Package: src:linux; Maintainer for src:linux is Debian Kernel Team <debian-kernel@lists.debian.org>;
Reported by: Alfred Agrell <blubban@gmail.com>
Date: Tue, 17 Sep 2024 09:45:00 UTC
Severity: normal
Tags: upstream
Found in versions linux/6.1.106-3, linux/6.10.9-1, linux/6.11-1~exp1
Fixed in versions linux/6.11.4-1, linux/6.1.115-1
Done: Salvatore Bonaccorso <carnil@debian.org>
Bug is archived. No further changes may be made.
Forwarded to https://osdn.net/projects/tomoyo/lists/archive/users-en/2024-September/000765.html
View this report as an mbox folder, status mbox, maintainer mbox
Report forwarded
to debian-bugs-dist@lists.debian.org, blubban@gmail.com, Debian Kernel Team <debian-kernel@lists.debian.org>:
Bug#1082001; Package src:linux.
(Tue, 17 Sep 2024 09:45:00 GMT) (full text, mbox, link).
Acknowledgement sent
to Alfred Agrell <blubban@gmail.com>:
New Bug report received and forwarded. Copy sent to blubban@gmail.com, Debian Kernel Team <debian-kernel@lists.debian.org>.
(Tue, 17 Sep 2024 09:45:01 GMT) (full text, mbox, link).
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
Package: src:linux
Version: 6.1.106-3
Severity: normal
X-Debbugs-Cc: blubban@gmail.com
Dear Maintainer,
Please run the following program (as root, so the chroot succeeds):
#define _GNU_SOURCE
#include <unistd.h>
#include <fcntl.h>
#include <stdio.h>
int main(int argc, char** argv)
{
chdir("/lib/");
if (chroot("/lib/") != 0)
perror("chroot (needs root)");
execveat(open("./x86_64-linux-gnu/ld-linux-x86-64.so.2", O_RDONLY), "", NULL, NULL, AT_EMPTY_PATH);
perror("execveat");
}
Result:
The execveat returns ENOENT.
Running
bpftrace -e 'kretfunc:tomoyo_realpath_nofollow { printf("a %s %p\n", comm, retval); } kretprobe:tomoyo_bprm_check_security { printf("b %s %d\n", comm, retval); } kretprobe:bprm_execve { printf("c %s %d\n", comm, retval); }' -c './a.out'
reveals that it's the TOMOYO LSM rejecting the operation.
Expected:
Since TOMOYO is not configured (/sys/kernel/security/tomoyo/profile is just a PROFILE_VERSION), it should permit everything.
I originally discovered this with a memfd, but simplified it a bit.
I also tested kernel version linux-image-6.10.6+bpo-amd64; the issue reproduces with no changes.
-- Package-specific info:
** Version:
Linux version 6.1.0-25-amd64 (debian-kernel@lists.debian.org) (gcc-12 (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40) #1 SMP PREEMPT_DYNAMIC Debian 6.1.106-3 (2024-08-26)
** Command line:
BOOT_IMAGE=/boot/vmlinuz-6.1.0-25-amd64 root=UUID=3f03a19e-1f7e-43c8-a4e9-6297f87ce127 ro quiet
** Not tainted
** Kernel log:
[ 1.986370] input: HDA Intel PCH Front Mic as /devices/pci0000:00/0000:00:1f.3/sound/card0/input11
[ 1.986386] input: HDA Intel PCH Line as /devices/pci0000:00/0000:00:1f.3/sound/card0/input12
[ 1.986402] input: HDA Intel PCH Line Out as /devices/pci0000:00/0000:00:1f.3/sound/card0/input13
[ 1.986419] input: HDA Intel PCH Front Headphone as /devices/pci0000:00/0000:00:1f.3/sound/card0/input14
[ 1.986435] input: HDA Intel PCH HDMI/DP,pcm=3 as /devices/pci0000:00/0000:00:1f.3/sound/card0/input15
[ 1.986451] input: HDA Intel PCH HDMI/DP,pcm=7 as /devices/pci0000:00/0000:00:1f.3/sound/card0/input16
[ 1.986468] input: HDA Intel PCH HDMI/DP,pcm=8 as /devices/pci0000:00/0000:00:1f.3/sound/card0/input17
[ 1.986485] input: HDA Intel PCH HDMI/DP,pcm=9 as /devices/pci0000:00/0000:00:1f.3/sound/card0/input18
[ 2.067683] usb 1-14: New USB device found, idVendor=04ca, idProduct=3015, bcdDevice= 0.01
[ 2.067691] usb 1-14: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2.120659] pcieport 0000:00:1c.5: AER: Multiple Corrected error message received from 0000:00:1c.5
[ 2.120687] pcieport 0000:00:1c.5: PCIe Bus Error: severity=Corrected, type=Physical Layer, (Receiver ID)
[ 2.120690] pcieport 0000:00:1c.5: device [8086:43bd] error status/mask=00000001/00002000
[ 2.120694] pcieport 0000:00:1c.5: [ 0] RxErr (First)
[ 2.120711] pcieport 0000:00:1c.5: AER: Multiple Corrected error message received from 0000:00:1c.5
[ 2.120726] pcieport 0000:00:1c.5: AER: found no error details for 0000:00:1c.5
[ 2.127450] alg: No test for fips(ansi_cprng) (fips_ansi_cprng)
[ 2.154261] pcieport 0000:00:1c.5: AER: Multiple Corrected error message received from 0000:00:1c.5
[ 2.154288] pcieport 0000:00:1c.5: PCIe Bus Error: severity=Corrected, type=Physical Layer, (Receiver ID)
[ 2.154290] pcieport 0000:00:1c.5: device [8086:43bd] error status/mask=00000001/00002000
[ 2.154293] pcieport 0000:00:1c.5: [ 0] RxErr (First)
[ 2.154301] pcieport 0000:00:1c.5: AER: Multiple Corrected error message received from 0000:00:1c.5
[ 2.154314] pcieport 0000:00:1c.5: AER: found no error details for 0000:00:1c.5
[ 2.154316] pcieport 0000:00:1c.5: AER: Multiple Corrected error message received from 0000:00:1c.5
[ 2.154329] pcieport 0000:00:1c.5: AER: found no error details for 0000:00:1c.5
[ 2.154331] pcieport 0000:00:1c.5: AER: Multiple Corrected error message received from 0000:00:1c.5
[ 2.154344] pcieport 0000:00:1c.5: AER: found no error details for 0000:00:1c.5
[ 2.154345] pcieport 0000:00:1c.5: AER: Multiple Corrected error message received from 0000:00:1c.5
[ 2.154358] pcieport 0000:00:1c.5: AER: found no error details for 0000:00:1c.5
[ 2.179535] Bluetooth: Core ver 2.22
[ 2.179548] NET: Registered PF_BLUETOOTH protocol family
[ 2.179549] Bluetooth: HCI device and connection manager initialized
[ 2.179551] Bluetooth: HCI socket layer initialized
[ 2.179553] Bluetooth: L2CAP socket layer initialized
[ 2.179555] Bluetooth: SCO socket layer initialized
[ 2.184596] usbcore: registered new interface driver btusb
[ 2.184884] Bluetooth: hci0: HCI Enhanced Setup Synchronous Connection command is advertised, but not supported.
[ 2.254218] ath10k_pci 0000:03:00.0: firmware: failed to load ath10k/pre-cal-pci-0000:03:00.0.bin (-2)
[ 2.254266] firmware_class: See https://wiki.debian.org/Firmware for information about missing firmware
[ 2.254321] ath10k_pci 0000:03:00.0: firmware: failed to load ath10k/pre-cal-pci-0000:03:00.0.bin (-2)
[ 2.254372] ath10k_pci 0000:03:00.0: firmware: failed to load ath10k/cal-pci-0000:03:00.0.bin (-2)
[ 2.254415] ath10k_pci 0000:03:00.0: firmware: failed to load ath10k/cal-pci-0000:03:00.0.bin (-2)
[ 2.256737] ath10k_pci 0000:03:00.0: firmware: direct-loading firmware ath10k/QCA9377/hw1.0/firmware-6.bin
[ 2.256746] ath10k_pci 0000:03:00.0: qca9377 hw1.1 target 0x05020001 chip_id 0x003821ff sub 11ad:08a6
[ 2.256750] ath10k_pci 0000:03:00.0: kconfig debug 0 debugfs 0 tracing 0 dfs 0 testmode 0
[ 2.257752] ath10k_pci 0000:03:00.0: firmware ver WLAN.TF.2.1-00021-QCARMSWP-1 api 6 features wowlan,ignore-otp crc32 42e41877
[ 2.322632] ath10k_pci 0000:03:00.0: firmware: direct-loading firmware ath10k/QCA9377/hw1.0/board-2.bin
[ 2.322756] ath10k_pci 0000:03:00.0: board_file api 2 bmi_id N/A crc32 8aedfa4a
[ 2.420296] ath10k_pci 0000:03:00.0: htt-ver 3.56 wmi-op 4 htt-op 3 cal otp max-sta 32 raw 0 hwcrypto 1
[ 2.507568] ath: EEPROM regdomain: 0x69
[ 2.507571] ath: EEPROM indicates we should expect a direct regpair map
[ 2.507572] ath: Country alpha2 being used: 00
[ 2.507573] ath: Regpair used: 0x69
[ 2.534050] ath10k_pci 0000:03:00.0 wlp3s0: renamed from wlan0
[ 2.645690] EXT4-fs (nvme0n1p4): mounted filesystem with ordered data mode. Quota mode: none.
[ 2.648220] EXT4-fs (nvme0n1p3): mounted filesystem with ordered data mode. Quota mode: none.
[ 2.673043] audit: type=1400 audit(1726529497.707:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libreoffice-xpdfimport" pid=687 comm="apparmor_parser"
[ 2.673138] audit: type=1400 audit(1726529497.707:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libreoffice-senddoc" pid=685 comm="apparmor_parser"
[ 2.673371] audit: type=1400 audit(1726529497.707:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libreoffice-oosplash" pid=684 comm="apparmor_parser"
[ 2.673759] audit: type=1400 audit(1726529497.707:5): apparmor="STATUS" operation="profile_load" profile="unconfined" name="nvidia_modprobe" pid=680 comm="apparmor_parser"
[ 2.673761] audit: type=1400 audit(1726529497.707:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name="nvidia_modprobe//kmod" pid=680 comm="apparmor_parser"
[ 2.673859] audit: type=1400 audit(1726529497.711:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name="lsb_release" pid=679 comm="apparmor_parser"
[ 2.674277] audit: type=1400 audit(1726529497.711:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/bin/man" pid=682 comm="apparmor_parser"
[ 2.674284] audit: type=1400 audit(1726529497.711:9): apparmor="STATUS" operation="profile_load" profile="unconfined" name="man_filter" pid=682 comm="apparmor_parser"
[ 2.674289] audit: type=1400 audit(1726529497.711:10): apparmor="STATUS" operation="profile_load" profile="unconfined" name="man_groff" pid=682 comm="apparmor_parser"
[ 2.822853] NET: Registered PF_QIPCRTR protocol family
[ 2.827339] r8169 0000:02:00.0: firmware: failed to load rtl_nic/rtl8168h-2.fw (-2)
[ 2.827898] r8169 0000:02:00.0: firmware: failed to load rtl_nic/rtl8168h-2.fw (-2)
[ 2.828418] r8169 0000:02:00.0: Direct firmware load for rtl_nic/rtl8168h-2.fw failed with error -2
[ 2.828421] r8169 0000:02:00.0: Unable to load firmware rtl_nic/rtl8168h-2.fw (-2)
[ 2.857900] Generic FE-GE Realtek PHY r8169-0-200:00: attached PHY driver (mii_bus:phy_addr=r8169-0-200:00, irq=MAC)
[ 2.982412] r8169 0000:02:00.0 enp2s0: Link is Down
[ 2.984725] pcieport 0000:00:1c.5: AER: Multiple Corrected error message received from 0000:00:1c.5
[ 2.984743] pcieport 0000:00:1c.5: PCIe Bus Error: severity=Corrected, type=Physical Layer, (Receiver ID)
[ 2.984745] pcieport 0000:00:1c.5: device [8086:43bd] error status/mask=00000001/00002000
[ 2.984747] pcieport 0000:00:1c.5: [ 0] RxErr (First)
[ 3.023900] pcieport 0000:00:1c.5: AER: Multiple Corrected error message received from 0000:00:1c.5
[ 3.023915] pcieport 0000:00:1c.5: PCIe Bus Error: severity=Corrected, type=Physical Layer, (Receiver ID)
[ 3.023916] pcieport 0000:00:1c.5: device [8086:43bd] error status/mask=00000001/00002000
[ 3.023917] pcieport 0000:00:1c.5: [ 0] RxErr (First)
[ 3.387543] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[ 3.388147] pcieport 0000:00:1c.5: AER: Multiple Corrected error message received from 0000:00:1c.5
[ 3.388162] pcieport 0000:00:1c.5: PCIe Bus Error: severity=Corrected, type=Physical Layer, (Receiver ID)
[ 3.388163] pcieport 0000:00:1c.5: device [8086:43bd] error status/mask=00000001/00002000
[ 3.388165] pcieport 0000:00:1c.5: [ 0] RxErr (First)
[ 3.427794] pcieport 0000:00:1c.5: AER: Multiple Corrected error message received from 0000:00:1c.5
[ 3.427811] pcieport 0000:00:1c.5: PCIe Bus Error: severity=Corrected, type=Physical Layer, (Receiver ID)
[ 3.427812] pcieport 0000:00:1c.5: device [8086:43bd] error status/mask=00000001/00002000
[ 3.427814] pcieport 0000:00:1c.5: [ 0] RxErr (First)
[ 3.427820] pcieport 0000:00:1c.5: AER: Multiple Corrected error message received from 0000:00:1c.5
[ 3.427832] pcieport 0000:00:1c.5: AER: found no error details for 0000:00:1c.5
[ 3.427833] pcieport 0000:00:1c.5: AER: Multiple Corrected error message received from 0000:00:1c.5
[ 3.427845] pcieport 0000:00:1c.5: AER: found no error details for 0000:00:1c.5
[ 3.427846] pcieport 0000:00:1c.5: AER: Multiple Corrected error message received from 0000:00:1c.5
[ 3.427857] pcieport 0000:00:1c.5: AER: found no error details for 0000:00:1c.5
[ 3.427858] pcieport 0000:00:1c.5: AER: Multiple Corrected error message received from 0000:00:1c.5
[ 3.427870] pcieport 0000:00:1c.5: AER: found no error details for 0000:00:1c.5
[ 4.529403] r8169 0000:02:00.0 enp2s0: Link is Up - 100Mbps/Full - flow control rx/tx
[ 4.529458] IPv6: ADDRCONF(NETDEV_CHANGE): enp2s0: link becomes ready
[ 10.445478] exFAT-fs (sda1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
** Model information
sys_vendor: Acer
product_name: Aspire XC-1660
product_version:
chassis_vendor: Acer
chassis_version:
bios_vendor: American Megatrends Inc.
bios_version: R01-A2
board_vendor: Acer
board_name: Aspire XC-1660
board_version: V:1.1
** Loaded modules:
exfat
xt_CHECKSUM
xt_MASQUERADE
xt_conntrack
ipt_REJECT
nf_reject_ipv4
xt_tcpudp
nft_compat
nft_chain_nat
nf_nat
nf_conntrack
nf_defrag_ipv6
nf_defrag_ipv4
nf_tables
libcrc32c
nfnetlink
bridge
stp
llc
qrtr
binfmt_misc
nls_ascii
nls_cp437
vfat
fat
btusb
btrtl
btbcm
btintel
btmtk
bluetooth
jitterentropy_rng
ctr
drbg
ansi_cprng
ecdh_generic
joydev
ecc
snd_sof_pci_intel_tgl
ath10k_pci
snd_sof_intel_hda_common
ath10k_core
soundwire_intel
intel_rapl_msr
soundwire_generic_allocation
intel_rapl_common
soundwire_cadence
x86_pkg_temp_thermal
snd_sof_intel_hda
intel_powerclamp
ath
snd_sof_pci
snd_hda_codec_hdmi
coretemp
snd_sof_xtensa_dsp
mac80211
snd_sof
snd_sof_utils
kvm_intel
snd_soc_hdac_hda
snd_hda_ext_core
snd_soc_acpi_intel_match
snd_soc_acpi
libarc4
snd_hda_codec_realtek
snd_soc_core
snd_hda_codec_generic
snd_compress
cfg80211
ledtrig_audio
kvm
soundwire_bus
irqbypass
snd_hda_intel
snd_intel_dspcfg
snd_intel_sdw_acpi
ghash_clmulni_intel
snd_hda_codec
cryptd
snd_hda_core
sha512_ssse3
sd_mod
snd_hwdep
sha512_generic
sg
snd_pcm
sha256_ssse3
mei_hdcp
sha1_ssse3
snd_timer
iTCO_wdt
intel_cstate
uas
usb_storage
snd
intel_uncore
mei_me
intel_pmc_bxt
ee1004
rfkill
intel_wmi_thunderbolt
iTCO_vendor_support
soundcore
mei
watchdog
serio_raw
pcspkr
wmi_bmof
intel_pmc_core
acpi_pad
evdev
acpi_tad
fuse
dm_mod
loop
efi_pstore
configfs
efivarfs
ip_tables
x_tables
autofs4
ext4
crc16
mbcache
jbd2
crc32c_generic
hid_generic
usbhid
hid
i915
drm_buddy
i2c_algo_bit
drm_display_helper
cec
rc_core
ttm
drm_kms_helper
ahci
xhci_pci
nvme
libahci
xhci_hcd
nvme_core
t10_pi
drm
libata
r8169
usbcore
realtek
crc64_rocksoft
mdio_devres
crc64
scsi_mod
psmouse
libphy
crc32_pclmul
crc_t10dif
crc32c_intel
i2c_i801
crct10dif_generic
crct10dif_pclmul
i2c_smbus
crct10dif_common
scsi_common
usb_common
fan
video
wmi
button
** Network interface configuration:
*** /etc/network/interfaces:
source /etc/network/interfaces.d/*
auto lo
iface lo inet loopback
** Network status:
*** IP interfaces and addresses:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever
2: enp2s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 1c:69:7a:98:75:b8 brd ff:ff:ff:ff:ff:ff
inet 192.168.1.100/24 brd 192.168.1.255 scope global dynamic noprefixroute enp2s0
valid_lft 7089sec preferred_lft 7089sec
inet6 fe80::1e69:7aff:fe98:75b8/64 scope link noprefixroute
valid_lft forever preferred_lft forever
3: wlp3s0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
link/ether 0a:8a:b1:87:4d:84 brd ff:ff:ff:ff:ff:ff permaddr 74:4c:a1:80:ca:0d
4: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
link/ether 52:54:00:9f:0c:98 brd ff:ff:ff:ff:ff:ff
inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
valid_lft forever preferred_lft forever
*** Device statistics:
Inter-| Receive | Transmit
face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed
lo: 2264 18 0 0 0 0 0 0 2264 18 0 0 0 0 0 0
enp2s0: 2891112 3581 0 0 0 0 0 2 302835 2817 0 0 0 0 0 0
wlp3s0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
virbr0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
** PCI devices:
00:00.0 Host bridge [0600]: Intel Corporation Device [8086:4c43] (rev 01)
DeviceName: Onboard Realtek Ethernet
Subsystem: Acer Incorporated [ALI] Device [1025:1515]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0
IOMMU group: 1
Expansion ROM at <ignored>
Kernel driver in use: icl_uncore
00:02.0 VGA compatible controller [0300]: Intel Corporation RocketLake-S GT1 [UHD Graphics 750] [8086:4c8a] (rev 04) (prog-if 00 [VGA controller])
DeviceName: Onboard Intel Graphics
Subsystem: Acer Incorporated [ALI] RocketLake-S GT1 [UHD Graphics 750] [1025:1515]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 144
IOMMU group: 0
Region 0: Memory at 6000000000 (64-bit, non-prefetchable) [size=16M]
Region 2: Memory at 4000000000 (64-bit, prefetchable) [size=256M]
Region 4: I/O ports at 4000 [size=64]
Expansion ROM at 000c0000 [virtual] [disabled] [size=128K]
Capabilities: <access denied>
Kernel driver in use: i915
Kernel modules: i915
00:14.0 USB controller [0c03]: Intel Corporation Tiger Lake-H USB 3.2 Gen 2x1 xHCI Host Controller [8086:43ed] (rev 11) (prog-if 30 [XHCI])
Subsystem: Acer Incorporated [ALI] Tiger Lake-H USB 3.2 Gen 2x1 xHCI Host Controller [1025:1515]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0
Interrupt: pin A routed to IRQ 128
IOMMU group: 2
Region 0: Memory at 6001100000 (64-bit, non-prefetchable) [size=64K]
Capabilities: <access denied>
Kernel driver in use: xhci_hcd
Kernel modules: xhci_pci
00:14.2 RAM memory [0500]: Intel Corporation Tiger Lake-H Shared SRAM [8086:43ef] (rev 11)
Subsystem: Acer Incorporated [ALI] Tiger Lake-H Shared SRAM [1025:1515]
Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
IOMMU group: 2
Region 0: Memory at 6001114000 (64-bit, non-prefetchable) [disabled] [size=16K]
Region 2: Memory at 600111a000 (64-bit, non-prefetchable) [disabled] [size=4K]
Capabilities: <access denied>
00:16.0 Communication controller [0780]: Intel Corporation Tiger Lake-H Management Engine Interface [8086:43e0] (rev 11)
Subsystem: Acer Incorporated [ALI] Tiger Lake-H Management Engine Interface [1025:1515]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0
Interrupt: pin A routed to IRQ 145
IOMMU group: 3
Region 0: Memory at 6001119000 (64-bit, non-prefetchable) [size=4K]
Capabilities: <access denied>
Kernel driver in use: mei_me
Kernel modules: mei_me
00:17.0 SATA controller [0106]: Intel Corporation Device [8086:43d2] (rev 11) (prog-if 01 [AHCI 1.0])
DeviceName: Onboard Intel SATA Controller
Subsystem: Acer Incorporated [ALI] Device [1025:1515]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0
Interrupt: pin A routed to IRQ 126
IOMMU group: 4
Region 0: Memory at 9fc00000 (32-bit, non-prefetchable) [size=8K]
Region 1: Memory at 9fc03000 (32-bit, non-prefetchable) [size=256]
Region 2: I/O ports at 4090 [size=8]
Region 3: I/O ports at 4080 [size=4]
Region 4: I/O ports at 4060 [size=32]
Region 5: Memory at 9fc02000 (32-bit, non-prefetchable) [size=2K]
Capabilities: <access denied>
Kernel driver in use: ahci
Kernel modules: ahci
00:1b.0 PCI bridge [0604]: Intel Corporation Device [8086:43c4] (rev 11) (prog-if 00 [Normal decode])
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 122
IOMMU group: 5
Bus: primary=00, secondary=01, subordinate=01, sec-latency=0
I/O behind bridge: [disabled] [16-bit]
Memory behind bridge: 9fb00000-9fbfffff [size=1M] [32-bit]
Prefetchable memory behind bridge: [disabled] [64-bit]
Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort+ <SERR- <PERR-
BridgeCtl: Parity- SERR+ NoISA- VGA- VGA16+ MAbort- >Reset- FastB2B-
PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
Capabilities: <access denied>
Kernel driver in use: pcieport
00:1c.0 PCI bridge [0604]: Intel Corporation Tiger Lake-H PCI Express Root Port #5 [8086:43bc] (rev 11) (prog-if 00 [Normal decode])
Subsystem: Acer Incorporated [ALI] Tiger Lake-H PCI Express Root Port [1025:1515]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 123
IOMMU group: 6
Bus: primary=00, secondary=02, subordinate=02, sec-latency=0
I/O behind bridge: 3000-3fff [size=4K] [16-bit]
Memory behind bridge: 9fa00000-9fafffff [size=1M] [32-bit]
Prefetchable memory behind bridge: [disabled] [64-bit]
Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort+ <SERR- <PERR-
BridgeCtl: Parity- SERR+ NoISA- VGA- VGA16+ MAbort- >Reset- FastB2B-
PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
Capabilities: <access denied>
Kernel driver in use: pcieport
00:1c.5 PCI bridge [0604]: Intel Corporation Device [8086:43bd] (rev 11) (prog-if 00 [Normal decode])
Subsystem: Acer Incorporated [ALI] Device [1025:1515]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin B routed to IRQ 124
IOMMU group: 7
Bus: primary=00, secondary=03, subordinate=03, sec-latency=0
I/O behind bridge: [disabled] [16-bit]
Memory behind bridge: 9f800000-9f9fffff [size=2M] [32-bit]
Prefetchable memory behind bridge: [disabled] [64-bit]
Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort+ <SERR- <PERR-
BridgeCtl: Parity- SERR+ NoISA- VGA- VGA16+ MAbort- >Reset- FastB2B-
PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
Capabilities: <access denied>
Kernel driver in use: pcieport
00:1f.0 ISA bridge [0601]: Intel Corporation B560 LPC/eSPI Controller [8086:4387] (rev 11)
Subsystem: Acer Incorporated [ALI] B560 LPC/eSPI Controller [1025:1515]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0
IOMMU group: 8
00:1f.3 Audio device [0403]: Intel Corporation Tiger Lake-H HD Audio Controller [8086:43c8] (rev 11)
Subsystem: Acer Incorporated [ALI] Tiger Lake-H HD Audio Controller [1025:1515]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 32, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 146
IOMMU group: 8
Region 0: Memory at 6001110000 (64-bit, non-prefetchable) [size=16K]
Region 4: Memory at 6001000000 (64-bit, non-prefetchable) [size=1M]
Capabilities: <access denied>
Kernel driver in use: snd_hda_intel
Kernel modules: snd_hda_intel, snd_sof_pci_intel_tgl
00:1f.4 SMBus [0c05]: Intel Corporation Tiger Lake-H SMBus Controller [8086:43a3] (rev 11)
Subsystem: Acer Incorporated [ALI] Tiger Lake-H SMBus Controller [1025:1515]
Control: I/O+ Mem+ BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Interrupt: pin A routed to IRQ 16
IOMMU group: 8
Region 0: Memory at 6001118000 (64-bit, non-prefetchable) [size=256]
Region 4: I/O ports at efa0 [size=32]
Kernel driver in use: i801_smbus
Kernel modules: i2c_i801
00:1f.5 Serial bus controller [0c80]: Intel Corporation Tiger Lake-H SPI Controller [8086:43a4] (rev 11)
Subsystem: Acer Incorporated [ALI] Tiger Lake-H SPI Controller [1025:1515]
Control: I/O- Mem+ BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
IOMMU group: 8
Region 0: Memory at 9fc04000 (32-bit, non-prefetchable) [size=4K]
01:00.0 Non-Volatile memory controller [0108]: Micron Technology Inc 2210 NVMe SSD [Cobain] [1344:5404] (rev 03) (prog-if 02 [NVM Express])
Subsystem: Micron Technology Inc 2210 NVMe SSD [Cobain] [1344:2100]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 16
IOMMU group: 9
Region 0: Memory at 9fb00000 (64-bit, non-prefetchable) [size=16K]
Capabilities: <access denied>
Kernel driver in use: nvme
Kernel modules: nvme
02:00.0 Ethernet controller [0200]: Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller [10ec:8168] (rev 15)
Subsystem: Acer Incorporated [ALI] RTL8111/8168/8211/8411 PCI Express Gigabit Ethernet Controller [1025:1515]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 16
IOMMU group: 10
Region 0: I/O ports at 3000 [size=256]
Region 2: Memory at 9fa04000 (64-bit, non-prefetchable) [size=4K]
Region 4: Memory at 9fa00000 (64-bit, non-prefetchable) [size=16K]
Capabilities: <access denied>
Kernel driver in use: r8169
Kernel modules: r8169
03:00.0 Network controller [0280]: Qualcomm Atheros QCA9377 802.11ac Wireless Network Adapter [168c:0042] (rev 31)
Subsystem: Lite-On Communications Inc Qualcomm Atheros QCA9377 802.11ac Wireless Network Adapter [11ad:08a6]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 147
IOMMU group: 11
Region 0: Memory at 9f800000 (64-bit, non-prefetchable) [size=2M]
Capabilities: <access denied>
Kernel driver in use: ath10k_pci
Kernel modules: ath10k_pci
** USB devices:
Bus 002 Device 002: ID 0bc2:2030 Seagate RSS LLC Expansion HDD
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 003: ID 046d:c34b Logitech, Inc. USB Keyboard
Bus 001 Device 002: ID 046d:c077 Logitech, Inc. Mouse
Bus 001 Device 004: ID 04ca:3015 Lite-On Technology Corp. Qualcomm Atheros QCA9377 Bluetooth
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
-- System Information:
Debian Release: 12.7
APT prefers stable-security
APT policy: (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 6.1.0-25-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages linux-image-6.1.0-25-amd64 depends on:
ii initramfs-tools [linux-initramfs-tool] 0.142+deb12u1
ii kmod 30+20221128-1
ii linux-base 4.9
Versions of packages linux-image-6.1.0-25-amd64 recommends:
ii apparmor 3.0.8-3
ii firmware-linux-free 20200122-1
Versions of packages linux-image-6.1.0-25-amd64 suggests:
pn debian-kernel-handbook <none>
ii grub-efi-amd64 2.06-13+deb12u1
pn linux-doc-6.1 <none>
Versions of packages linux-image-6.1.0-25-amd64 is related to:
pn firmware-amd-graphics <none>
ii firmware-atheros 20230210-5
pn firmware-bnx2 <none>
pn firmware-bnx2x <none>
pn firmware-brcm80211 <none>
pn firmware-cavium <none>
pn firmware-intel-sound <none>
pn firmware-intelwimax <none>
pn firmware-ipw2x00 <none>
pn firmware-ivtv <none>
pn firmware-iwlwifi <none>
pn firmware-libertas <none>
pn firmware-linux-nonfree <none>
ii firmware-misc-nonfree 20230210-5
pn firmware-myricom <none>
pn firmware-netxen <none>
pn firmware-qlogic <none>
pn firmware-realtek <none>
pn firmware-samsung <none>
pn firmware-siano <none>
pn firmware-ti-connectivity <none>
pn xen-hypervisor <none>
-- no debconf information
Information forwarded
to debian-bugs-dist@lists.debian.org, Debian Kernel Team <debian-kernel@lists.debian.org>:
Bug#1082001; Package src:linux.
(Mon, 23 Sep 2024 23:33:01 GMT) (full text, mbox, link).
Acknowledgement sent
to Ben Hutchings <ben@decadent.org.uk>:
Extra info received and forwarded to list. Copy sent to Debian Kernel Team <debian-kernel@lists.debian.org>.
(Mon, 23 Sep 2024 23:33:01 GMT) (full text, mbox, link).
Message #10 received at 1082001@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
Control: tag -1 upstream
On Tue, 2024-09-17 at 01:45 +0200, Alfred Agrell wrote:
> Package: src:linux
> Version: 6.1.106-3
> Severity: normal
> X-Debbugs-Cc: blubban@gmail.com
>
> Dear Maintainer,
>
> Please run the following program (as root, so the chroot succeeds):
>
>
> #define _GNU_SOURCE
> #include <unistd.h>
> #include <fcntl.h>
> #include <stdio.h>
>
> int main(int argc, char** argv)
> {
> chdir("/lib/");
> if (chroot("/lib/") != 0)
> perror("chroot (needs root)");
> execveat(open("./x86_64-linux-gnu/ld-linux-x86-64.so.2", O_RDONLY), "", NULL, NULL, AT_EMPTY_PATH);
> perror("execveat");
> }
[...]
When you pass an fd other than AT_FDCWD to execveat(), the fd and
filename are translated internally to a filename starting with
"/dev/fd/". It's noted in the manual page that this affects the way
script interpreters are called. Another consequence is that when
TOMOYO tries to look up that filename it finds that it does not exist.
I verified that if /dev and /proc are mounted in the chroot your test
program works.
This isn't a high priority for us, but if you report this upstream it
might be fixed. You'll need to subscribe to the TOMOYO mailing list at
<https://lists.osdn.me/mailman/listinfo/tomoyo-users-en> and then send
your report there.
Ben.
--
Ben Hutchings
Knowledge is power. France is bacon.
[signature.asc (application/pgp-signature, inline)]
Added tag(s) upstream.
Request was from Ben Hutchings <ben@decadent.org.uk>
to 1082001-submit@bugs.debian.org.
(Mon, 23 Sep 2024 23:33:01 GMT) (full text, mbox, link).
Marked as found in versions linux/6.10.9-1.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Wed, 25 Sep 2024 20:45:03 GMT) (full text, mbox, link).
Marked as found in versions linux/6.11-1~exp1.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Wed, 25 Sep 2024 20:45:03 GMT) (full text, mbox, link).
Information forwarded
to debian-bugs-dist@lists.debian.org, Debian Kernel Team <debian-kernel@lists.debian.org>:
Bug#1082001; Package src:linux.
(Wed, 25 Sep 2024 20:51:01 GMT) (full text, mbox, link).
Acknowledgement sent
to Salvatore Bonaccorso <carnil@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Kernel Team <debian-kernel@lists.debian.org>.
(Wed, 25 Sep 2024 20:51:02 GMT) (full text, mbox, link).
Message #21 received at 1082001@bugs.debian.org (full text, mbox, reply):
Control: forwarded -1 https://osdn.net/projects/tomoyo/lists/archive/users-en/2024-September/000765.html
Hi,
On Tue, Sep 24, 2024 at 01:28:19AM +0200, Ben Hutchings wrote:
> Control: tag -1 upstream
>
> On Tue, 2024-09-17 at 01:45 +0200, Alfred Agrell wrote:
> > Package: src:linux
> > Version: 6.1.106-3
> > Severity: normal
> > X-Debbugs-Cc: blubban@gmail.com
> >
> > Dear Maintainer,
> >
> > Please run the following program (as root, so the chroot succeeds):
> >
> >
> > #define _GNU_SOURCE
> > #include <unistd.h>
> > #include <fcntl.h>
> > #include <stdio.h>
> >
> > int main(int argc, char** argv)
> > {
> > chdir("/lib/");
> > if (chroot("/lib/") != 0)
> > perror("chroot (needs root)");
> > execveat(open("./x86_64-linux-gnu/ld-linux-x86-64.so.2", O_RDONLY), "", NULL, NULL, AT_EMPTY_PATH);
> > perror("execveat");
> > }
> [...]
>
> When you pass an fd other than AT_FDCWD to execveat(), the fd and
> filename are translated internally to a filename starting with
> "/dev/fd/". It's noted in the manual page that this affects the way
> script interpreters are called. Another consequence is that when
> TOMOYO tries to look up that filename it finds that it does not exist.
> I verified that if /dev and /proc are mounted in the chroot your test
> program works.
>
> This isn't a high priority for us, but if you report this upstream it
> might be fixed. You'll need to subscribe to the TOMOYO mailing list at
> <https://lists.osdn.me/mailman/listinfo/tomoyo-users-en> and then send
> your report there.
This was reported upstream at
https://osdn.net/projects/tomoyo/lists/archive/users-en/2024-September/000765.html
Regards
Salvatore
Set Bug forwarded-to-address to 'https://osdn.net/projects/tomoyo/lists/archive/users-en/2024-September/000765.html'.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to 1082001-submit@bugs.debian.org.
(Wed, 25 Sep 2024 20:51:02 GMT) (full text, mbox, link).
Added tag(s) pending.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Sun, 20 Oct 2024 18:45:03 GMT) (full text, mbox, link).
Reply sent
to Salvatore Bonaccorso <carnil@debian.org>:
You have taken responsibility.
(Mon, 21 Oct 2024 06:03:05 GMT) (full text, mbox, link).
Notification sent
to Alfred Agrell <blubban@gmail.com>:
Bug acknowledged by developer.
(Mon, 21 Oct 2024 06:03:05 GMT) (full text, mbox, link).
Message #30 received at 1082001-close@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
Source: linux
Source-Version: 6.11.4-1
Done: Salvatore Bonaccorso <carnil@debian.org>
We believe that the bug you reported is fixed in the latest version of
linux, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1082001@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Salvatore Bonaccorso <carnil@debian.org> (supplier of updated linux package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 20 Oct 2024 20:51:13 +0200
Source: linux
Architecture: source
Version: 6.11.4-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 1076483 1078696 1081833 1082001 1082795
Changes:
linux (6.11.4-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.3
- [amd64] static_call: Handle module init failure correctly in
static_call_del_module()
- [amd64] static_call: Replace pointless WARN_ON() in
static_call_module_notify()
- jump_label: Fix static_key_slow_dec() yet again
- scsi: st: Fix input/output error on empty drive reset
- scsi: pm8001: Do not overwrite PCI queue mapping
- drm/i915/psr: Do not wait for PSR being idle on on Panel Replay
- [x86] drm/i915/display: BMG supports UHBR13.5
- [x86] drm/i915/dp: Fix AUX IO power enabling for eDP PSR
- drm/amdgpu: Fix get each xcp macro
- drm/amd/display: handle nulled pipe context in DCE110's set_drr()
- ksmbd: fix warning: comparison of distinct pointer types lacks a cast
- [arm64] mailbox: ARM_MHU_V3 should depend on ARM64
- [arm64,armhf] mailbox: rockchip: fix a typo in module autoloading
- [arm*] mailbox: bcm2835: Fix timeout during suspend mode
- ceph: fix a memory leak on cap_auths in MDS client
- ceph: remove the incorrect Fw reference check when dirtying pages
- [x86] drm/i915/dp: Fix colorimetry detection
- ieee802154: Fix build error
- net: sparx5: Fix invalid timestamps
- net/mlx5: Fix error path in multi-packet WQE transmit
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: SHAMPO, Fix overflow of hd_per_wq
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- afs: Fix missing wire-up of afs_retry_request()
- afs: Fix the setting of the server responding flag
- net: dsa: improve shutdown sequence
- net: Add netif_get_gro_max_size helper for GRO
- net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size
- net: ethernet: lantiq_etop: fix memory disclosure
- net: fec: Restart PPS after link state change
- net: fec: Reload PTP registers after link-state change
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- netfs: Fix missing wakeup after issuing writes
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- net: phy: realtek: Check the index value in led_hw_control_get
- bridge: mcast: Fail MDB get request on empty entry
- net/ncsi: Disable the ncsi work before freeing the associated structure
- iomap: constrain the file range passed to iomap_file_unshare
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- ASoC: topology: Fix incorrect addressing assignments
- drm/connector: hdmi: Fix writing Dynamic Range Mastering infoframes
- io_uring: fix memory leak when cache init fail
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ALSA: hda/realtek: Fix the push button function for the ALC257
- cifs: Remove intermediate object of failed create reparse call
- [x86] ASoC: Intel: soc-acpi-intel-rpl-match: add missing empty item
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- cifs: Fix buffer overflow when parsing NFS reparse points
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- gpiolib: Fix potential NULL pointer dereference in gpiod_get_label()
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- drm/amd/display: Disable replay if VRR capability is false
- drm/amd/display: Fix VRR cannot enable
- drm/amd/display: Re-enable panel replay feature
- e1000e: avoid failing the system during pm_suspend (Closes: #1082795)
- l2tp: prevent possible tunnel refcount underflow
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- [x86] intel_idle: Disable promotion to C1E on Jasper Lake and Elkhart Lake
- [x86] crypto: x86/sha256 - Add parentheses around macros' single arguments
- crypto: octeontx - Fix authenc setkey
- crypto: octeontx2 - Fix authenc setkey
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and
ice_sched_add_node()
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: cfg80211: Set correct chandef when starting CAC
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- [arm64] net: hisilicon: hip04: fix OF node leak in probe()
- [arm64] net: hisilicon: hns_dsaf_mac: fix OF node leak in
hns_mac_get_info()
- [arm64] net: hisilicon: hns_mdio: fix OF node leak in probe()
- ACPI: PAD: fix crash in exit_round_robin()
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- exec: don't WARN for racy path_noexec check
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ACPI: resource: Skip IRQ override on Asus Vivobook Go E1404GAB
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- ACPI: CPPC: Add support for setting EPP register in FFH
- blk_iocost: fix more out of bound shifts
- btrfs: don't readahead the relocation inode on RST
- wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: rtw88: select WANT_DEV_COREDUMP
- l2tp: free sessions using rcu
- l2tp: use rcu list add/del when updating lists
- wifi: rtw89: 885xb: reset IDMEM mode to prevent download firmware failure
- ACPI: EC: Do not release locks during operation region accesses
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in
acpi_db_convert_to_package()
- tipc: guard against string buffer overrun
- net: skbuff: sprinkle more __GFP_NOWARN on ingress allocs
- net: mvpp2: Increase size of queue_name buffer
- bnxt_en: Extend maximum length of version string by 1 byte
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- wifi: rtw89: correct base HT rate mask for firmware
- netfilter: nf_tables: do not remove elements if set backend implements
.abort
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- nvme-keyring: restrict match length for version '1' identifiers
- nvme-tcp: sanitize TLS key handling
- nvme-tcp: check for invalidated or revoked key
- net: atlantic: Avoid warning about potential string truncation
- crypto: simd - Do not call crypto_alloc_tfm during registration
- netpoll: Ensure clean state on setup failures
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- wifi: iwlwifi: mvm: use correct key iteration
- wifi: iwlwifi: allow only CN mcc from WRDD
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- virt: sev-guest: Ensure the SNP guest messages do not exceed a page
- wifi: mac80211: fix RCU list iterations
- ACPICA: iasl: handle empty connection_node
- proc: add config & param to block forcing mem writes
- vfs: use RCU in ilookup
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- nvme: fix metadata handling in nvme-passthrough
- can: netlink: avoid call to do_set_data_bittiming callback with stale
can_priv::ctrlmode
- netdev-genl: Set extack and fix error on napi-get
- wifi: wilc1000: Do not operate uninitialized hardware during
suspend/resume
- block: fix integer overflow in BLKSECDISCARD
- [x86] cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- [arm64] trans_pgd: mark PTEs entries as valid to avoid dead kexec()
- net: phy: Check for read errors in SIOCGMIIREG
- wifi: rtw89: avoid reading out of bounds when loading TX power FW elements
- [x86] bugs: Add missing NO_SSB flag
- [x86] bugs: Fix handling when SRSO mitigation is disabled
- net: napi: Prevent overflow of napi_defer_hard_irqs
- [arm64] crypto: hisilicon - fix missed error branch
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
- wifi: mwifiex: Fix memcpy() field-spanning write warning in
mwifiex_cmd_802_11_scan_ext()
- netfs: Cancel dirty folios that have no storage destination
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- ALSA: usb-audio: Add input value sanity checks for standard types
- [x86] ioapic: Handle allocation failures gracefully
- [x86] apic: Remove logical destination mode for 64-bit
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Add quirk for RME Digiface USB
- ALSA: usb-audio: Add mixer quirk for RME Digiface USB
- ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init
- ALSA: usb-audio: Add logitech Audio profile quirk
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: control: Take power_ref lock primarily
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- [x86] pkeys: Add PKRU as a parameter in signal handling functions
- [x86] pkeys: Restore altstack access in sigreturn()
- [x86] kexec: Add EFI config table identity mapping for kexec kernel
- [x86] mm/ident_map: Use gbpages only where full GB page should be mapped.
- ALSA: asihpi: Fix potential OOB array access
- ALSA: hdsp: Break infinite MIDI input flush loop
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- [x86] syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- [x86] ASoC: Intel: boards: always check the result of
acpi_dev_get_first_match_dev()
- rcu-tasks: Fix access non-existent percpu rtpcp variable in
rcu_tasks_need_gpcb()
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- fbdev: efifb: Register sysfs groups through driver core
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- pmdomain: core: Don't hold the genpd-lock when calling dev_pm_domain_set()
- pmdomain: core: Use dev_name() instead of kobject_get_path() in debugfs
- rcuscale: Provide clear error when async specified without primitives
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- [arm64] iommu/arm-smmu-v3: Match Stall behaviour for S2
- [amd64] iommu/vt-d: Always reserve a domain ID for identity setup
- [amd64] iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0
count
- [amd64] iommu/vt-d: Unconditionally flush device TLB for pasid table
updates
- [arm64] iommu/arm-smmu-v3: Do not use devm for the cd table allocations
- drm/stm: Avoid use-after-free issues with crtc and plane
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- drm/amd/display: Check null pointers before using them
- drm/amd/display: Check null pointers before used
- drm/amd/display: Check null pointers before multiple uses
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- drm/amd/display: Add null check for head_pipe in
dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in
dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in
dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in
dcn401_init_hw
- drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw
- drm/amd/display: Add null check for pipe_ctx->plane_state in
dcn20_program_pipe
- drm/amd/display: Add null check for top_pipe_to_program in
commit_planes_for_stream
- drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces
- ata: pata_serverworks: Do not use the term blacklist
- ata: sata_sil: Rename sil_blacklist to sil_quirks
- scsi: smartpqi: Add new controller PCI IDs
- HID: Ignore battery for all ELAN I2C-HID devices
- drm/amd/display: Underflow Seen on DCN401 eGPU
- drm/amd/display: Handle null 'stream_status' in
'planes_changed_for_existing_stream'
- drm/amd/display: Add NULL check for function pointer in
dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in
dcn401_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in
dcn32_set_output_transfer_func
- drm/amd/display: fix a UBSAN warning in DML2.1
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)
- drm/amd/display: Check null pointers before using dc->clk_mgr
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Add null check for 'afb' in
amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: fix double free issue during amdgpu module unload
- drm/amdgpu: add list empty check to avoid null pointer issue
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- scsi: smartpqi: correct stream detection
- scsi: smartpqi: add new controller PCI IDs
- drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs
- jfs: Fix uninit-value access of new_ea in ea_buffer
- drm/amdgpu: add raven1 gfxoff quirk
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- [x86] platform/x86: touchscreen_dmi: add nanote-next quirk
- [x86] platform/x86/amd: pmf: Add quirk for TUF Gaming A14
- drm/stm: ltdc: reset plane transparency after plane disable
- drm/amd/display: Initialize denominators' default to 1
- drm/amd/display: Check null-initialized variables
- drm/amd/display: Check phantom_stream before it is used
- drm/amd/display: Check stream before comparing them
- drm/amd/display: Deallocate DML memory if allocation fails
- drm/amd/display: Increase array size of dummy_boolean
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format
translation
- drm/amd/display: Fix index out of bounds in degamma hardware format
translation
- drm/amd/display: Implement bounds check for stream encoder creation in
DCN401
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amdgpu/gfx12: properly handle error ints on all pipes
- drm/amdgpu/gfx9: properly handle error ints on all pipes
- drm/amd/display: Fix possible overflow in integer multiplication
- drm/amd/display: Check stream_status before it is used
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/printer: Allow NULL data in devcoredump printer
- [x86] perf,x86: avoid missing caller address in stack traces captured in
uprobe
- scsi: aacraid: Rearrange order of struct aac_srb_unit
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata
paths
- scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached
topology
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/amd/display: Force enable 3DLUT DMA check for dcn401 in DML
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- drm/amdgpu: fix unchecked return value warning for amdgpu_atombios
- perf: Fix event_function_call() locking
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- drm/amd/display: Unlock Pipes Based On DET Allocation
- drm/amdgpu: fix ptr check warning in gfx9 ip_dump
- drm/amdgpu: fix ptr check warning in gfx10 ip_dump
- drm/amdgpu: fix ptr check warning in gfx11 ip_dump
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: enter safe mode before touching CP_INT_CNTL
- drm/amd/pm: ensure the fw_info is not null before using it
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/display: guard write a 0 post_divider value to HW
- [powerpc*] pseries: Use correct data types from pseries_hp_errorlog struct
- ovl: fsync after metadata copy-up
- drm/amdgpu/gfx12: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- [x86] platform/x86: lenovo-ymc: Ignore the 0x0 state
- tools/hv: Add memory allocation check in hv_fcopy_start
- HID: i2c-hid: ensure various commands do not interfere with each other
- ksmbd: add refcnt to ksmbd_conn struct
- [x86] platform/x86: x86-android-tablets: Adjust Xiaomi Pad 2 bottom bezel
touch buttons LED
- ext4: filesystems without casefold feature cannot be mounted with siphash
- bpf: Make the pointer returned by iter next method valid
- ext4: ext4_search_dir should return a proper error
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- iomap: handle a post-direct I/O invalidate race in
iomap_write_delalloc_release
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- bpf: Fix a sdiv overflow issue
- EINJ, CXL: Fix CXL device SBDF calculation
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- spi: s3c64xx: fix timeout counters in flush_fifo
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- ALSA: control: Fix power_ref lock order for compat code, too
- perf callchain: Fix stitch LBR memory leaks
- perf: Really fix event_function_call() locking
- ext4: fix error message when rejecting the default hash
- nvme-tcp: fix link failure for TCP auth
- f2fs: add write priority option based on zone UFS
- f2fs: fix to don't panic system for no free segment fault injection
- [powerpc*] vdso: Fix VDSO data access when running in a non-root time
namespace
- f2fs: make BG GC more aggressive for zoned devices
- f2fs: introduce migration_window_granularity
- f2fs: increase BG GC migration window granularity when boosted for zoned
devices
- f2fs: do FG_GC when GC boosting is required for zoned devices
- f2fs: forcibly migrate to secure space for zoned device file pinning
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
(Closes: #1081833)
- [x86] platform/x86: x86-android-tablets: Fix use after free on
platform_device_register() errors
- [x86] platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- [arm64] KVM: arm64: Fix kvm_has_feat*() handling of negative features
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- i2c: core: Lock address during client device instantiation
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: designware: fix controller is holding SCL low while ENABLE bit is
disabled
- i2c: synquacer: Deal with optional PCLK correctly
- ovl: fail if trusted xattrs are needed but caller lacks permission
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- memory: tegra186-emc: drop unused to_tegra186_emc()
- dt-bindings: clock: exynos7885: Fix duplicated binding
- spi: bcm63xx: Fix module autoloading
- spi: bcm63xx: Fix missing pm_runtime_disable()
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- mm, slub: avoid zeroing kmalloc redzone
- power: supply: Drop use_cnt check from
power_supply_property_is_writeable()
- perf/core: Fix small negative period being ignored
- drm/v3d: Prevent out of bounds access in performance query extensions
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- ALSA: core: add isascii() check to card ID generator
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ext4: no need to continue when the number of entries is 1
- ext4: correct encrypted dentry name hash when not casefolded
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: dax: fix overflowing extents beyond inode size when partially
writing
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: fix double brelse() the buffer of the extents path
- ext4: fix timer use-after-free on failed mount
- ext4: fix access to uninitialised lock in fc replay path
- ext4: update orig_path in ext4_find_extent()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in
jbd2_journal_shrink_checkpoint_list()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: fix off by one issue in alloc_flex_gd()
- drm/rockchip: vop: clear DMA stop bit on RK3066
- of: address: Report error on resource bounds overflow
- of/irq: Support #msi-cells=<0> in of_msi_get_domain
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- resource: fix region_intersects() vs add_memory_driver_managed()
- lib/buildid: harden build ID parsing logic
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns
error
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- mm: krealloc: consider spare memory for __GFP_ZERO
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- scripts/gdb: fix timerlist parsing issue
- scripts/gdb: add iteration function for rbtree
- scripts/gdb: fix lx-mounts command error
- [arm64] fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- [arm64] Subscribe Microsoft Azure Cobalt 100 to erratum 3194386
- sched/deadline: Comment sched_dl_entity::dl_server variable
- sched/core: Add clearing of ->dl_server in put_prev_task_balance()
- sched/core: Clear prev->dl_server in CFS pick fast path
- sched: psi: fix bogus pressure spikes from aggregation race
- [riscv64] define ILLEGAL_POINTER_VALUE for 64bit
- exfat: fix memory leak in exfat_load_bitmap()
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- perf hist: Update hist symbol when updating maps
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- NFSD: Fix NFSv4's PUTPUBFH operation
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master
Driver Due to Race Condition
- sysctl: avoid spurious permanent empty tables
- RDMA/mana_ib: use the correct page table index based on hardware page size
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell
page
- drivers/perf: riscv: Align errno for unsupported perf event
- [riscv64] Fix kernel stack size when KASAN is enabled
- aoe: fix the potential use-after-free problem in more places
- media: imx335: Fix reset-gpio handling
- media: ov5675: Fix power on/off delay timings
- clk: rockchip: fix error for unknown clocks
- leds: pca9532: Remove irrelevant blink configuration error message
- remoteproc: k3-r5: Fix error handling when power-up failed
- gfs2: fix double destroy_workqueue error
- media: videobuf2: Drop minimum allocation requirement of 2 buffers
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- clk: qcom: gcc-sc8180x: Register QUPv3 RCGs for DFS on sc8180x
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- media: venus: fix use after free bug in venus_remove due to race condition
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- media: qcom: camss: Remove use_count guard in stop_streaming
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- media: qcom: camss: Fix ordering of pm_runtime_enable
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- drm/amd/display: avoid set dispclk to 0
- smb: client: use actual path when queryfs
- smb3: fix incorrect mode displayed for read-only files
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- net: gso: fix tcp fraglist segmentation after pull from frag_list
- gso: fix udp gso fraglist segmentation after pull from frag_list
- tomoyo: fallback to realpath if symlink's pathname does not exist
(Closes: #1082001)
- net: stmmac: Fix zero-division error when disabling tc cbs
- rtc: at91sam9: fix OF node leak in probe() error path
- mm/filemap: fix filemap_get_folios_contig THP panic
- mm/hugetlb: fix memfd_pin_folios free_huge_pages leak
- mm/hugetlb: fix memfd_pin_folios resv_huge_pages leak
- mm/gup: fix memfd_pin_folios hugetlb page allocation
- mm/gup: fix memfd_pin_folios alloc race panic
- mm/hugetlb: simplify refs in memfd_alloc_folio
- Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- HID: bpf: fix cfi stubs for hid_bpf_ops
- cachefiles: fix dentry leak in cachefiles_open_file()
- pidfs: check for valid pid namespace
- ACPI: video: Add backlight=native quirk for Dell OptiPlex 5480 AIO
- ACPI: resource: Remove duplicate Asus E1504GAB IRQ override
- ACPI: resource: Loosen the Asus E1404GAB DMI match to also cover the
E1404GA
- ACPI: resource: Add Asus Vivobook X1704VAP to
irq1_level_low_skip_override[] (Closes: #1078696)
- ACPI: resource: Add Asus ExpertBook B2502CVA to
irq1_level_low_skip_override[]
- btrfs: send: fix buffer overflow detection when copying path to cache
entry
- btrfs: fix a NULL pointer dereference when failed to start a new
trasacntion
- btrfs: drop the backref cache during relocation if we commit
- btrfs: send: fix invalid clone operation for file that got its size
decreased
- btrfs: wait for fixup workers before stopping cleaner kthread during
umount
- cpufreq: Avoid a bad reference count on CPU node
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
(Closes: #1076483)
- gpio: davinci: fix lazy disable
- net: pcs: xpcs: fix the wrong register that was written back
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
(CVE-2024-8805)
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- io_uring/net: harden multishot termination case for recv
- ceph: fix cap ref leak via netfs init_request
- tracing/hwlat: Fix a race during cpuhp processing
- tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix duplicated kthread creation due to CPU
online/offline
- rtla: Fix the help text in osnoise and timerlat top tools
- firmware/sysfb: Disable sysfb for firmware buffers with unknown parent
- close_range(): fix the logics in descriptor table trimming
- [x86] drm/i915/gem: fix bitwise and logical AND mixup
- drm/sched: Fix dynamic job-flow control race
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job
- drm/sched: Always increment correct scheduler score
- drm/amd/display: Restore Optimized pbn Value if Failed to Disable DSC
- drm/amd/display: Add HDR workaround for specific eDP
- drm/amd/display: Enable idle workqueue for more IPS modes
- drm/amd/display: update DML2 policy
EnhancedPrefetchScheduleAccelerationFinal DCN35
- drm/amd/display: Fix system hang while resume with TBT monitor
- kconfig: fix infinite loop in sym_calc_choice()
- kconfig: qconf: move conf_read() before drawing tree pain
- kconfig: qconf: fix buffer overflow in debug links
- [arm64] cputype: Add Neoverse-N3 definitions
- [arm64] errata: Expand speculative SSBS workaround once more
- uprobes: fix kernel info leak via "[uprobes]" vma
- mm: z3fold: deprecate CONFIG_Z3FOLD
- drm/amd/display: Allow backlight to go below
`AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- sunrpc: change sp_nrthreads from atomic_t to unsigned int.
- NFSD: Async COPY result needs to return a write verifier
- NFSD: Limit the number of concurrent async COPY operations
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- remoteproc: k3-r5: Delay notification of wakeup event
- r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
- r8169: add tally counter fields added with RTL8125
- ACPI: battery: Simplify battery hook locking
- ACPI: battery: Fix possible crash when unregistering a battery hook
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- drm/sched: revert "Always increment correct scheduler score"
- rxrpc: Fix a race between socket set up and I/O thread creation
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- ALSA: control: Fix leftover snd_power_unref()
- crypto: octeontx* - Select CRYPTO_AUTHENC
- drm/amd/display: Revert Avoid overflow assignment
- perf report: Fix segfault when 'sym' sort key is not used
- pmdomain: core: Reduce debug summary table width
- perf python: Allow checking for the existence of warning options in clang
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.4
- unicode: Don't special case ignorable code points
- net: fec: don't save PTP state if PTP is unsupported
- virtio_console: fix misc probe bugs
- perf vdso: Missed put on 32-bit dsos
- perf build: Fix static compilation error when libdw is not installed
- perf build: Fix build feature-dwarf_getlocations fail for old libdw
- zram: free secondary algorithms names
- zram: don't free statically defined names
- bpf: Call the missed btf_record_free() when map creation fails
- bpf: Check percpu map value size first
- [s390x] facility: Disable compile time optimization for decompressor code
- [s390x] mm: Add cond_resched() to cmm_alloc/free_pages()
- bpf, x64: Fix a jit convergence issue
- ext4: don't set SB_RDONLY after filesystem errors
- ext4: nested locking for xattr inode
- [s390x] cpum_sf: Remove WARN_ON_ONCE statements
- [s390x] traps: Handle early warnings gracefully
- bpf: Prevent tail call between progs attached to different hooks
- RDMA/mad: Improve handling of timed out WRs of mad agent
- soundwire: intel_bus_common: enable interrupts before exiting reset
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- clk: bcm: bcm53573: fix OF node leak in init
- PCI: Add ACS quirk for Qualcomm SA8775P
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master
Driver Due to Race Condition
- [riscv64] Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- io_uring: check if we need to reschedule during overflow flush
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less
strict
- mfd: intel-lpss: Add Intel Arrow Lake-H LPSS PCI IDs
- mfd: intel-lpss: Add Intel Panther Lake LPSS PCI IDs
- [riscv64] avoid Imbalance in RAS
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- PCI: qcom: Disable mirroring of DBI and iATU register space in BAR region
- PCI: endpoint: Assign PCI domain number for endpoint controllers
- soundwire: cadence: re-check Peripheral status with delayed_work
- [riscv64] kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16
unknown
- media: videobuf2-core: clear memory related fields in
__vb2_plane_dmabuf_put()
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- usb: typec: tipd: Free IRQ only if it was requested before
- usb: chipidea: udc: enable suspend interrupt after usb reset
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the
Crashkernel Scenario
- xhci: dbc: Fix STALL transfer event handling
- usb: host: xhci-plat: Parse xhci-missing_cas_quirk and apply quirk
- comedi: ni_routing: tools: Check when the file could not be opened
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir
clash
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- virtio_pmem: Check device status before requesting flush
- tools/iio: Add memory allocation failure check for trigger_name
- staging: vme_user: added bound check to geoid
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
- dm vdo: don't refer to dedupe_context after releasing it
- driver core: bus: Fix double free in driver API bus_register()
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus
attribute
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in
lpfc_els_flush_cmd()
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV
instance
- scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to
KERN_WARNING
- drm/amd/display: Check null pointer before dereferencing se
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
- smb: client: fix UAF in async decryption
- fbdev: sisfb: Fix strbuf array overflow
- NFSD: Mark filecache "down" if init fails
- nfsd: nfsd_destroy_serv() must call svc_destroy() even if
nfsd_startup_net() failed
- ice: set correct dst VSI in only LAN filters
- ice: clear port vlan config during reset
- ice: fix memleak in ice_init_tx_topology()
- ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins
- ice: fix VLAN replay after reset
- SUNRPC: Fix integer overflow in decode_rc_list()
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- net: phy: dp83869: fix memory corruption when enabling fiber
- sfc: Don't invoke xdp_do_flush() from netpoll.
- net: phy: aquantia: AQR115c fix up PMA capabilities
- net: phy: aquantia: remove usage of phy_set_max_speed
- tcp: fix to allow timestamp undo if no retransmits were sent
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- net: dsa: sja1105: fix reception from VLAN-unaware bridges
- netfilter: br_netfilter: fix panic with metadata_dst skb
- net: pse-pd: Fix enabled status mismatch
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- Bluetooth: btusb: Don't fail external suspend requests
- net: phy: bcm84881: Fix some error handling paths
- nfsd: fix possible badness in FREE_STATEID
- [amd64] thermal: intel: int340x: processor: Fix warning during module
unload
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- net: ethernet: adi: adin1110: Fix some error handling path in
adin1110_read_fifo()
- [armhf] net: dsa: b53: fix jumbo frame mtu check
- [armhf] net: dsa: b53: fix max MTU for 1g switches
- [armhf] net: dsa: b53: fix max MTU for BCM5325/BCM5365
- [armhf] net: dsa: b53: allow lower MTUs on BCM5325/5365
- [armhf] net: dsa: b53: fix jumbo frames on 10/100 ports
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- nouveau/dmem: Fix privileged error in copy engine channel
- gpio: aspeed: Add the flush write to ensure the write complete.
- gpio: aspeed: Use devm_clk api to manage clock source
- [x86] xen: mark boot CPU of PV guest in MSR_IA32_APICBASE
- [amd64] powercap: intel_rapl_tpmi: Ignore minor version change
- ice: Fix entering Safe Mode
- ice: Fix netif_is_ice() in Safe Mode
- ice: Flush FDB entries before reset
- ice: Fix increasing MSI-X on VF
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- igb: Do not bring the device up after non-fatal error
- e1000e: change I219 (19) devices to ADP
- net/sched: accept TCA_STAB only for root qdisc
- net: ibm: emac: mal: fix wrong goto
- net: ti: icssg-prueth: Fix race condition for VLAN table access
- btrfs: zoned: fix missing RCU locking in error message when loading zone
info
- sctp: ensure sk_state is set to CLOSED if hashing fails in
sctp_listen_start
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- netfilter: fib: check correct rtable in vrf setups
- net: ibm: emac: mal: add dcr_unmap to _remove
- net: dsa: refuse cross-chip mirroring operations
- net: netconsole: fix wrong warning
- drm/fbdev-dma: Only cleanup deferred I/O if necessary
- net: do not delay dst_entries_add() in dst_release()
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- vxlan: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- mctp: Handle error of rtnl_register_module().
- mpls: Handle error of rtnl_register_module().
- phonet: Handle error of rtnl_register_module().
- ppp: fix ppp_async_encode() illegal access
- net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC
- slip: make slhc_remember() more robust against malicious packets
- rcu/nocb: Fix rcuog wake-up from offline softirq
- [x86] amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (ltc2991) Add missing dependency on REGMAP_I2C
- [amd64] HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- HID: plantronics: Workaround for an unexcepted opposite volume key
- HID: wacom: Hardcode (non-inverted) AES pens as BTN_TOOL_PEN
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- usb: dwc3: core: Stop processing of pending events if controller is halted
- usb: xhci: Fix problem with xhci resume from suspend
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: dwc3: re-enable runtime PM after failed resume
- usb: gadget: core: force synchronous registration
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in
ish_fw_xfer_direct_dma
- ACPI: resource: Make Asus ExpertBook B2402 matches cover more models
- ACPI: resource: Make Asus ExpertBook B2502 matches cover more models
- drm/amdgpu: partially revert powerplay `__counted_by` changes
- drm/amd/display: Clear update flags after update has been applied
- drm/v3d: Stop the active perfmon before being destroyed
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amd/display: fix hibernate entry for DCN35+
- [x86] drm/i915/hdcp: fix connector refcounting
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- thermal: core: Free tzp copy along with the thermal zone
- scsi: wd33c93: Don't use stale scsi_pointer value
- scsi: fnic: Move flush_work initialization out of if block
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- Revert "mmc: mvsdio: Use sg_miter for PIO"
- mmc: sdhci-of-dwcmshc: Prevent stale command interrupt handling
- mptcp: fallback when MPTCP opts are dropped after 1st data
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- OPP: fix error code in dev_pm_opp_set_config()
- net: explicitly clear the sk pointer, when pf->create fails
- net: Fix an unsafe loop on the list
- net: dsa: lan9303: ensure chip reset and wait for READY status
- net: phy: Remove LED entry from LEDs list on unregister
- net: phy: realtek: Fix MMD access on RTL8126A-integrated PHY
- mptcp: handle consistently DSS corruption
- mptcp: pm: do not remove closing subflows
- device-dax: correct pgoff align in dax_set_mapping()
- ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins()
- ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- [amd64] powercap: intel_rapl_tpmi: Fix bogus register reading
- btrfs: split remaining space to discard in chunks
- btrfs: add cancellation points to trim loops
- PM: domains: Fix alloc/free in dev_pm_domain_attach|detach_list()
- idpf: use actual mbx receive payload length
- kthread: unpark only parked kthread
- fs/proc/kcore.c: allow translation of physical memory addresses
- secretmem: disable memfd_secret() if arch cannot set direct map
- PCI: Pass domain number to pci_bus_release_domain_nr() explicitly
- io_uring/rw: fix cflags posting for single issue multishot read
.
[ Salvatore Bonaccorso ]
* d/config: Update with the help of kconfigeditor2
- mm: Enable Z3FOLD_DEPRECATED instead of Z3FOLD
Checksums-Sha1:
edbd8ee08a13f48c605a905fead4a6513c1c500e 204594 linux_6.11.4-1.dsc
34616b7432efe7241d2238d2deceda8082b6d0e9 149900356 linux_6.11.4.orig.tar.xz
3e2ae011051b238265769cc2e41191c3a2cb6dc2 1588268 linux_6.11.4-1.debian.tar.xz
53a099d4961b8854664c70e85ce576609ee0f008 7422 linux_6.11.4-1_source.buildinfo
Checksums-Sha256:
22c3100a629ae5ac8e81d5588504d3aad7399f707bf19c41e9d97f0af397be54 204594 linux_6.11.4-1.dsc
92d91e31f7566d1f7881600ff4d2c382365a47dd8ac64f42a4394fd7863d710f 149900356 linux_6.11.4.orig.tar.xz
9e2dd679684ec87862b564ab4a63bc0a48863b69b09b88b23ce033c3071e150d 1588268 linux_6.11.4-1.debian.tar.xz
f8bbb2150fdd5543beabe4a03063686c228600319daf1316e614c08228898b43 7422 linux_6.11.4-1_source.buildinfo
Files:
ea63d97dccfc2e6e6552cb9957838d94 204594 kernel optional linux_6.11.4-1.dsc
d87a63e02dc64c0152ac49cad977de31 149900356 kernel optional linux_6.11.4.orig.tar.xz
049bf100ebfcfc08fb0f8042c541c42d 1588268 kernel optional linux_6.11.4-1.debian.tar.xz
d04db926fe09016e8c06044993066f21 7422 kernel optional linux_6.11.4-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=xj8+
-----END PGP SIGNATURE-----
[Message part 2 (application/pgp-signature, inline)]
Reply sent
to Salvatore Bonaccorso <carnil@debian.org>:
You have taken responsibility.
(Fri, 01 Nov 2024 08:42:05 GMT) (full text, mbox, link).
Notification sent
to Alfred Agrell <blubban@gmail.com>:
Bug acknowledged by developer.
(Fri, 01 Nov 2024 08:42:05 GMT) (full text, mbox, link).
Message #35 received at 1082001-close@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
Source: linux
Source-Version: 6.1.115-1
Done: Salvatore Bonaccorso <carnil@debian.org>
We believe that the bug you reported is fixed in the latest version of
linux, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1082001@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Salvatore Bonaccorso <carnil@debian.org> (supplier of updated linux package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 01 Nov 2024 05:23:37 +0100
Source: linux
Architecture: source
Version: 6.1.115-1
Distribution: bookworm
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 1076483 1078696 1081833 1082001
Changes:
linux (6.1.115-1) bookworm; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.113
- wifi: rtw88: always wait for both firmware loading attempts
(CVE-2024-47718)
- crypto: xor - fix template benchmarking
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- wifi: ath9k: fix parameter check in ath9k_init_debug()
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: rtw88: remove CPT execution branch never used
- fs/namespace: fnic: Switch to use %ptTd
- mount: handle OOM on mnt_warn_timestamp_expiry
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
(CVE-2024-47731)
- wifi: mac80211: don't use rate mask for offchannel TX either
(CVE-2024-47738)
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE
- ACPICA: executer/exsystem: Don't nag user about every Stall() violating
the spec
- padata: Honor the caller's alignment in case of chunk_size 0
- drivers/perf: hisi_pcie: Record hardware counts correctly
- can: j1939: use correct function name in comment
- ACPI: CPPC: Fix MASK_VAL() usage
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: remove annotation to access set timeout while
holding lock
- [arm64] perf/arm-cmn: Rework DTC counters (again)
- [arm64] perf/arm-cmn: Improve debugfs pretty-printing for large configs
- [arm64] perf/arm-cmn: Refactor node ID handling. Again.
- [arm64] perf/arm-cmn: Ensure dtm_idx is big enough
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- [x86] sgx: Fix deadlock in SGX NUMA node search (CVE-2024-49856)
- crypto: hisilicon/hpre - enable sva error interrupt event
- crypto: hisilicon/hpre - mask cluster timeout error
- crypto: hisilicon/qm - fix coding style issues
- crypto: hisilicon/qm - reset device before enabling it
- crypto: hisilicon/qm - inject error before stopping queue (CVE-2024-47730)
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
(CVE-2024-47713)
- wifi: wilc1000: fix potential RCU dereference issue in
wilc_parse_join_bss_param (CVE-2024-47712)
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- sock_map: Add a cond_resched() in sock_hash_free()
- can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
(CVE-2024-47709)
- can: m_can: Remove repeated check for is_peripheral
- can: m_can: enable NAPI before enabling interrupts
- can: m_can: m_can_close(): stop clocks after device has been shut down
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- bareudp: Pull inner IP header on xmit.
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- r8169: disable ALDPS per default for RTL8125
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- net: tipc: avoid possible garbage value
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
(CVE-2024-47707)
- nbd: fix race between timeout and normal completion (CVE-2024-49855)
- block, bfq: fix possible UAF for bfqq->bic with merge chain
(CVE-2024-47706)
- block, bfq: choose the last bfqq from merge chain in
bfq_setup_cooperator()
- block, bfq: don't break merge chain in bfq_split_bfqq()
- block: print symbolic error name instead of error code
- block: fix potential invalid pointer dereference in blk_add_partition
(CVE-2024-47705)
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- [arm64] dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- firmware: arm_scmi: Fix double free in OPTEE transport (CVE-2024-49853)
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- regulator: Return actual error in of_regulator_bulk_get_all()
- [arm64] dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- [arm64] dts: renesas: r9a07g054: Correct GICD and GICR sizes
- [arm64] dts: renesas: r9a07g044: Correct GICD and GICR sizes
- [arm64] dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- reset: berlin: fix OF node leak in probe() error path
- reset: k210: fix OF node leak in probe() error path
- clocksource/drivers/qcom: Add missing iounmap() on errors in
msm_dt_timer_init()
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- ALSA: hda: cs35l41: fix module autoloading
- hwmon: (max16065) Fix overflows seen when writing limits
- i2c: Add i2c_get_match_data()
- hwmon: (max16065) Remove use of i2c_match_id()
- hwmon: (max16065) Fix alarm attributes
- mtd: slram: insert break after errors in parsing the map
- hwmon: (ntc_thermistor) fix module autoloading
- power: supply: axp20x_battery: Remove design from min and max voltage
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current
sense
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- [amd64] iommu/amd: Do not set the D bit on AMD v2 table entries
- mtd: powernv: Add check devm_kasprintf() returned value
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Fix init error path
- pmdomain: core: Harden inter-column space in debug summary
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/amd/display: Add null check for set_output_gamma in
dcn30_set_output_transfer_func (CVE-2024-47720)
- drm/amdgpu: Replace one-element array with flexible-array member
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/radeon: Replace one-element array with flexible-array member
- drm/radeon: properly handle vbios fake edid sizing
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- scsi: NCR5380: Check for phase match during PDMA fixup
- drm/amd/amdgpu: Properly tune the size of struct
- drm/rockchip: vop: Allow 4096px width scaling
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/bridge: lontium-lt8912b: Validate mode in
drm_bridge_funcs::mode_valid()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
(CVE-2024-49852)
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- [powerpc*] 8xx: Fix initial memory mapping
- [powerpc*] 8xx: Fix kernel vs user address comparison
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm: fix %s null argument error
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- xen: use correct end address of kernel for conflict checking
- HID: wacom: Support sequence numbers smaller than 16-bit
- HID: wacom: Do not warn about dropped packets for first packet
- xen/swiotlb: add alignment check for dma buffers
- xen/swiotlb: fix allocated size
- tpm: Clean up TPM space after command failure (CVE-2024-49851)
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
(CVE-2024-49850)
- xz: cleanup CRC32 edits from 2018
- kthread: fix task state in kthread worker if being frozen
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in
smk_set_cipso
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: return error on ext4_find_inline_entry
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
(CVE-2024-47701)
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
(CVE-2024-47699)
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
(CVE-2024-47757)
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
(CVE-2024-47728)
- perf mem: Free the allocated sort string, fixing a leak
- perf inject: Fix leader sampling inserting additional samples
- perf sched timehist: Fix missing free of session in perf_sched__timehist()
- perf stat: Display iostat headers correctly
- perf sched timehist: Fixed timestamp error when unable to confirm event
sched_in time
- perf time-utils: Fix 32-bit nsec parsing
- clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite()
after error detection
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: fracn-gppll: support integer pll
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- remoteproc: imx_rproc: Initialize workqueue earlier
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- Input: ilitek_ts_i2c - add report id message validation
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
(CVE-2024-47698)
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
(CVE-2024-47697)
- PCI/PM: Increase wait time after resume
- PCI/PM: Drop pci_bridge_wait_for_secondary_bus() timeout parameter
- PCI: Wait for Link before restoring Downstream Buses
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
(CVE-2024-47756)
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- nvdimm: Fix devs leaks in scan_labels()
- PCI: xilinx-nwl: Fix register misspelling
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
(CVE-2024-47696)
- pinctrl: single: fix missing error code in pcs_probe()
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds (CVE-2024-47695)
- clk: ti: dra7-atl: Fix leak of of_nodes
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- nfsd: fix refcount leak when file is unhashed after being found
- pinctrl: mvebu: Use devm_platform_get_and_ioremap_resource()
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- IB/core: Fix ib_cache_setup_one error flow cleanup (CVE-2024-47693)
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
(CVE-2024-47751)
- RDMA/erdma: Return QP state in erdma_query_qp
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- [arm64] RDMA/hns: Don't modify rq next block addr in HIP09 QPC
- [arm64] RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08 (CVE-2024-47750)
- [arm64] RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- [arm64] RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- [arm64] RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- [arm64] RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- [arm64] RDMA/hns: Optimize hem allocation performance
- RDMA/cxgb4: Added NULL check for lookup_atid (CVE-2024-47749)
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- ntb_perf: Fix printk format
- ntb: Force physically contiguous allocation of rx ring buffers
- nfsd: call cache_put if xdr_reserve_space returns NULL (CVE-2024-47737)
- nfsd: return -EINVAL when namelen is 0 (CVE-2024-47692)
- f2fs: fix to update i_ctime in __f2fs_setxattr()
- f2fs: remove unneeded check condition in __f2fs_setxattr()
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: factor the read/write tracing logic into a helper
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: clean up w/ dotdot_name
- f2fs: get rid of online repaire on corrupted directory (CVE-2024-47690)
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- lib/sbitmap: define swap_lock as raw_spinlock_t
- nvme-multipath: system fails to create generic nvme device
- iio: adc: ad7606: fix oversampling gpio array
- iio: adc: ad7606: fix standby gpio state to match the documentation
- ABI: testing: fix admv8818 attr description
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- iio: magnetometer: ak8975: Convert enum->pointer for data in the match
tables
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- coresight: tmc: sg: Do not leak sg_table
- cxl/pci: Break out range register decoding from cxl_hdm_decode_init()
- cxl/pci: Fix to record only non-zero ranges
- vdpa: Add eventfd for the vdpa callback
- vhost_vdpa: assign irq bypass producer token correctly (CVE-2024-47748)
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate() (CVE-2024-47686)
- Revert "dm: requeue IO if mapping table not yet available"
- net: xilinx: axienet: Schedule NAPI in two steps
- net: xilinx: axienet: Fix packet counting
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (CVE-2024-47685)
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race
Condition (CVE-2024-47747)
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- tcp: check skb is non-NULL in tcp_rto_delta_us() (CVE-2024-47684)
- net: qrtr: Update packets cloning when broadcasting
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
(CVE-2024-47734)
- net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- netfilter: ctnetlink: compile ctnetlink_label_size with
CONFIG_NF_CONNTRACK_EVENTS
- io_uring/sqpoll: do not allow pinning outside of cpuset
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- io_uring/io-wq: do not allow pinning outside of cpuset
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- vfio/pci: fix potential memory leak in vfio_intx_enable() (CVE-2024-38632)
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
(CVE-2024-46695)
- drm/vmwgfx: Prevent unmapping active read buffers (CVE-2024-46710)
- io_uring/sqpoll: retain test for whether the CPU is valid
- io_uring/sqpoll: do not put cpumask on stack
- Remove *.orig pattern from .gitignore
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- soc: versatile: integrator: fix OF node leak in probe() error path
- Revert "media: tuners: fix error return code of
hybrid_tuner_request_state()"
- Input: adp5588-keys - fix check on return code
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- [x86] KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- [x86] KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link
(CVE-2024-47683)
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Validate backlight caps are sane
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
(CVE-2024-47743)
- fs: Create a generic is_dot_dotdot() utility
- ksmbd: make __dir_empty() compatible with POSIX
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: handle caseless file creation
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
(CVE-2024-47682)
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Disallow bus errors during PDMA send
- usbnet: fix cyclical race on disconnect with work queue
- [arm64] dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- USB: appledisplay: close race between probe and completion handler
- USB: misc: cypress_cy7c63: check for short transfer
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- usb: cdnsp: Fix incorrect usb_request status
- usb: dwc2: drd: fix clock gating on USB role switch
- bus: integrator-lm: fix OF node leak in probe()
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- firmware_loader: Block path traversal (CVE-2024-47742)
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- drbd: Add NULL check for net_conf to prevent dereference in state
validation
- ACPI: sysfs: validate return type of _STR method (CVE-2024-49860)
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
(CVE-2024-49858)
- perf/x86/intel/pt: Fix sampling synchronization
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- debugobjects: Fix conditions in fill_pool()
- f2fs: fix several potential integer overflows in file offsets
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: fix to check atomic_file in f2fs ioctl interfaces (CVE-2024-49859)
- hwrng: mtk - Use devm_pm_runtime_enable
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- [arm64] dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- [arm64] dts: rockchip: Correct the Pinebook Pro battery design capacity
- vfs: fix race between evice_inodes() and find_inode()&iput()
- fs: Fix file_set_fowner LSM hook inconsistencies
- nfs: fix memory leak in error path of nfs4_do_reclaim
- EDAC/igen6: Fix conversion of system address to physical memory address
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
(CVE-2024-47739)
- soc: versatile: realview: fix memory leak during device remove
- soc: versatile: realview: fix soc_dev leak during device remove
- [powerpc*] 64: Option to build big-endian with ELFv2 ABI
- [powerpc*] 64: Add support to build with prefixed instructions
- [powerpc*] atomic: Use YZ constraints for DS-form instructions
- usb: yurex: Replace snprintf() with the safer scnprintf() variant
- USB: misc: yurex: fix race between read and write
- xhci: fix event ring segment table related masks and variables in header
- xhci: remove xhci_test_trb_in_td_math early development check
- xhci: Refactor interrupter code for initial multi interrupter support.
- xhci: Preserve RsvdP bits in ERSTBA register correctly
- xhci: Add a quirk for writing ERST in high-low order
- usb: xhci: fix loss of data on Cadence xHC
- pps: remove usage of the deprecated ida_simple_xx() API
- pps: add an error check in parport_attach
- [x86] idtentry: Incorporate definitions/declarations of the FRED entries
- [x86] entry: Remove unwanted instrumentation in common_interrupt()
- mm/filemap: return early if failed to allocate memory for split
- lib/xarray: introduce a new helper xas_get_order
- mm/filemap: optimize filemap folio adding
- icmp: Add counters for rate limits
- icmp: change the order of rate limits (CVE-2024-47678)
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- lockdep: fix deadlock issue between lockdep and rcu
- mm: only enforce minimum stack gap size if it's sensible
- module: Fix KCOV-ignored file name
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with
rcu read lock
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- i2c: isch: Add missed 'else'
- usb: yurex: Fix inconsistent locking bug in yurex_read()
- perf/arm-cmn: Fail DTC counter allocation correctly
- iio: magnetometer: ak8975: Fix 'Unexpected device' error
- [powerpc*] Allow CONFIG_PPC64_BIG_ENDIAN_ELF_ABI_V2 with ld.lld 15+
- PCI/PM: Mark devices disconnected if upstream PCIe link is down on resume
- [x86*] tdx: Fix "in-kernel MMIO" check (CVE-2024-47727)
- static_call: Handle module init failure correctly in
static_call_del_module() (CVE-2024-50002)
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
- jump_label: Fix static_key_slow_dec() yet again
- scsi: pm8001: Do not overwrite PCI queue mapping
- mailbox: rockchip: fix a typo in module autoloading
- mailbox: bcm2835: Fix timeout during suspend mode (CVE-2024-49963)
- ceph: remove the incorrect Fw reference check when dirtying pages
- ieee802154: Fix build error
- net: sparx5: Fix invalid timestamps
- net/mlx5: Fix error path in multi-packet WQE transmit (CVE-2024-50001)
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() (CVE-2024-50000)
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
(CVE-2024-49952)
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- net: ethernet: lantiq_etop: fix memory disclosure (CVE-2024-49997)
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init() (CVE-2024-49948)
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- ppp: do not assume bh is held in ppp_channel_bridge_input()
(CVE-2024-49946)
- fsdax,xfs: port unshare to fsdax
- iomap: constrain the file range passed to iomap_file_unshare
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
(CVE-2024-49944)
- i2c: xiic: improve error message when transfer fails to start
- i2c: xiic: Try re-initialization on bus busy timeout
- loop: don't set QUEUE_FLAG_NOMERGES
- Bluetooth: hci_sock: Fix not validating setsockopt user input
(CVE-2024-35963)
- media: usbtv: Remove useless locks in usbtv_video_free() (CVE-2024-27072)
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is
uninitialized
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- f2fs: Require FMODE_WRITE for atomic write ioctls (CVE-2024-47740)
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and
ice_sched_add_node()
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- wifi: cfg80211: Set correct chandef when starting CAC (CVE-2024-49937)
- net/xen-netback: prevent UAF in xenvif_flush_hash() (CVE-2024-49936)
- net: hisilicon: hip04: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- ACPI: PAD: fix crash in exit_round_robin() (CVE-2024-49935)
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- blk_iocost: fix more out of bound shifts (CVE-2024-49933)
- nvme-pci: qdepth 1 quirk
- wifi: ath11k: fix array out-of-bound access in SoC stats (CVE-2024-49930)
- wifi: rtw88: select WANT_DEV_COREDUMP
- ACPI: EC: Do not release locks during operation region accesses
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in
acpi_db_convert_to_package()
- tipc: guard against string buffer overrun (CVE-2024-49995)
- net: mvpp2: Increase size of queue_name buffer
- bnxt_en: Extend maximum length of version string by 1 byte
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- net: atlantic: Avoid warning about potential string truncation
- crypto: simd - Do not call crypto_alloc_tfm during registration
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- wifi: mac80211: fix RCU list iterations
- ACPICA: iasl: handle empty connection_node
- proc: add config & param to block forcing mem writes
- wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
- wifi: mwifiex: Fix memcpy() field-spanning write warning in
mwifiex_cmd_802_11_scan_ext()
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- ALSA: usb-audio: Add input value sanity checks for standard types
- [x86] ioapic: Handle allocation failures gracefully (CVE-2024-49927)
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Add logitech Audio profile quirk
- ASoC: codecs: wsa883x: Handle reading version failure
- [x86] kexec: Add EFI config table identity mapping for kexec kernel
- ALSA: asihpi: Fix potential OOB array access (CVE-2024-50007)
- ALSA: hdsp: Break infinite MIDI input flush loop
- [x86] syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- fbdev: pxafb: Fix possible use after free in pxafb_task() (CVE-2024-49924)
- rcuscale: Provide clear error when async specified without primitives
- [arm64] iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- [amd64] iommu/vt-d: Always reserve a domain ID for identity setup
- [amd64] iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0
count (CVE-2024-49993)
- drm/stm: Avoid use-after-free issues with crtc and plane (CVE-2024-49992)
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- drm/amd/display: Add null check for top_pipe_to_program in
commit_planes_for_stream (CVE-2024-49913)
- ata: pata_serverworks: Do not use the term blacklist
- ata: sata_sil: Rename sil_blacklist to sil_quirks
- drm/amd/display: Handle null 'stream_status' in
'planes_changed_for_existing_stream' (CVE-2024-49912)
- drm/amd/display: Check null pointers before using dc->clk_mgr
(CVE-2024-49907)
- drm/amd/display: Add null check for 'afb' in
amdgpu_dm_plane_handle_cursor_update (v2)
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- jfs: Fix uaf in dbFreeBits (CVE-2024-49903)
- jfs: check if leafidx greater than num leaves per dmap tree
(CVE-2024-49902)
- scsi: smartpqi: correct stream detection
- jfs: Fix uninit-value access of new_ea in ea_buffer (CVE-2024-49900)
- drm/amdgpu: add raven1 gfxoff quirk
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- [x86] platform/x86: touchscreen_dmi: add nanote-next quirk
- drm/stm: ltdc: reset plane transparency after plane disable
- drm/amd/display: Check stream before comparing them (CVE-2024-49896)
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format
translation (CVE-2024-49895)
- drm/amd/display: Fix index out of bounds in degamma hardware format
translation (CVE-2024-49894)
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
(CVE-2024-49969)
- drm/amd/display: Initialize get_bytes_per_element's default to 1
(CVE-2024-49892)
- drm/printer: Allow NULL data in devcoredump printer
- [x86] perf,x86: avoid missing caller address in stack traces captured in
uprobe
- scsi: aacraid: Rearrange order of struct aac_srb_unit
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- drm/amd/pm: ensure the fw_info is not null before using it
(CVE-2024-49890)
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- [powerpc*] pseries: Use correct data types from pseries_hp_errorlog struct
- ext4: ext4_search_dir should return a proper error
- ext4: avoid use-after-free in ext4_ext_show_leaf() (CVE-2024-49889)
- ext4: fix i_data_sem unlock order in ext4_ind_migrate() (CVE-2024-50006)
- iomap: handle a post-direct I/O invalidate race in
iomap_write_delalloc_release
- blk-integrity: use sysfs_emit
- blk-integrity: convert to struct device_attribute
- blk-integrity: register sysfs attributes on struct device
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: s3c64xx: fix timeout counters in flush_fifo
- [powerpc*] vdso: Fix VDSO data access when running in a non-root time
namespace
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
(Closes: #1081833)
- [x86] platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
(CVE-2024-49886)
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
(CVE-2024-49985)
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
(CVE-2024-49961)
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- spi: bcm63xx: Fix module autoloading
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- perf/core: Fix small negative period being ignored
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- ALSA: core: add isascii() check to card ID generator
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ext4: no need to continue when the number of entries is 1 (CVE-2024-49967)
- ext4: correct encrypted dentry name hash when not casefolded
- ext4: fix slab-use-after-free in ext4_split_extent_at() (CVE-2024-49884)
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: dax: fix overflowing extents beyond inode size when partially
writing (CVE-2024-50015)
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: aovid use-after-free in ext4_ext_insert_extent() (CVE-2024-49883)
- ext4: fix double brelse() the buffer of the extents path
- ext4: update orig_path in ext4_find_extent() (CVE-2024-49881)
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in
jbd2_journal_shrink_checkpoint_list()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- drm/rockchip: vop: clear DMA stop bit on RK3066
- of/irq: Support #msi-cells=<0> in of_msi_get_domain
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
(CVE-2024-49879)
- resource: fix region_intersects() vs add_memory_driver_managed()
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns
error
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- mm: krealloc: consider spare memory for __GFP_ZERO
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: reserve space for inline xattr before attaching reflink tree
(CVE-2024-49958)
- ocfs2: cancel dqi_sync_work before freeing oinfo (CVE-2024-49966)
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks (CVE-2024-49965)
- ocfs2: fix null-ptr-deref when journal load failed. (CVE-2024-49957)
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
(CVE-2024-49877)
- exfat: fix memory leak in exfat_load_bitmap() (CVE-2024-50013)
- perf hist: Update hist symbol when updating maps
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- nfsd: map the EBADMSG to nfserr_io to avoid warning (CVE-2024-49875)
- NFSD: Fix NFSv4's PUTPUBFH operation
- aoe: fix the potential use-after-free problem in more places
(CVE-2024-49982)
- clk: rockchip: fix error for unknown clocks
- remoteproc: k3-r5: Fix error handling when power-up failed
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- media: venus: fix use after free bug in venus_remove due to race condition
(CVE-2024-49981)
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- media: qcom: camss: Fix ordering of pm_runtime_enable
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- smb: client: use actual path when queryfs
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- gso: fix udp gso fraglist segmentation after pull from frag_list
(CVE-2024-49978)
- tomoyo: fallback to realpath if symlink's pathname does not exist
(Closes: #1082001)
- net: stmmac: Fix zero-division error when disabling tc cbs
(CVE-2024-49977)
- rtc: at91sam9: fix OF node leak in probe() error path
- Input: adp5589-keys - fix NULL pointer dereference (CVE-2024-49871)
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- cachefiles: fix dentry leak in cachefiles_open_file() (CVE-2024-49870)
- ACPI: resource: Add Asus Vivobook X1704VAP to
irq1_level_low_skip_override[] (Closes: #1078696)
- ACPI: resource: Add Asus ExpertBook B2502CVA to
irq1_level_low_skip_override[]
- btrfs: fix a NULL pointer dereference when failed to start a new
trasacntion (CVE-2024-49868)
- btrfs: send: fix invalid clone operation for file that got its size
decreased
- btrfs: wait for fixup workers before stopping cleaner kthread during
umount (CVE-2024-49867)
- gpio: davinci: fix lazy disable
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
(CVE-2024-8805)
- ceph: fix cap ref leak via netfs init_request
- tracing/hwlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix a race during cpuhp processing (CVE-2024-49866)
- close_range(): fix the logics in descriptor table trimming
- [x86] drm/i915/gem: fix bitwise and logical AND mixup
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/amd/display: Fix system hang while resume with TBT monitor
(CVE-2024-50003)
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
(Closes: #1076483)
- kconfig: qconf: fix buffer overflow in debug links
- i2c: create debugfs entry per adapter
- i2c: core: Lock address during client device instantiation
- i2c: xiic: Use devm_clk_get_enabled()
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- dt-bindings: clock: exynos7885: Fix duplicated binding
- spi: bcm63xx: Fix missing pm_runtime_disable()
- [arm64] Add Cortex-715 CPU part definition
- [arm64] cputype: Add Neoverse-N3 definitions
- [arm64] errata: Expand speculative SSBS workaround once more
- io_uring/net: harden multishot termination case for recv
- uprobes: fix kernel info leak via "[uprobes]" vma
- mm: z3fold: deprecate CONFIG_Z3FOLD
- drm/amd/display: Allow backlight to go below
`AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- build-id: require program headers to be right after ELF header
- lib/buildid: harden build ID parsing logic
- docs/zh_CN: Update the translation of delay-accounting to 6.1-rc8
- delayacct: improve the average delay precision of getdelay tool to
microsecond
- sched: psi: fix bogus pressure spikes from aggregation race
- media: i2c: imx335: Enable regulator supplies
- media: imx335: Fix reset-gpio handling
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- remoteproc: k3-r5: Delay notification of wakeup event
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- clk: samsung: exynos7885: do not define number of clocks in bindings
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
- r8169: add tally counter fields added with RTL8125 (CVE-2024-49973)
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- ACPI: battery: Simplify battery hook locking
- ACPI: battery: Fix possible crash when unregistering a battery hook
(CVE-2024-49955)
- Revert "arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of
bindings"
- erofs: get rid of erofs_inode_datablocks()
- erofs: get rid of z_erofs_do_map_blocks() forward declaration
- erofs: avoid hardcoded blocksize for subpage block support
- erofs: set block size to the on-disk block size
- erofs: fix incorrect symlink detection in fast symlink
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (CVE-2024-49863)
- perf report: Fix segfault when 'sym' sort key is not used
- fsdax: dax_unshare_iter() should return a valid length
- fsdax: unshare: zero destination if srcmap is HOLE or UNWRITTEN
- unicode: Don't special case ignorable code points
- net: ethernet: cortina: Drop TSO support
- tracing: Remove precision vsnprintf() check from print event
- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
- ALSA: hda/realtek: cs35l41: Fix device ID / model name
- drm/crtc: fix uninitialized variable use even harder
- tracing: Have saved_cmdlines arrays all in one allocation
- bootconfig: Fix the kerneldoc of _xbc_exit()
- perf lock: Dynamically allocate lockhash_table
- perf sched: Avoid large stack allocations
- perf sched: Move start_work_mutex and work_done_wait_mutex initialization
to perf_sched__replay()
- perf sched: Fix memory leak in perf_sched__map()
- perf sched: Move curr_thread initialization to perf_sched__map()
- perf sched: Move curr_pid and cpu_last_switched initialization to
perf_sched__{lat|map|replay}()
- libsubcmd: Don't free the usage string
- Bluetooth: Fix usage of __hci_cmd_sync_status
- virtio_console: fix misc probe bugs
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
- bpf: Check percpu map value size first
- [s390x] facility: Disable compile time optimization for decompressor code
- [s390x] mm: Add cond_resched() to cmm_alloc/free_pages()
- bpf, x64: Fix a jit convergence issue
- ext4: don't set SB_RDONLY after filesystem errors
- ext4: nested locking for xattr inode
- [s390x] cpum_sf: Remove WARN_ON_ONCE statements
- RDMA/mad: Improve handling of timed out WRs of mad agent
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
(CVE-2024-50062)
- clk: bcm: bcm53573: fix OF node leak in init
- PCI: Add ACS quirk for Qualcomm SA8775P
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- io_uring: check if we need to reschedule during overflow flush
(CVE-2024-50060)
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in
switchtec_ntb_remove due to race condition (CVE-2024-50059)
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- media: videobuf2-core: clear memory related fields in
__vb2_plane_dmabuf_put()
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
- usb: chipidea: udc: enable suspend interrupt after usb reset
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the
Crashkernel Scenario
- comedi: ni_routing: tools: Check when the file could not be opened
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- virtio_pmem: Check device status before requesting flush
- tools/iio: Add memory allocation failure check for trigger_name
- staging: vme_user: added bound check to geoid
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus
attribute
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in
lpfc_els_flush_cmd()
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV
instance
- drm/amd/display: Check null pointer before dereferencing se
(CVE-2024-50049)
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
(CVE-2024-50048)
- fbdev: sisfb: Fix strbuf array overflow
- drm/rockchip: vop: limit maximum resolution to hardware capabilities
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- NFSD: Mark filecache "down" if init fails
- ice: fix VLAN replay after reset
- SUNRPC: Fix integer overflow in decode_rc_list()
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
(CVE-2024-50046)
- net: phy: dp83869: fix memory corruption when enabling fiber
- tcp: fix to allow timestamp undo if no retransmits were sent
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- netfilter: br_netfilter: fix panic with metadata_dst skb (CVE-2024-50045)
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
(CVE-2024-50044)
- net: phy: bcm84881: Fix some error handling paths
- thermal: int340x: processor_thermal: Set feature mask before
proc_thermal_add
- thermal: intel: int340x: processor: Fix warning during module unload
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- net: ethernet: adi: adin1110: Fix some error handling path in
adin1110_read_fifo()
- net: dsa: b53: fix jumbo frame mtu check
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix jumbo frames on 10/100 ports
- gpio: aspeed: Add the flush write to ensure the write complete.
- gpio: aspeed: Use devm_clk api to manage clock source
- ice: Fix netif_is_ice() in Safe Mode
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
(CVE-2024-50041)
- igb: Do not bring the device up after non-fatal error (CVE-2024-50040)
- net/sched: accept TCA_STAB only for root qdisc (CVE-2024-50039)
- net: ibm: emac: mal: fix wrong goto
- btrfs: zoned: fix missing RCU locking in error message when loading zone
info
- sctp: ensure sk_state is set to CLOSED if hashing fails in
sctp_listen_start
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed (CVE-2024-50038)
- netfilter: fib: check correct rtable in vrf setups
- net: ibm/emac: allocate dummy net_device dynamically
- net: ibm: emac: mal: add dcr_unmap to _remove
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- vxlan: Handle error of rtnl_register_module().
- mctp: Handle error of rtnl_register_module().
- ppp: fix ppp_async_encode() illegal access
- slip: make slhc_remember() more robust against malicious packets
- rust: macros: provide correct provenance when constructing THIS_MODULE
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- net/mlx5: Always drain health in shutdown callback (CVE-2024-43866)
- wifi: mac80211: Avoid address calculations via out of bounds array
indexing (CVE-2024-41071)
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- Revert "net: ibm/emac: allocate dummy net_device dynamically"
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- HID: plantronics: Workaround for an unexcepted opposite volume key
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- usb: dwc3: core: Stop processing of pending events if controller is halted
- usb: xhci: Fix problem with xhci resume from suspend
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: gadget: core: force synchronous registration
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in
ish_fw_xfer_direct_dma
- drm/v3d: Stop the active perfmon before being destroyed (CVE-2024-50031)
- drm/vc4: Stop the active perfmon before being destroyed
- scsi: wd33c93: Don't use stale scsi_pointer value (CVE-2024-50026)
- mptcp: fallback when MPTCP opts are dropped after 1st data
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- net: explicitly clear the sk pointer, when pf->create fails
- net: Fix an unsafe loop on the list (CVE-2024-50024)
- net: dsa: lan9303: ensure chip reset and wait for READY status
- mptcp: handle consistently DSS corruption
- mptcp: pm: do not remove closing subflows
- device-dax: correct pgoff align in dax_set_mapping() (CVE-2024-50022)
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- kthread: unpark only parked kthread (CVE-2024-50019)
- secretmem: disable memfd_secret() if arch cannot set direct map
- net: ethernet: cortina: Restore TSO support
- perf lock: Don't pass an ERR_PTR() directly to perf_session__delete()
- block, bfq: fix uaf for accessing waker_bfqq after splitting
(CVE-2024-49854)
- Revert "iommu/vt-d: Retrieve IOMMU perfmon capability information"
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.114
- btrfs: fix uninitialized pointer free in add_inode_ref() (CVE-2024-50088)
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- ksmbd: fix user-after-free from session log off (CVE-2024-50086)
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (CVE-2024-50085)
- udf: New directory iteration code
- udf: Convert udf_expand_dir_adinicb() to new directory iteration
- udf: Move udf_expand_dir_adinicb() to its callsite
- udf: Implement searching for directory entry using new iteration code
- udf: Provide function to mark entry as deleted using new directory
iteration code
- udf: Convert udf_rename() to new directory iteration code
- udf: Convert udf_readdir() to new directory iteration
- udf: Convert udf_lookup() to use new directory iteration code
- udf: Convert udf_get_parent() to new directory iteration code
- udf: Convert empty_dir() to new directory iteration code
- udf: Convert udf_rmdir() to new directory iteration code
- udf: Convert udf_unlink() to new directory iteration code
- udf: Implement adding of dir entries using new iteration code
- udf: Convert udf_add_nondir() to new directory iteration
- udf: Convert udf_mkdir() to new directory iteration code
- udf: Convert udf_link() to new directory iteration code
- udf: Remove old directory iteration code
- udf: Handle error when expanding directory
- udf: Don't return bh from udf_expand_dir_adinicb()
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- net: enetc: add missing static descriptor and inline keyword
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- [arm64] probes: Remove broken LDR (literal) uprobe support
- [arm64] probes: Fix simulate_ldr*_literal()
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for
fixed-link PHY
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
- fat: fix uninitialized variable
- mm/swapfile: skip HugeTLB pages for unuse_vma
- devlink: drop the filter argument from devlinks_xa_find_get
- devlink: bump the instance index directly when iterating
- maple_tree: correct tree corruption on spanning store
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
(CVE-2024-39497)
- [amd64] iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI
devices
- [s390x] sclp: Deactivate sclp after all its users
- [s390x] sclp_vt220: Convert newlines to CRLF instead of LFCR
- [s390x] KVM: s390: gaccess: Check if guest address is in memslot
- [s390x] KVM: s390: Change virtual to physical address access in diag 0x258
handler
- [x86] cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- [x86] cpufeatures: Add a IBPB_NO_RET BUG flag
- [x86] entry: Have entry_ibpb() invalidate return predictions
- [x86] bugs: Skip RSB fill at VMEXIT
- [x86] bugs: Do not use UNTRAIN_RET with IBPB on entry
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
(CVE-2024-50082)
- io_uring/sqpoll: close race on waiting for sqring entries
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- drm/radeon: Fix encoder->possible_clones
- drm/vmwgfx: Handle surface check failure correctly
- drm/amdgpu/swsmu: Only force workload setup on init
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: hid-sensors: Fix an error handling path in
_hid_sensor_set_report_latency()
- iio: light: veml6030: fix ALS sensor resolution
- iio: light: veml6030: fix IIO device retrieval from embedded device
- iio: light: opt3001: add missing full-scale range value
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in
Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in
Kconfig
- Bluetooth: Call iso_exit() on module unload
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
(CVE-2024-50077)
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- xhci: Fix incorrect stream context type macro
- xhci: Mitigate failed set dequeue pointer commands
- USB: serial: option: add support for Quectel EG916Q-GL
- USB: serial: option: add Telit FN920C04 MBIM compositions
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- parport: Proper fix for array out-of-bounds access (CVE-2024-50074)
- [x86] resctrl: Annotate get_mem_config() functions as __init
- [x86] apic: Always explicitly disarm TSC-deadline timer
- [x86] entry_32: Do not clobber user EFLAGS.ZF
- [x86] entry_32: Clear CPU buffers after register restore in NMI return
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (CVE-2024-50073)
- pinctrl: ocelot: fix system hang on level based interrupts
- pinctrl: apple: check devm_kasprintf() returned value
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- tcp: fix mptcp DSS corruption due to large pmtu xmit (CVE-2024-50083)
- mptcp: prevent MPC handshake on port-based signal endpoints
- nilfs2: propagate directory read errors from nilfs_find_entry()
- [powerpc*] 64: Add big-endian ELFv2 flavour to crypto VMX asm generation
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne
1000 G2
- udf: Allocate name buffer in directory iterator on heap
- udf: Avoid directory type conversion failure due to ENOMEM
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.115
- bpf: Use raw_spinlock_t in ringbuf
- iio: accel: bma400: Fix uninitialized variable field_value in tap event
handling.
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- bpf: devmap: provide rxq after redirect
- bpf: Fix memory leak in bpf_core_apply
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Add a check for memory allocation
- [x86] resctrl: Avoid overflow in MB settings in bw_validate()
- [armhf] dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- [s390x] pci: Handle PCI error codes other than 0x3a
- bpf: fix kfunc btf caching for modules
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- ALSA: hda/cs8409: Fix possible NULL dereference
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/srpt: Make slab cache names unique
- ipv4: give an IPv4 dev to blackhole_netdev
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- [arm64] drm/msm/dpu: make sure phys resources are properly initialized
- [arm64] drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate
calculation
- [arm64] drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- [arm64] drm/msm: Allocate memory for disp snapshot with kvzalloc()
- net: usb: usbnet: fix race in probe failure
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- macsec: don't increment counters for an unrelated SA
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- net: ethernet: aeroflex: fix potential memory leak in
greth_start_xmit_gbit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- [arm64] drm/msm/dpu: Wire up DSC mask for active CTL configuration
- [arm64] drm/msm/dpu: don't always program merge_3d block
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- genetlink: hold RCU in genlmsg_mcast()
- ravb: Remove setting of RX software timestamp
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- smb: client: fix OOBs when building SMB2_IOCTL request
- usb: typec: altmode should keep reference to parent
- [s390x] Initialize psw mask in perf_arch_fetch_caller_regs()
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net/mlx5: Remove redundant cmdif revision check
- net/mlx5: split mlx5_cmd_init() to probe and reload routines
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Unregister notifier on eswitch init failure
- bpf: Fix iter/task tid filtering
- [arm64] uprobe fix the uprobe SWBP_INSN in big-endian
- [arm64] probes: Fix uprobes for big-endian kernels
- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant
- usb: gadget: f_uac2: fix non-newline-terminated function name
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- usb: gadget: Add function wakeup support
- XHCI: Separate PORT and CAPs macros into dedicated file
- [arm64,armhf] usb: dwc3: core: Fix system suspend on TI AM62 platforms
- tty/serial: Make ->dcd_change()+uart_handle_dcd_change() status bool
active
- serial: Make uart_handle_cts_change() status param bool active
- serial: imx: Update mctrl old_status on RTSD interrupt
- block, bfq: fix procress reference leakage for bfqq in merge chain
- exec: don't WARN for racy path_noexec check (CVE-2024-50010)
- fs/ntfs3: Add more attributes checks in mi_enum_attr() (CVE-2023-45896)
- [x86] drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape
with real VLA
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to
default regs values
- [arm64] ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- [arm64] Force position-independent veneers
- udf: refactor udf_current_aext() to handle error
- udf: fix uninit-value use in udf_get_fileshortad
- [x86] platform/x86: dell-sysman: add support for alienware products
- jfs: Fix sanity check in dbMount
- tracing: Consider the NULL character when validating the event length
- xfrm: extract dst lookup parameters into a struct
- xfrm: respect ip protocols rules criteria when performing dst lookups
- be2net: fix potential memory leak in be_xmit()
- net: plip: fix break; causing plip to never transmit
- [arm64,armhf] net: dsa: mv88e6xxx: Fix error when setting port policy on
mv88e6393x
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- net: wwan: fix global oob in wwan_rtnl_policy
- docs: net: reformat driver.rst from a list to sections
- net: provide macros for commonly copied lockless queue stop/wake code
- net/sched: adjust device watchdog timer to detect stopped queue at right
time
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net: usb: usbnet: fix name regression
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions
created by classifiers
- net: sched: fix use-after-free in taprio_change()
- r8169: avoid unsolicited interrupts
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- ALSA: hda/realtek: Update default depop procedure
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- drm/amd: Guard against bad data for ATIF ACPI method
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid
detection issue
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)
- [x86] KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- [arm64] KVM: arm64: Don't eagerly teardown the vgic on init error
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- xfrm: fix one more kernel-infoleak in algo dumping
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- selinux: improve error checking in sel_write_load()
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
(CVE-2024-50058)
- net: phy: dp83822: Fix reset pin definitions
- [arm64] ASoC: qcom: Fix NULL Dereference in
asoc_qcom_lpass_cpu_platform_probe()
- [x86] platform/x86: dell-wmi: Ignore suspend notifications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- [arm64] uprobes: change the uprobe_opcode_t typedef to fix the sparse
warning
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
.
[ Salvatore Bonaccorso ]
* Bump ABI to 27
* d/config: Update with the help of kconfigeditor2
- mm: Enable Z3FOLD_DEPRECATED instead of Z3FOLD
Checksums-Sha1:
cd63c893fd196e11f440b7c72dd8e1e91ff0738a 290930 linux_6.1.115-1.dsc
8208d2629d704dda6f9be5c6504fe553a1b3ca28 137696352 linux_6.1.115.orig.tar.xz
be27da7345fc3816061bbe3f42df6b2b4e5919ec 1691192 linux_6.1.115-1.debian.tar.xz
55e1409a1491c11c641b1fa8ce0f343b7865ebe5 7588 linux_6.1.115-1_source.buildinfo
Checksums-Sha256:
32364118b8566256f91e4069fc5b44e11b51ede9c36d3537a376a4be9ac5dcef 290930 linux_6.1.115-1.dsc
3b76c6646daa9f12182ca93d6d74a1433e3a2f01bbf7ae0dbae828380e9be00d 137696352 linux_6.1.115.orig.tar.xz
71d28a1db9ec1c5d589e1be6898bdb72a43f0363afad87dc924f5eed8925d8f1 1691192 linux_6.1.115-1.debian.tar.xz
a92ca00fc779a4d0e130446f04694129f340dc6e794b007d659d995ce6b63c48 7588 linux_6.1.115-1_source.buildinfo
Files:
9711f38bb814c99a5c4863e2bbcaa840 290930 kernel optional linux_6.1.115-1.dsc
ba5766f3018b8f7447ab5708c71722e4 137696352 kernel optional linux_6.1.115.orig.tar.xz
bd608b7e9568db5e02e642ebb28ac46f 1691192 kernel optional linux_6.1.115-1.debian.tar.xz
ab83bed1d853d7923b73fa1e35beab2f 7588 kernel optional linux_6.1.115-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=tLpe
-----END PGP SIGNATURE-----
[Message part 2 (application/pgp-signature, inline)]
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Tue, 10 Dec 2024 07:24:28 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.