• linux_6.1.76-1_source.changes ACCEPTED into proposed-updates (2/2)

    From Debian FTP Masters@21:1/5 to All on Thu Feb 1 10:50:02 2024
    [continued from previous message]

    - dt-bindings: media: mediatek: mdp3: correct RDMA and WROT node with
    generic names
    - wifi: mt76: mt7921: fix country count limitation for CLC
    - block: Set memalloc_noio to false on device_add_disk() error path
    - [arm64] scsi: hisi_sas: Replace with standard error code return value
    - [arm64] scsi: hisi_sas: Rollback some operations if FLR failed
    - [arm64] scsi: hisi_sas: Correct the number of global debugfs registers
    - [armhf] dts: stm32: don't mix SCMI and non-SCMI board compatibles
    - ipmr: support IP_PKTINFO on cache report IGMP msg
    - virtio/vsock: fix logic which reduces credit update messages
    - dma-mapping: clear dev->dma_mem to NULL after freeing it
    - [arm64] dts: qcom: sm8150-hdk: fix SS USB regulators
    - block: add check of 'minors' and 'first_minor' in device_add_disk()
    - wifi: rtlwifi: add calculate_bit_shift()
    - wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift()
    - wifi: rtlwifi: rtl8192c: using calculate_bit_shift()
    - wifi: rtlwifi: rtl8192cu: using calculate_bit_shift()
    - wifi: rtlwifi: rtl8192ce: using calculate_bit_shift()
    - wifi: rtlwifi: rtl8192de: using calculate_bit_shift()
    - wifi: rtlwifi: rtl8192ee: using calculate_bit_shift()
    - wifi: rtlwifi: rtl8192se: using calculate_bit_shift()
    - wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request
    - wifi: iwlwifi: mvm: send TX path flush in rfkill
    - netfilter: nf_tables: mark newset as dead on transaction abort
    - Bluetooth: Fix bogus check for re-auth no supported with non-ssp
    - Bluetooth: btmtkuart: fix recv_buf() return value
    - block: make BLK_DEF_MAX_SECTORS unsigned
    - null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS
    - bpf: sockmap, fix proto update hook to avoid dup calls
    - sctp: support MSG_ERRQUEUE flag in recvmsg()
    - sctp: fix busy polling
    - net/sched: act_ct: fix skb leak and crash on ooo frags
    - mlxbf_gige: Fix intermittent no ip issue
    - mlxbf_gige: Enable the GigE port in mlxbf_gige_open
    - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
    - [armhf] Revert "drm/omapdrm: Annotate dma-fence critical section in commit
    path"
    - [arm64,armhf] drm/panfrost: Really power off GPU cores in
    panfrost_gpu_power_off()
    - RDMA/usnic: Silence uninitialized symbol smatch warnings
    - [arm64] RDMA/hns: Fix inappropriate err code for unsupported operations
    - drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer
    - drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
    - drm/tilcdc: Fix irq free on unload
    - media: pvrusb2: fix use after free on context disconnection
    - media: mtk-jpegdec: export jpeg decoder functions
    - media: mtk-jpeg: Remove cancel worker in mtk_jpeg_remove to avoid the
    crash of multi-core JPEG devices
    - media: verisilicon: Hook the (TRY_)DECODER_CMD stateless ioctls
    - media: rkvdec: Hook the (TRY_)DECODER_CMD stateless ioctls
    - drm/bridge: Fix typo in post_disable() description
    - f2fs: fix to avoid dirent corruption
    - drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg()
    - drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check()
    - drm/radeon: check return value of radeon_ring_lock()
    - [arm64] drm/msm/mdp4: flush vblank event on disable
    - [arm64] drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks
    - drm/drv: propagate errors from drm_modeset_register_all()
    - [x86] ASoC: Intel: glk_rt5682_max98357a: fix board id mismatch
    - [arm64,armhf] drm/panfrost: Ignore core_mask for poweroff and disable
    PWRTRANS irq
    - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init()
    - drm/radeon/dpm: fix a memleak in sumo_parse_power_table
    - drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table
    - drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable
    - drm/bridge: tc358767: Fix return value on error case
    - media: cx231xx: fix a memleak in cx231xx_init_isoc
    - [arm64] RDMA/hns: Fix memory leak in free_mr_init()
    - drm/panel: st7701: Fix AVCL calculation
    - f2fs: fix to wait on block writeback for post_read case
    - f2fs: fix to check compress file in f2fs_move_file_range()
    - f2fs: fix to update iostat correctly in f2fs_filemap_fault()
    - media: dvbdev: drop refcount on error path in dvb_device_open()
    - media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling
    path of m88ds3103_probe()
    - [arm64] drm/msm/dpu: Set input_sel bit for INTF
    - [arm64] drm/msm/dpu: Drop enable and frame_count parameters from
    dpu_hw_setup_misr()
    - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL
    - drm/amd/pm: fix a double-free in si_dpm_init
    - drivers/amd/pm: fix a use-after-free in kv_parse_power_table
    - gpu/drm/radeon: fix two memleaks in radeon_vm_init
    - drm/amd/pm: fix a double-free in amdgpu_parse_extended_power_table
    - f2fs: fix to check return value of f2fs_recover_xattr_data
    - dt-bindings: clock: Update the videocc resets for sm8150
    - [arm64] drivers: clk: zynqmp: calculate closest mux rate
    - [arm64] drivers: clk: zynqmp: update divider round rate logic
    - watchdog: set cdev owner before adding
    - watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO
    - watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling
    - watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused
    - [arm64] clk: si5341: fix an error code problem in
    si5341_output_clk_set_rate
    - accel/habanalabs: fix information leak in sec_attest_info()
    (CVE-2023-50431)
    - clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw
    - ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[]
    - ALSA: scarlett2: Add missing error check to scarlett2_config_save()
    - ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()
    - ALSA: scarlett2: Allow passing any output to line_out_remap()
    - ALSA: scarlett2: Add missing error checks to *_ctl_get()
    - ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
    - IB/iser: Prevent invalidating wrong MR
    - drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init
    - ksmbd: validate the zero field of packet header
    - of: Fix double free in of_parse_phandle_with_args_map
    - keys, dns: Fix size check of V1 server-list header
    - [arm*] binder: fix async space check for 0-sized buffers
    - [arm*] binder: fix unused alloc->free_async_space
    - [mipel*] smp: Call rcutree_report_cpu_starting() earlier
    - Input: atkbd - use ab83 as id when skipping the getid command
    - xen-netback: don't produce zero-size SKB frags (CVE-2023-46838)
    - [arm*] binder: fix race between mmput() and do_exit()
    - [arm64,armhf] clocksource/drivers/timer-ti-dm: Fix make W=n kerneldoc
    warnings
    - [powerpc*] 64s: Increase default stack size to 32KB
    - tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
    - [armhf] usb: phy: mxs: remove CONFIG_USB_OTG condition for
    mxs_phy_is_otg_host()
    - [arm64,armhf] usb: dwc: ep0: Update request status in
    dwc3_ep0_stall_restart
    - [arm64,armhf] Revert "usb: dwc3: Soft reset phy on probe for host"
    - [arm64,armhf] Revert "usb: dwc3: don't reset device side if dwc3 was
    configured as host-only"
    - [arm64,armhf] usb: chipidea: wait controller resume finished for wakeup
    irq
    - Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs"
    - usb: typec: class: fix typec_altmode_put_partner to put plugs
    - usb: mon: Fix atomicity violation in mon_bin_vma_fault
    - serial: core: fix sanitizing check for RTS settings
    - serial: core: make sure RS485 cannot be enabled when it is not supported
    - [arm64,armhf] serial: 8250_bcm2835aux: Restore clock error handling
    - serial: core, imx: do not set RS485 enabled if it is not supported
    - [arm64,armhf] serial: imx: Ensure that imx_uart_rs485_config() is called
    with enabled clock
    - serial: 8250_exar: Set missing rs485_supported flag
    - [armhf] serial: omap: do not override settings for RS485 support
    - drm/vmwgfx: Fix possible invalid drm gem put calls
    - drm/vmwgfx: Keep a gem reference to user bos in surfaces (CVE-2023-5633)
    - ALSA: oxygen: Fix right channel of capture volume mixer
    - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx
    - ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on HP
    ZBook
    - ALSA: hda/realtek: Enable headset mic on Lenovo M70 Gen5
    - ksmbd: validate mech token in session setup
    - ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
    - ksmbd: only v2 leases handle the directory
    - io_uring/rw: ensure io->bytes_done is always initialized
    - fbdev: flush deferred work in fb_deferred_io_fsync()
    - fbdev: flush deferred IO before closing
    - scsi: ufs: core: Simplify power management during async scan
    - scsi: target: core: add missing file_{start,end}_write()
    - scsi: mpi3mr: Refresh sdev queue depth after controller reset
    - scsi: mpi3mr: Block PEL Enable Command on Controller Reset and
    Unrecoverable State
    - drm/amd: Enable PCIe PME from D3
    - block: add check that partition length needs to be aligned with block size
    - block: Fix iterating over an empty bio with bio_for_each_folio_all
    - netfilter: nf_tables: check if catch-all set element is active in next
    generation (CVE-2024-1085)
    - pwm: Fix out-of-bounds access in of_pwm_single_xlate()
    - md/raid1: Use blk_opf_t for read and write operations
    - rootfs: Fix support for rootfstype= when root= is given
    - Bluetooth: Fix atomicity violation in {min,max}_key_size_set
    - bpf: Fix re-attachment branch in bpf_tracing_prog_attach
    - [arm64] iommu/arm-smmu-qcom: Add missing GMU entry to match table
    - iommu/dma: Trace bounce buffer usage when mapping buffers
    - wifi: mt76: fix broken precal loading from MTD for mt7915
    - wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code
    - wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors
    - wifi: mwifiex: configure BSSID consistently when starting AP
    - Revert "net: rtnetlink: Enslave device before bringing it up"
    - cxl/port: Fix decoder initialization when nr_targets > interleave_ways
    - PCI/P2PDMA: Remove reference to pci_p2pdma_map_sg()
    - [x86] kvm: Do not try to disable kvmclock if it was not enabled
    - [arm64] KVM: arm64: vgic-v4: Restore pending state on host userspace write
    - [arm64] KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
    - iio: adc: ad7091r: Pass iio_dev to event handler
    - HID: wacom: Correct behavior when processing some confidence == false
    touches
    - mfd: syscon: Fix null pointer dereference in of_syscon_register()
    - [x86] mfd: intel-lpss: Fix the fractional clock divider flags
    - [mipsel] Fix incorrect max_low_pfn adjustment
    - [arm64] power: supply: cw2015: correct time_to_empty units in sysfs
    - [arm64] serial: 8250: omap: Don't skip resource freeing if
    pm_runtime_resume_and_get() failed
    - libapi: Add missing linux/types.h header to get the __u64 type on io.h
    - base/node.c: initialize the accessor list before registering
    - acpi: property: Let args be NULL in __acpi_node_get_property_reference
    - software node: Let args be NULL in software_node_get_reference_args
    - serial: imx: fix tx statemachine deadlock
    - iio: adc: ad9467: fix reset gpio handling
    - iio: adc: ad9467: don't ignore error codes
    - iio: adc: ad9467: fix scale setting
    - perf header: Fix one memory leakage in perf_event__fprintf_event_update()
    - perf hisi-ptt: Fix one memory leakage in hisi_ptt_process_auxtrace_event()
    - perf genelf: Set ELF program header addresses properly
    - tty: change tty_write_lock()'s ndelay parameter to bool
    - tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK
    - tty: don't check for signal_pending() in send_break()
    - tty: use 'if' in send_break() instead of 'goto'
    - usb: cdc-acm: return correct error code on unsupported break
    - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
    - nvmet-tcp: fix a crash in nvmet_req_complete()
    - perf env: Avoid recursively taking env->bpf_progs.lock
    - cxl/region: fix x9 interleave typo
    - apparmor: avoid crash when parsed profile name is empty
    - [arm64,armhf] serial: imx: Correct clock error message in function probe()
    - nvmet: re-fix tracing strncpy() warning
    - nvme: trace: avoid memcpy overflow warning
    - nvmet-tcp: Fix the H2C expected PDU len calculation
    - [s390x] pci: fix max size calculation in zpci_memcpy_toio()
    - [arm64] net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames
    - net: phy: micrel: populate .soft_reset for KSZ9131
    - mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN
    - mptcp: strict validation before using mp_opt->hmac
    - mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
    - mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
    - mptcp: refine opt_mp_capable determination
    - block: ensure we hold a queue reference when using queue limits
    - udp: annotate data-races around up->pending
    - net: stmmac: ethtool: Fixed calltrace caused by unbalanced
    disable_irq_wake calls
    - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
    - mptcp: relax check on MPC passive fallback
    - netfilter: nf_tables: reject invalid set policy
    - netfilter: nft_limit: do not ignore unsupported flags
    - netfilter: nfnetlink_log: use proper helper for fetching physinif
    - netfilter: nf_queue: remove excess nf_bridge variable
    - netfilter: propagate net to nf_bridge_get_physindev
    - netfilter: bridge: replace physindev with physinif in nf_bridge_info
    - netfilter: nf_tables: do not allow mismatch field size and set key length
    - netfilter: nf_tables: skip dead set elements in netlink dump
    - netfilter: nf_tables: reject NFT_SET_CONCAT with not field length
    description
    - ipvs: avoid stat macros calls from preemptible context
    - kdb: Fix a potential buffer overflow in kdb_local()
    - ethtool: netlink: Add missing ethnl_ops_begin/complete
    - loop: fix the the direct I/O support check when used on top of block
    devices
    - ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work
    - [armhf] i2c: s3c24xx: fix read transfers in polling mode
    - [armhf] i2c: s3c24xx: fix transferring more than one message in polling
    mode
    - block: Remove special-casing of compound pages
    - Revert "KEYS: encrypted: Add check for strsep"
    - [arm64] dts: armada-3720-turris-mox: set irq type for RTC
    - Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.76
    - [arm64,armhf] usb: dwc3: gadget: Refactor EP0 forced stall/restart into a
    separate API
    - [arm64,armhf] usb: dwc3: gadget: Queue PM runtime idle on disconnect event
    - [arm64,armhf] usb: dwc3: gadget: Handle EP0 request dequeuing properly
    - [x86] Revert "nSVM: Check for reserved encodings of TLB_CONTROL in nested
    VMCB"
    - iio: adc: ad7091r: Set alert bit in config register
    - iio: adc: ad7091r: Allow users to configure device events
    - ext4: allow for the last group to be marked as trimmed
    - OPP: Pass rounded rate to _set_opp()
    - btrfs: sysfs: validate scrub_speed_max value
    - crypto: api - Disallow identical driver names
    - PM: hibernate: Enforce ordering during image compression/decompression
    - hwrng: core - Fix page fault dead lock on mmap-ed hwrng
    - [s390x] crypto: s390/aes - Fix buffer overread in CTR mode
    - [s390x] vfio-ap: unpin pages on gisc registration failure
    - PM / devfreq: Fix buffer overflow in trans_stat_show
    - media: imx355: Enable runtime PM before registering async sub-device
    - rpmsg: virtio: Free driver_override when rpmsg_remove()
    - media: ov9734: Enable runtime PM before registering async sub-device
    - [s390x] vfio-ap: always filter entire AP matrix
    - [s390x] vfio-ap: loop over the shadow APCB when filtering guest's AP
    configuration
    - [s390x] vfio-ap: let on_scan_complete() callback filter matrix and update
    guest's APCB
    - [mips*] Fix max_mapnr being uninitialized on early stages
    - bus: mhi: host: Add alignment check for event ring read pointer
    - bus: mhi: host: Drop chan lock before queuing buffers
    - bus: mhi: host: Add spinlock to protect WP access when queueing TREs
    - async: Split async_schedule_node_domain()
    - async: Introduce async_schedule_dev_nocall()
    - iio: adc: ad7091r: Enable internal vref if external vref is not supplied
    - dmaengine: fix NULL pointer in channel unregistration function
    - scsi: ufs: core: Remove the ufshcd_hba_exit() call from
    ufshcd_async_scan()
    - [arm64] dts: qcom: sc7180: fix USB wakeup interrupt types
    - [arm64] dts: qcom: sdm845: fix USB wakeup interrupt types
    - [arm64] dts: qcom: sm8150: fix USB wakeup interrupt types
    - [arm64] dts: qcom: sc7280: fix usb_1 wakeup interrupt types
    - [arm64] dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
    - [arm64] dts: qcom: sm8150: fix USB DP/DM HS PHY interrupts
    - lsm: new security_file_ioctl_compat() hook
    - docs: kernel_abi.py: fix command injection
    - scripts/get_abi: fix source path leak
    - media: videobuf2-dma-sg: fix vmap callback
    - mmc: core: Use mrq.sbc in close-ended ffu
    - mmc: mmc_spi: remove custom DMA mapped buffers
    - media: mtk-jpeg: Fix use after free bug due to error path handling in
    mtk_jpeg_dec_device_run
    - [arm64] Rename ARM64_WORKAROUND_2966298
    - rtc: cmos: Use ACPI alarm for non-Intel x86 systems too
    - rtc: Adjust failure return code for cmos_set_alarm()
    - rtc: mc146818-lib: Adjust failure return code for mc146818_get_time()
    - rtc: Add support for configuring the UIP timeout for RTC reads
    - rtc: Extend timeout for waiting for UIP to clear to 1s
    - nouveau/vmm: don't set addr on the fail path to avoid warning
    - ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path
    - mm/rmap: fix misplaced parenthesis of a likely()
    - mm/sparsemem: fix race in accessing memory_section->usage
    - rename(): fix the locking of subdirectories
    - serial: sc16is7xx: improve regmap debugfs by using one regmap per port
    - serial: sc16is7xx: remove wasteful static buffer in
    sc16is7xx_regmap_name()
    - serial: sc16is7xx: remove global regmap from struct sc16is7xx_port
    - serial: sc16is7xx: remove unused line structure member
    - serial: sc16is7xx: change EFR lock to operate on each channels
    - serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
    - serial: sc16is7xx: fix invalid sc16is7xx_lines bitfield in case of probe
    error
    - serial: sc16is7xx: remove obsolete loop in sc16is7xx_port_irq()
    - serial: sc16is7xx: improve do/while loop in sc16is7xx_irq()
    - mm: page_alloc: unreserve highatomic page blocks before oom
    - ksmbd: set v2 lease version on lease upgrade
    - ksmbd: fix potential circular locking issue in smb2_set_ea()
    - ksmbd: don't increment epoch if current state and request state are same
    - ksmbd: send lease break notification on FILE_RENAME_INFORMATION
    - ksmbd: Add missing set_freezable() for freezable kthread
    - Revert "drm/amd: Enable PCIe PME from D3"
    - drm/amd/display: pbn_div need be updated for hotplug event
    - wifi: mac80211: fix potential sta-link leak
    - net/smc: fix illegal rmb_desc access in SMC-D connection dump
    - tcp: make sure init the accept_queue's spinlocks once
    - bnxt_en: Wait for FLR to complete during probe
    - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
    - llc: make llc_ui_sendmsg() more robust against bonding changes
    - llc: Drop support for ETH_P_TR_802_2.
    - udp: fix busy polling
    - net: fix removing a namespace with conflicting altnames
    - tun: fix missing dropped counter in tun_xdp_act
    - tun: add missing rx stats accounting in tun_xdp_act
    - net: micrel: Fix PTP frame parsing for lan8814
    - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
    - netfs, fscache: Prevent Oops in fscache_put_cache()
    - tracing: Ensure visibility when inserting an element into tracing_map
    - afs: Hide silly-rename files from userspace
    - tcp: Add memory barrier to tcp_push()
    - netlink: fix potential sleeping issue in mqueue_flush_file
    - ipv6: init the accept_queue's spinlocks in inet6_create
    - net/mlx5: DR, Use the right GVMI number for drop action
    - net/mlx5: DR, Can't go to uplink vport on RX rule
    - net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO
    - net/mlx5e: Allow software parsing when IPsec crypto is enabled
    - net/mlx5e: fix a double-free in arfs_create_groups
    - net/mlx5e: fix a potential double-free in fs_any_create_groups
    - rcu: Defer RCU kthreads wakeup when CPU is dying
    - netfilter: nft_limit: reject configurations that cause integer overflow
    - btrfs: fix infinite directory reads
    - btrfs: set last dir index to the current last index when opening dir
    - btrfs: refresh dir last index during a rewinddir(3) call
    - btrfs: fix race between reading a directory and adding entries to it
    - netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
    - netfilter: nf_tables: validate NFPROTO_* family
    - net: stmmac: Wait a bit for the reset to take effect
    - net: mvpp2: clear BM pool before initialization
    - fjes: fix memleaks in fjes_hw_setup
    - net: fec: fix the unhandled context fault from smmu
    - nbd: always initialize struct msghdr completely
    - btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume
    being deleted
    - btrfs: ref-verify: free ref cache before clearing mount opt
    - btrfs: tree-checker: fix inline ref size in error messages
    - btrfs: don't warn if discard range is not aligned to sector
    - btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
    - btrfs: don't abort filesystem when attempting to snapshot deleted
    subvolume
    - rbd: don't move requests to the running list on errors
    - exec: Fix error handling in begin_new_exec()
    - wifi: iwlwifi: fix a memory corruption
    - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes
    - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress
    basechain
    - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (CVE-2024-1086)
    - [x86] platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe
    - ksmbd: fix global oob in ksmbd_nl_policy
    - [arm64] firmware: arm_scmi: Check mailbox/SMT channel for consistency
    - xfs: read only mounts with fsopen mount API are busted
    - gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
    - cpufreq: intel_pstate: Refine computation of P-state for given frequency
    - drm: Don't unref the same fb many times by mistake due to deadlock
    handling
    - drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
    - drm/tidss: Fix atomic_flush check
    - drm/amd/display: Disable PSR-SU on Parade 0803 TCON again
    - [x86] platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
    - drm/bridge: nxp-ptn3460: simplify some error checking
    - drm/amd/display: Port DENTIST hang and TDR fixes to OTG disable W/A
    - drm/amdgpu/pm: Fix the power source flag error
    - erofs: get rid of the remaining kmap_atomic()
    - erofs: fix lz4 inplace decompression
    - media: ov13b10: Support device probe in non-zero ACPI D state
    - media: ov13b10: Enable runtime PM before registering async sub-device
    - bus: mhi: ep: Do not allocate event ring element on stack
    - PM: core: Remove unnecessary (void *) conversions
    - PM: sleep: Fix possible deadlocks in core system-wide PM code
    - [x86] thermal: intel: hfi: Refactor enabling code into helper functions
    - [x86] thermal: intel: hfi: Disable an HFI instance when all its CPUs go
    offline
    - [x86] thermal: intel: hfi: Add syscore callbacks for system-wide PM
    - fs/pipe: move check to pipe_has_watch_queue()
    - pipe: wakeup wr_wait after setting max_usage
    - dlm: use kernel_connect() and kernel_bind()
    - serial: core: Provide port lock wrappers
    - serial: sc16is7xx: Use port lock wrappers
    - serial: sc16is7xx: fix unconditional activation of THRI interrupt
    - btrfs: zoned: factor out prepare_allocation_zoned()
    - btrfs: zoned: optimize hint byte for zoned allocator
    - drm/panel-edp: drm/panel-edp: Fix AUO B116XAK01 name and timing
    - Revert "powerpc/64s: Increase default stack size to 32KB"
    - drm/bridge: parade-ps8640: Wait for HPD when doing an AUX transfer
    - drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
    - drm/bridge: sii902x: Use devm_regulator_bulk_get_enable()
    - drm/bridge: sii902x: Fix probing race issue
    - drm/bridge: sii902x: Fix audio codec unregistration
    - drm/bridge: parade-ps8640: Ensure bridge is suspended in .post_disable()
    - drm/bridge: parade-ps8640: Make sure we drop the AUX mutex in the error
    case
    - [armhf] drm/exynos: fix accidental on-stack copy of exynos_drm_plane
    - [armhf] drm/exynos: gsc: minor fix for loop iteration in
    gsc_runtime_resume
    - gpio: eic-sprd: Clear interrupt after set the interrupt type
    - block: Move checking GENHD_FL_NO_PART to bdev_add_partition()
    - drm/bridge: anx7625: Ensure bridge is suspended in disable()
    - spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
    - spi: fix finalize message on error return
    - [mips*] lantiq: register smp_ops on non-smp platforms
    - cxl/region:Fix overflow issue in alloc_hpa()
    - [mips*] Call lose_fpu(0) before initializing fcr31 in
    mips_set_personality_nan
    - tick/sched: Preserve number of idle sleeps across CPU hotplug events
    - [x86] x86/entry/ia32: Ensure s32 is sign extended to s64
    - serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
    - net/mlx5e: Handle hardware IPsec limits events
    .
    [ Salvatore Bonaccorso ]
    * Refresh "net: mana: Add support for auxiliary device"
    * Bump ABI to 18
    Checksums-Sha1:
    25412573caf0dc27bed94c41f0834b77cf0eef38 290924 linux_6.1.76-1.dsc
    c579fb630b2414492c005e5449f9fe05ff9d6fc8 137552080 linux_6.1.76.orig.tar.xz
    cbc3607a598fc163ac27858df5f78ab6e09e8d1c 1597884 linux_6.1.76-1.debian.tar.xz
    40b5ae55bf2fb849ee7e07dcf3376cde716b40a5 7340 linux_6.1.76-1_source.buildinfo Checksums-Sha256:
    02f001b02a115975f288eda50c65c1ec6d821ed5775065c118847ce9497a3da8 290924 linux_6.1.76-1.dsc
    d5c3db7304a5c4dbe2428c2051d6fefb856d0587131b0e4f73102c2de8a610a8 137552080 linux_6.1.76.orig.tar.xz
    6f60088be11274e0c1377b851b78850bcc46d4c31605838370c9dfe660b84064 1597884 linux_6.1.76-1.debian.tar.xz
    810e5a9e41a12d7d4834d4631ba341b7a245c9ede534072f9e08e85cb8c2c120 7340 linux_6.1.76-1_source.buildinfo
    Files:
    409df164899e9a75e7ab718ca8290ee7 290924 kernel optional linux_6.1.76-1.dsc
    c2fe21c55612ab0b05ac289cc235d245 137552080 kernel optional linux_6.1.76.orig.tar.xz
    2c185978226b20b91e513a2249dfb735 1597884 kernel optional linux_6.1.76-1.debian.tar.xz
    f09fa18011468a87894478dc26b0c6e1 7340 kernel optional linux_6.1.76-1_source.buildinfo

    -----BEGIN PGP SIGNATURE-----

    iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmW7UdZfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89E9EwP/RYeG+KZXIzQpq+ZJGp4VvVL+RhvL7XK FIxdRchCIs8Rkal6eFLB0RimwqEllh/kvnRKqmQcKJv30jDJjNWflGg7wo0y0Ce2 dln0Fklshv4MQ+s8bk1y4st9njtUVnt8g0ZGis2QvmZh1J56TBLnGPa+Q6M9BwpG jZtnD67DOA5wAGnUf/WOrL7ktoxVv0Dr1g5Gnj15QVHD6Bzrg8sLCR2ieSGIkh9F D2d3Gxe3QWdukk8SltLzr8f24xO3PUjA5NStxVha4HKKxHsV3UYMHHTM1n4Pz11R TA9Q2wl3MKkm4iVDEb20K0cGPkgSrJeF3IoYBAULBEZaQacfTpYQ+wrFd9yT0BqG CUbNwbNxG9z6y5mayaZA+z/0i+AXlHDRXUMrb+z/yyeRCwpgpJYHcC8uIyaL/Iwx nu1e3IxnGNoxG6tliDJbHsRcYJGe487I01jFyFiUz1Ct9qwDWkZy/CwvSJq/xob8 QJXVcjuIbCKVC842CaWI3IsuHJtx6WGYmbpRopLm6TwLXx1rrz5dmN+5ehTiTC8b ZqaLPLIgeyzqcZNU3VFqOsflh3UfqsiwdbcK8N0DUP5EcD4wycKB03qCzpGaHyox 6YeJlPq91vjF6GjxBUwR3C12mlsMxAgP40spNqiz/3d0XM3NcTx02Wp+2Hn5A3De
    jDfu9tx3vTnT
    =6LWJ
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)