Thank you for your contribution to Debian.
Accepted:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 20 Oct 2024 20:51:13 +0200
Source: linux
Architecture: source
Version: 6.11.4-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Kernel Team <
debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <
carnil@debian.org>
Closes: 1076483 1078696 1081833 1082001 1082795
Changes:
linux (6.11.4-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.3
- [amd64] static_call: Handle module init failure correctly in
static_call_del_module()
- [amd64] static_call: Replace pointless WARN_ON() in
static_call_module_notify()
- jump_label: Fix static_key_slow_dec() yet again
- scsi: st: Fix input/output error on empty drive reset
- scsi: pm8001: Do not overwrite PCI queue mapping
- drm/i915/psr: Do not wait for PSR being idle on on Panel Replay
- [x86] drm/i915/display: BMG supports UHBR13.5
- [x86] drm/i915/dp: Fix AUX IO power enabling for eDP PSR
- drm/amdgpu: Fix get each xcp macro
- drm/amd/display: handle nulled pipe context in DCE110's set_drr()
- ksmbd: fix warning: comparison of distinct pointer types lacks a cast
- [arm64] mailbox: ARM_MHU_V3 should depend on ARM64
- [arm64,armhf] mailbox: rockchip: fix a typo in module autoloading
- [arm*] mailbox: bcm2835: Fix timeout during suspend mode
- ceph: fix a memory leak on cap_auths in MDS client
- ceph: remove the incorrect Fw reference check when dirtying pages
- [x86] drm/i915/dp: Fix colorimetry detection
- ieee802154: Fix build error
- net: sparx5: Fix invalid timestamps
- net/mlx5: Fix error path in multi-packet WQE transmit
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: SHAMPO, Fix overflow of hd_per_wq
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- afs: Fix missing wire-up of afs_retry_request()
- afs: Fix the setting of the server responding flag
- net: dsa: improve shutdown sequence
- net: Add netif_get_gro_max_size helper for GRO
- net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size
- net: ethernet: lantiq_etop: fix memory disclosure
- net: fec: Restart PPS after link state change
- net: fec: Reload PTP registers after link-state change
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- netfs: Fix missing wakeup after issuing writes
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- net: phy: realtek: Check the index value in led_hw_control_get
- bridge: mcast: Fail MDB get request on empty entry
- net/ncsi: Disable the ncsi work before freeing the associated structure
- iomap: constrain the file range passed to iomap_file_unshare
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- ASoC: topology: Fix incorrect addressing assignments
- drm/connector: hdmi: Fix writing Dynamic Range Mastering infoframes
- io_uring: fix memory leak when cache init fail
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ALSA: hda/realtek: Fix the push button function for the ALC257
- cifs: Remove intermediate object of failed create reparse call
- [x86] ASoC: Intel: soc-acpi-intel-rpl-match: add missing empty item
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- cifs: Fix buffer overflow when parsing NFS reparse points
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- gpiolib: Fix potential NULL pointer dereference in gpiod_get_label()
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- drm/amd/display: Disable replay if VRR capability is false
- drm/amd/display: Fix VRR cannot enable
- drm/amd/display: Re-enable panel replay feature
- e1000e: avoid failing the system during pm_suspend (Closes: #1082795)
- l2tp: prevent possible tunnel refcount underflow
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- [x86] intel_idle: Disable promotion to C1E on Jasper Lake and Elkhart Lake
- [x86] crypto: x86/sha256 - Add parentheses around macros' single arguments
- crypto: octeontx - Fix authenc setkey
- crypto: octeontx2 - Fix authenc setkey
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and
ice_sched_add_node()
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: cfg80211: Set correct chandef when starting CAC
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- [arm64] net: hisilicon: hip04: fix OF node leak in probe()
- [arm64] net: hisilicon: hns_dsaf_mac: fix OF node leak in
hns_mac_get_info()
- [arm64] net: hisilicon: hns_mdio: fix OF node leak in probe()
- ACPI: PAD: fix crash in exit_round_robin()
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- exec: don't WARN for racy path_noexec check
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ACPI: resource: Skip IRQ override on Asus Vivobook Go E1404GAB
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- ACPI: CPPC: Add support for setting EPP register in FFH
- blk_iocost: fix more out of bound shifts
- btrfs: don't readahead the relocation inode on RST
- wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: rtw88: select WANT_DEV_COREDUMP
- l2tp: free sessions using rcu
- l2tp: use rcu list add/del when updating lists
- wifi: rtw89: 885xb: reset IDMEM mode to prevent download firmware failure
- ACPI: EC: Do not release locks during operation region accesses
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in
acpi_db_convert_to_package()
- tipc: guard against string buffer overrun
- net: skbuff: sprinkle more __GFP_NOWARN on ingress allocs
- net: mvpp2: Increase size of queue_name buffer
- bnxt_en: Extend maximum length of version string by 1 byte
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- wifi: rtw89: correct base HT rate mask for firmware
- netfilter: nf_tables: do not remove elements if set backend implements
.abort
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- nvme-keyring: restrict match length for version '1' identifiers
- nvme-tcp: sanitize TLS key handling
- nvme-tcp: check for invalidated or revoked key
- net: atlantic: Avoid warning about potential string truncation
- crypto: simd - Do not call crypto_alloc_tfm during registration
- netpoll: Ensure clean state on setup failures
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- wifi: iwlwifi: mvm: use correct key iteration
- wifi: iwlwifi: allow only CN mcc from WRDD
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- virt: sev-guest: Ensure the SNP guest messages do not exceed a page
- wifi: mac80211: fix RCU list iterations
- ACPICA: iasl: handle empty connection_node
- proc: add config & param to block forcing mem writes
- vfs: use RCU in ilookup
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- nvme: fix metadata handling in nvme-passthrough
- can: netlink: avoid call to do_set_data_bittiming callback with stale
can_priv::ctrlmode
- netdev-genl: Set extack and fix error on napi-get
- wifi: wilc1000: Do not operate uninitialized hardware during
suspend/resume
- block: fix integer overflow in BLKSECDISCARD
- [x86] cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- [arm64] trans_pgd: mark PTEs entries as valid to avoid dead kexec()
- net: phy: Check for read errors in SIOCGMIIREG
- wifi: rtw89: avoid reading out of bounds when loading TX power FW elements
- [x86] bugs: Add missing NO_SSB flag
- [x86] bugs: Fix handling when SRSO mitigation is disabled
- net: napi: Prevent overflow of napi_defer_hard_irqs
- [arm64] crypto: hisilicon - fix missed error branch
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
- wifi: mwifiex: Fix memcpy() field-spanning write warning in
mwifiex_cmd_802_11_scan_ext()
- netfs: Cancel dirty folios that have no storage destination
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- ALSA: usb-audio: Add input value sanity checks for standard types
- [x86] ioapic: Handle allocation failures gracefully
- [x86] apic: Remove logical destination mode for 64-bit
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Add quirk for RME Digiface USB
- ALSA: usb-audio: Add mixer quirk for RME Digiface USB
- ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init
- ALSA: usb-audio: Add logitech Audio profile quirk
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: control: Take power_ref lock primarily
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- [x86] pkeys: Add PKRU as a parameter in signal handling functions
- [x86] pkeys: Restore altstack access in sigreturn()
- [x86] kexec: Add EFI config table identity mapping for kexec kernel
- [x86] mm/ident_map: Use gbpages only where full GB page should be mapped.
- ALSA: asihpi: Fix potential OOB array access
- ALSA: hdsp: Break infinite MIDI input flush loop
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- [x86] syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- [x86] ASoC: Intel: boards: always check the result of
acpi_dev_get_first_match_dev()
- rcu-tasks: Fix access non-existent percpu rtpcp variable in
rcu_tasks_need_gpcb()
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- fbdev: efifb: Register sysfs groups through driver core
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- pmdomain: core: Don't hold the genpd-lock when calling dev_pm_domain_set()
- pmdomain: core: Use dev_name() instead of kobject_get_path() in debugfs
- rcuscale: Provide clear error when async specified without primitives
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- [arm64] iommu/arm-smmu-v3: Match Stall behaviour for S2
- [amd64] iommu/vt-d: Always reserve a domain ID for identity setup
- [amd64] iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0
count
- [amd64] iommu/vt-d: Unconditionally flush device TLB for pasid table
updates
- [arm64] iommu/arm-smmu-v3: Do not use devm for the cd table allocations
- drm/stm: Avoid use-after-free issues with crtc and plane
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- drm/amd/display: Check null pointers before using them
- drm/amd/display: Check null pointers before used
- drm/amd/display: Check null pointers before multiple uses
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- drm/amd/display: Add null check for head_pipe in
dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in
dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in
dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in
dcn401_init_hw
- drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw
- drm/amd/display: Add null check for pipe_ctx->plane_state in
dcn20_program_pipe
- drm/amd/display: Add null check for top_pipe_to_program in
commit_planes_for_stream
- drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces
- ata: pata_serverworks: Do not use the term blacklist
- ata: sata_sil: Rename sil_blacklist to sil_quirks
- scsi: smartpqi: Add new controller PCI IDs
- HID: Ignore battery for all ELAN I2C-HID devices
- drm/amd/display: Underflow Seen on DCN401 eGPU
- drm/amd/display: Handle null 'stream_status' in
'planes_changed_for_existing_stream'
- drm/amd/display: Add NULL check for function pointer in
dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in
dcn401_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in
dcn32_set_output_transfer_func
- drm/amd/display: fix a UBSAN warning in DML2.1
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)
- drm/amd/display: Check null pointers before using dc->clk_mgr
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Add null check for 'afb' in
amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: fix double free issue during amdgpu module unload
- drm/amdgpu: add list empty check to avoid null pointer issue
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- scsi: smartpqi: correct stream detection
- scsi: smartpqi: add new controller PCI IDs
- drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs
- jfs: Fix uninit-value access of new_ea in ea_buffer
- drm/amdgpu: add raven1 gfxoff quirk
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- [x86] platform/x86: touchscreen_dmi: add nanote-next quirk
- [x86] platform/x86/amd: pmf: Add quirk for TUF Gaming A14
- drm/stm: ltdc: reset plane transparency after plane disable
- drm/amd/display: Initialize denominators' default to 1
- drm/amd/display: Check null-initialized variables
- drm/amd/display: Check phantom_stream before it is used
- drm/amd/display: Check stream before comparing them
- drm/amd/display: Deallocate DML memory if allocation fails
- drm/amd/display: Increase array size of dummy_boolean
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format
translation
- drm/amd/display: Fix index out of bounds in degamma hardware format
translation
- drm/amd/display: Implement bounds check for stream encoder creation in
DCN401
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amdgpu/gfx12: properly handle error ints on all pipes
- drm/amdgpu/gfx9: properly handle error ints on all pipes
- drm/amd/display: Fix possible overflow in integer multiplication
- drm/amd/display: Check stream_status before it is used
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/printer: Allow NULL data in devcoredump printer
- [x86] perf,x86: avoid missing caller address in stack traces captured in
uprobe
- scsi: aacraid: Rearrange order of struct aac_srb_unit
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata
paths
- scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached
topology
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/amd/display: Force enable 3DLUT DMA check for dcn401 in DML
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- drm/amdgpu: fix unchecked return value warning for amdgpu_atombios
- perf: Fix event_function_call() locking
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- drm/amd/display: Unlock Pipes Based On DET Allocation
- drm/amdgpu: fix ptr check warning in gfx9 ip_dump
- drm/amdgpu: fix ptr check warning in gfx10 ip_dump
- drm/amdgpu: fix ptr check warning in gfx11 ip_dump
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: enter safe mode before touching CP_INT_CNTL
- drm/amd/pm: ensure the fw_info is not null before using it
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/display: guard write a 0 post_divider value to HW
- [powerpc*] pseries: Use correct data types from pseries_hp_errorlog struct
- ovl: fsync after metadata copy-up
- drm/amdgpu/gfx12: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- [x86] platform/x86: lenovo-ymc: Ignore the 0x0 state
- tools/hv: Add memory allocation check in hv_fcopy_start
- HID: i2c-hid: ensure various commands do not interfere with each other
- ksmbd: add refcnt to ksmbd_conn struct
- [x86] platform/x86: x86-android-tablets: Adjust Xiaomi Pad 2 bottom bezel
touch buttons LED
- ext4: filesystems without casefold feature cannot be mounted with siphash
- bpf: Make the pointer returned by iter next method valid
- ext4: ext4_search_dir should return a proper error
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- iomap: handle a post-direct I/O invalidate race in
iomap_write_delalloc_release
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- bpf: Fix a sdiv overflow issue
- EINJ, CXL: Fix CXL device SBDF calculation
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- spi: s3c64xx: fix timeout counters in flush_fifo
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- ALSA: control: Fix power_ref lock order for compat code, too
- perf callchain: Fix stitch LBR memory leaks
- perf: Really fix event_function_call() locking
- ext4: fix error message when rejecting the default hash
- nvme-tcp: fix link failure for TCP auth
- f2fs: add write priority option based on zone UFS
- f2fs: fix to don't panic system for no free segment fault injection
- [powerpc*] vdso: Fix VDSO data access when running in a non-root time
namespace
- f2fs: make BG GC more aggressive for zoned devices
- f2fs: introduce migration_window_granularity
- f2fs: increase BG GC migration window granularity when boosted for zoned
devices
- f2fs: do FG_GC when GC boosting is required for zoned devices
- f2fs: forcibly migrate to secure space for zoned device file pinning
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
(Closes: #1081833)
- [x86] platform/x86: x86-android-tablets: Fix use after free on
platform_device_register() errors
- [x86] platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- [arm64] KVM: arm64: Fix kvm_has_feat*() handling of negative features
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- i2c: core: Lock address during client device instantiation
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: designware: fix controller is holding SCL low while ENABLE bit is
disabled
- i2c: synquacer: Deal with optional PCLK correctly
- ovl: fail if trusted xattrs are needed but caller lacks permission
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- memory: tegra186-emc: drop unused to_tegra186_emc()
- dt-bindings: clock: exynos7885: Fix duplicated binding
- spi: bcm63xx: Fix module autoloading
- spi: bcm63xx: Fix missing pm_runtime_disable()
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- mm, slub: avoid zeroing kmalloc redzone
- power: supply: Drop use_cnt check from
power_supply_property_is_writeable()
- perf/core: Fix small negative period being ignored
- drm/v3d: Prevent out of bounds access in performance query extensions
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- ALSA: core: add isascii() check to card ID generator
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ext4: no need to continue when the number of entries is 1
- ext4: correct encrypted dentry name hash when not casefolded
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: dax: fix overflowing extents beyond inode size when partially
writing
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: fix double brelse() the buffer of the extents path
- ext4: fix timer use-after-free on failed mount
- ext4: fix access to uninitialised lock in fc replay path
- ext4: update orig_path in ext4_find_extent()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in
jbd2_journal_shrink_checkpoint_list()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: fix off by one issue in alloc_flex_gd()
- drm/rockchip: vop: clear DMA stop bit on RK3066
- of: address: Report error on resource bounds overflow
- of/irq: Support #msi-cells=<0> in of_msi_get_domain
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- resource: fix region_intersects() vs add_memory_driver_managed()
- lib/buildid: harden build ID parsing logic
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns
error
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- mm: krealloc: consider spare memory for __GFP_ZERO
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- scripts/gdb: fix timerlist parsing issue
- scripts/gdb: add iteration function for rbtree
- scripts/gdb: fix lx-mounts command error
- [arm64] fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- [arm64] Subscribe Microsoft Azure Cobalt 100 to erratum 3194386
- sched/deadline: Comment sched_dl_entity::dl_server variable
- sched/core: Add clearing of ->dl_server in put_prev_task_balance()
- sched/core: Clear prev->dl_server in CFS pick fast path
- sched: psi: fix bogus pressure spikes from aggregation race
- [riscv64] define ILLEGAL_POINTER_VALUE for 64bit
- exfat: fix memory leak in exfat_load_bitmap()
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- perf hist: Update hist symbol when updating maps
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- NFSD: Fix NFSv4's PUTPUBFH operation
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master
Driver Due to Race Condition
- sysctl: avoid spurious permanent empty tables
- RDMA/mana_ib: use the correct page table index based on hardware page size
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell
page
- drivers/perf: riscv: Align errno for unsupported perf event
- [riscv64] Fix kernel stack size when KASAN is enabled
- aoe: fix the potential use-after-free problem in more places
- media: imx335: Fix reset-gpio handling
- media: ov5675: Fix power on/off delay timings
- clk: rockchip: fix error for unknown clocks
- leds: pca9532: Remove irrelevant blink configuration error message
- remoteproc: k3-r5: Fix error handling when power-up failed
- gfs2: fix double destroy_workqueue error
- media: videobuf2: Drop minimum allocation requirement of 2 buffers
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- clk: qcom: gcc-sc8180x: Register QUPv3 RCGs for DFS on sc8180x
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- media: venus: fix use after free bug in venus_remove due to race condition
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- media: qcom: camss: Remove use_count guard in stop_streaming
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- media: qcom: camss: Fix ordering of pm_runtime_enable
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- drm/amd/display: avoid set dispclk to 0
- smb: client: use actual path when queryfs
- smb3: fix incorrect mode displayed for read-only files
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- net: gso: fix tcp fraglist segmentation after pull from frag_list
- gso: fix udp gso fraglist segmentation after pull from frag_list
- tomoyo: fallback to realpath if symlink's pathname does not exist
(Closes: #1082001)
- net: stmmac: Fix zero-division error when disabling tc cbs
- rtc: at91sam9: fix OF node leak in probe() error path
- mm/filemap: fix filemap_get_folios_contig THP panic
- mm/hugetlb: fix memfd_pin_folios free_huge_pages leak
- mm/hugetlb: fix memfd_pin_folios resv_huge_pages leak
- mm/gup: fix memfd_pin_folios hugetlb page allocation
- mm/gup: fix memfd_pin_folios alloc race panic
- mm/hugetlb: simplify refs in memfd_alloc_folio
- Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- HID: bpf: fix cfi stubs for hid_bpf_ops
- cachefiles: fix dentry leak in cachefiles_open_file()
- pidfs: check for valid pid namespace
- ACPI: video: Add backlight=native quirk for Dell OptiPlex 5480 AIO
- ACPI: resource: Remove duplicate Asus E1504GAB IRQ override
- ACPI: resource: Loosen the Asus E1404GAB DMI match to also cover the
E1404GA
- ACPI: resource: Add Asus Vivobook X1704VAP to
irq1_level_low_skip_override[] (Closes: #1078696)
- ACPI: resource: Add Asus ExpertBook B2502CVA to
irq1_level_low_skip_override[]
- btrfs: send: fix buffer overflow detection when copying path to cache
entry
- btrfs: fix a NULL pointer dereference when failed to start a new
trasacntion
- btrfs: drop the backref cache during relocation if we commit
- btrfs: send: fix invalid clone operation for file that got its size
decreased
- btrfs: wait for fixup workers before stopping cleaner kthread during
umount
- cpufreq: Avoid a bad reference count on CPU node
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
(Closes: #1076483)
- gpio: davinci: fix lazy disable
- net: pcs: xpcs: fix the wrong register that was written back
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
(CVE-2024-8805)
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- io_uring/net: harden multishot termination case for recv
- ceph: fix cap ref leak via netfs init_request
- tracing/hwlat: Fix a race during cpuhp processing
- tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix duplicated kthread creation due to CPU
online/offline
- rtla: Fix the help text in osnoise and timerlat top tools
- firmware/sysfb: Disable sysfb for firmware buffers with unknown parent
- close_range(): fix the logics in descriptor table trimming
- [x86] drm/i915/gem: fix bitwise and logical AND mixup
[continued in next message]
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)