XanMod Kernel 7.1.10-xanmod1

7.1.10-xanmod1
Changed 1
  • Set GT rp min frequency as 1.2GHz default for BMG/CRI in drm/xe
Fixed 19
  • Enable headset mic on F+ FLAPTOP r
  • Fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms
  • Mark SPI virtio device ready before registering the controller
  • Fix infinite loop when scale is too large for display in drm/log
  • Fix out-of-bounds read on empty message length in drm/log
  • Fix division by zero when scale module parameter is 0 in drm/log

From XanMod Kernel

  • 0f1ac59df670 Linux 7.1.10-xanmod1
  • fc11d50c4815 Merge tag 'v7.1.10' into 7.1
  • 8d4e6356173a Linux 7.1.10
  • 93f4d99b7e06 ALSA: hda/realtek: Enable headset mic on F+ FLAPTOP r
  • d31639e0dd88 erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms
  • f07ab9771db5 spi: virtio: mark device ready before registering the controller
  • 50ca4dbbaf3e drm/log: Fix infinite loop when scale is too large for display
  • 16bcea56f420 drm/log: Fix out-of-bounds read on empty message length
  • 71ba3938cd57 drm/log: Fix division by zero when scale module parameter is 0
  • 1eea17a9184c drm/xe: Fix a bug in pc_adjust_freq_bounds()
  • e75b29f1d31c drm/xe: Set GT rp min frequency as 1.2GHz default for BMG/CRI
  • b3991da6ea98 drm/xe/oa: Check managed mutex initialization errors
  • 027150e24e17 drm/xe/oa: Fix sync entry leak on OA config emit failure
  • 24026a295e03 drm/xe/pxp: add termination on resume
  • 7d228ba43279 firewire: ohci: fix NULL pointer dereference in ar_context_release
  • ebe2774e9564 l2tp: fix tunnel and session refcount leak on seq_file release
  • 5685bbbd3cbf net/sched: cls_bpf: reject dev-bound programs bound to a different device
  • 499227ca8edc accel/amdxdna: Skip unmapped range in aie2_populate_range()
  • 914e0100df34 net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
  • 5bd8e897ecf5 regmap: sdw-mbq: don't call an unset readable_reg callback
  • eb5ad008574d m68k: Define NR_CPUS to 1
  • d7c413bd421c pid: reject allocations through dead ancestor pid namespaces
  • e71f8e9ed6f3 net/sched: cls_u32: skip hash tables in u32_bind_class()
  • 6b70886ebc42 net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain
  • f09ac5682f1b af_packet: Don't send zero-byte data in tpacket_snd().
  • cc90447a7f79 regmap: sdw-mbq: Fix swap of timeout and retry times
  • 09e4c486348e ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers
  • 4b177911eb9f net/tls: Fail tls_sw_splice_read() after a failed async decrypt
  • 0ab482b2195e net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling
  • 88b79ac89ecc net: tap: fix wrong transport_header when sending VLAN-tagged frame
  • 6386a6ffa2ef net: packet: fix wrong transport_header when sending VLAN-tagged frame
  • fa8ceaae52d3 net: phy: realtek: fix EEE advertisement write on the internal PHY MMD path
  • 29633de25773 tcp: fix icsk_ack.ato bitfield overflow
  • 90bb11fb29d3 veth: fix queue index used to wake the peer txq in veth_poll
  • bc9a00fb78e3 macvlan: inherit needed_headroom and needed_tailroom from lowerdev
  • 5c2ca77212eb ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
  • 8b1118fc5a5d eth: bnxt: avoid deadlock when canceling IRQ affinity notifier
  • ae2e1c26082c eth: bnxt: decrease indent in bnxt_request_irq()
  • 2a64e5e75879 eth: bnxt: keep the aRFS rmap updated when TPH is enabled
  • 5f451cdb3f4e eth: bnxt: cancel IRQ notifier before freeing affinity mask
  • 0c60f26caca4 netfilter: ipset: let destroy callbacks adjust ext mem size
  • b88250102549 netfilter: ipset: fix list type element drift bug
  • d16b71231e65 netfilter: flowtable: publish GC-visible tuple last
  • c23620a0fa5b netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
  • 5365f012451f ipvs: revalidate ihl to prevent out-of-bounds access
  • 24ffcb1e1688 netfilter: ipset: fix refcount race between list:set GC and swap
  • 8bfb93a35c9f tick: Include ktime.h and jiffies.h in linux/tick.h
  • f5bde482b242 ASoC: tas2781: fix clang build error for goto bypassing cleanup variable
  • 1eee6a92739a gpio: ml-ioh: share the register lock across channels
  • 8bbf4405050b rseq: Prevent hard lockup on granted time slice extension
  • 0f77ed5ee919 ovpn: defer key slot crypto freeing to workqueue
  • bbe81f40582d ovpn: run deferred work on a module-owned workqueue
  • e697e30f3dd2 riscv: lib: Fix ZBB strnlen reading past count boundary
  • 0663d1df8d28 ALSA: usb-audio: Fix mixer regression on SteelSeries Arctis Nova 5
  • 88619b117be1 sctp: validate cookie AUTH state before use
  • 7ce010275c53 perf: Reject exited events as group leaders
  • e83eed1bea14 scsi: core: pair EH runtime PM get and put
  • fe98491cb322 riscv: ftrace: Fix ftrace_modify_call failure on kprobed functions
  • 4b0de8be288f ovpn: finish crypto callback cleanup before peer release
  • acf32a5dff08 ovpn: fix NULL dereference when killing missing key
  • e3702470ced9 af_unix: Unlink scc_entry in unix_del_edge().
  • 92a959405383 regulator: fp9931: Fix VPOS/VNEG voltage selector table
  • d9daaca68ab9 gpiolib: Check gc->get_direction() before calling gpiod_get_direction()
  • 413be75118d1 rhashtable: fix false-positive lockdep splat on rhltable destruction
  • c6237834d999 crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()
  • 3b8a9543801b crypto: ccm - Set rfc4309 maxauthsize from child
  • 487aa5391f91 arm64: tegra: Add EL2 virtual timer interrupt for Tegra194
  • bb81b608db63 clk: spacemit: k3: set hdma clock as critical
  • 294fd02f48c5 clk: spacemit: k3: fix USB2 bus clock
  • 94bf4fe0e463 optee: ffa: Add NULL check in optee_ffa_lend_protmem
  • 9114f72b9161 clk: qcom: dispcc-eliza: Fix disp_cc_mdss_mdp_clk_src RCG stall on Eliza EVK
  • 574498e56024 ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup
  • b0b98763cedb net: expect instance lock in netdev_queue_get_dma_dev()
  • 1be781e450c5 net: rename netdev_ops_assert_locked()
  • ca91e0cc8087 drm/amdkfd: Add bounds check for CRAT subtype length
  • 75db927187a1 drm/mediatek: mtk_dsi: Enable HS clock only at pre-enable
  • 6bd8d6b4eb51 drm/mediatek: Convert legacy DRM logging to drm_* helpers in mtk_dsi.c
  • c37a0461c0d0 ASoC: tas2562: Validate values for volume writes
  • 9e55fe24c548 ceph: fix hanging __ceph_get_caps() with stale mds_wanted
  • b6a098961307 ceph: avoid fs reclaim while using current->journal_info
  • 605cbdb7ed21 xfs: check v5 superblock features early
  • ff350e672534 xfs: check xfarray iteration errors when committing unlinked inode lists
  • 233557b7b1ed xfs: don't ignore runtime errors in xrep_iunlink_reload_next
  • 36a31b12540c xfs: don't swallow dquot recovery verification errors
  • 03c9c9116e6d xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN
  • 96246a3200d3 xfs: avoid UAF on sc->tempip in xrep_tempfile_create
  • 73ce20d9b6a9 xfs: don't return EFSCORRUPTED when scrubbing corrupt parent pointers
  • 23690064f235 xfs: fix another iunlink infinite loop bug in online fsck
  • 8ce03692a6b5 xfs: fix allocated inodes that show up in the unlinked list
  • a6cfd0e4bb1e xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair
  • 70714b154842 xfs: don't zap the attr fork on repair when there are queued pptr updates
  • 08bed2b67d2e xfs: fix ilock leak on error in xfs_dq_get_next_id
  • 8a5bb14cd964 xfs: load next_agino from the correct xfarray in xrep_iunlink_relink_prev
  • 2773bf5156d5 xfs: nlink scrub must take IOLOCK before determining ILOCK state
  • a3ce762bdb5d xfs: pass runtime errors from xrep_iunlink_mark_ondisk_rec up to callers
  • ca6085790659 xfs: set the prev pointer when reinserting an inode on the unlinked list
  • c57590447157 xfs: don't double-lock when deleting a self-referential directory
  • e753d3b5b21b xfs: only check mergeability of bnobt records
  • a68b492357e3 xfs: zero i_nlink before repair puts inode on unlinked list
  • b51051f7dc53 xfs: fix transaction block reservation in xrep_rtbitmap
  • 5faabb37dd60 xfs: check cowextsize in xrep_inode_cowextsize
  • c82c1279c90a xfs: clear zapped attr fork state when bmap repair finds no attr fork
  • ccad4a3b96eb xfs: mark nonzero sb_gquotino as corrupt on metadir filesystems
  • edaf5b6bd625 xfs: bounds-check buffer log item's dirty bitmap
  • ccebfc309441 xfs: fix off-by-one in rtrefcount btree root level validation
  • 61c5165f02de xfs: propagate errors from xfs_rtginode_load
  • e3ee74d6dbbe drm/amdgpu: disallow multiple FENCE chunks in one submit
  • 5cbd8af02b0b drm/amdgpu: Fix UVD decode image min size calculation
  • ff4361816b6b drm/amdgpu: Fix UVD dpb min size calculation for H264
  • 4530aa81c907 drm/amdgpu: Fix UVD min buffer sizes
  • de67fd77ff18 drm/amdgpu: Implement insert_end for VCE 3
  • 17fbb996c05f drm/amdgpu: Reject UVD message with dimensions above 4096
  • 80f0b53860d0 drm/amdgpu: validate GEM_CREATE domain combinations
  • 544f760f36d4 drm/amdgpu: check ASPM on the dGPU host link
  • 9213b2febc37 drm/amdgpu: fix missing check in vm_flush()
  • 33bd5194ea61 drm/amdgpu: fix nbif 6.3.1 l1 low power not functional
  • 476d259f285f drm/amdgpu: Prefer default discovery offset
  • 0acdf1a575f5 drm/amdgpu: Reject UVD message with invalid number of h265 refs
  • 2f41881e73f4 drm/amd/display: fix BT.2020 YCbCr output CSC matrices for DCE
  • dacea1e4de8e drm/amd/display: fix BT.2020 YCbCr limited output CSC matrix
  • 4a6bc92fac30 drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank()
  • 2db92a56b000 s390/zcrypt: Pad trailing CCA or EP11 message with zeros
  • db21b2cf6dd0 s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing
  • 2976b9d2e716 s390/zcrypt: Improve EP11 CPRB length and overflow checks
  • 50fe5133dcb4 s390/zcrypt: Improve CCA CPRB length and overflow checks
  • 14d41e383241 s390/zcrypt: Fix CPRB memory allocation in zcrypt misc code
  • c76c4ee72bfc s390/vfio_ccw: Implement a crw lock
  • 83a73fdeff38 s390/vfio_ccw: Calculate idal length based on idaw type
  • 2a5ac0c0f1f7 s390/vfio_ccw: Selectively expand io_mutex
  • 56100baa0eb7 s390/vfio_ccw: Move cp cleanup out of not operational
  • d5d096cd9369 s390/vfio_ccw: Fix out of bounds check on CCW array
  • fc59e9482117 s390/vfio_ccw: Ensure first IDAW remains constant
  • 988d9b5be3c2 s390/vfio_ccw: Ensure index for read/write regions are within range
  • 77f5e888d2e6 s390/vfio_ccw: Cancel existing workqueues
  • 4ee94790490a s390/vfio_ccw: Limit the number of channel program segments
  • 4699b54fada1 s390/vfio_ccw: Free all memory if cp_init() fails
  • 6a06a99b9c60 drm/radeon: fix autosuspend cleanup during teardown
  • e4aff0f8bc31 drm/xe/guc_ads: use uncached mapping for UM queue BO
  • 02bc8cf239a7 drm/xe/guc_ads: allocate UM queues in VRAM on dGFX
  • 7b1ebb987d13 drm/xe/guc_ads: allocate UM queues in a separate BO
  • 4db2b608e5f3 drm/xe: Fix xe_device_probe() failure
  • dea635bd1317 drm/xe: Order ring writes before ring tail updates
  • a5805f9e24d6 riscv: hwprobe: Register unaligned probes before usermode
  • f1478e8d5334 pmdomain: mediatek: Fix mt8183 hang on boot
  • db368164383c mmc: loongson2: Fix sg iteration in data reorder functions
  • f72bb95732bc drm/connector/hdmi: Fix out of bounds memory read
  • 7599a73ff66d mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition
  • 0e1c00199394 pmdomains: mediatek: Avoid setting RTFF's CLK_DIS before NRESTORE
  • 3c6c28b9bee7 mmc: sdhci: make tuning_err a signed int
  • 10bf2d7261d7 pmdomain: mediatek: fix remaining %pOF after of_node_put()
  • ce508a334e9c mmc: sdhci: unmap the bounce buffer before device release
  • 4a0c11683a8f mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit
  • 3497102117e8 libceph: tolerate addrvecs with multiple entries of the same type
  • 7130d94846da libceph: fix OOB read in decode_watchers() via missing bounds check
  • a9e1d197953f ceph: fix MDS random selection readiness predicate
  • e009c5f0ad63 libceph: Avoid using invalid osd indices from primary_temp
  • daeaa22a37dd Input: sur40 - fix V4L error path cleanup
  • beb9b0bd6e6e Input: sur40 - fix input device registration ordering
  • 212fc482ddd7 openrisc: signal: do not restore privileged SR bits on sigreturn
  • 7e65a89124c1 ftrace: Fix off-by-one fentry site disable in ftrace_free_mem()
  • bd75a42cea7e ftrace: Protect direct_functions in update_ftrace_direct_mod
  • 35f8e0989985 ftrace: Protect direct_functions in update_ftrace_direct_del
  • 5ac91943ee59 ftrace: Protect direct_functions in ftrace_find_rec_direct
  • de4eec0dfde8 pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev()
  • 51c8d238fe72 libceph: fix multiple unsafe decodes in decode_locker()
  • cdefce49feed pmdomain: arm: Fix -EINVAL from scmi_pd_set_perf_state() on state 0
  • 10505f28146f pmdomain: qcom: rpmhpd: Add missing MXC and MMCX power domains for Eliza
  • 0559b86611c3 gpio: ml-ioh: use raw_spinlock_t for the register lock
  • 44ec5936ba15 gve: fix zero-length skb frag with header-split
  • 8021105545c1 selftests/ftrace: Convert ELF entry point to file offset in uprobe test
  • 24bef4918f6a gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind
  • fa9b991bf678 gve: fix NULL dereference due to missing ptp adjfine
  • 4e88b4fda482 crypto: qce - fix error path in devm_qce_register_algs
  • 61b20fba32d6 crypto: starfive - use scatterlist length before DMA mapping
  • 51c5503554c8 Input: hynitron_cstxxx - validate touch count and finger IDs
  • 9bbd3682f8a3 Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue
  • ddd9a53faf3b Input: synaptics-rmi4 - block s_input when F54 queue is busy
  • b7b9a8b1c303 Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer
  • 88c8174d7290 Input: synaptics-rmi4 - zero report size on F54 work error
  • ed98ce338f9a powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak
  • 6a4643f7eabe powerpc/pseries: lparcfg - fix kbuf[] underflow
  • 2e509ef60ee4 Input: byd - synchronize timer deletion before freeing private data
  • 84e5cb517f44 Input: iforce - validate input packet lengths
  • 594b79d024e5 Input: atkbd - skip deactivate for HONOR ZQC-P
  • da1ecf638cd8 Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard
  • 62e25677d144 Input: psxpad-spi - set driver data before use
  • 1842e4712681 Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet
  • a81cafe3c3c2 Input: synaptics-rmi4 - fix F55 transmitter electrode count typo
  • 360fc573e6cf powerpc/pseries: pci - logic bug
  • d38554602a0b Input: cs40l50-vibra - validate custom data from user space
  • a3da1fa14797 Input: xpad - add support for ZENAIM LEVERLESS
  • 2deef1c38c2c ASoC: SOF: topology: Use acpi mach from the machine driver
  • 0306873bbb3a drm/amdgpu/gmc12.1: fix MMHUB0 check in pasid tlb flush
  • d4ffb51b9f02 drm/amdgpu/gmc12.1: implement tlb inv semaphore
  • 1c73854a53bb drm/amdgpu: fix aperture iounmap skipped on device removal
  • a4d52348157e drm/amdgpu: fix JPEG v4.0.5 queue reset failure in DPG mode
  • 09ad1526c2ef drm/amdgpu: fix JPEG v5.0.0 queue reset failure in DPG mode
  • c79ec4aa250b drm/amdgpu: fix JPEG v5.3.0 queue reset failure in DPG mode
  • 9381d8ae3e31 drm/amdgpu: Use virtual alloc during coredump
  • fb0eb608570e drm/radeon: restore hardware polling in fence_is_signaled to fix performance regression
  • 34c5b3eca369 drm/amd: Disable DP audio spread spectrum for Cyan Skillfish
  • 91731dec60e9 drm/amdgpu/userq: serialize queue map against GPU reset
  • a4443c272578 drm/amdgpu: read TRUNCATE_COORD_MODE on gfx12
  • 07fe270ec07c drm/amdgpu: reject oversized IBs with per-ring packet limits
  • 5d222b657f02 drm/panthor: skip zero-sized firmware sections
  • 7110b7b794a2 fbdev: core: Fix pointer desynchronization in fb_io_read()
  • ce7fef961c63 fbdev: clear fb_info->mode before deleting a videomode
  • 873a1aa15c31 fbdev: bound mode sysfs output to the sysfs buffer
  • 7bcdde412e6c ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses
  • 4fbbbb17edb4 ASoC: cs35l41: sort the register default table
  • 2b12126944d7 ASoC: cs35l45: sort the register default table
  • b3f8a818796b ASoC: cs4265: sort the register default table
  • 6b512a5330ef ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout
  • d48691e70d4a ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()
  • 12803e89a1e5 drm/shmem_helper: Check VMA boundaries for PMD mappings
  • 3ee3c26ceee5 ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses
  • 2f578062a5f1 microblaze: restore the page alignment of swapper_pg_dir
  • 75fb3151513d s390/qeth: validate user buffer length in SNMP and ARP query ioctls
  • 72b4a0c51a4b mptcp: fastopen: only mark MPTFO subflows with SYN data
  • 5099027f98b2 mptcp: pm: fix data race in add_addr timer callback
  • 27ed642a4e7e mptcp: options: reset DSS fields in case of unexpected size
  • 6bab90729215 mptcp: avoid combining some incoming suboptions
  • e5791c03854b selftests: mptcp: join: mark tests with data corruption as failed
  • 8277f48a06d3 mptcp: reclaim forward-allocated memory on RX path errors
  • d81bda85d95f selinux: reject a permission value exceeding the class permission count
  • d8a10899ea3c selinux: reject an unclaimed class value in security_get_classes()
  • 219c96de5d9b selinux: do not cancel a policy conversion that never started
  • 1b995966c3ae selinux: reject a class permission count below its inherited common
  • ed901e88aa3f selinux: require every boolean value to be defined
  • 93d620519d71 block: stop the timeout timer when releasing a never added disk
View original

Upgraded? How did it go?

Discussion