]>
git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/log
Bruce Ashfield [Wed, 22 Jul 2026 16:54:07 +0000 (12:54 -0400)]
linux-yocto/6.18: drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker
To partially (or fully) address: https://bugzilla.yoctoproject.org/show_bug.cgi?id=16217
Integrating the following commit(s) to linux-yocto/6.18:
1/1 [
Author: Ryosuke Yasuoka
Email: ryasuoka@redhat.com
Subject: drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker
Date: Mon, 13 Jul 2026 22:01:00 +0900
A probe-time deadlock can occur between the dequeue worker and
drm_client_register(). During probe, drm_client_register() holds
clientlist_mutex and calls the fbdev hotplug callback, which triggers an
atomic commit that ends up sleeping in virtio_gpu_queue_ctrl_sgs()
waiting for virtqueue space. The dequeue worker that would free that
space calls virtio_gpu_cmd_get_display_info_cb(), which invokes
drm_kms_helper_hotplug_event() -> drm_client_dev_hotplug(), attempting
to acquire the same clientlist_mutex. Since wake_up() is only called
after the resp_cb loop, the probe thread is never woken and both threads
deadlock.
Fix this by removing the hotplug notification from
virtio_gpu_cmd_get_display_info_cb(). The display data (outputs[i].info)
is still updated synchronously in the callback.
For the init path, drm_client_register() already fires an initial
hotplug when the client is registered, which picks up the connector
state updated by display_info_cb.
For the runtime config_changed path, add a wait_event_timeout() in
config_changed_work_func() so that display_info_cb updates the connector
data before the hotplug notification is sent. Also replace
drm_helper_hpd_irq_event() with drm_kms_helper_hotplug_event() since
virtio-gpu never calls drm_kms_helper_poll_init() and thus
drm_helper_hpd_irq_event() always returns false without doing anything.
Fixes: 27655b9bb9f0 ("drm/client: Send hotplug event after registering a client")
Closes: https://syzkaller.appspot.com/bug?id=d6dd6f86d3aaf7eebe7406e45c1c6e549453f224
Closes: https://syzkaller.appspot.com/bug?id=908bd910da5dd79b88de4cf7baf376cc873a922e
Suggested-by: Dmitry Osipenko <dmitry.osipenko@collabora.com>
Signed-off-by: Ryosuke Yasuoka <ryasuoka@redhat.com>
Signed-off-by: Dmitry Osipenko <dmitry.osipenko@collabora.com>
Link: https://patch.msgid.link/20260713-virtiogpu_syzbot-v2-1-2958fa37d46d@redhat.com
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
]
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Bruce Ashfield [Wed, 22 Jul 2026 03:51:39 +0000 (23:51 -0400)]
linux-yocto-dev: enable BSP config audit reportingSigned-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Bruce Ashfield [Wed, 22 Jul 2026 03:51:38 +0000 (23:51 -0400)]
linux-yocto-dev: bump to v7.2Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Bruce Ashfield [Mon, 20 Jul 2026 15:58:38 +0000 (11:58 -0400)]
linux-yocto/6.18: update to v6.18.39
Updating linux-yocto/6.18 to the latest korg -stable release that comprises
the following commits:
f89c296854b75 Linux 6.18.39
06b1729436efc xfs: use rtrefcount btree cursor in xchk_xref_is_rt_cow_staging
457a93a233bd7 xfs: write the rg superblock when fixing it
e696ef088f557 xfs: fix off-by-one error when calling xchk_xref_has_rt_owner
6403ef9a81e6c xfs: don't zap bmbt forks if they are MAXLEVELS tall
1ea0868a477b7 xfs: fully check the parent handle when it points to the rootdir
c9662ffd62c4e xfs: clamp timestamp nanoseconds correctly
424be21ed8cd4 xfs: handle non-inode owners for rtrmap record checking
d399b026a6b34 xfs: set xfarray killable sort correctly
08b191ae64659 xfs: use the rt version of the cow staging checker
104584477883b xfs: grab rtrmap btree when checking rgsuper
d1c4c40599c37 xfs: don't wrap around quota ids in dqiterate
206c09b04dc54 xfs: resample the data fork mapping after cycling ILOCK
d98f22d2e11e0 xfs: fail recovery on a committed log item with no regions
dca861f2cc9e6 xfs: fix null pointer dereference in tracepoint
fdafa1e68dc75 smb: client: reject overlapping data areas in SMB2 responses
1991d49433e90 Revert "f2fs: remove non-uptodate folio from the page cache in move_data_block"
1c56c46519353 Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev
e697df336662b timekeeping: Register default clocksource before taking tk_core.lock
9e04055ab5fc0 usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks
75e1d2787005d sched/fair: Only update stats for allowed CPUs when looking for dst group
0b466cf1b96e1 fuse-uring: remove request-less entries from ent_w_req_queue to fix NULL deref
e1711479e9068 fuse-uring: make a fuse_req on SQE commit only findable after memcpy
39c8e925b207a fuse-uring: Avoid queue->stopped races and set/read that value under lock
23a356e0bd96c fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues
bb476ef8e1027 fuse-uring: end fuse_req on io-uring cancel task work
50f3e03db823c fuse-uring: fix moving cancelled entry to ent_in_userspace list
b156bb9966972 fuse-uring: fix data races on ring->ready
0483fffdeeb36 fuse-uring: fix EFAULT clobber in fuse_uring_commit
7366e6f4d2b4c fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req
096cb2e58a6db fuse: fix io-uring background queue dispatch on request completion
be353caffa864 fuse: re-lock request before returning from fuse_ref_folio()
e6620208bdd34 fuse: fix device node leak in cuse_process_init_reply()
6e2d84fdeac05 fuse: avoid 32-bit prune notification count wrap
69cfae58b9a32 fuse: back uncached readdir buffers with pages
423a78ff7928c RDMA/siw: bound Read Response placement to the RREAD length
ab45808c141a3 RDMA/core: Fix broadcast address falsely detected as local
5a45d0aa1fa50 RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
95de76f6ad474 Input: maplecontrol - set driver data before registering input device
9376c744bea2c Input: maplemouse - set driver data before registering input device
699e3abac02de Input: maple_keyb - set driver data before registering input device
d7f66fbab5d21 Input: mms114 - fix multi-touch slot corruption
1b4cb75f254fb Input: maplemouse - fix NULL pointer dereference in open()
37fbe63bccf21 Input: gscps2 - advance receive buffer write index
8301c33530534 Input: mms114 - reject an oversized device packet size
3e6f007b43e2f Input: touchwin - reset the packet index on every complete packet
05dee4007cf30 Input: ads7846 - don't use scratch for tx_buf when clearing register
75b12874b4172 Input: mms114 - fix touch indexing for MMS134S and MMS136
70019779325f2 Input: iforce - bound the device-reported force-feedback effect index
3b32303460155 Input: goodix - clamp the device-reported contact count
01e0317c256c5 Input: elan_i2c - prevent division by zero and arithmetic underflow
e849c6f51e687 Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
8db211aed8373 Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
11f275f01c46b Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure
bb5133a7d5f3f i2c: i801: fix hardware state machine corruption in error path
b2523f26979e0 i2c: imx-lpi2c: mark I2C adapter when hardware is powered down
369635fbcf7f3 i2c: stm32f7: truncate clock period instead of rounding it
b65667ec5e9a9 i2c: davinci: Unregister cpufreq notifier on probe failure
56945871123e2 i2c: mpc: Fix timeout calculations
b6d2af6fe9c1f i2c: core: fix adapter deregistration race
71b7da959031f i2c: core: fix adapter debugfs creation
0345994d64761 i2c: core: fix adapter probe deferral loop
3351c5e77749a i2c: core: fix NULL-deref on adapter registration failure
9ec02cc9a04e5 i2c: core: fix irq domain leak on adapter registration failure
59070040fd12e fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()
34696563461c9 dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning
f8e1dc70efe48 udmabuf: fix DMA direction mismatch in release_udmabuf()
0c93681aea0a1 KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier
4ad73ef0e7966 KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits
ab253cf6e1118 KVM: VMX: Handle bad values on proxied writes to LBR MSRs
eeb456eb35565 KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs
35f3ea7e49a37 KVM: SVM: Only disable x2AVIC WRMSR interception for MSRs that are accelerated
7949aa38e1094 KVM: SVM: Disable x2AVIC RDMSR interception for MSRs KVM actually supports
4b200e0c9c339 KVM: x86: Add dedicated API for getting mask of accelerated x2APIC MSRs
6bea2f8becdb2 KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU
2d710d4fcd2cd LoongArch: KVM: Add missing slots_lock for device register/unregister
7c73a269a880b KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB
b51a7439c166a selftests/landlock: Filter dealloc records in audit_count_records()
859fef2c3d40a landlock: Set audit_net.sk for socket access checks
e4427c19554b5 audit: fix removal of dangling executable rules
32ca4aed2a662 iommufd: Set upper bounds on cache invalidation entry_num and entry_len
67daea4c09351 iommufd: Avoid partial fault group delivery in iommufd_fault_fops_read()
5539da127d03c iommufd: Break the loop on failure in iommufd_fault_fops_read()
f2dbe1dba01e6 iommufd: Reject invalid read count in iommufd_fault_fops_read()
f549a749b6255 iommufd: Reject invalid read count in iommufd_veventq_fops_read()
64011399d8819 iommufd: Rewind header length in done if iommufd_veventq_fops_read() fails
f565297edf316 iommufd: Set veventq_depth upper bound
5c5f1b5184f7d iommufd: Fix data_len byte-count vs element-count mismatch
04a177f91160e iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read
50612ce318b1c iommu/amd: Don't split flush for amd_iommu_domain_flush_all()
bb354384f40bb iommu/vt-d: Avoid WARNING in sva unbind path
037ec8353711c crypto: loongson - Remove broken and unused loongson-rng
6bbe2000d9f9f selftests/mm: pagemap_ioctl: use the correct page size for transact_test()
5c942ad7df759 mm: do file ownership checks with the proper mount idmap
8dcaa0f87a88d mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access
785ebd42b8b50 selftests: mm: fix and speedup "droppable" test
279c2fa731122 mm: fix mmap errno value when MAP_DROPPABLE is not supported
4d730cab96e6b riscv: mm: Unconditionally sfence.vma for spurious fault
90405c8822c5d riscv: mm: Define DIRECT_MAP_PHYSMEM_END
1c8889e0db01f NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
33c0b96d7e167 exfat: bound uniname advance in exfat_find_dir_entry()
a82e170637e05 module: decompress: check return value of module_extend_max_pages()
b883733302508 rqspinlock: Fix order in raw_res_spin_(un)lock_irq to allow schedule
a937e92c1d005 NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
75ca99875aa4e audit: fix potential integer overflow in audit_log_n_hex()
2dad64a97e1df tracing: Prevent out-of-bounds read in glob matching
c8b7e113f7b61 perf/aux: Fix page UAF in map_range()
af6048e913052 i2c: core: fix hang on adapter registration failure
22cb337370e65 regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
6b01ed165d298 watchdog: apple: Add "apple,t8103-wdt" compatible
f4dd5621a6eef EDAC/i10nm: Don't fail probing if ADXL is missing
add1e4112e00b x86/mm: Fix freeing of PMD-sized vmemmap pages
808033d80d5c9 spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
18d6048b1b1b4 spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()
75422f5e50222 arm64: fpsimd: Fix type mismatch in sme_{save,load}_state()
93f000e89976e crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation
fda9cb9b7191c crypto: talitos/hash - remove useless wrapper
99cc3f5511d8b crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request
b960edc92c81b crypto: talitos/hash - drop workqueue mechanism for SEC1
042730207a991 crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue
40a2e90acdb1a crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor
a8decb89920a1 crypto: talitos - move code in current_desc_hdr() into a standalone function
aea8cfbd60da9 crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function
3fa1846f75edf crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function
664e7f16e74fc crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1
f52aa95e3cae1 crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header
7584c92f72447 crypto: qat - factor out AER reset helpers
6fb62b767f3e2 crypto: qat - validate RSA CRT component lengths
fabf364ef9db5 crypto: qat - skip restart for down devices
c3c5925791cff crypto: qat - protect service table iterations with service_lock
e310e8dc8ce72 crypto: qat - notify fatal error before AER reset preparation
45b65a21edbe0 crypto: qat - keep VFs enabled during reset
33cfc0ce28ac9 crypto: qat - handle sysfs-triggered reset callbacks
050bded706ee5 crypto: qat - centralize bus master enable
5337b5cd3608a crypto: drbg - Fix the fips_enabled priority boost
53d38b93cadc0 crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
23b8b188cb32e crypto: drbg - Fix returning success on failure in CTR_DRBG
441ea32cf2755 crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)
92567ed9306d5 crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)
7a361c74bb12f crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)
9e983d0a74a6a crypto: ccp - Do not initialize SNP for SEV ioctls
53b8fb85f332b crypto: loongson - Select CRYPTO_RNG
cc4e42b3ee9fc crypto: tegra - fix refcount leak in tegra_se_host1x_submit()
c4bd2f4c35b0e crypto: pcrypt - restore callback for non-parallel fallback
ee6a2a25665c6 crypto: hisi-trng - Remove crypto_rng interface
774ddddf5eb26 crypto: ecc - Fix carry overflow in vli multiplication
ac667f9f18c6b crypto: crypto4xx - Remove insecure and unused rng_alg
0016d3c21c6ab crypto: chacha20poly1305 - validate poly1305 template argument
d0b8cafd529b4 crypto: caam - use print_hex_dump_devel to guard key hex dumps again
6f7b8e0321f3a crypto: caam - use print_hex_dump_devel to guard key hex dumps
7465ed1524ace crypto: af_alg - Remove zero-copy support from skcipher and aead
b5699642640d6 isofs: bound Rock Ridge symlink components to the SL record
ce93228e2193a partitions: aix: bound the pp_count scan to the ppe array
7a64521802997 btrfs: do not trim a device which is not writeable
0912b98151eea btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC
6d7649c1231da nvmet-auth: validate reply message payload bounds against transfer length
56c021a086926 nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
7a69463e9ad23 nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks
13f2f5defb4d7 dm-ioctl: report an error if a device has no table
427c82497e269 block: partitions: fix of_node refcount leak in of_partition()
a8803c4f0ac3f nvme: target: rdma: fix ndev refcount leak on queue connect
d161d47aba31d crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A
c60932d6f8373 hwrng: jh7110 - fix refcount leak in starfive_trng_read()
04f4599a9efb9 udf: validate sparing table length as an entry count, not a byte count
e610fb113cdfa udf: validate VAT header length against the VAT inode size
335202ab25b01 udf: validate free block extents against the partition length
d944b8add3318 bpf: Prefer dirty packs for eBPF allocations
0229944ba7923 bpf: Prefer packs that won't trigger an IBPB flush on allocation
f1f36bf9bb117 bpf: Skip redundant IBPB in pack allocator
666fc2e6e4d0a bpf: Restrict JIT predictor flush to cBPF
8a4c8af9ae67e x86/bugs: Enable IBPB flush on BPF JIT allocation
8ff183ee4d8c4 bpf: Support for hardening against JIT spraying
bd818dcf4783e rust_binder: fix BINDER_GET_EXTENDED_ERROR
e5049526a7aac rust_binder: introduce TransactionInfo
be1567992417d x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled
b7b2d2ccdbc4d mm: shmem: fix potential livelock issue for shmem direct swapin
9818bcae3c0ca block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
e086c16962a1b usb: gadget: f_fs: Fix DMA fence leak
b45be66ed47d4 usb: typec: ucsi: cancel pending work on system suspend
f5c772b76bbd9 usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
b1dfdff51a865 usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode
8c00aec752ce1 usb: typec: ucsi: Invert DisplayPort role assignment
3e1b1ac47e816 usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
0bc177820bd38 usb: typec: tcpm: Fix VDM type for Enter Mode commands
bf6aa6c0ce0db usb: typec: class: drop PD lookup reference
1126f1110b86c usb: typec: anx7411: use devm_pm_runtime_enable()
347b59e9f9671 usbip: vudc: fix NULL deref in vep_dequeue()
6c7e8e2514374 usbip: tools: support SuperSpeedPlus devices
2d84c8376f7aa USB: usb-storage: ene_ub6250: restore media-ready check
1967a7f0cd5c0 USB: ulpi: fix memory leak on registration failure
1243f12079004 USB: serial: digi_acceleport: fix write buffer corruption
2b7dc482f859f USB: serial: digi_acceleport: fix hard lockup on disconnect
eab394781e932 USB: serial: digi_acceleport: fix broken rx after throttle
4b147eb6ae6e0 USB: serial: option: add Telit Cinterion
FE990D50 compositions
cf6ca0aefae03 USB: serial: keyspan_pda: fix information leak
8c29d9cfab1c3 usb: mtu3: unmap request DMA on queue failure
729b68a5bad71 USB: misc: uss720: unregister parport on probe failure
48394f94211cf usb: misc: usbio: bound bulk IN response length to the received transfer
964d572b6c009 USB: storage: include US_FL_NO_SAME in quirks mask
e0886775952e3 usb: sl811-hcd: disable controller wakeup on remove
766738ecf2b81 USB: legousbtower: fix use-after-free on disconnect race
6af28345cbf8b USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
b748f97aff339 USB: iowarrior: fix use-after-free on disconnect
2107a4fc8ff1c USB: ldusb: fix use-after-free on disconnect race
54c2b7356b4ae USB: idmouse: fix use-after-free on disconnect race
8a5eba992c862 usb: gadget: f_printer: take kref only for successful open
b52476a83d9e1 usb: gadget: udc: Fix use-after-free in gadget_match_driver
01feaf024f296 usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
6bc17a78a0567 usb: free iso schedules on failed submit
0bbab8882a319 usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()
4b0779207e36d USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
c00826e87bb75 usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
e22f044b0b20d usb: cdc_acm: Add quirk for Uniden BC125AT scanner
e24eb271061db net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
cd407de2ef5dc bpf: Validate BTF repeated field counts before expansion
d94ab0e91d3ff bpf: Restore sysctl new-value from 1 to 0
a9bb2d9c798cb bpf: Reject fragmented frames in devmap
c3d3d2212c296 xfs: fix memory leak in xfs_dqinode_metadir_create()
a62ef2d13d6e7 xfs: fix exchmaps reservation limit check
55e4d8413fb54 xfs: fix pointer arithmetic error on 32-bit systems
dd8d0665cdabf xfs: fix unreachable BIGTIME check in dquot flush validation
936618643591c xfs: release dquot buffer after dqflush failure
200794d0354cd xfs: use null daddr for unset first bad log block
1cd54e217c6e2 serial: 8250_mid: Disable DMA for selected platforms
973408ceab145 media: mtk-jpeg: cancel workqueue on release for supported platforms only
223463c488b05 nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
f3461b84a4865 hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
c63bc6308da71 HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads
4d0d51bc12d24 HID: lg-g15: cancel pending work on remove to fix a use-after-free
b363d964ca829 HID: appleir: fix UAF on pending key_up_timer in remove()
37daa8c96bd56 HID: multitouch: fix out-of-bounds bit access on mt_io_flags
3eca1a8165b5e HID: letsketch: fix UAF on inrange_timer at driver unbind
bbe1e55629bfa HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()
ca899a926c11a HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert
cb90a01e478c2 HID: pidff: Use correct effect type in effect update
416095e9a6037 HID: wacom: stop hardware after post-start probe failures
7ce2c7dd28ab8 HID: uhid: convert to hid_safe_input_report()
dae1d000ddfd5 HID: hid-goodix-spi: validate report size to prevent stack buffer overflow
abf07f5c3584f tools/mm/slabinfo: fix total_objects attribute name
e0eec7497bcc7 tools/mm/slabinfo: Fix trace disable logic inversion
2382971aaaef5 mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
18d90dc05d98b X.509: Fix validation of ASN.1 certificate header
28390912740a2 perf/arm-cmn: Fix DVM node events
be79d285bea70 s390: Revert support for DCACHE_WORD_ACCESS
2421a7b24f9c8 clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances
cd25e9819620a time/jiffies: Register jiffies clocksource before usage
7776f9226e99e posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
6ba6f6783be2f cpufreq: pcc: fix use-after-free and double free in _OSC evaluation
6e175c00c62dc cpufreq: Fix hotplug-suspend race during reboot
4bd0da48fbc1d sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
f77e55baeeb8c cpufreq: intel_pstate: Sync policy->cur during CPU offline
59626d0d29217 perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box()
b9d45d328fcda libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo()
92f41769e5fd1 firmware_loader: fix device reference leak in firmware_upload_register()
e904961332801 cpufreq: qcom-cpufreq-hw: Fix possible double free
a277489337c7d OPP: of: Fix potential memory leak in opp_parse_supplies()
685fc15a41088 writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
c6c484a7d5bff smb: client: mask server-provided mode to 07777 in modefromsid
157c67a657a7d smb: client: fix atime clamp check in read completion
86c5d470f5d42 smb: client: harden POSIX SID length parsing
3d89ae65ef78a smb: client: use unaligned reads in parse_posix_ctxt()
297243e365fc9 smb: client: Fix next buffer leak in receive_encrypted_standard()
d15d83125007f smb: client: fix double-free in SMB2_close() replay
14498ff5ce0f2 smb: client: fix double-free in SMB2_open() replay
3407240cde132 smb: client: fix double-free in SMB2_flush() replay
52af1975f0dfa smb: client: fix change notify replay double-free
276c8efbc49f9 smb: client: fix double-free in SMB2_ioctl() replay
f1add4acb656f smb: client: fix query_info() replay double-free
00b0fa4259414 smb: client: fix query directory replay double-free
2b4592cea2146 ksmbd: use opener credentials for ADS I/O
e72c15085b6d8 ksmbd: use opener credentials for delete-on-close
df501c0f320b5 ksmbd: add per-handle permission check to FILE_LINK_INFORMATION
2ca82bfff49c8 ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION
20ee516a62989 ksmbd: run set info with opener credentials
f56535db508ea ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY
db231af842868 ksmbd: require source read access for duplicate extents
5aa1cb01155f9 ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation
a1d5d31cad593 ksmbd: serialize QUERY_DIRECTORY requests per file
57f2042fd87d7 ksmbd: add a permission check for FSCTL_SET_ZERO_DATA
baae7b39673ec ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
a187883cc1dc7 smb/client: Fix error code in smb2_aead_req_alloc()
91b8a58c6ac15 smb: client: resolve SWN tcon from live registrations
661a019ac0413 coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
08fad5d5a26cc fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
6dd58c56ab864 fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()
764e6f76fdbd4 fs/ntfs3: fsync files by syncing parent inodes
38cbb1feebcf5 fs/ntfs3: rename ni_readpage_cmpr into ni_read_folio_cmpr
4718007870547 iommu/vt-d: Fix race condition during PASID entry replacement
73abbaf91aa33 Bluetooth: L2CAP: validate option length before reading conf opt value
d5616beb3355b Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
b84eeb7636d69 Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()
b9dd39cf1667e Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled
61701912c58a0 Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()
26168db1ce5a9 Bluetooth: fix UAF in bt_accept_dequeue()
2a68a77308920 Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()
a6b22dbd80926 Bluetooth: bnep: pin L2CAP connection during netdev registration
0039bdde36b23 Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
81a5971cbe18b netfilter: flowtable: fix offloaded ct timeout never being extended
6fe8d3cecd20b netfilter: ebtables: terminate table name before find_table_lock()
13a5f532e3a4f netfilter: ebtables: module names must be null-terminated
9f74d28e903fa netfilter: ebtables: zero chainstack array
fc5bfe63bacf8 netfilter: handle unreadable frags
a8f03a3793289 netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
69c0e6246575b mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup
b415c00bf23df mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host
006467ab93269 mm: shrinker: fix NULL pointer dereference in debugfs
6465ff3ce6513 mm: shrinker: fix shrinker_info teardown race with expansion
560e21e8ccff8 mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
b5f41d5bf08e7 mfd: cros_ec: Delay dev_set_drvdata() until probe success
bbae351c0f32f net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
2ca18df1c2611 ipv4: igmp: remove multicast group from hash table on device destruction
a33f37f8d079d netpoll: fix a use-after-free on shutdown path
f090acf881a26 io_uring/rw: preserve partial result for iopoll
1636d85dc139b io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
722869fcff598 io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE
4508366ab7dd0 gpio: sch: use raw_spinlock_t in the irq startup path
4750909a40da9 gpio: eic-sprd: use raw_spinlock_t in the irq startup path
f71e8d9875069 NTB: epf: Avoid calling pci_irq_vector() from hardirq context
cf28fc1658463 fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
c00164c9e7fa6 debugobjects: Plug race against a concurrent OOM disable
cbb684ef39e9f coresight: etb10: restore atomic_t for shared reading state
b346efa825b5e Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
d3b739db5dc6f Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref
fe997a84a385f audit: Fix data races of skb_queue_len() readers on audit_queue
e8417353cbd07 net: af_key: initialize alg_key_len for IPComp states
94083db751930 ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL
ef6feb77e2d91 crypto: krb5 - filter out async aead implementations at alloc
84a00be9b736a crypto: amlogic - avoid double cleanup in meson_crypto_probe()
6f91621fc4502 staging: rtl8723bs: fix OOB write in HT_caps_handler()
a6105ea8ca6eb staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
c38d16b1ffac3 staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()
69f174a0673b6 staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
04f612dc03427 staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
64ec4192d9c10 staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
b9c4bf133c3c4 staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
b5ddc7257bee7 staging: media: ipu7: fix double-free and use-after-free in error paths
1ca4f310c6b1f staging: media: atomisp: reduce load_primary_binaries() stack usage
b4ba13dafa13c media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe
e3ceafa6d8ee6 staging: vme_user: fix location monitor leak in tsi148 bridge
a921486313975 staging: vme_user: fix location monitor leak in fake bridge
ceb875a375ded smb: client: restrict implied bcc[0] exemption to responses without data area
e99f2df433c63 staging: vme_user: bound slave read/write to the kern_buf size
2de42e2681747 tipc: fix out-of-bounds read in broadcast Gap ACK blocks
0beccbcf50de1 6lowpan: fix NHC entry use-after-free on error path
c40090f8d19b4 usb: misc: usbio: fix disconnect UAF in client teardown
c4e232bd07fe2 usb: dwc3: run gadget disconnect from sleepable suspend context
2a52d55c86a42 USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
285e17c44e387 hwrng: virtio: clamp device-reported used.len at copy_data()
65e93ec592f5b virtio-mmio: fix device release warning on module unload
075bc3c779e1e virtio_pci: fix vq info pointer lookup via wrong index
81d54c766337b netfilter: ipset: fix race between dump and ip_set_list resize
9c8f31eaae614 mm/damon/ops-common: handle extreme intervals in damon_hot_score()
657646c08c94e tcp: restore RCU grace period in tcp_ao_destroy_sock
b775246212504 PCI/IOV: Skip VF Resizable BAR restore on read error
1115680bca1d7 PCI: qcom: Initialize DWC MSI lock for firmware-managed ECAM hosts
6e6a529d6f779 PCI: mediatek: Fix IRQ domain leak when port fails to enable
69416a5308675 PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
1d2e66a4bc0dd PCI: host-common: Request bus reassignment when not probe-only
9c698af5c2a12 PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining
09c43b7b7d29c PCI: altera: Fix resource leaks on probe failure
5e42a981887d2 PCI: altera: Do not dispose parent IRQ mapping
d666c5aec822d PCI: loongson: Override PCIe bridge supported speeds for Loongson-3C6000 series
e5406c8fb71cd usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
99d00a9e35e31 xhci: sideband: fix ring sg table pages leak
f90586129cf9e usb: xhci: Fix sleep in atomic context in xhci_free_streams()
91b27f8172cdb rust_binder: clear freeze listener on node removal
281335996ab21 rust_binder: synchronize Rust Binder stats with freeze commands
08e21d86d2722 rust_binder: reject context manager self-transaction
89b8cc948dce6 rust_binder: use a u64 stride when cleaning up the offsets array
328ccf32acb87 binder: fix UAF in binder_free_transaction()
ea02df466df60 binder: fix UAF in binder_thread_release()
17a2d3f903455 Bluetooth: btusb: fix wakeup source leak on probe failure
a7e941a395711 Bluetooth: btusb: fix use-after-free on marvell probe failure
8db0ce3de7836 Bluetooth: btusb: fix use-after-free on registration failure
79f9e221dddec Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB
a53109ffb6b51 vfio: Remove device debugfs before releasing devres
7f2d6b31089e4 vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
ba96666d991e6 vfio/pci: Fix racy bitfields and tighten struct layout
52adb2dff7ce3 vfio/pci: Release the VGA arbiter client on register_device() failure
f6c67cf0051f9 vfio/pci: Latch disable_idle_d3 per device
a385d3435a7af vfio/pci: Use a private flag to prevent power state change with VFs
afc90150551dd ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes
54c448e4f26a7 ALSA: usb-audio: Update Babyface Pro control caches only after successful writes
f3e8a6cca15b8 ALSA: usb-audio: Roll back quirk control caches on write errors
3061b6c114458 ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks
bfd28b07541e5 ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
a263eb12cbe2e ALSA: usb-audio: avoid kobject path lookup in DualSense match
16f14f55141d4 ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission
651ba82fe2a14 ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
71b87108ad93d ALSA: ice1712: check snd_ctl_new1() return value
04dd210180575 ALSA: hda/realtek: Fix noisy mic for Clevo V6xxAW
1933e6ee136b1 ALSA: hda/hdmi: Use 'AC_PINSENSE_ELDV' to detect pinsense for Loongson
4dd2552e559bd ALSA: hda/hdmi: Add force-connect quirk for HP EliteDesk 800 G5 Mini
ce0a903d0591e ALSA: hda/cs35l41: Fix firmware load work teardown
5e74e5e8cb7cc ALSA: gus: check snd_ctl_new1() return value
8e48a29813df8 ALSA: firewire: isight: bound the sample count to the packet payload
db25755e7629d ALSA: FCP: Add Focusrite ISA C8X support
9e53e99b6fa3c ALSA: es1938: check snd_ctl_new1() return value
b27a75d42044d ALSA: compress: Fix task creation error unwind
af2b009b773bc ALSA: cmipci: check snd_ctl_new1() return value
a5fd3122283bf ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
fd786466889e4 ALSA: aoa: check snd_ctl_new1() return value
f6538a318947b ALSA: ymfpci: check snd_ctl_new1() return value
5da9742de22db ALSA: virtio: Validate control metadata from the device
df0fe53a7104b ALSA: virtio: Add missing 384 kHz PCM rate mapping
c071df05bcda0 ALSA: usx2y: us144mkii: fix work UAF on disconnect
a4f8491da9563 iio: temperature: tmp006: use devm_iio_trigger_register
62a0d75bedd4b iio: temperature: ltc2983: Fix reinit_completion() called after conversion start
e16258913be6a iio: temperature: ltc2983: Fix n_wires default bypassing rotation check
b50344ab202f3 iio: temperature: Build mlx90635 with CONFIG_MLX90635
7d4d60f7c0541 iio: resolver: ad2s1210: notify trigger and clear state on fault read error
c6ca87c7bbb3f iio: proximity: vl53l0x: notify trigger and clear IRQ on error paths
b3f1af4ba8e9c iio: pressure: mpl115: fix runtime PM leak on read error
e2d5b9673bf71 iio: pressure: bmp280: zero-init bmp580 trigger handler buffer
f829d6c32f31b iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call
0975e013179d3 iio: light: veml6030: fix channel type when pushing events
ef6c2a521454f iio: light: tsl2591: return actual error from probe IRQ failure
9d421c2827ea1 iio: light: opt3001: fix missing state reset on timeout
0c655d067ac69 iio: light: gp2ap002: fix runtime PM leak on read error
a60bf629a760d iio: light: al3320a: read both ALS ADC registers again
a1dafc918d793 iio: light: al3320a: add missing REGMAP_I2C to Kconfig
a00d471cf3580 iio: light: al3010: read both ALS ADC registers again
cd278561640c7 iio: light: al3010: fix incorrect scale for the highest gain range
9fb4ff07d97e3 iio: light: al3010: add missing REGMAP_I2C to Kconfig
6afb69bb969ed iio: light: al3000a: add missing REGMAP_I2C to Kconfig
482b24660ec3b iio: imu: st_lsm6dsx: deselect shub page before reading whoami
76e12a71ac053 iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
34656a59322e5 iio: imu: inv_icm42600: fix timestamp clock period by using lower value
0522819228284 iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
bdafd53ae671e iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
001527e2382e3 iio: gyro: bmg160: wait full startup time after mode change at probe
7bbf02b63961f iio: gyro: bmg160: bail out when bandwidth/filter is not in table
9edefd4c56bee iio: event: Fix event FIFO reset race
2358da87315d1 iio: dac: ad3552r-hs: fix uninitialized data ni ad3552r_hs_write_data_source()
e166a8cfb28a3 iio: core: fix uninitialized data in debugfs
b947bde73461f iio: common: st_sensors: honour channel endianness in read_axis_data
82accdd574043 iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
c28835b8618ec iio: backend: fix uninitialized data in debugfs
0f30e68dd6c1f iio: adc: ti-ads124s08: Return reset GPIO lookup errors
ffb2195921c3d iio: adc: ti-ads1119: fix PM reference leak in buffer preenable
bbfebae473ac2 iio: adc: spear: Initialize completion before requesting IRQ
9e2e8b8cdfd37 iio: adc: lpc32xx: Initialize completion before requesting IRQ
c313bb7c38855 iio: adc: ad_sigma_delta: fix CS held asserted and state leaks
3394e0b332842 iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices
46e93fcbe7c2c iio: adc: ad7779: add missing 'select IIO_TRIGGERED_BUFFER' to Kconfig
24a9514b606e7 iio: adc: ad7768-1: Select GPIOLIB
e6ade81631d76 iio: adc: ad7380: select REGMAP
6293211d14260 iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
3e766526827ac iio: accel: bmc150: clamp the device-reported FIFO frame count
7515a6d4a9e9e usb: gadget: function: rndis: add length check for header
e01e7814b4223 usb: gadget: function: rndis: add length check to response query
9d1dc507b99ce fscrypt: Replace mk_users keyring with simple list
85f8b440a09ba fscrypt: Fix key setup in edge case with multiple data unit sizes
20133754d46fe rust: kasan: KASAN+RUST requires clang
a2d5d3ee7b6e3 perf/core: Detach event groups during remove_on_exec
94396fd93226a futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock""
1cc8f512cd905 rust: Kbuild: set frame-pointer llvm module flag for CONFIG_FRAME_POINTER
70fe1ac8647b0 rust: doctest: fix incorrect pattern in replacement
e7636f26f7707 rust: block: fix GenDisk cleanup paths
c1dd0b1071004 rust: cpufreq: clean new `clippy::map_or_identity` lint for Rust 1.98.0
30d5d4eef35a9 LoongArch: Add PIO for early access before ACPI PCI root register
86df6499dfd23 platform/x86: intel-hid: Protect ACPI notify handler against recursion
452945662fd8e ACPI: NFIT: core: Fix possible NULL pointer dereference
f29dc6132d496 ACPI: CPPC: Suppress UBSAN warning caused by field misuse
ff9c4c6428883 KVM: x86: Unconditionally recompute CR8 intercept on PPR update
3dcfb04dd43b1 KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode
0d0187a46b16e KVM: x86: Move update_cr8_intercept() to lapic.c
9baa2833e6bc8 perf trace beauty fcntl: Fix build with older kernel headers
47e4c6e06e78e slab: recognize @GFP parameter as optional in kernel-doc
1776f29327a13 default_gfp(): avoid using the "newfangled" __VA_OPT__ trick
50c26b461b8e7 add default_gfp() helper macro and use it in the new *alloc_obj() helpers
2dca62902eb35 slab: Introduce kmalloc_flex() and family
1c2672781b1b3 mm/khugepaged: write all dirty file folios when collapsing
2539f67b75461 nfsd: change nfs4_client_to_reclaim() to allocate data
05e48af3bf58d nfsd: move name lookup out of nfsd4_list_rec_dir()
c4b70c1512b8f net/sched: dualpi2: fix GSO backlog accounting
076b1aa65f77a fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
406c28af75123 f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
3f42fbd3c891d f2fs: detect more inconsistent cases in sanity_check_node_footer()
ed87e57558dc5 f2fs: optimize trace_f2fs_write_checkpoint with enums
8dbc4c5686820 f2fs: introduce f2fs_schedule_timeout()
599d7d82eeecc f2fs: use memalloc_retry_wait() as much as possible
ec9f79c8d5b28 f2fs: fix listxattr handling of corrupted xattr entries
89479a27fa4e1 f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()
998536c96b6ad f2fs: fix potential deadlock in f2fs_balance_fs()
4ce2d52f680c1 f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
a499f77c06050 f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
5a4d3968cf820 f2fs: remove non-uptodate folio from the page cache in move_data_block
9c86a1f930bb2 device property: initialize the remaining fields of fwnode_handle in fwnode_init()
60d696a037eee userfaultfd: gate must_wait writability check on pte_present()
3436a7dd067c5 rust: str: clean unused import for Rust >= 1.98
3603500c868a1 rust: str: use the "kernel vertical" imports style
8dee7c278f1c2 nfsd: release layout stid on setlease failure
6f88ca186a984 nfsd: update mtime/ctime on COPY in presence of delegated attributes
7c702bb4f8d83 nfsd: update mtime/ctime on CLONE in presense of delegated attributes
501543207378f bpf, arm64: Reject out-of-range B.cond targets
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Bruce Ashfield [Mon, 20 Jul 2026 15:58:37 +0000 (11:58 -0400)]
linux-yocto/6.18: update to v6.18.38
Updating linux-yocto/6.18 to the latest korg -stable release that comprises
the following commits:
e46dc0adfe397 Linux 6.18.38
92c63a5ef3c7a apparmor: advertise the tcp fast open fix is applied
e77fbefd1269b net/tcp-ao: fix use-after-free of key in del_async path
3d205fe80f218 serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails
7627ff8c4f991 ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
62c26720121bf NFS: Prevent resource leak in nfs_alloc_server()
6919eb549e8f3 NFSv4: clear exception state on successful mkdir retry
012d37a568bfb NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
d8c90c7cc0612 NFSv4/flexfiles: reject zero filehandle version count
4367afc119c51 nfsd: reset write verifier on deferred writeback errors
017a6150106b0 nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race
0f28337f54cfb nfsd: check get_user() return when reading princhashlen
dba7da4835de7 nfsd: fix inverted cp_ttl check in async copy reaper
136b416593f13 nfsd: fix posix_acl leak on SETACL decode failure
c8a24effd96d4 NFSD: Fix SECINFO_NO_NAME decode error cleanup
6a946038f2a5a i2c: core: fix adapter registration race
fc6aa9bdbae60 fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
4d418cf8daf57 fbdev: modedb: fix a possible UAF in fb_find_mode()
eea16b6f805c0 fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var
7643e5622994f riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
3b33dbb43e21a riscv: mm: Extract helper mark_new_valid_map()
2205275be9be9 power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()
720949ed666f3 KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
e36095d8d922b KVM: x86: hyper-v: Bound the bank index when querying sparse banks
f9b57a0015c24 MIPS: smp: report dying CPU to RCU in stop_this_cpu()
6dbe9443d9f5f 9p: avoid putting oldfid in p9_client_walk() error path
4cd57ebee3950 ocfs2: reject oversized group bitmap descriptors
104d100212396 rpmsg: char: Fix use-after-free on probe error path
369496d885b4c fpga: region: fix use-after-free in child_regions_with_firmware()
b3a3831b2eb88 irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove
200e7637f4d6a pNFS: Fix use-after-free in pnfs_update_layout()
90e254f18b8c2 LoongArch: Report dying CPU to RCU in stop_this_cpu()
e18769616fd5a tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
5e5b7f2ef8549 blk-cgroup: fix UAF in __blkcg_rstat_flush()
5a84398101bf9 hdlc_ppp: sync per-proto timers before freeing hdlc state
e91df6d273445 pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
b85ef03f726b1 gfs2: fix use-after-free in gfs2_qd_dealloc
8d8507a457667 crypto: nx - fix nx_crypto_ctx_exit argument
5da9b1a87ec7c KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()
18587f9831612 KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level
adfacfbaeae2c exfat: fix potential use-after-free in exfat_find_dir_entry()
6e61fc2e06e44 MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
65bd0c0afb0e1 bpf: use kvfree() for replaced sysctl write buffer
3804e6de30ae7 block: Avoid mounting the bdev pseudo-filesystem in userspace
db2c5b9fb9087 f2fs: keep atomic write retry from zeroing original data
20190e4980579 f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node()
ff83de56882cb f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
888d94cc9afbf f2fs: fix to round down start offset of fallocate for pin file
77f216ff9ce5c f2fs: validate compress cache inode only when enabled
8aad54746c251 f2fs: validate orphan inode entry count
1e48fefac682c f2fs: pass correct iostat type for single node writes
1de92789ce31e wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers
b0b07e04f0c72 wifi: iwlwifi: mld: fix race condition in PTP removal
df626f284cb90 wifi: iwlwifi: mvm: fix race condition in PTP removal
200d58c851b8f wifi: rtw88: usb: fix memory leaks on USB write failures
73d427d271f7a wifi: rtw88: increase TX report timeout to fix race condition
0aeb4d3ff6ced wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
40aa3c2b0cb8e wifi: ath11k: fix warning when unbinding
a7cdc384c9c57 wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
7e25b5e22c1f4 wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
ec1c9e8962555 userfaultfd: ensure mremap_userfaultfd_fail() releases mmap_changing
7216ce8cb12fe keys: Pin request_key_auth payload in instantiate paths
b11c1fa326676 KEYS: fix overflow in keyctl_pkey_params_get_2()
49d893b9cbcfc gcov: use atomic counter updates to fix concurrent access crashes
2b7ec72786094 err.h: use __always_inline on all error pointer helpers
1fcca1260c6e7 KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
97e1044e79c5d block: invalidate cached plug timestamp after task switch
99e6c712cc300 kernel/fork: clear PF_BLOCK_TS in copy_process()
0d35f9f194a85 fbdev: fix use-after-free in store_modes()
81371dbd23601 NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR
c3ca2631073b2 apparmor: fix use-after-free in rawdata dedup loop
4a69b83045d31 apparmor: mediate the implicit connect of TCP fast open sendmsg
1697957eb0971 net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
1acdd14c0990d net: skmsg: preserve sg.copy across SG transforms
bd968bdd568be mac802154: llsec: add skb_cow_data() before in-place crypto
0cfa78c050662 af_unix: Set gc_in_progress to true in unix_gc().
3c499851753a2 wifi: mt76: add wcid publish check in mt76_sta_add
5e658b9245a52 ntfs3: reject direct userspace writes to reserved $LX* xattrs
77798d7be6ef7 ipv4: account for fraggap on the paged allocation path
6374fb9edf72c ipv6: account for fraggap on the paged allocation path
565ab66005b14 batman-adv: tvlv: avoid race of cifsnotfound handler state
4cc9f7711bb89 batman-adv: tvlv: enforce 2-byte alignment
04e1a6557fbf8 batman-adv: dat: prevent false sharing between VLANs
3f82fc92cf523 batman-adv: tt: track roam count per VID
3470d583fc652 batman-adv: tt: don't merge change entries with different VIDs
af5a069805f67 batman-adv: tp_meter: handle overlapping packets
d511c72a83dd5 batman-adv: tp_meter: prevent parallel modifications of last_recv
1dafdd0794be1 batman-adv: tp_meter: annotate last_recv_time access with READ/WRITE_ONCE
2233787658db8 batman-adv: tp_meter: restrict number of unacked list entries
3d4548c96d6f2 batman-adv: v: prevent OGM aggregation on disabled hardif
44ae137a2acef batman-adv: frag: avoid underflow of TTL
116e94025f0f4 batman-adv: frag: ensure fragment is writable before modifying TTL
0473ae882624a batman-adv: fix (m|b)cast csum after decrementing TTL
49bf27fcd7ee4 batman-adv: ensure bcast is writable before modifying TTL
646b68639c06b batman-adv: gw: don't deselect gateway with active hardif
95a061f587b76 batman-adv: tp_meter: initialize last_recv_time during init
75612c100a9e2 batman-adv: prevent ELP transmission interval underflow
43733e5b525fb batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
23d085bd63086 batman-adv: tp_meter: add only finished tp_vars to lists
b8bf8400e50cb batman-adv: tp_meter: handle seqno wrap-around for fast recovery detection
1db02f3e315da batman-adv: tp_meter: fix fast recovery precondition
7d2a44bc6bbe3 batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
8e77fe0414f5c batman-adv: tp_meter: avoid window underflow
7cb88d91d5f9f batman-adv: tp_meter: initialize dec_cwnd explicitly
696c4cae872cc batman-adv: tp_meter: initialize dup_acks explicitly
1c5a1268418e8 batman-adv: tp_meter: keep unacked list in ascending ordered
e055e74b80eb8 lockd: fix TEST handling when not all permissions are available.
671ec2eabb874 Revert "PCI: qcom: Advertise Hotplug Slot Capability with no Command Completion support"
d844702198395 selinux: fix overlayfs mmap() and mprotect() access checks
5dfcb15974e7d lsm: add backing_file LSM hooks
5e470998a23e4 KVM: x86: Fix shadow paging use-after-free due to unexpected role
0c503cf3dde2e Linux 6.18.37
71003a32bef54 mm: do not copy page tables unnecessarily for VM_UFFD_WP
2abfd3ffbd945 virtiofs: fix UAF on submount umount
f965cf22dda7f media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
7cad3ceaf679c ksmbd: reject non-VALID session in compound request branch
6c25bf4e44a2b drivers/base/memory: set mem->altmap after successful device registration
50b72074c5e8d serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is zero
7cc3dd79777f6 vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write
b8ebf008696de crypto: qat - remove unused character device and IOCTLs
d08d82d83ed45 iio: adc: ti-ads1298: add bounds check to pga_settings index
0a89002737ee3 iio: light: veml6075: add bounds check to veml6075_it_ms index
76db054931846 net: net_failover: Fix the deadlock in slave register
c5b3871b567c2 net: export netif_open for self_test usage
cc1494fd6c65d testing/selftests/mm: add soft-dirty merge self-test
f563ce913a831 mm: propagate VM_SOFTDIRTY on merge
b836839c1fd94 mm: set the VM_MAYBE_GUARD flag on guard region install
3d6cb2ed06f7f mm: introduce copy-on-fork VMAs and make VM_MAYBE_GUARD one
05cdec24a8589 mm: implement sticky VMA flags
a093c80a1f139 mm: update vma_modify_flags() to handle residual flags, document
bdeadba743375 mm: add atomic VMA flags and set VM_MAYBE_GUARD as such
efce8a486bffc mm: introduce VM_MAYBE_GUARD and make visible in /proc/$pid/smaps
0de7db2eb27e8 sctp: disable BH before calling udp_tunnel_xmit_skb()
eee6be6ab6375 firmware: samsung: acpm: Fix cross-thread RX length corruption
02ac3ba41628a Drivers: hv: vmbus: Improve the logic of reserving fb_mmio on Gen2 VMs
072bbd2846d1b hv: utils: handle and propagate errors in kvp_register
bde74af8d4466 regulator: core: fix locking in regulator_resolve_supply() error path
9477cbc5107a8 rose: don't free fd-owned sockets when reaping in the heartbeat
395b6573b389f rose: clear neighbour pointer in rose_kill_by_device()
9e8fc2195f8b5 rose: cancel neighbour timers in rose_neigh_put() before freeing
c31a0fa15a4b4 rose: drop CALL_REQUEST in loopback timer when device is not running
74cbe94c913a4 rose: release netdev ref and destroy orphaned incoming sockets
c794d35f73a7b rose: fix netdev double-hold in rose_make_new()
ce27bcdd857a9 rose: disconnect orphaned STATE_2 sockets when device is gone
ab849a6972c99 rose: set SOCK_DESTROY in rose_kill_by_device() for prompt cleanup
c98cc00c2d3b1 rose: fix notifier unregistered too early in rose_exit()
19139026dc1c0 rose: fix netdev double-hold in rose_rx_call_request()
1d94857c11d60 rose: guard rose_neigh_put() against NULL in timer expiry
270ef709257eb rose: clear neighbour pointer after rose_neigh_put() in state machines
940f39e153323 rose: fix race between loopback timer and module removal
fe8cbcc3e79d4 rose: hold loopback neighbour reference across timer callback
7dac298524b41 rose: fix dev_put() leak in rose_loopback_timer()
19b3691ec9402 ACPI: scan: Use async schedule function in acpi_scan_clear_dep_fn()
53483a9f4ee9e agp/amd64: Fix broken error propagation in agp_amd64_probe()
8b17adf6d4fb6 net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()
5f4d2bd028ebb i2c: stub: Reject I2C block transfers with invalid length
e2b143df29003 RDMA/bnxt_re: zero shared page before exposing to userspace
44b8b03a9fb5c debugobjects: Dont call fill_pool() in early boot hardirq context
3a408cae608d9 debugobjects: Do not fill_pool() if pi_blocked_on
9cd2087cd7026 debugobjects: Use LD_WAIT_CONFIG instead of LD_WAIT_SLEEP
a460935022f51 debugobjects: Allow to refill the pool before SYSTEM_SCHEDULING
95f9eb19d5e65 Revert "NFSD: Defer sub-object cleanup in export put callbacks"
af2892249d982 fuse: re-lock request before replacing page cache folio
29706ac73f93b net: stmmac: fix stm32 (and potentially others) resume regression
b6099150949f8 io_uring/net: Avoid msghdr on op_connect/op_bind async data
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Bruce Ashfield [Mon, 20 Jul 2026 15:58:36 +0000 (11:58 -0400)]
linux-yocto/6.18: update to v6.18.36
Updating linux-yocto/6.18 to the latest korg -stable release that comprises
the following commits:
275d294b2b24 Linux 6.18.36
5d634afb8b83 netfilter: require Ethernet MAC header before using eth_hdr()
bf7a9cacd95e cfi: Include uaccess.h for get_kernel_nofault()
f455405e3207 vsock/virtio: fix skb overhead overflow on 32-bit builds
36a0faaa4e3d block: fix handling of dead zone write plugs
7b569b3a2f29 arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU
99abe00c605e arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
d4fd42822040 arm64: errata: Mitigate TLBI errata on various Arm CPUs
8097f93f9b77 arm64: cputype: Add C1-Premium definitions
e9ea7cb17677 arm64: cputype: Add C1-Ultra definitions
eca6743b148a vsock/virtio: fix skb overhead accounting to preserve full buf_alloc
9bdc637fde66 vsock/virtio: fix potential unbounded skb queue
cdce1e797add ipvs: skip ipv6 extension headers for csum checks
afd35fec9297 RDMA/umem: Fix truncation for block sizes >= 4G
cd26d54bfbc2 RDMA: Move DMA block iterator logic into dedicated files
ebf22feff492 RDMA/umem: fix kernel-doc warnings
84d8f58cf28a netfilter: nft_fib: fix stale stack leak via the OIFNAME register
2904e985a291 RDMA: During rereg_mr ensure that REREG_ACCESS is compatible
f58efaf9fcf7 RDMA/umem: Add helpers for umem dmabuf revoke lock
5f3286ca5fbb RDMA/umem: Move umem dmabuf revoke logic into helper function
ceddd32231dd RDMA/umem: Add ib_umem_dmabuf_get_pinned_and_lock helper
0ffcad63b19a sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_task()
37c059d4d92f wifi: mac80211: tests: mark HT check strict
4dac39a4db14 wifi: mac80211: skip ieee80211_verify_sta_ht_mcs_support check in non-strict mode
17faa39ba980 driver core: reject devices with unregistered buses
20a93e397abe fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
e09689286385 drm/amd/display: Use krealloc_array() in dal_vector_reserve()
454d3b3d499c drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()
bb6f705b73b5 drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs
c000da79df78 drm/amd/display: add missing CSC entries for BT.2020 for DCE IPs
3f32d52ec604 drm/amd/display: Clamp VBIOS HDMI retimer register count to array size
1906064d50d1 drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size
0e56f460bddb drm/amd/display: Bound VBIOS record-chain walk loops
57607fe55e6d drm/amd/pm: smu_v14_0_0: use SoftMin for gfxclk in set_soft_freq_limited_range
932642791cb1 drm/amd/pm: mark metrics.energy_accumulator is invalid for smu 14.0.2
8979ded4d899 drm/amd/pm: fix smu13 power limit default/cap calculation
39b5397bf8de drm/amdgpu: set noretry=1 as default for GFX 10.1.x (Navi10/12/14)
fcd51a085e9a drm/amdgpu: restart the CS if some parts of the VM are still invalidated
68455b117258 drm/amdgpu: fix waiting for all submissions for userptrs
9655b56b6de9 drm/v3d: Skip CSD when it has zeroed workgroups
90b629269088 drm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups
3e1947573140 drm/v3d: Fix global performance monitor reference counting
11e9bdf8824b drm/v3d: Wait for pending L2T flush before cleaning caches
4c10fd55187a drm/xe: Clear pending_disable before signaling suspend fence
0f68ddfaaebf drm/xe/display: fix oops in suspend/shutdown without display
d3efcadfe3ee drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11
72e259a32084 drm/amdkfd: fix NULL dereference in get_queue_ids()
c0639ede2f24 drm/gem: Try to fix change_handle ioctl, attempt 4
9f0d45d509b4 slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock
8f4b371f4939 slimbus: qcom-ngd-ctrl: Balance pm_runtime enablement for NGD
5204cd22c1c7 slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership
dd8e1025a84e slimbus: qcom-ngd-ctrl: Initialize controller resources in controller
24ec89123fc9 slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd
3bb2ac834ed3 slimbus: qcom-ngd-ctrl: Fix probe error path ordering
d6cb003e4661 slimbus: qcom-ngd-ctrl: Fix up platform_driver registration
6890bd2451a9 slimbus: qcom-ngd-ctrl: fix OF node refcount
b5daa920f44c thunderbolt: Limit XDomain response copy to actual frame size
46da5c3ea011 thunderbolt: Validate XDomain request packet size before type cast
fcbd0cdab928 thunderbolt: Clamp XDomain response data copy to allocation size
60ba62174607 thunderbolt: Bound root directory content to block size
2e0ddac549eb thunderbolt: Reject zero-length property entries in validator
d5ea0b3e261f sctp: stream: fully roll back denied add-stream state
78c4f964b2f9 sctp: diag: reject stale associations in dump_one path
566c4c1244de rxrpc: Fix the ACK parser to extract the SACK table for parsing
1bf84f4013fa rtase: Reset TX subqueue when clearing TX ring
54f9cdcd7311 rtase: Avoid sleeping in get_stats64()
ddcf84b25af0 pmdomain: ti_sci: add wakeup constraint to parent devices of wakeup source
0d11992d1898 pmdomain: imx: fix OF node refcount
0aecf3c7b8f8 mmc: sdhci: add signal voltage switch in sdhci_resume_host
535ff092b686 mmc: renesas_sdhi: Add OF entry for RZ/G2H SoC
2f72d36f8acc mmc: litex_mmc: Set mandatory idle clocks before CMD0
7f8007be13e6 mmc: dw_mmc-rockchip: Add missing private data for very old controllers
c677b13671dc mmc: core: Fix host controller programming for fixed driver type
a8f91ddf67f6 mm/mincore: handle non-swap entries before !CONFIG_SWAP guard
c19ff4351214 mm/list_lru: drain before clearing xarray entry on reparent
c72469ac0f27 mm/hugetlb: restore reservation on error in hugetlb folio copy paths
ecc24f0a8a30 mm/hugetlb: avoid false positive lockdep assertion
66bc00ea37fa mm/damon/reclaim: handle ctx allocation failure
6d48f1565939 mm/damon/lru_sort: handle ctx allocation failure
d83390b21a02 mm/cma_debug: fix invalid accesses for inactive CMA areas
52078596dce1 mm/cma: fix reserved page leak on activation failure
d5d37b7b72a9 io_uring/wait: fix min_timeout behavior
c888d5198ffc io_uring/kbuf: don't truncate end buffer for bundles
3fdcca838f97 pinctrl: mcp23s08: Read spi-present-mask as u8 not u32
e646b86b3b48 octeontx2-af: fix memory leak in rvu_setup_hw_resources()
4a4d21f531cc nvmem: layouts: onie-tlv: fix hang on unknown types
cb85ef5a227b nvmem: core: fix use-after-free bugs in error paths
bef389a210e7 net: sfp: initialize i2c_block_size at adapter configure time
1d4ec754ee38 net: rds: clear i_sends on setup unwind
52b8f5ef82c8 net: phonet: free phonet_device after RCU grace period
4a73cacb5586 net: mv643xx: fix OF node refcount
bcb8fad90f27 net: bonding: fix NULL pointer dereference in bond_do_ioctl()
01f7d4b50458 net: airoha: Add NULL check for of_reserved_mem_lookup() in airoha_qdma_init_hfwd_queues()
e0df4d9c0909 net/mlx5: Reorder completion before putting command entry in cmd_work_handler
0a46c7a5646d firmware: samsung: acpm: Fix mailbox channel leak on probe error
d5de9cb5355d misc: fastrpc: Fix NULL pointer dereference in rpmsg callback
53e06f8a3c2b misc: fastrpc: fix DMA address corruption due to find_vma misuse
992f121796b7 misc: fastrpc: fix use-after-free race in fastrpc_map_create
5278ccd357e0 misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context
89bd8215e25a memcg: use round-robin victim selection in refill_stock
a388e3dfaf95 locking/rtmutex: Skip remove_waiter() when waiter is not enqueued
db752ebfdaf2 ipc/shm: serialize orphan cleanup with shm_nattch updates
ab61c990a87d iommu/dma: Do not try to iommu_map a 0 length region in swiotlb
f35a368fee8a Input: atkbd - skip deactivate for HONOR BCC-N's internal keyboard
a3dff1e1a554 Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK)
7f59e4f72a78 i2c: tegra: Fix NOIRQ suspend/resume
6018d73137cd i2c: stm32f7: fix timing computation ignoring i2c-analog-filter
a162a260c8c4 i2c: qcom-cci: Fix NULL pointer dereference in cci_remove()
9fa82cf393ba i2c: imx: fix clock and pinctrl state inconsistency in runtime PM
b39f30c0a72f i2c: imx-lpi2c: fix resource leaks switching to devm_dma_request_chan()
16f8e17184b3 futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock
56763afa0134 fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios
12df4cfa738a fuse: reject fuse_notify() pagecache ops on directories
57a9c085be07 fs/qnx6: fix pointer arithmetic in directory iteration
2990f143ec86 pidfd: refuse access to tasks that have started exiting harder
89b909e97045 inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush
df422fd273c9 IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN
32138633e51e fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh()
3884976f8744 bnxt_en: Fix NULL pointer dereference
6f72b902c34d ASoC: fsl_sai: Fix 32 slots TDM broken by integer shift UB in xMR write
735dabdf2156 staging: rtl8723bs: fix buffer over-read in rtw_update_protection
1d6c2062b77b timers/migration: Fix livelock in tmigr_handle_remote_up()
ba9ad6015937 vsock/vmci: fix sk_ack_backlog leak on failed handshake
265c07c09c83 wifi: nl80211: reject oversized EMA RNR lists
ac2000be0cbe wifi: iwlwifi: pcie: simplify the resume flow if fast resume is not used
fcfdff42e841 xfs: fix rtgroup cleanup in CoW fork repair
d84ed2f9718e xfs: fix error returns in CoW fork repair
9f21885c11ba mptcp: add-addr: always drop other suboptions
6ea1134f1b5f selftests: mptcp: add test for extra_subflows underflow on userspace PM
7bbc11437a20 mptcp: sockopt: set sockopt on all subflows
f591cbc088c9 mptcp: sockopt: check timestamping ret value
c0c152fc4ae6 mptcp: pm: fix extra_subflows underflow on userspace PM subflow creation
653245266913 mptcp: allow subflow rcv wnd to shrink
3b8cbba7c0ed mptcp: close TOCTOU race while computing rcv_wnd
edaf0c955ace mptcp: fix retransmission loop when csum is enabled
95f27fcda681 arm64: mm: call pagetable dtor when freeing hot-removed page tables
517720913bd3 ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow
da295adc9dab ARM: 9474/1: io: avoid KASAN instrumentation of raw halfword I/O
6243a363ec90 ARM: socfpga: Fix OF node refcount leak in SMP setup
6822eed69572 udp: clear skb->dev before running a sockmap verdict
c96786d6ff1a zram: fix use-after-free in zram_bvec_write_partial()
f92a285db7ff RDMA/srp: bound SRP_RSP sense copy by the received length
bd5e818be796 RDMA/core: Validate cpu_id against nr_cpu_ids in DMAH alloc
96b6e98ff12d RDMA/core: Validate the passed in fops for ib_get_ucaps()
e99807bdcd20 mm/huge_memory: update file PUD counter before folio_put()
cb5230b6d8a0 mm/damon/ops-common: call folio_test_lru() after folio_get()
5f5b604e1e6b mm/huge_memory: update file PMD counter before folio_put()
edabfe80e34e drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info()
8348567a6afb drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait()
0bbc9481f970 io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries
3d39da65b5c4 ALSA: timer: Fix UAF at snd_timer_user_params()
f46093dd2296 ALSA: timer: Forcibly close timer instances at closing
372f33ebed74 USB: serial: kl5kusb105: fix bulk-out buffer overflow
85bd2b3afa0a USB: serial: option: add usb-id for Dell Wireless DW5826e-m
294692d3296e USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()
f96cf7bf9fbf USB: serial: io_ti: fix heap overflow in get_manuf_info()
a13ca53e47e5 xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state()
dd66f7f6e360 xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags()
f9b38a8fbfa0 xfrm: espintcp: do not reuse an in-progress partial send
14d2eee0193a ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL
0b38870d81ab hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf
32d4c5d328a3 drm/i915/gem: Fix phys BO pread/pwrite with offset
0b79bcff7210 KVM: arm64: Restore POR_EL0 access to host EL0
196f1ee137eb KVM: SEV: Decouple the need to sync the GHCB SA from the need to free the SA
343e95c8ecc4 KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying
0864bdde152e mshv: add a missing padding field
8bcbedce9bfa mmc: litex_mmc: Use DIV_ROUND_UP for more accurate clock calculation
a0a4600b396b rust: kasan/kbuild: fix rustc-option when cross-compiling
d0f25a1755f2 rust: arm64: set uwtable llvm module flag for CONFIG_UNWIND_TABLES
5037b2ee1a17 ARM: Do not select HAVE_RUST when KASAN is enabled
00875811f372 rust: x86: support Rust >= 1.98.0 target spec
592be0dc491d tracing/probes: Point the error offset correctly for eprobe argument error
09df291fdf96 tracing: Fix CFI violation in probestub being called by tprobes
45cb105b8642 accel/ivpu: Fix signed integer truncation in IPC receive
fa598556ecef accel/ivpu: Add buffer overflow check in MS get_info_ioctl
8ec70c0dbdf0 accel/ivpu: Add bounds checks for firmware log indices
dd77a83915b0 mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison
cc160ce08540 soc: qcom: ice: Fix race between qcom_ice_probe() and of_qcom_ice_get()
dedc92b96dc1 Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig
dafc9f57140e Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend
c10c9c48b290 tee: shm: fix shm leak in register_shm_helper()
07acb9798477 netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR register
941d7394efda netfilter: nft_tunnel: fix use-after-free on object destroy
e83fc4c28226 accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range()
361e97d81331 drm/xe: fix refcount leak in xe_range_fence_insert()
02f5e4db57c0 drm/vc4: fix krealloc() memory leak
19a6a00ff50c drm/virtio: Fix driver removal with disabled KMS
dda720b2928d drm/i915/edp: Check supported link rates DPCD read
489f6d759fa4 clk: qcom: dispcc-sc8280xp: Don't park mdp_clk_src at registration time
3a4fc3617b7e clk: samsung: gs101: Fix missing USI7_USI DIV clock in peric0_clk_regs
656939c67595 clk: qcom: x1e80100-dispcc: Stop disp_cc_mdss_mdp_clk_src from getting parked
f34689e7a0b3 KVM: VMX: Update SVI during runtime APICv activation
07d9a0870a17 ipv6: Fix a potential NPD in cleanup_prefix_route()
2c98343c9b23 net: txgbe: initialize module info buffer
19a4d2aace1d net: txgbe: rename the SFP related
9157060fed92 net: txgbe: support CR modules for AML devices
7649ba2b1291 net: txgbe: optimize the flow to setup PHY for AML devices
af08fe9ba091 net: mvpp2: build skb from XDP-adjusted data on XDP_PASS
8a2126c5afe8 net: mvpp2: refill RX buffers before XDP or skb use
910617a4e67d net: mvpp2: limit XDP frame size to the RX buffer
a13199fa224e net: mvpp2: sync RX data at the hardware packet offset
78069a6d8bc8 netfilter: nft_exthdr: fix register tracking for F_PRESENT flag
af1b7699466f netfilter: nf_log: validate MAC header was set before dumping it
08a3e218064d netfilter: x_tables: avoid leaking percpu counter pointers
9d017671dcfc netfilter: nf_conntrack: destroy stale expectfn expectations on unregister
4beffcd726e2 netfilter: revalidate bridge ports
865e94f6d8a5 spi: rzv2h-rspi: Fix SPDR read access width for 16-bit RX
5ae8a38169fc rds: mark snapshot pages dirty in rds_info_getsockopt()
2abfb19bbb81 ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()
5fd1fa5a4254 tun: zero the whole vnet header in tun_put_user()
dcf458120add net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion
3dde4fb941fa net: guard timestamp cmsgs to real error queue skbs
7560afb8cdda sctp: validate embedded INIT chunk and address list lengths in cookie
ecf8904067dc ip6_vti: set netns_immutable on the fallback device.
f76a8b323e28 sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
d23d53355300 ASoC: SOF: amd: fix for ipc flags check
6c75ee4d1d40 net: mctp: usb: don't fail mctp_usb_rx_queue on a deferred submission
9c46f3ee1837 net: mctp: usb: fix race between urb completion and rx_retry cancellation
bace7b99bfa5 gpio: rockchip: fix generic IRQ chip leak on remove
5d4bca5cbb69 gpio: zynq: fix runtime PM leak on remove
c838ffc154cb r8152: handle the return value of usb_reset_device()
ecc55aad3390 net: openvswitch: fix possible kfree_skb of ERR_PTR
2fa49b2715e1 ipv6: sit: reload inner IPv6 header after GSO offloads
289c06418ed9 net/mlx5: Use effective affinity mask for IRQ selection
2789b74ae1f4 net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure
0f807764bb12 net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list
ab269990ed58 net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove
3a254779c169 net: phy: clean the sfp upstream if phy probing fails
c299321bc623 netdev: fix double-free in netdev_nl_bind_rx_doit()
c09c2e236eef net: ibm: emac: Fix use-after-free during device removal
8b0541231091 net/mlx4: avoid GCC 10 __bad_copy_from() false positive
0cde3a004119 net: add pskb_may_pull() to skb_gro_receive_list()
ede69b8f6670 tcp: restrict SO_ATTACH_FILTER to priv users
12e579b88962 ASoC: wm_adsp: Fix NULL dereference when removing firmware controls
6136c1474db8 gpio: mvebu: fix NULL pointer dereference in suspend/resume
0c4bb32ad7fd netlabel: validate unlabeled address and mask attribute lengths
972c106f5d01 bnge: fix context mem iteration
6b8baf42b1b7 net: ena: PHC: Add missing barrier
640edc281d2f idpf: fix mailbox capability for set device clock time
6bdbe6f43ecf ice: fix missing priority callbacks for U.FL DPLL pins
b5316e2b8614 xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()
5513dcb378f9 dma-debug: fix physical address retrieval in debug_dma_sync_sg_for_device
4ee4d628c4d9 dma-mapping: direct: fix missing mapping for THRU_HOST_BRIDGE segments
8d9a79fbf517 xfrm: iptfs: fix use-after-free on first_skb in __input_process_payload
e27c17346628 tap: free page on error paths in tap_get_user_xdp()
0c03692e2372 verification/rvgen: Fix ltl2k writing True as a literal
43ad0a0da486 verification/rvgen: Fix options shared among commands
73590b4cfd05 tools/rv: Fix cleanup after failed trace setup
fd1923910bbf tools/rv: Fix substring match when listing container monitors
2122d68f0864 tools/rv: Fix substring match bug in monitor name search
618193aba6fe tools/rv: Ensure monitor name and desc are NUL-terminated
65046b0d853d cpufreq/amd-pstate: drop stale @epp_cached kdoc
63a9f6012f45 spi: cadence-quadspi: fix unclocked access on unbind
6671a46144f8 ALSA: seq: dummy: fix UMP event stack overread
cd98837db15f ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams
6b71956c25f9 time: Fix off-by-one in settimeofday() usec validation
ed0ad6574126 hyperv: Clean up and fix the guest ID comment in hvgdk.h
8c046f36222c signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()
6dc6e5b5c32e selftests: harness: fix pidfd leak in __wait_for_test
752e22ecf4df drm/hyperv: During panic do VMBus unload after frame buffer is flushed
b0f77f76231b Drivers: hv: vmbus: Provide option to skip VMBus unload on panic
1639df1a9844 Drivers: hv: VMBus protocol version 6.0
a6207349e703 sctp: purge outqueue on stale COOKIE-ECHO handling
42446ca0f357 net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr
285b0842f2e0 ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()
3b7ee029b556 vxlan: vnifilter: fix spurious notification on VNI update
8e4d1188bad7 vxlan: vnifilter: send notification on VNI add
eb676fb14427 octeontx2-af: npc: Fix CPT channel mask in npc_install_flow
cc272185c9a9 sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing
b198ed4e5258 net/sched: fix pedit partial COW leading to page cache corruption
e634408d2b0c net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown
6f829e2c17a5 net: airoha: Fix use-after-free in metadata dst teardown
9a263bbd1ec0 ptp: vclock: Switch from RCU to SRCU
a4f3fd651692 ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options
91106d0348a5 af_unix: Fix inq_len update problem in partial read
f010cf9aea01 octeontx2-af: Fix initialization of mcam's entry2target_pffunc field
ddf930f28be6 octeontx2-pf: Fix NDC sync operation errors
0dfe05b93843 xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata()
58d810354de1 Bluetooth: MGMT: Fix backward compatibility with userspace
446a17b1b509 Bluetooth: SCO: Fix data-race on sco_pi fields in sco_connect
ab84fd7779a2 Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls
33d677d2e371 Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync
ce4b4cac3c57 Bluetooth: fix memory leak in error path of hci_alloc_dev()
c893e17d2809 Bluetooth: bnep: reject short frames before parsing
7f5367f1ad9b Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling
3eabc6d47a0a Bluetooth: RFCOMM: validate skb length in MCC handlers
1a3c8ffbb469 Bluetooth: MGMT: validate advertising TLV before type checks
8802413ce631 Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()
fb8db813eba2 wifi: fix leak if split 6 GHz scanning fails
15be7e9fdbff ipv6: anycast: insert aca into global hash under idev->lock
23bf7d5c250b net: fec: fix pinctrl default state restore order on resume
76244b33640b net: lan743x: permit VLAN-tagged packets up to configured MTU
04e22fefac1a net: garp: fix unsigned integer underflow in garp_pdu_parse_attr
66a46e22396f hsr: Remove WARN_ONCE() in hsr_addr_is_self().
07f13816be5a net: Annotate sk->sk_write_space() for UDP SOCKMAP.
83810d51d699 pcnet32: stop holding device spin lock during napi_complete_done
9b40c59bab08 wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap
e3f6ba5f8cf3 drm/imx: Fix three kernel-doc warnings in dcss-scaler.c
927f96861f93 devlink: Release nested relation on devlink free
e251d4cdfc72 l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()
c32f30ef5e66 6lowpan: fix off-by-one in multicast context address compression
b60e9391142e net/sched: act_api: use RCU with deferred freeing for action lifecycle
42ff6774ecd9 dm cache policy smq: check allocation under invalidate lock
b18675263db1 netfilter: bridge: make ebt_snat ARP rewrite writable
f071b0bf0781 netfilter: nft_ct: bail out on template ct in get eval
9e5da2379f96 netfilter: conntrack_irc: fix possible out-of-bounds read
aaf80701dc2f netfilter: synproxy: add mutex to guard hook reference counting
25918720ba97 ipvs: clear the svc scheduler ptr early on edit
cdaf13260c99 netfilter: xt_NFQUEUE: prefer raw_smp_processor_id
e735dbd489e3 ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers
9dca67624721 wifi: iwlwifi: mvm: don't support the reset handshake for old firmwares
00bf6868df65 erofs: fix use-after-free on sbi->sync_decompress
50fd261b1ec4 erofs: tidy up synchronous decompression
8db2fabb5ecd tee: qcomtee: add missing va_end in early return qcomtee_object_user_init()
ac7eca1ae4e5 tee: fix tee_ioctl_object_invoke_arg padding
633db9a1991a soc: qcom: ice: Return -ENODEV if the ICE platform device is not found
40fc6ed12f91 ARM: dts: microchip: sam9x7: fix GMAC clock configuration
9cb93ec617fb arm64: dts: qcom: x1-dell-thena: remove i2c20 (battery SMBus) and reserve its pins
a171bc68e9af soc: qcom: ice: Allow explicit votes on 'iface' clock for ICE
d5b57bb314d7 tee: optee: prevent use-after-free when the client exits before the supplicant
dcd90f42a33e net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS
4203806f700b ipv6: mcast: Fix use-after-free when processing MLD queries
ffbcf31f032e i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl
97706097f9b8 KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation
9e767af5f109 ARM: fix branch predictor hardening
05e22564a4f9 ARM: fix hash_name() fault
8bdb574b2176 ARM: allow __do_kernel_fault() to report execution of memory faults
22e26df355af ARM: group is_permission_fault() with is_translation_fault()
87dfb977bdb6 bpf: Free reuseport cBPF prog after RCU grace period.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Richard Purdie [Wed, 1 Jul 2026 13:39:39 +0000 (14:39 +0100)]
pseudo: Add in openat2, exec and linkat fixesSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Martin Jansa [Tue, 21 Jul 2026 09:32:51 +0000 (11:32 +0200)]
linux-firmware: fix typo Firwmare/Firmware in one of the LICENSEsSigned-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Martin Jansa [Tue, 21 Jul 2026 09:32:50 +0000 (11:32 +0200)]
glib-networking: update LICENSE for openssl PACKAGECONFIGSigned-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Mon, 20 Jul 2026 20:49:46 +0000 (14:49 -0600)]
gcc: Update licenseSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Taruntej Kanakamalla [Tue, 14 Jul 2026 10:55:40 +0000 (16:25 +0530)]
cargo_c.bbclass: pass --libdir to cargo cinstall
cargo-cinstall defaults its libdir to <prefix>/lib since the class does
not pass --libdir. On configurations where ${libdir} is not
<prefix>/lib (e.g. multilib builds where baselib is lib64), the libraries
and pkg-config files get installed into <prefix>/lib, causing do_package
QA failures (installed-vs-shipped).
Pass --libdir ${libdir} explicitly so cargo-cinstall installs the files
into the correct directory.
Signed-off-by: Taruntej Kanakamalla <tarun@centricular.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Alexander Kanavin [Thu, 16 Jul 2026 11:35:24 +0000 (13:35 +0200)]
python3-dtc: use https to fetch from gitSigned-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 15 Jul 2026 11:02:37 +0000 (12:02 +0100)]
msmtp: remove LSB-specific overrides
The linuxstdbase override was used by the poky-lsb distribution, which
aimed to be compatible with the Linux Standard Base specification.
LSB is long-dead and poky-lsb was removed back in 2018 with the thud
release[1].
Clarify the recipe by removing this obsolete alternative.
[1] meta-yocto
00fdefff55 ("poky-altcfg: Replace poky-lsb with poky-altcfg")
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 15 Jul 2026 11:02:36 +0000 (12:02 +0100)]
gcc: remove LSB-specific overrides
The linuxstdbase override was used by the poky-lsb distribution, which
aimed to be compatible with the Linux Standard Base specification.
LSB is long-dead and poky-lsb was removed back in 2018 with the thud
release[1].
Clarify the recipe by deleting these obsolete and unused assignments.
[1] meta-yocto
00fdefff55 ("poky-altcfg: Replace poky-lsb with poky-altcfg")
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 15 Jul 2026 11:02:35 +0000 (12:02 +0100)]
libxml2: remove LSB-specific overrides
The linuxstdbase override was used by the poky-lsb distribution, which
aimed to be compatible with the Linux Standard Base specification.
LSB is long-dead and poky-lsb was removed back in 2018 with the thud
release[1].
Clarify the recipe by deleting these obsolete and unused assignments.
[1] meta-yocto
00fdefff55 ("poky-altcfg: Replace poky-lsb with poky-altcfg")
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 15 Jul 2026 11:02:34 +0000 (12:02 +0100)]
base-files: remove LSB-specific overrides
The linuxstdbase override was used by the poky-lsb distribution, which
aimed to be compatible with the Linux Standard Base specification.
LSB is long-dead and poky-lsb was removed back in 2018 with the thud
release[1].
Clarify the recipe by deleting these obsolete and unused assignments.
[1] meta-yocto
00fdefff55 ("poky-altcfg: Replace poky-lsb with poky-altcfg")
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Jose Quaresma [Fri, 10 Jul 2026 16:02:38 +0000 (17:02 +0100)]
lib/oe/spdx30_tasks: fix image deploy dirSigned-off-by: Jose Quaresma <jose.quaresma@oss.qualcomm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Jörg Sommer [Tue, 14 Jul 2026 14:41:45 +0000 (16:41 +0200)]
sudo: Enable PACKAGECONFIG[audit selinux] by DISTRO_FEATURESSigned-off-by: Jörg Sommer <joerg.sommer@navimatix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Jörg Sommer [Tue, 14 Jul 2026 14:41:43 +0000 (16:41 +0200)]
shadow: Enable PACKAGECONFIG[acl audit selinux] by DISTRO_FEATURESSigned-off-by: Jörg Sommer <joerg.sommer@navimatix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Jörg Sommer [Tue, 14 Jul 2026 14:41:41 +0000 (16:41 +0200)]
cronie: Enable PACKAGECONFIG[audit selinux] by DISTRO_FEATURESSigned-off-by: Jörg Sommer <joerg.sommer@navimatix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Jörg Sommer [Tue, 14 Jul 2026 14:41:39 +0000 (16:41 +0200)]
rpm: Enable PACKAGECONFIG[acl audit selinux] by DISTRO_FEATURESSigned-off-by: Jörg Sommer <joerg.sommer@navimatix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Jörg Sommer [Tue, 14 Jul 2026 14:41:37 +0000 (16:41 +0200)]
libpam: Enable PACKAGECONFIG[audit] by DISTRO_FEATURESSigned-off-by: Jörg Sommer <joerg.sommer@navimatix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Jörg Sommer [Tue, 14 Jul 2026 14:41:35 +0000 (16:41 +0200)]
dbus: Enable PACKAGECONFIG[audit] by DISTRO_FEATURESSigned-off-by: Jörg Sommer <joerg.sommer@navimatix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Richard Purdie [Sat, 18 Jul 2026 05:35:13 +0000 (06:35 +0100)]
selftest/layerappend: Improve LICENSE handlingSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:17 +0000 (10:45 -0600)]
recipes: Convert licenses to SPDX expressionsSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:21 +0000 (10:45 -0600)]
scripts/contrib: Add reuse-get-license.pySigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:20 +0000 (10:45 -0600)]
oeqa: selftest: bbtest: Fix license exceptionSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:19 +0000 (10:45 -0600)]
lib/oe/sbom30: Handle None in RelationshipSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:18 +0000 (10:45 -0600)]
meta-selftest: libxpm: Fix licenseSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:16 +0000 (10:45 -0600)]
meta-selftest: Clarify license on test recipesSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:15 +0000 (10:45 -0600)]
license: Remove tidy_licenses()Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:14 +0000 (10:45 -0600)]
classes/go-mod-update-modules: Switch to SPDX licenseSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:13 +0000 (10:45 -0600)]
lib/oe/license: Rework package licenses matchingSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:12 +0000 (10:45 -0600)]
recipes: Fix up licensesSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:11 +0000 (10:45 -0600)]
libgit2: Replace deprecated SPDX identifierSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:10 +0000 (10:45 -0600)]
flac: Replace deprecated SPDX identifierSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:09 +0000 (10:45 -0600)]
libglvnd: Replace deprecated SPDX identifierSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:08 +0000 (10:45 -0600)]
gnu-config: Replace deprecated SPDX identifierSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:07 +0000 (10:45 -0600)]
autoconf-archive: Replace deprecated SPDX identifierSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:06 +0000 (10:45 -0600)]
xz: Replace deprecated SPDX identifierSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:04 +0000 (10:45 -0600)]
gcc-common.inc: Remove LICENSESigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:03 +0000 (10:45 -0600)]
convert-spdx-licenses: Convert to valid SPDX expressionsSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:02 +0000 (10:45 -0600)]
meta-selftest: Add NO_GENERIC_LICENSESigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:01 +0000 (10:45 -0600)]
linux-firmware: Convert to SPDX license stringsSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:45:00 +0000 (10:45 -0600)]
classes/conf/lib: Parse LICENSE as SPDX ExpressionSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:44:59 +0000 (10:44 -0600)]
lib/oe: Add SPDX license librarySigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:44:58 +0000 (10:44 -0600)]
common-licenses: Add SPDX License ExceptionsSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Wed, 15 Jul 2026 16:44:57 +0000 (10:44 -0600)]
scripts/pull-spdx-licenses.py: Add exceptionsSigned-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 15 Jul 2026 14:05:07 +0000 (15:05 +0100)]
xset: build with mesonSigned-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 15 Jul 2026 14:05:06 +0000 (15:05 +0100)]
xrandr: build with mesonSigned-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 15 Jul 2026 14:05:05 +0000 (15:05 +0100)]
xkbcomp: build with mesonSigned-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 15 Jul 2026 14:05:04 +0000 (15:05 +0100)]
xeyes: build with mesonSigned-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 15 Jul 2026 14:05:03 +0000 (15:05 +0100)]
xev: build with mesonSigned-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 15 Jul 2026 14:05:02 +0000 (15:05 +0100)]
xdpyinfo: build with mesonSigned-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 15 Jul 2026 14:05:01 +0000 (15:05 +0100)]
mkfontscale: use mesonSigned-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 15 Jul 2026 14:05:00 +0000 (15:05 +0100)]
xorg-app-common: add builder class variableSigned-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 15 Jul 2026 14:04:59 +0000 (15:04 +0100)]
patchelf: build with mesonSigned-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 15 Jul 2026 14:04:58 +0000 (15:04 +0100)]
libpsl: use libidn2 instead of ICU
The default IDNA library was changed from libidn2 to ICU in 2021[1] with
no rationale, and upstream has had libidn2 as the default since 2017.
Switch back to libidn2 to respect upstream's opinion, and because ICU is
a monolithic dependency: this switch causes a minimal image containg
libpsl to shrink by ~30MB.
[1] oe-core
20fc11919e2 ("libpsl: Add config knobs for runtime/builtin conversion choices")
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 15 Jul 2026 14:04:57 +0000 (15:04 +0100)]
evdev: build with mesonSigned-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 15 Jul 2026 14:04:56 +0000 (15:04 +0100)]
libxml2: clean up xmlconf mode fixupsSigned-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Peter Tatrai [Fri, 17 Jul 2026 10:32:42 +0000 (12:32 +0200)]
testimage: handle bootlog variants on failed qemu testsSigned-off-by: Peter Tatrai <peter.tatrai.ext@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Tim Orling [Sat, 18 Jul 2026 19:29:49 +0000 (12:29 -0700)]
python3-websockets: enable ptestSigned-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Peter Kjellerstedt [Tue, 14 Jul 2026 16:39:25 +0000 (18:39 +0200)]
curl: Add support for libsshSigned-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Tim Orling [Sat, 18 Jul 2026 17:48:10 +0000 (10:48 -0700)]
python3-pyasn1: upgrade 0.6.3 -> 0.6.4Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Zoltán Böszörményi [Sun, 19 Jul 2026 08:01:06 +0000 (10:01 +0200)]
mesa: Upgrade to 26.1.5Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Siddharth Doshi [Thu, 16 Jul 2026 09:22:56 +0000 (14:52 +0530)]
pinentry: upgrade 1.3.2 -> 1.3.3Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 15 Jul 2026 11:02:53 +0000 (12:02 +0100)]
pkgconf: upgrade 2.5.1 -> 3.0.3Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Fabio Estevam [Fri, 17 Jul 2026 14:16:24 +0000 (11:16 -0300)]
u-boot: upgrade 2026.04 -> 2026.07Signed-off-by: Fabio Estevam <festevam@nabladev.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Tue, 14 Jul 2026 17:16:18 +0000 (18:16 +0100)]
meson: upgrade 1.11.1 -> 1.11.2
Upstream changelog, ignoring irrelevant changes:
8b7d80f2b Update default Qt version to 6.
03bfacaf6 mconf: fix crash printing list-valued option augments
aa5f7ae43 codegen: do not use Programs.for_machine
d1cc24cc2 mtest: allow ignore reasons in rust unittests
f229c604b envconfig: allow running executables if subsystem is not set
bb1e84e5e compilers: Don't use -I=path in TI toolchain
c35300613 Revert "compilers: Deduplicate OpenMP linker arguments"
690107f50 automatically tag files installed under sbindir
b8fe4f73f introspect: do not print umask as octal in JSON
69673e5fc cargo: add docsrs to unconditionally added --check-cfg cfg's
427947b00 mtest: fix handling of empty lines in TAP YAML block
c928e14fa interpreter: fix typos in typed_kwargs
cb20fed97 cargo: allow git dependencies with slash in branch name
af3d7b29d interpreter: fix typed_kwargs name of add_project_link_arguments
4d0e8635a interpreter: do not apply CARGO_SUBDIR if subproject has a meson.build
1b1ac2154 AstInterpreter: Slight Performance Improvement
27f1c15eb build: fix install name when using link_whole
a892c705c build: fix install name when linking with static library
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Deepesh Varatharajan [Tue, 14 Jul 2026 09:55:51 +0000 (02:55 -0700)]
cargo-c: upgrade 0.10.23 -> 0.10.24Assisted-by: Kiro CLI 2.12.0 (AI assistant) Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Jose Quaresma [Fri, 17 Jul 2026 11:39:42 +0000 (12:39 +0100)]
shaderc: upgrade 2026.2 -> 2026.3Signed-off-by: Jose Quaresma <jose.quaresma@oss.qualcomm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Richard Purdie [Thu, 16 Jul 2026 05:23:44 +0000 (05:23 +0000)]
python3-uv-build: upgrade 0.11.28 -> 0.11.29Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Richard Purdie [Fri, 17 Jul 2026 05:31:38 +0000 (05:31 +0000)]
wayland: upgrade 1.25.0 -> 1.26.0Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Tim Orling [Sat, 18 Jul 2026 17:47:59 +0000 (10:47 -0700)]
python3-websockets: upgrade 16.1 -> 16.1.1Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Richard Purdie [Sat, 18 Jul 2026 05:19:31 +0000 (05:19 +0000)]
diffoscope: upgrade 324 -> 325Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Jaipaul Cheernam [Wed, 15 Jul 2026 08:19:22 +0000 (10:19 +0200)]
gzip: fix CVE-2026-41991
This patch applies the upstream fix as referenced in [1], using the commit shown in [2].
[1] https://nvd.nist.gov/vuln/detail/CVE-2026-41991
[2] https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=
4e6f8b24ab823146ab8776f0b7fe486ab34d4269
Adapted for gzip 1.14:
- Refreshed NEWS hunks to match 1.14 release context.
Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Peter Marko [Thu, 16 Jul 2026 16:18:42 +0000 (18:18 +0200)]
libsoup: patch CVE-2026-4271Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Peter Marko [Thu, 16 Jul 2026 15:36:44 +0000 (17:36 +0200)]
p11-kit: set status for CVE-2026-13757Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
David Nyström [Thu, 16 Jul 2026 15:24:01 +0000 (17:24 +0200)]
libssh2: Fix CVE-2025-15661Signed-off-by: David Nyström <david.nystrom@est.tech> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Richard Purdie [Fri, 17 Jul 2026 12:26:22 +0000 (13:26 +0100)]
enchant2: Update source checksumSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Babanpreet Singh [Tue, 14 Jul 2026 05:01:06 +0000 (05:01 +0000)]
oeqa/selftest/devtool: cover update-recipe --initial-revSigned-off-by: Babanpreet Singh <bbnpreetsingh@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Babanpreet Singh [Tue, 14 Jul 2026 05:01:05 +0000 (05:01 +0000)]
devtool: standard: fix update-recipe/finish --initial-rev override
Since
900129cbdf ("devtool: add support for git submodules") the
--initial-rev option of update-recipe and finish has been broken: the
parse loop in _get_patchset_revs() deliberately skips the recorded
"# initial_rev ." entry from the workspace bbappend when an override
is passed, but the override value itself is never inserted into the
initial_revs dict. For a recipe without submodules the dict therefore
ends up empty and update-recipe/finish fails in patch mode with:
ERROR: Unable to find initial revision - please specify it with
--initial-rev
i.e. passing --initial-rev produces the very error message that
instructs the user to pass --initial-rev. Before
900129cbdf the passed
value simply took precedence over the one recorded in the bbappend.
Seed initial_revs with the override before parsing so the option
behaves as documented again; recorded values are still used for
submodules and for the main repo when no override is given.
AI-Generated: Uses Claude (claude-fable-5)
Signed-off-by: Babanpreet Singh <bbnpreetsingh@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
AshishKumar Mishra [Tue, 14 Jul 2026 05:00:03 +0000 (10:30 +0530)]
package.bbclass: hardcode emit_pkgdata to run lastSigned-off-by: AshishKumar Mishra <emailaddress.ashish@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Babanpreet Singh [Tue, 14 Jul 2026 03:20:29 +0000 (03:20 +0000)]
oeqa/selftest/devtool: exercise devtool finish on an AUTOREV recipeCc: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Babanpreet Singh <bbnpreetsingh@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Babanpreet Singh [Tue, 14 Jul 2026 03:20:28 +0000 (03:20 +0000)]
devtool: standard: fix finish/update-recipe for recipes using AUTOREVReported-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Babanpreet Singh <bbnpreetsingh@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
mark.yang [Mon, 13 Jul 2026 23:44:16 +0000 (08:44 +0900)]
python3-pyasn1: set CVE_PRODUCTSuggested-by: Ross Burton <ross.burton@arm.com> Signed-off-by: mark.yang <mark.yang@lge.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
mark.yang [Mon, 13 Jul 2026 23:44:15 +0000 (08:44 +0900)]
python3-ply: set CVE_PRODUCTSuggested-by: Paul Barker <paul@pbarker.dev> Signed-off-by: mark.yang <mark.yang@lge.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
mark.yang [Mon, 13 Jul 2026 23:44:14 +0000 (08:44 +0900)]
python3-cryptography: set CVE_PRODUCTSuggested-by: Ross Burton <ross.burton@arm.com> Signed-off-by: mark.yang <mark.yang@lge.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Jose Quaresma [Fri, 10 Jul 2026 15:57:21 +0000 (16:57 +0100)]
os-release: set BUILD_ID vardepsexclude with weak assignmentSigned-off-by: Jose Quaresma <jose.quaresma@oss.qualcomm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Siddharth Doshi [Mon, 13 Jul 2026 06:53:26 +0000 (12:23 +0530)]
screen: upgrade 5.0.1 -> 5.0.2
For detailed information, see the link below:
https://cgit.git.savannah.gnu.org/cgit/screen.git/commit/?h=v.5.0.2&id=
e9206eff9c9c97bdae4809c97c801e221fcf641c
Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Yogesh Tyagi [Sun, 12 Jul 2026 05:43:13 +0000 (13:43 +0800)]
bindgen-cli: set CLANG_PATH in native and nativesdk wrappers to matching clangSigned-off-by: Yogesh Tyagi <yogesh.tyagi@intel.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ryan Eatmon [Mon, 6 Jul 2026 22:19:33 +0000 (17:19 -0500)]
oe-selftest: fitimage: Add tests for KERNEL_DTBVENDOREDSigned-off-by: Ryan Eatmon <reatmon@ti.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ryan Eatmon [Mon, 6 Jul 2026 22:19:32 +0000 (17:19 -0500)]
kernel-fit-image: Add KERNEL_DTBVENDORED support for FIT_CONF_DEFAULT_DTBSigned-off-by: Ryan Eatmon <reatmon@ti.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 8 Jul 2026 17:36:51 +0000 (18:36 +0100)]
glibc: disable nscd by defaultSigned-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 8 Jul 2026 17:36:50 +0000 (18:36 +0100)]
glibc: only inherit init script classes if nscd is enabledSigned-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 8 Jul 2026 17:36:49 +0000 (18:36 +0100)]
glibc: only install nscd if it's been enabledSigned-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Wed, 8 Jul 2026 17:36:48 +0000 (18:36 +0100)]
glibc: inherit update-rc.dSigned-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Alexander Kanavin [Mon, 6 Jul 2026 17:16:29 +0000 (19:16 +0200)]
gtk-doc: upgrade 1.35.1 -> 1.36.1Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Sudhir Dumbhare [Thu, 9 Jul 2026 05:27:31 +0000 (22:27 -0700)]
openssh: set status for CVE-2026-3497Signed-off-by: Sudhir Dumbhare <sudumbha@cisco.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Jaipaul Cheernam [Wed, 8 Jul 2026 18:53:32 +0000 (20:53 +0200)]
gzip: fix CVE-2026-41992Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
projects / thirdparty / openembedded / openembedded-core.git / log
