Thank you for your contribution to Debian.
Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 25 Feb 2026 17:58:58 +0100 Source: linux Architecture: source Version: 6.18.12-1~bpo13+1 Distribution: trixie-backports Urgency: medium Maintainer: Debian Kernel Team <[email protected]> Changed-By: Ben Hutchings <[email protected]> Closes: 1125405 Changes: linux (6.18.12-1~bpo13+1) trixie-backports; urgency=medium . * Rebuild for trixie-backports . linux (6.18.12-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.11 - io_uring/io-wq: add exit-on-idle state - io_uring: allow io-wq workers to exit when unused - smb: client: split cached_fid bitfields to avoid shared-byte RMW races - ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths - ksmbd: add chann_lock to protect ksmbd_chann_list xarray - smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* - smb: server: make use of smbdirect_socket.recv_io.credits.available - smb: server: let recv_done() queue a refill when the peer is low on credits - smb: server: make use of smbdirect_socket.send_io.bcredits - smb: server: fix last send credit problem causing disconnects - smb: server: let send_done handle a completion without IB_SEND_SIGNALED - smb: client: make use of smbdirect_socket.recv_io.credits.available - smb: client: let recv_done() queue a refill when the peer is low on credits - smb: client: let smbd_post_send() make use of request->wr - smb: client: remove pointless sc->recv_io.credits.count rollback - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() - smb: client: port and use the wait_for_credits logic used by server - smb: client: split out smbd_ib_post_send() - smb: client: introduce and use smbd_{alloc, free}_send_io() - smb: client: use smbdirect_send_batch processing - smb: client: make use of smbdirect_socket.send_io.bcredits - smb: client: fix last send credit problem causing disconnects - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() - smb: client: let send_done handle a completion without IB_SEND_SIGNALED - driver core: enforce device_lock for driver_match_device() - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 - [amd64] crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode - [armhf] crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: virtio - Add spinlock protection with virtqueue notification - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - nilfs2: Fix potential block overflow that cause system hang - hfs: ensure sb->s_fs_info is always cleaned up - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - scsi: qla2xxx: Validate sp before freeing associated memory - scsi: qla2xxx: Allow recovery for tape devices - scsi: qla2xxx: Delay module unload while fabric scan in progress - scsi: qla2xxx: Free sp in error path to fix system crash - scsi: qla2xxx: Query FW again before proceeding with login - [arm64] bus: fsl-mc: fix use-after-free in driver_override_show() - erofs: fix UAF issue for file-backed mounts w/ directio option - xfs: fix UAF in xchk_btree_check_block_owner - wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add - [armhf] gpio: omap: do not register driver in probe() https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.12 - Revert "driver core: enforce device_lock for driver_match_device()" . linux (6.18.10-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.10 - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - [amd64] x86/vmware: Fix hypercall clobbers - [amd64] x86/kfence: fix booting on 32bit non-PAE systems - [amd64] KVM: x86: Explicitly configure supported XSS from {svm,vmx}_set_cpu_caps() - [amd64] platform/x86: intel_telemetry: Fix swapped arrays in PSS output - ALSA: aloop: Fix racy access at PCM trigger - [arm64] pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - [arm64] pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - [arm64,armhf] pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - [arm64] pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - [arm64] pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - procfs: avoid fetching build ID while holding VMA lock - mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single - ceph: fix NULL pointer dereference in ceph_mds_auth_match() (Closes: #1125405) - rbd: check for EOD after exclusive lock is ensured to be held - ceph: fix oops due to invalid pointer for kfree() in parse_longname() - cgroup/dmem: fix NULL pointer dereference when setting max - cgroup/dmem: avoid rcu warning when unregister region - cgroup/dmem: avoid pool UAF - drm/amd: Set minimum version for set_hw_resource_1 on gfx11 to 0x52 - gve: Fix stats report corruption on queue count change - gve: Correct ethtool rx_dropped calculation - mm, shmem: prevent infinite loop on truncate race - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - nouveau: add a third state to the fini handler. - nouveau/gsp: use rpc sequence numbers properly. - nouveau/gsp: fix suspend/resume regression on r570 firmware - [armhf] net: cpsw: Execute ndo_set_rx_mode callback in a work queue - [armhf] net: cpsw_new: Execute ndo_set_rx_mode callback in a work queue - [riscv64] net: spacemit: k1-emac: fix jumbo frame support - KVM: Don't clobber irqfd routing type when deassigning irqfd - hwmon: (gpio-fan) Fix set_rpm() return value - hwmon: (gpio-fan) Allow to stop FANs when CONFIG_PM is disabled - PCI/ERR: Ensure error recoverability at all times - treewide: Drop pci_save_state() after pci_restore_state() - bus: mhi: host: pci_generic: Add Telit FE990B40 modem support - sched/fair: Skip sched_balance_running cmpxchg when balance is not due - sched/fair: Have SD_SERIALIZE affect newidle balancing - rust_binder: correctly handle FDA objects of length zero - rust_binder: add additional alignment checks - rust_binderfs: fix ida_alloc_max() upper bound - binder: fix UAF in binder_netlink_report() - binder: fix BR_FROZEN_REPLY error log - binderfs: fix ida_alloc_max() upper bound - tracing: Fix ftrace event field alignments - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - wifi: wlcore: ensure skb headroom before skb_push - wifi: mac80211: don't WARN for connections on invalid channels - net: usb: sr9700: support devices with virtual driver CD - wifi: iwlwifi: Implement settime64 as stub for MVM/MLD PTP - [amd64] platform/x86: dell-lis3lv02d: Add Latitude 5400 - block,bfq: fix aux stat accumulation destination - smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() - md: suspend array while updating raid_disks via sysfs - smb/server: fix refcount leak in smb2_open() - io_uring: use GFP_NOWAIT for overflow CQEs on legacy rings - smb/server: fix refcount leak in parse_durable_handle_context() - btrfs: do not free data reservation in fallback from inline due to -ENOSPC - [amd64] HID: intel-ish-hid: Update ishtp bus match to support device ID table - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - btrfs: fix reservation leak in some error paths when inserting inline extent - [riscv64] Sanitize syscall table indexing under speculation - [amd64] HID: intel-ish-hid: Reset enum_devices_done before enumeration - HID: playstation: Center initial joystick axes to prevent spurious events - ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55 - [amd64] x86/sev: Disable GCOV on noinstr object - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - [arm64] PCI: qcom: Remove ASPM L0s support for MSM8996 SoC - netfilter: replace -EEXIST with -EBUSY - drm/amd/display: Reduce number of arguments of dcn30's CalculatePrefetchSchedule() - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - [amd64] HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - drm/amd/pm: Disable MMIO access during SMU Mode 1 reset - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - [riscv64] trace: fix snapshot deadlock with sbi ecall - HID: logitech: add HID++ support for Logitech MX Anywhere 3S - HID: Elecom: Add support for ELECOM M-XT3DRBK (018C) - wifi: mac80211: collect station statistics earlier when disconnect - [amd64] ASoC: Intel: sof_sdw: Add new quirks for PTL on Dell with CS42L43 - [riscv64] dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - ASoC: simple-card-utils: Check device node before overwrite direction - nvme-fc: release admin tagset if init fails - ALSA: usb-audio: Prevent excessive number of frames - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() - [amd64] ASoC: amd: yc: Fix microphone on ASUS M6500RE - ALSA: hda/tas2781: Add newly-released HP laptop - regmap: maple: free entry on mas_store_gfp() failure - ALSA: usb-audio: Add delay quirk for MOONDROP Moonriver2 Ti - spi: intel-pci: Add support for Nova Lake SPI serial flash - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() - [riscv64] Use 64-bit variable for output in __get_user_asm - io_uring/rw: free potentially allocated iovec on cache put failure - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - btrfs: fix Wmaybe-uninitialized warning in replay_one_buffer() - wifi: mac80211: correctly check if CSA is active - btrfs: sync read disk super and set block size - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - btrfs: reject new transactions if the fs is fully read-only - ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio - tracing: Avoid possible signed 64-bit truncation - Revert "drm/amd/display: pause the workload setting in dm" - [amd64] platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - [amd64] platform/x86: intel_telemetry: Fix PSS event register mask - [amd64] platform/x86: hp-bioscfg: Skip empty attribute names - [amd64] platform/x86/intel/tpmi/plr: Make the file domain<n>/status writeable - smb/client: fix memory leak in smb2_open_file() - [amd64] hwmon: (dell-smm) Add Dell G15 5510 to fan control whitelist - net: add skb_header_pointer_careful() helper - net/sched: cls_u32: use skb_header_pointer_careful() - net: liquidio: Initialize netdev pointer before queue setup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - ice: fix missing TX timestamps interrupts on E825 devices - ice: PTP: fix missing timestamps on E825 hardware - ice: Fix PTP NULL pointer dereference during VSI rebuild - ice: drop udp_tunnel_get_rx_info() call from ndo_open() - i40e: drop udp_tunnel_get_rx_info() call from i40e_open() - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - macvlan: fix error recovery in macvlan_common_newlink() - net: usb: r8152: fix resume reset deadlock - hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify() - net: don't touch dev->stats in BPF redirect paths - io_uring/zcrx: fix page array leak - linkwatch: use __dev_put() in callers to prevent UAF - net: rss: fix reporting RXH_XFRM_NO_CHANGE as input_xfrm for contexts - tipc: use kfree_sensitive() for session key material - [arm64] net: enetc: Remove SI/BDR cacheability AXI settings for ENETC v4 - [arm64] net: enetc: Remove CBDR cacheability AXI settings for ENETC v4 - [arm64] net: enetc: Convert 16-bit register writes to 32-bit for ENETC v4 - [arm64] net: enetc: Convert 16-bit register reads to 32-bit for ENETC v4 - wifi: iwlwifi: mld: cancel mlo_scan_start_wk - wifi: iwlwifi: mvm: pause TCM on fast resume - drm/amd/display: fix wrong color value mapping on MCM shaper LUT - net: add proper RCU protection to /proc/net/ptype - net: gro: fix outer network offset - [amd64] drm/mgag200: fix mgag200_bmc_stop_scanout() - drm/xe/query: Fix topology query pointer advance - drm/xe/pm: Disable D3Cold for BMG only on specific platforms - [armhf] hwmon: (occ) Mark occ_init_attribute() as __printf - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() - drm/xe/guc: Fix CFI violation in debugfs access. - nvme-pci: handle changing device dma map requirements - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF - firmware: cs_dsp: Factor out common debugfs string read - firmware: cs_dsp: rate-limit log messages in KUnit builds - ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update() - [amd64] ASoC: amd: fix memory leak in acp3x pdm dma ops - i2c: imx: preserve error state in block data length handler - [riscv64] regulator: spacemit-p1: Fix n_voltages for BUCK and LDO regulators - [arm64] spi: tegra: Fix a memory leak in tegra_slink_probe() - [arm64,armhf] spi: tegra114: Preserve SPI mode bits in def_command1_reg - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - ALSA: usb-audio: Use the right limit for PCM OOB check - [riscv64] Add intermediate cast to 'unsigned long' in __get_user_asm Checksums-Sha1: 66878bc9ea8c326d44ed555f8d4f33a779ff6713 140033 linux_6.18.12-1~bpo13+1.dsc ab2c9269e71515437b61d854bbf8552df0c1d4a1 1463268 linux_6.18.12-1~bpo13+1.debian.tar.xz f4f7a52ee7b4b602dda59dc3f39c3e3de15add5a 6025 linux_6.18.12-1~bpo13+1_source.buildinfo Checksums-Sha256: 3a12ed7ae249de96c8ed76ee0aabc978d14c494a17c022a15c9560f98268c994 140033 linux_6.18.12-1~bpo13+1.dsc 3a8a67752b7577fdf2df7d54838f818ac806958111d1cd3fa3ff155a63a827c2 1463268 linux_6.18.12-1~bpo13+1.debian.tar.xz 4c4fd76c148a62b208310b88906044b9228b16384c8937bca2fb5c2f1c292fe4 6025 linux_6.18.12-1~bpo13+1_source.buildinfo Files: a47bbac464b93fca313fb80a04172a98 140033 kernel optional linux_6.18.12-1~bpo13+1.dsc 6b24362e6929f6eedf23436029f18af9 1463268 kernel optional linux_6.18.12-1~bpo13+1.debian.tar.xz 253517c96bc17e1b2efcab447122c535 6025 kernel optional linux_6.18.12-1~bpo13+1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAmmg6NkACgkQ57/I7JWG EQnGpRAAvkjquHX0gUotkt64VZP3HsHK+qFeQAhxn7BpqN/izHAdwYdyRYuCtSqF GOq0jOr646WkZLel4Zoz25LEtTHJbeCBKJ9yCjn9v+fE9HV9r+O+RCZSL2MgIgp3 xxExATrEZm30VDfU5ZSYMo+zbzXWs8NnqQc1dyd03Luax2gWCZoO+U0Q0jXr4Dbp anSi+tdB+D2ktYi6jQSAHHPqdDw39cPGIFwP2sr52w34RObqwJbDN0nSS6tYFfze JHrNKTB9x3dDet3qmZUBQkukjr5rTUKx0bgZ/aeOisutfWbSuaVOl6m16/71f/Cq ZPoC1UkGPAVdl7St7A3rUVnbJGmqZJ5951L57Fp1Swwhyxn5Z7kJ41LjtAh8BXGt YfIp2zIaaTGDRIpLKjzv8p6ldQMaSDD7bdCTvxGpSvfXX72JswoD3COUmiFB2pss QQ843jj6j6SxGazhJNuCKW4k6JgSLubyyoQTjFOwMRxAwIkyg7WeGSGkzhP5FpC4 JCXHeL9bgBzg4/K8TNyHlLAGRTWvK+NKb0EBT6Khp/83D0rdcU7TuJL2ifYq8yBH Xa2Dk49l94uKtI0gTtwKlt8kAOyhtGnNEUypcl54aKzHZ/VNwIJtDmLRVVn5gT9J Vsh0fBndlL6Dtcg+WKqPTKoM49Uvp3ANOf93mCQzFhOSOzeGS4A= =sbG2 -----END PGP SIGNATURE-----
pgpRjSplhlebs.pgp
Description: PGP signature
