Commit Graph

75752 Commits

Author SHA1 Message Date
Bruce Ashfield
a9224824c3 linux-yocto/6.6: update to v6.6.102
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

no ids found, dumping:
    bb9c90ab9c5a Linux 6.6.102
    aada327a9f80 usb: gadget : fix use-after-free in composite_dev_cleanup()
    e1ee74b9eeb2 mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
    d98b34c40dc7 MIPS: mm: tlb-r4k: Uniquify TLB entries on init
    ab85071a0354 x86/fpu: Delay instruction pointer fixup until after warning
    575b71627529 ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
    48a8a2dfc3f5 ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe()
    1fb873971e23 x86/sev: Evict cache lines during SNP memory validation
    fdf6959b700b net: usbnet: Fix the wrong netif_carrier_on() call
    3c6236588dc8 net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
    2b98a1539736 Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano
    ae591cf2348a sched,freezer: Remove unnecessary warning in __thaw_task
    036bdae8c985 freezer,sched: Clean saved_state when restoring it during thaw
    2e62985121b7 freezer,sched: Do not restore saved_state of a thawed task
    e241ca2f0ec3 freezer,sched: Use saved_state to reduce some spurious wakeups
    8afa818c7733 sched/core: Remove ifdeffery for saved_state
    2c9a096e202c i2c: stm32f7: unmap DMA mapped buffer
    bab0986dc045 i2c: stm32f7: simplify status messages in case of errors
    d786b6592030 i2c: stm32f7: perform most of irq job in threaded handler
    9bfaaa964014 i2c: stm32f7: use dev_err_probe upon calls of devm_request_irq
    de7c7caea59b i2c: stm32f7: Use devm_clk_get_enabled()
    66bf243531ee USB: serial: option: add Foxconn T99W709
    2f4d88f5e5ee smb: server: Fix extension string in ksmbd_extract_shortname()
    fa1c47af4ff6 ksmbd: limit repeated connections from clients with the same IP
    62d136d30621 ksmbd: fix corrupted mtime and ctime in smb2_open
    b69fd87076da ksmbd: fix Preauh_HashValue race condition
    d79c8bebaa62 ksmbd: fix null pointer dereference error in generate_encryptionkey
    44bd006d5c93 vsock: Do not allow binding to VMADDR_PORT_ANY
    88caf46db823 net/packet: fix a race in packet_set_ring() and packet_notifier()
    29d417b1a0d5 selftests/perf_events: Add a mmap() correctness test
    6757a31a8e29 perf/core: Prevent VMA split of buffer mappings
    f41e9eba77bf perf/core: Exit early on perf_mmap() fail
    f07ab7a4b572 perf/core: Don't leak AUX buffer refcount on allocation failure
    b1df39462171 sunrpc: fix handling of server side tls alerts
    d2622f38652c smb: client: return an error if rdma_connect does not return within 5 seconds
    bd7f84df5436 pptp: fix pptp_xmit() error path
    4e5cf39e4064 smb: client: let recv_done() cleanup before notifying the callers.
    83d2a4185f5a smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
    f069f7c14204 smb: client: make use of common smbdirect_socket
    947569b95987 smb: smbdirect: add smbdirect_socket.h
    61f0a6849005 smb: client: Correct typos in multiple comments across various files
    91d7e6cbb3f8 smb: client: Use min() macro
    c29dbc44fbf7 smb: server: let recv_done() avoid touching data_transfer after cleanup/move
    66110b35bebc smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection
    e67aff50476f smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
    28db0cb8a0da smb: server: remove separate empty_recvmsg_queue
    2e4463f44e9b ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
    cd2a7f950038 irqchip: Build IMX_MU_MSI only on ARM
    39491e859fd4 net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
    c377ba2be943 benet: fix BUG when creating VFs
    a55b3d153318 sunrpc: fix client side handling of tls alerts
    a7176675c39a net/sched: taprio: enforce minimum value for picos_per_byte
    0d45954034f8 net: drop UFO packets in udp_rcv_segment()
    ef05007b403d ipv6: reject malicious packets in ipv6_gso_segment()
    194cd28c889a net/mlx5: Correctly set gso_segs when LRO is used
    97ed92a23f0b netlink: specs: ethtool: fix module EEPROM input/output arguments
    5005d2437737 pptp: ensure minimal skb length in pptp_xmit()
    5fde6e016004 net: ipa: add IPA v5.1 and v5.5 to ipa_version_string()
    b80353a72958 phy: mscc: Fix parsing of unicast frames
    b0cf318f5cc6 netpoll: prevent hanging NAPI when netcons gets enabled
    227154eb7567 md/md-cluster: handle REMOVE message earlier
    75ed1f6ed8ee NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
    1116e66111f8 NFSv4.2: another fix for listxattr
    12ad3def2e5e NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
    30a739931ed8 NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate()
    147216030e46 sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up()
    3bdb29df2f0d pNFS/flexfiles: don't attempt pnfs on fatal DS errors
    6e7b24c71e53 PCI: pnv_php: Fix surprise plug detection and recovery
    a426e8a6ae16 powerpc/eeh: Make EEH driver device hotplug safe
    3f49abdf88b6 powerpc/eeh: Export eeh_unfreeze_pe()
    17dabd7efb28 PCI: pnv_php: Work around switches with broken presence detection
    32173edf3fe2 PCI: pnv_php: Clean up allocated IRQs on unplug
    9184a2bb522c sched/psi: Fix psi_seq initialization
    9ea1cc8b0e95 kconfig: qconf: fix ConfigList::updateListAllforAll()
    05b450da93c6 scsi: sd: Make sd shutdown issue START STOP UNIT appropriately
    450b2a5cf6e4 scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume
    4933567ef9e6 scsi: Revert "scsi: iscsi: Fix HW conn removal use after free"
    087a8a7ca354 scsi: mpt3sas: Fix a fw_event memory leak
    349436bf11b8 vfio/pci: Separate SR-IOV VF dev_set
    7dbfae90c5a3 vfio/pds: Fix missing detach_ioas op
    9546b26d391f vfio: Prevent open_count decrement to negative
    a6c5e25861e3 vfio: Fix unbalanced vfio_df_close call in no-iommu mode
    f289690f50a0 f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
    704613681c1c f2fs: fix to calculate dirty data during has_not_enough_free_secs()
    e33c22f2eeba f2fs: fix to update upper_p in __get_secs_required() correctly
    1023836d1b94 f2fs: vm_unmap_ram() may be called from an invalid context
    345fc8d1838f f2fs: fix to avoid out-of-boundary access in devs.path
    880ef748e78a f2fs: fix to avoid panic in f2fs_evict_inode
    3d37cadaac1a f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
    a96f2bf49fbd f2fs: doc: fix wrong quota mount option description
    dabfa3952c8e f2fs: fix KMSAN uninit-value in extent_info usage
    c1c818b636d4 rtc: rv3028: fix incorrect maximum clock rate handling
    f5790cc2ee6f rtc: pcf8563: fix incorrect maximum clock rate handling
    e337c72b17c6 rtc: pcf85063: fix incorrect maximum clock rate handling
    8456b3e28acf rtc: nct3018y: fix incorrect maximum clock rate handling
    17827903802b rtc: hym8563: fix incorrect maximum clock rate handling
    bb94a96374db rtc: ds1307: fix incorrect maximum clock rate handling
    15da236904ec ucount: fix atomic_long_inc_below() argument type
    f9bd692540d8 module: Restore the moduleparam prefix length check
    7500ba6533ab apparmor: fix loop detection used in conflicting attachment resolution
    fad01f7e0d3e apparmor: ensure WB_HISTORY_SIZE value is a power of 2
    4795bcafe9a8 bpf: Check netfilter ctx accesses are aligned
    f56f6054791e bpf: Check flow_dissector ctx accesses are aligned
    d3bf3088f7e9 vhost-scsi: Fix log flooding with target does not exist errors
    ebc6e1d0e97a mtd: rawnand: atmel: set pmecc data setup time
    a01bc4245e43 mtd: rawnand: rockchip: Add missing check after DMA map
    7d0b53a6d199 mtd: rawnand: atmel: Fix dma_mapping_error() address
    505f4111dd98 jfs: fix metapage reference count leak in dbAllocCtl
    4b5d36cc3014 fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
    0aa273dbcf53 crypto: qat - fix seq_file position update in adf_ring_next()
    1c178ccb6caf crypto: qat - fix DMA direction for compression on GEN2 devices
    9ff4de5bd11a perf tools: Remove libtraceevent in .gitignore
    106891c7bdbc sh: Do not use hyphen in exported variable name
    f658f3676538 ASoC: fsl_xcvr: get channel status data when PHY is not exists
    3187ffe08ff0 dmaengine: nbpfaxi: Add missing check after DMA map
    06ddbb28b72b dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
    25d15b0d2b42 fs/orangefs: Allow 2 more characters in do_c_string()
    b93d06499b6f PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute
    bdbaa1041816 soundwire: stream: restore params when prepare ports fail
    ac961f6c6dc5 crypto: img-hash - Fix dma_unmap_sg() nents value
    06bc14f9d047 crypto: keembay - Fix dma_unmap_sg() nents value
    5d481d4bea06 hwrng: mtk - handle devm_pm_runtime_enable errors
    9c590ae73c3e watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
    a23fa17e6bec scsi: isci: Fix dma_unmap_sg() nents value
    401fcb7e557d scsi: mvsas: Fix dma_unmap_sg() nents value
    cf9c5b15c4ab scsi: elx: efct: Fix dma_unmap_sg() nents value
    214f94ee5d77 scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
    5b63d6dec556 clk: sunxi-ng: v3s: Fix de clock definition
    c07e017a56d6 perf tests bp_account: Fix leaked file descriptor
    9b2a3e718902 pinmux: fix race causing mux_owner NULL with active mux_usecount
    33c778ea0bd0 proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al
    adf2da0bf119 kernel: trace: preemptirq_delay_test: use offstack cpu mask
    5449e60e1cbb RDMA/hns: Fix -Wframe-larger-than issue
    db1114685317 crypto: ccp - Fix crash when rebind ccp device for ccp.ko
    a762bbe11269 crypto: inside-secure - Fix `dma_unmap_sg()` nents value
    b86fd2e61a2c perf sched: Fix memory leaks in 'perf sched latency'
    282d4b34694f perf sched: Fix memory leaks for evsel->priv in timehist
    16ce5ce11145 perf sched: Free thread->priv using priv_destructor
    e5de9ea7796e perf dso: Add missed dso__put to dso__load_kcore
    9fe9f9459951 perf tools: Fix use-after-free in help_unknown_cmd()
    a99cae46ab16 Fix dma_unmap_sg() nents value
    8724a228be43 clk: clk-axi-clkgen: fix fpfd_max frequency for zynq
    45338af03ff3 fanotify: sanitize handle_type values when reporting fid
    e8b4c9e60a7a pinctrl: sunxi: Fix memory leak on krealloc failure
    85a7746a05ea PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails
    3f5186fd43be crypto: arm/aes-neonbs - work around gcc-15 warning
    f693be157c59 power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
    8e9bdb563916 power: supply: cpcap-charger: Fix null check for power_supply_get_by_name
    51990eecf22f clk: xilinx: vcu: unregister pll_post only if registered correctly
    a2b437a88370 media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check
    1d92608a2925 clk: davinci: Add NULL check in davinci_lpsc_clk_register()
    530d4db6fb89 mtd: fix possible integer overflow in erase_xfer()
    aff3e6eacef2 crypto: marvell/cesa - Fix engine load inaccuracy
    be1e15938a16 crypto: qat - use unmanaged allocation for dc_data
    25c161a8bed1 crypto: sun8i-ce - fix nents passed to dma_unmap_sg()
    0c93cd98d0c8 PCI: rockchip-host: Fix "Unexpected Completion" log message
    e1c3d14c8252 bpf/preload: Don't select USERMODE_DRIVER
    3bb72c2e9622 ipv6: annotate data-races around rt->fib6_nsiblings
    9cb6de8ee144 ipv6: fix possible infinite loop in fib6_info_uses_dev()
    e1b7932af47f ipv6: prevent infinite loop in rt6_nlmsg_size()
    f237664113fe vrf: Drop existing dst reference in vrf_ip6_input_dst
    dddfc5a996af selftests: rtnetlink.sh: remove esp4_offload after test
    314f568b84b0 net/mlx5e: Remove skb secpath if xfrm state is not found
    4d81205d27c3 net/mlx5e: Clear Read-Only port buffer size in PBMC before update
    58004aa21e79 netfilter: xt_nfacct: don't assume acct name is null-terminated
    9705b8b92d6a can: kvaser_usb: Assign netdev.dev_port based on device channel index
    56a17d28c3dd can: kvaser_pciefd: Store device channel index
    2ac7efc5deef can: peak_usb: fix USB FD devices potential malfunction
    c9be5abdaf2e tools/rv: Do not skip idle in trace
    ee2502485702 bpf: Disable migration in nf_hook_run_bpf().
    9d5aecb57e93 Bluetooth: hci_event: Mask data status from LE ext adv reports
    cdb509f59aaf kcsan: test: Initialize dummy variable
    bf88b7c114d4 wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon()
    50e98be435df wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
    21e317484d3b wifi: ath12k: fix endianness handling while accessing wmi service bit
    dde152043f6d Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
    9c8e9da118a8 wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key()
    f74d4525ebad wifi: mac80211: Don't call fq_flow_idx() for management frames
    bc6f35967d9a wifi: mac80211: Do not schedule stopped TXQs
    2874717012d1 wifi: plfxlc: Fix error handling in usb driver probe
    378ae9ccaea3 wifi: mac80211: reject TDLS operations when station is not associated
    df51cc1e965a iommu/amd: Fix geometry.aperture_end for V2 tables
    03df73480547 mwl8k: Add missing check after DMA map
    5cb4349d0c35 wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
    20a1e6536424 tcp: call tcp_measure_rcv_mss() for ooo packets
    9a20c9da5ff1 xen/gntdev: remove struct gntdev_copy_batch from stack
    c9eeae9639ea net_sched: act_ctinfo: use atomic64_t for three counters
    103c4e27ec9f net/sched: Restrict conditions for adding duplicating netems to qdisc tree
    0967ee88ec1e um: rtc: Avoid shadowing err in uml_rtc_start()
    98f1a97d8627 arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
    9ac58afb0cca netfilter: nf_tables: adjust lockdep assertions handling
    b488bee5e92f netfilter: nf_tables: Drop dead code from fill_*_info routines
    f56a863397f5 fbcon: Fix outdated registered_fb reference in comment
    b1c6b13f48a8 sched/psi: Optimize psi_group_change() cpu_clock() usage
    dabe5fc2ee7a drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
    6e2f7903241c m68k: Don't unregister boot console needlessly
    7f0377ca6993 drm/msm/dpu: Fill in min_prefill_lines for SC8180X
    6d029d85aa2b kselftest/arm64: Fix check for setting new VLs in sve-ptrace
    f73c0bc2d1d3 net: dst: annotate data-races around dst->output
    e0b8b6687b7d net: dst: annotate data-races around dst->input
    62d7cf455c88 net/mlx5: Check device memory pointer before usage
    c45a33903e24 tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
    5bf201c55fdf wifi: ath11k: clear initialized flag for deinit-ed srng lists
    ca980f1911a7 iwlwifi: Add missing check for alloc_ordered_workqueue
    d5491ff785f4 wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
    14ca6952691f wifi: rtl818x: Kill URBs before clearing tx status queue
    892b29eab44b wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band
    655e3f51de5a caif: reduce stack size, again
    0abd1f48cd25 bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
    0f18414f1d6b drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel
    cc7af1b89c55 net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain
    3ca8e73c58bb selftests/bpf: fix signedness bug in redir_partial()
    0e853c1464bc bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
    c69d06498ea2 bpf, sockmap: Fix psock incorrectly pointing to sk
    c4a298ae0d36 drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
    8b0285fbbd81 selftests/tracing: Fix false failure of subsystem event test
    faa45887a63c staging: nvec: Fix incorrect null termination of battery manufacturer
    cc03984d7035 interconnect: qcom: sc8180x: specify num_nodes
    37dfd6d6c9e4 interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg
    2fffa72282ed soc: qcom: pmic_glink: fix OF node leak
    272cd1f24741 samples: mei: Fix building on musl libc
    f7e5ae0ddd12 cpufreq: Init policy->rwsem before it may be possibly used
    39a0d418b321 cpufreq: Initialize cpufreq-based frequency-invariance later
    1bc35f9a50e1 cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode
    81f506193700 PM / devfreq: Check governor before using governor->name
    759b918c8f2e arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed
    1661ee5c2a41 arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
    d7b49f4f0da7 ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
    4f886798e1a4 soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS
    632c151355ba arm: dts: ti: omap: Fixup pinheader typo
    40ff7460a9a6 usb: early: xhci-dbc: Fix early_ioremap leak
    c6ec27091cf5 powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()
    91a177aafc53 Revert "vmci: Prevent the dispatching of uninitialized payloads"
    7ed42b79118d pps: fix poll support
    6696a46f4ebd vmci: Prevent the dispatching of uninitialized payloads
    b31cf6f7716a staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
    6031a54f4eac spi: stm32: Check for cfg availability in stm32_spi_probe
    490877203b40 usb: misc: apple-mfi-fastcharge: Make power supply names unique
    f24e5b445ab9 usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe()
    448800900925 ARM: dts: vfxxx: Correctly use two tuples for timer address
    964db8725937 arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely
    e1b4ca59f633 arm64: dts: qcom: sc7180: Expand IMEM region
    2f4bad6b27c3 arm64: dts: qcom: sdm845: Expand IMEM region
    603df70062fb soc: qcom: QMI encoding/decoding for big endian
    41917d9ce43a selftests: Fix errno checking in syscall_user_dispatch test
    aa771d2928fe ASoC: mediatek: use reserved memory or enable buffer pre-allocation
    4c39fc79ae25 ASoC: ops: dynamically allocate struct snd_ctl_elem_value
    ee1c30d7c6fc ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()
    1a91ba12abef gfs2: No more self recovery
    a936be9b5f51 Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
    084933961ecd hfsplus: remove mutex_lock check in hfsplus_free_extents
    0926e13a47fc hfs: make splice write available again
    1de5895fe68d hfsplus: make splice write available again
    d89f71aece34 ublk: use vmalloc for ublk_device's __queues
    b35a50d639ca fs/ntfs3: cancle set bad inode after removing name fails
    8d1bfdd30d17 fs_context: fix parameter name in infofc() macro
    15da73210929 audit,module: restore audit logging in load failure case
    5974c913d6d9 ASoC: amd: yc: add DMI quirk for ASUS M6501RM
    61e5aeff2424 ASoC: Intel: fix SND_SOC_SOF dependencies
    7e98b00615c6 ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx
    18196a40af52 ethernet: intel: fix building with large NR_CPUS
    5f577d47bba6 ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx

(From OE-Core rev: 9c0af64f5b688d89349a80cb27bbbc451abfab38)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
d0302e3d94 linux-yocto/6.6: update to v6.6.101
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

no ids found, dumping:
    3a8ababb8b6a Linux 6.6.101
    41d3c751fcb4 Revert "selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test"
    1af6d1696ca4 spi: cadence-quadspi: fix cleanup of rx_chan on failure paths
    aed4053c506b drm/sched: Remove optimization that causes hang when killing dependent jobs
    79c8d935147c ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
    3277cf433815 mptcp: reset fallback status gracefully at disconnect() time
    7c96d519ee15 mptcp: plug races between subflow fail and subflow creation
    75a4c9ab8a7a mptcp: make fallback action and fallback decision atomic
    23a5773a5da5 arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB bits in ID_AA64MMFR1 register
    52f5a52dc17a ksmbd: add free_transport ops in ksmbd connection
    034adb78fc43 wifi: mt76: mt7921: prevent decap offload config before STA initialization
    79e2dd573116 perf/x86/intel: Fix crash in icl_update_topdown_event()
    9ef6abbb2868 mtd: rawnand: qcom: Fix last codeword read in qcom_param_page_type_exec()
    1da8bd9a10ec ksmbd: fix use-after-free in __smb2_lease_break_noti()
    5ea224eaf636 iio: hid-sensor-prox: Restore lost scale assignments
    a56b79a43f83 iio: hid-sensor-prox: Fix incorrect OFFSET calculation
    796c96cf6685 crypto: qat - add shutdown handler to qat_dh895xcc
    4b5e07702b67 crypto: powerpc/poly1305 - add depends on BROKEN for now
    da3e9f0fac60 erofs: address D-cache aliasing
    1d117f79b5c6 mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma
    37c7f0f24b8e drm/i915/dp: Fix 2.7 Gbps DP_LINK_BW value on g4x
    c383033b0ac8 ALSA: hda: Add missing NVIDIA HDA codec IDs
    0a776c273e71 ALSA: hda/tegra: Add Tegra264 support
    4e954080d218 comedi: comedi_test: Fix possible deletion of uninitialized timers
    45fd8421081e jfs: reject on-disk inodes of an unsupported type
    98be604d96a6 x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode()
    f9377bdf86ea usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach
    457d02e71ae9 usb: typec: tcpm: allow switching to mode accessory to mux properly
    8f65f4565cab usb: typec: tcpm: allow to use sink in accessory mode
    145a56bd68f4 drm/amdkfd: Don't call mmput from MMU notifier callback
    cc690930cb24 mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
    325325923a1d selftests: mptcp: connect: also cover checksum
    5cdfb402bae9 selftests: mptcp: connect: also cover alt modes
    a2cd4dcbb725 resource: fix false warning in __request_region()
    bf585ee198bb nilfs2: reject invalid file types when reading inodes
    57104237cd6c kasan: use vmalloc_dump_obj() for vmalloc error reports
    3028f2a4e746 ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
    eaf242ea6fca gve: Fix stuck TX queue for DQ queue format
    c229192417d4 e1000e: ignore uninitialized checksum word on tgp
    1624f9de4432 e1000e: disregard NVM checksum on tgp when valid checksum bit is not set
    04d098fbca47 dpaa2-switch: Fix device reference count leak in MAC endpoint handling
    1c135ff95167 dpaa2-eth: Fix device reference count leak in MAC endpoint handling
    9433a5f437b0 arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
    140ca2cac147 ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx
    e5354899f625 sprintf.h requires stdarg.h
    72584a9178af bus: fsl-mc: Fix potential double device reference in fsl_mc_get_endpoint()
    6e7836c83635 i2c: virtio: Avoid hang by using interruptible completion wait
    68ceeb06316e i2c: tegra: Fix reset error handling with ACPI
    0d33913fce67 i2c: qup: jump out of the loop in case of timeout
    60962eed62b9 platform/x86: ideapad-laptop: Fix kbd backlight not remembered among boots
    989b2c5322dc net: hns3: default enable tx bounce buffer when smmu enabled
    adbf6f476cd1 net: hns3: fixed vf get max channels bug
    f377792c4186 net: hns3: disable interrupt when ptp init failed
    3cc42004f65b net: hns3: fix concurrent setting vlan filter issue
    faf44487dfc8 s390/ism: fix concurrency management in ism_cmd()
    42e42d64d851 drm/bridge: ti-sn65dsi86: Remove extra semicolon in ti_sn_bridge_probe()
    cf81a60a9733 can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode
    359492c2024a can: dev: can_restart(): move debug message and stats after successful restart
    71a2dc442e12 can: dev: can_restart(): reverse logic to remove need for goto
    0ede6ce4fcf2 net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
    e4f1564c5b69 net: appletalk: Fix use-after-free in AARP proxy probe
    d989748e9dbb i40e: When removing VF MAC filters, only check PF-set MAC
    0c399fd6ac5a i40e: report VF tx_dropped with tx_errors instead of tx_discards
    a05b3883083b i40e: Add rx_missed_errors for buffer exhaustion
    e4ca597d3116 net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch
    c3d8a80d9557 net/mlx5: Fix memory leak in cmd_exec()
    bfebdb85496e xfrm: interface: fix use-after-free after changing collect_md xfrm interface
    2e18442d22c6 staging: vchiq_arm: Make vchiq_shutdown never fail
    6758f73f172d platform/x86: Fix initialization order for firmware_attributes_class
    d72c97b6160d x86/hyperv: Fix usage of cpu_online_mask to get valid cpu
    0915f1856c48 regmap: fix potential memory leak of regmap_bus
    881f3066fd8d iio: adc: ad7949: use spi_is_bpw_supported()
    6a85c96e61c1 interconnect: qcom: sc7280: Add missing num_links to xm_pcie3_1 node
    fb93e41ecc75 RDMA/core: Rate limit GID cache warning messages
    233d3c54c962 regulator: core: fix NULL dereference on unbind due to stale coupling data
    0e8c65939ba2 virtio_ring: Fix error reporting in virtqueue_resize
    fa53beab4740 Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT

(From OE-Core rev: 40092b395a04921dd8f0f54f352d958084167227)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
6d4a516d71 linux-yocto/6.6: update to v6.6.100
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    dbcb8d8e4163 Linux 6.6.100
    3ee59c38ae73 KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls
    48e879184320 nvmem: layouts: u-boot-env: remove crc32 endianness conversion
    35542cbe66c6 i2c: omap: fix deprecated of_property_read_bool() use
    056b65a02edc Revert "selftests/bpf: dummy_st_ops should reject 0 for non-nullable params"
    c148b7282808 Revert "selftests/bpf: adjust dummy_st_ops_success to detect additional error"
    b9e50a5169b0 ASoC: fsl_sai: Force a software reset when starting in consumer mode
    8f2852c1d7aa regulator: pwm-regulator: Manage boot-on with disabled PWM channels
    cad3ec23e398 regulator: pwm-regulator: Calculate the output voltage for disabled PWMs
    7e5ec0059e4d i2c: omap: Handle omap_i2c_init() errors in omap_i2c_probe()
    a7b84035baa8 i2c: omap: Fix an error handling path in omap_i2c_probe()
    caa86f8b6c30 i2c: omap: Add support for setting mux
    6cfbff5f8dc9 usb: dwc3: qcom: Don't leave BCR asserted
    824fa25c85e8 usb: hub: Don't try to recover devices lost during warm reset.
    668c7b47a5ee usb: hub: Fix flushing of delayed work used for post resume purposes
    71f5c98d2931 usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
    15fea75a7886 usb: hub: fix detection of high tier USB3 devices behind suspended hubs
    d5024dc5e644 arm64: Filter out SME hwcaps when FEAT_SME isn't implemented
    dc6a664089f1 clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
    4cb17b11c8af ipv6: make addrconf_wq single threaded
    496efa228f0d sched: Change nr_uninterruptible type to unsigned long
    f371ad6471ee Revert "cgroup_freezer: cgroup_freezing: Check if not frozen"
    74bb4de32d92 rxrpc: Fix transmission of an abort in response to an abort
    7692bde89006 rxrpc: Fix recv-recv race of completed call
    7ff2d83ecf26 net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
    7b0d42318393 net: bridge: Do not offload IGMP/MLD messages
    bb515c413064 net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
    1f3a429c21e0 tls: always refresh the queue when reading sock
    007142a263db hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf
    bd3051a81621 Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
    76179961c423 netfilter: nf_conntrack: fix crash due to removal of uninitialised entry
    dcbc346f50a0 ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
    6a213143e0ea net/mlx5: Correctly set gso_size when LRO is used
    ab94e7af363a Bluetooth: btusb: QCA: Fix downloading wrong NVM for WCN6855 GF variant without board ID
    4ceefc9c31e7 Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
    f3323b18e3cc Bluetooth: SMP: If an unallowed command is received consider it a failure
    32e624912eed Bluetooth: hci_sync: fix connectable extended advertising when using static random address
    c4f16f6b071a Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
    5dd6a441748d usb: net: sierra: check for no status endpoint
    27591d926191 ice: add NULL check in eswitch lag check
    eda5e38cc4dd hwmon: (corsair-cpro) Validate the size of the received input buffer
    c18726607c8a selftests: net: increase inter-packet timeout in udpgro.sh
    167006f73005 wifi: cfg80211: remove scan request n_channels counted_by
    a2f02a87fe21 nvme: fix misaccounting of nvme-mpath inflight I/O
    ec158d05eaa9 net: phy: Don't register LEDs for genphy
    5d95fbbfaa8f nvme: fix inconsistent RCU list manipulation in nvme_ns_add_to_ctrl_list()
    2baaf5bbab2a smb: client: fix use-after-free in cifs_oplock_break
    62dcd9d6e61c rpl: Fix use-after-free in rpl_do_srh_inline().
    fbe48f06e641 net/sched: sch_qfq: Fix race condition on qfq_aggregate
    21033b49cf09 block: fix kobject leak in blk_unregister_queue
    c20dd7e8f359 net: emaclite: Fix missing pointer increment in aligned_read()
    bc016b7842f6 cachefiles: Fix the incorrect return value in __cachefiles_write()
    e7be679124ba bpf: Reject %p% format string in bprintf-like helpers
    12e023df10b6 soundwire: amd: fix for clearing command status register
    84830e033bd2 soundwire: amd: fix for handling slave alerts after link is down
    673ee92bd2d3 comedi: Fix initialization of data for instructions that write to subdevice
    10f9024a8c82 comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
    63390b856178 comedi: Fix some signed shift left operations
    c9d3d9667443 comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
    8a3637027cee comedi: das6402: Fix bit shift out of bounds
    adb7df8a8f9d comedi: das16m1: Fix bit shift out of bounds
    955e8835855f comedi: aio_iiro_16: Fix bit shift out of bounds
    7e470d8efd10 comedi: pcl812: Fix bit shift out of bounds
    8d8519aedbf1 iio: adc: stm32-adc: Fix race in installing chained IRQ handler
    6471d4b4ac61 iio: adc: max1363: Reorder mode_list[] entries
    edff26d038d2 iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
    dda42f23a8f5 iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush
    329a80adc0e5 soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
    d93b20c88e5e soc: aspeed: lpc-snoop: Cleanup resources in stack-order
    15a0a5de4950 smb: client: fix use-after-free in crypt_message when using async crypto
    0c7b20f7785c s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again
    600f55da8d90 pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
    d510116c80b3 net: libwx: properly reset Rx ring descriptor
    027701180a7b net: libwx: fix the using of Rx buffer DMA
    3c91a56762b1 net: libwx: remove duplicate page_pool_put_full_page()
    e30c5fa723dc mmc: sdhci_am654: Workaround for Errata i2312
    7ac120c00c5a mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
    5bfd0078f738 mmc: bcm2835: Fix dma_unmap_sg() nents value
    4206824af6dd memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
    928f3a277f2c isofs: Verify inode mode when loading from disk
    4bb016438335 dmaengine: nbpfaxi: Fix memory corruption in probe()
    2bae35acbb6e af_packet: fix soft lockup issue caused by tpacket_snd()
    67ea5f37b203 af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
    e51cf5d4aa98 arm64: dts: rockchip: use cs-gpios for spi1 on ringneck
    645af2f069d6 arm64: dts: freescale: imx8mm-verdin: Keep LDO5 always on
    bec18ebcf05c arm64: dts: imx8mp-venice-gw74xx: fix TPM SPI frequency
    33eba752d9de net/mlx5: Update the list of the PCI supported devices
    29db3339db0e phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
    d48845afa083 io_uring/poll: fix POLLERR handling
    c855b9aa093a ALSA: hda/realtek: Add quirk for ASUS ROG Strix G712LWS
    56f99fdb0b8d drm/amdgpu/gfx8: reset compute ring wptr on the GPU on resume
    823d79890048 tracing/osnoise: Fix crash in timerlat_dump_stack()
    6bc94f20a4c3 tracing: Add down_write(trace_event_sem) when adding trace event
    6ba89b382be4 tracing/probes: Avoid using params uninitialized in parse_btf_arg()
    0e5017d84d65 HID: core: do not bypass hid_hw_raw_request
    a1c0b87b7682 HID: core: ensure __hid_request reserves the report ID as the first byte
    fcda39a9c5b8 HID: core: ensure the allocated report buffer can contain the reserved report ID
    469a39a33a99 dm-bufio: fix sched in atomic context
    82b29ee8ba90 spi: Add check for 8-bit transfer with 8 IO mode support
    415d4966cb54 pch_uart: Fix dma_sync_sg_for_device() nents value
    db44a558b3af Input: xpad - set correct controller type for Acer NGR200
    0f6f30f5b01a nvmem: imx-ocotp: fix MAC address byte length
    0cd051cb5852 thunderbolt: Fix bit masking in tb_dp_port_set_hops()
    dc52aff53465 thunderbolt: Fix wake on connect at runtime
    e6a2ff56b06e i2c: stm32: fix the device used for the DMA map
    58bdd5160184 usb: gadget: configfs: Fix OOB read on empty string write
    ec35a7125d94 usb: musb: fix gadget state on disconnect
    311c434f5d76 USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
    909d80414869 USB: serial: option: add Foxconn T99W640
    84c320060d53 USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
    ad2437f4abca phy: tegra: xusb: Disable periodic tracking on Tegra234
    491175c139e5 phy: tegra: xusb: Decouple CYA_TRK_CODE_UPDATE_ON_IDLE from trk_hw_mode
    5367cdeb75cb phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode

(From OE-Core rev: cf70911ca46d3f9980d475369d9f15343b6e52e2)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
a65c2420fd linux-yocto/6.6: update to v6.6.99
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    d96eb99e2f0e Linux 6.6.99
    eaf112069a90 rseq: Fix segfault on registration when rseq_cs is non-zero
    f02f0218be41 crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
    97c355989928 ksmbd: fix potential use-after-free in oplock/lease break ack
    8377d7744bdc kasan: remove kasan_find_vm_area() to prevent possible deadlock
    d3927e55c959 smb: client: fix potential race in cifs_put_tcon()
    a4bb7ced4e8f selftests/bpf: adapt one more case in test_lru_map to the new target_free
    f35c825a012d Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
    3ce1d87d1f5d HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
    ae915b38e262 HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
    b71a75739af9 bpf: Adjust free target to avoid global starvation of LRU map
    cd5b424d8322 vt: add missing notification when switching back to text mode
    f4428b2d4c68 btrfs: fix assertion when building free space tree
    2cc5ef01ea03 net: mana: Record doorbell physical address in PF mode
    9f460b235ef3 HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
    cd4df14f6180 net: usb: qmi_wwan: add SIMCom 8230C composition
    e07c2feb4916 ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100
    ee287cf30ffb ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic
    50b1e01aa123 io_uring: make fallocate be hashed work
    825088c90357 um: vector: Reduce stack usage in vector_eth_configure()
    8cafaba2f275 atm: idt77252: Add missing `dma_map_error()`
    0d8a9b6dd321 ublk: sanity check add_dev input for underflow
    5909679a82cd bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
    e644935d40cb bnxt_en: Fix DCB ETS validation
    7d4d1993517b net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
    5aa8b3a1d8ab can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
    10946f834638 net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
    9fa29314eba1 ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof
    4a17370da6e4 net: appletalk: Fix device refcount leak in atrtr_create()
    9fbc49429a23 netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
    d46186eb7bbd nbd: fix uaf in nbd_genl_connect() error path
    8fc3d7b23d13 raid10: cleanup memleak at raid10_make_request
    df5894014a92 md/raid1: Fix stack memory use after return in raid1_reshape
    d1240029f97a drm/tegra: nvdec: Fix dma_alloc_coherent error check
    5420de65efbe wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
    739296467a59 cifs: all initializations for tcon should happen in tcon_info_alloc
    03c3cd0c3b67 smb: client: fix DFS interlink failover
    d043b5da37fc smb: client: avoid unnecessary reconnects when refreshing referrals
    609a617a97c0 usb: dwc3: Abort suspend on soft disconnect failure
    e3f79e2c9ad1 usb: cdnsp: Fix issue with CV Bad Descriptor test
    ae5b191184ce usb: cdnsp: Replace snprintf() with the safer scnprintf() variant
    7227a8229f43 usb:cdnsp: remove TRB_FLUSH_ENDPOINT command
    fd79927c8191 btrfs: fix inode lookup error handling during log replay
    6aea26dc23d5 btrfs: return a btrfs_inode from btrfs_iget_logging()
    e6031107f397 btrfs: remove redundant root argument from fixup_inode_link_count()
    28a36e75d196 btrfs: remove redundant root argument from btrfs_update_inode_fallback()
    ddead3c5ca18 btrfs: remove noinline from btrfs_update_inode()
    c31ee1695b6d netlink: make sure we allow at least one dump skb
    ce2ac2e46719 netlink: Fix rmem check in netlink_broadcast_deliver().
    5b1b8f06b179 erofs: fix to add missing tracepoint in erofs_read_folio()
    4c4f931676b6 ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
    d903a0fe324e smb: server: make use of rdma_destroy_qp()
    3c0994a3fd93 x86/mm: Disable hugetlb page table sharing on 32-bit
    ee21fbcb87a0 x86/rdrand: Disable RDSEED on AMD Cyan Skillfish
    ad9d4db5a8ac pwm: mediatek: Ensure to disable clocks in error path
    37e2911d2ec1 mm/vmalloc: leave lazy MMU mode on PTE mapping error
    f64046ae3401 scripts/gdb: fix interrupts.py after maple tree conversion
    ecf16604f3f0 scripts/gdb: de-reference per-CPU MCE interrupts
    e2e200c98e9f scripts/gdb: fix interrupts display after MCP on x86
    56995226431a mm: fix the inaccurate memory statistics issue for users
    167134042418 maple_tree: fix mt_destroy_walk() on root leaf node
    688bf63ee6ba kallsyms: fix build without execinfo
    c23a41086899 Revert "ACPI: battery: negate current when discharging"
    2e2e9b3d7084 drm/framebuffer: Acquire internal references on GEM handles
    dec7774d0ef9 Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"
    c6eb4a05af3d usb: gadget: u_serial: Fix race condition in TTY wakeup
    8c290a9d629b drm/gem: Fix race in drm_gem_handle_create_tail()
    db7402d78e7c drm/ttm: fix error handling in ttm_buffer_object_transfer
    c64f5310530b drm/sched: Increment job count before swapping tail spsc queue
    cb4c956a15f8 drm/gem: Acquire references on GEM handles for framebuffers
    ec6392061de6 wifi: prevent A-MSDU attacks in mesh networks
    1d57f7132662 pinctrl: qcom: msm: mark certain pins as invalid for interrupts
    3d82a729530b md/md-bitmap: fix GPF in bitmap_get_stats()
    2ca1db269a8d gre: Fix IPv6 multicast route creation.
    8c8e8d4d7544 KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
    20d1d9e7ce69 KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.
    a18776abc592 x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
    f536f3b09773 x86/mce: Don't remove sysfs if thresholding sysfs init fails
    cc058adb9beb x86/mce/amd: Fix threshold limit reset
    8e5058a5812e x86/mce/amd: Add default names for MCA banks and blocks
    e2d5c005dfc9 ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
    efc1b2b7c1a3 rxrpc: Fix oops due to non-existence of prealloc backlog struct
    ddc4fe078948 Bluetooth: HCI: Set extended advertising data synchronously
    eb952372bf48 perf: build: Setup PKG_CONFIG_LIBDIR for cross compilation
    e63032e66bca maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()
    432c5363cd6f rxrpc: Fix bug due to prealloc collision
    4c691d1b6b6d net/sched: Abort __tc_modify_qdisc if parent class does not exist
    07b585ae3699 atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
    3f61b997fe01 atm: clip: Fix infinite recursive call of clip_push().
    1fb9fb5a4b5c atm: clip: Fix memory leak of struct clip_vcc.
    06935c50cfa3 atm: clip: Fix potential null-ptr-deref in to_atmarpd().
    36cf9bcf09bd net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
    0a0d040f12fe net: phy: smsc: Force predictable MDI-X state on LAN87xx
    72c62b4991a2 net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
    791c8d6b76c5 net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2
    d437e8e7dcb9 vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
    9d24bb678028 vsock: Fix transport_* TOCTOU
    401239811fa7 vsock: Fix transport_{g2h,h2g} TOCTOU
    81373cd1d72d tcp: Correct signedness in skb remaining space calculation
    be4b8392da79 tipc: Fix use-after-free in tipc_conn_close().
    42262bc4e8ef vsock: fix `vsock_proto` declaration
    55baecb9eb90 netlink: Fix wraparounds of sk->sk_rmem_alloc.
    f9b3d28f1f62 fix proc_sys_compare() handling of in-lookup dentries
    82c0f15c26be pinctrl: amd: Clear GPIO debounce for suspend
    a219fcea8e8e Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected
    51e082108345 Bluetooth: hci_sync: Fix not disabling advertising instance
    c604dd2c5e6b ASoC: cs35l56: probe() should fail if the device ID is not recognized
    183bdb89af1b perf: Revert to requiring CAP_SYS_ADMIN for uprobes
    71eb118baf6e perf/core: Fix the WARN_ON_ONCE is out of lock protected region
    407f1073ea23 ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
    391e5ea5b877 drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
    521e9ff0b67c eventpoll: don't decrement ep refcount while still holding the ep mutex

(From OE-Core rev: 5504778cd1c538b6f3c40d3106a3423abdac3203)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
574cc67a0d linux-yocto/6.6: update to v6.6.98
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    9247f4e6573a Linux 6.6.98
    20aa3d519806 x86/CPU/AMD: Properly check the TSA microcode
    59a2de10b81a Linux 6.6.97
    897761d16564 f2fs: fix to avoid use-after-free issue in f2fs_filemap_fault
    8c1944905855 x86/process: Move the buffer clearing before MONITOR
    6fb766d53f61 x86/microcode/AMD: Add TSA microcode SHAs
    276499bb6944 KVM: SVM: Advertise TSA CPUID bits to guests
    90293047df18 x86/bugs: Add a Transient Scheduler Attacks mitigation
    2b6a5fbe9dc1 x86/bugs: Rename MDS machinery to something more generic
    8a7ac2737211 powerpc/kernel: Fix ppc_save_regs inclusion in build
    63cff9f57e86 usb: typec: displayport: Fix potential deadlock
    4b91b77af24c platform/x86: think-lmi: Fix sysfs group cleanup
    98002f1ac947 platform/x86: think-lmi: Fix kobject cleanup
    cb3e3244d88d platform/x86: think-lmi: Create ksets consecutively
    360546362865 powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed
    73d43c215007 iommu/rockchip: prevent iommus dead loop when two masters share one IOMMU
    6052862ba31c Logitech C-270 even more broken
    6358cb9c2a31 i2c/designware: Fix an initialization issue
    d8eab407c08d dma-buf: fix timeout handling in dma_resv_wait_timeout v2
    59205a3e93ef smb: client: fix readdir returning wrong type with POSIX extensions
    937f49be49d6 usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume
    afbec8c34428 usb: cdnsp: do not disable slot for disabled slot
    c9a841fd2ec2 Input: iqs7222 - explicitly define number of external channels
    2cd5e7c16942 Input: xpad - support Acer NGR 200 Controller
    c16b75aa6fb6 xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
    881c9274246c xhci: dbc: Flush queued requests before stopping dbc
    897d1170c249 xhci: dbctty: disable ECHO flag by default
    7609899eb6b7 usb: xhci: quirk for data loss in ISOC transfers
    204bdc7a8b7b NFSv4/flexfiles: Fix handling of NFS level errors in I/O
    e3eed0134772 fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
    adb29b437fe5 module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper
    a6069306f4e1 platform/x86: hp-bioscfg: Fix class device unregistration
    8570c219cd59 platform/x86: hp-bioscfg: Directly use firmware_attributes_class
    387da3b6d1a9 drm/v3d: Disable interrupts before resetting the GPU
    817662f9bdf8 rcu: Return early if callback is not specified
    d5c1e3f32902 mtd: spinand: fix memory leak of ECC engine conf
    d547779e72ce ACPICA: Refuse to evaluate a method if arguments are missing
    347827bd0c56 wifi: ath6kl: remove WARN on bad firmware input
    5aebb9aa538a wifi: mac80211: drop invalid source address OCB frames
    270d637100f9 aoe: defer rexmit timer downdev work to workqueue
    55dfffc5e947 scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
    7b9203afeb37 regulator: fan53555: add enable_time support and soft-start times
    a1d10fee0783 ASoC: amd: yc: update quirk data for HP Victus
    871beab5b4f9 powerpc: Fix struct termio related ioctl macros
    ba9117312795 platform/x86/amd/pmc: Add PCSpecialist Lafite Pro V 14M to 8042 quirks list
    785200516552 ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic
    69283b3fd463 ata: pata_cs5536: fix build on 32-bit UML
    71f89fab5cc9 ata: libata-acpi: Do not assume 40 wire cable if no devices are enabled
    6766316c1a9f ALSA: sb: Force to disable DMAs once when DMA mode is changed
    c7922052c6f2 ALSA: sb: Don't allow changing the DMA mode during operations
    c40ad1c04d30 drm/msm: Fix another leak in the submit error path
    fe2695b2f63b drm/msm: Fix a fence leak in submit error path
    5df2087c9a1e drm/i915/dp_mst: Work around Thunderbolt sink disconnect after SINK_COUNT_ESI read
    ad09bb7cbd14 drm/simpledrm: Do not upcast in release helpers
    51ba65860457 scsi: ufs: core: Fix clk scaling to be conditional in reset and restore
    847af89aa163 scsi: ufs: core: Add OPP support for scaling clocks and regulators
    95ffe734518d scsi: ufs: core: Fix abnormal scale up after last cmd finish
    9e67044aa9a7 f2fs: fix to zero post-eof page
    d1ccd98eddba f2fs: convert f2fs_vm_page_mkwrite() to use folio
    7ac8a61e5503 f2fs: prevent writing without fallocate() for pinned files
    b43c3050d211 f2fs: add tracepoint for f2fs_vm_page_mkwrite()
    bceae1daf302 x86/traps: Initialize DR6 by writing its architectural reset value
    16254aa985d1 bnxt: properly flush XDP redirect lists
    6310aafd4267 wifi: mac80211: finish link init before RCU publish
    ebca4264c648 wifi: mac80211: Add link iteration macro for link data
    32d0b58079ed wifi: mac80211: chan: chandef is non-NULL for reserved
    bc0819a25e04 Bluetooth: hci_core: Fix use-after-free in vhci_flush()
    64d07a40f853 smb: client: remove \t from TP_printk statements
    3499dcb6c507 btrfs: fix qgroup reservation leak on failure to allocate ordered extent
    ccdd3eaec689 Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1"
    ca7d5aa7ccf0 smb: client: fix race condition in negotiate timeout by using more precise timing
    70b32cba5cfd amd-xgbe: do not double read link status
    f680a4643c6f net/sched: Always pass notifications when child class becomes empty
    5ea2a10be7d7 nui: Fix dma_mapping_error() check
    7a1841c96093 rose: fix dangling neighbour pointers in rose_rt_device_down()
    744cd8baffe8 enic: fix incorrect MTU comparison in enic_change_mtu()
    a133683c0567 amd-xgbe: align CL37 AN sequence as per databook
    f2ca04cbf01d lib: test_objagg: Set error message in check_expect_hints_stats()
    8f4652848b36 igc: disable L1.2 PCI-E link substate to avoid performance issue
    832058110a1d drm/i915/gsc: mei interrupt top half should be in irq disabled context
    40e09506aea1 drm/i915/gt: Fix timeline left held on VMA alloc error
    968a419c9513 net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
    0cee638d92ac smb: client: fix warning when reconnecting channel
    33713f7cda3d platform/mellanox: mlxreg-lc: Fix logic error in power state check
    421672fb7f13 platform/x86: dell-wmi-sysman: Fix class device unregistration
    dba37f72aae3 platform/x86: dell-sysman: Directly use firmware_attributes_class
    4074f6a15e95 platform/x86: think-lmi: Fix class device unregistration
    093ee65bdafb platform/x86: think-lmi: Directly use firmware_attributes_class
    ee813c62af62 platform/x86: firmware_attributes_class: Simplify API
    e52b896d5fb7 platform/x86: firmware_attributes_class: Move include linux/device/class.h
    9143d22a09b5 platform/x86: make fw_attr_class constant
    3df1e72b7bfe arm64: dts: qcom: sm8550: add UART14 nodes
    0deb3eb78ebf platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
    55a90f82d4ff drm/i915/selftests: Change mock_request() to return error pointers
    822c05444ffa spi: spi-fsl-dspi: Clear completion counter before initiating transfer
    1fc5dc930137 drm/exynos: fimd: Guard display clock control with runtime PM calls
    7e6423f80bd6 dpaa2-eth: fix xdp_rxq_info leak
    31afd307975f ethernet: atl1: Add missing DMA mapping error checks and count errors
    2a7ac29f10d8 btrfs: use btrfs_record_snapshot_destroy() during rmdir
    d77a16802896 btrfs: propagate last_unlink_trans earlier when doing a rmdir
    65d7f92db8a9 btrfs: rename err to ret in btrfs_rmdir()
    2d11d274e2e1 btrfs: fix iteration of extrefs during log replay
    79b025ebc1c0 btrfs: fix missing error handling when searching for inode refs during log replay
    529281206f11 Bluetooth: Prevent unintended pause by checking if advertising is active
    e373354ecfbf platform/mellanox: nvsw-sn2201: Fix bus number in adapter error message
    d8a1ad180c24 RDMA/mlx5: Fix vport loopback for MPV device
    efb3413f6ba9 RDMA/mlx5: Fix CC counters query for MPV
    301303d14da6 RDMA/mlx5: Fix HW counters query for non-representor devices
    ee9cb28675a5 scsi: ufs: core: Fix spelling of a sysfs attribute name
    39dac98aca12 scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
    c3ec87fbb00d scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
    8ca65fa71024 NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
    d0877c479f44 nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
    23a3b32a274a RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
    edca475158f7 platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
    3962e5a3845d arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename
    b935c1e734d2 mtk-sd: reset host->mrq on prepare_data() error
    61cdd6635646 mtk-sd: Prevent memory corruption from DMA map failure
    b3b00e9b03d3 mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
    45e9444b3b97 usb: typec: altmodes/displayport: do not index invalid pin_assignments
    24418bc77a66 regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
    0506547f6e3d Bluetooth: MGMT: mesh_send: check instances prior disabling advertising
    8af1406949c1 Bluetooth: MGMT: set_mesh: update LE scan interval and window
    7e88ad41b63e Bluetooth: hci_sync: revert some mesh modifications
    3c0c18ef4c79 mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier
    c4fad2460c17 Revert "mmc: sdhci: Disable SD card clock before changing parameters"
    3855b7ace3f9 mmc: sdhci: Add a helper function for dump register in dynamic debug mode
    94d0c326cb3e vsock/vmci: Clear the vmci transport packet properly when initializing it
    e7191481d6ae s390/pci: Do not try re-enabling load/store if device is disabled
    80b971be4c37 virtio-net: ensure the received length does not exceed allocated size
    39617dc3fafe rtc: cmos: use spin_lock_irqsave in cmos_interrupt
    5cdd1f73401d rtc: pcf2127: fix SPI command byte for PCF2131
    1cb814dbb03d rtc: pcf2127: add missing semicolon after statement

(From OE-Core rev: b9041a3e6ddc8917eba2af45a8e57f2e48998dc9)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Deepesh Varatharajan
be43d55edd glibc: stable 2.39 branch updates
git log --oneline b027d5b145f1b2908f370bdb96dfe40180d0fcb6..58cbbd43fe82910cf8ae9008351b0b0665104500

58cbbd43fe (HEAD -> release/2.39/master, origin/release/2.39/master) x86: Detect Intel Nova Lake Processor
835b1e3379 x86: Detect Intel Wildcat Lake Processor
765534258e nss: Group merge does not react to ERANGE during merge (bug 33361)
7ce7b4b2f4 Rename new tst-sem17 test to tst-sem18
a6ac06abeb Avoid uninitialized result in sem_open when file does not exist
ff6ce67220 elf: handle addition overflow in _dl_find_object_update_1 [BZ #32245]
fffc2df8a3 Optimize __libc_tsd_* thread variable access
83340b35cc i386: Add GLIBC_ABI_GNU_TLS version [BZ #33221]
5541edb1bd i386: Also add GLIBC_ABI_GNU2_TLS version [BZ #33129]
1f17635507 debug: Fix tst-longjmp_chk3 build failure on Hurd
3b6c8ea878 debug: Wire up tst-longjmp_chk3
89596f46e3 i386: Update ___tls_get_addr to preserve vector registers
4c2509882f elf: Preserve _rtld_global layout for the release branch
cf0e7d512d elf: Compile _dl_debug_state separately (bug 33224)
5cd1f4b1a1 elf: Restore support for _r_debug interpositions and copy relocations
97017da5ef elf: Introduce _dl_debug_change_state
5601ad79b7 elf: Introduce separate _r_debug_array variable
24c94ea84e elf: Test dlopen (NULL, RTLD_LAZY) from an ELF constructor
79d84b5da5 elf: Fix handling of symbol versions which hash to zero (bug 29190)
5f5c411132 elf: Second ld.so relocation only if libc.so has been loaded
4c9b1877fd elf: Reorder audit events in dlcose to match _dl_fini (bug 32066)
f407a14ff7 elf: Call la_objclose for proxy link maps in _dl_fini (bug 32065)
e27601b385 elf: Signal la_objopen for the proxy link map in dlmopen (bug 31985)
fef226255d elf: Add the endswith function to <endswith.h>
d21a217fa0 elf: Update DSO list, write audit log to elf/tst-audit23.out
4f145bb35d elf: Switch to main malloc after final ld.so self-relocation
65d86471ce elf: Introduce _dl_relocate_object_no_relro
5434cc2c41 elf: Do not define consider_profiling, consider_symbind as macros
b2d8c6cbe7 elf: rtld_multiple_ref is always true
2b89de7c91 Revert "elf: Run constructors on cyclic recursive dlopen (bug 31986)"
46e3ecad27 elf: Fix map_complete Systemtap probe in dl_open_worker
5f225025db elf: Signal RT_CONSISTENT after relocation processing in dlopen (bug 31986)
d6cc325fcf elf: Signal LA_ACT_CONSISTENT to auditors after RT_CONSISTENT switch
6917fde6f9 elf: Run constructors on cyclic recursive dlopen (bug 31986)
9fa7cc6a0b ldconfig: Move endswithn into a new header file
269e89bd8d x86-64: Add GLIBC_ABI_DT_X86_64_PLT [BZ #33212]
62ff85fd09 x86-64: Add GLIBC_ABI_GNU2_TLS version [BZ #33129]
f0e8d04eef libio: Test for fdopen memory leak without SEEK_END support (bug 31840)
42a8cb7560 Remove memory leak in fdopen (bug 31840)
d1c1f78e9e math: Remove no-mathvec flag
20d2d69a2f Use TLS initial-exec model for __libc_tsd_CTYPE_* thread variables [BZ #33234]
c11950503f ctype: Fallback initialization of TLS using relocations (bug 19341, bug 32483)
25c537c3b3 Use proper extern declaration for _nl_C_LC_CTYPE_{class,toupper,tolower}
fbdf9680cc Remove <libc-tsd.h>
fca5937510 ctype: Reformat Makefile.
49f0e73fa3 elf: Handle ld.so with LOAD segment gaps in _dl_find_object (bug 31943)
64488b4b31 elf: Extract rtld_setup_phdr function from dl_main
9833fcf7ce elf: Do not add a copy of _dl_find_object to libc.so
fbade65338 arm: Use _dl_find_object on __gnu_Unwind_Find_exidx (BZ 31405)
392e6cf1e8 AArch64: Improve codegen in SVE log1p
3a78a276a3 AArch64: Optimize inverse trig functions
b6ea8902a7 AArch64: Avoid memset ifunc in cpu-features.c [BZ #33112]

Testing Results:
            Before     After    Diff
PASS         5080      5099      +19
XPASS        4         4          0
FAIL         119       120       +1
XFAIL        16        16         0
UNSUPPORTED  154       154        0

Testcases changes

testcase-name                                                before           after

debug/tst-longjmp_chk3(new)                                    -               PASS
elf/check-dt-x86-64-plt(new)                                   -               PASS
elf/check-gnu2-tls(new)                                        -               PASS
lf/tst-dlmopen4-nonpic(new)                                    -               PASS
elf/tst-dlmopen4-pic(new)                                      -               PASS
elf/tst-dlopen-auditdup(new)                                   -               PASS
elf/tst-dlopen-constructor-null(new)                           -               PASS
elf/tst-link-map-contiguous-ldso(new)                          -               PASS
elf/tst-link-map-contiguous-libc(new)                          -               PASS
elf/tst-nolink-libc-1(new)                                     -               PASS
elf/tst-nolink-libc-2(new)                                     -               PASS
elf/tst-rtld-no-malloc(new)                                    -               PASS
elf/tst-rtld-no-malloc-audit(new)                              -               PASS
elf/tst-rtld-no-malloc-preload(new)                            -               PASS
elf/tst-tls23(new)                                             -               PASS
elf/tst-version-hash-zero(new)                                 -               PASS
libio/tst-fdopen-seek-failure(new)                             -               PASS
libio/tst-fdopen-seek-failure-mem(new)                         -               PASS
nptl/tst-sem18(new)                                            -               PASS
ctype/tst-ctype-tls-dlmopen(new)                               -               FAIL
ctype/tst-ctype-tls-dlopen-static(new)                         -               FAIL
stdio-common/tst-scanf-bz27650                                FAIL             PASS
elf/ifuncmain8                                                PASS              -

(From OE-Core rev: d60dd826d81bc4c85452826427d710b2bb0ddde9)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Rajeshkumar Ramasamy
4456c586d1 glib-networking: fix CVE-2025-60019
glib-networking's OpenSSL backend fails to properly check the return
value of memory allocation routines. An out of memory condition could
potentially result in writing to an invalid memory location.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-60019

Upstream-patch:
70df675dd4

(From OE-Core rev: 8c44478c92a8b3d859c7fcecc734ac6bb399277e)

Signed-off-by: Rajeshkumar Ramasamy <rajeshkumar.ramasamy@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Saravanan
6d7cfb5461 cmake: fix CVE-2025-9301
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-9301
https://gitlab.kitware.com/cmake/cmake/-/issues/27135

Upstream-patch:
37e27f71bc

(From OE-Core rev: 5d8a6fb52ca4a7641236712ba51cb322cb1f9f9d)

Signed-off-by: Saravanan <saravanan.kadambathursubramaniyam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
David Nyström
2142f17368 openssh: fix CVE-2025-61984
ssh in OpenSSH before 10.1 allows control characters in usernames that
originate from certain possibly untrusted sources, potentially leading
to code execution when a ProxyCommand is used. The untrusted sources
are the command line and %-sequence expansion of a configuration file.

Note:
openssh does not support variable expansion until 10.0, so backport
adapts for this.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-61984

Upstream patch:
35d5917652

(From OE-Core rev: 717d4c7609cdce2cc3a65b7ba69c316fa86a9333)

Signed-off-by: David Nyström <david.nystrom@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
David Nyström
a7fdce2a68 openssh: fix CVE-2025-61985
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI,
potentially leading to code execution when a ProxyCommand is used.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-61985

Upstream patch:
43b3bff47b

(From OE-Core rev: 52d925423b826383d12a97b834475ab5699fd492)

Signed-off-by: David Nyström <david.nystrom@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Rajeshkumar Ramasamy
bf8139e03b glib-networking: fix CVE-2025-60018
glib-networking's OpenSSL backend fails to properly check the return
value of a call to BIO_write(), resulting in an out of bounds read.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-60018

Upstream-patch:
4dd540505d

(From OE-Core rev: e5ef6337416135d3c9d311c870ee72928aa75620)

Signed-off-by: Rajeshkumar Ramasamy <rajeshkumar.ramasamy@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:39 -07:00
Peter Marko
f0bbacca46 gnupg: mark CVE-2025-30258 as patched
Per NVD report [1] this CVE is fixed by [2].
This commit was backported to 2.4.8 via [3].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-30258
[2] https://dev.gnupg.org/rG48978ccb4e20866472ef18436a32744350a65158
[3] da0164efc7

(From OE-Core rev: 88fe1eaa4bcd7c838902d8cdc067276c5f32624d)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:39 -07:00
Peter Marko
2f86700da6 binutils: patch CVE-2025-11083
Pick patch per link in NVD report.

(From OE-Core rev: 155a93a0e0ea52316567b0eaea37b8da4c80d7be)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:39 -07:00
Peter Marko
f09c292577 binutils: patch CVE-2025-11082
Pick patch per link in NVD report.

(From OE-Core rev: fe40f3c025d31b262582e0ec9e7b688ae82ee0e6)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:39 -07:00
Saravanan
2ab1bedda9 python3-xmltodict: fix CVE-2025-9375
Reference:
	https://nvd.nist.gov/vuln/detail/CVE-2025-9375
	https://security-tracker.debian.org/tracker/CVE-2025-9375
	https://git.launchpad.net/ubuntu/+source/python-xmltodict/commit/?id=e8110a20e00d80db31d5fc9f8f4577328385d6b6

Upstream-patch:
	ecd456ab88
	f98c90f071

(From OE-Core rev: 30624cce634cade0b030aa71a03be754abbf3da9)

Signed-off-by: Saravanan <saravanan.kadambathursubramaniyam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:39 -07:00
Peter Marko
a04f9ab3a5 qemu: patch CVE-2024-8354
Pick commit per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2024-8354

(From OE-Core rev: 4bab523ed8ee34e8c09deb631fc82417aa0784b9)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:39 -07:00
Steve Sakoman
f16cffd030 build-appliance-image: Update to scarthgap head revision
(From OE-Core rev: 7af6b75221d5703ba5bf43c7cd9f1e7a2e0ed20b)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
yocto-5.0.13 scarthgap-5.0.13
2025-10-13 12:48:55 -07:00
Steve Sakoman
517a1206e0 poky.conf: bump version for 5.0.13
(From meta-yocto rev: 3ff7ca786732390cd56ae92ff4a43aba46a1bf2e)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:46:28 -07:00
Steve Sakoman
2eb674803a oeqa/sdk/cases/buildcpio.py: use gnu mirror instead of main server
ftp.gnu.org is the main server of the GNU project, however download speed
can vary greatly based on one's location.

Using ftpmirror.gnu.org should redirect the request to the closest up-to-date mirror,
which should result sometimes in significantly faster download speed, depending
on one's location. This should also distribute the traffic more across the mirrors.

This information was sourced from https://www.gnu.org/prep/ftp.html

(From OE-Core rev: b0ce480eca6397fab71082ed202c3cf9dd02456f)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Steve Sakoman
6e74167ad4 selftest/cases/meta_ide.py: use use gnu mirror instead of main server
ftp.gnu.org is the main server of the GNU project, however download speed
can vary greatly based on one's location.

Using ftpmirror.gnu.org should redirect the request to the closest up-to-date mirror,
which should result sometimes in significantly faster download speed, depending
on one's location. This should also distribute the traffic more across the mirrors.

This information was sourced from https://www.gnu.org/prep/ftp.html

(From OE-Core rev: aa7ff5a115f55c092f8ca5badad63734c8f4f5b7)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Gyorgy Sarvari
697d7cc740 conf/bitbake.conf: use gnu mirror instead of main server
ftp.gnu.org is the main server of the GNU project, however download speed
can vary greatly based on one's location.

Using ftpmirror.gnu.org should redirect the request to the closest up-to-date mirror,
which should result sometimes in significantly faster download speed, depending
on one's location. This should also distribute the traffic more across the mirrors.

This information was sourced from https://www.gnu.org/prep/ftp.html .

(From OE-Core rev: ef14bcae0f3f27acdd4e591fac69515aa912f194)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit d8c6f01d7467e018aa0ed27a87850d9e4434a47a)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
2f0df0334a openssl: upgrade 3.2.4 -> 3.2.6
3.2.6 has fixed 3.2.5 regression which broke python3 ptests so we can
upgrade now. We can also drop CVE-2025-27587 patch which was taken
instead of 3.2.5 upgrade under:
https://github.com/openssl/openssl/pull/28198

Release information:
https://github.com/openssl/openssl/blob/openssl-3.0/NEWS.md#major-changes-between-openssl-3017-and-openssl-3018-30-sep-2025

OpenSSL 3.2.6 is a security patch release. The most severe CVE fixed in this release is Moderate.
This release incorporates the following bug fixes and mitigations:
* Fix Out-of-bounds read & write in RFC 3211 KEK Unwrap. (CVE-2025-9230)
* Fix Timing side-channel in SM2 algorithm on 64 bit ARM. (CVE-2025-9231)
* Fix Out-of-bounds read in HTTP client no_proxy handling. (CVE-2025-9232)

Release information:
https://github.com/openssl/openssl/blob/openssl-3.2/NEWS.md#major-changes-between-openssl-324-and-openssl-325-1-jul-2025

OpenSSL 3.2.5 is a bug fix release.
This release incorporates the following bug fixes and mitigations:
* Miscellaneous minor bug fixes.

(From OE-Core rev: ef6bbf39c10ff7bd8ad36d5d2f59ddd0756e0141)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Aleksandar Nikolic
9dafc77bd8 scripts/install-buildtools: Update to 5.0.12
Update to the 5.0.12 release of the 5.0 series for buildtools

(From OE-Core rev: 2f69dceeebbb67ce06ceda8782a60a71a0ed7f22)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic@zeiss.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Archana Polampalli
e085cf0d53 go: fix CVE-2025-47906
If the PATH environment variable contains paths which are executables
(rather than just directories), passing certain strings to LookPath
("", ".", and ".."), can result in the binaries listed in the PATH
 being unexpectedly returned.

(From OE-Core rev: ed6df1883225ec08e637a0d7a15a6a5da4665d8d)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
8c8680d4c0 ffmpeg: ignore 8 CVEs fixed in 6.1.1 and 6.1.3 releases
Following are mentioned in commit upgrading the recipe to 6.1.3:
* CVE-2023-49502 CVE-2023-50007 CVE-2023-50008 CVE-2024-31578 CVE-2024-31582

Following are fixed via mentioned commits already in 6.1.1:
* CVE-2023-50009: 162b4c60c8
* CVE-2023-50010: e809c23786
* CVE-2024-31585: 3061bf668f

(From OE-Core rev: 8286570b3baf275ff48c45ca0864348a8d3faa01)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
ac57f3b9d2 tiff: ignore 5 CVEs
These CVEs are for tools which were removed in v4.6.0 via [1] and
re-introduced again in v4.7.0 via [2].

[1] eab89a627f
[2] 9ab54a8580

(From OE-Core rev: faf1e12ae0f9de56402830460315e5be0d13f4a5)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Ross Burton
aca68169cc pulseaudio: ignore CVE-2024-11586
As per the linked ticket, this issue is related to an Ubuntu-specific
patch that we don't have.

(From OE-Core rev: dc81fdc6bdf8ab39b7f2fd994d50256430c36558)

(From OE-Core rev: 72e63e44a0c6ad5a408c4dc59a24288c36463439)

(From OE-Core rev: 4cdcb27238be40e815ce5a0b67ce419331079801)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
da7d29485c expat: follow-up for CVE-2024-8176
Expat release 2.7.3 implemented a follow-up for this CVE.
References:
* https://github.com/libexpat/libexpat/blob/R_2_7_3/expat/Changes
* https://security-tracker.debian.org/tracker/CVE-2024-8176
* https://github.com/libexpat/libexpat/pull/1059

(From OE-Core rev: 5bbb9ee52674f5aa6eed5d6cf3f515704092994d)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
9fb26deedd ghostscript: patch CVE-2025-59800
Pick commit mentioned in the NVD report.

(From OE-Core rev: a63bb2ccc8294c8a97f5957f1ca9f0a4880713ac)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
0db5ae637d ghostscript: patch CVE-2025-59799
Pick commit mentioned in the NVD report.

(From OE-Core rev: 2f1d5b9ad1af6d2b28e9e7b46aadd879a67b8fc6)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
7698e2910d ghostscript: patch CVE-2025-59798
Pick commit mentioned in the NVD report.

(From OE-Core rev: 4a2f47d9541d7a13da7a9ce16bd5088870c45ec4)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
8a80300d0f gstreamer1.0: ignore CVE-2025-2759
Copy statement from [1] that it is problem of installers (non-Linux).
Also [2] linked in NVD says "Fixed in 1.25.1 Gstreamer Installer".
Since Yocto builds from sources into our own packages, ignore it.

[1] https://security-tracker.debian.org/tracker/CVE-2025-2759
[2] https://www.zerodayinitiative.com/advisories/ZDI-25-268/

(From OE-Core rev: 99ee1df6bde2ffd4fa2ddea44c0a9b94d9d77bae)

(From OE-Core rev: 7937625a30f6046ba483a000497b15169659f5eb)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
bb7e27a5db gstreamer1.0: ignore CVEs fixed in plugins
All these CVEs were fixed in recent commits.

(From OE-Core rev: c5a68886247d4417de4ecaa8460e25e84ab93b0d)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:57 -07:00
Hitendra Prajapati
09dadcefe3 grub2: mark CVE-2024-2312 as not applicable
This issue is specific to the peimage module that Ubuntu add, and is not
an upstream issue.

(From OE-Core rev: 8d2fe3f403e6435e1ffe122a6776381090752d8a)

(From OE-Core rev: d005eda88dad37f31bdc59e45e20b209f3771a26)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:57 -07:00
Peter Marko
a981860c32 busybox: patch CVE-2025-46394
Pick commit mentioning this CVE.
Additionally fix test broken by the CVE fix.

(From OE-Core rev: e348e10f35cc082ebfe22c890c5f64c4a06dcea3)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:57 -07:00
Adam Blank
fbc7beca68 ref-manual/variables.rst: fix the description of STAGING_DIR
There is no single "recipe-sysroots" directory, but rather many
"recipe-sysroot*" directories.

(From yocto-docs rev: 6f086fd3d9dbbb0c80f6c3e89b8df4fed422e79a)

Signed-off-by: Adam Blank <adam.blank.g@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f2d6e228409cb1dd1dbf339c405699ac6d3900be)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Antonin Godard
8e94da9219 ref-manual/structure: document the auto.conf file
Add documentation for auto.conf, which is used by external tools for
automatically setting variables.

(From yocto-docs rev: c16beccd7fa836a6bc77bb0a9d3274508bd3c6ff)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 134e54a75e0144c4629f702c6f43e92ed1f12dce)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Talel BELHAJ SALEM
a405b570b3 dev-manual/building.rst: add note about externalsrc variables absolute paths
(From yocto-docs rev: ab776a0348877d8dbf6c37823a65715fe30e34f6)

Signed-off-by: Talel BELHAJ SALEM <bhstalel@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 33166d70b6ad093bd95ffccafc0b07820682f656)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Adam Blank
ec2689b334 ref-manual/variables.rst: fix the description of KBUILD_DEFCONFIG
Remove some leftover confusing mention of KMACHINE.

(From yocto-docs rev: fd6f21b40b7fb58e7b465bbe97b8308f7a09313d)

Signed-off-by: Adam Blank <adam.blank.g@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 582ee9e0b4930aea03255542b3d3913df19af8b0)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Adam Blank
77c866901d kernel-dev/common.rst: fix the in-tree defconfig description
The description of the relation between KBUILD_DEFCONFIG and
SRC_URI is reversed. In fact it is the SRC_URI provided
defconfig which will be dropped by the kernel-yocto class
if both are provided.

(From yocto-docs rev: 3dc8212748d014f0b2cd1bb6777404bafe6d5a58)

Signed-off-by: Adam Blank <adam.blank.g@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a808420655a0976ba08f013f468cf80f379b1d89)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Adrian Freihofer
ea119eaa46 expect: fix native build with GCC 15
This does not work for native builds:
  CFLAGS += "-std=gnu17"
The line from native.bbclass gets priority:
  CFLAGS = "${BUILD_CFLAGS}"

From bitbake-getvar -r expect-native CFLAGS
  ...
  append ...poky/meta/recipes-devtools/expect/expect_5.45.4.bb:44
     "-std=gnu17"
  set ...poky/meta/classes-recipe/native.bbclass:44
     "${BUILD_CFLAGS}"
  ...

(From OE-Core rev: 2696c50af9946f425ccaf7d0e7e0eb3fd87c36bb)

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Khem Raj
ddda72f2bd expect: Fix build with GCC 15
Stick to C17 standard as GCC 15 switches to C23

(From OE-Core rev: a1ac756f2f55c4f27a95cb8b1e63ee2db06dd327)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Ross Burton
b95695a302 expect: cleanup do_install
Clean up the do_install append, and remove a long-standing unused
variable that appears to be intending to not install the scripts but
would have never actually done that as the relevant override since 2008
has been task-install.  As we've been installing the scripts, keep
instaling them.

(From OE-Core rev: 10a501b3bfe8f73ce2eb15673900df71e547b54d)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Ross Burton
e49d690cf1 expect: don't run aclocal in do_configure
expect has a hand-maintained aclocal.m4 so don't run aclocal, which has the
side effect of not deleting the aclocal.m4 file which pulls in macros.

The build works without this change more through luck and a combination
of behaviours than design.

(From OE-Core rev: 61dbfd66210b090ec8abfbf1f4688e5691299d68)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Ross Burton
357a4beab6 expect: update code for Tcl channel implementation
Tcl 8.4.0 changed the channel implementation, take a patch submitted
upstream to update the code for the new interface and remove the silencing
of the incompatible assignment error which was due to this issue.

(From OE-Core rev: 20cadf7b66f30e8a3b409b4a96eced614ac21013)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Adrian Freihofer
c8a81cd75f expect: Revert "expect-native: fix do_compile failure with gcc-14"
In the meantime there is a cleaner fix on the master branch and we also
need to back-port more patches to support gcc-15 as well.

This reverts commit 8bfdb53247 which is
not in the master branch as a preparation for cherry-picking the newer
fixes from there.

(From OE-Core rev: 4ea89ba363228aa5e16412f85644608f4c645d5f)

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:45 -07:00
Vijay Anusuri
6a8b1708e0 gstreamer1.0-plugins-bad: Fix CVE-2025-3887
Upstream-Status: Backport from
5463f0e097
& bcaab36098

(From OE-Core rev: 7ef632c2a85e42c16b5509edec822705a236cafb)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:45 -07:00
Yogita Urade
2ce56bd707 tiff: fix CVE-2025-9900
A flaw was found in Libtiff. This vulnerability is a "write-what-where"
condition, triggered when the library processes a specially crafted TIFF
image file.[EOL][EOL]By providing an abnormally large image height value
in the file's metadata, an attacker can trick the library into writing
attacker-controlled color data to an arbitrary memory location. This
memory corruption can be exploited to cause a denial of service (application
crash) or to achieve arbitrary code execution with the permissions of the user.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-9900

Upstream patch:
3e0dcf0ec6

(From OE-Core rev: c1303b8eb4e85a031a175867361876a256bfb763)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:45 -07:00
Antonin Godard
eae801c832 test-manual/yocto-project-compatible.rst: fix a typo
Fix a typo in yocto-project-compatible.rst.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 6b248c541580eadab663f605ce6310302d7a2dae)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a84c234acfedfa714419006c743405e2f9acaedc)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Quentin Schulz
e9069b0404 contributor-guide: submit-changes: make "Crediting contributors" part of "Commit your changes"
There's no need to differentiate crediting contributors from committing
your changes, so let's simply make it the last step of "Commit your
changes" section.

This simply indents the text so it's now part of "Commit your changes"
list instead of the main list in the "Implement and commit changes"
section. Because of this reorganisation, the instruction to use "git
commit --amend" to add the contributors is moved to a note, and the
first few sentences are reworded to better match the wording of other
items in the "Commit your changes" list of instructions.

(From yocto-docs rev: 6ba61d7bc3e641b3d4194f2d99a276f3b29f82b8)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit eff4d14e28d323ebfdaeb0c5c805b5f1e2ad153d)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00