From patchwork Fri Oct 17 20:44:00 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 72633 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 170F1CCD195 for ; Fri, 17 Oct 2025 20:44:24 +0000 (UTC) Received: from mail-pf1-f177.google.com (mail-pf1-f177.google.com [209.85.210.177]) by mx.groups.io with SMTP id smtpd.web11.3284.1760733855527399295 for ; Fri, 17 Oct 2025 13:44:15 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=NIXUYTXf; spf=softfail (domain: sakoman.com, ip: 209.85.210.177, mailfrom: steve@sakoman.com) Received: by mail-pf1-f177.google.com with SMTP id d2e1a72fcca58-76e2ea933b7so2297358b3a.1 for ; Fri, 17 Oct 2025 13:44:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1760733855; x=1761338655; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=U1Bc1PsSE17OaPJkCBHYCMwacLqz6/88EwoNkA3pTAE=; b=NIXUYTXfUdGpX2lR5Xr6h1SqS7xMRBvNHhuGeZXC4UcY6F6X2+w6MwqZMO45dLlvVL 4fh02ubzGseIeJSLZQy5dwNo8CIRMGy4EgQH15pYwcX2E49xPhqV/Qxpf6ImC+nhUQfn XzkulhXn6M42/Bdbwei1KfAaiHmAzLR6EZLhZHardhWydAR0uOg7uc1bG8+FNSeN2CQd qufOTWBYnxdgCChFuJqIwyoviTWjSBm7gXbqVm4r0zhA8j20QcAsMF/z9bqdynnmL+xN LRVDygWBNFLqlDrREVFnYtSItThpnh2zRRlGmLOxzmI06mpuHfrWIgVlGd9BwDGIRzB6 rP4g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1760733855; x=1761338655; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=U1Bc1PsSE17OaPJkCBHYCMwacLqz6/88EwoNkA3pTAE=; b=MOHWyUFCTEgm2w+2MmUYwxEVksFaTqxW3Fh6CSYzP+rNpXmPXWCNvjBe12RP20Ipjj xXwtB1uBm7/m8uEHErg48uzG6UHtrB+6hhml6+hkbyaKAHU3OE1pHQbsdAoJUEB0jItg w8L+3aQP0dyP6ujp4MB3Z9ZzJxLk6BSysdlGOfEay3rOCjw+7B58DmQqx1NLR4wnYeqq hwEC7EyrsmU5FWRElN8DsjaP8gPuB1wOQSEOCFQOYczxH2rpx3GZZtoMm+a0fAPyTRHz dQU19Q72Fvzmp500Yw9QmGbnHO8HuQXZ22saGa24JcIC+WJhu5OMedYpgKg4I9iE4rAm wsKA== X-Gm-Message-State: AOJu0YxVXjGECuthwB7NGt4pdwlOiadOENUEaSk4OM/D/TOrcczEnjb5 FO8eMpm6Mp5UpaPN0rAAyqpqjkmrDy7jhc3Bd6UogvIEvrs2ijb/NGUhu1/uPm8fBPDnzPLOx8r 8piZaZ10= X-Gm-Gg: ASbGncvkXyAoip4JdRNtCu4pNoKZbseLjqIqbFlZJY/AJDJ6/8it59atSJrwEM0s23u Ip2tkPH9WnbBM9y2wdpiBwcKynStFjspOfPbLI8KvEcJ4TTnvr/WNnNQOS4Sg7oQVpaJ1n9wDzp KI1Fj+2Z8tRZb93e9LA10y5oydbAmD7EAJE/lP4NiaKqI5Q3KtvXcKzJN6Oxq0M4TddEDLTRlGr X0cO5P1yuWe2ww09QXNqAZMiJPDC+KZjeiah/l95ItAfBynzxQALK0KKcOP+WJyXy3BULEsDrZM 4xKl4T+tJ1iXLnEuUWJbvyjUH9aJryu7JrJxwcA6rCPYaWO1Txpc5igvgSTBSlFk7cNHe3wrFTl TN3/nqdtcCf3yPBgCqPV4Zj9WTCsugchot30Z8gueQJb6rJe1YPGvwSm+Z3wpCHgFHCGYTITlon 2I X-Google-Smtp-Source: AGHT+IGMgxDUwKERW64UUF4jVmif9mQqsDg7k1c3LWb5ggW4G23Q49Gde770abqYDQjULNc7sSlb8w== X-Received: by 2002:a05:6a20:939d:b0:327:957:f915 with SMTP id adf61e73a8af0-334a7930a37mr6579494637.24.1760733854740; Fri, 17 Oct 2025 13:44:14 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:aaee:e640:34cd:6f2]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-7a230121ebfsm477066b3a.70.2025.10.17.13.44.14 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 17 Oct 2025 13:44:14 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 1/8] glib-networking: fix CVE-2025-60018 Date: Fri, 17 Oct 2025 13:44:00 -0700 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 17 Oct 2025 20:44:24 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/225062 From: Rajeshkumar Ramasamy glib-networking's OpenSSL backend fails to properly check the return value of a call to BIO_write(), resulting in an out of bounds read. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-60018 Upstream-patch: https://gitlab.gnome.org/GNOME/glib-networking/-/commit/4dd540505d40babe488404f3174ec39f49a84485 Signed-off-by: Rajeshkumar Ramasamy Signed-off-by: Steve Sakoman --- .../glib-networking/CVE-2025-60018.patch | 83 +++++++++++++++++++ .../glib-networking/glib-networking_2.72.2.bb | 1 + 2 files changed, 84 insertions(+) create mode 100644 meta/recipes-core/glib-networking/glib-networking/CVE-2025-60018.patch diff --git a/meta/recipes-core/glib-networking/glib-networking/CVE-2025-60018.patch b/meta/recipes-core/glib-networking/glib-networking/CVE-2025-60018.patch new file mode 100644 index 0000000000..4ccf1cd43b --- /dev/null +++ b/meta/recipes-core/glib-networking/glib-networking/CVE-2025-60018.patch @@ -0,0 +1,83 @@ +From 4dd540505d40babe488404f3174ec39f49a84485 Mon Sep 17 00:00:00 2001 +From: Michael Catanzaro +Date: Mon, 4 Aug 2025 15:10:21 -0500 +Subject: [PATCH] openssl: properly check return value when writing to BIO + objects + +In particular, we will read out of bounds, and then write the invalid +memory, if BIO_write() fails when getting the PROP_CERTIFICATE_PEM +property. Here we attempt to check the return value, but the check is +not correct. + +This also fixes a leak of the BIO in the same place. + +Also add error checking to PROP_SUBJECT_NAME and PROP_ISSUER_NAME, for +good measure. + +Fixes #226 + +CVE: CVE-2025-60018 + +Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/glib-networking/-/commit/4dd540505d40babe488404f3174ec39f49a84485] + +Signed-off-by: Rajeshkumar Ramasamy +--- + tls/openssl/gtlscertificate-openssl.c | 25 +++++++++++++++---------- + 1 file changed, 15 insertions(+), 10 deletions(-) + +diff --git a/tls/openssl/gtlscertificate-openssl.c b/tls/openssl/gtlscertificate-openssl.c +index 648f3e8..b536559 100644 +--- a/tls/openssl/gtlscertificate-openssl.c ++++ b/tls/openssl/gtlscertificate-openssl.c +@@ -362,15 +362,12 @@ g_tls_certificate_openssl_get_property (GObject *object, + case PROP_CERTIFICATE_PEM: + bio = BIO_new (BIO_s_mem ()); + +- if (!PEM_write_bio_X509 (bio, openssl->cert) || !BIO_write (bio, "\0", 1)) +- certificate_pem = NULL; +- else ++ if (PEM_write_bio_X509 (bio, openssl->cert) == 1 && BIO_write (bio, "\0", 1) == 1) + { + BIO_get_mem_data (bio, &certificate_pem); + g_value_set_string (value, certificate_pem); +- +- BIO_free_all (bio); + } ++ BIO_free_all (bio); + break; + + case PROP_PRIVATE_KEY: +@@ -411,8 +408,12 @@ g_tls_certificate_openssl_get_property (GObject *object, + case PROP_SUBJECT_NAME: + bio = BIO_new (BIO_s_mem ()); + name = X509_get_subject_name (openssl->cert); +- X509_NAME_print_ex (bio, name, 0, XN_FLAG_SEP_COMMA_PLUS); +- BIO_write (bio, "\0", 1); ++ if (X509_NAME_print_ex (bio, name, 0, XN_FLAG_SEP_COMMA_PLUS) < 0 || ++ BIO_write (bio, "\0", 1) != 1) ++ { ++ BIO_free_all (bio); ++ break; ++ } + BIO_get_mem_data (bio, (char **)&name_string); + g_value_set_string (value, name_string); + BIO_free_all (bio); +@@ -421,9 +422,13 @@ g_tls_certificate_openssl_get_property (GObject *object, + case PROP_ISSUER_NAME: + bio = BIO_new (BIO_s_mem ()); + name = X509_get_issuer_name (openssl->cert); +- X509_NAME_print_ex (bio, name, 0, XN_FLAG_SEP_COMMA_PLUS); +- BIO_write (bio, "\0", 1); +- BIO_get_mem_data (bio, &name_string); ++ if (X509_NAME_print_ex (bio, name, 0, XN_FLAG_SEP_COMMA_PLUS) < 0 || ++ BIO_write (bio, "\0", 1) != 1) ++ { ++ BIO_free_all (bio); ++ break; ++ } ++ BIO_get_mem_data (bio, (char **)&name_string); + g_value_set_string (value, name_string); + BIO_free_all (bio); + break; +-- +2.48.1 diff --git a/meta/recipes-core/glib-networking/glib-networking_2.72.2.bb b/meta/recipes-core/glib-networking/glib-networking_2.72.2.bb index 746d1bc39c..32d50135bb 100644 --- a/meta/recipes-core/glib-networking/glib-networking_2.72.2.bb +++ b/meta/recipes-core/glib-networking/glib-networking_2.72.2.bb @@ -24,6 +24,7 @@ GNOMEBASEBUILDCLASS = "meson" inherit gnomebase gettext upstream-version-is-even gio-module-cache ptest-gnome SRC_URI += "file://run-ptest" +SRC_URI += "file://CVE-2025-60018.patch" FILES:${PN} += "\ ${libdir}/gio/modules/libgio*.so \ From patchwork Fri Oct 17 20:44:01 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 72636 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 1F318CCD199 for ; Fri, 17 Oct 2025 20:44:24 +0000 (UTC) Received: from mail-pf1-f172.google.com (mail-pf1-f172.google.com [209.85.210.172]) by mx.groups.io with SMTP id smtpd.web10.3336.1760733857694548507 for ; Fri, 17 Oct 2025 13:44:17 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=IBAZ3wJ2; spf=softfail (domain: sakoman.com, ip: 209.85.210.172, mailfrom: steve@sakoman.com) Received: by mail-pf1-f172.google.com with SMTP id d2e1a72fcca58-7a226a0798cso854736b3a.2 for ; Fri, 17 Oct 2025 13:44:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1760733857; x=1761338657; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=Aw2hBO6s2p2AMWLTFf4KWmnJEGMf1XMDBe3oyLQz2aE=; b=IBAZ3wJ2b5gr7yUFeigxyYQXfs6BFXlu5lfa22yd96CPM7/L2uPTu/knUUlsCibMG9 v974i+6SryzgvORAmK7ohSqrYt69zLu/15f6MUWnbwSHka2363MIoceua6+Qavyx6BNS QofXXi+/YTJNE+2H82CvE+HYmlAYpmETmnQ3r4h/S2syrTS57a9JwKVxAuotxLwttrfR WG5SsfJC2eqO+DA7oyLpw6UiREEqkm7FgTdNtrH29/6mlhEBWrwyp+APJUZ+LCc5/nr9 AferMG9SUldaN79iuZi7hPW9gWUT9VU/pbwTMrnQreXtE7pvOTQpA6xGetKnOcZkLDu/ LAzQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1760733857; x=1761338657; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=Aw2hBO6s2p2AMWLTFf4KWmnJEGMf1XMDBe3oyLQz2aE=; b=cLvuI960PYAbcx4tJAbB0CfRO4CbeWEQEldgwpXemXFfO1Q9G8zVe2CJvGycsgEBbX eqCuQyHcxDo1ILQFSUT+wlpJEt21vCgIXEcAcJu1DNUG28N3zUdSSOiP51+9b/3sRsbC Vw0WJds7AJsd5Raa/aU9HLnADEgxIgQjVSGqDlHa6R3qcpItqrTUkFxFz+sQMnGCEGrP H5A4iLOkweWZstOb7F5sKpPVGbfsxMSohuPpybctmGBOsham7W0DidNpolrJ3NvDkdDs ZKcVZ+VHCaRrs47Ax/2U0+Y7xaVH+I2tG/WMo3TmCfeaLaN8waLEJmR8Liqi13iX+p3N KdHw== X-Gm-Message-State: AOJu0YzlK7iAA5aYzFr5ig0kzNL2wCOUXQ47bNFz4n6wT4zlKc4xDsk1 uIl3/pylYZ1tWpokfLbZnZYwi7VlNLI8JHDw9KuYCKB6/+fyjuWzIjlAeT2oWGJEv2uDQ91IH5z L8JSM+F0= X-Gm-Gg: ASbGnctJsABLnfc+SrZIKMhJA3qVK2pnpSsRnuJtFXT+kaD9PvfsAA/2QLUuVbpmUdi lP2Egw5heeTPpxYK8Dep2oTfbiJB1PEqS1vrJCu8cdFoZWYZ3Mb/x9gow+lNLO+LRF5x2QyHS3C mRSk2GOP5Up6cEodX8G00Tf0PXTl0R3pW3MgfKwnfbrQf0xfJQl97lu65hWR4IicI0SGeK3q54n hIZH1iBqXh3eIkxKi26FC4F1xFqpl86mC0YTiG9+PvyDXAzZ/VDSG+xlDLEjI6FpBfWJn8p8j1Z lN7VzWmvXtt1vtMDQCkdsS5MKT/rorBixtXr8XIVHn3Zn/e2KxXv23eOe3a/QbwcQ5CygaPruvw NQ+lkV1JF5VxTs/FBgHouaBhFVXY4v5rms+yUhVwWuoWbqGicwn1d8KGASH2fW9ZCdrR91N70T6 Nc X-Google-Smtp-Source: AGHT+IF/vjrXvEoq9J0H6wWyHbuf6tW9oDscssqLQw2DZDExQ+8mOS7OlYx83mnEZ7ncC6QX2HpPSQ== X-Received: by 2002:a05:6a20:3945:b0:2e3:a914:aacd with SMTP id adf61e73a8af0-334a8524354mr7207928637.2.1760733856925; Fri, 17 Oct 2025 13:44:16 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:aaee:e640:34cd:6f2]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-7a230121ebfsm477066b3a.70.2025.10.17.13.44.16 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 17 Oct 2025 13:44:16 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 2/8] glib-networking: fix CVE-2025-60019 Date: Fri, 17 Oct 2025 13:44:01 -0700 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 17 Oct 2025 20:44:24 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/225063 From: Rajeshkumar Ramasamy glib-networking's OpenSSL backend fails to properly check the return value of memory allocation routines. An out of memory condition could potentially result in writing to an invalid memory location. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-60019 Upstream-patch: https://gitlab.gnome.org/GNOME/glib-networking/-/commit/70df675dd4f5e4a593b2f95406c1aac031aa8bc7 Signed-off-by: Rajeshkumar Ramasamy Signed-off-by: Steve Sakoman --- .../glib-networking/CVE-2025-60019.patch | 137 ++++++++++++++++++ .../glib-networking/glib-networking_2.72.2.bb | 1 + 2 files changed, 138 insertions(+) create mode 100644 meta/recipes-core/glib-networking/glib-networking/CVE-2025-60019.patch diff --git a/meta/recipes-core/glib-networking/glib-networking/CVE-2025-60019.patch b/meta/recipes-core/glib-networking/glib-networking/CVE-2025-60019.patch new file mode 100644 index 0000000000..cc0a8f1edc --- /dev/null +++ b/meta/recipes-core/glib-networking/glib-networking/CVE-2025-60019.patch @@ -0,0 +1,137 @@ +From 70df675dd4f5e4a593b2f95406c1aac031aa8bc7 Mon Sep 17 00:00:00 2001 +From: Michael Catanzaro +Date: Thu, 21 Aug 2025 17:21:01 -0500 +Subject: [PATCH] openssl: check return values of BIO_new() + +We probably need to check even more return values of even more OpenSSL +functions, but these ones allocate memory and that's particularly +important to get right. + +CVE: CVE-2025-60019 + +Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/glib-networking/-/commit/70df675dd4f5e4a593b2f95406c1aac031aa8bc7] + +Signed-off-by: Rajeshkumar Ramasamy +--- + tls/openssl/gtlscertificate-openssl.c | 39 ++++++++++++++++++++------- + 1 file changed, 29 insertions(+), 10 deletions(-) + +diff --git a/tls/openssl/gtlscertificate-openssl.c b/tls/openssl/gtlscertificate-openssl.c +index 8f828a7..f7fde51 100644 +--- a/tls/openssl/gtlscertificate-openssl.c ++++ b/tls/openssl/gtlscertificate-openssl.c +@@ -156,6 +156,9 @@ export_privkey_to_der (GTlsCertificateOpenssl *openssl, + goto err; + + bio = BIO_new (BIO_s_mem ()); ++ if (!bio) ++ goto err; ++ + if (i2d_PKCS8_PRIV_KEY_INFO_bio (bio, pkcs8) == 0) + goto err; + +@@ -189,6 +192,9 @@ export_privkey_to_pem (GTlsCertificateOpenssl *openssl) + return NULL; + + bio = BIO_new (BIO_s_mem ()); ++ if (!bio) ++ goto out; ++ + ret = PEM_write_bio_PKCS8PrivateKey (bio, openssl->key, NULL, NULL, 0, NULL, NULL); + if (ret == 0) + goto out; +@@ -201,7 +207,7 @@ export_privkey_to_pem (GTlsCertificateOpenssl *openssl) + result = g_strdup (data); + + out: +- BIO_free_all (bio); ++ g_clear_pointer (&bio, BIO_free_all); + return result; + } + +@@ -216,7 +222,7 @@ g_tls_certificate_openssl_get_property (GObject *object, + guint8 *data; + BIO *bio; + GByteArray *byte_array; +- char *certificate_pem; ++ const char *certificate_pem; + long size; + + const ASN1_TIME *time_asn1; +@@ -251,12 +257,12 @@ g_tls_certificate_openssl_get_property (GObject *object, + case PROP_CERTIFICATE_PEM: + bio = BIO_new (BIO_s_mem ()); + +- if (PEM_write_bio_X509 (bio, openssl->cert) == 1 && BIO_write (bio, "\0", 1) == 1) ++ if (bio && PEM_write_bio_X509 (bio, openssl->cert) == 1 && BIO_write (bio, "\0", 1) == 1) + { + BIO_get_mem_data (bio, &certificate_pem); + g_value_set_string (value, certificate_pem); + } +- BIO_free_all (bio); ++ g_clear_pointer (&bio, BIO_free_all); + break; + + case PROP_PRIVATE_KEY: +@@ -296,6 +302,8 @@ g_tls_certificate_openssl_get_property (GObject *object, + + case PROP_SUBJECT_NAME: + bio = BIO_new (BIO_s_mem ()); ++ if (!bio) ++ break; + name = X509_get_subject_name (openssl->cert); + if (X509_NAME_print_ex (bio, name, 0, XN_FLAG_SEP_COMMA_PLUS) < 0 || + BIO_write (bio, "\0", 1) != 1) +@@ -310,6 +318,8 @@ g_tls_certificate_openssl_get_property (GObject *object, + + case PROP_ISSUER_NAME: + bio = BIO_new (BIO_s_mem ()); ++ if (!bio) ++ break; + name = X509_get_issuer_name (openssl->cert); + if (X509_NAME_print_ex (bio, name, 0, XN_FLAG_SEP_COMMA_PLUS) < 0 || + BIO_write (bio, "\0", 1) != 1) +@@ -377,8 +387,11 @@ g_tls_certificate_openssl_set_property (GObject *object, + break; + g_return_if_fail (openssl->have_cert == FALSE); + bio = BIO_new_mem_buf ((gpointer)string, -1); +- openssl->cert = PEM_read_bio_X509 (bio, NULL, NULL, NULL); +- BIO_free (bio); ++ if (bio) ++ { ++ openssl->cert = PEM_read_bio_X509 (bio, NULL, NULL, NULL); ++ BIO_free (bio); ++ } + if (openssl->cert) + openssl->have_cert = TRUE; + else if (!openssl->construct_error) +@@ -397,8 +410,11 @@ g_tls_certificate_openssl_set_property (GObject *object, + break; + g_return_if_fail (openssl->have_key == FALSE); + bio = BIO_new_mem_buf (bytes->data, bytes->len); +- openssl->key = d2i_PrivateKey_bio (bio, NULL); +- BIO_free (bio); ++ if (bio) ++ { ++ openssl->key = d2i_PrivateKey_bio (bio, NULL); ++ BIO_free (bio); ++ } + if (openssl->key) + openssl->have_key = TRUE; + else if (!openssl->construct_error) +@@ -417,8 +433,11 @@ g_tls_certificate_openssl_set_property (GObject *object, + break; + g_return_if_fail (openssl->have_key == FALSE); + bio = BIO_new_mem_buf ((gpointer)string, -1); +- openssl->key = PEM_read_bio_PrivateKey (bio, NULL, NULL, NULL); +- BIO_free (bio); ++ if (bio) ++ { ++ openssl->key = PEM_read_bio_PrivateKey (bio, NULL, NULL, NULL); ++ BIO_free (bio); ++ } + if (openssl->key) + openssl->have_key = TRUE; + else if (!openssl->construct_error) +-- +2.48.1 diff --git a/meta/recipes-core/glib-networking/glib-networking_2.72.2.bb b/meta/recipes-core/glib-networking/glib-networking_2.72.2.bb index 32d50135bb..65a4a3a22f 100644 --- a/meta/recipes-core/glib-networking/glib-networking_2.72.2.bb +++ b/meta/recipes-core/glib-networking/glib-networking_2.72.2.bb @@ -25,6 +25,7 @@ inherit gnomebase gettext upstream-version-is-even gio-module-cache ptest-gnome SRC_URI += "file://run-ptest" SRC_URI += "file://CVE-2025-60018.patch" +SRC_URI += "file://CVE-2025-60019.patch" FILES:${PN} += "\ ${libdir}/gio/modules/libgio*.so \ From patchwork Fri Oct 17 20:44:02 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 72635 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 26091CCD1A5 for ; Fri, 17 Oct 2025 20:44:24 +0000 (UTC) Received: from mail-pf1-f169.google.com (mail-pf1-f169.google.com [209.85.210.169]) by mx.groups.io with SMTP id smtpd.web10.3339.1760733859514316821 for ; Fri, 17 Oct 2025 13:44:19 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=DGtgSpXn; spf=softfail (domain: sakoman.com, ip: 209.85.210.169, mailfrom: steve@sakoman.com) Received: by mail-pf1-f169.google.com with SMTP id d2e1a72fcca58-781db5068b8so1991242b3a.0 for ; Fri, 17 Oct 2025 13:44:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1760733859; x=1761338659; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=hhV8VwA5VUWy4/QtHJ3GPPg6KmzncGk8Vm50/kqnMtU=; b=DGtgSpXnHgmUQZxqniqf6jTN19Wz9ScsWNwf1tt8SwIph1TYPXGy3yJKbSrHaJjvaR 6o82vznMtPAKvSWcm2ZfEbRYfkcDKqzN6j5ivBCpoiQWPrdMJfn3mgzBdDp3DO04UFx4 icZpL0hOTxDWCKUv7RERzZ2xxvFFpuy7KR/fE6aVJZ6MBSTiyEIFvAr2sLWEv1E2rumm pVSOeQSarE5399oAQzjfvYHR0qWDpE3Y4vLTPB4G5zR2Co1pEyLXBflpvndDqhzkWYup iCiXtd97V8FtifQ7HxSQNvudLP/zU6Rhyeo/SfXMKoKuMknXEo7Vc7FleOlZ4W7jJ2Pz E5vA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1760733859; x=1761338659; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=hhV8VwA5VUWy4/QtHJ3GPPg6KmzncGk8Vm50/kqnMtU=; b=bSPF5su0bLtHaKZQg6MqGtIXpuZhEEoY8KWgbBPi5Kgwf6WKOghjG4vOHYi7BDJ+bJ 9wEnLJYuO3UcKLtHU1lVoDaOn5+UBxYYIVTeBCAG43NOqAmN9NDSkzXDEWYM64oqXQm6 Ko0/ZCb9L/0aIflvQDJJduxhcKcPLRbLeiytEXRcmXLwSWj6WRryXstNdPnMs5KdK8rU WAc/8oE1HcCXrQVW1UIJKUhTQXH/tVFAB1hygQMiPTpEf4eQ+ROyCqo6a0n1rpZbBTMb IMThGvq8usjsnNNSLBT7Er1jciAuNdlZgcj8fA0lfkSWyHRvNVndf4IJjTt1R9q22I/h XZ6w== X-Gm-Message-State: AOJu0YyT/fND/Qjx4dpnYdJ5fWf3073dXL4TiVXfUW1clNZXEb4k4vWe ZLv1v722bM9T4p+SmcDzAVcKRLJcVBUDEg9qD1XnYqr0nz7aHh4U/t1PHUYl9v6SXB40ytjyT/c qGj30ClY= X-Gm-Gg: ASbGnctO/TYZ6YHNvdlEMOET+cuTVofZawPqbdHIdYAVkjYpaqS8X2AVvB+dSDcvU6J i0+xzriEnWO3JD1HewkmtIr3fiwMb1pgAnOwYXEBhZN0A8Cisp8SAhtYRDzFUXp1+EEbcBSSiZJ ytM+m1QshKalRE7/gLzpLQC3sRT4DSmtcB1D0Y/Il3OBnmOH6hJBnwyuT6/7c5VR7yrUe7gfsPl E7hfRQYsotRa7NiKR2gKA6NaPse2iZ1702Vh4Tw7L5raZhphEjXglVBIsTAqrnm8VNBWXMsPxS6 M/RJZdpH/werq5J8G/l/aPG2N+IXjIyRwS4ikzrx5YK4UDw4HoUCBiuxe8qrIwE0ZCtRQyl8e3L CC9Uio0IxzQq9hYkRaRAj/s3Lh+IPNzj8NX6Ddl0T1Lp625sTjc8rzHy7Duvpo4ZdDQ== X-Google-Smtp-Source: AGHT+IHG/kDbLGVUIkVls/+rna+oLJUyUMTAVWYiYooqdUIJjwYY+3XXn64YzRTtQRparwF88DgBkA== X-Received: by 2002:a05:6a20:7344:b0:309:48d8:cf0a with SMTP id adf61e73a8af0-334a8649ed5mr7527113637.54.1760733858738; Fri, 17 Oct 2025 13:44:18 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:aaee:e640:34cd:6f2]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-7a230121ebfsm477066b3a.70.2025.10.17.13.44.17 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 17 Oct 2025 13:44:18 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 3/8] cmake: fix CVE-2025-9301 Date: Fri, 17 Oct 2025 13:44:02 -0700 Message-ID: <0aacc4298f2cdaaf6d19a58e6e134b6a6ecc5097.1760733724.git.steve@sakoman.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 17 Oct 2025 20:44:24 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/225064 From: Saravanan Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-9301 https://gitlab.kitware.com/cmake/cmake/-/issues/27135 Upstream-patch: https://gitlab.kitware.com/cmake/cmake/-/commit/37e27f71bc356d880c908040cd0cb68fa2c371b8 Signed-off-by: Saravanan Signed-off-by: Steve Sakoman --- .../cmake/cmake/CVE-2025-9301.patch | 71 +++++++++++++++++++ meta/recipes-devtools/cmake/cmake_3.22.3.bb | 1 + 2 files changed, 72 insertions(+) create mode 100644 meta/recipes-devtools/cmake/cmake/CVE-2025-9301.patch diff --git a/meta/recipes-devtools/cmake/cmake/CVE-2025-9301.patch b/meta/recipes-devtools/cmake/cmake/CVE-2025-9301.patch new file mode 100644 index 0000000000..08137ae503 --- /dev/null +++ b/meta/recipes-devtools/cmake/cmake/CVE-2025-9301.patch @@ -0,0 +1,71 @@ +From 37e27f71bc356d880c908040cd0cb68fa2c371b8 Mon Sep 17 00:00:00 2001 +From: Tyler Yankee +Date: Wed, 13 Aug 2025 15:22:28 -0400 +Subject: [PATCH] foreach: Explicitly skip replay without iterations + +As written, foreach loops with a trailing `IN` (i.e., no loop +variable(s) given) lead to an assertion error. Handle this case by +exiting early when we know the loop won't execute anything. + +Fixes: #27135 + +CVE: CVE-2025-9301 + +Upstream-Status: Backport +https://gitlab.kitware.com/cmake/cmake/-/commit/37e27f71bc356d880c908040cd0cb68fa2c371b8 + +Signed-off-by: Tyler Yankee +Signed-off-by: Saravanan +--- + Source/cmForEachCommand.cxx | 3 +++ + Tests/RunCMake/foreach/RunCMakeTest.cmake | 1 + + Tests/RunCMake/foreach/TrailingIn-result.txt | 1 + + Tests/RunCMake/foreach/TrailingIn.cmake | 5 +++++ + 4 files changed, 10 insertions(+) + create mode 100644 Tests/RunCMake/foreach/TrailingIn-result.txt + create mode 100644 Tests/RunCMake/foreach/TrailingIn.cmake + +diff --git a/Source/cmForEachCommand.cxx b/Source/cmForEachCommand.cxx +index dcb36265..35b59960 100644 +--- a/Source/cmForEachCommand.cxx ++++ b/Source/cmForEachCommand.cxx +@@ -100,6 +100,9 @@ bool cmForEachFunctionBlocker::ArgumentsMatch(cmListFileFunction const& lff, + bool cmForEachFunctionBlocker::Replay( + std::vector functions, cmExecutionStatus& inStatus) + { ++ if (this->Args.size() == this->IterationVarsCount) { ++ return true; ++ } + return this->ZipLists ? this->ReplayZipLists(functions, inStatus) + : this->ReplayItems(functions, inStatus); + } +diff --git a/Tests/RunCMake/foreach/RunCMakeTest.cmake b/Tests/RunCMake/foreach/RunCMakeTest.cmake +index 15ca4770..acfc742e 100644 +--- a/Tests/RunCMake/foreach/RunCMakeTest.cmake ++++ b/Tests/RunCMake/foreach/RunCMakeTest.cmake +@@ -22,3 +22,4 @@ run_cmake(foreach-RANGE-invalid-test) + run_cmake(foreach-RANGE-out-of-range-test) + run_cmake(foreach-var-scope-CMP0124-OLD) + run_cmake(foreach-var-scope-CMP0124-NEW) ++run_cmake(TrailingIn) +diff --git a/Tests/RunCMake/foreach/TrailingIn-result.txt b/Tests/RunCMake/foreach/TrailingIn-result.txt +new file mode 100644 +index 00000000..573541ac +--- /dev/null ++++ b/Tests/RunCMake/foreach/TrailingIn-result.txt +@@ -0,0 +1 @@ ++0 +diff --git a/Tests/RunCMake/foreach/TrailingIn.cmake b/Tests/RunCMake/foreach/TrailingIn.cmake +new file mode 100644 +index 00000000..e2b5b2f2 +--- /dev/null ++++ b/Tests/RunCMake/foreach/TrailingIn.cmake +@@ -0,0 +1,5 @@ ++foreach(v IN) ++endforeach() ++ ++foreach(v1 v2 IN) ++endforeach() +-- +2.35.5 + diff --git a/meta/recipes-devtools/cmake/cmake_3.22.3.bb b/meta/recipes-devtools/cmake/cmake_3.22.3.bb index 04a0f0e793..e5e279c07f 100644 --- a/meta/recipes-devtools/cmake/cmake_3.22.3.bb +++ b/meta/recipes-devtools/cmake/cmake_3.22.3.bb @@ -12,6 +12,7 @@ SRC_URI:append:class-nativesdk = " \ file://0001-CMakeDetermineSystem-use-oe-environment-vars-to-load.patch \ file://0001-ctest-Allow-arbitrary-characters-in-test-names-of-CT.patch \ " +SRC_URI += "file://CVE-2025-9301.patch" LICENSE:append = " & BSD-1-Clause & MIT" LIC_FILES_CHKSUM:append = " \ From patchwork Fri Oct 17 20:44:03 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 72637 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 2FAC0CCD1A7 for ; Fri, 17 Oct 2025 20:44:24 +0000 (UTC) Received: from mail-pf1-f182.google.com (mail-pf1-f182.google.com [209.85.210.182]) by mx.groups.io with SMTP id smtpd.web11.3289.1760733861445737258 for ; Fri, 17 Oct 2025 13:44:21 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=QvnA1Mpm; spf=softfail (domain: sakoman.com, ip: 209.85.210.182, mailfrom: steve@sakoman.com) Received: by mail-pf1-f182.google.com with SMTP id d2e1a72fcca58-7833765433cso3162974b3a.0 for ; Fri, 17 Oct 2025 13:44:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1760733861; x=1761338661; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=lGrW0Bde7CHWYWhHUIjh1SiC6npZJ3PXxjEjHzkIe8c=; b=QvnA1MpmCKcpbyHnlEdpihESzeAJ9c1LHXNnxfJDGUxGBzMIdd144WSSms5He1Bdgq Z1B9pYndNztU8g07FsaTnbRiteFwiN+e8vWkgxXlWhFWyPZQn9I6p9DHpg0Tnr/7pAci gxaXRdIuZMogLJN576SXi94H8yegfbnz46Vtkkljhrtbs3SgPja8mFrEs5uby/mQSlY3 g+YbjAHau+SW98SKAuzGovtX1eVGE3MpzUS2mH+8jrlVw5c36bLIhunToKcyRbAFerUi SeiwwkSg/ziyaYl63sJGpor9jcO/VVgzzzq7ByxJyXm3bj0FWzsd9X6p2GhXVww93hQs xScA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1760733861; x=1761338661; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=lGrW0Bde7CHWYWhHUIjh1SiC6npZJ3PXxjEjHzkIe8c=; b=U6MDxObiBtFfAFq2Vp357TUtOEHrvB8jWd6Vq0TdW2JqYlOdeVYsCs0rHbYpFBmlDh JiGLCbP6nKI0BqT4ozgiIrro2JlCnLmZmbR/IuRMO39pqY8htkZ0xHatxldfIXD7dUcN 2a9aWHhgBU3lR4+4tMW5XGJQUwu/vJ4CEiy6UCNAvWewVdNLCbP1SSd8soTqCcTL4pkr RUsWnpAJ8dyV7zBm7QRL+c74XfDfJ6dvAtRyWmBHZkTOqN/LfeNpuMToxMUSab6hvdy7 aG7iO+P5mxA0zs0Bz53j7rXF/xVYxtoW4etKMPYm8t/HvXwZTYp2YO7RGWrc+sCyHumT NBGw== X-Gm-Message-State: AOJu0YzteWvltNb/h2YlcgFcsbtyIVFgSMM4elnvYmJ2oQJ371NxarsR qVaZ9g498JIWsF2XiLPOeYyJNbgCgwZPk95i4kFjLUJNLOl1gfG0QooqAb4pPD5BYcmeq733kwt EOAFh4Pc= X-Gm-Gg: ASbGncs41sCAabn03eN0tyBTNW6lacTid2dwSxmQQmkA/VGbZIf75N7CbUfENUXygsS WaZ/ub8O0nglVUO969ASf9kj8GeuHA0B2d4M5jtAfeobWpdDA7CMuyBQ5vLYdwN1gKi8fHKZzyl xDUylwyLgGIPPP1HGu3Tk5iz1gS2cfgyTVkGWsSUU90IDnAQzxImooXU6OgBJIj/IqBRyhzlxPo eoPcKTxDQYjEcu5UrpLLU9fG/QLhN1KFiMuiTCkE+pPjvSMx9qDHGxlfl9kuv+sh+jwLwui/Nta BgQXZQBYH5JC16Z/+BZm9yk/8qgXKQ90gGVn00cagiPk5ZZxhwBh6pMt8JzT+BnDz89aaqOmFO8 lTaUqe1Ze/bKZ2nn4UlwFXtZzx1a0V/qrlSvATyZW1biVFqV0cRNJG+eFtSELnYS2Sw== X-Google-Smtp-Source: AGHT+IGJD3GwmgkPAKVIwAikLieDYUn0ogNsCY8Vm3znG+XpNKyXMwrbOekwAjA1qDLGxAzIX8yC6Q== X-Received: by 2002:a05:6a00:21c9:b0:781:455:df62 with SMTP id d2e1a72fcca58-7a220a56c36mr6747968b3a.5.1760733860459; Fri, 17 Oct 2025 13:44:20 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:aaee:e640:34cd:6f2]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-7a230121ebfsm477066b3a.70.2025.10.17.13.44.19 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 17 Oct 2025 13:44:20 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 4/8] linux-yocto/5.15: update to v5.15.188 Date: Fri, 17 Oct 2025 13:44:03 -0700 Message-ID: <6b6a51e73e89903e5766175c54fad23cc4a1721b.1760733724.git.steve@sakoman.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 17 Oct 2025 20:44:24 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/225065 From: Bruce Ashfield Updating linux-yocto/5.15 to the latest korg -stable release that comprises the following commits: 89950c454265 Linux 5.15.188 cd0d988f7dd7 x86/CPU/AMD: Properly check the TSA microcode 2f693b607545 Linux 5.15.187 21953dde398d x86/process: Move the buffer clearing before MONITOR c334ae4a545a KVM: SVM: Advertise TSA CPUID bits to guests 3d6513b51b72 KVM: x86: add support for CPUID leaf 0x80000021 f2b75f1368af x86/bugs: Add a Transient Scheduler Attacks mitigation 04304f5fe3e3 x86/bugs: Rename MDS machinery to something more generic 7be0d1ea71f5 usb: typec: displayport: Fix potential deadlock 5bcca95ca6d2 platform/x86: think-lmi: Create ksets consecutively d01c737efd81 Logitech C-270 even more broken 475f89e1f9bd i2c/designware: Fix an initialization issue b32dfd00bd51 usb: cdnsp: do not disable slot for disabled slot 969941ca9f1e xhci: dbc: Flush queued requests before stopping dbc 45f2cd76bc50 xhci: dbctty: disable ECHO flag by default d8ccb3d08159 platform/x86: dell-wmi-sysman: Fix class device unregistration 8ac2cb8d809b platform/x86: think-lmi: Fix class device unregistration 846baaa88a2d dpaa2-eth: fix xdp_rxq_info leak 3f0b6236e11f net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats b2e1b676711e dpaa2-eth: Update SINGLE_STEP register access 8e4d49fc2617 dpaa2-eth: Update dpni_get_single_step_cfg command 0ab03e2616a1 ethernet: atl1: Add missing DMA mapping error checks and count errors 94a09ec93e93 NFSv4/flexfiles: Fix handling of NFS level errors in I/O 576a6739e08a drm/v3d: Disable interrupts before resetting the GPU 56738cbac3bb regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods e772f8f5c82d regulator: gpio: Add input_supply support in gpio_regulator_config 1728e17762b9 mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier bee6329e5fd5 rcu: Return early if callback is not specified 68d3417305ee mtd: spinand: fix memory leak of ECC engine conf ab1e8491c19e ACPICA: Refuse to evaluate a method if arguments are missing 46b47d4b06fa wifi: ath6kl: remove WARN on bad firmware input a856228c44dc wifi: mac80211: drop invalid source address OCB frames 1129e0e0a833 scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() 161ff4102038 powerpc: Fix struct termio related ioctl macros ce5f6b2540d6 ata: pata_cs5536: fix build on 32-bit UML ba5104b9b3fa ALSA: sb: Force to disable DMAs once when DMA mode is changed 73337c003f3d ALSA: sb: Don't allow changing the DMA mode during operations 5deab0fa6cfd drm/msm: Fix a fence leak in submit error path e269f29e9395 net/sched: Always pass notifications when child class becomes empty 7bf497c2ad87 nui: Fix dma_mapping_error() check 2b952dbb32fe rose: fix dangling neighbour pointers in rose_rt_device_down() 1fba51f021b2 enic: fix incorrect MTU comparison in enic_change_mtu() 52b4b2e85e63 amd-xgbe: align CL37 AN sequence as per databook 7edff1bbdd3a lib: test_objagg: Set error message in check_expect_hints_stats() f5874e0dea9e igc: disable L1.2 PCI-E link substate to avoid performance issue f10af3426144 drm/i915/gt: Fix timeline left held on VMA alloc error 92c2d914b533 platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks 4caf6a93ac39 drm/i915/selftests: Change mock_request() to return error pointers 54f62d542d2c spi: spi-fsl-dspi: Clear completion counter before initiating transfer 4c315caf16e8 drm/exynos: fimd: Guard display clock control with runtime PM calls a1950bb9edfa btrfs: fix missing error handling when searching for inode refs during log replay 9f0771b8cc4a RDMA/mlx5: Fix CC counters query for MPV abfdb3b4ce2b scsi: ufs: core: Fix spelling of a sysfs attribute name 1afb58c7e32b scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu() 9ceff7ded1e9 scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database() 8846fd02c98d NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN b92397ce9674 nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. 00ed215f5938 RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert 16a16c901a75 platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment 944ced3e4a09 mtk-sd: reset host->mrq on prepare_data() error 48bf4f3dfcda mtk-sd: Prevent memory corruption from DMA map failure 2580162c4ebf mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data 621d5a3ef023 usb: typec: altmodes/displayport: do not index invalid pin_assignments aab032d171e7 Revert "mmc: sdhci: Disable SD card clock before changing parameters" 3d07fd496513 mmc: sdhci: Add a helper function for dump register in dynamic debug mode 2d44723a091b vsock/vmci: Clear the vmci transport packet properly when initializing it 1def00386211 rtc: cmos: use spin_lock_irqsave in cmos_interrupt 8516edd36397 ARM: 9354/1: ptrace: Use bitfield helpers 143842584c12 btrfs: don't drop extent_map for free space inode on write error 6a8aa6420ad3 arm64: Restrict pagetable teardown to avoid false warning 6d486f1e3818 Revert "ipv6: save dontfrag in cork" 9f69eb424aa2 s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS 707030cb1c66 s390/entry: Fix last breaking event handling in case of stack corruption 9e2976e4e326 media: uvcvideo: Rollback non processed entities on error 45d1aa5674d6 PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time 34d3e10ab905 drm/amd/display: Add null pointer check for get_first_active_display() 53dee8fd76a6 drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready 62a7143dce1c drm/bridge: cdns-dsi: Check return value when getting default PHY config 49a421180aaa drm/bridge: cdns-dsi: Fix connecting to next bridge 6c3056ed0b73 drm/bridge: cdns-dsi: Fix the clock variable for mode_valid() 105b0a0c7e65 drm/amdkfd: Fix race in GWS queue scheduling b0dc5d6da1da drm/udl: Unregister device before cleaning up on disconnect c7fc459ae6f9 drm/tegra: Fix a possible null pointer dereference 21dfbd590734 drm/tegra: Assign plane type before registration 03b68435fbe3 HID: wacom: fix kobject reference count leak 796abf9f710a HID: wacom: fix memory leak on sysfs attribute creation failure ca7b6d00a713 HID: wacom: fix memory leak on kobject creation failure 896bc23e1e25 btrfs: update superblock's device bytes_used when dropping chunk 2826ef05854d dm-raid: fix variable in journal device check 78f4cf0e81b7 Bluetooth: L2CAP: Fix L2CAP MTU negotiation 34cbe5543bec dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive f61db0a69d0b staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher() 9f7fd60fb8f7 net: selftests: fix TCP packet checksum 26248d5d68c8 atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). 6b908e85a739 net: enetc: Correct endianness handling in _enetc_rd_reg64 8898080d6143 um: ubd: Add missing error check in start_io_thread() a4aa7c001043 vsock/uapi: fix linux/vm_sockets.h userspace compilation errors 1bc8c7b8e5b9 af_unix: Don't set -ECONNRESET for consumed OOB skb. 2afcde1b3676 wifi: mac80211: fix beacon interval calculation overflow 1197abb1ee3b libbpf: Fix null pointer dereference in btf_dump__free on allocation failure 6b4ce195552b attach_recursive_mnt(): do not lock the covering tree when sliding something under it c3fb926abe90 ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() 9199e8cb75f1 atm: clip: prevent NULL deref in clip_push() ad1bdd24a02d s390/pkey: Prevent overflow in size calculation for memdup_user() 56e54021b77c i2c: robotfuzz-osif: disable zero-length read messages d6bc3e078509 i2c: tiny-usb: disable zero-length read messages 9b084de34f1a platform/x86: ideapad-laptop: use usleep_range() for EC polling d0537c51b4a1 dummycon: Trigger redraw when switching consoles with deferred takeover acd41ac591b7 tty: vt: make consw::con_switch() return a bool a74907cdd18d tty: vt: sanitize arguments of consw::con_clear() d2781a0ba98c tty: vt: make init parameter of consw::con_init() a bool de2871093fa3 vgacon: remove unneeded forward declarations 72dc92531df9 vgacon: switch vgacon_scrolldelta() and vgacon_restore_screen() 4b0b22dfe4d6 tty/vt: consolemap: rename and document struct uni_pagedir 3a88320314ab fbcon: delete a few unneeded forward decl c8ea0f204cf4 uio_hv_generic: Align ring size to system page a955c1b360b3 uio_hv_generic: Query the ringbuffer size for device a8c1b5e33a1c Drivers: hv: vmbus: Add utility function for querying ring size 101c4437f6fb Drivers: hv: Rename 'alloced' to 'allocated' 1f2f2f56f59e f2fs: don't over-report free space or inodes in statvfs fbcbbf2ebe5c media: imx-jpeg: Drop the first error frames 8701675abab4 clk: ti: am43xx: Add clkctrl data for am43xx ADC1 9f55faa41eac media: omap3isp: use sgtable-based scatterlist wrappers 78b7d79b8626 media: davinci: vpif: Fix memory leak in probe error path c3705c82b740 jfs: validate AG parameters in dbMount() to prevent crashes 4789cea3f8d4 fs/jfs: consolidate sanity checking in dbMount 8c8d1dcc726a ovl: Check for NULL d_inode() in ovl_dentry_upper() 42923c6e9cd7 ceph: fix possible integer overflow in ceph_zero_objects() bfdbc927d165 ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock da01b76bb66a ALSA: hda: Add new pci id for AMD GPU display HD audio controller 44aa0cdaed5f ALSA: hda: Ignore unsol events for cards being shut down 56846793f105 usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode cd414d7d7077 usb: cdc-wdm: avoid setting WDM_READ for ZLP-s 383d33f3aeb7 usb: Add checks for snprintf() calls in usb_alloc_dev() 780e48c99f66 usb: common: usb-conn-gpio: use a unique name for usb connector device 9c905fdbba68 tty: serial: uartlite: register uart driver in init 6f77e344515b usb: potential integer overflow in usbg_make_tpg() 5cb3cb3db317 usb: dwc2: also exit clock_gating when stopping udc while suspended fd72dd6a82e2 coresight: Only check bottom two claim bits be620f25161f um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h 82ddbbc98949 iio: pressure: zpa2326: Use aligned_s64 for the timestamp 1f25f2d3fa29 bcache: fix NULL pointer in cache_set_flush() 8ddce5eab6c3 md/md-bitmap: fix dm-raid max_write_behind setting 477c044309e6 dmaengine: xilinx_dma: Set dma_device directions 566487aad232 ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension d8322d861a6f hwmon: (pmbus/max34440) Fix support for max34451 bbd1511e27ee leds: multicolor: Fix intensity setting while SW blinking a23b82a0693b mfd: max14577: Fix wakeup source leaks on device unbind 852a2bda152a mailbox: Not protect module_put with spin_lock_irqsave 86be8c7409b7 NFSv4.2: fix listxattr to return selinux security label a35f2168961e NFSv4: Always set NLINK even if the server doesn't support it 80251a15ed61 cifs: Fix cifs_query_path_info() for Windows NT servers Signed-off-by: Bruce Ashfield Signed-off-by: Steve Sakoman --- .../linux/linux-yocto-rt_5.15.bb | 6 ++--- .../linux/linux-yocto-tiny_5.15.bb | 6 ++--- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 26 +++++++++---------- 3 files changed, 19 insertions(+), 19 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index 73c3264016..fc9a3c3397 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -11,13 +11,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "76da2cf32fe004e10f581744496e71547d0a4361" -SRCREV_meta ?= "5932fcfa6982f5b86a13849b84ef3d80a557a030" +SRCREV_machine ?= "29a212d112aaa83d5d28c91088c877ee0164afbc" +SRCREV_meta ?= "35e38f16718b4358712a1545b1b5bcb8b14bb28f" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" -LINUX_VERSION ?= "5.15.186" +LINUX_VERSION ?= "5.15.188" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index 0aa51c512c..8fc3e3dc4d 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -5,7 +5,7 @@ KCONFIG_MODE = "--allnoconfig" require recipes-kernel/linux/linux-yocto.inc -LINUX_VERSION ?= "5.15.186" +LINUX_VERSION ?= "5.15.188" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -14,8 +14,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "4175c60a7b8e282d802be846bae75eeba398969e" -SRCREV_meta ?= "5932fcfa6982f5b86a13849b84ef3d80a557a030" +SRCREV_machine ?= "c763c9cf2a50b3e8c7be255112d3322d34e37803" +SRCREV_meta ?= "35e38f16718b4358712a1545b1b5bcb8b14bb28f" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.15.bb b/meta/recipes-kernel/linux/linux-yocto_5.15.bb index 43d77045bb..da1aedd31d 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.15.bb @@ -14,24 +14,24 @@ KBRANCH:qemux86 ?= "v5.15/standard/base" KBRANCH:qemux86-64 ?= "v5.15/standard/base" KBRANCH:qemumips64 ?= "v5.15/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "d93c7fcf604b572bf93497e00017f9cf34fa34c7" -SRCREV_machine:qemuarm64 ?= "9e9701d7239420165b342f3c363961ee3040a91e" -SRCREV_machine:qemumips ?= "be5800a6d9002fd12668c0f8ada68ad7cab4398c" -SRCREV_machine:qemuppc ?= "6fa52ff2eb31c6855f51a0d4f96339c50437d139" -SRCREV_machine:qemuriscv64 ?= "48702d462c58d69b4b382bb34984f2f0881d0bb1" -SRCREV_machine:qemuriscv32 ?= "48702d462c58d69b4b382bb34984f2f0881d0bb1" -SRCREV_machine:qemux86 ?= "48702d462c58d69b4b382bb34984f2f0881d0bb1" -SRCREV_machine:qemux86-64 ?= "48702d462c58d69b4b382bb34984f2f0881d0bb1" -SRCREV_machine:qemumips64 ?= "bb909213f7e13fd17e39d95e5d1b646a7b0bacf2" -SRCREV_machine ?= "48702d462c58d69b4b382bb34984f2f0881d0bb1" -SRCREV_meta ?= "5932fcfa6982f5b86a13849b84ef3d80a557a030" +SRCREV_machine:qemuarm ?= "59eda9c8cd28d83857eca9f39f777188870f00c4" +SRCREV_machine:qemuarm64 ?= "be863e2ed3deabb3b194aaf8860263d651c26be5" +SRCREV_machine:qemumips ?= "c67be260b4eb8307f7da8c632fd3ca510b906d7e" +SRCREV_machine:qemuppc ?= "d0a7f356bbb2b771f8eed843c52b8f9a213a7559" +SRCREV_machine:qemuriscv64 ?= "aa5fe401b86e527dd49b5a157b71d79bbf19461e" +SRCREV_machine:qemuriscv32 ?= "aa5fe401b86e527dd49b5a157b71d79bbf19461e" +SRCREV_machine:qemux86 ?= "aa5fe401b86e527dd49b5a157b71d79bbf19461e" +SRCREV_machine:qemux86-64 ?= "aa5fe401b86e527dd49b5a157b71d79bbf19461e" +SRCREV_machine:qemumips64 ?= "648039263363d55f8f3573edcfbb0059657e268b" +SRCREV_machine ?= "aa5fe401b86e527dd49b5a157b71d79bbf19461e" +SRCREV_meta ?= "35e38f16718b4358712a1545b1b5bcb8b14bb28f" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "1c700860e8bc079c5c71d73c55e51865d273943c" +SRCREV_machine:class-devupstream ?= "89950c4542652dfe435f9519a5080f7d2128764c" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v5.15/base" @@ -39,7 +39,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "5.15.186" +LINUX_VERSION ?= "5.15.188" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" DEPENDS += "openssl-native util-linux-native" From patchwork Fri Oct 17 20:44:04 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 72634 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 185C0CCD1A4 for ; Fri, 17 Oct 2025 20:44:24 +0000 (UTC) Received: from mail-pf1-f178.google.com (mail-pf1-f178.google.com [209.85.210.178]) by mx.groups.io with SMTP id smtpd.web11.3291.1760733862994395081 for ; Fri, 17 Oct 2025 13:44:23 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=ngDvBG2V; spf=softfail (domain: sakoman.com, ip: 209.85.210.178, mailfrom: steve@sakoman.com) Received: by mail-pf1-f178.google.com with SMTP id d2e1a72fcca58-782bfd0a977so1867676b3a.3 for ; Fri, 17 Oct 2025 13:44:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1760733862; x=1761338662; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=oY5SxWl4ki9oHWE1mZUvUPxPc8DjDDqn9XkVrxAZe+o=; b=ngDvBG2Vd19OvAaDEiZteZipaJmdNRsckgK3BhPtbBf6hUld52AgepYrQ8/bI0nAAe 7DgxI9/ydj56Ybgh1A8AoyTkc6IwxmjyM17WNkCRP+RZ+IhGZQuFD8LlSX/PIh2yJLEf g21Ifd9AGv2swVlkIeYpBOLQ8NhoaOeoS4mIpj3TuFxCSffSJONWIBMOQDKigZ/mcNFu dEu3XbrVLBQzbpatxBFrDikGmHkdTsQvhWyBhJnu1oTvncEvp3hph3yJHSIKbT9rZH0Z XeyHRqvybqSpGuW51X6AvGPcY3xoETOTjdKVIhEy0bz+HdK0W/FShi/hjHIAjUhN4dD5 Gheg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1760733862; x=1761338662; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=oY5SxWl4ki9oHWE1mZUvUPxPc8DjDDqn9XkVrxAZe+o=; b=dvNnsIxvpvMm+KN8yriufvbYpqSn5w3ldwqYoNBY86HUpJQXhqLhPy/DrX69O+WzFu lqIZVvKLWI6HsCepzY6QG5GCUlqLEN3iTRIoF5WaIEmZZ87VWrfdRBf53sMIbaPbn08E k21g0WEUTPSe/OY5DbBphvFNyDKNumBdtyItZRcgHXDN7HiHqRyyWvmIIVpW6nUJL4PP ZTcAWmDMM9HbnqF60vMpT1Fxwu4cJZnFEfBieUSatGz85vZ+O/Dvc0/mgXLi03sIWeai ImbfQueprJV8H3n32yQBO6dJfErjsQa0kBIP3V8ycneZU6aC+7I3R3GfMK8rRsoyMet2 vixA== X-Gm-Message-State: AOJu0YwwsoJkbtLJoEwiosTDIR0gf62lDWD5De0eBl2LcBfR07YD8G+G Q+eyWzmxhe9EXzqHksuYzRDF+RU1Y6KwnVBexjjMry5gcfQTyDiQx/NRmSbPq3Nug7r58dwQbPl VUAhK0SY= X-Gm-Gg: ASbGncvu3i+1S5uhzX1XEAvaxJA3iLt/6kA32g4a7lk5UoZfqOqfBtQoaILEfiHqOc4 yXJYeP0+wsySld9VMEFFSLAglG3HV/kSiUuQEw1vTOb6FBGi3h55eHi0vL+RbK3X5I0Hpf/II8Y c/waH0K9pOf5+LUKxvKo5ERiGZTOyp8nHRZR1nCreJ9ZMN6dluvaO1JfGTv/IBYApvQbioaLAAB 5os+IzvjqSqXj2COasZA9wv1PqugmP/tmW45WGm0sGc/ltixH8Mb6uSREFwUC6qkA0d+e2bxi2e 0yd4JT6Kmiy+8OF3V9ICGLqU+2lSnDnMKhjLrvXNwKwILguLOgcQwn8vPcaimEj9nr9gQ9+GG6C ROoIcQpAivhq7CaUf7VdZIpLP3uWAlOJKto4QGWpWPqq+dbCDGSZuuHtAV4t8iVA+Ow== X-Google-Smtp-Source: AGHT+IH8JFntz6QwnbdqsvaHOpZua+o0CgFdJJXhJOEhBBIUnhKbQGZXDQePKy00aghFKUoLP6ZoqQ== X-Received: by 2002:a05:6a00:4b16:b0:78c:99a8:d294 with SMTP id d2e1a72fcca58-7a220428903mr5934910b3a.0.1760733862127; Fri, 17 Oct 2025 13:44:22 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:aaee:e640:34cd:6f2]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-7a230121ebfsm477066b3a.70.2025.10.17.13.44.21 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 17 Oct 2025 13:44:21 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 5/8] linux-yocto/5.15: update to v5.15.189 Date: Fri, 17 Oct 2025 13:44:04 -0700 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 17 Oct 2025 20:44:24 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/225066 From: Bruce Ashfield Updating linux-yocto/5.15 to the latest korg -stable release that comprises the following commits: c79648372d02 Linux 5.15.189 3e4028ef31b6 rseq: Fix segfault on registration when rseq_cs is non-zero 4b934b78041f x86: Fix X86_FEATURE_VERW_CLEAR definition 562f207d0a91 x86/mm: Disable hugetlb page table sharing on 32-bit 8312a1ccff15 vhost-scsi: protect vq->log_used with vq->mutex 02fd0c7d0d14 Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID 1b297ab6f38c HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras 68c0e3adf09a HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY 95f184337eb4 vt: add missing notification when switching back to text mode f174d73b3fb0 HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2 acc94849ebb9 net: usb: qmi_wwan: add SIMCom 8230C composition 78fe114f13a3 um: vector: Reduce stack usage in vector_eth_configure() 8ea9a9fb79a9 atm: idt77252: Add missing `dma_map_error()` 8d672a1a6bfc bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT 0118fe8fbe2b bnxt_en: Fix DCB ETS validation 8d11e48b1276 net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam() 0da557bbeae2 can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level 6b08605e12b3 net: phy: microchip: limit 100M workaround to link-down events on LAN88xx b2f5dfa87367 net: appletalk: Fix device refcount leak in atrtr_create() a3aea97d5596 netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() df525911974c ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked() fedd65b58469 smb: server: make use of rdma_destroy_qp() cb121c47f364 nbd: fix uaf in nbd_genl_connect() error path 10c6021a609d raid10: cleanup memleak at raid10_make_request 48da050b4f54 md/raid1: Fix stack memory use after return in raid1_reshape b24f65c18454 wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() 09064e6d6597 dma-buf: fix timeout handling in dma_resv_wait_timeout v2 419192cb11f2 dma-buf: use new iterator in dma_resv_wait_timeout 84df80b4c704 dma-buf: add dma_resv_for_each_fence_unlocked v8 3435a2048972 usb: dwc3: Abort suspend on soft disconnect failure c1cb5c166fec usb: cdnsp: Fix issue with CV Bad Descriptor test ba3a2e446fc7 usb: cdnsp: Replace snprintf() with the safer scnprintf() variant 2991f28da681 usb:cdnsp: remove TRB_FLUSH_ENDPOINT command 9a433cd87236 Input: xpad - support Acer NGR 200 Controller e9b894ca7589 xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS e262ff8d634c usb: xhci: quirk for data loss in ISOC transfers 59aca35c69c2 xhci: Allow RPM on the USB controller (1022:43f7) by default 982beb7582c1 virtio-net: ensure the received length does not exceed allocated size c47c83f6f2ec netlink: make sure we allow at least one dump skb ccc9da90af65 netlink: Fix rmem check in netlink_broadcast_deliver(). a2504279841f pwm: mediatek: Ensure to disable clocks in error path d7684190951e RDMA/mlx5: Fix vport loopback for MPV device e774a693b7ff btrfs: use btrfs_record_snapshot_destroy() during rmdir 21ab2c7c9794 btrfs: propagate last_unlink_trans earlier when doing a rmdir d216d5a277de Revert "ACPI: battery: negate current when discharging" a5012673d497 usb: gadget: u_serial: Fix race condition in TTY wakeup 2f4df5d07c77 drm/gem: Fix race in drm_gem_handle_create_tail() ef841f8e4e1f drm/sched: Increment job count before swapping tail spsc queue cb4b08a095b1 pinctrl: qcom: msm: mark certain pins as invalid for interrupts 0c1ad5738526 gre: Fix IPv6 multicast route creation. e3154a48fd0b x86/mce: Make sure CMCI banks are cleared during shutdown on Intel 9f4431ba8501 x86/mce: Don't remove sysfs if thresholding sysfs init fails 9cd4fa64814b x86/mce/amd: Fix threshold limit reset ae0e082687b2 xen: replace xen_remap() with memremap() f98bf80b20f4 jfs: fix null ptr deref in dtInsertEntry 65ad600b9bde bpf, sockmap: Fix skb refcnt race after locking changes 2499fa286fb0 aoe: avoid potential deadlock at set_capacity 39d5137085a6 thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR e37e3b6cc8dc bpf: fix precision backtracking instruction iteration f5e72b7824d0 rxrpc: Fix oops due to non-existence of prealloc backlog struct d30910170f7e ice: safer stats processing 32caa50275cc fs/proc: do_task_stat: use __for_each_thread() 25452638f133 net/sched: Abort __tc_modify_qdisc if parent class does not exist 7f1cad84ac1a atm: clip: Fix NULL pointer dereference in vcc_sendmsg() 5641019dfbae atm: clip: Fix infinite recursive call of clip_push(). 1c075e88d585 atm: clip: Fix memory leak of struct clip_vcc. 3251ce3979f4 atm: clip: Fix potential null-ptr-deref in to_atmarpd(). 66f9065c1c7d net: phy: smsc: Fix link failure in forced mode with Auto-MDIX 29a5de38fa1e net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap 0ba1021a8302 vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local` 36a439049b34 vsock: Fix transport_* TOCTOU 80d7dc15805a vsock: Fix transport_{g2h,h2g} TOCTOU dab8ded2e5ff tipc: Fix use-after-free in tipc_conn_close(). fd69af061010 netlink: Fix wraparounds of sk->sk_rmem_alloc. 552a066477cb fix proc_sys_compare() handling of in-lookup dentries c0aec35f861f perf: Revert to requiring CAP_SYS_ADMIN for uprobes 2df3e265a301 ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode 87825fbd1e17 drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling Signed-off-by: Bruce Ashfield Signed-off-by: Steve Sakoman --- .../linux/linux-yocto-rt_5.15.bb | 6 ++--- .../linux/linux-yocto-tiny_5.15.bb | 6 ++--- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 26 +++++++++---------- 3 files changed, 19 insertions(+), 19 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index fc9a3c3397..1df0d30c81 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -11,13 +11,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "29a212d112aaa83d5d28c91088c877ee0164afbc" -SRCREV_meta ?= "35e38f16718b4358712a1545b1b5bcb8b14bb28f" +SRCREV_machine ?= "57a47106b330353648ec7c1c2f5d28437937bb69" +SRCREV_meta ?= "d8c8889e18158a14223aa6cdb121c26a4d58fb56" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" -LINUX_VERSION ?= "5.15.188" +LINUX_VERSION ?= "5.15.189" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index 8fc3e3dc4d..48a7466509 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -5,7 +5,7 @@ KCONFIG_MODE = "--allnoconfig" require recipes-kernel/linux/linux-yocto.inc -LINUX_VERSION ?= "5.15.188" +LINUX_VERSION ?= "5.15.189" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -14,8 +14,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "c763c9cf2a50b3e8c7be255112d3322d34e37803" -SRCREV_meta ?= "35e38f16718b4358712a1545b1b5bcb8b14bb28f" +SRCREV_machine ?= "c9df5e8ec3f116c77fbc29d8d88cf00da6ecb4f3" +SRCREV_meta ?= "d8c8889e18158a14223aa6cdb121c26a4d58fb56" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.15.bb b/meta/recipes-kernel/linux/linux-yocto_5.15.bb index da1aedd31d..99ce420369 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.15.bb @@ -14,24 +14,24 @@ KBRANCH:qemux86 ?= "v5.15/standard/base" KBRANCH:qemux86-64 ?= "v5.15/standard/base" KBRANCH:qemumips64 ?= "v5.15/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "59eda9c8cd28d83857eca9f39f777188870f00c4" -SRCREV_machine:qemuarm64 ?= "be863e2ed3deabb3b194aaf8860263d651c26be5" -SRCREV_machine:qemumips ?= "c67be260b4eb8307f7da8c632fd3ca510b906d7e" -SRCREV_machine:qemuppc ?= "d0a7f356bbb2b771f8eed843c52b8f9a213a7559" -SRCREV_machine:qemuriscv64 ?= "aa5fe401b86e527dd49b5a157b71d79bbf19461e" -SRCREV_machine:qemuriscv32 ?= "aa5fe401b86e527dd49b5a157b71d79bbf19461e" -SRCREV_machine:qemux86 ?= "aa5fe401b86e527dd49b5a157b71d79bbf19461e" -SRCREV_machine:qemux86-64 ?= "aa5fe401b86e527dd49b5a157b71d79bbf19461e" -SRCREV_machine:qemumips64 ?= "648039263363d55f8f3573edcfbb0059657e268b" -SRCREV_machine ?= "aa5fe401b86e527dd49b5a157b71d79bbf19461e" -SRCREV_meta ?= "35e38f16718b4358712a1545b1b5bcb8b14bb28f" +SRCREV_machine:qemuarm ?= "da6836630834b34b24e1f0457afec67ba2bbab78" +SRCREV_machine:qemuarm64 ?= "67ec90bce4425aa5b79586360c80fa08a34ca9d0" +SRCREV_machine:qemumips ?= "2b2d7942cb977389f270d85a58adaf4659a3abbb" +SRCREV_machine:qemuppc ?= "fcf1b5e6d46c8a7835dbd70331d380fff0319b7f" +SRCREV_machine:qemuriscv64 ?= "3e27e9870b35af885840862de91caec215486a18" +SRCREV_machine:qemuriscv32 ?= "3e27e9870b35af885840862de91caec215486a18" +SRCREV_machine:qemux86 ?= "3e27e9870b35af885840862de91caec215486a18" +SRCREV_machine:qemux86-64 ?= "3e27e9870b35af885840862de91caec215486a18" +SRCREV_machine:qemumips64 ?= "366189c9e588082ad8c22b61143aa1fd10f3e273" +SRCREV_machine ?= "3e27e9870b35af885840862de91caec215486a18" +SRCREV_meta ?= "d8c8889e18158a14223aa6cdb121c26a4d58fb56" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "89950c4542652dfe435f9519a5080f7d2128764c" +SRCREV_machine:class-devupstream ?= "c79648372d02944bf4a54d87e3901db05d0ac82e" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v5.15/base" @@ -39,7 +39,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "5.15.188" +LINUX_VERSION ?= "5.15.189" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" DEPENDS += "openssl-native util-linux-native" From patchwork Fri Oct 17 20:44:05 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 72640 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 39863CCD1A4 for ; Fri, 17 Oct 2025 20:44:34 +0000 (UTC) Received: from mail-pf1-f172.google.com (mail-pf1-f172.google.com [209.85.210.172]) by mx.groups.io with SMTP id smtpd.web10.3342.1760733865994092437 for ; Fri, 17 Oct 2025 13:44:26 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=MxIdPYSC; spf=softfail (domain: sakoman.com, ip: 209.85.210.172, mailfrom: steve@sakoman.com) Received: by mail-pf1-f172.google.com with SMTP id d2e1a72fcca58-781997d195aso1872996b3a.3 for ; Fri, 17 Oct 2025 13:44:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1760733865; x=1761338665; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=JFbWHQfD7Ru0TIpTQvziphVJDHkSEvnG8siMMfVVAgQ=; b=MxIdPYSCs00fp/m3B6Hx8kKskTERiWA6Sm3mIFo9kP/JEWTkBQd8hQqcY97K/y/RV2 ujxd5j2GlgKMEdwf0bEg9HosDZjuC40MBdR1hxZcim5ic6KDBuF9M68tZIPvd3nra+TF pv8+gqLHrH8GMIIuPCFodmzAA42AV06pNPd4OTuNQpD+BPPFo6cfTiU85ZdsaXhXpJoF L0nBDWqfL43wBysio2xSBBANAWIOKy687HdajSKZ4+ILR8/fsy2sfKdVfhU/EOJJZ8mi N+Z+pv6sEPPv8UdK2Xvk3cXxmDnyn3nbZ0avaaEcqdYQlAeSpeA96UsVIpPjya9cFChe CMXA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1760733865; x=1761338665; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=JFbWHQfD7Ru0TIpTQvziphVJDHkSEvnG8siMMfVVAgQ=; b=o8osRyV74IUwl17k2pSKKgLaL7NAxLrO2R52lkDFsRTvtBnxH6YEgdynT7ruYUbSnD xhv3wuiMf6DhaOsetbWutPr1EeW9VZLZUvIlcIPBHAFwbvLfsBtJck3RpP3dW652J4M/ DYeG7DOGazuLX+X6HQDUZwL9iWKkEKxFUWoWkmboOghCpRJhWMMDqQQrSwKcdE3IAEmK xg+MgSukG+FXwqgvCsSov12hDCqhzTjkxh+NoSDiULOlhJjPnBtUkiOtdpIHTTWcVV4L ugbVs16G+M71ghvET3fZ6sfIpq3inwegLAfJf1NCVGGDvrGHvS70LkjdXTP+YPsq/B6n le1Q== X-Gm-Message-State: AOJu0YxNptrKEG0z6u7ZwYLqU6rWlPym8QdSar2U/y8sU04gH0vU0PvB tT37Eb3n6U+qY9tR8EXB1Yf19tNF9afI8GNR985gYfMl/ROGBE3glz3/qjFLg01TPL70WSmtKko CT9vvRcM= X-Gm-Gg: ASbGnctYf46FZStNft5oifPtXI/QLa/qOm1h6Gi7Fsb0BaV2dljNFOuIK8aIOTF+yUD ukcbLyCTINq+GB4nO406H1c+zeSGWubY9wVBUgx7NHjycu5DaJVUJTS85SreCJuYH3PqlfRAjhP HNcY25IpopcIR1QIdx3Urd1i3tcUDCgEfOcQbgf6NIJJ2r9/fkSwtZSm42UhheWuVXU7cM7/Ivg 9si5wZtYaQE7N8cVveBTzNNAfBtstEoRBWePnvpw7iSV+UcJzuukqzfOeu11CPQPI+ZjufCOonw zvzn1YL2gXl+wYaMkluwIUQeXqN7oWrskGRcy1xpXQtfK/yB9/YY7MdkuN5hUGYqFF/uB3dh944 sd+nhvDR4FKXkc2ReJ5C3djZK4XRpN7SgrUFRardghxQLskc17v4EH9fYWsNAYpyaleSmXcQpv4 pu X-Google-Smtp-Source: AGHT+IGpY3kH5YsdPgywKvmbMTD6yhgIxiFW6qAisZd77gWWG6oeWWM+SUNCHofMaV470b6cb/uwQQ== X-Received: by 2002:a05:6a20:918a:b0:32b:71e9:81ae with SMTP id adf61e73a8af0-334a850dcc4mr6915176637.8.1760733864292; Fri, 17 Oct 2025 13:44:24 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:aaee:e640:34cd:6f2]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-7a230121ebfsm477066b3a.70.2025.10.17.13.44.23 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 17 Oct 2025 13:44:23 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 6/8] linux-yocto/5.15: update to v5.15.193 Date: Fri, 17 Oct 2025 13:44:05 -0700 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 17 Oct 2025 20:44:34 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/225067 From: Bruce Ashfield Updating linux-yocto/5.15 to the latest korg -stable release that comprises the following commits: no ids found, dumping: 43bb85222e53 Linux 5.15.193 70de678302a8 x86/vmscape: Add old Intel CPUs to affected list 79ec330d124e x86/vmscape: Warn when STIBP is disabled with SMT 1cd71b057f05 x86/bugs: Move cpu_bugs_smt_update() down 2f4f2f8f860c x86/vmscape: Enable the mitigation d5490dfa3542 x86/vmscape: Add conditional IBPB mitigation f2ed886bb650 x86/vmscape: Enumerate VMSCAPE bug a4fff4e5c054 Documentation/hw-vuln: Add VMSCAPE documentation de9476bb4f1b Linux 5.15.192 3e7c1c70abf2 dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status() b521afbe4525 spi: tegra114: Use value to check for invalid delays ffe9232693e3 clk: qcom: gdsc: Set retain_ff before moving to HW CTRL b01a706f9e73 perf bpf-event: Fix use-after-free in synthesis 43167766ea1b drm/bridge: ti-sn65dsi86: fix REFCLK setting f2e6b997632d spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort 18fac6162dda spi: spi-fsl-lpspi: Set correct chip-select polarity bit 5255b997529b spi: spi-fsl-lpspi: Fix transmissions when using CONT 85be7ef8c8e7 pcmcia: Add error handling for add_interval() in do_validate_mem() 271ed980d57d ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model 7e287256904e mm/slub: avoid accessing metadata when pointer is invalid in object_err() 8b9a5269b442 randstruct: gcc-plugin: Fix attribute addition db44404d1b9b randstruct: gcc-plugin: Remove bogus void member 4da1cc986b75 arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs 85530b4ec374 vmxnet3: update MTU after device quiesce a82c31b8e9b6 net: dsa: microchip: linearize skb for tail-tagging switches 01ea671f1f2b net: dsa: microchip: update tag_ksz masks for KSZ9477 family 6db1f39f003c dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status() d0b7f11dd68b dma-buf: insert memory barrier before updating num_fences b336106f04a2 gpio: pca953x: fix IRQ storm on system wake up 1d7def97e7eb iio: light: opt3001: fix deadlock due to concurrent flag access 28e4e1b59a34 iio: chemical: pms7003: use aligned_s64 for timestamp 66dc11e9c28f spi: tegra114: Don't fail set_cs_timing when delays are zero 45eef6be830e spi: tegra114: Remove unnecessary NULL-pointer checks b9f28182e29e KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer c824d766e472 cpufreq/sched: Explicitly synchronize limits_changed flag handling abdf3c339181 mm/khugepaged: fix ->anon_vma race 99a8772611e2 e1000e: fix heap overflow in e1000_set_eeprom 5d334bce9fad batman-adv: fix OOB read/write in network-coding decode 95b63d15fce5 scsi: lpfc: Fix buffer free/clear order in deferred receive path da98fc73f7d1 drm/amdgpu: drop hw access in non-DC audio fini acdf26a91219 wifi: mwifiex: Initialize the chan_stats array to zero 732e62212f49 mm: move page table sync declarations to linux/pgtable.h 744ff519c72d x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() 4bd570f49412 pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() 2be7109ef258 ALSA: usb-audio: Add mute TLV for playback volumes on some devices 0bb7069ee343 phy: mscc: Stop taking ts_lock for tx_queue and use its own lock 24b24295464f net: phy: mscc: Fix memory leak when using one step timestamping b4c2fb32f4fe ptp: Add generic PTP is_sync() function 0b21e9cd4559 ppp: fix memory leak in pad_compress_skb 955f400e4f51 net: atm: fix memory leak in atm_register_sysfs when device_register fail 2bd0f6721290 ax25: properly unshare skbs in ax25_kiss_rcv() a7eae33227ee ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init() 894c7d0c3fba net: thunder_bgx: decrement cleanup index before use 299c6d47528e net: thunder_bgx: add a missing of_node_put e5f334ac7747 wifi: libertas: cap SSID len in lbs_associate() 24ec8826381f wifi: cw1200: cap SSID length in cw1200_do_join() eaa10a027ab6 net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets 1eadabcf5623 i40e: Fix potential invalid access when MAC list is empty 348a01c8574b icmp: fix icmp_ndo_send address translation for reply direction e96d08ddbc99 mISDN: Fix memory leak in dsp_hwec_enable() 1079c1029384 xirc2ps_cs: fix register access when enabling FullDuplex 47f6090bcf75 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() c79730e337a1 netfilter: conntrack: helper: Replace -EEXIST by -EBUSY d00c8b0daf56 netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm ff040562c10a wifi: cfg80211: fix use-after-free in cmp_bss() 0f70fab5598d arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro 4377eac565c2 tee: fix NULL pointer dereference in tee_shm_put b187c9761119 fs: writeback: fix use-after-free in __mark_inode_dirty() 71224142994b drm/amd/display: Don't warn when missing DCE encoder caps c1c74584b9b4 bpf: Fix oob access in cgroup local storage c04992612ed4 bpf: Move bpf map owner out of common struct bfb8da7a5dd1 bpf: Move cgroup iterator helpers to bpf.h 23099792bb6f bpf: Add cookie object to bpf maps 7a6c2d093c45 Linux 5.15.191 90bae69c2959 xfs: do not propagate ENODATA disk errors into xattr code c570d773884c Revert "drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS" 3db34718c755 HID: mcp2221: Handle reads greater than 60 bytes 6ac648746149 HID: mcp2221: Don't set bus speed on every transfer 2a0ed07b6967 drm/nouveau/disp: Always accept linear modifier 40a0165278b7 net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions 9a0b5fdce128 dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted 67334c94b853 Revert "drm/amdgpu: fix incorrect vm flags to map bo" 4338b0f6544c HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() bfde0392d74f HID: wacom: Add a new Art Pen 2 4263e5851779 HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() eaae728e7335 HID: asus: fix UAF via HID_CLAIMED_INPUT validation d51e381beed5 KVM: x86: use array_index_nospec with indices that come from guest 568e7761279b efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare 17d6c7747045 sctp: initialize more fields in sctp_v6_from_sk() 700a71e78755 net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts 47fbd9c3364c net/mlx5e: Set local Xoff after FW update 9352f6ea981d net/mlx5e: Update and set Xon/Xoff upon port speed set 7011f0f400d4 net/mlx5e: Update and set Xon/Xoff upon MTU set f64abfa0649a phy: mscc: Fix when PTP clock is register and unregister 5680a4dd1009 net: dlink: fix multicast stats being counted incorrectly 62f368472b0a atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). bf813928bb53 Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced e726dc92f45d powerpc/kvm: Fix ifdef to remove build warning 5a2d5ab38365 net: ipv4: fix regression in local-broadcast routes 6606a6d37496 udf: Fix directory iteration for longer tail extents d717c12fbb23 vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put() f230d40147cc NFS: Fix a race when updating an existing write fd947b71cc1b nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests 2e0d974cdbd1 ASoC: codecs: tx-macro: correct tx_macro_component_drv name 8f397cdef773 scsi: core: sysfs: Correct sysfs attributes access rights a6f0f8873cc3 ftrace: Fix potential warning in trace_printk_seq during ftrace_dump 2573ee4e6c03 pinctrl: STMFX: add missing HAS_IOMEM dependency 01879f56bdde Linux 5.15.190 77cf363f7667 alloc_fdtable(): change calling conventions. e442a966e2b7 wifi: mac80211: check basic rates validity in sta_link_apply_parameters 82ef97abf227 netfilter: nf_reject: don't leak dst refcount for loopback packets 53320a99948d s390/hypfs: Enable limited access during lockdown 0ffb1bf99e49 s390/hypfs: Avoid unnecessary ioctl registration in debugfs bbdfdc63afdf ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation 9d48c8091947 bonding: update LACP activity flag after setting lacp_active 5748c51afe91 net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate 0dacfc5372e3 net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit f422b5e49b72 igc: fix disabling L1.2 PCI-E link substate on I226 on init aa65c2bdb19f ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc fcb4ce9f729c net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization 5d1fed4b1c3c phy: mscc: Fix timestamping for vsc8584 94beabf466da net: phy: Use netif_rx(). 9a1969fbffc1 ppp: fix race conditions in ppp_fill_forward_path 9f113d2828f0 ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add 2af45aadb7b5 drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() 38c13968b80e ALSA: usb-audio: Fix size validation in convert_chmap_v3() ddf1691f2534 drm/hisilicon/hibmc: fix the hibmc loaded failed bug 10ae957833eb mlxsw: spectrum: Forward packets with an IPv4 link-local source IP 0ad8509b468f iommu/amd: Avoid stack buffer overflow from kernel cmdline 325bf7d57c4e scsi: qla4xxx: Prevent a potential error pointer dereference 34171b9e53bd net: bridge: fix soft lockup in br_multicast_query_expired() 0ba6efb2c174 RDMA/bnxt_re: Fix to initialize the PBL array e7ea080f85b7 cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key c635a42d9b74 mm/page_alloc: detect allocation forbidden by cpuset and bail out early 873f32201df8 x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper 4ad0d45ffc39 mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn d8c5d87a4315 iio: light: as73211: Ensure buffer holes are zeroed 41b838420457 tracing: Limit access to parser->buffer when trace_get_user failed 9fb26b72bb8b tracing: Remove unneeded goto out logic 14b0d8e7423a iio: imu: inv_icm42600: change invalid data error to -EBUSY c78c8e5048b7 usb: xhci: Fix slot_id resource race conflict 5e2414ebe6f9 compiler: remove __ADDRESSABLE_ASM{_STR,}() again c8124155c223 selftests: mptcp: pm: check flush doesn't reset limits 9aff206cfc27 pwm: mediatek: Fix duty and period setting 7735341026e5 pwm: mediatek: Handle hardware enable and clock enable separately de1dda2e5312 pwm: mediatek: Implement .apply() callback 1c72f369221c scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems fef82b52a48c scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers 098b2c8ee208 scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE 423fd248c7aa iio: adc: ad_sigma_delta: change to buffer predisable 0d59ce2bfc3b soc: qcom: mdt_loader: Ensure we don't read past the ELF header e94264b07c41 wifi: ath11k: fix dest ring-buffer corruption when ring is full 80bc1e5d9e15 asm-generic: Add memory barrier dma_mb() 06b70cccc106 locking/barriers, kcsan: Support generic instrumentation 9db6a78bc5e4 media: venus: protect against spurious interrupts during probe c52e2ecb77e8 media: venus: Add support for SSR trigger using fault injection 39d70ce5a252 media: qcom: camss: cleanup media device allocated resource on error path 4ef9526792ae media: camss: Convert to platform remove callback returning void 6b7784ea07e6 f2fs: fix to avoid out-of-boundary access in dnode page a19b31f854a8 drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS a7037057fd16 mptcp: disable add_addr retransmission when timeout is 0 7c5f3b639bb1 drm/amd/display: Don't overclock DCE 6 by 15% dfe40159eec6 usb: dwc3: Remove WARN_ON for device endpoint command timeouts bccd26d713ec usb: dwc3: Ignore late xferNotReady event to prevent halt timeout 7ec4f6da3a4b USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles 564b015af068 usb: storage: realtek_cr: Use correct byte order for bcs->Residue b5a59ea98836 USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera f596da86b8c7 usb: renesas-xhci: Fix External ROM access timeouts f9f402f8b93c usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test 868a1b68dcd9 comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() bab220b0bb5a comedi: pcl726: Prevent invalid irq number ab77e85bd3bc comedi: Make insn_rw_emulate_bits() do insn->n samples 78232f3d0eac usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive 4cb568aacc43 most: core: Drop device reference after usage in get_channel() 65817f61e181 iio: proximity: isl29501: fix buffered read on big-endian systems 35b8c9082dd5 iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe() e0b6b223167e ftrace: Also allocate and copy hash for reading of filter files 403820959475 fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable() 905986f6b670 use uniform permission checks for all mount propagation changes 03b40bf5d038 fs/buffer: fix use-after-free when call bh_read() helper 0496b11f223f drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs 9031c990fd69 drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs 2e278aee6afe drm/amd/display: Fix DP audio DTO1 clock source on DCE 6. fe8670344ab3 drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3 9c92d12b5cb9 drm/amd/display: Avoid a NULL pointer dereference f89530d76d28 ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6 7bf57a0709cd mm/debug_vm_pgtable: clear page table entries at destroy_args() b14850b047e8 squashfs: fix memory leak in squashfs_fill_super 7a556ae35d7c mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency c3e0a66fd999 memstick: Fix deadlock by moving removing flag earlier 23249dade24e KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix d08713bac991 scsi: ufs: ufs-pci: Fix default runtime and system PM levels b2be32915f07 scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers fb9c73ef2ac2 mptcp: do not queue data on closed subflows a08f285d2020 mptcp: drop unused sk in mptcp_push_release 13e85f7d6979 selftests: mptcp: Initialize variables to quiet gcc 12 warnings c9f8a3b0600b mptcp: introduce MAPPING_BAD_CSUM 1da47584e2d7 mptcp: fix error mibs accounting f4480eaad489 selftests: mptcp: add missing join check 2b92ae68ba70 selftests: mptcp: connect: also cover checksum 2668261dd04d selftests: mptcp: connect: also cover alt modes 2c5b3b71fe6b selftests: mptcp: make sendfile selftest work 696480028b59 kbuild: userprogs: use correct linker when mixing clang and GNU ld ad1190744da9 ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value cbb445d5cd98 PCI: vmd: Assign VMD IRQ domain before enumeration c2d25fddd867 sch_htb: make htb_deactivate() idempotent eda741fe155d codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() db568d2151cd sch_drr: make drr_qlen_notify() idempotent dd83b2be69a1 btrfs: populate otime when logging an inode item a803d916ae9a KVM: VMX: Flush shadow VMCS on emergency reboot be9692dafdfb net/sched: ets: use old 'nbands' while purging unused classes 1980d8d38cef net_sched: sch_ets: implement lockless ets_dump() de127abe923a net/sched: sch_ets: properly init all active DRR list handles 8af89a96144e platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister() 9936cb9ef2d2 platform/chrome: cros_ec: remove unneeded label and if-condition 2ad140545b2a platform/chrome: cros_ec: Use per-device lockdep key d9e812b90b38 platform/chrome: cros_ec: Make cros_ec_unregister() return void 79c745be310e usb: dwc3: imx8mp: fix device leak at unbind 7b3f0e3b60c2 bus: mhi: host: Detect events pointing to unexpected TREs cfbd61d63263 ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig 90a53102729e usb: musb: omap2430: fix device leak at unbind 1be6c638f72d usb: musb: omap2430: Convert to platform remove callback returning void 69bea84b06b5 mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() 3924dab90816 NFS: Fix the setting of capabilities when automounting a new filesystem dbadab480714 NFS: Create an nfs4_server_set_init_caps() function e60dc74f62f0 net: enetc: fix device and OF node leak at probe a39791e479ba block: Make REQ_OP_ZONE_FINISH a write operation 1aaa8e9e4f50 PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports 5cbf5709aa05 usb: typec: fusb302: cache PD RX state 3467c4ebb334 hv_netvsc: Fix panic during namespace deletion with VF 26eb63f732b0 smb: server: Fix extension string in ksmbd_extract_shortname() 14fafb398360 ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() 1b2b7e9da01e x86/fpu: Delay instruction pointer fixup until after warning 6550b2bef095 smb: client: fix use-after-free in crypt_message when using async crypto ae8428d68252 usb: hub: Don't try to recover devices lost during warm reset. 98df81d18e5d usb: hub: avoid warm port reset during USB3 disconnect 8a0b022147b1 x86/mce/amd: Add default names for MCA banks and blocks 4e2ee5d14333 iio: hid-sensor-prox: Fix incorrect OFFSET calculation 4597cf3ac9ba iio: hid-sensor-prox: Restore lost scale assignments c4029044cc40 f2fs: fix to do sanity check on ino and xnid 3a12e18a0310 ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS 407047893a64 arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() 6188d61ba73d drm/sched: Remove optimization that causes hang when killing dependent jobs 7c5a13c76dd3 ice: Fix a null pointer dereference in ice_copy_and_init_pkg() 46a7cdcf06c4 selftests/memfd: add test for mapping write-sealed memfd read-only 1c296cba6568 mm: reinstate ability to map write-sealed memfd mappings read-only d919658a3871 mm: update memfd seal write check to include F_SEAL_WRITE 27df40ad7445 mm: drop the assumption that VM_SHARED always implies writable 44e2f93f9820 sch_qfq: make qfq_qlen_notify() idempotent a5efc95a33bd sch_hfsc: make hfsc_qlen_notify() idempotent 967955c9e57f sch_htb: make htb_qlen_notify() idempotent 587558d812ac mptcp: pm: kernel: flush: do not reset ADD_ADDR limit 6ddf51fc0b07 mptcp: drop skb if MPTCP skb extension allocation fails 3b348c9c8d2c ipv6: sr: Fix MAC comparison to be constant-time 3ae272ab523d net, hsr: reject HSR frame if skb can't hold tag da240d7f7e10 drm/amd/display: Don't overwrite dce60_clk_mgr 92c4a1fde641 drm/amd: Restore cached power limit during resume 5005e4e6f964 media: venus: venc: Clamp param smaller than 1fps and bigger than 240 48045c17fddf media: venus: vdec: Clamp param smaller than 1fps and bigger than 240. e6e5e5e5b40a media: venus: hfi: explicitly release IRQ during teardown ef09b96665f1 media: venus: Add a check for packet size after reading from shared memory f16dc2c87ce4 media: ov2659: Fix memory leaks in ov2659_probe() fbc81e78d75b media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() 5427dda195d6 media: usbtv: Lock resolution while streaming 436774334587 media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() 025617f4851a media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init() 5197247df6a0 media: hi556: correct the test pattern configuration 6512784dbf5d media: gspca: Add bounds checking to firmware parser 90cc9e7d82e1 soc/tegra: pmc: Ensure power-domains are in a known state 84ff98c1ea19 jbd2: prevent softlockup in jbd2_log_do_checkpoint() fb454ba99189 PCI: endpoint: Fix configfs group removal on driver teardown dc4ffbd57171 PCI: endpoint: Fix configfs group list head handling 7d5c223edf89 mtd: rawnand: fsmc: Add missing check after DMA map 93f1be8de86a mtd: spinand: propagate spinand_wait() errors from spinand_write_page() e26bd46c2968 hwmon: (gsc-hwmon) fix fan pwm setpoint show functions dbe8b4366878 pwm: imx-tpm: Reset counter if CMOD is 0 6b6fa2a7a1b3 wifi: ath11k: fix source ring-buffer corruption 5679342831db wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table() 1bb6bb6cd975 zynq_fpga: use sgtable-based scatterlist wrappers 0176a6117fc7 ata: libata-scsi: Fix ata_to_sense_error() status handling 48a1795cbf67 scsi: mpi3mr: Fix race between config read submit and interrupt completion e1f8a51a8602 ext4: fix hole length calculation overflow in non-extent inodes 66245c16d72e ext4: use kmalloc_array() for array space allocation 5396de17bcea ext4: don't try to clear the orphan_present feature block device is r/o 2c9c15656569 ext4: fix reserved gdt blocks handling in fsmap e0fad182ba8a ext4: fix fsmap end of range reporting with bigalloc cdfc7b6d3473 ext4: check fast symlink for ea_inode correctly 8a5e6282c6a7 Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()" 649383fa7f67 lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap 969668b6e7d2 vt: defkeymap: Map keycodes above 127 to K_HOLE 6b03d59b1e0e vt: keyboard: Don't process Unicode characters in K_OFF mode 228c686e20ff bus: mhi: host: Fix endianness of BHI vector table 9d916500ecf9 usb: dwc3: meson-g12a: fix device leaks at unbind 332d4a4b8615 usb: gadget: udc: renesas_usb3: fix device leak at unbind f6d79955b2a3 usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init() 5e5ccfdbe4ac m68k: Fix lost column on framebuffer debug console 177d3651dbd3 cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() 68c4613e89f0 serial: 8250: fix panic due to PSLVERR 08e12045014b HID: magicmouse: avoid setting up battery timer when not needed 123cf618a0ae media: uvcvideo: Do not mark valid metadata as invalid 8343f3fe0b75 media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() f249d32bb548 mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock a04de4c40aab mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() d06e119a16ce parisc: Makefile: fix a typo in palo.conf 078e62bffca4 fbdev: Fix vmalloc out-of-bounds write in fast_imageblit fa086b1398cf btrfs: do not allow relocation of partially dropped subvolumes 8563ac0b5b8f btrfs: fix log tree replay failure due to file with 0 links and extents fa6e0cc6a720 cdc-acm: fix race between initial clearing halt and open 6eb63a710da3 thunderbolt: Fix copy+paste error in match_service_id() d85fac8729c9 comedi: fix race between polling and detaching 56b9177f17ab usb: typec: ucsi: Update power_supply on power role change 030b156ec7e0 misc: rtsx: usb: Ensure mmc child device is active when card is present 058ad2b72281 usb: core: config: Prevent OOB read in SS endpoint companion parsing 91789de2ed20 ext4: fix largest free orders lists corruption on mb_optimize_scan switch 3b6de89a9dda drm/amdgpu: fix incorrect vm flags to map bo 30b14a9374d9 ASoC: fsl_sai: replace regmap_write with regmap_update_bits 780ce4759f94 ASoC: soc-dai.h: merge DAI call back functions into ops 4f60001afa06 ASoC: soc-dai.c: add missing flag check at snd_soc_pcm_dai_probe() 87c474a68724 scsi: lpfc: Remove redundant assignment to avoid memory leak 481701300b7b rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe 4f783333cbfa pNFS: Fix uninited ptr deref in block/scsi layout f47b0662bdbd pNFS: Handle RPC size limit for layoutcommits 1ba621a63625 pNFS: Fix disk addr range check in block/scsi layout c8dea4397432 pNFS: Fix stripe mapping in block/scsi layout 8b3ce085b52e block: avoid possible overflow for chunk_sectors check in blk_stack_limits() 53acbc94344e net: phy: smsc: add proper reset flags for LAN8710A dc826121cd44 ipmi: Fix strcpy source and destination the same a12feec53c1a kconfig: lxdialog: fix 'space' to (de)select options f7d9f0717be8 kconfig: gconf: fix potential memory leak in renderer_edited() 28498cf306f9 kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() 19b946182978 ipmi: Use dev_warn_ratelimited() for incorrect message warnings 2b4aa66f7532 scsi: aacraid: Stop using PCI_IRQ_AFFINITY 2e24d269359b scsi: target: core: Generate correct identifiers for PR OUT transport IDs 237edd281d52 scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans e008120a621e kconfig: nconf: Ensure null termination where strncpy is used a73ee10c2781 kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c 344ef2a6c6e8 i2c: Force DLL0945 touchpad i2c freq to 100khz 3963ecbdddaf dm-mpath: don't print the "loaded" message if registering fails 6f83cf2e362a i3c: don't fail if GETHDRCAP is unsupported ce3195182fe0 rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 758b8e343610 i3c: add missing include to internal header b506af24d662 md: dm-zoned-target: Initialize return variable r to avoid uninitialized use e6f44cd74134 crypto: octeontx2 - add timeout for load_fvc completion poll eb6059474e70 media: uvcvideo: Fix bandwidth issue for Alcor camera 17b30e5ded06 media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar 529fd5593b72 media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() e06e706500b8 media: usb: hdpvr: disable zero-length read messages aef1b717d4a2 media: tc358743: Increase FIFO trigger level to 374 21ba26a8e347 media: tc358743: Return an appropriate colorspace from tc358743_set_fmt a6ccbe037734 media: tc358743: Check I2C succeeded during probe 2e82f9a5a37b pinctrl: stm32: Manage irq affinity settings 0de080a0ecab scsi: mpt3sas: Correctly handle ATA device errors 5e25ee1ecec9 scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure c16984bc84bf RDMA/core: reduce stack using in nldev_stat_get_doit() 9d3211cb61a0 RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() a8c0dc453e9f leds: leds-lp50xx: Handle reg to get correct multi_index b6a9cc9918db media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control bd90dbd19683 MIPS: Don't crash in stack_top() for tasks without ABI or vDSO 1467a75819e4 jfs: upper bound check of tree index in dbAllocAG 9ad054cd2c4c jfs: Regular file corruption check 8ed7275910fb jfs: truncate good inode pages when hard link is 0 ba024d925645 scsi: bfa: Double-free fix f5de907f0479 watchdog: iTCO_wdt: Report error if timeout configuration fails 90c1295da0a7 MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} e9849ca6dd01 watchdog: dw_wdt: Fix default timeout dacfd8cf9c23 fs/orangefs: use snprintf() instead of sprintf() fd5aad080edb scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated 7f322c12df7a ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr 79ec8dabf001 crypto: hisilicon/hpre - fix dma unmap sequence b06a3c552c00 cifs: Fix calling CIFSFindFirst() for root path without msearch 8e6932ee0cc9 watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition 1117260a5402 vhost: fail early when __vhost_add_used() fails 6ef6e42de0d4 net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 77e56dbc7b7a drm/ttm: Respect the shrinker core free target 65a7b7717600 uapi: in6: restore visibility of most IPv6 socket options 49586908dea6 drm/ttm: Should to return the evict error 6716de171b2a net: ncsi: Fix buffer overflow in fetching version id 56c4837283eb wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() f531abcdfec2 net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 bae08d48d044 net: dsa: b53: prevent DIS_LEARNING access on BCM5325 9874ad64285f net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 36bec4066dff net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 392aa29dbcc5 gve: Return error for unknown admin queue command 452de5797933 net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs d49af61978b6 drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual 851c50b31611 dpaa_eth: don't use fixed_phy_change_carrier 6de7a77911b2 wifi: iwlegacy: Check rate_idx range after addition 7cc4b7c2e24f netmem: fix skb_frag_address_safe with unreadable skbs 7451726049e8 wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`. e80b670bc30d drm/amd/display: Fix 'failed to blank crtc!' 6fed73112e43 wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect ffbf9699d639 wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() 851726384eb6 drm/amd/display: Separate set_gsl from set_gsl_source_select e03f9c0b9324 net: fec: allow disable coalescing 03dd58451897 net: atlantic: add set_power to fw_ops for atl2 to fix wol 833e0e6744cd net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths() 39117551069d drm/msm: use trylock for debugfs 834c1e80164e ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc(). e22b1ee8cec9 (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer 599dcdfff36f wifi: mac80211: don't complete management TX on SAE commit bb9a6585c2f9 s390/stp: Remove udelay from stp_sync_clock() 13ff80efde1c wifi: iwlwifi: mvm: fix scan request validation ac31ba743054 sched/deadline: Fix accounting after global limits change 037d856072bc net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() c965a0f7477a net: ipv4: fix incorrect MTU in broadcast routes 7fcb3d1a622b wifi: cfg80211: Fix interface type validation 15b05f078e6c net: mctp: Prevent duplicate binds 0ad84d622174 rcu: Protect ->defer_qs_iw_pending from data race a8b4ecb16327 arm64: Mark kernel as tainted on SAE and SError panic 0f2d1bcdd01c net/mlx5e: Properly access RCU protected qdisc_sleeping variable 8769e2cd97dc net: ag71xx: Add missing check after DMA map 44746e44ef61 et131x: Add missing check after DMA map 9152c8dce4fa be2net: Use correct byte order and format string for TCP seq and ack_seq 5e18232d72a1 s390/time: Use monotonic clock in get_cycles() 39968a6d1b7f wifi: cfg80211: reject HTC bit for management frames 72632af764d0 ktest.pl: Prevent recursion of default variable options 2fc78b1f4544 xen/netfront: Fix TX response spurious interrupts a0c4744b3e7a ASoC: codecs: rt5640: Retry DEVICE_ID verification 2191a2f89827 iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement 97e1d2a18a7d ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros 77477121f87a ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop c2dacfe495b7 ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control a73ccab0ebd2 platform/chrome: cros_ec_typec: Defer probe on missing EC parent 93d700f59bf9 platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches ddb96ab185e8 pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() ffa551a30da6 usb: core: usb_submit_urb: downgrade type check 5c7fda829b16 usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present 82ba7b8cf9f6 ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() afd0dd1baf0a ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 866fcfc056c3 ASoC: hdac_hdmi: Rate limit logging on connection and disconnection b3f0f92abaac x86/bugs: Avoid warning when overriding return thunk 921592ffe886 mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() 345df19a971a reset: brcmstb: Enable reset drivers for ARCH_BCM2835 932d27bc3650 pps: clients: gpio: fix interrupt handling order in remove path e8d164041ebd ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path 18aed89a19d9 mmc: sdhci-msm: Ensure SD card power isn't ON when card removed 0c48c9fe3fac ACPI: processor: fix acpi_object initialization b287704f0b51 PM: sleep: console: Fix the black screen issue 7121241b7267 thermal: sysfs: Return ENODATA instead of EAGAIN for reads c2b884662890 PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() 2bcc6a6c3fbd ACPI: PRM: Reduce unnecessary printing to avoid user confusion e453c89e247d selftests: tracing: Use mutex_unlock for testing glob filter 2499b0ac908e ARM: tegra: Use I/O memcpy to write to IRAM aeb7edd5cb7e gpio: tps65912: check the return value of regmap_update_bits() 4dd40dfba23a tools/nolibc: define time_t in terms of __kernel_old_time_t 5b49e57e1e73 thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required 8cac2bd3cc83 ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed 472af4d4fa68 EDAC/synopsys: Clear the ECC counters on init 2a65a7477b82 PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store() c0726d1e466e ARM: rockchip: fix kernel hang during smp initialization 4d0b2d5a7419 cpufreq: Exit governor when failed to start old governor 6c3ae3c40cbb gpio: wcd934x: check the return value of regmap_update_bits() bade491eb9e0 usb: xhci: Avoid showing errors during surprise removal c4ba0c252d92 usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command 04e615daf3b9 usb: xhci: Avoid showing warnings for dying controller 5a164a725b9c usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default cc1613a46a1f selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t be45f1b5f28d cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag f3ab168d3c85 usb: xhci: print xhci->xhc_state when queue_command failed c8704dca5792 securityfs: don't pin dentries twice, once is enough... d167a43b29cc ext2: Handle fiemap on empty files to prevent EINVAL 5a77f371b4a1 fs/ntfs3: correctly create symlink for relative path bde58c1539f3 fs/ntfs3: Add sanity check for file name 11388106fab5 ata: libata-sata: Disallow changing LPM state if not supported 11b567346c65 better lockdep annotations for simple_recursive_removal() ad5f53b993b2 hfs: fix not erasing deleted b-tree node issue 84ef8dd32383 drbd: add missing kref_get in handle_write_conflicts dc83df485f44 udf: Verify partition map count 9d5012ffe141 smb/server: avoid deadlock when linking with ReplaceIfExists f8d55c912e45 arm64: Handle KCOV __init vs inline mismatches 03cd1db1494c hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() ccf0ad56a779 hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() 5ab59229bef6 hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() a1a60e795022 hfs: fix slab-out-of-bounds in hfs_bnode_read() 240325993e78 ptp: prevent possible ABBA deadlock in ptp_clock_freerun() 55b12736625d cpuidle: governors: menu: Avoid using invalid recent intervals data 8680e712240e intel_idle: Allow loading ACPI tables for any family cd0e92bb2b75 sctp: linearize cloned gso packets in sctp_rcv 19b909a4b145 netfilter: ctnetlink: fix refcount leak on table dump a47767e20cf7 udp: also consider secpath when evaluating ipsec use for checksumming edc065c19257 ACPI: processor: perflib: Move problematic pr->performance check 40f8fea730ce ACPI: processor: perflib: Fix initial _PPC limit application 289d1d1fc1dc Documentation: ACPI: Fix parent device references 71379495ab70 eventpoll: Fix semi-unbounded recursion 749528086620 fs: Prevent file descriptor table allocations exceeding INT_MAX 9620376f73fa sunvdc: Balance device refcount in vdc_port_mpgroup_check 6fd42124b445 NFSD: detect mismatch of file handle and delegation stateid in OPEN op f3aac6cf390d nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() 75947d3200de net: usb: asix_devices: add phy_mask for ax88772 mdio bus 1b35f7ee5012 net: dpaa: fix device leak when querying time stamp info f95f0deb566d net: gianfar: fix device leak when querying time stamp info f324959ad47e netlink: avoid infinite retry looping in netlink_unicast() 286b5be7f2ae gpio: virtio: Fix config space reading. 275e37532e8e ALSA: usb-audio: Validate UAC3 cluster segment descriptors f03418bb9d54 ALSA: usb-audio: Validate UAC3 power domain descriptors, too b0878a23aee6 io_uring: don't use int for ABI 8afb22aa063f usb: gadget : fix use-after-free in composite_dev_cleanup() 66b1f50158e6 mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery 42ade82926c3 MIPS: mm: tlb-r4k: Uniquify TLB entries on init e05310943e7b ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe() 1946a6a9bdeb net: usbnet: Fix the wrong netif_carrier_on() call e2a4325ce21a net: usbnet: Avoid potential RCU stall on LINK_CHANGE event b4b40bab6c34 USB: serial: option: add Foxconn T99W709 cf86704798c1 vsock: Do not allow binding to VMADDR_PORT_ANY ba2257034755 net/packet: fix a race in packet_set_ring() and packet_notifier() 2675f405a60b selftests/perf_events: Add a mmap() correctness test 3bd518cc7ea6 perf/core: Prevent VMA split of buffer mappings de85e72598d8 perf/core: Exit early on perf_mmap() fail 899d253add77 perf/core: Don't leak AUX buffer refcount on allocation failure ce0481ac88a7 pptp: fix pptp_xmit() error path 229429073578 smb: client: let recv_done() cleanup before notifying the callers. 1f6525e79074 smb: server: let recv_done() avoid touching data_transfer after cleanup/move 87fc5ce6ff98 smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection fb3854e76cd3 smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already 484dea96e8c6 smb: server: remove separate empty_recvmsg_queue 61a58a043906 ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out() f80b34ebc579 benet: fix BUG when creating VFs 4c1022220b1b net: drop UFO packets in udp_rcv_segment() 09ff062b89d8 ipv6: reject malicious packets in ipv6_gso_segment() d0e1d47eca66 net/mlx5: Correctly set gso_segs when LRO is used 5de7513f38f3 pptp: ensure minimal skb length in pptp_xmit() 10c803dee386 phy: mscc: Fix parsing of unicast frames 0a0108796b84 netpoll: prevent hanging NAPI when netcons gets enabled 19b83e315441 NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY 461125e8f46c XArray: Add calls to might_alloc() b23afb4a5fd2 NFSv4.2: another fix for listxattr 3570ef5c3131 NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() 70bf32087b4d pNFS/flexfiles: don't attempt pnfs on fatal DS errors 2ec8ec57bb8e PCI: pnv_php: Fix surprise plug detection and recovery f56e004b7817 powerpc/eeh: Make EEH driver device hotplug safe efabe0bd99f4 powerpc/eeh: Rely on dev->link_active_reporting cb1ea063039c powerpc/eeh: Export eeh_unfreeze_pe() 12656cda9194 PCI: pnv_php: Work around switches with broken presence detection 912e200240b6 PCI: pnv_php: Clean up allocated IRQs on unplug 06e25dfea328 kconfig: qconf: fix ConfigList::updateListAllforAll() a30c34e6be0f scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume 0967189e6a09 scsi: mpt3sas: Fix a fw_event memory leak 666b7cf6ac9a f2fs: fix to avoid out-of-boundary access in devs.path 5cd99d5aa3d3 f2fs: fix to avoid panic in f2fs_evict_inode 1edf68272b8c f2fs: fix to avoid UAF in f2fs_sync_inode_meta() fba3a1c1c330 f2fs: doc: fix wrong quota mount option description 08e8ab00a6d2 f2fs: fix KMSAN uninit-value in extent_info usage 37f3a111913b rtc: rv3028: fix incorrect maximum clock rate handling 2ed0bae18a77 rtc: pcf8563: fix incorrect maximum clock rate handling facb6e7c0f4e rtc: pcf85063: fix incorrect maximum clock rate handling 452aed10517b rtc: hym8563: fix incorrect maximum clock rate handling d62a797801fd rtc: ds1307: fix incorrect maximum clock rate handling e9293fd04c1b ucount: fix atomic_long_inc_below() argument type 0b973c5eeef5 module: Restore the moduleparam prefix length check 69e83e552750 apparmor: ensure WB_HISTORY_SIZE value is a power of 2 74a87aca0942 bpf: Check flow_dissector ctx accesses are aligned 27354cbd69b8 vhost-scsi: Fix log flooding with target does not exist errors aed9a4e43946 mtd: rawnand: atmel: set pmecc data setup time 62f7cc11b04e mtd: rawnand: rockchip: Add missing check after DMA map 15d0e92dfd45 mtd: rawnand: atmel: Fix dma_mapping_error() address 47bf04a5a4b7 jfs: fix metapage reference count leak in dbAllocCtl cca8f5a39919 fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref 52e1dc93d52d crypto: qat - fix seq_file position update in adf_ring_next() 6ff44d06e953 sh: Do not use hyphen in exported variable name 2bba4bdf050d dmaengine: nbpfaxi: Add missing check after DMA map c94f4c6e662a dmaengine: mv_xor: Fix missing check after DMA map and missing unmap bbe6cd4da912 fs/orangefs: Allow 2 more characters in do_c_string() d2016efbc42a PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute d54f6bc4b2b0 soundwire: stream: restore params when prepare ports fail cbdd905a6b3e crypto: img-hash - Fix dma_unmap_sg() nents value 5867d62dfe92 crypto: keembay - Fix dma_unmap_sg() nents value 0b777a598b76 hwrng: mtk - handle devm_pm_runtime_enable errors 7a9ee7b9034a watchdog: ziirave_wdt: check record length in ziirave_firm_verify() d084ff4b7c6b scsi: isci: Fix dma_unmap_sg() nents value 999bb730ca69 scsi: mvsas: Fix dma_unmap_sg() nents value 1c0717978d2a scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value 896c8ac77794 clk: sunxi-ng: v3s: Fix de clock definition 2ab3f20f4baa perf tests bp_account: Fix leaked file descriptor b1b1bfb81a4a kernel: trace: preemptirq_delay_test: use offstack cpu mask b6fbac6ae904 RDMA/hns: Fix -Wframe-larger-than issue 20c0ed8dd658 crypto: ccp - Fix crash when rebind ccp device for ccp.ko f25a1c8834c3 crypto: inside-secure - Fix `dma_unmap_sg()` nents value 9f13f09c8dc4 perf sched: Fix memory leaks for evsel->priv in timehist 84cd7256f068 clk: clk-axi-clkgen: fix fpfd_max frequency for zynq 7b5365d17b58 pinctrl: sunxi: Fix memory leak on krealloc failure 0369e2055789 PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails 9ed082a72c20 power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set 4ebbb9106aaa power: supply: cpcap-charger: Fix null check for power_supply_get_by_name 7e903da71f8b clk: xilinx: vcu: unregister pll_post only if registered correctly c62c0b6d797e media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check 2adc945b70c4 clk: davinci: Add NULL check in davinci_lpsc_clk_register() e86cc0b9812c mtd: fix possible integer overflow in erase_xfer() 9745eecf5b69 crypto: marvell/cesa - Fix engine load inaccuracy dcd17f4f579b PCI: rockchip-host: Fix "Unexpected Completion" log message 2e34470f44eb vrf: Drop existing dst reference in vrf_ip6_input_dst 5e0275f888eb selftests: rtnetlink.sh: remove esp4_offload after test b10cfa2de13d netfilter: xt_nfacct: don't assume acct name is null-terminated bfc8a82751f6 can: kvaser_usb: Assign netdev.dev_port based on device channel index 0721467bb069 can: kvaser_pciefd: Store device channel index 19859cc12acc wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE 696994a1d655 Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" 9b096abd5454 wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() fe1ee935285a wifi: mac80211: Don't call fq_flow_idx() for management frames d56890533b08 mwl8k: Add missing check after DMA map da1be393a75d wifi: rtl8xxxu: Fix RX skb size for aggregation disabled 7c537709a18c xen/gntdev: remove struct gntdev_copy_batch from stack 9cd1537036ac net_sched: act_ctinfo: use atomic64_t for three counters cab280994498 net/sched: Restrict conditions for adding duplicating netems to qdisc tree 863b1c70e7f8 um: rtc: Avoid shadowing err in uml_rtc_start() 8d83f7143ff7 arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX 5351b8a41623 netfilter: nf_tables: adjust lockdep assertions handling 7a43cb575217 drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value 8f35daf34357 m68k: Don't unregister boot console needlessly 9053a69abfb5 net/mlx5: Check device memory pointer before usage f5a27666c8cf tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range eff3bb53c18c wifi: ath11k: clear initialized flag for deinit-ed srng lists 2e9f85ee3b46 iwlwifi: Add missing check for alloc_ordered_workqueue d76ca8359371 wifi: iwlwifi: Fix memory leak in iwl_mvm_init() c73c773b09e3 wifi: rtl818x: Kill URBs before clearing tx status queue 9a0624ff42df caif: reduce stack size, again a7caec2a1b59 bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure 73fc5d04009d bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls c0efe4eae2cc bpf, sockmap: Fix psock incorrectly pointing to sk d699e4e6d33b drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed 4bf712152125 selftests/tracing: Fix false failure of subsystem event test 3afd514c77f4 staging: nvec: Fix incorrect null termination of battery manufacturer f7c2de49fee3 samples: mei: Fix building on musl libc 90918264362d cpufreq: Init policy->rwsem before it may be possibly used d9c7fc2c8ae2 cpufreq: Initialize cpufreq-based frequency-invariance later 997c36d137e3 cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode f0479e878d4b PM / devfreq: Check governor before using governor->name 35a490ea5a80 arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed 10c0fbd5ad66 arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed 0008ec694e2b ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface a789256941ab arm: dts: ti: omap: Fixup pinheader typo ae08cd98fef4 usb: early: xhci-dbc: Fix early_ioremap leak c6fdcd40390e Revert "vmci: Prevent the dispatching of uninitialized payloads" a891b456ba2b pps: fix poll support a85dc8385749 vmci: Prevent the dispatching of uninitialized payloads 3290f62f23fa staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() 76f1842cdc91 usb: misc: apple-mfi-fastcharge: Make power supply names unique 4986c1e82e93 ARM: dts: vfxxx: Correctly use two tuples for timer address b6b551196f5b selftests: Fix errno checking in syscall_user_dispatch test cfb5e5582f69 ASoC: ops: dynamically allocate struct snd_ctl_elem_value fe18d9f14f4c ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() bec8109f957a Revert "fs/ntfs3: Replace inode_trylock with inode_lock" 14922f0cc92e hfsplus: remove mutex_lock check in hfsplus_free_extents 92c50b2d5a57 fs_context: fix parameter name in infofc() macro 7becf31ed946 ASoC: Intel: fix SND_SOC_SOF dependencies c845b2e787d8 ethernet: intel: fix building with large NR_CPUS 6dd7e3fc9246 usb: phy: mxs: disconnect line when USB charger is attached c53baa6a134c usb: chipidea: add USB PHY event 6005cea17d04 ALSA: hda: Add missing NVIDIA HDA codec IDs 988be12b610d comedi: comedi_test: Fix possible deletion of uninitialized timers fa6ce4a9cc9f jfs: reject on-disk inodes of an unsupported type 6b80d98a9710 x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode() 6d40dd35a932 usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach 92370ce7071c usb: typec: tcpm: allow switching to mode accessory to mux properly 2f7fbb19d983 usb: typec: tcpm: allow to use sink in accessory mode 4991f824128b mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n 98872a934ea6 nilfs2: reject invalid file types when reading inodes 1d6f02700d75 gve: Fix stuck TX queue for DQ queue format ae07af3d1f8e e1000e: ignore uninitialized checksum word on tgp 30e2871bd4b3 e1000e: disregard NVM checksum on tgp when valid checksum bit is not set 8aa46b2428b8 dpaa2-switch: Fix device reference count leak in MAC endpoint handling 30f7d3d90f41 dpaa2-eth: Fix device reference count leak in MAC endpoint handling 094a94e3b237 ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx 83f64bb37197 bus: fsl-mc: Fix potential double device reference in fsl_mc_get_endpoint() c742b06302a0 i2c: virtio: Avoid hang by using interruptible completion wait d05ec13aa3eb i2c: qup: jump out of the loop in case of timeout ec1aa39ea7f9 platform/x86: ideapad-laptop: Fix kbd backlight not remembered among boots a8e8b3733ebd net: hns3: fixed vf get max channels bug d739b876c161 net: hns3: disable interrupt when ptp init failed f1d943048fd2 net: hns3: fix concurrent setting vlan filter issue ab905a2e982e net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class 186942d19c02 net: appletalk: Fix use-after-free in AARP proxy probe 4640c4dc604d i40e: report VF tx_dropped with tx_errors instead of tx_discards 8d9184cce2bf i40e: Add rx_missed_errors for buffer exhaustion c8aefc5994eb regmap: fix potential memory leak of regmap_bus cda04854614f interconnect: qcom: sc7280: Add missing num_links to xm_pcie3_1 node 532fbdc74a4e RDMA/core: Rate limit GID cache warning messages ca9bef9ba1a6 regulator: core: fix NULL dereference on unbind due to stale coupling data 664e5a6f541f Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT b62c8ee41b81 x86: Pin task-stack in __get_wchan() e43191f9efa3 x86: Fix __get_wchan() for !STACKTRACE 5ce1264b586d sched: Add wrapper for get_wchan() to keep task blocked b52e53a44a43 x86: Fix get_wchan() to support the ORC unwinder 4dba44333a11 bpf, sockmap: Fix panic when calling skb_linearize 7722142d7265 platform/x86: think-lmi: Fix kobject cleanup f110c609b0c5 powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed 7d2c4a0fee61 mm/vmalloc: leave lazy MMU mode on PTE mapping error ee093910b9f8 ASoC: fsl_sai: Force a software reset when starting in consumer mode d2ab0bb400cc usb: dwc3: qcom: Don't leave BCR asserted 5e2851d5e3cf usb: musb: fix gadget state on disconnect 8594a4e87977 usb: musb: Add and use inline functions musb_{get,set}_state 7a7178837bed usb: hub: Fix flushing of delayed work used for post resume purposes 1a6fee8d8295 usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm e38ca702130b usb: hub: fix detection of high tier USB3 devices behind suspended hubs 36fecd740de2 clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns 9ef510db1362 sched: Change nr_uninterruptible type to unsigned long 850226aef8d2 net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree 2a4b9df3cb50 net: bridge: Do not offload IGMP/MLD messages 047b61a24d7c net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime 9aa9261bf1fe Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU 6e4eec86fe5f ipv6: mcast: Delay put pmc->idev in mld_del_delrec() 984a2fb6f2ed net/mlx5: Correctly set gso_size when LRO is used 88576404084d net/mlx5e: Add support to klm_umr_wqe 9737501f26b6 lib: bitmap: Introduce node-aware alloc API ce2f1b5d0f13 Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout edf3a1828373 Bluetooth: SMP: If an unallowed command is received consider it a failure 3a4eca2a1859 Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() a6a238c4126e usb: net: sierra: check for no status endpoint 4eb5cc48399f hwmon: (corsair-cpro) Validate the size of the received input buffer 22bff8038efb selftests: net: increase inter-packet timeout in udpgro.sh db262843d1ce selftests: udpgro: report error when receive failed 46c321f45c87 nvme: fix misaccounting of nvme-mpath inflight I/O 4256a483fe58 smb: client: fix use-after-free in cifs_oplock_break 4b5022b649ab pinctrl: mediatek: moore: check if pin_desc is valid before use 8ba6c2362b85 rpl: Fix use-after-free in rpl_do_srh_inline(). c6df79400014 net/sched: sch_qfq: Fix race condition on qfq_aggregate ca9850df52cc net: emaclite: Fix missing pointer increment in aligned_read() 97303e541e12 bpf: Reject %p% format string in bprintf-like helpers 020eed5681d0 comedi: Fix initialization of data for instructions that write to subdevice c53570e62b5b comedi: Fix use of uninitialized data in insn_rw_emulate_bits() 757127050b43 comedi: Fix some signed shift left operations 69dc06b95145 comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large 73f34d609397 comedi: das6402: Fix bit shift out of bounds b3c95fa508e5 comedi: das16m1: Fix bit shift out of bounds c593215385f0 comedi: aio_iiro_16: Fix bit shift out of bounds 29ef03e5b844 comedi: pcl812: Fix bit shift out of bounds eda041948635 iio: adc: stm32-adc: Fix race in installing chained IRQ handler 2f10149ae596 iio: adc: max1363: Reorder mode_list[] entries 8ff32ec36adb iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[] 166afe964e84 soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled fe632e8fc184 soc: aspeed: lpc-snoop: Cleanup resources in stack-order 5fd9150de773 pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov ecb1a74e41b5 mmc: sdhci_am654: Workaround for Errata i2312 4d6c8f3e13af mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models 0886c420da61 mmc: bcm2835: Fix dma_unmap_sg() nents value 0a8432ef8cd9 memstick: core: Zero initialize id_reg in h_memstick_read_dev_id() 6ef428a6e972 isofs: Verify inode mode when loading from disk 24861ef8b517 dmaengine: nbpfaxi: Fix memory corruption in probe() 052af0c58b5b af_packet: fix soft lockup issue caused by tpacket_snd() 9e3219d33907 af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd() e98c1dfae40e phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept() ca60064ea03f tracing: Add down_write(trace_event_sem) when adding trace event f10923b8d32a HID: core: do not bypass hid_hw_raw_request aefa6e92d9b4 HID: core: ensure __hid_request reserves the report ID as the first byte 7fa83d004337 HID: core: ensure the allocated report buffer can contain the reserved report ID 6c6ae150dbd8 pch_uart: Fix dma_sync_sg_for_device() nents value d83feb2854d8 Input: xpad - set correct controller type for Acer NGR200 8039721de433 thunderbolt: Fix bit masking in tb_dp_port_set_hops() 0bcdbf953523 i2c: stm32: fix the device used for the DMA map 15a872068799 usb: gadget: configfs: Fix OOB read on empty string write 76157b526d17 USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI 660b9dc0fd3d USB: serial: option: add Foxconn T99W640 d374b477ae95 USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition cdcb0ffd6448 phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode Signed-off-by: Bruce Ashfield Signed-off-by: Steve Sakoman --- .../linux/linux-yocto-rt_5.15.bb | 6 ++--- .../linux/linux-yocto-tiny_5.15.bb | 6 ++--- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 26 +++++++++---------- 3 files changed, 19 insertions(+), 19 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index 1df0d30c81..6db8ab45e1 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -11,13 +11,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "57a47106b330353648ec7c1c2f5d28437937bb69" -SRCREV_meta ?= "d8c8889e18158a14223aa6cdb121c26a4d58fb56" +SRCREV_machine ?= "bf6a706b67fab1f1b87d036a27eae3e29b416780" +SRCREV_meta ?= "7b92175ae0ed45be2aae0a1f61f9e2e2562b32d4" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" -LINUX_VERSION ?= "5.15.189" +LINUX_VERSION ?= "5.15.193" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index 48a7466509..f300e36917 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -5,7 +5,7 @@ KCONFIG_MODE = "--allnoconfig" require recipes-kernel/linux/linux-yocto.inc -LINUX_VERSION ?= "5.15.189" +LINUX_VERSION ?= "5.15.193" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -14,8 +14,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "c9df5e8ec3f116c77fbc29d8d88cf00da6ecb4f3" -SRCREV_meta ?= "d8c8889e18158a14223aa6cdb121c26a4d58fb56" +SRCREV_machine ?= "425235969cb20fd27d9d43e0c659fa9d24bafe75" +SRCREV_meta ?= "7b92175ae0ed45be2aae0a1f61f9e2e2562b32d4" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.15.bb b/meta/recipes-kernel/linux/linux-yocto_5.15.bb index 99ce420369..5455d391c7 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.15.bb @@ -14,24 +14,24 @@ KBRANCH:qemux86 ?= "v5.15/standard/base" KBRANCH:qemux86-64 ?= "v5.15/standard/base" KBRANCH:qemumips64 ?= "v5.15/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "da6836630834b34b24e1f0457afec67ba2bbab78" -SRCREV_machine:qemuarm64 ?= "67ec90bce4425aa5b79586360c80fa08a34ca9d0" -SRCREV_machine:qemumips ?= "2b2d7942cb977389f270d85a58adaf4659a3abbb" -SRCREV_machine:qemuppc ?= "fcf1b5e6d46c8a7835dbd70331d380fff0319b7f" -SRCREV_machine:qemuriscv64 ?= "3e27e9870b35af885840862de91caec215486a18" -SRCREV_machine:qemuriscv32 ?= "3e27e9870b35af885840862de91caec215486a18" -SRCREV_machine:qemux86 ?= "3e27e9870b35af885840862de91caec215486a18" -SRCREV_machine:qemux86-64 ?= "3e27e9870b35af885840862de91caec215486a18" -SRCREV_machine:qemumips64 ?= "366189c9e588082ad8c22b61143aa1fd10f3e273" -SRCREV_machine ?= "3e27e9870b35af885840862de91caec215486a18" -SRCREV_meta ?= "d8c8889e18158a14223aa6cdb121c26a4d58fb56" +SRCREV_machine:qemuarm ?= "cfd5f47f2a7dc7f381124fa6b3648786e5a906ac" +SRCREV_machine:qemuarm64 ?= "d1a6a76c533ad75ed1da9e1b4616be85f1f26d90" +SRCREV_machine:qemumips ?= "6520b1720ebcc7b9f6f537e26a56eb3dbb667a7d" +SRCREV_machine:qemuppc ?= "0a049d670d02ffb90a9130ae60b2add036d4af2f" +SRCREV_machine:qemuriscv64 ?= "c7153ab5fdd753945b04ed678cce72c6ad05fb41" +SRCREV_machine:qemuriscv32 ?= "c7153ab5fdd753945b04ed678cce72c6ad05fb41" +SRCREV_machine:qemux86 ?= "c7153ab5fdd753945b04ed678cce72c6ad05fb41" +SRCREV_machine:qemux86-64 ?= "c7153ab5fdd753945b04ed678cce72c6ad05fb41" +SRCREV_machine:qemumips64 ?= "a76cb44b6fd95096dc2a16da2b237f1059c23d7f" +SRCREV_machine ?= "c7153ab5fdd753945b04ed678cce72c6ad05fb41" +SRCREV_meta ?= "7b92175ae0ed45be2aae0a1f61f9e2e2562b32d4" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "c79648372d02944bf4a54d87e3901db05d0ac82e" +SRCREV_machine:class-devupstream ?= "43bb85222e53926decace01ce6584ca88e09a0a9" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v5.15/base" @@ -39,7 +39,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "5.15.189" +LINUX_VERSION ?= "5.15.193" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" DEPENDS += "openssl-native util-linux-native" From patchwork Fri Oct 17 20:44:06 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 72639 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 3011ECCD195 for ; Fri, 17 Oct 2025 20:44:34 +0000 (UTC) Received: from mail-pf1-f178.google.com (mail-pf1-f178.google.com [209.85.210.178]) by mx.groups.io with SMTP id smtpd.web11.3294.1760733867117001617 for ; Fri, 17 Oct 2025 13:44:27 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=M4WJPk3P; spf=softfail (domain: sakoman.com, ip: 209.85.210.178, mailfrom: steve@sakoman.com) Received: by mail-pf1-f178.google.com with SMTP id d2e1a72fcca58-789fb76b466so2176589b3a.0 for ; Fri, 17 Oct 2025 13:44:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1760733866; x=1761338666; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=Var/G2fiRuYwxcFs9nSxO5lpvVNNykuahozaewzr1Bs=; b=M4WJPk3PQ9Oy1w0HHKEKHAt2wEsy+wq8RKkfB1VFlEt8i0PpSl5W+ZSMihlJfWOlGC LTuS8z4rImpOtoNYm0E/rWLQCaNMshtzpTdEOTToXEWPda079fN859WIsrqnMOR3SNLs rYBZDhMcZsX9uztBuRTFrnuzCVCeJyaX2yx5xZSpnR8OEEXZ7oahR2zJFLZudAfPTOTV DEXUp18axI8mBWMyiCvdzg+rM2Avq62QJwS+qr6GGgQtj5Qr7DAbJ+JjpXNULv19Mgam euqsebchWOYZvdcGgJTmt/XztvLpsB1eOQJvWVcW2iV2CDOj6QXnUaaeLcgYtOJonNPR aqMQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1760733866; x=1761338666; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=Var/G2fiRuYwxcFs9nSxO5lpvVNNykuahozaewzr1Bs=; b=Gh4Z7T/h8+e7HltZ2IyTstuR6pRA+q5qQYcfJBOYeNODkrPpt/W5yv2NCKRekGr1cM xHWkPrPMX4RXRQQ0nJwhd80O0Vt6Ui2N198wNUivD1pxh4MMx9KghNEjWNVYDVZdE29X q/NRx2Kxev4G+n7g3rttFQH3ZDbAlMS1KzICtwubT6oQ1/jSzgOYjBWdt9sBXamUNjlT i2YpMT5XK6QdYqFI2FnOztTAEtw3I6kSpyhJK555M/OJKdpBew9MvJ8AUys+4de/Arhi W80+iaDnRU9x7xcpg1gDvbxGPHbHO1+cklD+FTl5nIEYfIlhZ9rRA3P/k4QEqlDRMYch 9Miw== X-Gm-Message-State: AOJu0YwcG/QCtUv3n8pq8OgT0yOUHq0wOFE+FjdouBRo4WKXHIPQWSBt sS7w19IdOu/FWiXFoGrkCXxCo9MDVCUpONMZntVJaqYEgcEL7BzN7tmhNEaKGLlo9/YpDAvJ6UI 8StZTsSU= X-Gm-Gg: ASbGncu0SGOF7AkDp7uzY8+sSWunsPkFCb7S+hGtpa+wLz/AJRa4H5tbTG/zFtfFAVt J5t5uS1GSTC9xrrppWoEOdCkqZIAIttxHjv++wwUvJbhJ8DVkXKuRvB1oCKR8VQ7AedjW2ieoxq 7XZMCWbWaPIkEcwbSoGiwTE1VzGecfvKtAQ6lYbDaVkyMyBB7VOQ5qJm4dfyKpwF6MXUaORbpon Vmw+AMP5kc3eq26xARWOM1L0o6fp8oCDqqm6YrmGE2Z8PBXZ8lCOStJSB37c4t7CTsf/Y1yHV2D S0YjuThh1wlDqedg71D3+e6T7fCxJG3jt1fciq+amceEvCbVhJcZJrBYudzFqbAtYiGJKeu7/5/ AN5VxqbEyDbiuuRto1Gl7tHOsufTcFeMd2ozXR7F8qaNM4gdN4n2JSetJj21PytZxBw== X-Google-Smtp-Source: AGHT+IFDATTMRTOM08zFr4J1Ss3dz1KjDvBSBuaju9qxXdHhTc1fo7cwdvTpRmvh8ZjMPSzeJQyqaw== X-Received: by 2002:a05:6a00:2d8d:b0:781:261b:7524 with SMTP id d2e1a72fcca58-7a220aa1dc7mr6841256b3a.14.1760733866183; Fri, 17 Oct 2025 13:44:26 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:aaee:e640:34cd:6f2]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-7a230121ebfsm477066b3a.70.2025.10.17.13.44.25 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 17 Oct 2025 13:44:25 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 7/8] linux-yocto/5.15: update to v5.15.194 Date: Fri, 17 Oct 2025 13:44:06 -0700 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 17 Oct 2025 20:44:34 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/225068 From: Bruce Ashfield Updating linux-yocto/5.15 to the latest korg -stable release that comprises the following commits: 29e53a5b1c4f1 Linux 5.15.194 1c532dd246bf2 drm/i915/backlight: Return immediately when scale() finds invalid parameters 45a7527cd7da4 i40e: add validation for ring_len param 8043ca4882e77 i40e: increase max descriptors for XL710 1fa0aadade344 i40e: fix idx validation in config queues msg 8e35c80f85704 i40e: fix validation of VF state in get resources 3e851448078f5 mm/hugetlb: fix folio is still mapped when deleted 4f52f7c50f5b6 mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() 523edfed4f68b af_unix: Don't leave consecutive consumed OOB skbs. ecbfd9ef5cf3e fbcon: Fix OOB access in font allocation b8a6e85328aeb fbcon: fix integer overflow in fbcon_do_set_font 0d41604d2d53c tracing: dynevent: Add a missing lockdown check on dynevent 1b1c3bdb8ab3f i40e: add mask to apply valid bits for itr_idx 77a35be582dff i40e: add max boundary check for VF filters f8c8e11825b24 i40e: fix input validation logic for action_meta 34dfac0c90482 i40e: fix idx validation in i40e_validate_queue_map d382d6daf0184 crypto: af_alg - Fix incorrect boolean values in af_alg_ctx e4c1ec11132ec crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg e15de80737d44 drm/gma500: Fix null dereference in hdmi teardown 37821b843e4e5 net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port e8687ab9c8a11 net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() b9010dba5f36b net: dsa: lantiq_gswip: do also enable or disable cpu port cf2d597fb6f04 selftests: fib_nexthops: Fix creation of non-FDB nexthops 0e7bfe7a268cc nexthop: Forbid FDB status change while nexthop is in a group 5d4856a3717d6 bnxt_en: correct offset handling for IPv6 destination address d646358255b69 ethernet: rvu-af: Remove slash from the driver name 48822a59ecc47 can: peak_usb: fix shift-out-of-bounds issue 6eec67bfb2563 can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow 60463a1c13890 can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow 7ab85762274c0 can: hi311x: populate ndo_change_mtu() to prevent buffer overflow 72de0facc50af can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow 256b64f7a9ba0 can: etas_es58x: sort the includes by alphabetic order f44124f407a39 can: etas_es58x: advertise timestamping capabilities and add ioctl support 0a6e1bd2d2500 can: dev: add generic function can_eth_ioctl_hwts() b9a0e6f3b043a can: dev: add generic function can_ethtool_op_get_ts_info_hwts() 533e3220bac26 can: bittiming: replace CAN units with the generic ones from linux/units.h 33b83a90b65e4 can: bittiming: allow TDC{V,O} to be zero and add can_tdc_const::tdc{v,o,f}_min d51c6b51981fa bpf: Reject bpf_timer for PREEMPT_RT 9ebf862184569 can: rcar_can: rcar_can_resume(): fix s2ram with PSCI b32c64db4370c cpufreq: Initialize cpufreq-based invariance before subsys db28f975ed7f3 arm64: dts: imx8mp: Correct thermal sensor index bb3eeb3a7c749 IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions 825c17c54cfb2 usb: core: Add 0x prefix to quirks debug output 9ba349a33f50e ALSA: usb-audio: Fix build with CONFIG_INPUT=n 1746e7a74ca0b ALSA: usb-audio: Convert comma to semicolon b4b94f092f193 ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 4f9294613bb39 ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks 790b167e58570 ALSA: usb-audio: Simplify NULL comparison in mixer_quirks e4f6ae98ebd94 ALSA: usb-audio: Avoid multiple assignments in mixer_quirks a4bb77c1bab94 ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks 2f56442a417d5 ALSA: usb-audio: Fix block comments in mixer_quirks ada2282259243 net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer 98c2894580f42 net: rfkill: gpio: add DT support 2f58e6d3e7a71 mptcp: propagate shutdown to subflows when possible 773fddf976d28 ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer dde28a51b8c3a mptcp: set remote_deny_join_id0 on SYN recv ca9e4e6a87376 phy: ti: omap-usb2: fix device leak at unbind f5648527d2e88 phy: Use device_get_match_data() 0df0f4bcc7a25 phy: broadcom: ns-usb3: fix Wvoid-pointer-to-enum-cast warning 662b75f7d1bfb USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels 94fac8987bea7 usb: gadget: dummy_hcd: remove usage of list iterator past the loop body dbf216ae5aea8 xhci: dbc: Fix full DbC transfer ring after several reconnects 503ba5026801b xhci: dbc: decouple endpoint allocation from initialization 84870a62c48f7 serial: sc16is7xx: fix bug in flow control levels init dfca6fa9d174c drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path 51a501e990a35 drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ 79a06d96e73e4 ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message e07847f44a0e0 ASoC: wm8974: Correct PLL rate rounding 0235a5787e87b ASoC: wm8940: Correct typo in control name 2e94bc6451cb6 rds: ib: Increment i_fastreg_wrs before bailing out 9697890763328 KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active 8a29726633978 mmc: mvsdio: Fix dma_unmap_sg() nents value 4f935a1297080 btrfs: tree-checker: fix the incorrect inode ref size check 29d9125d6c07f power: supply: bq27xxx: restrict no-battery detection to bq27000 fe0f602a75cc9 power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery 40fb833c64cab nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* 0405055930264 cnic: Fix use-after-free bugs in cnic_delete_task 428c1dd78ef66 net: liquidio: fix overflow in octeon_init_instr_queue() 3cae94808b2ff Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set" 33a4fdf0b4a25 tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). 17cb9b4017be7 i40e: remove redundant memory barrier when cleaning Tx descs 95235d29cd8b0 net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure e0e24571a7b2f qed: Don't collect too many protection override GRC elements e4343d400761c dpaa2-switch: fix buffer pool seeding for control traffic 5e94e44c9cb30 um: virtio_uml: Fix use-after-free after put_device in probe f2795d1b92506 cgroup: split cgroup_destroy_wq into 3 workqueues f2ede1f9070cc pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch 0f9cf94656d08 wifi: mac80211: fix incorrect type for ret d2587970f0887 ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported 5f2f50aa44de7 net: hsr: hsr_slave: Fix the promiscuous mode in offload mode 99f7048957f5a mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory a8b0032687c74 drm/i915/power: fix size for for_each_set_bit() in abox iteration f1b349706538c drm/amdgpu: fix a memory leak in fence cleanup when unloading 91b2c8ee68219 soc: qcom: mdt_loader: Deal with zero e_shentsize e3d490ff8d12e phy: ti-pipe3: fix device leak at unbind 4de4344ed4164 phy: tegra: xusb: fix device and OF node leak at probe 6ac1599d0e780 dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees 24a65b46cd663 hrtimers: Unconditionally update target CPU base after offline timer migration e90b685c5f2a8 hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active() 95b76ebeb0f14 hrtimer: Remove unused function 5d5385feef357 regulator: sy7636a: fix lifecycle of power good gpio 301a96cc4dc00 dmaengine: ti: edma: Fix memory allocation size for queue_priority_map 810167fa6f34a hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr cedfcd09a338e hsr: use rtnl lock when iterating over ports 1100242709d56 net: hsr: Add VLAN CTAG filter support 7e0ef989aa6d4 net: hsr: Add support for MC filtering at the slave device d981b9680be2b net: hsr: Disable promiscuous mode in offload mode e202ffd9e5453 can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB 5cf37a6fcb61c can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails 3245eb9c25e94 can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed b9721a023df38 i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path 7d9bd1c2bf4a7 i40e: Use irq_update_affinity_hint() e7ddb59a63cb8 genirq: Provide new interfaces for affinity hints 582f5ce29adce igb: fix link test skipping when interface is admin down f39a12660ea88 tunnels: reset the GSO metadata before reusing the skb 93a699d6e92cf net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() e818c35296a4f USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions 93e4404990206 USB: serial: option: add Telit Cinterion FN990A w/audio compositions 28d20ff4e3886 dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks d91604c39b74c tty: hvc_console: Call hvc_kick in hvc_write unconditionally 9cf2429fe6cbb Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table e32a2ea52b513 mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer 6e2859c6aa466 mtd: rawnand: stm32_fmc2: Fix dma_map_sg error check e0bca4dd48fc5 mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing c3f1ea856e147 mtd: nand: raw: atmel: Fix comment in timings preparation 123e31a54d51b mm/khugepaged: fix the address passed to notifier on testing young ea12ab684f8ae libceph: fix invalid accesses to ceph_connection_v1_info 1e1bcbc548777 fuse: prevent overflow in copy_file_range return value 5d41589fa0699 fuse: check if copy_file_range() returns larger than requested size b8af2e74e49db mtd: rawnand: stm32_fmc2: fix ECC overwrite ef30404980e4c ocfs2: fix recursive semaphore deadlock in fiemap call 23092f6723bc1 mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN 5d7267abcd65e compiler-clang.h: define __SANITIZE_*__ macros only when undefined 8178ccf5671e6 EDAC/altera: Delete an inappropriate dma_free_coherent() call 34b87ac4bb903 KVM: SVM: Set synthesized TSA CPUID flags 54270c1b29f2a KVM: SVM: Return TSA_SQ_NO and TSA_L1_NO bits in __do_cpuid_func() 2fab1e2af6c59 KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code 7429b8b9bfbc2 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. 5f756d1866ebb NFSv4/flexfiles: Fix layout merge mirror check. 9a38cd92493c2 tracing: Fix tracing_marker may trigger page fault during preempt_disable c10744fd7fec8 NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server 89f40500c09aa NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set 91902607106c0 NFSv4: Don't clear capabilities that won't be reset 929de8cc2f66c flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read 76b1a7c29ef3b mm/rmap: reject hugetlb folios in folio_make_device_exclusive() 1cdb41d4f08a6 tracing: Do not add length to print format in synthetic events d51e47e2ab6ef net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. 85d1c5d416c6a media: i2c: imx214: Fix link frequency validation 6e31585286b97 media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning 10d8884e1869f mm: introduce and use {pgd,p4d}_populate_kernel() adb2f26b875b9 kunit: kasan_test: disable fortify string checker on kasan_strings() test 69944b3cd7ec5 xfs: short circuit xfs_growfs_data_private() if delta is zero c0950ee2c3cc8 Revert "fbdev: Disable sysfb device registration when removing conflicting FBs" Signed-off-by: Bruce Ashfield Signed-off-by: Steve Sakoman --- .../linux/linux-yocto-rt_5.15.bb | 6 ++--- .../linux/linux-yocto-tiny_5.15.bb | 6 ++--- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 26 +++++++++---------- 3 files changed, 19 insertions(+), 19 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index 6db8ab45e1..a79d3b1511 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -11,13 +11,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "bf6a706b67fab1f1b87d036a27eae3e29b416780" -SRCREV_meta ?= "7b92175ae0ed45be2aae0a1f61f9e2e2562b32d4" +SRCREV_machine ?= "259f7f9d0bd0df2c3e497395568a655c5745b5ac" +SRCREV_meta ?= "578937826ffad97749eba3a5d1b21b37b5cd7bdc" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" -LINUX_VERSION ?= "5.15.193" +LINUX_VERSION ?= "5.15.194" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index f300e36917..e2e56ec010 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -5,7 +5,7 @@ KCONFIG_MODE = "--allnoconfig" require recipes-kernel/linux/linux-yocto.inc -LINUX_VERSION ?= "5.15.193" +LINUX_VERSION ?= "5.15.194" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -14,8 +14,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "425235969cb20fd27d9d43e0c659fa9d24bafe75" -SRCREV_meta ?= "7b92175ae0ed45be2aae0a1f61f9e2e2562b32d4" +SRCREV_machine ?= "57960f78280a75ea48270a3984ac01bd06078b88" +SRCREV_meta ?= "578937826ffad97749eba3a5d1b21b37b5cd7bdc" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.15.bb b/meta/recipes-kernel/linux/linux-yocto_5.15.bb index 5455d391c7..bbdf94746d 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.15.bb @@ -14,24 +14,24 @@ KBRANCH:qemux86 ?= "v5.15/standard/base" KBRANCH:qemux86-64 ?= "v5.15/standard/base" KBRANCH:qemumips64 ?= "v5.15/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "cfd5f47f2a7dc7f381124fa6b3648786e5a906ac" -SRCREV_machine:qemuarm64 ?= "d1a6a76c533ad75ed1da9e1b4616be85f1f26d90" -SRCREV_machine:qemumips ?= "6520b1720ebcc7b9f6f537e26a56eb3dbb667a7d" -SRCREV_machine:qemuppc ?= "0a049d670d02ffb90a9130ae60b2add036d4af2f" -SRCREV_machine:qemuriscv64 ?= "c7153ab5fdd753945b04ed678cce72c6ad05fb41" -SRCREV_machine:qemuriscv32 ?= "c7153ab5fdd753945b04ed678cce72c6ad05fb41" -SRCREV_machine:qemux86 ?= "c7153ab5fdd753945b04ed678cce72c6ad05fb41" -SRCREV_machine:qemux86-64 ?= "c7153ab5fdd753945b04ed678cce72c6ad05fb41" -SRCREV_machine:qemumips64 ?= "a76cb44b6fd95096dc2a16da2b237f1059c23d7f" -SRCREV_machine ?= "c7153ab5fdd753945b04ed678cce72c6ad05fb41" -SRCREV_meta ?= "7b92175ae0ed45be2aae0a1f61f9e2e2562b32d4" +SRCREV_machine:qemuarm ?= "7b19f872b07703f73c494baa81cd7e984db01336" +SRCREV_machine:qemuarm64 ?= "431a37a229ce5be7b6ba116dc7bd282be4a745fa" +SRCREV_machine:qemumips ?= "9404d4015b457e7324d5675d3e14f46d84cd8c40" +SRCREV_machine:qemuppc ?= "bfd132d4b358cdb5260fccc71eb1e5a09daae033" +SRCREV_machine:qemuriscv64 ?= "5df8e23ccadd62ab9945320b6b4327b082870c61" +SRCREV_machine:qemuriscv32 ?= "5df8e23ccadd62ab9945320b6b4327b082870c61" +SRCREV_machine:qemux86 ?= "5df8e23ccadd62ab9945320b6b4327b082870c61" +SRCREV_machine:qemux86-64 ?= "5df8e23ccadd62ab9945320b6b4327b082870c61" +SRCREV_machine:qemumips64 ?= "ed52c5eccf0cc2b0da2dd7d13d012c50db78a62a" +SRCREV_machine ?= "5df8e23ccadd62ab9945320b6b4327b082870c61" +SRCREV_meta ?= "578937826ffad97749eba3a5d1b21b37b5cd7bdc" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "43bb85222e53926decace01ce6584ca88e09a0a9" +SRCREV_machine:class-devupstream ?= "29e53a5b1c4f144301ee36a907e8b03d7733f0b0" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v5.15/base" @@ -39,7 +39,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "5.15.193" +LINUX_VERSION ?= "5.15.194" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" DEPENDS += "openssl-native util-linux-native" From patchwork Fri Oct 17 20:44:07 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 72638 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 398B3CCD1A5 for ; Fri, 17 Oct 2025 20:44:34 +0000 (UTC) Received: from mail-pf1-f178.google.com (mail-pf1-f178.google.com [209.85.210.178]) by mx.groups.io with SMTP id smtpd.web11.3296.1760733868888913811 for ; Fri, 17 Oct 2025 13:44:28 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=eXDybQqe; spf=softfail (domain: sakoman.com, ip: 209.85.210.178, mailfrom: steve@sakoman.com) Received: by mail-pf1-f178.google.com with SMTP id d2e1a72fcca58-791c287c10dso2015428b3a.1 for ; Fri, 17 Oct 2025 13:44:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1760733868; x=1761338668; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=T1G/xnlcPKvFCDFHsWl1A+K3m//nKVFGzvU3vATkrFs=; b=eXDybQqe2BEYPyT6YCRVldOi5O1P6Np+WKSejQoInF5pOxPSm8Cbcijmb5Nem0VCgH 4OGPwtw2ccF0abkmKBWnW82xTEgd8yWZgTg26RUIrK0SFAWwEBAUlI68rNzTAevuJ42t Tp8OxUrs4XbpkwlEcnBYqrDbqK33NEjvuWrFPtebb/RA42OQuw96x9jX8jcnpgZ/Kss3 Ex4wYc4FzVSpEDjU5ByRxTTKGBCE7h32GIUEWPwPHbjdfgr7LwwANBU44vPWbP+zGPYf sRYTEqYII77b8eqpIupv3VZIJNqztaq3gX0dlk/z0O/nXuC7Plcs7zLC5M5/HhtjVMaN pulQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1760733868; x=1761338668; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=T1G/xnlcPKvFCDFHsWl1A+K3m//nKVFGzvU3vATkrFs=; b=ZWjEgfiDy3aNlZCqzuA9sMZPuXVvqtPE4jNZHqHE9Kq5DR09BZDi2vFvTevSG/vFUo 6vV8fg+j14wbtsjw4CtPhCuiAcygvyakAZXU5La/yWmo5u0LAMt+NLbOQ0wyS5cVg6fH QT4ucdvykzHLDkjgd1jQYuXnlbZ2i7w2usdIgBWCiDq58ieUEmmkl/5oLG8dPATR7CUM amHwm89cgu4FLK4giZUyMV1BSug9euNQ6PJ28NVEckFifgYexxu+8AKiulIwdxBO71V1 4yaEK8U5O/8rcafpkLvsXoMfTzMxJNFn599y4usSfDIAQKz1fePhnR7ven2z9OOXcOKd D5aA== X-Gm-Message-State: AOJu0YwfYRjFTkJ/JG247GniD1ML0xxJaEchBIaTiISF1NPYlC7EqLTq e6G0WLGr1SPnfhUDQODf5y8QJEItJCYAJi+fxCWxQLacnspHbzsul990fAqwtU6CaUB7Vw21unH VTqwJEZ8= X-Gm-Gg: ASbGncs+I2CwXKuYHjpmLkICtdxiZdnW9kVWZ4eBdbARQpVVmI2MtiMrymsGeHb/Mci AUuYLJJSUQgBJ04Ppmfep917zgt/1S4YYW1X4UdkQ4FZVhukO4VGHcJF1axXm/YnMEKlr9cf3vE QtNdwdKy8NxcgyyEIc+qGGfcRY515WbRd0ZuuPBQs4dhQPK+jyzm9D++wXKqbqr9cK7ZLTsVAN7 /sd4xipbDzJyCF8XtShIqwUWwNFB+5mWfVu+cx+XhIUHTRHng5wc/VM/eREeb3LBwapMxB94QbH Qq8P26h7H9RWTuO/kRpnS6I8h0d12TEitrPGqQr9QJUvF/xKFeTFyMGB/hIAp74IZbIXCndmSkG jnhNLUdVClSGbnymUxhXJx9PD/VZIWHfHCLqdR57HW66dnnQXg9un2mMIQ/UaaE061tOQjWWI4Y H+ X-Google-Smtp-Source: AGHT+IG356akCHrBstrl1KUBzZ4O666Q17Q8fJK/FInZX6kQuY/YxlWtzVDKSxtdk9w6lxfoULt28A== X-Received: by 2002:a05:6a00:228c:b0:77f:416e:de8e with SMTP id d2e1a72fcca58-7a220b0bf96mr5534216b3a.26.1760733867925; Fri, 17 Oct 2025 13:44:27 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:aaee:e640:34cd:6f2]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-7a230121ebfsm477066b3a.70.2025.10.17.13.44.27 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 17 Oct 2025 13:44:27 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 8/8] python3: upgrade 3.10.18 -> 3.10.19 Date: Fri, 17 Oct 2025 13:44:07 -0700 Message-ID: <9b3dbd691f6ebdbdfe88cef3d3a676ddd1399c63.1760733724.git.steve@sakoman.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 17 Oct 2025 20:44:34 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/225069 From: Peter Marko Drop upstreamed patch and refresh remaining patches. Release information: * https://www.python.org/downloads/release/python-31019/ * The release you're looking at is Python 3.10.19, a security bugfix release for the legacy 3.10 series. Handles CVE-2025-59375, CVE-2025-47273 and CVE-2024-6345. Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman --- ...e-treat-overflow-in-UID-GID-as-failu.patch | 2 +- .../python/python3/CVE-2025-8194.patch | 219 ------------------ ...{python3_3.10.18.bb => python3_3.10.19.bb} | 3 +- 3 files changed, 2 insertions(+), 222 deletions(-) delete mode 100644 meta/recipes-devtools/python/python3/CVE-2025-8194.patch rename meta/recipes-devtools/python/{python3_3.10.18.bb => python3_3.10.19.bb} (99%) diff --git a/meta/recipes-devtools/python/python3/0001-gh-107811-tarfile-treat-overflow-in-UID-GID-as-failu.patch b/meta/recipes-devtools/python/python3/0001-gh-107811-tarfile-treat-overflow-in-UID-GID-as-failu.patch index e6d7778ccd..0c51b038bb 100644 --- a/meta/recipes-devtools/python/python3/0001-gh-107811-tarfile-treat-overflow-in-UID-GID-as-failu.patch +++ b/meta/recipes-devtools/python/python3/0001-gh-107811-tarfile-treat-overflow-in-UID-GID-as-failu.patch @@ -16,7 +16,7 @@ diff --git a/Lib/tarfile.py b/Lib/tarfile.py index 3bbbcaa..473167d 100755 --- a/Lib/tarfile.py +++ b/Lib/tarfile.py -@@ -2675,7 +2675,8 @@ class TarFile(object): +@@ -2678,7 +2678,8 @@ class TarFile(object): os.lchown(targetpath, u, g) else: os.chown(targetpath, u, g) diff --git a/meta/recipes-devtools/python/python3/CVE-2025-8194.patch b/meta/recipes-devtools/python/python3/CVE-2025-8194.patch deleted file mode 100644 index 44ada01133..0000000000 --- a/meta/recipes-devtools/python/python3/CVE-2025-8194.patch +++ /dev/null @@ -1,219 +0,0 @@ -From c9d9f78feb1467e73fd29356c040bde1c104f29f Mon Sep 17 00:00:00 2001 -From: "Miss Islington (bot)" - <31488909+miss-islington@users.noreply.github.com> -Date: Mon, 4 Aug 2025 13:45:06 +0200 -Subject: [PATCH] [3.12] gh-130577: tarfile now validates archives to ensure - member offsets are non-negative (GH-137027) (#137171) - -(cherry picked from commit 7040aa54f14676938970e10c5f74ea93cd56aa38) - -Co-authored-by: Alexander Urieles -Co-authored-by: Gregory P. Smith - -CVE: CVE-2025-8194 -Upstream-Status: Backport [https://github.com/python/cpython/commit/c9d9f78feb1467e73fd29356c040bde1c104f29f] -Signed-off-by: Peter Marko ---- - Lib/tarfile.py | 3 + - Lib/test/test_tarfile.py | 156 ++++++++++++++++++ - ...-07-23-00-35-29.gh-issue-130577.c7EITy.rst | 3 + - 3 files changed, 162 insertions(+) - create mode 100644 Misc/NEWS.d/next/Library/2025-07-23-00-35-29.gh-issue-130577.c7EITy.rst - -diff --git a/Lib/tarfile.py b/Lib/tarfile.py -index 9999a99d54..59d3f6e5cc 100755 ---- a/Lib/tarfile.py -+++ b/Lib/tarfile.py -@@ -1613,6 +1613,9 @@ class TarInfo(object): - """Round up a byte count by BLOCKSIZE and return it, - e.g. _block(834) => 1024. - """ -+ # Only non-negative offsets are allowed -+ if count < 0: -+ raise InvalidHeaderError("invalid offset") - blocks, remainder = divmod(count, BLOCKSIZE) - if remainder: - blocks += 1 -diff --git a/Lib/test/test_tarfile.py b/Lib/test/test_tarfile.py -index a184ba75a8..759fa03ead 100644 ---- a/Lib/test/test_tarfile.py -+++ b/Lib/test/test_tarfile.py -@@ -49,6 +49,7 @@ bz2name = os.path.join(TEMPDIR, "testtar.tar.bz2") - xzname = os.path.join(TEMPDIR, "testtar.tar.xz") - tmpname = os.path.join(TEMPDIR, "tmp.tar") - dotlessname = os.path.join(TEMPDIR, "testtar") -+SPACE = b" " - - sha256_regtype = ( - "e09e4bc8b3c9d9177e77256353b36c159f5f040531bbd4b024a8f9b9196c71ce" -@@ -4273,6 +4274,161 @@ class TestExtractionFilters(unittest.TestCase): - self.expect_exception(TypeError) # errorlevel is not int - - -+class OffsetValidationTests(unittest.TestCase): -+ tarname = tmpname -+ invalid_posix_header = ( -+ # name: 100 bytes -+ tarfile.NUL * tarfile.LENGTH_NAME -+ # mode, space, null terminator: 8 bytes -+ + b"000755" + SPACE + tarfile.NUL -+ # uid, space, null terminator: 8 bytes -+ + b"000001" + SPACE + tarfile.NUL -+ # gid, space, null terminator: 8 bytes -+ + b"000001" + SPACE + tarfile.NUL -+ # size, space: 12 bytes -+ + b"\xff" * 11 + SPACE -+ # mtime, space: 12 bytes -+ + tarfile.NUL * 11 + SPACE -+ # chksum: 8 bytes -+ + b"0011407" + tarfile.NUL -+ # type: 1 byte -+ + tarfile.REGTYPE -+ # linkname: 100 bytes -+ + tarfile.NUL * tarfile.LENGTH_LINK -+ # magic: 6 bytes, version: 2 bytes -+ + tarfile.POSIX_MAGIC -+ # uname: 32 bytes -+ + tarfile.NUL * 32 -+ # gname: 32 bytes -+ + tarfile.NUL * 32 -+ # devmajor, space, null terminator: 8 bytes -+ + tarfile.NUL * 6 + SPACE + tarfile.NUL -+ # devminor, space, null terminator: 8 bytes -+ + tarfile.NUL * 6 + SPACE + tarfile.NUL -+ # prefix: 155 bytes -+ + tarfile.NUL * tarfile.LENGTH_PREFIX -+ # padding: 12 bytes -+ + tarfile.NUL * 12 -+ ) -+ invalid_gnu_header = ( -+ # name: 100 bytes -+ tarfile.NUL * tarfile.LENGTH_NAME -+ # mode, null terminator: 8 bytes -+ + b"0000755" + tarfile.NUL -+ # uid, null terminator: 8 bytes -+ + b"0000001" + tarfile.NUL -+ # gid, space, null terminator: 8 bytes -+ + b"0000001" + tarfile.NUL -+ # size, space: 12 bytes -+ + b"\xff" * 11 + SPACE -+ # mtime, space: 12 bytes -+ + tarfile.NUL * 11 + SPACE -+ # chksum: 8 bytes -+ + b"0011327" + tarfile.NUL -+ # type: 1 byte -+ + tarfile.REGTYPE -+ # linkname: 100 bytes -+ + tarfile.NUL * tarfile.LENGTH_LINK -+ # magic: 8 bytes -+ + tarfile.GNU_MAGIC -+ # uname: 32 bytes -+ + tarfile.NUL * 32 -+ # gname: 32 bytes -+ + tarfile.NUL * 32 -+ # devmajor, null terminator: 8 bytes -+ + tarfile.NUL * 8 -+ # devminor, null terminator: 8 bytes -+ + tarfile.NUL * 8 -+ # padding: 167 bytes -+ + tarfile.NUL * 167 -+ ) -+ invalid_v7_header = ( -+ # name: 100 bytes -+ tarfile.NUL * tarfile.LENGTH_NAME -+ # mode, space, null terminator: 8 bytes -+ + b"000755" + SPACE + tarfile.NUL -+ # uid, space, null terminator: 8 bytes -+ + b"000001" + SPACE + tarfile.NUL -+ # gid, space, null terminator: 8 bytes -+ + b"000001" + SPACE + tarfile.NUL -+ # size, space: 12 bytes -+ + b"\xff" * 11 + SPACE -+ # mtime, space: 12 bytes -+ + tarfile.NUL * 11 + SPACE -+ # chksum: 8 bytes -+ + b"0010070" + tarfile.NUL -+ # type: 1 byte -+ + tarfile.REGTYPE -+ # linkname: 100 bytes -+ + tarfile.NUL * tarfile.LENGTH_LINK -+ # padding: 255 bytes -+ + tarfile.NUL * 255 -+ ) -+ valid_gnu_header = tarfile.TarInfo("filename").tobuf(tarfile.GNU_FORMAT) -+ data_block = b"\xff" * tarfile.BLOCKSIZE -+ -+ def _write_buffer(self, buffer): -+ with open(self.tarname, "wb") as f: -+ f.write(buffer) -+ -+ def _get_members(self, ignore_zeros=None): -+ with open(self.tarname, "rb") as f: -+ with tarfile.open( -+ mode="r", fileobj=f, ignore_zeros=ignore_zeros -+ ) as tar: -+ return tar.getmembers() -+ -+ def _assert_raises_read_error_exception(self): -+ with self.assertRaisesRegex( -+ tarfile.ReadError, "file could not be opened successfully" -+ ): -+ self._get_members() -+ -+ def test_invalid_offset_header_validations(self): -+ for tar_format, invalid_header in ( -+ ("posix", self.invalid_posix_header), -+ ("gnu", self.invalid_gnu_header), -+ ("v7", self.invalid_v7_header), -+ ): -+ with self.subTest(format=tar_format): -+ self._write_buffer(invalid_header) -+ self._assert_raises_read_error_exception() -+ -+ def test_early_stop_at_invalid_offset_header(self): -+ buffer = self.valid_gnu_header + self.invalid_gnu_header + self.valid_gnu_header -+ self._write_buffer(buffer) -+ members = self._get_members() -+ self.assertEqual(len(members), 1) -+ self.assertEqual(members[0].name, "filename") -+ self.assertEqual(members[0].offset, 0) -+ -+ def test_ignore_invalid_archive(self): -+ # 3 invalid headers with their respective data -+ buffer = (self.invalid_gnu_header + self.data_block) * 3 -+ self._write_buffer(buffer) -+ members = self._get_members(ignore_zeros=True) -+ self.assertEqual(len(members), 0) -+ -+ def test_ignore_invalid_offset_headers(self): -+ for first_block, second_block, expected_offset in ( -+ ( -+ (self.valid_gnu_header), -+ (self.invalid_gnu_header + self.data_block), -+ 0, -+ ), -+ ( -+ (self.invalid_gnu_header + self.data_block), -+ (self.valid_gnu_header), -+ 1024, -+ ), -+ ): -+ self._write_buffer(first_block + second_block) -+ members = self._get_members(ignore_zeros=True) -+ self.assertEqual(len(members), 1) -+ self.assertEqual(members[0].name, "filename") -+ self.assertEqual(members[0].offset, expected_offset) -+ -+ - def setUpModule(): - os_helper.unlink(TEMPDIR) - os.makedirs(TEMPDIR) -diff --git a/Misc/NEWS.d/next/Library/2025-07-23-00-35-29.gh-issue-130577.c7EITy.rst b/Misc/NEWS.d/next/Library/2025-07-23-00-35-29.gh-issue-130577.c7EITy.rst -new file mode 100644 -index 0000000000..342cabbc86 ---- /dev/null -+++ b/Misc/NEWS.d/next/Library/2025-07-23-00-35-29.gh-issue-130577.c7EITy.rst -@@ -0,0 +1,3 @@ -+:mod:`tarfile` now validates archives to ensure member offsets are -+non-negative. (Contributed by Alexander Enrique Urieles Nieto in -+:gh:`130577`.) diff --git a/meta/recipes-devtools/python/python3_3.10.18.bb b/meta/recipes-devtools/python/python3_3.10.19.bb similarity index 99% rename from meta/recipes-devtools/python/python3_3.10.18.bb rename to meta/recipes-devtools/python/python3_3.10.19.bb index 89036ff3b8..8680c13893 100644 --- a/meta/recipes-devtools/python/python3_3.10.18.bb +++ b/meta/recipes-devtools/python/python3_3.10.19.bb @@ -37,7 +37,6 @@ SRC_URI = "http://www.python.org/ftp/python/${PV}/Python-${PV}.tar.xz \ file://0001-Avoid-shebang-overflow-on-python-config.py.patch \ file://0001-test_storlines-skip-due-to-load-variability.patch \ file://0001-gh-107811-tarfile-treat-overflow-in-UID-GID-as-failu.patch \ - file://CVE-2025-8194.patch \ " SRC_URI:append:class-native = " \ @@ -46,7 +45,7 @@ SRC_URI:append:class-native = " \ file://12-distutils-prefix-is-inside-staging-area.patch \ file://0001-Don-t-search-system-for-headers-libraries.patch \ " -SRC_URI[sha256sum] = "ae665bc678abd9ab6a6e1573d2481625a53719bc517e9a634ed2b9fefae3817f" +SRC_URI[sha256sum] = "c8f4a596572201d81dd7df91f70e177e19a70f1d489968b54b5fbbf29a97c076" # exclude pre-releases for both python 2.x and 3.x UPSTREAM_CHECK_REGEX = "[Pp]ython-(?P\d+(\.\d+)+).tar"