-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 25 Apr 2025 21:51:43 +0200
Source: linux
Binary: bpftool bpftool-dbgsym hyperv-daemons hyperv-daemons-dbgsym libcpupower-dev libcpupower1 libcpupower1-dbgsym linux-compiler-gcc-12-x86 linux-config-6.1 linux-cpupower linux-cpupower-dbgsym linux-headers-6.1.0-34-686 linux-headers-6.1.0-34-686-pae linux-headers-6.1.0-34-rt-686-pae linux-image-6.1.0-34-686-dbg linux-image-6.1.0-34-686-pae-dbg linux-image-6.1.0-34-686-pae-unsigned linux-image-6.1.0-34-686-unsigned linux-image-6.1.0-34-rt-686-pae-dbg linux-image-6.1.0-34-rt-686-pae-unsigned linux-image-686-dbg linux-image-686-pae-dbg linux-image-i386-signed-template linux-image-rt-686-pae-dbg linux-kbuild-6.1 linux-kbuild-6.1-dbgsym linux-libc-dev linux-perf linux-perf-dbgsym rtla usbip usbip-dbgsym
Architecture: i386
Version: 6.1.135-1
Distribution: bookworm-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
bpftool - Inspection and simple manipulation of BPF programs and maps
hyperv-daemons - Support daemons for Linux running on Hyper-V
libcpupower-dev - CPU frequency and voltage scaling tools for Linux (development fi
libcpupower1 - CPU frequency and voltage scaling tools for Linux (libraries)
linux-compiler-gcc-12-x86 - Compiler for Linux on x86 (meta-package)
linux-config-6.1 - Debian kernel configurations for Linux 6.1
linux-cpupower - CPU power management tools for Linux
linux-headers-6.1.0-34-686 - Header files for Linux 6.1.0-34-686
linux-headers-6.1.0-34-686-pae - Header files for Linux 6.1.0-34-686-pae
linux-headers-6.1.0-34-rt-686-pae - Header files for Linux 6.1.0-34-rt-686-pae
linux-image-6.1.0-34-686-dbg - Debug symbols for linux-image-6.1.0-34-686
linux-image-6.1.0-34-686-pae-dbg - Debug symbols for linux-image-6.1.0-34-686-pae
linux-image-6.1.0-34-686-pae-unsigned - Linux 6.1 for modern PCs
linux-image-6.1.0-34-686-unsigned - Linux 6.1 for older PCs
linux-image-6.1.0-34-rt-686-pae-dbg - Debug symbols for linux-image-6.1.0-34-rt-686-pae
linux-image-6.1.0-34-rt-686-pae-unsigned - Linux 6.1 for modern PCs, PREEMPT_RT
linux-image-686-dbg - Debugging symbols for Linux 686 configuration (meta-package)
linux-image-686-pae-dbg - Debugging symbols for Linux 686-pae configuration (meta-package)
linux-image-i386-signed-template - Template for signed linux-image packages for i386
linux-image-rt-686-pae-dbg - Debugging symbols for Linux rt-686-pae configuration (meta-packag
linux-kbuild-6.1 - Kbuild infrastructure for Linux 6.1
linux-libc-dev - Linux support headers for userspace development
linux-perf - Performance analysis tools for Linux
rtla - Real-Time Linux Analysis tools
usbip - USB device sharing system over IP network
Closes: 1086175 1102914
Changes:
linux (6.1.135-1) bookworm-security; urgency=high
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.134
- watch_queue: fix pipe accounting mismatch
- [x86] mm/pat: cpa-test: fix length for CPA_ARRAY test
- cpufreq: scpi: compare kHz instead of Hz
- cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
- [x86] fpu: Fix guest FPU state buffer allocation size
- [x86] fpu: Avoid copying dynamic FP state from init_task in
arch_dup_task_struct()
- [x86] platform: Only allow CONFIG_EISA for 32-bit
- [x86] sev: Add missing RIP_REL_REF() invocations during sme_enable()
- lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock
- PM: sleep: Adjust check before setting power.must_resume
- selinux: Chain up tool resolving errors in install_policy.sh
- [x86] EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
- [x86] EDAC/ie31200: Fix the DIMM size mask for several SoCs
- [x86] EDAC/ie31200: Fix the error path order of ie31200_init()
- thermal: int340x: Add NULL check for adev
- PM: sleep: Fix handling devices with direct_complete set on errors
- lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
- perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
- [x86] fpu/xstate: Fix inconsistencies in guest FPU xfeatures
- [arm64,armhf] media: verisilicon: HEVC: Initialize start_bit field
- [x86] ASoC: cs35l41: check the return value from spi_setup()
- HID: remove superfluous (and wrong) Makefile entry for
CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
- ALSA: hda/realtek: Always honor no_shutup_pins
- [arm64] drm/bridge: ti-sn65dsi86: Fix multiple instances
- drm/dp_mst: Fix drm RAD print
- PCI: Use downstream bridges for distributing resources
- PCI/ASPM: Fix link state exit during switch upstream function removal
- [arm64] drm/msm/dsi: Set PHY usescase (and mode) before registering DSI
host
- [arm64] PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without
data payload
- [arm64] PCI: brcmstb: Use internal register to change link capability
- [arm64] PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
- [arm64] PCI: brcmstb: Fix potential premature regulator disabling
- PCI/portdrv: Only disable pciehp interrupts early when needed
- PCI: Avoid reset when disabled via sysfs
- drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
- PCI: Remove stray put_device() in pci_register_host_bridge()
- drm/amd/display: avoid NPD when ASIC does not support DMUB
- PCI: pciehp: Don't enable HPIE when resuming in poll mode
- [mips*] fbdev: sm501fb: Add some geometry checks.
- [arm64] clk: amlogic: gxbb: drop incorrect flag on 32k clock
- [arm64,armhf] remoteproc: core: Clear table_sz when rproc_shutdown
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- lib: 842: Improve error handling in sw842_compress()
- [arm64] clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
- RDMA/core: Don't expose hw_counters outside of init net namespace
- RDMA/mlx5: Fix calculation of total invalidated pages
- RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
- IB/mad: Check available slots before posting receive WRs
- [arm64,armhf] pinctrl: tegra: Set SFIO mode to Mux Register
- [arm64] clk: amlogic: g12b: fix cluster A parent data
- [arm64] clk: amlogic: gxbb: drop non existing 32k clock parent
- [arm64] clk: amlogic: g12a: fix mmc A peripheral clock
- [x86] entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
- power: supply: max77693: Fix wrong conversion of charge input threshold
value
- [powerpc*] crypto: nx - Fix uninitialised hv_nxc on error
- RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
- [mips*] mfd: sm501: Switch to BIT() to mitigate integer overflows
- [x86] dumpstack: Fix inaccurate unwinding from exception stacks due to
misplaced assignment
- isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
- soundwire: slave: fix an OF node reference leak in soundwire slave device
- [arm64] coresight-etm4x: add isb() before reading the TRCSTATR
- iio: accel: mma8452: Ensure error return on failure to matching
oversampling ratio
- iio: accel: msa311: Fix failure to release runtime pm if direct mode claim
fails.
- usb: xhci: correct debug message page size calculation
- iio: adc: ad7124: Fix comparison of channel configs
- perf evlist: Add success path to evlist__create_syswide_maps
- perf units: Fix insufficient array space
- kexec: initialize ELF lowest address to ULONG_MAX
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- NFSv4: Don't trigger uneccessary scans for return-on-close delegations
- fuse: fix dax truncate/punch_hole fault path
- i3c: master: svc: Fix missing the IBI rules
- perf python: Fixup description of sample.id event member
- perf python: Decrement the refcount of just created event on failure
- perf python: Don't keep a raw_data pointer to consumed ring buffer space
- perf python: Check if there is space to copy all the event
- fs/procfs: fix the comment above proc_pid_wchan()
- perf tools: annotate asm_pure_loop.S
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- exfat: fix the infinite loop in exfat_find_last_cluster()
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- rndis_host: Flag RNDIS modems as WWAN devices
- ksmbd: use aead_request_free to match aead_request_alloc
- ksmbd: fix multichannel connection failure
- net/mlx5e: SHAMPO, Make reserved size independent of page size
- ring-buffer: Fix bytes_dropped calculation issue
- ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are
invalid
- sched/smt: Always inline sched_smt_active()
- context_tracking: Always inline ct_{nmi,irq}_{enter,exit}()
- rcu-tasks: Always inline rcu_irq_work_resched()
- wifi: iwlwifi: fw: allocate chained SG tables for dump
- wifi: iwlwifi: mvm: use the right version of the rate API
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvme-pci: clean up CMBMSC when registering CMB fails
- nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
- wifi: brcmfmac: keep power during suspend if board requires it
- affs: generate OFS sequence numbers starting at 1
- affs: don't write overlarge OFS data block size fields
- ALSA: hda/realtek: Fix Asus Z13 2025 audio
- ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0
- [x86] platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go
4 tablet
- HID: i2c-hid: improve i2c_hid_get_report error message
- ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using
CS35L41 HDA
- ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using
CS35L41 HDA
- sched/deadline: Use online cpus for validating runtime
- locking/semaphore: Use wake_q to wake up processes outside lock critical
section
- [x86] sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
- drm/amd: Keep display off while going into S4
- ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
- can: statistics: use atomic access in hot path
- memory: omap-gpmc: drop no compatible check
- hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
- spufs: fix a leak on spufs_new_file() failure
- spufs: fix gang directory lifetimes
- spufs: fix a leak in spufs_create_context()
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- ntb: intel: Fix using link status DB's
- netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets
only
- netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
- net_sched: skbprio: Remove overly strict queue assertions
- [arm64,armhf] net: mvpp2: Prevent parser TCAM memory corruption
- udp: Fix memory accounting leak.
- vsock: avoid timeout during connect() if the socket is closing
- tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
- netfilter: nft_tunnel: fix geneve_opt type confusion addition
- ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
- net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy
- net: fix geneve_opt length integer overflow
- ipv6: Start path selection from the first nexthop
- ipv6: Do not consider link down nexthops in path selection
- arcnet: Add NULL check in com20020pci_probe()
- io_uring/filetable: ensure node switch is always done, if needed
- drm/amdgpu/gfx11: fix num_mec
- tty: serial: fsl_lpuart: use UARTMODIR register bits for lpuart32 platform
- tty: serial: fsl_lpuart: disable transmitter before changing RS485 related
registers
- usbnet:fix NPE during rx_complete
- [x86] platform/x86: ISST: Correct command storage data length
- ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
- [x86] perf/x86/intel: Apply static call for drain_pebs
- [x86] perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read
- kunit/overflow: Fix UB in overflow_allocation_test (CVE-2024-46823)
- btrfs: handle errors from btrfs_dec_ref() properly (CVE-2024-46753)
- [x86] tsc: Always save/restore TSC sched_clock() on suspend/resume
- [x86] mm: Fix flush_tlb_range() when used for zapping normal PMDs
- acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
- ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
- mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
- mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD
- ksmbd: add bounds check for create lease context
- ksmbd: fix use-after-free in ksmbd_sessions_deregister()
- ksmbd: fix session use-after-free in multichannel connection
- ksmbd: validate zero num_subauth before sub_auth is accessed
- tracing: Fix use-after-free in print_graph_function_flags during tracer
switching
- tracing: Ensure module defining synth event cannot be unloaded while
tracing
- tracing: Fix synth event printk format for str fields
- tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
- [arm64] Don't call NULL in do_compat_alignment_fixup()
- ext4: don't over-report free space or inodes in statvfs
- ext4: fix OOB read when checking dotdot dir
- jfs: fix slab-out-of-bounds read in ea_get()
- jfs: add index corruption check to DT_GETPAGE()
- media: streamzap: fix race between device disconnection and urb callback
- nfsd: put dl_stid if fail to queue dl_recall
- NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
- tracing: Do not use PERF enums when perf is not defined
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.135
- tipc: fix memory leak in tipc_link_xmit
- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
- net: tls: explicitly disallow disconnect
- rtnl: add helper to check if rtnl group has listeners
- rtnl: add helper to check if a notification is needed
- net/sched: cls_api: conditional notification of events
- tc: Ensure we have enough buffer space when sending filter netlink
notifications
- net: ethtool: Don't call .cleanup_data when prepare_data fails
- ata: sata_sx4: Add error handling in pdc20621_i2c_read()
- nvmet-fcloop: swap list_add_tail arguments
- net_sched: sch_sfq: use a temporary work area for validating configuration
- net_sched: sch_sfq: move the limit validation
- ipv6: Align behavior across nexthops during path selection
- net: ppp: Add bound checking for skb data on ppp_sync_txmung
- nft_set_pipapo: fix incorrect avx2 match of 5th field octet
- fs: consistently deref the files table with rcu_dereference_raw()
- umount: Allow superblock owners to force umount
- pm: cpupower: bench: Prevent NULL dereference on malloc failure
- [x86] cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD
when running in a virtual machine
- [arm*] perf: arm_pmu: Don't disable counter in armpmu_add()
- [arm64] cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
- xen/mcelog: Add __nonstring annotations for unterminated strings
- HID: pidff: Convert infinite length from Linux API to PID standard
- HID: pidff: Do not send effect envelope if it's empty
- HID: pidff: Fix null pointer dereference in pidff_find_fields
- ALSA: hda: intel: Fix Optimus when GPU has no sound
- ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist
- [arm64] ASoC: fsl_audmix: register card device depends on 'dais' property
- [arm64,armhf] mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two
halves
- ALSA: usb-audio: Fix CME quirk for UF series keyboards
- [x86] ASoC: amd: Add DMI quirk for ACP6X mic support
- f2fs: don't retry IO for corrupted data scenario
- page_pool: avoid infinite loop to schedule delayed worker
- jfs: Fix uninit-value access of imap allocated in the diMount() function
- fs/jfs: cast inactags to s64 to prevent potential overflow
- fs/jfs: Prevent integer overflow in AG size calculation
- jfs: Prevent copying of nlink with value 0 from disk inode
- jfs: add sanity check for agwidth in dbMount
- ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
- f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
- ahci: add PCI ID for Marvell 88SE9215 SATA Controller
- ext4: protect ext4_release_dquot against freezing
- ext4: ignore xattrs past end
- scsi: st: Fix array overflow in st_setup()
- wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
- net: vlan: don't propagate flags on open
- tracing: fix return value in __ftrace_event_enable_disable for
TRACE_REG_UNREGISTER
- Bluetooth: hci_uart: fix race during initialization
- Bluetooth: qca: simplify WCN399x NVM loading
- drm: allow encoder mode_set even when connectors change for crtc
- drm/amd/display: Update Cursor request mode to the beginning prefetch
always
- drm: panel-orientation-quirks: Add support for AYANEO 2S
- drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB
- drm: panel-orientation-quirks: Add quirk for AYA NEO Slide
- drm: panel-orientation-quirks: Add new quirk for GPD Win 2
- drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel)
- drm/bridge: panel: forbid initializing a panel with unknown connector type
- drivers: base: devres: Allow to release group on device release
- drm/amdkfd: clamp queue size to minimum
- drm/amdkfd: Fix mode1 reset crash issue
- drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
- drm/amdgpu: handle amdgpu_cgs_create_device() errors in
amd_powerplay_create()
- [amd64] PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
- drm/amdgpu: grab an additional reference on the gang fence v2
- tpm, tpm_tis: Workaround failed command reception on Infineon devices
- bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
- ext4: don't treat fhandle lookup of ea_inode as FS corruption
- xenfs/xensyms: respect hypervisor's "next" indication
- [arm64] cputype: Add MIDR_CORTEX_A76AE
- [arm64] errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
- [arm64] errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
- [arm64] errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
- [arm64] KVM: arm64: Tear down vGIC on failed vCPU creation
- spi: cadence-qspi: Fix probe on AM62A LP SK
- tpm, tpm_tis: Fix timeout handling when waiting for TPM status
- media: streamzap: prevent processing IR data on URB failure
- media: platform: stm32: Add check for clk_enable()
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
- media: i2c: ccs: Set the device's runtime PM status correctly in remove
- media: i2c: ccs: Set the device's runtime PM status correctly in probe
- media: i2c: ov7251: Set enable GPIO low in probe
- media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
- mptcp: sockopt: fix getting IPV6_V6ONLY
- mtd: Add check for devm_kcalloc()
- [arm64,armhf] net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum
for 6320 family
- wifi: mt76: Add check for devm_kstrdup()
- wifi: mac80211: fix integer overflow in hwmp_route_info_get()
- io_uring/kbuf: reject zero sized provided buffers
- bus: mhi: host: Fix race between unprepare and queue_buf
- ext4: fix off-by-one error in do_split
- [armhf] soc: samsung: exynos-chipid: Add NULL pointer check in
exynos_chipid_probe()
- smb311 client: fix missing tcon check when mounting with linux/posix
extensions
- i3c: master: svc: Use readsb helper for reading MDB
- i3c: Add NULL pointer check in i3c_master_queue_ibi()
- jbd2: remove wrong sb->s_sequence check
- [armhf] mfd: ene-kb3930: Fix a potential NULL pointer dereference
- locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
- lib: scatterlist: fix sg_split_phys to preserve original scatterlist
offsets
- mptcp: fix NULL pointer in can_accept_new_subflow
- mptcp: only inc MPJoinAckHMacFailure for HMAC failures
- mtd: inftlcore: Add error check for inftl_read_oob()
- mtd: rawnand: Add status chack in r852_ready()
- [arm64] mm: Correct the update of max_pfn
- [arm64] dts: mediatek: mt8173: Fix disp-pwm compatible string
- btrfs: fix non-empty delayed iputs list on unmount due to compressed write
workers
- mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
- mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
- mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
- sctp: detect and prevent references to a freed transport in sendmsg
- thermal/drivers/rockchip: Add missing rk3328 mapping entry
- cifs: avoid NULL pointer dereference in dbg call
- cifs: fix integer overflow in match_server()
- [arm64] clk: qcom: gdsc: Release pm subdomains in reverse add order
- [arm64] clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code
- [arm64] clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
- [x86] crypto: ccp - Fix check for the primary ASP device
- dm-integrity: set ti->error on memory allocation failure
- dm-verity: fix prefetch-vs-suspend race
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- [arm64] gpio: zynq: Fix wakeup source leaks on device unbind
- gve: handle overflow when reporting TX consumed descriptors
- [x86] KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory
accesses
- of/irq: Fix device node refcount leakage in API of_irq_parse_one()
- of/irq: Fix device node refcount leakage in API of_irq_parse_raw()
- of/irq: Fix device node refcount leakages in of_irq_count()
- of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
- of/irq: Fix device node refcount leakages in of_irq_init()
- PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
- PCI: Fix reference leak in pci_alloc_child_bus()
- [arm64] pinctrl: qcom: Clear latched interrupt status when changing IRQ
type
- [arm64] errata: Add newer ARM cores to the spectre_bhb_loop_affected()
lists
- [x86] ACPI: platform-profile: Fix CFI violation when accessing sysfs files
- [x86] e820: Fix handling of subpage regions when calculating nosave ranges
in e820__register_nosave_regions()
- Bluetooth: hci_uart: Fix another race during initialization
- [armhf] HSI: ssi_protocol: Fix use after free vulnerability in
ssi_protocol Driver Due to Race Condition (CVE-2025-37838)
- [arm64] scsi: hisi_sas: Enable force phy when SATA disk directly connected
- wifi: at76c50x: fix use after free access in at76_disconnect
- wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
- wifi: mac80211: Purge vif txq in ieee80211_do_stop()
- wifi: wl1251: fix memory leak in wl1251_tx_work
- scsi: iscsi: Fix missing scsi_host_put() in error path
- md/raid10: fix missing discard IO accounting
- md/md-bitmap: fix stats collection for external bitmaps
- [amd64] RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
- [arm64] RDMA/hns: Fix wrong maximum DMA segment size
- RDMA/core: Silence oversized kvmalloc() warning
- Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
- Bluetooth: btrtl: Prevent potential NULL dereference
- Bluetooth: l2cap: Check encryption key size on incoming connection
- Revert "wifi: mac80211: Update skb's control block key in
ieee80211_tx_dequeue()"
- igc: fix PTM cycle trigger logic
- igc: move ktime snapshot into PTM retry loop
- igc: handle the IGC_PTP_ENABLED flag correctly
- igc: cleanup PTP module if probe fails
- net: mctp: Set SOCK_RCU_FREE
- net: openvswitch: fix nested key length validation in the set() action
- cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
- net: b53: enable BPDU reception for management port
- net: bridge: switchdev: do not notify new brentries as changed
- [arm64,armhf] net: dsa: mv88e6xxx: avoid unregistering devlink regions
which were never registered
- [arm64,armhf] net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST
is unsupported
- [arm64,armhf] net: dsa: avoid refcount warnings when
ds->ops->tag_8021q_vlan_del() fails
- ptp: ocp: fix start time alignment in ptp_ocp_signal_set
- cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
- writeback: fix false warning in inode_to_wb()
- Revert "PCI: Avoid reset when disabled via sysfs"
- [x86] asus-laptop: Fix an uninitialized variable
- nfs: move nfs_fhandle_hash to common include file
- nfs: add missing selections of CONFIG_CRC32
- nfsd: decrease sc_count directly if fail to queue dl_recall
- btrfs: correctly escape subvol in btrfs_show_options()
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- i2c: cros-ec-tunnel: defer probe if parent EC is not present
- isofs: Prevent the use of too small fid
- loop: properly send KOBJ_CHANGED uevent for disk device
- loop: LOOP_SET_FD: send uevents for partitions
- mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
- mm: fix filemap_get_folios_contig returning batches of identical folios
- ksmbd: Fix dangling pointer in krb_authenticate
- ksmbd: Prevent integer overflow in calculation of deadtime
- ksmbd: fix the warning from __kernel_write_iter
- smb3 client: fix open hardlink on deferred close file error
- string: Add load_unaligned_zeropad() code path to sized_strscpy()
- tracing: Fix filter string testing
- virtiofs: add filesystem context source name check
- scsi: megaraid_sas: Block zero-length ATA VPD inquiry
- scsi: ufs: exynos: Ensure consistent phy reference counts
- [x86] perf/x86/intel: Allow to update user space GPRs from PEBS records
- [x86] perf/x86/intel/uncore: Fix the scale of IIO free running counters on
SNR
- [x86] perf/x86/intel/uncore: Fix the scale of IIO free running counters on
ICX
- [x86] perf/x86/intel/uncore: Fix the scale of IIO free running counters on
SPR
- [arm64] drm/msm/a6xx: Fix stale rpmh votes from GPU
- drm/amd: Handle being compiled without SI or CIK support better
- drm/amd/pm: Prevent division by zero
- drm/amd/pm/powerplay: Prevent division by zero
- drm/amd/pm/smu11: Prevent division by zero
- drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
- drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
- drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
- drm/amdgpu/dma_buf: fix page_link check
- drm/nouveau: prime: fix ttm_bo_delayed_delete oops
- [x86] drm/i915/gvt: fix unterminated-string-initialization warning
- io_uring/net: fix accept multishot handling
- [arm64] KVM: arm64: Discard any SVE state when entering KVM guests
- [arm64] fpsimd: Track the saved FPSIMD state type separately to TIF_SVE
- [arm64] fpsimd: Have KVM explicitly say which FP registers to save
- [arm64] fpsimd: Stop using TIF_SVE to manage register saving in KVM
- [arm64] KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
- [arm64] KVM: arm64: Remove host FPSIMD saving for non-protected KVM
- [arm64] KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN
- [arm64] KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN
- [arm64] KVM: arm64: Refactor exit handlers
- [arm64] KVM: arm64: Mark some header functions as inline
- [arm64] KVM: arm64: Calculate cptr_el2 traps on activating traps
- [arm64] KVM: arm64: Eagerly switch ZCR_EL{1,2}
- cpufreq: Reference count policy in cpufreq_update_limits()
- kbuild: Add '-fno-builtin-wcslen'
- mptcp: sockopt: fix getting freebind & transparent
- mm: Fix is_zero_page() usage in try_grab_page() (Closes: #1102914)
- [x86] split_lock: Fix the delayed detection logic
- [x86] pvh: Call C code via the kernel virtual mapping
- [powerpc*] rtas: Prevent Spectre v1 gadget construction in sys_rtas()
(CVE-2024-46774)
- btrfs: fix qgroup reserve leaks in cow_file_range (CVE-2024-46733)
- btrfs: zoned: fix zone activation with missing devices
- btrfs: zoned: fix zone finishing with missing devices
- Revert "Xen/swiotlb: mark xen_swiotlb_fixup() __init"
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than
max_links (CVE-2024-46816)
- landlock: Add the errata interface
- nvmet-fc: Remove unused functions
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
(CVE-2024-46742)
- cifs: use origin fullpath for automounts
- btrfs: fix the length of reserved qgroup to free
- bpf: avoid holding freeze_mutex during mmap operation (CVE-2025-21853)
- bpf: Prevent tail call between progs attached to different hooks
(CVE-2024-50063)
- blk-cgroup: support to track if policy is online
- blk-iocost: do not WARN if iocg was already offlined (CVE-2024-36908)
- mm: fix apply_to_existing_page_range()
- sign-file,extract-cert: move common SSL helper functions to a header
- sign-file,extract-cert: avoid using deprecated ERR_get_error_line()
- sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3
- [mips*] ds1287: Match ds1287_set_base_clock() function types
- md: factor out a helper from mddev_put()
- md: fix mddev uaf while iterating all_mddevs list (CVE-2025-22126)
(Closes: #1086175)
.
[ Salvatore Bonaccorso ]
* Bump ABI to 34
.
[ Ben Hutchings ]
* d/rules.d/certs: Add newly required include directory to CPPFLAGS
Checksums-Sha1:
e91a074878fc16cf59a7f5abea30897caa4db3ed 759980 bpftool-dbgsym_7.1.0+6.1.135-1_i386.deb
57777e0c8406b8def8ece385866ada97dad66423 1261668 bpftool_7.1.0+6.1.135-1_i386.deb
04a2b419330e438b15f624339ed2857143efb0b4 45380 hyperv-daemons-dbgsym_6.1.135-1_i386.deb
ac3563c47b4a8bd0a00902c48aca18e8ff72870a 1007060 hyperv-daemons_6.1.135-1_i386.deb
d894e792d89d332b288128261ee3765fc9f9dd62 991188 libcpupower-dev_6.1.135-1_i386.deb
058c300e8ba57315d2a2a709ca25b958f24830aa 22344 libcpupower1-dbgsym_6.1.135-1_i386.deb
2073047486bea3632e82bb0b5a491c9dbfdf4742 997864 libcpupower1_6.1.135-1_i386.deb
39e3c67c675db4712e5c2843ffbb1b52ae3268ce 989264 linux-compiler-gcc-12-x86_6.1.135-1_i386.deb
6b27e777b0dd1627c58b09b80323ba1f203f9867 1149284 linux-config-6.1_6.1.135-1_i386.deb
e7e701122f4a54f5e4efc1fe7e60cef5f649dc86 191060 linux-cpupower-dbgsym_6.1.135-1_i386.deb
042796660844f745a5f393a64fe8017dfd71eb08 1107104 linux-cpupower_6.1.135-1_i386.deb
8c617360acc416001dce23aea65c10220b526655 1510332 linux-headers-6.1.0-34-686-pae_6.1.135-1_i386.deb
7622c91cfdbc315826f3f5137cebabb715a330a8 1510988 linux-headers-6.1.0-34-686_6.1.135-1_i386.deb
f4f92f768dd1db9bcb98646219d84ba2490565e2 1510196 linux-headers-6.1.0-34-rt-686-pae_6.1.135-1_i386.deb
7f96ad3c70f48d1ed931bb774935fad4798e3fd2 761589364 linux-image-6.1.0-34-686-dbg_6.1.135-1_i386.deb
3e0fec07bded9ae49ca9468ae79446e60a2c2d30 763999124 linux-image-6.1.0-34-686-pae-dbg_6.1.135-1_i386.deb
2fc18d299e5333f49d0ab0999d54f3c50db4ea2e 49700448 linux-image-6.1.0-34-686-pae-unsigned_6.1.135-1_i386.deb
df14405d9ac495c50913154c108c7df82e8cae5c 49476204 linux-image-6.1.0-34-686-unsigned_6.1.135-1_i386.deb
3926aeb9c86c5f63002e4053270d1d2275aaa886 770191908 linux-image-6.1.0-34-rt-686-pae-dbg_6.1.135-1_i386.deb
7c758f8dafed621432a5e41d409796fb58a45d45 49856856 linux-image-6.1.0-34-rt-686-pae-unsigned_6.1.135-1_i386.deb
02943861d945989aa510ff6efe203daeb4e45780 1304 linux-image-686-dbg_6.1.135-1_i386.deb
3bada387b2735c78f04c6ded9c85705a3176dd4d 1312 linux-image-686-pae-dbg_6.1.135-1_i386.deb
5300a49423d7dd75738837d915fbe09c22c45194 1779852 linux-image-i386-signed-template_6.1.135-1_i386.deb
7666e8c88d26a2401635108b18dd39516aea3924 1324 linux-image-rt-686-pae-dbg_6.1.135-1_i386.deb
a53f65d759a85468332e161f240365f64d98a81a 976068 linux-kbuild-6.1-dbgsym_6.1.135-1_i386.deb
58e25c87783af74c85751b019451fb16f28f4fc0 1257428 linux-kbuild-6.1_6.1.135-1_i386.deb
2f652642f23aef918b2113ea2b60c5745eeba5a5 2136124 linux-libc-dev_6.1.135-1_i386.deb
c19ce350b1fcdef58ae5de0381cc2a0baf72a9fd 7634924 linux-perf-dbgsym_6.1.135-1_i386.deb
dc3bcef48c2631d5d15edf337c13dae89ce9e4f0 3110568 linux-perf_6.1.135-1_i386.deb
91ecc07d604f3cebfc39c62c36017c7ce5f534cb 19175 linux_6.1.135-1_i386-buildd.buildinfo
cdafdd40bdde93ab11e96817d7484e328f1830b4 1029024 rtla_6.1.135-1_i386.deb
45ea039bdc06f5830b06a6e9c811a90f01462c19 137800 usbip-dbgsym_2.0+6.1.135-1_i386.deb
c2c4cebddee17d0cf8e01fca0b9392bf7d754037 1028556 usbip_2.0+6.1.135-1_i386.deb
Checksums-Sha256:
4f00a5317d6c514d660fdd7ca9c7244141e51d7c8915c72a6f8121d06d1a6dbb 759980 bpftool-dbgsym_7.1.0+6.1.135-1_i386.deb
0fa0cb0a1715d20f3b22c7ab5951104add78c65f31e4d586feab7d51ac261b4d 1261668 bpftool_7.1.0+6.1.135-1_i386.deb
902051205ec521f3c48f24f40ae1386861f98fb4376d1e7f41844e760dba61f7 45380 hyperv-daemons-dbgsym_6.1.135-1_i386.deb
99be609889a37b66bf303996dd5ee239740162aa7683e9ab4684e85e9520a93a 1007060 hyperv-daemons_6.1.135-1_i386.deb
cba073184552bd123b91109e65d8e715a49b39e808ef363a7bdfb560373385fb 991188 libcpupower-dev_6.1.135-1_i386.deb
71e2e5c9466a524ae90ac61382faf190162ea6195342d5a4953ece3796839228 22344 libcpupower1-dbgsym_6.1.135-1_i386.deb
8c628237a3a4cb1b4c885f3000e2ae13d75931549005f24514d4e26308bb1923 997864 libcpupower1_6.1.135-1_i386.deb
32e532c9e07401029c6c43aac056e6bd0aac1ac610dc3aeb20db98a15fd8bd47 989264 linux-compiler-gcc-12-x86_6.1.135-1_i386.deb
9ab2ce79a4f360e42a4428b136f07102b67df3abaab17b2eb5954f3d66a06a4f 1149284 linux-config-6.1_6.1.135-1_i386.deb
9afa8e036ebe4103ac3f79f507698c9d45b77fbfcdaf9f9b9e83c244eb23a8fc 191060 linux-cpupower-dbgsym_6.1.135-1_i386.deb
d1b3208fe06fa2d4ea559d80f2d50d7a46919f1f624da78b1625b3b5059e935f 1107104 linux-cpupower_6.1.135-1_i386.deb
9eef18405a814843575e612a7f7b292f752604946db472accef624e9d932c3d6 1510332 linux-headers-6.1.0-34-686-pae_6.1.135-1_i386.deb
2f8023162075eb5522c864233ee5c98f2ff8706e21269c83231c1d39e1f41c86 1510988 linux-headers-6.1.0-34-686_6.1.135-1_i386.deb
12ae219bd1ff8d805d750034298916a790c104c290d1b299a9b4cdd3d070dba0 1510196 linux-headers-6.1.0-34-rt-686-pae_6.1.135-1_i386.deb
c0848f2aeedf89dcfef12d5cc7d4aa8b5b26f4201ecc6352e9b21446103f146b 761589364 linux-image-6.1.0-34-686-dbg_6.1.135-1_i386.deb
5634fdeccb755dc267cf07d593e2cb59d0f91053b2a1660391c85857c80c73af 763999124 linux-image-6.1.0-34-686-pae-dbg_6.1.135-1_i386.deb
c81ee69f4ddf3038bae25d08c9e084e5beb65e003cd5034ee5cfb9a41797f3a0 49700448 linux-image-6.1.0-34-686-pae-unsigned_6.1.135-1_i386.deb
b403224163bc2f9bedf6b3e923b6f5a647dc71f509240c5d4aa0c96c5f5da1ff 49476204 linux-image-6.1.0-34-686-unsigned_6.1.135-1_i386.deb
292cc822d77b4362869e4302037a742b6becde58f64c5077dd457c127a222f80 770191908 linux-image-6.1.0-34-rt-686-pae-dbg_6.1.135-1_i386.deb
daf95e47602d63f09b50ba1612796bee9cb490e28f2a9c1c72ba8f9a276268b0 49856856 linux-image-6.1.0-34-rt-686-pae-unsigned_6.1.135-1_i386.deb
1effab2a49e0086213cec7425e54a21eb28f70e28a58db0aa3f634bc1c216f53 1304 linux-image-686-dbg_6.1.135-1_i386.deb
9958d206eb7867151f38ae68cc381d0f7a31bdbefadbe04623d1cae192588bcf 1312 linux-image-686-pae-dbg_6.1.135-1_i386.deb
679f0a9a7ffe14f6e47106ed71d8e0d9aceca400f08468e727ac8d3d9316804c 1779852 linux-image-i386-signed-template_6.1.135-1_i386.deb
a49746c45fa49955403ec46adf83d58de495eed66be770661eaef8ffa9996675 1324 linux-image-rt-686-pae-dbg_6.1.135-1_i386.deb
91d90f6abc80ff05ba664852b8f0f73b89eb94449bdba7d6ce3a5deadff91b9d 976068 linux-kbuild-6.1-dbgsym_6.1.135-1_i386.deb
2747a53942665a3e0197481bec3a18f5a2bb391780748db28e8ccd36c78b3874 1257428 linux-kbuild-6.1_6.1.135-1_i386.deb
412b2add30dcf7e6f6bb635afce3074db8661aacc0a146e310e393138452950c 2136124 linux-libc-dev_6.1.135-1_i386.deb
10ac68b85d25a7ec10f7ecb4bba39c1b2451efa65265b5bcf69f0bd2ab3b463a 7634924 linux-perf-dbgsym_6.1.135-1_i386.deb
538d16d4da49120ea6b73817bde79156f74c3e6d381850d34e67e9cb3d92932e 3110568 linux-perf_6.1.135-1_i386.deb
564a5a9d98f95a66c0f6135a553948a7222e9bef5ea21ca9f408b6f0bafda99a 19175 linux_6.1.135-1_i386-buildd.buildinfo
270f10334e7ccd7e2880d1ceec5fcc7773fc41054da0968fd0604b7b198c424a 1029024 rtla_6.1.135-1_i386.deb
1077a56c6d56edea38ab63134a2c7691af8bd94c4f60821a9e7261dff8bb2e6d 137800 usbip-dbgsym_2.0+6.1.135-1_i386.deb
0b8655c34fcae92531b13773b2ff72dfd3befd937d3077d84024c7094405c1ca 1028556 usbip_2.0+6.1.135-1_i386.deb
Files:
b38558c93d4e8fc3ebdb16abacb67c56 759980 debug optional bpftool-dbgsym_7.1.0+6.1.135-1_i386.deb
dc02036cf995a249e8234b2b2ada742e 1261668 devel optional bpftool_7.1.0+6.1.135-1_i386.deb
cd9204e08f98f0967602cc9e9f12bd29 45380 debug optional hyperv-daemons-dbgsym_6.1.135-1_i386.deb
9aaf3b3d3a9743306aad8475ad5a50ec 1007060 admin optional hyperv-daemons_6.1.135-1_i386.deb
ecdd55c4f7e68966cff2ce92aae4f3a3 991188 libdevel optional libcpupower-dev_6.1.135-1_i386.deb
194ee6f3ab820f57239c1cb38ebd7c5e 22344 debug optional libcpupower1-dbgsym_6.1.135-1_i386.deb
1892cee09ef45a0e0d4c091fccce23f0 997864 libs optional libcpupower1_6.1.135-1_i386.deb
831546816742154861a908c35b45eafc 989264 kernel optional linux-compiler-gcc-12-x86_6.1.135-1_i386.deb
c607ed035779aadfde5653477e0e90d0 1149284 kernel optional linux-config-6.1_6.1.135-1_i386.deb
0ba0fd7025bc7d4dc6760f59d85368f5 191060 debug optional linux-cpupower-dbgsym_6.1.135-1_i386.deb
34e4981267deac8823f54912e77ad2de 1107104 admin optional linux-cpupower_6.1.135-1_i386.deb
27945a3f90f222a8d54834f5f9c61723 1510332 kernel optional linux-headers-6.1.0-34-686-pae_6.1.135-1_i386.deb
0a41de59a0d53bc3365115885297dc34 1510988 kernel optional linux-headers-6.1.0-34-686_6.1.135-1_i386.deb
b3f3bd5292dd28c310bcdcf2fba93ab2 1510196 kernel optional linux-headers-6.1.0-34-rt-686-pae_6.1.135-1_i386.deb
af3c3629dd5bcb619971dd31436ffde5 761589364 debug optional linux-image-6.1.0-34-686-dbg_6.1.135-1_i386.deb
d4fd7e1cf19e389b3828e904e409d528 763999124 debug optional linux-image-6.1.0-34-686-pae-dbg_6.1.135-1_i386.deb
c567b326f3abf23116d518fa48dad1c1 49700448 kernel optional linux-image-6.1.0-34-686-pae-unsigned_6.1.135-1_i386.deb
ea092d39db16630ff81a8e32ba5b70e8 49476204 kernel optional linux-image-6.1.0-34-686-unsigned_6.1.135-1_i386.deb
8debe0404272a244db85c335cb8481fb 770191908 debug optional linux-image-6.1.0-34-rt-686-pae-dbg_6.1.135-1_i386.deb
0bdf1b679e5bdf7c146e1cfe55ee028a 49856856 kernel optional linux-image-6.1.0-34-rt-686-pae-unsigned_6.1.135-1_i386.deb
2103797f591b0a4a6d0f3fc6067f4416 1304 kernel optional linux-image-686-dbg_6.1.135-1_i386.deb
60fa72c303206a65f6670ee5db3c2835 1312 kernel optional linux-image-686-pae-dbg_6.1.135-1_i386.deb
874db0cdade36fb861a88f6d8f0d28e1 1779852 kernel optional linux-image-i386-signed-template_6.1.135-1_i386.deb
b57c27c4d23d24aa21c0ded333b430f6 1324 kernel optional linux-image-rt-686-pae-dbg_6.1.135-1_i386.deb
82218a7649f24223c691128d17f1db15 976068 debug optional linux-kbuild-6.1-dbgsym_6.1.135-1_i386.deb
f0317da706d347a5dac29284defe989f 1257428 kernel optional linux-kbuild-6.1_6.1.135-1_i386.deb
1e48954fbb862aeabd2b148ce878e69e 2136124 devel optional linux-libc-dev_6.1.135-1_i386.deb
aa12b8b35273dba4330ab128ceb544ed 7634924 debug optional linux-perf-dbgsym_6.1.135-1_i386.deb
2d8646cad4b229b42d06114f485edd02 3110568 devel optional linux-perf_6.1.135-1_i386.deb
5817588e209fba787bfbca7c70fcfdc9 19175 kernel optional linux_6.1.135-1_i386-buildd.buildinfo
e812350853fbe4546fb4d09f4744fb93 1029024 devel optional rtla_6.1.135-1_i386.deb
b445eb759cd04f56e557863195c12252 137800 debug optional usbip-dbgsym_2.0+6.1.135-1_i386.deb
82e379fb6951357124d6eb0f94af217b 1028556 admin optional usbip_2.0+6.1.135-1_i386.deb
-----BEGIN PGP SIGNATURE-----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=b758
-----END PGP SIGNATURE-----