linux (6.12.20-1) unstable; urgency=medium

linux (6.12.20-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.20
    - mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq
    - mm: fix kernel BUG when userfaultfd_move encounters swapcache
    - userfaultfd: fix PTE unmapping stack-allocated PTE copies
    - fbdev: hyperv_fb: iounmap() the correct memory when removing a device
    - netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
    - ice: do not configure destination override for switchdev
    - ice: fix memory leak in aRFS after reset
    - ice: Fix switchdev slow-path in LAG
    - netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around
    - netfilter: nf_tables: make destruction work queue pernet
    - sched: address a potential NULL pointer dereference in the GRED scheduler.
    - wifi: iwlwifi: mvm: fix PNVM timeout for non-MSI-X platforms
    - wifi: mac80211: don't queue sdata::work for a non-running sdata
    - wifi: cfg80211: cancel wiphy_work before freeing wiphy
    - Bluetooth: hci_event: Fix enabling passive scanning
    - Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"
    - net/mlx5: Fill out devlink dev info only for PFs
    - [arm64,armhf] net: dsa: mv88e6xxx: Verify after ATU Load ops
    - net: mctp i3c: Copy headers if cloned
    - net: mctp i2c: Copy headers if cloned
    - netpoll: hold rcu read lock in __netpoll_send_skb()
    - drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
    - fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs
    - fbdev: hyperv_fb: Simplify hvfb_putmem
    - fbdev: hyperv_fb: Allow graceful removal of framebuffer
    - Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
    - net/mlx5: handle errors in mlx5_chains_create_table()
    - eth: bnxt: fix truesize for mb-xdp-pass case
    - eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc()
    - eth: bnxt: do not use BNXT_VNIC_NTUPLE unconditionally in queue restart logic
    - eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
    - eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx}
    - eth: bnxt: use page pool for head frags
    - bnxt_en: refactor tpa_info alloc/free into helpers
    - bnxt_en: handle tpa_info in queue API implementation
    - eth: bnxt: fix memory leak in queue reset
    - net: switchdev: Convert blocking notification chain to a raw one
    - net: mctp: unshare packets when reassembling
    - bonding: fix incorrect MAC address setting to receive NS messages
    - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
    - ipvs: prevent integer overflow in do_ip_vs_get_ctl()
    - net_sched: Prevent creation of classes with TC_H_ROOT
    - netfilter: nft_exthdr: fix offset with ipv4_find_option()
    - gre: Fix IPv6 link-local address generation.
    - net: openvswitch: remove misbehaving actions length check
    - Revert "openvswitch: switch to per-action label counting in conntrack"
    - net/mlx5: HWS, Rightsize bwc matcher priority
    - net/mlx5: Fix incorrect IRQ pool usage when releasing IRQs
    - net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch
    - net/mlx5: Bridge, fix the crash caused by LAG state check
    - net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
    - nvme-fc: go straight to connecting state when initializing
    - nvme-fc: do not ignore connectivity loss during connecting
    - hrtimers: Mark is_migration_base() with __always_inline
    - powercap: call put_device() on an error path in powercap_register_control_type()
    - btrfs: avoid starting new transaction when cleaning qgroup during subvolume drop
    - futex: Pass in task to futex_queue()
    - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
    - [x86] platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show()
    - drm/amd/display: Fix out-of-bound accesses
    - scsi: core: Use GFP_NOIO to avoid circular locking dependency
    - scsi: ufs: core: Fix error return with query response
    - scsi: qla1280: Fix kernel oops when debug level > 2
    - ACPI: resource: IRQ override for Eluktronics MECH-17
    - smb: client: fix noisy when tree connecting to DFS interlink targets
    - sched_ext: selftests/dsp_local_on: Fix sporadic failures
    - [amd64] HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
    - [amd64] HID: intel-ish-hid: Send clock sync message immediately after reset
    - HID: ignore non-functional sensor in HP 5MP Camera
    - HID: hid-steam: Fix issues with disabling both gamepad mode and lizard mode
    - usb: phy: generic: Use proper helper for property detection
    - [amd64] HID: intel-ish-hid: ipc: Add Panther Lake PCI device IDs
    - HID: topre: Fix n-key rollover on Realforce R3S TKL boards
    - HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
    - HID: apple: fix up the F6 key on the Omoton KB066 keyboard
    - btrfs: fix two misuses of folio_shift()
    - objtool: Ignore dangling jump table entries
    - sched: Clarify wake_up_q()'s write to task->wake_q.next
    - [x86] platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
    - [x86] platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
    - [x86] platform/x86: int3472: Use correct type for "polarity", call it gpio_flags
    - [x86] platform/x86: int3472: Call "reset" GPIO "enable" for INT347E
    - [s390x] cio: Fix CHPID "configure" attribute caching
    - thermal/cpufreq_cooling: Remove structure member documentation
    - [arm64] amu: Delay allocating cpumask for AMU FIE support
    - Xen/swiotlb: mark xen_swiotlb_fixup() __init
    - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
    - [amd64] ASoC: Intel: sof_sdw: Add lookup of quirk using PCI subsystem ID
    - [amd64] ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S14
    - [amd64] ASoC: Intel: soc-acpi-intel-mtl-match: declare adr as ull
    - ASoC: simple-card-utils.c: add missing dlc->of_node
    - ALSA: hda/realtek: Limit mic boost on Positivo ARN50
    - [amd64] ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
    - PCI: pci_ids: add INTEL_HDA_PTL_H
    - ALSA: hda: intel-dsp-config: Add PTL-H support
    - [amd64] ASoC: SOF: Intel: pci-ptl: Add support for PTL-H
    - ALSA: hda: hda-intel: add Panther Lake-H support
    - [amd64] ASoC: SOF: amd: Add post_fw_run_delay ACP quirk
    - [amd64] ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE
    - net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
    - io-wq: backoff when retrying worker creation
    - nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
    - nvmet-rdma: recheck queue state is LIVE in state lock in recv done
    - apple-nvme: Release power domains when probe fails
    - cifs: Treat unhandled directory name surrogate reparse points as mount directory nodes
    - sctp: Fix undefined behavior in left shift operation
    - nvme: only allow entering LIVE from CONNECTING state
    - phy: ti: gmii-sel: Do not use syscon helper to build regmap
    - fuse: don't truncate cached, mutated symlink
    - ASoC: dapm-graph: set fill colour of turned on nodes
    - [amd64] ASoC: SOF: Intel: don't check number of sdw links when set dmic_fixup
    - drm/vkms: Round fixp2int conversion in lerp_u16
    - [x86] perf/x86/intel: Use better start period for frequency mode
    - [x86] of: Don't use DTB for SMP setup if ACPI is enabled
    - [x86] irq: Define trace events conditionally
    - [x86] perf/x86/rapl: Add support for Intel Arrow Lake U
    - mptcp: safety check before fallback
    - drm/nouveau: Do not override forced connector status
    - net: Handle napi_schedule() calls from non-interrupt
    - block: fix 'kmem_cache of name 'bio-108' already exists'
    - vhost: return task creation error instead of NULL
    - cifs: Validate content of WSL reparse point buffers
    - cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from parse_reparse_point()
    - Input: goodix-berlin - fix vddio regulator references
    - Input: ads7846 - fix gpiod allocation
    - Input: iqs7222 - preserve system status register
    - Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE controllers
    - Input: xpad - add multiple supported devices
    - Input: xpad - add support for ZOTAC Gaming Zone
    - Input: xpad - add support for TECNO Pocket Go
    - Input: xpad - rename QH controller to Legion Go S
    - Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
    - Input: i8042 - add required quirks for missing old boardnames
    - Input: i8042 - swap old quirk combination with new quirk for several devices
    - Input: i8042 - swap old quirk combination with new quirk for more devices
    - USB: serial: ftdi_sio: add support for Altera USB Blaster 3
    - USB: serial: option: add Telit Cinterion FE990B compositions
    - USB: serial: option: fix Telit Cinterion FE990A name
    - USB: serial: option: match on interface class for Telit FN990B
    - [x86] microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
    - spi: microchip-core: prevent RX overflows when transmit size > FIFO size
    - [amd64] drm/i915/cdclk: Do cdclk post plane programming later
    - drm/panic: use `div_ceil` to clean Clippy warning
    - drm/panic: fix overindented list items in documentation
    - drm/atomic: Filter out redundant DPMS calls
    - drm/dp_mst: Fix locking when skipping CSN before topology probing
    - drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags
    - drm/amd/amdkfd: Evict all queues even HWS remove queue failed
    - drm/amdgpu/display: Allow DCC for video formats on GFX12
    - drm/amd/display: Disable unneeded hpd interrupts during dm_init
    - drm/amd/display: fix default brightness
    - drm/amd/display: fix missing .is_two_pixels_per_container
    - drm/amd/display: Restore correct backlight brightness after a GPU reset
    - drm/amd/display: Assign normalized_pix_clk when color depth = 14
    - drm/amd/display: Fix slab-use-after-free on hdcp_work
    - ksmbd: fix use-after-free in ksmbd_free_work_struct
    - ksmbd: prevent connection release during oplock break notification
    - clk: samsung: update PLL locktime for PLL142XX used on FSD platform
    - clk: samsung: gs101: fix synchronous external abort in samsung_clk_save()
    - [amd64] ASoC: Intel: sof_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks()
    - [amd64] ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
    - netmem: prevent TX of unreadable skbs
    - dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
    - [arm64] mm: Populate vmemmap at the page level if not section aligned
    - Fix mmu notifiers for range-based invalidates
    - qlcnic: fix memory leak issues in qlcnic_sriov_common.c
    - smb: client: fix regression with guest option
    - net: phy: nxp-c45-tja11xx: add TJA112X PHY configuration errata
    - net: phy: nxp-c45-tja11xx: add TJA112XB SGMII PCS restart errata
    - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl()
    - ASoC: ops: Consistently treat platform_max as control value
    - drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
    - [amd64] ASoC: cs42l43: Fix maximum ADC Volume
    - [amd64] ASoC: rt722-sdca: add missing readable registers
    - drm/xe: cancel pending job timer before freeing scheduler
    - drm/xe: Release guc ids before cancelling work
    - drm/xe/userptr: Fix an incorrect assert
    - drm/xe/pm: Temporarily disable D3Cold on BMG
    - nvme: move error logging from nvme_end_req() to __nvme_end_req()
    - ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
    - [amd64] drm/i915: Increase I915_PARAM_MMAP_GTT_VERSION version to indicate support for partial mmaps
    - scripts: generate_rust_analyzer: add missing macros deps
    - scripts: generate_rust_analyzer: add missing include_dirs
    - scripts: generate_rust_analyzer: add uapi crate
    - block: change blk_mq_add_to_batch() third argument type to bool
    - cifs: Fix integer overflow while processing acregmax mount option
    - cifs: Fix integer overflow while processing acdirmax mount option
    - cifs: Fix integer overflow while processing actimeo mount option
    - cifs: Fix integer overflow while processing closetimeo mount option
    - [x86] vmware: Parse MP tables for SEV-SNP enabled guests under VMware hypervisors
    - i2c: ali1535: Fix an error handling path in ali1535_probe()
    - i2c: ali15x3: Fix an error handling path in ali15x3_probe()
    - i2c: sis630: Fix an error handling path in sis630_probe()
    - mm/hugetlb: wait for hugetlb folios to be freed
    - smb3: add support for IAKerb
    - smb: client: Fix match_session bug preventing session reuse
    - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems
    - tools/sched_ext: Add helper to check task migration state
    - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
    - nvme-fc: rely on state transitions to handle connectivity loss
    - HID: apple: disable Fn key handling on the Omoton KB066

  [ Madhu Adav M J ]
  * drivers/nvme/target: Enable NVME_TARGET_PASSTHRU
  * drivers/nvme/target: Enable NVME_TARGET_LOOP and NVME_TARGET_FCLOOP
    as modules

  [ Salvatore Bonaccorso ]
  * net/sunrpc: Enable RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA2 (Closes: #1100641)
  * [x86] drivers/pinctrl/intel: Enable PINCTRL_INTEL_PLATFORM as module
    (Closes: #1100694)
  * ata: libata-core: Add ATA_QUIRK_NO_LPM_ON_ATI for certain Samsung SSDs
    (Closes: #1091696)

[dgit import unpatched linux 6.12.20-1]