-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 17 Feb 2026 06:47:26 +0100 Source: linux Architecture: source Version: 6.12.73-1 Distribution: trixie-security Urgency: high Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1125405 1127597 Changes: linux (6.12.73-1) trixie-security; urgency=high . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.70 - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - [amd64] x86/vmware: Fix hypercall clobbers - [amd64] x86/kfence: fix booting on 32bit non-PAE systems - [amd64] platform/x86: intel_telemetry: Fix swapped arrays in PSS output - ALSA: aloop: Fix racy access at PCM trigger - [arm64] pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - [arm64] pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - [arm64,armhf] pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - [arm64] pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - [arm64] pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single - ceph: fix NULL pointer dereference in ceph_mds_auth_match() (Closes: #1125405) - rbd: check for EOD after exclusive lock is ensured to be held - ceph: fix oops due to invalid pointer for kfree() in parse_longname() - gve: Fix stats report corruption on queue count change - gve: Correct ethtool rx_dropped calculation - mm, shmem: prevent infinite loop on truncate race - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - KVM: Don't clobber irqfd routing type when deassigning irqfd - PCI/ERR: Ensure error recoverability at all times - ublk: fix deadlock when reading partition table (CVE-2025-68823) - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (CVE-2025-40082) - [arm*] binder: fix BR_FROZEN_REPLY error log - binderfs: fix ida_alloc_max() upper bound - procfs: avoid fetching build ID while holding VMA lock - tracing: Fix ftrace event field alignments - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - wifi: wlcore: ensure skb headroom before skb_push - net: usb: sr9700: support devices with virtual driver CD - block,bfq: fix aux stat accumulation destination - smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() - md: suspend array while updating raid_disks via sysfs - smb/server: fix refcount leak in smb2_open() - smb/server: fix refcount leak in parse_durable_handle_context() - [amd64] HID: intel-ish-hid: Update ishtp bus match to support device ID table - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - btrfs: fix reservation leak in some error paths when inserting inline extent - [riscv64] Sanitize syscall table indexing under speculation - [amd64] HID: intel-ish-hid: Reset enum_devices_done before enumeration - HID: playstation: Center initial joystick axes to prevent spurious events - ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55 - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - [arm64] PCI: qcom: Remove ASPM L0s support for MSM8996 SoC - netfilter: replace -EEXIST with -EBUSY - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - drm/amd/pm: Disable MMIO access during SMU Mode 1 reset - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - HID: logitech: add HID++ support for Logitech MX Anywhere 3S - wifi: mac80211: collect station statistics earlier when disconnect - ASoC: simple-card-utils: Check device node before overwrite direction - nvme-fc: release admin tagset if init fails - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() - [amd64] ASoC: amd: yc: Fix microphone on ASUS M6500RE - regmap: maple: free entry on mas_store_gfp() failure - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - wifi: mac80211: correctly check if CSA is active - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - btrfs: reject new transactions if the fs is fully read-only - ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio - [amd64] platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - [amd64] platform/x86: intel_telemetry: Fix PSS event register mask - [amd64] platform/x86: hp-bioscfg: Skip empty attribute names - [amd64] platform/x86/intel/tpmi/plr: Make the file domain<n>/status writeable - smb/client: fix memory leak in smb2_open_file() - net: add skb_header_pointer_careful() helper - net/sched: cls_u32: use skb_header_pointer_careful() - net: liquidio: Initialize netdev pointer before queue setup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: phy: add phy_interface_weight() - net: phy: add phy_interface_copy() - net: sfp: pre-parse the module support - net: sfp: convert sfp quirks to modify struct sfp_module_support - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - macvlan: fix error recovery in macvlan_common_newlink() - net: usb: r8152: fix resume reset deadlock - net: don't touch dev->stats in BPF redirect paths - tipc: use kfree_sensitive() for session key material - drm/amd/display: fix wrong color value mapping on MCM shaper LUT - net: gro: fix outer network offset - [amd64] drm/mgag200: fix mgag200_bmc_stop_scanout() - drm/xe/query: Fix topology query pointer advance - drm/xe/pm: Also avoid missing outer rpm warning on system suspend - drm/xe/pm: Disable D3Cold for BMG only on specific platforms - [armhf] hwmon: (occ) Mark occ_init_attribute() as __printf - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF - ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update() - [amd64] ASoC: amd: fix memory leak in acp3x pdm dma ops - [arm64] ipi: tegra: Fix a memory leak in tegra_slink_probe() - [arm64,armhf] spi: tegra114: Preserve SPI mode bits in def_command1_reg - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - gpiolib-acpi: Update file references in the Documentation and MAINTAINERS https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.71 - net: tunnel: make skb_vlan_inet_prepare() return drop reasons (Closes: #1127597) - io_uring/rw: recycle buffers manually for non-mshot reads https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.72 - smb: client: split cached_fid bitfields to avoid shared-byte RMW races - ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths - smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() - driver core: enforce device_lock for driver_match_device() - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - [amd64] crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode - [armhf] crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: virtio - Add spinlock protection with virtqueue notification - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - nilfs2: Fix potential block overflow that cause system hang - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - scsi: qla2xxx: Validate sp before freeing associated memory - scsi: qla2xxx: Allow recovery for tape devices - scsi: qla2xxx: Delay module unload while fabric scan in progress - scsi: qla2xxx: Free sp in error path to fix system crash - scsi: qla2xxx: Query FW again before proceeding with login - bus: mhi: host: pci_generic: Add Telit FE990B40 modem support - mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() (CVE-2026-23169) - erofs: fix UAF issue for file-backed mounts w/ directio option - xfs: fix UAF in xchk_btree_check_block_owner - PCI: endpoint: Avoid creating sub-groups asynchronously - wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add - [armhf] gpio: omap: do not register driver in probe() https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.73 - Revert "driver core: enforce device_lock for driver_match_device()" Checksums-Sha1: e4dc765f90d5cbcf66c7d6b01291426546e3fa4f 288306 linux_6.12.73-1.dsc b03824827216845fe25ecaf87982e8aa759d3c04 151178828 linux_6.12.73.orig.tar.xz c66d0da0b9f22365a2dd1e4061d7cf0e96842e94 1768260 linux_6.12.73-1.debian.tar.xz 0747c1266635783b7035169036f8a4b4e33faf4d 6842 linux_6.12.73-1_source.buildinfo Checksums-Sha256: 462e3bd3f4ba9b5154ac3e139bbfd7597520724bf7ff1ff366c86a9091f84d0f 288306 linux_6.12.73-1.dsc 9859365560620929322068bea4b93e0dbcf02a06b98b766f986c5d7b93c0ca58 151178828 linux_6.12.73.orig.tar.xz c61c469d9eecd6e3b87664034b3ceb0903d1b1d050e5e91ac15388309263c50f 1768260 linux_6.12.73-1.debian.tar.xz 6f8ba4c8b4e6e877e2aa04062d20975531f509a2326676b51f467d5773c8ef6a 6842 linux_6.12.73-1_source.buildinfo Files: dcadcc042562b4e9a17e97d689f9367a 288306 kernel optional linux_6.12.73-1.dsc bad516c5fef95168598da7271f1ea363 151178828 kernel optional linux_6.12.73.orig.tar.xz 2968c6a9949381f1775518e240114482 1768260 kernel optional linux_6.12.73-1.debian.tar.xz a024883455ef90f1cd6cfbb898e56bff 6842 kernel optional linux_6.12.73-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmmUAWlfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EwJMP/iX3G/D284/sinWbbdfepQJDkk1HRcpe cHZ4Moaxle0yzjjZpj5NlVi7AjxGQT+wpbDBbARKJALtZ/redy0gte5q+X9K6fgo E9hijjd3hhPpVZqHnh4vC+4XN5HTjtDJ//6jSq804pmgbYRIqXKAU9uhrAVivTcC yjMQ8/hXo/n6Yay71oirwFly6UbSjVvvVIK1VbSAppJMPlhOj+/z4UXQiN/y3acO YlZmTk/jB6he+PeGjVvEV33WcOfX0i5LJp6otWiKczaA5v8mFuYSSbRU09x7O/S9 tF5TQMTM3ViUomEqL48l1hpXfwOZ5+BU3GqBRg+oGjxnx6CG4V4QW/VLlpNVeYaE aXBeKARt4r3DOe25HVIBSrWHLjtH4h0VdnV0vgt8DQJZA2DHbX8v8FSPHGNqlYsz lPVyXzS3o4XeGeNvmK0zBNHPiAkEqD0qLK6to0SWf8d6pAjUbOqP2p27HcxfxC19 lLAbq3k19u22OWyQVr+FnjvKU/SjPxCgBlqpCQtnO21jL599+I99HABxC6xqZ13p 80PIX9OdaH3lqvp4DC47CTADhHgWc0w7IKa54Oi5Gfoi+ovQz3HN3YiB2mJfZ2cS zAopChRCJNHdwgpn/ry5H3gg4l3ckTQk2MK5/IIqkUaJQ3gjsNCjvQU1HWaxnaGJ EFQDClRCyu78 =9yqZ -----END PGP SIGNATURE-----
