-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 02 Jan 2025 17:09:32 +0100
Source: linux
Architecture: source
Version: 6.12.8-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Kernel Team <
debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <
carnil@debian.org>
Closes: 1087900
Changes:
linux (6.12.8-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.7
- net: sched: fix ordering of qlen adjustment (CVE-2024-53164)
- net: stmmac: fix TSO DMA API usage causing oops (CVE-2024-56719)
- firmware: arm_ffa: Fix the race around setting ffa_dev->properties
- [riscv64] KVM: Fix csr_write -> csr_set for HVIEN PMU overflow bit
- sched/fair: Fix NEXT_BUDDY
- sched/fair: Fix sched_can_stop_tick() for fair tasks
- sched/eevdf: More PELT vs DELAYED_DEQUEUE
- [amd64] p2sb: Factor out p2sb_read_from_cache()
- [amd64] p2sb: Introduce the global flag p2sb_hidden_by_bios
- [amd64] p2sb: Move P2SB hide and unhide code to p2sb_scan_and_cache()
- [amd64] p2sb: Do not scan and remove the P2SB device when it is unhidden
- i2c: pnx: Fix timeout in wait functions
- [s390x] ipl: Fix never less than zero warning
- erofs: fix PSI memstall accounting
- sched/dlserver: Fix dlserver double enqueue
- sched/dlserver: Fix dlserver time accounting
- [s390x] mm: Consider KMSAN modules metadata for paging levels
- erofs: add erofs_sb_free() helper
- erofs: use `struct erofs_device_info` for the primary device
- erofs: reference `struct erofs_device_info` for erofs_map_dev
- erofs: use buffered I/O for file-backed mounts by default
- xfs: sb_spino_align is not verified
- xfs: fix sparse inode limits on runt AG
- xfs: fix off-by-one error in fsmap's end_daddr usage
- xfs: fix sb_spino_align checks for large fsblock sizes
- xfs: fix zero byte checking in the superblock scrubber
- cxl/pci: Fix potential bogus return value upon successful probing
- cxl/region: Fix region creation for greater than x2 switches
- net/smc: protect link down work from execute after lgr freed
(CVE-2024-56718)
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal
msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal
msg
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check return value of sock_recvmsg when draining clc data
- [arm64] net: mscc: ocelot: fix incorrect IFH SRC_PORT field in
ocelot_ifh_set_basic()
- ionic: Fix netdev notifier unregister on failure (CVE-2024-56715)
- ionic: no double destroy workqueue (CVE-2024-56714)
- ionic: use ee->offset when returning sprom data
- ksmbd: count all requests in req_running counter
- ksmbd: fix broken transfers when exceeding max simultaneous operations
- netdev: fix repeated netlink messages in queue dump
- netdev: fix repeated netlink messages in queue stats
- team: Fix feature exposure when no ports are present
- [amd64,arm64] net: hinic: Fix cleanup in create_rxqs/txqs()
- net: ethernet: bgmac-platform: fix an OF node reference leak
- can: m_can: set init flag earlier in probe
- can: m_can: fix missed interrupts with m_can_pci
- ipvs: Fix clamp() of ip_vs_conn_tab on small memory systems
- netfilter: ipset: Fix for recursive locking warning
- net: dsa: restore dsa_software_vlan_untag() ability to operate on
VLAN-untagged traffic
- netdev-genl: avoid empty messages in queue dump
- psample: adjust size if rate_as_probability is set
- net: mdiobus: fix an OF node reference leak
- [arm64,armhf] mmc: sdhci-tegra: Remove
SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
- [arm64] mmc: mtk-sd: disable wakeup in .remove() and in the error path of
.probe()
- irqchip/gic-v3: Work around insecure GIC integrations
- [amd64] EDAC/amd64: Simplify ECC check on unified memory controllers
- [arm64] KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be
overridden
- [amd64] KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init
- net: tun: fix tun_napi_alloc_frags()
- chelsio/chtls: prevent potential integer overflow on 32bit
- net: mctp: handle skb cleanup on sock_queue failures
- block: Revert "block: Fix potential deadlock while freezing queue and
acquiring sysfs_lock"
- i2c: riic: Always round-up when calculating bus period
- efivarfs: Fix error on non-existent file
- USB: serial: option: add TCL IK512 MBIM & ECM
- USB: serial: option: add MeiG Smart SLM770A
- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
- USB: serial: option: add MediaTek T7XX compositions
- USB: serial: option: add Telit FE910C04 rmnet compositions
- xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
- [amd64] thunderbolt: Add support for Intel Panther Lake-M/P
- [amd64] thunderbolt: Improve redrive mode handling
- [amd64] thunderbolt: Don't display nvm_version unless upgrade supported
- drm/display: use ERR_PTR on DP tunnel manager creation fail
- drm/amd: Update strapping for NBIO 2.5.0
- drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
- drm/amdgpu: fix amdgpu_coredump
- drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
- [amd64] udmabuf: udmabuf_create pin folio codestyle cleanup
- [amd64] udmabuf: fix memory leak on last export_udmabuf() error path
- dma-buf: Fix __dma_buf_debugfs_list_del argument for !CONFIG_DEBUG_FS
- [amd64] i915/guc: Reset engine utilization buffer before registration
- [amd64] i915/guc: Ensure busyness counter increases motonically
- [amd64] i915/guc: Accumulate active runtime on gt reset
- drm/amdgpu: don't access invalid sched
- hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit
Registers
- hwmon: (tmp513) Fix Current Register value interpretation
- hwmon: (tmp513) Fix interpretation of values of Temperature Result and
Limit Registers
- block: avoid to reuse `hctx` not removed from cpuhp callback list
- trace/ring-buffer: Do not use TP_printk() formatting for boot mapped
buffers
- drm/amdgpu/nbio7.11: fix IP version check
- drm/amdgpu/nbio7.7: fix IP version check
- drm/amdgpu/smu14.0.2: fix IP version check
- zram: refuse to use zero sized block device as backing device
- zram: fix uninitialized ZRAM not releasing backing device
- vmalloc: fix accounting with i915
- mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in
split_large_buddy()
- ring-buffer: Fix overflow in __rb_map_vma
- alloc_tag: fix set_codetag_empty() when !CONFIG_MEM_ALLOC_PROFILING_DEBUG
- btrfs: split bios to the fs sector size boundary
- btrfs: fix improper generation check in snapshot delete
- btrfs: tree-checker: reject inline extent items with 0 ref count
- [s390x] mm: Fix DirectMap accounting
- drm/amdgpu/nbio7.0: fix IP version check
- drm/amdgpu/gfx12: fix IP version check
- drm/amdgpu/mmhub4.1: fix IP version check
- fgraph: Still initialize idle shadow stacks when starting
- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
- tools: hv: Fix a complier warning in the fcopy uio daemon
- [x86] hyperv: Fix hv tsc page based sched_clock for hibernation
- [x86] KVM: x86: Play nice with protected guests in
complete_hypercall_exit()
- smb: client: fix TCP timers deadlock after rmmod
- accel/ivpu: Fix general protection fault in ivpu_bo_list()
- accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal()
- tracing: Fix test_event_printk() to process entire print argument
- tracing: Add missing helper functions in event pointer dereference check
- tracing: Add "%s" check in test_event_printk()
- tracing: Check "%s" dereference via the field and not the TP_printk format
- io_uring: Fix registered ring file refcount leak
- io_uring: check if iowq is killed before queuing (CVE-2024-56709)
- NFS/pnfs: Fix a live lock between recalled layouts and layoutget
- [x86] KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits
- of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent()
- of/irq: Fix using uninitialized variable @addr_len in API
of_irq_parse_one()
- ocfs2: fix the space leak in LA when releasing LA
- nilfs2: fix buffer head leaks in calls to truncate_inode_pages()
- nilfs2: prevent use of deleted inode
- [amd64] udmabuf: fix racy memfd sealing check
- [amd64] udmabuf: also check for F_SEAL_FUTURE_WRITE
- of: property: fw_devlink: Do not use interrupt-parent directly
- of: address: Preserve the flags portion on 1:1 dma-ranges mapping
- of: Fix error path in of_parse_phandle_with_args_map()
- of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
- ceph: give up on paths longer than PATH_MAX
- ceph: validate snapdirname option length when mounting
- ceph: improve error handling and short/overflow-read logic in
__ceph_sync_read()
- ceph: fix memory leaks in __ceph_sync_read()
- ceph: fix memory leak in ceph_direct_read_write() (CVE-2024-56710)
- mm: use aligned address in clear_gigantic_page()
- mm: use aligned address in copy_user_gigantic_page()
- mm: shmem: fix ShmemHugePages at swapout
- mm: convert partially_mapped set/clear operations to be atomic
- epoll: Add synchronous wakeup support for ep_poll_callback
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.8
- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
- ceph: allocate sparse_ext map only for sparse reads
- [arm64] dts: broadcom: Fix L2 linesize for Raspberry Pi 5
- bpf: Fix bpf_get_smp_processor_id() on !CONFIG_SMP
- fork: avoid inappropriate uprobe access to invalid mm
- mm/vmstat: fix a W=1 clang compiler warning
- smb: client: Deduplicate "select NETFS_SUPPORT" in Kconfig
- smb: fix bytes written value in /proc/fs/cifs/Stats
- tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
- tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection
- bpf: Check negative offsets in __bpf_skb_min_len()
- nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
- nfsd: restore callback functionality for NFSv4.0
- mtd: diskonchip: Cast an operand to prevent potential overflow
- [arm64] phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP
- phy: core: Fix an OF node refcount leakage in _of_phy_get()
- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
- phy: core: Fix that API devm_phy_put() fails to release the phy
- phy: core: Fix that API devm_of_phy_provider_unregister() fails to
unregister the phy provider
- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
- phy: usb: Toggle the PHY power during init
- [arm64] phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime
PM
- [arm64] phy: rockchip: naneng-combphy: fix phy reset
- ALSA: memalloc: prefer dma_mapping_error() over explicit address checking
- [arm64,armhf] dmaengine: mv_xor: fix child node refcount handling in early
exit
- [amd64] dmaengine: dw: Select only supported masters for ACPI devices
- dmaengine: amd: qdma: Remove using the private get and set dma_ops APIs
- [arm64] dmaengine: fsl-edma: implement the cleanup path of
fsl_edma3_attach_pd()
- [amd64] ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP
- [amd64] platform/chrome: cros_ec_lpc: fix product identity for early
Framework Laptops
- [amd64] ASoC: amd: ps: Fix for enabling DMIC on acp63 platform via _DSD
entry
- [amd64] ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 21QA and 21QB
- ASoC: dt-bindings: realtek,rt5645: Fix CPVDD voltage comment
- [amd64] ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 21Q6 and 21Q7
- [powerpc*] pseries/vas: Add close() callback in vas_vm_ops struct
- power: supply: bq24190: Fix BQ24296 Vbus regulator support
- stddef: make __struct_group() UAPI C++-friendly
- tracing/kprobe: Make trace_kprobe's module callback called after
jump_label update
- watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
- watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler
- Revert "watchdog: s3c2410_wdt: use exynos_get_pmu_regmap_by_phandle() for
PMU regs"
- watchdog: mediatek: Add support for MT6735 TOPRGU/WDT
- scsi: qla1280: Fix hw revision numbering for ISP1020/1040
- scsi: megaraid_sas: Fix for a potential deadlock
- udf: Skip parent dir link count update if corrupted
- udf: Verify inode link counts before performing rename
- ALSA: ump: Don't open legacy substream for an inactive group
- ALSA: ump: Indicate the inactive group in legacy substream names
- ALSA: ump: Update legacy substream names upon FB info update
- ALSA: hda/conexant: fix Z60MR100 startup pop issue
- ALSA: sh: Use standard helper for buffer accesses
- smb: server: Fix building with GCC 15
- regmap: Use correct format specifier for logging range errors
- [x86] platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
- bpf: Zero index arg error string for dynptr and iter
- spi: intel: Add Panther Lake SPI controller support
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver
load time
- scsi: mpi3mr: Synchronize access to ioctl data buffer
- scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
- scsi: mpi3mr: Start controller indexing from 0
- scsi: mpi3mr: Handling of fault code for insufficient power
- scsi: storvsc: Do not flag MAINTENANCE_IN return of
SRB_STATUS_DATA_OVERRUN as an error
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- [arm64,armhf] spi: omap2-mcspi: Fix the IS_ERR() bug for
devm_clk_get_optional_enabled()
- drm/dp_mst: Ensure mst_primary pointer is valid in
drm_dp_mst_handle_up_req()
- virtio-blk: don't keep queue frozen during system suspend
- blk-mq: register cpuhp callback after hctx is added to xarray table
- wifi: iwlwifi: be less noisy if the NIC is dead in S3
- ublk: detach gendisk from ublk device if add_disk() fails
- drm/xe: Take PM ref in delayed snapshot capture worker
- drm/xe: Move the coredump registration to the worker thread
- objtool: Add bch2_trans_unlocked_error() to bcachefs noreturns
- freezer, sched: Report frozen tasks as 'D' instead of 'R'
- [x86] perf/x86/intel/uncore: Add Clearwater Forest support
- tracing: Constify string literal data member in struct trace_event_call
- tracing: Prevent bad count for tracing_cpumask_write
- rtla/timerlat: Fix histogram ALL for zero samples
- io_uring/sqpoll: fix sqpoll error handling races
- i2c: microchip-core: actually use repeated sends
- [x86] fred: Clear WFE in missing-ENDBRANCH #CPs
- virt: tdx-guest: Just leak decrypted memory on unrecoverable errors
- PCI/MSI: Handle lack of irqdomain gracefully
- [x86] perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC
- i2c: imx: add imx7d compatible string for applying erratum ERR007805
- i2c: microchip-core: fix "ghost" detections
- [x86] perf/x86/intel/ds: Add PEBS format 6
- power: supply: cros_charge-control: add mutex for driver data
- power: supply: cros_charge-control: allow start_threshold == end_threshold
- power: supply: cros_charge-control: hide start threshold on v2 cmd
- power: supply: gpio-charger: Fix set charge current limits
- btrfs: fix race with memory mapped writes when activating swap file
- btrfs: avoid monopolizing a core when activating a swap file
- btrfs: fix swap file activation failure due to extents that used to be
shared
- btrfs: fix transaction atomicity bug when enabling simple quotas
- btrfs: sysfs: fix direct super block member reads
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- btrfs: check folio mapping after unlock in put_file_data()
- btrfs: check folio mapping after unlock in relocate_one_folio()
- Bluetooth: btusb: mediatek: move Bluetooth power off command position
- Bluetooth: btusb: mediatek: add callback function in btusb_disconnect
- Bluetooth: btusb: mediatek: add intf release flow when usb disconnect
- Bluetooth: btusb: mediatek: change the conditions for ISO interface
- ALSA: ump: Shut up truncated string warning
- ALSA: sh: Fix wrong argument order for copy_from_iter()
.
[ Salvatore Bonaccorso ]
* debian/salsa-ci.yml: Include run of .build-after-script from common
pipeline.
* nfsd: fix legacy client tracking initialization (Closes: #1087900)
* drivers/nvme/host: Enable NVME_HOST_AUTH
* drivers/nvme/target: Enable NVME_TARGET_AUTH
* drivers/nvme/host: Enable NVME_TCP_TLS
* drivers/nvme/target: Enable NVME_TARGET_TCP_TLS
* debian/salsa-ci.yml: Reference .build-after-script from after_script
section
Checksums-Sha1:
85b6073c568410bce59742a2393689c2e23d38f7 204594 linux_6.12.8-1.dsc
4218ac7bd0d7c736a6e369e92f2f7c22a3496912 150933284 linux_6.12.8.orig.tar.xz
0707a121b88544861328a80a1032442bc5f6e753 1566816 linux_6.12.8-1.debian.tar.xz
2049068fe4b465200571c3feef35c834032d785d 7473 linux_6.12.8-1_source.buildinfo Checksums-Sha256:
b3bb191e2a309680cd7990bc7c2d1df6016fcae41aa479fbecef12f69d74a616 204594 linux_6.12.8-1.dsc
3f258de1f486f02871255d100e8cdf0b9daec4d14994b9fe46184d984120f254 150933284 linux_6.12.8.orig.tar.xz
e3ca49b6bc0e0db2844bd85c72f623e805a1c9dfe08489164a046bd38c845f13 1566816 linux_6.12.8-1.debian.tar.xz
0697e3d45e99b115c139ace08fc0aa31c557439c2de757f41d73db74ea18fc12 7473 linux_6.12.8-1_source.buildinfo
Files:
058c74935487581b319197a053adb68f 204594 kernel optional linux_6.12.8-1.dsc
39b617f9d4fa65c13002a3254c8afacc 150933284 kernel optional linux_6.12.8.orig.tar.xz
51749e08d75bfad2ca09b84ce168bf83 1566816 kernel optional linux_6.12.8-1.debian.tar.xz
37eb37bab09f189b3484e03251b0a4b8 7473 kernel optional linux_6.12.8-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmd2uzdfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89ErZgP/RnXW6NIzDUgAXE030sbpJhzIyyPAPPy mQl19Ak6o9YKMA+2cuuY7nOHnZGI4lhaqYKBa5taEifnaBB0xNoeSBcekkT6owWh CboVPN/QRzui7V2Yr+N2RNsc++GFeOHzl8f3/8cSi4CwUZ35GsthMTWuE3J5sNDN qkUlpIEusL0jVtllnx9MOU0Mj9/779FeVnDlX8Wt5INFXyxzQpMYucQAHQaSmqHD suNp3iFm63L/KtryUQdyJarC3Zc3wtxJeUKcJ7wbzTqBThqbwDBVipbcuuqZIGRc XrcGj8qdrdLj0geEtObsglyzgnQikb6A05K1XYFq3Z8Xj68xziTLCM5/jjBAqisb fwA9JeZc23vQGWTI9vXhKk/W3cblF1A9K3n4uE5e20ykOI5v3jZ1nWniW1EfYlt1 RgGpnSC4Au2XtebTDx679NVX/vutcDbcQMikgzvdWTFNAOpAuW78mc+aBhRSesH4 ziUZT9IWLXb+hnsSULgzNYV0nGrMsrrxfbH614iawurGk3xQVUKssqPWpGqJsBj+ cVaGaHgyca4Etvlk5mT2Qj5Bxi/ku07E+bUv0KC4T0gJexEuNIMeaGzKzCSCtwKB 86on9uQsoYTL/bDfXSFfdkO/BonMIHzLiv/PtD6ee2HOgxdX5tmQQHWUkyjeE6Is
f07RwkYHhjRs
=NJwS
-----END PGP SIGNATURE-----
--==============13365188317181526=Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCZ3b/ZAAKCRCb9qggYcy5 IZGFAP9w8FY2f1cHppcaSFWWVrZe+Uf9x3B48YIAN+lGUHl6oAD/VQMq3aXktdHs cR63fvu1cUTFCZAhCSj62cug18YAsQo=7tjG
-----END PGP SIGNATURE-----
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)