• linux_6.1.90-1~bpo11+1_source.changes ACCEPTED into bullseye-backports

    From Debian FTP Masters@21:1/5 to All on Tue May 21 16:50:02 2024
    Thank you for your contribution to Debian.



    Accepted:

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Mon, 06 May 2024 16:52:31 +0200
    Source: linux
    Architecture: source
    Version: 6.1.90-1~bpo11+1
    Distribution: bullseye-backports
    Urgency: high
    Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
    Changed-By: Ben Hutchings <benh@debian.org>
    Closes: 1024149 1054514 1056056 1061521 1063338 1063422 1065320 1068675 1068770 1069092 1069102
    Changes:
    linux (6.1.90-1~bpo11+1) bullseye-backports; urgency=medium
    .
    * Rebuild for bullseye-backports:
    - Set ABI to 0.deb11.21
    .
    linux (6.1.90-1) bookworm-security; urgency=high
    .
    * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.86
    - amdkfd: use calloc instead of kzalloc to avoid integer overflow
    (CVE-2024-26817)
    - wifi: ath9k: fix LNA selection in ath_ant_try_scan()
    - bnx2x: Fix firmware version string character counts
    - wifi: rtw89: pci: enlarge RX DMA buffer to consider size of RX descriptor
    - [x86] VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
    - wifi: iwlwifi: pcie: Add the PCI device id for new hardware
    - panic: Flush kernel log buffer at the end
    - cpuidle: Avoid potential overflow in integer multiplication
    - [arm64] dts: rockchip: fix rk3328 hdmi ports node
    - [arm64] dts: rockchip: fix rk3399 hdmi ports node
    - ionic: set adminq irq affinity
    - net: skbuff: add overflow debug check to pull/push helpers
    - wifi: brcmfmac: Add DMI nvram filename quirk for ACEPC W5 Pro
    - pstore/zone: Add a null pointer check to the psz_kmsg_read
    - net: pcs: xpcs: Return EINVAL in the internal methods
    - dma-direct: Leak pages on dma_set_decrypted() failure
    - wifi: ath11k: decrease MHI channel buffer length to 8KB
    - cpufreq: Don't unregister cpufreq cooling on CPU hotplug
    - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
    - btrfs: export: handle invalid inode or root reference in
    btrfs_get_parent()
    - btrfs: send: handle path ref underflow in header iterate_inode_ref()
    - ice: use relative VSI index for VFs instead of PF VSI number
    - net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
    - Bluetooth: btintel: Fix null ptr deref in btintel_read_version
    - Bluetooth: btmtk: Add MODULE_FIRMWARE() for MT7922
    - [arm64,armhf] drm/vc4: don't check if plane->state->fb == state->fb
    - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
    - drm: panel-orientation-quirks: Add quirk for GPD Win Mini
    - pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
    - sysv: don't call sb_bread() with pointers_lock held
    - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
    - isofs: handle CDs with bad root inode but good Joliet root directory
    - ASoC: Intel: common: DMI remap for rebranded Intel NUC M15 (LAPRC710)
    laptops
    - rcu-tasks: Repair RCU Tasks Trace quiescence check
    - Julia Lawall reported this null pointer dereference, this should fix it.
    - media: sta2x11: fix irq handler cast
    - ALSA: firewire-lib: handle quirk to calculate payload quadlets as data
    block counter
    - ext4: add a hint for block bitmap corrupt state in mb_groups
    - ext4: forbid commit inconsistent quota data when errors=remount-ro
    - drm/amd/display: Fix nanosec stat overflow
    - drm/amd/amdgpu: Fix potential ioremap() memory leaks in
    amdgpu_device_init()
    - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to
    unsigned int
    - Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
    - libperf evlist: Avoid out-of-bounds access
    - input/touchscreen: imagis: Correct the maximum touch area value
    - block: prevent division by zero in blk_rq_stat_sum()
    - RDMA/cm: add timeout to cm_destroy_id wait
    - Input: imagis - use FIELD_GET where applicable
    - Input: allocate keycode for Display refresh rate toggle
    - platform/x86: touchscreen_dmi: Add an extra entry for a variant of the
    Chuwi Vi8 tablet
    - [x86] perf/x86/amd/lbr: Discard erroneous branch entries
    - ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent
    environment
    - bus: mhi: host: Add MHI_PM_SYS_ERR_FAIL state
    - usb: gadget: uvc: mark incomplete frames with UVC_STREAM_ERR
    - [x86] thunderbolt: Keep the domain powered when USB4 port is in redrive
    mode
    - usb: typec: tcpci: add generic tcpci fallback compatible
    - usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
    - thermal/of: Assume polling-delay(-passive) 0 when absent
    - ASoC: soc-core.c: Skip dummy codec when adding platforms
    - fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
    - io_uring: clear opcode specific data for an early failure
    - drivers/nvme: Add quirks for device 126f:2262
    - fbmon: prevent division by zero in fb_videomode_from_videomode()
    - netfilter: nf_tables: release batch on table validation from abort path
    - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
    (CVE-2024-26925)
    - netfilter: nf_tables: discard table flag update with pending basechain
    deletion
    - gcc-plugins/stackleak: Avoid .head.text section
    - virtio: reenable config if freezing device failed
    - randomize_kstack: Improve entropy diffusion
    - [x86] platform/x86: intel-vbtn: Update tablet mode switch at end of probe
    - Bluetooth: btintel: Fixe build regression
    - net: mpls: error out if inner headers are not set
    - [x86] VMCI: Fix possible memcpy() run-time warning in
    vmci_datagram_invoke_guest_handler()
    - Revert "drm/amd/amdgpu: Fix potential ioremap() memory leaks in
    amdgpu_device_init()"
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.87
    - smb3: fix Open files on server counter going negative
    - ata: libata-scsi: Fix ata_scsi_dev_rescan() error path
    - batman-adv: Avoid infinite loop trying to resize local TT
    - ring-buffer: Only update pages_touched when a new page is touched
    - Bluetooth: Fix memory leak in hci_req_sync_complete()
    - drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11
    - PM: s2idle: Make sure CPUs will wakeup directly on resume
    - media: cec: core: remove length check of Timer Status
    - Revert "drm/qxl: simplify qxl_fence_wait" (Closes: #1054514)
    - nouveau: fix function cast warning
    - scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
    - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()
    - net: openvswitch: fix unwanted error log on timeout policy probing
    - u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one
    file
    - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
    - geneve: fix header validation in geneve[6]_xmit_skb
    - bnxt_en: Reset PTP tx_avail after possible firmware reset
    - af_unix: Clear stale u->oob_skb.
    - ipv6: fib: hide unused 'pn' variable
    - ipv4/route: avoid unused-but-set-variable warning
    - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
    - Bluetooth: SCO: Fix not validating setsockopt user input
    - Bluetooth: L2CAP: Fix not validating setsockopt user input
    - netfilter: complete validation of user input
    - net/mlx5: Properly link new fs rules into the tree
    - net/mlx5e: Fix mlx5e_priv_init() cleanup flow
    - net/mlx5e: HTB, Fix inconsistencies with QoS SQs number
    - af_unix: Do not use atomic ops for unix_sk(sk)->inflight.
    - af_unix: Fix garbage collector racing against connect() (CVE-2024-26923)
    - net: ena: Fix potential sign extension issue
    - net: ena: Wrong missing IO completions check order
    - net: ena: Fix incorrect descriptor free behavior
    - tracing: hide unused ftrace_event_id_fops
    - [amd64] iommu/vt-d: Allocate local memory for page request queue
    - btrfs: qgroup: correctly model root qgroup rsv in convert
    - btrfs: record delayed inode root in transaction
    - btrfs: qgroup: convert PREALLOC to PERTRANS after record_root_in_trans
    - io_uring/net: restore msg_control on sendzc retry
    - kprobes: Fix possible use-after-free issue on kprobe registration
    - [x86] drm/i915/vrr: Disable VRR when using bigjoiner
    - drm/ast: Fix soft lockup
    - drm/client: Fully protect modes[] with dev->mode_config.mutex
    - vhost: Add smp_rmb() in vhost_vq_avail_empty()
    - vhost: Add smp_rmb() in vhost_enable_notify()
    - [x86] perf/x86: Fix out of range data
    - [x86] cpu: Actually turn off mitigations by default for
    SPECULATION_MITIGATIONS=n
    - [x86] apic: Force native_apic_mem_read() to use the MOV instruction
    - irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
    - [x86] bugs: Fix return type of spectre_bhi_state()
    - [x86] bugs: Fix BHI documentation
    - [x86] bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES
    - [x86] bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr'
    - [x86] bugs: Fix BHI handling of RRSBA
    - [x86] bugs: Clarify that syscall hardening isn't a BHI mitigation
    - [x86] bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto
    - [x86] bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with
    CONFIG_MITIGATION_SPECTRE_BHI
    - [x86] drm/i915/cdclk: Fix CDCLK programming order when pipes are active
    - [x86] drm/i915: Disable port sync when bigjoiner is used
    - drm/amdgpu: Reset dGPU if suspend got aborted
    - drm/amdgpu: always force full reset for SOC21
    - drm/amd/display: fix disable otg wa logic in DCN316
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.88
    - drm/vmwgfx: Enable DMA mappings with SEV
    - drm/amdgpu: fix incorrect active rb bitmap for gfx11
    - drm/amdgpu: fix incorrect number of active RBs for gfx11
    - drm/amd/display: Do not recursively call manual trigger programming
    - io_uring: Fix io_cqring_wait() not restoring sigmask on get_timespec64()
    failure
    - SUNRPC: Fix rpcgss_context trace event acceptor field
    - random: handle creditable entropy from atomic process context
    - net: usb: ax88179_178a: avoid writing the mac address before first reading
    - [x86] drm/i915/vma: Fix UAF on destroy against retire race
    - [x86] efi: Drop EFI stub .bss from .data section
    - [x86] efi: Disregard setup header of loaded image
    - [x86] efistub: Reinstate soft limit for initrd loading
    - [x86] efi: Drop alignment flags from PE section headers
    - [x86] boot: Remove the 'bugger off' message
    - [x86] boot: Omit compression buffer from PE/COFF image memory footprint
    - [x86] boot: Drop redundant code setting the root device
    - [x86] boot: Drop references to startup_64
    - [x86] boot: Grab kernel_info offset from zoffset header directly
    - [x86] boot: Set EFI handover offset directly in header asm
    - [x86] boot: Define setup size in linker script
    - [x86] boot: Derive file size from _edata symbol
    - [x86] boot: Construct PE/COFF .text section from assembler
    - [x86] boot: Drop PE/COFF .reloc section
    - [x86] boot: Split off PE/COFF .data section
    - [x86] boot: Increase section and file alignment to 4k/512
    - [x86] efistub: Use 1:1 file:memory mapping for PE/COFF .compat section
    - [x86] mm: Remove P*D_PAGE_MASK and P*D_PAGE_SIZE macros
    - [x86] head/64: Add missing __head annotation to startup_64_load_idt()
    - [x86] head/64: Move the __head definition to <asm/init.h>
    - [x86] sme: Move early SME kernel encryption handling into .head.text
    - [x86] sev: Move early startup code into .head.text section
    - [x86] efistub: Remap kernel text read-only before dropping NX attribute
    - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
    - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
    - netfilter: br_netfilter: skip conntrack input hook for promisc packets
    - netfilter: nft_set_pipapo: do not free live element (CVE-2024-26924)
    - netfilter: flowtable: validate pppoe header
    - netfilter: flowtable: incorrect pppoe tuple
    - af_unix: Call manage_oob() for every skb in unix_stream_read_generic().
    - af_unix: Don't peek OOB data without MSG_OOB.
    - net/mlx5: Lag, restore buckets number to default after hash LAG
    deactivation
    - net/mlx5e: Prevent deadlock while disabling aRFS
    - ice: tc: allow zero flags in parsing tc flower
    - tun: limit printing rate when illegal packet received by tun dev
    - [arm64] net: ethernet: ti: am65-cpsw-nuss: cleanup DMA Channels before
    using them
    - RDMA/rxe: Fix the problem "mutex_destroy missing"
    - RDMA/cm: Print the old state when cm_destroy_id gets timeout
    - RDMA/mlx5: Fix port number for counter query in multi-port configuration
    - [s390x] qdio: handle deferred cc1
    - [s390x] cio: fix race condition during online processing
    - drm: nv04: Fix out of bounds access
    - [armhf] omap2: n8x0: stop instantiating codec platform data
    - PCI: Avoid FLR for SolidRun SNET DPU rev 1
    - HID: kye: Sort kye devices
    - usb: pci-quirks: Reduce the length of a spinlock section in
    usb_amd_find_chipset_info()
    - PCI: Delay after FLR of Solidigm P44 Pro NVMe
    - [x86] quirks: Include linux/pnp.h for arch_pnpbios_disabled()
    - [x86] thunderbolt: Log function name of the called quirk
    - [x86] thunderbolt: Add debug log for link controller power quirk
    - PCI: Execute quirk_enable_clear_retrain_link() earlier
    - ALSA: scarlett2: Move USB IDs out from device_info struct
    - ALSA: scarlett2: Add support for Clarett 8Pre USB
    - ASoC: ti: Convert Pandora ASoC to GPIO descriptors
    - ALSA: scarlett2: Default mixer driver to enabled
    - ALSA: scarlett2: Add correct product series name to messages
    - ALSA: scarlett2: Add Focusrite Clarett+ 2Pre and 4Pre support
    - ALSA: scarlett2: Add Focusrite Clarett 2Pre and 4Pre USB support
    - PCI/DPC: Use FIELD_GET()
    - PCI: Simplify pcie_capability_clear_and_set_word() to ..._clear_word()
    - ALSA: scarlett2: Rename scarlett_gen2 to scarlett2
    - drm: panel-orientation-quirks: Add quirk for Lenovo Legion Go
    - usb: xhci: Add timeout argument in address_device USB HCD callback
    - usb: new quirk to reduce the SET_ADDRESS request timeout
    - clk: Remove prepare_lock hold assertion in __clk_release()
    - clk: Print an info line before disabling unused clocks
    - clk: Initialize struct clk_core kref earlier
    - clk: Get runtime PM before walking tree during disable_unused
    - clk: remove unnecessary (void*) conversions
    - clk: Show active consumers of clocks in debugfs
    - clk: Get runtime PM before walking tree for clk_summary
    - [x86] bugs: Fix BHI retpoline check
    - [x86] cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ
    - ALSA: hda/realtek - Enable audio jacks of Haier Boyue G42 with ALC269VC
    - [arm*] binder: check offset alignment in binder_get_object()
    (CVE-2024-26926)
    - [x86] thunderbolt: Avoid notify PM core about runtime PM resume
    - [x86] thunderbolt: Fix wake configurations after device unplug
    - [x86] comedi: vmk80xx: fix incomplete endpoint checking
    - [armhf] serial: stm32: Return IRQ_NONE in the ISR if no handling happend
    - [armhf] serial: stm32: Reset .throttled state in .startup()
    - USB: serial: option: add Fibocom FM135-GL variants
    - USB: serial: option: add support for Fibocom FM650/FG650
    - USB: serial: option: add Lonsung U8300/U9300 product
    - USB: serial: option: support Quectel EM060K sub-models
    - USB: serial: option: add Rolling RW101-GL and RW135-GL support
    - USB: serial: option: add Telit FN920C04 rmnet compositions
    - Revert "usb: cdc-wdm: close race between read and workqueue"
    - [arm64,armhf] usb: dwc2: host: Fix dereference issue in DDMA completion
    flow.
    - usb: Disable USB3 LPM at shutdown
    - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport
    error
    - mei: me: disable RPL-S on SPS and IGN firmwares
    - speakup: Avoid crash on very long word
    - fs: sysfs: Fix reference leak in sysfs_break_active_protection()
    - [x86] KVM: x86: Snapshot if a vCPU's vendor model is AMD vs. Intel
    compatible
    - [x86] KVM: x86/pmu: Disable support for adaptive PEBS
    - [x86] KVM: x86/pmu: Do not mask LVTPC when handling a PMI on AMD platforms
    - [arm64] hibernate: Fix level3 translation fault in swsusp_save()
    - init/main.c: Fix potential static_command_line memory overflow
    - mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled
    - drm/amdgpu: validate the parameters of bo mapping operations more clearly
    (CVE-2024-26922)
    - drm/vmwgfx: Sort primary plane formats by order of preference
    - drm/vmwgfx: Fix crtc's atomic check conditional
    - nouveau: fix instmem race condition around ptr stores
    - bootconfig: use memblock_free_late to free xbc memory to buddy
    - nilfs2: fix OOB in nilfs_set_de_type
    - net: dsa: introduce preferred_default_local_cpu_port and use on MT7530
    - ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf
    - ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
    - ksmbd: clear RENAME_NOREPLACE before calling vfs_rename
    - ksmbd: common: use struct_group_attr instead of struct_group for
    network_open_info
    - PCI/ASPM: Fix deadlock when enabling ASPM (CVE-2024-26605)
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.89
    - Revert "ASoC: ti: Convert Pandora ASoC to GPIO descriptors"
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.90
    - smb: client: fix rename(2) regression against samba
    - cifs: reinstate original behavior again for forceuid/forcegid
    - [amd64] HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized
    dev->devc
    - HID: logitech-dj: allow mice to use all types of reports
    - wifi: iwlwifi: mvm: remove old PASN station when adding a new one
    - wifi: iwlwifi: mvm: return uid from iwl_mvm_build_scan_cmd
    - vxlan: drop packets from invalid src-address
    - icmp: prevent possible NULL dereferences from icmp_build_probe()
    - bridge/br_netlink.c: no need to return void function
    - bnxt_en: refactor reset close code
    - bnxt_en: Fix the PCI-AER routines
    - NFC: trf7970a: disable all regulators on removal
    - ax25: Fix netdev refcount issue
    - net: make SK_MEMORY_PCPU_RESERV tunable
    - net: fix sk_memory_allocated_{add|sub} vs softirqs
    - ipv4: check for NULL idev in ip_route_use_hint()
    - net: usb: ax88179_178a: stop lying about skb->truesize
    - net: gtp: Fix Use-After-Free in gtp_dellink
    - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID
    - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor
    - Bluetooth: qca: set power_ctrl_enabled on NULL returned by
    gpiod_get_optional()
    - ipvs: Fix checksumming on GSO of SCTP packets
    - net: openvswitch: Fix Use-After-Free in ovs_ct_exit
    - eth: bnxt: fix counting packets discarded due to OOM and netpoll
    - netfilter: nf_tables: honor table dormant flag from netdev release event
    path
    - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
    - i40e: Report MFS in decimal base instead of hex
    - iavf: Fix TC config comparison with existing adapter TC config
    - net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
    - af_unix: Suppress false-positive lockdep splat for spin_lock() in
    __unix_gc().
    - cifs: Replace remaining 1-element arrays (Closes: #1069102, #1069092)
    - Revert "crypto: api - Disallow identical driver names"
    - virtio_net: Do not send RSS key if it is not supported
    - fork: defer linking file vma until vma is fully initialized
    (CVE-2024-27022)
    - [x86] cpu: Fix check for RDPKRU in __show_regs()
    - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
    - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
    - Bluetooth: qca: fix NULL-deref on non-serdev suspend
    - [arm64] mmc: sdhci-msm: pervent access to suspended controller
    - smb: client: Fix struct_group() usage in __packed structs
    - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result
    - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
    - btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
    - cpu: Re-enable CPU mitigations by default for !X86 architectures
    - drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
    - drm/amdgpu: Fix leak when GPU memory allocation fails
    - irqchip/gic-v3-its: Prevent double free on error
    - ACPI: CPPC: Use access_width over bit_width for system memory accesses
    - ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
    - ACPI: CPPC: Fix access width used for PCC registers
    - ethernet: Add helper for assigning packet type when dest address does not
    match device address
    - net: b44: set pause params only when interface is up
    - stackdepot: respect __GFP_NOLOCKDEP allocation flag
    - fbdev: fix incorrect address computation in deferred IO
    - udp: preserve the connected status if only UDP cmsg
    - mtd: diskonchip: work around ubsan link failure
    - [x86] tdx: Preserve shared bit on mprotect()
    - [x86] idma64: Don't try to serve interrupts when device is powered off
    - [arm64,armhf] phy: marvell: a3700-comphy: Fix out of bounds read
    - [arm64,armhf] phy: marvell: a3700-comphy: Fix hardcoded array size
    - [arm64] phy: rockchip-snps-pcie3: fix bifurcation on rk3588
    - [arm64] phy: rockchip-snps-pcie3: fix clearing PHP_GRF_PCIESEL_CON bits
    - [amd64] dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
    - i2c: smbus: fix NULL function pointer dereference
    - bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS
    - macsec: Enable devices to advertise whether they update sk_buff md_dst
    during offloads
    - macsec: Detect if Rx skb is macsec-related for offloading devices that
    update md_dst
    - net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for
    MACsec
    .
    [ Salvatore Bonaccorso ]
    * Bump ABI to 21
    * drivers/tty: Disable N_GSM
    * tipc: fix UAF in error path
    * tipc: fix a possible memleak in tipc_buf_append
    .
    linux (6.1.85-1) bookworm-security; urgency=high
    .
    * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.83
    - md: fix data corruption for raid456 when reshape restart while grow up
    - md/raid10: prevent soft lockup while flush writes
    - io_uring/unix: drop usage of io_uring socket
    - io_uring: drop any code related to SCM_RIGHTS
    - nfsd: allow nfsd_file_get to sanely handle a NULL pointer
    - nfsd: don't open-code clear_and_wake_up_bit
    - nfsd: NFSD_FILE_KEY_INODE only needs to find GC'ed entries
    - nfsd: simplify test_bit return in NFSD_FILE_KEY_FULL comparator
    - nfsd: don't kill nfsd_files because of lease break error
    - nfsd: add some comments to nfsd_file_do_acquire
    - nfsd: don't take/put an extra reference when putting a file
    - nfsd: update comment over __nfsd_file_cache_purge
    - nfsd: allow reaping files still under writeback
    - NFSD: Convert filecache to rhltable
    - nfsd: simplify the delayed disposal list code
    - NFSD: Fix problem of COMMIT and NFS4ERR_DELAY in infinite loop
    - NFSD: Add an nfsd4_encode_nfstime4() helper
    - nfsd: Fix creation time serialization order
    - [arm64] media: rkisp1: Fix IRQ handling due to shared interrupts
    - perf/arm-cmn: Workaround AmpereOneX errata AC04_MESH_1 (incorrect child
    count)
    - ASoC: rt5645: Make LattePanda board DMI match more precise
    - [x86] ASoC: amd: yc: Fix non-functional mic on Lenovo 82UU
    - [x86] xen: Add some null pointer checking to smp.c
    - [mips*] Clear Cause.BD in instruction_pointer_set
    - HID: multitouch: Add required quirk for Synaptics 0xcddc device
    - gen_compile_commands: fix invalid escape sequence warning
    - [arm64] sve: Lower the maximum allocation for the SVE ptrace regset
    - soc: microchip: Fix POLARFIRE_SOC_SYS_CTRL input prompt
    - RDMA/mlx5: Fix fortify source warning while accessing Eth segment
    - RDMA/mlx5: Relax DEVX access upon modify commands
    - [x86] mm: Move is_vsyscall_vaddr() into asm/vsyscall.h
    - [x86] mm: Disallow vsyscall page read for copy_from_kernel_nofault()
    - net/iucv: fix the allocation size of iucv_path_table array
    - block: sed-opal: handle empty atoms when parsing response
    - dm-verity, dm-crypt: align "struct bvec_iter" correctly
    - [arm64] dts: Fix dtc interrupt_provider warnings
    - btrfs: fix data races when accessing the reserved amount of block reserves
    - btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve
    - net: smsc95xx: add support for SYS TEC USB-SPEmodule1
    - wifi: mac80211: only call drv_sta_rc_update for uploaded stations
    - [x86] ASoC: amd: yc: Add Lenovo ThinkBook 21J0 into DMI quirk table
    - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
    - ALSA: hda/realtek - ALC285 reduce pop noise from Headphone port
    - drm/amdgpu: Enable gpu reset for S3 abort cases on Raven series
    - [x86] ASoC: amd: yc: Fix non-functional mic on Lenovo 21J2
    - Bluetooth: mgmt: Fix limited discoverable off timeout
    - firewire: core: use long bus reset on gap count error
    - [arm64] tegra: Set the correct PHY mode for MGBE
    - [x86] ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8
    tablet
    - Input: gpio_keys_polled - suppress deferred probe error for gpio
    - [x86] ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC
    - [x86] ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode
    - [x86] ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll
    - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
    - fs: Fix rw_hint validation
    - [s390x] dasd: add autoquiesce feature
    - [s390x] dasd: Use dev_*() for device log messages
    - [s390x] dasd: fix double module refcount decrement
    - rcu/exp: Fix RCU expedited parallel grace period kworker allocation
    failure recovery
    - rcu/exp: Handle RCU expedited grace period kworker allocation failure
    - nbd: null check for nla_nest_start
    - fs/select: rework stack allocation hack for clang
    - md: Don't clear MD_CLOSING when the raid is about to stop
    - lib/cmdline: Fix an invalid format specifier in an assertion msg
    - lib: memcpy_kunit: Fix an invalid format specifier in an assertion msg
    - time: test: Fix incorrect format specifier
    - rtc: test: Fix invalid format specifier.
    - io_uring/net: unify how recvmsg and sendmsg copy in the msghdr
    - io_uring/net: move receive multishot out of the generic msghdr path
    - io_uring/net: fix overflow check in io_recvmsg_mshot_prep()
    - [x86] resctrl: Implement new mba_MBps throttling heuristic
    - [x86] sme: Fix memory encryption setting if enabled by default and not
    overridden
    - timekeeping: Fix cross-timestamp interpolation on counter wrap
    - timekeeping: Fix cross-timestamp interpolation corner case decision
    - timekeeping: Fix cross-timestamp interpolation for non-x86
    - sched/fair: Take the scheduling domain into account in select_idle_smt()
    - sched/fair: Take the scheduling domain into account in select_idle_core()
    - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
    - wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled
    - wifi: b43: Stop correct queue in DMA worker when QoS is disabled
    - wifi: b43: Disable QoS for bcm4331
    - wifi: wilc1000: fix declarations ordering
    - wifi: wilc1000: fix RCU usage in connect path
    - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
    - wifi: wilc1000: do not realloc workqueue everytime an interface is added
    - wifi: wilc1000: fix multi-vif management when deleting a vif
    - wifi: mwifiex: debugfs: Drop unnecessary error check for
    debugfs_create_dir()
    - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value
    - cpufreq: Explicitly include correct DT includes
    - cpufreq: mediatek-hw: Wait for CPU supplies before probing
    - sock_diag: annotate data-races around sock_diag_handlers[family]
    - inet_diag: annotate data-races around inet_diag_table[]
    - bpftool: Silence build warning about calloc()
    - libbpf: Apply map_set_def_max_entries() for inner_maps on creation
    - af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc().
    - cpufreq: mediatek-hw: Don't error out if supply is not found
    - libbpf: Fix faccessat() usage on Android
    - pmdomain: qcom: rpmhpd: Drop SA8540P gfx.lvl
    - [arm64] dts: imx8mm-kontron: Disable pullups for I2C signals on OSM-S
    i.MX8MM
    - [arm64] dts: imx8mm-kontron: Disable pullups for I2C signals on SL/BL
    i.MX8MM
    - [arm64] dts: imx8mm-kontron: Disable pullups for onboard UART signals on
    BL OSM-S board
    - [arm64] dts: imx8mm-kontron: Disable pullups for onboard UART signals on
    BL board
    - [arm64] dts: imx8mm-kontron: Disable pull resistors for SD card signals on
    BL OSM-S board
    - [arm64] dts: imx8mm-kontron: Disable pull resistors for SD card signals on
    BL board
    - [arm64] dts: imx8mm-kontron: Fix interrupt for RTC on OSM-S i.MX8MM module
    - libbpf: Add missing LIBBPF_API annotation to libbpf_set_memlock_rlim API
    - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
    - wifi: iwlwifi: mvm: report beacon protection failures
    - wifi: iwlwifi: dbg-tlv: ensure NUL termination
    - wifi: iwlwifi: fix EWRD table validity check
    - gpio: vf610: allow disabling the vf610 driver
    - [arm64] dts: imx8mm-venice-gw71xx: fix USB OTG VBUS
    - net: blackhole_dev: fix build warning for ethh set but not used
    - wifi: ath11k: initialize rx_mcs_80 and rx_mcs_160 before use
    - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
    - wifi: wfx: fix memory leak when starting AP
    - printk: Disable passing console lock owner completely during panic()
    - pwm: sti: Fix capture for st,pwm-num-chan < st,capture-num-chan
    - tools/resolve_btfids: Refactor set sorting with types from btf_ids.h
    - tools/resolve_btfids: Fix cross-compilation to non-host endianness
    - wifi: iwlwifi: mvm: don't set replay counters to 0xff
    - [s390x] pai: fix attr_event_free upper limit for pai device drivers
    - [s390x] vdso: drop '-fPIC' from LDFLAGS
    - ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()
    - [arm64] dts: mt8183: kukui: Split out keyboard node and describe
    detachables
    - [arm64] dts: mt8183: Move CrosEC base detection node to kukui-based DTs
    - [arm64] dts: mediatek: mt7986: add "#reset-cells" to infracfg
    - [arm64] dts: mediatek: mt8192-asurada: Remove CrosEC base detection node
    - [arm64] dts: mediatek: mt8192: fix vencoder clock name
    - [arm64] dts: mediatek: mt7622: add missing "device_type" to memory nodes
    - bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly
    - wifi: wilc1000: prevent use-after-free on vif when cleaning up all
    interfaces

    [continued in next message]

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)