Back to linux PTS page

Accepted linux 6.1.11-1 (source) into unstable



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 09 Feb 2023 22:48:50 +0100
Source: linux
Architecture: source
Version: 6.1.11-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
 linux (6.1.11-1) unstable; urgency=medium
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.9
     - [armel,armhf] memory: mvebu-devbus: Fix missing clk_disable_unprepare in
       mvebu_devbus_probe()
     - [arm64] soc: imx: imx8mp-blk-ctrl: enable global pixclk with HDMI_TX_PHY
       PD
     - [armhf] dts: imx6ul-pico-dwarf: Use 'clock-frequency'
     - [armhf] imx: add missing of_node_put()
     - [arm64] soc: imx: imx8mp-blk-ctrl: don't set power device name
     - [amd64] HID: intel_ish-hid: Add check for ishtp_dma_tx_map
     - [arm64] soc: imx8m: Fix incorrect check for of_clk_get_by_name()
     - [arm64] firmware: arm_scmi: Harden shared memory access in fetch_response
     - [arm64] firmware: arm_scmi: Harden shared memory access in
       fetch_notification
     - [arm64] firmware: arm_scmi: Fix virtio channels cleanup on shutdown
     - [amd64] HID: amd_sfh: Fix warning unwind goto
     - tomoyo: fix broken dependency on *.conf.default
     - RDMA/rxe: Fix inaccurate constants in rxe_type_info
     - RDMA/rxe: Prevent faulty rkey generation
     - erofs: fix kvcalloc() misuse with __GFP_NOFAIL
     - RDMA/core: Fix ib block iterator counter overflow
     - [amd64] IB/hfi1: Reject a zero-length user expected buffer
     - [amd64] IB/hfi1: Reserve user expected TIDs
     - [amd64] IB/hfi1: Fix expected receive setup error exit issues
     - [amd64] IB/hfi1: Immediately remove invalid memory from hardware
     - [amd64] IB/hfi1: Remove user expected buffer invalidate race
     - affs: initialize fsdata in affs_truncate()
     - kbuild: export top-level LDFLAGS_vmlinux only to scripts/Makefile.vmlinux
     - kbuild: fix 'make modules' error when CONFIG_DEBUG_INFO_BTF_MODULES=y
     - [arm64] drm/msm/gpu: Fix potential double-free
     - NFSD: fix use-after-free in nfsd4_ssc_setup_dul()
     - [arm64,armhf] drm/vc4: bo: Fix drmm_mutex_init memory hog
     - bpf: hash map, avoid deadlock with suitable hash mask
     - [amd64,arm64] amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent
     - [amd64,arm64] amd-xgbe: Delay AN timeout during KR training
     - bpf: Fix pointer-leak due to insufficient speculative store bypass
       mitigation
     - [amd64,arm64] drm/vc4: bo: Fix unused variable warning
     - [arm64] phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in
       rockchip_usb2phy_power_on()
     - net: nfc: Fix use-after-free in local_cleanup()
     - [arm64] net: enetc: avoid deadlock in enetc_tx_onestep_tstamp()
     - sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb
     - [arm64,armhf] gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock
     - [arm64,armhf] gpio: mxc: Always set GPIOs used as interrupt source to
       INPUT mode
     - wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid
       (CVE-2023-23559)
     - [arm64,armhf] pinctrl: rockchip: fix reading pull type on rk3568
     - net: stmmac: Fix queue statistics reading
     - net/sched: sch_taprio: fix possible use-after-free
     - l2tp: convert l2tp_tunnel_list to idr
     - l2tp: close all race conditions in l2tp_tunnel_register()
     - net: usb: sr9700: Handle negative len
     - net: mdio: validate parameter addr in mdiobus_get_phy()
     - HID: check empty report_list in hid_validate_values()
     - HID: check empty report_list in bigben_probe()
     - net: stmmac: fix invalid call to mdiobus_get_phy()
     - [arm64,armhf] pinctrl: rockchip: fix mux route data for rk3568
     - HID: revert CHERRY_MOUSE_000C quirk
     - usb: ucsi: Ensure connector delayed work items are flushed
     - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
     - usb: gadget: f_fs: Ensure ep0req is dequeued before free_request
     - netfilter: conntrack: handle tcp challenge acks during connection reuse
     - Bluetooth: Fix a buffer overflow in mgmt_mesh_add()
     - Bluetooth: hci_conn: Fix memory leaks
     - Bluetooth: hci_sync: fix memory leak in hci_update_adv_data()
     - Bluetooth: ISO: Avoid circular locking dependency
     - Bluetooth: ISO: Fix possible circular locking dependency
     - Bluetooth: hci_event: Fix Invalid wait context
     - Bluetooth: Fix possible deadlock in rfcomm_sk_state_change
     - net/mlx5e: Avoid false lock dependency warning on tc_ht even more
     - net/mlx5: E-switch, Fix setting of reserved fields on
       MODIFY_SCHEDULING_ELEMENT
     - net/mlx5e: QoS, Fix wrongfully setting parent_element_id on
       MODIFY_SCHEDULING_ELEMENT
     - net/mlx5e: Set decap action based on attr for sample
     - net/mlx5: E-switch, Fix switchdev mode after devlink reload
     - net: mlx5: eliminate anonymous module_init & module_exit
     - dmaengine: Fix double increment of client_count in dma_chan_get()
     - net: macb: fix PTP TX timestamp failure due to packet padding
     - virtio-net: correctly enable callback during start_xmit
     - l2tp: prevent lockdep issue in l2tp_tunnel_register()
     - HID: betop: check shape of output reports
     - cifs: fix potential deadlock in cache_refresh_path()
     - drm/amd/display: fix issues with driver unload
     - net: sched: gred: prevent races when adding offloads to stats
     - nvme-pci: fix timeout request state check
     - tcp: avoid the lookup process failing to get sk in ehash table
     - device property: fix of node refcount leak in
       fwnode_graph_get_next_endpoint()
     - w1: fix deadloop in __w1_remove_master_device()
     - w1: fix WARNING after calling w1_process()
     - driver core: Fix test_async_probe_init saves device in wrong array
     - thermal: Validate new state in cur_state_store()
     - thermal/core: fix error code in __thermal_cooling_device_register()
     - thermal: core: call put_device() only after device_register() fails
     - net: stmmac: enable all safety features by default
     - bnxt: Do not read past the end of test names
     - tcp: fix rate_app_limited to default to 1
     - scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace
     - [x86] ASoC: SOF: pm: Set target state earlier
     - [x86] ASoC: SOF: pm: Always tear down pipelines before DSP suspend
     - [x86] ASoC: SOF: Add FW state to debugfs
     - [x86] ASoC: amd: yc: Add Razer Blade 14 2022 into DMI table
     - [arm64] cpufreq: CPPC: Add u64 casts to avoid overflowing
     - [arm64,armhf] cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist
     - [x86] ASoC: amd: yc: Add ASUS M5402RA into DMI table
     - [arm64,armhf] cpufreq: Add SM6375 to cpufreq-dt-platdev blocklist
     - [arm64] ASoC: fsl_micfil: Correct the number of steps on SX controls
     - [arm64] drm/msm/a6xx: Avoid gx gbit halt during rpm suspend
     - net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem
     - drm: Add orientation quirk for Lenovo ideapad D330-10IGL
     - [s390x] debug: add _ASM_S390_ prefix to header guard
     - [s390x] expicitly align _edata and _end symbols on page boundary
     - xen/pvcalls: free active map buffer on pvcalls_front_free_map
     - [x86] perf/x86/cstate: Add Meteor Lake support
     - [x86] perf/x86/msr: Add Meteor Lake support
     - [x86] perf/x86/msr: Add Emerald Rapids
     - [x86] perf/x86/intel/uncore: Add Emerald Rapids
     - [arm64] cpufreq: armada-37xx: stop using 0 as NULL pointer
     - [arm64,armhf] ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with
       AC'97 CODEC
     - [arm64] ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets
     - ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA
     - cifs: fix potential memory leaks in session setup
     - spi: spidev: remove debug messages that access spidev->spi without locking
     - [s390x] KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
     - [arm64] scsi: hisi_sas: Use abort task set to reset SAS disks when
       discovered
     - [arm64] scsi: hisi_sas: Set a port invalid only if there are no devices
       attached when refreshing port id
     - r8152: add vendor/device ID pair for Microsoft Devkit
     - [x86] platform/x86: asus-nb-wmi: Add alternate mapping for KEY_CAMERA
     - [x86] platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK
     - [x86] platform/x86: asus-wmi: Add quirk wmi_ignore_fan
     - [x86] platform/x86: asus-wmi: Ignore fan on E410MA
     - [x86] platform/x86: simatic-ipc: correct name of a model
     - [x86] platform/x86: simatic-ipc: add another model
     - lockref: stop doing cpu_relax in the cmpxchg loop
     - firmware: coreboot: Check size of table entry and use flex-array
     - btrfs: zoned: enable metadata over-commit for non-ZNS setup
     - [arm64] efi: Recover from synchronous exceptions occurring in firmware
     - [arm64] efi: Avoid workqueue to check whether EFI runtime is live
     - [arm64] efi: Account for the EFI runtime stack in stack unwinder
     - Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
     - [x86] drm/i915: Allow panel fixed modes to have differing sync polarities
     - [x86] drm/i915: Allow alternate fixed modes always for eDP
     - drm/amdgpu: complete gfxoff allow signal during suspend without delay
     - io_uring/msg_ring: fix remote queue to disabled ring
     - wifi: mac80211: Proper mark iTXQs for resumption
     - wifi: mac80211: Fix iTXQ AMPDU fragmentation handling
     - sched/fair: Check if prev_cpu has highest spare cap in feec()
     - sched/uclamp: Fix a uninitialized variable warnings
     - vfio/type1: Respect IOMMU reserved regions in vfio_test_domain_fgsp()
     - scsi: hpsa: Fix allocation size for scsi_host_alloc()
     - kvm/vfio: Fix potential deadlock on vfio group_lock
     - nfsd: don't free files unconditionally in __nfsd_file_cache_purge
     - module: Don't wait for GOING modules
     - ftrace: Export ftrace_free_filter() to modules
     - tracing: Make sure trace_printk() can output as soon as it can be used
     - trace_events_hist: add check for return value of 'create_hist_field'
     - ftrace/scripts: Update the instructions for ftrace-bisect.sh
     - cifs: Fix oops due to uncleared server->smbd_conn in reconnect
     - ksmbd: add max connections parameter
     - ksmbd: do not sign response to session request for guest login
     - ksmbd: downgrade ndr version error message to debug
     - ksmbd: limit pdu length size according to connection status
     - ovl: fix tmpfile leak
     - ovl: fail on invalid uid/gid mapping at copy up
     - io_uring/net: cache provided buffer group value for multishot receives
     - [x86] KVM: x86/vmx: Do not skip segment attributes if unusable bit is set
     - [arm64] KVM: arm64: GICv4.1: Fix race with doorbell on VPE
       activation/deactivation
     - scsi: ufs: core: Fix devfreq deadlocks
     - [x86] thermal: intel: int340x: Protect trip temperature from concurrent
       updates
     - regulator: dt-bindings: samsung,s2mps14: add lost
       samsung,ext-control-gpios
     - ipv6: fix reachability confirmation with proxy_ndp
     - EDAC/device: Respect any driver-supplied workqueue polling value
     - [x86] platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms
     - drm/amd/pm: add missing AllowIHInterrupt message mapping for SMU13.0.0
     - drm/amdgpu: remove unconditional trap enable on add gfx11 queues
     - io_uring: inline io_req_task_work_add()
     - io_uring: inline __io_req_complete_post()
     - io_uring: hold locks for io_req_complete_failed
     - io_uring: use io_req_task_complete() in timeout
     - io_uring: remove io_req_tw_post_queue
     - io_uring: inline __io_req_complete_put()
     - [amd64] net: mana: Fix IRQ name - add PCI and queue number
     - io_uring: always prep_async for drain requests
     - i2c: designware: use casting of u64 in clock multiplication to avoid
       overflow
     - i2c: designware: Fix unbalanced suspended flag
     - drm/drm_vma_manager: Add drm_vma_node_allow_once()
     - [x86] drm/i915: Fix a memory leak with reused mmap_offset
     - iavf: fix temporary deadlock and failure to set MAC address
     - iavf: schedule watchdog immediately when changing primary MAC
     - netlink: prevent potential spectre v1 gadgets
     - net: fix UaF in netns ops registration error path
     - net: fec: Use page_pool_put_full_page when freeing rx buffers
     - nvme: simplify transport specific device attribute handling
     - nvme: consolidate setting the tagset flags
     - nvme-fc: fix initialization order
     - ACPI: video: Add backlight=native DMI quirk for HP Pavilion g6-1d80nr
     - ACPI: video: Add backlight=native DMI quirk for HP EliteBook 8460p
     - ACPI: video: Add backlight=native DMI quirk for Asus U46E
     - netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
     - netfilter: nft_set_rbtree: skip elements in transaction from garbage
       collection
     - netlink: annotate data races around nlk->portid
     - netlink: annotate data races around dst_portid and dst_group
     - netlink: annotate data races around sk_state
     - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
     - ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
     - netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
     - netrom: Fix use-after-free of a listening socket.
     - [x86] platform/x86: asus-wmi: Fix kbd_dock_devid tablet-switch reporting
     - [x86] platform/x86: apple-gmux: Move port defines to apple-gmux.h
     - [x86] platform/x86: apple-gmux: Add apple_gmux_detect() helper
     - ACPI: video: Fix apple gmux detection
     - net/sched: sch_taprio: do not schedule in taprio_reset()
     - sctp: fail if no bound addresses can be used for a given scope
     - [riscv64] kprobe: Fix instruction simulation of JALR
     - nvme: fix passthrough csi check
     - [arm64,armhf] gpio: mxc: Unlock on error path in mxc_flip_edge()
     - net: mctp: add an explicit reference from a mctp_sk_key to sock
     - net: mctp: move expiry timer delete to unhash
     - net: mctp: hold key reference when looking up a general key
     - net: mctp: mark socks as dead on unhash, prevent re-add
     - [x86] thermal: intel: int340x: Add locking to
       int340x_thermal_get_trip_type()
     - [riscv64] Move call to init_cpu_topology() to later initialization stage
     - net/tg3: resolve deadlock in tg3_reset_task() during EEH
     - [arm64,armhf] net: mdio-mux-meson-g12a: force internal PHY off on mux
       switch
     - [arm64] Partially revert "perf/arm-cmn: Optimise DTC counter accesses"
     - block: ublk: move ublk_chr_class destroying after devices are removed
     - treewide: fix up files incorrectly marked executable
     - Fix up more non-executable files marked executable
     - Revert "mm/compaction: fix set skip in fast_find_migrateblock"
     - Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI
       mode"
     - Input: i8042 - add Clevo PCX0DX to i8042 quirk table
     - [x86] sev: Add SEV-SNP guest feature negotiation support
     - acpi: Fix suspend with Xen PV
     - [x86] i8259: Mark legacy PIC interrupts with IRQ_LEVEL
     - netfilter: conntrack: unify established states for SCTP paths
     - [x86] perf/x86/amd: fix potential integer overflow on shift of a int
     - amdgpu: fix build on non-DCN platforms.
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.10
     - [armhf] dts: imx: Fix pca9547 i2c-mux node name
     - [arm64] dts: freescale: Fix pca954x i2c-mux node names
     - [arm64] dts: imx8mq-thor96: fix no-mmc property for SDHCI
     - [arm64] firmware: arm_scmi: Clear stale xfer->hdr.status
     - bpf: Skip task with pid=1 in send_signal_common()
     - erofs/zmap.c: Fix incorrect offset calculation
     - mac80211: Fix MLO address translation for multiple bss case
     - [arm64] dts: msm8994-angler: fix the memory map
     - erofs: clean up parsing of fscache related options
     - blk-cgroup: fix missing pd_online_fn() while activating policy
     - ACPI: video: Add backlight=native DMI quirk for Acer Aspire 4810T
     - block: fix hctx checks for batch allocation
     - [s390x] workaround invalid gcc-11 out of bounds read warning
     - HID: uclogic: Add support for XP-PEN Deco 01 V2
     - HID: playstation: sanity check DualSense calibration data.
     - [arm64,armhf] dmaengine: imx-sdma: Fix a possible memory leak in
       sdma_transfer_init
     - gpiolib: acpi: Allow ignoring wake capability on pins that aren't in _AEI
     - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint()
     - gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xRU
     - net: fix NULL pointer in skb_segment_list
     - net: mctp: purge receive queues on sk destruction
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.11
     - firewire: fix memory leak for payload of request subaction to IEC 61883-1
       FCP region
     - [arm64,armhf] bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()
     - [arm64] dts: imx8m-venice: Remove incorrect 'uart-has-rtscts'
     - [x86] ASoC: Intel: bytcht_es8316: Drop reference count of ACPI device
       after use
     - [x86] ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after
       use
     - [x86] ASoC: Intel: bytcr_rt5640: Drop reference count of ACPI device after
       use
     - [x86] ASoC: Intel: sof_es8336: Drop reference count of ACPI device after
       use
     - bpf: Fix off-by-one error in bpf_mem_cache_idx()
     - bpf: Fix a possible task gone issue with bpf_send_signal[_thread]()
       helpers
     - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
     - bpf: Fix to preserve reg parent/live fields when copying range info
     - [x86] ASoC: SOF: ipc4-mtrace: prevent underflow in
       sof_ipc4_priority_mask_dfs_write()
     - bpf: Add missing btf_put to register_btf_id_dtor_kfuncs
     - media: v4l2-ctrls-api.c: move ctrl->is_new = 1 to the correct line
     - bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
     - [arm64,armhf] drm/vc4: hdmi: make CEC adapter name unique
     - scsi: Revert "scsi: core: map PQ=1, PDT=other values to
       SCSI_SCAN_TARGET_PRESENT"
     - bpf: Fix the kernel crash caused by bpf_setsockopt().
     - ALSA: memalloc: Workaround for Xen PV
     - vhost/net: Clear the pending messages when the backend is removed
     - [armhf] WRITE is "data source", not destination...
     - [s390x] memcpy_real(): WRITE is "data source", not destination...
     - fix iov_iter_bvec() "direction" argument
     - fix 'direction' argument of iov_iter_{init,bvec}()
     - fix "direction" argument of iov_iter_kvec()
     - use less confusing names for iov_iter direction initializers
     - vhost-scsi: unbreak any layout for response
     - ice: Prevent set_channel from changing queues while RDMA active
     - qede: execute xdp_do_flush() before napi_complete_done()
     - virtio-net: execute xdp_do_flush() before napi_complete_done()
     - [arm64] dpaa2-eth: execute xdp_do_flush() before napi_complete_done()
     - skb: Do mix page pool and page referenced frags in GRO
     - sfc: correctly advertise tunneled IPv6 segmentation
     - net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices
     - block, bfq: replace 0/1 with false/true in bic apis
     - block, bfq: fix uaf for bfqq in bic_set_bfqq()
     - netrom: Fix use-after-free caused by accept on already connected socket
     - fscache: Use wait_on_bit() to wait for the freeing of relinquished volume
     - [x86] platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning
       255
     - [x86] drm/i915/guc: Fix locking when searching for a hung request
     - [x86] drm/i915: Fix request ref counting during error capture & debugfs
       dump
     - [x86] drm/i915: Fix up locking around dumping requests lists
     - [x86] drm/i915/adlp: Fix typo for reference clock
     - net/tls: tls_is_tx_ready() checked list_entry
     - ALSA: firewire-motu: fix unreleased lock warning in hwdep device
     - netfilter: br_netfilter: disable sabotage_in hook after first suppression
     - block: ublk: extending queue_size to fix overflow
     - squashfs: harden sanity check in squashfs_read_xattr_id_table
     - maple_tree: should get pivots boundary by type
     - sctp: do not check hb_timer.expires when resetting hb_timer
     - [arm64] net: phy: meson-gxl: Add generic dummy stubs for MMD register
       access
     - ip/ip6_gre: Fix changing addr gen mode not generating IPv6 link local
       address
     - ip/ip6_gre: Fix non-point-to-point tunnel not generating IPv6 link local
       address
     - [riscv64] kprobe: Fixup kernel panic when probing an illegal position
     - igc: return an error if the mac type is unknown in
       igc_ptp_systim_to_hwtstamp()
     - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
     - can: raw: fix CAN FD frame transmissions over CAN XL devices
     - ata: libata: Fix sata_down_spd_limit() when no link speed is reported
     - virtio-net: Keep stop() to follow mirror sequence of open()
     - net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
     - efi: fix potential NULL deref in efi_mem_reserve_persistent
     - [x86] i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU
     - scsi: target: core: Fix warning on RT kernels
     - [x86] aperfmperf: Erase stale arch_freq_scale values when disabling
       frequency invariance readings
     - [x86] perf/x86/intel: Add Emerald Rapids
     - [x86] perf/x86/intel/cstate: Add Emerald Rapids
     - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
     - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
     - [arm64,armhf] i2c: rk3x: fix a bunch of kernel-doc warnings
     - Revert "gfs2: stop using generic_writepages in gfs2_ail1_start_one"
     - [x86] build: Move '-mindirect-branch-cs-prefix' out of GCC-only block
     - [x86] platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010
       table
     - [x86] platform/x86: hp-wmi: Handle Omen Key event
     - [x86] platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF
     - [amd64] platform/x86/amd: pmc: Disable IRQ1 wakeup for RN/CZN
     - drm/amd/display: Fix timing not changning when freesync video is enabled
     - bcache: Silence memcpy() run-time false positive warnings
     - [arm64] usb: dwc3: qcom: enable vbus override when in OTG dr-mode
     - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait
     - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
     - fbcon: Check font dimension limits
     - cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask()
     - hv_netvsc: Fix missed pagebuf entries in netvsc_dma_map/unmap()
     - net: qrtr: free memory on error path in radix_tree_insert()
     - can: isotp: split tx timer into transmission and timeout
     - can: isotp: handle wait_event_interruptible() return values
     - [s390x] watchdog: diag288_wdt: do not use stack buffers for hardware data
     - [s390x] watchdog: diag288_wdt: fix __diag288() inline assembly
     - ALSA: hda/realtek: Add Acer Predator PH315-54
     - ALSA: hda/realtek: fix mute/micmute LEDs, speaker don't work for a HP
       platform
     - [x86] ASoC: SOF: sof-audio: unprepare when swidget->use_count > 0
     - [x86] ASoC: SOF: sof-audio: skip prepare/unprepare if swidget is NULL
     - [x86] ASoC: SOF: keep prepare/unprepare widgets in sink path
     - efi: Accept version 2 of memory attributes table
     - rtc: efi: Enable SET/GET WAKEUP services as optional
     - iio: hid: fix the retval in accel_3d_capture_sample
     - iio: hid: fix the retval in gyro_3d_capture_sample
     - iio: imu: fxos8700: fix ACCEL measurement range selection
     - iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback
     - iio: imu: fxos8700: fix IMU data bits returned to user space
     - iio: imu: fxos8700: fix map label of channel type to MAGN sensor
     - iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback
     - iio: imu: fxos8700: fix incorrect ODR mode readback
     - iio: imu: fxos8700: fix failed initialization ODR mode assignment
     - iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN
     - iio: imu: fxos8700: fix MAGN sensor scale and unit
     - [arm64,armhf] nvmem: sunxi_sid: Always use 32-bit MMIO reads
     - [riscv64] disable generation of unwind tables
     - Revert "mm: kmemleak: alloc gray object for reserved region with direct
       map"
     - mm: multi-gen LRU: fix crash during cgroup migration
     - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
     - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
     - usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints
     - usb: typec: ucsi: Don't attempt to resume the ports before they exist
     - usb: gadget: udc: do not clear gadget driver.bus
     - kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup()
     - HV: hv_balloon: fix memory leak with using debugfs_lookup()
     - [x86] debug: Fix stack recursion caused by wrongly ordered DR7 accesses
     - mm/uffd: fix pte marker when fork() without fork event
     - mm/swapfile: add cond_resched() in get_swap_pages()
     - mm/khugepaged: fix ->anon_vma race
     - mm, mremap: fix mremap() expanding for vma's with vm_ops->close()
     - mm/MADV_COLLAPSE: catch !none !huge !bad pmd lookups
     - highmem: round down the address passed to kunmap_flush_on_unmap()
     - Squashfs: fix handling and sanity checking of xattr_ids count
     - maple_tree: fix mas_empty_area_rev() lower bound validation
     - migrate: hugetlb: check for hugetlb shared PMD in node migration
     - dma-buf: actually set signaling bit for private stub fences
     - [armhf] serial: stm32: Merge hard IRQ and threaded IRQ handling into
       single IRQ handler
     - [x86] drm/i915: Avoid potential vm use-after-free
     - [x86] drm/i915: Fix potential bit_17 double-free
     - drm/amd: Fix initialization for nbio 4.3.0
     - drm/amd/pm: drop unneeded dpm features disablement for SMU 13.0.4/11
     - drm/amdgpu: update wave data type to 3 for gfx11
     - nvmem: core: initialise nvmem->id early
     - nvmem: core: remove nvmem_config wp_gpio
     - nvmem: core: fix cleanup after dev_set_name()
     - nvmem: core: fix registration vs use race
     - nvmem: core: fix device node refcounting
     - nvmem: core: fix cell removal on error
     - nvmem: core: fix return value
     - [arm64] phy: qcom-qmp-combo: fix runtime suspend
     - serial: 8250_dma: Fix DMA Rx completion race
     - serial: 8250_dma: Fix DMA Rx rearm race
     - [x86] ASoC: SOF: sof-audio: prepare_widgets: Check swidget for NULL on
       sink failure
     - [powerpc*] 64s/radix: Fix crash with unaligned relocated kernel
     - [powerpc*] 64s: Fix local irq disable when PMIs are disabled
     - [powerpc*] imc-pmu: Revert nest_init_lock to being a mutex
     - ovl: Use "buf" flexible array for memcpy() destination
     - f2fs: initialize locks earlier in f2fs_fill_super()
     - fbdev: smscufx: fix error handling code in ufx_usb_probe
     - f2fs: fix to do sanity check on i_extra_isize in is_alive()
     - wifi: brcmfmac: Check the count value of channel spec to prevent
       out-of-bounds reads
     - gfs2: Cosmetic gfs2_dinode_{in,out} cleanup
     - gfs2: Always check inode size of inline inodes
     - bpf: Skip invalid kfunc call in backtrack_insn
 .
   [ Diederik de Haas ]
   * [amd64,arm64,armel,i386] Remove unnecessary constraints since stretch
     (old-old-stable)
 .
   [ Salvatore Bonaccorso ]
   * Refresh "kbuild: Make the toolchain variables easily overwritable"
   * Bump ABI to 4
 .
   [ John Paul Adrian Glaubitz ]
   * [hppa,ia64,sh4,sparc64] Add i2c-modules to Depends for nic-shared-modules
     udeb
Checksums-Sha1:
 0e32a5d8d0a016290b4ec149de9383b1f7007d0f 276369 linux_6.1.11-1.dsc
 35a26818abac64e121ea68dabb909a4f87ea874f 137238552 linux_6.1.11.orig.tar.xz
 7e8e087599f7d2065f25b04b9c5f6f3d19f8f400 1416384 linux_6.1.11-1.debian.tar.xz
 5ea51f53d0265134713081879211a6da408e88a8 6750 linux_6.1.11-1_source.buildinfo
Checksums-Sha256:
 fbcb24afdb63f88575834cd5388fb067ec45d4fbad7916874d9e30d16c0db81c 276369 linux_6.1.11-1.dsc
 52ed17efa80a30854b525df4e0d4381c596e2f1d7a4eea6722ded60a99e1c4be 137238552 linux_6.1.11.orig.tar.xz
 5f91fb3581d6c8ac3c3142ec745deacaa11062ad3af0e21ae499d21b2b6c89e4 1416384 linux_6.1.11-1.debian.tar.xz
 5a2e16b630e0e95ed4d9459963e1b3b716a4f67b3c1e80f290a2b66be83a2069 6750 linux_6.1.11-1_source.buildinfo
Files:
 e0c153b9163e999c8d0aebf8d76f8d94 276369 kernel optional linux_6.1.11-1.dsc
 1ef5d33fec696e1b5634e50fd876b531 137238552 kernel optional linux_6.1.11.orig.tar.xz
 928139252fd7b1aa438a7fc765162aa7 1416384 kernel optional linux_6.1.11-1.debian.tar.xz
 2677cdf4c1a5b7db926eb3d775b9154c 6750 kernel optional linux_6.1.11-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmPla7tfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
ZWJpYW4ub3JnAAoJEAVMuPMTQ89EaW0P/3hYEhNhtIXdNPQRnKUWgN8ukTG4eQ2I
22uTAal5M5Rl3SJOg/xP0rZ3yYhaq+jRpRDBdS0Ec8zN7+EFy4s8RvYUN7aDt5ns
+R8XKbYREgXf6SRPc2GbvEmwyob2APrse/H+DdnkReZIRyJgvGh7qvKkshygX8uq
iTJ0t1GbGa101sRq9SAFFvq0FYucivL5ymVAs3W80xtmR/reFKTdzzeRaDXaxOE3
xzKUcYgh1ujTu13JFiz0GDv+QRfFuF0opp18RxA+wREZnJ6OFz9Tic+loGkOlTPi
HUYh4fIRpEQGk30wFzK7A9oMDIQNJFaao2I1JhjMeeW4b3l0WnPbxGnBGAlHw99i
4eT7+LSggYKh5Y6+yNpzgKeiquNfpz37YbqbLqlpCCX4W2KE2uRMYOuT+43vJs4f
nx2NnV7Dtd9ebpAtsg6oYd6ffAUkN9sZfx2ci56L2lxmLyb/tQWbf6D/1kgVjAgt
K56TrTyoe6dNQuXMlC+OmZwpIs2zogEMjOEyx+lWPjC3fpaeUsaTAYUgYv7MXmLS
/jOGJij4zbFaEdosmf/U22+L6objbhxEjnlr4k7vI7ixsQB7iEU5rikgUhRwK5VT
k4huG5FdxB7yGSRrbA81Ne3ipp9B08l6YngS9a3rq2eaxpWdx2CH8pNDVC9vdXZX
LNTRcJWHBXax
=YxPm
-----END PGP SIGNATURE-----