Bruce Ashfield [Tue, 25 Mar 2025 18:35:59 +0000 (14:35 -0400)]
linux-yocto/5.15: update to v5.15.179
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:
0c935c049b5c Linux 5.15.179 bf500b0d0cfe net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels 02e43735932d kbuild: userprogs: use correct lld when linking through clang bb0245fa72b7 sched: sch_cake: add bounds checks to host bulk flow fairness counts bab61f41c942 vsock: Orphan socket after transport release e48fcb403c2d vsock: Keep the binding until socket destruction 857428f4acc1 bpf, vsock: Invoke proto::close on close() 117f7a2975ba media: uvcvideo: Remove dangling pointers 0fdd7cc59338 media: uvcvideo: Fix crash during unbind if gpio unit is in use 607dc724b162 nilfs2: handle errors that nilfs_prepare_chunk() may return e5606b783307 nilfs2: eliminate staggered calls to kunmap in nilfs_rename 1fa500f494f1 nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link 1cd7fd082c78 spi-mxs: Fix chipselect glitch cd0938805875 mtd: rawnand: cadence: fix unchecked dereference 3e9899c12d5a md: select BLOCK_LEGACY_AUTOLOAD 1a7c8039d2ee media: uvcvideo: Avoid returning invalid controls 69b06b05ff94 media: uvcvideo: Avoid invalid memory access 4e15cf870d2c drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl ade9362dec18 eeprom: digsy_mtc: Make GPIO lookup table match the device 7746f3bb8917 bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock 09d34c4cbc38 slimbus: messaging: Free transaction ID in delayed interrupt scenario 1437d13ca83e intel_th: pci: Add Panther Lake-P/U support cebbd798ff25 intel_th: pci: Add Panther Lake-H support 8875af55b825 intel_th: pci: Add Arrow Lake support e1651332291e mei: me: add panther lake P DID cf46f88b92cf Squashfs: check the inode number is not the invalid value of zero ac9a7d4c9007 usb: xhci: Enable the TRB overfetch quirk on VIA VL805 41eae5d6e308 xhci: pci: Fix indentation in the PCI device ID definitions c3a772540220 usb: gadget: Check bmAttributes only if configuration is valid 7e6b36d92dce usb: gadget: Fix setting self-powered state on suspend 2b229d7b8a59 usb: gadget: Set self-powered based on MaxPower and bmAttributes a0dc4a3bdede usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality 3d8b87be73e9 usb: typec: ucsi: increase timeout for PPM reset operations 00ac1ea9c0cd usb: dwc3: gadget: Prevent irq storm when TH re-executes 78669d6f45a5 usb: dwc3: Set SUSPENDENABLE soon after phy init bf4409f84023 usb: atm: cxacru: fix a flaw in existing endpoint checks 3248c1f833f9 usb: renesas_usbhs: Flush the notify_hotplug_work a1ad97347a45 usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader 894b4c75eadf usb: hub: lack of clearing xHC resources ec4b6f492ea1 usb: renesas_usbhs: Use devm_usb_get_phy() 50b9010da101 usb: renesas_usbhs: Call clk_put() 30e37db26120 Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection" 329393a0325b gpio: rcar: Fix missing of_node_put() call f185b6d0aeea net: ipv6: fix missing dst ref drop in ila lwtunnel 82043c99801e net: ipv6: fix dst ref loop in ila lwtunnel 5cb300dcdd27 sched/fair: Fix potential memory corruption in child_cfs_rq_on_list 49bf31477184 net-timestamp: support TCP GSO case for a few missing flags 413e908f13ce exfat: fix soft lockup in exfat_clear_bitmap 6d099f3f7b27 x86/sgx: Fix size overflows in sgx_encl_create() a2d112a3b408 x86/sgx: Support VA page allocation without reclaiming 51e5bc6d39d1 x86/sgx: Export sgx_encl_{grow,shrink}() 48fa260f15b6 x86/sgx: Move PTE zap code to new sgx_zap_enclave_ptes() 110a40c51415 x86/sgx: Support loading enclave page without VMA permissions check 0fb7aa04c19e vlan: enforce underlying device type 4e2191b0fd0c ppp: Fix KMSAN uninit-value warning with bpf b7d8d4529984 net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error 671aaa17bd31 be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink 3f9e7298053c drm/sched: Fix preprocessor guard e9813e0887fe hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe() 9b6f083db141 llc: do not use skb_get() before dev_queue_xmit() e2eebbb52d15 ALSA: usx2y: validate nrpacks module parameter on probe afa9cd90e765 hwmon: (ad7314) Validate leading zero bits and return error 996340f3db89 hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table 13de3056e38c hwmon: (pmbus) Initialise page count in pmbus_identify() 8e4e08ca4cc6 caif_virtio: fix wrong pointer check in cfv_probe() 455217ac9db0 net: gso: fix ownership in __udp_gso_segment 17451b795002 nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch 01b18a330cda HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() 4283afde4f8d HID: google: fix unused variable warning under !CONFIG_ACPI 47616b82f2d4 wifi: iwlwifi: limit printed string from FW file b4739de37538 mm: don't skip arch_sync_kernel_mappings() in error paths 955c5a1ddd6e mm/page_alloc: fix uninitialized variable 51e0101ab9e9 block: fix conversion of GPT partition name to 7-bit 03f075d56063 s390/traps: Fix test_monitor_call() inline assembly cdd9f58f7fe4 rapidio: fix an API misues when rio_add_net() fails 181d4daaefb3 rapidio: add check for rio_add_net() in rio_scan_alloc_net() cd1bdcb77fdc wifi: nl80211: reject cooked mode if it is set along with other flags 6a5e3b23054c wifi: cfg80211: regulatory: improve invalid hints checking d8786dfa9f45 x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63 61104ea20840 x86/cpu: Validate CPUID leaf 0x2 EDX output dafc649de271 x86/cacheinfo: Validate CPUID leaf 0x2 EDX output 421c91ba9099 platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e 63c2c523f5ca drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M ffcc3f070263 ALSA: hda/realtek: update ALC222 depop optimize 6ea0f0a47640 ALSA: hda: intel: Add Dell ALC3271 to power_save denylist 807789018186 gpio: aggregator: protect driver attr handlers against module unload 7c1f36f9c9ac gpio: rcar: Use raw_spinlock to protect register access b1d95d733cd6 HID: appleir: Fix potential NULL dereference at raw event handle a3325fdbee9b Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'" 6486abfcf891 drm/amdgpu: disable BAR resize on Dell G5 SE 4be891399cdc drm/amdgpu: Check extended configuration space register when system uses large bar f618aeb6cad2 smb: client: Add check for next_buffer in receive_encrypted_standard() a56a6e8589a9 pfifo_tail_enqueue: Drop new packet when sch->limit == 0 e38f9d761b34 intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly 288fdb8dcb71 sched/core: Prevent rescheduling when interrupts are disabled 3d67976d304e vmlinux.lds: Ensure that const vars with relocations are mapped R/O 7cca31035c05 mptcp: always handle address removal under msk socket lock b66eb3f54ac3 phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk f07c325f54c4 phy: tegra: xusb: reset VBUS & ID OVERRIDE d20b23a5412c net: enetc: correct the xdp_tx statistics ccce797d9052 net: enetc: update UDP checksum when updating originTimestamp field b68d88b79975 net: enetc: fix the off-by-one issue in enetc_map_tx_buffs() 9bcb8cbc3e5d usbnet: gl620a: fix endpoint checking in genelink_bind() e3aea1dba97d i2c: npcm: disable interrupt enable bit before devm_request_irq c327a355a4ff drm/amd/display: Fix HPD after gpu reset 922e18d67bc0 perf/core: Fix low freq setting via IOC_PERIOD fca3b89abc92 ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2 3d738b53ed6c ftrace: Avoid potential division by zero in function_stat_show() 7163da88c07b x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems 2daabaa55c7c net: ipv6: fix dst ref loop on input in rpl lwt c0b11dc50590 net: ipv6: rpl_iptunnel: mitigate 2-realloc issue dbd4f89a4a58 net: ipv6: fix dst ref loop on input in seg6 lwt 634710a372ba net: ipv6: seg6_iptunnel: mitigate 2-realloc issue 8513e56e31fc include: net: add static inline dst_dev_overhead() to dst.h 3e97606c954f seg6: add support for SRv6 H.L2Encaps.Red behavior 86df97f030be seg6: add support for SRv6 H.Encaps.Red behavior bf5801cc24cc net/mlx5: IRQ, Fix null string in debug print b8e0dd7ff319 net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination. 0e70cec1839f tcp: Defer ts_recent changes until req is owned a3c25f8374c2 ipvs: Always clear ipvs_property flag in skb_scrub_packet() eba344580acb ASoC: es8328: fix route from DAC to output 39a26120ad99 net: cadence: macb: Synchronize stats calculations 718725496191 net: loopback: Avoid sending IP packets without an Ethernet header 806fcc99e4c0 afs: Fix the server_list to unuse a displaced server rather than putting it 9055fb0bb4f4 afs: Make it possible to find the volumes that are using a server ba335b157a6a afs: remove variable nr_servers 1154e50e53e4 Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response a340768d7311 ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports a8f4ceb21f65 sunrpc: suppress warnings for unused procfs functions f36cf97e4978 RDMA/mlx5: Fix bind QP error cleanup flow 66fee638e4dd scsi: core: Clear driver private data when retrying request 668ef6c54ca7 scsi: core: Don't memset() the entire scsi_cmnd in scsi_init_command() 4b49d939b5a7 ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up 802d342bf8bc ovl: pass ofs to creation operations be2343e08165 ovl: use wrappers to all vfs_*xattr() calls 1cd7f84c88ae IB/mlx5: Set and get correct qp_num for a DCT QP 9a7fc5641c6f x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit b0c7cda8d636 mtd: rawnand: cadence: fix incorrect device in dma_unmap_single 099a31651850 mtd: rawnand: cadence: use dma_map_resource for sdma address 0301f9b44877 mtd: rawnand: cadence: fix error code in cadence_nand_init() 29853440da38 acct: block access to kernel internal filesystems 5d5b936cfa4b acct: perform last write from workqueue d97d560f7d36 ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED 924b239f9704 nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() 872c7c7e57a7 drop_monitor: fix incorrect initialization order c0a9a9481591 tee: optee: Fix supplicant wait loop a3feeb1b4cb2 bpf: skip non exist keys in generic_map_lookup_batch 3bb2204ec30f nvme/ioctl: add missing space in err message 9f3891867e8e power: supply: da9150-fg: fix potential overflow ef305447885e arp: switch to dev_getbyhwaddr() in arp_req_set_public() e860d5103591 net: Add non-RCU dev_getbyhwaddr() helper 2af45b1f2962 flow_dissector: Fix port range key handling in BPF conversion fbb727e4934a flow_dissector: Fix handling of mixed port and port-range keys 65196ee66ec2 net: extract port range fields from fl_flow_key a94e59db1d89 geneve: Suppress list corruption splat in geneve_destroy_tunnels(). cb15bb1bde0b gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl(). f74f65601467 geneve: Fix use-after-free in geneve_find_dev(). 6847b3e40bb9 powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC 718d0480ca3a ALSA: hda/realtek: Fixup ALC225 depop procedure 71f427413d2d powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline 61a45806db46 powerpc/64s/mm: Move __real_pte stubs into hash-4k.h b09957657d77 USB: gadget: f_midi: f_midi_complete to call queue_work 006a4e9069a1 usb: dwc3: Fix timeout issue during controller enter/exit from halt state 47cc53c3ebe3 usb: dwc3: Increase DWC3 controller halt timeout 3c0e0aecb78c batman-adv: Drop unmanaged ELP metric worker 6ad063461332 batman-adv: Drop initialization of flexible ethtool_link_ksettings d775f9e9e663 media: uvcvideo: Only save async fh if success e0360e009904 media: uvcvideo: Refactor iterators 972f412da53b media: uvcvideo: Set error_idx during ctrl_commit errors c113bccf1f87 soc: mediatek: mtk-devapc: Fix leaking IO map on driver remove c3fa28e6cac8 soc/mediatek: mtk-devapc: Convert to platform remove callback returning void 4dd78251db13 soc: mediatek: mtk-devapc: Fix leaking IO map on error paths 10185d020c8f soc: mediatek: mtk-devapc: Switch to devm_clk_get_enabled() f03ad378249f kfence: skip __GFP_THISNODE allocations on NUMA systems 8e19db074ab3 kfence: enable check kfence canary on panic via boot param b7792fe79fbe kfence: allow use of a deferrable timer 0621d2599d6e tpm: Change to kvalloc() in eventlog/acpi.c 906ac470b16c tpm: Use managed allocation for bios event log 5e8bee0e4914 arm64: dts: mediatek: mt8183: Disable DSI display output by default 4a06ed6b962b ASoC: renesas: rz-ssi: Add a check for negative sample_space 8c4b9b0c3950 drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event() 5211d75e2cb7 drm/probe-helper: Create a HPD IRQ event helper for a single connector f3b9fb276459 ksmbd: fix integer overflows on 32 bit systems a9042dbc1ed4 memcg: fix soft lockup in the OOM process 4edae3ff6d4e mm: update mark_victim tracepoints fields a32ba399a030 media: imx-jpeg: Fix potential error pointer dereference in detach_pm() e290d1fe37f7 crypto: testmgr - some more fixes to RSA test vectors add54f963938 crypto: testmgr - populate RSA CRT parameters in RSA test vectors 40689219a28b crypto: testmgr - fix version number of RSA tests bd258be9a8be crypto: testmgr - Fix wrong test case of RSA 8fbf27a746c3 crypto: testmgr - fix wrong key length for pkcs1pad 4969dcc05bc3 arm64: mte: Do not allow PROT_MTE on MAP_HUGETLB user mappings c4041b6b0a7a pps: Fix a use-after-free 26f2fdc47fea btrfs: avoid monopolizing a core when activating a swap file dc550af962b7 Revert "btrfs: avoid monopolizing a core when activating a swap file" caae54426402 x86/i8253: Disable PIT timer 0 when not in use 3aa5254d8096 f2fs: fix to wait dio completion 234549fb3db3 ARM: dts: dra7: Add bus_dma_limit for l4 cfg bus c97306464928 selftests: rtnetlink: update netdevsim ipsec output format 28435f5d9d08 netdevsim: print human readable IP address 810109436b28 parport_pc: add support for ASIX AX99100 79cf08014ef3 serial: 8250_pci: add support for ASIX AX99100 1840fb92baf4 can: ems_pci: move ASIX AX99100 ids to pci_ids.h d8ff250e085a nilfs2: protect access to buffers with no active references f51ff43c4c5a nilfs2: do not force clear folio if buffer is referenced 1bf43414ccff nilfs2: do not output warnings when clearing dirty buffers c6ddb3848599 alpha: replace hardcoded stack offsets with autogenerated ones 5fb8cda2fcea x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 9c0a3aab4b8d kdb: Do not assume write() callback available 22e19c8c5f6b drm/v3d: Stop active perfmon if it is being destroyed 37054243cf5d drm/tidss: Clear the interrupt status for interrupts being disabled 2b7db8abf84f drm/tidss: Fix issue in irq handling causing irq-flood issue 29fa42197f26 ipv6: mcast: add RCU protection to mld_newpack() e24d225e4cb8 ndisc: extend RCU protection in ndisc_send_skb() a884f57600e4 openvswitch: use RCU protection in ovs_vport_cmd_fill_info() d9366ac2f956 arp: use RCU protection in arp_xmit() 40d8f2f2a373 neighbour: use RCU protection in __neigh_notify() 44e359552378 neighbour: delete redundant judgment statements b870256dd2a5 ndisc: use RCU protection in ndisc_alloc_skb() 28de355b63ad ipv6: use RCU protection in ip6_default_advmss() ce3c6165fce0 ipv4: use RCU protection in __ip_rt_update_pmtu() fc07a232326a net: ipv4: Cache pmtu for all packet paths if multipath enabled a7246d3949c2 selftest: net: Test IPv4 PMTU exceptions with DSCP and ECN 7385291def47 Namespaceify mtu_expires sysctl 686792179f20 Namespaceify min_pmtu sysctl 4561343d2b6c ipv4: use RCU protection in inet_select_addr() 50d356db0542 ipv4: use RCU protection in rt_is_expired() 6e0d21491686 net: add dev_net_rcu() helper c22b8d77816e net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() 0e5ea98edc3b ipv4: add RCU protection to ip4_dst_hoplimit() 60f54f0d4ea5 clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context a02540d4401f clocksource: Use pr_info() for "Checking clocksource synchronization" message 4ae5e361537d clocksource: Replace cpumask_weight() with cpumask_empty() acfebfb2abf3 btrfs: fix hole expansion when writing at an offset beyond EOF e4291f26c501 mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw() 9abfb2c8693d arm64: Handle .ARM.attributes section in linker scripts 78be8f779b20 regmap-irq: Add missing kfree() 40a35d14f3c0 partitions: mac: fix handling of bogus partition table 4647cb4e0013 gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock ede3fa7b0cb6 alpha: align stack for page fault and user unaligned trap handlers bf3f395b9c37 serial: 8250: Fix fifo underflow on flush 19f3e16bc9f7 cgroup: fix race between fork and cgroup.kill 4d832459170d efi: Avoid cold plugged memory for placing the kernel b737d6439113 alpha: make stack 16-byte aligned (most cases) f1767d255807 can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero f7a43d1563ac can: c_can: fix unbalanced runtime PM disable in error path 9fccb6b65510 USB: serial: option: drop MeiG Smart defines 412458d7e92b USB: serial: option: fix Telit Cinterion FN990A name 60f0765d673b USB: serial: option: add Telit Cinterion FN990B compositions 95fcacb5b9a9 USB: serial: option: add MeiG Smart SLM828 6878c61a3880 usb: cdc-acm: Fix handling of oversized fragments 871619c2b78f usb: cdc-acm: Check control transfer buffer size before access 9ee5bb1938f3 USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk d3a67adb365c USB: hub: Ignore non-compliant devices with too many configs or interfaces d8e86700c8a8 usb: gadget: f_midi: fix MIDI Streaming descriptor lengths aeda961736f3 USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone 6afdad04f6c1 USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist b605fd13b832 usb: core: fix pipe creation for get_bMaxPacketSize0 1af4043ec5bc USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI ef5e915db375 usb: dwc2: gadget: remove of_node reference upon udc_stop 626ab15ddc4b usb: gadget: udc: renesas_usb3: Fix compiler warning 6a902573f2ca usb: roles: set switch registered flag early on f4ca0cf536b1 perf/x86/intel: Ensure LBRs are disabled when a CPU is starting 45fa526b0f5a KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel 2e8f0f0e0097 batman-adv: Ignore neighbor throughput metrics in error case f0a16c6c7976 batman-adv: fix panic during interface removal 6b7d69806c42 ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V 8725882b0f69 orangefs: fix a oob in orangefs_debug_write 848b58151775 x86/mm/tlb: Only trim the mm_cpumask once a second cd8de1f521d5 Grab mm lock before grabbing pt lock 69b812149b8b vfio/pci: Enable iowrite64 and ioread64 for vfio pci 20b7d9675437 PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P 59a707ad952e media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread d485a8b22794 media: cxd2841er: fix 64-bit division on gcc-9 ba842a609ff8 x86/xen: allow larger contiguous memory regions in PV guests 5b750e76dfd5 xen: remove a confusing comment on auto-translated guest I/O d340047cf29b gpio: bcm-kona: Add missing newline to dev_err format string f66a5da15f14 gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ 54b0de7b6abe gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0 092dc83b9a3c drm/i915/selftests: avoid using uninitialized context 88a3e6afaf00 arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array f443687ad20c team: better TEAM_OPTION_TYPE_STRING validation 5bb4228c3226 vrf: use RCU protection in l3mdev_l3_out() 80f70686857e ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() 2052b44cd0a6 HID: multitouch: Add NULL check in mt_input_configured efa8a261c575 NFSD: fix hang in nfsd4_shutdown_callback 6f7cfee1a316 nfsd: clear acl_access/acl_default after releasing them e22a97700901 tty: xilinx_uartps: split sysrq handling 59cf03ddf127 mptcp: prevent excessive coalescing on receive 03b605ac1e5b ocfs2: check dir i_size in ocfs2_find_entry ad73b43e6908 memory: tegra20-emc: Correct memory device mask 12a1cf9db178 gpio: xilinx: remove excess kernel doc 9772e2e15482 net/ncsi: use dev_set_mac_address() for Get MC MAC Address handling 3fec5d194fc9 MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static 1334c64a5d1d ptp: Ensure info->enable callback is always set 0eda6b12a108 net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset 83db3d545d39 net/ncsi: wait for the last response to Deselect Package before configuring channel 2ed6d46f8037 misc: fastrpc: Fix registered buffer page address 820603335006 mtd: onenand: Fix uninitialized retlen in do_otp_read() 10b3f947b609 NFC: nci: Add bounds checking in nci_hci_create_pipe() 8f41df5fd4c1 nilfs2: fix possible int overflows in nilfs_fiemap() 8aee4184c5b7 ocfs2: handle a symlink read error correctly 5a1c86066f1b ocfs2: fix incorrect CPU endianness conversion causing mount failure c00e53672d7d pnfs/flexfiles: retry getting layout segment for reads f65ce06387f8 vfio/platform: check the bounds of read/write syscalls 66325de71801 nvmem: core: improve range check for nvmem_cell_write() c897de3d1f4d nvmem: qcom-spmi-sdam: Set size in struct nvmem_config f52f00efd8c0 crypto: qce - unregister previously registered algos in error path efae52c61150 crypto: qce - fix goto jump in error path 14810fb99091 media: uvcvideo: Remove redundant NULL assignment 74512c021525 media: uvcvideo: Fix event flags in uvc_ctrl_send_events 1662c5812b84 media: ccs: Fix cleanup order in ccs_probe() 66a2c461703e media: ccs: Fix CCS static data parsing for large block sizes d6fae50f5eb7 media: ov5640: fix get_light_freq on auto 9a6c627f3fe4 media: mc: fix endpoint iteration 9e6cd5f99496 soc: qcom: smem_state: fix missing of_node_put in error path 1880c45ebe14 iio: light: as73211: fix channel handling in only-color triggered buffer 22d1dcd0b053 media: ccs: Clean up parsed CCS static data on parse failure 6bdbb75ffc6c xfs: Add error handling for xfs_reflink_cancel_cow_range 4e9af1ddbc98 crypto: qce - fix priority to be less than ARMv8 CE 231dfd6bb61e arm64: dts: qcom: sm8350: Fix MPSS memory length e7e06872144e x86/boot: Use '-std=gnu11' to fix build with GCC 15 81a3a0c1a68f kbuild: Move -Wenum-enum-conversion to W=2 2bce0a6a4433 scsi: storvsc: Set correct data length for sending SCSI command without payload 73d3d3c66f10 scsi: qla2xxx: Move FCE Trace buffer allocation to user control ad88fd9ee93a nvme-pci: Add TUXEDO IBP Gen9 to Samsung sleep quirk 662964484f8a nvme-pci: Add TUXEDO InfinityFlex to Samsung sleep quirk d88422ccb97f PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf() abe03cd5d5b7 ALSA: hda/realtek: Enable headset mic on Positivo C6400 94e418935e1d Revert "media: uvcvideo: Require entities to have a non-zero unique ID" d24476777e8b mips/math-emu: fix emulation of the prefx instruction 63b759c9680e dm-crypt: track tag_offset in convert_context 84d6db1a7327 dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit() 453a0a22ceb8 powerpc/pseries/eeh: Fix get PE state translation a3d92e7af72a MIPS: Loongson64: remove ROM Size unit in boardinfo 48a6a4dfa5c8 serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use 6b7947990681 serial: sh-sci: Drop __initdata macro for port_cfg 2d09d3c9afa2 soc: qcom: socinfo: Avoid out of bounds read of serial number 5fa25ae6484b usb: gadget: f_tcm: Don't prepare BOT write request twice d5e48551866e usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint 45956a34f9a8 usb: gadget: f_tcm: Decrement command ref count on cleanup 93facdc47dc6 usb: gadget: f_tcm: Translate error to sense 61541d9b5a23 wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() 7f44aa9d3960 wifi: rtlwifi: rtl8821ae: Fix media status report e27d77db198a HID: hid-sensor-hub: don't use stale platform-data on remove c0a158e7634a of: reserved-memory: Fix using wrong number of cells to get property 'alignment' 4f7c0deea1b3 of: Fix of_find_node_opts_by_path() handling of alias+path+options 87141db6d148 of: Correct child specifier used as input of the 2nd nexus node a0d751d2d8ec perf bench: Fix undefined behavior in cmpworker() be042a185cc5 efi: libstub: Use '-std=gnu11' to fix build with GCC 15 38287f779b34 blk-cgroup: Fix class @block_class's subsystem refcount leakage 44bd016cbaa3 clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate 4e2996526679 clk: qcom: gcc-mdm9607: Fix cmd_rcgr offset for blsp1_uart6 rcg 175af15551ed clk: qcom: gcc-sm6350: Add missing parent_map for two clocks 4d8d1f443a6c clk: qcom: clk-alpha-pll: fix alpha mode configuration 45d563356db6 clk: sunxi-ng: a100: enable MMC clock reparenting f26831839566 Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection cf601a24120c Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc 250164081da0 drm/i915: Drop 64bpp YUV formats from ICL+ SDR planes 5098970ecc1d drm/komeda: Add check for komeda_get_layer_fourcc_list() e89f74ef6bee drm/amd/pm: Mark MM activity as unsupported 224fa21f00fc KVM: s390: vsie: fix some corner-cases when grabbing vsie pages 7c4899239d0f KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() b0e8b635a331 arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma bc8ca18b8ef4 binfmt_flat: Fix integer overflow bug on 32 bit systems 20ecbadad51a m68k: vga: Fix I/O defines 592ffb238132 s390/futex: Fix FUTEX_OP_ANDN implementation 61b4e072b7e8 drm/modeset: Handle tiled displays in pan_display_atomic. 4e2de62318b9 leds: lp8860: Write full EEPROM, not only half of it fc7da1095247 cpufreq: s3c64xx: Fix compilation warning 4defa9ebef14 tun: revert fix group permission check 98a2c685293a netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() d85d721f3225 x86/xen: add FRAME_END to xen_hypercall_hvm() aaa15fc4291b x86/xen: fix xen_hypercall_hvm() to not clobber %rbx d308661a0f4e net: rose: lock the socket in rose_bind() 5bb48702e946 net: atlantic: fix warning during hot unplug a6f3981d04d1 gpio: pca953x: Improve interrupt support 61e7e18fa64c udp: gso: do not drop small packets when PMTU reduces 540ffff7925b tg3: Disable tg3 PCIe AER on system reboot 712e6ed39e5c gpu: drm_dp_cec: fix broken CEC adapter properties check 256768b17e62 firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry 51df156e04e5 nvme: handle connectivity loss in nvme_set_queue_count cf30300a216a usb: xhci: Fix NULL pointer dereference on certain command aborts b27f10764d80 usb: xhci: Add timeout argument in address_device USB HCD callback d31d3dc92775 xfs: don't over-report free space or inodes in statvfs bd015e2e7f26 xfs: report realtime block quota limits on realtime directories d25041d4a3b2 gpio: xilinx: Convert gpio_lock to raw spinlock 4489cce8e4e7 net/ncsi: fix locking in Get MAC Address handling 8930834d1525 net/ncsi: Add NC-SI 1.2 Get MC MAC Address command 3f46fefab962 usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in the error path of .probe() 998b1fa6c218 usb: chipidea/ci_hdrc_imx: Convert to platform remove callback returning void 9794ea40979b usb: chipidea: ci_hdrc_imx: use dev_err_probe() af431197516a x86/mm: Don't disable PCID when INVLPG has been fixed by microcode c56ea30db33d platform/x86: acer-wmi: Ignore AC events 78a88a1690bc Input: allocate keycode for phone linking b191b2b3b5ad selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack() f213bb330fc6 tipc: re-order conditions in tipc_crypto_key_rcv() c9b80829b001 mmc: sdhci-msm: Correctly set the load for the regulator 4dddb00d0397 net: wwan: iosm: Fix hibernation by re-binding the driver around it 5c60cdcff102 APEI: GHES: Have GHES honor the panic= setting 3fa04850ddac i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz 0bae6625cabc wifi: iwlwifi: avoid memory leak 578845229c4e net/mlx5: use do_aux_work for PHC overflow checks 463f5f6402b9 HID: Wacom: Add PCI Wacom device support c16b96035c48 mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id b2bd5857a0d6 tomoyo: don't emit warning in tomoyo_write_control() d280a12e9b87 wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() bafaee99fc23 mmc: core: Respect quirk_max_rate for non-UHS SDIO card 9b560350aa7b tun: fix group permission check ecf6a4a55809 safesetid: check size of policy writes bb8ff054e19f printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX 99795e62e7a5 x86/amd_nb: Restrict init function to AMD-based systems 23434fcf90b9 lockdep: Fix upper limit for LOCKDEP_*_BITS configs 56135262c1f9 sched: Don't try to catch up excess steal time. 13dae4fa17be btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling 367b72fa18b0 btrfs: fix data race when accessing the inode's disk_i_size at btrfs_drop_extents() 7e954b6bb95d btrfs: fix use-after-free when attempting to join an aborted transaction 51bcf530c6dc btrfs: output the reason for open_ctree() failure bbb7f49839b5 usb: gadget: f_tcm: Don't free command immediately 3ba8884a56a3 media: uvcvideo: Fix double free in error path 3a7fda57b0f9 mptcp: consolidate suboption status 83a3a5aeb1b1 usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR PPS bb52bce4c91c usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE 16d5669ff07f usb: dwc3: core: Defer the probe until USB power supply ready 2cfbf53baeaf usb: gadget: f_tcm: Fix Get/SetInterface return value 3c1f8dfa01b3 drivers/card_reader/rtsx_usb: Restore interrupt based detection d42168f109f9 net: usb: rtl8150: enable basic endpoint checking 10eff770fd16 ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro deec230cb835 ktest.pl: Check kernelrelease return in get_version 5083a7ae4500 netfilter: nf_tables: reject mismatching sum of field_len with set key length d712ca4807ce NFSD: Reset cb_seq_status after NFS4ERR_DELAY b0938ffd39ae f2fs: Introduce linear search for dentries 679bb865c881 hexagon: Fix unbalanced spinlock in die() 8e83dbe9ff32 hexagon: fix using plain integer as NULL pointer warning in cmpxchg 4bd72d9fe11d kconfig: fix memory leak in sym_warn_unmet_dep() 5f45a419bdd1 kconfig: WERROR unmet symbol dependency ccc1287a02ea kconfig: deduplicate code in conf_read_simple() 3e31777acf2d kconfig: remove unused code for S_DEF_AUTO in conf_read_simple() 131f1604fa6b kconfig: require a space after '#' for valid input 6bdf078908c3 kconfig: add warn-unknown-symbols sanity check 4780a614f013 kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST c48b8fc7f0a8 genksyms: fix memory leak when the same symbol is read from *.symref file bb28d02726ab genksyms: fix memory leak when the same symbol is added from source 13310513f549 net: hsr: fix fill_frame_info() regression vs VLAN packets df3398504b97 net: sh_eth: Fix missing rtnl lock in suspend/resume path 3ce32a9fb1d2 bgmac: reduce max frame size to support just MTU 1500 ab2df791b1d4 vsock: Allow retrying on connect() failure a48ebcd853a4 perf trace: Fix runtime error of index out of bounds 0dd6c67f6cfe ptp: Properly handle compat ioctls 7d7d201eb3b7 net: davicom: fix UAF in dm9000_drv_remove cfb17f637562 net: netdevsim: try to close UDP port harness races 1409b45d4690 net: rose: fix timer races against user threads c499bd77ca2a PM: hibernate: Add error handling for syscore_suspend() 547ef7e8cbb9 ipmr: do not call mr_mfc_uses_dev() for unres entries 6468f3a9842f net: fec: implement TSO descriptor cleanup 5934bfaeaffe gpio: mxc: remove dead code after switch to DT-only 8c640dd3d900 net: hns3: fix oops when unload drivers paralleling 1787cd67bb94 ubifs: skip dumping tnc tree when zroot is null e5536677da80 rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read 2943af7d72d7 dmaengine: ti: edma: fix OF node reference leaks in edma_driver c9cc70bca158 xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO 6be3ea508111 tools/bootconfig: Fix the wrong format specifier 26e5c3c8d780 NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE edcaf4156ced NFSv4.2: fix COPY_NOTIFY xdr buf size calculation f6bae8cc42ab module: Extend the preempt disabled section in dereference_symbol_descriptor(). 2e2bb52b8e58 ocfs2: mark dquot as inactive if failed to start trans while releasing dquot fe761befd845 scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails 13186db840b9 scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1 6987e021b64c PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() 68ee578e6e31 staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() 6f3c167de057 mtd: hyperbus: hbmc-am654: fix an OF node reference leak 784a7f4a9efb mtd: hyperbus: hbmc-am654: Convert to platform remove callback returning void c1aea4faa984 mtd: hyperbus: Make hyperbus_unregister_device() return void 3b86841430a6 media: uvcvideo: Propagate buf->error to userspace 235ab2be3572 media: camif-core: Add check for clk_enable() cc0d04ae127d media: mipi-csis: Add check for clk_enable() 5bdd8b64153d media: i2c: ov9282: Correct the exposure offset 8ab5c3af1406 media: i2c: imx412: Add missing newline to prints 333f8f9b6667 media: marvell: Add check for clk_enable() a61cd3df84b3 PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() 55c326068f6b media: lmedm04: Handle errors for lme2510_int_read 8bea20f4d630 media: rc: iguanair: handle timeouts 0486d65804cc efi: sysfb_efi: fix W=1 warnings when EFI is not set 8049a0845bfc of: reserved-memory: Do not make kmemleak ignore freed address ca36f0848eb8 memblock: drop memblock_free_early_nid() and memblock_free_early() d26e179d2cac xen/x86: free_p2m_page: use memblock_free_ptr() to free a virtual pointer 708ce479ff3c RDMA/mlx5: Fix indirect mkey ODP page count 95b4474c93a0 RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults fe090e183d26 RDMA/mlx5: Remove iova from struct mlx5_core_mkey b9c5f50926e3 fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() 96cd8661f225 ARM: dts: mediatek: mt7623: fix IR nodename 311afb2be167 arm64: dts: qcom: sdm845: Fix interrupt types of camss interrupts eb3e76baaf1b arm64: dts: qcom: sm8150-microsoft-surface-duo: fix typos in da7280 properties 312e11fc5060 arm64: dts: qcom: sm8350: correct sleep clock frequency 8fbb052b3bd3 arm64: dts: qcom: sm8250: correct sleep clock frequency c990f5e0b2cb arm64: dts: qcom: sm6125: correct sleep clock frequency 88c84e743d4c arm64: dts: qcom: sc7280: correct sleep clock frequency afc66a233ad9 arm64: dts: qcom: msm8994: correct sleep clock frequency 9cc46ab94b61 arm64: dts: qcom: msm8916: correct sleep clock frequency 09153a482e90 arm64: dts: qcom: msm8994: Describe USB interrupts 31952ff5833c arm64: dts: qcom: msm8996: Fix up USB3 interrupts ea7232a05e10 arm64: dts: mediatek: mt8183-kukui-jacuzzi: Drop pp3300_panel voltage settings c3def10c610a memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() d9f36f957bb2 memory: tegra20-emc: Support matching timings by LPDDR2 configuration 0f3c0d94c815 memory: Add LPDDR2-info helpers 4274acb5b996 arm64: dts: mediatek: mt8183: willow: Support second source touchscreen cba8c5daa9d8 arm64: dts: mediatek: mt8183: kenzo: Support second source touchscreen d098183961e0 arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names b9a5544dbad5 arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names 032c92e01aaa arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property 2a28a21a925f arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property e53ca458f543 rdma/cxgb4: Prevent potential integer overflow on 32bit 160450e4908b RDMA/mlx4: Avoid false error about access to uninitialized gids array f92f10cdb7fa arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A 52a976a83dda arm64: dts: mediatek: mt8516: add i2c clock-div property 6047c27de667 arm64: dts: mediatek: mt8516: remove 2 invalid i2c clocks bcc6c817e2ad arm64: dts: mediatek: mt8516: fix wdt irq type 3ad0e4e15581 arm64: dts: mediatek: mt8516: fix GICv2 range 9792f0c9880a arm64: dts: mt8183: set DMIC one-wire mode on Damu abbb15f54a35 ARM: at91: pm: change BU Power Switch to automatic mode 4c6209efea22 padata: avoid UAF for reorder_work 035ed9577b48 padata: add pd get/put refcnt helper f3e0b9f790f8 padata: fix UAF in padata_reorder e306eaaa3d78 bpf: Send signals asynchronously if !preemptible d6becd34dc65 perf report: Fix misleading help message about --demangle 54b587874a7c perf top: Don't complain about lack of vmlinux when not resolving some kernel samples ca0b62b2dc9a padata: fix sysfs store callback check b467ed29b586 crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto() 778a73f8d38d crypto: hisilicon/sec2 - fix for aead invalid authsize 37e032978e55 crypto: hisilicon/sec2 - fix for aead icv error 017b2680816b crypto: hisilicon/sec2 - optimize the error return process 8f268c476c83 crypto: hisilicon/sec - delete redundant blank lines 0db426905cb4 crypto: hisilicon/sec - add some comments for soft fallback 4086792b8883 ktest.pl: Remove unused declarations in run_bisect_test function 4c45f82e101a ASoC: renesas: rz-ssi: Use only the proper amount of dividers 49c5d851a2bf perf bpf: Fix two memory leakages when calling perf_env__insert_bpf_prog_info() ac026a0ba486 perf header: Fix one memory leakage in process_bpf_prog_info() 11491bb26fd9 perf header: Fix one memory leakage in process_bpf_btf() d79fc69eda73 ASoC: sun4i-spdif: Add clock multiplier settings 6a5d02ae6ff8 libbpf: Fix segfault due to libelf functions not setting errno 3c99e59404f3 tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind b8583b54455c net/rose: prevent integer overflows in rose_setsockopt() 3cfabbb18810 tcp_cubic: fix incorrect HyStart round start detection ed8c0300f302 net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns() 920f736e6c64 netfilter: nft_flow_offload: update tcp state flags under lock 38646749d6e1 net: sched: Disallow replacing of child qdisc from one parent to another 26bc6076798a net: avoid race between device unregistration and ethnl ops f023bf675814 net/mlxfw: Drop hard coded max FW flash image size 0e2f1d93d287 net: let net.core.dev_weight always be non-zero 0cc8fc34df84 selftests/landlock: Fix error message 78eadb30f5ce clk: analogbits: Fix incorrect calculation of vco rate delta 7d07de96990e wifi: cfg80211: adjust allocation of colocated AP data 7427e4afbd16 wifi: cfg80211: Handle specific BSSID in 6GHz scanning 23b54d193a90 selftests: harness: fix printing of mismatch values in __EXPECT() 28063f72460d cpufreq: ACPI: Fix max-frequency computation 965e41a93fce wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO a1fccf6b72b5 landlock: Handle weird files b32a42383c26 landlock: Move filesystem helpers and add a new one ba079f94cb0a net/smc: fix data error when recvmsg with MSG_PEEK flag 9394c1163c20 wifi: wlcore: fix unbalanced pm_runtime calls a7e98a85990a samples/landlock: Fix possible NULL dereference in parse_path() 332ee5fc52e1 regulator: of: Implement the unwind path of of_regulator_match() bd099a2fa9be team: prevent adding a device which is already a team device lower f5072f5c806f clk: imx8mp: Fix clkout1/2 support 68fb4aafe3bb cpufreq: schedutil: Fix superfluous updates caused by need_freq_update 0e833dc042b9 leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata() 4efb30e564f2 dt-bindings: mfd: bd71815: Fix rsense and typos 725d01fdde59 cpupower: fix TSC MHz calculation fc1750250f85 ACPI: fan: cleanup resources in the error path of .probe() f575806ef1da regulator: dt-bindings: mt6315: Drop regulator-compatible property a57bce750a52 HID: multitouch: fix support for Goodix PID 0x01e9 25c30f902438 Revert "HID: multitouch: Add support for lenovo Y9000P Touchpad" 8c52d33d88ef HID: multitouch: Add support for lenovo Y9000P Touchpad 4c436e8bd326 wifi: rtlwifi: pci: wait for firmware loading before releasing memory b96371339fd9 wifi: rtlwifi: fix memory leaks and invalid access at probe error path 0eea81f30c6e wifi: rtlwifi: destroy workqueue at rtl_deinit_core 8e2fcc68fbaa wifi: rtlwifi: remove unused check_buddy_priv ed3d742c2204 wifi: rtlwifi: remove unused dualmac control leftovers c8951a13d626 wifi: rtlwifi: remove unused timer and related code 5f945d2595cd rtlwifi: replace usage of found with dedicated list iterator variable 94b4c15bca53 dt-bindings: leds: class-multicolor: Fix path to color definitions f045124251f5 dt-bindings: leds: class-multicolor: reference class directly in multi-led node 594cb8eeac49 dt-bindings: leds: Add multicolor PWM LED bindings 7c09f7ba7ad3 dt-bindings: leds: Optional multi-led unit address e547ede9d118 dt-bindings: leds: Add Qualcomm Light Pulse Generator binding 621600ed2ce5 dt-bindings: Another pass removing cases of 'allOf' containing a '$ref' b220d6b97a8b spi: dt-bindings: add schema listing peripheral-specific properties efb8b60b7990 dt-bindings: mmc: controller: clarify the address-cells description 4960235d6662 spi: zynq-qspi: Add check for clk_enable() 5a80bbc5df58 wifi: rtlwifi: usb: fix workqueue leak when probe fails 643c584528ce wifi: rtlwifi: fix init_sw_vars leak when probe fails 284a6f64f4cf wifi: rtlwifi: wait for firmware loading before releasing memory 949845dfdb9b wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step 56e84ffaf3d8 wifi: rtlwifi: do not complete firmware loading needlessly eb288ab33fd8 ipmi: ipmb: Add check devm_kasprintf() returned value 62f14b506f5b genirq: Make handle_enforce_irqctx() unconditionally available 2396bc91935c drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table a32ea3f982b3 HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections c589074b64dd drm/etnaviv: Fix page property being used for non writecombine buffers c7971fc03a06 sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat b3a5ff8c4b6e sched/psi: Use task->psi_flags to clear in CPU migration 105ff3024397 afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call 0a60270ee48c select: Fix unbalanced user_access_end() b9ca509e5b7f partitions: ldm: remove the initial kernel-doc notation 8714ecb8fa55 nvme: Add error check for xa_store in nvme_get_effects_log 113563188f22 pstore/blk: trivial typo fixes e3be8862d73c nbd: don't allow reconnect after disconnect 2d43a6fcea0e block: retry call probe after request_module in blk_request_module 6327dacfe6d6 block: deprecate autoloading based on dev_t effcbfb1e5ea fs: fix proc_handler for sysctl_nr_open a3eff27900d0 fs: move fs stat sysctls to file_table.c ca5d118b213e fs: move inode sysctls to its own file 548fae8fb904 sysctl: share unsigned long const values 7584027c80dc sysctl: use const for typically used max/min proc sysctls d96a8f8e86d1 hung_task: move hung_task sysctl interface to hung_task.c f3cfafcdb5bb afs: Fix directory format encoding struct ef5f2706364d afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY e0bb89c44b56 efi: libstub: Use '-std=gnu11' to fix build with GCC 15 b5d500042eb3 usb: hcd-pci: remove the action of faking interrupt request 6f0605db50e2 clk: imx: Add check for kcalloc 5b837b9e1543 bpf: Fix the indention issue in grow_stack_state() 42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size() b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub 7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr() 81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ] c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail() 299ef3b5b00b of: module: add buffer overflow check in of_modalias() b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change ea091017ef62 ipv6: Fix data races around sk->sk_prot. ff8710da80ee ipv6: annotate some data-races around sk->sk_prot e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops. 8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock 7c82dac02886 block, loop: support partitions without scanning 45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded 1f24338cb789 jbd2: Drop the merge conflicted hunk e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 6224acfc1d56 tpm: Add flag to use default cancellation policy 1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops 1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13 24615a3b932a ata: ahci: fix enum constants for gcc-13 5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf 130f9da78406 tools/resolve_btfids: Build with host flags 00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang 17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building 7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated 37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy da5513f30187 libbpf: Fix build warning on ref_ctr_off 4c5a089621a8 perf python: Account for multiple words in CC 1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers 838f5d0701d8 fs: add mode_strip_sgid() helper d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack 1363bd7dbde3 ixgbevf: add disable link state e5601ae2bd24 ixgbe: add improvement for MDD response functionality caa57cd80575 ixgbe: add the ability for the PF to disable VF link state 16a77bfcc7df Check /dev/console using init_stat() 04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data 0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully 1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES 493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition 04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered 6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve 1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field 6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash a40d2daf2795 pnmtologo: use relocatable file name 3b40d5b41155 of: configfs: remove unused variable overlay_lock 6c085baf1838 tools: use basename to identify file in gen-mach-types 2fca0fd71981 lib/build_OID_registry: fix reproducibility issues 0f586f4ee8ad vt/conmakehash: improve reproducibility a75774679f28 OF: DT-Overlay configfs interface (v8) d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer() 856ec356cf91 ACPI: thermal: drop an always true check 7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC 41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o 44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs() 77aa9e489eaf bpf: Disallow unprivileged bpf by default ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups 4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal"" 5df6d1b00f95 jbd2: fix use-after-free of transaction_t race 2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function 07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction 4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal" 7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack f78574dee71e kasan: test: silence intentional read overflow warnings d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC 5e279d5647cc arm64: support page mapping percpu first chunk allocator e5bf16752dca vmalloc: choose a better start address in vm_area_register_early() 660b3d21b46f kasan: test: bypass __alloc_size checks 00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write 67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack 7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc() bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack() 51423ebb36ad lib/stackdepot: introduce __stack_depot_save() 85373e66d847 lib/stackdepot: remove unused function argument 5b6cc9b251f3 lib/stackdepot: include gfp.h c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case. b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic() 13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence 21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221 6199fd896645 aufs: tiny, headers after fs_context 8ddb40e31c29 aufs: fs_context 7/7, finally remount 69035f71c6fd aufs: fs_context 6/7, now mount bc841b970697 aufs: fs_context 5/7, parse all other mount options 435188053da2 aufs: fs_context 4/7, parse xino options 9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options 1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option a8488f603134 aufs: fs_context 1/7, skelton of the new shceme 8e32e0015564 aufs: pre fs_context, convert a static flag to a macro f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case 948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo() 77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117 2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129 7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone 66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl() 69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore ada8fe9543e5 aufs: 5.14-20210906 ---> 5.14-20211018 b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes" 81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation 97c963889222 sched/isolation: really align nohz_full with rcu_nocbs 871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards" ffad0783dd5b ARM: config: multi v7: Regenerate defconifg 5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols badaf96564fe ARM: config: multi v7: Clean up enabled by default options 34996040fc9b ARM: config: multi v7: Drop unavailable options 7f685244afb3 powerpc/mm: Switch obsolete dssall to .long 20301aeb1a64 riscv: fix build with binutils 2.38 9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error 720b61fc400b x86_64_defconfig: Fix warnings 02bf23d26bc4 arm64: defconfig: cleanup config options 05914e2c87e5 arm: defconfig: drop unused POWER_AVS option ffb532fa19b9 aufs5: fix build against v5.15.3+ a4b3abf4d96d qemux86: add configuration symbol to select values fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter 3d8762d900d9 clear_warn_once: bind a timer to written reset value 95faacac47e8 clear_warn_once: expand debugfs to include read support de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel. 0e4aacead9c1 perf: x86-32: explicitly include <errno.h> 9ad92c11468e perf: mips64: Convert __u64 to unsigned long long 09e7efe3e68a perf: fix bench numa compilation e79becc44fa6 perf: add SLANG_INC for slang.h b1033b588681 perf: add sgidefs.h to for mips builds cf9db484ac0b perf: change --root to --prefix for python install 7fd052c2c562 perf: add 'libperl not found' warning 27a437cdd469 perf: force include of <stdbool.h> 3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat a7e9293b506b FAT: Added FAT_NO_83NAME 6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option 538be0fdb124 aufs: adjust to v5.15 fs changes f45da75c8759 aufs5: core 047f57e07e01 aufs5: standalone 029fc15574c8 aufs5: mmap 610d0192ee94 aufs5: base d4e428d0ec5f aufs5: kbuild eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL 286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name 24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested) 22c73536d5d7 yaffs: include blkdev.h 506b7251bfb8 yaffs: fix misplaced variable declaration a0e26ff364dc yaffs2: v5.6 build fixups b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super 2e3c3aec8279 yaffs: repair yaffs_get_mtd_device d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API 70a6113ee2c7 yaffs2: fix memory leak in mount/umount 3378e4a9e404 yaffs: Avoid setting any ACL releated xattr ec2284edddef Yaffs:check oob size before auto selecting Yaffs1 c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY 608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020) 89e660ece42c initramfs: allow an optional wrapper script around initramfs generation b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally 3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119) d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation d202fb2caf33 defconfigs: drop obselete options 9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled e20d8cf019b4 linux-yocto: Handle /bin/awk issues b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion adb40f1e6a1a uvesafb: print error message when task timeout occurs f280a1ed0962 compiler.h: Undef before redefining __attribute_const__ 4352732f268c vmware: include jiffies.h 7954a677968d Resolve jiffies wrapping about arp 5f28a1035d95 nfs: Allow default io size to be configured. 0d7260ad7106 check console device file on fs when booting 900a12e37e0a mount_root: clarify error messages for when no rootfs found 7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location 6604fc1763b3 modpost: mask trivial warnings 0d294adb09cb kbuild: exclude meta directory from distclean processing a097cdd95a9e powerpc: serialize image targets 5db6ec39a0a3 arm: serialize build targets cbabca27905e crtsavres: fixups for 5.4+ 7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8 a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8 186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild d1ea862964ca powerpc: kexec fix for powerpc64 2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core 2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code ec57870b303a mips: Kconfig: add QEMUMIPS64 option 6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency 74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c 22e65b63d3b4 arm/Makefile: Fix systemtap b7f1ab59f19e vexpress: Pass LOADADDR to Makefile ce2800c73bf7 arm: ARM EABI socketcall 019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Robert Yang [Fri, 21 Mar 2025 11:46:44 +0000 (11:46 +0000)]
libxcrypt-compat: Remove libcrypt.so to fix conflict with libcrypt
Fixed:
IMAGE_INSTALL:append = " libxcrypt-compat"
$ bitbake <image> -cpopulate_sdk
file /usr/lib/libcrypt.so from install of libxcrypt-compat-dev-4.4.33-r0.0.aarch64 conflicts with file from package libcrypt-dev-4.4.33-r0.2.aarch64
Remove libcrypt.so like other files to fix the error.
Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Yogita Urade [Fri, 21 Mar 2025 12:55:52 +0000 (12:55 +0000)]
xwayland: fix CVE-2022-49737
In X.Org X server 20.11 through 21.1.16, when a client application
uses easystroke for mouse gestures, the main thread modifies various
data structures used by the input thread without acquiring a lock,
aka a race condition. In particular, AttachDevice in dix/devices.c
does not acquire an input lock.
Yogita Urade [Fri, 21 Mar 2025 12:55:51 +0000 (12:55 +0000)]
xserver-xorg: fix CVE-2022-49737
In X.Org X server 20.11 through 21.1.16, when a client application
uses easystroke for mouse gestures, the main thread modifies various
data structures used by the input thread without acquiring a lock,
aka a race condition. In particular, AttachDevice in dix/devices.c
does not acquire an input lock.
Zhang Peng [Thu, 13 Mar 2025 14:22:35 +0000 (22:22 +0800)]
mpg123: fix CVE-2024-10573
CVE-2024-10573:
An out-of-bounds write flaw was found in mpg123 when handling crafted streams.
When decoding PCM, the libmpg123 may write past the end of a heap-located buffer.
Consequently, heap corruption may happen, and arbitrary code execution is not
discarded. The complexity required to exploit this flaw is considered high as
the payload must be validated by the MPEG decoder and the PCM synth before execution.
Additionally, to successfully execute the attack, the user must scan through the
stream, making web live stream content (such as web radios) a very unlikely attack vector.
Peter Marko [Wed, 12 Mar 2025 19:28:28 +0000 (20:28 +0100)]
libarchive: patch CVE-2025-25724
Pick commit referencing this MR which was merged to master.
Note that this commit also patched CVE-2025-1632 in bsdunzip, however
that utility was introduced only in 3.7.0, so that part is not
applicable in kirkstone.
Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Adapted to different kirkstone CVE_STATUS format.
Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Alessio Cascone [Wed, 29 Jan 2025 07:31:29 +0000 (08:31 +0100)]
tzcode-native: Fix compiler setting from 2023d version
Starting from 2023d version, tzcode makefile does not use anymore "cc"
variable for C compiler, due to Makefile refactoring.
Replacing "cc" with "CC" fixes the issue.
Signed-off-by: Alessio Cascone <alessio.cascone@vimar.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b3cdfca5ef84ed2054faef9abddef3aeed930e17) Signed-off-by: Steve Sakoman <steve@sakoman.com>
Vijay Anusuri [Mon, 24 Feb 2025 06:30:37 +0000 (12:00 +0530)]
libtasn1: upgrade 4.19.0 -> 4.20.0
* Noteworthy changes in release 4.20.0 (2025-02-01) [stable]
- The release tarball is now reproducible.
- We publish a minimal source-only tarball generated by 'git archive'.
- Update gnulib files and various build/maintenance fixes.
- Fix CVE-2024-12133: Potential DoS in handling of numerous SEQUENCE OF or SET
OF elements
License-Update: file COPYING.LESSER renamed to COPYING.LESSERv2 & Copyright year updated to 2025
Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
PR32560 stack-buffer-overflow at objdump disassemble_bytes
Backport a patch from upstream to fix CVE-2025-0840
Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=baac6c221e9d69335bf41366a1c7d87d8ab2f893]
Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Building weston with core-image-weston SDK fails:
```
../libweston/renderer-gl/gl-shader-config-color-transformation.c:29:10: fatal error: GLES3/gl3.h: No such file or directory
29 | #include <GLES3/gl3.h>
| ^~~~~~~~~~~~~
```
Both GLES2 and GLES3 implementations are contained in libGLESv2.so.2,
which is packaged in libgles2-mesa. However, the headers are split
between libgles2-mesa-dev and libgles3-mesa-dev, which is why the
GLES3 headers end up missing in the SDK sysroot.
Add a dependency so the GLES3 headers are properly associated with
the GLES3 implementation.
Signed-off-by: Tom Hochstein <tom.hochstein@oss.nxp.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Guocai He [Thu, 27 Feb 2025 02:11:49 +0000 (10:11 +0800)]
xz: Update SRC_URI
Update SRC_URI for xz.
The the tarball of xz-.tar.gz has been changed from
https://tukaani.org/xz/xz-.tar.gz to
https://sourceforge.net/projects/lzmautils/files/xz-.tar.gz
Signed-off-by: Guocai He <guocai.he.cn@windriver.com>
Moritz Haase [Wed, 26 Feb 2025 06:51:54 +0000 (12:21 +0530)]
meta: Enable '-o pipefail' for the SDK installer
When testing a Yocto SDK installer on Alpine 3.21, we recently ended up with a
broken SDK. One of the commands the relocation script calls in a piped
multi-command chain failed (see [0]), but the installer did not realize that -
since it doesn't use 'set -o pipefail'. Thus, the error was never reported to
the user and the installer claimed to have set up the SDK correctly - which
wasn't the case.
Given that the SDK installer is a POSIX-compliant shell script and that the
'pipefail' option used to be missing from the standard, it's not surprising that
it isn't used. Thankfully however, in June of 2024, a new version of POSIX
(POSIX.1-2024) was released - and that one finally includes the 'pipefail'
option (see [1]). A number of shells already support it, so let's enable it if
available to make the SDK installer more robust.
The change has been tested locally using SDK installers for internal projects,
based on both Kirkstone and Scarthgap.
Libo Chen [Wed, 26 Feb 2025 06:42:54 +0000 (14:42 +0800)]
virglrenderer: fix do_fetch error
Update SRC_URI to fix the following error:
WARNING: virglrenderer-native-0.9.1-r0 do_fetch: Failed to fetch URL
git://anongit.freedesktop.org/git/virglrenderer;branch=branch-0.9.1,
attempting MIRRORS if available
Signed-off-by: Libo Chen <libo.chen.cn@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Jiaying Song [Wed, 26 Feb 2025 06:01:48 +0000 (14:01 +0800)]
boost: fix do_fetch error
Change the SRC_URI to the correct value due to the following error:
WARNING: boost-native-1.86.0-r0 do_fetch: Checksum failure encountered with download of https://boostorg.jfrog.io/artifactory/main/release/1.86.0/source/boost_1_86_0.tar.bz2 - will attempt other sources if available
Signed-off-by: Jiaying Song <jsong-cn@ala-lpggp7.wrs.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
backport to kirkstone. Signed-off-by: Libo Chen <libo.chen.cn@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Narpat Mali [Tue, 25 Feb 2025 15:14:43 +0000 (20:44 +0530)]
systemd: upgrade 250.5 -> 250.14
Latest stable branch update which includes 396 commits and the full
list of changes can be found at:
https://github.com/systemd/systemd-stable/compare/v250.5...v250.14
All the patches were refreshed with devtool.
Backported this upstreamed patch to resolve the compile error while
building systemd with qemumips machine.
- 0001-core-fix-build-when-seccomp-is-off.patch
These 2 below patches were modified to resolve the merge conflicts
introduced by systemd v250.14 version:
1. 0001-Move-sysusers.d-sysctl.d-binfmt.d-modules-load.d-to-.patch
- This patch was just adjusted based on the systemd v250.14 version.
2. 0001-pass-correct-parameters-to-getdents64.patch
- For this patch, there was a commit reverted as part of the v250.8 tag:
https://github.com/systemd/systemd-stable/commit/51089e007f2f45fc15e37e7a9dcf3045416e1239
These below 6 patches were dropped as systemd v250.14 already has
the changes:
- 0001-shared-json-allow-json_variant_dump-to-return-an-err.patch
- CVE-2022-3821.patch
- CVE-2022-4415-1.patch
- CVE-2022-4415-2.patch
- CVE-2022-45873.patch
- CVE-2023-7008.patch
Signed-off-by: Narpat Mali <narpat.falna@gmail.com> Signed-off-by: Randy Macleod <randy.macleod@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module,
a potential security vulnerability exists due to insufficient validation of
certain parameters when parsing Speex codec extradata. This vulnerability
could lead to integer overflow conditions, potentially resulting in undefined
behavior or crashes during the decoding process.
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library
which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition.
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Incorrect Access Control in GStreamer RTSP server 1.25.0 in gst-rtsp-server/rtsp-media.c
allows remote attackers to cause a denial of service via a series of specially crafted
hexstream requests.
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Peter Marko [Wed, 19 Feb 2025 20:17:14 +0000 (21:17 +0100)]
libxml2: fix compilation of explicit child axis in pattern
This was reported as sucurity fix in
https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.10
https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.6
Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Hongxu Jia [Wed, 19 Feb 2025 08:18:19 +0000 (16:18 +0800)]
u-boot: fix CVE-2024-57259
sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error
and resultant heap memory corruption for squashfs directory listing because the
path separator is not considered in a size calculation.
https://nvd.nist.gov/vuln/detail/CVE-2024-57259
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Hongxu Jia [Wed, 19 Feb 2025 08:18:18 +0000 (16:18 +0800)]
u-boot: fix CVE-2024-57258
Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1
occur for a crafted squashfs filesystem via sbrk, via request2size,
or because ptrdiff_t is mishandled on x86_64.
https://nvd.nist.gov/vuln/detail/CVE-2024-57258
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Hongxu Jia [Wed, 19 Feb 2025 08:18:16 +0000 (16:18 +0800)]
u-boot: fix CVE-2024-57256
An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1
occurs for zalloc (adding one to an le32 variable) via a crafted ext4
filesystem with an inode size of 0xffffffff, resulting in a malloc of
zero and resultant memory overwrite.
https://nvd.nist.gov/vuln/detail/CVE-2024-57256
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Hongxu Jia [Wed, 19 Feb 2025 08:18:15 +0000 (16:18 +0800)]
u-boot: fix CVE-2024-57255
An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1
occurs via a crafted squashfs filesystem with an inode size of 0xffffffff,
resulting in a malloc of zero and resultant memory overwrite.
https://nvd.nist.gov/vuln/detail/CVE-2024-57255
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Carlos Dominguez [Wed, 19 Feb 2025 08:18:12 +0000 (16:18 +0800)]
u-boot: Fix CVE-2022-30767
This patch mitigates the vulnerability identified via CVE-2019-14196.
The previous patch was bypassed/ineffective, and now the vulnerability
is identified via CVE-2022-30767. The patch removes the sanity check
introduced to mitigate CVE-2019-14196 since it's ineffective.
filefh3_length is changed to unsigned type integer, preventing negative
numbers from being used during comparison with positive values during
size sanity checks.
Signed-off-by: Carlos Dominguez <carlos.dominguez@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Mingli Yu [Tue, 18 Feb 2025 07:12:24 +0000 (15:12 +0800)]
procps: replaced one use of fputs(3) with a write(2) call
This patch is ported from a merge request shown below,
and the following represents the original commit text.
------------------------------------------------------
top: In the bye_bye function, replace fputs with the write interface.
When top calls malloc, if a signal is received, it will
call sig_endpgm to process the signal. In the bye_bye function, if the
-b option is enable, the Batch variable is set, the fputs function
will calls malloc at the same time. The malloc function is not reentrant, so
it will cause the program to crash.
Richard Purdie [Wed, 12 Feb 2025 18:58:52 +0000 (19:58 +0100)]
scritps/runqemu: Ensure we only have two serial ports
I have a theory that some of the console boot issues we're seeing are due to
starting images with three serial ports yet only starting gettys on two of them.
This means that occasionally, depending on the port numbering we may not get
a login prompt on the console we expect it on.
To fix this, change the runqemu code so that if serial ports are passed in on
the commandline (as is the case in automated testing), we don't add any other
GUI serial consoles.
We do need to make sure we do have at least two serial ports since we don't want
getty timeout warnings.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 1b0348535dce3b776efbcf26406b94730a51eb85) Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1
allows attackers to cause a denial of service in the application via a crafted VQA file.
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library
allowing for an integer overflow, potentially resulting in a denial-of-service (DoS)
condition or other undefined behavior.
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read
Sensitive Constants Within an Executable. This vulnerability is associated with
program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C .
This issue affects FFmpeg: 7.1. Issue was
fixed: https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a
https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a
This issue was discovered by: Simcha Kosman
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing.
Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate
data can take excessive time, leading to increased resource consumption.
This flaw allows a remote attacker to send a specially crafted certificate, causing
GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Divya Chellam [Thu, 13 Feb 2025 14:16:58 +0000 (14:16 +0000)]
ruby: fix CVE-2024-41946
REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS
vulnerability when it parses an XML that has many entity expansions
with SAX2 or pull parser API. The REXML gem 3.3.3 or later include
the patch to fix the vulnerability.
This CVE is relevant only for subversion running on Windows.
Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Reviewed-by: Sofiane Hamam <sofiane.hamam@smile.fr>
Joshua Watt [Tue, 11 Feb 2025 13:49:18 +0000 (13:49 +0000)]
classes-global/insane: Look up all runtime providers for file-rdeps
Uses the new foreach_runtime_provider_pkgdata() API to look up all
possible runtime providers of a given dependency when resolving
file-rdeps. This allows the check to correctly handle RPROVIDES for
non-virtual dependencies
Peter Marko [Mon, 10 Feb 2025 18:27:34 +0000 (19:27 +0100)]
cmake: apply parallel build settings to ptest tasks
ptest compile and install tasks do not have parallel build settings for
cmake. On powerful build machines this can cause overload situations
and oomkills.
Observed when building qtgrpc with ptest generally enabled in distro.
Having this in ptest class is suboptimal, but creating ptest-cmake class
just for these two variables is probably overkill.
Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Pedro Ferreira [Thu, 6 Feb 2025 10:12:21 +0000 (10:12 +0000)]
rust-common.bbclass: soft assignment for RUSTLIB path
As a user i want to override `RUSTLIB` path on a bbclass, lets
call it `XYZ.bbclass`.
If a certain recipe inherits `cargo.bbclass` and `XYZ.bbclass` the
value of `RUSTLIB` is dependent on the order of the inherit.
If `cargo.bbclass` is inherit before `XYZ.bbclass` this will reflect
the desired value of `RUSTLIB`, on the oposite, if the `XYZ.bbclass`
is inherit before `cargo.bbclass` then the `RUSTLIB` defined on
`rust-common.bbclass` will prevail.
Changed definition of `RUSTLIB` to soft assignment to make it overridable.
Signed-off-by: Pedro Silva Ferreira <Pedro.Silva.Ferreira@criticaltechworks.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
(cherry picked from commit 6eeb832f73ffb48f5f05dc47191f60e4599e640f) Signed-off-by: Steve Sakoman <steve@sakoman.com>
Nikhil R [Tue, 4 Feb 2025 06:55:26 +0000 (07:55 +0100)]
glibc: Suppress GCC -Os warning on user2netname for sunrpc
When building with GCC -Os, a warning is triggered indicating that sprintf might overflow.
Error:
netname.c: In function 'user2netname':
netname.c:51:28: error: '%s' directive writing up to 255 bytes into a
region of size between 239 and 249 [-Werror=format-overflow=]
51 | sprintf (netname, "%s.%d@%s", OPSYS, uid, dfltdom);
| ^~ ~~~~~~~
netname.c:51:3: note: 'sprintf' output between 8 and 273 bytes into a
destination of size 256
51 | sprintf (netname, "%s.%d@%s", OPSYS, uid, dfltdom);
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
cc1: all warnings being treated as errors
However the code does test prior the sprintf call that dfltdom plus
the required extra space for OPSYS, uid, and extra character will not
overflow and return 0 instead.
Reviewed-by: Carlos O'Donell <carlos@redhat.com> Tested-by: Carlos O'Donell <carlos@redhat.com> Signed-off-by: Nikhil R <nikhilr5@kpit.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Bruce Ashfield [Mon, 10 Feb 2025 00:21:41 +0000 (19:21 -0500)]
linux-yocto/5.15: update to v5.15.178
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:
c16c81c81336 Linux 5.15.178 6cfafcad46e9 drm/v3d: Assign job pointer to NULL before signaling the fence 8b74aa1e1c08 Input: xpad - add support for wooting two he (arm) c9d4d5785f2d Input: xpad - add unofficial Xbox 360 wireless receiver clone 1475c07bf30f Input: atkbd - map F23 key to support default copilot shortcut 66453ea6ed0a ALSA: usb-audio: Add delay quirk for USB Audio Device 20ce02f2f73a Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" 6068dcff7f19 USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() 091a023cf2ae wifi: iwlwifi: add a few rate index validity checks 81d4dd05c412 scsi: storvsc: Ratelimit warning logs to prevent VM denial of service 6ac5dfa57513 ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() 84adb88c8027 platform/chrome: cros_ec_typec: Check for EC driver 542532afe249 fs/ntfs3: Additional check in ntfs_file_release 00767fbd67af Bluetooth: RFCOMM: Fix not validating setsockopt user input 2c2dc87cdebe Bluetooth: SCO: Fix not validating setsockopt user input 92340e6c5122 vfio/platform: check the bounds of read/write syscalls bcf0d815e728 net: sched: fix ets qdisc OOB Indexing 4e3ded34f3f3 gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag 322948a57582 mptcp: don't always assume copied data in mptcp_cleanup_rbuf() 2c3524a308b2 regmap: detach regmap from dev on regmap_exit df560e90a4d6 ASoC: samsung: Add missing depends on I2C 72370a2bc2e6 irqchip/sunxi-nmi: Add missing SKIP_WAKE flag 46bdd737a16b scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request 318ebf851143 seccomp: Stub for !CONFIG_SECCOMP 42b4b670bd23 ASoC: samsung: Add missing selects for MFD_WM8994 0783cd485b4a ASoC: wm8994: Add depends on MFD core 003148680b79 Linux 5.15.177 448fe5a1a4b5 Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals 0bd4efe3226d xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals c3d052cae566 net: fix data-races around sk->sk_forward_alloc 198b89dd5a59 scsi: sg: Fix slab-use-after-free read in sg_release() 9a4d196e8a5e x86/xen: fix SLS mitigation in xen_hypercall_iret() 167cbd3e5268 nfsd: add list_head nf_gc to struct nfsd_file e43dd28405e6 ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() 6486915fa661 vsock/virtio: discard packets if the transport changes 8a07350fe070 blk-cgroup: Fix UAF in blkcg_unpin_online() e667d5d566a2 Revert "regmap: detach regmap from dev on regmap_exit" d8ebb991790f Revert "drm/amdgpu: rework resume handling for display (v2)" 7a07fb80ea88 iio: adc: rockchip_saradc: fix information leak in triggered buffer b5c2c988cb6a iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on 96ac1454f343 iio: imu: inv_icm42600: fix spi burst write not supported 39f320df3537 Revert "PCI: Use preserve_config in place of pci_flags" ac3dd2497e6e drm/i915/fb: Relax clear color alignment to 64 bytes 15b453db41d3 hrtimers: Handle CPU state correctly on hotplug 59472bf85a3c irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly 2d008d4961b0 gpiolib: cdev: Fix use after free in lineinfo_changed_notify 649b266606bc fs/proc: fix softlockup in __read_vmcore (part 2) 64e5fd96330d filemap: avoid truncating 64-bit offset to 32 bits 9e5fed46ccd2 vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] a4606b774de2 vsock: reset socket state when de-assigning the transport 048dbd2b5b85 vsock/virtio: cancel close work in the destructor 92f1b7930f13 net: ethernet: xgbe: re-add aneg to supported features in PHY quirks aba13043e628 x86/asm: Make serialize() always_inline 612269eb3f8f nvmet: propagate npwg topology 7df94f7f9e22 poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() 1c878c5527e1 ACPI: resource: acpi_dev_irq_override(): Check DMI match last a592ce58ca78 kheaders: Ignore silly-rename files 2d1a5a595bf2 fs: fix missing declaration of init_files 87e207b6aa93 hfs: Sanity check the root record 80aee0bc0dbe mac802154: check local interfaces before deleting sdata list c5f1bc1d2324 i2c: rcar: fix NACK handling when being a target 6c6e0961ccfd i2c: mux: demux-pinctrl: check initial mux selection, too 37c63955ca68 Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data" 2f176c0ec9f5 hwmon: (tmp513) Fix division of negative numbers 14e0a874488e drm/v3d: Ensure job pointer is set to NULL after job completion 83775c9a9a65 net/mlx5: Fix RDMA TX steering prio a04effa1b79f net/mlx5: Refactor mlx5_get_flow_namespace ef6bb594598b net/mlx5: Add priorities for counters in RDMA namespaces 3cc3575223c6 net: xilinx: axienet: Fix IRQ coalescing packet count overflow fdfe7ef525ad nfp: bpf: prevent integer overflow in nfp_bpf_event_output() 036f8d814a2c gtp: Destroy device along with udp socket's netns dismantle. ed8be92df48d gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp(). a111a7487f65 gtp: use exit_batch_rtnl() method 041325b73abc net: add exit_batch_rtnl() method 3450092cc2d1 pktgen: Avoid out-of-bounds access in get_imix_entries 0ab52a8ca6e1 bpf: Fix bpf_sk_select_reuseport() memory leak 9bb26176fba5 net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() 9f15cd4174d0 phy: usb: Fix clock imbalance for suspend/resume 795537eb2af1 phy: usb: Use slow clock for wake enabled suspend 88b01048f286 mptcp: fix TCP options overflow. 05ba00d97bb4 mptcp: drop port parameter of mptcp_pm_add_addr_signal f44e6d70c100 ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv 86f8046aa649 ocfs2: correct return value of ocfs2_local_free_info() 0552befaccd8 phy: usb: Toggle the PHY power during init d0178cb2ccea phy: usb: Add "wake on" functionality for newer Synopsis XHCI controllers b2cec0d8f676 of: address: Preserve the flags portion on 1:1 dma-ranges mapping 6a7832e332d9 of: address: Store number of bus flag cells rather than bool 1b868ff7950b of: address: Remove duplicated functions 19ec883a51bd of: address: Fix address translation when address-size is greater than 2 b3f6bed9bf61 of/address: Add support for 3 address cell bus bce3629a9e53 of: unittest: Add bus address range parsing tests 437b875e7389 arm64: dts: rockchip: add hevc power domain clock to rk3328 f587c1ac6895 block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() e43dfc4a9c15 iio: adc: ad7124: Disable all channels at probe time d83ccca9e17e iio: inkern: call iio_device_put() only on mapped devices 028a1ba8e3ba iio: adc: at91: call input_free_device() on allocated iio_dev 060214459b63 iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() c31009d2bd49 iio: gyro: fxas21002c: Fix missing data update in trigger handler aae967380068 iio: adc: ti-ads8688: fix information leak in triggered buffer a07f69808441 iio: imu: kmx61: fix information leak in triggered buffer cb488706cdec iio: light: vcnl4035: fix information leak in triggered buffer 006073761888 iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer 64a989aa7475 iio: pressure: zpa2326: fix information leak in triggered buffer 19fc1c83454c usb: gadget: f_fs: Remove WARN_ON in functionfs_bind d9d18e2011c1 usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints 7cdb2d0f1af9 usb: fix reference leak in usb_new_device() 162428a00a0c USB: core: Disable LPM only for non-suspended ports 8309c947b208 USB: usblp: return error when setting unsupported protocol d2de56cc45ee usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null 1c7818e2746e topology: Keep the cpumask unchanged when printing cpumap 85b8a1a3176d usb: dwc3: gadget: fix writing NYET threshold 7f626e8e148c USB: serial: cp210x: add Phoenix Contact UPS Device 2165ef034891 usb-storage: Add max sectors quirk for Nokia 208 2748a203e098 staging: iio: ad9832: Correct phase range check e299dcbfc039 staging: iio: ad9834: Correct phase range check 98645eac8ed4 USB: serial: option: add Neoway N723-EA support f072315c5d41 USB: serial: option: add MeiG Smart SRM815 203f38eb72f2 md/raid5: fix atomicity violation in raid5_cache_count 3b930badf88d scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity 1e5cc8d5b121 drm/amd/display: increase MAX_SURFACES to the value supported by hw dd3f23919b4d ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] 21db38809fb8 ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] 10c24df2e303 riscv: Fix sleeping in invalid context in die() 95793f9684e5 drm/amd/display: Add check for granularity in dml ceil/floor helpers 1dc5da6c4178 sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy 0a0966312ac3 sctp: sysctl: udp_port: avoid using current->nsproxy bd2a29394235 sctp: sysctl: auth_enable: avoid using current->nsproxy 0f78f0946674 sctp: sysctl: rto_min/max: avoid using current->nsproxy 86ddf8118123 sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy e52a55ec2d1f dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY 802666a40c71 dm thin: make get_first_thin use rcu-safe list first function 7cb3e77e9b4e afs: Fix the maximum cell name length 781c743e18bf ksmbd: fix a missing return value check bug e719611285cd drm/mediatek: Add support for 180-degree rotation in the display driver b1b2353d768f netfilter: conntrack: clamp maximum hashtable size to INT_MAX 2f2c1ce86708 netfilter: nf_tables: imbalance in flowtable binding 6d6ce5f75d0e tls: Fix tls_sw_sendmsg error handling 8fe5fcf25438 cxgb4: Avoid removal of uninserted tid 0cfe1297df07 bnxt_en: Fix possible memory leak when hwrm_req_replace fails a313d6e6d5f3 net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute 10923508eb77 tcp/dccp: allow a connection when sk_max_ack_backlog is zero bcd1557f1d38 tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog e67fff8fd12c net: 802: LLC+SNAP OID:PID lookup on start of skb data 8cc8bdfbe065 ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() 294b9826da0e ASoC: mediatek: disable buffer pre-allocation 1f94fe692b7e exfat: fix the infinite loop in __exfat_free_cluster() 28c21f0ac529 exfat: fix the infinite loop in exfat_readdir() 3995b25d000c dm array: fix cursor index when skipping across block boundaries c850ddd1e1d8 dm array: fix unreleased btree blocks on closing a faulty array cursor 738994872d77 dm array: fix releasing a faulty array block twice in dm_array_cursor_end 6029c4240529 jbd2: flush filesystem device before updating tail sequence d42ad3f161a5 ceph: give up on paths longer than PATH_MAX b5d500042eb3 usb: hcd-pci: remove the action of faking interrupt request 6f0605db50e2 clk: imx: Add check for kcalloc 5b837b9e1543 bpf: Fix the indention issue in grow_stack_state() 42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size() b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub 7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr() 81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ] c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail() 299ef3b5b00b of: module: add buffer overflow check in of_modalias() b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change ea091017ef62 ipv6: Fix data races around sk->sk_prot. ff8710da80ee ipv6: annotate some data-races around sk->sk_prot e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops. 8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock 7c82dac02886 block, loop: support partitions without scanning 45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded 1f24338cb789 jbd2: Drop the merge conflicted hunk e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 6224acfc1d56 tpm: Add flag to use default cancellation policy 1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops 1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13 24615a3b932a ata: ahci: fix enum constants for gcc-13 5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf 130f9da78406 tools/resolve_btfids: Build with host flags 00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang 17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building 7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated 37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy da5513f30187 libbpf: Fix build warning on ref_ctr_off 4c5a089621a8 perf python: Account for multiple words in CC 1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers 838f5d0701d8 fs: add mode_strip_sgid() helper d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack 1363bd7dbde3 ixgbevf: add disable link state e5601ae2bd24 ixgbe: add improvement for MDD response functionality caa57cd80575 ixgbe: add the ability for the PF to disable VF link state 16a77bfcc7df Check /dev/console using init_stat() 04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data 0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully 1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES 493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition 04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered 6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve 1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field 6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash a40d2daf2795 pnmtologo: use relocatable file name 3b40d5b41155 of: configfs: remove unused variable overlay_lock 6c085baf1838 tools: use basename to identify file in gen-mach-types 2fca0fd71981 lib/build_OID_registry: fix reproducibility issues 0f586f4ee8ad vt/conmakehash: improve reproducibility a75774679f28 OF: DT-Overlay configfs interface (v8) d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer() 856ec356cf91 ACPI: thermal: drop an always true check 7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC 41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o 44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs() 77aa9e489eaf bpf: Disallow unprivileged bpf by default ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups 4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal"" 5df6d1b00f95 jbd2: fix use-after-free of transaction_t race 2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function 07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction 4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal" 7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack f78574dee71e kasan: test: silence intentional read overflow warnings d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC 5e279d5647cc arm64: support page mapping percpu first chunk allocator e5bf16752dca vmalloc: choose a better start address in vm_area_register_early() 660b3d21b46f kasan: test: bypass __alloc_size checks 00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write 67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack 7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc() bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack() 51423ebb36ad lib/stackdepot: introduce __stack_depot_save() 85373e66d847 lib/stackdepot: remove unused function argument 5b6cc9b251f3 lib/stackdepot: include gfp.h c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case. b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic() 13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence 21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221 6199fd896645 aufs: tiny, headers after fs_context 8ddb40e31c29 aufs: fs_context 7/7, finally remount 69035f71c6fd aufs: fs_context 6/7, now mount bc841b970697 aufs: fs_context 5/7, parse all other mount options 435188053da2 aufs: fs_context 4/7, parse xino options 9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options 1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option a8488f603134 aufs: fs_context 1/7, skelton of the new shceme 8e32e0015564 aufs: pre fs_context, convert a static flag to a macro f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case 948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo() 77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117 2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129 7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone 66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl() 69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore ada8fe9543e5 aufs: 5.14-20210906 ---> 5.14-20211018 b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes" 81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation 97c963889222 sched/isolation: really align nohz_full with rcu_nocbs 871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards" ffad0783dd5b ARM: config: multi v7: Regenerate defconifg 5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols badaf96564fe ARM: config: multi v7: Clean up enabled by default options 34996040fc9b ARM: config: multi v7: Drop unavailable options 7f685244afb3 powerpc/mm: Switch obsolete dssall to .long 20301aeb1a64 riscv: fix build with binutils 2.38 9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error 720b61fc400b x86_64_defconfig: Fix warnings 02bf23d26bc4 arm64: defconfig: cleanup config options 05914e2c87e5 arm: defconfig: drop unused POWER_AVS option ffb532fa19b9 aufs5: fix build against v5.15.3+ a4b3abf4d96d qemux86: add configuration symbol to select values fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter 3d8762d900d9 clear_warn_once: bind a timer to written reset value 95faacac47e8 clear_warn_once: expand debugfs to include read support de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel. 0e4aacead9c1 perf: x86-32: explicitly include <errno.h> 9ad92c11468e perf: mips64: Convert __u64 to unsigned long long 09e7efe3e68a perf: fix bench numa compilation e79becc44fa6 perf: add SLANG_INC for slang.h b1033b588681 perf: add sgidefs.h to for mips builds cf9db484ac0b perf: change --root to --prefix for python install 7fd052c2c562 perf: add 'libperl not found' warning 27a437cdd469 perf: force include of <stdbool.h> 3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat a7e9293b506b FAT: Added FAT_NO_83NAME 6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option 538be0fdb124 aufs: adjust to v5.15 fs changes f45da75c8759 aufs5: core 047f57e07e01 aufs5: standalone 029fc15574c8 aufs5: mmap 610d0192ee94 aufs5: base d4e428d0ec5f aufs5: kbuild eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL 286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name 24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested) 22c73536d5d7 yaffs: include blkdev.h 506b7251bfb8 yaffs: fix misplaced variable declaration a0e26ff364dc yaffs2: v5.6 build fixups b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super 2e3c3aec8279 yaffs: repair yaffs_get_mtd_device d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API 70a6113ee2c7 yaffs2: fix memory leak in mount/umount 3378e4a9e404 yaffs: Avoid setting any ACL releated xattr ec2284edddef Yaffs:check oob size before auto selecting Yaffs1 c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY 608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020) 89e660ece42c initramfs: allow an optional wrapper script around initramfs generation b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally 3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119) d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation d202fb2caf33 defconfigs: drop obselete options 9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled e20d8cf019b4 linux-yocto: Handle /bin/awk issues b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion adb40f1e6a1a uvesafb: print error message when task timeout occurs f280a1ed0962 compiler.h: Undef before redefining __attribute_const__ 4352732f268c vmware: include jiffies.h 7954a677968d Resolve jiffies wrapping about arp 5f28a1035d95 nfs: Allow default io size to be configured. 0d7260ad7106 check console device file on fs when booting 900a12e37e0a mount_root: clarify error messages for when no rootfs found 7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location 6604fc1763b3 modpost: mask trivial warnings 0d294adb09cb kbuild: exclude meta directory from distclean processing a097cdd95a9e powerpc: serialize image targets 5db6ec39a0a3 arm: serialize build targets cbabca27905e crtsavres: fixups for 5.4+ 7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8 a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8 186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild d1ea862964ca powerpc: kexec fix for powerpc64 2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core 2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code ec57870b303a mips: Kconfig: add QEMUMIPS64 option 6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency 74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c 22e65b63d3b4 arm/Makefile: Fix systemtap b7f1ab59f19e vexpress: Pass LOADADDR to Makefile ce2800c73bf7 arm: ARM EABI socketcall 019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Bruce Ashfield [Mon, 10 Feb 2025 00:21:40 +0000 (19:21 -0500)]
linux-yocto/5.15: update to v5.15.176
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:
4735586da88e Linux 5.15.176 63eac98d6f08 mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() 5c4eb5401d7e dt-bindings: display: adi,adv7533: Drop single lane support 0f51034bb813 drm: adv7511: Drop dsi single lane support f9c3adb083d3 net/sctp: Prevent autoclose integer overflow in sctp_association_init() d809d1aabec8 sky2: Add device ID 11ab:4373 for Marvell 88E8075 9372e160d821 pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking c2f961c46ea0 RDMA/uverbs: Prevent integer overflow issue 9aeece68684c kcov: mark in_softirq_really() as __always_inline 362f86f3ee45 modpost: fix the missed iteration for the max bit in do_input() 3b5efbf000d5 modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host ef26e5bb560b usb: xhci: Avoid queuing redundant Stop Endpoint commands f4539c3cab44 ARC: build: Try to guess GCC variant of cross compiler 84142875b293 irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base faab60ed274d net: usb: qmi_wwan: add Telit FE910C04 compositions cc63b8c102c4 bpf: fix potential error return 2dedcab091f2 sound: usb: format: don't warn that raw DSD is unsupported 01b3661663c5 sound: usb: enable DSD output for ddHiFi TC44C 63f4b594a688 btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount 22d36ad92e57 drm/amdkfd: Correct the migration DMA map direction bd3eca303b3f wifi: mac80211: wake the queues in case of failure in resume efbdbf36c338 btrfs: sysfs: fix direct super block member reads 0efdc0606fc8 btrfs: sysfs: convert scnprintf and snprintf to sysfs_emit 526ff5b27f09 btrfs: fix use-after-free when COWing tree bock and tracing is enabled d4a7270b37d0 btrfs: rename and export __btrfs_cow_block() ad0677c37c14 ila: serialize calls to nf_register_net_hooks() de4f8d477c67 af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK 65c67049e9ed af_packet: fix vlan_get_tci() vs MSG_PEEK 0caa776f2829 net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() 579cfa595af1 net: restrict SO_REUSEPORT to inet sockets 143378075904 RDMA/rtrs: Ensure 'ib_sge list' is accessible 91a1adab5669 net: mv643xx_eth: fix an OF node reference leak 36c95bbd4eb1 eth: bcmsysport: fix call balance of priv->clk handling routines d27088892b40 ALSA: usb-audio: US16x08: Initialize array before use c8187a378380 net: llc: reset skb->transport_header 277f00b0c2dc netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext 215c687344d5 drm/i915/dg1: Fix power gate sequence. 769e36c2119a netrom: check buffer length before accessing it 9d3895967729 net: fix memory leak in tcp_conn_request() 4261fc54ca77 net: stmmac: restructure the error path of stmmac_probe_config_dt() f0da70367048 net: stmmac: don't create a MDIO bus if unnecessary 860279ff72fe net: stmmac: platform: provide devm_stmmac_probe_config_dt() a68ec6380f2f RDMA/hns: Fix missing flush CQE for DWQE 06e2d3ec7a7d RDMA/hns: Fix warning storm caused by invalid input in IO path 3146512f40bb RDMA/hns: Fix mapping error of zero-hop WQE buffer bc509159a223 RDMA/hns: Remove redundant 'bt_level' for hem_list_alloc_item() 5e7c02730cce RDMA/hns: Remove redundant 'attr_mask' in modify_qp_init_to_init() a03b9689e4e5 drm/bridge: adv7511_audio: Update Audio InfoFrame properly 33df6f747501 RDMA/bnxt_re: Fix the locking while accessing the QP table 802be99bc7bb RDMA/bnxt_re: Fix max_qp_wrs reported 6da018852c42 RDMA/bnxt_re: Fix reporting hw_ver in query_device faf879baed95 RDMA/bnxt_re: Add check for path mtu in modify_qp 2e4a9a22b7f9 RDMA/mlx5: Enforce same type port association for multiport RoCE 590bd0f9148f xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic 62756ca746e2 usb: xhci: Limit Stop Endpoint retries 28fcf6c7a1ef xhci: retry Stop Endpoint on buggy NEC controllers 8f4871abf04f thunderbolt: Add support for Intel Panther Lake-M/P 6cf75f685667 thunderbolt: Add support for Intel Lunar Lake c4c06c199410 thunderbolt: Add Intel Barlow Ridge PCI ID 6c03ec8a0791 thunderbolt: Add support for Intel Meteor Lake c5c059d6bb77 thunderbolt: Add support for Intel Raptor Lake 3bcdc9039a6e tracing: Have process_string() also allow arrays f70e4b9ec69d selinux: ignore unknown extended permissions 0a2d26bf27c9 x86/hyperv: Fix hv tsc page based sched_clock for hibernation 87bd909a7014 net: dsa: improve shutdown sequence 5ade4382de16 nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net 214d92f0a465 btrfs: avoid monopolizing a core when activating a swap file c3703d9340ca power: supply: gpio-charger: Fix set charge current limits f60172b44731 tracing: Prevent bad count for tracing_cpumask_write c5a28af78555 tracing: Constify string literal data member in struct trace_event_call 2107ab40629a ksmbd: fix racy issue from session lookup and expire 2461ffdc7725 lib: stackinit: hide never-taken branch from compiler 002668bfd416 drm/dp_mst: Verify request type in the corresponding down message reply 3bc0d0831777 arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs 082e68b9a714 arm64: mm: Rename asid2idx() to ctxid2asid() 1aea5c9470be ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write 6bd1bf0e8c42 ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read 70e7166612f4 drm/dp_mst: Fix MST sideband message body length check 24fec234d2ba bpf: Check validity of link->type in bpf_link_show_fdinfo() edcc68974580 MIPS: Probe toolchain support of -msym32 5728a1d6247d vmalloc: fix accounting with i915 6dea8e3de599 virtio-blk: don't keep queue frozen during system suspend a47235354ac4 scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error 0d591e92c076 scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time 7efc3fa902ce platform/x86: asus-nb-wmi: Ignore unknown event 0xCF b09527799946 regmap: Use correct format specifier for logging range errors 7574cf3c8bf1 ALSA: hda/conexant: fix Z60MR100 startup pop issue 3c654998a3e8 scsi: megaraid_sas: Fix for a potential deadlock ce697618e34f scsi: qla1280: Fix hw revision numbering for ISP1020/1040 08a78ff9bf29 watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04 325c0e27668d tracing/kprobe: Make trace_kprobe's module callback called after jump_label update 3d825a241e65 mtd: rawnand: fix double free in atmel_pmecc_create_user() 8d364597de9c dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset 7c99b3c60cac dmaengine: dw: Select only supported masters for ACPI devices 3e9968660c26 dmaengine: mv_xor: fix child node refcount handling in early exit e0c101361c1e phy: core: Fix that API devm_phy_destroy() fails to destroy the phy 6bf2aba838b2 phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider 3a22224a443b phy: core: Fix that API devm_phy_put() fails to release the phy 5d1a41420ed4 phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() 9d2916bb1276 phy: core: Fix an OF node refcount leakage in _of_phy_get() 4f8a50745358 mtd: rawnand: arasan: Fix missing de-registration of NAND 326d7fb3e4f1 mtd: rawnand: arasan: Fix double assertion of chip-select 4b13d0d186df mtd: diskonchip: Cast an operand to prevent potential overflow 804d55e92b7a nfsd: restore callback functionality for NFSv4.0 e2373eea347e bpf: Check negative offsets in __bpf_skb_min_len() 323bab15ff7c tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection 38150bb4e3be tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress() c3ab56e1b434 mm/vmstat: fix a W=1 clang compiler warning 53106510736e media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg c72057c4865c drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update dccf5138ad56 epoll: Add synchronous wakeup support for ep_poll_callback 888dd1909559 ceph: validate snapdirname option length when mounting 38a2a383a019 of: Fix refcount leakage for OF node returned by __of_get_dma_parent() a579b0b6a82f of: Fix error path in of_parse_phandle_with_args_map() 0227594be815 udmabuf: also check for F_SEAL_FUTURE_WRITE 912188316a8c nilfs2: prevent use of deleted inode a793e5c35722 of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() abc874634c16 NFS/pnfs: Fix a live lock between recalled layouts and layoutget 85d7635d54d7 tracing: Add "%s" check in test_event_printk() 6cacfb59a7cc tracing: Add missing helper functions in event pointer dereference check 3a41815771c4 tracing: Fix test_event_printk() to process entire print argument 0840d360a890 KVM: x86: Play nice with protected guests in complete_hypercall_exit() 042253c57be9 Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet 0bef13423bb4 btrfs: tree-checker: reject inline extent items with 0 ref count 6aa65cda937f zram: refuse to use zero sized block device as backing device 2d3cde3aeb73 sh: clk: Fix clk_enable() to return 0 on NULL clk 5049a45bc23b hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers de4fa408d68b hwmon: (tmp513) Fix Current Register value interpretation 447d1430aa6c hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers b382e808e342 hwmon: (tmp513) Use SI constants from units.h e9668ba824c1 hwmon: (tmp513) Simplify with dev_err_probe() 9a2cf6d4a616 hwmon: (tmp513) Don't use "proxy" headers e7c7b48a0fc5 drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() d4ca3bf078cb USB: serial: option: add Telit FE910C04 rmnet compositions adeae07da972 USB: serial: option: add MediaTek T7XX compositions cf4df6f3f539 USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready 6ccb85602c14 USB: serial: option: add MeiG Smart SLM770A 7e25a9031004 USB: serial: option: add TCL IK512 MBIM & ECM 68578224365a efivarfs: Fix error on non-existent file f2c15056b312 i2c: riic: Always round-up when calculating bus period 16e1c1156674 chelsio/chtls: prevent potential integer overflow on 32bit f4780fedeb65 mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk 9d120788418d net: mdiobus: fix an OF node reference leak c4f20ad100da netfilter: ipset: Fix for recursive locking warning 24b6b9d6b21b net: ethernet: bgmac-platform: fix an OF node reference leak f9bad9428723 net: hinic: Fix cleanup in create_rxqs/txqs() 48cc5df7757b ionic: use ee->offset when returning sprom data 87847938f570 ionic: Fix netdev notifier unregister on failure b3a6daaf7cfb netdevsim: prevent bad user input in nsim_dev_health_break_write() 6b80924af621 net/smc: check return value of sock_recvmsg when draining clc data a36364d8d4fa net/smc: check smcd_v2_ext_offset when receiving proposal msg f10635268a0a net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg 0b86e31b6bbb net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll 27d6adbb3ec4 erofs: fix incorrect symlink detection in fast symlink 7e5fc0da0b76 i2c: pnx: Fix timeout in wait functions cff037a22793 usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled 676cec3ad096 MIPS: Loongson64: DTS: Fix msi node for ls7a 848257f4f9ef PCI: Add ACS quirk for Broadcom BCM5760X NIC c3119c7bab90 PCI: vmd: Create domain symlink before pci_bus_add_devices() 82f635733337 ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP 6eb9609c8bf0 usb: cdns3: Add quirk flag to enable suspend residency a19c6a484417 ALSA: usb: Fix UBSAN warning in parse_audio_unit() 02052d22de91 PCI/AER: Disable AER service on suspend c1a1393f7844 PCI: Use preserve_config in place of pci_flags 33db36b3c53d net: sched: fix ordering of qlen adjustment b5d500042eb3 usb: hcd-pci: remove the action of faking interrupt request 6f0605db50e2 clk: imx: Add check for kcalloc 5b837b9e1543 bpf: Fix the indention issue in grow_stack_state() 42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size() b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub 7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr() 81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ] c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail() 299ef3b5b00b of: module: add buffer overflow check in of_modalias() b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change ea091017ef62 ipv6: Fix data races around sk->sk_prot. ff8710da80ee ipv6: annotate some data-races around sk->sk_prot e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops. 8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock 7c82dac02886 block, loop: support partitions without scanning 45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded 1f24338cb789 jbd2: Drop the merge conflicted hunk e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 6224acfc1d56 tpm: Add flag to use default cancellation policy 1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops 1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13 24615a3b932a ata: ahci: fix enum constants for gcc-13 5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf 130f9da78406 tools/resolve_btfids: Build with host flags 00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang 17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building 7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated 37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy da5513f30187 libbpf: Fix build warning on ref_ctr_off 4c5a089621a8 perf python: Account for multiple words in CC 1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers 838f5d0701d8 fs: add mode_strip_sgid() helper d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack 1363bd7dbde3 ixgbevf: add disable link state e5601ae2bd24 ixgbe: add improvement for MDD response functionality caa57cd80575 ixgbe: add the ability for the PF to disable VF link state 16a77bfcc7df Check /dev/console using init_stat() 04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data 0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully 1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES 493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition 04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered 6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve 1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field 6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash a40d2daf2795 pnmtologo: use relocatable file name 3b40d5b41155 of: configfs: remove unused variable overlay_lock 6c085baf1838 tools: use basename to identify file in gen-mach-types 2fca0fd71981 lib/build_OID_registry: fix reproducibility issues 0f586f4ee8ad vt/conmakehash: improve reproducibility a75774679f28 OF: DT-Overlay configfs interface (v8) d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer() 856ec356cf91 ACPI: thermal: drop an always true check 7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC 41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o 44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs() 77aa9e489eaf bpf: Disallow unprivileged bpf by default ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups 4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal"" 5df6d1b00f95 jbd2: fix use-after-free of transaction_t race 2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function 07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction 4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal" 7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack f78574dee71e kasan: test: silence intentional read overflow warnings d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC 5e279d5647cc arm64: support page mapping percpu first chunk allocator e5bf16752dca vmalloc: choose a better start address in vm_area_register_early() 660b3d21b46f kasan: test: bypass __alloc_size checks 00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write 67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack 7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc() bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack() 51423ebb36ad lib/stackdepot: introduce __stack_depot_save() 85373e66d847 lib/stackdepot: remove unused function argument 5b6cc9b251f3 lib/stackdepot: include gfp.h c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case. b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic() 13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence 21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221 6199fd896645 aufs: tiny, headers after fs_context 8ddb40e31c29 aufs: fs_context 7/7, finally remount 69035f71c6fd aufs: fs_context 6/7, now mount bc841b970697 aufs: fs_context 5/7, parse all other mount options 435188053da2 aufs: fs_context 4/7, parse xino options 9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options 1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option a8488f603134 aufs: fs_context 1/7, skelton of the new shceme 8e32e0015564 aufs: pre fs_context, convert a static flag to a macro f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case 948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo() 77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117 2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129 7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone 66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl() 69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore ada8fe9543e5 aufs: 5.14-20210906 ---> 5.14-20211018 b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes" 81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation 97c963889222 sched/isolation: really align nohz_full with rcu_nocbs 871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards" ffad0783dd5b ARM: config: multi v7: Regenerate defconifg 5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols badaf96564fe ARM: config: multi v7: Clean up enabled by default options 34996040fc9b ARM: config: multi v7: Drop unavailable options 7f685244afb3 powerpc/mm: Switch obsolete dssall to .long 20301aeb1a64 riscv: fix build with binutils 2.38 9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error 720b61fc400b x86_64_defconfig: Fix warnings 02bf23d26bc4 arm64: defconfig: cleanup config options 05914e2c87e5 arm: defconfig: drop unused POWER_AVS option ffb532fa19b9 aufs5: fix build against v5.15.3+ a4b3abf4d96d qemux86: add configuration symbol to select values fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter 3d8762d900d9 clear_warn_once: bind a timer to written reset value 95faacac47e8 clear_warn_once: expand debugfs to include read support de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel. 0e4aacead9c1 perf: x86-32: explicitly include <errno.h> 9ad92c11468e perf: mips64: Convert __u64 to unsigned long long 09e7efe3e68a perf: fix bench numa compilation e79becc44fa6 perf: add SLANG_INC for slang.h b1033b588681 perf: add sgidefs.h to for mips builds cf9db484ac0b perf: change --root to --prefix for python install 7fd052c2c562 perf: add 'libperl not found' warning 27a437cdd469 perf: force include of <stdbool.h> 3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat a7e9293b506b FAT: Added FAT_NO_83NAME 6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option 538be0fdb124 aufs: adjust to v5.15 fs changes f45da75c8759 aufs5: core 047f57e07e01 aufs5: standalone 029fc15574c8 aufs5: mmap 610d0192ee94 aufs5: base d4e428d0ec5f aufs5: kbuild eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL 286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name 24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested) 22c73536d5d7 yaffs: include blkdev.h 506b7251bfb8 yaffs: fix misplaced variable declaration a0e26ff364dc yaffs2: v5.6 build fixups b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super 2e3c3aec8279 yaffs: repair yaffs_get_mtd_device d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API 70a6113ee2c7 yaffs2: fix memory leak in mount/umount 3378e4a9e404 yaffs: Avoid setting any ACL releated xattr ec2284edddef Yaffs:check oob size before auto selecting Yaffs1 c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY 608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020) 89e660ece42c initramfs: allow an optional wrapper script around initramfs generation b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally 3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119) d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation d202fb2caf33 defconfigs: drop obselete options 9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled e20d8cf019b4 linux-yocto: Handle /bin/awk issues b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion adb40f1e6a1a uvesafb: print error message when task timeout occurs f280a1ed0962 compiler.h: Undef before redefining __attribute_const__ 4352732f268c vmware: include jiffies.h 7954a677968d Resolve jiffies wrapping about arp 5f28a1035d95 nfs: Allow default io size to be configured. 0d7260ad7106 check console device file on fs when booting 900a12e37e0a mount_root: clarify error messages for when no rootfs found 7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location 6604fc1763b3 modpost: mask trivial warnings 0d294adb09cb kbuild: exclude meta directory from distclean processing a097cdd95a9e powerpc: serialize image targets 5db6ec39a0a3 arm: serialize build targets cbabca27905e crtsavres: fixups for 5.4+ 7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8 a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8 186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild d1ea862964ca powerpc: kexec fix for powerpc64 2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core 2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code ec57870b303a mips: Kconfig: add QEMUMIPS64 option 6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency 74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c 22e65b63d3b4 arm/Makefile: Fix systemtap b7f1ab59f19e vexpress: Pass LOADADDR to Makefile ce2800c73bf7 arm: ARM EABI socketcall 019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Praveen Kumar [Mon, 3 Feb 2025 09:30:33 +0000 (09:30 +0000)]
go: Fix CVE-2024-45336
The HTTP client drops sensitive headers after following a cross-domain redirect.
For example, a request to a.com/ containing an Authorization header which is redirected to
b.com/ will not send that header to b.com. In the event that the client received a subsequent
same-domain redirect, however, the sensitive headers would be restored. For example, a chain
of redirects from a.com/, to b.com/1, and finally to b.com/2 would incorrectly send the
Authorization header to b.com/2.
549d831579 stdlib: Test using setenv with updated environ [BZ #32588] 8b5d4be762 Fix underallocation of abort_msg_s struct (CVE-2025-0395) 525e5f13de stdlib: Simplify buffer management in canonicalize 5eae275400 realpath: Bring back GNU extension on ENOENT and EACCES [BZ #28996] 8a82a76a42 realpath: Do not copy result on failure (BZ #28815) e369114462 misc: Add support for Linux uio.h RWF_NOAPPEND flag 3f1ab0ed66 nptl: Convert tst-setuid2 to test-driver 76adee6e0f support: Add xpthread_cond_signal wrapper c3beedeb70 elf: Support recursive use of dynamic TLS in interposed malloc f48d763ab8 elf: Avoid some free (NULL) calls in _dl_update_slotinfo 710057676d sysdeps/x86/Makefile: Split and sort tests a4207d4e83 x86: Only align destination to 1x VEC_SIZE in memset 4x loop 889f99c149 elf: Fix slow tls access after dlopen [BZ #19924] 543efedcb3 x86: Check the lower byte of EAX of CPUID leaf 2 [BZ #30643] 41a3e51233 x86_64: Add log1p with FMA 0d1c70aa4c x86_64: Add expm1 with FMA 516180d399 x86_64: Add log2 with FMA 30384b91ad x86_64: Sort fpu/multiarch/Makefile d626c31ce5 x86: Avoid integer truncation with large cache sizes (bug 32470) 7ea35e28b4 nptl: initialize cpu_id_start prior to rseq registration 47d70ca8d9 nptl: initialize rseq area prior to registration
Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>