From: ftpmaster@ftp-master.debian.org   
      
   -----BEGIN PGP SIGNED MESSAGE-----   
   Hash: SHA512   
      
   Format: 1.8   
   Date: Tue, 26 Aug 2025 22:35:21 +0200   
   Source: linux   
   Architecture: source   
   Version: 6.1.148-1   
   Distribution: bookworm   
   Urgency: medium   
   Maintainer: Debian Kernel Team    
   Changed-By: Salvatore Bonaccorso    
   Closes: 1040901 1108271 1111017   
   Changes:   
    linux (6.1.148-1) bookworm; urgency=medium   
    .   
    * New upstream stable update:   
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.148   
    - Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT   
    (CVE-2025-38335)   
    - regulator: core: fix NULL dereference on unbind due to stale coupling   
   data   
    - RDMA/core: Rate limit GID cache warning messages   
    - iio: adc: ad7949: use spi_is_bpw_supported()   
    - regmap: fix potential memory leak of regmap_bus   
    - [x86] hyperv: Fix usage of cpu_online_mask to get valid cpu   
    - [arm64,armhf] staging: vc04_services: Drop VCHIQ_SUCCESS usage   
    - [arm64,armhf] staging: vc04_services: Drop VCHIQ_ERROR usage   
    - [arm64,armhf] staging: vc04_services: Drop VCHIQ_RETRY usage   
    - [arm64,armhf] staging: vchiq_arm: Make vchiq_shutdown never fail   
    - xfrm: interface: fix use-after-free after changing collect_md xfrm   
    interface (CVE-2025-38500)   
    - net/mlx5: Fix memory leak in cmd_exec()   
    - i40e: Add rx_missed_errors for buffer exhaustion   
    - i40e: report VF tx_dropped with tx_errors instead of tx_discards   
    - i40e: When removing VF MAC filters, only check PF-set MAC   
    - net: appletalk: Fix use-after-free in AARP proxy probe   
    - can: dev: can_restart(): reverse logic to remove need for goto   
    - can: dev: can_restart(): move debug message and stats after successful   
    restart   
    - can: netlink: can_changelink(): fix NULL pointer deref of struct   
    can_priv::do_set_mode   
    - [arm64] drm/bridge: ti-sn65dsi86: Remove extra semicolon in   
    ti_sn_bridge_probe()   
    - [arm64] net: hns3: fix concurrent setting vlan filter issue   
    - [arm64] net: hns3: disable interrupt when ptp init failed   
    - [arm64] net: hns3: fixed vf get max channels bug   
    - [x86] platform/x86: ideapad-laptop: Fix kbd backlight not remembered   
   among   
    boots   
    - i2c: qup: jump out of the loop in case of timeout   
    - i2c: tegra: Fix reset error handling with ACPI   
    - i2c: virtio: Avoid hang by using interruptible completion wait   
    - bus: fsl-mc: Fix potential double device reference in   
    fsl_mc_get_endpoint()   
    - ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx   
    - [arm64] dpaa2-eth: Fix device reference count leak in MAC endpoint   
    handling   
    - e1000e: disregard NVM checksum on tgp when valid checksum bit is not set   
    - e1000e: ignore uninitialized checksum word on tgp   
    - gve: Fix stuck TX queue for DQ queue format   
    - ice: Fix a null pointer dereference in ice_copy_and_init_pkg()   
    - nilfs2: reject invalid file types when reading inodes   
    - mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n   
    - drm/amdkfd: Don't call mmput from MMU notifier callback   
    - usb: typec: tcpm: allow to use sink in accessory mode   
    - usb: typec: tcpm: allow switching to mode accessory to mux properly   
    - usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach   
    - jfs: reject on-disk inodes of an unsupported type (CVE-2025-37925)   
    - [x86] comedi: comedi_test: Fix possible deletion of uninitialized timers   
    - ALSA: hda/tegra: Add Tegra264 support   
    - ALSA: hda: Add missing NVIDIA HDA codec IDs   
    - [x86] drm/i915/dp: Fix 2.7 Gbps DP_LINK_BW value on g4x   
    - mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma   
    - erofs: get rid of debug_one_dentry()   
    - erofs: sunset erofs_dbg()   
    - erofs: drop z_erofs_page_mark_eio()   
    - erofs: simplify z_erofs_transform_plain()   
    - erofs: address D-cache aliasing   
    - usb: chipidea: add USB PHY event   
    - usb: phy: mxs: disconnect line when USB charger is attached   
    - ethernet: intel: fix building with large NR_CPUS   
    - [x86] ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx   
    - ASoC: Intel: fix SND_SOC_SOF dependencies   
    - fs_context: fix parameter name in infofc() macro   
    - ublk: use vmalloc for ublk_device's __queues   
    - hfsplus: remove mutex_lock check in hfsplus_free_extents   
    - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()   
    - ASoC: ops: dynamically allocate struct snd_ctl_elem_value   
    - soc: qcom: QMI encoding/decoding for big endian   
    - [arm64] dts: qcom: sdm845: Expand IMEM region   
    - [arm64] dts: qcom: sc7180: Expand IMEM region   
    - [arm64,armhf] usb: host: xhci-plat: fix incorrect type for of_match   
    variable in xhci_plat_probe()   
    - usb: misc: apple-mfi-fastcharge: Make power supply names unique   
    - vmci: Prevent the dispatching of uninitialized payloads   
    - pps: fix poll support   
    - Revert "vmci: Prevent the dispatching of uninitialized payloads"   
    - powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()   
    - usb: early: xhci-dbc: Fix early_ioremap leak   
    - [armhf] dts: ti: omap: Fixup pinheader typo   
    - [arm64] dts: imx8mm-beacon: Fix HS400 USDHC clock speed   
    - [arm64] dts: imx8mn-beacon: Fix HS400 USDHC clock speed   
    - PM / devfreq: Check governor before using governor->name   
    - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode   
    - cpufreq: Initialize cpufreq-based frequency-invariance later   
    - cpufreq: Init policy->rwsem before it may be possibly used   
    - [arm64,armhf] drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed   
    - bpf, sockmap: Fix psock incorrectly pointing to sk   
    - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls   
      
   [continued in next message]   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)   
|