XanMod Kernel 6.18.46-xanmod1

6.18.46-xanmod1
Fixed 18
  • Enable headset mic on F+ FLAPTOP r
  • Initialize page array to use alloc_pages_bulk() correctly in firewire ohci
  • Set surface-framebuffer GEM objects in drm/vmwgfx
  • Fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms
  • Mark device ready before registering the controller in spi virtio
  • Fix infinite loop when scale is too large for display in drm/log
Removed 1
  • Remove drm_client_framebuffer_delete() function
Deprecated 1
  • Deprecate struct drm_client_buffer.gem

From XanMod Kernel

  • d3fea146457b Linux 6.18.46-xanmod1
  • 8c0d3dba26dc Merge tag 'v6.18.46' into 6.18
  • 1f99e9ab748f Linux 6.18.46
  • b7ce4b3bc106 ALSA: hda/realtek: Enable headset mic on F+ FLAPTOP r
  • 192f44513a03 firewire: ohci: initialize page array to use alloc_pages_bulk() correctly
  • e5e6ce7009a6 drm/vmwgfx: Set surface-framebuffer GEM objects
  • 7e351209dc2f erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms
  • 67ac7e01c26b spi: virtio: mark device ready before registering the controller
  • a7d172b27aa3 drm/log: Fix infinite loop when scale is too large for display
  • a6325e2807dc drm/client: Remove drm_client_framebuffer_delete()
  • 329731b3119f drm/client: Deprecate struct drm_client_buffer.gem
  • 0763282e689e drm/client: Inline drm_client_buffer_addfb() and _rmfb()
  • 60f1a2ecdf8b drm/client: Move dumb-buffer handling to drm_client_framebuffer_create()
  • 841bc853a2b1 drm/client: Remove pitch from struct drm_client_buffer
  • 16a2716910ec drm/log: Fix out-of-bounds read on empty message length
  • 948f346fe36e drm/xe/oa: Fix sync entry leak on OA config emit failure
  • ed5470771c7e firewire: ohci: fix NULL pointer dereference in ar_context_release
  • 384d9f04b38f firewire: ohci: split page allocation from dma mapping
  • adb3e7c26a51 net/sched: cls_bpf: reject dev-bound programs bound to a different device
  • 1f493c44a2f0 accel/amdxdna: Skip unmapped range in aie2_populate_range()
  • 72e4e3d7efc3 net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
  • 6cf600b276a5 regmap: sdw-mbq: don't call an unset readable_reg callback
  • c27eed546ae2 m68k: Define NR_CPUS to 1
  • 31f26a95eeee net/sched: cls_u32: skip hash tables in u32_bind_class()
  • abceabc4408f net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain
  • 98c5914d6b7b af_packet: Don't send zero-byte data in tpacket_snd().
  • 37c5ccaaacd4 regmap: sdw-mbq: Fix swap of timeout and retry times
  • f51a540b14ee ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers
  • 82d9269f01eb net/tls: Fail tls_sw_splice_read() after a failed async decrypt
  • cef4c5b9aca2 net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling
  • 5ffaa5d7f56a net: tap: fix wrong transport_header when sending VLAN-tagged frame
  • f9297abbcaba net: packet: fix wrong transport_header when sending VLAN-tagged frame
  • 0af3afd054e7 net: phy: realtek: fix EEE advertisement write on the internal PHY MMD path
  • 17e3181d740d tcp: fix icsk_ack.ato bitfield overflow
  • 73f8dd22b1e5 veth: fix queue index used to wake the peer txq in veth_poll
  • 96fa90b74385 macvlan: inherit needed_headroom and needed_tailroom from lowerdev
  • 5f33188457bb ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
  • 1072f0f44282 eth: bnxt: keep the aRFS rmap updated when TPH is enabled
  • 394f1b16c5d1 eth: bnxt: cancel IRQ notifier before freeing affinity mask
  • a26a1be1b654 netfilter: ipset: let destroy callbacks adjust ext mem size
  • 29c011b3537d netfilter: ipset: fix list type element drift bug
  • d9d3050a70ef netfilter: flowtable: publish GC-visible tuple last
  • 4a923fe60939 netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
  • cb20da33839f netfilter: ipset: fix refcount race between list:set GC and swap
  • 9e75e7da4374 ASoC: tas2781: fix clang build error for goto bypassing cleanup variable
  • 24d0f33f5415 gpio: ml-ioh: share the register lock across channels
  • 7a03413f31c1 perf: Reject exited events as group leaders
  • 6c85d169eeec riscv: ftrace: Fix ftrace_modify_call failure on kprobed functions
  • a3a676495c64 ovpn: finish crypto callback cleanup before peer release
  • a47a080d06ee ovpn: fix NULL dereference when killing missing key
  • 99a18e1d979e crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()
  • 3e4bf50c9451 crypto: ccm - Set rfc4309 maxauthsize from child
  • d9ecc9787e11 arm64: tegra: Add EL2 virtual timer interrupt for Tegra194
  • a4e340971fe8 NTB: ntb_netdev: Preserve RX queue depth on allocation failure
  • 08437c5156b0 net: ntb_netdev: Introduce per-queue context
  • 2a7d8fc0fd50 ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup
  • 8c685df5c3b2 drm/amd/pm: fix pptable use-after-free
  • 2895aeb4327c drm/amd/pm: adjust the visibility of pp_table sysfs node
  • 7755be923e32 mm/page_table_check: skip special zero mappings
  • 4ae625d16eef ring-buffer: Prevent resizing of persistent ring buffer
  • 54fc67500ad1 ring-buffer: Store bpage pointers into subbuf_ids
  • 27d7fcaf237d ring-buffer: Add helper functions for allocations
  • 2ca6b43edf83 sched_ext: Take cgroup_lock() first in scx_cgroup_lock()
  • f786e6652b93 sched_ext: Reorganize enable/disable path for multi-scheduler support
  • 0907f81536f7 sched_ext: Update p->scx.disallow warning in scx_init_task()
  • 4a7e941ca29a futex: Fix race in futex_pivot_pending() during private hash resize
  • 870f8392b284 can: rcar_canfd: change the initializing flow for clocks and resets
  • 45bf067681ad can: rcar_canfd: Extract rcar_canfd_global_{,de}init()
  • e7a4ca927857 can: rcar_canfd: Use devm_clk_get_optional() for RAM clk
  • f8c8c81707d1 can: rcar_canfd: Invert global vs. channel teardown
  • 562d4befa935 can: rcar_canfd: Invert reset assert order
  • 867aed6a4848 binfmt_misc: don't leak the user namespace when the mount fails
  • 4c8d7595a10a ata: libata-scsi: terminate deferred commands on time out
  • db488d653d89 ASoC: tas2562: Validate values for volume writes
  • 5f0a99ea7212 KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs
  • ef60eca789ee userfaultfd: wait on source PMD during UFFDIO_MOVE
  • ea563ed2b10a mm: replace pmd_to_swp_entry() with softleaf_from_pmd()
  • 54a09573eb44 fs/proc/task_mmu: refactor pagemap_pmd_range()
  • 549148d5aa4e btrfs: zoned: fix missing chunk metadata reservation
  • 58ae8b7e8dc8 btrfs: remove fs_info argument from btrfs_zoned_activate_one_bg()
  • d9e9753dfd43 ksmbd: validate minimum PDU size for transform requests
  • 15a2fedb5dff smb/server: fix minimum SMB2 PDU size
  • 23d34ce11885 smb/server: fix minimum SMB1 PDU size
  • 5649004f7161 ksmbd: rename smb2_get_msg to smb_get_msg
  • 29dbb4e29e1f ksmbd: Fix to handle removal of rfc1002 header from smb_hdr
  • df3cf61adbe6 smb/server: rename include guard in smb_common.h
  • 9d154c3c0f5d smb: move get_rfc1002_len() to common/smbglob.h
  • 8ddc2eb0d2da net/sched: serialize qdisc_rtab_list against concurrent get/put
  • 89df5d71f83f libceph: fix two unsafe bare decodes in decode_lockers()
  • 590b07ceea13 libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE
  • 89a50fb32d69 libceph: Amend checking to fix make W=1 build breakage
  • a3bc6b3e9ef3 ceph: fix hanging __ceph_get_caps() with stale mds_wanted
  • 79d95b43ca09 ceph: avoid fs reclaim while using current->journal_info
  • bb13785d5499 xfs: check v5 superblock features early
  • 04228b8ba196 xfs: check xfarray iteration errors when committing unlinked inode lists
  • 33b56c6c465a xfs: don't ignore runtime errors in xrep_iunlink_reload_next
  • 38a4dbe588bd xfs: don't swallow dquot recovery verification errors
  • 0f27b22343b6 xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN
  • cd1f876d1bc2 xfs: avoid UAF on sc->tempip in xrep_tempfile_create
  • e75150d494dc xfs: don't return EFSCORRUPTED when scrubbing corrupt parent pointers
  • b6baf0db357f xfs: fix another iunlink infinite loop bug in online fsck
  • fc7d8a5c5fcc xfs: fix allocated inodes that show up in the unlinked list
  • c36d7f68f1c2 xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair
  • 73ffd2620df3 xfs: don't zap the attr fork on repair when there are queued pptr updates
  • 514a5d42d418 xfs: fix ilock leak on error in xfs_dq_get_next_id
  • 9680b1929d89 xfs: load next_agino from the correct xfarray in xrep_iunlink_relink_prev
  • 8b52fa8fb3ab xfs: nlink scrub must take IOLOCK before determining ILOCK state
  • 7d1d82c463e2 xfs: pass runtime errors from xrep_iunlink_mark_ondisk_rec up to callers
  • ab4e13337076 xfs: set the prev pointer when reinserting an inode on the unlinked list
  • ce2a7006ec5e xfs: don't double-lock when deleting a self-referential directory
  • 983588e756a3 xfs: only check mergeability of bnobt records
  • 62c0b1435dfe xfs: zero i_nlink before repair puts inode on unlinked list
  • a9114c6d4ec2 xfs: fix transaction block reservation in xrep_rtbitmap
  • 90a49b8fcf82 xfs: check cowextsize in xrep_inode_cowextsize
  • 069c0eadc8df xfs: clear zapped attr fork state when bmap repair finds no attr fork
  • aeadf3fd2dc3 xfs: mark nonzero sb_gquotino as corrupt on metadir filesystems
  • f8288214459e xfs: bounds-check buffer log item's dirty bitmap
  • 8a0ecae2ecda xfs: fix off-by-one in rtrefcount btree root level validation
  • ec19cea4ef1c xfs: propagate errors from xfs_rtginode_load
  • 71aa45f7bfe4 drm/amdgpu: disallow multiple FENCE chunks in one submit
  • 25ee120f3803 drm/amdgpu: Fix UVD decode image min size calculation
  • 38914cb2c6af drm/amdgpu: Fix UVD dpb min size calculation for H264
  • c76e5cca0675 drm/amdgpu: Fix UVD min buffer sizes
  • 86a5cb020322 drm/amdgpu: Implement insert_end for VCE 3
  • 339deb76ee48 drm/amdgpu: Reject UVD message with dimensions above 4096
  • 220aa2589d73 drm/amdgpu: validate GEM_CREATE domain combinations
  • a082bd76c5f2 drm/amdgpu: check ASPM on the dGPU host link
  • 916e8a1550be drm/amdgpu: fix nbif 6.3.1 l1 low power not functional
  • e304c3e0d9ce drm/amdgpu: Reject UVD message with invalid number of h265 refs
  • e3e6a631dcb1 drm/amd/display: fix BT.2020 YCbCr output CSC matrices for DCE
  • cd99fa1cbaf5 drm/amd/display: fix BT.2020 YCbCr limited output CSC matrix
  • 5045fb4c70bf drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank()
  • 95c1de6923b0 s390/zcrypt: Fix CPRB memory allocation in zcrypt misc code
  • 7902be374cbf s390/vfio_ccw: Implement a crw lock
  • 3b224d3c50a3 s390/vfio_ccw: Calculate idal length based on idaw type
  • b6aecea4b2b2 s390/vfio_ccw: Selectively expand io_mutex
  • af1759d8e6e6 s390/vfio_ccw: Move cp cleanup out of not operational
  • 4c2e1d359d7a s390/vfio_ccw: Fix out of bounds check on CCW array
  • 08ef2a821156 s390/vfio_ccw: Ensure first IDAW remains constant
  • 649badf3a2fd s390/vfio_ccw: Ensure index for read/write regions are within range
  • b7ae0f799386 s390/vfio_ccw: Cancel existing workqueues
  • 06f4d6e5a8af s390/vfio_ccw: Limit the number of channel program segments
  • 32e3d364a7b8 s390/vfio_ccw: Free all memory if cp_init() fails
  • 45aa38567c79 eth: bnxt: make sure we populate the qcfg defaults on old FW/HW
  • 0382ed41c664 eth: bnxt: always set the queue mgmt ops
  • 31ef57083e78 drm/radeon: fix autosuspend cleanup during teardown
  • 361114857813 drm/xe: Fix xe_device_probe() failure
  • 7b90db6f024b drm/xe: Order ring writes before ring tail updates
  • 198b4a89b903 pmdomain: mediatek: Fix mt8183 hang on boot
  • 8f7f7a6d5aed mmc: loongson2: Fix sg iteration in data reorder functions
  • e5b527804a1e drm/connector/hdmi: Fix out of bounds memory read
  • b5060ff2f546 mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition
  • 78e59ab34337 pmdomains: mediatek: Avoid setting RTFF's CLK_DIS before NRESTORE
  • 7c0d1767ce46 mmc: sdhci: make tuning_err a signed int
  • 970b9c83a07c pmdomain: mediatek: fix remaining %pOF after of_node_put()
  • 36d1b69c5c69 mmc: sdhci: unmap the bounce buffer before device release
  • 0418b7ed2c1c mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit
  • b37e84280045 libceph: tolerate addrvecs with multiple entries of the same type
  • 4490fad7992a ceph: fix MDS random selection readiness predicate
  • 4f392fec0755 libceph: Avoid using invalid osd indices from primary_temp
  • f3854719fba9 Input: sur40 - fix V4L error path cleanup
  • 5c1c5227c93f Input: sur40 - fix input device registration ordering
  • a88d688be8d7 openrisc: signal: do not restore privileged SR bits on sigreturn
  • f634598e8fb7 ftrace: Fix off-by-one fentry site disable in ftrace_free_mem()
  • f8fe843a9634 ftrace: Protect direct_functions in ftrace_find_rec_direct
  • d1bba38574d0 libceph: fix multiple unsafe decodes in decode_locker()
  • ebdecef6fd84 pmdomain: arm: Fix -EINVAL from scmi_pd_set_perf_state() on state 0
  • bc7934d0acd4 gpio: ml-ioh: use raw_spinlock_t for the register lock
  • 9e678cffc11c gve: fix zero-length skb frag with header-split
  • bd4e5a97edf8 selftests/ftrace: Convert ELF entry point to file offset in uprobe test
  • 23e9f32c0c7d gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind
  • e9482feeed66 gve: fix NULL dereference due to missing ptp adjfine
  • a134e4b8102c crypto: qce - fix error path in devm_qce_register_algs
  • ef92c0ad0268 crypto: starfive - use scatterlist length before DMA mapping
  • 38e7d5c1ade0 Input: hynitron_cstxxx - validate touch count and finger IDs
  • 70f9aad39435 Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue
  • ff0849705d29 Input: synaptics-rmi4 - block s_input when F54 queue is busy
  • 6b06aab79ff1 Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer
  • b28593a05afd Input: synaptics-rmi4 - zero report size on F54 work error
  • 828a8d1a9107 powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak
  • 2bdec532202b powerpc/pseries: lparcfg - fix kbuf[] underflow
  • 8dbfd8e32a13 Input: byd - synchronize timer deletion before freeing private data
  • a64a8b6b31cd Input: iforce - validate input packet lengths
  • e7b8a107ecad Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard
  • 8d622c58205a Input: psxpad-spi - set driver data before use
  • 83c265bfc084 Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet
  • 9b184c8337c6 Input: synaptics-rmi4 - fix F55 transmitter electrode count typo
  • 652e952850d9 powerpc/pseries: pci - logic bug
  • 52a818c586ae Input: cs40l50-vibra - validate custom data from user space
  • 455dbb5bdd81 Input: xpad - add support for ZENAIM LEVERLESS
  • 6635d544bd6b ASoC: SOF: topology: Use acpi mach from the machine driver
  • bcc66461f574 drm/amdgpu: fix aperture iounmap skipped on device removal
  • dffacbe8118f drm/amdgpu: fix JPEG v4.0.5 queue reset failure in DPG mode
  • e45356f6adae drm/amdgpu: fix JPEG v5.0.0 queue reset failure in DPG mode
  • 4550b90bd2e6 drm/amdgpu: read TRUNCATE_COORD_MODE on gfx12
  • 1474f3970d1a drm/amdgpu: reject oversized IBs with per-ring packet limits
  • 25556a46ae6e drm/panthor: skip zero-sized firmware sections
  • 7ff87a01ae3a fbdev: core: Fix pointer desynchronization in fb_io_read()
  • 2fe7a89b2b5b ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses
  • cc61f0fa2c71 ASoC: cs35l41: sort the register default table
  • 3298f13d1f12 ASoC: cs35l45: sort the register default table
  • d7bd683b0d90 ASoC: cs4265: sort the register default table
  • f2435a46dfa1 ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout
  • 8cba53b862e1 ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()
  • a30836477479 s390/qeth: validate user buffer length in SNMP and ARP query ioctls
  • 75e564b2ced1 mptcp: fastopen: only mark MPTFO subflows with SYN data
  • 3f8e5eb0c499 mptcp: pm: fix data race in add_addr timer callback
  • 1fade1b2ac5b mptcp: options: reset DSS fields in case of unexpected size
  • a04dcc784959 mptcp: avoid combining some incoming suboptions
  • 0cb3846c26c1 selftests: mptcp: join: mark tests with data corruption as failed
  • 473f1a5ab2ab mptcp: reclaim forward-allocated memory on RX path errors
  • 9b46fba7528f selinux: reject a permission value exceeding the class permission count
  • 841aea4d5a25 selinux: reject an unclaimed class value in security_get_classes()
  • 1b4ff94ae7c5 selinux: do not cancel a policy conversion that never started
  • acd5b09be98f selinux: reject a class permission count below its inherited common
  • 42a7107f99d8 selinux: require every boolean value to be defined
  • 1a4c3ffe2a48 ipvs: separate destination availability state
  • 9ff46bf75bfa ubi: fastmap: fix ubi->fm memory leak
  • 075036cea14a mtd: ubi: skip programming unused bits in ubi headers
  • bb03b56d1d75 block: stop the timeout timer when releasing a never added disk
  • e2c3337c2238 ALSA: hda/realtek: Add quirk for HP Dragonfly Folio G3 2-in-1 (103c:8a05)
View original

Upgraded? How did it go?

Discussion