[continued from previous message]

- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
(CVE-2023-3390)
- [arm64] net: enetc: correct the indexes of highest and 2nd highest TCs
- ping6: Fix send to link-local addresses with VRF.
- igb: Fix extts capture value format for 82580/i354/i350
- net/sched: simplify tcf_pedit_act
- net/sched: act_pedit: remove extra check for key type
- net/sched: act_pedit: Parse L3 Header for L4 offset
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- wifi: mac80211: fix link activation settings order
- wifi: cfg80211: fix link del callback to call correct handler
- wifi: mac80211: take lock before setting vif links
- RDMA/rxe: Removed unused name from rxe_task struct
- RDMA/rxe: Fix the use-before-initialization error of resp_pkts
- iavf: remove mask from iavf_irq_enable_queues()
- RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions
- RDMA/mlx5: Create an indirect flow table for steering anchor
- RDMA/cma: Always set static rate to 0 for RoCE
- IB/uverbs: Fix to consider event queue closing also upon non-blocking mode
- RDMA/mlx5: Fix affinity assignment
- IB/isert: Fix dead lock in ib_isert
- IB/isert: Fix possible list corruption in CMA handler
- IB/isert: Fix incorrect release of isert connection
- net: ethtool: correct MAX attribute value for stats
- ipvlan: fix bound dev checking for IPv6 l3s mode
- sctp: fix an error code in sctp_sf_eat_auth()
- igc: Clean the TX buffer and TX descriptor ring
- igc: Fix possible system crash when loading module
- igb: fix nvm.ops.read() error handling
- net: phylink: report correct max speed for QUSGMII
- net: phylink: use a dedicated helper to parse usgmii control word
- drm/nouveau: don't detect DSM for non-NVIDIA device
- [arm64] drm/bridge: ti-sn65dsi86: Avoid possible buffer overflow
- drm/nouveau/dp: check for NULL nv_connector->native_mode
- drm/nouveau: add nv_encoder pointer check for NULL
- sched: add new attr TCA_EXT_WARN_MSG to report tc extact message
- net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs
- net/sched: qdisc_destroy() old ingress and clsact Qdiscs before grafting
- cifs: fix lease break oops in xfstest generic/098
- ext4: drop the call to ext4_error() from ext4_get_group_info()
- net/sched: cls_api: Fix lockup on flushing explicitly created chain
- [arm64] net: dsa: felix: fix taprio guard band overflow at 10Mbps with
jumbo frames
- net: macsec: fix double free of percpu stats
- sfc: fix XDP queues mode with legacy IRQ
- dm: don't lock fs when the map is NULL during suspend or resume
- net: tipc: resize nlattr array to correct size
- afs: Fix vlserver probe RTT handling
- rcu/kvfree: Avoid freeing new kfree_rcu() memory after old grace period
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
- net/sched: act_api: move TCA_EXT_WARN_MSG to the correct hierarchy
- Revert "net/sched: act_api: move TCA_EXT_WARN_MSG to the correct
hierarchy"
- net/sched: act_api: add specific EXT_WARN_MSG for tc action
- neighbour: delete neigh_lookup_nodev as not used
- scsi: target: core: Fix error path in target_setup_session()
- [mips*] Move '-Wa,-msoft-float' check from as-option to cc-option
- [mips*] Prefer cc-option for additions to cflags
- kbuild: Update assembler calls to use proper flags and language target
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.36
- drm/amd/display: Use dc_update_planes_and_stream
- drm/amd/display: Add wrapper to call planes and stream update
- drm/amd/display: fix the system hang while disable PSR
- [arm64] tty: serial: fsl_lpuart: make rx_watermark configurable for
different platforms
- [arm64] tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
- ata: libata-scsi: Avoid deadlock on rescan after device resume
- mm: Fix copy_from_user_nofault(). (Closes: #1033398)
- tpm, tpm_tis: Claim locality in interrupt handler
- tpm_crb: Add support for CRB devices based on Pluton
- ksmbd: validate command payload size
- ksmbd: fix out-of-bound read in smb2_write
- ksmbd: validate session id and tree id in the compound request
- tick/common: Align tick period during sched_timer setup (Closes: #1038754)
- writeback: fix dereferencing NULL mapping->host on writeback_page_template
- nilfs2: fix buffer corruption due to concurrent device reads
- [x86] ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep()
- KVM: Avoid illegal stage2 mapping on invalid memory slot
- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails
- Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
- PCI: hv: Fix a race condition bug in hv_pci_query_relations()
- Revert "PCI: hv: Fix a timing issue which causes kdump to fail
occasionally"
- PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev
- PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic
- PCI: hv: Add a per-bus mutex state_lock
- io_uring/net: clear msg_controllen on partial sendmsg retry
- io_uring/net: disable partial retries for recvmsg with cmsg
- mptcp: handle correctly disconnect() failures
- mptcp: fix possible divide by zero in recvmsg()
- mptcp: fix possible list corruption on passive MPJ
- mptcp: consolidate fallback and non fallback state machine
- cgroup: Do not corrupt task iteration when rebinding subsystem
- cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex in
freezer_css_{online,offline}()
- [arm64] mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916
- [arm64] mmc: meson-gx: remove redundant mmc_request_done() call from irq
context
- [arm64,armhf] mmc: mmci: stm32: fix max busy timeout calculation
- [arm64,armhf] mmc: bcm2835: fix deferred probing
- [arm64,armhf] mmc: sunxi: fix deferred probing
- bpf: ensure main program has an extable
- wifi: iwlwifi: pcie: Handle SO-F device for PCI id 0x7AF0
- io_uring/poll: serialize poll linked timer start with poll removal
- nilfs2: prevent general protection fault in nilfs_clear_dirty_page()
- [x86] mm: Avoid using set_pgd() outside of real PGD pages
- memfd: check for non-NULL file_seals in memfd_create() syscall
- [arm64] mmc: meson-gx: fix deferred probing
- ieee802154: hwsim: Fix possible memory leaks
- xfrm: Treat already-verified secpath entries as optional
- xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c
- xfrm: Ensure policies always checked on XFRM-I input path
- [arm64] KVM: arm64: PMU: Restore the host's PMUSERENR_EL0
- bpf: track immediate values written to stack by BPF_ST instruction
- bpf: Fix verifier id tracking of scalars on spill
- xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets
- bpf: Fix a bpf_jit_dump issue for x86_64 with sysctl bpf_jit_enable.
- xfrm: Linearize the skb after offloading if needed.
- net/mlx5: DR, Fix wrong action data allocation in decap action
- sfc: use budget for TX completions
- [armel,armhf] mmc: mvsdio: fix deferred probing
- [armhf] mmc: omap: fix deferred probing
- [armhf] mmc: omap_hsmmc: fix deferred probing
- mmc: sdhci-acpi: fix deferred probing
- ipvs: align inner_mac_header for encapsulation
- be2net: Extend xmit workaround to BE3 chip
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound
set/chain
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nft_set_pipapo: .walk does not deal with generations
- netfilter: nf_tables: disallow element updates of bound anonymous sets
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: disallow updates of anonymous sets
- netfilter: nfnetlink_osf: fix module autoload
- Revert "net: phy: dp83867: perform soft reset and retain established link"
- bpf/btf: Accept function names that contain dots
- bpf: Force kprobe multi expected_attach_type for kprobe_multi link
- io_uring/net: use the correct msghdr union member in io_sendmsg_copy_hdr
- sch_netem: acquire qdisc lock in netem_change()
- revert "net: align SO_RCVMARK required privileges with SO_MARK"
- [arm64] dts: rockchip: fix nEXTRST on SOQuartz
- gpiolib: Fix GPIO chip IRQ initialization restriction
- gpiolib: Fix irq_domain resource tracking for
gpiochip_irqchip_add_domain()
- scsi: target: iscsi: Prevent login threads from racing between each other
- HID: wacom: Add error check to wacom_parse_and_register()
- smb3: missing null check in SMB2_change_notify
- media: cec: core: disable adapter in cec_devnode_unregister
- media: cec: core: don't set last_initiator if tx in progress
- nfcsim.c: Fix error checking for debugfs_create_dir
- btrfs: fix an uninitialized variable warning in btrfs_log_inode
- [i386] usb: gadget: udc: fix NULL dereference in remove()
- nvme: double KA polling frequency to avoid KATO with TBKAS on
- nvme: check IO start time when deciding to defer KA
- nvme: improve handling of long keep alives
- [x86] Input: soc_button_array - add invalid acpi_index DMI quirk handling
- [s390x] cio: unregister device when the only path is gone
- [arm*] ASoC: simple-card: Add missing of_node_put() in case of error
- soundwire: dmi-quirks: add new mapping for HP Spectre x360
- soundwire: qcom: add proper error paths in qcom_swrm_startup()
- [x86] ASoC: nau8824: Add quirk to active-high jack-detect
- [x86] ASoC: amd: yc: Add Thinkpad Neo14 to quirks list for acp6x
- gfs2: Don't get stuck writing page onto itself under direct I/O
- [arm64] ASoC: fsl_sai: Enable BCI bit if SAI works on synchronous mode
with BYP asserted
- ALSA: hda/realtek: Add "Intel Reference board" and "NUC 13" SSID in the
ALC256
- i2c: mchp-pci1xxxx: Avoid cast to incompatible function type
- null_blk: Fix: memory release when memory_backed=1
- drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl
- vhost_net: revert upend_idx only on retriable error
- [arm64] KVM: arm64: Restore GICv2-on-GICv3 functionality
- [x86] apic: Fix kernel panic when booting with intremap=off and
x2apic_phys
- [arm64] i2c: imx-lpi2c: fix type char overflow issue when calculating the
clock cycle
- smb: move client and server files to common directory fs/smb
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.37
- mm/mmap: Fix error path in do_vmi_align_munmap()
- mm/mmap: Fix error return in do_vmi_align_munmap()
- mptcp: ensure listener is unhashed before updating the sk status
- mm, hwpoison: try to recover from copy-on write faults
- mm, hwpoison: when copy-on-write hits poison, take page offline
- [x86] microcode/AMD: Load late on both threads too
- [x86] smp: Make stop_other_cpus() more robust
- [x86] smp: Dont access non-existing CPUID leaf
- [x86] smp: Remove pointless wmb()s from native_stop_other_cpus()
- [x86] smp: Use dedicated cache-line for mwait_play_dead()
- [x86] smp: Cure kexec() vs. mwait_play_dead() breakage
- can: isotp: isotp_sendmsg(): fix return error fix on TX path
- maple_tree: fix potential out-of-bounds access in mas_wr_end_piv()
- mm: introduce new 'lock_mm_and_find_vma()' page fault helper
- mm: make the page fault mmap locking killable
- [arm64] mm: Convert to using lock_mm_and_find_vma()
- [powerpc*] mm: Convert to using lock_mm_and_find_vma()
- [mips*] mm: Convert to using lock_mm_and_find_vma()
- [armhf] mm: Convert to using lock_mm_and_find_vma()
- mm/fault: convert remaining simple cases to lock_mm_and_find_vma()
- [powerpc*] mm: convert coprocessor fault to lock_mm_and_find_vma()
- mm: make find_extend_vma() fail if write lock not held
- execve: expand new process stack manually ahead of time
- mm: always expand the stack with the mmap write lock held
- fbdev: fix potential OOB read in fast_imageblit()
- HID: hidraw: fix data race on device refcount
- HID: wacom: Use ktime_t rather than int when dealing with timestamps
- HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651.
(Closes: #1038271)
.
[ Salvatore Bonaccorso ]
* d/salsa-ci.yml: Update for bookworm: Set RELEASE to bookworm
* d/rules.real: Fix typo in setup_image target.
* [amd64,arm64] drivers/virtio: Enable VIRTIO_MEM as module (Closes: #1038665)
* Bump ABI to 10
* [rt] Update to 6.1.33-rt11
* Revert "drm/amd/display: edp do not add non-edid timings"
.
[ Cyril Brulebois ]
* udeb: Add r8188eu to nic-wireless-modules (Closes: #1035824)
.
[ Ben Hutchings ]
* Add pkg.linux.mintools profile for building minimal userland tools
* d/b/test-patches: Build linux-{kbuild,bootwrapper} packages
(Closes: #871216, #1035359)
Checksums-Sha1:
d42578dfe2be7b4c268846480330782619c489a6 290924 linux_6.1.37-1.dsc
7568798aa2df2887cdc4e2bb2285613f51e28857 137331348 linux_6.1.37.orig.tar.xz
11e9e81911b39aeb59dd0fa20c140963ab5c7c03 1481740 linux_6.1.37-1.debian.tar.xz
8dc6236e403cd22955b3171ce22b4bb90864eea8 6849 linux_6.1.37-1_source.buildinfo Checksums-Sha256:
ad35f62009cc2798c71fe4788d8ed250576f8a56d3e2d00a8349226c5b5a982a 290924 linux_6.1.37-1.dsc
5d98b9130b60e980eda129287210c9a994eb0dbbafdc2269959c77b698f21c70 137331348 linux_6.1.37.orig.tar.xz
646132760e8aa77b6e0029df6312a834a309d914002c5fbb940086f58892a88f 1481740 linux_6.1.37-1.debian.tar.xz
b1311dcc4fabf7eb9e2d3bf0c9d68c474cd38dcbba37eeaff2f34659e2c88b64 6849 linux_6.1.37-1_source.buildinfo
Files:
bfbdd2d467f0166575717d08cdfc3e5b 290924 kernel optional linux_6.1.37-1.dsc
cf305eb544e936d997751903e72f9910 137331348 kernel optional linux_6.1.37.orig.tar.xz
d33ac5b636df55dbb571a0f393c099e9 1481740 kernel optional linux_6.1.37-1.debian.tar.xz
0e785dec540c2c902fd1690f934873cd 6849 kernel optional linux_6.1.37-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmSjJhVfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EjsQQAJD45ca6LWZAa6aGm+4qhpFp1RThhDxi 0ZY8zsQNPXQFrFS0q1Di6xgyuaQ607bWmO8iyzw9yamhArAq7vG0fdp96fSD1H/A kjlKkPenVKS6NuJuLBvYQKL6ru6L9wCwL2YwOEZj9edFcMt5b3mAqfJpCz2FL5/c xr49vi7F9EJNsyaC47uBWtRVz6luNzIPcA1jsktrPKXWZW0z+kpvV0jE8/sKDnUP /iQIVm1oGzuMSkKUlJCukNnIrdys5Sc34RXwpat6aPJjkg/fJNgwg9JrJgkqhiu6 MfWvHchjDPrbhk6S1SJP+qp15H1DhCR6ck3ZpVPAi3Xm8VApWJYycUszrhxA7C9c CSpAX+Js8vMcr+0Us/k5EfOBuRab8Bili07GsZS18Zj/rwo0Zs9qDNrnk6aiJ8RU XDPP70mOgQc8YzhhDjUgrC3+5ybnYbM5mm49pyba80bgzKTTKy0lqHKuQunk2csJ WrkhJ3Hl29JYtnuWlGh2l1PsLvDMjQcO4Kn+9fbMHmA8BFyWrXpI9wDiBNNxSGFE /Yr3ZUWCj/frlZPpIVyRzDyRgMV4WMi7hjdP24vUzVs1BmqxBk1BCs5ej9R/n1aq DPcl8z0afi6X1a9MPo65JTIO9sxyVSvlyrpYPDL+HuU2gXlfNjokFNt+YvC1ePM9
J1vO4zlX22Bu
=OtEI
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)