UPDATE: 6.12.107 - #1360
Open
fepitre-bot wants to merge 1 commit into
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Update to 6.12.107
Details
Changes since previous version:
gregkh/linux@74456843f18b PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems
gregkh/linux@825b95561d7b Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept
gregkh/linux@013448eb7b0d ALSA: scarlett2: Use a private URB for the notification endpoint
gregkh/linux@c5398ce6db76 rndis_host: add overflow check in rndis_rx_fixup()
gregkh/linux@84be002b40d3 gpio: ml-ioh: use raw_spinlock_t for the register lock
gregkh/linux@447ddf805994 gve: fix zero-length skb frag with header-split
gregkh/linux@cfb38b036992 hwmon: (ltc4286) Fix symbol namespace of MODULE_IMPORT_NS()
gregkh/linux@d4ae8dba90b8 netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()
gregkh/linux@69d27cf39966 inet: frags: add inet_frag_putn() helper
gregkh/linux@872c093deef0 ipv4: frags: remove ipq_put()
gregkh/linux@8a681bcea4c4 inet: frags: change inet_frag_kill() to defer refcount updates
gregkh/linux@da9c1c1a1c0f inet: frags: save a pair of atomic operations in reassembly
gregkh/linux@39c6c4b267b6 inet: frags: publish queues before arming timer
gregkh/linux@c321dc5172c8 serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx
gregkh/linux@3f2a15f33f86 NTB: ntb_netdev: Preserve RX queue depth on allocation failure
gregkh/linux@9f6989e477f0 serial: amba-pl011: synchronize DMA teardown
gregkh/linux@5ed1be08b353 serial: sc16is7xx: rename EFR mutex with generic name
gregkh/linux@76a91352fbd6 serial: sc16is7xx: use guards for simple mutex locks
gregkh/linux@49bd99360538 serial: sc16is7xx: enable THRI before filling TX FIFO
gregkh/linux@f607b13ad656 xfs: namespace the maximum length/refcount symbols
gregkh/linux@fbfd43c85b1a xfs: don't use a xfs_log_iovec for ri_buf in log recovery
gregkh/linux@7e32d4eebae6 xfs: bounds-check buffer log item's dirty bitmap
gregkh/linux@063dd7a53d4e xfs: hoist per-bucket unlinked list check to helper
gregkh/linux@599453f83458 xfs: don't livelock in scrub on a circular unlinked list
gregkh/linux@c9f10a001c24 ALSA: dummy: Check card index validity at probe
gregkh/linux@b9eb5c9fdd81 ocfs2: fix missing metadata reservation for large xattrs
gregkh/linux@5327827c7dba null_blk: fix UBSAN shift-out-of-bounds when zone_size is 0 or overflows
gregkh/linux@18799e858b40 kcov: fix data corruption and race conditions on PREEMPT_RT
gregkh/linux@889ec86464d2 ext4: stop retrying saturated xattr cache entries
gregkh/linux@e0aeee3b3d3c ext4: clear error before retrying inode xattr space fallback
gregkh/linux@40b741de4a82 ext4: propagate errors from fast commit range replay
gregkh/linux@98a42bb9d60d xfs: validate attr entry pointer before field access
gregkh/linux@c59219a6b62d libceph: fix OOB read in decode_watchers() via missing bounds check
gregkh/linux@af4c0606f743 nfc: digital: clamp SENSF_RES length to the destination buffer
gregkh/linux@0d723090645b nfc: fdp: bound the device-reported read length and fix an skb leak
gregkh/linux@e6397fe7b8b5 nfc: microread: validate target discovery payload lengths
gregkh/linux@389986fd79e4 nfc: llcp: bound the connect_sn TLV walk to the skb
gregkh/linux@382eaa770335 nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers
gregkh/linux@eab47618e282 nfc: llcp: reject PDUs shorter than the LLCP header
gregkh/linux@e16927728137 nfc: pn533: purge fragmented skbs during cleanup
gregkh/linux@0f344944c506 nfc: st21nfca: validate ATR_REQ length against the received frame
gregkh/linux@50e87e1c0e18 nfc: nci: fix out-of-bounds write in nci_target_auto_activated()
gregkh/linux@7086dab72b3e nfc: nci: fix uninit-value in the RF discover/activated NTF handlers
gregkh/linux@022969dee274 nfc: nci: free destination parameters when closing a connection
gregkh/linux@4bfce749ef19 ndisc: ndisc_send_redirect() cleanup
gregkh/linux@ee944a706a18 Input: byd - synchronize timer deletion before freeing private data
gregkh/linux@36e0741833bd ipv4: reject undersized MTUs in ip_do_fragment()
gregkh/linux@3c770ac4e6f0 ipv6: fix use-after-free in ip6_finish_output2()
gregkh/linux@dfcf013f7770 nvmet-auth: zero the AUTH_RECEIVE response buffer
gregkh/linux@371fb1bf902a nvmet-fc: fix invalid free in LS IOD error path
gregkh/linux@d2acc96c528d nvmet-tcp: bound SGL data length before allocating command buffers
gregkh/linux@c509f20be1ca nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations
gregkh/linux@d4a241723234 mptcp: pm: fix data race in add_addr timer callback
gregkh/linux@2ed3601e9db0 ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses
gregkh/linux@491c499295fb drm/xe: Fix DPT allocation paths.
gregkh/linux@d863aa31bd04 HID: magicmouse: fix battery reporting for Bluetooth Magic Trackpad USB-C
gregkh/linux@448260a3ec95 HID: magicmouse: re-enable multitouch after reset-resume
gregkh/linux@9bdf8c7bfd79 HID: magicmouse: do not keep a stale msc->input if no input is claimed
gregkh/linux@ba6af07e700b HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID
gregkh/linux@a38212687519 HID: core: fix OOB read of field->usage in hid_set_field()
gregkh/linux@881a805a8029 net/ionic: avoid OOB TX partner lookup for hwstamp RXQ
gregkh/linux@8dd8929b71c4 xfrm: fix sk_dst_cache double-free in xfrm_user_policy()
gregkh/linux@684efb2c86c8 ipv4: start using dst_dev_rcu()
gregkh/linux@b2a0b55bf613 mptcp: pm: fix memory leak from alloc-during-teardown race
gregkh/linux@40e812ced723 Input: atkbd - skip deactivate for HONOR FMB-P's internal keyboard
gregkh/linux@b9a651311fd4 Input: atkbd - skip deactivate for HONOR ZQC-P
gregkh/linux@addca61f9a23 HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()
gregkh/linux@3288bec1a21d HID: nintendo: register input device after capabilities are set
gregkh/linux@03a84f9f88b4 HID: nintendo: stop device IO before hid_hw_stop on probe failure
gregkh/linux@dd8035dec26e HID: core: fix number/pointer type confusion on long items
gregkh/linux@244a1cb63837 HID: sensor: custom: Fix use-after-free in enable_sensor
gregkh/linux@f84d777574b7 HID: hyperv: validate initial device info bounds
gregkh/linux@d57702d4c556 Bluetooth: hci_event: fix LE list UAF on reset
gregkh/linux@a34df5c4a439 Bluetooth: hci_event: validate LE Set CIG Parameters response
gregkh/linux@8715ffd60872 Bluetooth: ISO: do not force BT_LISTEN after a failed BIG sync
gregkh/linux@7733b01ed136 Bluetooth: hci_aml: validate firmware segment lengths
gregkh/linux@03cb8cc2961f net: gro: properly validate BIG TCP aggregation criteria
gregkh/linux@8b74a2fbba5a Linux 6.12.106
gregkh/linux@dec2edb7aaf1 inet: frags: strip GSO state from fragments before reassembly
gregkh/linux@f717995cb7dc Linux 6.12.107