This bug was fixed in the package linux - 6.12.0-15.15
---------------
linux (6.12.0-15.15) plucky; urgency=medium
* plucky/linux: 6.12.0-15.15 -proposed tracker (LP: #2097354)
* Plucky update: v6.12.11 upstream stable release (LP: #2097346)
- efi/zboot: Limit compression options to GZIP and ZSTD
- net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()
- bpf: Fix bpf_sk_select_reuseport() memory leak
- eth: bnxt: always recalculate features after XDP clearing, fix null-deref
- net: ravb: Fix max TX frame size for RZ/V2M
- openvswitch: fix lockup on tx to unregistering netdev with carrier
- pktgen: Avoid out-of-bounds access in get_imix_entries
- ice: Fix E825 initialization
- ice: Fix quad registers read on E825
- ice: Fix ETH56G FC-FEC Rx offset value
- ice: Introduce ice_get_phy_model() wrapper
- ice: Add ice_get_ctrl_ptp() wrapper to simplify the code
- ice: Use ice_adapter for PTP shared data instead of auxdev
- ice: Add correct PHY lane assignment
- cpuidle: teo: Update documentation after previous changes
- btrfs: add the missing error handling inside get_canonical_dev_path
- gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp().
- gtp: Destroy device along with udp socket's netns dismantle.
- pfcp: Destroy device along with udp socket's netns dismantle.
- cpufreq: Move endif to the end of Kconfig file
- nfp: bpf: prevent integer overflow in nfp_bpf_event_output()
- net: xilinx: axienet: Fix IRQ coalescing packet count overflow
- net: fec: handle page_pool_dev_alloc_pages error
- net: make page_pool_ref_netmem work with net iovs
- net/mlx5: Fix RDMA TX steering prio
- net/mlx5: Fix a lockdep warning as part of the write combining test
- net/mlx5: SF, Fix add port error handling
- net/mlx5: Clear port select structure when fail to create
- net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel
- net/mlx5e: Rely on reqid in IPsec tunnel mode
- net/mlx5e: Always start IPsec sequence number from 1
- netdev: avoid CFI problems with sock priv helpers
- drm/tests: helpers: Fix compiler warning
- drm/vmwgfx: Unreserve BO on error
- drm/vmwgfx: Add new keep_resv BO param
- drm/v3d: Ensure job pointer is set to NULL after job completion
- reset: rzg2l-usbphy-ctrl: Assign proper of node to the allocated device
- soc: ti: pruss: Fix pruss APIs
- i2c: core: fix reference leak in i2c_register_adapter()
- platform/x86: dell-uart-backlight: fix serdev race
- platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: fix serdev race
- hwmon: (tmp513) Fix division of negative numbers
- Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data"
- i2c: mux: demux-pinctrl: check initial mux selection, too
- i2c: rcar: fix NACK handling when being a target
- i2c: testunit: on errors, repeat NACK until STOP
- hwmon: (ltc2991) Fix mixed signed/unsigned in DIV_ROUND_CLOSEST
- smb: client: fix double free of TCP_Server_Info::hostname
- mac802154: check local interfaces before deleting sdata list
- hfs: Sanity check the root record
- fs/qnx6: Fix building with GCC 15
- fs: fix missing declaration of init_files
- kheaders: Ignore silly-rename files
- netfs: Fix non-contiguous donation between completed reads
- cachefiles: Parse the "secctx" immediately
- scsi: ufs: core: Honor runtime/system PM levels if set by host controller
drivers
- gpio: virtuser: lock up configfs that an instantiated device depends on
- gpio: sim: lock up configfs that an instantiated device depends on
- selftests: tc-testing: reduce rshift value
- platform/x86/intel: power-domains: Add Clearwater Forest support
- platform/x86: ISST: Add Clearwater Forest to support list
- ACPI: resource: acpi_dev_irq_override(): Check DMI match last
- sched_ext: keep running prev when prev->scx.slice != 0
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- afs: Fix merge preference rule failure condition
- poll_wait: add mb() to fix theoretical race between waitqueue_active() and
.poll()
- selftests/sched_ext: fix build after renames in sched_ext API
- scx: Fix maximal BPF selftest prog
- RDMA/bnxt_re: Fix to export port num to ib_query_qp
- sched_ext: Fix dsq_local_on selftest
- nvmet: propagate npwg topology
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE
- x86/asm: Make serialize() always_inline
- ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA
- ALSA: hda/realtek: fixup ASUS GA605W
- ALSA: hda/realtek: fixup ASUS H7606W
- zram: fix potential UAF of zram table
- i2c: atr: Fix client detach
- mptcp: be sure to send ack when mptcp-level window re-opens
- mptcp: fix spurious wake-up on under memory pressure
- selftests: mptcp: avoid spurious errors on disconnect
- net: ethernet: xgbe: re-add aneg to supported features in PHY quirks
- vsock/bpf: return early if transport is not assigned
- vsock/virtio: discard packets if the transport changes
- vsock/virtio: cancel close work in the destructor
- vsock: reset socket state when de-assigning the transport
- vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
- nouveau/fence: handle cross device fences properly
- drm/nouveau/disp: Fix missing backlight control on Macbook 5,1
- net/ncsi: fix locking in Get MAC Address handling
- filemap: avoid truncating 64-bit offset to 32 bits
- fs/proc: fix softlockup in __read_vmcore (part 2)
- gpio: xilinx: Convert gpio_lock to raw spinlock
- tools: fix atomic_set() definition to set the value correctly
- pmdomain: imx8mp-blk-ctrl: add missing loop break condition
- mm/kmemleak: fix percpu memory leak detection failure
- selftests/mm: set allocated memory to non-zero content in cow test
- drm/amd/display: Do not elevate mem_type change to full update
- mm: clear uffd-wp PTE/PMD state on mremap()
- mm: vmscan : pgdemote vmstat is not getting updated when MGLRU is enabled.
- tracing: gfp: Fix the GFP enum values shown for user space tracing tools
- irqchip: Plug a OF node reference leak in platform_irqchip_probe()
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()
- hrtimers: Handle CPU state correctly on hotplug
- timers/migration: Fix another race between hotplug and idle entry/exit
- timers/migration: Enforce group initialization visibility to tree walkers
- x86/fred: Fix the FRED RSP0 MSR out of sync with its per-CPU cache
- drm/i915/fb: Relax clear color alignment to 64 bytes
- drm/xe: Mark ComputeCS read mode as UC on iGPU
- drm/xe/oa: Add missing VISACTL mux registers
- drm/amdgpu/smu13: update powersave optimizations
- drm/amdgpu: fix fw attestation for MP0_14_0_{2/3}
- drm/amdgpu: disable gfxoff with the compute workload on gfx12
- drm/amdgpu: always sync the GFX pipe on ctx switch
- drm/amd/display: Fix PSR-SU not support but still call the
amdgpu_dm_psr_enable
- drm/amd/display: Disable replay and psr while VRR is enabled
- drm/amd/display: Do not wait for PSR disable on vbl enable
- Revert "drm/amd/display: Enable urgent latency adjustments for DCN35"
- drm/amd/display: Validate mdoe under MST LCT=1 case as well
- Linux 6.12.11
* Plucky update: v6.12.10 upstream stable release (LP: #2097345)
- jbd2: increase IO priority for writing revoke records
- jbd2: flush filesystem device before updating tail sequence
- fs/writeback: convert wbc_account_cgroup_owner to take a folio
- iomap: pass byte granular end position to iomap_add_to_ioend
- iomap: fix zero padding data issue in concurrent append writes
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- dm array: fix unreleased btree blocks on closing a faulty array cursor
- dm array: fix cursor index when skipping across block boundaries
- netfs: Fix enomem handling in buffered reads
- nfs: Fix oops in nfs_netfs_init_request() when copying to cache
- netfs: Fix missing barriers by using clear_and_wake_up_bit()
- netfs: Fix ceph copy to cache on write-begin
- netfs: Fix the (non-)cancellation of copy when cache is temporarily
disabled
- netfs: Fix is-caching check in read-retry
- exfat: fix the infinite loop in exfat_readdir()
- exfat: fix the new buffer was not zeroed before writing
- exfat: fix the infinite loop in __exfat_free_cluster()
- fuse: respect FOPEN_KEEP_CACHE on opendir
- ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
- ovl: support encoding fid from inode with no alias
- ASoC: rt722: add delay time to wait for the calibration procedure
- ASoC: mediatek: disable buffer pre-allocation
- selftests/alsa: Fix circular dependency involving global-timer
- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
- net: 802: LLC+SNAP OID:PID lookup on start of skb data
- tcp/dccp: allow a connection when sk_max_ack_backlog is zero
- net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
- net: libwx: fix firmware mailbox abnormal return
- btrfs: avoid NULL pointer dereference if no valid extent tree
- pds_core: limit loop over fw name list
- bnxt_en: Fix possible memory leak when hwrm_req_replace fails
- bnxt_en: Fix DIM shutdown
- cxgb4: Avoid removal of uninserted tid
- net: don't dump Tx and uninitialized NAPIs
- ice: fix max values for dpll pin phase adjust
- ice: fix incorrect PHY settings for 100 GB/s
- igc: return early when failing to read EECD register
- tls: Fix tls_sw_sendmsg error handling
- ipvlan: Fix use-after-free in ipvlan_get_iflink().
- eth: gve: use appropriate helper to set xdp_features
- Bluetooth: hci_sync: Fix not setting Random Address when required
- Bluetooth: MGMT: Fix Add Device to responding before completing
- Bluetooth: btnxpuart: Fix driver sending truncated data
- Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices.
- tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev->features configuration too
early
- net: hns3: Resolved the issue that the debugfs query result is
inconsistent.
- net: hns3: don't auto enable misc vector
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- mctp i3c: fix MCTP I3C driver multi-thread issue
- netfilter: nf_tables: imbalance in flowtable binding
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- net: stmmac: dwmac-tegra: Read iommu stream id from device tree
- rtase: Fix a check for error in rtase_alloc_msix()
- net/mlx5: Fix variable not being completed when function returns
- drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind
returns err
- drm/mediatek: Move mtk_crtc_finish_page_flip() to ddp_cmdq_cb()
- drm/mediatek: Add support for 180-degree rotation in the display driver
- drm/mediatek: stop selecting foreign drivers
- drm/mediatek: Fix YCbCr422 color format issue for DP
- drm/mediatek: Fix mode valid issue for dp
- drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188
- gpio: virtuser: fix missing lookup table cleanups
- gpio: virtuser: fix handling of multiple conn_ids in lookup table
- drm/mediatek: Add return value check when reading DPCD
- ksmbd: fix a missing return value check bug
- afs: Fix the maximum cell name length
- platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually
enabled
it
- platform/x86: intel/pmc: Fix ioremap() of bad address
- ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
- riscv: module: remove relocation_head rel_entry member allocation
- cpuidle: riscv-sbi: fix device node release in early exit of
for_each_possible_cpu
- riscv: mm: Fix the out of bound issue of vmemmap address
- riscv: stacktrace: fix backtracing through exceptions
- riscv: use local label names instead of global ones in assembly
- drm/xe: Fix tlb invalidation when wedging
- netfs: Fix kernel async DIO
- netfs: Fix read-retry for fs with no ->prepare_read()
- drivers/perf: riscv: Fix Platform firmware event data
- drivers/perf: riscv: Return error for default case
- dm thin: make get_first_thin use rcu-safe list first function
- scsi: ufs: qcom: Power off the PHY if it was already powered on in
ufs_qcom_power_up_sequence()
- vfio/pci: Fallback huge faults for unaligned pfn
- fs: relax assertions on failure to encode file handles
- fs: fix is_mnt_ns_file()
- dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
- dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take
2)
- mptcp: sysctl: avail sched: remove write access
- mptcp: sysctl: sched: avoid using current->nsproxy
- mptcp: sysctl: blackhole timeout: avoid using current->nsproxy
- sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
- sctp: sysctl: rto_min/max: avoid using current->nsproxy
- sctp: sysctl: auth_enable: avoid using current->nsproxy
- sctp: sysctl: udp_port: avoid using current->nsproxy
- sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
- rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
- ksmbd: Implement new SMB3 POSIX type
- btrfs: zlib: fix avail_in bytes for s390 zlib HW compression path
- Revert "drm/mediatek: dsi: Correct calculation formula of PHY Timing"
- drm/amd/display: Remove unnecessary amdgpu_irq_get/put
- drm/amd/display: Add check for granularity in dml ceil/floor helpers
- cgroup/cpuset: Prevent leakage of isolated CPUs into sched domains
- thermal: of: fix OF node leak in of_thermal_zone_find()
- sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass()
- sched_ext: switch class when preempted by higher priority scheduler
- cgroup/cpuset: remove kernfs active break
- sched_ext: idle: Refresh idle masks during idle-to-idle transitions
- arm64: dts: qcom: x1e80100: Fix up BAR space size for PCIe6a
- arm64: dts: qcom: sa8775p: Fix the size of 'addr_space' regions
- smb: client: sync the root session and superblock context passwords before
automounting
- fs: kill MNT_ONRB
- riscv: Fix sleeping in invalid context in die()
- riscv: kprobes: Fix incorrect address calculation
- gpio: loongson: Fix Loongson-2K2000 ACPI GPIO register offset
- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
- ACPI: resource: Add Asus Vivobook X1504VAP to
irq1_level_low_skip_override[]
- drm/amdgpu: Add a lock when accessing the buddy trim function
- drm/amd/pm: fix BUG: scheduling while atomic
- drm/amdkfd: fixed page fault when enable MES shader debugger
- drm/amdkfd: wq_release signals dma_fence only when available
- drm/amd/display: fix divide error in DM plane scale calcs
- drm/amd/display: fix page fault due to max surface definition mismatch
- drm/amd/display: increase MAX_SURFACES to the value supported by hw
- io_uring/timeout: fix multishot updates
- io_uring/sqpoll: zero sqd->thread on tctx errors
- USB: serial: option: add MeiG Smart SRM815
- USB: serial: option: add Neoway N723-EA support
- staging: iio: ad9834: Correct phase range check
- staging: iio: ad9832: Correct phase range check
- usb-storage: Add max sectors quirk for Nokia 208
- USB: serial: cp210x: add Phoenix Contact UPS Device
- usb: dwc3: gadget: fix writing NYET threshold
- topology: Keep the cpumask unchanged when printing cpumap
- misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
- misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set
config
- tty: serial: 8250: Fix another runtime PM usage counter underflow
- serial: stm32: use port lock wrappers for break control
- usb: gadget: u_serial: Disable ep before setting port to null to fix the
crash caused by port being null
- x86/fpu: Ensure shadow stack is active before "getting" registers
- usb: dwc3-am62: Disable autosuspend during remove
- USB: usblp: return error when setting unsupported protocol
- USB: core: Disable LPM only for non-suspended ports
- usb: fix reference leak in usb_new_device()
- usb: gadget: midi2: Reverse-select at the right place
- usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and
in
the error path of .probe()
- usb: typec: tcpci: fix NULL pointer issue on shared irq case
- usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
- usb: typec: tcpm/tcpci_maxim: fix error code in
max_contaminant_read_resistance_kohm()
- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
- usb: gadget: configfs: Ignore trailing LF for user strings to cdev
- usb: host: xhci-plat: set skip_phy_initialization if software node has
XHCI_SKIP_PHY_INIT property
- usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control()
- iio: pressure: zpa2326: fix information leak in triggered buffer
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered
buffer
- iio: light: vcnl4035: fix information leak in triggered buffer
- iio: light: bh1745: fix information leak in triggered buffer
- iio: imu: kmx61: fix information leak in triggered buffer
- iio: adc: rockchip_saradc: fix information leak in triggered buffer
- iio: adc: ti-ads8688: fix information leak in triggered buffer
- iio: adc: ti-ads1119: fix information leak in triggered buffer
- iio: adc: ti-ads1119: fix sample size in scan struct for triggered buffer
- iio: gyro: fxas21002c: Fix missing data update in trigger handler
- iio: adc: ti-ads1298: Add NULL check in ads1298_init
- iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
- iio: adc: at91: call input_free_device() on allocated iio_dev
- iio: inkern: call iio_device_put() only on mapped devices
- iio: adc: ad7173: fix using shared static info struct
- iio: adc: ad7124: Disable all channels at probe time
- io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
- arm64: dts: imx95: correct the address length of netcmix_blk_ctrl
- ARM: dts: imxrt1050: Fix clocks for mmc
- arm64: dts: qcom: sa8775p: fix the secure device bootup issue
- hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors
occur
- block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
- arm64: dts: rockchip: add hevc power domain clock to rk3328
- firewall: remove misplaced semicolon from stm32_firewall_get_firewall
- drm/mediatek: Only touch DISP_REG_OVL_PITCH_MSB if AFBC is supported
- io_uring: don't touch sqd->thread off tw add
- iio: imu: inv_icm42600: fix spi burst write not supported
- netdev: prevent accessing NAPI instances from another namespace
- Linux 6.12.10
* Plucky update: v6.12.9 upstream stable release (LP: #2097344)
- platform/x86: mlx-platform: call pci_dev_put() to balance the refcount
- drm/amdgpu: fix backport of commit 73dae652dcac
- platform/x86: thinkpad-acpi: Add support for hotkey 0x1401
- platform/x86: hp-wmi: mark 8A15 board for timed OMEN thermal profile
- selinux: ignore unknown extended permissions
- mmc: sdhci-msm: fix crypto key eviction
- pmdomain: imx: gpcv2: fix an OF node reference leak in imx_gpcv2_probe()
- pmdomain: core: add dummy release function to genpd device
- tracing: Have process_string() also allow arrays
- block: lift bio_is_zone_append to bio.h
- btrfs: use bio_is_zone_append() in the completion handler
- RDMA/bnxt_re: Remove always true dattr validity check
- sched_ext: fix application of sizeof to pointer
- RDMA/mlx5: Enforce same type port association for multiport RoCE
- RDMA/bnxt_re: Fix max SGEs for the Work Request
- RDMA/bnxt_re: Avoid initializing the software queue for user queues
- RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- nvme-pci: 512 byte aligned dma pool segment quirk
- RDMA/bnxt_re: Fix the check for 9060 condition
- RDMA/bnxt_re: Add check for path mtu in modify_qp
- RDMA/bnxt_re: Fix reporting hw_ver in query_device
- RDMA/nldev: Set error code in rdma_nl_notify_event
- RDMA/siw: Remove direct link to net_device
- RDMA/bnxt_re: Fix max_qp_wrs reported
- RDMA/bnxt_re: Disable use of reserved wqes
- RDMA/bnxt_re: Add send queue size check for variable wqe
- RDMA/bnxt_re: Fix MSN table size for variable wqe mode
- RDMA/bnxt_re: Fix the locking while accessing the QP table
- net: phy: micrel: Dynamically control external clock of KSZ PHY
- drm/bridge: adv7511_audio: Update Audio InfoFrame properly
- net: dsa: microchip: Fix KSZ9477 set_ageing_time function
- net: dsa: microchip: Fix LAN937X set_ageing_time function
- selftests: net: local_termination: require mausezahn
- netdev-genl: avoid empty messages in napi get
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix missing flush CQE for DWQE
- drm/xe: Revert some changes that break a mesa debug tool
- drm/xe/pf: Use correct function to check LMEM provisioning
- drm/xe: Fix fault on fd close after unbind
- net: stmmac: restructure the error path of stmmac_probe_config_dt()
- net: fix memory leak in tcp_conn_request()
- net: Fix netns for ip_tunnel_init_flow()
- netrom: check buffer length before accessing it
- net: pse-pd: tps23881: Fix power on/off issue
- net/mlx5: DR, select MSIX vector 0 for completion queue creation
- net/mlx5e: macsec: Maintain TX SA from encoding_sa
- net/mlx5e: Skip restore TC rules for vport rep without loaded flag
- net/mlx5e: Keep netdev when leave switchdev for devlink set legacy only
- RDMA/rxe: Remove the direct link to net_device
- drm/i915/cx0_phy: Fix C10 pll programming sequence
- drm/i915/dg1: Fix power gate sequence.
- workqueue: add printf attribute to __alloc_workqueue()
- netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
- net: llc: reset skb->transport_header
- nvmet: Don't overflow subsysnqn
- ALSA: usb-audio: US16x08: Initialize array before use
- eth: bcmsysport: fix call balance of priv->clk handling routines
- net: mv643xx_eth: fix an OF node reference leak
- net: wwan: t7xx: Fix FSM command timeout issue
- RDMA/rtrs: Ensure 'ib_sge list' is accessible
- RDMA/bnxt_re: Fix error recovery sequence
- io_uring/net: always initialize kmsg->msg.msg_inq upfront
- net: sfc: Correct key_len for efx_tc_ct_zone_ht_params
- net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets
- net: restrict SO_REUSEPORT to inet sockets
- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
- af_packet: fix vlan_get_tci() vs MSG_PEEK
- af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
- ila: serialize calls to nf_register_net_hooks()
- net: ti: icssg-prueth: Fix firmware load sequence.
- net: ti: icssg-prueth: Fix clearing of IEP_CMP_CFG registers during
iep_init
- btrfs: allow swap activation to be interruptible
- perf/x86/intel: Add Arrow Lake U support
- wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
- wifi: cfg80211: clear link ID from bitmap during link delete after clean
up
- wifi: mac80211: wake the queues in case of failure in resume
- drm/amdgpu: use sjt mec fw on gfx943 for sriov
- drm/amdkfd: Correct the migration DMA map direction
- ALSA: hda: cs35l56: Remove calls to
cs35l56_force_sync_asp1_registers_from_cache()
- ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio
- btrfs: handle bio_split() errors
- btrfs: flush delalloc workers queue before stopping cleaner kthread during
unmount
- ALSA: hda/ca0132: Use standard HD-audio quirk matching helpers
- ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model
- sound: usb: enable DSD output for ddHiFi TC44C
- sound: usb: format: don't warn that raw DSD is unsupported
- spi: spi-cadence-qspi: Disable STIG mode for Altera SoCFPGA.
- ASoC: audio-graph-card: Call of_node_put() on correct node
- ARC: build: disallow invalid PAE40 + 4K page config
- ARC: build: Use __force to suppress per-CPU cmpxchg warnings
- ARC: bpf: Correct conditional check in 'check_jmp_32'
- bpf: fix potential error return
- ksmbd: retry iterate_dir in smb2_query_dir
- ksmbd: set ATTR_CTIME flags when setting mtime
- smb: client: destroy cfid_put_wq on module exit
- net: usb: qmi_wwan: add Telit FE910C04 compositions
- Bluetooth: hci_core: Fix sleeping function called from invalid context
- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
- ARC: build: Try to guess GCC variant of cross compiler
- bpf: refactor bpf_helper_changes_pkt_data to use helper number
- bpf: consider that tail calls invalidate packet pointers
- clk: thead: Fix TH1520 emmc and shdci clock rate
- scripts/mksysmap: Fix escape chars '$'
- kbuild: pacman-pkg: provide versioned linux-api-headers package
- Revert "ALSA: ump: Don't enumeration invalid groups for legacy rawmidi"
- RDMA/mlx5: Enable multiplane mode only when it is supported
- io_uring/kbuf: use pre-committed buffer address for non-pollable file
- ALSA: seq: Check UMP support for midi_version change
- ftrace: Fix function profiler's filtering functionality
- drm/xe: Use non-interruptible wait when moving BO to system
- drm/xe: Wait for migration job before unmapping pages
- ALSA hda/realtek: Add quirk for Framework F111:000C
- ALSA: seq: oss: Fix races at processing SysEx messages
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- kcov: mark in_softirq_really() as __always_inline
- maple_tree: reload mas before the second call for mas_empty_area
- clk: clk-imx8mp-audiomix: fix function signature
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and
transitivity
- sched_ext: Fix invalid irq restore in scx_ops_bypass()
- RDMA/uverbs: Prevent integer overflow issue
- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
- workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from
!WQ_MEM_RECLAIM worker
- sky2: Add device ID 11ab:4373 for Marvell 88E8075
- sched_ext: initialize kit->cursor.flags
- net/sctp: Prevent autoclose integer overflow in sctp_association_init()
- io_uring/rw: fix downgraded mshot read
- drm: adv7511: Drop dsi single lane support
- dt-bindings: display: adi,adv7533: Drop single lane support
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- wifi: iwlwifi: mvm: Fix __counted_by usage in cfg80211_wowlan_nd_*
- fgraph: Add READ_ONCE() when accessing fgraph_array[]
- net: ethernet: ti: am65-cpsw: default to round-robin for host port receive
- mm/damon/core: fix ignored quota goals and filters of newly committed
schemes
- mm/damon/core: fix new damon_target objects leaks on
damon_commit_targets()
- mm: shmem: fix the update of 'shmem_falloc->nr_unswapped'
- mm: shmem: fix incorrect index alignment for within_size policy
- fs/proc/task_mmu: fix pagemap flags with PMD THP entries on 32bit
- gve: process XSK TX descriptors as part of RX NAPI
- gve: clean XDP queues in gve_tx_stop_ring_gqi
- gve: guard XSK operations on the existence of queues
- gve: fix XDP allocation path in edge cases
- gve: guard XDP xmit NDO on existence of xdp queues
- gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup
- mm/readahead: fix large folio support in async readahead
- mm/kmemleak: fix sleeping function called from invalid context at print
message
- mm: vmscan: account for free pages to prevent infinite Loop in
throttle_direct_reclaim()
- mm: reinstate ability to map write-sealed memfd mappings read-only
- mm: hugetlb: independent PMD page table shared count
- mptcp: fix TCP options overflow.
- mptcp: fix recvbuffer adjust on sleeping rcvmsg
- mptcp: don't always assume copied data in mptcp_cleanup_rbuf()
- Linux 6.12.9
* Plucky update: v6.12.8 upstream stable release (LP: #2097343)
- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
- ceph: allocate sparse_ext map only for sparse reads
- arm64: dts: broadcom: Fix L2 linesize for Raspberry Pi 5
- bpf: Fix bpf_get_smp_processor_id() on !CONFIG_SMP
- fork: avoid inappropriate uprobe access to invalid mm
- mm/vmstat: fix a W=1 clang compiler warning
- selftests/bpf: Fix compilation error in get_uprobe_offset()
- smb: client: Deduplicate "select NETFS_SUPPORT" in Kconfig
- smb: fix bytes written value in /proc/fs/cifs/Stats
- tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
- tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection
- bpf: Check negative offsets in __bpf_skb_min_len()
- nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
- nfsd: restore callback functionality for NFSv4.0
- mtd: diskonchip: Cast an operand to prevent potential overflow
- mtd: rawnand: arasan: Fix double assertion of chip-select
- mtd: rawnand: arasan: Fix missing de-registration of NAND
- phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP
- phy: core: Fix an OF node refcount leakage in _of_phy_get()
- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
- phy: core: Fix that API devm_phy_put() fails to release the phy
- phy: core: Fix that API devm_of_phy_provider_unregister() fails to
unregister the phy provider
- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
- phy: usb: Toggle the PHY power during init
- phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM
- phy: rockchip: naneng-combphy: fix phy reset
- ALSA: memalloc: prefer dma_mapping_error() over explicit address checking
- dmaengine: mv_xor: fix child node refcount handling in early exit
- dmaengine: dw: Select only supported masters for ACPI devices
- dmaengine: tegra: Return correct DMA status when paused
- dmaengine: amd: qdma: Remove using the private get and set dma_ops APIs
- dmaengine: fsl-edma: implement the cleanup path of fsl_edma3_attach_pd()
- dmaengine: apple-admac: Avoid accessing registers in probe
- dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
- ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP
- platform/chrome: cros_ec_lpc: fix product identity for early Framework
Laptops
- mtd: rawnand: fix double free in atmel_pmecc_create_user()
- ASoC: amd: ps: Fix for enabling DMIC on acp63 platform via _DSD entry
- ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 21QA and 21QB
- ASoC: dt-bindings: realtek,rt5645: Fix CPVDD voltage comment
- ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 21Q6 and 21Q7
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct
- power: supply: bq24190: Fix BQ24296 Vbus regulator support
- stddef: make __struct_group() UAPI C++-friendly
- tracing/kprobe: Make trace_kprobe's module callback called after
jump_label
update
- watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
- watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler
- Revert "watchdog: s3c2410_wdt: use exynos_get_pmu_regmap_by_phandle() for
PMU regs"
- watchdog: mediatek: Add support for MT6735 TOPRGU/WDT
- scsi: qla1280: Fix hw revision numbering for ISP1020/1040
- scsi: megaraid_sas: Fix for a potential deadlock
- udf: Skip parent dir link count update if corrupted
- udf: Verify inode link counts before performing rename
- ALSA: ump: Don't open legacy substream for an inactive group
- ALSA: ump: Indicate the inactive group in legacy substream names
- ALSA: ump: Update legacy substream names upon FB info update
- ALSA: hda/conexant: fix Z60MR100 startup pop issue
- ALSA: sh: Use standard helper for buffer accesses
- smb: server: Fix building with GCC 15
- regmap: Use correct format specifier for logging range errors
- LoongArch: Fix reserving screen info memory for above-4G firmware
- LoongArch: BPF: Adjust the parameter of emit_jirl()
- platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
- bpf: Zero index arg error string for dynptr and iter
- spi: intel: Add Panther Lake SPI controller support
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver
load
time
- scsi: mpi3mr: Synchronize access to ioctl data buffer
- scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
- scsi: mpi3mr: Start controller indexing from 0
- scsi: mpi3mr: Handling of fault code for insufficient power
- scsi: storvsc: Do not flag MAINTENANCE_IN return of
SRB_STATUS_DATA_OVERRUN
as an error
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- spi: omap2-mcspi: Fix the IS_ERR() bug for devm_clk_get_optional_enabled()
- drm/dp_mst: Ensure mst_primary pointer is valid in
drm_dp_mst_handle_up_req()
- virtio-blk: don't keep queue frozen during system suspend
- blk-mq: register cpuhp callback after hctx is added to xarray table
- wifi: iwlwifi: be less noisy if the NIC is dead in S3
- ublk: detach gendisk from ublk device if add_disk() fails
- drm/xe: Take PM ref in delayed snapshot capture worker
- drm/xe: Move the coredump registration to the worker thread
- objtool: Add bch2_trans_unlocked_error() to bcachefs noreturns
- freezer, sched: Report frozen tasks as 'D' instead of 'R'
- dmaengine: loongson2-apb: Change GENMASK to GENMASK_ULL
- perf/x86/intel/uncore: Add Clearwater Forest support
- tracing: Constify string literal data member in struct trace_event_call
- tracing: Prevent bad count for tracing_cpumask_write
- rtla/timerlat: Fix histogram ALL for zero samples
- io_uring/sqpoll: fix sqpoll error handling races
- i2c: microchip-core: actually use repeated sends
- x86/fred: Clear WFE in missing-ENDBRANCH #CPs
- virt: tdx-guest: Just leak decrypted memory on unrecoverable errors
- PCI/MSI: Handle lack of irqdomain gracefully
- perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC
- i2c: imx: add imx7d compatible string for applying erratum ERR007805
- i2c: microchip-core: fix "ghost" detections
- perf/x86/intel/ds: Add PEBS format 6
- power: supply: cros_charge-control: add mutex for driver data
- power: supply: cros_charge-control: allow start_threshold == end_threshold
- power: supply: cros_charge-control: hide start threshold on v2 cmd
- power: supply: gpio-charger: Fix set charge current limits
- btrfs: fix race with memory mapped writes when activating swap file
- btrfs: avoid monopolizing a core when activating a swap file
- btrfs: fix swap file activation failure due to extents that used to be
shared
- btrfs: fix transaction atomicity bug when enabling simple quotas
- btrfs: sysfs: fix direct super block member reads
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- btrfs: check folio mapping after unlock in put_file_data()
- btrfs: check folio mapping after unlock in relocate_one_folio()
- Bluetooth: btusb: mediatek: move Bluetooth power off command position
- Bluetooth: btusb: mediatek: add callback function in btusb_disconnect
- Bluetooth: btusb: mediatek: add intf release flow when usb disconnect
- Bluetooth: btusb: mediatek: change the conditions for ISO interface
- ALSA: ump: Shut up truncated string warning
- ALSA: sh: Fix wrong argument order for copy_from_iter()
- Linux 6.12.8
* Plucky update: v6.12.7 upstream stable release (LP: #2097342)
- net: sched: fix ordering of qlen adjustment
- net: stmmac: fix TSO DMA API usage causing oops
- firmware: arm_scmi: Fix i.MX build dependency
- firmware: arm_ffa: Fix the race around setting ffa_dev->properties
- RISC-V: KVM: Fix csr_write -> csr_set for HVIEN PMU overflow bit
- sched/fair: Fix NEXT_BUDDY
- sched/fair: Fix sched_can_stop_tick() for fair tasks
- sched/eevdf: More PELT vs DELAYED_DEQUEUE
- p2sb: Factor out p2sb_read_from_cache()
- p2sb: Introduce the global flag p2sb_hidden_by_bios
- p2sb: Move P2SB hide and unhide code to p2sb_scan_and_cache()
- p2sb: Do not scan and remove the P2SB device when it is unhidden
- i2c: pnx: Fix timeout in wait functions
- s390/ipl: Fix never less than zero warning
- erofs: fix PSI memstall accounting
- sched/dlserver: Fix dlserver double enqueue
- sched/dlserver: Fix dlserver time accounting
- s390/mm: Consider KMSAN modules metadata for paging levels
- erofs: add erofs_sb_free() helper
- erofs: use `struct erofs_device_info` for the primary device
- erofs: reference `struct erofs_device_info` for erofs_map_dev
- erofs: use buffered I/O for file-backed mounts by default
- xfs: sb_spino_align is not verified
- xfs: fix sparse inode limits on runt AG
- xfs: fix off-by-one error in fsmap's end_daddr usage
- xfs: fix sb_spino_align checks for large fsblock sizes
- xfs: fix zero byte checking in the superblock scrubber
- tools: hv: change permissions of NetworkManager configuration file
- cxl/pci: Fix potential bogus return value upon successful probing
- cxl/region: Fix region creation for greater than x2 switches
- net/smc: protect link down work from execute after lgr freed
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal
msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal
msg
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check return value of sock_recvmsg when draining clc data
- net: mscc: ocelot: fix incorrect IFH SRC_PORT field in
ocelot_ifh_set_basic()
- netdevsim: prevent bad user input in nsim_dev_health_break_write()
- tools/net/ynl: fix sub-message key lookup for nested attributes
- ionic: Fix netdev notifier unregister on failure
- ionic: no double destroy workqueue
- ionic: use ee->offset when returning sprom data
- net: renesas: rswitch: rework ts tags management
- ksmbd: count all requests in req_running counter
- ksmbd: fix broken transfers when exceeding max simultaneous operations
- netdev: fix repeated netlink messages in queue dump
- netdev: fix repeated netlink messages in queue stats
- team: Fix feature exposure when no ports are present
- net: hinic: Fix cleanup in create_rxqs/txqs()
- net: ethernet: oa_tc6: fix infinite loop error when tx credits becomes 0
- net: ethernet: oa_tc6: fix tx skb race condition between reference
pointers
- net: ethernet: bgmac-platform: fix an OF node reference leak
- net: netdevsim: fix nsim_pp_hold_write()
- can: m_can: set init flag earlier in probe
- can: m_can: fix missed interrupts with m_can_pci
- ipvs: Fix clamp() of ip_vs_conn_tab on small memory systems
- netfilter: ipset: Fix for recursive locking warning
- selftests: openvswitch: fix tcpdump execution
- net: dsa: restore dsa_software_vlan_untag() ability to operate on VLAN-
untagged traffic
- netdev-genl: avoid empty messages in queue dump
- psample: adjust size if rate_as_probability is set
- net: mdiobus: fix an OF node reference leak
- mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
- mmc: mtk-sd: disable wakeup in .remove() and in the error path of .probe()
- irqchip/gic-v3: Work around insecure GIC integrations
- EDAC/amd64: Simplify ECC check on unified memory controllers
- KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden
- KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init
- net: tun: fix tun_napi_alloc_frags()
- chelsio/chtls: prevent potential integer overflow on 32bit
- net: mctp: handle skb cleanup on sock_queue failures
- block: Revert "block: Fix potential deadlock while freezing queue and
acquiring sysfs_lock"
- i2c: riic: Always round-up when calculating bus period
- efivarfs: Fix error on non-existent file
- hexagon: Disable constant extender optimization for LLVM prior to 19.1.0
- USB: serial: option: add TCL IK512 MBIM & ECM
- USB: serial: option: add MeiG Smart SLM770A
- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
- USB: serial: option: add MediaTek T7XX compositions
- USB: serial: option: add Telit FE910C04 rmnet compositions
- xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
- thunderbolt: Add support for Intel Panther Lake-M/P
- thunderbolt: Improve redrive mode handling
- thunderbolt: Don't display nvm_version unless upgrade supported
- drm/display: use ERR_PTR on DP tunnel manager creation fail
- drm/amd: Update strapping for NBIO 2.5.0
- drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
- drm/amdgpu: fix amdgpu_coredump
- drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
- udmabuf: udmabuf_create pin folio codestyle cleanup
- udmabuf: fix memory leak on last export_udmabuf() error path
- dma-buf: Fix __dma_buf_debugfs_list_del argument for !CONFIG_DEBUG_FS
- drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference
- drm/panel: novatek-nt35950: fix return value check in nt35950_probe()
- drm/panel: st7701: Add prepare_prev_first flag to drm_panel
- drm/panel: synaptics-r63353: Fix regulator unbalance
- i915/guc: Reset engine utilization buffer before registration
- i915/guc: Ensure busyness counter increases motonically
- i915/guc: Accumulate active runtime on gt reset
- drm/amdgpu: don't access invalid sched
- hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit
Registers
- hwmon: (tmp513) Fix Current Register value interpretation
- hwmon: (tmp513) Fix interpretation of values of Temperature Result and
Limit
Registers
- block: avoid to reuse `hctx` not removed from cpuhp callback list
- trace/ring-buffer: Do not use TP_printk() formatting for boot mapped
buffers
- drm/amdgpu/nbio7.11: fix IP version check
- drm/amdgpu/nbio7.7: fix IP version check
- drm/amdgpu/smu14.0.2: fix IP version check
- zram: refuse to use zero sized block device as backing device
- zram: fix uninitialized ZRAM not releasing backing device
- vmalloc: fix accounting with i915
- mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in
split_large_buddy()
- ring-buffer: Fix overflow in __rb_map_vma
- alloc_tag: fix set_codetag_empty() when !CONFIG_MEM_ALLOC_PROFILING_DEBUG
- btrfs: split bios to the fs sector size boundary
- btrfs: fix improper generation check in snapshot delete
- btrfs: tree-checker: reject inline extent items with 0 ref count
- s390/mm: Fix DirectMap accounting
- drm/amdgpu/nbio7.0: fix IP version check
- drm/amdgpu/gfx12: fix IP version check
- drm/amdgpu/mmhub4.1: fix IP version check
- fgraph: Still initialize idle shadow stacks when starting
- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
- tools: hv: Fix a complier warning in the fcopy uio daemon
- x86/hyperv: Fix hv tsc page based sched_clock for hibernation
- KVM: x86: Play nice with protected guests in complete_hypercall_exit()
- smb: client: fix TCP timers deadlock after rmmod
- accel/ivpu: Fix general protection fault in ivpu_bo_list()
- accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal()
- tracing: Fix test_event_printk() to process entire print argument
- tracing: Add missing helper functions in event pointer dereference check
- tracing: Add "%s" check in test_event_printk()
- tracing: Check "%s" dereference via the field and not the TP_printk format
- selftests/memfd: run sysctl tests when PID namespace support is enabled
- selftests/bpf: Use asm constraint "m" for LoongArch
- io_uring: Fix registered ring file refcount leak
- io_uring: check if iowq is killed before queuing
- NFS/pnfs: Fix a live lock between recalled layouts and layoutget
- KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits
- of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent()
- of/irq: Fix using uninitialized variable @addr_len in API
of_irq_parse_one()
- ocfs2: fix the space leak in LA when releasing LA
- nilfs2: fix buffer head leaks in calls to truncate_inode_pages()
- nilfs2: prevent use of deleted inode
- udmabuf: fix racy memfd sealing check
- udmabuf: also check for F_SEAL_FUTURE_WRITE
- of: property: fw_devlink: Do not use interrupt-parent directly
- of: address: Preserve the flags portion on 1:1 dma-ranges mapping
- of: Fix error path in of_parse_phandle_with_args_map()
- of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
- ceph: give up on paths longer than PATH_MAX
- ceph: validate snapdirname option length when mounting
- ceph: improve error handling and short/overflow-read logic in
__ceph_sync_read()
- ceph: fix memory leaks in __ceph_sync_read()
- ceph: fix memory leak in ceph_direct_read_write()
- mm: use aligned address in clear_gigantic_page()
- mm: use aligned address in copy_user_gigantic_page()
- mm: shmem: fix ShmemHugePages at swapout
- mm: convert partially_mapped set/clear operations to be atomic
- epoll: Add synchronous wakeup support for ep_poll_callback
- Linux 6.12.7
* Plucky update: v6.12.6 upstream stable release (LP: #2097340)
- usb: misc: onboard_usb_dev: skip suspend/resume sequence for USB5744 SMBus
support
- serial: sh-sci: Check if TX data was written to device in .tx_empty()
- bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
- sched/deadline: Fix replenish_dl_new_period dl_server condition
- perf/x86/intel/ds: Unconditionally drain PEBS DS when changing
PEBS_DATA_CFG
- clk: en7523: Fix wrong BUS clock for EN7581
- ksmbd: fix racy issue from session lookup and expire
- splice: do not checksum AF_UNIX sockets
- tcp: check space before adding MPTCP SYN options
- perf ftrace: Fix undefined behavior in cmp_profile_data()
- virtio_net: correct netdev_tx_reset_queue() invocation point
- virtio_ring: add a func argument 'recycle_done' to virtqueue_resize()
- virtio_net: ensure netdev_tx_reset_queue is called on tx ring resize
- riscv: mm: Do not call pmd dtor on vmemmap page table teardown
- riscv: Fix wrong usage of __pa() on a fixmap address
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- block: Switch to using refcount_t for zone write plugs
- block: Use a zone write plug BIO work for REQ_NOWAIT BIOs
- dm: Fix dm-zoned-reclaim zone write pointer alignment
- block: Prevent potential deadlocks in zone write plug error recovery
- gpio: graniterapids: Fix GPIO Ack functionality
- memcg: slub: fix SUnreclaim for post charged objects
- spi: rockchip: Fix PM runtime count on no-op cs
- gpio: ljca: Initialize num before accessing item in ljca_gpio_config
- ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5
- ALSA: hda/realtek: Fix headset mic on Acer Nitro 5
- riscv: Fix IPIs usage in kfence_protect_page()
- crypto: hisilicon/debugfs - fix the struct pointer incorrectly offset
problem
- drm/panic: remove spurious empty line to clean warning
- usb: host: max3421-hcd: Correctly abort a USB request.
- block: Ignore REQ_NOWAIT for zone reset and zone finish operations
- gpio: graniterapids: Fix vGPIO driver crash
- gpio: graniterapids: Fix incorrect BAR assignment
- gpio: graniterapids: Fix invalid GPI_IS register offset
- gpio: graniterapids: Fix invalid RXEVCFG register bitmask
- gpio: graniterapids: Determine if GPIO pad can be used by driver
- gpio: graniterapids: Check if GPIO line can be used for IRQs
- usb: core: hcd: only check primary hcd skip_phy_initialization
- bpf: Revert "bpf: Mark raw_tp arguments with PTR_MAYBE_NULL"
- ata: sata_highbank: fix OF node reference leak in
highbank_initialize_phys()
- usb: dwc2: Fix HCD resume
- usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
- usb: dwc2: Fix HCD port connection race
- scsi: ufs: core: Update compl_time_stamp_local_clock after completing a
cqe
- usb: gadget: midi2: Fix interpretation of is_midi1 bits
- usb: ehci-hcd: fix call balance of clocks handling routines
- usb: typec: anx7411: fix fwnode_handle reference leak
- usb: dwc3: imx8mp: fix software node kernel dump
- usb: typec: anx7411: fix OF node reference leaks in
anx7411_typec_switch_probe()
- usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to
accessing null pointer
- usb: typec: ucsi: Fix completion notifications
- usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode
- iommu/tegra241-cmdqv: do not use smp_processor_id in preemptible context
- iommu/vt-d: Remove cache tags before disabling ATS
- iommu/vt-d: Fix qi_batch NULL pointer with nested parent domain
- drm/xe: Call invalidation_fence_fini for PT inval fences in error state
- drm/amdkfd: pause autosuspend when creating pdd
- drm/i915: Fix memory leak by correcting cache object name in error handler
- drm/i915/color: Stop using non-posted DSB writes for legacy LUT
- drm/i915: Fix NULL pointer dereference in capture_engine
- drm/amdgpu: fix UVD contiguous CS mapping problem
- drm/amd/pm: Set SMU v13.0.7 default workload type
- drm/amdgpu: fix when the cleaner shader is emitted
- drm/amdkfd: Dereference null return value
- drm/amdkfd: hard-code cacheline size for gfx11
- drm/amdkfd: hard-code MALL cacheline size for gfx11, gfx12
- xfs: set XFS_SICK_INO_SYMLINK_ZAPPED explicitly when zapping a symlink
- xfs: update btree keys correctly when _insrec splits an inode root block
- xfs: don't drop errno values when we fail to ficlone the entire range
- xfs: return a 64-bit block count from xfs_btree_count_blocks
- xfs: fix null bno_hint handling in xfs_rtallocate_rtg
- xfs: return from xfs_symlink_verify early on V4 filesystems
- xfs: fix scrub tracepoints when inode-rooted btrees are involved
- xfs: only run precommits once per transaction object
- xfs: unlock inodes when erroring out of xfs_trans_alloc_dir
- bpf: Check size for BTF-based ctx access of pointer members
- bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()
- bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
- bpf, sockmap: Fix race between element replace and close()
- bpf, sockmap: Fix update element with same
- bpf: Augment raw_tp arguments with PTR_MAYBE_NULL
- perf tools: Fix build-id event recording
- wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
- wifi: mac80211: init cnt before accessing elem in
ieee80211_copy_mbssid_beacon
- wifi: mac80211: fix a queue stall in certain cases of CSA
- wifi: mac80211: fix station NSS capability initialization order
- perf machine: Initialize machine->env to address a segfault
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- amdgpu/uvd: get ring reference from rq scheduler
- batman-adv: Do not send uninitialized TT changes
- batman-adv: Remove uninitialized data in full table TT response
- batman-adv: Do not let TT changes list grows indefinitely
- tipc: fix NULL deref in cleanup_bearer()
- net/mlx5: DR, prevent potential error pointer dereference
- wifi: cfg80211: sme: init n_channels before channels[] access
- selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
- selftests: mlxsw: sharedbuffer: Remove duplicate test cases
- selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted
- ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from
kvm_arch_ptp_init()
- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips
- net: lapb: increase LAPB_HEADER_LEN
- net: defer final 'struct net' free in netns dismantle
- net: mscc: ocelot: fix memory leak on ocelot_port_add_txtstamp_skb()
- net: mscc: ocelot: improve handling of TX timestamp for unknown skb
- net: mscc: ocelot: ocelot->ts_id_lock and ocelot_port->tx_skbs.lock are
IRQ-
safe
- net: mscc: ocelot: be resilient to loss of PTP packets during transmission
- net: mscc: ocelot: perform error cleanup in ocelot_hwstamp_set()
- regulator: axp20x: AXP717: set ramp_delay
- spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user()
- net: sparx5: fix FDMA performance issue
- net: sparx5: fix the maximum frame length register
- ACPI: resource: Fix memory resource type union access
- cxgb4: use port number to set mac addr
- qca_spi: Fix clock speed for multiple QCA7000
- qca_spi: Make driver probing reliable
- ALSA: control: Avoid WARN() for symlink errors
- ASoC: amd: yc: Fix the wrong return value
- Documentation: PM: Clarify pm_runtime_resume_and_get() return value
- block: get wp_offset by bdev_offset_from_zone_start
- bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips
- Documentation: networking: Add a caveat to nexthop_compat_mode sysctl
- cifs: Fix rmdir failure due to ongoing I/O on deleted file
- net: renesas: rswitch: fix possible early skb release
- net: renesas: rswitch: fix race window between tx start and complete
- net: renesas: rswitch: fix leaked pointer on error path
- net: renesas: rswitch: avoid use-after-put for a device tree node
- net: renesas: rswitch: handle stop vs interrupt race
- ASoC: tas2781: Fix calibration issue in stress test
- Bluetooth: Improve setsockopt() handling of malformed user input
- libperf: evlist: Fix --cpu argument on hybrid platform
- ASoC: fsl_xcvr: change IFACE_PCM to IFACE_MIXER
- ASoC: fsl_spdif: change IFACE_PCM to IFACE_MIXER
- selftests: netfilter: Stabilize rpath.sh
- netfilter: IDLETIMER: Fix for possible ABBA deadlock
- netfilter: nf_tables: do not defer rule destruction via call_rcu
- net: mana: Fix memory leak in mana_gd_setup_irqs
- net: mana: Fix irq_contexts memory leak in mana_gd_setup_irqs
- net: dsa: felix: fix stuck CPU-injected packets with short taprio windows
- net/sched: netem: account for backlog updates from child qdisc
- net, team, bonding: Add netdev_base_features helper
- bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features
- bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
- team: Fix initial vlan_feature set in __team_compute_features
- team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
- ASoC: Intel: sof_sdw: Add space for a terminator into DAIs array
- ACPICA: events/evxfregn: don't release the ContextMutex that was never
acquired
- Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating
- Bluetooth: iso: Always release hdev at the end of iso_listen_bis
- Bluetooth: iso: Fix recursive locking warning
- Bluetooth: SCO: Add support for 16 bits transparent voice setting
- Bluetooth: iso: Fix circular lock in iso_listen_bis
- Bluetooth: iso: Fix circular lock in iso_conn_big_sync
- Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
- net: renesas: rswitch: fix initial MPIC register setting
- net: dsa: microchip: KSZ9896 register regmap alignment to 32 bit
boundaries
- net: dsa: tag_ocelot_8021q: fix broken reception
- drm/xe: fix the ERR_PTR() returned on failure to allocate tiny pt
- drm/xe/reg_sr: Remove register pool
- blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
- kselftest/arm64: abi: fix SVCR detection
- blk-mq: move cpuhp callback registering out of q->sysfs_lock
- block: Fix potential deadlock while freezing queue and acquiring
sysfs_lock
- rust: kbuild: set `bindgen`'s Rust target version
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes
- xen/netfront: fix crash when removing device
- x86: make get_cpu_vendor() accessible from Xen code
- objtool/x86: allow syscall instruction
- x86/static-call: provide a way to do very early static-call updates
- x86/xen: don't do PV iret hypercall through hypercall page
- x86/xen: add central hypercall functions
- x86/xen: use new hypercall functions instead of hypercall page
- x86/xen: remove hypercall page
- x86/static-call: fix 32-bit build
- Linux 6.12.6
* Plucky update: v6.12.5 upstream stable release (LP: #2097339)
- iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call
- watchdog: xilinx_wwdt: Calculate max_hw_heartbeat_ms using clock frequency
- watchdog: apple: Actually flush writes after requesting watchdog restart
- watchdog: mediatek: Make sure system reset gets asserted in
mtk_wdt_restart()
- can: gs_usb: add usb endpoint address detection at driver probe step
- can: c_can: c_can_handle_bus_err(): update statistics if skb allocation
fails
- can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is
NULL
- can: hi311x: hi3110_can_ist(): fix potential use-after-free
- can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics
- can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics
- can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics
- can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics
- can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics
- can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics
- can: f81604: f81604_handle_can_bus_errors(): fix {rx,tx}_errors statistics
- ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
- netfilter: x_tables: fix LED ID check in led_tg_check()
- netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
- selftests: hid: fix typo and exit code
- net: enetc: Do not configure preemptible TCs if SIs do not support
- ptp: Add error handling for adjfine callback in ptp_clock_adjtime
- net/sched: tbf: correct backlog statistic for GSO packets
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- bnxt_en: ethtool: Supply ntuple rss context action
- net: Fix icmp host relookup triggering ip_rt_bug
- ipv6: avoid possible NULL deref in modify_prefix_route()
- can: j1939: j1939_session_new(): fix skb reference counting
- platform/x86: asus-wmi: Ignore return value when writing thermal policy
- net: phy: microchip: Reset LAN88xx PHY to ensure clean link state on
LAN7800/7850
- net/ipv6: release expired exception dst cached in socket
- dccp: Fix memory leak in dccp_feat_change_recv
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- net/smc: initialize close_work early to avoid warning
- net/smc: fix LGR and link use-after-free issue
- net/qed: allow old cards not supporting "num_images" to work
- net: hsr: must allocate more bytes for RedBox support
- ice: fix PHY Clock Recovery availability check
- ice: fix PHY timestamp extraction for ETH56G
- ice: Fix VLAN pruning in switchdev mode
- idpf: set completion tag for "empty" bufs associated with a packet
- ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5
- ixgbe: downgrade logging of unsupported VF API version to debug
- ixgbe: Correct BASE-BX10 compliance code
- igb: Fix potential invalid memory access in igb_init_module()
- netfilter: nft_inner: incorrect percpu area handling under softirq
- Revert "udp: avoid calling sock_def_readable() if possible"
- net: sched: fix erspan_opt settings in cls_flower
- netfilter: ipset: Hold module reference while requesting a module
- netfilter: nft_set_hash: skip duplicated elements pending gc run
- ethtool: Fix wrong mod state in case of verbose and no_mask bitset
- mlxsw: spectrum_acl_flex_keys: Constify struct mlxsw_afk_element_inst
- mlxsw: spectrum_acl_flex_keys: Use correct key block on Spectrum-4
- geneve: do not assume mac header is set in geneve_xmit_skb()
- net/mlx5: HWS: Fix memory leak in mlx5hws_definer_calc_layout
- net/mlx5: HWS: Properly set bwc queue locks lock classes
- net/mlx5e: SD, Use correct mdev to build channel param
- net/mlx5e: Remove workaround to avoid syndrome for internal port
- vsock/test: fix failures due to wrong SO_RCVLOWAT parameter
- vsock/test: fix parameter types in SO_VM_SOCKETS_* calls
- net: avoid potential UAF in default_operstate()
- gpio: grgpio: use a helper variable to store the address of ofdev->dev
- gpio: grgpio: Add NULL check in grgpio_probe
- mmc: mtk-sd: use devm_mmc_alloc_host
- mmc: mtk-sd: Fix error handle of probe function
- mmc: mtk-sd: fix devm_clk_get_optional usage
- mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting
- mmc: sd: SDUC Support Recognition
- mmc: core: Adjust ACMD22 to SDUC
- mmc: core: Use GFP_NOIO in ACMD22
- zram: do not mark idle slots that cannot be idle
- zram: clear IDLE flag in mark_idle()
- ntp: Remove invalid cast in time offset math
- f2fs: clean up w/ F2FS_{BLK_TO_BYTES,BTYES_TO_BLK}
- f2fs: fix to adjust appropriate length for fiemap
- f2fs: fix to requery extent which cross boundary of inquiry
- i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS
- i3c: master: Extend address status bit to 4 and add
I3C_ADDR_SLOT_EXT_DESIRED
- i3c: master: Fix dynamic address leak when 'assigned-address' is present
- drm/amd/display: calculate final viewport before TAP optimization
- drm/amd/display: Ignore scalar validation failure if pipe is phantom
- scsi: ufs: core: Always initialize the UIC done completion
- scsi: ufs: core: Add ufshcd_send_bsg_uic_cmd() for UFS BSG
- bpf, vsock: Fix poll() missing a queue
- bpf, vsock: Invoke proto::close on close()
- xsk: always clear DMA mapping information when unmapping the pool
- bpftool: fix potential NULL pointer dereferencing in prog_dump()
- drm/sti: Add __iomem for mixer_dbg_mxn's parameter
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- ALSA: seq: ump: Fix seq port updates per FB info notify
- ALSA: usb-audio: Notify xrun for low-latency mode
- tools: Override makefile ARCH variable if defined, but empty
- spi: mpc52xx: Add cancel_work_sync before module remove
- ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index
- ASoC: SOF: ipc3-topology: fix resource leaks in
sof_ipc3_widget_setup_comp_dai()
- pmdomain: core: Add missing put_device()
- pmdomain: core: Fix error path in pm_genpd_init() when ida alloc fails
- nvme: don't apply NVME_QUIRK_DEALLOCATE_ZEROES when DSM is not supported
- x86/pkeys: Change caller of update_pkru_in_sigframe()
- x86/pkeys: Ensure updated PKRU value is XRSTOR'd
- bpf: Ensure reg is PTR_TO_STACK in process_iter_arg
- irqchip/stm32mp-exti: CONFIG_STM32MP_EXTI should not default to y when
compile-testing
- drivers/virt: pkvm: Don't fail ioremap() call if MMIO_GUARD fails
- bpf: Don't mark STACK_INVALID as STACK_MISC in mark_stack_slot_misc
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- nvme-fabrics: handle zero MAXCMD without closing the connection
- nvme-tcp: fix the memleak while create new ctrl failed
- nvme-rdma: unquiesce admin_q before destroy it
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: scsi_debug: Fix hrtimer support for ndelay
- ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec
- drm/v3d: Enable Performance Counters before clearing them
- ocfs2: free inode when ocfs2_get_init_inode() fails
- scatterlist: fix incorrect func name in kernel-doc
- iio: magnetometer: yas530: use signed integer type for clamp limits
- smb: client: fix potential race in cifs_put_tcon()
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- bpf: Remove unnecessary kfree(im_node) in lpm_trie_update_elem
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Fix exact match conditions in trie_get_next_key()
- x86/CPU/AMD: WARN when setting EFER.AUTOIBRS if and only if the WRMSR
fails
- rust: allow `clippy::needless_lifetimes`
- HID: i2c-hid: Revert to using power commands to wake on resume
- HID: wacom: fix when get product name maybe null pointer
- LoongArch: Add architecture specific huge_pte_clear()
- LoongArch: KVM: Protect kvm_check_requests() with SRCU
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- watchdog: rti: of: honor timeout-sec property
- can: dev: can_set_termination(): allow sleeping GPIOs
- can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E
6.
- tracing: Fix cmp_entries_dup() to respect sort() comparison rules
- net :mana :Request a V2 response version for MANA_QUERY_GF_STAT
- iommufd: Fix out_fput in iommufd_fault_alloc()
- arm64: mm: Fix zone_dma_limit calculation
- arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit
ASIDs
- arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
- arm64: ptrace: fix partial SETREGSET for NT_ARM_FPMR
- arm64: ptrace: fix partial SETREGSET for NT_ARM_POE
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Add extra PID for RME Digiface USB
- ALSA: hda/realtek: fix micmute LEDs don't work on HP Laptops
- ALSA: usb-audio: add mixer mapping for Corsair HS80
- ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8
- ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG)
- scsi: qla2xxx: Fix abort in bsg timeout
- scsi: qla2xxx: Fix NVMe and NPIV connect issue
- scsi: qla2xxx: Supported speed displayed incorrectly for VPorts
- scsi: qla2xxx: Fix use after free on unload
- scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt
- scsi: ufs: core: sysfs: Prevent div by zero
- scsi: ufs: core: Cancel RTC work during ufshcd_remove()
- scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
- scsi: ufs: pltfrm: Disable runtime PM during removal of glue drivers
- scsi: ufs: core: Add missing post notify for power mode change
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- fs/smb/client: avoid querying SMB2_OP_QUERY_WSL_EA for SMB3 POSIX
- fs/smb/client: Implement new SMB3 POSIX type
- fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points
- smb3.1.1: fix posix mounts to older servers
- io_uring: Change res2 parameter type in io_uring_cmd_done
- bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
- Revert "readahead: properly shorten readahead when falling back to
do_page_cache_ra()"
- pmdomain: imx: gpcv2: Adjust delay after power up handshake
- selftests/damon: add _damon_sysfs.py to TEST_FILES
- selftest: hugetlb_dio: fix test naming
- cacheinfo: Allocate memory during CPU hotplug if not done from the primary
CPU
- x86/cacheinfo: Delete global num_cache_leaves
- drm/amdkfd: hard-code cacheline for gc943,gc944
- drm/dp_mst: Fix MST sideband message body length check
- drm/amdkfd: add MEC version that supports no PCIe atomics for GFX12
- drm/amd/pm: fix and simplify workload handling
- drm/dp_mst: Verify request type in the corresponding down message reply
- drm/dp_mst: Fix resetting msg rx state after topology removal
- drm/amd/display: Correct prefetch calculation
- drm/amd/display: Limit VTotal range to max hw cap minus fp
- drm/amd/display: Add a left edge pixel if in YCbCr422 or YCbCr420 and odm
- drm/amdgpu/hdp6.0: do a posting read when flushing HDP
- drm/amdgpu/hdp4.0: do a posting read when flushing HDP
- drm/amdgpu/hdp5.0: do a posting read when flushing HDP
- drm/amdgpu/hdp7.0: do a posting read when flushing HDP
- drm/amdgpu/hdp5.2: do a posting read when flushing HDP
- modpost: Add .irqentry.text to OTHER_SECTIONS
- x86/kexec: Restore GDT on return from ::preserve_context kexec
- bpf: fix OOB devmap writes when deleting elements
- dma-buf: fix dma_fence_array_signaled v4
- dma-fence: Fix reference leak on fence merge failure path
- dma-fence: Use kernel's sort for merging fences
- xsk: fix OOB map writes when deleting elements
- regmap: detach regmap from dev on regmap_exit
- arch_numa: Restore nid checks before registering a memblock with a node
- mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10
tablet
- mmc: core: Further prevent card detect during shutdown
- x86/cpu: Add Lunar Lake to list of CPUs with a broken MONITOR
implementation
- ocfs2: update seq_file index in ocfs2_dlm_seq_next
- stackdepot: fix stack_depot_save_flags() in NMI context
- lib: stackinit: hide never-taken branch from compiler
- sched/numa: fix memory leak due to the overwritten vma->numab_state
- kasan: make report_lock a raw spinlock
- mm/gup: handle NULL pages in unpin_user_pages()
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in
a
MM
- x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC
- x86/mm: Add _PAGE_NOPTISHADOW bit to avoid updating userspace page tables
- mm/damon: fix order of arguments in damos_before_apply tracepoint
- mm: memcg: declare do_memsw_account inline
- mm: open-code PageTail in folio_flags() and const_folio_flags()
- mm: open-code page_folio() in dump_page()
- mm: fix vrealloc()'s KASAN poisoning logic
- mm: respect mmap hint address when aligning for THP
- scsi: ufs: pltfrm: Drop PM runtime reference count after ufshcd_remove()
- memblock: allow zero threshold in validate_numa_converage()
- s390/pci: Sort PCI functions prior to creating virtual busses
- s390/pci: Use topology ID for multi-function devices
- s390/pci: Ignore RID for isolated VFs
- epoll: annotate racy check
- kselftest/arm64: Log fp-stress child startup errors to stdout
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- block: RCU protect disk->conv_zones_bitmap
- btrfs: don't take dev_replace rwsem on task already holding it
- btrfs: avoid unnecessary device path update for the same device
- btrfs: canonicalize the device path before adding it
- btrfs: do not clear read-only when adding sprout device
- kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all()
- ext4: partial zero eof block on unaligned inode size extension
- crypto: ecdsa - Avoid signed integer overflow on signature decoding
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list
- ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID
- ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration()
- ACPI: video: force native for Apple MacbookPro11,2 and Air7,2
- perf/x86/amd: Warn only on new bits set
- cleanup: Adjust scoped_guard() macros to avoid potential warning
- iio: magnetometer: fix if () scoped_guard() formatting
- timekeeping: Always check for negative motion
- gpio: free irqs that are still requested when the chip is being removed
- spi: spi-fsl-lpspi: Adjust type of scldiv
- soc: qcom: llcc: Use designated initializers for LLC settings
- HID: add per device quirk to force bind to hid-generic
- firmware: qcom: scm: Allow QSEECOM on Lenovo Yoga Slim 7x
- soc: qcom: pd-mapper: Add QCM6490 PD maps
- media: uvcvideo: RealSense D421 Depth module metadata
- media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera
- media: uvcvideo: Force UVC version to 1.0a for 0408:4033
- media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108
- mmc: core: Add SD card quirk for broken poweroff notification
- mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED
- firmware: qcom: scm: Allow QSEECOM on Dell XPS 13 9345
- soc: imx8m: Probe the SoC driver as platform driver
- regmap: maple: Provide lockdep (sub)class for maple tree's internal lock
- selftests/resctrl: Protect against array overflow when reading strings
- sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl()
- HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support
- drm/xe/pciids: separate RPL-U and RPL-P PCI IDs
- drm/xe/pciids: separate ARL and MTL PCI IDs
- drm/vc4: hdmi: Avoid log spam for audio start failure
- drm/vc4: hvs: Set AXI panic modes for the HVS
- drm/xe/pciids: Add PVC's PCI device ID macros
- wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb
- drm/xe/pciid: Add new PCI id for ARL
- drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model
- drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition
- drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK
- drm/bridge: it6505: Enable module autoloading
- drm/mcde: Enable module autoloading
- wifi: rtw89: check return value of ieee80211_probereq_get() for RNR
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check()
- ASoC: Intel: sof_rt5682: Add HDMI-In capture with rt5682 support for MTL.
- dlm: fix possible lkb_resource null dereference
- drm/amd/display: skip disable CRTC in seemless bootup case
- drm/amd/display: Fix garbage or black screen when resetting otg
- drm/amd/display: disable SG displays on cyan skillfish
- drm/xe/ptl: L3bank mask is not available on the media GT
- drm/xe/xe3: Add initial set of workarounds
- drm/display: Fix building with GCC 15
- ALSA: hda: Use own quirk lookup helper
- ALSA: hda/conexant: Use the new codec SSID matching
- ALSA: hda/realtek: Use codec SSID matching for Lenovo devices
- r8169: don't apply UDP padding quirk on RTL8126A
- samples/bpf: Fix a resource leak
- wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()
- accel/qaic: Add AIC080 support
- drm/amd/display: Full exit out of IPS2 when all allow signals have been
cleared
- net: fec_mpc52xx_phy: Use %pa to format resource_size_t
- net: ethernet: fs_enet: Use %pa to format resource_size_t
- net/sched: cbs: Fix integer overflow in cbs_set_port_rate()
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in
l2cap_sock_create()
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in
rfcomm_sock_alloc()
- net: af_can: do not leave a dangling sk pointer in can_create()
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- wifi: ath10k: avoid NULL pointer error during sdio remove
- wifi: ath5k: add PCI ID for SX76X
- wifi: ath5k: add PCI ID for Arcadyan devices
- fanotify: allow reporting errors on failure to open fd
- bpf: Prevent tailcall infinite loop caused by freplace
- ASoC: sdw_utils: Add support for exclusion DAI quirks
- ASoC: sdw_utils: Add a quirk to allow the cs42l43 mic DAI to be ignored
- ASoC: Intel: sof_sdw: Add quirk for cs42l43 system using host DMICs
- ASoC: Intel: sof_sdw: Add quirks for some new Lenovo laptops
- drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
- drm/panel: simple: Add Microchip AC69T88A LVDS Display panel
- net: sfp: change quirks for Alcatel Lucent G-010S-P
- net: stmmac: Programming sequence for VLAN packets with split header
- drm/sched: memset() 'job' in drm_sched_job_init()
- drm/amd/display: Adding array index check to prevent memory corruption
- drm/amdgpu/gfx9: Add cleaner shader for GFX9.4.2
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih
- drm/amdgpu: Dereference the ATCS ACPI buffer
- netlink: specs: Add missing bitset attrs to ethtool spec
- drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr
- ASoC: sdw_utils: Add quirk to exclude amplifier function
- ASoC: Intel: soc-acpi-intel-arl-match: Add rt722 and rt1320 support
- drm/amd/display: Fix underflow when playing 8K video in full screen mode
- mptcp: annotate data-races around subflow->fully_established
- dma-debug: fix a possible deadlock on radix_lock
- jfs: array-index-out-of-bounds fix in dtReadFirst
- jfs: fix shift-out-of-bounds in dbSplit
- jfs: fix array-index-out-of-bounds in jfs_readdir
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- fsl/fman: Validate cell-index value obtained from Device Tree
- net/tcp: Add missing lockdep annotations for TCP-AO hlist traversals
- drm/panic: Add ABGR2101010 support
- drm/amd/display: Remove hw w/a toggle if on DP2/HPO
- drm/amd/display: parse umc_info or vram_info based on ASIC
- drm/amd/display: Prune Invalid Modes For HDMI Output
- drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov
- virtio-net: fix overflow inside virtnet_rq_alloc
- ALSA: usb-audio: Make mic volume workarounds globally applicable
- drm/amdgpu: set the right AMDGPU sg segment limitation
- wifi: ipw2x00: libipw_rx_any(): fix bad alignment
- wifi: brcmfmac: Fix oops due to NULL pointer dereference in
brcmf_sdiod_sglist_rw()
- bpf: Call free_htab_elem() after htab_unlock_bucket()
- mptcp: fix possible integer overflow in mptcp_reset_tout_timer
- dsa: qca8k: Use nested lock to avoid splat
- i2c: i801: Add support for Intel Panther Lake
- Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions
- Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables
- Bluetooth: hci_conn: Use disable_delayed_work_sync
- Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
- Bluetooth: Add new quirks for ATS2851
- Bluetooth: Support new quirks for ATS2851
- Bluetooth: Set quirks for ATS2851
- Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925
- Bluetooth: btusb: Add new VID/PID 0489/e124 for MT7925
- Bluetooth: btusb: Add 3 HWIDs for MT7925
- ASoC: hdmi-codec: reorder channel allocation list
- rocker: fix link status detection in rocker_carrier_init()
- net/neighbor: clear error in case strict check is not set
- netpoll: Use rcu_access_pointer() in __netpoll_setup
- pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU
- rtla: Fix consistency in getopt_long for timerlat_hist
- tracing/ftrace: disable preemption in syscall probe
- tracing: Use atomic64_inc_return() in trace_clock_counter()
- tools/rtla: fix collision with glibc sched_attr/sched_set_attr
- rtla/timerlat: Make timerlat_top_cpu->*_count unsigned long long
- rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long long
- scsi: hisi_sas: Add cond_resched() for no forced preemption model
- scsi: hisi_sas: Create all dump files during debugfs initialization
- ring-buffer: Limit time with disabled interrupts in rb_check_pages()
- pinmux: Use sequential access to access desc->pinmux data
- scsi: ufs: core: Make DMA mask configuration more flexible
- iommu/amd: Fix corruption when mapping large pages from 0
- bpf: put bpf_link's program when link is safe to be deallocated
- scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths
- scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up
FDMI
- scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo
callback
- clk: qcom: rcg2: add clk_rcg2_shared_floor_ops
- clk: qcom: rpmh: add support for SAR2130P
- clk: qcom: tcsrcc-sm8550: add SAR2130P support
- clk: qcom: dispcc-sm8550: enable support for SAR2130P
- clk: qcom: clk-alpha-pll: Add NSS HUAYRA ALPHA PLL support for ipq9574
- leds: class: Protect brightness_show() with led_cdev->led_access mutex
- scsi: st: Don't modify unknown block number in MTIOCGET
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset
- pinctrl: qcom-pmic-gpio: add support for PM8937
- pinctrl: qcom: spmi-mpp: Add PM8937 compatible
- thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens
- nvdimm: rectify the illogical code within nd_dax_probe()
- smb: client: memcpy() with surrounding object base address
- tracing: Fix function name for trampoline
- tools/rtla: Enhance argument parsing in timerlat_load.py
- verification/dot2: Improve dot parser robustness
- mailbox: pcc: Check before sending MCTP PCC response ACK
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- KMSAN: uninit-value in inode_go_dump (5)
- i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request
- PCI: qcom: Add support for IPQ9574
- PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs
- PCI: vmd: Set devices to D0 before enabling PM L1 Substates
- PCI: Detect and trust built-in Thunderbolt chips
- PCI: starfive: Enable controller runtime PM before probing host bridge
- PCI: Add 'reset_subordinate' to reset hierarchy below bridge
- PCI: Add ACS quirk for Wangxun FF5xxx NICs
- remoteproc: qcom: pas: enable SAR2130P audio DSP support
- i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to
avoid deadlock
- f2fs: print message if fscorrupted was found in f2fs_new_node_page()
- f2fs: fix to shrink read extent node in batches
- f2fs: add a sysfs node to limit max read extent count per-inode
- ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840
- ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[]
- LoongArch: Fix sleeping in atomic context for PREEMPT_RT
- fs/ntfs3: Fix warning in ni_fiemap
- fs/ntfs3: Fix case when unmarked clusters intersect with zone
- regulator: qcom-rpmh: Update ranges for FTSMPS525
- usb: chipidea: add CI_HDRC_HAS_SHORT_PKT_LIMIT flag
- usb: chipidea: udc: limit usb request length to max 16KB
- usb: chipidea: udc: create bounce buffer for problem sglist entries if
possible
- usb: chipidea: udc: handle USB Error Interrupt if IOC not set
- usb: typec: ucsi: Do not call ACPI _DSM method for UCSI read operations
- iio: adc: ad7192: properly check spi_get_device_match_data()
- iio: light: ltr501: Add LTER0303 to the supported devices
- usb: typec: ucsi: glink: be more precise on orientation-aware ports
- ASoC: amd: yc: fix internal mic on Redmi G 2022
- drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3
- MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
- ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6
21M1CTO1WW
- powerpc/prom_init: Fixup missing powermac #size-cells
- misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle
- rtc: cmos: avoid taking rtc_lock for extended period of time
- serial: 8250_dw: Add Sophgo SG2044 quirk
- Revert "nvme: make keep-alive synchronous operation"
- irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
- smb: client: don't try following DFS links in cifs_tree_connect()
- setlocalversion: work around "git describe" performance
- io_uring/tctx: work around xa_store() allocation error issue
- scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()
- drm/xe/devcoredump: Use drm_puts and already cached local variables
- drm/xe/devcoredump: Improve section headings and add tile info
- drm/xe/devcoredump: Add ASCII85 dump helper function
- drm/xe/guc: Copy GuC log prior to dumping
- drm/xe/forcewake: Add a helper xe_force_wake_ref_has_domain()
- drm/xe/devcoredump: Update handling of xe_force_wake_get return
- drm/amd/display: Add option to retrieve detile buffer size
- sched: fix warning in sched_setaffinity
- sched/core: Remove the unnecessary need_resched() check in nohz_csd_func()
- sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU
turning
busy
- sched/core: Prevent wakeup of ksoftirqd during idle load balance
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- btrfs: drop unused parameter options from open_ctree()
- btrfs: drop unused parameter data from btrfs_fill_super()
- btrfs: fix mount failure due to remount races
- btrfs: fix missing snapshot drew unlock when root is dead during swap
activation
- clk: en7523: Initialize num before accessing hws in
en7523_register_clocks()
- tracing/eprobe: Fix to release eprobe when failed to add dyn_event
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled
- Revert "unicode: Don't special case ignorable code points"
- vfio/mlx5: Align the page tracking max message size with the device
capability
- selftests/ftrace: adjust offset for kprobe syntax error test
- KVM: x86/mmu: Ensure that kvm_release_pfn_clean() takes exact pfn from
kvm_faultin_pfn()
- jffs2: Prevent rtime decompress memory corruption
- jffs2: Fix rtime decompressor
- media: ipu6: use the IPU6 DMA mapping APIs to do mapping
- ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2
volume"
- net/mlx5: unique names for per device caches
- ASoC: Intel: avs: Fix return status of avs_pcm_hw_constraints_init()
- drm/amdgpu: rework resume handling for display (v2)
- ALSA: hda: Fix build error without CONFIG_SND_DEBUG
- Revert "drm/amd/display: parse umc_info or vram_info based on ASIC"
- s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails
- ALSA: hda/realtek: Fix spelling mistake "Firelfy" -> "Firefly"
- timekeeping: Remove CONFIG_DEBUG_TIMEKEEPING
- clocksource: Make negative motion detection more robust
- softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel
- Linux 6.12.5
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/d2024.12.13)
* Miscellaneous Ubuntu changes
- [Config] updateconfigs following v6.12.5 import
- [Config] updateconfigs following v6.12.7 import
- [Config] updateconfigs following v6.12.10 import
- [Config] updateconfigs following v6.12.11 import
* Miscellaneous upstream changes
- Revert "UBUNTU: SAUCE: x86/cacheinfo: Clean out init_cache_level()"
- Revert "UBUNTU: SAUCE: x86/cacheinfo: Delete global num_cache_leaves"
- Revert "UBUNTU: SAUCE: cacheinfo: Allocate memory for memory if not done
from the primary CPU"
- Revert "UBUNTU: SAUCE: cacheinfo: Check for null last-level cache info"
-- Paolo Pisati <paolo.pis...@canonical.com> Tue, 04 Feb 2025 12:35:04
+0100
** Changed in: linux (Ubuntu Plucky)
Status: Confirmed => Fix Released
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2097344
Title:
Plucky update: v6.12.9 upstream stable release
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Plucky:
Fix Released
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v6.12.9 upstream stable release
from git://git.kernel.org/
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2097344/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
