client only after all the superblocks
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- exfat: fix the infinite loop in exfat_find_last_cluster()
- exfat: fix missing shutdown check
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- rndis_host: Flag RNDIS modems as WWAN devices
- ksmbd: use aead_request_free to match aead_request_alloc
- ksmbd: fix multichannel connection failure
- ksmbd: fix r_count dec/increment mismatch
- net/mlx5e: SHAMPO, Make reserved size independent of page size
- ring-buffer: Fix bytes_dropped calculation issue
- objtool: Fix segfault in ignore_unreachable_insn()
- ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are
invalid
- net: phy: broadcom: Correct BCM5221 PHY model detection
- objtool: Fix verbose disassembly if CROSS_COMPILE isn't set
- sched/smt: Always inline sched_smt_active()
- context_tracking: Always inline ct_{nmi,irq}_{enter,exit}()
- rcu-tasks: Always inline rcu_irq_work_resched()
- nfs: Add missing release on error in nfs_lock_and_join_requests()
- wifi: mac80211: Cleanup sta TXQs on flush
- wifi: mac80211: remove debugfs dir for virtual monitor
- wifi: iwlwifi: fw: allocate chained SG tables for dump
- wifi: iwlwifi: mvm: use the right version of the rate API
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvme-pci: clean up CMBMSC when registering CMB fails
- nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
- wifi: brcmfmac: keep power during suspend if board requires it
- affs: generate OFS sequence numbers starting at 1
- affs: don't write overlarge OFS data block size fields
- ALSA: hda/realtek: Fix Asus Z13 2025 audio
- ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0
- perf/core: Fix perf_pmu_register() vs. perf_init_event()
- smb: common: change the data type of num_aces to le16
- cifs: fix incorrect validation for num_aces field of smb_acl
- [x86] platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go
4 tablet
- [x86] platform/x86/intel/vsec: Add Diamond Rapids support
- HID: i2c-hid: improve i2c_hid_get_report error message
- [amd64] platform/x86/amd/pmf: Propagate PMF-TA return codes
- [amd64] platform/x86/amd/pmf: Update PMF Driver for Compatibility with new
PMF-TA
- exfat: add a check for invalid data size
- ALSA: hda/realtek: Add support for ASUS ROG Strix G814 Laptop using
CS35L41 HDA
- ALSA: hda/realtek: Add support for ASUS ROG Strix GA603 Laptops using
CS35L41 HDA
- ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using
CS35L41 HDA
- ALSA: hda/realtek: Add support for various ASUS Laptops using CS35L41 HDA
- ALSA: hda/realtek: Add support for ASUS B3405 and B3605 Laptops using
CS35L41 HDA
- ALSA: hda/realtek: Add support for ASUS B5405 and B5605 Laptops using
CS35L41 HDA
- ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using
CS35L41 HDA
- sched/deadline: Use online cpus for validating runtime
- [x86] hyperv/vtl: Stop kernel from probing VTL0 low memory
- [amd64] ASoC: rt1320: set wake_capable = 0 explicitly
- wifi: mac80211: flush the station before moving it to UN-AUTHORIZED state
- wifi: mac80211: fix SA Query processing in MLO
- locking/semaphore: Use wake_q to wake up processes outside lock critical
section
- [x86] hyperv: Fix output argument to hypercall that changes page
visibility
- [x86] sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
- nvme-pci: fix stuck reset on concurrent DPC and HP
- drm/amd: Keep display off while going into S4
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart()
- ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
- can: statistics: use atomic access in hot path
- memory: omap-gpmc: drop no compatible check
- hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
- netfs: Fix netfs_unbuffered_read() to return ssize_t rather than int
- spufs: fix a leak on spufs_new_file() failure
- spufs: fix gang directory lifetimes
- spufs: fix a leak in spufs_create_context()
- fs/9p: fix NULL pointer dereference on mkdir
- [riscv64] ftrace: Add parentheses in macro definitions of make_call_t0 and
make_call_ra
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- ntb: intel: Fix using link status DB's
- firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success
- ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA
- [riscv64] errata: Use medany for relocatable builds
- [x86] uaccess: Improve performance by aligning writes to 8 bytes in
copy_user_generic(), on non-FSRM/ERMS CPUs
- ublk: make sure ubq->canceling is set when queue is frozen
- [s390x] entry: Fix setting _CIF_MCCK_GUEST with lowcore relocation
- [riscv64] Fix hugetlb retrieval of number of ptes in case of !present pte
- [riscv64] kexec_file: Handle R_RISCV_64 in purgatory relocator
- [riscv64] purgatory: 4B align purgatory_start
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer
- [arm*] spi: bcm2835: Do not call gpiod_put() on invalid descriptor
- [arm*] spi: bcm2835: Restore native CS probing when pinctrl-bcm2835 is
absent
- e1000e: change k1 configuration on MTP and later platforms
- idpf: fix adapter NULL pointer dereference on reboot
- netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets
only
- netfilter: nf_tables: don't unregister hook when table is dormant
- netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
- net_sched: skbprio: Remove overly strict queue assertions
- sctp: add mutual exclusion in proc_sctp_do_udp_port()
- [arm64,armhf] net: mvpp2: Prevent parser TCAM memory corruption
- udp: Fix multiple wraparounds of sk->sk_rmem_alloc.
- udp: Fix memory accounting leak.
- vsock: avoid timeout during connect() if the socket is closing
- tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
- net: decrease cached dst counters in dst_release
- netfilter: nft_tunnel: fix geneve_opt type confusion addition
- ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
- net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy
- net: fix geneve_opt length integer overflow
- ipv6: Start path selection from the first nexthop
- ipv6: Do not consider link down nexthops in path selection
- [powerpc*] arcnet: Add NULL check in com20020pci_probe()
- [powerpc*] net: ibmveth: make veth_pool_store stop hanging
- kbuild: deb-pkg: don't set KBUILD_BUILD_VERSION unconditionally
- drm/amdgpu/gfx11: fix num_mec
- drm/amdgpu/gfx12: fix num_mec
- perf/core: Fix child_total_time_enabled accounting bug at task exit
- tracing: Switch trace_events_hist.c code over to use guard()
- tracing/hist: Add poll(POLLIN) support on hist file
- tracing/hist: Support POLLPRI event for poll on histogram
- tracing: Correct the refcount if the hist/hist_debug file fails to open
- cgroup/rstat: Tracking cgroup-level niced CPU time
- cgroup/rstat: Fix forceidle time in cpu.stat
- tty: serial: fsl_lpuart: Use u32 and u8 for register variables
- tty: serial: fsl_lpuart: use port struct directly to simply code
- tty: serial: fsl_lpuart: Fix unused variable 'sport' build warning
- tty: serial: lpuart: only disable CTS instead of overwriting the whole
UARTMODIR register
- wifi: mac80211: Fix sparse warning for monitor_sdata
- usbnet:fix NPE during rx_complete
- [x86] hyperv: Fix check of return value from snp_set_vmsa()
- [x86] KVM: x86: block KVM_CAP_SYNC_REGS if guest state is protected
- [x86] microcode/AMD: Fix __apply_microcode_amd()'s return value
- [x86] mce: use is_copy_from_user() to determine copy-from-user context
- [x86] tdx: Fix arch_safe_halt() execution for TDX VMs
- [x86] ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO
event-handlers
- [x86] platform/x86: thinkpad_acpi: disable ACPI fan access for T495* and
E560
- [x86] platform/x86: ISST: Correct command storage data length
- ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
- [x86] perf/x86/intel: Apply static call for drain_pebs
- [x86] perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read
- [x86] uprobes/x86: Harden uretprobe syscall trampoline check
- idpf: Don't hard code napi_struct size
- [x86] Kconfig: Add cmpxchg8b support back to Geode CPUs
- [x86] tsc: Always save/restore TSC sched_clock() on suspend/resume
- [x86] mm: Fix flush_tlb_range() when used for zapping normal PMDs
- wifi: mt76: mt7925: remove unused acpi function for clc
- acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
- ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
- [armel,armhf] 9444/1: add KEEP() keyword to ARM_VECTORS
- media: omap3isp: Handle ARM dma_iommu_mapping
- Remove unnecessary firmware version check for gc v9_4_2
- mmc: omap: Fix memory leak in mmc_omap_new_slot
- mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
- mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD
- [x86] KVM: SVM: Don't change target vCPU state on AP Creation VMGEXIT
error
- ksmbd: add bounds check for durable handle context
- ksmbd: add bounds check for create lease context
- ksmbd: fix use-after-free in ksmbd_sessions_deregister()
- ksmbd: fix session use-after-free in multichannel connection
- ksmbd: fix overflow in dacloffset bounds check
- ksmbd: validate zero num_subauth before sub_auth is accessed
- ksmbd: fix null pointer dereference in alloc_preauth_hash()
- exfat: fix random stack corruption after get_block
- exfat: fix potential wrong error return from get_block
- tracing: Fix use-after-free in print_graph_function_flags during tracer
switching
- tracing: Ensure module defining synth event cannot be unloaded while
tracing
- tracing: Fix synth event printk format for str fields
- tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
- mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAs
- [arm64] Don't call NULL in do_compat_alignment_fixup()
- wifi: mt76: mt7921: fix kernel panic due to null pointer dereference
- ext4: don't over-report free space or inodes in statvfs
- ext4: fix OOB read when checking dotdot dir
- jfs: fix slab-out-of-bounds read in ea_get()
- jfs: add index corruption check to DT_GETPAGE()
- mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
- exec: fix the racy usage of fs_struct->in_exec
- media: vimc: skip .s_stream() for stopped entities
- media: streamzap: fix race between device disconnection and urb callback
- nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid()
- nfsd: put dl_stid if fail to queue dl_recall
- nfsd: fix management of listener transports
- NFSD: nfsd_unlink() clobbers non-zero status returned from
fh_fill_pre_attrs()
- NFSD: Never return NFS4ERR_FILE_OPEN when removing a directory
- NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
- [armel,armhf] 9443/1: Require linker to support KEEP within OVERLAY for
DCE
- tracing: Do not use PERF enums when perf is not defined
- [x86] platform/x86/amd/pmf: fix cleanup in amd_pmf_init_smart_pc()
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.24
- [amd64] ASoC: Intel: adl: add 2xrt1316 audio configuration
- cgroup/cpuset: Fix incorrect isolated_cpus update in
update_parent_effective_cpumask()
- cgroup/cpuset: Fix error handling in remote_partition_disable()
- cgroup/cpuset: Revert "Allow suppression of sched domain rebuild in
update_cpumasks_hier()"
- cgroup/cpuset: Enforce at most one rebuild_sched_domains_locked() call per
operation
- cgroup/cpuset: Further optimize code if CONFIG_CPUSETS_V1 not set
- cgroup/cpuset: Fix race between newly created partition and dying one
- gpiolib: of: Fix the choice for Ingenic NAND quirk
- ublk: refactor recovery configuration flag helpers
- ublk: fix handling recovery & reissue in ublk_abort_queue()
- [amd64] drm/i915: Disable RPG during live selftest
- [x86] acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI
- drm/xe/hw_engine: define sysfs_ops on all directories
- ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
- objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret()
- tipc: fix memory leak in tipc_link_xmit
- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
- net: tls: explicitly disallow disconnect
- tc: Ensure we have enough buffer space when sending filter netlink
notifications
- net: ethtool: Don't call .cleanup_data when prepare_data fails
- net: libwx: handle page_pool_dev_alloc_pages error
- ata: sata_sx4: Add error handling in pdc20621_i2c_read()
- drm/i915/huc: Fix fence not released on early probe errors
- nvmet-fcloop: swap list_add_tail arguments
- net_sched: sch_sfq: use a temporary work area for validating configuration
- net_sched: sch_sfq: move the limit validation
- smb: client: fix UAF in decryption with multichannel
- net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend()
- net: phy: allow MDIO bus PM ops to start/stop state machine for
phylink-controlled PHY
- ipv6: Align behavior across nexthops during path selection
- net: ppp: Add bound checking for skb data on ppp_sync_txmung
- nft_set_pipapo: fix incorrect avx2 match of 5th field octet
- [arm64] iommu/mediatek: Fix NULL pointer deference in
mtk_iommu_device_group
- perf/core: Add aux_pause, aux_resume, aux_start_paused
- perf/core: Simplify the perf_event_alloc() error path
- perf: Fix hang while freeing sigtrap event
- fs: consistently deref the files table with rcu_dereference_raw()
- umount: Allow superblock owners to force umount
- pm: cpupower: bench: Prevent NULL dereference on malloc failure
- [x86] mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW
- [x86] percpu: Disable named address spaces for UBSAN_BOOL with KASAN for
GCC < 14.2
- [x86] ia32: Leave NULL selector values 0~3 unchanged
- [x86] cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD
when running in a virtual machine
- [arm*] perf: arm_pmu: Don't disable counter in armpmu_add()
- perf/dwc_pcie: fix some unreleased resources
- PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
- Flush console log from kernel_power_off()
- [arm64] cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
- xen/mcelog: Add __nonstring annotations for unterminated strings
- [amd64] platform/chrome: cros_ec_lpc: Match on Framework ACPI device
- [amd64,arm64] ASoC: SOF: topology: Use krealloc_array() to replace
krealloc()
- HID: pidff: Convert infinite length from Linux API to PID standard
- HID: pidff: Do not send effect envelope if it's empty
- HID: pidff: Add MISSING_DELAY quirk and its detection
- HID: pidff: Add MISSING_PBO quirk and its detection
- HID: pidff: Add PERMISSIVE_CONTROL quirk
- HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol
- HID: pidff: Add FIX_WHEEL_DIRECTION quirk
- HID: Add hid-universal-pidff driver and supported device ids
- HID: pidff: Add PERIODIC_SINE_ONLY quirk
- HID: pidff: Fix null pointer dereference in pidff_find_fields
- [amd64] ASoC: amd: ps: use macro for ACP6.3 pci revision id
- ALSA: hda: intel: Fix Optimus when GPU has no sound
- ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist
- [arm64] ASoC: fsl_audmix: register card device depends on 'dais' property
- media: uvcvideo: Add quirk for Actions UVC05
- mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves
- ALSA: usb-audio: Fix CME quirk for UF series keyboards
- [amd64] ASoC: amd: Add DMI quirk for ACP6X mic support
- [amd64] ASoC: amd: yc: update quirk data for new Lenovo model
- wifi: ath11k: Fix DMA buffer allocation to resolve SWIOTLB issues
- wifi: ath11k: fix memory leak in ath11k_xxx_remove()
- wifi: ath12k: fix memory leak in ath12k_pci_remove()
- wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
- ata: libata-core: Add 'external' to the libata.force kernel parameter
- scsi: mpi3mr: Avoid reply queue full condition
- scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
- net: page_pool: don't cast mp param to devmem
- f2fs: don't retry IO for corrupted data scenario
- wifi: mac80211: add strict mode disabling workarounds
- wifi: mac80211: ensure sdata->work is canceled before initialized.
- scsi: target: spc: Fix RSOC parameter data header size
- net: usb: asix_devices: add FiberGecko DeviceID
- page_pool: avoid infinite loop to schedule delayed worker
- [arm64,armhf] can: flexcan: Add quirk to handle separate interrupt lines
for mailboxes
- [arm64,armhf] can: flexcan: add NXP S32G2/S32G3 SoC support
- jfs: Fix uninit-value access of imap allocated in the diMount() function
- fs/jfs: cast inactags to s64 to prevent potential overflow
- fs/jfs: Prevent integer overflow in AG size calculation
- jfs: Prevent copying of nlink with value 0 from disk inode
- jfs: add sanity check for agwidth in dbMount
- ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
- net: sfp: add quirk for 2.5G OEM BX SFP
- wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
- f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
- net: sfp: add quirk for FS SFP-10GM-T copper SFP+ module
- ahci: add PCI ID for Marvell 88SE9215 SATA Controller
- ext4: protect ext4_release_dquot against freezing
- Revert "f2fs: rebuild nat_bits during umount"
- ext4: ignore xattrs past end
- cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk
- scsi: st: Fix array overflow in st_setup()
- ahci: Marvell 88SE9215 controllers prefer DMA for ATAPI
- btrfs: harden block_group::bg_list against list_del() races
- wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
- net: vlan: don't propagate flags on open
- tracing: fix return value in __ftrace_event_enable_disable for
TRACE_REG_UNREGISTER
- Bluetooth: btintel_pcie: Add device id of Whale Peak
- Bluetooth: hci_uart: fix race during initialization
- Bluetooth: btusb: Add 2 HWIDs for MT7922
- Bluetooth: hci_qca: use the power sequencer for wcn6750
- Bluetooth: qca: simplify WCN399x NVM loading
- Bluetooth: Add quirk for broken READ_VOICE_SETTING
- Bluetooth: Add quirk for broken READ_PAGE_SCAN_TYPE
- drm: allow encoder mode_set even when connectors change for crtc
- drm/xe/bmg: Add new PCI IDs
- drm/xe/vf: Don't try to trigger a full GT reset if VF
- drm/amd/display: Update Cursor request mode to the beginning prefetch
always
- drm/amdgpu: Unlocked unmap only clear page table leaves
- drm: panel-orientation-quirks: Add support for AYANEO 2S
- drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB
- drm: panel-orientation-quirks: Add quirk for AYA NEO Slide
- drm: panel-orientation-quirks: Add new quirk for GPD Win 2
- drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel)
- drm/debugfs: fix printk format for bridge index
- drm/bridge: panel: forbid initializing a panel with unknown connector type
- drm/amd/display: stop DML2 from removing pipes based on planes
- drivers: base: devres: Allow to release group on device release
- drm/amdkfd: clamp queue size to minimum
- drm/amdkfd: Fix mode1 reset crash issue
- drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
- drm/amdkfd: debugfs hang_hws skip GPU with MES
- drm/xe/xelp: Move Wa_16011163337 from tunings to workarounds
- [arm64] drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data
- [arm64] drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
- [arm64] PCI: Add Rockchip Vendor ID
- drm/amdgpu: handle amdgpu_cgs_create_device() errors in
amd_powerplay_create()
- PCI: Enable Configuration RRS SV early
- drm/amdgpu: Fix the race condition for draining retry fault
- PCI: Check BAR index for validity
- [amd64] PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
- drm/amdgpu: grab an additional reference on the gang fence v2
- fbdev: omapfb: Add 'plane' value check
- tracing: probe-events: Add comments about entry data storing code
- tpm, tpm_tis: Workaround failed command reception on Infineon devices
- tpm: End any active auth session before shutdown
- [arm64] pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
- erofs: set error to bio if file-backed IO fails
- bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
- ext4: don't treat fhandle lookup of ea_inode as FS corruption
- [s390x] pci: Fix s390_mmio_read/write syscall page fault handling
- HID: pidff: Clamp PERIODIC effect period to device's logical range
- HID: pidff: Stop all effects before enabling actuators
- HID: pidff: Completely rework and fix pidff_reset function
- HID: pidff: Simplify pidff_upload_effect function
- HID: pidff: Define values used in pidff_find_special_fields
- HID: pidff: Rescale time values to match field units
- HID: pidff: Factor out code for setting gain
- HID: pidff: Move all hid-pidff definitions to a dedicated header
- HID: pidff: Simplify pidff_rescale_signed
- HID: pidff: Use macros instead of hardcoded min/max values for shorts
- HID: pidff: Factor out pool report fetch and remove excess declaration
- HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX
- HID: hid-universal-pidff: Add Asetek wheelbases support
- HID: pidff: Comment and code style update
- HID: pidff: Support device error response from PID_BLOCK_LOAD
- HID: pidff: Remove redundant call to pidff_find_special_keys
- HID: pidff: Rename two functions to align them with naming convention
- HID: pidff: Clamp effect playback LOOP_COUNT value
- HID: pidff: Compute INFINITE value instead of using hardcoded 0xffff
- HID: pidff: Fix 90 degrees direction name North -> East
- HID: pidff: Fix set_device_control()
- dt-bindings: media: st,stmipid02: correct lane-polarities maxItems
- [arm64] media: mediatek: vcodec: Fix a resource leak related to the scp
device in FW initialization
- [arm64] media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
- media: uapi: rkisp1-config: Fix typo in extensible params example
- [amd64] media: intel/ipu6: set the dev_parent of video device to pdev
- [arm64] media: venus: hfi: add a check to handle OOB in sfr region
- [arm64] media: venus: hfi: add check to handle incorrect queue size
- media: siano: Fix error handling in smsdvb_module_init()
- [arm64,armhf] media: rockchip: rga: fix rga offset lookup
- xenfs/xensyms: respect hypervisor's "next" indication
- [arm64] cputype: Add MIDR_CORTEX_A76AE
- [arm64] errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
- [arm64] errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
- [arm64] errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
- [arm64] KVM: arm64: Tear down vGIC on failed vCPU creation
- spi: cadence-qspi: Fix probe on AM62A LP SK
- tpm, tpm_tis: Fix timeout handling when waiting for TPM status
- [amd64] accel/ivpu: Fix PM related deadlocks in MS IOCTLs
- media: streamzap: prevent processing IR data on URB failure
- [amd64] media: hi556: Fix memory leak (on error) in hi556_check_hwcfg()
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
- Revert "media: imx214: Fix the error handling in imx214_probe()"
- [amd64] media: i2c: ov7251: Set enable GPIO low in probe
- [amd64] media: i2c: ov7251: Introduce 1 ms delay between regulators and en
GPIO
- [arm64] media: venus: hfi_parser: add check to avoid out of bound access
- [arm64] media: venus: hfi_parser: refactor hfi packet parsing logic
- mptcp: sockopt: fix getting IPV6_V6ONLY
- mptcp: sockopt: fix getting freebind & transparent
- [arm64,armhf] net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum
for 6320 family
- [arm64,armhf] net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
- wifi: mt76: Add check for devm_kstrdup()
- wifi: mac80211: fix integer overflow in hwmp_route_info_get()
- wifi: mt76: mt7925: ensure wow pattern command align fw format
- wifi: mt76: mt7925: fix country count limitation for CLC
- wifi: mt76: mt7925: fix the wrong link_idx when a p2p_device is present
- wifi: mt76: mt7925: fix the wrong simultaneous cap for MLO
- io_uring/net: fix accept multishot handling
- io_uring/net: fix io_req_post_cqe abuse by send bundle
- io_uring/kbuf: reject zero sized provided buffers
- [arm64] ASoC: q6apm: add q6apm_get_hw_pointer helper
- [arm64] ASoC: q6apm-dai: schedule all available frames to avoid dsp
under-runs
- [arm64] ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
- [arm64] ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment.
- [arm64] ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns.
- [arm64] ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
- ALSA: hda/realtek: Enable Mute LED on HP OMEN 16 Laptop xd000xx
- [amd64] accel/ivpu: Fix warning in ivpu_ipc_send_receive_internal()
- [amd64] accel/ivpu: Fix deadlock in ivpu_ms_cleanup()
- bus: mhi: host: Fix race between unprepare and queue_buf
- ext4: fix off-by-one error in do_split
- f2fs: fix to avoid atomicity corruption of atomic file
- vdpa/mlx5: Fix oversized null mkey longer than 32bit
- udf: Fix inode_getblk() return value
- tpm: do not start chip while suspended
- svcrdma: do not unregister device for listeners
- [amd64,armhf] soc: samsung: exynos-chipid: Add NULL pointer check in
exynos_chipid_probe()
- smb311 client: fix missing tcon check when mounting with linux/posix
extensions
- ima: limit the number of open-writers integrity violations
- ima: limit the number of ToMToU integrity violations
- i3c: master: svc: Use readsb helper for reading MDB
- i3c: Add NULL pointer check in i3c_master_queue_ibi()
- jbd2: remove wrong sb->s_sequence check
- kbuild: exclude .rodata.(cst|str)* when building ranges
- [arm64] leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs
- [arm64] leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res
PWMs
- [armhf] mfd: ene-kb3930: Fix a potential NULL pointer dereference
- locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
- lib: scatterlist: fix sg_split_phys to preserve original scatterlist
offsets
- mptcp: fix NULL pointer in can_accept_new_subflow
- mptcp: only inc MPJoinAckHMacFailure for HMAC failures
- mtd: inftlcore: Add error check for inftl_read_oob()
- mtd: rawnand: Add status chack in r852_ready()
- [arm64] mops: Do not dereference src reg for a set operation
- [arm64] tegra: Remove the Orin NX/Nano suspend key
- [arm64] mm: Correct the update of max_pfn
- [arm64] dts: mediatek: mt8173: Fix disp-pwm compatible string
- [arm64] backlight: led_bl: Hold led_access lock when calling
led_sysfs_disable()
- btrfs: fix non-empty delayed iputs list on unmount due to compressed write
workers
- btrfs: tests: fix chunk map leak after failure to add it to the tree
- btrfs: zoned: fix zone activation with missing devices
- btrfs: zoned: fix zone finishing with missing devices
- iommufd: Fix uninitialized rc in iommufd_access_rw()
- [amd64] iommu/vt-d: Put IRTE back into posted MSI mode if vCPU posting is
disabled
- [amd64] iommu/vt-d: Don't clobber posted vCPU IRTE when host IRQ affinity
changes
- [amd64] iommu/vt-d: Fix possible circular locking dependency
- [amd64] iommu/vt-d: Wire up irq_ack() to irq_move_irq() for posted MSIs
- net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
- mm/damon/ops: have damon_get_folio return folio even for tail pages
- mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
- mm: make page_mapped_in_vma() hugetlb walk aware
- mm: fix lazy mmu docs and usage
- mm/mremap: correctly handle partial mremap() of VMA starting at 0
- mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
- mm/userfaultfd: fix release hang over concurrent GUP
- mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
- mm/hugetlb: move hugetlb_sysctl_init() to the __init section
- mm/hwpoison: introduce folio_contain_hwpoisoned_page() helper
- sctp: detect and prevent references to a freed transport in sendmsg
- [x86] xen: fix balloon target initialization for PVH dom0
- tracing: fprobe events: Fix possible UAF on modules
- tracing: Do not add length to print format in synthetic events
- thermal/drivers/rockchip: Add missing rk3328 mapping entry
- CIFS: Propagate min offload along with other parameters from primary to
secondary channels.
- cifs: avoid NULL pointer dereference in dbg call
- cifs: fix integer overflow in match_server()
- cifs: Ensure that all non-client-specific reparse points are processed by
the server
- [arm64] clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
- [arm64] clk: qcom: clk-branch: Fix invert halt status bit check for
votable clocks
- [arm64] clk: qcom: gdsc: Release pm subdomains in reverse add order
- [arm64] clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code
- [arm64] clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
- [amd64] crypto: ccp - Fix check for the primary ASP device
- [amd64] crypto: ccp - Fix uAPI definitions of PSP errors
- dlm: fix error if inactive rsb is not hashed
- dlm: fix error if active rsb is not hashed
- dm-integrity: set ti->error on memory allocation failure
- dm-integrity: fix non-constant-time tag verification
- dm-verity: fix prefetch-vs-suspend race
- dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg'
- dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg'
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- ftrace: Properly merge notrace hashes
- [arm64] gpio: zynq: Fix wakeup source leaks on device unbind
- gve: handle overflow when reporting TX consumed descriptors
- KVM: Allow building irqbypass.ko as as module when kvm.ko is a module
- [ppc64el] KVM: PPC: Enable CAP_SPAPR_TCE_VFIO on pSeries KVM guests
- [x86] KVM: x86: Explicitly zero-initialize on-stack CPUID unions
- [x86] KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory
accesses
- landlock: Move code to ease future backports
- landlock: Add the errata interface
- landlock: Add erratum for TCP fix
- landlock: Always allow signals between threads of the same process
- landlock: Prepare to add second errata
- misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq'
error
- net: mana: Switch to page pool for jumbo frames
- of/irq: Fix device node refcount leakage in API of_irq_parse_one()
- of/irq: Fix device node refcount leakage in API of_irq_parse_raw()
- of/irq: Fix device node refcount leakages in of_irq_count()
- of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
- of/irq: Fix device node refcount leakages in of_irq_init()
- [arm64] PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
- [arm64] PCI: j721e: Fix the value of .linkdown_irq_regfield for J784S4
- PCI: pciehp: Avoid unnecessary device replacement check
- PCI: Fix reference leak in pci_alloc_child_bus()
- PCI: Fix reference leak in pci_register_host_bridge()
- PCI: Fix wrong length of devres array
- [arm64] phy: freescale: imx8m-pcie: assert phy reset and perst in power
off
- [arm64] pinctrl: qcom: Clear latched interrupt status when changing IRQ
type
- [arm64,armhf] pinctrl: samsung: add support for eint_fltcon_offset
- ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio()
- [s390x] pci: Fix zpci_bus_is_isolated_vf() for non-VFs
- [s390x] virtio_ccw: Don't allocate/assign airqs for non-existing queues
- [s390x] Fix linker error when -no-pie option is unavailable
- [arm64] thermal/drivers/mediatek/lvts: Disable monitor mode during suspend
- [arm64] thermal/drivers/mediatek/lvts: Disable Stage 3 thermal threshold
- [arm64] errata: Add newer ARM cores to the spectre_bhb_loop_affected()
lists
- iommufd: Make attach_handle generic than fault specific
- iommufd: Fail replace if device has not been attached
- [x86] paravirt: Move halt paravirt calls under CONFIG_PARAVIRT
- [amd64] ACPI: platform-profile: Fix CFI violation when accessing sysfs
files
- NFSD: fix decoding in nfs4_xdr_dec_cb_getattr
- NFSD: Fix CB_GETATTR status fix
- nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026)
- [x86] e820: Fix handling of subpage regions when calculating nosave ranges
in e820__register_nosave_regions()
- kbuild: Add '-fno-builtin-wcslen'
- [arm64] media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef
noinline
- Bluetooth: hci_uart: Fix another race during initialization
- [s390x] cpumf: Fix double free on error in cpumf_pmu_event_init()
- [armhf] HSI: ssi_protocol: Fix use after free vulnerability in
ssi_protocol Driver Due to Race Condition (CVE-2025-37838)
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.25
- [arm64] scsi: hisi_sas: Enable force phy when SATA disk directly connected
- wifi: at76c50x: fix use after free access in at76_disconnect
- wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
- wifi: mac80211: Purge vif txq in ieee80211_do_stop()
- wifi: wl1251: fix memory leak in wl1251_tx_work
- scsi: iscsi: Fix missing scsi_host_put() in error path
- driver core: bus: add irq_get_affinity callback to bus_type
- blk-mq: introduce blk_mq_map_hw_queues
- scsi: replace blk_mq_pci_map_queues with blk_mq_map_hw_queues
- scsi: smartpqi: Use is_kdump_kernel() to check for kdump
- md/raid10: fix missing discard IO accounting
- md/md-bitmap: fix stats collection for external bitmaps
- [amd64,riscv64] ASoC: dwc: always enable/disable i2s irqs
- [amd64] ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()
- ovl: remove unused forward declaration
- [amd64] RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
- [arm64] RDMA/hns: Fix wrong maximum DMA segment size
- ALSA: hda/cirrus_scodec_test: Don't select dependencies
- ALSA: hda: improve bass speaker support for ASUS Zenbook UM5606WA
- ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130
- ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
- [amd64] ASoC: cs42l43: Reset clamp override on jack removal
- RDMA/core: Silence oversized kvmalloc() warning
- Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
- Bluetooth: btrtl: Prevent potential NULL dereference
- Bluetooth: l2cap: Check encryption key size on incoming connection
- ipv6: add exception routes to GC list in rt6_insert_exception
- xen: fix multicall debug feature
- Revert "wifi: mac80211: Update skb's control block key in
ieee80211_tx_dequeue()"
- igc: fix PTM cycle trigger logic
- igc: increase wait time before retrying PTM
- igc: move ktime snapshot into PTM retry loop
- igc: handle the IGC_PTP_ENABLED flag correctly
- igc: cleanup PTP module if probe fails
- igc: add lock preventing multiple simultaneous PTM transactions
- dt-bindings: soc: fsl: fsl,ls1028a-reset: Fix maintainer entry
- smc: Fix lockdep false-positive for IPPROTO_SMC.
- pds_core: fix memory leak in pdsc_debugfs_add_qcq()
- ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll()
- net: mctp: Set SOCK_RCU_FREE
- block: fix resource leak in blk_register_queue() error path
- netlink: specs: ovs_vport: align with C codegen capabilities
- net: openvswitch: fix nested key length validation in the set() action
- [arm64] net: ethernet: ti: am65-cpsw: fix port_np reference counting
- eth: bnxt: fix missing ring index trim on error path
- loop: aio inherit the ioprio of original request
- loop: stop using vfs_iter_{read,write} for buffered I/O
- ata: libata-sata: Save all fields from sense data descriptor
- cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
- netlink: specs: rt-link: add an attr layer around alt-ifname
- netlink: specs: rt-link: adjust mctp attribute naming
- net: b53: enable BPDU reception for management port
- net: bridge: switchdev: do not notify new brentries as changed
- net: txgbe: fix memory leak in txgbe_probe() error path
- [arm64,armhf] net: dsa: mv88e6xxx: avoid unregistering devlink regions
which were never registered
- [arm64,armhf] net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST
is unsupported
- [arm64,armhf] net: dsa: clean up FDB, MDB, VLAN entries on unbind
- [arm64,armhf] net: dsa: free routing table on probe failure
- [arm64,armhf] net: dsa: avoid refcount warnings when
ds->ops->tag_8021q_vlan_del() fails
- ptp: ocp: fix start time alignment in ptp_ocp_signal_set
- [arm64] net: ti: icss-iep: Add pwidth configuration for perout signal
- [arm64] net: ti: icss-iep: Add phase offset configuration for perout
signal
- [arm64] net: ti: icss-iep: Fix possible NULL pointer dereference for
perout request
- [arm64] net: ethernet: mtk_eth_soc: reapply mdc divider on reset
- [arm64] net: ethernet: mtk_eth_soc: correct the max weight of the queue
limit for 100Mbps
- [arm64] net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings
- [riscv64] Use kvmalloc_array on relocation_hashtable
- [riscv64] Properly export reserved regions in /proc/iomem
- [riscv64] module: Fix out-of-bounds relocation access
- [riscv64] module: Allocate PLT entries for R_RISCV_PLT32
- cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
- writeback: fix false warning in inode_to_wb()
- Revert "PCI: Avoid reset when disabled via sysfs"
- [arm64] ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
- [arm64] ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
- [amd64] ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S16
- [arm64] ASoC: qcom: Fix sc7280 lpass potential buffer overflow
- [amd64] asus-laptop: Fix an uninitialized variable
- block: integrity: Do not call set_page_dirty_lock()
- [arm64] drm/v3d: Fix Indirect Dispatch configuration for V3D 7.1.6 and
later
- nfs: add missing selections of CONFIG_CRC32
- nfsd: decrease sc_count directly if fail to queue dl_recall
- i2c: atr: Fix wrong include
- ftrace: fix incorrect hash size in register_ftrace_direct()
- [arm64] drm/msm/a6xx+: Don't let IB_SIZE overflow
- Bluetooth: l2cap: Process valid commands in too long frame
- Bluetooth: vhci: Avoid needless snprintf() calls
- btrfs: correctly escape subvol in btrfs_show_options()
- cpufreq/sched: Explicitly synchronize limits_changed flag handling
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- i2c: cros-ec-tunnel: defer probe if parent EC is not present
- isofs: Prevent the use of too small fid
- loop: properly send KOBJ_CHANGED uevent for disk device
- loop: LOOP_SET_FD: send uevents for partitions
- mm/compaction: fix bug in hugetlb handling pathway
- mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
- mm: fix filemap_get_folios_contig returning batches of identical folios
- mm: fix apply_to_existing_page_range()
- ovl: don't allow datadir only
- ksmbd: Fix dangling pointer in krb_authenticate
- ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- ksmbd: Prevent integer overflow in calculation of deadtime
- ksmbd: fix the warning from __kernel_write_iter
- Revert "smb: client: Fix netns refcount imbalance causing leaks and
use-after-free"
- Revert "smb: client: fix TCP timers deadlock after rmmod" (CVE-2025-22077)
- [riscv64] Avoid fortify warning in syscall_get_arguments()
- slab: ensure slab->obj_exts is clear in a newly allocated slab page
- smb3 client: fix open hardlink on deferred close file error
- string: Add load_unaligned_zeropad() code path to sized_strscpy()
- tracing: Fix filter string testing
- virtiofs: add filesystem context source name check
- [x86] microcode/AMD: Extend the SHA check to Zen5, block loading of any
unreleased standalone Zen5 microcode patches
- [x86] cpu/amd: Fix workaround for erratum 1054
- [x86] boot/sev: Avoid shared GHCB page for early memory acceptance
- scsi: megaraid_sas: Block zero-length ATA VPD inquiry
- scsi: ufs: exynos: Ensure consistent phy reference counts
- RDMA/cma: Fix workqueue crash in cma_netevent_work_handler
- [amd64] RAS/AMD/ATL: Include row[13] bit in row retirement
- [amd64] RAS/AMD/FMPM: Get masked address
- [x86] platform/x86: amd: pmf: Fix STT limits
- [x86] perf/x86/intel: Allow to update user space GPRs from PEBS records
- [x86] perf/x86/intel/uncore: Fix the scale of IIO free running counters on
SNR
- [x86] perf/x86/intel/uncore: Fix the scale of IIO free running counters on
ICX
- [x86] perf/x86/intel/uncore: Fix the scale of IIO free running counters on
SPR
- drm/ast: Fix ast_dp connection status
- [arm64] drm/msm/dsi: Add check for devm_kstrdup()
- [arm64] drm/msm/a6xx: Fix stale rpmh votes from GPU
- drm/amdgpu: Prefer shadow rom when available
- drm/amd/display: prevent hang on link training fail
- drm/amd: Handle being compiled without SI or CIK support better
- drm/amd/display: Actually do immediate vblank disable
- drm/amd/display: Increase vblank offdelay for PSR panels
- drm/amd/pm: Prevent division by zero
- drm/amd/pm/powerplay: Prevent division by zero
- drm/amd/pm/smu11: Prevent division by zero
- drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
- drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
- drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
- drm/amdgpu/mes12: optimize MES pipe FW version fetching
- [amd64] drm/i915/vrr: Add vrr.vsync_{start, end} in vrr_params_changed
- drm/xe: Use local fence in error path of xe_migrate_clear
- drm/amd/display: Add HP Elitebook 645 to the quirk list for eDP on DP1
- drm/amd/display: Protect FPU in dml2_validate()/dml21_validate()
- drm/amd/display: Protect FPU in dml21_copy()
- drm/amdgpu/mes11: optimize MES pipe FW version fetching
- drm/amdgpu/dma_buf: fix page_link check
- drm/nouveau: prime: fix ttm_bo_delayed_delete oops
- drm/xe: Fix an out-of-bounds shift when invalidating TLB
- [amd64] drm/i915/gvt: fix unterminated-string-initialization warning
- drm/amdgpu: immediately use GTT for new allocations
- drm/amd/display: Do not enable Replay and PSR while VRR is on in
amdgpu_dm_commit_planes()
- drm/amd/display: Protect FPU in dml2_init()/dml21_init()
- drm/amd/display: Add HP Probook 445 and 465 to the quirk list for eDP on
DP1
- drm/xe/dma_buf: stop relying on placement in unmap
- drm/xe/userptr: fix notifier vs folio deadlock
- drm/xe: Set LRC addresses before guc load
- drm/amdgpu: fix warning of drm_mm_clean
- [amd64] drm/mgag200: Fix value in <VBLKSTR> register
- [arm64] sysreg: Update register fields for ID_AA64MMFR0_EL1
- [arm64] sysreg: Add register fields for HDFGRTR2_EL2
- [arm64] sysreg: Add register fields for HDFGWTR2_EL2
- [arm64] sysreg: Add register fields for HFGITR2_EL2
- [arm64] sysreg: Add register fields for HFGRTR2_EL2
- [arm64] sysreg: Add register fields for HFGWTR2_EL2
- [arm64] boot: Enable EL2 requirements for FEAT_PMUv3p9
- cpufreq: Reference count policy in cpufreq_update_limits()
- kbuild: Add '-fno-builtin-wcslen'
- [x86] platform/x86: msi-wmi-platform: Rename "data" variable
- [x86] platform/x86: msi-wmi-platform: Workaround a ACPI firmware bug
- drm/amd/display: Temporarily disable hostvm on DCN31
- nvmet-fc: Remove unused functions
- block: remove rq_list_move
- block: add a rq_list type
- block: don't reorder requests in blk_add_rq_to_plug
- mm/vma: add give_up_on_oom option on modify/merge, use in uffd release
- Revert "wifi: ath12k: Fix invalid entry fetch in
ath12k_dp_mon_srng_process"
- [mips*] ds1287: Match ds1287_set_base_clock() function types
- wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
- bpf: add find_containing_subprog() utility function
- bpf: track changes_pkt_data property for global functions
- bpf: check changes_pkt_data property for extension programs
- bpf: fix null dereference when computing changes_pkt_data of prog w/o
subprogs
.
[ Emanuele Rocca ]
* [arm64,powerpc,ppc64,ppc64el,riscv64,s390x] Enable KALLSYMS_ALL on
all architectures where DEBUG_INFO_BTF is on (Closes: #1100634)
.
[ Salvatore Bonaccorso ]
* [amd64] drivers/hwmon/pmbus: Enable PMBUS and SENSORS_PMBUS as modules
(Closes: #1103437)
.
[ Uwe Kleine-König ]
* Put all clock modules in the kernel image udeb
* [arm64] Drop some clk modules from fb-modules that are also in the kernel
udeb.
.
[ Alper Nebi Yasak ]
* [arm64] Enable BT_MTKSDIO as module
* [arm64] Change REGULATOR_MT6358 and MFD_MT6397 to built-in
* [arm64] Change COMMON_CLK_MT8173 and MTK_PMIC_WRAP to built-in
* [arm64] Enable DRM_PANEL_HIMAX_HX83102, DRM_PANEL_ILITEK_ILI9882T as module
* [arm64] Enable SND_SOC_MT8188, SND_SOC_MT8188_MT6359 as module
* [arm64] Enable SND_SOC_MT8192, SND_SOC_MT8192_MT6359_RT1015_RT5682 as module
* [arm64] udeb: Add modules for MediaTek devices
- Add nvmem_mtk-efuse, phy-mtk-tphy, pwm-mediatek and i2c-mt65xx modules
to kernel-image
- Add mediatek-drm, mediatek-drm-hdmi, mediatek_dp, mtk_iommu, mtk-smi,
phy-mtk-dp, phy-mtk-hdmi-drv, phy-mtk-mipi-dsi-drv, pwm-mtk-disp,
anx7625, parade-ps8640 and ite-it6505 to fb-modules
- Add panel-himax-hx83102 and panel-ilitek-ili9882t to fb-modules
- Add elan_i2c to input-modules
- Add mtu3 to usb-modules
* udeb: Add onboard_usb_dev to usb-modules
* [arm64] Enable modules for Qualcomm SC7180 Chromebooks
- Enable SC_GPUCC_7180 and INTERCONNECT_QCOM_SC7180 as modules
- Enable SC_DISPCC_7180, SC_VIDEOCC_7180 and SC_CAMCC_7180 as modules
- Enable SC_LPASS_CORECC_7180, SND_SOC_ADAU7002, SND_SOC_SC7180 as modules
- Enable IIO_CROS_EC_SENSORS_LID_ANGLE and CROS_EC_MKBP_PROXIMITY as modules
- Enable EDAC_QCOM and SPI_QCOM_QSPI as modules
* [arm64] udeb: Add modules fo Qualcomm SC7180 Chromebooks
- Add gcc-sc7180 and qnoc-sc7180 to kernel-image
* [arm64] Enable SC_LPASSCC_7280 as module
* [arm64] Enable I2C_HID_OF_ELAN as module
* udeb: Move i2c-hid-of-elan module to fb-modules
.
[ Ben Hutchings ]
* d/rules.real: Export CROSS_COMPILE_COMPAT, CROSS32_COMPILE variables.
This re-enables the compat vDSO on arm64.
* linux-kbuild: Fix cross-build regression:
- libbpf: Use the standard fixdep build rule
- d/rules.d/tools/bpf/resolve_btfids: Define REALHOST{CC,LD} for submake
.
[ Bastian Blank ]
* Include modprobe config in bug reports.
.
[ Raphaël Hertzog ]
* udeb: add dm-thin-pool md-modules (Closes: #956226)
Checksums-Sha1:
88a898f1dccea22628d96910d24d3a5d8bc65462 10822 linux-signed-amd64_6.12.25+1.dsc
d40bab4e70da1422f34a252a42a094fcf365bb06 763204 linux-signed-amd64_6.12.25+1.tar.xz
Checksums-Sha256:
24c4cec9fb6d809a4d216399df931f5ee1c0709147e294992d2f404ecebb0746 10822 linux-signed-amd64_6.12.25+1.dsc
ff9f3c4645243974a0bca9ac40fd690fd35e4e80c48662388fb23afd8e8035f5 763204 linux-signed-amd64_6.12.25+1.tar.xz
Files:
0c6d8e32cecc4cc0491780c021be96da 10822 kernel optional linux-signed-amd64_6.12.25+1.dsc
1ef27f2f5d7f8ed529a021f9b690faa3 763204 kernel optional linux-signed-amd64_6.12.25+1.tar.xz
-----BEGIN PGP SIGNATURE-----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=F9Hz
-----END PGP SIGNATURE-----
