In native/nativesdk builds, sysconfdir refers to a recipe sysroot
directory, which will disappear once the workdir is cleaned up, breaking
libcurl's HTTPS connections.
By simply not setting --with-ca-bundle at all in non-target builds, curl
defaults to the host system's CA certificates, which is desirable anyways
to allow builds in environments that require local CA certificates.
Signed-off-by: Matthias Schiffer <matthias.schiffer@ew.tq-group.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Rasmus Villemoes [Tue, 21 Oct 2025 19:02:39 +0000 (21:02 +0200)]
iptables: remove /etc/ethertypes
When building an image including iptable built with the libnftnl
PACKAGECONFIG, one hits
Downloading file:.../oe-rootfs-repo/armv8a/libkmod2 * check_data_file_clashes: Package iptables wants to install file .../rootfs/etc/ethertypes
But that file is already provided by package * netbase
This used to be handled by
0003-Makefile.am-do-not-install-etc-ethertypes.patch, but that patch
got removed with the 1.8.9->1.8.10 upgrade (commit 4616ada82e70).
I think the rationale for dropping the patch was wrong; the commit log
talks about xtables.conf, which is indeed gone from upstream, but said
patch didn't change anything about xtables.conf, it did
However, instead of patching iptables to not install ethertypes, and
having to forward-port that patch, it is much simpler to just remove
the file in this do_install:append.
Signed-off-by: Rasmus Villemoes <rasmus.villemoes@prevas.dk> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Uwe Kleine-König <u.kleine-koenig@baylibre.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Daniel Semkowicz [Tue, 14 Oct 2025 08:33:08 +0000 (10:33 +0200)]
gstreamer1.0-plugins-bad: fix buffer allocation fail for v4l2codecs
There is a bug in GStreamer 1.22 that prevents video playback when
some of the v4l2codecs are paired with sinks that do not support
GstVideoMeta. This is the case of the Qt 6.9 sink used by some
of the Qt components.
For example, when the v4l2codecs-vp8dec decoder is paired with
QMediaPlayer, video playback fails to start with the following error:
WARN videodecoder gstvideodecoder.c:4409:gst_video_decoder_negotiate_pool: Subclass failed to decide allocation
ERROR videodecoder gstvideodecoder.c:4635:gst_video_decoder_allocate_output_buffer: Failed to allocate the buffer..
WARN videodecoder gstvideodecoder.c:4409:gst_video_decoder_negotiate_pool: Subclass failed to decide allocation
WARN matroskademux matroska-demux.c:6131:gst_matroska_demux_loop: error: Internal data stream error.
WARN matroskademux matroska-demux.c:6131:gst_matroska_demux_loop: error: streaming stopped, reason not-negotiated (-4)
This problem is already fixed in GStreamer 1.24, so backport the fix.
This fixes the buffer allocation failure for H.264, H.265, and VP8.
CC: Steve Sakoman <steve@sakoman.com> CC: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Daniel Semkowicz <dse@thaumatec.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
../../flex-2.6.4/src/../lib/malloc.c:6:12: warning: conflicting types for built-in function ‘malloc’; expected ‘void *(long unsigned int)’ [-Wbuiltin-declaration-mismatch]
6 | void *malloc ();
| ^~~~~~
../../flex-2.6.4/src/../lib/malloc.c:5:1: note: ‘malloc’ is declared in header ‘<stdlib.h>’
4 | #include <sys/types.h>
+++ |+#include <stdlib.h>
5 |
../../flex-2.6.4/src/../lib/malloc.c: In function ‘rpl_malloc’:
../../flex-2.6.4/src/../lib/malloc.c:16:15: error: too many arguments to function ‘malloc’; expected 0, have 1
16 | return malloc (n);
| ^~~~~~ ~
../../flex-2.6.4/src/../lib/malloc.c:6:12: note: declared here
6 | void *malloc ();
| ^~~~~~
make[2]: *** [Makefile:1431: ../lib/stage1flex-malloc.o] Error 1
Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Soumya Sambu [Fri, 24 Oct 2025 13:21:03 +0000 (18:51 +0530)]
elfutils: Fix CVE-2025-1377
A vulnerability, which was classified as problematic, has been found in GNU elfutils
0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the
component eu-strip. The manipulation leads to denial of service. The attack needs to
be approached locally. The exploit has been disclosed to the public and may be used.
The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is
recommended to apply a patch to fix this issue.
Soumya Sambu [Fri, 24 Oct 2025 13:20:47 +0000 (18:50 +0530)]
elfutils: Fix CVE-2025-1376
A vulnerability classified as problematic was found in GNU elfutils 0.192. This
vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c
of the component eu-strip. The manipulation leads to denial of service. It is
possible to launch the attack on the local host. The complexity of an attack is
rather high. The exploitation appears to be difficult. The exploit has been
disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to
fix this issue.
Peter Marko [Tue, 21 Oct 2025 19:19:57 +0000 (21:19 +0200)]
expat: patch CVE-2025-59375
Pick patch from PR mentioning this CVE [1]
It's a complex patch so I have checked diff of 2.6.4 and commit before
these patches landed. There were no changes in memory allocations.
Also version in scarthgap is still not that much different from current
upstream master.
Ptests pass.
Also picked one documentation commit (-00) to resolve patch conflict.
Following conflicts were resolved manually:
* commit "mass-cppcheck.sh: Activate in-code suppression comments" was
skipped as it only edited github actions not yet available in 2.6.4
* commit "lib: Implement tracking of dynamic memory allocations"
ale had conflict in github actions not yet available in 2.6.4
* commit "fuzz: Be robust towards NULL return from XML_ExternalEntityParserCreate"
edited file "expat/fuzz/xml_lpm_fuzzer.cpp" which is not present in
our version yet. Since we're not using fuzzying, this is not needed.
* the final changelog commit needed lot conflict resolution actions
Finally picked PR fixing regression [2] together with two minor commits
to have a clean cherry-picks.
Also here the Changes commit needed conflict resolution.
Anders Heimer [Tue, 21 Oct 2025 13:59:22 +0000 (15:59 +0200)]
libpam: mark CVE-2025-6018 as not applicable
CVE-2025-6018 is a local privilege escalation in PAM that requires
`user_readenv=1` to be enabled in the PAM configuration. The default
configuration does not enable reading user environment files (user_readenv
is 0 by default). Hence this vulnerability cannot be exploited using the
default configuration.
Signed-off-by: Anders Heimer <anders.heimer@est.tech> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Michael Haener [Wed, 15 Oct 2025 20:41:31 +0000 (22:41 +0200)]
oeqa/runtime/ping: don't bother trying to ping localhost
If SLIRP is being used instead of TAP for networking to the guest then
the target IP will be localhost. There's no point in pinging localhost
to see if the target is up but whilst you'd think it is harmless, in
some containers ping doesn't actually have enough rights to work:
ping: socktype: SOCK_RAW
ping: socket: Operation not permitted
ping: => missing cap_net_raw+p capability or setuid?
Look at the target address and if it's localhost or 127.0.0.* return
immediately.
icu: Backport patch to fix build issues with long paths (>512 chars)
There is a bug libicu that causes libicu to be installed incorrectly when
the build system uses long paths (more than 512 chars).
This condition is not very difficult to trigger on a OE build system
due to the long paths an the deep of the directories that are usually
generated by default.
Also the bug is very subtle and won't be detected by the QA post-install
processes because what this bug causes is that a different version of
libicudata.so.X.Y (one without data) is installed instead of the one
containing the data, but there won't be any file missed on the installation
(just that it installed the wrong one).
Signed-off-by: Carlos Alberto Lopez Perez <clopez@igalia.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Benjamin Hahn <B.Hahn@phytec.de> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Peter Marko [Thu, 16 Oct 2025 16:11:53 +0000 (18:11 +0200)]
python3: upgrade 3.12.11 -> 3.12.12
Drop upstreamed patch and refresh remaining patches.
Release information:
* https://www.python.org/downloads/release/python-31212/
* The release you're looking at is Python 3.12.12, a security bugfix
release for the legacy 3.12 series.
Handles CVE-2025-59375.
Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Bruce Ashfield [Thu, 16 Oct 2025 03:14:19 +0000 (23:14 -0400)]
linux-yocto/6.6: update to v6.6.109
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:
f34f16e5c6323 Linux 6.6.109 eb53056323f13 drm/i915/backlight: Return immediately when scale() finds invalid parameters 4529bb0b6be3d minmax.h: remove some #defines that are only expanded once 1a899044a0f5a minmax.h: simplify the variants of clamp() 9955044f552b5 minmax.h: move all the clamp() definitions after the min/max() ones 26c3d697becf3 minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp() 511e7d2e4d51f minmax.h: reduce the #define expansion of min(), max() and clamp() 85d619594313e minmax.h: update some comments 6012f69bf7495 minmax.h: add whitespace around operators and after commas 46648b94e6ebb minmax: fix up min3() and max3() too f0be4c5dc213d minmax: improve macro expansion and type checking 7194a302345da minmax: don't use max() in situations that want a C constant expression bb63c996c2db0 minmax: simplify min()/max()/clamp() implementation 6183c6579356a minmax: make generic MIN() and MAX() macros available everywhere c0c83f4cd074b i40e: add validation for ring_len param 6e4251690710d i40e: increase max descriptors for XL710 7ea47a560a7a3 drm/ast: Use msleep instead of mdelay for edid read ed6fa21f68973 gpiolib: Extend software-node support to support secondary software-nodes 457d2c5e112fd loop: Avoid updating block size under exclusive owner 78f579cb7d825 mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() e7a85efb873fa mm: migrate_device: use more folio in migrate_device_finalize() 684a9a995748c ARM: bcm: Select ARM_GIC_V3 for ARCH_BRCMSTB 53888cd32a3f6 s390/cpum_cf: Fix uninitialized warning after backport of ce971233242b 09e3bda3a7ba2 fbcon: Fix OOB access in font allocation adac90bb1aaf4 fbcon: fix integer overflow in fbcon_do_set_font c9c2a51f91aea mm/hugetlb: fix folio is still mapped when deleted df1fa034c0fc2 kmsan: fix out-of-bounds access to shadow memory cab278cead49a afs: Fix potential null pointer dereference in afs_put_server 58d304a89178d ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address 3887f3814c0e7 tracing: dynevent: Add a missing lockdown check on dynevent 8703940bd30b5 crypto: af_alg - Fix incorrect boolean values in af_alg_ctx b769490521cf9 i40e: improve VF MAC filters accounting b247cdd04750e i40e: add mask to apply valid bits for itr_idx edecce7abd715 i40e: add max boundary check for VF filters e748f1ee493f8 i40e: fix validation of VF state in get resources 3883e9702b6a4 i40e: fix input validation logic for action_meta 2cc26dac0518d i40e: fix idx validation in config queues msg 50a1e2f50f6c2 i40e: fix idx validation in i40e_validate_queue_map 3cefd898b7aa1 HID: asus: add support for missing PX series fn keys ba7bcfd52c66d smb: client: fix wrong index reference in smb2_compound_op() 348736955ed6c futex: Prevent use-after-free during requeue-PI 6ffa6b5bc861a drm/gma500: Fix null dereference in hdmi teardown df2c071061ed5 octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() 7b209698e648b net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port 816d30afbad52 net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() a7a2b29c1ee44 net: dsa: lantiq_gswip: do also enable or disable cpu port be0bd592298f8 selftests: fib_nexthops: Fix creation of non-FDB nexthops 24046d31f6f92 nexthop: Forbid FDB status change while nexthop is in a group 31ae2fbc9fcb9 net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS 98a76bd96f382 bnxt_en: correct offset handling for IPv6 destination address 82a1463c968b1 vhost: Take a reference on the task in struct vhost_task. bcce99f613163 Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync 6a0070c5c3ad3 Bluetooth: hci_sync: Fix hci_resume_advertising_sync c957284701353 ethernet: rvu-af: Remove slash from the driver name 17edec1830e48 can: peak_usb: fix shift-out-of-bounds issue 3664ae91b26d1 can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow 2e423e1990f39 can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow be1b25005fd0f can: hi311x: populate ndo_change_mtu() to prevent buffer overflow cbc1de71766f3 can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow 0baf92d0b1590 xfrm: xfrm_alloc_spi shouldn't use 0 as SPI f64abeebf763c bpf: Reject bpf_timer for PREEMPT_RT 865eec09b6e44 can: rcar_can: rcar_can_resume(): fix s2ram with PSCI 210b91bfe355b wifi: virt_wifi: Fix page fault on connect c5be7edd42602 smb: server: don't use delayed_work for post_recv_credits_work 6017196aabf1d cpufreq: Initialize cpufreq-based invariance before subsys 35bb271de241d ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients ebe7a2e46d189 arm64: dts: imx8mp: Correct thermal sensor index 1744aff07b833 mm: folio_may_be_lru_cached() unless folio_test_large() d37ec803b2813 mm/gup: local lru_add_drain() to avoid lru_add_drain_all() 768c44cc8b638 mm/gup: check ref_count instead of lru before migration dc58ab1eb90c9 mm: add folio_expected_ref_count() for reference count calculation 4ed203f79821c mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked" df2580fbcedea IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions 943754ad81131 ALSA: usb-audio: Add mute TLV for playback volumes on more devices 0aac2fa4d0c75 ALSA: usb-audio: move mixer_quirks' min_mute into common quirk ea6016c9ec61d ALSA: usb-audio: Add DSD support for Comtrue USB Audio device b61b90b07416f i2c: designware: Add quirk for Intel Xe 41ea28a2de255 mmc: sdhci-cadence: add Mobileye eyeQ support 306697a775fbc usb: core: Add 0x prefix to quirks debug output dc77154e83048 ALSA: usb-audio: Fix build with CONFIG_INPUT=n a3961b1f7f79e ALSA: usb-audio: Convert comma to semicolon d04d301614630 ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 8fa69bd18148e ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks 9db2614986bd0 ALSA: usb-audio: Simplify NULL comparison in mixer_quirks e8c605fece5b9 ALSA: usb-audio: Avoid multiple assignments in mixer_quirks bafc648b82c3b ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks 08a96e22bd37f ALSA: usb-audio: Fix block comments in mixer_quirks 18f9e77de5272 firewire: core: fix overlooked update of subsystem ABI version ca3e48e96816c scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Bruce Ashfield [Thu, 16 Oct 2025 03:14:18 +0000 (23:14 -0400)]
linux-yocto/6.6: update to v6.6.108
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:
147338df3487 Linux 6.6.108 42a6aeb4b238 Revert "loop: Avoid updating block size under exclusive owner" 06146c26f5cf minmax: add a few more MIN_T/MAX_T users af8b531ecfd4 minmax: simplify and clarify min_t()/max_t() implementation 2d396aa8264d minmax: avoid overly complicated constant expressions in VM code 532733ff82b9 mptcp: propagate shutdown to subflows when possible 3ef938f6f0b3 rtc: pcf2127: fix SPI command byte for PCF2131 backport 075abf0b1a95 iommu/amd/pgtbl: Fix possible race while increase page table level 564f2312e2ff xhci: dbc: Fix full DbC transfer ring after several reconnects 3c6dd29a460f xhci: dbc: decouple endpoint allocation from initialization 27b04564f7a3 phy: ti: omap-usb2: fix device leak at unbind 34a8d5a198bb phy: Use device_get_match_data() 0ee0ef483aae selftests: mptcp: userspace pm: validate deny-join-id0 flag 650150cc9a3e mptcp: pm: nl: announce deny-join-id0 flag a6157484bee3 vmxnet3: unregister xdp rxq info in the reset path e7b7a9387955 smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path 2374c11189ef crypto: af_alg - Set merge to zero early in af_alg_sendmsg 6a075f80f303 drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path 15a77e1ab0a9 drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ e6b0616a360f ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message 7740da20a3a0 ASoC: wm8974: Correct PLL rate rounding b4e8741955dc ASoC: wm8940: Correct typo in control name b7e4884dd853 ASoC: wm8940: Correct PLL rate rounding abc9f859a9ea io_uring: include dying ring in task_work "should cancel" state c8e69b783bc4 io_uring: backport io_should_terminate_tw() 115e7d4d5ee8 ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx 0a3d5a4d4adc selftests: mptcp: avoid spurious errors on TCP disconnect 9ef1af5d4040 selftests: mptcp: connect: catch IO errors on listen side 666b49c848f1 rds: ib: Increment i_fastreg_wrs before bailing out 689aee35ce67 net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer 7e4c3cd7f0a1 KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active 6584e7ecfa7d mmc: mvsdio: Fix dma_unmap_sg() nents value ac4e940dc7da ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S 411f7d4f7038 ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed 468bb23472b7 ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface fc7bd02dadb8 btrfs: tree-checker: fix the incorrect inode ref size check 090b61b87420 iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page() 561eef41aaa3 LoongArch: Check the return value when creating kobj 2ff7ef2f71b4 LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled fb6ee62d3082 LoongArch: Update help info of ARCH_STRICT_ALIGN 90c0ffa1e0d9 power: supply: bq27xxx: restrict no-battery detection to bq27000 84ac57c4bbfd power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery 7c4491b5644e crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg ee74d69af170 nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* d3cb3f209d35 ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size eb0378dde086 ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer d2cfefa14ce8 octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() 8eeb2091e72d cnic: Fix use-after-free bugs in cnic_delete_task cd093e8bdcfe net: liquidio: fix overflow in octeon_init_instr_queue() 13f57d484676 Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set" 4cefe5be7388 tls: make sure to abort the stream if headers are bogus dfd06131107e tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). 97d797c5fc6f bonding: don't set oif to bond dev when getting NS target destination 2cb17c88edd3 net/mlx5e: Harden uplink netdev access against device unbind fd74bd40f1a4 net/mlx5e: Consider aggregated port speed during rate configuration a7f10a466d36 i40e: remove redundant memory barrier when cleaning Tx descs 0255c5100470 net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure af114ef225e5 selftests: mptcp: sockopt: fix error messages dedaa9bcf79c mptcp: tfo: record 'deny join id0' info 36d9f72e5d66 mptcp: set remote_deny_join_id0 on SYN recv 29a5fd482cd5 bonding: set random address only when slaves already exist ea53e6a47e14 qed: Don't collect too many protection override GRC elements 2f4b68e7905e dpaa2-switch: fix buffer pool seeding for control traffic 4f364023ddcf um: virtio_uml: Fix use-after-free after put_device in probe 5d2c34ff78b8 btrfs: fix invalid extref key setup when replaying dentry 4a1e3ec28e80 cgroup: split cgroup_destroy_wq into 3 workqueues 9ba2b399dee2 pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch eae22a2573a0 wifi: mac80211: fix incorrect type for ret 93e063f15e17 wifi: mac80211: increase scan_ies_len for S1G 0ffb49ba247c ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported 6085291a1a58 wifi: wilc1000: avoid buffer overflow in WID string configuration
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Bruce Ashfield [Thu, 16 Oct 2025 03:14:17 +0000 (23:14 -0400)]
linux-yocto/6.6: update to v6.6.107
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:
no ids found, dumping: af1544b5d072 Linux 6.6.107 f075a33ef204 x86: disable image size check for test builds 23f24d0a538e drm/i915/power: fix size for for_each_set_bit() in abox iteration 0a87bf8bd5d7 drm/amdgpu: fix a memory leak in fence cleanup when unloading d70b5910ca31 net: mdiobus: release reset_gpio in mdiobus_unregister_device() cce57cd8c5de ksmbd: fix null pointer dereference in alloc_preauth_hash() ce807c4c88d2 phy: ti-pipe3: fix device leak at unbind 7c89ea3ab302 phy: tegra: xusb: fix device and OF node leak at probe 221f6739369b dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate ebf6c7c908e5 dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees e0727853992a usb: gadget: midi2: Fix MIDI2 IN EP max packet size a04b32b0ec1b usb: gadget: midi2: Fix missing UMP group attributes initialization bea1946b6919 USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels 26f296e4c497 xhci: fix memory leak regression when freeing xhci vdev devices depth first 0d861bc0b5c4 RISC-V: Remove unnecessary include from compat.h 156677ea10ba hrtimers: Unconditionally update target CPU base after offline timer migration b1fa39fb3026 hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active() 6276a6b2c84e hrtimer: Remove unused function c504b5aaaaa5 regulator: sy7636a: fix lifecycle of power good gpio 1baed10553fc dmaengine: ti: edma: Fix memory allocation size for queue_priority_map df82c7901513 dmaengine: idxd: Fix double free in idxd_setup_wqs() f0e460925679 dmaengine: idxd: Fix refcount underflow on module unload 0e95ee7f532b dmaengine: idxd: Remove improper idxd_free 608c14c671a8 hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr b072e32e0874 hsr: use rtnl lock when iterating over ports 72dbae1f2f21 net: hsr: Add VLAN CTAG filter support 64a58ae64da5 net: hsr: Add support for MC filtering at the slave device 94b050726288 can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB deedea599e87 can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails 1e1adfffd3fe can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed 23431998a377 i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path ff00b2ed7c64 igb: fix link test skipping when interface is admin down e450b4966f72 docs: networking: can: change bcm_msg_head frames member to support flexible array e6867c0ae100 tunnels: reset the GSO metadata before reusing the skb 5e84e18f6727 net: bridge: Bounce invalid boolopts fe78891f296a net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() 092e5703d400 Disable SLUB_TINY for build testing 8a8f093e621c USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions e88b7810b43e USB: serial: option: add Telit Cinterion FN990A w/audio compositions bb3498089f86 dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks a0da801d3ea0 serial: sc16is7xx: fix bug in flow control levels init 1e92afef6061 tty: hvc_console: Call hvc_kick in hvc_write unconditionally af253b1a5daa Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups" 7bd41f9c96dd Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table 27e126072ee0 Input: iqs7222 - avoid enabling unused interrupts 854baafc00c4 kernfs: Fix UAF in polling when open file is released 5de7b4141af1 cifs: fix pagecache leak when do writepages 9f4b38ad41d6 mm/khugepaged: fix the address passed to notifier on testing young c95c22402b00 mm/khugepaged: convert hpage_collapse_scan_pmd() to use folios 394547b9113f btrfs: fix corruption reading compressed range when block size is smaller than page size a29f891d4f37 btrfs: use readahead_expand() on compressed extents 7bb675c9f025 mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() 9fe0415156fb mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() 60d7a3d2b985 mm/damon/sysfs: fix use-after-free in state_show() 23538cfbeed8 libceph: fix invalid accesses to ceph_connection_v1_info b97edd195442 mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing 252bc25d7aac mtd: nand: raw: atmel: Fix comment in timings preparation cfdde9197ecd drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages 9adb902be26b drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time b2fbe0f9f80b drm/mediatek: fix potential OF node use-after-free 6632845292a4 mm/damon/core: set quota->charged_from to jiffies at first charge window 3d278e89c2ea mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory 8577ded2ee3d fuse: prevent overflow in copy_file_range return value 01e1eba64860 fuse: check if copy_file_range() returns larger than requested size c50336dfcb24 mtd: rawnand: stm32_fmc2: fix ECC overwrite 06d8ef8f8537 mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer 31dc1603aa43 net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups 9d55370cc4e2 i2c: i801: Hide Intel Birch Stream SoC TCO WDT 0709bc11b942 ocfs2: fix recursive semaphore deadlock in fiemap call 8345a93b9bda mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN e69f61b8c08e compiler-clang.h: define __SANITIZE_*__ macros only when undefined deedce87471e Revert "SUNRPC: Don't allow waiting for exiting tasks" 6f628d7dd8ac EDAC/altera: Delete an inappropriate dma_free_coherent() call 2089d8a316f4 KVM: SVM: Set synthesized TSA CPUID flags 2b8a1969cae5 rcu-tasks: Maintain real-time response in rcu_tasks_postscan() d89abc4fbee8 rcu-tasks: Eliminate deadlocks involving do_exit() and RCU tasks 4e86206b6967 rcu-tasks: Maintain lists to eliminate RCU-tasks/do_exit() deadlocks 8be3d52101b0 proc: fix type confusion in pde_set_flags() 66bcb04a441f tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. 449682e76f32 bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() d660c8d8142e s390/cpum_cf: Deny all sampling events by counter PMU 1262bda871da tracing: Silence warning when chunk allocation fails in trace_pid_write 69d99a936f00 NFSv4/flexfiles: Fix layout merge mirror check. c288e4c39d21 NFSv4.2: Serialise O_DIRECT i/o and copy range 9f2fdb18d0bf NFSv4.2: Serialise O_DIRECT i/o and clone range 4089fd70a508 NFSv4.2: Serialise O_DIRECT i/o and fallocate() 320a0954e2c8 NFS: Serialise O_DIRECT i/o and truncate() 275d9fd06d96 fs/nfs/io: make nfs_start_io_*() killable 06c26a679029 ftrace/samples: Fix function size computation f7ec68cc74d8 tracing: Fix tracing_marker may trigger page fault during preempt_disable 781ec30354e6 NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server b39234ede545 NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set a022c9a46455 NFSv4: Don't clear capabilities that won't be reset 9339b4e75a81 SUNRPC: call xs_sock_process_cmsg for all cmsg fd00ae04c5aa flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read 0214b96a6a63 ima: limit the number of ToMToU integrity violations 905d43b8ad24 net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. 9da2a9d3ccd8 media: i2c: imx214: Fix link frequency validation 817a962db3f3 NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs() 913ff520714f nfsd: Fix a regression in nfsd_setattr() 392260eb8e67 kasan: fix GCC mem-intrinsic prefix with sw tags d699575d00ff mm: introduce and use {pgd,p4d}_populate_kernel() 3f8810b2d22d kunit: kasan_test: disable fortify string checker on kasan_strings() test
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Bruce Ashfield [Thu, 16 Oct 2025 03:14:16 +0000 (23:14 -0400)]
linux-yocto/6.6: update to v6.6.106
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:
no ids found, dumping: 60a9e718726f Linux 6.6.106 3b9e7e5c5298 x86/vmscape: Add old Intel CPUs to affected list 1e1dc1f9edb9 x86/vmscape: Warn when STIBP is disabled with SMT a5d029f1152a x86/bugs: Move cpu_bugs_smt_update() down 34e566704105 x86/vmscape: Enable the mitigation f866eef8d1c6 x86/vmscape: Add conditional IBPB mitigation 813cb831439c x86/vmscape: Enumerate VMSCAPE bug 9d1677060428 Documentation/hw-vuln: Add VMSCAPE documentation fe9731e10004 Linux 6.6.105 be4e6a221467 spi: fsl-qspi: Fix double cleanup in probe error path 054a444b4c17 dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status() b718de5904a6 cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo() d0b26a9f5742 cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE() a44d0904d673 cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo() 524ee2606a30 riscv: use lw when reading int cpu in asm_per_cpu 522ffe298627 mm: slub: avoid wake up kswapd in set_track_prepare ad2df864033e slub: Reflow ___slab_alloc() c866c40d07c4 tools: gpio: remove the include directory on make clean 3c331f7fc5b6 tools: gpio: rm .*.cmd on make clean 7e4f8e09d577 drm/amd/amdgpu: Fix missing error return on kzalloc failure 718c248902dd drm/amdgpu: Replace DRM_* with dev_* in amdgpu_psp.c c9c4635a6d55 perf bpf-event: Fix use-after-free in synthesis 85da7f36d9a0 drm/bridge: ti-sn65dsi86: fix REFCLK setting 1a7d3947a5dd spi: spi-fsl-lpspi: Clear status register after disabling the module cd53048e7460 spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort a339956545a5 spi: spi-fsl-lpspi: Set correct chip-select polarity bit a786ef5f693b spi: spi-fsl-lpspi: Fix transmissions when using CONT 2313baff36d0 hwmon: mlxreg-fan: Prevent fans from getting stuck at 0 RPM 8699358b6ac9 pcmcia: Add error handling for add_interval() in do_validate_mem() 3ee8f5c8938f pcmcia: omap: Add missing check for platform_get_resource 8d7ee56bf530 Revert "drm/amdgpu: Avoid extra evict-restore process." b9cf42a8f034 ALSA: hda/realtek: Fix headset mic for TongFang X6[AF]R5xxY 5f46882be912 ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model 7d98166183d6 drm/mediatek: Fix device/node reference count leaks in mtk_drm_get_all_drm_priv 2c6c9d319017 drm/mediatek: Fix using wrong drm private data to bind mediatek-drm 13d0854e3538 drm/mediatek: Add crtc path enum for all_drm_priv array d5875a478b1b vmxnet3: update MTU after device quiesce 5174ea81d6ca net: dsa: microchip: linearize skb for tail-tagging switches 3b6a5df36604 net: dsa: microchip: update tag_ksz masks for KSZ9477 family 16fea5067092 dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status() dd2b7abd0da3 ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup 7df63b5ddd07 ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA 47aba94a924c iio: pressure: mprls0025pa: use aligned_s64 for timestamp e791bf216c9e iio: light: opt3001: fix deadlock due to concurrent flag access 91da53307391 iio: chemical: pms7003: use aligned_s64 for timestamp fb6a7c1da207 iio: imu: inv_mpu6050: align buffer for timestamp 977849e8acd2 btrfs: adjust subpage bit start based on sectorsize b088ae4e4184 PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads 30d201ee3a37 thermal/drivers/mediatek/lvts: Disable low offset IRQ for minimum threshold 50ae352c1848 spi: fsl-qspi: use devm function instead of driver remove 0ef7058b4dc6 mm/slub: avoid accessing metadata when pointer is invalid in object_err() ba0ccc1be52c nouveau: fix disabling the nonstall irq due to storm code 033f09b647db cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode 83440514ef2a cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization 86cade7791a2 cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller e7f4f16ff167 cpufreq: intel_pstate: Revise global turbo disable check de6b545bcdba Revert "spi: spi-cadence-quadspi: Fix pm runtime unbalance" 94f7d9070382 Revert "spi: cadence-quadspi: fix cleanup of rx_chan on failure paths" f4f7cde70f59 net: pcs: rzn1-miic: Correct MODCTRL register offset 50a84d5c8140 e1000e: fix heap overflow in e1000_set_eeprom 1cfa5dd05847 cifs: prevent NULL pointer dereference in UTF16 conversion bb37252c9af1 batman-adv: fix OOB read/write in network-coding decode d96cc9a1b577 scsi: lpfc: Fix buffer free/clear order in deferred receive path abab31c377cb platform/x86/amd/pmc: Add TUXEDO IB Pro Gen10 AMD to spurious 8042 quirks list 350bfdd2841f drm/amdgpu: drop hw access in non-DC audio fini 9e4293766e4f wifi: mt76: mt7996: Initialize hdr before passing to skb_put_data() 9df29aa5637d wifi: mwifiex: Initialize the chan_stats array to zero bc983b834354 soc: qcom: mdt_loader: Deal with zero e_shentsize 698abcf08818 proc: fix missing pde_set_flags() for net proc files e9188f66e949 ocfs2: prevent release journal inode after journal shutdown f9b8d4dba8e7 sched: Fix sched_numa_find_nth_cpu() if mask offline 6797a8b3f71b mm: move page table sync declarations to linux/pgtable.h 26ff568f390a x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() 2ee32c4c4f63 pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() 50f2f392eb6e arm64: ftrace: fix unreachable PLT for ftrace_caller in init_module with CONFIG_DYNAMIC_FTRACE 90e9372ec0b0 ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids() ad17940a6618 ALSA: usb-audio: Add mute TLV for playback volumes on some devices a4e366fbec8a phy: mscc: Stop taking ts_lock for tx_queue and use its own lock 9b035445b7c9 selftest: net: Fix weird setsockopt() in bind_bhash.c. 85c1c86a67e0 ppp: fix memory leak in pad_compress_skb 01d2690c09e6 net: atm: fix memory leak in atm_register_sysfs when device_register fail 7d449b7a6c8e ax25: properly unshare skbs in ax25_kiss_rcv() 5852cee1d8f6 mctp: return -ENOPROTOOPT for unknown getsockopt options 7f8869586dd6 net/smc: Remove validation of reserved bits in CLC Decline message 90ab05ed47c1 ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init() bee1e19cf1fa net: thunder_bgx: decrement cleanup index before use 4535729550cf net: thunder_bgx: add a missing of_node_put e472f59d02c8 wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() 609f6debdff3 wifi: libertas: cap SSID len in lbs_associate() ccb839602a82 wifi: cw1200: cap SSID length in cw1200_do_join() 61b80fbdc072 net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets 5d7b2d45770e wifi: ath11k: fix group data packet drops during rekey 6bf934426760 wifi: ath11k: avoid forward declaration of ath11k_mac_start_vdev_delay() 38b86b0a37df wifi: ath11k: rename ath11k_start_vdev_delay() 14ed9f84c7c0 wifi: ath11k: Introduce and use ath11k_sta_to_arsta() fb216d980fae i40e: Fix potential invalid access when MAC list is empty f18d9b3abf9c net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync() 668f4f6382c3 macsec: read MACSEC_SA_ATTR_PN with nla_get_uint 1cf0b558cbb7 netlink: add variable-length / auto integers 5430388a8111 net: macb: Fix tx_ptr_lock locking 8d09b13789ba icmp: fix icmp_ndo_send address translation for reply direction 1dda64fb3f5e mISDN: Fix memory leak in dsp_hwec_enable() 9a4abe262df9 xirc2ps_cs: fix register access when enabling FullDuplex 6077d16b5c0f Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() bd75eba88e88 Bluetooth: vhci: Prevent use-after-free by removing debugfs files early 2acc8d3f0a3c netfilter: conntrack: helper: Replace -EEXIST by -EBUSY 50db11e2bbb6 netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm f1150153c4e5 wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work b7d08929178c wifi: cfg80211: fix use-after-free in cmp_bss() 4a05520d12a7 arm64: dts: imx8mp: Fix missing microSD slot vqmmc on Data Modul i.MX8M Plus eDM SBC f7a48ef44576 arm64: dts: imx8mp: Fix missing microSD slot vqmmc on DH electronics i.MX8M Plus DHCOM 5b94a825945a tee: optee: ffa: fix a typo of "optee_ffa_api_is_compatible" 0383e172435f arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro add1ecc8f3ad tee: fix NULL pointer dereference in tee_shm_put bf89b1f87c72 fs: writeback: fix use-after-free in __mark_inode_dirty() 41e168db5942 Bluetooth: hci_sync: Avoid adding default advertising on startup 703ea9e34f96 cpupower: Fix a bug where the -t option of the set subcommand was not working. 2b21fd1cf77e drm/amd/display: Don't warn when missing DCE encoder caps 235a4c0a8aaa cdc_ncm: Flag Intel OEM version of Fibocom L850-GL as WWAN ee58a0a35378 LoongArch: Save LBT before FPU in setup_sigcontext() dc4a024b1990 btrfs: avoid load/store tearing races when checking if an inode was logged 48545620ca8f btrfs: fix race between setting last_dir_index_offset and inode logging 9f76a2e19baf btrfs: fix race between logging inode and checking if it was logged before 7acfa07c585e bpf: Fix oob access in cgroup local storage dbd8ec2261b8 bpf: Move bpf map owner out of common struct 8e573ac21fcd bpf: Move cgroup iterator helpers to bpf.h 3eeefeb9d62d bpf: Add cookie object to bpf maps 355bd0b51d2f Linux 6.6.104 d3cc7476b89f xfs: do not propagate ENODATA disk errors into xattr code 0699faf70413 Revert "drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS" 6c9552de7f7e HID: mcp2221: Handle reads greater than 60 bytes 5a809b34250c HID: mcp2221: Don't set bus speed on every transfer 1b3ccc394807 net/mlx5: SF, Fix add port error handling ea687c003663 net: rose: fix a typo in rose_clear_routes() 4e86e5ba325e drm/nouveau/disp: Always accept linear modifier 1424f6132fc8 smb3 client: fix return code mapping of remap_file_range 3c3321091733 net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions 4191ea1f0bb3 fs/smb: Fix inconsistent refcnt update 4f43a6d376da dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted 8911ec881cd7 Revert "drm/amdgpu: fix incorrect vm flags to map bo" e422370e6ab2 HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() b9166ea27d0a HID: wacom: Add a new Art Pen 2 88d3c2790c33 HID: logitech: Add ids for G PRO 2 LIGHTSPEED 8783b2a0b740 HID: quirks: add support for Legion Go dual dinput modes d4e6e2680807 HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() 5f3c0839b173 HID: asus: fix UAF via HID_CLAIMED_INPUT validation c84ba4cdf4c6 x86/microcode/AMD: Handle the case of no BIOS microcode f49161646e03 KVM: x86: use array_index_nospec with indices that come from guest 925599eba460 efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare 463aa96fca62 sctp: initialize more fields in sctp_v6_from_sk() 9c547c8eee9d net: rose: include node references in rose_neigh refcount f8c29fc437d0 net: rose: convert 'use' field to refcount_t 4998ab3eb2b8 net: rose: split remove and free operations in rose_remove_neigh() b0f8725196ae net: stmmac: Set CIC bit only for TX queues with COE dc38d0111c16 net: stmmac: xgmac: Correct supported speed modes d02d635fc03d net: stmmac: Rename phylink_get_caps() callback to update_caps() ce006b60fc49 net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts 9b0acd3bb291 net/mlx5e: Set local Xoff after FW update dec9d873bdf7 net/mlx5e: Update and set Xon/Xoff upon port speed set cdd96ed12524 net/mlx5e: Update and set Xon/Xoff upon MTU set 3e07c623fbc5 net/mlx5: Nack sync reset when SFs are present a623e80aaa85 net/mlx5: Convert SF port_indices xarray to function_ids xarray a7e9da4d3afb net/mlx5: Use devlink port pointer to get the pointer of container SF struct 25659835c7af net/mlx5: Call mlx5_sf_id_erase() once in mlx5_sf_dealloc() ddac9d0fe249 net/mlx5: Fix lockdep assertion on sync reset unload event 8da591ae2614 net/mlx5: Add support for sync reset using hot reset 6292688e07d0 net/mlx5: Add device cap for supporting hot reset in sync reset flow 09fd27c8621e net/mlx5: Reload auxiliary drivers on fw_activate 7acefa4c66aa phy: mscc: Fix when PTP clock is register and unregister b3c70f6fc258 net: dlink: fix multicast stats being counted incorrectly 589edd3dc8fb dt-bindings: display/msm: qcom,mdp5: drop lut clock dc70ea942fcd ice: fix incorrect counter for buffer allocation failures 05fc7307e352 ice: stop storing XDP verdict within ice_rx_buf 29bcd31ace16 ice: gather page_count()'s of each frag right before XDP prog call 40a9f217cde1 ice: Introduce ice_xdp_buff 4de399767ddc drm/nouveau: remove unused memory target test 32a498445641 drm/nouveau: remove unused increment in gm200_flcn_pio_imem_wr 3c80c230d6e3 atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). 4bd2866db002 Bluetooth: hci_sync: fix set_local_name race condition 961abec8184a Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced f356ed87c78c Bluetooth: hci_event: Mark connection as closed during suspend disconnect 4c549d87f016 Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as success 430786612abe HID: input: report battery status changes immediately 61d733a568d8 HID: input: rename hidinput_set_battery_charge_status() e7d0bd359f4c powerpc/kvm: Fix ifdef to remove build warning 6de90c2a3b6c drm/msm: Defer fd_install in SUBMIT ioctl a208d67cb44b net: ipv4: fix regression in local-broadcast routes 9b2700151660 vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put() 181feb41f0b2 NFS: Fix a race when updating an existing write 9a1963404cc2 nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests b15342e09644 ACPI: EC: Add device to acpi_ec_no_wakeup[] qurik list 612527136e0c erofs: fix atomic context detection when !CONFIG_DEBUG_LOCK_ALLOC 8f8e6a781783 ASoC: codecs: tx-macro: correct tx_macro_component_drv name 24b9ed739c8c smb: client: fix race with concurrent opens in rename(2) bc1427a48371 smb: client: fix race with concurrent opens in unlink(2) 43662b846c7a scsi: core: sysfs: Correct sysfs attributes access rights 28c8fb7ae2ad ftrace: Fix potential warning in trace_printk_seq during ftrace_dump 9e0743eb6dcf of: dynamic: Fix use after free in of_changeset_add_prop_helper() 749137b41e70 of: Add a helper to free property struct d3be2b8cff6f mips: lantiq: xway: sysctrl: rename the etop node e877b861dab9 mips: dts: lantiq: danube: add missing burst length property 6e59b8483e6e pinctrl: STMFX: add missing HAS_IOMEM dependency 43e3118c677a of: dynamic: Fix memleak when of_pci_add_properties() failed
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Bruce Ashfield [Thu, 16 Oct 2025 03:14:15 +0000 (23:14 -0400)]
linux-yocto/6.6: update to v6.6.103
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:
no ids found, dumping: cc1a1c5b404a Linux 6.6.103 40b36d9a612b alloc_fdtable(): change calling conventions. a0a3ace2a578 netfilter: nf_reject: don't leak dst refcount for loopback packets c1aa819059b8 s390/hypfs: Enable limited access during lockdown 972d84075e3b s390/hypfs: Avoid unnecessary ioctl registration in debugfs 81a0f002e4fd ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation 7d67d591ecb0 net/mlx5e: Preserve shared buffer capacity during headroom updates dacf1ca11735 net/mlx5: Base ECVF devlink port attrs from 0 c71a3e2b02e7 Octeontx2-af: Skip overlap check for SPI field 2919ca876e15 bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU 45b70352d186 bonding: Add independent control state machine f0c7885ef8d3 bonding: update LACP activity flag after setting lacp_active ca88ac44368c net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate aa12ee1c1bd2 net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit ee7134481ff7 igc: fix disabling L1.2 PCI-E link substate on I226 on init d10f670b6f86 ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc 5189c0b7c251 LoongArch: Optimize module load time by optimizing PLT/GOT counting 070b4af44c4b net/smc: fix UAF on smcsk after smc_listen_out() ba51d73408ed gve: prevent ethtool ops after shutdown 748da8083122 net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization 3a4eeea79a46 phy: mscc: Fix timestamping for vsc8584 ca18d751bcc9 ppp: fix race conditions in ppp_fill_forward_path 06a7acd45a8f net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path 87f78799e358 ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add 2156d9e9f2e4 net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM 857b8387a977 drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() b79027f7ebb7 ALSA: usb-audio: Fix size validation in convert_chmap_v3() f93032e5d68f drm/hisilicon/hibmc: fix the hibmc loaded failed bug e50599adc966 mlxsw: spectrum: Forward packets with an IPv4 link-local source IP 469c45c8a16a Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync() ae1d9779f089 Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established 8f80c633cba1 iommu/amd: Avoid stack buffer overflow from kernel cmdline f5ad0819f902 scsi: qla4xxx: Prevent a potential error pointer dereference 96476b043efb net: bridge: fix soft lockup in br_multicast_query_expired() 7aee3d519d63 RDMA/bnxt_re: Fix to initialize the PBL array 5d3f018fc09a RDMA/bnxt_re: Fix to remove workload check in SRQ limit path 7b044e925aba RDMA/bnxt_re: Fix to do SRQ armena by default acf0dea8dc90 RDMA/erdma: Fix ignored return value of init_kernel_qp 76588276fcf8 iosys-map: Fix undefined behavior in iosys_map_clear() 34c3bc762bc4 cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key 72553fe19317 drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor(). ad994eda5d95 spi: spi-fsl-lpspi: Clamp too high speed_hz 7207923d8453 x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper 4986548825fe usb: typec: maxim_contaminant: disable low power mode when reading comparator values f56e75b85b54 usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean e600de541c37 usb: xhci: Fix slot_id resource race conflict 8d2b63fbfd4d iio: imu: inv_icm42600: change invalid data error to -EBUSY 0af5812acfac iio: imu: inv_icm42600: Convert to uXX and sXX integer types ec3310a5168b iio: imu: inv_icm42600: use = { } instead of memset() f52d8ba43259 iio: imu: inv_icm42600: switch timestamp type from int64_t __aligned(8) to aligned_s64 f13768b9b829 iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read() 99b508340d0d iio: light: as73211: Ensure buffer holes are zeroed 58ff8064cb4c tracing: Limit access to parser->buffer when trace_get_user failed 648e01a023cb tracing: Remove unneeded goto out logic c09dd3773b59 tls: fix handling of zero-length records on the rx_list 93879b3ba967 powerpc/boot: Fix build with gcc 15 5c67f7e4330e mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER 03695cdfcb5e compiler: remove __ADDRESSABLE_ASM{_STR,}() again fa833df2ba9e drm/amd/display: Don't overclock DCE 6 by 15% 7660124e6506 usb: dwc3: pci: add support for the Intel Wildcat Lake 84c95dbf5bec usb: dwc3: Remove WARN_ON for device endpoint command timeouts 319aba29a486 usb: dwc3: Ignore late xferNotReady event to prevent halt timeout dbfaa79103b4 USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles bf29c9618160 usb: storage: realtek_cr: Use correct byte order for bcs->Residue adfdc6ed189b USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera cd3bace9c9a3 usb: renesas-xhci: Fix External ROM access timeouts 3b4a57b5cc3b usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test d84f6e77ebe3 comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() 0eb4ed2aa261 comedi: pcl726: Prevent invalid irq number 842f307a1d11 comedi: Make insn_rw_emulate_bits() do insn->n samples decaa5401cb4 usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive 20729b825914 cdx: Fix off-by-one error in cdx_rpmsg_probe() 4de009fc0a3a most: core: Drop device reference after usage in get_channel() bc4e3186a2e2 iio: proximity: isl29501: fix buffered read on big-endian systems 6a605d307b02 iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe() 3b114a3282ab ftrace: Also allocate and copy hash for reading of filter files bb912a20fab0 fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable() 65e46aeaf84a drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS d404824f3d25 cpuidle: governors: menu: Avoid selecting states with too much latency 3a92598c3e55 cpuidle: menu: Remove iowait influence f0aa8591ba0c mmc: sdhci-pci-gli: Add a new function to simplify the code 1eae029f79b6 mmc: sdhci-pci-gli: Use PCI AER definitions, not hard-coded values fd269466abe6 selftests: mptcp: pm: check flush doesn't reset limits a9cf4362d4d0 mptcp: disable add_addr retransmission when timeout is 0 ebe3d8cf1ee6 mptcp: remove duplicate sk_reset_timer call 1982e18bbcc1 use uniform permission checks for all mount propagation changes c5aa6ba11273 fs/buffer: fix use-after-free when call bh_read() helper 212eb86f75b4 smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() 740ccba37a12 arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support 342f7a1dda77 ext4: preserve SB_I_VERSION on remount 047b4cb30e42 scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems c065c8d20dd0 scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers 6d53b2a134da scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE 0c3333f7bfee PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features d0252e69b932 PCI: imx6: Delay link start until configfs 'start' written cee067ef2055 PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining 7b688b365ace PCI: rockchip: Use standard PCIe definitions 72ff3acf0044 soc: qcom: mdt_loader: Fix error return values in mdt_header_valid() ef2f64dff281 drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs a98aa702c74f drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs e95f4fd56f6c drm/amd/display: Fix DP audio DTO1 clock source on DCE 6. 5b011264c5da drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3 36a6b43573d1 drm/amd/display: Avoid a NULL pointer dereference 86c2825791c3 s390/sclp: Fix SCCB present check 50db1ab0f3ec ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6 0a1385336970 mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn 63962ff932ef mm/debug_vm_pgtable: clear page table entries at destroy_args() 8d03bce0dcb2 squashfs: fix memory leak in squashfs_fill_super 92c9689646c8 mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency 0207d8faa1fb memstick: Fix deadlock by moving removing flag earlier 28b82be094e2 KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix d1446050a29a sched/fair: Fix frequency selection for non-invariant case 858e035ea448 topology: Set capacity_freq_ref in all cases 68df021d3cfa arm64/amu: Use capacity_ref_freq() to set AMU ratio cf4faefd3a7b cpufreq/cppc: Set the frequency used for computing the capacity 11da2b1ae4c9 energy_model: Use a fixed reference frequency 6688eb926932 cpufreq/schedutil: Use a fixed reference frequency 9771732ab39c cpufreq: Use the fixed and coherent frequency for scaling capacity 46db6d4797f1 sched/topology: Add a new arch_scale_freq_ref() method 0ed2068de1f9 kbuild: userprogs: use correct linker when mixing clang and GNU ld 5b7912d83962 ata: libata-scsi: Return aborted command when missing sense and result TF 9e9b1fa7ecaa PM: runtime: Take active children into account in pm_runtime_get_if_in_use() ac2e62cab097 PM: runtime: Simplify pm_runtime_get_if_active() usage c0f179c1547f ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig dc35f594b0d2 usb: dwc3: imx8mp: fix device leak at unbind 1636b5e9c354 mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() 365771ee3dc8 wifi: mac80211: check basic rates validity in sta_link_apply_parameters b59bea60396c KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer 65b6b10fc005 s390/mm: Remove possible false-positive warning in pte_free_defer() 0852c97fec9c btrfs: send: make fs_path_len() inline and constify its argument 8f3aae5fd76d btrfs: send: use fallocate for hole punching with send stream v2 f942e47453a8 btrfs: send: avoid path allocation for the current inode when issuing commands dbda681a0a93 btrfs: send: keep the current inode's path cached ffc19fe2a7ad btrfs: send: add and use helper to rename current inode when processing refs bfed58ed10f1 btrfs: send: only use boolean variables at process_recorded_refs() 253557254f8d btrfs: send: factor out common logic when sending xattrs b1947464c041 btrfs: populate otime when logging an inode item d7badc2ba4da btrfs: constify more pointer parameters 9dfdea89ceb3 btrfs: fix ssd_spread overallocation 9c64d6b07cbb btrfs: open code timespec64 in struct btrfs_inode 8f85af32692d xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags 4734255ef39b btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() 467dcf7e4a61 btrfs: always abort transaction on failure to add block group to free space tree 8c5bf13905f3 btrfs: move transaction aborts to the error site in add_block_group_free_space() b172535ccba1 btrfs: qgroup: fix race between quota disable and quota rescan ioctl d6f1a6c2f567 btrfs: don't ignore inode missing when replaying log tree a779d1dd7f2d usb: typec: fusb302: cache PD RX state 827f7b4fe051 PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports 80617b3926b6 block: Make REQ_OP_ZONE_FINISH a write operation 6c77d4e0f6ad block: reject invalid operation in submit_bio_noacct 3bbd52a413fc fscrypt: Don't use problematic non-inline crypto engines c8a1e1f02921 leds: flash: leds-qcom-flash: Fix registry access after re-bind 71230248a711 leds: flash: leds-qcom-flash: Limit LED current based on thermal condition 84a24fb446ee net/sched: ets: use old 'nbands' while purging unused classes 81505f137b3a net_sched: sch_ets: implement lockless ets_dump() 00dc616e6cb5 smb: client: fix netns refcount leak after net_passive changes 2668e038800b net: better track kernel sockets lifetime ac90037bf398 net: Add net_passive_inc() and net_passive_dec(). 5dd481868eb1 selftests/memfd: add test for mapping write-sealed memfd read-only 2e4179698f84 mm: reinstate ability to map write-sealed memfd mappings read-only 87a75f68eaba mm: update memfd seal write check to include F_SEAL_WRITE 17c5d49beb6c mm: drop the assumption that VM_SHARED always implies writable 440d36847a12 mptcp: pm: kernel: flush: do not reset ADD_ADDR limit 253b7d8bafe6 mptcp: drop skb if MPTCP skb extension allocation fails cf0a88124e35 ACPI: pfr_update: Fix the driver update version check 3ddd55cf19ed ipv6: sr: Fix MAC comparison to be constant-time b117c41b0090 net, hsr: reject HSR frame if skb can't hold tag 3afdeb96dc5f drm/amd/display: Don't overwrite dce60_clk_mgr 39f187cbf7ed drm/amd/display: Add primary plane to commits for correct VRR handling 74ee7445c3b6 drm/amdkfd: Destroy KFD debugfs after destroy KFD wq 627f30a328f2 drm/amdgpu: update mmhub 3.0.1 client id mappings a3201e3b7cf1 drm/amdgpu: Avoid extra evict-restore process. 0e7f5f9aa498 drm/amd: Restore cached power limit during resume 002860142ceb media: venus: venc: Clamp param smaller than 1fps and bigger than 240 f866778583b6 media: venus: vdec: Clamp param smaller than 1fps and bigger than 240. f54be97bc69b media: venus: protect against spurious interrupts during probe 041015a46597 media: venus: hfi: explicitly release IRQ during teardown ba567c2e52fb media: venus: Add a check for packet size after reading from shared memory 03c0e00ccf59 media: qcom: camss: cleanup media device allocated resource on error path 3c0e4cc4f55f media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls 61f267b77dbc media: ov2659: Fix memory leaks in ov2659_probe() 1c2769dc8025 media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() 3d83d0b5ae50 media: usbtv: Lock resolution while streaming ecb7382089bc media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() b3433cffee8d media: verisilicon: Fix AV1 decoder clock frequency 6a41dc143e3c media: vivid: fix wrong pixel_array control size 8ad57bd4a952 media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init() c231d1964878 media: hi556: correct the test pattern configuration 0148fcdd9140 media: gspca: Add bounds checking to firmware parser 85bfcb0e40fe parisc: Update comments in make_insert_tlb 9827b2b0c64e parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault() 8bccf47adbf6 parisc: Revise gateway LWS calls to probe user read access 4c981077255a parisc: Revise __get_user() to probe user read access d6ac1e11c4a0 parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c 033605fb20a3 parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers 69cf90e5aa50 parisc: Drop WARN_ON_ONCE() from flush_cache_vmap 0199adb6d1f2 parisc: Define and use set_pte_at() b334724f6b31 parisc: Check region is readable by user in raw_copy_from_user() fe0886c98b63 soc/tegra: pmc: Ensure power-domains are in a known state 41f40038de62 jbd2: prevent softlockup in jbd2_log_do_checkpoint() 92ef491b506a f2fs: fix to avoid out-of-boundary access in dnode page 5d109edb38c9 phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence adb482170045 vhost/vsock: Avoid allocating arbitrarily-sized SKBs ee438c492b2e vsock/virtio: Validate length in packet header before skb_put() 6ee4578274d1 PCI: endpoint: Fix configfs group removal on driver teardown 0758862386f1 PCI: endpoint: Fix configfs group list head handling d1f59c792c6f mtd: rawnand: renesas: Add missing check after DMA map fcb12d1e4163 mtd: rawnand: fsmc: Add missing check after DMA map 9de4819feef9 mtd: spinand: propagate spinand_wait() errors from spinand_write_page() b9e9afc35a89 mtd: spi-nor: Fix spi_nor_try_unlock_all() 749ccc175ca5 hwmon: (gsc-hwmon) fix fan pwm setpoint show functions 747977aeefd4 pwm: mediatek: Fix duty and period setting 070236488cc9 pwm: mediatek: Handle hardware enable and clock enable separately cbf3815d8c11 pwm: imx-tpm: Reset counter if CMOD is 0 aa48271f7bef wifi: ath11k: fix dest ring-buffer corruption when ring is full ee3c10c9738b wifi: ath11k: fix source ring-buffer corruption 069819aa84d2 wifi: ath11k: fix dest ring-buffer corruption daa2b66fa569 wifi: ath12k: fix dest ring-buffer corruption when ring is full bfd4918b2b9b wifi: ath12k: fix source ring-buffer corruption b5b6201a2b75 wifi: ath12k: fix dest ring-buffer corruption 97e07460ba85 wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table() 296bcff76d41 iio: adc: ad_sigma_delta: change to buffer predisable 50e823a23816 iio: imu: bno055: fix OOB access of hw_xlate array e22e5ac22736 zynq_fpga: use sgtable-based scatterlist wrappers 981c845f2983 soc: qcom: mdt_loader: Ensure we don't read past the ELF header bfa87a2cafb5 ata: libata-scsi: Fix CDL control 6f5d34088250 scsi: ufs: ufs-pci: Fix default runtime and system PM levels 03d559670ccd scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers 8247c4269acb ata: libata-scsi: Fix ata_to_sense_error() status handling 728abc895294 scsi: mpi3mr: Fix race between config read submit and interrupt completion 78f1d313442c dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints c4adc491a326 dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints 745c9b114eaf arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses d1aca165c1f1 arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1 06c3fda2bda8 arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default 2fdddc181262 btrfs: zoned: fix write time activation failure for metadata block group 5fc0345e1af3 ext4: fix hole length calculation overflow in non-extent inodes e0bb195aea7a ext4: use kmalloc_array() for array space allocation 173270d9fe86 ext4: don't try to clear the orphan_present feature block device is r/o d387cee49cfe ext4: fix reserved gdt blocks handling in fsmap 052cd20d8d75 ext4: fix fsmap end of range reporting with bigalloc ab1cc862e55e ext4: check fast symlink for ea_inode correctly d0570a5b9ccc tracing: fprobe-event: Sanitize wildcard for fprobe event name d9e157fcfebc ksmbd: extend the connection limiting mechanism to support IPv6 a1d2bab4d533 ksmbd: fix refcount leak causing resource not released 820949bbf33f Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()" 5858448a6c65 crypto: qat - flush misc workqueue during device shutdown fd2844179567 crypto: qat - lower priority for skcipher and aead algorithms ea95d4e8a263 lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap c82ad93be639 vt: defkeymap: Map keycodes above 127 to K_HOLE c0942ce38843 vt: keyboard: Don't process Unicode characters in K_OFF mode 5e17429679a8 bus: mhi: host: Detect events pointing to unexpected TREs 38de63c2876e bus: mhi: host: Fix endianness of BHI vector table e192ebb7521c usb: dwc3: meson-g12a: fix device leaks at unbind d52ad077933f usb: musb: omap2430: fix device leak at unbind 21c400de1079 usb: gadget: udc: renesas_usb3: fix device leak at unbind 295425f52052 usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init() e06e9ef1912c m68k: Fix lost column on framebuffer debug console b4b21367cb9c platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister() 1bf5cc1edb37 cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() cb7b3633ed74 serial: 8250: fix panic due to PSLVERR 2328010117d0 rcu: Fix racy re-initialization of irq_work causing hangs 049874a185aa HID: apple: avoid setting up battery timer for devices without battery 05a40e70ff5a HID: magicmouse: avoid setting up battery timer when not needed 5661fdd218c2 RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages b9669bedc63d tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros fdd1c9f78c24 media: uvcvideo: Do not mark valid metadata as invalid 8f274e2b05fd media: venus: Fix OOB read due to missing payload bound check a97e062e4ff3 media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() 1da95d3d4b7b mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock e21a3ddd5873 mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() 74fb3b1b335b parisc: Makefile: fix a typo in palo.conf 2a70cbd1aef8 hv_netvsc: Fix panic during namespace deletion with VF 27b118aebdd8 fbdev: Fix vmalloc out-of-bounds write in fast_imageblit f83d4c81bda3 btrfs: do not allow relocation of partially dropped subvolumes 77e07f7226f4 btrfs: zoned: do not select metadata BG as finish target 6b801da8e146 btrfs: fix log tree replay failure due to file with 0 links and extents a002525b2fd7 btrfs: clear dirty status from extent buffer on error at insert_new_root() 99e36ff41a74 btrfs: zoned: do not remove unwritten non-data block group e02bdb223399 btrfs: abort transaction during log replay if walk_log_tree() failed ec5bfcfb6e0d btrfs: zoned: use filesystem size not disk size for reclaim decision 9dfe40cb6c2c cdc-acm: fix race between initial clearing halt and open 729ac69a3e81 thunderbolt: Fix copy+paste error in match_service_id() 5c4a2ffcbd05 comedi: fix race between polling and detaching e613904fa419 usb: typec: ucsi: Update power_supply on power role change ca9fb654f89b misc: rtsx: usb: Ensure mmc child device is active when card is present 5badd56c711e usb: core: config: Prevent OOB read in SS endpoint companion parsing 492207cf8372 ext4: fix largest free orders lists corruption on mb_optimize_scan switch 88d02c333989 ext4: fix zombie groups in average fragment size lists d19b817540c0 iommufd: Prevent ALIGN() overflow 2ccccb0e4178 iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range a11b6ee7cab8 iommu/arm-smmu-qcom: Add SM6115 MDSS compatible 7e0c0664e9aa cifs: reset iface weights when we cannot find a candidate 1b6310d14b13 drm/amdgpu: fix incorrect vm flags to map bo 3fbc2e43ab12 ASoC: fsl_sai: replace regmap_write with regmap_update_bits 8270fbcc1ec4 scsi: lpfc: Remove redundant assignment to avoid memory leak 063fe9b16be1 rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe 24334f3cf8a2 pNFS: Fix uninited ptr deref in block/scsi layout 198f26c55779 pNFS: Handle RPC size limit for layoutcommits 2c5b079bcb31 pNFS: Fix disk addr range check in block/scsi layout cf949a960653 pNFS: Fix stripe mapping in block/scsi layout 3b9d69f0e68a block: avoid possible overflow for chunk_sectors check in blk_stack_limits() 1df5970cd93d ASoC: Intel: avs: Fix uninitialized pointer error in probe() f2e480950d1c net: phy: smsc: add proper reset flags for LAN8710A 6b93ab1ad84a ipmi: Fix strcpy source and destination the same 9da4d5c3ea6b kconfig: lxdialog: fix 'space' to (de)select options 44337363300f kconfig: gconf: fix potential memory leak in renderer_edited() e55c6f052032 kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() 933992c60c07 ipmi: Use dev_warn_ratelimited() for incorrect message warnings 2e07a9fe5117 vfio/mlx5: fix possible overflow in tracking max message size 48d7bdd8759c scsi: aacraid: Stop using PCI_IRQ_AFFINITY 0787a522cc9c scsi: target: core: Generate correct identifiers for PR OUT transport IDs a40c4af8083d scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans 28d64271510e kconfig: nconf: Ensure null termination where strncpy is used 106ab3cd026f vfio/type1: conditional rescheduling while pinning 98b7b47cebe3 kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c b45134f72642 f2fs: check the generic conditions first 868f23286c1a exfat: add cluster chain loop check for dir 6af18148675f i2c: Force DLL0945 touchpad i2c freq to 100khz f8c001884bb4 apparmor: use the condition in AA_BUG_FMT even with debug disabled dd45d42ab290 dm-table: fix checking for rq stackable devices f4133dc2b93d dm-mpath: don't print the "loaded" message if registering fails cf4a40ad2116 i3c: master: Initialize ret in i3c_i2c_notifier_call() 4e24a6a42d91 i3c: don't fail if GETHDRCAP is unsupported 2e487c0fdeb9 apparmor: shift ouid when mediating hard links in userns ef8814a9d64a rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 6e3733fe88a0 i3c: add missing include to internal header 6dd90afb3945 module: Prevent silent truncation of module name in delete_module(2) d386c8e4e587 md: dm-zoned-target: Initialize return variable r to avoid uninitialized use b0cab3d9c70d soundwire: Move handle_nested_irq outside of sdw_dev_lock 1e3697578567 soundwire: amd: serialize amd manager resume sequence during pm_prepare d2974cfd4fa6 crypto: octeontx2 - add timeout for load_fvc completion poll ae5a0993f1e4 media: uvcvideo: Fix bandwidth issue for Alcor camera 6bbaec6a0369 media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar 09906650484a media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() 77ac2addb1dc media: usb: hdpvr: disable zero-length read messages 1512ced62c87 media: tc358743: Increase FIFO trigger level to 374 9b023149b97a media: tc358743: Return an appropriate colorspace from tc358743_set_fmt 5c809ef89e1b media: tc358743: Check I2C succeeded during probe 815cb5818eef pinctrl: stm32: Manage irq affinity settings 67bca5b04313 scsi: mpi3mr: Correctly handle ATA device errors 80726da54c29 scsi: mpt3sas: Correctly handle ATA device errors 924226822419 power: supply: qcom_battmgr: Add lithium-polymer entry 7925dd68807c scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure 8c449e588d81 RDMA/core: reduce stack using in nldev_stat_get_doit() 89fdac333a17 RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() 773612b1edf3 dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs 01c412e31d98 leds: leds-lp50xx: Handle reg to get correct multi_index 07cba8891f2c media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control f54eacb5b7f8 MIPS: lantiq: falcon: sysctrl: fix request memory check logic f22de2027b20 MIPS: Don't crash in stack_top() for tasks without ABI or vDSO 9021924d8893 crypto: jitter - fix intermediary handling 173cfd741ad7 jfs: upper bound check of tree index in dbAllocAG 78989af5bbf5 jfs: Regular file corruption check 34d8e982bac4 jfs: truncate good inode pages when hard link is 0 39cfe2c83146 scsi: bfa: Double-free fix 2b98d2c23317 watchdog: iTCO_wdt: Report error if timeout configuration fails 7fe9533fb069 MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} 6caa737a77a5 clk: qcom: ipq5018: keep XO clock always on 16e245176777 hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state d202efb10a4b watchdog: dw_wdt: Fix default timeout 478bd3bc4e7f fs/orangefs: use snprintf() instead of sprintf() 66a373f50b42 scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated 4db46a83d817 phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal 41368857a354 mfd: axp20x: Set explicit ID for AXP313 regulator 6c9e12fef997 clk: tegra: periph: Fix error handling and resolve unsigned compare warning d960f4b79391 ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr de6af003239a crypto: hisilicon/hpre - fix dma unmap sequence cbe740de32bb fbdev: fix potential buffer overflow in do_register_framebuffer() 6daa13c20190 cifs: Fix calling CIFSFindFirst() for root path without msearch 74e7af8334c9 watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition 3a5236c610e2 drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported 8708914f05ec drm/amd/display: Only finalize atomic_obj if it was initialized 110822d339a0 vhost: fail early when __vhost_add_used() fails c2bdb45f366a vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page bc9ef9783c6b net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 e7a375453cca rcu: Fix rcu_read_unlock() deadloop due to IRQ work 58ed3ac8538c drm/ttm: Respect the shrinker core free target 39de3ce65635 drm/amd/display: Avoid trying AUX transactions on disconnected ports d02ee5eebbcf selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size c03a532fe1d3 bpf: Make reg_not_null() true for CONST_PTR_TO_MAP 86f3cff54956 uapi: in6: restore visibility of most IPv6 socket options 3c9ca275100e drm/ttm: Should to return the evict error e4b67ceb8634 drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range 1df5e6eb71e4 net: ncsi: Fix buffer overflow in fetching version id 859c54bb0120 ionic: clean dbpage in de-init ec33caca7662 wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() c2e719bcaa26 ptp: Use ratelimite for freerun error message 868b52651f69 bpftool: Fix JSON writer resource leak in version command d930e738c0a8 net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 8609f3c44e27 net: dsa: b53: prevent DIS_LEARNING access on BCM5325 bc0e01d663f4 net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 668280aa65fc net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 7f36d13d5243 gve: Return error for unknown admin queue command a1172cbfe51c net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs 8d1f4798c876 net: vlan: Make is_vlan_dev() a stub when VLAN is not configured 63acb8e26620 drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual 50dbeff47178 dpaa_eth: don't use fixed_phy_change_carrier 7c299d0bc983 neighbour: add support for NUD_PERMANENT proxy entries a70c31416ddd wifi: iwlegacy: Check rate_idx range after addition ad8742e2d1da netmem: fix skb_frag_address_safe with unreadable skbs 88517afa7401 powerpc: floppy: Add missing checks after DMA map eb1e1526b82b wifi: ath12k: Decrement TID on RX peer frag setup error handling 9874a00ba22b wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0 afb39537d894 wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`. c387d8fcd330 wifi: mac80211: update radar_required in channel context after channel switch cf48c230a17a drm/amd/display: Fix 'failed to blank crtc!' c43b6b0a8342 wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect 83aba958e33f wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() 5c942d80f3e8 wifi: ath12k: Add memset and update default rate value in wmi tx completion 9febff30eb52 drm/amd/display: Separate set_gsl from set_gsl_source_select f2a4ca5397f5 net: fec: allow disable coalescing b3472b9d9d42 net: atlantic: add set_power to fw_ops for atl2 to fix wol 3d8090bb5342 xfrm: Duplicate SPI Handling 81667abecebc net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths() 99f142ec75dd net: thunderbolt: Enable end-to-end flow control also in transmit bdd66b918215 kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace b6c39aaa85c4 wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch 51eb6a5f209b wifi: rtw89: Disable deep power saving for USB/SDIO ecf449ef73a5 wifi: rtw89: Fix rtw89_mac_power_switch() for USB f3d4fa12d6b0 drm/msm: use trylock for debugfs e457e0560b55 wifi: mac80211: fix rx link assignment for non-MLO stations f7bc50927b4e ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc(). 5a9b21808323 (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer ffa3a8007d2f wifi: mac80211: don't complete management TX on SAE commit c73e54dba107 sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails 3f8bcc32050e s390/stp: Remove udelay from stp_sync_clock() 11238e68cb68 wifi: iwlwifi: mvm: fix scan request validation 6cd174be9239 um: Re-evaluate thread flags repeatedly dae6099edf91 wifi: iwlwifi: mvm: set gtk id also in older FWs 8baba93e2e95 perf/cxlpmu: Remove unintended newline from IRQ name format string 05ee035af6d8 net: phy: micrel: Add ksz9131_resume() fd6a21638a1e net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() c133a9327d2d net: ipv4: fix incorrect MTU in broadcast routes 606908835bc4 wifi: cfg80211: Fix interface type validation a4d2cdb31cf4 net: mctp: Prevent duplicate binds b55947b725f1 rcu: Protect ->defer_qs_iw_pending from data race e424653498e4 arm64: Mark kernel as tainted on SAE and SError panic ac361868f134 net/mlx5e: Properly access RCU protected qdisc_sleeping variable d1c8d2426a63 net: ag71xx: Add missing check after DMA map b0862e88b887 et131x: Add missing check after DMA map 72cdcaeaa95b wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB b16dfa7b4c94 be2net: Use correct byte order and format string for TCP seq and ack_seq d46484e9dbb2 s390/time: Use monotonic clock in get_cycles() 65b7c838736d wifi: cfg80211: reject HTC bit for management frames 7eb1e485bc84 ktest.pl: Prevent recursion of default variable options 30cad8797805 wifi: ath12k: Correct tid cleanup when tid setup fails 5d3559880e9c net: usb: cdc-ncm: check for filtering capability 8f5015143227 xen/netfront: Fix TX response spurious interrupts 5ac23fc080be Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie() b84f88749ecf powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 245d23754f5b ASoC: qcom: use drvdata instead of component to keep id c3d3492b12dd ASoC: codecs: rt5640: Retry DEVICE_ID verification 70b3c831cfea iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement 2925edfa98f7 ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros 2f81d6e98f32 ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop 0de69bc9b366 ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control 7731b7d596c5 platform/chrome: cros_ec_typec: Defer probe on missing EC parent 8c046583a234 platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches c2c252d2c180 soc: qcom: mdt_loader: Actually use the e_phoff 7589729947aa imx8m-blk-ctrl: set ISI panic write hurry level ac62b8f82b24 pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() 454a27cbab9b usb: core: usb_submit_urb: downgrade type check 0455858931ff usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present 41f53afe53a5 ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() 789aa0b98854 ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 2828f2c4f2e9 ASoC: hdac_hdmi: Rate limit logging on connection and disconnection b80d6972859b x86/bugs: Avoid warning when overriding return thunk 16cdf4f5b959 ALSA: hda: Disable jack polling at shutdown 240e611b784d ALSA: hda: Handle the jack polling always via a work d54d1405f2c6 mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() 24f4ceeaeee7 mei: bus: Check for still connected devices in mei_cl_bus_dev_release() a29868db6dcf char: misc: Fix improper and inaccurate error code returned by misc_init() f8818e29d268 reset: brcmstb: Enable reset drivers for ARCH_BCM2835 ff28f5dc3872 pps: clients: gpio: fix interrupt handling order in remove path d9d611639bea ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path d3dd520206bd mmc: sdhci-msm: Ensure SD card power isn't ON when card removed f95174d4d5c4 ACPI: processor: fix acpi_object initialization e656c2db4922 PM: sleep: console: Fix the black screen issue 753cd9f3d396 thermal: sysfs: Return ENODATA instead of EAGAIN for reads 64d78290599a PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() 5aa770f45da7 firmware: tegra: Fix IVC dependency problems ab3bf61d9351 ACPI: PRM: Reduce unnecessary printing to avoid user confusion 783a726d509e selftests: tracing: Use mutex_unlock for testing glob filter 6ec6282acd89 tools/build: Fix s390(x) cross-compilation with clang 46b3a7a3a36d ARM: tegra: Use I/O memcpy to write to IRAM 149b733d5f80 gpio: tps65912: check the return value of regmap_update_bits() 3c3454b02c62 iio: adc: ad_sigma_delta: don't overallocate scan buffer 0a4757bf988e tools/nolibc: define time_t in terms of __kernel_old_time_t 58a39eda7f95 thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required cfa9b873a29c ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed 7423fc4da94d EDAC/synopsys: Clear the ECC counters on init f53e16dde8ad PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store() d7d6d076ee95 ARM: rockchip: fix kernel hang during smp initialization 6a8b0c7e93df cpufreq: Exit governor when failed to start old governor 20bbe54f454f gpio: wcd934x: check the return value of regmap_update_bits() 6b8a8eac58a9 remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU 082735fbcdb6 ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered 84518ec7f928 soc: qcom: rpmh-rsc: Add RSC version 4 support 16a5088670e6 usb: xhci: Avoid showing errors during surprise removal dabf502ee893 usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command 4a62f49f3d04 usb: xhci: Avoid showing warnings for dying controller 6cd81d4ffbaa usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default b2ba2ad06d8a selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t 146262a48be2 cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag f5611a58f7af platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list 2d32f522c33a usb: xhci: print xhci->xhc_state when queue_command failed 839312bff2c9 tracefs: Add d_delete to remove negative dentries d7e28036b0e9 securityfs: don't pin dentries twice, once is enough... 270ea0b61725 fix locking in efi_secret_unlink() 327276cb8a7e ext2: Handle fiemap on empty files to prevent EINVAL 6c7fadac6cbc fs/ntfs3: correctly create symlink for relative path 3572737a768d fs/ntfs3: Add sanity check for file name 934065fd3024 ata: libata-sata: Disallow changing LPM state if not supported 847a204d3067 better lockdep annotations for simple_recursive_removal() cb7b59560400 hfs: fix not erasing deleted b-tree node issue 9f53b2433ad2 drbd: add missing kref_get in handle_write_conflicts 5a1e1ab83796 udf: Verify partition map count ce8da5d13d8c loop: Avoid updating block size under exclusive owner 3d2c05cbc6a3 gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops 524ce0f943d7 nvme-pci: try function level reset on init failure 1e858a7a51c7 smb/server: avoid deadlock when linking with ReplaceIfExists 61ad294996c0 arm64: Handle KCOV __init vs inline mismatches b3359392b753 hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() 291bb5d931c6 hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() 8583d067ae22 hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() 384a66b89f95 hfs: fix slab-out-of-bounds in hfs_bnode_read() 4f032979b63a hfs: fix general protection fault in hfs_find_init() f1fe99919f62 tls: handle data disappearing from under the TLS ULP acfb4da42fc4 ptp: prevent possible ABBA deadlock in ptp_clock_freerun() 7337a6356dff cpuidle: governors: menu: Avoid using invalid recent intervals data c11f3802d349 intel_idle: Allow loading ACPI tables for any family ea094f38d387 sctp: linearize cloned gso packets in sctp_rcv 7f94af487c7f net: ti: icss-iep: Fix incorrect type for return value in extts_enable() 30cf81105855 netfilter: ctnetlink: fix refcount leak on table dump 19e01bc8c1ac udp: also consider secpath when evaluating ipsec use for checksumming e65ad9a14256 KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest 91fa23d5b9e5 KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs 8867d91ef824 KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter d1e28ef79b43 KVM: VMX: Extract checking of guest's DEBUGCTL into helper 48ebed8bd66b KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported ec70c3f25777 KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag 0d87da9d6065 KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap d5aa9bb5e348 KVM: x86: Fully defer to vendor code to decide how to force immediate exit 62f586df29ca KVM: VMX: Handle KVM-induced preemption timer exits in fastpath for L2 ca3cc405a3bc KVM: x86: Move handling of is_guest_mode() into fastpath exit handlers 1c1158aceaf2 KVM: VMX: Handle forced exit due to preemption timer in fastpath 1fc288e74cf3 KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer exits baf9c96e4e9d KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint a1d4091f94c6 KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs 76025761e8f3 KVM: x86: Snapshot the host's DEBUGCTL in common x86 cf04778ae1b5 KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID ebc281bf14aa KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update() abe3d6a559f9 KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow d5784ea45663 KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush edc450030b20 smb: client: don't wait for info->send_pending == 0 on error 429112e9709b smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() 19849010c9e1 ACPI: processor: perflib: Move problematic pr->performance check cb2e6e275d19 ACPI: processor: perflib: Fix initial _PPC limit application 8c09ad855fbf Documentation: ACPI: Fix parent device references 2a0c0c974bea eventpoll: Fix semi-unbounded recursion 237e416eb621 fs: Prevent file descriptor table allocations exceeding INT_MAX a5ff67c66208 sunvdc: Balance device refcount in vdc_port_mpgroup_check 17c010fe45de LoongArch: BPF: Fix jump offset calculation in tailcall d89d47abbad2 PCI: Extend isolated function probing to LoongArch 987c20428f06 NFS: Fix the setting of capabilities when automounting a new filesystem f0b89916d2fe NFSD: detect mismatch of file handle and delegation stateid in OPEN op d71abd1ae4e0 nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() 3b53dc1c641f io_uring/net: commit partial buffers on retry ccef5ee4adf5 net: usb: asix_devices: add phy_mask for ax88772 mdio bus eb2d79333f79 net: dpaa: fix device leak when querying time stamp info fd5c51a187ba net: ti: icss-iep: fix device and OF node leaks at probe 5daff127b292 net: mtk_eth_soc: fix device leak at probe 9adaf9a04f9a net: enetc: fix device and OF node leak at probe dc395c838610 net: gianfar: fix device leak when querying time stamp info 8dae82f81e34 net: phy: micrel: fix KSZ8081/KSZ8091 cable test 346c820ef513 netlink: avoid infinite retry looping in netlink_unicast() c66caf21b1d0 Revert "leds: trigger: netdev: Configure LED blink interval for HW offload" 16a46f2e84d7 gpio: mlxbf3: use platform_get_irq_optional() c1aa0743e54b Revert "gpio: mlxbf3: only get IRQ for device instance 0" a157478521b3 gpio: mlxbf2: use platform_get_irq_optional() 50ae9f2d90b2 gpio: virtio: Fix config space reading. 217e18011663 smb: client: remove redundant lstrp update in negotiate protocol a0620e152566 smb3: fix for slab out of bounds on mount to ksmbd d63e929bac53 ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks fb5000cfd7bc ALSA: hda/realtek: Fix headset mic on HONOR BRB-X 1034719fdefd ALSA: usb-audio: Validate UAC3 cluster segment descriptors 07c8d78dbb5e ALSA: usb-audio: Validate UAC3 power domain descriptors, too 17a66aef7ddc io_uring: don't use int for ABI
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Bruce Ashfield [Thu, 16 Oct 2025 03:14:14 +0000 (23:14 -0400)]
linux-yocto/6.6: update to v6.6.102
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:
no ids found, dumping: bb9c90ab9c5a Linux 6.6.102 aada327a9f80 usb: gadget : fix use-after-free in composite_dev_cleanup() e1ee74b9eeb2 mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery d98b34c40dc7 MIPS: mm: tlb-r4k: Uniquify TLB entries on init ab85071a0354 x86/fpu: Delay instruction pointer fixup until after warning 575b71627529 ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() 48a8a2dfc3f5 ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe() 1fb873971e23 x86/sev: Evict cache lines during SNP memory validation fdf6959b700b net: usbnet: Fix the wrong netif_carrier_on() call 3c6236588dc8 net: usbnet: Avoid potential RCU stall on LINK_CHANGE event 2b98a1539736 Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano ae591cf2348a sched,freezer: Remove unnecessary warning in __thaw_task 036bdae8c985 freezer,sched: Clean saved_state when restoring it during thaw 2e62985121b7 freezer,sched: Do not restore saved_state of a thawed task e241ca2f0ec3 freezer,sched: Use saved_state to reduce some spurious wakeups 8afa818c7733 sched/core: Remove ifdeffery for saved_state 2c9a096e202c i2c: stm32f7: unmap DMA mapped buffer bab0986dc045 i2c: stm32f7: simplify status messages in case of errors d786b6592030 i2c: stm32f7: perform most of irq job in threaded handler 9bfaaa964014 i2c: stm32f7: use dev_err_probe upon calls of devm_request_irq de7c7caea59b i2c: stm32f7: Use devm_clk_get_enabled() 66bf243531ee USB: serial: option: add Foxconn T99W709 2f4d88f5e5ee smb: server: Fix extension string in ksmbd_extract_shortname() fa1c47af4ff6 ksmbd: limit repeated connections from clients with the same IP 62d136d30621 ksmbd: fix corrupted mtime and ctime in smb2_open b69fd87076da ksmbd: fix Preauh_HashValue race condition d79c8bebaa62 ksmbd: fix null pointer dereference error in generate_encryptionkey 44bd006d5c93 vsock: Do not allow binding to VMADDR_PORT_ANY 88caf46db823 net/packet: fix a race in packet_set_ring() and packet_notifier() 29d417b1a0d5 selftests/perf_events: Add a mmap() correctness test 6757a31a8e29 perf/core: Prevent VMA split of buffer mappings f41e9eba77bf perf/core: Exit early on perf_mmap() fail f07ab7a4b572 perf/core: Don't leak AUX buffer refcount on allocation failure b1df39462171 sunrpc: fix handling of server side tls alerts d2622f38652c smb: client: return an error if rdma_connect does not return within 5 seconds bd7f84df5436 pptp: fix pptp_xmit() error path 4e5cf39e4064 smb: client: let recv_done() cleanup before notifying the callers. 83d2a4185f5a smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already f069f7c14204 smb: client: make use of common smbdirect_socket 947569b95987 smb: smbdirect: add smbdirect_socket.h 61f0a6849005 smb: client: Correct typos in multiple comments across various files 91d7e6cbb3f8 smb: client: Use min() macro c29dbc44fbf7 smb: server: let recv_done() avoid touching data_transfer after cleanup/move 66110b35bebc smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection e67aff50476f smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already 28db0cb8a0da smb: server: remove separate empty_recvmsg_queue 2e4463f44e9b ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out() cd2a7f950038 irqchip: Build IMX_MU_MSI only on ARM 39491e859fd4 net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing c377ba2be943 benet: fix BUG when creating VFs a55b3d153318 sunrpc: fix client side handling of tls alerts a7176675c39a net/sched: taprio: enforce minimum value for picos_per_byte 0d45954034f8 net: drop UFO packets in udp_rcv_segment() ef05007b403d ipv6: reject malicious packets in ipv6_gso_segment() 194cd28c889a net/mlx5: Correctly set gso_segs when LRO is used 97ed92a23f0b netlink: specs: ethtool: fix module EEPROM input/output arguments 5005d2437737 pptp: ensure minimal skb length in pptp_xmit() 5fde6e016004 net: ipa: add IPA v5.1 and v5.5 to ipa_version_string() b80353a72958 phy: mscc: Fix parsing of unicast frames b0cf318f5cc6 netpoll: prevent hanging NAPI when netcons gets enabled 227154eb7567 md/md-cluster: handle REMOVE message earlier 75ed1f6ed8ee NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY 1116e66111f8 NFSv4.2: another fix for listxattr 12ad3def2e5e NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() 30a739931ed8 NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate() 147216030e46 sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up() 3bdb29df2f0d pNFS/flexfiles: don't attempt pnfs on fatal DS errors 6e7b24c71e53 PCI: pnv_php: Fix surprise plug detection and recovery a426e8a6ae16 powerpc/eeh: Make EEH driver device hotplug safe 3f49abdf88b6 powerpc/eeh: Export eeh_unfreeze_pe() 17dabd7efb28 PCI: pnv_php: Work around switches with broken presence detection 32173edf3fe2 PCI: pnv_php: Clean up allocated IRQs on unplug 9184a2bb522c sched/psi: Fix psi_seq initialization 9ea1cc8b0e95 kconfig: qconf: fix ConfigList::updateListAllforAll() 05b450da93c6 scsi: sd: Make sd shutdown issue START STOP UNIT appropriately 450b2a5cf6e4 scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume 4933567ef9e6 scsi: Revert "scsi: iscsi: Fix HW conn removal use after free" 087a8a7ca354 scsi: mpt3sas: Fix a fw_event memory leak 349436bf11b8 vfio/pci: Separate SR-IOV VF dev_set 7dbfae90c5a3 vfio/pds: Fix missing detach_ioas op 9546b26d391f vfio: Prevent open_count decrement to negative a6c5e25861e3 vfio: Fix unbalanced vfio_df_close call in no-iommu mode f289690f50a0 f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode 704613681c1c f2fs: fix to calculate dirty data during has_not_enough_free_secs() e33c22f2eeba f2fs: fix to update upper_p in __get_secs_required() correctly 1023836d1b94 f2fs: vm_unmap_ram() may be called from an invalid context 345fc8d1838f f2fs: fix to avoid out-of-boundary access in devs.path 880ef748e78a f2fs: fix to avoid panic in f2fs_evict_inode 3d37cadaac1a f2fs: fix to avoid UAF in f2fs_sync_inode_meta() a96f2bf49fbd f2fs: doc: fix wrong quota mount option description dabfa3952c8e f2fs: fix KMSAN uninit-value in extent_info usage c1c818b636d4 rtc: rv3028: fix incorrect maximum clock rate handling f5790cc2ee6f rtc: pcf8563: fix incorrect maximum clock rate handling e337c72b17c6 rtc: pcf85063: fix incorrect maximum clock rate handling 8456b3e28acf rtc: nct3018y: fix incorrect maximum clock rate handling 17827903802b rtc: hym8563: fix incorrect maximum clock rate handling bb94a96374db rtc: ds1307: fix incorrect maximum clock rate handling 15da236904ec ucount: fix atomic_long_inc_below() argument type f9bd692540d8 module: Restore the moduleparam prefix length check 7500ba6533ab apparmor: fix loop detection used in conflicting attachment resolution fad01f7e0d3e apparmor: ensure WB_HISTORY_SIZE value is a power of 2 4795bcafe9a8 bpf: Check netfilter ctx accesses are aligned f56f6054791e bpf: Check flow_dissector ctx accesses are aligned d3bf3088f7e9 vhost-scsi: Fix log flooding with target does not exist errors ebc6e1d0e97a mtd: rawnand: atmel: set pmecc data setup time a01bc4245e43 mtd: rawnand: rockchip: Add missing check after DMA map 7d0b53a6d199 mtd: rawnand: atmel: Fix dma_mapping_error() address 505f4111dd98 jfs: fix metapage reference count leak in dbAllocCtl 4b5d36cc3014 fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref 0aa273dbcf53 crypto: qat - fix seq_file position update in adf_ring_next() 1c178ccb6caf crypto: qat - fix DMA direction for compression on GEN2 devices 9ff4de5bd11a perf tools: Remove libtraceevent in .gitignore 106891c7bdbc sh: Do not use hyphen in exported variable name f658f3676538 ASoC: fsl_xcvr: get channel status data when PHY is not exists 3187ffe08ff0 dmaengine: nbpfaxi: Add missing check after DMA map 06ddbb28b72b dmaengine: mv_xor: Fix missing check after DMA map and missing unmap 25d15b0d2b42 fs/orangefs: Allow 2 more characters in do_c_string() b93d06499b6f PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute bdbaa1041816 soundwire: stream: restore params when prepare ports fail ac961f6c6dc5 crypto: img-hash - Fix dma_unmap_sg() nents value 06bc14f9d047 crypto: keembay - Fix dma_unmap_sg() nents value 5d481d4bea06 hwrng: mtk - handle devm_pm_runtime_enable errors 9c590ae73c3e watchdog: ziirave_wdt: check record length in ziirave_firm_verify() a23fa17e6bec scsi: isci: Fix dma_unmap_sg() nents value 401fcb7e557d scsi: mvsas: Fix dma_unmap_sg() nents value cf9c5b15c4ab scsi: elx: efct: Fix dma_unmap_sg() nents value 214f94ee5d77 scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value 5b63d6dec556 clk: sunxi-ng: v3s: Fix de clock definition c07e017a56d6 perf tests bp_account: Fix leaked file descriptor 9b2a3e718902 pinmux: fix race causing mux_owner NULL with active mux_usecount 33c778ea0bd0 proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al adf2da0bf119 kernel: trace: preemptirq_delay_test: use offstack cpu mask 5449e60e1cbb RDMA/hns: Fix -Wframe-larger-than issue db1114685317 crypto: ccp - Fix crash when rebind ccp device for ccp.ko a762bbe11269 crypto: inside-secure - Fix `dma_unmap_sg()` nents value b86fd2e61a2c perf sched: Fix memory leaks in 'perf sched latency' 282d4b34694f perf sched: Fix memory leaks for evsel->priv in timehist 16ce5ce11145 perf sched: Free thread->priv using priv_destructor e5de9ea7796e perf dso: Add missed dso__put to dso__load_kcore 9fe9f9459951 perf tools: Fix use-after-free in help_unknown_cmd() a99cae46ab16 Fix dma_unmap_sg() nents value 8724a228be43 clk: clk-axi-clkgen: fix fpfd_max frequency for zynq 45338af03ff3 fanotify: sanitize handle_type values when reporting fid e8b4c9e60a7a pinctrl: sunxi: Fix memory leak on krealloc failure 85a7746a05ea PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails 3f5186fd43be crypto: arm/aes-neonbs - work around gcc-15 warning f693be157c59 power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set 8e9bdb563916 power: supply: cpcap-charger: Fix null check for power_supply_get_by_name 51990eecf22f clk: xilinx: vcu: unregister pll_post only if registered correctly a2b437a88370 media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check 1d92608a2925 clk: davinci: Add NULL check in davinci_lpsc_clk_register() 530d4db6fb89 mtd: fix possible integer overflow in erase_xfer() aff3e6eacef2 crypto: marvell/cesa - Fix engine load inaccuracy be1e15938a16 crypto: qat - use unmanaged allocation for dc_data 25c161a8bed1 crypto: sun8i-ce - fix nents passed to dma_unmap_sg() 0c93cd98d0c8 PCI: rockchip-host: Fix "Unexpected Completion" log message e1c3d14c8252 bpf/preload: Don't select USERMODE_DRIVER 3bb72c2e9622 ipv6: annotate data-races around rt->fib6_nsiblings 9cb6de8ee144 ipv6: fix possible infinite loop in fib6_info_uses_dev() e1b7932af47f ipv6: prevent infinite loop in rt6_nlmsg_size() f237664113fe vrf: Drop existing dst reference in vrf_ip6_input_dst dddfc5a996af selftests: rtnetlink.sh: remove esp4_offload after test 314f568b84b0 net/mlx5e: Remove skb secpath if xfrm state is not found 4d81205d27c3 net/mlx5e: Clear Read-Only port buffer size in PBMC before update 58004aa21e79 netfilter: xt_nfacct: don't assume acct name is null-terminated 9705b8b92d6a can: kvaser_usb: Assign netdev.dev_port based on device channel index 56a17d28c3dd can: kvaser_pciefd: Store device channel index 2ac7efc5deef can: peak_usb: fix USB FD devices potential malfunction c9be5abdaf2e tools/rv: Do not skip idle in trace ee2502485702 bpf: Disable migration in nf_hook_run_bpf(). 9d5aecb57e93 Bluetooth: hci_event: Mask data status from LE ext adv reports cdb509f59aaf kcsan: test: Initialize dummy variable bf88b7c114d4 wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon() 50e98be435df wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE 21e317484d3b wifi: ath12k: fix endianness handling while accessing wmi service bit dde152043f6d Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" 9c8e9da118a8 wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() f74d4525ebad wifi: mac80211: Don't call fq_flow_idx() for management frames bc6f35967d9a wifi: mac80211: Do not schedule stopped TXQs 2874717012d1 wifi: plfxlc: Fix error handling in usb driver probe 378ae9ccaea3 wifi: mac80211: reject TDLS operations when station is not associated df51cc1e965a iommu/amd: Fix geometry.aperture_end for V2 tables 03df73480547 mwl8k: Add missing check after DMA map 5cb4349d0c35 wifi: rtl8xxxu: Fix RX skb size for aggregation disabled 20a1e6536424 tcp: call tcp_measure_rcv_mss() for ooo packets 9a20c9da5ff1 xen/gntdev: remove struct gntdev_copy_batch from stack c9eeae9639ea net_sched: act_ctinfo: use atomic64_t for three counters 103c4e27ec9f net/sched: Restrict conditions for adding duplicating netems to qdisc tree 0967ee88ec1e um: rtc: Avoid shadowing err in uml_rtc_start() 98f1a97d8627 arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX 9ac58afb0cca netfilter: nf_tables: adjust lockdep assertions handling b488bee5e92f netfilter: nf_tables: Drop dead code from fill_*_info routines f56a863397f5 fbcon: Fix outdated registered_fb reference in comment b1c6b13f48a8 sched/psi: Optimize psi_group_change() cpu_clock() usage dabe5fc2ee7a drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value 6e2f7903241c m68k: Don't unregister boot console needlessly 7f0377ca6993 drm/msm/dpu: Fill in min_prefill_lines for SC8180X 6d029d85aa2b kselftest/arm64: Fix check for setting new VLs in sve-ptrace f73c0bc2d1d3 net: dst: annotate data-races around dst->output e0b8b6687b7d net: dst: annotate data-races around dst->input 62d7cf455c88 net/mlx5: Check device memory pointer before usage c45a33903e24 tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range 5bf201c55fdf wifi: ath11k: clear initialized flag for deinit-ed srng lists ca980f1911a7 iwlwifi: Add missing check for alloc_ordered_workqueue d5491ff785f4 wifi: iwlwifi: Fix memory leak in iwl_mvm_init() 14ca6952691f wifi: rtl818x: Kill URBs before clearing tx status queue 892b29eab44b wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band 655e3f51de5a caif: reduce stack size, again 0abd1f48cd25 bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure 0f18414f1d6b drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel cc7af1b89c55 net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain 3ca8e73c58bb selftests/bpf: fix signedness bug in redir_partial() 0e853c1464bc bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls c69d06498ea2 bpf, sockmap: Fix psock incorrectly pointing to sk c4a298ae0d36 drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed 8b0285fbbd81 selftests/tracing: Fix false failure of subsystem event test faa45887a63c staging: nvec: Fix incorrect null termination of battery manufacturer cc03984d7035 interconnect: qcom: sc8180x: specify num_nodes 37dfd6d6c9e4 interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg 2fffa72282ed soc: qcom: pmic_glink: fix OF node leak 272cd1f24741 samples: mei: Fix building on musl libc f7e5ae0ddd12 cpufreq: Init policy->rwsem before it may be possibly used 39a0d418b321 cpufreq: Initialize cpufreq-based frequency-invariance later 1bc35f9a50e1 cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode 81f506193700 PM / devfreq: Check governor before using governor->name 759b918c8f2e arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed 1661ee5c2a41 arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed d7b49f4f0da7 ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface 4f886798e1a4 soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS 632c151355ba arm: dts: ti: omap: Fixup pinheader typo 40ff7460a9a6 usb: early: xhci-dbc: Fix early_ioremap leak c6ec27091cf5 powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() 91a177aafc53 Revert "vmci: Prevent the dispatching of uninitialized payloads" 7ed42b79118d pps: fix poll support 6696a46f4ebd vmci: Prevent the dispatching of uninitialized payloads b31cf6f7716a staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() 6031a54f4eac spi: stm32: Check for cfg availability in stm32_spi_probe 490877203b40 usb: misc: apple-mfi-fastcharge: Make power supply names unique f24e5b445ab9 usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe() 448800900925 ARM: dts: vfxxx: Correctly use two tuples for timer address 964db8725937 arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely e1b4ca59f633 arm64: dts: qcom: sc7180: Expand IMEM region 2f4bad6b27c3 arm64: dts: qcom: sdm845: Expand IMEM region 603df70062fb soc: qcom: QMI encoding/decoding for big endian 41917d9ce43a selftests: Fix errno checking in syscall_user_dispatch test aa771d2928fe ASoC: mediatek: use reserved memory or enable buffer pre-allocation 4c39fc79ae25 ASoC: ops: dynamically allocate struct snd_ctl_elem_value ee1c30d7c6fc ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() 1a91ba12abef gfs2: No more self recovery a936be9b5f51 Revert "fs/ntfs3: Replace inode_trylock with inode_lock" 084933961ecd hfsplus: remove mutex_lock check in hfsplus_free_extents 0926e13a47fc hfs: make splice write available again 1de5895fe68d hfsplus: make splice write available again d89f71aece34 ublk: use vmalloc for ublk_device's __queues b35a50d639ca fs/ntfs3: cancle set bad inode after removing name fails 8d1bfdd30d17 fs_context: fix parameter name in infofc() macro 15da73210929 audit,module: restore audit logging in load failure case 5974c913d6d9 ASoC: amd: yc: add DMI quirk for ASUS M6501RM 61e5aeff2424 ASoC: Intel: fix SND_SOC_SOF dependencies 7e98b00615c6 ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx 18196a40af52 ethernet: intel: fix building with large NR_CPUS 5f577d47bba6 ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Bruce Ashfield [Thu, 16 Oct 2025 03:14:13 +0000 (23:14 -0400)]
linux-yocto/6.6: update to v6.6.101
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:
no ids found, dumping: 3a8ababb8b6a Linux 6.6.101 41d3c751fcb4 Revert "selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test" 1af6d1696ca4 spi: cadence-quadspi: fix cleanup of rx_chan on failure paths aed4053c506b drm/sched: Remove optimization that causes hang when killing dependent jobs 79c8d935147c ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS 3277cf433815 mptcp: reset fallback status gracefully at disconnect() time 7c96d519ee15 mptcp: plug races between subflow fail and subflow creation 75a4c9ab8a7a mptcp: make fallback action and fallback decision atomic 23a5773a5da5 arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB bits in ID_AA64MMFR1 register 52f5a52dc17a ksmbd: add free_transport ops in ksmbd connection 034adb78fc43 wifi: mt76: mt7921: prevent decap offload config before STA initialization 79e2dd573116 perf/x86/intel: Fix crash in icl_update_topdown_event() 9ef6abbb2868 mtd: rawnand: qcom: Fix last codeword read in qcom_param_page_type_exec() 1da8bd9a10ec ksmbd: fix use-after-free in __smb2_lease_break_noti() 5ea224eaf636 iio: hid-sensor-prox: Restore lost scale assignments a56b79a43f83 iio: hid-sensor-prox: Fix incorrect OFFSET calculation 796c96cf6685 crypto: qat - add shutdown handler to qat_dh895xcc 4b5e07702b67 crypto: powerpc/poly1305 - add depends on BROKEN for now da3e9f0fac60 erofs: address D-cache aliasing 1d117f79b5c6 mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma 37c7f0f24b8e drm/i915/dp: Fix 2.7 Gbps DP_LINK_BW value on g4x c383033b0ac8 ALSA: hda: Add missing NVIDIA HDA codec IDs 0a776c273e71 ALSA: hda/tegra: Add Tegra264 support 4e954080d218 comedi: comedi_test: Fix possible deletion of uninitialized timers 45fd8421081e jfs: reject on-disk inodes of an unsupported type 98be604d96a6 x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode() f9377bdf86ea usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach 457d02e71ae9 usb: typec: tcpm: allow switching to mode accessory to mux properly 8f65f4565cab usb: typec: tcpm: allow to use sink in accessory mode 145a56bd68f4 drm/amdkfd: Don't call mmput from MMU notifier callback cc690930cb24 mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n 325325923a1d selftests: mptcp: connect: also cover checksum 5cdfb402bae9 selftests: mptcp: connect: also cover alt modes a2cd4dcbb725 resource: fix false warning in __request_region() bf585ee198bb nilfs2: reject invalid file types when reading inodes 57104237cd6c kasan: use vmalloc_dump_obj() for vmalloc error reports 3028f2a4e746 ice: Fix a null pointer dereference in ice_copy_and_init_pkg() eaf242ea6fca gve: Fix stuck TX queue for DQ queue format c229192417d4 e1000e: ignore uninitialized checksum word on tgp 1624f9de4432 e1000e: disregard NVM checksum on tgp when valid checksum bit is not set 04d098fbca47 dpaa2-switch: Fix device reference count leak in MAC endpoint handling 1c135ff95167 dpaa2-eth: Fix device reference count leak in MAC endpoint handling 9433a5f437b0 arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() 140ca2cac147 ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx e5354899f625 sprintf.h requires stdarg.h 72584a9178af bus: fsl-mc: Fix potential double device reference in fsl_mc_get_endpoint() 6e7836c83635 i2c: virtio: Avoid hang by using interruptible completion wait 68ceeb06316e i2c: tegra: Fix reset error handling with ACPI 0d33913fce67 i2c: qup: jump out of the loop in case of timeout 60962eed62b9 platform/x86: ideapad-laptop: Fix kbd backlight not remembered among boots 989b2c5322dc net: hns3: default enable tx bounce buffer when smmu enabled adbf6f476cd1 net: hns3: fixed vf get max channels bug f377792c4186 net: hns3: disable interrupt when ptp init failed 3cc42004f65b net: hns3: fix concurrent setting vlan filter issue faf44487dfc8 s390/ism: fix concurrency management in ism_cmd() 42e42d64d851 drm/bridge: ti-sn65dsi86: Remove extra semicolon in ti_sn_bridge_probe() cf81a60a9733 can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode 359492c2024a can: dev: can_restart(): move debug message and stats after successful restart 71a2dc442e12 can: dev: can_restart(): reverse logic to remove need for goto 0ede6ce4fcf2 net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class e4f1564c5b69 net: appletalk: Fix use-after-free in AARP proxy probe d989748e9dbb i40e: When removing VF MAC filters, only check PF-set MAC 0c399fd6ac5a i40e: report VF tx_dropped with tx_errors instead of tx_discards a05b3883083b i40e: Add rx_missed_errors for buffer exhaustion e4ca597d3116 net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch c3d8a80d9557 net/mlx5: Fix memory leak in cmd_exec() bfebdb85496e xfrm: interface: fix use-after-free after changing collect_md xfrm interface 2e18442d22c6 staging: vchiq_arm: Make vchiq_shutdown never fail 6758f73f172d platform/x86: Fix initialization order for firmware_attributes_class d72c97b6160d x86/hyperv: Fix usage of cpu_online_mask to get valid cpu 0915f1856c48 regmap: fix potential memory leak of regmap_bus 881f3066fd8d iio: adc: ad7949: use spi_is_bpw_supported() 6a85c96e61c1 interconnect: qcom: sc7280: Add missing num_links to xm_pcie3_1 node fb93e41ecc75 RDMA/core: Rate limit GID cache warning messages 233d3c54c962 regulator: core: fix NULL dereference on unbind due to stale coupling data 0e8c65939ba2 virtio_ring: Fix error reporting in virtqueue_resize fa53beab4740 Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Bruce Ashfield [Thu, 16 Oct 2025 03:14:12 +0000 (23:14 -0400)]
linux-yocto/6.6: update to v6.6.100
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:
dbcb8d8e4163 Linux 6.6.100 3ee59c38ae73 KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls 48e879184320 nvmem: layouts: u-boot-env: remove crc32 endianness conversion 35542cbe66c6 i2c: omap: fix deprecated of_property_read_bool() use 056b65a02edc Revert "selftests/bpf: dummy_st_ops should reject 0 for non-nullable params" c148b7282808 Revert "selftests/bpf: adjust dummy_st_ops_success to detect additional error" b9e50a5169b0 ASoC: fsl_sai: Force a software reset when starting in consumer mode 8f2852c1d7aa regulator: pwm-regulator: Manage boot-on with disabled PWM channels cad3ec23e398 regulator: pwm-regulator: Calculate the output voltage for disabled PWMs 7e5ec0059e4d i2c: omap: Handle omap_i2c_init() errors in omap_i2c_probe() a7b84035baa8 i2c: omap: Fix an error handling path in omap_i2c_probe() caa86f8b6c30 i2c: omap: Add support for setting mux 6cfbff5f8dc9 usb: dwc3: qcom: Don't leave BCR asserted 824fa25c85e8 usb: hub: Don't try to recover devices lost during warm reset. 668c7b47a5ee usb: hub: Fix flushing of delayed work used for post resume purposes 71f5c98d2931 usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm 15fea75a7886 usb: hub: fix detection of high tier USB3 devices behind suspended hubs d5024dc5e644 arm64: Filter out SME hwcaps when FEAT_SME isn't implemented dc6a664089f1 clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns 4cb17b11c8af ipv6: make addrconf_wq single threaded 496efa228f0d sched: Change nr_uninterruptible type to unsigned long f371ad6471ee Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" 74bb4de32d92 rxrpc: Fix transmission of an abort in response to an abort 7692bde89006 rxrpc: Fix recv-recv race of completed call 7ff2d83ecf26 net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree 7b0d42318393 net: bridge: Do not offload IGMP/MLD messages bb515c413064 net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime 1f3a429c21e0 tls: always refresh the queue when reading sock 007142a263db hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf bd3051a81621 Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU 76179961c423 netfilter: nf_conntrack: fix crash due to removal of uninitialised entry dcbc346f50a0 ipv6: mcast: Delay put pmc->idev in mld_del_delrec() 6a213143e0ea net/mlx5: Correctly set gso_size when LRO is used ab94e7af363a Bluetooth: btusb: QCA: Fix downloading wrong NVM for WCN6855 GF variant without board ID 4ceefc9c31e7 Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout f3323b18e3cc Bluetooth: SMP: If an unallowed command is received consider it a failure 32e624912eed Bluetooth: hci_sync: fix connectable extended advertising when using static random address c4f16f6b071a Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() 5dd6a441748d usb: net: sierra: check for no status endpoint 27591d926191 ice: add NULL check in eswitch lag check eda5e38cc4dd hwmon: (corsair-cpro) Validate the size of the received input buffer c18726607c8a selftests: net: increase inter-packet timeout in udpgro.sh 167006f73005 wifi: cfg80211: remove scan request n_channels counted_by a2f02a87fe21 nvme: fix misaccounting of nvme-mpath inflight I/O ec158d05eaa9 net: phy: Don't register LEDs for genphy 5d95fbbfaa8f nvme: fix inconsistent RCU list manipulation in nvme_ns_add_to_ctrl_list() 2baaf5bbab2a smb: client: fix use-after-free in cifs_oplock_break 62dcd9d6e61c rpl: Fix use-after-free in rpl_do_srh_inline(). fbe48f06e641 net/sched: sch_qfq: Fix race condition on qfq_aggregate 21033b49cf09 block: fix kobject leak in blk_unregister_queue c20dd7e8f359 net: emaclite: Fix missing pointer increment in aligned_read() bc016b7842f6 cachefiles: Fix the incorrect return value in __cachefiles_write() e7be679124ba bpf: Reject %p% format string in bprintf-like helpers 12e023df10b6 soundwire: amd: fix for clearing command status register 84830e033bd2 soundwire: amd: fix for handling slave alerts after link is down 673ee92bd2d3 comedi: Fix initialization of data for instructions that write to subdevice 10f9024a8c82 comedi: Fix use of uninitialized data in insn_rw_emulate_bits() 63390b856178 comedi: Fix some signed shift left operations c9d3d9667443 comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large 8a3637027cee comedi: das6402: Fix bit shift out of bounds adb7df8a8f9d comedi: das16m1: Fix bit shift out of bounds 955e8835855f comedi: aio_iiro_16: Fix bit shift out of bounds 7e470d8efd10 comedi: pcl812: Fix bit shift out of bounds 8d8519aedbf1 iio: adc: stm32-adc: Fix race in installing chained IRQ handler 6471d4b4ac61 iio: adc: max1363: Reorder mode_list[] entries edff26d038d2 iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[] dda42f23a8f5 iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush 329a80adc0e5 soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled d93b20c88e5e soc: aspeed: lpc-snoop: Cleanup resources in stack-order 15a0a5de4950 smb: client: fix use-after-free in crypt_message when using async crypto 0c7b20f7785c s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again 600f55da8d90 pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov d510116c80b3 net: libwx: properly reset Rx ring descriptor 027701180a7b net: libwx: fix the using of Rx buffer DMA 3c91a56762b1 net: libwx: remove duplicate page_pool_put_full_page() e30c5fa723dc mmc: sdhci_am654: Workaround for Errata i2312 7ac120c00c5a mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models 5bfd0078f738 mmc: bcm2835: Fix dma_unmap_sg() nents value 4206824af6dd memstick: core: Zero initialize id_reg in h_memstick_read_dev_id() 928f3a277f2c isofs: Verify inode mode when loading from disk 4bb016438335 dmaengine: nbpfaxi: Fix memory corruption in probe() 2bae35acbb6e af_packet: fix soft lockup issue caused by tpacket_snd() 67ea5f37b203 af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd() e51cf5d4aa98 arm64: dts: rockchip: use cs-gpios for spi1 on ringneck 645af2f069d6 arm64: dts: freescale: imx8mm-verdin: Keep LDO5 always on bec18ebcf05c arm64: dts: imx8mp-venice-gw74xx: fix TPM SPI frequency 33eba752d9de net/mlx5: Update the list of the PCI supported devices 29db3339db0e phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept() d48845afa083 io_uring/poll: fix POLLERR handling c855b9aa093a ALSA: hda/realtek: Add quirk for ASUS ROG Strix G712LWS 56f99fdb0b8d drm/amdgpu/gfx8: reset compute ring wptr on the GPU on resume 823d79890048 tracing/osnoise: Fix crash in timerlat_dump_stack() 6bc94f20a4c3 tracing: Add down_write(trace_event_sem) when adding trace event 6ba89b382be4 tracing/probes: Avoid using params uninitialized in parse_btf_arg() 0e5017d84d65 HID: core: do not bypass hid_hw_raw_request a1c0b87b7682 HID: core: ensure __hid_request reserves the report ID as the first byte fcda39a9c5b8 HID: core: ensure the allocated report buffer can contain the reserved report ID 469a39a33a99 dm-bufio: fix sched in atomic context 82b29ee8ba90 spi: Add check for 8-bit transfer with 8 IO mode support 415d4966cb54 pch_uart: Fix dma_sync_sg_for_device() nents value db44a558b3af Input: xpad - set correct controller type for Acer NGR200 0f6f30f5b01a nvmem: imx-ocotp: fix MAC address byte length 0cd051cb5852 thunderbolt: Fix bit masking in tb_dp_port_set_hops() dc52aff53465 thunderbolt: Fix wake on connect at runtime e6a2ff56b06e i2c: stm32: fix the device used for the DMA map 58bdd5160184 usb: gadget: configfs: Fix OOB read on empty string write ec35a7125d94 usb: musb: fix gadget state on disconnect 311c434f5d76 USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI 909d80414869 USB: serial: option: add Foxconn T99W640 84c320060d53 USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition ad2437f4abca phy: tegra: xusb: Disable periodic tracking on Tegra234 491175c139e5 phy: tegra: xusb: Decouple CYA_TRK_CODE_UPDATE_ON_IDLE from trk_hw_mode 5367cdeb75cb phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Bruce Ashfield [Thu, 16 Oct 2025 03:14:11 +0000 (23:14 -0400)]
linux-yocto/6.6: update to v6.6.99
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:
d96eb99e2f0e Linux 6.6.99 eaf112069a90 rseq: Fix segfault on registration when rseq_cs is non-zero f02f0218be41 crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() 97c355989928 ksmbd: fix potential use-after-free in oplock/lease break ack 8377d7744bdc kasan: remove kasan_find_vm_area() to prevent possible deadlock d3927e55c959 smb: client: fix potential race in cifs_put_tcon() a4bb7ced4e8f selftests/bpf: adapt one more case in test_lru_map to the new target_free f35c825a012d Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID 3ce1d87d1f5d HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras ae915b38e262 HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY b71a75739af9 bpf: Adjust free target to avoid global starvation of LRU map cd5b424d8322 vt: add missing notification when switching back to text mode f4428b2d4c68 btrfs: fix assertion when building free space tree 2cc5ef01ea03 net: mana: Record doorbell physical address in PF mode 9f460b235ef3 HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2 cd4df14f6180 net: usb: qmi_wwan: add SIMCom 8230C composition e07c2feb4916 ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100 ee287cf30ffb ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic 50b1e01aa123 io_uring: make fallocate be hashed work 825088c90357 um: vector: Reduce stack usage in vector_eth_configure() 8cafaba2f275 atm: idt77252: Add missing `dma_map_error()` 0d8a9b6dd321 ublk: sanity check add_dev input for underflow 5909679a82cd bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT e644935d40cb bnxt_en: Fix DCB ETS validation 7d4d1993517b net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam() 5aa8b3a1d8ab can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level 10946f834638 net: phy: microchip: limit 100M workaround to link-down events on LAN88xx 9fa29314eba1 ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof 4a17370da6e4 net: appletalk: Fix device refcount leak in atrtr_create() 9fbc49429a23 netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() d46186eb7bbd nbd: fix uaf in nbd_genl_connect() error path 8fc3d7b23d13 raid10: cleanup memleak at raid10_make_request df5894014a92 md/raid1: Fix stack memory use after return in raid1_reshape d1240029f97a drm/tegra: nvdec: Fix dma_alloc_coherent error check 5420de65efbe wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() 739296467a59 cifs: all initializations for tcon should happen in tcon_info_alloc 03c3cd0c3b67 smb: client: fix DFS interlink failover d043b5da37fc smb: client: avoid unnecessary reconnects when refreshing referrals 609a617a97c0 usb: dwc3: Abort suspend on soft disconnect failure e3f79e2c9ad1 usb: cdnsp: Fix issue with CV Bad Descriptor test ae5b191184ce usb: cdnsp: Replace snprintf() with the safer scnprintf() variant 7227a8229f43 usb:cdnsp: remove TRB_FLUSH_ENDPOINT command fd79927c8191 btrfs: fix inode lookup error handling during log replay 6aea26dc23d5 btrfs: return a btrfs_inode from btrfs_iget_logging() e6031107f397 btrfs: remove redundant root argument from fixup_inode_link_count() 28a36e75d196 btrfs: remove redundant root argument from btrfs_update_inode_fallback() ddead3c5ca18 btrfs: remove noinline from btrfs_update_inode() c31ee1695b6d netlink: make sure we allow at least one dump skb ce2ac2e46719 netlink: Fix rmem check in netlink_broadcast_deliver(). 5b1b8f06b179 erofs: fix to add missing tracepoint in erofs_read_folio() 4c4f931676b6 ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked() d903a0fe324e smb: server: make use of rdma_destroy_qp() 3c0994a3fd93 x86/mm: Disable hugetlb page table sharing on 32-bit ee21fbcb87a0 x86/rdrand: Disable RDSEED on AMD Cyan Skillfish ad9d4db5a8ac pwm: mediatek: Ensure to disable clocks in error path 37e2911d2ec1 mm/vmalloc: leave lazy MMU mode on PTE mapping error f64046ae3401 scripts/gdb: fix interrupts.py after maple tree conversion ecf16604f3f0 scripts/gdb: de-reference per-CPU MCE interrupts e2e200c98e9f scripts/gdb: fix interrupts display after MCP on x86 56995226431a mm: fix the inaccurate memory statistics issue for users 167134042418 maple_tree: fix mt_destroy_walk() on root leaf node 688bf63ee6ba kallsyms: fix build without execinfo c23a41086899 Revert "ACPI: battery: negate current when discharging" 2e2e9b3d7084 drm/framebuffer: Acquire internal references on GEM handles dec7774d0ef9 Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io" c6eb4a05af3d usb: gadget: u_serial: Fix race condition in TTY wakeup 8c290a9d629b drm/gem: Fix race in drm_gem_handle_create_tail() db7402d78e7c drm/ttm: fix error handling in ttm_buffer_object_transfer c64f5310530b drm/sched: Increment job count before swapping tail spsc queue cb4c956a15f8 drm/gem: Acquire references on GEM handles for framebuffers ec6392061de6 wifi: prevent A-MSDU attacks in mesh networks 1d57f7132662 pinctrl: qcom: msm: mark certain pins as invalid for interrupts 3d82a729530b md/md-bitmap: fix GPF in bitmap_get_stats() 2ca1db269a8d gre: Fix IPv6 multicast route creation. 8c8e8d4d7544 KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight 20d1d9e7ce69 KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table. a18776abc592 x86/mce: Make sure CMCI banks are cleared during shutdown on Intel f536f3b09773 x86/mce: Don't remove sysfs if thresholding sysfs init fails cc058adb9beb x86/mce/amd: Fix threshold limit reset 8e5058a5812e x86/mce/amd: Add default names for MCA banks and blocks e2d5c005dfc9 ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() efc1b2b7c1a3 rxrpc: Fix oops due to non-existence of prealloc backlog struct ddc4fe078948 Bluetooth: HCI: Set extended advertising data synchronously eb952372bf48 perf: build: Setup PKG_CONFIG_LIBDIR for cross compilation e63032e66bca maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() 432c5363cd6f rxrpc: Fix bug due to prealloc collision 4c691d1b6b6d net/sched: Abort __tc_modify_qdisc if parent class does not exist 07b585ae3699 atm: clip: Fix NULL pointer dereference in vcc_sendmsg() 3f61b997fe01 atm: clip: Fix infinite recursive call of clip_push(). 1fb9fb5a4b5c atm: clip: Fix memory leak of struct clip_vcc. 06935c50cfa3 atm: clip: Fix potential null-ptr-deref in to_atmarpd(). 36cf9bcf09bd net: phy: smsc: Fix link failure in forced mode with Auto-MDIX 0a0d040f12fe net: phy: smsc: Force predictable MDI-X state on LAN87xx 72c62b4991a2 net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap 791c8d6b76c5 net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2 d437e8e7dcb9 vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local` 9d24bb678028 vsock: Fix transport_* TOCTOU 401239811fa7 vsock: Fix transport_{g2h,h2g} TOCTOU 81373cd1d72d tcp: Correct signedness in skb remaining space calculation be4b8392da79 tipc: Fix use-after-free in tipc_conn_close(). 42262bc4e8ef vsock: fix `vsock_proto` declaration 55baecb9eb90 netlink: Fix wraparounds of sk->sk_rmem_alloc. f9b3d28f1f62 fix proc_sys_compare() handling of in-lookup dentries 82c0f15c26be pinctrl: amd: Clear GPIO debounce for suspend a219fcea8e8e Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected 51e082108345 Bluetooth: hci_sync: Fix not disabling advertising instance c604dd2c5e6b ASoC: cs35l56: probe() should fail if the device ID is not recognized 183bdb89af1b perf: Revert to requiring CAP_SYS_ADMIN for uprobes 71eb118baf6e perf/core: Fix the WARN_ON_ONCE is out of lock protected region 407f1073ea23 ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode 391e5ea5b877 drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling 521e9ff0b67c eventpoll: don't decrement ep refcount while still holding the ep mutex
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Bruce Ashfield [Thu, 16 Oct 2025 03:14:10 +0000 (23:14 -0400)]
linux-yocto/6.6: update to v6.6.98
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:
9247f4e6573a Linux 6.6.98 20aa3d519806 x86/CPU/AMD: Properly check the TSA microcode 59a2de10b81a Linux 6.6.97 897761d16564 f2fs: fix to avoid use-after-free issue in f2fs_filemap_fault 8c1944905855 x86/process: Move the buffer clearing before MONITOR 6fb766d53f61 x86/microcode/AMD: Add TSA microcode SHAs 276499bb6944 KVM: SVM: Advertise TSA CPUID bits to guests 90293047df18 x86/bugs: Add a Transient Scheduler Attacks mitigation 2b6a5fbe9dc1 x86/bugs: Rename MDS machinery to something more generic 8a7ac2737211 powerpc/kernel: Fix ppc_save_regs inclusion in build 63cff9f57e86 usb: typec: displayport: Fix potential deadlock 4b91b77af24c platform/x86: think-lmi: Fix sysfs group cleanup 98002f1ac947 platform/x86: think-lmi: Fix kobject cleanup cb3e3244d88d platform/x86: think-lmi: Create ksets consecutively 360546362865 powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed 73d43c215007 iommu/rockchip: prevent iommus dead loop when two masters share one IOMMU 6052862ba31c Logitech C-270 even more broken 6358cb9c2a31 i2c/designware: Fix an initialization issue d8eab407c08d dma-buf: fix timeout handling in dma_resv_wait_timeout v2 59205a3e93ef smb: client: fix readdir returning wrong type with POSIX extensions 937f49be49d6 usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume afbec8c34428 usb: cdnsp: do not disable slot for disabled slot c9a841fd2ec2 Input: iqs7222 - explicitly define number of external channels 2cd5e7c16942 Input: xpad - support Acer NGR 200 Controller c16b75aa6fb6 xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS 881c9274246c xhci: dbc: Flush queued requests before stopping dbc 897d1170c249 xhci: dbctty: disable ECHO flag by default 7609899eb6b7 usb: xhci: quirk for data loss in ISOC transfers 204bdc7a8b7b NFSv4/flexfiles: Fix handling of NFS level errors in I/O e3eed0134772 fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass adb29b437fe5 module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper a6069306f4e1 platform/x86: hp-bioscfg: Fix class device unregistration 8570c219cd59 platform/x86: hp-bioscfg: Directly use firmware_attributes_class 387da3b6d1a9 drm/v3d: Disable interrupts before resetting the GPU 817662f9bdf8 rcu: Return early if callback is not specified d5c1e3f32902 mtd: spinand: fix memory leak of ECC engine conf d547779e72ce ACPICA: Refuse to evaluate a method if arguments are missing 347827bd0c56 wifi: ath6kl: remove WARN on bad firmware input 5aebb9aa538a wifi: mac80211: drop invalid source address OCB frames 270d637100f9 aoe: defer rexmit timer downdev work to workqueue 55dfffc5e947 scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() 7b9203afeb37 regulator: fan53555: add enable_time support and soft-start times a1d10fee0783 ASoC: amd: yc: update quirk data for HP Victus 871beab5b4f9 powerpc: Fix struct termio related ioctl macros ba9117312795 platform/x86/amd/pmc: Add PCSpecialist Lafite Pro V 14M to 8042 quirks list 785200516552 ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic 69283b3fd463 ata: pata_cs5536: fix build on 32-bit UML 71f89fab5cc9 ata: libata-acpi: Do not assume 40 wire cable if no devices are enabled 6766316c1a9f ALSA: sb: Force to disable DMAs once when DMA mode is changed c7922052c6f2 ALSA: sb: Don't allow changing the DMA mode during operations c40ad1c04d30 drm/msm: Fix another leak in the submit error path fe2695b2f63b drm/msm: Fix a fence leak in submit error path 5df2087c9a1e drm/i915/dp_mst: Work around Thunderbolt sink disconnect after SINK_COUNT_ESI read ad09bb7cbd14 drm/simpledrm: Do not upcast in release helpers 51ba65860457 scsi: ufs: core: Fix clk scaling to be conditional in reset and restore 847af89aa163 scsi: ufs: core: Add OPP support for scaling clocks and regulators 95ffe734518d scsi: ufs: core: Fix abnormal scale up after last cmd finish 9e67044aa9a7 f2fs: fix to zero post-eof page d1ccd98eddba f2fs: convert f2fs_vm_page_mkwrite() to use folio 7ac8a61e5503 f2fs: prevent writing without fallocate() for pinned files b43c3050d211 f2fs: add tracepoint for f2fs_vm_page_mkwrite() bceae1daf302 x86/traps: Initialize DR6 by writing its architectural reset value 16254aa985d1 bnxt: properly flush XDP redirect lists 6310aafd4267 wifi: mac80211: finish link init before RCU publish ebca4264c648 wifi: mac80211: Add link iteration macro for link data 32d0b58079ed wifi: mac80211: chan: chandef is non-NULL for reserved bc0819a25e04 Bluetooth: hci_core: Fix use-after-free in vhci_flush() 64d07a40f853 smb: client: remove \t from TP_printk statements 3499dcb6c507 btrfs: fix qgroup reservation leak on failure to allocate ordered extent ccdd3eaec689 Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1" ca7d5aa7ccf0 smb: client: fix race condition in negotiate timeout by using more precise timing 70b32cba5cfd amd-xgbe: do not double read link status f680a4643c6f net/sched: Always pass notifications when child class becomes empty 5ea2a10be7d7 nui: Fix dma_mapping_error() check 7a1841c96093 rose: fix dangling neighbour pointers in rose_rt_device_down() 744cd8baffe8 enic: fix incorrect MTU comparison in enic_change_mtu() a133683c0567 amd-xgbe: align CL37 AN sequence as per databook f2ca04cbf01d lib: test_objagg: Set error message in check_expect_hints_stats() 8f4652848b36 igc: disable L1.2 PCI-E link substate to avoid performance issue 832058110a1d drm/i915/gsc: mei interrupt top half should be in irq disabled context 40e09506aea1 drm/i915/gt: Fix timeline left held on VMA alloc error 968a419c9513 net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect 0cee638d92ac smb: client: fix warning when reconnecting channel 33713f7cda3d platform/mellanox: mlxreg-lc: Fix logic error in power state check 421672fb7f13 platform/x86: dell-wmi-sysman: Fix class device unregistration dba37f72aae3 platform/x86: dell-sysman: Directly use firmware_attributes_class 4074f6a15e95 platform/x86: think-lmi: Fix class device unregistration 093ee65bdafb platform/x86: think-lmi: Directly use firmware_attributes_class ee813c62af62 platform/x86: firmware_attributes_class: Simplify API e52b896d5fb7 platform/x86: firmware_attributes_class: Move include linux/device/class.h 9143d22a09b5 platform/x86: make fw_attr_class constant 3df1e72b7bfe arm64: dts: qcom: sm8550: add UART14 nodes 0deb3eb78ebf platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks 55a90f82d4ff drm/i915/selftests: Change mock_request() to return error pointers 822c05444ffa spi: spi-fsl-dspi: Clear completion counter before initiating transfer 1fc5dc930137 drm/exynos: fimd: Guard display clock control with runtime PM calls 7e6423f80bd6 dpaa2-eth: fix xdp_rxq_info leak 31afd307975f ethernet: atl1: Add missing DMA mapping error checks and count errors 2a7ac29f10d8 btrfs: use btrfs_record_snapshot_destroy() during rmdir d77a16802896 btrfs: propagate last_unlink_trans earlier when doing a rmdir 65d7f92db8a9 btrfs: rename err to ret in btrfs_rmdir() 2d11d274e2e1 btrfs: fix iteration of extrefs during log replay 79b025ebc1c0 btrfs: fix missing error handling when searching for inode refs during log replay 529281206f11 Bluetooth: Prevent unintended pause by checking if advertising is active e373354ecfbf platform/mellanox: nvsw-sn2201: Fix bus number in adapter error message d8a1ad180c24 RDMA/mlx5: Fix vport loopback for MPV device efb3413f6ba9 RDMA/mlx5: Fix CC counters query for MPV 301303d14da6 RDMA/mlx5: Fix HW counters query for non-representor devices ee9cb28675a5 scsi: ufs: core: Fix spelling of a sysfs attribute name 39dac98aca12 scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu() c3ec87fbb00d scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database() 8ca65fa71024 NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN d0877c479f44 nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. 23a3b32a274a RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert edca475158f7 platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment 3962e5a3845d arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename b935c1e734d2 mtk-sd: reset host->mrq on prepare_data() error 61cdd6635646 mtk-sd: Prevent memory corruption from DMA map failure b3b00e9b03d3 mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data 45e9444b3b97 usb: typec: altmodes/displayport: do not index invalid pin_assignments 24418bc77a66 regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods 0506547f6e3d Bluetooth: MGMT: mesh_send: check instances prior disabling advertising 8af1406949c1 Bluetooth: MGMT: set_mesh: update LE scan interval and window 7e88ad41b63e Bluetooth: hci_sync: revert some mesh modifications 3c0c18ef4c79 mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier c4fad2460c17 Revert "mmc: sdhci: Disable SD card clock before changing parameters" 3855b7ace3f9 mmc: sdhci: Add a helper function for dump register in dynamic debug mode 94d0c326cb3e vsock/vmci: Clear the vmci transport packet properly when initializing it e7191481d6ae s390/pci: Do not try re-enabling load/store if device is disabled 80b971be4c37 virtio-net: ensure the received length does not exceed allocated size 39617dc3fafe rtc: cmos: use spin_lock_irqsave in cmos_interrupt 5cdd1f73401d rtc: pcf2127: fix SPI command byte for PCF2131 1cb814dbb03d rtc: pcf2127: add missing semicolon after statement
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
58cbbd43fe (HEAD -> release/2.39/master, origin/release/2.39/master) x86: Detect Intel Nova Lake Processor 835b1e3379 x86: Detect Intel Wildcat Lake Processor 765534258e nss: Group merge does not react to ERANGE during merge (bug 33361) 7ce7b4b2f4 Rename new tst-sem17 test to tst-sem18 a6ac06abeb Avoid uninitialized result in sem_open when file does not exist ff6ce67220 elf: handle addition overflow in _dl_find_object_update_1 [BZ #32245] fffc2df8a3 Optimize __libc_tsd_* thread variable access 83340b35cc i386: Add GLIBC_ABI_GNU_TLS version [BZ #33221] 5541edb1bd i386: Also add GLIBC_ABI_GNU2_TLS version [BZ #33129] 1f17635507 debug: Fix tst-longjmp_chk3 build failure on Hurd 3b6c8ea878 debug: Wire up tst-longjmp_chk3 89596f46e3 i386: Update ___tls_get_addr to preserve vector registers 4c2509882f elf: Preserve _rtld_global layout for the release branch cf0e7d512d elf: Compile _dl_debug_state separately (bug 33224) 5cd1f4b1a1 elf: Restore support for _r_debug interpositions and copy relocations 97017da5ef elf: Introduce _dl_debug_change_state 5601ad79b7 elf: Introduce separate _r_debug_array variable 24c94ea84e elf: Test dlopen (NULL, RTLD_LAZY) from an ELF constructor 79d84b5da5 elf: Fix handling of symbol versions which hash to zero (bug 29190) 5f5c411132 elf: Second ld.so relocation only if libc.so has been loaded 4c9b1877fd elf: Reorder audit events in dlcose to match _dl_fini (bug 32066) f407a14ff7 elf: Call la_objclose for proxy link maps in _dl_fini (bug 32065) e27601b385 elf: Signal la_objopen for the proxy link map in dlmopen (bug 31985) fef226255d elf: Add the endswith function to <endswith.h> d21a217fa0 elf: Update DSO list, write audit log to elf/tst-audit23.out 4f145bb35d elf: Switch to main malloc after final ld.so self-relocation 65d86471ce elf: Introduce _dl_relocate_object_no_relro 5434cc2c41 elf: Do not define consider_profiling, consider_symbind as macros b2d8c6cbe7 elf: rtld_multiple_ref is always true 2b89de7c91 Revert "elf: Run constructors on cyclic recursive dlopen (bug 31986)" 46e3ecad27 elf: Fix map_complete Systemtap probe in dl_open_worker 5f225025db elf: Signal RT_CONSISTENT after relocation processing in dlopen (bug 31986) d6cc325fcf elf: Signal LA_ACT_CONSISTENT to auditors after RT_CONSISTENT switch 6917fde6f9 elf: Run constructors on cyclic recursive dlopen (bug 31986) 9fa7cc6a0b ldconfig: Move endswithn into a new header file 269e89bd8d x86-64: Add GLIBC_ABI_DT_X86_64_PLT [BZ #33212] 62ff85fd09 x86-64: Add GLIBC_ABI_GNU2_TLS version [BZ #33129] f0e8d04eef libio: Test for fdopen memory leak without SEEK_END support (bug 31840) 42a8cb7560 Remove memory leak in fdopen (bug 31840) d1c1f78e9e math: Remove no-mathvec flag 20d2d69a2f Use TLS initial-exec model for __libc_tsd_CTYPE_* thread variables [BZ #33234] c11950503f ctype: Fallback initialization of TLS using relocations (bug 19341, bug 32483) 25c537c3b3 Use proper extern declaration for _nl_C_LC_CTYPE_{class,toupper,tolower} fbdf9680cc Remove <libc-tsd.h> fca5937510 ctype: Reformat Makefile. 49f0e73fa3 elf: Handle ld.so with LOAD segment gaps in _dl_find_object (bug 31943) 64488b4b31 elf: Extract rtld_setup_phdr function from dl_main 9833fcf7ce elf: Do not add a copy of _dl_find_object to libc.so fbade65338 arm: Use _dl_find_object on __gnu_Unwind_Find_exidx (BZ 31405) 392e6cf1e8 AArch64: Improve codegen in SVE log1p 3a78a276a3 AArch64: Optimize inverse trig functions b6ea8902a7 AArch64: Avoid memset ifunc in cpu-features.c [BZ #33112]
glib-networking's OpenSSL backend fails to properly check the return
value of memory allocation routines. An out of memory condition could
potentially result in writing to an invalid memory location.
David Nyström [Wed, 15 Oct 2025 12:20:28 +0000 (14:20 +0200)]
openssh: fix CVE-2025-61984
ssh in OpenSSH before 10.1 allows control characters in usernames that
originate from certain possibly untrusted sources, potentially leading
to code execution when a ProxyCommand is used. The untrusted sources
are the command line and %-sequence expansion of a configuration file.
Note:
openssh does not support variable expansion until 10.0, so backport
adapts for this.
Peter Marko [Mon, 13 Oct 2025 19:07:31 +0000 (21:07 +0200)]
binutils: patch CVE-2025-11083
Pick patch per link in NVD report.
Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Peter Marko [Mon, 13 Oct 2025 19:07:30 +0000 (21:07 +0200)]
binutils: patch CVE-2025-11082
Pick patch per link in NVD report.
Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Steve Sakoman [Wed, 8 Oct 2025 21:23:36 +0000 (14:23 -0700)]
oeqa/sdk/cases/buildcpio.py: use gnu mirror instead of main server
ftp.gnu.org is the main server of the GNU project, however download speed
can vary greatly based on one's location.
Using ftpmirror.gnu.org should redirect the request to the closest up-to-date mirror,
which should result sometimes in significantly faster download speed, depending
on one's location. This should also distribute the traffic more across the mirrors.
This information was sourced from https://www.gnu.org/prep/ftp.html
Steve Sakoman [Wed, 8 Oct 2025 21:21:33 +0000 (14:21 -0700)]
selftest/cases/meta_ide.py: use use gnu mirror instead of main server
ftp.gnu.org is the main server of the GNU project, however download speed
can vary greatly based on one's location.
Using ftpmirror.gnu.org should redirect the request to the closest up-to-date mirror,
which should result sometimes in significantly faster download speed, depending
on one's location. This should also distribute the traffic more across the mirrors.
This information was sourced from https://www.gnu.org/prep/ftp.html
Gyorgy Sarvari [Tue, 27 May 2025 17:07:58 +0000 (19:07 +0200)]
conf/bitbake.conf: use gnu mirror instead of main server
ftp.gnu.org is the main server of the GNU project, however download speed
can vary greatly based on one's location.
Using ftpmirror.gnu.org should redirect the request to the closest up-to-date mirror,
which should result sometimes in significantly faster download speed, depending
on one's location. This should also distribute the traffic more across the mirrors.
This information was sourced from https://www.gnu.org/prep/ftp.html .
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit d8c6f01d7467e018aa0ed27a87850d9e4434a47a) Signed-off-by: Steve Sakoman <steve@sakoman.com>
Peter Marko [Mon, 6 Oct 2025 09:36:41 +0000 (11:36 +0200)]
openssl: upgrade 3.2.4 -> 3.2.6
3.2.6 has fixed 3.2.5 regression which broke python3 ptests so we can
upgrade now. We can also drop CVE-2025-27587 patch which was taken
instead of 3.2.5 upgrade under:
https://github.com/openssl/openssl/pull/28198
OpenSSL 3.2.6 is a security patch release. The most severe CVE fixed in this release is Moderate.
This release incorporates the following bug fixes and mitigations:
* Fix Out-of-bounds read & write in RFC 3211 KEK Unwrap. (CVE-2025-9230)
* Fix Timing side-channel in SM2 algorithm on 64 bit ARM. (CVE-2025-9231)
* Fix Out-of-bounds read in HTTP client no_proxy handling. (CVE-2025-9232)
If the PATH environment variable contains paths which are executables
(rather than just directories), passing certain strings to LookPath
("", ".", and ".."), can result in the binaries listed in the PATH
being unexpectedly returned.
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Peter Marko [Tue, 7 Oct 2025 21:02:13 +0000 (23:02 +0200)]
gstreamer1.0: ignore CVE-2025-2759
Copy statement from [1] that it is problem of installers (non-Linux).
Also [2] linked in NVD says "Fixed in 1.25.1 Gstreamer Installer".
Since Yocto builds from sources into our own packages, ignore it.
Ross Burton [Wed, 1 Oct 2025 20:58:36 +0000 (22:58 +0200)]
expect: cleanup do_install
Clean up the do_install append, and remove a long-standing unused
variable that appears to be intending to not install the scripts but
would have never actually done that as the relevant override since 2008
has been task-install. As we've been installing the scripts, keep
instaling them.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Ross Burton [Wed, 1 Oct 2025 20:58:35 +0000 (22:58 +0200)]
expect: don't run aclocal in do_configure
expect has a hand-maintained aclocal.m4 so don't run aclocal, which has the
side effect of not deleting the aclocal.m4 file which pulls in macros.
The build works without this change more through luck and a combination
of behaviours than design.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Ross Burton [Wed, 1 Oct 2025 20:58:34 +0000 (22:58 +0200)]
expect: update code for Tcl channel implementation
Tcl 8.4.0 changed the channel implementation, take a patch submitted
upstream to update the code for the new interface and remove the silencing
of the incompatible assignment error which was due to this issue.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com>
A flaw was found in Libtiff. This vulnerability is a "write-what-where"
condition, triggered when the library processes a specially crafted TIFF
image file.[EOL][EOL]By providing an abnormally large image height value
in the file's metadata, an attacker can trick the library into writing
attacker-controlled color data to an arbitrary memory location. This
memory corruption can be exploited to cause a denial of service (application
crash) or to achieve arbitrary code execution with the permissions of the user.
This change corresponds to upstream eeb3974472429a99a724f324dc8a63e435741f68
from master .
Since the p11-kit version are different between master & scarthgap
applied the patch manually
Signed-off-by: Philip Lorenz <philip.lorenz@bmw.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: AshishKumar Mishra <emailaddress.ashish@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
This change corresponds to upstream d848b454e64ffbd642590b4bbc378619e1547ad3
from master .
Since the systemd version are different between master & scarthgap
applied the patch manually
Signed-off-by: Philip Lorenz <philip.lorenz@bmw.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: AshishKumar Mishra <emailaddress.ashish@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
1, A cookie is set using the secure keyword for https://target
2, curl is redirected to or otherwise made to speak with http://target
(same hostname, but using clear text HTTP) using the same cookie set
3, The same cookie name is set - but with just a slash as path (path="/").
Since this site is not secure, the cookie should just be ignored.
4, A bug in the path comparison logic makes curl read outside a heap buffer boundary
The bug either causes a crash or it potentially makes the comparison come to
the wrong conclusion and lets the clear-text site override the contents of
the secure cookie, contrary to expectations and depending on the memory contents
immediately following the single-byte allocation that holds the path.
The presumed and correct behavior would be to plainly ignore the second set of
the cookie since it was already set as secure on a secure host so overriding
it on an insecure host should not be okay.
Haixiao Yan [Tue, 16 Sep 2025 13:19:18 +0000 (21:19 +0800)]
buildtools-tarball: fix unbound variable issues under 'set -u'
When Bash runs with 'set -u' (nounset), accessing an unset variable
directly (e.g. [ -z "$SSL_CERT_FILE" ]) causes a fatal "unbound variable"
error. As a result, the fallback logic to set SSL_CERT_FILE/SSL_CERT_DIR
is never triggered and the script aborts.
The current code assumes these variables may be unset or empty, but does
not guard against 'set -u'. This breaks builds in stricter shell
environments or when users explicitly enable 'set -u'.
Fix this by using parameter expansion with a default value, e.g.
"${SSL_CERT_FILE:-}", so that unset variables are treated as empty
strings. This preserves the intended logic (respect host env first, then
CAFILE/CAPATH, then buildtools defaults) and makes the script robust
under 'set -u'.
Signed-off-by: Haixiao Yan <haixiao.yan.cn@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 4d880c2eccd534133a2a4e6579d955605c0956ec) Signed-off-by: Steve Sakoman <steve@sakoman.com>
In hostapd 2.10 and earlier, the PKEX code remains active even after a successful
PKEX association. An attacker that successfully bootstrapped public keys with
another entity using PKEX in the past, will be able to subvert a future bootstrapping
by passively observing public keys, re-using the encrypting element Qi and subtracting
it from the captured message M (X = M - Qi). This will result in the public ephemeral
key X; the only element required to subvert the PKEX association.
CVE-2022-37660-0001, CVE-2022-37660-0002, CVE-2022-37660-0003 and CVE-2022-37660-0004
are dependent commits while CVE-2022-37660-0005 is actual CVE fix.
The default CONNECTIVITY_CHECK_URIS uses "https://yoctoproject.org/connectivity.html"
which redirect to "https://www.yoctoproject.org/connectivity.html".
Some network configurations with proxies or restricted internet access
don't handle HTTP redirects properly during the sanity check phase,
causing build failures with:
ERROR: OE-core's config sanity checker detected a potential misconfiguration.
Either fix the cause of this error or at your own risk disable the checker (see sanity.conf).
Following is the list of potential problems / advisories:
Fetcher failure for URL: 'https://yoctoproject.org/connectivity.html'. URL doesn't work.
Updated the default URL to use the final destination directly to avoid
redirect-related connectivity check failures.
Also updated SDK test cases in https.py to use the corrected URL for
consistency.
Signed-off-by: Deepak Rathore <deeratho@cisco.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 60cdf960a3560f391babd559737f1afb31fb2c5c) Signed-off-by: Deepak Rathore <deeratho@cisco.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Hongxu Jia [Thu, 28 Aug 2025 10:32:10 +0000 (03:32 -0700)]
rpm: keep leading `/' from sed operation
For /usr/lib/rpm/macros, Yocto explicitly set OECMAKE_FIND_ROOT_PATH_MODE_PROGRAM
= "ONLY" [1][2] to search tools from CMAKE_FIND_ROOT_PATH [5] which locates in
native recipe sysroot or HOSTTOOLS_DIR. If found in native recipe sysroot or
HOSTTOOLS_DIR, the sed operation removed leading `/'
Jiaying Song [Wed, 27 Aug 2025 02:38:28 +0000 (10:38 +0800)]
ruby-ptest : some ptest fixes
- Skip the test_rm_r_no_permissions test under the root user, as
deletion always succeeds.
- Filter out tests under the -ext- directory in run-ptest. Due to the
commit [1],the packaging of .so test files under the .ext directory
was removed. As a result, adjust the test filtering rules to avoid
test failures caused by missing files.
- Add installation of rdoc.rb and did_you_mean.rb files in
do_install_ptest to ensure complete test dependencies.
- Add init.rb file to PTEST installation path.
Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Michael Halstead [Thu, 21 Aug 2025 22:43:09 +0000 (00:43 +0200)]
yocto-uninative: Update to 4.9 for glibc 2.42
Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Michael Halstead [Thu, 21 Aug 2025 22:43:08 +0000 (00:43 +0200)]
yocto-uninative: Update to 4.8 for GCC 15.1
Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Martin Jansa [Thu, 21 Aug 2025 22:43:01 +0000 (00:43 +0200)]
pkgconfig: fix build with gcc-15
* on hosts with gcc-15 or whenever glib PACKAGECONFIG isn't enabled
and pkgconfig uses own old bundled glib
* fixes:
http://errors.yoctoproject.org/Errors/Details/853015/
../../../git/glib/glib/goption.c:169:14: error: two or more data types in declaration specifiers
169 | gboolean bool;
| ^~~~
../../../git/glib/glib/goption.c:169:18: warning: declaration does not declare anything
169 | gboolean bool;
| ^
Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
projects / thirdparty / openembedded / openembedded-core.git / log
