-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 01 Mar 2026 13:47:48 +0100
Source: linux-signed-amd64
Architecture: source
Version: 6.12.74+1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
linux-signed-amd64 (6.12.74+1) trixie-security; urgency=high
.
* Sign kernel from linux 6.12.74-1
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.74
- scsi: qla2xxx: Fix bsg_done() causing double free
- bnxt_en: Change FW message timeout warning
- bnxt_en: hide CONFIG_DETECT_HUNG_TASK specific code
- [arm64] bus: fsl-mc: Replace snprintf and sprintf with sysfs_emit in sysfs
show functions
- [arm64] bus: fsl-mc: fix use-after-free in driver_override_show()
(CVE-2026-23221)
- ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU
- [amd64] ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list
- ALSA: hda/realtek: Add quirk for Inspur S14-G1
- ALSA: hda/realtek - fixed speaker no sound
- romfs: check sb_set_blocksize() return value
- [arm64,armhf] drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not
used
- [amd64] platform/x86: classmate-laptop: Add missing NULL pointer checks
- [amd64] ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9
- [amd64] ASoC: amd: yc: Add quirk for HP 200 G2a 16
- ALSA: hda/realtek: Enable headset mic for Acer Nitro 5
- [amd64] platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro
- [amd64] platform/x86: panasonic-laptop: Fix sysfs group leak in error path
- [amd64] ASoC: cs42l43: Correct handling of 3-pole jack load detection
- tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow
- drm/amd/display: extend delta clamping logic to CM3 LUT helper
- drm/amd/display: remove assert around dpp_base replacement
- mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count
- mm/hugetlb: fix hugetlb_pmd_shared() (CVE-2026-23100)
- mm/hugetlb: fix two comments related to huge_pmd_unshare()
- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using
mmu_gather
- Revert "wireguard: device: enable threaded NAPI"
- cpuset: Fix missing adaptation for cpuset_is_populated
- fbdev: smscufx: properly copy ioctl memory to kernelspace
- f2fs: fix to add gc count stat in f2fs_gc_range
- f2fs: fix to check sysfs filename w/ gc_pin_file_thresh correctly
- f2fs: fix out-of-bounds access in sysfs attribute read/write
- f2fs: fix to avoid mapping wrong physical block for swapfile
- [arm64] iommu/arm-smmu-qcom: do not register driver in probe()
- f2fs: fix to avoid UAF in f2fs_write_end_io()
- f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent
atomic commit and checkpoint writes
- USB: serial: option: add Telit FN920C04 RNDIS compositions
.
[ Simone Weiß ]
* db-mok: Remove unused function, fixing compilation warning
.
[ Ben Hutchings ]
* CI: Delete support for ccache, which was removed from common pipeline
* CI: Update build job to work after another common pipeline change
.
[ Salvatore Bonaccorso ]
* apparmor: validate DFA start states are in bounds in unpack_pdb
* apparmor: fix memory leak in verify_header
* apparmor: replace recursive profile removal with iterative approach
* apparmor: fix side-effect bug in match_char() macro usage
* apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
* apparmor: Fix double free of ns_name in aa_replace_profiles()
* apparmor: unprivileged local user can privilge escalate policy management
* apparmor: fix differential encoding verification
* apparmor: fix race on rawdata dereference
Checksums-Sha1:
7cd0e611aeb991705ea86e11493f0e64c647674d 10824 linux-signed-amd64_6.12.74+1.dsc
aa8ca1214928a87edf1383cf18c5cc586dd18fd7 887280 linux-signed-amd64_6.12.74+1.tar.xz
Checksums-Sha256:
d5360d002f2431684f2918b564b836f987bc29d29ee33bb9e493a1cfbc88b9ef 10824 linux-signed-amd64_6.12.74+1.dsc
3f05ac9406691a317c8979bc0a7ff3af4a37d36efa282649bffde63f8116155f 887280 linux-signed-amd64_6.12.74+1.tar.xz
Files:
76d3e951b77f70b2a9400650b000f9fc 10824 kernel optional linux-signed-amd64_6.12.74+1.dsc
fab87288dd798f6cbb518f54ea3ae12b 887280 kernel optional linux-signed-amd64_6.12.74+1.tar.xz
-----BEGIN PGP SIGNATURE-----
iHUEARYKAB0WIQSInBJdRTWyTRy0ztFCTVFtUgONCgUCaaSITgAKCRBCTVFtUgON
ChhtAQDk66RiN6nQedZ/1U9eyMV1A+2f6HdbB1eavigA3glFAAD7B3Xl3/OX9zS0
b1C7woko6plZ6GLguurPJ32IQJkK8Q4=
=/9wt
-----END PGP SIGNATURE-----
