-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 01 Mar 2026 13:47:48 +0100
Source: linux
Architecture: source
Version: 6.12.74-1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
linux (6.12.74-1) trixie-security; urgency=high
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.74
- scsi: qla2xxx: Fix bsg_done() causing double free
- bnxt_en: Change FW message timeout warning
- bnxt_en: hide CONFIG_DETECT_HUNG_TASK specific code
- [arm64] bus: fsl-mc: Replace snprintf and sprintf with sysfs_emit in sysfs
show functions
- [arm64] bus: fsl-mc: fix use-after-free in driver_override_show()
(CVE-2026-23221)
- ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU
- [amd64] ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list
- ALSA: hda/realtek: Add quirk for Inspur S14-G1
- ALSA: hda/realtek - fixed speaker no sound
- romfs: check sb_set_blocksize() return value
- [arm64,armhf] drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not
used
- [amd64] platform/x86: classmate-laptop: Add missing NULL pointer checks
- [amd64] ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9
- [amd64] ASoC: amd: yc: Add quirk for HP 200 G2a 16
- ALSA: hda/realtek: Enable headset mic for Acer Nitro 5
- [amd64] platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro
- [amd64] platform/x86: panasonic-laptop: Fix sysfs group leak in error path
- [amd64] ASoC: cs42l43: Correct handling of 3-pole jack load detection
- tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow
- drm/amd/display: extend delta clamping logic to CM3 LUT helper
- drm/amd/display: remove assert around dpp_base replacement
- mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count
- mm/hugetlb: fix hugetlb_pmd_shared() (CVE-2026-23100)
- mm/hugetlb: fix two comments related to huge_pmd_unshare()
- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using
mmu_gather
- Revert "wireguard: device: enable threaded NAPI"
- cpuset: Fix missing adaptation for cpuset_is_populated
- fbdev: smscufx: properly copy ioctl memory to kernelspace
- f2fs: fix to add gc count stat in f2fs_gc_range
- f2fs: fix to check sysfs filename w/ gc_pin_file_thresh correctly
- f2fs: fix out-of-bounds access in sysfs attribute read/write
- f2fs: fix to avoid mapping wrong physical block for swapfile
- [arm64] iommu/arm-smmu-qcom: do not register driver in probe()
- f2fs: fix to avoid UAF in f2fs_write_end_io()
- f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent
atomic commit and checkpoint writes
- USB: serial: option: add Telit FN920C04 RNDIS compositions
.
[ Simone Weiß ]
* db-mok: Remove unused function, fixing compilation warning
.
[ Ben Hutchings ]
* CI: Delete support for ccache, which was removed from common pipeline
* CI: Update build job to work after another common pipeline change
.
[ Salvatore Bonaccorso ]
* apparmor: validate DFA start states are in bounds in unpack_pdb
* apparmor: fix memory leak in verify_header
* apparmor: replace recursive profile removal with iterative approach
* apparmor: fix side-effect bug in match_char() macro usage
* apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
* apparmor: Fix double free of ns_name in aa_replace_profiles()
* apparmor: unprivileged local user can privilge escalate policy management
* apparmor: fix differential encoding verification
* apparmor: fix race on rawdata dereference
Checksums-Sha1:
8fecf9d05bf0b8bd4e9be8e00cfda0fea30f644f 288306 linux_6.12.74-1.dsc
320b65cdd3aa07e7ad5acf460d3d8f4dfe4c13e3 151185392 linux_6.12.74.orig.tar.xz
c3af8c8a38f61aa724262d96527ca11dfb8a9555 1779124 linux_6.12.74-1.debian.tar.xz
ff0b90bd8e58999ea764732c0c80ef453b4f572d 6808 linux_6.12.74-1_source.buildinfo
Checksums-Sha256:
92d5b48cda83594233f89cf9879fc85b57a15f83a36561c2f3f302b564775e57 288306 linux_6.12.74-1.dsc
b12440d62ef47193c3c8ae5b8dbb76cfcd1084bbb54d6c64a485aed07ecec708 151185392 linux_6.12.74.orig.tar.xz
cbd1f9a0bdfae84acdd805502e2ca408a4590f8bdef7fb02fc5529738a1da232 1779124 linux_6.12.74-1.debian.tar.xz
56184f05415e7a6bd58aa06afaac368b01ba957e47a19ffccdf8f633d1591915 6808 linux_6.12.74-1_source.buildinfo
Files:
646f5e9d48cfadd03a6acdc39ddc6c96 288306 kernel optional linux_6.12.74-1.dsc
bd8b9c3d30264b53bac2634ef665b17d 151185392 kernel optional linux_6.12.74.orig.tar.xz
3ab76152227078792a680aa69439b579 1779124 kernel optional linux_6.12.74-1.debian.tar.xz
4e6a61d5e266701ba6227a5d73a82e1a 6808 kernel optional linux_6.12.74-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=xSps
-----END PGP SIGNATURE-----
