Linux Kernel 6.12.105

The 115 most recent commits in this release — the full changelog is longer:

• Linux 6.12.105
• net: ethernet: mtk_eth_soc: improve support for named interrupts
• net: ethernet: mtk_eth_soc: only use legacy mode on missing IRQ name
• ALSA: hda/realtek: Enable headset mic on F+ FLAPTOP r
• ring-buffer: Use current_context for safe per-CPU buffer swap
• ring-buffer: Remove jump to out label in ring_buffer_swap_cpu()
• ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS
• net: harmonize tstats and dstats
• binfmt_misc: use exe_file_deny_write_access() for the interpreter clone
• fs: unlock the superblock during iterate_supers_type
• perf/core: Fix group leader use-after-free after sibling detach
• perf: Unify perf_event_free_task() / perf_event_exit_task_context()
• erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms
• drm/xe/oa: Fix sync entry leak on OA config emit failure
• net/sched: cls_bpf: reject dev-bound programs bound to a different device
• net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
• m68k: Define NR_CPUS to 1
• net/sched: cls_u32: skip hash tables in u32_bind_class()
• net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain
• af_packet: Don't send zero-byte data in tpacket_snd().
• ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers
• net/tls: Fail tls_sw_splice_read() after a failed async decrypt
• net: packet: fix wrong transport_header when sending VLAN-tagged frame
• tcp: fix icsk_ack.ato bitfield overflow
• veth: fix queue index used to wake the peer txq in veth_poll
• macvlan: inherit needed_headroom and needed_tailroom from lowerdev
• ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
• netfilter: ipset: let destroy callbacks adjust ext mem size
• netfilter: ipset: fix list type element drift bug
• netfilter: flowtable: publish GC-visible tuple last
• netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
• netfilter: ipset: fix refcount race between list:set GC and swap
• crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()
• crypto: ccm - Set rfc4309 maxauthsize from child
• arm64: tegra: Add EL2 virtual timer interrupt for Tegra194
• net/x25: fix use-after-free of the socket by its timers
• ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup
• x86/mce: Set up the polling timer before CMCI discovery
• x86/mce: Set CR4.MCE last during init
• x86/mce: Remove __mcheck_cpu_init_early()
• ring-buffer: Prevent resizing of persistent ring buffer
• ring-buffer: Make ring_buffer_{un}map() simpler with guard(mutex)
• ring-buffer: Simplify ring_buffer_read_page() with guard()
• KVM: SVM: Serialize accesses to the owner and mirror list with separate lock
• mm/ptdump: always stabilise against page table freeing using init_mm
• mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF
• mm/pagewalk: split walk_page_range_novma() into kernel/user parts
• ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()
• ring-buffer: Simplify functions with __free(kfree) to free allocations
• drm/vmwgfx: take fman->lock around fence list mutation in fifo_down
• net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()
• drm/amd/pm: fix pptable use-after-free
• drm/amd/pm: adjust the visibility of pp_table sysfs node
• drm/amdgpu: move debug_vm handling to amdgpu_cs_parser_fini
• drm/amdgpu: remove unused function parameter
• drm/amd/pm: fix torn gpu metrics reads
• drm/amd/pm: Use macro to initialize metrics table
• drm/amd/pm: Use same metric table for APU
• can: rcar_canfd: change the initializing flow for clocks and resets
• cifs: add fscache_resize_cookie() to cifs_setsize()
• smb: client: fix race with fallocate(2) and AIO+DIO
• include/linux/fs.h: add inode_lock_killable()
• ice: fix VF interrupts cleanup
• vxlan: use pskb_network_may_pull() for transmit path header pulls
• vxlan: Handle stats using NETDEV_PCPU_STAT_DSTATS.
• vrf: Make pcpu_dstats update functions available to other modules.
• binfmt_misc: restore write access when removing an entry
• fs: don't block write during exec on pre-content watched files
• fsnotify: opt-in for permission events at file open time
• fsnotify, lsm: Decouple fsnotify from lsm
• binfmt_misc: don't leak the user namespace when the mount fails
• net: pktgen: fix proc entry use-after-free
• net: pktgen: fix code style (WARNING: Block comments)
• ksmbd: reject repeated SMB2 NEGOTIATE requests
• ksmbd: conn lock to serialize smb2 negotiate
• igc: remove napi_synchronize() in igc_down()
• ata: libata-scsi: terminate deferred commands on time out
• ASoC: tas2562: Validate values for volume writes
• KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs
• btrfs: zoned: fix missing chunk metadata reservation
• btrfs: remove fs_info argument from btrfs_zoned_activate_one_bg()
• btrfs: add space_info argument to btrfs_chunk_alloc()
• btrfs: add debug build only WARN
• iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on replace
• tcp: challenge ACK for non-exact RST in SYN-RECEIVED
• tcp: reorganize tcp_sock_write_txrx group for variables later
• tcp: fast path functions later
• tcp: Pass flags to __tcp_send_ack
• eventpoll: pin files while checking reverse paths
• ksmbd: validate minimum PDU size for transform requests
• smb/server: fix minimum SMB2 PDU size
• smb/server: fix minimum SMB1 PDU size
• ksmbd: rename smb2_get_msg to smb_get_msg
• smb/server: rename include guard in smb_common.h
• smb: move get_rfc1002_len() to common/smbglob.h
• smb: move smb_version_values to common/smbglob.h
• super: fix emergency thaw deadlock on frozen block devices
• fs/super: fix emergency thaw double-unlock of s_umount
• super: use common iterator (Part 2)
• super: use a common iterator (Part 1)
• super: skip dying superblocks early
• super: remove pointless s_root checks
• net/sched: serialize qdisc_rtab_list against concurrent get/put
• libceph: fix two unsafe bare decodes in decode_lockers()
• userfaultfd: prevent registration of special VMAs
• mm/khugepaged: guard is_zero_pfn() calls with pte_present()
• libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE
• libceph: Amend checking to fix make W=1 build breakage
• ceph: fix hanging __ceph_get_caps() with stale mds_wanted
• ceph: avoid fs reclaim while using current->journal_info
• ceph: fix writeback_count leak in write_folio_nounlock()
• ceph: Convert writepage_nounlock() to write_folio_nounlock()
• ceph: Convert ceph_find_incompatible() to take a folio
• ceph: Use a folio in ceph_page_mkwrite()
• ceph: Remove ceph_writepage()