]> git.ipfire.org Git - thirdparty/kernel/stable-queue.git/commit
6.18-stable patches
authorGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 4 Jun 2026 08:54:04 +0000 (10:54 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 4 Jun 2026 08:54:04 +0000 (10:54 +0200)
commit9d07245d4ce1c5b5854338d73c2a8f64b759bae2
tree40d6d2b9fe439d02118a38300bcd4bec8af9312c
parent55ed9d8727b22d937a2828c49e7da214beb3a476
6.18-stable patches

added patches:
auxdisplay-line-display-fix-oob-read-on-zero-length-message_store.patch
bluetooth-hci_conn-fix-memory-leak-in-hci_le_big_terminate.patch
bluetooth-hci_qca-use-100-ms-ssr-delay-for-rampatch-and-nvm-loading.patch
bluetooth-hci_sync-fix-uaf-in-hci_le_create_cis_sync.patch
bluetooth-hidp-fix-missing-length-checks-in-hidp_input_report.patch
bluetooth-iso-fix-uaf-in-iso_recv_frame.patch
bluetooth-iso-serialize-iso_sock_clear_timer-with-socket-lock.patch
bluetooth-l2cap-fix-chan-ref-leak-in-l2cap_chan_timeout-on-conn.patch
bluetooth-l2cap-use-chan-timer-to-close-channels-in-cleanup_listen.patch
disable-wattribute-alias-for-clang-23-and-newer.patch
hpfs-fix-a-crash-if-hpfs_map_dnode_bitmap-fails.patch
i2c-davinci-fix-division-by-zero-on-missing-clock-frequency.patch
iio-adc-ad4695-fix-call-ordering-in-offload-buffer-postenable.patch
iio-adc-mt6359-fix-unchecked-return-value-in-mt6358_read_imp.patch
iio-adc-npcm-fix-unbalanced-clk_disable_unprepare.patch
iio-adc-viperboard-fix-error-handling-in-vprbrd_iio_read_raw.patch
iio-adc-xilinx-xadc-fix-sequencer-mode-in-postdisable-for-dual-mux.patch
iio-buffer-fix-dma-fence-leak-in-iio_buffer_enqueue_dmabuf.patch
iio-buffer-hw-consumer-fix-use-after-free-in-error-path.patch
iio-chemical-mhz19b-reject-oversized-serial-replies.patch
iio-chemical-scd30-fix-division-by-zero-in-write_raw.patch
iio-dac-ad3530r-fix-ad3531-ad3531r-powerdown-mode-strings.patch
iio-dac-ad5686-acquire-lock-when-doing-powerdown-control.patch
iio-dac-ad5686-fix-input-raw-value-check.patch
iio-dac-ad5686-fix-powerdown-control-on-dual-channel-devices.patch
iio-dac-ad5686-fix-ref-bit-initialization-for-single-channel-parts.patch
iio-dac-max5821-fix-return-value-check-in-powerdown-sync.patch
iio-fix-iio_multiply_value-use-in-iio_read_channel_processed_scale.patch
iio-gyro-adis16260-fix-division-by-zero-in-write_raw.patch
iio-gyro-itg3200-fix-i2c-read-into-the-wrong-stack-location.patch
iio-light-cm3323-fix-reg_conf-not-being-initialized-correctly.patch
iio-light-veml6070-fix-resource-leak-in-probe-error-path.patch
iio-magnetometer-st_magn-fix-default-drdy-pin-selection-for-lis2mdl.patch
iio-ssp_sensors-cancel-delayed-work_refresh-on-remove.patch
iio-temperature-tsys01-fix-broken-prom-checksum-validation.patch
input-elan_i2c-validate-firmware-size-before-use.patch
input-xpad-fix-out-of-bounds-access-for-share-button.patch
ipc-limit-next_id-allocation-to-the-valid-id-range.patch
kvm-arm64-correctly-cap-zcr_el2-provided-by-a-guest-hypervisor.patch
kvm-arm64-pmu-preserve-aarch32-counter-low-bits.patch
kvm-sev-check-psc-request-indices-against-the-actual-size-of-the-buffer.patch
kvm-sev-compute-the-correct-max-length-of-the-in-ghcb-scratch-area.patch
kvm-sev-don-t-explicitly-pass-psc-buffer-to-snp_begin_psc.patch
kvm-sev-ignore-port-i-o-requests-of-length-0.patch
kvm-sev-require-in-ghcb-scratch-area-if-ghcb-v2-is-in-use.patch
kvm-sev-use-read_once-when-reading-entries-indices-from-psc-buffer.patch
kvm-sev-use-the-size-of-the-psc-header-as-the-minimum-size-for-psc-requests.patch
kvm-sev-warn-if-kvm-attempts-to-setup-scratch-area-with-min_len-0.patch
kvm-svm-flush-the-current-tlb-when-transitioning-from-xavic-x2avic.patch
memfd-deny-writeable-mappings-when-implying-seal_write.patch
mm-damon-sysfs-schemes-delete-tried-region-in-regions_rmdirs.patch
mm-memcontrol-propagate-nmi-slab-stats-to-memcg-vmstats.patch
mm-rmap-initialize-nr_pages-to-1-at-loop-start-in-try_to_unmap_one.patch
parport-fix-race-between-port-and-client-registration.patch
rust_binder-avoid-calling-pending_oneway_finished-on-tf_update_txn.patch
rust_binder-avoid-holding-lock-when-dropping-delivered_death.patch
smb-client-fix-uninitialized-variable-in-smb2_writev_callback.patch
usb-cdc-acm-fix-bit-overlap-and-move-quirk-definitions-to-header.patch
usb-cdns3-gadget-fix-request-skipping-after-clearing-halt.patch
usb-cdns3-plat-fix-leaked-usb2_phy-initialization-on-usb3_phy-acquisition-failure.patch
usb-cdns3-plat-fix-unbalanced-pm_runtime_forbid-call-permanently-leaks-the-runtime-pm-usage-counter-across-bind-unbind-cycles.patch
usb-dwc2-fix-use-after-free-in-debug-code.patch
usb-serial-omninet-fix-memory-corruption-with-small-endpoint.patch
x86-ftrace-relocate-rip-relative-percpu-refs-in-dynamic-trampolines.patch
65 files changed:
queue-6.18/auxdisplay-line-display-fix-oob-read-on-zero-length-message_store.patch [new file with mode: 0644]
queue-6.18/bluetooth-hci_conn-fix-memory-leak-in-hci_le_big_terminate.patch [new file with mode: 0644]
queue-6.18/bluetooth-hci_qca-use-100-ms-ssr-delay-for-rampatch-and-nvm-loading.patch [new file with mode: 0644]
queue-6.18/bluetooth-hci_sync-fix-uaf-in-hci_le_create_cis_sync.patch [new file with mode: 0644]
queue-6.18/bluetooth-hidp-fix-missing-length-checks-in-hidp_input_report.patch [new file with mode: 0644]
queue-6.18/bluetooth-iso-fix-uaf-in-iso_recv_frame.patch [new file with mode: 0644]
queue-6.18/bluetooth-iso-serialize-iso_sock_clear_timer-with-socket-lock.patch [new file with mode: 0644]
queue-6.18/bluetooth-l2cap-fix-chan-ref-leak-in-l2cap_chan_timeout-on-conn.patch [new file with mode: 0644]
queue-6.18/bluetooth-l2cap-use-chan-timer-to-close-channels-in-cleanup_listen.patch [new file with mode: 0644]
queue-6.18/disable-wattribute-alias-for-clang-23-and-newer.patch [new file with mode: 0644]
queue-6.18/hpfs-fix-a-crash-if-hpfs_map_dnode_bitmap-fails.patch [new file with mode: 0644]
queue-6.18/i2c-davinci-fix-division-by-zero-on-missing-clock-frequency.patch [new file with mode: 0644]
queue-6.18/iio-adc-ad4695-fix-call-ordering-in-offload-buffer-postenable.patch [new file with mode: 0644]
queue-6.18/iio-adc-mt6359-fix-unchecked-return-value-in-mt6358_read_imp.patch [new file with mode: 0644]
queue-6.18/iio-adc-npcm-fix-unbalanced-clk_disable_unprepare.patch [new file with mode: 0644]
queue-6.18/iio-adc-viperboard-fix-error-handling-in-vprbrd_iio_read_raw.patch [new file with mode: 0644]
queue-6.18/iio-adc-xilinx-xadc-fix-sequencer-mode-in-postdisable-for-dual-mux.patch [new file with mode: 0644]
queue-6.18/iio-buffer-fix-dma-fence-leak-in-iio_buffer_enqueue_dmabuf.patch [new file with mode: 0644]
queue-6.18/iio-buffer-hw-consumer-fix-use-after-free-in-error-path.patch [new file with mode: 0644]
queue-6.18/iio-chemical-mhz19b-reject-oversized-serial-replies.patch [new file with mode: 0644]
queue-6.18/iio-chemical-scd30-fix-division-by-zero-in-write_raw.patch [new file with mode: 0644]
queue-6.18/iio-dac-ad3530r-fix-ad3531-ad3531r-powerdown-mode-strings.patch [new file with mode: 0644]
queue-6.18/iio-dac-ad5686-acquire-lock-when-doing-powerdown-control.patch [new file with mode: 0644]
queue-6.18/iio-dac-ad5686-fix-input-raw-value-check.patch [new file with mode: 0644]
queue-6.18/iio-dac-ad5686-fix-powerdown-control-on-dual-channel-devices.patch [new file with mode: 0644]
queue-6.18/iio-dac-ad5686-fix-ref-bit-initialization-for-single-channel-parts.patch [new file with mode: 0644]
queue-6.18/iio-dac-max5821-fix-return-value-check-in-powerdown-sync.patch [new file with mode: 0644]
queue-6.18/iio-fix-iio_multiply_value-use-in-iio_read_channel_processed_scale.patch [new file with mode: 0644]
queue-6.18/iio-gyro-adis16260-fix-division-by-zero-in-write_raw.patch [new file with mode: 0644]
queue-6.18/iio-gyro-itg3200-fix-i2c-read-into-the-wrong-stack-location.patch [new file with mode: 0644]
queue-6.18/iio-light-cm3323-fix-reg_conf-not-being-initialized-correctly.patch [new file with mode: 0644]
queue-6.18/iio-light-veml6070-fix-resource-leak-in-probe-error-path.patch [new file with mode: 0644]
queue-6.18/iio-magnetometer-st_magn-fix-default-drdy-pin-selection-for-lis2mdl.patch [new file with mode: 0644]
queue-6.18/iio-ssp_sensors-cancel-delayed-work_refresh-on-remove.patch [new file with mode: 0644]
queue-6.18/iio-temperature-tsys01-fix-broken-prom-checksum-validation.patch [new file with mode: 0644]
queue-6.18/input-elan_i2c-validate-firmware-size-before-use.patch [new file with mode: 0644]
queue-6.18/input-xpad-fix-out-of-bounds-access-for-share-button.patch [new file with mode: 0644]
queue-6.18/ipc-limit-next_id-allocation-to-the-valid-id-range.patch [new file with mode: 0644]
queue-6.18/kvm-arm64-correctly-cap-zcr_el2-provided-by-a-guest-hypervisor.patch [new file with mode: 0644]
queue-6.18/kvm-arm64-pmu-preserve-aarch32-counter-low-bits.patch [new file with mode: 0644]
queue-6.18/kvm-sev-check-psc-request-indices-against-the-actual-size-of-the-buffer.patch [new file with mode: 0644]
queue-6.18/kvm-sev-compute-the-correct-max-length-of-the-in-ghcb-scratch-area.patch [new file with mode: 0644]
queue-6.18/kvm-sev-don-t-explicitly-pass-psc-buffer-to-snp_begin_psc.patch [new file with mode: 0644]
queue-6.18/kvm-sev-ignore-port-i-o-requests-of-length-0.patch [new file with mode: 0644]
queue-6.18/kvm-sev-require-in-ghcb-scratch-area-if-ghcb-v2-is-in-use.patch [new file with mode: 0644]
queue-6.18/kvm-sev-use-read_once-when-reading-entries-indices-from-psc-buffer.patch [new file with mode: 0644]
queue-6.18/kvm-sev-use-the-size-of-the-psc-header-as-the-minimum-size-for-psc-requests.patch [new file with mode: 0644]
queue-6.18/kvm-sev-warn-if-kvm-attempts-to-setup-scratch-area-with-min_len-0.patch [new file with mode: 0644]
queue-6.18/kvm-svm-flush-the-current-tlb-when-transitioning-from-xavic-x2avic.patch [new file with mode: 0644]
queue-6.18/memfd-deny-writeable-mappings-when-implying-seal_write.patch [new file with mode: 0644]
queue-6.18/mm-damon-sysfs-schemes-delete-tried-region-in-regions_rmdirs.patch [new file with mode: 0644]
queue-6.18/mm-memcontrol-propagate-nmi-slab-stats-to-memcg-vmstats.patch [new file with mode: 0644]
queue-6.18/mm-rmap-initialize-nr_pages-to-1-at-loop-start-in-try_to_unmap_one.patch [new file with mode: 0644]
queue-6.18/parport-fix-race-between-port-and-client-registration.patch [new file with mode: 0644]
queue-6.18/rust_binder-avoid-calling-pending_oneway_finished-on-tf_update_txn.patch [new file with mode: 0644]
queue-6.18/rust_binder-avoid-holding-lock-when-dropping-delivered_death.patch [new file with mode: 0644]
queue-6.18/series
queue-6.18/smb-client-fix-uninitialized-variable-in-smb2_writev_callback.patch [new file with mode: 0644]
queue-6.18/usb-cdc-acm-fix-bit-overlap-and-move-quirk-definitions-to-header.patch [new file with mode: 0644]
queue-6.18/usb-cdns3-gadget-fix-request-skipping-after-clearing-halt.patch [new file with mode: 0644]
queue-6.18/usb-cdns3-plat-fix-leaked-usb2_phy-initialization-on-usb3_phy-acquisition-failure.patch [new file with mode: 0644]
queue-6.18/usb-cdns3-plat-fix-unbalanced-pm_runtime_forbid-call-permanently-leaks-the-runtime-pm-usage-counter-across-bind-unbind-cycles.patch [new file with mode: 0644]
queue-6.18/usb-dwc2-fix-use-after-free-in-debug-code.patch [new file with mode: 0644]
queue-6.18/usb-serial-omninet-fix-memory-corruption-with-small-endpoint.patch [new file with mode: 0644]
queue-6.18/x86-ftrace-relocate-rip-relative-percpu-refs-in-dynamic-trampolines.patch [new file with mode: 0644]