]> git.ipfire.org Git - thirdparty/kernel/stable-queue.git/commit
6.6-stable patches
authorGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 20 Jul 2026 15:24:21 +0000 (17:24 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 20 Jul 2026 15:24:21 +0000 (17:24 +0200)
commitae17ade4ed1a31af233736549e2d862cfd66cc3d
treec56f4a391afce19195a53eedd06096e3876e48c0
parent769d3b446a4ed0fa3dd26a6cd89002486fbd571c
6.6-stable patches

added patches:
bpf-add-missing-access_ok-call-to-copy_user_syms.patch
bpf-fork-wipe-bpf_storage-before-bailouts-that-access-it.patch
bus-mhi-ep-protect-mhi_ep_handle_syserr-in-the-error-path.patch
can-bcm-add-missing-rcu-list-annotations-and-operations.patch
can-bcm-defer-rx_op-deallocation-to-workqueue-to-fix-thrtimer-uaf.patch
can-bcm-fix-lockless-bound-ifindex-race-and-silent-rx_setup-failure.patch
can-esd_usb-kill-anchored-urbs-before-freeing-netdevs.patch
can-isotp-use-unconditional-synchronize_rcu-in-isotp_release.patch
dm-bufio-fix-wrong-count-calculation-in-dm_bufio_issue_discard.patch
dm-era-fix-out-of-bounds-memory-access-for-non-zero-start-sector.patch
dm-integrity-don-t-increment-hash_offset-twice.patch
dm-ioctl-fix-a-possible-overflow-in-list_version_get_info.patch
dm-log-fix-a-bitset_size-overflow-on-32bit-machines.patch
dm-stats-fix-dm_jiffies_to_msec64.patch
dm-stats-fix-merge-accounting.patch
dm-thin-metadata-fix-metadata-snapshot-consistency-on-commit-failure.patch
dm-thin-metadata-fix-superblock-refcount-leak-on-snapshot-shadow-failure.patch
dm-verity-fix-a-possible-null-pointer-dereference.patch
dm-verity-increase-sprintf-buffer-size.patch
dm_early_create-fix-freeing-used-table-on-dm_resume-failure.patch
dmaengine-dw-edma-add-spinlock-to-protect-done_int_mask-and-abort_int_mask.patch
dmaengine-tegra-fix-burst-size-calculation.patch
fpga-dfl-add-bounds-check-in-dfh_get_param_size.patch
fpga-microchip-spi-fix-zero-header_size-oob-read-in-mpf_ops_parse_header.patch
hwmon-ltc2992-add-missing-select-regmap_i2c-to-kconfig.patch
i2c-mediatek-fix-wrrd-for-socs-without-auto_restart-option.patch
i2c-mlxbf-fix-use-after-free-in-mlxbf_i2c_init_resource.patch
ice-fix-ice_init_link-error-return-preventing-probe.patch
irqchip-crossbar-use-correct-index-in-crossbar_domain_free.patch
ksmbd-fix-integer-overflow-in-set_file_allocation_info.patch
mtd-maps-vmu-flash-fix-null-pointer-dereference-in-initialization.patch
mtd-spi-nor-swp-improve-locking-user-experience.patch
net-sparx5-unregister-blocking-notifier-on-init-failure.patch
net-thunderbolt-fix-frags-overflow-by-bounding-frame_count.patch
nvmet-rdma-handle-inline-data-with-a-nonzero-offset.patch
platform-x86-amd-pmc-add-delay_suspend-module-parameter.patch
platform-x86-amd-pmc-check-for-intermediate-wakeup-in-function.patch
platform-x86-amd-pmc-delay-suspend-for-some-lenovo-laptops.patch
scsi-elx-efct-fix-i-o-leak-on-unsupported-additional-cdb.patch
scsi-elx-efct-fix-refcount-leak-in-efct_hw_io_abort.patch
scsi-hpsa-fix-dma-mapping-leak-on-ioaccel2-reset-path.patch
scsi-lpfc-fix-memory-leak-in-lpfc_sli4_driver_resource_setup.patch
scsi-sg-report-request-table-problems-when-any-status-is-set.patch
scsi-target-bound-pr-out-transportid-parsing-to-the-received-buffer.patch
scsi-target-core-fix-iscsi-isid-use-after-free-in-register-and-move.patch
scsi-xen-scsiback-free-the-command-tag-on-the-tmr-submit-failure-path.patch
scsi-xen-scsiback-free-unsubmitted-command-instead-of-double-putting-it.patch
sctp-validate-stale_cookie-cause-length-before-reading-staleness.patch
smb-client-use-kvzalloc-for-megabyte-buffer-in-simple-fallocate.patch
spi-uniphier-fix-completion-initialization-order-before-devm_request_irq.patch
time-fix-off-by-one-in-compat-settimeofday-usec-validation.patch
tpm-fix-event_size-output-in-tpm1_binary_bios_measurements_show.patch
tpm-make-the-tpm-character-devices-non-seekable.patch
tpm-tpm_tis_spi-use-wait_woken-in-wait_for_tmp_stat.patch
xen-gntdev-fix-error-handling-in-ioctl.patch
xfrm-use-compat-translator-only-for-u64-alignment-mismatch.patch
xfrm-xfrm_interface-require-cap_net_admin-in-the-device-netns-for-changelink.patch
58 files changed:
queue-6.6/bpf-add-missing-access_ok-call-to-copy_user_syms.patch [new file with mode: 0644]
queue-6.6/bpf-fork-wipe-bpf_storage-before-bailouts-that-access-it.patch [new file with mode: 0644]
queue-6.6/bus-mhi-ep-protect-mhi_ep_handle_syserr-in-the-error-path.patch [new file with mode: 0644]
queue-6.6/can-bcm-add-missing-rcu-list-annotations-and-operations.patch [new file with mode: 0644]
queue-6.6/can-bcm-defer-rx_op-deallocation-to-workqueue-to-fix-thrtimer-uaf.patch [new file with mode: 0644]
queue-6.6/can-bcm-fix-lockless-bound-ifindex-race-and-silent-rx_setup-failure.patch [new file with mode: 0644]
queue-6.6/can-esd_usb-kill-anchored-urbs-before-freeing-netdevs.patch [new file with mode: 0644]
queue-6.6/can-isotp-use-unconditional-synchronize_rcu-in-isotp_release.patch [new file with mode: 0644]
queue-6.6/dm-bufio-fix-wrong-count-calculation-in-dm_bufio_issue_discard.patch [new file with mode: 0644]
queue-6.6/dm-era-fix-out-of-bounds-memory-access-for-non-zero-start-sector.patch [new file with mode: 0644]
queue-6.6/dm-integrity-don-t-increment-hash_offset-twice.patch [new file with mode: 0644]
queue-6.6/dm-ioctl-fix-a-possible-overflow-in-list_version_get_info.patch [new file with mode: 0644]
queue-6.6/dm-log-fix-a-bitset_size-overflow-on-32bit-machines.patch [new file with mode: 0644]
queue-6.6/dm-stats-fix-dm_jiffies_to_msec64.patch [new file with mode: 0644]
queue-6.6/dm-stats-fix-merge-accounting.patch [new file with mode: 0644]
queue-6.6/dm-thin-metadata-fix-metadata-snapshot-consistency-on-commit-failure.patch [new file with mode: 0644]
queue-6.6/dm-thin-metadata-fix-superblock-refcount-leak-on-snapshot-shadow-failure.patch [new file with mode: 0644]
queue-6.6/dm-verity-fix-a-possible-null-pointer-dereference.patch [new file with mode: 0644]
queue-6.6/dm-verity-increase-sprintf-buffer-size.patch [new file with mode: 0644]
queue-6.6/dm_early_create-fix-freeing-used-table-on-dm_resume-failure.patch [new file with mode: 0644]
queue-6.6/dmaengine-dw-edma-add-spinlock-to-protect-done_int_mask-and-abort_int_mask.patch [new file with mode: 0644]
queue-6.6/dmaengine-tegra-fix-burst-size-calculation.patch [new file with mode: 0644]
queue-6.6/fpga-dfl-add-bounds-check-in-dfh_get_param_size.patch [new file with mode: 0644]
queue-6.6/fpga-microchip-spi-fix-zero-header_size-oob-read-in-mpf_ops_parse_header.patch [new file with mode: 0644]
queue-6.6/hwmon-ltc2992-add-missing-select-regmap_i2c-to-kconfig.patch [new file with mode: 0644]
queue-6.6/i2c-mediatek-fix-wrrd-for-socs-without-auto_restart-option.patch [new file with mode: 0644]
queue-6.6/i2c-mlxbf-fix-use-after-free-in-mlxbf_i2c_init_resource.patch [new file with mode: 0644]
queue-6.6/ice-fix-ice_init_link-error-return-preventing-probe.patch [new file with mode: 0644]
queue-6.6/irqchip-crossbar-use-correct-index-in-crossbar_domain_free.patch [new file with mode: 0644]
queue-6.6/ksmbd-fix-integer-overflow-in-set_file_allocation_info.patch [new file with mode: 0644]
queue-6.6/mtd-maps-vmu-flash-fix-null-pointer-dereference-in-initialization.patch [new file with mode: 0644]
queue-6.6/mtd-spi-nor-swp-improve-locking-user-experience.patch [new file with mode: 0644]
queue-6.6/net-sparx5-unregister-blocking-notifier-on-init-failure.patch [new file with mode: 0644]
queue-6.6/net-thunderbolt-fix-frags-overflow-by-bounding-frame_count.patch [new file with mode: 0644]
queue-6.6/nvmet-rdma-handle-inline-data-with-a-nonzero-offset.patch [new file with mode: 0644]
queue-6.6/platform-x86-amd-pmc-add-delay_suspend-module-parameter.patch [new file with mode: 0644]
queue-6.6/platform-x86-amd-pmc-check-for-intermediate-wakeup-in-function.patch [new file with mode: 0644]
queue-6.6/platform-x86-amd-pmc-delay-suspend-for-some-lenovo-laptops.patch [new file with mode: 0644]
queue-6.6/scsi-elx-efct-fix-i-o-leak-on-unsupported-additional-cdb.patch [new file with mode: 0644]
queue-6.6/scsi-elx-efct-fix-refcount-leak-in-efct_hw_io_abort.patch [new file with mode: 0644]
queue-6.6/scsi-hpsa-fix-dma-mapping-leak-on-ioaccel2-reset-path.patch [new file with mode: 0644]
queue-6.6/scsi-lpfc-fix-memory-leak-in-lpfc_sli4_driver_resource_setup.patch [new file with mode: 0644]
queue-6.6/scsi-sg-report-request-table-problems-when-any-status-is-set.patch [new file with mode: 0644]
queue-6.6/scsi-target-bound-pr-out-transportid-parsing-to-the-received-buffer.patch [new file with mode: 0644]
queue-6.6/scsi-target-core-fix-iscsi-isid-use-after-free-in-register-and-move.patch [new file with mode: 0644]
queue-6.6/scsi-xen-scsiback-free-the-command-tag-on-the-tmr-submit-failure-path.patch [new file with mode: 0644]
queue-6.6/scsi-xen-scsiback-free-unsubmitted-command-instead-of-double-putting-it.patch [new file with mode: 0644]
queue-6.6/sctp-validate-stale_cookie-cause-length-before-reading-staleness.patch [new file with mode: 0644]
queue-6.6/series
queue-6.6/smb-client-use-kvzalloc-for-megabyte-buffer-in-simple-fallocate.patch [new file with mode: 0644]
queue-6.6/spi-uniphier-fix-completion-initialization-order-before-devm_request_irq.patch [new file with mode: 0644]
queue-6.6/time-fix-off-by-one-in-compat-settimeofday-usec-validation.patch [new file with mode: 0644]
queue-6.6/tpm-fix-event_size-output-in-tpm1_binary_bios_measurements_show.patch [new file with mode: 0644]
queue-6.6/tpm-make-the-tpm-character-devices-non-seekable.patch [new file with mode: 0644]
queue-6.6/tpm-tpm_tis_spi-use-wait_woken-in-wait_for_tmp_stat.patch [new file with mode: 0644]
queue-6.6/xen-gntdev-fix-error-handling-in-ioctl.patch [new file with mode: 0644]
queue-6.6/xfrm-use-compat-translator-only-for-u64-alignment-mismatch.patch [new file with mode: 0644]
queue-6.6/xfrm-xfrm_interface-require-cap_net_admin-in-the-device-netns-for-changelink.patch [new file with mode: 0644]