]> git.ipfire.org Git - thirdparty/kernel/stable-queue.git/commit
6.6-stable patches
authorGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 4 Jun 2026 08:52:57 +0000 (10:52 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 4 Jun 2026 08:52:57 +0000 (10:52 +0200)
commit1ceb483f1bc36af8046e25666fd8934afdcc8763
tree0c628faebea198c51937a82c574351bc27f27567
parent1fa2ffd5da5183ef137bef21cc794348ffc8ef38
6.6-stable patches

added patches:
auxdisplay-line-display-fix-oob-read-on-zero-length-message_store.patch
bluetooth-hidp-fix-missing-length-checks-in-hidp_input_report.patch
bluetooth-iso-fix-uaf-in-iso_recv_frame.patch
bluetooth-iso-serialize-iso_sock_clear_timer-with-socket-lock.patch
bluetooth-l2cap-fix-chan-ref-leak-in-l2cap_chan_timeout-on-conn.patch
bluetooth-l2cap-use-chan-timer-to-close-channels-in-cleanup_listen.patch
hpfs-fix-a-crash-if-hpfs_map_dnode_bitmap-fails.patch
iio-adc-viperboard-fix-error-handling-in-vprbrd_iio_read_raw.patch
iio-adc-xilinx-xadc-fix-sequencer-mode-in-postdisable-for-dual-mux.patch
iio-buffer-hw-consumer-fix-use-after-free-in-error-path.patch
iio-dac-ad5686-acquire-lock-when-doing-powerdown-control.patch
iio-dac-ad5686-fix-input-raw-value-check.patch
iio-dac-max5821-fix-return-value-check-in-powerdown-sync.patch
iio-gyro-itg3200-fix-i2c-read-into-the-wrong-stack-location.patch
iio-light-cm3323-fix-reg_conf-not-being-initialized-correctly.patch
iio-magnetometer-st_magn-fix-default-drdy-pin-selection-for-lis2mdl.patch
iio-ssp_sensors-cancel-delayed-work_refresh-on-remove.patch
iio-temperature-tsys01-fix-broken-prom-checksum-validation.patch
input-elan_i2c-validate-firmware-size-before-use.patch
input-xpad-fix-out-of-bounds-access-for-share-button.patch
ipc-limit-next_id-allocation-to-the-valid-id-range.patch
kvm-arm64-pmu-preserve-aarch32-counter-low-bits.patch
kvm-sev-warn-if-kvm-attempts-to-setup-scratch-area-with-min_len-0.patch
kvm-svm-flush-the-current-tlb-when-transitioning-from-xavic-x2avic.patch
parport-fix-race-between-port-and-client-registration.patch
usb-cdc-acm-fix-bit-overlap-and-move-quirk-definitions-to-header.patch
usb-cdns3-gadget-fix-request-skipping-after-clearing-halt.patch
usb-cdns3-plat-fix-unbalanced-pm_runtime_forbid-call-permanently-leaks-the-runtime-pm-usage-counter-across-bind-unbind-cycles.patch
usb-dwc2-fix-use-after-free-in-debug-code.patch
usb-serial-omninet-fix-memory-corruption-with-small-endpoint.patch
31 files changed:
queue-6.6/auxdisplay-line-display-fix-oob-read-on-zero-length-message_store.patch [new file with mode: 0644]
queue-6.6/bluetooth-hidp-fix-missing-length-checks-in-hidp_input_report.patch [new file with mode: 0644]
queue-6.6/bluetooth-iso-fix-uaf-in-iso_recv_frame.patch [new file with mode: 0644]
queue-6.6/bluetooth-iso-serialize-iso_sock_clear_timer-with-socket-lock.patch [new file with mode: 0644]
queue-6.6/bluetooth-l2cap-fix-chan-ref-leak-in-l2cap_chan_timeout-on-conn.patch [new file with mode: 0644]
queue-6.6/bluetooth-l2cap-use-chan-timer-to-close-channels-in-cleanup_listen.patch [new file with mode: 0644]
queue-6.6/hpfs-fix-a-crash-if-hpfs_map_dnode_bitmap-fails.patch [new file with mode: 0644]
queue-6.6/iio-adc-viperboard-fix-error-handling-in-vprbrd_iio_read_raw.patch [new file with mode: 0644]
queue-6.6/iio-adc-xilinx-xadc-fix-sequencer-mode-in-postdisable-for-dual-mux.patch [new file with mode: 0644]
queue-6.6/iio-buffer-hw-consumer-fix-use-after-free-in-error-path.patch [new file with mode: 0644]
queue-6.6/iio-dac-ad5686-acquire-lock-when-doing-powerdown-control.patch [new file with mode: 0644]
queue-6.6/iio-dac-ad5686-fix-input-raw-value-check.patch [new file with mode: 0644]
queue-6.6/iio-dac-max5821-fix-return-value-check-in-powerdown-sync.patch [new file with mode: 0644]
queue-6.6/iio-gyro-itg3200-fix-i2c-read-into-the-wrong-stack-location.patch [new file with mode: 0644]
queue-6.6/iio-light-cm3323-fix-reg_conf-not-being-initialized-correctly.patch [new file with mode: 0644]
queue-6.6/iio-magnetometer-st_magn-fix-default-drdy-pin-selection-for-lis2mdl.patch [new file with mode: 0644]
queue-6.6/iio-ssp_sensors-cancel-delayed-work_refresh-on-remove.patch [new file with mode: 0644]
queue-6.6/iio-temperature-tsys01-fix-broken-prom-checksum-validation.patch [new file with mode: 0644]
queue-6.6/input-elan_i2c-validate-firmware-size-before-use.patch [new file with mode: 0644]
queue-6.6/input-xpad-fix-out-of-bounds-access-for-share-button.patch [new file with mode: 0644]
queue-6.6/ipc-limit-next_id-allocation-to-the-valid-id-range.patch [new file with mode: 0644]
queue-6.6/kvm-arm64-pmu-preserve-aarch32-counter-low-bits.patch [new file with mode: 0644]
queue-6.6/kvm-sev-warn-if-kvm-attempts-to-setup-scratch-area-with-min_len-0.patch [new file with mode: 0644]
queue-6.6/kvm-svm-flush-the-current-tlb-when-transitioning-from-xavic-x2avic.patch [new file with mode: 0644]
queue-6.6/parport-fix-race-between-port-and-client-registration.patch [new file with mode: 0644]
queue-6.6/series
queue-6.6/usb-cdc-acm-fix-bit-overlap-and-move-quirk-definitions-to-header.patch [new file with mode: 0644]
queue-6.6/usb-cdns3-gadget-fix-request-skipping-after-clearing-halt.patch [new file with mode: 0644]
queue-6.6/usb-cdns3-plat-fix-unbalanced-pm_runtime_forbid-call-permanently-leaks-the-runtime-pm-usage-counter-across-bind-unbind-cycles.patch [new file with mode: 0644]
queue-6.6/usb-dwc2-fix-use-after-free-in-debug-code.patch [new file with mode: 0644]
queue-6.6/usb-serial-omninet-fix-memory-corruption-with-small-endpoint.patch [new file with mode: 0644]