| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20250922192404.455120315@linuxfoundation.org>
Date: Mon, 22 Sep 2025 21:29:00 +0200
From: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To: stable@...r.kernel.org
Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
patches@...ts.linux.dev,
linux-kernel@...r.kernel.org,
torvalds@...ux-foundation.org,
akpm@...ux-foundation.org,
linux@...ck-us.net,
shuah@...nel.org,
patches@...nelci.org,
lkft-triage@...ts.linaro.org,
pavel@...x.de,
jonathanh@...dia.com,
f.fainelli@...il.com,
sudipm.mukherjee@...il.com,
srw@...dewatkins.net,
rwarsow@....de,
conor@...nel.org,
hargar@...rosoft.com,
broonie@...nel.org,
achill@...ill.org
Subject: [PATCH 6.6 00/70] 6.6.108-rc1 review
This is the start of the stable review cycle for the 6.6.108 release.
There are 70 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 24 Sep 2025 19:23:52 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.108-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@...uxfoundation.org>
Linux 6.6.108-rc1
Eric Hagberg <ehagberg@...estreet.com>
Revert "loop: Avoid updating block size under exclusive owner"
Linus Torvalds <torvalds@...ux-foundation.org>
minmax: add a few more MIN_T/MAX_T users
Linus Torvalds <torvalds@...ux-foundation.org>
minmax: simplify and clarify min_t()/max_t() implementation
Linus Torvalds <torvalds@...ux-foundation.org>
minmax: avoid overly complicated constant expressions in VM code
Matthieu Baerts (NGI0) <matttbe@...nel.org>
mptcp: propagate shutdown to subflows when possible
Bruno Thomsen <bruno.thomsen@...il.com>
rtc: pcf2127: fix SPI command byte for PCF2131 backport
Vasant Hegde <vasant.hegde@....com>
iommu/amd/pgtbl: Fix possible race while increase page table level
Mathias Nyman <mathias.nyman@...ux.intel.com>
xhci: dbc: Fix full DbC transfer ring after several reconnects
Mathias Nyman <mathias.nyman@...ux.intel.com>
xhci: dbc: decouple endpoint allocation from initialization
Johan Hovold <johan@...nel.org>
phy: ti: omap-usb2: fix device leak at unbind
Rob Herring <robh@...nel.org>
phy: Use device_get_match_data()
Matthieu Baerts (NGI0) <matttbe@...nel.org>
selftests: mptcp: userspace pm: validate deny-join-id0 flag
Matthieu Baerts (NGI0) <matttbe@...nel.org>
mptcp: pm: nl: announce deny-join-id0 flag
Sankararaman Jayaraman <sankararaman.jayaraman@...adcom.com>
vmxnet3: unregister xdp rxq info in the reset path
Stefan Metzmacher <metze@...ba.org>
smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
Herbert Xu <herbert@...dor.apana.org.au>
crypto: af_alg - Set merge to zero early in af_alg_sendmsg
Qi Xi <xiqi2@...wei.com>
drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path
Loic Poulain <loic.poulain@....qualcomm.com>
drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
Colin Ian King <colin.i.king@...il.com>
ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message
Charles Keepax <ckeepax@...nsource.cirrus.com>
ASoC: wm8974: Correct PLL rate rounding
Charles Keepax <ckeepax@...nsource.cirrus.com>
ASoC: wm8940: Correct typo in control name
Charles Keepax <ckeepax@...nsource.cirrus.com>
ASoC: wm8940: Correct PLL rate rounding
Jens Axboe <axboe@...nel.dk>
io_uring: include dying ring in task_work "should cancel" state
Jens Axboe <axboe@...nel.dk>
io_uring: backport io_should_terminate_tw()
Praful Adiga <praful.adiga@...il.com>
ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx
Matthieu Baerts (NGI0) <matttbe@...nel.org>
selftests: mptcp: avoid spurious errors on TCP disconnect
Matthieu Baerts (NGI0) <matttbe@...nel.org>
selftests: mptcp: connect: catch IO errors on listen side
Håkon Bugge <haakon.bugge@...cle.com>
rds: ib: Increment i_fastreg_wrs before bailing out
Hans de Goede <hansg@...nel.org>
net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
Maciej S. Szmigiero <maciej.szmigiero@...cle.com>
KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active
Thomas Fourier <fourier.thomas@...il.com>
mmc: mvsdio: Fix dma_unmap_sg() nents value
Mohammad Rafi Shaik <mohammad.rafi.shaik@....qualcomm.com>
ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S
Krzysztof Kozlowski <krzysztof.kozlowski@...aro.org>
ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed
Mohammad Rafi Shaik <mohammad.rafi.shaik@....qualcomm.com>
ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface
Qu Wenruo <wqu@...e.com>
btrfs: tree-checker: fix the incorrect inode ref size check
Eugene Koira <eugkoira@...zon.com>
iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page()
Tao Cui <cuitao@...inos.cn>
LoongArch: Check the return value when creating kobj
Huacai Chen <chenhuacai@...nel.org>
LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled
Tiezhu Yang <yangtiezhu@...ngson.cn>
LoongArch: Update help info of ARCH_STRICT_ALIGN
H. Nikolaus Schaller <hns@...delico.com>
power: supply: bq27xxx: restrict no-battery detection to bq27000
H. Nikolaus Schaller <hns@...delico.com>
power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery
Herbert Xu <herbert@...dor.apana.org.au>
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
Nathan Chancellor <nathan@...nel.org>
nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
Stefan Metzmacher <metze@...ba.org>
ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size
Namjae Jeon <linkinjeon@...nel.org>
ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
Duoming Zhou <duoming@....edu.cn>
octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()
Duoming Zhou <duoming@....edu.cn>
cnic: Fix use-after-free bugs in cnic_delete_task
Alexey Nepomnyashih <sdl@...ct.ru>
net: liquidio: fix overflow in octeon_init_instr_queue()
Tariq Toukan <tariqt@...dia.com>
Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set"
Jakub Kicinski <kuba@...nel.org>
tls: make sure to abort the stream if headers are bogus
Kuniyuki Iwashima <kuniyu@...gle.com>
tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
Hangbin Liu <liuhangbin@...il.com>
bonding: don't set oif to bond dev when getting NS target destination
Jianbo Liu <jianbol@...dia.com>
net/mlx5e: Harden uplink netdev access against device unbind
Jianbo Liu <jianbol@...dia.com>
net/mlx5e: Consider aggregated port speed during rate configuration
Maciej Fijalkowski <maciej.fijalkowski@...el.com>
i40e: remove redundant memory barrier when cleaning Tx descs
Yeounsu Moon <yyyynoom@...il.com>
net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure
Geliang Tang <tanggeliang@...inos.cn>
selftests: mptcp: sockopt: fix error messages
Matthieu Baerts (NGI0) <matttbe@...nel.org>
mptcp: tfo: record 'deny join id0' info
Matthieu Baerts (NGI0) <matttbe@...nel.org>
mptcp: set remote_deny_join_id0 on SYN recv
Hangbin Liu <liuhangbin@...il.com>
bonding: set random address only when slaves already exist
Jamie Bainbridge <jamie.bainbridge@...il.com>
qed: Don't collect too many protection override GRC elements
Ioana Ciornei <ioana.ciornei@....com>
dpaa2-switch: fix buffer pool seeding for control traffic
Miaoqian Lin <linmq006@...il.com>
um: virtio_uml: Fix use-after-free after put_device in probe
Filipe Manana <fdmanana@...e.com>
btrfs: fix invalid extref key setup when replaying dentry
Chen Ridong <chenridong@...wei.com>
cgroup: split cgroup_destroy_wq into 3 workqueues
Geert Uytterhoeven <geert+renesas@...der.be>
pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch
Liao Yuanhong <liaoyuanhong@...o.com>
wifi: mac80211: fix incorrect type for ret
Lachlan Hodges <lachlan.hodges@...semicro.com>
wifi: mac80211: increase scan_ies_len for S1G
Takashi Sakamoto <o-takashi@...amocchi.jp>
ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported
Ajay.Kathat@...rochip.com <Ajay.Kathat@...rochip.com>
wifi: wilc1000: avoid buffer overflow in WID string configuration
-------------
Diffstat:
Makefile | 4 +-
arch/loongarch/Kconfig | 8 +-
arch/loongarch/include/asm/acenv.h | 7 +-
arch/loongarch/kernel/env.c | 2 +
arch/um/drivers/virtio_uml.c | 6 +-
arch/x86/kvm/svm/svm.c | 3 +-
arch/x86/mm/pgtable.c | 2 +-
crypto/af_alg.c | 10 ++-
drivers/block/loop.c | 38 ++-------
drivers/edac/sb_edac.c | 4 +-
drivers/gpu/drm/bridge/analogix/anx7625.c | 6 +-
.../gpu/drm/bridge/cadence/cdns-mhdp8546-core.c | 6 +-
drivers/gpu/drm/drm_color_mgmt.c | 2 +-
drivers/iommu/amd/amd_iommu_types.h | 1 +
drivers/iommu/amd/io_pgtable.c | 26 +++++-
drivers/iommu/intel/iommu.c | 7 +-
drivers/md/dm-integrity.c | 6 +-
drivers/mmc/host/mvsdio.c | 2 +-
drivers/net/bonding/bond_main.c | 2 +-
drivers/net/ethernet/broadcom/cnic.c | 3 +-
.../net/ethernet/cavium/liquidio/request_manager.c | 2 +-
.../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 2 +-
drivers/net/ethernet/intel/i40e/i40e_txrx.c | 3 -
.../net/ethernet/marvell/octeontx2/nic/otx2_ptp.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 2 -
drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 27 +++++--
drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c | 85 ++++++++++++++++---
drivers/net/ethernet/mellanox/mlx5/core/lib/mlx5.h | 15 +++-
drivers/net/ethernet/natsemi/ns83820.c | 13 ++-
drivers/net/ethernet/qlogic/qed/qed_debug.c | 7 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 2 +-
drivers/net/vmxnet3/vmxnet3_drv.c | 10 +--
drivers/net/wireless/microchip/wilc1000/wlan_cfg.c | 39 ++++++---
drivers/net/wireless/microchip/wilc1000/wlan_cfg.h | 5 +-
drivers/pcmcia/omap_cf.c | 8 +-
drivers/phy/broadcom/phy-bcm-ns-usb3.c | 9 +--
drivers/phy/marvell/phy-berlin-usb.c | 7 +-
drivers/phy/ralink/phy-ralink-usb.c | 10 +--
drivers/phy/rockchip/phy-rockchip-pcie.c | 11 +--
drivers/phy/rockchip/phy-rockchip-usb.c | 10 +--
drivers/phy/ti/phy-omap-control.c | 9 +--
drivers/phy/ti/phy-omap-usb2.c | 24 ++++--
drivers/phy/ti/phy-ti-pipe3.c | 14 +---
drivers/power/supply/bq27xxx_battery.c | 4 +-
drivers/rtc/rtc-pcf2127.c | 10 +--
drivers/usb/host/xhci-dbgcap.c | 94 +++++++++++++++-------
fs/btrfs/tree-checker.c | 4 +-
fs/btrfs/tree-log.c | 2 +-
fs/nilfs2/sysfs.c | 4 +-
fs/nilfs2/sysfs.h | 8 +-
fs/smb/client/smbdirect.c | 4 +-
fs/smb/server/transport_rdma.c | 26 ++++--
include/crypto/if_alg.h | 10 ++-
include/linux/minmax.h | 26 ++++--
include/linux/mlx5/driver.h | 1 +
include/linux/pageblock-flags.h | 2 +-
include/uapi/linux/mptcp.h | 6 +-
io_uring/io_uring.c | 7 +-
io_uring/io_uring.h | 13 +++
io_uring/poll.c | 3 +-
io_uring/timeout.c | 2 +-
kernel/cgroup/cgroup.c | 43 ++++++++--
net/ipv4/proc.c | 2 +-
net/ipv4/tcp.c | 5 ++
net/ipv6/proc.c | 2 +-
net/mac80211/driver-ops.h | 2 +-
net/mac80211/main.c | 7 +-
net/mptcp/options.c | 6 +-
net/mptcp/pm_netlink.c | 7 ++
net/mptcp/protocol.c | 16 ++++
net/mptcp/subflow.c | 4 +
net/rds/ib_frmr.c | 20 +++--
net/rfkill/rfkill-gpio.c | 4 +-
net/tls/tls.h | 1 +
net/tls/tls_strp.c | 14 ++--
net/tls/tls_sw.c | 3 +-
sound/firewire/motu/motu-hwdep.c | 2 +-
sound/pci/hda/patch_realtek.c | 1 +
sound/soc/codecs/wm8940.c | 9 ++-
sound/soc/codecs/wm8974.c | 8 +-
sound/soc/qcom/qdsp6/audioreach.c | 1 +
sound/soc/qcom/qdsp6/q6apm-lpass-dais.c | 7 +-
sound/soc/sof/intel/hda-stream.c | 2 +-
tools/testing/selftests/net/mptcp/mptcp_connect.c | 11 +--
tools/testing/selftests/net/mptcp/mptcp_sockopt.c | 16 ++--
tools/testing/selftests/net/mptcp/pm_nl_ctl.c | 7 ++
tools/testing/selftests/net/mptcp/userspace_pm.sh | 14 +++-
87 files changed, 601 insertions(+), 300 deletions(-)
Powered by blists - more mailing lists