linux (6.1.25-1) unstable; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.21
- xfrm: Allow transport-mode states with AF_UNSPEC selector
- drm/virtio: Pass correct device to dma_sync_sgtable_for_device()
- drm/msm/gem: Prevent blocking within shrinker loop
- [arm64,armhf] drm/panfrost: Don't sync rpm suspension after mmu flushing
- cifs: Move the in_send statistic to __smb_send_rqst()
- [arm64] drm/meson: fix 1px pink line on GXM when scaling video overlay
- [x86] ASoC: SOF: Intel: MTL: Fix the device description
- [x86] ASoC: SOF: Intel: HDA: Fix device description
- [x86] ASoC: SOF: Intel: SKL: Fix device description
- [x86] ASOC: SOF: Intel: pci-tgl: Fix device description
- docs: Correct missing "d_" prefix for dentry_operations member
d_weak_revalidate
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU()
- netfilter: nft_nat: correct length for loading protocol registers
- netfilter: nft_masq: correct length for loading protocol registers
- netfilter: nft_redir: correct length for loading protocol registers
- netfilter: nft_redir: correct value of inet type `.maxattrs`
- scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD
- scsi: core: Fix a procfs host directory removal regression
- ftrace,kcfi: Define ftrace_stub_graph conditionally
- tcp: tcp_make_synack() can be called from process context
- wifi: nl80211: fix NULL-ptr deref in offchan check
- wifi: cfg80211: fix MLO connection ownership
- nfc: pn533: initialize struct pn533_out_arg properly
- ipvlan: Make skb->skb_iif track skb->dev for l3s mode
- i40e: Fix kernel crash during reboot when adapter is in recovery mode
- [s390x] PCI: s390: Fix use-after-free of PCI resources with per-function
hotplug
- [x86] drm/i915/psr: Use calculated io and fast wake lines
- [x86] drm/i915/sseu: fix max_subslices array-index-out-of-bounds access
- net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler()
- qed/qed_dev: guard against a possible division by zero
- block: do not reverse request order when flushing plug list
- loop: Fix use-after-free issues
- net: tunnels: annotate lockless accesses to dev->needed_headroom
- net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status
fails
- tcp: Fix bind() conflict check for dual-stack wildcard address.
- net/smc: fix deadlock triggered by cancel_delayed_work_syn()
- net: usb: smsc75xx: Limit packet length to skb->len
- drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts
kdoc
- [powerpc*] mm: Fix false detection of read faults
- nvme: fix handling single range discard request
- nvmet: avoid potential UAF in nvmet_req_complete()
- block: sunvdc: add check for mdesc_grab() returning NULL
- net/mlx5e: Fix macsec ASO context alignment
- net/mlx5e: Don't cache tunnel offloads capability
- net/mlx5: Fix setting ec_function bit in MANAGE_PAGES
- net/mlx5: Disable eswitch before waiting for VF pages
- net/mlx5e: Support Geneve and GRE with VF tunnel offload
- net/mlx5: E-switch, Fix wrong usage of source port rewrite in split rules
- net/mlx5: E-switch, Fix missing set of split_count when forward to ovs
internal port
- net/mlx5e: Fix cleanup null-ptr deref on encap lock
- net/mlx5: Set BREAK_FW_WAIT flag first when removing driver
- veth: Fix use after free in XDP_REDIRECT
- ice: xsk: disable txq irq before flushing hw
- [arm64,armhf] net: dsa: don't error out when drivers return ETH_DATA_LEN
in .port_max_mtu()
- [arm64,armhf] net: dsa: mv88e6xxx: fix max_mtu of 1492 on 6165, 6191,
6220, 6250, 6290
- sh_eth: avoid PHY being resumed when interface is not up
- ipv4: Fix incorrect table ID in IOCTL path
- net: usb: smsc75xx: Move packet length check to prevent kernel panic in
skb_pull
- net: atlantic: Fix crash when XDP is enabled but no program is loaded
- [s390x] net/iucv: Fix size of interrupt data
- qed/qed_mng_tlv: correctly zero out ->min instead of ->hour
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- hwmon: (adt7475) Display smoothing attributes in correct order
- hwmon: (adt7475) Fix masking of hysteresis registers
- jffs2: correct logic when creating a hole in jffs2_write_begin
- ext4: fail ext4_iget if special inode unallocated
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix task hung in ext4_xattr_delete_inode
- net/9p: fix bug in client create for .L
- drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini
- drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes
- ext4: fix possible double unlock when moving a directory
- [arm64] tty: serial: fsl_lpuart: skip waiting for transmission complete
when UARTCTRL_SBK is asserted
- serial: 8250_fsl: fix handle_irq locking
- [arm64] firmware: xilinx: don't make a sleepable memory allocation from an
atomic context
- [arm64,armhf] memory: tegra: fix interconnect registration race
- [armhf] memory: tegra124-emc: fix interconnect registration race
- drm/ttm: Fix a NULL pointer dereference
- [arm64,armhf] interconnect: fix icc_provider_del() error handling
- [arm64,armhf] interconnect: fix provider registration API
- [arm64] interconnect: imx: fix registration race
- [arm64,armhf] interconnect: fix mem leak when freeing nodes
- md: select BLOCK_LEGACY_AUTOLOAD
- cifs: generate signkey for the channel that's reconnecting
- tracing: Make splice_read available again
- tracing: Check field value in hist_field_name()
- tracing: Make tracepoint lockdep check actually test something
- cifs: Fix smb2_set_path_size()
- [x86] KVM: SVM: Fix a benign off-by-one bug in AVIC physical table mask
- [x86] KVM: SVM: Modify AVIC GATag to support max number of 512 vCPUs
- [x86] KVM: nVMX: add missing consistency checks for CR0 and CR4
- ALSA: hda: intel-dsp-config: add MTL PCI id
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro
- ALSA: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP
platform
- drm/shmem-helper: Remove another errant put in error path
- [arm64,armhf] drm/sun4i: fix missing component unbind on bind errors
- [x86] drm/i915/active: Fix misuse of non-idle barriers as fence trackers
- [x86] drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz
- drm/amdgpu: Don't resume IOMMU after incomplete init
- drm/amd/pm: Fix sienna cichlid incorrect OD volage after resume
- drm/amd/pm: bump SMU 13.0.4 driver_if header version
- drm/amd/display: Do not set DRR on pipe Commit
- drm/amd/display: disconnect MPCC only on OTG change
- mptcp: fix possible deadlock in subflow_error_report
- mptcp: add ro_after_init for tcp{,v6}_prot_override
- mptcp: avoid setting TCP_CLOSE state twice
- mptcp: fix lockdep false positive in mptcp_pm_nl_create_listen_socket()
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- ocfs2: fix data corruption after failed write
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV3000
- ice: avoid bonding causing auxiliary plug/unplug under RTNL lock
- mm/userfaultfd: propagate uffd-wp bit when PTE-mapping the huge zeropage
- mm: teach mincore_hugetlb about pte markers
- trace/hwlat: Do not wipe the contents of per-cpu thread data
- trace/hwlat: Do not start per-cpu thread if it is already running
- [arm64] ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is
absent
- fbdev: Fix incorrect page mapping clearance at fb_deferred_io_release()
- [arm64] cpuidle: psci: Iterate backwards over list in psci_pd_remove()
- [x86] ASoC: Intel: soc-acpi: fix copy-paste issue in topology names
- [x86] mce: Make sure logged MCEs are processed after sysfs update
- [x86] mm: Fix use of uninitialized buffer in sme_enable()
- [x86] resctrl: Clear staged_config[] before and after it is used
- powerpc: Pass correct CPU reference to assembler
- [amd64] virt/coco/sev-guest: Check SEV_SNP attribute at probe time
- [amd64] virt/coco/sev-guest: Simplify extended guest request handling
- [amd64] virt/coco/sev-guest: Remove the disable_vmpck label in
handle_guest_request()
- [amd64] virt/coco/sev-guest: Carve out the request issuing logic into a
helper
- [amd64] virt/coco/sev-guest: Do some code style cleanups
- [amd64] virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a
switch-case
- [amd64] virt/coco/sev-guest: Add throttling awareness
- io_uring/msg_ring: let target know allocated index
- perf: Fix check before add_event_to_groups() in perf_group_detach()
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.22
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in
perf_event_bpf_output
- perf: fix perf_event_context->time
- drm/amd/display: Include virtual signal to set k1 and k2 values
- drm/amd/display: fix k1 k2 divider programming for phantom streams
- drm/amd/display: Remove OTG DIV register write for Virtual signals.
- mptcp: refactor passive socket initialization
- mptcp: use the workqueue to destroy unaccepted sockets
- mptcp: fix UaF in listener shutdown
- drm/amd/display: Fix DP MST sinks removal issue
- [x86] power: supply: bq24190: Fix use after free bug in bq24190_remove due
to race condition
- [arm64] dts: imx8dxl-evk: Disable hibernation mode of AR8031 for EQOS
- [arm64] dts: imx8dxl-evk: Fix eqos phy reset gpio
- NFS: Fix /proc/PID/io read_bytes for buffered reads
- xsk: Add missing overflow check in xdp_umem_reg
- iavf: fix inverted Rx hash condition leading to disabled hash
- iavf: fix non-tunneled IPv6 UDP packet type and hashing
- iavf: do not track VLAN 0 filters
- intel/igbvf: free irq on the error path in igbvf_request_msix()
- igbvf: Regard vf reset nack as success
- igc: fix the validation logic for taprio's gate list
- [arm64] i2c: imx-lpi2c: check only for enabled interrupt flags
- scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate()
- nfsd: don't replace page in rq_pages if it's a continuation of last page
- net: usb: smsc95xx: Limit packet length to skb->len
- efi/libstub: smbios: Use length member instead of record struct size
- qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info
- net: phy: Ensure state transitions are processed from phy_stop()
- net: mdio: fix owner field for mdio buses registered using device-tree
- net: mdio: fix owner field for mdio buses registered using ACPI
- net: stmmac: Fix for mismatched host/device DMA address width
- [x86] drm/i915: Print return value on error
- [x86] drm/i915/fbdev: lock the fbdev obj before vma pin
- [x86] drm/i915/guc: Rename GuC register state capture node to be more
obvious
- [x86] drm/i915/guc: Fix missing ecodes
- [x86] drm/i915/gt: perform uc late init after probe error injection
- [arm64] net: qcom/emac: Fix use after free bug in emac_remove due to race
condition
- net: usb: lan78xx: Limit packet length to skb->len
- keys: Do not cache key in task struct if key is requested from kernel
thread
- ice: check if VF exists before mode check
- iavf: fix hang on reboot with ice
- i40e: fix flow director packet filter programming
- bpf: Adjust insufficient default bpf_jit_limit
- net/mlx5e: Set uplink rep as NETNS_LOCAL
- net/mlx5e: Block entering switchdev mode with ns inconsistency
- net/mlx5: Fix steering rules cleanup
- net/mlx5e: Overcome slow response for first macsec ASO WQE
- net/mlx5: Read the TC mapping of all priorities on ETS query
- net/mlx5: E-Switch, Fix an Oops in error handling code
- [armhf] net: dsa: tag_brcm: legacy: fix daisy-chained switches
- atm: idt77252: fix kmemleak when rmmod idt77252
- erspan: do not use skb_mac_header() in ndo_start_xmit()
- nvme-tcp: fix nvme_tcp_term_pdu to match spec
- hvc/xen: prevent concurrent accesses to the shared ring
- ksmbd: add low bound validation to FSCTL_SET_ZERO_DATA
- ksmbd: add low bound validation to FSCTL_QUERY_ALLOCATED_RANGES
- ksmbd: fix possible refcount leak in smb2_open()
- Bluetooth: hci_sync: Resume adv with no RPA when active scan
- Bluetooth: hci_core: Detect if an ACL packet is in fact an ISO packet
- Bluetooth: btusb: Remove detection of ISO packets over bulk
- Bluetooth: ISO: fix timestamped HCI ISO data packet parsing
- Bluetooth: Remove "Power-on" check from Mesh feature
- [amd64,arm64] gve: Cache link_speed value from device
- net: asix: fix modprobe "sysfs: cannot create duplicate filename"
- [arm64] net: mdio: thunder: Add missing fwnode_handle_put()
- drm/amd/display: Set dcn32 caps.seamless_odm
- Bluetooth: btqcomsmd: Fix command timeout after setting BD address
- Bluetooth: L2CAP: Fix responding with wrong PDU type
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to
unfinished work (CVE-2023-1989)
- Bluetooth: mgmt: Fix MGMT add advmon with RSSI command
- platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl
- entry: Fix noinstr warning in __enter_from_user_mode()
- [x86] perf/x86/amd/core: Always clear status for idx
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- hwmon: fix potential sensor registration fail if of_node is missing
- [x86] hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs
- scsi: qla2xxx: Synchronize the IOCB count to be in order
- scsi: qla2xxx: Perform lockless command completion in abort path
- smb3: lower default deferred close timeout to address perf regression
- smb3: fix unusable share after force unmount failure
- [x86] thunderbolt: Use scale field when allocating USB3 bandwidth
- [x86] thunderbolt: Call tb_check_quirks() after initializing adapters
- [x86] thunderbolt: Add quirk to disable CLx
- [x86] thunderbolt: Fix memory leak in margining
- [x86] thunderbolt: Disable interrupt auto clear for rings
- [x86] thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access
- [x86] thunderbolt: Use const qualifier for `ring_interrupt_index`
- [x86] thunderbolt: Rename shadowed variables bit to interrupt_bit and
auto_clear_bit
- [x86] ASoC: amd: yp: Add OMEN by HP Gaming Laptop 16z-n000 to quirks
- [x86] ASoC: amd: yc: Add DMI entries to support HP OMEN 16-n0xxx (8A43)
- [x86] ACPI: x86: Drop quirk for HP Elitebook
- [x86] ACPI: x86: utils: Add Cezanne to the list for forcing
StorageD3Enable
- drm/cirrus: NULL-check pipe->plane.state->fb in cirrus_pipe_update()
- HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded
- HID: logitech-hidpp: Add support for Logitech MX Master 3S mouse
- [amd64] HID: intel-ish-hid: ipc: Fix potential use-after-free in work
function
- scsi: target: iscsi: Fix an error message in iscsi_check_key()
- scsi: qla2xxx: Add option to disable FC2 Target support
- [arm64] scsi: hisi_sas: Check devm_add_action() return value
- scsi: ufs: core: Add soft dependency on governor_simpleondemand
- scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read()
- scsi: lpfc: Avoid usage of list iterator variable after loop
- scsi: mpi3mr: Driver unload crashes host when enhanced logging is enabled
- scsi: mpi3mr: Wait for diagnostic save during controller init
- scsi: mpi3mr: NVMe command size greater than 8K fails
- scsi: mpi3mr: Bad drive in topology results kernel crash
- scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990
- net: usb: qmi_wwan: add Telit 0x1080 composition
- drm/amd/display: Update clock table to include highest clock setting
- drm/amdgpu: Fix call trace warning and hang when removing amdgpu device
- drm/amd: Fix initialization mistake for NBIO 7.3.0
- cifs: lock chan_lock outside match_session
- cifs: append path to open_enter trace event
- cifs: do not poll server interfaces too regularly
- cifs: empty interface list when server doesn't support query interfaces
- cifs: dump pending mids for all channels in DebugData
- cifs: print session id while listing open files
- cifs: fix dentry lookups in directory handle cache
- [x86] fpu/xstate: Prevent false-positive warning in
__copy_xstate_uabi_buf()
- scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR
- [arm64] usb: dwc2: drd: fix inconsistent mode if
role-switch-default-mode="host"
- [arm64,armhf] usb: dwc2: fix a devres leak in hw_enable upon suspend
resume
- usb: gadget: u_audio: don't let userspace block driver unbind
- btrfs: zoned: fix btrfs_can_activate_zone() to support DUP profile
- Bluetooth: Fix race condition in hci_cmd_sync_clear
- efi: sysfb_efi: Fix DMI quirks not working for simpledrm
- mm/slab: Fix undefined init_cache_node_node() for NUMA and !SMP
- fscrypt: destroy keyring after security_sb_delete()
- fsverity: Remove WQ_UNBOUND from fsverity read workqueue
- lockd: set file_lock start and end when decoding nlm4 testargs
- [arm64] dts: imx8mm-nitrogen-r2: fix WM8960 clock name
- igb: revert rtnl_lock() that causes deadlock
- dm thin: fix deadlock when swapping to thin device
- usb: typec: tcpm: fix create duplicate source-capabilities file
- usb: typec: tcpm: fix warning when handle discover_identity message
- [arm64,armhf] usb: chipdea: core: fix return -EINVAL if request role is
the same with current role
- [arm64,armhf] usb: chipidea: core: fix possible concurrent when switch
role
- [arm64,armhf] usb: dwc3: gadget: Add 1ms delay after end transfer command
without IOC
- io_uring/net: avoid sending -ECONNABORTED on repeated connection requests
- io_uring/rsrc: fix null-ptr-deref in io_file_bitmap_get() (CVE-2023-1583)
- maple_tree: fix mas_skip_node() end slot detection
- ksmbd: fix wrong signingkey creation when encryption is AES256
- ksmbd: set FILE_NAMED_STREAMS attribute in FS_ATTRIBUTE_INFORMATION
- ksmbd: don't terminate inactive sessions after a few seconds
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect
- ksmbd: return unsupported error on smb1 mount
- wifi: mac80211: fix qos on mesh interfaces
- nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy()
- drm/amd/display: fix wrong index used in dccg32_set_dpstreamclk
- [arm64] drm/meson: fix missing component unbind on bind errors
- drm/amdgpu/nv: Apply ASPM quirk on Intel ADL + AMD Navi
- [x86] drm/i915/active: Fix missing debug object activation
- [x86] drm/i915: Preserve crtc_state->inherited during state clearing
- drm/amdgpu: skip ASIC reset for APUs when go to S4
- drm/amdgpu: reposition the gpu reset checking for reuse
- [arm64] firmware: arm_scmi: Fix device node validation for mailbox
transport
- mm/ksm: fix race with VMA iteration and mm_struct teardown
- [arm64] i2c: xgene-slimpro: Fix out-of-bounds bug in
xgene_slimpro_i2c_xfer() (CVE-2023-2194)
- dm stats: check for and propagate alloc_percpu failure
- dm crypt: add cond_resched() to dmcrypt_write()
- dm crypt: avoid accessing uninitialized tasklet
- sched/fair: sanitize vruntime of entity being placed
- sched/fair: Sanitize vruntime of entity being migrated
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.23
- [x86] thunderbolt: Limit USB3 bandwidth of certain Intel USB4 host routers
- cifs: update ip_addr for ses only for primary chan setup
- cifs: prevent data race in cifs_reconnect_tcon()
- cifs: avoid race conditions with parallel reconnects
- zonefs: Reorganize code
- zonefs: Simplify IO error handling
- zonefs: Reduce struct zonefs_inode_info size
- zonefs: Separate zone information from inode information
- zonefs: Fix error message in zonefs_file_dio_append()
- fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY
- btrfs: rename BTRFS_FS_NO_OVERCOMMIT to BTRFS_FS_ACTIVE_ZONE_TRACKING
- btrfs: zoned: count fresh BG region as zone unusable
- [armhf] dts: aspeed: p10bmc: Update battery node name
- [arm64] drm/msm/dpu: Refactor sc7280_pp location
- [arm64] drm/msm/dpu: correct sm8250 and sm8350 scaler
- [arm64] drm/msm/disp/dpu: fix sc7280_pp base offset
- [arm64] tty: serial: fsl_lpuart: switch to new dmaengine_terminate_* API
- [arm64] tty: serial: fsl_lpuart: fix race on RX DMA shutdown
- tracing: Add .percent suffix option to histogram values
- tracing: Add .graph suffix option to histogram value
- tracing: Do not let histogram values have some modifiers
- [arm64] net: mscc: ocelot: fix stats region batching
- [arm64] efi: Set NX compat flag in PE/COFF header
- cifs: fix missing unload_nls() in smb2_reconnect()
- xfrm: Zero padding when dumping algos and encap
- zstd: Fix definition of assert()
- ACPI: video: Add backlight=native DMI quirk for Dell Vostro 15 3535
- [x86] ASoC: SOF: ipc3: Check for upper size limit for the received message
- [x86] ASoC: SOF: ipc4-topology: Fix incorrect sample rate print unit
- [x86] ASoC: SOF: Intel: pci-tng: revert invalid bar size setting
- [x86] ASoC: SOF: IPC4: update gain ipc msg definition to align with fw
- md: avoid signed overflow in slot_store()
- [amd64] x86/PVH: obtain VGA console info in Dom0
- ALSA: asihpi: check pao in control_message()
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
- sched_getaffinity: don't assume 'cpumask_size()' is fully initialized
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Lexar NM620
- net/mlx5e: Lower maximum allowed MTU in XSK to match XDP prerequisites
- tracing: Fix wrong return in kprobe_event_gen_test.c
- btrfs: fix uninitialized variable warning in btrfs_update_block_group
- btrfs: use temporary variable for space_info in btrfs_update_block_group
- ALSA: usb-audio: Fix recursive locking at XRUN during syncing
- [arm64,armhf] PCI: dwc: Fix PORT_LINK_CONTROL update when CDM check
enabled
- [x86] platform/x86: think-lmi: add missing type attribute
- [x86] platform/x86: think-lmi: use correct possible_values delimiters
- [x86] platform/x86: think-lmi: only display possible_values if available
- [x86] platform/x86: think-lmi: Add possible_values for ThinkStation
- [x86] platform/surface: aggregator: Add missing fwnode_handle_put()
- SUNRPC: fix shutdown of NFS TCP client socket
- sfc: ef10: don't overwrite offload features at NIC reset
- scsi: megaraid_sas: Fix crash after a double completion
- scsi: mpt3sas: Don't print sense pool info twice
- [arm64] ptp_qoriq: fix memory leak in probe()
- r8169: fix RTL8168H and RTL8107E rx crc error
- [arm*] regulator: Handle deferred clk
- net/net_failover: fix txq exceeding warning
- net: stmmac: don't reject VLANs when IFF_PROMISC is set
- [x86] drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state
- [x86] platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix
- can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
- ACPI: bus: Rework system-level device notification handling
- loop: LOOP_CONFIGURE: send uevents for partitions
- [arm64,armhf] net: mvpp2: classifier flow fix fragmentation flags
- [arm64,armhf] net: mvpp2: parser fix QinQ
- [arm64,armhf] net: mvpp2: parser fix PPPoE
- [arm64,armhf] smsc911x: avoid PHY being resumed when interface is not up
- ice: Fix ice_cfg_rdma_fltr() to only update relevant fields
- ice: add profile conflict check for AVF FDIR
- ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg()
- ALSA: ymfpci: Create card with device-managed snd_devm_card_new()
- ALSA: ymfpci: Fix BUG_ON in probe function
- i40e: fix registers dump after run ethtool adapter self test
- bnxt_en: Fix reporting of test result in ethtool selftest
- bnxt_en: Fix typo in PCI id to device description string mapping
- bnxt_en: Add missing 200G link speed reporting
- [arm64,armhf] net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only
- Input: xpad - fix incorrectly applied patch for MAP_PROFILE_BUTTON
- [amd64] iommu/vt-d: Allow zero SAGAW if second-stage not supported
- Input: alps - fix compatibility with -funsigned-char
- Input: focaltech - use explicitly signed char type
- cifs: prevent infinite recursion in CIFSGetDFSRefer()
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table
- btrfs: fix deadlock when aborting transaction during relocation with scrub
- btrfs: fix race between quota disable and quota assign ioctls
(CVE-2023-1611)
- btrfs: scan device in non-exclusive mode
- zonefs: Do not propagate iomap_dio_rw() ENOTBLK error to user space
- block/io_uring: pass in issue_flags for uring_cmd task_work handling
- io_uring/poll: clear single/double poll flags on poll arming
- io_uring/rsrc: fix rogue rsrc node grabbing
- io_uring: fix poll/netmsg alloc caches
- vmxnet3: use gro callback when UPT is enabled
- zonefs: Always invalidate last cached page on append write
- dm: fix __send_duplicate_bios() to always allow for splitting IO
- can: j1939: prevent deadlock by moving j1939_sk_errqueue()
- xen/netback: don't do grant copy across page boundary
- modpost: Fix processing of CRCs on 32-bit build machines
(Closes: #
1033329)
- pinctrl: amd: Disable and mask interrupts on resume
- [x86] platform/x86: ideapad-laptop: Stop sending KEY_TOUCHPAD_TOGGLE
- [powerpc*] Don't try to copy PPR for task with NULL pt_regs
- [powerpc*] pseries/vas: Ignore VAS update for DLPAR if copy/paste is not
enabled
- NFSv4: Fix hangs when recovering open state after a server reboot
- ALSA: hda/conexant: Partial revert of a quirk for Lenovo
- ALSA: usb-audio: Fix regression on detection of Roland VS-100
- ALSA: hda/realtek: Add quirks for some Clevo laptops
- ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z
- rcu: Fix rcu_torture_read ftrace event
- [s390x] uaccess: add missing earlyclobber annotations to __clear_user()
- [arm64,armhf] drm/etnaviv: fix reference leak when mmaping imported buffer
- drm/amdgpu: allow more APUs to do mode2 reset when go to S4
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
- drm/amd/display: Take FEC Overhead into Timeslot Calculation
- [x86] drm/i915/gem: Flush lmem contents after construction
- [x86] drm/i915/dpt: Treat the DPT BO as a framebuffer
- [x86] drm/i915: Disable DC states for all commits
- [x86] drm/i915: Move CSC load back into .color_commit_arm() when PSR is
enabled on skl/glk
- [arm64] KVM: arm64: PMU: Fix GET_ONE_REG for vPMC regs to return the
current value
- [arm64] KVM: arm64: Disable interrupts while walking userspace PTs
- [arm64,armhf] net: dsa: mv88e6xxx: read FID when handling ATU violations
- [arm64,armhf] net: dsa: mv88e6xxx: replace ATU violation prints with trace
points
- [arm64,armhf] net: dsa: mv88e6xxx: replace VTU violation prints with trace
points
- usb: ucsi: Fix ucsi->connector race
- [amd64] x86/PVH: avoid 32-bit build warning when obtaining VGA console
info
- Revert "cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*"
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.24
- dm cache: Add some documentation to dm-cache-background-tracker.h
- dm integrity: Remove bi_sector that's only used by commented debug code
- dm: change "unsigned" to "unsigned int"
- dm: fix improper splitting for abnormal bios
- [arm64] KVM: arm64: PMU: Align chained counter implementation with
architecture pseudocode
- [arm64] KVM: arm64: PMU: Distinguish between 64bit counter and 64bit
overflow
- [arm64] KVM: arm64: PMU: Sanitise PMCR_EL0.LP on first vcpu run
- [arm64] KVM: arm64: PMU: Don't save PMCR_EL0.{C,P} for the vCPU
- Drivers: vmbus: Check for channel allocation before looking up relids
- [x86] ASoC: SOF: ipc4: Ensure DSP is in D0I0 during
sof_ipc4_set_get_data()
- pwm: Make .get_state() callback return an error code
- [arm64] pwm: cros-ec: Explicitly set .polarity in .get_state()
- [arm64,armhf] pwm: meson: Explicitly set .polarity in .get_state()
- [s390x] KVM: s390: pv: fix external interruption loop not always detected
- wifi: mac80211: fix the size calculation of ieee80211_ie_len_eht_cap()
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded
sta
- net: qrtr: Fix a refcount bug in qrtr_recvmsg()
- net: phylink: add phylink_expects_phy() method
- net: stmmac: check if MAC needs to attach to a PHY
- net: stmmac: remove redundant fixup to support fixed-link mode
- l2tp: generate correct module alias strings
- wifi: brcmfmac: Fix SDIO suspend/resume regression
- NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL
- nfsd: call op_release, even when op_func returns an error
- icmp: guard against too small mtu
- ALSA: hda/hdmi: Preserve the previous PCM device upon re-enablement
- net: don't let netpoll invoke NAPI if in xmit context
- [arm64,armhf] net: dsa: mv88e6xxx: Reset mv88e6393x force WD event bit
- sctp: check send stream number after wait_for_sndbuf
- net: qrtr: Do not do DEL_SERVER broadcast after DEL_CLIENT
- ipv6: Fix an uninit variable access bug in __ip6_make_skb()
- [x86] platform/x86: think-lmi: Fix memory leak when showing current
settings
- [x86] platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation
WMI strings
- [x86] platform/x86: think-lmi: Clean up display of current_value on
Thinkstation
- net: stmmac: fix up RX flow hash indirection table when setting channels
- sunrpc: only free unix grouplist after RCU settles
- NFSD: callback request does not use correct credential for AUTH_SYS
- ice: fix wrong fallback logic for FDIR
- ice: Reset FDIR counter in FDIR init stage
- raw: use net_hash_mix() in hash function
- raw: Fix NULL deref in raw_get_next().
- ping: Fix potentail NULL deref for /proc/net/icmp.
- ethtool: reset #lanes when lanes is omitted
- netlink: annotate lockless accesses to nlk->max_recvmsg_len
- [amd64,arm64] gve: Secure enough bytes in the first TX desc for all TCP
pkts
- [arm64] compat: Work around uninitialized variable warning
- net: stmmac: check fwnode for phy device before scanning for phy
- cxl/pci: Fix CDAT retrieval on big endian
- cxl/pci: Handle truncated CDAT header
- cxl/pci: Handle truncated CDAT entries
- cxl/pci: Handle excessive CDAT length
- [arm64,armhf] usb: xhci: tegra: fix sleep in atomic call
- xhci: Free the command allocated for setting LPM if we return early
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu
- USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs
- usb: typec: altmodes/displayport: Fix configure initial pin assignment
- USB: serial: option: add Telit FE990 compositions
- USB: serial: option: add Quectel RM500U-CN modem
- drivers: iio: adc: ltc2497: fix LSB shift
- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
- iio: buffer: correctly return bytes written in output buffers
- iio: buffer: make sure O_NONBLOCK is respected
- iio: light: cm32181: Unregister second I2C client if present
- [arm64] tty: serial: fsl_lpuart: avoid checking for transfer complete when
UARTCTRL_SBK is asserted in lpuart32_tx_empty
- nilfs2: fix potential UAF of struct nilfs_sc_info in
nilfs_segctor_thread()
- nilfs2: fix sysfs interface lifetime
- serial: 8250: Prevent starting up DMA Rx on THRI interrupt
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ALSA: hda/realtek: Add quirk for Clevo X370SNW
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
- x86/ACPI/boot: Use FADT version to check support for online capable
- [x86] KVM: x86: Clear "has_error_code", not "error_code", for RM exception
injection
- [x86] KVM: nVMX: Do not report error code when synthesizing VM-Exit from
Real Mode
- [arm64] coresight: etm4x: Do not access TRCIDR1 for identification
- [arm64] coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug
- blk-mq: directly poll requests
- iio: adc: ad7791: fix IRQ flags
- io_uring: fix return value when removing provided buffers
- io_uring: fix memory leak when removing provided buffers
- scsi: qla2xxx: Fix memory leak in qla2x00_probe_one()
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- nvme: fix discard support without oncs
- cifs: sanitize paths in cifs_update_super_prepath.
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- perf/core: Fix the same task check in perf_event_set_output
- ftrace: Mark get_lock_parent_ip() __always_inline
- ftrace: Fix issue that 'direct->addr' not restored in
modify_ftrace_direct()
- fs: drop peer group ids under namespace lock
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access
- can: isotp: fix race between isotp_sendsmg() and isotp_release()
- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events
- can: isotp: isotp_recvmsg(): use sock_recv_cmsgs() to get SOCK_RXQ_OVFL
infos
- ACPI: video: Add auto_detect arg to __acpi_video_get_backlight_type()
- ACPI: video: Make acpi_backlight=video work independent from GPU driver
- ACPI: video: Add acpi_backlight=video quirk for Apple iMac14,1 and
iMac14,2
- ACPI: video: Add acpi_backlight=video quirk for Lenovo ThinkPad W530
- net: stmmac: Add queue reset into stmmac_xdp_open() function
- tracing/synthetic: Fix races on freeing last_cmd
- tracing/timerlat: Notify new max thread latency
- tracing: Free error logs of tracing instances
- [x86] ASoC: hdac_hdmi: use set_stream() instead of set_tdm_slots()
- tracing/synthetic: Make lastcmd_mutex static
- mm: vmalloc: avoid warn_alloc noise caused by fatal signal
- wifi: mt76: ignore key disable commands
- [arm64,armhf] drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error
path
- drm/nouveau/disp: Support more modes by checking with lower bpc
- [x86] drm/i915: Fix context runtime accounting
- [x86] drm/i915: fix race condition UAF in i915_perf_add_config_ioctl
- ring-buffer: Fix race while reader and writer are on the same page
- mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()
- mm/hugetlb: fix uffd wr-protection for CoW optimization path
- maple_tree: fix get wrong data_end in mtree_lookup_walk()
- maple_tree: fix a potential concurrency bug in RCU mode
- blk-throttle: Fix that bps of child could exceed bps limited in parent
- drm/amd/display: Clear MST topology if it fails to resume
- drm/amdgpu: for S0ix, skip SDMA 5.x+ suspend/resume
- drm/amdgpu: skip psp suspend for IMU enabled ASICs mode2 reset
- [x86] drm/display/dp_mst: Handle old/new payload states in
drm_dp_remove_payload()
- [x86] drm/i915/dp_mst: Fix payload removal during output disabling
- [x86] drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR
- [x86] drm/i915: Split icl_color_commit_noarm() from
skl_color_commit_noarm()
- mm: take a page reference when removing device exclusive entries
- maple_tree: remove GFP_ZERO from kmem_cache_alloc() and
kmem_cache_alloc_bulk()
- maple_tree: fix potential rcu issue
- maple_tree: reduce user error potential
- maple_tree: fix handle of invalidated state in mas_wr_store_setup()
- maple_tree: fix mas_prev() and mas_find() state handling
- maple_tree: be more cautious about dead nodes
- maple_tree: refine ma_state init from mas_start()
- maple_tree: detect dead nodes in mas_start()
- maple_tree: fix freeing of nodes in rcu mode
- maple_tree: remove extra smp_wmb() from mas_dead_leaves()
- maple_tree: add smp_rmb() to dead node detection
- maple_tree: add RCU lock checking to rcu callback functions
- mm: enable maple tree RCU mode by default.
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.25
- Revert "pinctrl: amd: Disable and mask interrupts on resume"
- drm/amd/display: Pass the right info to drm_dp_remove_payload
- ALSA: emu10k1: fix capture interrupt handler unlinking
- ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard
- ALSA: i2c/cs8427: fix iec958 mixer control deactivation
- ALSA: hda: patch_realtek: add quirk for Asus N7601ZM
- ALSA: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2
- ALSA: firewire-tascam: add missing unwind goto in
snd_tscm_stream_start_duplex()
- ALSA: emu10k1: don't create old pass-through playback device on Audigy
- ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards
- ALSA: hda/hdmi: disable KAE for Intel DG2
- Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}
- Bluetooth: Fix race condition in hidp_session_thread
- bluetooth: btbcm: Fix logic error in forming the board name.
- Bluetooth: Free potentially unfreed SCO connection
- Bluetooth: hci_conn: Fix possible UAF
- btrfs: restore the thread_pool= behavior in remount for the end I/O
workqueues
- btrfs: fix fast csum implementation detection
- fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace
- mtdblock: tolerate corrected bit-flips
- [armhf] mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
- [armhf] mtd: rawnand: stm32_fmc2: use timings.mode instead of checking
tRC_min
- [arm64] KVM: arm64: PMU: Restore the guest's EL0 event counting after
migration
- fbcon: Fix error paths in set_con2fb_map
- fbcon: set_con2fb_map needs to set con2fb_map!
- [x86] drm/i915/dsi: fix DSS CTL register offsets for TGL+
- RDMA/irdma: Do not generate SW completions for NOPs
- RDMA/irdma: Fix memory leak of PBLE objects
- RDMA/irdma: Increase iWARP CM default rexmit count
- RDMA/irdma: Add ipv4 check to irdma_find_listener()
- IB/mlx5: Add support for 400G_8X lane speed
- RDMA/cma: Allow UD qp_type to join multicast only
- bpf: tcp: Use sock_gen_put instead of sock_put in bpf_iter_tcp
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race
condition (CVE-2023-1859)
- [arm64] bpf, arm64: Fixed a BTI error on returning to patched function
- [arm64] KVM: arm64: Initialise hypervisor copies of host symbols
unconditionally
- [arm64] KVM: arm64: Advertise ID_AA64PFR0_EL1.CSV2/3 to protected VMs
- niu: Fix missing unwind goto in niu_alloc_channels()
- tcp: restrict net.ipv4.tcp_app_win
- bonding: fix ns validation on backup slaves
- iavf: refactor VLAN filter states
- iavf: remove active_cvlans and active_svlans bitmaps
- net: openvswitch: fix race on port output
- Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure
- Bluetooth: Fix printing errors if LE Connection times out
- Bluetooth: SCO: Fix possible circular locking dependency
sco_sock_getsockopt
- Bluetooth: Set ISO Data Path on broadcast sink
- [armhf] drm/armada: Fix a potential double free in an error handling path
- qlcnic: check pci_reset_function result
- net: wwan: iosm: Fix error handling path in ipc_pcie_probe()
- cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex
- net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
- sctp: fix a potential overflow in sctp_ifwdtsn_skip
- RDMA/core: Fix GID entry ref leak when create_ah fails
- udp6: fix potential access to stale information
- [arm64] net: macb: fix a memory corruption in extended buffer descriptor
mode
- skbuff: Fix a race between coalescing and releasing SKBs
- [arm64] power: supply: rk817: Fix unsigned comparison with less than zero
- [arm64] power: supply: cros_usbpd: reclassify "default case!" as debug
- [x86] power: supply: axp288_fuel_gauge: Added check for negative values
- wifi: mwifiex: mark OF related data as maybe unused
- [arm64] i2c: imx-lpi2c: clean rx/tx buffers upon new message
- efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L
- [x86] ACPI: video: Add backlight=native DMI quirk for Acer Aspire 3830TG
- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F
- [arm64] hwmon: (xgene) Fix ioremap and memremap leak
- [amd64] verify_pefile: relax wrapper length check
- asymmetric_keys: log on fatal failures in PE/pkcs7
- nvme: send Identify with CNS 06h only to I/O controllers
- wifi: iwlwifi: mvm: fix mvmtxq->stopped handling
- wifi: iwlwifi: mvm: protect TXQ list manipulation
- drm/amdgpu: add mes resume when do gfx post soft reset
- drm/amdgpu: Force signal hw_fences that are embedded in non-sched jobs
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
- ACPI: resource: Add Medion S17413 to IRQ override quirk
- [x86] hyperv: Move VMCB enlightenment definitions to hyperv-tlfs.h
- [x86] KVM: SVM: Add a proper field for Hyper-V VMCB enlightenments
- [x86] hyperv: KVM: Rename "hv_enlightenments" to "hv_vmcb_enlightenments"
- [x86] KVM: SVM: Flush Hyper-V TLB when required
- tracing: Add trace_array_puts() to write into instance
- tracing: Have tracing_snapshot_instance_cond() write errors to the
appropriate instance
- maple_tree: fix write memory barrier of nodes once dead for RCU mode
- ksmbd: avoid out of bounds access in decode_preauth_ctxt()
- [riscv64] add icache flush for nommu sigreturn trampoline
- [amd64] HID: intel-ish-hid: Fix kernel panic during warm reset
- net: sfp: initialize sfp->i2c_block_size at sfp allocation
- scsi: ses: Handle enclosure with just a primary component gracefully
- [x86] PCI: Add quirk for AMD XHCI controller that loses MSI-X state in
D3hot
- cgroup: fix display of forceidle time at root
- cgroup/cpuset: Fix partition root's cpuset.cpus update bug
- cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach()
- mptcp: use mptcp_schedule_work instead of open-coding it
- mptcp: stricter state check in mptcp_worker
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: Fix deadlock caused by recursively holding work_sem
- [powerpc*] papr_scm: Update the NUMA distance table for the target node
- sched/fair: Fix imbalance overflow
- [x86] rtc: Remove __init for runtime functions
- i2c: ocores: generate stop condition after timeout in polling mode
- cifs: fix negotiate context parsing
- nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN
- nvme-pci: add NVME_QUIRK_BOGUS_NID for T-FORCE Z330 SSD
- cgroup/cpuset: Skip spread flags update on v2
- cgroup/cpuset: Make cpuset_fork() handle CLONE_INTO_CGROUP properly
- cgroup/cpuset: Add cpuset_can_fork() and cpuset_cancel_fork() methods
[ Salvatore Bonaccorso ]
* Bump ABI to 8
* [arm64] drivers/net/can: Enable CAN_C_CAN, CAN_C_CAN_PLATFORM, CAN_M_CAN and
CAN_M_CAN_PLATFORM as module.
Move configuration enablement to arm64 specific configuration.
[ Cyril Brulebois ]
* fbdev/offb: Update expected device name (Closes: #
1033058)
This fixes the hang/black screen in Debian Installer on ppc64el, with
thanks to Frédéric Bonnard for the detailed bug report.
[dgit import unpatched linux 6.1.25-1]
projects / linux.git / commit