Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 16 Feb 2024 00:12:17 +0100
Source: linux
Architecture: source
Version: 6.6.13-1~bpo12+1
Distribution: bookworm-backports
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Ben Hutchings <benh@debian.org>
Closes: 950324 1011986 1032104 1032604 1035587 1037938 1040901 1050353 1050782 1051365 1052304 1053187 1053503 1053764 1055021 1055069 1055244 1055649 1057619 1057790 1058576 1058758 1058887 1059431 1059607 1059624
Changes:
linux (6.6.13-1~bpo12+1) bookworm-backports; urgency=medium
.
* Rebuild for bookworm-backports
.
linux (6.6.13-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.12
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.13
- f2fs: explicitly null-terminate the xattr list
- ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro
- mptcp: fix uninit-value in mptcp_incoming_options
- wifi: cfg80211: lock wiphy mutex for rfkill poll
- wifi: avoid offset calculation on NULL pointer
- wifi: mac80211: handle 320 MHz in ieee80211_ht_cap_ie_to_sta_ht_cap
- debugfs: fix automount d_fsdata usage
- ALSA: hda: intel-nhlt: Ignore vbps when looking for DMIC 32 bps format
- nvme-core: fix a memory leak in nvme_ns_info_from_identify()
- io_uring: use fget/fput consistently
- block: warn once for each partition in bio_check_ro()
- drm/amdgpu: Do not issue gpu reset from nbio v7_9 bif interrupt
- drm/amd/display: update dcn315 lpddr pstate latency
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amdgpu: Use another offset for GC 9.4.3 remap
- Revert "drm/prime: Unexport helpers for fd/handle conversion"
- blk-mq: don't count completed flush data request as inflight in case of
quiesce
- nvme-core: check for too small lba shift
- [x86] ASoC: amd: yc: Add HP 255 G10 into quirk table
- [x86] ASoC: Intel: Skylake: Fix mem leak in few functions
- [x86] ASoC: SOF: topology: Fix mem leak in sof_dai_load()
- [x86] ASoC: Intel: Skylake: mem leak in skl register function
- ASoC: rt5650: add mutex to avoid the jack detection failure
- [x86] ASoC: Intel: skl_hda_dsp_generic: Drop HDMI routes when HDMI is not
available
- [x86] ASoC: SOF: ipc4-topology: Add core_mask in struct snd_sof_pipeline
- [x86] ASoC: SOF: sof-audio: Modify logic for enabling/disabling topology
cores
- nouveau/tu102: flush all pdbs on vmm flush
- [x86] ASoC: amd: yc: Add DMI entry to support System76 Pangolin 13
- [x86] ASoC: hdac_hda: Conditionally register dais for HDMI and Analog
- [x86] ASoC: SOF: ipc4-topology: Correct data structures for the SRC module
- [x86] ASoC: SOF: ipc4-topology: Correct data structures for the GAIN
module
- net/tg3: fix race condition in tg3_reset_task()
- ASoC: da7219: Support low DC impedance headset
- nvme: introduce helper function to get ctrl state
- nvme: ensure reset state check ordering
- nvme-ioctl: move capable() admin check to the end
- nvme: prevent potential spectre v1 gadget
- nvme: fix deadlock between reset and scan
- [arm64] dts: rockchip: Fix PCI node addresses on rk3399-gru
- drm/amd/display: Add monitor patch for specific eDP
- drm/amdgpu: Add NULL checks for function pointers
- [armhf] drm/exynos: fix a potential error pointer dereference
- [armhf] drm/exynos: fix a wrong error checking
- ALSA: pcmtest: stop timer before buffer is released
- [x86] hwmon: (corsair-psu) Fix probe when built-in
- [arm64] clk: rockchip: rk3568: Add PLL rate for 292.5MHz
- [arm64] clk: rockchip: rk3128: Fix HCLK_OTG gate register
- soundwire: intel_ace2x: fix AC timing setting for ACE2.x
- jbd2: correct the printing of write_flags in jbd2_write_superblock()
- jbd2: increase the journal IO's priority
- drm/crtc: Fix uninit-value bug in drm_mode_setcrtc
- neighbour: Don't let neigh_forced_gc() disable preemption for long
- [x86] platform/x86: intel-vbtn: Fix missing tablet-mode-switch events
- jbd2: fix soft lockup in journal_finish_inode_data_buffers()
- tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing
- tracing: Add size check when printing trace_marker output
- tracing: Fix uaf issue when open the hist or hist_debug file
- ring-buffer: Do not record in NMI if the arch does not support cmpxchg in
NMI
- Input: psmouse - enable Synaptics InterTouch for ThinkPad L14 G1
- [arm64] reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning
- Input: atkbd - skip ATKBD_CMD_GETID in translated mode
- Input: i8042 - add nomux quirk for Acer P459-G2-M
- pinctrl: amd: Mask non-wake source pins with interrupt enabled at suspend
- [s390x] scm: fix virtual vs physical address confusion
- wifi: iwlwifi: pcie: avoid a NULL pointer dereference
- Input: xpad - add Razer Wolverine V2 support
- driver core: Add a guard() definition for the device_lock()
- HID: nintendo: fix initializer element is not constant error
- [x86] platform/x86: thinkpad_acpi: fix for incorrect fan reporting on some
ThinkPad systems
- [amd64] platform/x86/amd/pmc: Move platform defines to header
- [amd64] platform/x86/amd/pmc: Only run IRQ1 firmware version check on
Cezanne
- [amd64] platform/x86/amd/pmc: Move keyboard wakeup disablement detection
to pmc-quirks
- [amd64] platform/x86/amd/pmc: Disable keyboard wakeup on AMD Framework 13
- [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346
- [x86] ASoC: Intel: bytcr_rt5640: Add new swapped-speakers quirk
- ALSA: hda/realtek: Add quirks for ASUS Zenbook 2022 Models
- dm audit: fix Kconfig so DM_AUDIT depends on BLK_DEV_DM
- HID: nintendo: Prevent divide-by-zero on code
- smb: client: fix potential OOB in smb2_dump_detail() (CVE-2023-6610)
- [arm64,armhf] i2c: rk3x: fix potential spinlock recursion on poll
- drm/amd/display: Add case for dcn35 to support usb4 dmub hpd event
- drm/amd/display: get dprefclk ss info from integration info table
- posix-timers: Get rid of [COMPAT_]SYS_NI() uses
- ida: Fix crash in ida_free when the bitmap is empty (CVE-2023-6915)
- virtio_blk: fix snprintf truncation compiler warning
- nfc: Do not send datagram if socket state isn't LLCP_BOUND
- net: qrtr: ns: Return 0 if server port is not present
- connector: Fix proc_event_num_listeners count not cleared
- [armhf] sun9i: smp: fix return code check of of_property_match_string
- [x86] csum: Remove unnecessary odd handling
- [x86] csum: clean up `csum_partial' further
- drm/crtc: fix uninitialized variable use
- [x86] microcode: do not cache microcode if it will not be used
- ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360 13-ay0xxx
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- [arm64] bus: moxtet: Mark the irq as shared
- [arm64] bus: moxtet: Add spi device table
- [x86] ASoC: SOF: Intel: hda-codec: Delay the codec device registration
- drm/amd/display: Pass pwrseq inst for backlight and ABM
- ksmbd: don't allow O_TRUNC open on read-only share
- ksmbd: free ppace array on error in parse_dacl
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- [arm*] binder: use EPOLLERR from eventpoll.h
- [arm*] binder: fix use-after-free in shinker's callback
- [arm*] binder: fix trivial typo of binder_free_buf_locked()
- [arm*] binder: fix comment on binder_alloc_new_buf() return value
- uio: Fix use-after-free in uio_open
- parport: parport_serial: Add Brainboxes BAR details
- parport: parport_serial: Add Brainboxes device IDs and geometry
- PCI: Add ACS quirk for more Zhaoxin Root Ports
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- mm/memory_hotplug: fix memmap_on_memory sysfs value retrieval
.
linux (6.6.11-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.10
- ksmbd: Remove unused field in ksmbd_user struct
- ksmbd: reorganize ksmbd_iov_pin_rsp()
- ksmbd: fix kernel-doc comment of ksmbd_vfs_setxattr()
- ksmbd: fix missing RDMA-capable flag for IPoIB device in
ksmbd_rdma_capable_netdev()
- ksmbd: add support for surrogate pair conversion
- ksmbd: no need to wait for binded connection termination at logoff
- ksmbd: fix kernel-doc comment of ksmbd_vfs_kern_path_locked()
- ksmbd: prevent memory leak on error return
- ksmbd: separately allocate ci per dentry
- ksmbd: move oplock handling after unlock parent dir
- ksmbd: release interim response after sending status pending response
- ksmbd: move setting SMB2_FLAGS_ASYNC_COMMAND and AsyncId
- ksmbd: don't update ->op_state as OPLOCK_STATE_NONE on error
- ksmbd: set epoch in create context v2 lease
- ksmbd: set v2 lease capability
- ksmbd: downgrade RWH lease caching state to RH for directory
- ksmbd: send v2 lease break notification for directory
- ksmbd: lazy v2 lease break on smb2_write()
- ksmbd: avoid duplicate opinfo_put() call on error of
smb21_lease_break_ack()
- fs: new accessor methods for atime and mtime
- client: convert to new timestamp accessors
- fs: cifs: Fix atime update check
- virtio_ring: fix syncs DMA memory with different direction
- kexec: fix KEXEC_FILE dependencies
- kexec: select CRYPTO from KEXEC_FILE instead of depending on it
- linux/export: Fix alignment for 64-bit ksymtab entries
- linux/export: Ensure natural alignment of kcrctab array
- mptcp: refactor sndbuf auto-tuning
- mptcp: fix possible NULL pointer dereference on close
- mptcp: fix inconsistent state on fastopen race
- block: renumber QUEUE_FLAG_HW_WC
- [x86] platform/x86/intel/pmc: Add suspend callback
- [x86] platform/x86/intel/pmc: Allow reenabling LTRs
- [x86] platform/x86/intel/pmc: Move GBE LTR ignore to suspend callback
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- maple_tree: do not preallocate nodes for slot stores
- mm/filemap: avoid buffered read/write race to read inconsistent data
- mm: migrate high-order folios in swap cache correctly
- mm/memory-failure: cast index to loff_t before shifting it
- mm/memory-failure: check the mapcount of the precise page
- Revert "nvme-fc: fix race between error recovery and creating association"
- ring-buffer: Fix wake ups when buffer_percent is set to 100
- ftrace: Fix modification of direct_function hash while in use
- tracing: Fix blocked reader of snapshot buffer
- wifi: cfg80211: fix CQM for non-range use
- wifi: nl80211: fix deadlock in nl80211_set_cqm_rssi (6.6.x)
- netfilter: nf_tables: skip set commit for deleted/destroyed sets
(CVE-2024-0193)
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.11
- keys, dns: Fix missing size check of V1 server-list header
- ALSA: hda/realtek: enable SND_PCI_QUIRK for hp pavilion 14-ec1xxx series
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ZBook
- ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6
- drm/amd/display: pbn_div need be updated for hotplug event
- mptcp: prevent tcp diag from closing listener subflows
- Revert "PCI/ASPM: Remove pcie_aspm_pm_state_change()"
- [x86] drm/mgag200: Fix gamma lut not initialized for G200ER, G200EV,
G200SE
- cifs: cifs_chan_is_iface_active should be called with chan_lock held
- cifs: do not depend on release_iface for maintaining iface_list
- [x86] KVM: x86/pmu: fix masking logic for MSR_CORE_PERF_GLOBAL_CTRL
- wifi: iwlwifi: pcie: don't synchronize IRQs from IRQ (Closes: #1058887)
- [arm64] drm/bridge: ti-sn65dsi86: Never store more than msg->size bytes in
AUX xfer
- netfilter: nf_tables: set transport offset from mac header for
netdev/egress
- nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to
llcp_local
- [x86] drm/i915/dp: Fix passing the correct DPCD_REV for
drm_dp_set_phy_test_pattern
- [x86] drm/i915/perf: Update handling of MMIO triggered reports
- ice: Fix link_down_on_close message
- ice: Shut down VSI with "link-down-on-close" enabled
- i40e: Fix filter input checks to prevent config with invalid values
- igc: Report VLAN EtherType matching back to user
- igc: Check VLAN TCI mask
- igc: Check VLAN EtherType mask
- net: sched: em_text: fix possible memory leak in em_text_destroy()
- r8169: Fix PCI error on system resume
- net: Implement missing getsockopt(SO_TIMESTAMPING_NEW)
- [armhf] sun9i: smp: Fix array-index-out-of-bounds read in
sunxi_mc_smp_init
- sfc: fix a double-free bug in efx_probe_filters
- [arm64] net: bcmgenet: Fix FCS generation for fragmented skbuffs
- netfilter: nf_nat: fix action not being set for all ct states
- netfilter: nft_immediate: drop chain reference counter on error
- net: Save and restore msg_namelen in sock_sendmsg
- i40e: fix use-after-free in i40e_aqc_add_filters()
- [arm64] ASoC: meson: g12a-toacodec: Validate written enum values
- [arm64] ASoC: meson: g12a-tohdmitx: Validate written enum values
- [arm64] ASoC: meson: g12a-toacodec: Fix event generation
- [arm64] ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux
- i40e: Restore VF MSI-X state during PCI reset
- igc: Fix hicredit calculation
- apparmor: Fix move_mount mediation by detecting if source is detached
- virtio_net: avoid data-races on dev->stats fields
- virtio_net: fix missing dma unmap for resize
- net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues
- net/smc: fix invalid link access in dumping SMC-R connections
- asix: Add check for usbnet_get_endpoints
- bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters()
- net: Implement missing SO_TIMESTAMPING_NEW cmsg support
- mm: convert DAX lock/unlock page to lock/unlock folio
- mm/memory-failure: pass the folio and the page to collect_procs()
- xsk: add multi-buffer support for sockets sharing umem
- tcp: derive delack_max from rto_min
- bpftool: Fix -Wcast-qual warning
- bpftool: Align output skeleton ELF code
- crypto: xts - use 'spawn' for underlying single-block cipher
- [x86] crypto: qat - fix double free during reset
- crypto: hisilicon/qm - fix EQ/AEQ interrupt issue
- RDMA/mlx5: Fix mkey cache WQ flush
- ACPI: thermal: Fix acpi_thermal_unregister_thermal_zone() cleanup
- rcu: Break rcu_node_0 --> &rq->__lock order
- rcu: Introduce rcu_cpu_online()
- rcu/tasks: Handle new PF_IDLE semantics
- rcu/tasks-trace: Handle new PF_IDLE semantics
- [riscv64] don't probe unaligned access speed if already done
- [s390x] KVM: s390: vsie: fix wrong VIR 37 when MSO is used
- [arm64,armhf] phy: ti: gmii-sel: Fix register offset when parent is not a
syscon node
- [arm64] dmaengine: ti: k3-psil-am62: Fix SPI PDMA data
- [arm64] dmaengine: ti: k3-psil-am62a: Fix SPI PDMA data
- iio: imu: adis16475: use bit numbers in assign_bit()
- [amd64] iommu/vt-d: Support enforce_cache_coherency only for empty domains
- [armhf] clk: rockchip: rk3128: Fix aclk_peri_src's parent
- [armhf] clk: rockchip: rk3128: Fix SCLK_SDMMC's clock name
- [x86] drm/i915: Call intel_pre_plane_updates() also for pipes getting
enabled
- drm/amd/display: Increase num voltage states to 40
- cxl: Add cxl_decoders_committed() helper
- cxl/core: Always hold region_rwsem while reading poison lists
- kernel/resource: Increment by align value in get_free_mem_region()
- drm/amd/display: Increase frame warning limit with KASAN or KCSAN in dml
- [amd64] dmaengine: idxd: Protect int_handle field in hw descriptor
- [riscv64] KVM: update external interrupt atomically for IMSIC swfile
- [powerpc*] pseries/vas: Migration suspend waits for no in-progress open
windows
- net: prevent mss overflow in skb_segment()
- cxl/pmu: Ensure put_device on pmu devices
- net: constify sk_dst_get() and __sk_dst_get() argument
- mm/mglru: skip special VMAs in lru_gen_look_around()
- firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines
and ASM108x/VT630x PCIe cards
- [x86] kprobes: fix incorrect return address calculation in
kprobe_emulate_call_indirect
- i2c: core: Fix atomic xfer check for non-preempt config
- mm: fix unmap_mapping_range high bits shift bug
- drm/amdgpu: skip gpu_info fw loading on navi12
- drm/amd/display: add nv12 bounding box
- drm/amd/display: Fix sending VSC (+ colorimetry) packets for DP/eDP
displays without PSR
- mmc: rpmb: fixes pause retune on all RPMB partitions.
- mmc: core: Cancel delayed work before releasing host
- cxl: Add cxl_num_decoders_committed() usage to cxl_test
- cxl/hdm: Fix a benign lockdep splat
- cxl/memdev: Hold region_rwsem during inject and clear poison ops
.
[ Salvatore Bonaccorso ]
* [rt] Disable "RISC-V: Probe misaligned access speed in parallel"
* [x86] Enable DesignWare USB3 DRD Core Support (Closes: #1059607)
- drivers/usb/dwc3: Enable USB_DWC3 as module
- drivers/usb/dwc3: Enable USB_DWC3_ULPI
- drivers/usb/dwc3: Enable USB_DWC3_DUAL_ROLE
* nfsd: drop the nfsd_put helper
.
linux (6.6.9-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.9
- bpf: Fix prog_array_map_poke_run map poke update
- btrfs: qgroup: iterate qgroups without memory allocation for
qgroup_reserve()
- btrfs: qgroup: use qgroup_iterator in qgroup_convert_meta()
- btrfs: free qgroup pertrans reserve on transaction abort
- drm/amd/display: fix hw rotated modes when PSR-SU is enabled
- [x86] drm/i915: Fix FEC state dump
- [x86] drm/i915: Introduce crtc_state->enhanced_framing
- [x86] drm/i915/edp: don't write to DP_LINK_BW_SET when using rate select
- drm: Update file owner during use
- drm: Fix FD ownership check in drm_master_check_perm()
- [arm64,armhf] spi: spi-imx: correctly configure burst length when using
dma
- [arm64] dts: allwinner: h616: update emac for Orange Pi Zero 3
- [armhf] OMAP2+: Fix null pointer dereference and memory leak in
omap_soc_device_init
- reset: Fix crash when freeing non-existent optional resets
- [s390x] vx: fix save/restore of fpu kernel context
- [x86] platform/x86/intel/pmc: Fix hang in pmc_core_send_ltr_ignore()
- SUNRPC: Revert 5f7fc5d69f6e92ec0b38774c387f5cf7812c5806
- wifi: ieee80211: don't require protected vendor action frames
- wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock
- wifi: mac80211: check if the existing link config remains unchanged
- wifi: mac80211: don't re-add debugfs during reconfig
- wifi: mac80211: check defragmentation succeeded
- wifi: mac80211: mesh: check element parsing succeeded
- wifi: mac80211: mesh_plink: fix matches_local logic
- ice: fix theoretical out-of-bounds access in ethtool link modes
- bpf: syzkaller found null ptr deref in unix_bpf proto add
- Revert "net/mlx5e: fix double free of encap_header in update funcs"
- Revert "net/mlx5e: fix double free of encap_header"
- net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list()
- net/mlx5e: Fix a race in command alloc flow
- net/mlx5e: fix a potential double-free in fs_udp_create_groups
- net/mlx5e: Fix overrun reported by coverity
- net/mlx5e: Decrease num_block_tc when unblock tc offload
- net/mlx5e: XDP, Drop fragmented packets larger than MTU size
- net/mlx5: Fix fw tracer first block check
- net/mlx5: Refactor mlx5_flow_destination->rep pointer to vport num
- net/mlx5e: Fix error code in mlx5e_tc_action_miss_mapping_get()
- net/mlx5e: Fix error codes in alloc_branch_attr()
- net/mlx5e: Correct snprintf truncation handling for fw_version buffer
- net/mlx5e: Correct snprintf truncation handling for fw_version buffer used
by representors
- [arm64] net: mscc: ocelot: fix eMAC TX RMON stats for bucket 256-511 and
above
- [arm64] net: mscc: ocelot: fix pMAC TX RMON stats for bucket 256-511 and
above
- net: Return error from sk_stream_wait_connect() if sk_wait_event() fails
- net: sched: ife: fix potential use-after-free
- ethernet: atheros: fix a memleak in atl1e_setup_ring_resources
- net/rose: fix races in rose_kill_by_device()
- Bluetooth: Fix not notifying when connection encryption changes
- Bluetooth: Fix deadlock in vhci_send_frame
- Bluetooth: hci_event: shut up a false-positive warning
- Bluetooth: hci_core: Fix hci_conn_hash_lookup_cis
- bnxt_en: do not map packet buffers twice
- net: phy: skip LED triggers on PHYs on SFP modules
- ice: stop trashing VF VSI aggregator node ID information
- ice: alter feature support check for SRIOV and LAG
- ice: Fix PF with enabled XDP going no-carrier after reset
- net: mana: select PAGE_POOL
- net: check vlan filter feature in vlan_vids_add_by_dev() and
vlan_vids_del_by_dev()
- afs: Fix the dynamic root's d_delete to always delete unused dentries
- afs: Fix dynamic root lookup DNS check
- net: ethernet: mtk_wed: fix possible NULL pointer dereference in
mtk_wed_wo_queue_tx_clean()
- net/ipv6: Revert remove expired routes with a separated list of routes
- net: check dev->gso_max_size in gso_features_check()
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- afs: Fix overwriting of result of DNS query
- afs: Fix use-after-free due to get/remove race in volume tree
- [x86] drm/i915/hwmon: Fix static analysis tool reported issues
- [x86] drm/i915/mtl: Fix HDMI/DP PLL clock selection
- [arm64,armhf] ASoC: hdmi-codec: fix missing report for jack initial status
- [arm64] ASoC: fsl_sai: Fix channel swap issue on i.MX8MP
- [arm64] i2c: qcom-geni: fix missing clk_disable_unprepare() and
geni_se_resources_off()
- drm/amdgpu: re-create idle bo's PTE during VM state machine reset
- [armhf] i2c: aspeed: Handle the coalesced stop conditions with the start
conditions.
- gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl()
- nvme-pci: fix sleeping function called from interrupt context
- iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw
- [arm64,armhf] iio: adc: meson: add separate config for axg SoC family
- scsi: bnx2fc: Fix skb double free in bnx2fc_rcv()
- scsi: ufs: qcom: Return ufs_qcom_clk_scale_*() errors in
ufs_qcom_clk_scale_notify()
- scsi: ufs: core: Let the sq_lock protect sq_tail_slot access
- iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time
table
- iio: imu: adis16475: add spi_device_id table
- [armhf] iio: adc: ti_am335x_adc: Fix return value check of
tiadc_request_dma()
- iio: triggered-buffer: prevent possible freeing of wrong buffer
- ALSA: usb-audio: Increase delay in MOTU M quirk
- usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate 3.0 G3
- wifi: mt76: fix crash with WED rx support enabled
- wifi: cfg80211: Add my certificate
- wifi: cfg80211: fix certs build to not depend on file order
- USB: serial: ftdi_sio: update Actisense PIDs constant names
- USB: serial: option: add Quectel EG912Y module support
- USB: serial: option: add Foxconn T99W265 with new baseline
- USB: serial: option: add Quectel RM500Q R13 firmware support
- ALSA: hda/tas2781: select program 0, conf 0 by default
- ALSA: hda/realtek: Add quirk for ASUS ROG GV302XA
- ASoC: tas2781: check the validity of prm_no/cfg_no
- Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
(CVE-2023-51779)
- Bluetooth: L2CAP: Send reject on command corrupted request
- Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE
- Bluetooth: Add more enc key size check
- usb: typec: ucsi: fix gpio-based orientation detection
- net: usb: ax88179_178a: avoid failed operations when device is
disconnected
- [x86] Input: soc_button_array - add mapping for airplane mode button
- net: 9p: avoid freeing uninit memory in p9pdu_vreadf
- net: rfkill: gpio: set GPIO direction
- net: avoid build bug in skb extension length calculation
- net: stmmac: fix incorrect flag check in timestamp interrupt
- dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp
- nfsd: call nfsd_last_thread() before final nfsd_put()
- smb: client: fix OOB in cifsd when receiving compounded resps
- smb: client: fix potential OOB in cifs_dump_detail()
- smb: client: fix OOB in SMB2_query_info_init()
- smb: client: fix OOB in smbCalcSize() (CVE-2023-6606)
- [x86] drm/i915: Reject async flips with bigjoiner
- [x86] drm/i915/dmc: Don't enable any pipe DMC events
- 9p: prevent read overrun in protocol dump tracepoint
- ring-buffer: Fix 32-bit rb_time_read() race with rb_time_cmpxchg()
- ring-buffer: Remove useless update to write_stamp in rb_try_to_discard()
- ring-buffer: Fix slowpath of interrupted event
- nvmem: brcm_nvram: store a copy of NVRAM content
- Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity"
(Closes: #1059624)
- scsi: core: Always send batch on reset or error handling command
- tracing / synthetic: Disable events after testing in
synth_event_gen_test_init()
- dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata()
- [riscv64] pinctrl: starfive: jh7110: ignore disabled device tree nodes
- [risvv64] pinctrl: starfive: jh7100: ignore disabled device tree nodes
- [armhf] bus: ti-sysc: Flush posted write only after srst_udelay
- lib/vsprintf: Fix %pfwf when current node refcount == 0
- [x86] thunderbolt: Fix memory leak in margining_port_remove()
- [arm64] KVM: arm64: vgic: Simplify kvm_vgic_destroy()
- [arm64] KVM: arm64: vgic: Add a non-locking primitive for
kvm_vgic_vcpu_destroy()
- [arm64] KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy
- [x86] alternatives: Sync core before enabling interrupts
- [x86] alternatives: Disable interrupts and sync when optimizing NOPs in
place
- [x86] smpboot/64: Handle X2APIC BIOS inconsistency gracefully
.
[ Salvatore Bonaccorso ]
* [arm64] drivers/vfio: Don't enable VFIO_NOIOMMU.
This is a breach of the integrity lockdown requirement of secure boot
and thus cannot be enabled.
Thanks to Bastian Blank and Ben Hutchings
* [rt] Update to 6.6.7-rt18
.
[ Bastian Blank ]
* [mips*] Increase RELOCATION_TABLE_SIZE to 0x200000. (closes: #1059431)
.
linux (6.6.8-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.8
- afs: Fix refcount underflow from error handling race (Closes: #1052304)
- HID: lenovo: Restrict detection of patched firmware only to USB cptkbd
(Closes: #1058758)
- [mips*] PCI: loongson: Limit MRRS to 256 (Closes: #1035587)
.
linux (6.6.7-1~exp1) experimental; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.5
- r8169: fix deadlock on RTL8125 in jumbo mtu mode (Closes: #1057790)
- io_uring: don't allow discontig pages for IORING_SETUP_NO_MMAP
(CVE-2023-6560)
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
(CVE-2023-6932)
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.6
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.7
- netfilter: nf_tables: bail out on mismatching dynset and set expressions
(CVE-2023-6622)
- perf: Fix perf_event_validate_size() (CVE-2023-6931)
- [mips*] kernel: Clear FPU states when setting up kernel threads
(Closes: #1055021)
- netfilter: nft_set_pipapo: skip inactive elements during set walk
(CVE-2023-6817)
.
[ Anatoliy Gunya ]
* [riscv64] improve Starfive Visionfive 2 support: enable DW_AXI_DMAC and
MOTORCOMM_PHY as modules
.
[ Bastian Blank ]
* [i386] No longer sign kernels.
* Properly merge Build-Depends, so that we don't carry hundred identical
entries.
* [udeb] Fix nic-shared-modules dependencies.
* Add dependency on image to headers package.
.
[ Salvatore Bonaccorso ]
* Enable vDPA support (Closes: #1057619)
- drivers/vdpa: Enable VDPA and VDPA_USER as module
- drivers/virtio: Enable VIRTIO_VDPA as module
- drivers/vhost: Enable VHOST_VDPA as module
* [rt] Refresh "serial: amba-pl011: Use port lock wrappers" for context
changes
.
[ Miguel Bernal Marin ]
* [amd64] Enable System Trace Modules and the Intel Trace Hub Software
Trace Hub support (Closes: #1050353)
- drivers/hwtracing/stm: Enable STM as module
- drivers/hwtracing/stm: Enable STM_PROTO_BASIC as module
- drivers/hwtracing/stm: Enable STM_PROTO_SYS_T as module
- drivers/hwtracing/stm: Enable STM_DUMMY as module
- drivers/hwtracing/stm: Enable STM_SOURCE_CONSOLE as module
- drivers/hwtracing/stm: Enable STM_SOURCE_HEARTBEAT as module
- drivers/hwtracing/stm: Enable STM_SOURCE_FTRACE as module
- drivers/hwtracing/intel_th: Enable INTEL_TH_STH as module
.
[ Jair Gonzalez ]
* [amd64] drivers/platform/x86/intel: Enable INTEL_TPMI (Topology Aware
Register and PM Capsule Interface).
* [amd64] drivers/powercap/Kconfig: Enable INTEL_RAPL_TPMI (Running Average
Power Limit Energy Reporting via the Topology Aware Register and PM
Capsule Interface) (Closes: #1053187).
.
[ Vincent Blut ]
* [x86] sound/soc/amd: Enable SND_SOC_AMD_PS and SND_SOC_AMD_PS_MACH as
modules (Closes: #1055649)
* [x86] sound/soc/amd: Enable SND_SOC_AMD_RPL_ACP6x as module
(Closes: #1058576)
.
[ Luca Boccassi ]
* Set CONFIG_VIRTIO_FS and its dependencies to builtin, to allow building
images that boot directly to rootfs (skipping the initrd)
.
linux (6.6.4-1~exp1) experimental; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.4
- nvmet: nul-terminate the NQNs passed in the connect command
(CVE-2023-6121)
.
[ Bastian Blank ]
* Fix build dependency on rsync.
* Fix build dependency on kernel-wedge.
* udeb: Make i2c-hid modules optional.
.
[ Timothy Pearson ]
* [powerpc] Don't clobber f0/vs0 during fp|altivec register save
(Closes: #1032104)
.
[ Johannes Schauer Marin Rodrigues ]
* Fix FTCBFS: Pass _PYTHON_SYSCONFIGDATA_NAME to the perf build.
(Closes: #1037938) Thanks to Helmut Grohne for the patch.
.

[continued in next message]

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)