• linux_6.12.27-1~bpo12+1_source.changes ACCEPTED into stable-backports (

    From Debian FTP Masters@21:1/5 to All on Wed Jun 4 23:10:02 2025
    Thank you for your contribution to Debian.



    Accepted:

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Mon, 19 May 2025 23:52:58 +0200
    Source: linux
    Architecture: source
    Version: 6.12.27-1~bpo12+1
    Distribution: bookworm-backports
    Urgency: medium
    Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
    Changed-By: Ben Hutchings <benh@debian.org>
    Closes: 956226 1100634 1103437 1104511 1104529
    Changes:
    linux (6.12.27-1~bpo12+1) bookworm-backports; urgency=medium
    .
    * Rebuild for bookworm-backports
    .
    linux (6.12.27-1) unstable; urgency=medium
    .
    * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.26
    - module: sign with sha512 instead of sha1 by default
    - tracing: Add __print_dynamic_array() helper
    - tracing: Verify event formats that have "%*p.."
    - mm/vmscan: don't try to reclaim hwpoison folio
    - [arm64] soc: qcom: ice: introduce devm_of_qcom_ice_get
    - [arm64] mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
    - PM: EM: use kfree_rcu() to simplify the code
    - PM: EM: Address RCU-related sparse warnings
    - [amd64] media: ov08x40: Move ov08x40_identify_module() function up
    - [amd64] media: ov08x40: Add missing ov08x40_identify_module() call on
    stream-start
    - block: remove the write_hint field from struct request
    - block: remove the ioprio field from struct request
    - block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone
    - [arm64,armhf] net: dsa: mv88e6xxx: fix VTU methods for 6320 family
    - iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary
    return value check
    - iio: adc: ad7768-1: Fix conversion result sign
    - of: resolver: Simplify of_resolve_phandles() using __free()
    - of: resolver: Fix device node refcount leakage in of_resolve_phandles()
    - [arm64] scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
    - PCI/MSI: Convert pci_msi_ignore_mask to per MSI domain flag
    - PCI/MSI: Handle the NOMASK flag correctly for all PCI/MSI backends
    - PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads
    - [amd64] accel/ivpu: Add auto selection logic for job scheduler
    - [amd64] accel/ivpu: Fix the NPU's DPU frequency calculation
    - ksmbd: use __GFP_RETRY_MAYFAIL
    - ksmbd: add netdev-up/down event debug print
    - ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL
    - ksmbd: fix use-after-free in __smb2_lease_break_noti() (CVE-2025-37777)
    - [arm64] scsi: ufs: exynos: Remove empty drv_init method
    - [arm64] scsi: ufs: exynos: Remove superfluous function parameter
    - [arm64] scsi: ufs: exynos: Add gs101_ufs_drv_init() hook and enable
    WriteBooster
    - [arm64] scsi: ufs: exynos: Move UFS shareability value to drvdata
    - [arm64] scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set
    - net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads
    - drm/xe/bmg: Add one additional PCI ID
    - drm/amd/display: Fix unnecessary cast warnings from checkpatch
    - drm/amd/display/dml2: use vzalloc rather than kzalloc
    - ceph: Fix incorrect flush end position calculation
    - [arm64] cpufreq: sun50i: prevent out-of-bounds access
    - dma/contiguous: avoid warning about unused size_bytes
    - [arm64] cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
    - scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
    - cpufreq: cppc: Fix invalid return value in .get() callback
    - cpufreq: Do not enable by default during compile testing
    - cpufreq: fix compile-test defaults
    - btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
    - btrfs: zoned: return EIO on RAID1 block group write pointer mismatch
    - cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
    - vhost-scsi: Add better resource allocation failure handling
    - vhost-scsi: Fix vhost_scsi_send_bad_target()
    - vhost-scsi: Fix vhost_scsi_send_status()
    - net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()
    - net/mlx5: Move ttc allocation after switch case to prevent leaks
    - scsi: core: Clear flags for scsi_cmnd that did not complete
    - scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()
    - net: lwtunnel: disable BHs when required
    - net: phy: leds: fix memory leak
    - tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
    - net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
    - fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
    - net_sched: hfsc: Fix a UAF vulnerability in class handling
    (CVE-2025-37797)
    - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
    - [arm64] net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
    - pds_core: Prevent possible adminq overflow/stuck condition
    - pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
    - pds_core: Remove unnecessary check in pds_client_adminq_cmd()
    - pds_core: make wait_context part of q_info
    - block: never reduce ra_pages in blk_apply_bdi_limits
    - [amd64] iommu/amd: Return an error if vCPU affinity is set for non-vCPU
    IRTE
    - [riscv64] Replace function-like macro by static inline function
    - [riscv64] uprobes: Add missing fence.i after building the XOL buffer
    - splice: remove duplicate noinline from pipe_clear_nowait
    - bpf: Add namespace to BPF internal symbols
    - [x86] perf/x86: Fix non-sampling (counting) events on certain x86
    platforms
    - [amd64] KVM: SVM: Disable AVIC on SNP-enabled system without
    HvInUseWrAllowed feature
    - netfilter: fib: avoid lookup if socket is available
    - virtio_console: fix missing byte order handling for cols and rows
    - xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
    - net: phy: microchip: force IRQ polling mode for lan88xx
    - scsi: mpi3mr: Fix pending I/O counter
    - drm/amd/display: Fix gpu reset in multidisplay config
    - drm/amd/display: Force full update in gpu reset
    - [x86] insn: Fix CTEST instruction decoding
    - [arm64,armhf] irqchip/gic-v2m: Prevent use after free of
    gicv2m_get_fwnode()
    - io_uring: fix 'sync' handling of io_fallback_tw()
    - [amd64] KVM: SVM: Allocate IR data using atomic allocation
    - cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
    - ata: libata-scsi: Improve CDL control
    - ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
    - ata: libata-scsi: Fix ata_msense_control_ata_feature()
    - USB: storage: quirk for ADATA Portable HDD CH94
    - scsi: Improve CDL control
    - mei: me: add panther lake H DID
    - mei: vsc: Fix fortify-panic caused by invalid counted_by() use
    - [amd64] KVM: x86: Explicitly treat routing entry type changes as changes
    - [amd64] KVM: x86: Reset IRTE to host control if *new* route isn't postable
    - [amd64] KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass
    producer
    - char: misc: register chrdev region with all possible minors
    - firmware: stratix10-svc: Add of_platform_default_populate()
    - tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT
    - [arm64] serial: msm: Configure correct working mode before starting
    earlycon
    - [riscv64] serial: sifive: lock port in startup()/shutdown() callbacks
    - USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
    - USB: serial: option: add Sierra Wireless EM9291
    - USB: serial: simple: add OWON HDS200 series oscilloscope support
    - xhci: Limit time spent with xHC interrupts disabled during bus resume
    - usb: xhci: Fix invalid pointer dereference in Etron workaround
    - usb: cdns3: Fix deadlock when using NCM gadget
    - usb: chipidea: ci_hdrc_imx: fix usbmisc handling
    - usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
    - usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
    - USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
    - [arm64] usb: dwc3: gadget: check that event count does not exceed event
    buffer length
    - [arm64] usb: dwc3: xilinx: Prevent spike in reset signal
    - usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
    - usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
    - USB: VLI disk crashes if LPM is used
    - USB: wdm: handle IO errors in wdm_wwan_port_start
    - USB: wdm: close race between wdm_open and wdm_wwan_port_stop
    - USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
    - USB: wdm: add annotation
    - [armhf] pinctrl: mcp23s08: Get rid of spurious level interrupts
    - [mips*] cm: Detect CM quirks from device tree
    - [amd64] crypto: ccp - Add support for PCI device 0x1134
    - crypto: null - Use spin lock instead of mutex
    - bpf: Fix kmemleak warning for percpu hashmap
    - bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
    - clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
    - [s390x] sclp: Add check for get_zeroed_page()
    - [s390x] tty: Fix a potential memory leak bug
    - bpf: bpftool: Setting error code in do_loader()
    - bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it
    creates storage
    - bpf: Reject attaching fexit/fmod_ret to __noreturn functions
    - mailbox: pcc: Fix the possible race in updation of chan_in_use flag
    - mailbox: pcc: Always clear the platform ack interrupt first
    - usb: host: max3421-hcd: Add missing spi_device_id table
    - fs/ntfs3: Keep write operations atomic
    - fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
    - [arm*] usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
    - [arm*] usb: dwc3: gadget: Avoid using reserved endpoints on Intel
    Merrifield
    - sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
    - usb: xhci: Complete 'error mid TD' transfers when handling Missed Service
    - usb: xhci: Fix isochronous Ring Underrun/Overrun event handling
    - xhci: Handle spurious events on Etron host isoc enpoints
    - i3c: master: svc: Add support for Nuvoton npcm845 i3c
    - usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
    - [arm64] phy: rockchip: usbdp: Avoid call hpd_event_trigger in dp_phy_init
    - [armhf] usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
    - usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
    - [amd64] thunderbolt: Scan retimers after device router has been enumerated
    - objtool: Silence more KCOV warnings
    - objtool, panic: Disable SMAP in __stack_chk_fail()
    - objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in
    wcd934x_slim_irq_handler()
    - objtool, regulator: rk808: Remove potential undefined behavior in
    rk806_set_mode_dcdc()
    - objtool, lkdtm: Obfuscate the do_nothing() pointer
    - [amd64] qibfs: fix _another_ leak
    - 9p/net: fix improper handling of bogus negative read/write replies
    - 9p/trans_fd: mark concurrent read and writes to p9_conn->err
    - rtc: pcf85063: do a SW reset if POR failed
    - io_uring: always do atomic put from iowq
    - kbuild: add dependency from vmlinux to sorttable
    - sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
    - [s390x] KVM: s390: Don't use %pK through tracepoints
    - [s390x] KVM: s390: Don't use %pK through debug printing
    - cgroup/cpuset: Don't allow creation of local partition over a remote one
    - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
    - xen: Change xen-acpi-processor dom0 dependency
    - nvme: requeue namespace scan on missed AENs
    - ACPI: EC: Set ec_no_wakeup for Lenovo Go S
    - ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
    - drm/amdgpu: Increase KIQ invalidate_tlbs timeout
    - drm/xe/xe3lpg: Apply Wa_14022293748, Wa_22019794406
    - nvme: re-read ANA log page after ns scan completes
    - nvme: multipath: fix return value of nvme_available_path
    - objtool: Stop UNRET validation on UD2
    - gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
    - [x86] xen: disable CPU idle and frequency drivers for PVH dom0
    - [x86] bugs: Use SBPB in write_ibpb() if applicable
    - [x86] bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
    - [x86] bugs: Don't fill RSB on context switch with eIBRS
    - nvmet-fc: take tgtport reference only once
    - nvmet-fc: put ref when assoc->del_work is already scheduled
    - cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE
    mode
    - timekeeping: Add a lockdep override in tick_freeze()
    - cifs: Fix querying of WSL CHR and BLK reparse points over SMB1
    - iommu: Clear iommu-dma ops on cleanup
    - ext4: make block validity check resistent to sb bh corruption
    - [arm64] scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
    - [arm64] scsi: ufs: exynos: Ensure pre_link() executes before
    exynos_ufs_phy_init()
    - [arm64] scsi: ufs: exynos: Enable PRDT pre-fetching with UFSHCD_CAP_CRYPTO
    - [arm64] scsi: ufs: exynos: Move phy calls to .exit() callback
    - [arm64] scsi: ufs: exynos: gs101: Put UFS device in reset on .suspend()
    - scsi: pm80xx: Set phy_attached to zero when device is gone
    - [x86] i8253: Call clockevent_i8253_disable() with interrupts disabled
    - netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS
    - iomap: skip unnecessary ifs_block_is_uptodate check
    - [riscv64] Provide all alternative macros all the time
    - ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"
    - [x86] cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove
    cores
    - md/raid1: Add check for missing source disk in process_checks()
    - drm/amdgpu: use a dummy owner for sysfs triggered cleaner shaders v4
    - drm/amdgpu: Use the right function for hdp flush
    - [arm64,armhf] spi: spi-imx: Add check for spi_imx_setupxfer()
    - Revert "drivers: core: synchronize really_probe() and dev_uevent()"
    - driver core: introduce device_set_driver() helper
    - driver core: fix potential NULL pointer dereference in dev_uevent()
    - xfs: do not check NEEDSREPAIR if ro,norecovery mount.
    - xfs: Do not allow norecovery mount with quotacheck
    - xfs: rename xfs_iomap_swapfile_activate to xfs_vm_swap_activate
    - xfs: flush inodegc before swapon
    - usb: typec: class: Fix NULL pointer access
    - [amd64,arm64] vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
    - [amd64] comedi: jr3_pci: Fix synchronous deletion of timer
    - ext4: goto right label 'out_mmap_sem' in ext4_setattr() (CVE-2025-22120)
    - usb: typec: class: Invalidate USB device pointers on partner
    unregistration
    - [arm64,armhf] Revert "net: dsa: mv88e6xxx: fix internal PHYs for 6320
    family"
    - [arm64,armhf] net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
    - [arm64,armhf] net: dsa: mv88e6xxx: enable PVT for 6321 switch
    - [arm64,armhf] net: dsa: mv88e6xxx: enable .port_set_policy() for 6320
    family
    - [arm64,armhf] net: dsa: mv88e6xxx: enable STU methods for 6320 family
    - iommu: Handle race with default domain setup
    - crypto: lib/Kconfig - Hide arch options from user
    - media: i2c: imx214: Fix uninitialized variable in imx214_set_ctrl()
    - [mips*] cm: Fix warning if MIPS_CM is disabled
    - nvme: fixup scan failure for non-ANA multipath controllers
    - usb: xhci: Fix Short Packet handling rework ignoring errors
    - objtool: Ignore end-of-section jumps for KCOV/GCOV
    - objtool: Silence more KCOV warnings, part 2
    - usb: typec: class: Unlocked on error in typec_register_partner()
    - crypto: Kconfig - Select LIB generic option
    - mq-deadline: don't call req_get_ioprio from the I/O completion handler
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.27
    - bpf: Fix BPF_INTERNAL namespace import
    .
    [ Salvatore Bonaccorso ]
    * drivers/net/wireless/realtek/rtw88: Enable RTW88_8723DS as module
    (Closes: #1104529)
    * Revert "rndis_host: Flag RNDIS modems as WWAN devices" (Closes: #1104511)
    .
    [ Ben Hutchings ]
    * lintian: Override some false positives:
    - linux-headers: Override another error and warning for vmlinux
    - [riscv64] linux-image-dbg: Override shared-library-lacks-stack-section
    for vdso.so
    - [arm64] linux-perf: Override statically-linked-binary for asm_pure_loop
    * [ppc64*] linux-image: Fix version in NEWS entry
    * linux-source: Suggest pkgconf, not the obsolete pkg-config
    * linux-image-dbg: lintian: Drop mismatched override for
    wrong-section-according-to-package-name
    * [amd64] linux-image-cloud-amd64-dbg: lintian: Drop overrides for vdsox32.so
    * d/copyright: Replace old FSF addresses with current GNU license URL
    * d/rules.real: Exclude vDSOs from processing by dh_makeshlibs
    * linux-doc: Use dh_sphinxdoc to replace embedded Javascript
    .
    [ Alper Nebi Yasak ]
    * [arm64] udeb: Add mtk-cmdq-mailbox to kernel-image
    .
    linux (6.12.25-1) unstable; urgency=medium
    .
    * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.23
    - watch_queue: fix pipe accounting mismatch
    - [x86] mm/pat: cpa-test: fix length for CPA_ARRAY test
    - cpufreq: scpi: compare kHz instead of Hz
    - sched: Cancel the slice protection of the idle entity
    - sched/eevdf: Force propagating min_slice of cfs_rq when {en,de}queue tasks
    - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
    - [amd64] EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald
    Rapids
    - [x86] fpu: Fix guest FPU state buffer allocation size
    - [x86] fpu: Avoid copying dynamic FP state from init_task in
    arch_dup_task_struct()
    - [x86] platform: Only allow CONFIG_EISA for 32-bit
    - [x86] sev: Add missing RIP_REL_REF() invocations during sme_enable()
    - lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock
    - PM: sleep: Adjust check before setting power.must_resume
    - cpufreq: tegra194: Allow building for Tegra234
    - [riscv64] KVM: Disable the kernel perf counter during configure
    - watchdog/hardlockup/perf: Fix perf_event memory leak
    - selinux: Chain up tool resolving errors in install_policy.sh
    - [amd64] EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
    - [amd64] EDAC/ie31200: Fix the DIMM size mask for several SoCs
    - [amd64] EDAC/ie31200: Fix the error path order of ie31200_init()
    - [x86] resctrl: Fix allocation of cleanest CLOSID on platforms with no
    monitors
    - thermal: int340x: Add NULL check for adev
    - PM: sleep: Fix handling devices with direct_complete set on errors
    - lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
    - perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
    - [x86] traps: Make exc_double_fault() consistently noreturn
    - [x86] fpu/xstate: Fix inconsistencies in guest FPU xfeatures
    - [x86] entry: Add __init to ia32_emulation_override_cmdline()
    - [arm64] regulator: pca9450: Fix enable register for LDO5
    - [arm64,armhf] media: verisilicon: HEVC: Initialize start_bit field
    - [x86] platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: Make symbol
    static
    - [x86] platform/x86: dell-uart-backlight: Make dell_uart_bl_serdev_driver
    static
    - [x86] platform/x86: dell-ddv: Fix temperature calculation
    - [amd64] ASoC: cs35l41: check the return value from spi_setup()
    - dt-bindings: vendor-prefixes: add GOcontroll
    - ALSA: hda/realtek: Always honor no_shutup_pins
    - ALSA: timer: Don't take register_mutex with copy_from/to_user()
    - [arm64] drm/bridge: ti-sn65dsi86: Fix multiple instances
    - drm/dp_mst: Fix drm RAD print
    - [arm64] drm/bridge: it6505: fix HDCP V match check is not performed
    correctly
    - [arm64] gpu: cdns-mhdp8546: fix call balance of mhdp->clk handling
    routines
    - drm/amdgpu: refine smu send msg debug log format
    - drm/amdgpu/umsch: fix ucode check
    - PCI: Use downstream bridges for distributing resources
    - PCI: Remove add_align overwrite unrelated to size0
    - [arm64] drm/mediatek: mtk_hdmi: Unregister audio platform device on
    failure
    - [arm64] drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
    - PCI/ASPM: Fix link state exit during switch upstream function removal
    - PCI/ACS: Fix 'pci=config_acs=' parameter
    - [arm64] drm/amd/display: fix an indent issue in DML21
    - [arm64] drm/msm/dpu: don't use active in atomic_check()
    - [arm64] drm/msm/dsi/phy: Program clock inverters in correct register
    - [arm64] drm/msm/dsi: Use existing per-interface slice count in DSC timing
    - [arm64] drm/msm/dsi: Set PHY usescase (and mode) before registering DSI
    host
    - [arm64] PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without
    data payload
    - [arm64] PCI: brcmstb: Set generation limit before PCIe link up
    - [arm64] PCI: brcmstb: Use internal register to change link capability
    - [arm64] PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
    - [arm64] PCI: brcmstb: Fix potential premature regulator disabling
    - PCI/portdrv: Only disable pciehp interrupts early when needed
    - PCI: Avoid reset when disabled via sysfs
    - drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
    - [arm64] drm/msm/a6xx: Fix a6xx indexed-regs in devcoreduump
    - [powerpc*] crypto: powerpc: Mark ghashp8-ppc.o as an
    OBJECT_FILES_NON_STANDARD
    - [powerpc*] kexec: fix physical address calculation in clear_utlb_entry()
    - PCI: Remove stray put_device() in pci_register_host_bridge()
    - [arm64] drm/mediatek: Fix config_updating flag never false when no mbox
    channel
    - [arm64] drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
    - [arm64] drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
    - drm/amd/display: avoid NPD when ASIC does not support DMUB
    - [arm64] PCI: dwc: ep: Return -ENOMEM for allocation failures
    - PCI: Fix BAR resizing when VF BARs are assigned
    - PCI: pciehp: Don't enable HPIE when resuming in poll mode
    - mdacon: rework dependency list
    - fbdev: sm501fb: Add some geometry checks.
    - [amd64] crypto: iaa - Test the correct request flag
    - [amd64] crypto: qat - set parity error mask for qat_420xx
    - crypto: bpf - Add MODULE_DESCRIPTION for skcipher
    - clk: amlogic: gxbb: drop incorrect flag on 32k clock
    - RDMA/mlx5: Fix page_size variable overflow
    - remoteproc: core: Clear table_sz when rproc_shutdown
    - of: property: Increase NR_FWNODE_REFERENCE_ARGS
    - pinctrl: renesas: rzg2l: Suppress binding attributes
    - remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
    - libbpf: Fix hypothetical STT_SECTION extern NULL deref case
    - [x86] mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()
    - [arm64] clk: renesas: r8a08g045: Check the source of the CPU PLL settings
    - remoteproc: qcom: pas: add minidump_id to SC7280 WPSS
    - [arm64] clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
    - [s390x] Remove ioremap_wt() and pgprot_writethrough()
    - RDMA/mana_ib: Ensure variable err is initialized
    - remoteproc: qcom_q6v5_pas: Use resource with CX PD for MSM8226
    - [arm64] clk: qcom: gcc-x1e80100: Unregister
    GCC_GPU_CFG_AHB_CLK/GCC_DISP_XO_CLK
    - bpf: Use preempt_count() directly in bpf_send_signal_common()
    - lib: 842: Improve error handling in sw842_compress()
    - RDMA/mlx5: Fix MR cache initialization error flow
    - [arm64] clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
    - RDMA/core: Don't expose hw_counters outside of init net namespace
    - RDMA/mlx5: Fix calculation of total invalidated pages
    - RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
    - remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
    - power: supply: bq27xxx_battery: do not update cached flags prematurely
    - crypto: api - Fix larval relookup type and mask
    - IB/mad: Check available slots before posting receive WRs
    - [arm64,armhf] pinctrl: tegra: Set SFIO mode to Mux Register
    - [arm64] clk: amlogic: g12b: fix cluster A parent data
    - [arm64] clk: amlogic: gxbb: drop non existing 32k clock parent
    - [amd64] crypto: qat - remove access to parity register for QAT GEN4
    - [arm64] clk: clk-imx8mp-audiomix: fix dsp/ocram_a clock parents
    - [arm64] clk: amlogic: g12a: fix mmc A peripheral clock
    - [x86] entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
    - power: supply: max77693: Fix wrong conversion of charge input threshold
    value
    - crypto: nx - Fix uninitialised hv_nxc on error
    - bpf: Fix array bounds error with may_goto
    - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
    - [arm64] pinctrl: renesas: rzv2m: Fix missing of_node_put() call
    - [mips64el] mfd: sm501: Switch to BIT() to mitigate integer overflows
    - leds: Fix LED_OFF brightness race
    - [x86] dumpstack: Fix inaccurate unwinding from exception stacks due to
    misplaced assignment
    - RDMA/core: Fix use-after-free when rename device name
    - [amd64] pinctrl: intel: Fix wrong bypass assignment in
    intel_pinctrl_probe_pwm()
    - perf stat: Fix find_stat for mixed legacy/non-legacy events
    - perf: Always feature test reallocarray
    - w1: fix NULL pointer dereference in probe
    - fs/ntfs3: Update inode->i_mapping->a_ops on compression state
    - [arm64] phy: phy-rockchip-samsung-hdptx: Don't use dt aliases to determine
    phy-id
    - isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
    - soundwire: slave: fix an OF node reference leak in soundwire slave device
    - perf report: Switch data file correctly in TUI
    - [arm64,armhf] coresight: catu: Fix number of pages while using 64k pages
    - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
    - [arm64,armhf] coresight-etm4x: add isb() before reading the TRCSTATR
    - perf pmu: Don't double count common sysfs and json events
    - [x86] tools/x86: Fix linux/unaligned.h include path in lib/insn.c
    - perf build: Fix in-tree build due to symbolic link
    - ucsi_ccg: Don't show failed to get FW build information error
    - iio: accel: mma8452: Ensure error return on failure to matching
    oversampling ratio
    - iio: accel: msa311: Fix failure to release runtime pm if direct mode claim
    fails.
    - iio: backend: make sure to NULL terminate stack buffer
    - perf bench: Fix perf bench syscall loop count
    - usb: xhci: correct debug message page size calculation
    - fs/ntfs3: Fix a couple integer overflows on 32bit systems
    - fs/ntfs3: Prevent integer overflow in hdr_first_de()
    - [arm64] dmaengine: fsl-edma: cleanup chan after
    dma_async_device_unregister
    - [arm64] dmaengine: fsl-edma: free irq correctly in remove path
    - iio: adc: ad4130: Fix comparison of channel setups
    - iio: adc: ad7124: Fix comparison of channel configs
    - iio: adc: ad7173: Fix comparison of channel configs
    - iio: adc: ad7768-1: set MOSI idle state to prevent accidental reset
    - iio: light: Add check for array bounds in veml6075_read_int_time_ms
    - perf debug: Avoid stack overflow in recursive error message
    - perf evlist: Add success path to evlist__create_syswide_maps
    - perf units: Fix insufficient array space
    - kernel/events/uprobes: handle device-exclusive entries correctly in
    __replace_page()
    - kexec: initialize ELF lowest address to ULONG_MAX
    - ocfs2: validate l_tree_depth to avoid out-of-bounds access
    - NFSv4: Don't trigger uneccessary scans for return-on-close delegations
    - NFSv4: Avoid unnecessary scans of filesystems for returning delegations
    - NFSv4: Avoid unnecessary scans of filesystems for expired delegations
    - NFSv4: Avoid unnecessary scans of filesystems for delayed delegations
    - NFS: fix open_owner_id_maxsz and related fields.
    - fuse: fix dax truncate/punch_hole fault path
    - i3c: master: svc: Fix missing the IBI rules
    - perf python: Fixup description of sample.id event member
    - perf python: Decrement the refcount of just created event on failure
    - perf python: Don't keep a raw_data pointer to consumed ring buffer space
    - perf python: Check if there is space to copy all the event
    - perf dso: fix dso__is_kallsyms() check
    - perf: intel-tpebs: Fix incorrect usage of zfree()
    - [arm*] staging: vchiq_arm: Register debugfs after cdev
    - [arm*] staging: vchiq_arm: Fix possible NPR of keep-alive thread
    - tty: n_tty: use uint for space returned by tty_write_room()
    - perf vendor events arm64 AmpereOneX: Fix frontend_bound calculation
    - fs/procfs: fix the comment above proc_pid_wchan()
    - perf tools: annotate asm_pure_loop.S
    - perf bpf-filter: Fix a parsing error with comma
    - thermal: core: Remove duplicate struct declaration
    - objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show()
    - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
    - NFS: Shut down the nfs_client only after all the superblocks
    - smb: client: Fix netns refcount imbalance causing leaks and use-after-free
    - exfat: fix the infinite loop in exfat_find_last_cluster()
    - exfat: fix missing shutdown check
    - rtnetlink: Allocate vfinfo size for VF GUIDs when supported
    - rndis_host: Flag RNDIS modems as WWAN devices
    - ksmbd: use aead_request_free to match aead_request_alloc
    - ksmbd: fix multichannel connection failure
    - ksmbd: fix r_count dec/increment mismatch
    - net/mlx5e: SHAMPO, Make reserved size independent of page size
    - ring-buffer: Fix bytes_dropped calculation issue
    - objtool: Fix segfault in ignore_unreachable_insn()
    - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are
    invalid
    - net: phy: broadcom: Correct BCM5221 PHY model detection
    - objtool: Fix verbose disassembly if CROSS_COMPILE isn't set
    - sched/smt: Always inline sched_smt_active()
    - context_tracking: Always inline ct_{nmi,irq}_{enter,exit}()
    - rcu-tasks: Always inline rcu_irq_work_resched()
    - nfs: Add missing release on error in nfs_lock_and_join_requests()
    - wifi: mac80211: Cleanup sta TXQs on flush
    - wifi: mac80211: remove debugfs dir for virtual monitor
    - wifi: iwlwifi: fw: allocate chained SG tables for dump
    - wifi: iwlwifi: mvm: use the right version of the rate API
    - nvme-tcp: fix possible UAF in nvme_tcp_poll
    - nvme-pci: clean up CMBMSC when registering CMB fails
    - nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
    - wifi: brcmfmac: keep power during suspend if board requires it
    - affs: generate OFS sequence numbers starting at 1
    - affs: don't write overlarge OFS data block size fields
    - ALSA: hda/realtek: Fix Asus Z13 2025 audio
    - ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0
    - perf/core: Fix perf_pmu_register() vs. perf_init_event()
    - smb: common: change the data type of num_aces to le16
    - cifs: fix incorrect validation for num_aces field of smb_acl
    - [x86] platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go
    4 tablet

    [continued in next message]

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)