Your message dated Sun, 28 Sep 2025 12:47:47 +0000 with message-id <E1v2qod-00AB04-1T@fasolo.debian.org> and subject line Bug#1114773: fixed in linux 6.1.153-1 has caused the Debian Bug report #1114773, regarding linux-image-6.1.0-39-amd64: Kernel panic when booting with kernel commandline parameter fips=1 to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org immediately.) -- 1114773: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1114773 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: linux-image-6.1.0-39-amd64: Kernel panic when booting with kernel commandline parameter fips=1
- From: Bavarian Developer <bayeriandeveloper@yahoo.com>
- Date: Tue, 9 Sep 2025 19:46:17 +0200
- Message-id: <[🔎] b38f8c56-aa04-4c2b-9004-952c68118584@yahoo.com>
- References: <b38f8c56-aa04-4c2b-9004-952c68118584.ref@yahoo.com>
Package: src:linux
Version: 6.1.148-1
Severity: important
Dear Maintainer,
when booting the a complete vanilla installation of Debian 12.12 (installed from the released CD image) in Virtualbox, there is an immediate kernel panic.
The error message is as follows:
Kernel panic - not syncing: Module crc32_intel signature verification failed in FIPS mode
The commit history shows changes of kernel module signing.
-- Package-specific info:
** Version:
Linux version 6.1.0-39-amd64 (debian-kernel@lists.debian.org) (gcc-12 (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40) #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26)
** Command line:
BOOT_IMAGE=/boot/vmlinuz-6.1.0-39-amd64 root=UUID=0b8d67a7-295e-4cd8-aa1c-bad337d63e31 ro quiet fips=1
** Not tainted
** Kernel log:
Unable to read kernel log; any relevant messages should be attached
** Model information
sys_vendor: innotek GmbH
product_name: VirtualBox
product_version: 1.2
chassis_vendor: Oracle Corporation
chassis_version:
bios_vendor: innotek GmbH
bios_version: VirtualBox
board_vendor: Oracle Corporation
board_name: VirtualBox
board_version: 1.2
** Loaded modules:
tls
binfmt_misc
intel_rapl_msr
intel_rapl_common
intel_pmc_core
intel_powerclamp
ghash_clmulni_intel
sha512_ssse3
sha256_ssse3
sha1_ssse3
aesni_intel
crypto_simd
cryptd
snd_intel8x0
rapl
snd_ac97_codec
vmwgfx
ac97_bus
snd_pcm
drm_ttm_helper
snd_timer
ttm
pcspkr
snd
joydev
soundcore
drm_kms_helper
vboxguest
ac
button
evdev
serio_raw
sg
fuse
loop
efi_pstore
drm
dm_mod
configfs
ip_tables
x_tables
autofs4
ext4
crc16
mbcache
jbd2
crc32c_generic
hid_generic
usbhid
hid
sd_mod
t10_pi
crc64_rocksoft
sr_mod
crc64
crc_t10dif
cdrom
crct10dif_generic
ata_generic
ohci_pci
ahci
ata_piix
libahci
ohci_hcd
ehci_pci
ehci_hcd
crct10dif_pclmul
crct10dif_common
crc32_pclmul
e1000
libata
crc32c_intel
video
psmouse
scsi_mod
usbcore
i2c_piix4
usb_common
scsi_common
battery
wmi
** PCI devices:
00:00.0 Host bridge [0600]: Intel Corporation 440FX - 82441FX PMC [Natoma] [8086:1237] (rev 02)
Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
00:01.0 ISA bridge [0601]: Intel Corporation 82371SB PIIX3 ISA [Natoma/Triton II] [8086:7000]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0
00:01.1 IDE interface [0101]: Intel Corporation 82371AB/EB/MB PIIX4 IDE [8086:7111] (rev 01) (prog-if 8a [ISA Compatibility mode controller, supports both channels switched to PCI native mode, supports bus mastering])
Control: I/O+ Mem- BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 64
Region 0: I/O ports at 01f0 [size=8]
Region 1: I/O ports at 03f4
Region 2: I/O ports at 0170 [size=8]
Region 3: I/O ports at 0374
Region 4: I/O ports at d000 [size=16]
Kernel driver in use: ata_piix
Kernel modules: ata_piix, ata_generic
00:02.0 VGA compatible controller [0300]: VMware SVGA II Adapter [15ad:0405] (prog-if 00 [VGA controller])
Subsystem: VMware SVGA II Adapter [15ad:0405]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 64
Interrupt: pin A routed to IRQ 18
Region 0: I/O ports at d010 [size=16]
Region 1: Memory at e0000000 (32-bit, prefetchable) [size=16M]
Region 2: Memory at f0000000 (32-bit, non-prefetchable) [size=2M]
Expansion ROM at 000c0000 [virtual] [disabled] [size=128K]
Kernel driver in use: vmwgfx
Kernel modules: vmwgfx
00:03.0 Ethernet controller [0200]: Intel Corporation 82540EM Gigabit Ethernet Controller [8086:100e] (rev 02)
Subsystem: Intel Corporation PRO/1000 MT Desktop Adapter [8086:001e]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz+ UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 64 (63750ns min)
Interrupt: pin A routed to IRQ 19
Region 0: Memory at f0200000 (32-bit, non-prefetchable) [size=128K]
Region 2: I/O ports at d020 [size=8]
Capabilities: [dc] Power Management version 2
Flags: PMEClk- DSI+ D1- D2- AuxCurrent=0mA PME(D0-,D1-,D2-,D3hot-,D3cold-)
Status: D0 NoSoftRst- PME-Enable- DSel=0 DScale=0 PME-
Capabilities: [e4] PCI-X non-bridge device
Command: DPERE- ERO+ RBC=512 OST=1
Status: Dev=ff:1f.0 64bit- 133MHz- SCD- USC- DC=simple DMMRBC=2048 DMOST=1 DMCRS=8 RSCEM- 266MHz- 533MHz-
Kernel driver in use: e1000
Kernel modules: e1000
00:04.0 System peripheral [0880]: InnoTek Systemberatung GmbH VirtualBox Guest Service [80ee:cafe]
Control: I/O+ Mem+ BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Interrupt: pin A routed to IRQ 20
Region 0: I/O ports at d040 [size=32]
Region 1: Memory at f0400000 (32-bit, non-prefetchable) [size=4M]
Region 2: Memory at f0800000 (32-bit, prefetchable) [size=16K]
Kernel driver in use: vboxguest
Kernel modules: vboxguest
00:05.0 Multimedia audio controller [0401]: Intel Corporation 82801AA AC'97 Audio Controller [8086:2415] (rev 01)
Subsystem: Dell 82801AA AC'97 Audio Controller [1028:0177]
Control: I/O+ Mem- BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 64
Interrupt: pin A routed to IRQ 21
Region 0: I/O ports at d100 [size=256]
Region 1: I/O ports at d200 [size=64]
Kernel driver in use: snd_intel8x0
Kernel modules: snd_intel8x0
00:06.0 USB controller [0c03]: Apple Inc. KeyLargo/Intrepid USB [106b:003f] (prog-if 10 [OHCI])
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 64
Interrupt: pin A routed to IRQ 22
Region 0: Memory at f0804000 (32-bit, non-prefetchable) [size=4K]
Kernel driver in use: ohci-pci
Kernel modules: ohci_pci
00:07.0 Bridge [0680]: Intel Corporation 82371AB/EB/MB PIIX4 ACPI [8086:7113] (rev 08)
Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Interrupt: pin A routed to IRQ 9
Kernel driver in use: piix4_smbus
Kernel modules: i2c_piix4
00:0b.0 USB controller [0c03]: Intel Corporation 82801FB/FBM/FR/FW/FRW (ICH6 Family) USB2 EHCI Controller [8086:265c] (prog-if 20 [EHCI])
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV+ VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 64, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 19
Region 0: Memory at f0805000 (32-bit, non-prefetchable) [size=4K]
Kernel driver in use: ehci-pci
Kernel modules: ehci_pci
00:0d.0 SATA controller [0106]: Intel Corporation 82801HM/HEM (ICH8M/ICH8M-E) SATA Controller [AHCI mode] [8086:2829] (rev 02) (prog-if 01 [AHCI 1.0])
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 64
Interrupt: pin A routed to IRQ 21
Region 0: I/O ports at d240 [size=8]
Region 1: I/O ports at d248 [size=4]
Region 2: I/O ports at d250 [size=8]
Region 3: I/O ports at d258 [size=4]
Region 4: I/O ports at d260 [size=16]
Region 5: Memory at f0806000 (32-bit, non-prefetchable) [size=8K]
Capabilities: [70] Power Management version 3
Flags: PMEClk- DSI- D1- D2- AuxCurrent=0mA PME(D0-,D1-,D2-,D3hot-,D3cold-)
Status: D0 NoSoftRst- PME-Enable- DSel=0 DScale=0 PME-
Capabilities: [a8] SATA HBA v1.0 BAR4 Offset=00000002
Kernel driver in use: ahci
Kernel modules: ahci
** USB devices:
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 002 Device 002: ID 80ee:0021 VirtualBox USB Tablet
Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
-- System Information:
Debian Release: 12.12
APT prefers oldstable
APT policy: (500, 'oldstable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.1.0-39-amd64 (SMP w/1 CPU thread; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages linux-image-6.1.0-39-amd64 depends on:
ii initramfs-tools [linux-initramfs-tool] 0.142+deb12u3
ii kmod 30+20221128-1
ii linux-base 4.9
Versions of packages linux-image-6.1.0-39-amd64 recommends:
ii apparmor 3.0.8-3
ii firmware-linux-free 20200122-1
Versions of packages linux-image-6.1.0-39-amd64 suggests:
pn debian-kernel-handbook <none>
ii grub-pc 2.06-13+deb12u1
pn linux-doc-6.1 <none>
Versions of packages linux-image-6.1.0-39-amd64 is related to:
pn firmware-amd-graphics <none>
pn firmware-atheros <none>
pn firmware-bnx2 <none>
pn firmware-bnx2x <none>
pn firmware-brcm80211 <none>
pn firmware-cavium <none>
pn firmware-intel-sound <none>
pn firmware-intelwimax <none>
pn firmware-ipw2x00 <none>
pn firmware-ivtv <none>
pn firmware-iwlwifi <none>
pn firmware-libertas <none>
pn firmware-linux-nonfree <none>
pn firmware-misc-nonfree <none>
pn firmware-myricom <none>
pn firmware-netxen <none>
pn firmware-qlogic <none>
pn firmware-realtek <none>
pn firmware-samsung <none>
pn firmware-siano <none>
pn firmware-ti-connectivity <none>
pn xen-hypervisor <none>
-- no debconf information
--- End Message ---
--- Begin Message ---
- To: 1114773-close@bugs.debian.org
- Subject: Bug#1114773: fixed in linux 6.1.153-1
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Sun, 28 Sep 2025 12:47:47 +0000
- Message-id: <E1v2qod-00AB04-1T@fasolo.debian.org>
- Reply-to: Salvatore Bonaccorso <carnil@debian.org>
Source: linux Source-Version: 6.1.153-1 Done: Salvatore Bonaccorso <carnil@debian.org> We believe that the bug you reported is fixed in the latest version of linux, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1114773@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <carnil@debian.org> (supplier of updated linux package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 20 Sep 2025 20:53:10 +0200 Source: linux Architecture: source Version: 6.1.153-1 Distribution: bookworm-security Urgency: high Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1114773 Changes: linux (6.1.153-1) bookworm-security; urgency=high . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.149 - io_uring: don't use int for ABI - ALSA: usb-audio: Validate UAC3 power domain descriptors, too - ALSA: usb-audio: Validate UAC3 cluster segment descriptors - ALSA: hda/realtek: Fix headset mic on HONOR BRB-X - ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks - smb3: fix for slab out of bounds on mount to ksmbd - smb: client: remove redundant lstrp update in negotiate protocol - gpio: virtio: Fix config space reading. - [amd64,arm64] net: phy: micrel: fix KSZ8081/KSZ8091 cable test - net: usb: asix_devices: add phy_mask for ax88772 mdio bus - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() - NFSD: detect mismatch of file handle and delegation stateid in OPEN op - NFS: Fix the setting of capabilities when automounting a new filesystem - sunvdc: Balance device refcount in vdc_port_mpgroup_check - fs: Prevent file descriptor table allocations exceeding INT_MAX - eventpoll: Fix semi-unbounded recursion (CVE-2025-38614) - Documentation: ACPI: Fix parent device references - ACPI: processor: perflib: Fix initial _PPC limit application - ACPI: processor: perflib: Move problematic pr->performance check - [amd64] KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow - [amd64] KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) - [amd64] KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update() - [amd64] KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID - [amd64] KVM: x86: Snapshot the host's DEBUGCTL in common x86 - [amd64] KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs - [amd64] KVM: x86/pmu: Gate all "unimplemented MSR" prints on report_ignored_msrs - [amd64] KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint - [amd64] KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer exits - [amd64] KVM: VMX: Handle forced exit due to preemption timer in fastpath - [amd64] KVM: x86: Move handling of is_guest_mode() into fastpath exit handlers - [amd64] KVM: VMX: Handle KVM-induced preemption timer exits in fastpath for L2 - [amd64] KVM: x86: Fully defer to vendor code to decide how to force immediate exit - [amd64] KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap - [amd64] KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag - [amd64] KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported - [amd64] KVM: VMX: Extract checking of guest's DEBUGCTL into helper - [amd64] KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter - [amd64] KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs - [amd64] KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest - udp: also consider secpath when evaluating ipsec use for checksumming - netfilter: ctnetlink: fix refcount leak on table dump - hfs: fix slab-out-of-bounds in hfs_bnode_read() - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() - [arm64] Handle KCOV __init vs inline mismatches - smb/server: avoid deadlock when linking with ReplaceIfExists - udf: Verify partition map count - drbd: add missing kref_get in handle_write_conflicts - hfs: fix not erasing deleted b-tree node issue - better lockdep annotations for simple_recursive_removal() - ata: libata-sata: Disallow changing LPM state if not supported - fs/ntfs3: Add sanity check for file name - fs/ntfs3: correctly create symlink for relative path - fix locking in efi_secret_unlink() - securityfs: don't pin dentries twice, once is enough... - usb: xhci: print xhci->xhc_state when queue_command failed - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag - usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default - usb: xhci: Avoid showing warnings for dying controller - usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command - usb: xhci: Avoid showing errors during surprise removal - remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU - cpufreq: Exit governor when failed to start old governor - [armhf] rockchip: fix kernel hang during smp initialization - PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store() - ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed - [arm64] thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required - tools/nolibc: define time_t in terms of __kernel_old_time_t - iio: adc: ad_sigma_delta: don't overallocate scan buffer - [armhf] tegra: Use I/O memcpy to write to IRAM - ACPI: PRM: Reduce unnecessary printing to avoid user confusion - PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() - thermal: sysfs: Return ENODATA instead of EAGAIN for reads - PM: sleep: console: Fix the black screen issue - ACPI: processor: fix acpi_object initialization - [arm64] mmc: sdhci-msm: Ensure SD card power isn't ON when card removed - ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path - pps: clients: gpio: fix interrupt handling order in remove path - reset: brcmstb: Enable reset drivers for ARCH_BCM2835 - mei: bus: Check for still connected devices in mei_cl_bus_dev_release() - mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() - ALSA: hda: Handle the jack polling always via a work - ALSA: hda: Disable jack polling at shutdown - [amd64] x86/bugs: Avoid warning when overriding return thunk - ASoC: hdac_hdmi: Rate limit logging on connection and disconnection - ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() - usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present - usb: core: usb_submit_urb: downgrade type check - pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() - [amd64] platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches - platform/chrome: cros_ec_typec: Defer probe on missing EC parent - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control - ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop - ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros - iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement - ASoC: codecs: rt5640: Retry DEVICE_ID verification - xen/netfront: Fix TX response spurious interrupts - net: usb: cdc-ncm: check for filtering capability - wifi: cfg80211: reject HTC bit for management frames - [s390x] time: Use monotonic clock in get_cycles() - be2net: Use correct byte order and format string for TCP seq and ack_seq - wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB - et131x: Add missing check after DMA map - net: ag71xx: Add missing check after DMA map - net/mlx5e: Properly access RCU protected qdisc_sleeping variable - [arm64] Mark kernel as tainted on SAE and SError panic - rcu: Protect ->defer_qs_iw_pending from data race - net: mctp: Prevent duplicate binds - wifi: cfg80211: Fix interface type validation - net: ipv4: fix incorrect MTU in broadcast routes - net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() - wifi: iwlwifi: mvm: fix scan request validation - [s390x] stp: Remove udelay from stp_sync_clock() - sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails - wifi: mac80211: don't complete management TX on SAE commit - ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc(). - [arm64] drm/msm: use trylock for debugfs - wifi: rtw89: Fix rtw89_mac_power_switch() for USB - wifi: rtw89: Disable deep power saving for USB/SDIO - [amd64] net: thunderbolt: Enable end-to-end flow control also in transmit - [amd64] net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths() - net: atlantic: add set_power to fw_ops for atl2 to fix wol - net: fec: allow disable coalescing - drm/amd/display: Separate set_gsl from set_gsl_source_select - wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() - wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect - drm/amd/display: Fix 'failed to blank crtc!' - wifi: mac80211: update radar_required in channel context after channel switch - wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`. - [powerpc*] floppy: Add missing checks after DMA map - netmem: fix skb_frag_address_safe with unreadable skbs - wifi: iwlegacy: Check rate_idx range after addition - neighbour: add support for NUD_PERMANENT proxy entries - drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual - net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs - gve: Return error for unknown admin queue command - [armhf] net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 - [armhf] net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 - [armhf] net: dsa: b53: prevent DIS_LEARNING access on BCM5325 - [armhf] net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 - ptp: Use ratelimite for freerun error message - wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() - ionic: clean dbpage in de-init - net: ncsi: Fix buffer overflow in fetching version id - drm/ttm: Should to return the evict error - uapi: in6: restore visibility of most IPv6 socket options - drm/ttm: Respect the shrinker core free target - net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 - vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page - vhost: fail early when __vhost_add_used() fails - drm/amd/display: Only finalize atomic_obj if it was initialized - watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition - cifs: Fix calling CIFSFindFirst() for root path without msearch - fbdev: fix potential buffer overflow in do_register_framebuffer() - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated - fs/orangefs: use snprintf() instead of sprintf() - watchdog: dw_wdt: Fix default timeout - hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state - watchdog: iTCO_wdt: Report error if timeout configuration fails - scsi: bfa: Double-free fix - jfs: truncate good inode pages when hard link is 0 - jfs: Regular file corruption check - jfs: upper bound check of tree index in dbAllocAG - [mips*] Don't crash in stack_top() for tasks without ABI or vDSO - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control - leds: leds-lp50xx: Handle reg to get correct multi_index - [armhf] dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs - [amd64] RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() - RDMA/core: reduce stack using in nldev_stat_get_doit() - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure - scsi: mpt3sas: Correctly handle ATA device errors - scsi: mpi3mr: Correctly handle ATA device errors - pinctrl: stm32: Manage irq affinity settings - media: tc358743: Check I2C succeeded during probe - media: tc358743: Return an appropriate colorspace from tc358743_set_fmt - media: tc358743: Increase FIFO trigger level to 374 - media: usb: hdpvr: disable zero-length read messages - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar - media: uvcvideo: Fix bandwidth issue for Alcor camera - md: dm-zoned-target: Initialize return variable r to avoid uninitialized use - module: Prevent silent truncation of module name in delete_module(2) - i3c: add missing include to internal header - rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 - i3c: don't fail if GETHDRCAP is unsupported - i3c: master: Initialize ret in i3c_i2c_notifier_call() - dm-mpath: don't print the "loaded" message if registering fails - dm-table: fix checking for rq stackable devices - apparmor: use the condition in AA_BUG_FMT even with debug disabled - i2c: Force DLL0945 touchpad i2c freq to 100khz - vfio/type1: conditional rescheduling while pinning - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans - scsi: target: core: Generate correct identifiers for PR OUT transport IDs - scsi: aacraid: Stop using PCI_IRQ_AFFINITY - vfio/mlx5: fix possible overflow in tracking max message size - ipmi: Use dev_warn_ratelimited() for incorrect message warnings - ipmi: Fix strcpy source and destination the same - net: phy: smsc: add proper reset flags for LAN8710A - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() - pNFS: Fix stripe mapping in block/scsi layout - pNFS: Fix disk addr range check in block/scsi layout - pNFS: Handle RPC size limit for layoutcommits - pNFS: Fix uninited ptr deref in block/scsi layout - rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe - scsi: lpfc: Remove redundant assignment to avoid memory leak - ASoC: soc-dai.c: add missing flag check at snd_soc_pcm_dai_probe() - ASoC: soc-dai.h: merge DAI call back functions into ops - [arm64,armhf] ASoC: fsl: merge DAI call back functions into ops - [arm64,armhf] ASoC: fsl_sai: replace regmap_write with regmap_update_bits - drm/amdgpu: fix incorrect vm flags to map bo - ext4: fix zombie groups in average fragment size lists - ext4: fix largest free orders lists corruption on mb_optimize_scan switch - usb: core: config: Prevent OOB read in SS endpoint companion parsing - misc: rtsx: usb: Ensure mmc child device is active when card is present - usb: typec: ucsi: Update power_supply on power role change - [amd64] comedi: fix race between polling and detaching - [amd64] thunderbolt: Fix copy+paste error in match_service_id() - cdc-acm: fix race between initial clearing halt and open - btrfs: zoned: use filesystem size not disk size for reclaim decision - btrfs: abort transaction during log replay if walk_log_tree() failed - btrfs: zoned: do not remove unwritten non-data block group - btrfs: fix log tree replay failure due to file with 0 links and extents - btrfs: do not allow relocation of partially dropped subvolumes - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit - hv_netvsc: Fix panic during namespace deletion with VF - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() - media: uvcvideo: Do not mark valid metadata as invalid - HID: magicmouse: avoid setting up battery timer when not needed - HID: apple: avoid setting up battery timer for devices without battery - serial: 8250: fix panic due to PSLVERR - cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() - usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init() - usb: gadget: udc: renesas_usb3: fix device leak at unbind - [arm64,armhf] usb: dwc3: meson-g12a: fix device leaks at unbind - bus: mhi: host: Fix endianness of BHI vector table - bus: mhi: host: Detect events pointing to unexpected TREs - vt: keyboard: Don't process Unicode characters in K_OFF mode - vt: defkeymap: Map keycodes above 127 to K_HOLE - Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()" - ksmbd: extend the connection limiting mechanism to support IPv6 - ext4: check fast symlink for ea_inode correctly - ext4: fix fsmap end of range reporting with bigalloc - ext4: fix reserved gdt blocks handling in fsmap - ext4: use kmalloc_array() for array space allocation - ext4: fix hole length calculation overflow in non-extent inodes - scsi: mpi3mr: Fix race between config read submit and interrupt completion - ata: libata-scsi: Fix ata_to_sense_error() status handling - scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers - scsi: ufs: ufs-pci: Fix default runtime and system PM levels - iio: imu: bno055: fix OOB access of hw_xlate array - iio: adc: ad_sigma_delta: change to buffer predisable - wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table() - wifi: ath11k: fix dest ring-buffer corruption - wifi: ath11k: fix source ring-buffer corruption - wifi: ath11k: fix dest ring-buffer corruption when ring is full - pwm: imx-tpm: Reset counter if CMOD is 0 - pwm: mediatek: Handle hardware enable and clock enable separately - pwm: mediatek: Fix duty and period setting - hwmon: (gsc-hwmon) fix fan pwm setpoint show functions - mtd: spi-nor: Fix spi_nor_try_unlock_all() - PCI: endpoint: Fix configfs group list head handling - PCI: endpoint: Fix configfs group removal on driver teardown - vsock/virtio: Validate length in packet header before skb_put() - vhost/vsock: Avoid allocating arbitrarily-sized SKBs - jbd2: prevent softlockup in jbd2_log_do_checkpoint() - [arm64,armhf] soc/tegra: pmc: Ensure power-domains are in a known state - media: gspca: Add bounds checking to firmware parser - [armhf] media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init() - media: vivid: fix wrong pixel_array control size - media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() - media: usbtv: Lock resolution while streaming - media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() - media: ov2659: Fix memory leaks in ov2659_probe() - drm/amd: Restore cached power limit during resume - drm/amdgpu: Avoid extra evict-restore process. - drm/amdgpu: update mmhub 3.0.1 client id mappings - drm/amdkfd: Destroy KFD debugfs after destroy KFD wq - drm/amd/display: Don't overwrite dce60_clk_mgr - net, hsr: reject HSR frame if skb can't hold tag - ipv6: sr: Fix MAC comparison to be constant-time - ACPI: pfr_update: Fix the driver update version check - mptcp: drop skb if MPTCP skb extension allocation fails - mptcp: pm: kernel: flush: do not reset ADD_ADDR limit - f2fs: fix to do sanity check on ino and xnid (CVE-2025-38347) - iio: hid-sensor-prox: Restore lost scale assignments - iio: hid-sensor-prox: Fix incorrect OFFSET calculation - [amd64] perf/x86/intel: Fix crash in icl_update_topdown_event() (CVE-2025-38322) - [amd64] x86/mce/amd: Add default names for MCA banks and blocks - net: add netdev_lockdep_set_classes() to virtual drivers - btrfs: fix qgroup reservation leak on failure to allocate ordered extent - [arm64] entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() - drm/sched: Remove optimization that causes hang when killing dependent jobs - net: enetc: fix device and OF node leak at probe - fscrypt: Don't use problematic non-inline crypto engines - block: reject invalid operation in submit_bio_noacct - block: Make REQ_OP_ZONE_FINISH a write operation - PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports - cifs: reset iface weights when we cannot find a candidate - usb: typec: fusb302: cache PD RX state - btrfs: qgroup: fix race between quota disable and quota rescan ioctl - btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() - xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags - btrfs: send: use fallocate for hole punching with send stream v2 - net_sched: sch_ets: implement lockless ets_dump() - net/sched: ets: use old 'nbands' while purging unused classes - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() - [armhf] usb: musb: omap2430: Convert to platform remove callback returning void - [armhf] usb: musb: omap2430: fix device leak at unbind - platform/chrome: cros_ec: Use per-device lockdep key - platform/chrome: cros_ec: remove unneeded label and if-condition - platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister() - [arm64] usb: dwc3: imx8mp: fix device leak at unbind - ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig - btrfs: populate otime when logging an inode item - tls: separate no-async decryption request handling from async (CVE-2024-58240) - [amd64] crypto: qat - fix ring to service map for QAT GEN4 - [arm64] cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB bits in ID_AA64MMFR1 register - [amd64] KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer - mptcp: make fallback action and fallback decision atomic (CVE-2025-38491) - mptcp: plug races between subflow fail and subflow creation (CVE-2025-38552) - mptcp: reset fallback status gracefully at disconnect() time - mm: drop the assumption that VM_SHARED always implies writable - mm: update memfd seal write check to include F_SEAL_WRITE - mm: reinstate ability to map write-sealed memfd mappings read-only - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync - kbuild: userprogs: use correct linker when mixing clang and GNU ld - [amd64] x86/reboot: Harden virtualization hooks for emergency reboot - [amd64] x86/reboot: KVM: Handle VMXOFF in KVM's reboot callback - [amd64] KVM: VMX: Flush shadow VMCS on emergency reboot - [arm64] KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix - memstick: Fix deadlock by moving removing flag earlier - mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency - squashfs: fix memory leak in squashfs_fill_super - mm/debug_vm_pgtable: clear page table entries at destroy_args() - ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6 - [s390x] sclp: Fix SCCB present check - drm/amd/display: Avoid a NULL pointer dereference - drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3 - drm/amd/display: Fix DP audio DTO1 clock source on DCE 6. - drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs - drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs - smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() - fs/buffer: fix use-after-free when call bh_read() helper - use uniform permission checks for all mount propagation changes - ftrace: Also allocate and copy hash for reading of filter files - iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe() - iio: proximity: isl29501: fix buffered read on big-endian systems - most: core: Drop device reference after usage in get_channel() - usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive - [amd64] comedi: Make insn_rw_emulate_bits() do insn->n samples - [amd64] comedi: pcl726: Prevent invalid irq number - [amd64] comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() - usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test - USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera - usb: storage: realtek_cr: Use correct byte order for bcs->Residue - USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles - [arm64,armhf] usb: dwc3: Ignore late xferNotReady event to prevent halt timeout - [arm64,armhf] usb: dwc3: Remove WARN_ON for device endpoint command timeouts - [arm64] dts: ti: k3-am62-main: Remove eMMC High Speed DDR support - scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE - ext4: preserve SB_I_VERSION on remount - scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers - scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems - [arm64] PCI: rockchip: Use standard PCIe definitions - [arm64] PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining - [arm64] soc: qcom: mdt_loader: Enhance split binary detection - [arm64] soc: qcom: mdt_loader: Ensure we don't read past the ELF header - f2fs: fix to call clear_page_private_reference in .{release,invalid}_folio - f2fs: fix to avoid out-of-boundary access in dnode page (CVE-2025-38677) - mptcp: disable add_addr retransmission when timeout is 0 - drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS - mmc: sdhci-pci-gli: Use PCI AER definitions, not hard-coded values - mmc: sdhci-pci-gli: Add a new function to simplify the code - mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER - mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn - drm/amd/display: Don't overclock DCE 6 by 15% - wifi: mac80211: avoid lockdep checking when removing deflink - wifi: mac80211: check basic rates validity in sta_link_apply_parameters - tls: fix handling of zero-length records on the rx_list - iio: imu: inv_icm42600: change invalid data error to -EBUSY - tracing: Remove unneeded goto out logic - tracing: Limit access to parser->buffer when trace_get_user failed - iio: light: as73211: Ensure buffer holes are zeroed - iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read() - compiler: remove __ADDRESSABLE_ASM{_STR,}() again - [amd64] x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper - cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key - iosys-map: Fix undefined behavior in iosys_map_clear() - RDMA/bnxt_re: Fix to initialize the PBL array - net: bridge: fix soft lockup in br_multicast_query_expired() - scsi: qla4xxx: Prevent a potential error pointer dereference - [amd64] iommu/amd: Avoid stack buffer overflow from kernel cmdline (CVE-2025-38676) - Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync() - [arm64] drm/hisilicon/hibmc: fix the hibmc loaded failed bug - ALSA: usb-audio: Fix size validation in convert_chmap_v3() - drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() - net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM - ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add - net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path - ppp: fix race conditions in ppp_fill_forward_path - phy: mscc: Fix timestamping for vsc8584 - net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization - gve: prevent ethtool ops after shutdown - ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc - igc: fix disabling L1.2 PCI-E link substate on I226 on init - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit - net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate - bonding: update LACP activity flag after setting lacp_active - bonding: Add independent control state machine - bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU - ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation - [s390x] hypfs: Avoid unnecessary ioctl registration in debugfs - [s390x] hypfs: Enable limited access during lockdown - netfilter: nf_reject: don't leak dst refcount for loopback packets - alloc_fdtable(): change calling conventions. https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.150 - ftrace: Fix potential warning in trace_printk_seq during ftrace_dump - scsi: core: sysfs: Correct sysfs attributes access rights - smb: client: fix race with concurrent opens in unlink(2) - smb: client: fix race with concurrent opens in rename(2) - ACPI: EC: Add device to acpi_ec_no_wakeup[] qurik list - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests - NFS: Fix a race when updating an existing write - vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put() - net: ipv4: fix regression in local-broadcast routes - [arm64] drm/msm: Defer fd_install in SUBMIT ioctl - [powerpc*] kvm: Fix ifdef to remove build warning - HID: input: rename hidinput_set_battery_charge_status() - HID: input: report battery status changes immediately - Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as success - Bluetooth: hci_event: Mark connection as closed during suspend disconnect - Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced - Bluetooth: hci_sync: fix set_local_name race condition - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). - net: dlink: fix multicast stats being counted incorrectly - phy: mscc: Fix when PTP clock is register and unregister - net/mlx5: Reload auxiliary drivers on fw_activate - net/mlx5e: Update and set Xon/Xoff upon MTU set - net/mlx5e: Update and set Xon/Xoff upon port speed set - net/mlx5e: Set local Xoff after FW update - net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts - net: rose: split remove and free operations in rose_remove_neigh() - net: rose: convert 'use' field to refcount_t - net: rose: include node references in rose_neigh refcount - sctp: initialize more fields in sctp_v6_from_sk() - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare - [x86] KVM: x86: use array_index_nospec with indices that come from guest - HID: asus: fix UAF via HID_CLAIMED_INPUT validation - HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() - HID: wacom: Add a new Art Pen 2 - HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() - Revert "drm/amdgpu: fix incorrect vm flags to map bo" - dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted - fs/smb: Fix inconsistent refcnt update - net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions - smb3 client: fix return code mapping of remap_file_range - drm/nouveau/disp: Always accept linear modifier - net: rose: fix a typo in rose_clear_routes() - HID: mcp2221: Don't set bus speed on every transfer - HID: mcp2221: Handle reads greater than 60 bytes - Revert "drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS" - xfs: do not propagate ENODATA disk errors into xattr code https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.151 - bpf: Add cookie object to bpf maps - bpf: Move cgroup iterator helpers to bpf.h - bpf: Move bpf map owner out of common struct - bpf: Fix oob access in cgroup local storage (CVE-2025-38502) - btrfs: fix race between logging inode and checking if it was logged before - btrfs: fix race between setting last_dir_index_offset and inode logging - btrfs: avoid load/store tearing races when checking if an inode was logged - cdc_ncm: Flag Intel OEM version of Fibocom L850-GL as WWAN - drm/amd/display: Don't warn when missing DCE encoder caps - Bluetooth: hci_sync: Avoid adding default advertising on startup - fs: writeback: fix use-after-free in __mark_inode_dirty() - [arm64] tee: fix NULL pointer dereference in tee_shm_put - [arm64] dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro - [arm64] tee: optee: ffa: fix a typo of "optee_ffa_api_is_compatible" - wifi: cfg80211: fix use-after-free in cmp_bss() - netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm - netfilter: conntrack: helper: Replace -EEXIST by -EBUSY - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - [x86] xirc2ps_cs: fix register access when enabling FullDuplex - mISDN: Fix memory leak in dsp_hwec_enable() - icmp: fix icmp_ndo_send address translation for reply direction - [arm64] net: macb: Fix tx_ptr_lock locking - net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync() - i40e: Fix potential invalid access when MAC list is empty - net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets - wifi: cw1200: cap SSID length in cw1200_do_join() - wifi: libertas: cap SSID len in lbs_associate() - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() - [arm64] net: thunder_bgx: add a missing of_node_put - [arm64] net: thunder_bgx: decrement cleanup index before use - ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init() - net/smc: Remove validation of reserved bits in CLC Decline message - mctp: return -ENOPROTOOPT for unknown getsockopt options - ax25: properly unshare skbs in ax25_kiss_rcv() - net: atm: fix memory leak in atm_register_sysfs when device_register fail - ppp: fix memory leak in pad_compress_skb - phy: mscc: Stop taking ts_lock for tx_queue and use its own lock - ALSA: usb-audio: Add mute TLV for playback volumes on some devices - ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids() - pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() - [amd64] x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() - mm: move page table sync declarations to linux/pgtable.h - ocfs2: prevent release journal inode after journal shutdown - wifi: mwifiex: Initialize the chan_stats array to zero - drm/amdgpu: drop hw access in non-DC audio fini - scsi: lpfc: Fix buffer free/clear order in deferred receive path - batman-adv: fix OOB read/write in network-coding decode - cifs: prevent NULL pointer dereference in UTF16 conversion - e1000e: fix heap overflow in e1000_set_eeprom - mm/slub: avoid accessing metadata when pointer is invalid in object_err() - PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads - cpufreq/sched: Explicitly synchronize limits_changed flag handling - btrfs: adjust subpage bit start based on sectorsize (CVE-2025-37931) - iio: light: opt3001: fix deadlock due to concurrent flag access (CVE-2025-37968) - [x86] i2c: designware: Fix an error handling path in i2c_dw_pci_probe() - ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup - vmxnet3: update MTU after device quiesce - [arm64,armhf] spi: tegra114: Remove unnecessary NULL-pointer checks - [arm64,armhf] spi: tegra114: Don't fail set_cs_timing when delays are zero - [x86] cpufreq: intel_pstate: Revise global turbo disable check - [x86] cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller - [x86] cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization - [x86] cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode - ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA - fs: relax assertions on failure to encode file handles (CVE-2024-57924) - drm/amd/display: Check link_res->hpo_dp_link_enc before using it (CVE-2024-47704) - ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model - ALSA: hda/realtek: Fix headset mic for TongFang X6[AF]R5xxY - Revert "drm/amdgpu: Avoid extra evict-restore process." - pcmcia: omap: Add missing check for platform_get_resource - pcmcia: Add error handling for add_interval() in do_validate_mem() - [arm64] drm/bridge: ti-sn65dsi86: fix REFCLK setting - drm/amdgpu: Optimize RAS TA initialization and TA unload funcs - drm/amdgpu: remove the check of init status in psp_ras_initialize - drm/amd/amdgpu: Fix style problems in amdgpu_psp.c - drm/amdgpu: Skip TMR allocation if not required - drm/amd: Make flashing messages quieter - drm/amdgpu: Replace DRM_* with dev_* in amdgpu_psp.c - drm/amd/amdgpu: Fix missing error return on kzalloc failure - mm, slub: refactor free debug processing - slub: Reflow ___slab_alloc() - mm: slub: avoid wake up kswapd in set_track_prepare - [arm64,armhf] spi: tegra114: Use value to check for invalid delays - [x86] cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo() - [x86] cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE() - [x86] cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo() https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.152 - [amd64] Add mitigations for VMSCAPE (CVE-2025-40300): - Documentation/hw-vuln: Add VMSCAPE documentation - x86/vmscape: Enumerate VMSCAPE bug - x86/vmscape: Add conditional IBPB mitigation - x86/vmscape: Enable the mitigation - x86/bugs: Move cpu_bugs_smt_update() down - x86/vmscape: Warn when STIBP is disabled with SMT - x86/vmscape: Add old Intel CPUs to affected list https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.153 - mm: introduce and use {pgd,p4d}_populate_kernel() - media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (CVE-2025-23160) - net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. (CVE-2025-23143) - tracing: Do not add length to print format in synthetic events - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read - NFSv4: Don't clear capabilities that won't be reset - NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set - NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server - tracing: Fix tracing_marker may trigger page fault during preempt_disable - ftrace/samples: Fix function size computation - NFSv4/flexfiles: Fix layout merge mirror check. - tracing: Silence warning when chunk allocation fails in trace_pid_write - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - proc: fix type confusion in pde_set_flags() - [x86] KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code - [x86] KVM: SVM: Return TSA_SQ_NO and TSA_L1_NO bits in __do_cpuid_func() - [x86] KVM: SVM: Set synthesized TSA CPUID flags - Revert "SUNRPC: Don't allow waiting for exiting tasks" - mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN - ocfs2: fix recursive semaphore deadlock in fiemap call - net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups - [armhf] mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer - [armhf] mtd: rawnand: stm32_fmc2: fix ECC overwrite - fuse: check if copy_file_range() returns larger than requested size - fuse: prevent overflow in copy_file_range return value - libceph: fix invalid accesses to ceph_connection_v1_info - mm/damon/sysfs: fix use-after-free in state_show() - mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() - mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() - mm/khugepaged: convert hpage_collapse_scan_pmd() to use folios - mm/khugepaged: fix the address passed to notifier on testing young - kernfs: Fix UAF in polling when open file is released - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory - Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table - Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups" - tty: hvc_console: Call hvc_kick in hvc_write unconditionally - dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks - USB: serial: option: add Telit Cinterion FN990A w/audio compositions - USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions - [arm64,armhf] net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() - tunnels: reset the GSO metadata before reusing the skb - docs: networking: can: change bcm_msg_head frames member to support flexible array - igb: fix link test skipping when interface is admin down - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path - can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed - can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails - net: hsr: Disable promiscuous mode in offload mode - net: hsr: Add support for MC filtering at the slave device - net: hsr: Add VLAN CTAG filter support - hsr: use rtnl lock when iterating over ports - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr - [amd64] dmaengine: idxd: Fix double free in idxd_setup_wqs() - [armhf] dmaengine: ti: edma: Fix memory allocation size for queue_priority_map - hrtimer: Remove unused function - hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active() - hrtimers: Unconditionally update target CPU base after offline timer migration - USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels - [arm64] dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees - [arm64] phy: tegra: xusb: fix device and OF node leak at probe - [armhf] phy: ti-pipe3: fix device leak at unbind - drm/amdgpu: fix a memory leak in fence cleanup when unloading - [x86] drm/i915/power: fix size for for_each_set_bit() in abox iteration - [arm64] soc: qcom: mdt_loader: Fix error return values in mdt_header_valid() - [arm64] soc: qcom: mdt_loader: Deal with zero e_shentsize - net: hsr: hsr_slave: Fix the promiscuous mode in offload mode . [ Ben Hutchings ] * Revert to using RSA for module signatures (Closes: #1114773) * d/b/gencontrol.py: Extend the effect of $DEBIAN_KERNEL_DISABLE_INSTALLER . [ Santiago Ruano Rincón ] * d/salsa-ci.yml: Merge the extract-source job into the build's job script * d/salsa-ci.yml: Suppress unreleased changes and mismatching distribution lintian tags. * d/salsa-ci.yml: Early move orig tarballs back where they can be cached Checksums-Sha1: f9f168534607994c7344f40476c314ca5b7bd8e6 290931 linux_6.1.153-1.dsc 180dd449a17d475aa725e6e9529421411ca0ed9b 137857256 linux_6.1.153.orig.tar.xz 12f749373f4af18d2a9ab5ea7460488c86f45cff 1780628 linux_6.1.153-1.debian.tar.xz 181bda656440ddc8d914606cd49e495dee038d85 6843 linux_6.1.153-1_source.buildinfo Checksums-Sha256: c224f1fd69212b4c049cbc5080db22b168f6ef166de4ae1ca2665f6fe05049e2 290931 linux_6.1.153-1.dsc 3cab313f1b0e0ed257888c9057334bc2588f9a0a0f59e641e28b39b07518387f 137857256 linux_6.1.153.orig.tar.xz 10fed58690490c38949a3018d8da39a70d13eb0e042f00ac4d5f21afb689e808 1780628 linux_6.1.153-1.debian.tar.xz 2172f8cb3353cec5564543c47fb014094a3f58608cf9a9eb999aa1a00bfa1bde 6843 linux_6.1.153-1_source.buildinfo Files: 290ac22d295ba8dc71d9ce78a224e1fa 290931 kernel optional linux_6.1.153-1.dsc a4b45ac7382235264ed44066f94563a4 137857256 kernel optional linux_6.1.153.orig.tar.xz 0db07b8af431d873f58b7e0f41b6a9d0 1780628 kernel optional linux_6.1.153-1.debian.tar.xz 8543f3096bc26ddae457716b478e0cca 6843 kernel optional linux_6.1.153-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmjO+K9fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EgdwP/0y5WoN24i+jIIjtlBC4CZvHiQoQmBpR JuHYH2vj7IINo1gzQmOtUlxVoIEjf+70VeW23i1ZQwY9pOCnmIyEvVy+3+pACQhJ HIGZp+8UHcxKBcJim/RJziiGr2YF49wE7ljncvgi70hdNL4ei0ypp3YKvTZ2cOOh aBLUjSAjZrQlzRnbimE38YFU3fwLY8WRe3N/zKGfJN916ZaCLAg7PQ79hq9GiB3E TWvn5KkNrrxBnlUgwpYQNSRKQ80bVrT+alSi+Z05l6GV5e2W+2KeF0pnj940AZiO oh4CWR7v8nA4H404FfKFh4lDVBqHiYvtr0BgqOk5L1oLa2+R6nJ8kkRHZ2ALKf0f ivhT7FZqj7pgepSzRo9/4vUKycIRGJ0f3mrrWRIdlQypWYpQadM5JrvjkxnwKZ+S o5OquZuvf++tt311Oc0g3YWow8IQGmY2zJtHnsMDigwNjiHdJdWEAfmfM8bPWjrx lBK8WG+E7UYxEskIe/65TTzFcUFkhLOFtn/vj4iGYEDwXdm2/yf5BjHaMCwYP7bB eDvS8CTtKAHg9nX4yPerKpSUXIPngkhs7XToO6EhBri/Czewke7P4WmELN4Sghaa AwzXN4qUwh8XbCvPKZesvBfzGunDdh6CD+ughOeyKYQ0+sQNoAs3EW5YdnHs1QC7 v78ie/j42wfH =J+bl -----END PGP SIGNATURE-----Attachment: pgpeYLfMACWVd.pgp
Description: PGP signature
--- End Message ---