Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 19 Dec 2024 15:30:25 +0100
Source: linux
Architecture: source
Version: 6.11.10-1~bpo12+1
Distribution: bookworm-backports
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Ben Hutchings <benh@debian.org>
Closes: 1062421 1087331
Changes:
linux (6.11.10-1~bpo12+1) bookworm-backports; urgency=medium
.
* Rebuild for bookworm-backports
.
linux (6.11.10-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.10
- netlink: terminate outstanding dump on socket close
- sctp: fix possible UAF in sctp_v6_available()
- [arm64,armhf] drm/rockchip: vop: Fix a dereferenced before check warning
- net: fix data-races around sk->sk_forward_alloc
- mptcp: error out earlier on disconnect
- mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
- net/mlx5: Fix msix vectors to respect platform limit
- net/mlx5: fs, lock FTE when checking if active
- net/mlx5e: kTLS, Fix incorrect page refcounting
- net/mlx5e: clear xdp features on non-uplink representors
- net/mlx5e: CT: Fix null-ptr-deref in add rule err flow
- net/mlx5e: Disable loopback self-test on multi-PF netdev
- [amd64] drm/i915/gsc: ARL-H and ARL-U need a newer GSC FW.
- virtio/vsock: Fix accept_queue memory leak
- vsock: Fix sk_error_queue memory leak
- virtio/vsock: Improve MSG_ZEROCOPY error handling
- Revert "RDMA/core: Fix ENODEV error for iWARP test over vlan"
- drivers: perf: Fix wrong put_cpu() placement
- Bluetooth: hci_core: Fix calling mgmt_device_connected
- Bluetooth: btintel: Direct exception event to bluetooth stack
- [arm64] drm/panthor: Fix handling of partial GPU mapping of BOs
- net: sched: cls_u32: Fix u32's systematic failure to free IDR entries for
hnodes.
- net: phylink: ensure PHY momentary link-fails are handled
- [arm64] net: stmmac: dwmac-mediatek: Fix inverted handling of
mediatek,mac-wol
- net: Make copy_safe_from_sockptr() match documentation
- stmmac: dwmac-intel-plat: fix call balance of tx_clk handling routines
- drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle
- net: ti: icssg-prueth: Fix 1 PPS sync
- bonding: add ns target multicast address to slave device
- [armel,armhf] 9419/1: mm: Fix kernel memory mapping for xip kernels
- [armel,armhf] fix cacheflush with PAN
- tools/mm: fix compile error
- Revert "drm/amd/pm: correct the workload setting"
- drm/amd/display: Run idle optimizations at end of vblank handler
- drm/amd/display: Change some variable name of psr
- drm/amd/display: Fix Panel Replay not update screen correctly
- [x86] CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- [x86] mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y
- [x86] stackprotector: Work around strict Clang TLS symbol requirements
- mm: fix NULL pointer dereference in alloc_pages_bulk_noprof
- ocfs2: uncache inode which has failed entering the group
- sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
- fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args()
- mm/mremap: fix address wraparound in move_page_tables()
- mm: revert "mm: shmem: fix data-race in shmem_getattr()"
- ima: fix buffer overrun in ima_eventdigest_init_common
- evm: stop avoidably reading i_writecount in evm_file_release
- [x86] KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID
disabled
- [x86] KVM: x86: Unconditionally set irr_pending when updating APICv state
- [x86] KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind
CONFIG_BROKEN
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- nommu: pass NULL argument to vma_iter_prealloc()
- tpm: Disable TPM on tpm2_create_primary() failure (Closes: #1087331)
- mm: page_alloc: move mlocked flag clearance into free_pages_prepare()
- ALSA: hda/realtek - Fixed Clevo platform headset Mic issue
- ALSA: hda/realtek - update set GPIO3 to default for Thinkpad with ALC1318
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10
- mptcp: update local address flags when setting it
- mptcp: hold pm lock when deleting entry
- mptcp: pm: use _rcu variant under rcu_read_lock
- ocfs2: fix UBSAN warning in ocfs2_verify_volume()
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- Revert "drm/amd/display: parse umc_info or vram_info based on ASIC"
- btrfs: fix incorrect comparison for delayed refs
- [arm64] firmware: arm_scmi: Skip opp duplicates
- [arm64] firmware: arm_scmi: Report duplicate opps as firmware bugs
- mmc: sunxi-mmc: Fix A100 compatible description
- pmdomain: imx93-blk-ctrl: correct remove path
- pmdomain: arm: Use FLAG_DEV_NAME_FW to ensure unique names
- pmdomain: core: Add GENPD_FLAG_DEV_NAME_FW flag
- nouveau: fw: sync dma after setup is called.
- nouveau: handle EBUSY and EAGAIN for GSP aux errors.
- nouveau/dp: handle retries for AUX CH transfers with GSP.
- drm/amd: Fix initialization mistake for NBIO 7.7.0
- drm/amdgpu: fix check in gmc_v9_0_get_vm_pte()
- drm/amdgpu: Fix video caps for H264 and HEVC encode maximum size
- drm/amd/pm: print pp_dpm_mclk in ascending order on SMU v14.0.0
- drm/amdgpu: enable GTT fallback handling for dGPUs only
- drm/amdgpu/mes12: correct kiq unmap latency
- drm/amd/display: Adjust VSDB parser for replay feature
- drm/amd/display: Require minimum VBlank size for stutter optimization
- drm/amd/display: Handle dml allocation failure to avoid crash
- drm/amd/display: Fix failure to read vram info due to static BP_RESULT
- mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling
- lib/buildid: Fix build ID parsing logic
- net: sched: u32: Add test case for systematic hnode IDR leaks
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
.
linux (6.11.9-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.8
- [arm64] dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- [arm64] dts: rockchip: Fix rt5651 compatible value on
rk3399-sapphire-excavator
- [arm64] dts: rockchip: Move L3 cache outside CPUs in RK3588(S) SoC dtsi
- [arm64] dts: rockchip: Start cooling maps numbering from zero on ROCK 5B
- [arm64] dts: rockchip: Designate Turing RK1's system power controller
- [arm64] firmware: qcom: scm: fix a NULL-pointer dereference
- [arm64] EDAC/qcom: Make irq configuration optional
- [arm64] dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- [arm64] dts: rockchip: Fix wakeup prop names on PineNote BT node
- [arm64] dts: rockchip: Fix reset-gpios property on brcm BT nodes
- [arm64] dts: rockchip: fix i2c2 pinctrl-names property on
anbernic-rg353p/v
- [arm64] dts: rockchip: Drop regulator-init-microvolt from two boards
- [arm64] dts: rockchip: Fix bluetooth properties on rk3566 box demo
- [arm64] dts: rockchip: Fix bluetooth properties on Rock960 boards
- [arm64] dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- [arm64] dts: rockchip: Remove undocumented supports-emmc property
- [arm64] dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- [arm64] dts: rockchip: Fix LED triggers on rk3308-roc-cc
- [arm64] dts: rockchip: remove num-slots property from
rk3328-nanopi-r2s-plus
- [arm64] firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
- [arm64] firmware: qcom: scm: Return -EOPNOTSUPP for unsupported SHM bridge
enabling
- [arm64] dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- [arm64] dts: rockchip: Correct GPIO polarity on brcm BT nodes
- HID: core: zero-initialize the report buffer
- [x86] platform/x86/amd/pmc: Detect when STB is not available
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- NFS: Fix attribute delegation behaviour on exclusive create
- NFS: Further fixes to attribute delegation a/mtime changes
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- security/keys: fix slab-out-of-bounds in key_task_permission
- [arm64] net: enetc: set MAC address to the VF net_device
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- sctp: properly validate chunk size in sctp_sf_ootb()
- [arm64] net: enetc: allocate vf_state during PF probes
- can: c_can: fix {rx,tx}_errors statistics
- ice: change q_index variable type to s16 to store -1 value
- i40e: fix race condition by adding filter's intermediate sync state
- e1000e: Remove Meteor Lake SMBUS workarounds
- [arm64] net: hns3: fix kernel crash when uninstalling driver
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- virtio_net: Support dynamic rss indirection table size
- virtio_net: Add hash_key_length check
- virtio_net: Sync rss config to device when virtnet_probe
- virtio_net: Update rss when set queue
- net: arc: fix the device for dma_map_single/dma_unmap_single
- net: arc: rockchip: fix emac mdio node support
- rxrpc: Fix missing locking causing hanging calls
- net/smc: do not leave a dangling sk pointer in __smc_create()
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error
path
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- media: stb0899_algo: initialize cfr before using it
- media: dvbdev: prevent the risk of out of memory access
- media: dvb_frontend: don't play tricks with underflow values
- media: adv7604: prevent underflow condition when reporting colorspace
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- [armhf] ASoC: stm32: spdifrx: fix dma channel release in
stm32_spdifrx_remove
- [amd64] ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- media: dvb-core: add missing buffer index check
- media: mgb4: protect driver against spectre
- media: ar0521: don't overflow when checking PLL values
- media: s5p-jpeg: prevent buffer overflows
- media: cx24116: prevent overflows on SNR calculus
- media: av7110: fix a spectre vulnerability
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: vivid: fix buffer overwrite when using > 32 buffers
- media: v4l2-tpg: prevent the risk of a division by zero
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when
switching CAN modes
- can: {cc770,sja1000}_isa: allow building on x86_64
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- ksmbd: check outstanding simultaneous SMB operations
- ksmbd: Fix the missing xa_store error check
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- tpm: Lock TPM chip in tpm_pm_suspend() first
- rpmsg: glink: Handle rejected intent request better
- drm/amd/pm: always pick the pptable from IFWI
- drm/amd/display: Fix brightness level not retained over reboot
- drm/imagination: Add a per-file PVR context list
- drm/imagination: Break an object reference loop
- drm/amd/pm: correct the workload setting
- drm/amd/display: parse umc_info or vram_info based on ASIC
- drm/panthor: Lock XArray when getting entries for the VM
- drm/panthor: Be stricter about IO mapping flags
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- [arm64] thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation
- dm cache: correct the number of origin blocks to match the target length
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix potential out-of-bounds access on the first resume
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t
overflow
- dm: fix a crash if blk_alloc_disk fails
- mptcp: no admin perm to list endpoints
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- scsi: ufs: core: Start the RTC update work later
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- tracing: Fix tracefs mount options
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- net: vertexcom: mse102x: Fix possible double free of TX skb
- mptcp: use sock_kfree_s instead of kfree
- [arm64] sve: Discard stale CPU state when handling SVE traps
- [arm64] smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- mm/slab: fix warning caused by duplicate kmem_cache creation in
kmem_buckets_create
- [ppc64el] KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before running
it to avoid spurious interrupts
- btrfs: fix the length of reserved qgroup to free
- btrfs: fix per-subvolume RO/RW flags with new mount API
- btrfs: reinitialize delayed ref list after deleting it from the list
- [amd64] platform/x86/amd/pmf: Relocate CPU ID macros to the PMF header
- [amd64] platform/x86/amd/pmf: Update SMU metrics table for 1AH family
series
- [amd64] platform/x86/amd/pmf: Add SMU metrics table support for 1Ah family
60h model
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in
uvc_parse_format
- filemap: Fix bounds checking in filemap_read()
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not
set
- clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
- clk: qcom: clk-alpha-pll: Fix pll post div mask when width is not set
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- objpool: fix to make percpu slot allocation more robust
- signal: restore the override_rlimit logic
- mm/damon/core: avoid overflow in damon_feed_loop_next_input()
- mm/damon/core: handle zero {aggregation,ops_update} intervals
- mm/damon/core: handle zero schemes apply interval
- mm/mlock: set the correct prev on failure
- mm/thp: fix deferred split unqueue naming and locking
- [amd64] thunderbolt: Add only on-board retimers when
!CONFIG_USB4_DEBUGFS_MARGINING
- usb: musb: sunxi: Fix accessing an released usb phy
- usb: dwc3: fix fault at system suspend if device was already runtime
suspended
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
- usb: typec: fix potential out of bounds in
ucsi_ccg_update_set_new_cam_cmd()
- USB: serial: io_edgeport: fix use after free in debug printk
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: option: add Quectel RG650V
- [amd64] thunderbolt: Fix connection issue with Pluggable UD-4VPD dock
- [arm*] staging: vchiq_arm: Use devm_kzalloc() for drv_mgmt allocation
- [arm*] staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state
allocation
- irqchip/gic-v3: Force propagation of the active state with a read-back
- ocfs2: remove entry once instead of null-ptr-dereference in
ocfs2_xa_remove()
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- [arm64] firmware: qcom: scm: Refactor code to support multiple dload mode
- [arm64] firmware: qcom: scm: suppress download mode error
- block: rework bio splitting
- block: fix queue limits checks in blk_rq_map_user_bvec for real
- [amd64] ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- [amd64,arm64] hv_sock: Initializing vsk->trans to NULL to prevent a
dangling pointer
- vsock/virtio: Initialization of the dangling pointer occurring in
vsk->trans
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.9
- smb: client: Fix use-after-free of network namespace.
- nvme/host: Fix RCU list traversal to use SRCU primitive
- 9p: v9fs_fid_find: also lookup by inode if not found dentry
- 9p: Avoid creating multiple slab caches with the same name
- nvmet-passthru: clear EUID/NGUID/UUID while using loop target
- pinctrl: intel: platform: Add Panther Lake to the list of supported
- nvme: tcp: avoid race between queue_lock lock and destroy
- block: Fix elevator_get_default() checking for NULL q->tag_set
- HID: multitouch: Add support for B2402FVA track point
- HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad
- [arm64] iommu/arm-smmu: Clarify MMU-500 CPRE workaround
- nvme: disable CC.CRIME (NVME_CC_CRIME)
- bpf: use kvzmalloc to allocate BPF verifier environment
- crypto: api - Fix liveliness check in crypto_alg_tested
- [arm64,armhf] crypto: marvell/cesa - Disable hash algorithms
- [s390x] ap: Fix CCA crypto card behavior within protected execution
environment
- sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML
- drm/vmwgfx: Limit display layout ioctl array size to
VMWGFX_NUM_DISPLAY_UNITS
- RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES
- ALSA: hda/tas2781: Add new quirk for Lenovo, ASUS, Dell projects
- nvme-multipath: defer partition scanning
- [powerpc*] powernv: Free name on error in opal_event_init()
- net: phy: mdio-bcm-unimac: Add BCM6846 support
- nvme-loop: flush off pending I/O while shutting down loop controller
- nvme: make keep-alive synchronous operation
- virtio_pci: Fix admin vq cleanup by using correct info pointer
- bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx
- bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6
- [x86] ASoC: Intel: avs: Update stream status in a separate thread
- ASoC: codecs: Fix error handling in aw_dev_get_dsp_status function
- [amd64] ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA
- [amd64] ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA
- [x86] ASoC: Intel: soc-acpi: lnl: Add match entry for TM2 laptops
- netfs: Downgrade i_rwsem for a buffered write
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- afs: Fix lock recursion
- HID: i2c-hid: Delayed i2c resume wakeup for 0x0d42 Goodix touchpad
- HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad
- HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard
- ASoC: codecs: lpass-rx-macro: fix RXn(rx,n) macro for DSM_CTL and SEC7
regs
- [riscv64] KVM: use raw_spinlock for critical section in imsic
- ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue
- ASoC: fsl_micfil: Add sample rate constraint
- net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition
- bpf: Check validity of link->type in bpf_link_show_fdinfo()
- mm: krealloc: Fix MTE false alarm in __do_krealloc
- 9p: fix slab cache name creation for real
.
[ Ben Hutchings ]
* d/b/gencontrol.py: Fix generation of debian/tests/control
.
linux (6.11.7-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.7
- drm/amdgpu: fix random data corruption for sdma 7
- cgroup: Fix potential overflow issue when checking max_depth
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof
- perf trace: Fix non-listed archs in the syscalltbl routines
- perf python: Fix up the build on architectures without
HAVE_KVM_STAT_SUPPORT
- scsi: scsi_debug: Fix do_device_access() handling of unexpected SG copy
length
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
(Closes: #1062421)
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: rtw89: pci: early chips only enable 36-bit DMA on specific PCI hosts
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- RDMA/cxgb4: Dump vendor specific QP details
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/bnxt_re: synchronize the qp-handle table array
- wifi: iwlwifi: mvm: don't leak a link on AP removal
- wifi: iwlwifi: mvm: really send iwl_txpower_constraints_cmd
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- Revert "wifi: iwlwifi: remove retry loops in start"
- [armhf] ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- macsec: Fix use-after-free while sending the offloading packet
(CVE-2024-50261)
- ASoC: dapm: fix bounds checker error in dapm_widget_list_create
- sock_map: fix a NULL pointer dereference in sock_map_link_update_prog()
(CVE-2024-50260)
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from
register values
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
- dpll: add Embedded SYNC feature for a pin
- ice: add callbacks for Embedded SYNC enablement on dpll pins
- ice: fix crash on probe for DPLL enabled E810 LOM
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
- gtp: allow -1 to be specified as file description from userspace
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- bpf: Force checkpoint when jmp history is too long
- net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext()
- bpf: Fix out-of-bounds write in trie_get_next_key() (CVE-2024-50262)
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
(CVE-2024-50258)
- netfilter: Fix use-after-free in get_info() (CVE-2024-50257)
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
(CVE-2024-50256)
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
(CVE-2024-50255)
- bpf: Free dynamically allocated bits in bpf_iter_bits_destroy()
(CVE-2024-50254)
- bpf: Add bpf_mem_alloc_check_size() helper
- bpf: Check the validity of nr_words in bpf_iter_bits_new()
(CVE-2024-50253)
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- net: ethernet: mtk_wed: fix path of MT7988 WO firmware
- netfilter: nft_payload: sanitize offset and length before calling
skb_checksum()
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- iomap: improve shared block detection in iomap_unshare_iter
- iomap: don't bother unsharing delalloc extents
- iomap: share iomap_unshare_iter predicate code with fsdax
- fsdax: remove zeroing code from dax_unshare_iter
- fsdax: dax_unshare_iter needs to copy entire blocks (CVE-2024-50250)
- iomap: turn iomap_want_unshare_iter into an inline function
- firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
- afs: Fix missing subdir edit when renamed between parent dirs
- ACPI: CPPC: Make rmw_lock a raw_spin_lock (CVE-2024-50249)
- gpio: sloppy-logic-analyzer: Check for error code from devm_mutex_init()
call
- smb: client: fix parsing of device numbers
- smb: client: set correct device number on nfs reparse points
- [arm64] drm/mediatek: ovl: Remove the color format comment for
ovl_fmt_convert()
- [arm64] drm/mediatek: Fix color format MACROs in OVL
- [arm64] drm/mediatek: Fix get efuse issue for MT8188 DPTX
- [arm64] drm/mediatek: Use cmdq_pkt_create() and cmdq_pkt_destroy()
- [arm64] drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()
- [arm64,armhf] drm/tegra: Fix NULL vs IS_ERR() check in probe()
- cxl/events: Fix Trace DRAM Event Record
- PCI: Fix pci_enable_acs() support for the ACS quirks
- nvme: module parameter to disable pi with offsets
- [arm64] drm/panthor: Fix firmware initialization on systems with a page
size > 4k
- [arm64] drm/panthor: Fail job creation when the group is dead
- [arm64] drm/panthor: Report group as timedout when we fail to properly
suspend
- scsi: scsi_transport_fc: Allow setting rport state to current state
- cifs: Improve creating native symlinks pointing to directory
- cifs: Fix creating native symlinks pointing to current or parent directory
- ACPI: resource: Fold Asus Vivobook Pro N6506M* DMI quirks together
- [amd64] powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U
- [amd64] thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug
support
- [amd64] thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- NFS: remove revoked delegation from server's delegation list
- misc: sgi-gru: Don't disable preemption in GRU driver
- NFSD: Initialize struct nfsd4_copy earlier (CVE-2024-50241)
- NFSD: Never decrement pending_async_copies on error
- rpcrdma: Always release the rpcrdma_device's xa_array
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- wifi: rtlwifi: rtl8192du: Don't claim USB ID 0bda:8171
- usbip: tools: Fix detach_port() invalid port error path
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: typec: tcpm: restrict SNK_WAIT_CAPABILITIES_TIMEOUT transitions to
non self-powered devices
- [arm64] usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release
fwnodes
- [arm64] usb: typec: qcom-pmic-typec: fix missing fwnode removal in error
path
- [arm64] phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
(CVE-2024-50240)
- [arm64] phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
(CVE-2024-50239)
- [arm64] phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend
(CVE-2024-50238)
- xhci: Fix Link TRB DMA in command ring stopped completion event
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- Revert "driver core: Fix uevent_show() vs driver detach race"
- Revert "drm/amd/display: update DML2 policy
EnhancedPrefetchScheduleAccelerationFinal DCN35"
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
(CVE-2024-50237)
- wifi: ath10k: Fix memory leak in management tx (CVE-2024-50236)
- wifi: cfg80211: clear wdev->cqm_config pointer on free (CVE-2024-50235)
- wifi: iwlegacy: Clear stale interrupts before resuming device
(CVE-2024-50234)
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
- staging: iio: frequency: ad9832: fix division by zero in
ad9832_calc_freqreg()
- dt-bindings: iio: adc: ad7380: fix ad7380-4 reference supply
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
(CVE-2024-50232)
- iio: gts-helper: Fix memory leaks for the error path of
iio_gts_build_avail_scale_table()
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
(CVE-2024-50231)
- iio: light: veml6030: fix microlux value calculation
- nilfs2: fix kernel bug due to missing clearing of checked flag
(CVE-2024-50230)
- nilfs2: fix potential deadlock with newly created symlinks
(CVE-2024-50229)
- [riscv64] ACPI: fix early_ioremap to early_memremap
- mm: shmem: fix data-race in shmem_getattr() (CVE-2024-50228)
- tools/mm: -Werror fixes in page-types/slabinfo
- mm: shrinker: avoid memleak in alloc_shrinker_info
- firmware: microchip: auto-update: fix poll_complete() to not report
spurious timeout errors
- [amd64] thunderbolt: Fix KASAN reported stack out-of-bounds read in
tb_retimer_scan()
- [amd64] thunderbolt: Honor TMU requirements in the domain when setting TMU
mode
- [arm64] soc: qcom: pmic_glink: Handle GLINK intent allocation rejections
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
(CVE-2024-50226)
- cxl/port: Fix CXL port initialization order when the subsystem is built-in
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- block: fix sanity checks in blk_rq_map_user_bvec
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io()
- btrfs: fix error propagation of split bios (CVE-2024-50225)
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
(CVE-2024-50224)
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- Input: edt-ft5x06 - fix regmap leak when probe fails
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- [riscv64] efi: Set NX compat flag in PE/COFF header
- [riscv64] Prevent a bad reference count on CPU nodes
- [riscv64] Use '%u' to format the output of 'cpu'
- [riscv64] Remove unused GENERATING_ASM_OFFSETS
- [riscv64] Remove duplicated GET_RM
- scsi: ufs: core: Fix another deadlock during RTC update
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- sched/numa: Fix the potential null pointer dereference in task_numa_work()
(CVE-2024-50223)
- posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
- tpm: Return tpm2_sessions_init() when null key creation fails
- tpm: Rollback tpm2_load_null()
- drm/amd/pm: Vangogh: Fix kernel memory out of bounds write
(CVE-2024-50221)
- drm/amdgpu/smu13: fix profile reporting
- tpm: Lazily flush the auth session
- mptcp: init: protect sched with rcu_read_lock
- mei: use kvmalloc for read buffer

[continued in next message]

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)