XanMod Kernel 7.1.9-xanmod1 release notes

762461b8ceec Linux 7.1.9-xanmod1
75350514d3f8 Merge tag 'v7.1.9' into 7.1
ffc82ed66531 Linux 7.1.9
0a8c9ed4f166 thunderbolt: Fix bandwidth group reservation indexing
f32c3a9a77cf thunderbolt: Bound the DROM dual link port number before indexing sw->ports
163847552a57 sctp: clear new_transport when removing a peer
d949992bc3f0 sctp: fix use-after-free of cached ASCONF chunk
5ccf35ef0ed6 sctp: keep chunk->transport in step with the list it is queued on
65a740633570 scsi: scsi_debug: Negate wrapped memcmp() result
1cec526cf0a2 bpf, sockmap: Fix sk_redir use-after-free in send verdict
911d5c32a54c fsverity: Fix silent truncation in bpf_get_fsverity_digest()
5bd63cad9df4 fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions
267ecd2eb775 mm/filemap: __filemap_add_folio() restore index before retrying
0baed1fa2184 ima: Instantiate file_truncate and path_truncate hooks
a054c9ffa9b7 sched_ext: Take cgroup_lock() first in scx_cgroup_lock()
d217d851f0a2 sched/psi: Create the psimon kthread outside of cgroup_mutex
611e7821c4f8 sched/psi: Shut down rtpoll_timer in psi_cgroup_free()
98516ba8b817 fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()
2d2b2ed7bdcc fs,fsverity: remove check for fsverity being enabled in setattr_prepare()
fbf40faa0414 ip6_tunnel: clear skb2->cb[] in ip6ip6_err()
da64ed1f346b ipv6: fix Route Information option length validation
4adc4c9a9a43 mm/ptdump: always stabilise against page table freeing using init_mm
b726eb3c94d2 mm/page_table_check: skip special zero mappings
5e6e2a18c20e ring-buffer: Use current_context for safe per-CPU buffer swap
3b3e0a6ee5bb ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()
f8d7e5751267 ptp: ocp: Fix board ID over-read
2004172036ec Revert "thermal: hwmon: Register a hwmon device for each thermal zone"
6b446d335ba1 Revert "thermal/drivers/hwmon: Cleanup coding style a bit"
c4d0c93d2469 ring-buffer: Prevent resizing of persistent ring buffer
004f7232e497 eventfs: Use children field for rcu head and add memory barriers
74bb1eaf72d1 eventfs: Fix use-after-free in eventfs_remove_rec()
9f7760a2e962 KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page
d728baba0f20 KVM: SVM: Serialize accesses to the owner and mirror list with separate lock
79748c9f9b2f smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive()
1305eadc6a7d smb: client: Fix use-after-free in cifs_try_adding_channels()
5558a8312452 tipc: read le->link under the node lock in tipc_node_link_down()
3c5f8f2aa57c tls: don't leave a full plaintext sk_msg ring unpushed
3c837266a734 tls: rx: restore msg_iter before TLS 1.3 optimistic retry
b70ebe0bba25 vhost: reset the vring metadata cache on vring reconfiguration
3205b0652a37 veth: fix skb length accounting after XDP frag adjustment
e82a5faea2e3 vsock/virtio: avoid refilling the RX queue after teardown
1cecb4202afd vsock/virtio: read virtqueues under worker locks
6b4119af5449 vxlan: do not arm the ageing timer on a device that is down
f463b6f4957c xdp: reject clones that overrun skb_shared_info tailroom
4f4cba3947d2 x86/mce: Set up the polling timer before CMCI discovery
da6acd11d2f2 x86/CPU: Add a tlbi= cmdline switch
eb0a9fabb924 arm64: remove redundant concurrent ptdump UAF mitigation
2926031acba1 dibs: initialise dibs->lock in dibs_dev_alloc()
496846a94111 Revert "drm/amdgpu: fix aperture mapping leak"
047f927f54c6 binfmt_misc: don't warn when the mount is completed from another user namespace
42d99fcd8006 ovl: don't warn when the mount is completed from another user namespace
2e8df8c91903 net/sched: act_gact, act_police: range check the fallback control action
439d3e404f9d net/sched: act_ct: fix sk_buff leak when the header checks reject a packet
24d87dc28ddd net: atlantic: free RX pages of consumed but not refilled buffers
dd633280de7f net: atlantic: free stranded TX buffers on ring deinit
c0224327b7cb netfilter: nf_conntrack: defer invalid log until after unlock
7cff440d7026 netfilter: bridge: release template ct on non-IP path
755fd7843f30 NTB: ntb_netdev: Preserve RX queue depth on allocation failure
ed08011ae0be net: devmem: prevent net-iov / page mixing
e92c7e2b41d1 net/x25: fix use-after-free of the socket by its timers
7a1df20a8d2c net/dibs: Correct freeing of dmb_clientid_arr
14e812ab41df ipv6: prevent in6_dev_get() from resurrecting inet6_dev
4515c78f4d9f net: smc: fix splice entry lifetime imbalance in smc_rx_splice
aa03d76252cc net: phy: mediatek: fix TX blink masks using the RX bits
ab7e4b407c7f mm/huge_memory: fix huge_zero_pfn race
d858f7c9fc51 mm/huge_memory: initialise workingset state before folio split
ad4e9dd5fec7 tracing: Fix NULL pointer dereference in module event cache removal
7568e9e717e7 ring-buffer: Prevent subbuf order change when resizing is disabled
9ea879862e66 fbdev: bitblit: bound-check glyph index in bit_cursor()
f128740f39ab tracing: Fix race between update_event_fields and, event_define_fields
1e7abfeb23c1 perf/core: Fix group leader use-after-free after sibling detach
c22a45817b9c drm/v3d: Serialize the scheduler timeout handlers
a5548ce91659 ALSA: us144mkii: re-anchor capture URBs on resubmission
0582952cd6cc ALSA: hda/tas2781: fix ACPI reference handling
bb61dc2ae590 ALSA: FCP: fix OOB write in fcp_meter_ctl_get()
5bf5ccddf00b ALSA: usx2y: bound the hwdep mmap fault offset
f9d492a39ebe ALSA: usb: Fix UAF at delayed release of MIDI2 EPs
91e4538952a9 mm/damon: adjust isolated pages stat for DAMOS_MIGRATE_{HOT,COLD}
684f271210be samples/damon/mtier: error out for zero quota goal target values
cfef454862b7 mm/damon/ops-common: putback folios on invalid migrate nid
e7e5e5e0dfe2 mm/damon/lru_sort: error out for >10000 active_mem_bp
3ea2fd344d93 ring-buffer: Fix crash passing ERR_PTR to kthread_stop()
eaef442fe68c misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free
efd02f8d1a74 misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke
0beaa9bd7eb1 misc: fastrpc: Remove buffer from list prior to unmap operation
03a9cea00b39 misc: fastrpc: fix channel ctx ref leak when session alloc fails
60c1c757fd4f misc: fastrpc: Fix initial memory allocation for Audio PD memory pool
bd88f6289b7e staging: rtl8723bs: validate monitor transmit frame lengths
6235b5156b48 staging: rtl8723bs: fix missing shared-key auth challenge length check
e429c6dfd5d2 staging: rtl8723bs: fix OOB read in WMM_param_handler()
01ab275f8f3e staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()
fdfb46c38724 serial: amba-pl011: synchronize DMA teardown
e57f0aa5c35b serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ
b49a43ebace1 serial: amba-pl011: fix indefinite RS485 post-send delay
7795e8abedc8 serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx
e7e3cc6709ca serial: 8250_dma: Clear stale RX state on shutdown
b449429e9e78 serial: sc16is7xx: enable THRI before filling TX FIFO
b1801c0d40f6 serial: qcom-geni: fix TX DMA buffer flush
5f1d56be1e9c rust_binder: do not query current thread for all ioctls
1149ce318c2b nvmem: layouts: Add fixed-layout driver
d11b12dcdce9 nvmem: apple-spmi-nvmem: wrap regmap calls to satisfy CFI
d88678d3fcb0 mei: pull kvfree out of spinlock
ed503eaad62f ipv4: fix use-after-free in fib_nhc_update_mtu()
9b22f13524fa ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops
1dd48303931b selftests/bpf: Adapt sockmap update error handling
8cf744abef6a selftests/bpf: Ensure UDP sockets are bound
781d944ca910 Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV
d5977f4f995e Bluetooth: btrtl: fix RTL8761B/BU broken LE extended scan
e828321f9cfa selftests/xsk: account reclaimed invalid Tx descriptors
6d419a03249c selftests/xsk: fix too-many-frags multi-buffer Tx test
7cf710e70f9b futex: Prevent robust futex exit race some more
86e48e822111 Revert "drm/amd/display: Fix backlight max_brightness to match exported range"
e08665218040 net: bridge: mrp: fix uninitialised bytes on the wire
e2ab7e878bdb netfilter: ebt_nflog: pin the NFLOG backend
ef365e8f9c24 igc: fix netdev not re-attached after resume if interface is down
9d067e581597 mac802154: fix netdev use-after-free in beacon worker
928128865e43 inet: frags: publish queues before arming timer
fc902f52a022 net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header
3010b7f13647 net: octeontx2-pf: Fix UB in shift operation
e2d658c64278 net/sched: reject overly deep qdisc hierarchies
20751193d83b net: openvswitch: reallocate update replies for mismatched IDs
ea1ccd6d1c63 net: fix skb length accounting after generic XDP frag adjustment
a08196c3cc10 packet: synchronize pressure clearing with ring reconfiguration
fdd4d7d52358 net/packet: reset the MAC header on the packet-socket transmit path
d48ea5c9c4c3 packet: use consistent hard_header_len in TX_RING send path
b06b6fce6d7d packet: use consistent hard_header_len in non-ring send paths
384b4dae1427 ipvs: clear IPv4 options after rebasing tunnel ICMP errors
ad8439a21081 ipvs: separate destination availability state
bc1286dca5a4 ipvs: properly update the overload flag on dest edit
7c3fdb37de14 ipvs: add totalconns for dest
2335dedc1922 ipvs: stop estimator after disabled calc phase
dd04114af0d4 ima: fix out-of-bounds read in xattr_verify()
3cc26c8907db mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF
7e55ca1080f0 Input: evdev - fix information leak in evdev_pass_values()
0b8ff21cbda8 mm: fix incorrect flush address in direct page table reclaim
cc4a1a2ce0c5 vt: stabilize tty reference in kbd_keycode with tty_port_tty_get
7bf32337a710 vt: add permission check for KDSKBMETA ioctl
fdbf547d91bf usbnet: cap max_mtu for drivers without bind callback
48303f3ae0fa net: usb: ipheth: fix carrier_work UAF on disconnect
4039cd807a5a net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()
fc9e54e22845 usb: gadget: f_ncm: Use unsigned int for ndp_index
4364486f249c usb: cdnsp: fix incorrect endian conversions for APB timeout register
4e9b490e555e thunderbolt: icm: Preserve USB4 proxy data-valid bit
0b1ea726c987 usb: xhci: use BIT_ULL for CRCR bits to fix incorrect 64bit mask
0af047703dbe usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
9ad0164f78b6 usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg
7436fb2bed66 usb: quirks: Add ShanWan gamepad to quirk list
015e71a1b565 usb: core: Add quirk for 255-bytes initial config read
d3ed4e6321bb ALSA: usb-audio: fix OOB write on Type II inbound URBs
810e1883d481 Input: evdev - sanitize event type index when fetching event masks
164c31ee252e net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()
4870189064dd ALSA: usb-audio: Fix sticky mixer regressions on M-Audio Fast Track Ultra
e732c3b62465 hwmon: (corsair-psu) serialize debugfs access against hwmon
50401a9ac8ef hwmon: Support guard() and scoped_guard for subsystem locks
c1ab527775e0 hwmon: (ltc4282) Fix parsing adi,current-limit-sense-microvolt
046e56b53c09 hwmon: (ltc4282) Clamp negative current limits
87a58da555f3 hwmon: (ltc4282) Avoid overflow in maximum power calculation
1d43e4ce054b hwmon: (ads7828) Fix external VREF regulator handling
e81580057e98 hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination
f54667b0c162 rqspinlock: Reset tail when preserving queue on deadlock
b7949b0a7d99 watchdog: at91sam9_wdt: prevent timer rearm during teardown
8a4713fe08b0 tls: don't abort the connection on signal-interrupted sends
4d6b9cac6df5 sctp: clear control chunk transport if it is being removed
2c5988c7349c net/atm: fix slab-out-of-bounds read in vcc_setsockopt()
774394d27930 s390/ism: Fix UAF of sba and ieq during ism_dev_exit()
a294c0aa5741 bnge: Fix resource leak in bnge_init_nic() error path
56fd78c8c820 ata: pata_sl82c105: fix bridge revision use-after-free
9a482b2b117e net: thunderbolt: Tear down DMA paths before stopping the rings
764b422116d7 net: qrtr: ns: Raise lookup limit to 128
ff5bcd804b5b net/smc: fix TOCTOU race between smc_listen_out() and listener close
0d75f2c1d076 net: remove WARN_ON_ONCE() from sk_mc_loop()
7fa8a12296d8 net: prestera: validate firmware header length
3a60b5af75ab net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length
538e67e8c788 netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
d974618b2097 tcp: fix TFO max_qlen accounting across reuseport migration
23f682083aa3 bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie
9e61709d8dc8 sctp: fix addip_serial increment on ASCONF_ACK allocation failure
39d56ee7db0b bnxt_en: Fix PTP PPS setting bug
c1962ab4645a bnxt_en: Disable EOP for TPA on all chips to prevent data corruption
04550ca58622 bnxt_en: Refresh VNIC default ring on queue restart if needed
a6b1bf29ec40 bnxt_en: Determine and store default RX ring in vnic structure
2daf5903b946 bnxt_en: Move RSS table fill outside __bnxt_hwrm_vnic_set_rss()
d2897717cd22 net/mlx5e: fix BQL reset on SQ re-activation
41661a81be9b bnge: use int for bnge_fix_rings_count() return value
937f785910ce net: stmmac: resume PHY before hardware setup when opening the interface
6db775482108 selftests/ftrace: refactor eprobes test to fix argument checks
eeaddd910841 hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations
c36f2c22ffdf hwmon: (nzxt-smart2) Check return value of init_device() in probe
961d25b77dd0 drm/xe/uc: Apply RCS/CCS yield policy to SR-IOV VFs
410596743958 drm/xe: Fix memory leak in exec_queue_set_hang_replay_state()
a81f9c44d87f net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers
9b8cfbb58b85 net/openvswitch: check Ethernet header length in key_extract()
9a3eb77a612f vhost-scsi: reject feature changes after endpoint
f8fe3f8d342d vhost-scsi: Validate T10 PI scatterlist counts
a1ae353d8355 net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter
588d4a6795d9 udp: fix potential use-after-free in tunnel segmentation
83ef2f3cab7f bnge: Fix NULL pointer dereference in aux device release
0cc7aa6e0d19 xsk: validate metadata when processing requests
7806d4885c53 xsk: move xsk_tx_metadata_request() to xdp_sock_drv.h
bc63d47611c0 xsk: validate launch-time metadata size
eb4c613d4ebc xsk: clear metadata pointer when no timestamp is requested
8948aab6c349 xsk: pass TX metadata pointer by reference
cfb9d2976b27 xsk: require at least 16 bytes of TX metadata
b478ff6edf58 bnxt: fix memory leak in bnxt_queue_mem_alloc error cases
d01923852e52 tcp: do not change rcv_ssthresh in tcp_measure_rcv_mss()
0b121de89a99 hwmon: (pmbus) Fix type confusion in notification logic
5112365c6820 hwmon: (pmbus/core) Avoid race condition during probe
6c8a9f7bc003 vdpa/mlx5: Fix buffer length in create_direct_keys()
bb9122ba4dc4 vhost/vdpa: reject overflowing PA map page counts on 32-bit
ae128dd19040 vhost_iotlb: bound map allocation in add_range
95dc716ca52b ALSA: usb-audio: Add QUIRK_FLAG_MIXER_GET_CUR_BROKEN for Logitech PRO X 2 LIGHTSPEED
e3668bb2d152 ALSA: usb-audio: Add QUIRK_FLAG_MIXER_GET_CUR_BROKEN
97e74d3e45d6 bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()
99eb9bb12adb counter: microchip-tcb-capture: Fix DT channel validation
e5e060eb63d1 bpf: Fix netns reference imbalance in conntrack kfuncs
13339132d89d accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages()
4aafa600d93e net/mlx5: fw_tracer, return NULL on create error
eda60c85b4f4 devlink: fix net namespace reference leak in reload
49053a39815f net: hisilicon: hix5hd2_gmac: remove redundant NAPI delete
ae9aff870252 net/sched: cls_route: fix fastmap use-after-free on filter
bfc336a9fbbf net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()
d90e72e5e0f9 bpf: Propagate untrusted pointer state in commuted arithmetic
eaffa1495e4f bpf: Preserve pointer state for commuted arithmetic
1501e4d07c6f accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages()
0d2624967117 btrfs: initialize inode mapping flags for cached inodes
60b50ceba624 btrfs: fix memory leak in btrfs_do_encoded_write()
fc50b475ad27 btrfs: lzo: reject inline extents without valid headers
ffa355d5dff3 btrfs: lzo: add error message for invalid headers
ba3e2d9584a4 watchdog: bd96801_wdt: Fix timeout for enabled WDG
369faf64ccbc ipvs: return the csum validation for forward hook
243d0187ec4c ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
3d450788dc04 netfilter: ipset: switch ext_size to atomic64_t
14328d1ecdda pds_core: cancel pending PCI reset work on AER recovery
8530ea7ac96c pds_core: keep the health thread stopped during reset
7165fe321c61 net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock
4f3464fc6c1f enic: fix tx_hang_reset use-after-free on device removal
257c4a3a34d8 bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor
e18f8d166a7c Revert "net: thunderbolt: Enable end-to-end flow control also in transmit"
fe450066628e net: hns3: fix speed configuration residue after driver reload
a272a3d3129d drm/bridge: ps8640: propagate AUX transfer register errors
e71780593647 ovpn: fix incorrect use of rcu_access_pointer()
af82e1375513 ovpn: ensure TCP vars are initialized first
ac5cce2e9557 ovpn: disable IPv4 redirects on MP interfaces
844616a78baa ovpn: hash floated peer by transport identity only
21a2eda3fcc6 ovpn: zero-initialize sockaddr before learning a floated endpoint
43a31142e1d2 ovpn: ensure socket is owned by ovpn before deref sk_user_data
4bc1c83a2e04 ovpn: rehash peer in by_transp_addr table on CMD_PEER_SET
667454802987 ovpn: skip rehash for peers already removed from by_id
8730ac05b2c5 ARM: dts: BCM5301X: fix PCIe controller 2 second interrupt
147ebe15f955 ovpn: add missing rtnl_link_ops->get_size callback
f5d2914f93c2 pinctrl: qcom: ipq806x: mark pci reset as a GPIO pin function
617724534a83 pinctrl: qcom: ipq806x: mark gpio as a GPIO pin function
576b1c202fa0 selftests/sched_ext: Handle sleeping task affinity changes in numa test
5edc5e1df6c0 ARM: npcm: Fix OF node refcount leaks in SMP setup
3aa0c1d23ee1 xfs: handle NULL b_addr in xfs_buf_free
131ab677b033 soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read
d2c8160da4e5 arm64: dts: broadcom: bcm2712: Remove non-functional EL2 virtual timer
b77bd3f067a0 NFS: Decrement refcounts if allocating nfs_free_stateid_data fails
80ed3d762628 NFS: Pin the 'struct nfs_server' during a FREE_STATEID call
517b1e4fe28b sched_ext: Don't enable non-ext tasks in the sub-sched task loops
6428093a4a98 sched_ext: Skip sub-disable teardown for never-linked sub-schedulers
592bc5000d6b sched_ext: Reject setting disallow from init_task outside the enable path
de6f2b6c8d22 arm64: dts: qcom: sdm850-lenovo-yoga-c630: lower PSCI cluster idle
0a234a9a5c1e arm64: dts: qcom: sm8650: Fix IPA IMEM slice
1d724dc6193c arm64: dts: qcom: monaco: Add default GIC address cells
d15ef483c54d arm64: dts: qcom: purwa: Fix GPU IOMMU property
04d06aa023e3 arm64: dts: qcom: glymur: fix QUP serial engine IRQs
f7b52b18c04d arm64: dts: qcom: glymur: fix PCIe SMMU interrupts
5edbb409b0bc drm/amd/display: Check for tg ops in dce110_set_avmute
9d64e8854f5e drm/amd/display: Add AV mute wait frames to dce110_set_avmute
e6a2f5f845f5 gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock
7fd0235c438c selftests/bpf: Add tests for sleepable tracepoint programs
070d4ce6776f selftests/bpf: Fail unbound UDP on sockmap update
300bb214c938 mount: honour SB_NOUSER in the new mount API
62e211a80cfd XANMOD: Add GPLv2 license file

XanMod Kernel 7.1.9-xanmod1

Upgraded? How did it go?

Discussion