7.1.10-xanmod1
Changed 1
- Set GT rp min frequency as 1.2GHz default for BMG/CRI in drm/xe
Fixed 19
- Enable headset mic on F+ FLAPTOP r
- Fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms
- Mark SPI virtio device ready before registering the controller
- Fix infinite loop when scale is too large for display in drm/log
- Fix out-of-bounds read on empty message length in drm/log
- Fix division by zero when scale module parameter is 0 in drm/log
- Fix bug in pc_adjust_freq_bounds() in drm/xe
- Check managed mutex initialization errors in drm/xe/oa
- Fix sync entry leak on OA config emit failure in drm/xe/oa
- Add termination on resume in drm/xe/pxp
- Fix NULL pointer dereference in ar_context_release in firewire ohci
- Fix tunnel and session refcount leak on seq_file release in l2tp
- Reject dev-bound BPF programs bound to a different device in cls_bpf
- Skip unmapped range in aie2_populate_range() in accel/amdxdna
- Fix port_id extraction from SRC TAG in am65-cpsw-nuss
- Don't call an unset readable_reg callback in regmap sdw-mbq
- Define NR_CPUS to 1 on m68k
- Reject allocations through dead ancestor pid namespaces
- Skip hash tables in u32_bind_class() in cls_u32
From XanMod Kernel
- 0f1ac59df670 Linux 7.1.10-xanmod1
- fc11d50c4815 Merge tag 'v7.1.10' into 7.1
- 8d4e6356173a Linux 7.1.10
- 93f4d99b7e06 ALSA: hda/realtek: Enable headset mic on F+ FLAPTOP r
- d31639e0dd88 erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms
- f07ab9771db5 spi: virtio: mark device ready before registering the controller
- 50ca4dbbaf3e drm/log: Fix infinite loop when scale is too large for display
- 16bcea56f420 drm/log: Fix out-of-bounds read on empty message length
- 71ba3938cd57 drm/log: Fix division by zero when scale module parameter is 0
- 1eea17a9184c drm/xe: Fix a bug in pc_adjust_freq_bounds()
- e75b29f1d31c drm/xe: Set GT rp min frequency as 1.2GHz default for BMG/CRI
- b3991da6ea98 drm/xe/oa: Check managed mutex initialization errors
- 027150e24e17 drm/xe/oa: Fix sync entry leak on OA config emit failure
- 24026a295e03 drm/xe/pxp: add termination on resume
- 7d228ba43279 firewire: ohci: fix NULL pointer dereference in ar_context_release
- ebe2774e9564 l2tp: fix tunnel and session refcount leak on seq_file release
- 5685bbbd3cbf net/sched: cls_bpf: reject dev-bound programs bound to a different device
- 499227ca8edc accel/amdxdna: Skip unmapped range in aie2_populate_range()
- 914e0100df34 net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
- 5bd8e897ecf5 regmap: sdw-mbq: don't call an unset readable_reg callback
- eb5ad008574d m68k: Define NR_CPUS to 1
- d7c413bd421c pid: reject allocations through dead ancestor pid namespaces
- e71f8e9ed6f3 net/sched: cls_u32: skip hash tables in u32_bind_class()
- 6b70886ebc42 net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain
- f09ac5682f1b af_packet: Don't send zero-byte data in tpacket_snd().
- cc90447a7f79 regmap: sdw-mbq: Fix swap of timeout and retry times
- 09e4c486348e ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers
- 4b177911eb9f net/tls: Fail tls_sw_splice_read() after a failed async decrypt
- 0ab482b2195e net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling
- 88b79ac89ecc net: tap: fix wrong transport_header when sending VLAN-tagged frame
- 6386a6ffa2ef net: packet: fix wrong transport_header when sending VLAN-tagged frame
- fa8ceaae52d3 net: phy: realtek: fix EEE advertisement write on the internal PHY MMD path
- 29633de25773 tcp: fix icsk_ack.ato bitfield overflow
- 90bb11fb29d3 veth: fix queue index used to wake the peer txq in veth_poll
- bc9a00fb78e3 macvlan: inherit needed_headroom and needed_tailroom from lowerdev
- 5c2ca77212eb ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
- 8b1118fc5a5d eth: bnxt: avoid deadlock when canceling IRQ affinity notifier
- ae2e1c26082c eth: bnxt: decrease indent in bnxt_request_irq()
- 2a64e5e75879 eth: bnxt: keep the aRFS rmap updated when TPH is enabled
- 5f451cdb3f4e eth: bnxt: cancel IRQ notifier before freeing affinity mask
- 0c60f26caca4 netfilter: ipset: let destroy callbacks adjust ext mem size
- b88250102549 netfilter: ipset: fix list type element drift bug
- d16b71231e65 netfilter: flowtable: publish GC-visible tuple last
- c23620a0fa5b netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
- 5365f012451f ipvs: revalidate ihl to prevent out-of-bounds access
- 24ffcb1e1688 netfilter: ipset: fix refcount race between list:set GC and swap
- 8bfb93a35c9f tick: Include ktime.h and jiffies.h in linux/tick.h
- f5bde482b242 ASoC: tas2781: fix clang build error for goto bypassing cleanup variable
- 1eee6a92739a gpio: ml-ioh: share the register lock across channels
- 8bbf4405050b rseq: Prevent hard lockup on granted time slice extension
- 0f77ed5ee919 ovpn: defer key slot crypto freeing to workqueue
- bbe81f40582d ovpn: run deferred work on a module-owned workqueue
- e697e30f3dd2 riscv: lib: Fix ZBB strnlen reading past count boundary
- 0663d1df8d28 ALSA: usb-audio: Fix mixer regression on SteelSeries Arctis Nova 5
- 88619b117be1 sctp: validate cookie AUTH state before use
- 7ce010275c53 perf: Reject exited events as group leaders
- e83eed1bea14 scsi: core: pair EH runtime PM get and put
- fe98491cb322 riscv: ftrace: Fix ftrace_modify_call failure on kprobed functions
- 4b0de8be288f ovpn: finish crypto callback cleanup before peer release
- acf32a5dff08 ovpn: fix NULL dereference when killing missing key
- e3702470ced9 af_unix: Unlink scc_entry in unix_del_edge().
- 92a959405383 regulator: fp9931: Fix VPOS/VNEG voltage selector table
- d9daaca68ab9 gpiolib: Check gc->get_direction() before calling gpiod_get_direction()
- 413be75118d1 rhashtable: fix false-positive lockdep splat on rhltable destruction
- c6237834d999 crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()
- 3b8a9543801b crypto: ccm - Set rfc4309 maxauthsize from child
- 487aa5391f91 arm64: tegra: Add EL2 virtual timer interrupt for Tegra194
- bb81b608db63 clk: spacemit: k3: set hdma clock as critical
- 294fd02f48c5 clk: spacemit: k3: fix USB2 bus clock
- 94bf4fe0e463 optee: ffa: Add NULL check in optee_ffa_lend_protmem
- 9114f72b9161 clk: qcom: dispcc-eliza: Fix disp_cc_mdss_mdp_clk_src RCG stall on Eliza EVK
- 574498e56024 ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup
- b0b98763cedb net: expect instance lock in netdev_queue_get_dma_dev()
- 1be781e450c5 net: rename netdev_ops_assert_locked()
- ca91e0cc8087 drm/amdkfd: Add bounds check for CRAT subtype length
- 75db927187a1 drm/mediatek: mtk_dsi: Enable HS clock only at pre-enable
- 6bd8d6b4eb51 drm/mediatek: Convert legacy DRM logging to drm_* helpers in mtk_dsi.c
- c37a0461c0d0 ASoC: tas2562: Validate values for volume writes
- 9e55fe24c548 ceph: fix hanging __ceph_get_caps() with stale mds_wanted
- b6a098961307 ceph: avoid fs reclaim while using current->journal_info
- 605cbdb7ed21 xfs: check v5 superblock features early
- ff350e672534 xfs: check xfarray iteration errors when committing unlinked inode lists
- 233557b7b1ed xfs: don't ignore runtime errors in xrep_iunlink_reload_next
- 36a31b12540c xfs: don't swallow dquot recovery verification errors
- 03c9c9116e6d xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN
- 96246a3200d3 xfs: avoid UAF on sc->tempip in xrep_tempfile_create
- 73ce20d9b6a9 xfs: don't return EFSCORRUPTED when scrubbing corrupt parent pointers
- 23690064f235 xfs: fix another iunlink infinite loop bug in online fsck
- 8ce03692a6b5 xfs: fix allocated inodes that show up in the unlinked list
- a6cfd0e4bb1e xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair
- 70714b154842 xfs: don't zap the attr fork on repair when there are queued pptr updates
- 08bed2b67d2e xfs: fix ilock leak on error in xfs_dq_get_next_id
- 8a5bb14cd964 xfs: load next_agino from the correct xfarray in xrep_iunlink_relink_prev
- 2773bf5156d5 xfs: nlink scrub must take IOLOCK before determining ILOCK state
- a3ce762bdb5d xfs: pass runtime errors from xrep_iunlink_mark_ondisk_rec up to callers
- ca6085790659 xfs: set the prev pointer when reinserting an inode on the unlinked list
- c57590447157 xfs: don't double-lock when deleting a self-referential directory
- e753d3b5b21b xfs: only check mergeability of bnobt records
- a68b492357e3 xfs: zero i_nlink before repair puts inode on unlinked list
- b51051f7dc53 xfs: fix transaction block reservation in xrep_rtbitmap
- 5faabb37dd60 xfs: check cowextsize in xrep_inode_cowextsize
- c82c1279c90a xfs: clear zapped attr fork state when bmap repair finds no attr fork
- ccad4a3b96eb xfs: mark nonzero sb_gquotino as corrupt on metadir filesystems
- edaf5b6bd625 xfs: bounds-check buffer log item's dirty bitmap
- ccebfc309441 xfs: fix off-by-one in rtrefcount btree root level validation
- 61c5165f02de xfs: propagate errors from xfs_rtginode_load
- e3ee74d6dbbe drm/amdgpu: disallow multiple FENCE chunks in one submit
- 5cbd8af02b0b drm/amdgpu: Fix UVD decode image min size calculation
- ff4361816b6b drm/amdgpu: Fix UVD dpb min size calculation for H264
- 4530aa81c907 drm/amdgpu: Fix UVD min buffer sizes
- de67fd77ff18 drm/amdgpu: Implement insert_end for VCE 3
- 17fbb996c05f drm/amdgpu: Reject UVD message with dimensions above 4096
- 80f0b53860d0 drm/amdgpu: validate GEM_CREATE domain combinations
- 544f760f36d4 drm/amdgpu: check ASPM on the dGPU host link
- 9213b2febc37 drm/amdgpu: fix missing check in vm_flush()
- 33bd5194ea61 drm/amdgpu: fix nbif 6.3.1 l1 low power not functional
- 476d259f285f drm/amdgpu: Prefer default discovery offset
- 0acdf1a575f5 drm/amdgpu: Reject UVD message with invalid number of h265 refs
- 2f41881e73f4 drm/amd/display: fix BT.2020 YCbCr output CSC matrices for DCE
- dacea1e4de8e drm/amd/display: fix BT.2020 YCbCr limited output CSC matrix
- 4a6bc92fac30 drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank()
- 2db92a56b000 s390/zcrypt: Pad trailing CCA or EP11 message with zeros
- db21b2cf6dd0 s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing
- 2976b9d2e716 s390/zcrypt: Improve EP11 CPRB length and overflow checks
- 50fe5133dcb4 s390/zcrypt: Improve CCA CPRB length and overflow checks
- 14d41e383241 s390/zcrypt: Fix CPRB memory allocation in zcrypt misc code
- c76c4ee72bfc s390/vfio_ccw: Implement a crw lock
- 83a73fdeff38 s390/vfio_ccw: Calculate idal length based on idaw type
- 2a5ac0c0f1f7 s390/vfio_ccw: Selectively expand io_mutex
- 56100baa0eb7 s390/vfio_ccw: Move cp cleanup out of not operational
- d5d096cd9369 s390/vfio_ccw: Fix out of bounds check on CCW array
- fc59e9482117 s390/vfio_ccw: Ensure first IDAW remains constant
- 988d9b5be3c2 s390/vfio_ccw: Ensure index for read/write regions are within range
- 77f5e888d2e6 s390/vfio_ccw: Cancel existing workqueues
- 4ee94790490a s390/vfio_ccw: Limit the number of channel program segments
- 4699b54fada1 s390/vfio_ccw: Free all memory if cp_init() fails
- 6a06a99b9c60 drm/radeon: fix autosuspend cleanup during teardown
- e4aff0f8bc31 drm/xe/guc_ads: use uncached mapping for UM queue BO
- 02bc8cf239a7 drm/xe/guc_ads: allocate UM queues in VRAM on dGFX
- 7b1ebb987d13 drm/xe/guc_ads: allocate UM queues in a separate BO
- 4db2b608e5f3 drm/xe: Fix xe_device_probe() failure
- dea635bd1317 drm/xe: Order ring writes before ring tail updates
- a5805f9e24d6 riscv: hwprobe: Register unaligned probes before usermode
- f1478e8d5334 pmdomain: mediatek: Fix mt8183 hang on boot
- db368164383c mmc: loongson2: Fix sg iteration in data reorder functions
- f72bb95732bc drm/connector/hdmi: Fix out of bounds memory read
- 7599a73ff66d mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition
- 0e1c00199394 pmdomains: mediatek: Avoid setting RTFF's CLK_DIS before NRESTORE
- 3c6c28b9bee7 mmc: sdhci: make tuning_err a signed int
- 10bf2d7261d7 pmdomain: mediatek: fix remaining %pOF after of_node_put()
- ce508a334e9c mmc: sdhci: unmap the bounce buffer before device release
- 4a0c11683a8f mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit
- 3497102117e8 libceph: tolerate addrvecs with multiple entries of the same type
- 7130d94846da libceph: fix OOB read in decode_watchers() via missing bounds check
- a9e1d197953f ceph: fix MDS random selection readiness predicate
- e009c5f0ad63 libceph: Avoid using invalid osd indices from primary_temp
- daeaa22a37dd Input: sur40 - fix V4L error path cleanup
- beb9b0bd6e6e Input: sur40 - fix input device registration ordering
- 212fc482ddd7 openrisc: signal: do not restore privileged SR bits on sigreturn
- 7e65a89124c1 ftrace: Fix off-by-one fentry site disable in ftrace_free_mem()
- bd75a42cea7e ftrace: Protect direct_functions in update_ftrace_direct_mod
- 35f8e0989985 ftrace: Protect direct_functions in update_ftrace_direct_del
- 5ac91943ee59 ftrace: Protect direct_functions in ftrace_find_rec_direct
- de4eec0dfde8 pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev()
- 51c8d238fe72 libceph: fix multiple unsafe decodes in decode_locker()
- cdefce49feed pmdomain: arm: Fix -EINVAL from scmi_pd_set_perf_state() on state 0
- 10505f28146f pmdomain: qcom: rpmhpd: Add missing MXC and MMCX power domains for Eliza
- 0559b86611c3 gpio: ml-ioh: use raw_spinlock_t for the register lock
- 44ec5936ba15 gve: fix zero-length skb frag with header-split
- 8021105545c1 selftests/ftrace: Convert ELF entry point to file offset in uprobe test
- 24bef4918f6a gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind
- fa9b991bf678 gve: fix NULL dereference due to missing ptp adjfine
- 4e88b4fda482 crypto: qce - fix error path in devm_qce_register_algs
- 61b20fba32d6 crypto: starfive - use scatterlist length before DMA mapping
- 51c5503554c8 Input: hynitron_cstxxx - validate touch count and finger IDs
- 9bbd3682f8a3 Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue
- ddd9a53faf3b Input: synaptics-rmi4 - block s_input when F54 queue is busy
- b7b9a8b1c303 Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer
- 88c8174d7290 Input: synaptics-rmi4 - zero report size on F54 work error
- ed98ce338f9a powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak
- 6a4643f7eabe powerpc/pseries: lparcfg - fix kbuf[] underflow
- 2e509ef60ee4 Input: byd - synchronize timer deletion before freeing private data
- 84e5cb517f44 Input: iforce - validate input packet lengths
- 594b79d024e5 Input: atkbd - skip deactivate for HONOR ZQC-P
- da1ecf638cd8 Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard
- 62e25677d144 Input: psxpad-spi - set driver data before use
- 1842e4712681 Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet
- a81cafe3c3c2 Input: synaptics-rmi4 - fix F55 transmitter electrode count typo
- 360fc573e6cf powerpc/pseries: pci - logic bug
- d38554602a0b Input: cs40l50-vibra - validate custom data from user space
- a3da1fa14797 Input: xpad - add support for ZENAIM LEVERLESS
- 2deef1c38c2c ASoC: SOF: topology: Use acpi mach from the machine driver
- 0306873bbb3a drm/amdgpu/gmc12.1: fix MMHUB0 check in pasid tlb flush
- d4ffb51b9f02 drm/amdgpu/gmc12.1: implement tlb inv semaphore
- 1c73854a53bb drm/amdgpu: fix aperture iounmap skipped on device removal
- a4d52348157e drm/amdgpu: fix JPEG v4.0.5 queue reset failure in DPG mode
- 09ad1526c2ef drm/amdgpu: fix JPEG v5.0.0 queue reset failure in DPG mode
- c79ec4aa250b drm/amdgpu: fix JPEG v5.3.0 queue reset failure in DPG mode
- 9381d8ae3e31 drm/amdgpu: Use virtual alloc during coredump
- fb0eb608570e drm/radeon: restore hardware polling in fence_is_signaled to fix performance regression
- 34c5b3eca369 drm/amd: Disable DP audio spread spectrum for Cyan Skillfish
- 91731dec60e9 drm/amdgpu/userq: serialize queue map against GPU reset
- a4443c272578 drm/amdgpu: read TRUNCATE_COORD_MODE on gfx12
- 07fe270ec07c drm/amdgpu: reject oversized IBs with per-ring packet limits
- 5d222b657f02 drm/panthor: skip zero-sized firmware sections
- 7110b7b794a2 fbdev: core: Fix pointer desynchronization in fb_io_read()
- ce7fef961c63 fbdev: clear fb_info->mode before deleting a videomode
- 873a1aa15c31 fbdev: bound mode sysfs output to the sysfs buffer
- 7bcdde412e6c ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses
- 4fbbbb17edb4 ASoC: cs35l41: sort the register default table
- 2b12126944d7 ASoC: cs35l45: sort the register default table
- b3f8a818796b ASoC: cs4265: sort the register default table
- 6b512a5330ef ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout
- d48691e70d4a ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()
- 12803e89a1e5 drm/shmem_helper: Check VMA boundaries for PMD mappings
- 3ee3c26ceee5 ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses
- 2f578062a5f1 microblaze: restore the page alignment of swapper_pg_dir
- 75fb3151513d s390/qeth: validate user buffer length in SNMP and ARP query ioctls
- 72b4a0c51a4b mptcp: fastopen: only mark MPTFO subflows with SYN data
- 5099027f98b2 mptcp: pm: fix data race in add_addr timer callback
- 27ed642a4e7e mptcp: options: reset DSS fields in case of unexpected size
- 6bab90729215 mptcp: avoid combining some incoming suboptions
- e5791c03854b selftests: mptcp: join: mark tests with data corruption as failed
- 8277f48a06d3 mptcp: reclaim forward-allocated memory on RX path errors
- d81bda85d95f selinux: reject a permission value exceeding the class permission count
- d8a10899ea3c selinux: reject an unclaimed class value in security_get_classes()
- 219c96de5d9b selinux: do not cancel a policy conversion that never started
- 1b995966c3ae selinux: reject a class permission count below its inherited common
- ed901e88aa3f selinux: require every boolean value to be defined
- 93d620519d71 block: stop the timeout timer when releasing a never added disk