• linux_6.12.35-1_source.changes ACCEPTED into unstable (4/9)

    From Debian FTP Masters@1:229/2 to All on Fri Jul 4 09:10:02 2025
    [continued from previous message]

    - net: stmmac: make sure that ptp_rate is not 0 before configuring EST
    - [amd64] drm/i915/guc: Check if expecting reply before decrementing
    outstanding_submission_g2h
    - [amd64] drm/i915/psr: Fix using wrong mask in REG_FIELD_PREP
    - [amd64] drm/i915/guc: Handle race condition where wakeref count drops
    below 0
    - net: fix udp gso skb_segment after pull from frag_list
    - net: wwan: t7xx: Fix napi rx poll issue
    - vmxnet3: correctly report gso type for UDP tunnels
    - PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
    - nvme: fix command limits status code
    - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO
    - [arm64,armhf] drm/panel-simple: fix the warnings for the Evervision
    VGG644804
    - netfilter: nf_set_pipapo_avx2: fix initial map fill
    - netfilter: nf_nat: also check reverse tuple to obtain clashing entry
    - [arm64] net: ti: icssg-prueth: Fix swapped TX stats for MII interfaces.
    - [armhf] net: dsa: b53: do not enable RGMII delay on bcm63xx
    - [armhf] net: dsa: b53: allow RGMII for bcm63xx RGMII ports
    - [armhf] net: dsa: b53: do not touch DLL_IQQD on bcm53115
    - wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements
    - net: wwan: mhi_wwan_mbim: use correct mux_id for multiplexing
    - wireguard: device: enable threaded NAPI
    - seg6: Fix validation of nexthop addresses
    - [riscv64] misaligned: fix sleeping function called during misaligned
    access handling
    - scsi: ufs: qcom: Prevent calling phy_exit() before phy_init()
    - [amd64] ASoC: codecs: hda: Fix RPM usage count underflow
    - [amd64] ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX
    - [amd64] ASoC: Intel: avs: Verify content returned by parse_int_array()
    - iov_iter: use iov_offset for length calculation in iov_iter_aligned_bvec
    - path_overmount(): avoid false negatives
    - fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2)
    - do_change_type(): refuse to operate on unmounted/not ours mounts
    - tools/power turbostat: Fix AMD package-energy reporting
    - ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3315
    - ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3247
    - ALSA: hda/realtek: Add support for various HP Laptops using CS35L41 HDA
    - ALSA: hda/realtek - Support mute led function for HP platform
    - ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup
    - ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA
    - Input: synaptics-rmi - fix crash with unsupported versions of F34
    - pmdomain: core: Introduce dev_pm_genpd_rpm_always_on()
    - mmc: sdhci-of-dwcmshc: add PD workaround on RK3576
    - [arm64,armhf] pinctrl: samsung: refactor drvdata suspend & resume
    callbacks
    - [arm64,armhf] pinctrl: samsung: add dedicated SoC eint suspend/resume
    callbacks
    - [arm64,armhf] pinctrl: samsung: add gs101 specific eint suspend/resume
    callbacks
    - dt-bindings: pwm: adi,axi-pwmgen: Increase #pwm-cells to 3
    - dt-bindings: pwm: Correct indentation and style in DTS example
    - dt-bindings: pwm: adi,axi-pwmgen: Fix clocks
    - serial: sh-sci: Move runtime PM enable to sci_probe_single()
    - scsi: core: ufs: Fix a hang in the error handler
    - Bluetooth: hci_core: fix list_for_each_entry_rcu usage
    - Bluetooth: btintel_pcie: Fix driver not posting maximum rx buffers
    - Bluetooth: btintel_pcie: Increase the tx and rx descriptor count
    - Bluetooth: btintel_pcie: Reduce driver buffer posting to prevent race
    condition
    - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
    - Bluetooth: MGMT: Remove unused mgmt_pending_find_data
    - Bluetooth: MGMT: Protect mgmt_pending list with its own lock
    - [armhf] net: dsa: b53: fix untagged traffic sent via cpu tagged with VID 0
    - ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use()
    - ath10k: snoc: fix unbalanced IRQ enable in crash recovery
    - wifi: ath11k: convert timeouts to secs_to_jiffies()
    - wifi: ath11k: avoid burning CPU in ath11k_debugfs_fw_stats_request()
    - wifi: ath11k: don't use static variables in
    ath11k_debugfs_fw_stats_process()
    - wifi: ath11k: don't wait when there is no vdev started
    - wifi: ath11k: move some firmware stats related functions outside of
    debugfs
    - wifi: ath11k: validate ath11k_crypto_mode on top of
    ath11k_core_qmi_firmware_ready
    - wifi: ath12k: refactor ath12k_hw_regs structure
    - wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850
    - regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt()
    - [arm64,armhf] spi: omap2-mcspi: Disable multi mode when CS should be kept
    asserted after message
    - [arm64,armhf] spi: omap2-mcspi: Disable multi-mode when the previous
    message kept CS asserted
    - [arm64] pinctrl: qcom: pinctrl-qcm2290: Add missing pins
    - scsi: iscsi: Fix incorrect error path labels for flashnode operations
    - net_sched: sch_sfq: fix a potential crash on gso_skb handling
    - [powerpc*] powernv/memtrace: Fix out of bounds issue in memtrace mmap
    - [powerpc*] vas: Return -EINVAL if the offset is non-zero in mmap()
    - [arm64] drm/meson: use unsigned long long / Hz for frequency types
    - [arm64] drm/meson: fix debug log statement when setting the HDMI clocks
    - [arm64] drm/meson: use vclk_freq instead of pixel_freq in debug print
    - [arm64] drm/meson: fix more rounding issues with 59.94Hz modes
    - i40e: return false from i40e_reset_vf if reset is in progress
    - i40e: retry VFLR handling if there is ongoing VF reset
    - ACPI: CPPC: Fix NULL pointer dereference when nosmp is used
    - net: Fix TOCTOU issue in sk_is_readable()
    - macsec: MACsec SCI assignment for ES = 0
    - net/mdiobus: Fix potential out-of-bounds read/write access
    - net/mdiobus: Fix potential out-of-bounds clause 45 read/write access
    - Bluetooth: Fix NULL pointer deference on eir_get_service_data
    - Bluetooth: hci_sync: Fix broadcast/PA when using an existing instance
    - Bluetooth: eir: Fix possible crashes on eir_create_adv_data
    - Bluetooth: MGMT: Fix sparse errors
    - net/mlx5: Ensure fw pages are always allocated on same NUMA
    - net/mlx5: Fix ECVF vports unload on shutdown flow
    - net/mlx5: Fix return value when searching for existing flow group
    - net/mlx5: HWS, fix missing ip_version handling in definer
    - net/mlx5e: Fix leak of Geneve TLV option object
    - net_sched: prio: fix a race in prio_tune() (CVE-2025-38083)
    - net_sched: red: fix a race in __red_change()
    - net_sched: tbf: fix a race in tbf_change()
    - net_sched: ets: fix a race in ets_qdisc_change()
    - net: drv: netdevsim: don't napi_complete() from netpoll
    - btrfs: exit after state insertion failure at btrfs_convert_extent_bit()
    - fs/filesystems: Fix potential unsigned integer underflow in fs_name()
    - gfs2: pass through holder from the VFS for freeze/thaw
    - btrfs: exit after state split error at set_extent_bit()
    - nvmet-fcloop: access fcpreq only when holding reqlock
    - perf: Ensure bpf_perf_link path is properly serialized

    [continued in next message]

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)