Accepted linux 6.12.96-1 (source) into stable-security

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-07-21 12:58 UTC
  • Importiert: 2026-08-15 11:54 UTC
  • CVSS: 7.8
  • Quelle-ID: debian_pts_linux
  • uid_hash: b8c4010a85753a65c19279659395a68bfda617b0bbe43e1d405c42cc883e16c6

Inhalt

From:

        Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To:

         <>

Subject:

    Accepted linux 6.12.96-1 (source) into stable-security

Date:

    Tue, 21 Jul 2026 12:49:58 +0000

Signed by: Salvatore Bonaccorso carnil@debian.org

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512

Format: 1.8 Date: Mon, 20 Jul 2026 09:13:07 +0200 Source: linux Architecture: source Version: 6.12.96-1 Distribution: trixie-security Urgency: high Maintainer: Debian Kernel Team debian-kernel@lists.debian.org Changed-By: Salvatore Bonaccorso carnil@debian.org Closes: 1140651 Changes: linux (6.12.96-1) trixie-security; urgency=high .

  • New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.96
    • [arm64] bpf, arm64: Reject out-of-range B.cond targets
    • nfsd: fix file change detection in CB_GETATTR
    • nfsd: release layout stid on setlease failure
    • userfaultfd: gate must_wait writability check on pte_present()
    • perf: Fix dangling cgroup pointer in cpuctx backport
    • bcachefs: avoid truncating fiemap extent length
    • drm/amd: Fix set but not used warnings
    • gpio: rockchip: change the GPIO version judgment logic
    • gpio: rockchip: teardown bugs and resource leaks
    • gpio: rockchip: fix generic IRQ chip leak on remove (CVE-2026-53226)
    • mm/vmalloc: take vmap_purge_lock in shrinker (CVE-2026-46093)
    • device property: initialize the remaining fields of fwnode_handle in fwnode_init()
    • f2fs: validate orphan inode entry count
    • f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
    • f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
    • f2fs: fix potential deadlock in f2fs_balance_fs()
    • f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()
    • f2fs: fix listxattr handling of corrupted xattr entries
    • fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
    • nfsd: add nfsd_file_{get,put} to 'nfs_to' nfsd_localio_operations
    • nfs_common: rename functions that invalidate LOCALIO nfs_clients
    • NFSv4/flexfiles: Remove cred local variable dependency
    • NFSv4/flexfiles: Add data structure support for striped layouts
    • NFSv4/flexfiles: reject zero filehandle version count
    • locking/rtmutex: Make sure we wake anything on the wake_q when we release the lock->wait_lock
    • apparmor: advertise the tcp fast open fix is applied
    • nfsd: move name lookup out of nfsd4_list_rec_dir()
    • nfsd: change nfs4_client_to_reclaim() to allocate data
    • bonding: fix xfrm offload feature setup on active-backup mode
    • block: add a store_limit operations for sysfs entries
    • block: fix queue freeze vs limits lock order in sysfs store methods (CVE-2025-21807)
    • mm/khugepaged: write all dirty file folios when collapsing
    • perf trace beauty fcntl: Fix build with older kernel headers
    • ACPI: CPPC: Suppress UBSAN warning caused by field misuse
    • ACPI: NFIT: core: Fix possible NULL pointer dereference
    • [amd64] platform/x86: intel-hid: Protect ACPI notify handler against recursion
    • perf/core: Detach event groups during remove_on_exec
    • [amd64] drm/i915: ensure segment offset never exceeds allowed max
    • usb: gadget: function: rndis: add length check to response query
    • usb: gadget: function: rndis: add length check for header
    • iio: accel: bmc150: clamp the device-reported FIFO frame count
    • iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
    • iio: adc: lpc32xx: Initialize completion before requesting IRQ
    • iio: adc: spear: Initialize completion before requesting IRQ
    • iio: adc: ti-ads1119: fix PM reference leak in buffer preenable
    • iio: adc: ti-ads124s08: Return reset GPIO lookup errors
    • iio: backend: fix uninitialized data in debugfs
    • iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
    • iio: common: st_sensors: honour channel endianness in read_axis_data
    • iio: event: Fix event FIFO reset race
    • iio: gyro: bmg160: bail out when bandwidth/filter is not in table
    • iio: gyro: bmg160: wait full startup time after mode change at probe
    • iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
    • iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
    • iio: imu: inv_icm42600: fix timestamp clock period by using lower value
    • iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
    • iio: imu: st_lsm6dsx: deselect shub page before reading whoami
    • iio: light: al3010: fix incorrect scale for the highest gain range
    • iio: light: gp2ap002: fix runtime PM leak on read error
    • iio: light: opt3001: fix missing state reset on timeout
    • iio: light: tsl2591: return actual error from probe IRQ failure
    • iio: light: veml6030: fix channel type when pushing events
    • iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call
    • iio: resolver: ad2s1210: notify trigger and clear state on fault read error
    • iio: temperature: Build mlx90635 with CONFIG_MLX90635
    • iio: temperature: ltc2983: Fix n_wires default bypassing rotation check
    • iio: temperature: ltc2983: Fix reinit_completion() called after conversion start
    • ALSA: virtio: Add missing 384 kHz PCM rate mapping
    • ALSA: virtio: Validate control metadata from the device
    • ALSA: ymfpci: check snd_ctl_new1() return value
    • ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
    • ALSA: cmipci: check snd_ctl_new1() return value
    • ALSA: es1938: check snd_ctl_new1() return value
    • ALSA: firewire: isight: bound the sample count to the packet payload
    • ALSA: gus: check snd_ctl_new1() return value
    • ALSA: ice1712: check snd_ctl_new1() return value
    • ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
    • ALSA: usb-audio: avoid kobject path lookup in DualSense match
    • ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
    • ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks
    • ALSA: usb-audio: Roll back quirk control caches on write errors
    • ALSA: usb-audio: Update Babyface Pro control caches only after successful writes
    • ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes
    • vfio/pci: Use a private flag to prevent power state change with VFs
    • vfio/pci: Latch disable_idle_d3 per device
    • vfio/pci: Release the VGA arbiter client on register_device() failure
    • vfio/pci: Fix racy bitfields and tighten struct layout
    • vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
    • vfio: Remove device debugfs before releasing devres
    • Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB
    • Bluetooth: btusb: fix use-after-free on registration failure
    • Bluetooth: btusb: fix use-after-free on marvell probe failure
    • Bluetooth: btusb: fix wakeup source leak on probe failure
    • [arm*] binder: fix UAF in binder_thread_release()
    • [arm*] binder: fix UAF in binder_free_transaction()
    • usb: xhci: Fix sleep in atomic context in xhci_free_streams()
    • usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
    • PCI: host-common: Request bus reassignment when not probe-only
    • [arm*] PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
    • mm/damon/ops-common: handle extreme intervals in damon_hot_score()
    • netfilter: ipset: fix race between dump and ip_set_list resize
    • virtio_pci: fix vq info pointer lookup via wrong index
    • virtio-mmio: fix device release warning on module unload
    • hwrng: virtio: clamp device-reported used.len at copy_data()
    • USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
    • usb: dwc3: run gadget disconnect from sleepable suspend context
    • 6lowpan: fix NHC entry use-after-free on error path
    • tipc: fix out-of-bounds read in broadcast Gap ACK blocks
    • staging: vme_user: bound slave read/write to the kern_buf size
    • smb: client: restrict implied bcc[0] exemption to responses without data area
    • staging: vme_user: fix location monitor leak in fake bridge
    • staging: vme_user: fix location monitor leak in tsi148 bridge
    • media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe
    • staging: media: atomisp: reduce load_primary_binaries() stack usage
    • staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
    • staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
    • staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
    • staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
    • staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()
    • staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
    • staging: rtl8723bs: fix OOB write in HT_caps_handler()
    • crypto: amlogic - avoid double cleanup in meson_crypto_probe()
    • ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL
    • net: af_key: initialize alg_key_len for IPComp states
    • audit: Fix data races of skb_queue_len() readers on audit_queue
    • Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
    • coresight: etb10: restore atomic_t for shared reading state
    • debugobjects: Plug race against a concurrent OOM disable
    • fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
    • NTB: epf: Avoid calling pci_irq_vector() from hardirq context
    • gpio: eic-sprd: use raw_spinlock_t in the irq startup path
    • io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
    • netpoll: fix a use-after-free on shutdown path
    • ipv4: igmp: remove multicast group from hash table on device destruction
    • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
    • mfd: cros_ec: Delay dev_set_drvdata() until probe success
    • mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
    • mm: shrinker: fix shrinker_info teardown race with expansion
    • mm: shrinker: fix NULL pointer dereference in debugfs
    • mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup
    • netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
    • netfilter: handle unreadable frags
    • netfilter: ebtables: module names must be null-terminated
    • netfilter: ebtables: terminate table name before find_table_lock()
    • Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
    • Bluetooth: bnep: pin L2CAP connection during netdev registration
    • Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()
    • Bluetooth: fix UAF in bt_accept_dequeue()
    • Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled
    • Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()
    • Bluetooth: L2CAP: validate option length before reading conf opt value
    • fs/ntfs3: rename ni_readpage_cmpr into ni_read_folio_cmpr
    • fs/ntfs3: fsync files by syncing parent inodes
    • fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()
    • fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() (CVE-2026-53027)
    • coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
    • smb/client: Fix error code in smb2_aead_req_alloc()
    • ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
    • ksmbd: add a permission check for FSCTL_SET_ZERO_DATA
    • ksmbd: serialize QUERY_DIRECTORY requests per file
    • ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation
    • ksmbd: require source read access for duplicate extents
    • ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY
    • ksmbd: run set info with opener credentials
    • ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION
    • ksmbd: add per-handle permission check to FILE_LINK_INFORMATION
    • ksmbd: use opener credentials for delete-on-close
    • ksmbd: use opener credentials for ADS I/O
    • smb: client: fix query directory replay double-free
    • smb: client: fix query_info() replay double-free
    • smb: client: fix double-free in SMB2_ioctl() replay
    • smb: client: fix change notify replay double-free
    • smb: client: fix double-free in SMB2_flush() replay
    • smb: client: fix double-free in SMB2_open() replay
    • smb: client: fix double-free in SMB2_close() replay
    • smb: client: Fix next buffer leak in receive_encrypted_standard()
    • smb: client: use unaligned reads in parse_posix_ctxt()
    • smb: client: harden POSIX SID length parsing
    • smb: client: fix atime clamp check in read completion
    • smb: client: mask server-provided mode to 07777 in modefromsid
    • writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
    • cpufreq: qcom-cpufreq-hw: Fix possible double free
    • firmware_loader: fix device reference leak in firmware_upload_register()
    • [amd64] cpufreq: intel_pstate: Sync policy->cur during CPU offline
    • sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
    • cpufreq: Fix hotplug-suspend race during reboot
    • cpufreq: pcc: fix use-after-free and double free in _OSC evaluation
    • posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
    • clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances
    • X.509: Fix validation of ASN.1 certificate header
    • mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
    • tools/mm/slabinfo: Fix trace disable logic inversion
    • tools/mm/slabinfo: fix total_objects attribute name
    • HID: hid-goodix-spi: validate report size to prevent stack buffer overflow
    • HID: wacom: stop hardware after post-start probe failures
    • HID: letsketch: fix UAF on inrange_timer at driver unbind
    • HID: lg-g15: cancel pending work on remove to fix a use-after-free
    • HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads
    • hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
    • nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
    • media: mtk-jpeg: cancel workqueue on release for supported platforms only
    • serial: 8250_mid: Disable DMA for selected platforms
    • xfs: use null daddr for unset first bad log block
    • xfs: release dquot buffer after dqflush failure
    • xfs: fix unreachable BIGTIME check in dquot flush validation
    • xfs: fix pointer arithmetic error on 32-bit systems
    • xfs: fix exchmaps reservation limit check
    • bpf: Reject fragmented frames in devmap
    • bpf: Restore sysctl new-value from 1 to 0
    • bpf: Validate BTF repeated field counts before expansion
    • net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
    • usb: cdc_acm: Add quirk for Uniden BC125AT scanner
    • usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
    • USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
    • usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()
    • usb: free iso schedules on failed submit
    • usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
    • usb: gadget: udc: Fix use-after-free in gadget_match_driver
    • usb: gadget: f_printer: take kref only for successful open
    • USB: idmouse: fix use-after-free on disconnect race
    • USB: ldusb: fix use-after-free on disconnect race
    • USB: iowarrior: fix use-after-free on disconnect
    • USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
    • USB: legousbtower: fix use-after-free on disconnect race
    • usb: sl811-hcd: disable controller wakeup on remove
    • USB: storage: include US_FL_NO_SAME in quirks mask
    • USB: misc: uss720: unregister parport on probe failure
    • usb: mtu3: unmap request DMA on queue failure
    • USB: serial: keyspan_pda: fix information leak
    • USB: serial: option: add Telit Cinterion FE990D50 compositions
    • USB: serial: digi_acceleport: fix broken rx after throttle
    • USB: serial: digi_acceleport: fix hard lockup on disconnect
    • USB: serial: digi_acceleport: fix write buffer corruption
    • USB: ulpi: fix memory leak on registration failure
    • USB: usb-storage: ene_ub6250: restore media-ready check
    • usbip: tools: support SuperSpeedPlus devices
    • usbip: vudc: fix NULL deref in vep_dequeue()
    • usb: typec: anx7411: use devm_pm_runtime_enable()
    • usb: typec: class: drop PD lookup reference
    • usb: typec: tcpm: Fix VDM type for Enter Mode commands
    • usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
    • usb: typec: ucsi: Invert DisplayPort role assignment
    • usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode
    • usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
    • usb: typec: ucsi: cancel pending work on system suspend
    • usb: gadget: f_fs: Fix DMA fence leak
    • block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
    • [amd64] x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled
    • PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining
    • udf: validate free block extents against the partition length
    • udf: validate VAT header length against the VAT inode size
    • udf: validate sparing table length as an entry count, not a byte count
    • hwrng: jh7110 - fix refcount leak in starfive_trng_read()
    • nvme: target: rdma: fix ndev refcount leak on queue connect
    • dm-ioctl: report an error if a device has no table
    • nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks
    • nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
    • nvmet-auth: validate reply message payload bounds against transfer length
    • btrfs: do not trim a device which is not writeable
    • partitions: aix: bound the pp_count scan to the ppe array
    • isofs: bound Rock Ridge symlink components to the SL record
    • crypto: af_alg - Remove zero-copy support from skcipher and aead
    • [arm64] crypto: caam - use print_hex_dump_devel to guard key hex dumps
    • [arm64] crypto: caam - use print_hex_dump_devel to guard key hex dumps again
    • crypto: ecc - Fix carry overflow in vli multiplication
    • crypto: pcrypt - restore callback for non-parallel fallback
    • [amd64] crypto: ccp - Do not initialize SNP for SEV ioctls
    • [amd64] crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)
    • [amd64] crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)
    • crypto: drbg - Fix returning success on failure in CTR_DRBG
    • crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
    • crypto: drbg - Fix the fips_enabled priority boost
    • [amd64] crypto: qat - keep VFs enabled during reset
    • [amd64] crypto: qat - notify fatal error before AER reset preparation
    • [amd64] crypto: qat - protect service table iterations with service_lock
    • [amd64] crypto: qat - validate RSA CRT component lengths
    • [arm64] fpsimd: Fix type mismatch in sme_{save,load}_state()
    • spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()
    • spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
    • EDAC/i10nm: Don't fail probing if ADXL is missing
    • watchdog: apple: Add "apple,t8103-wdt" compatible
    • regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
    • i2c: core: fix hang on adapter registration failure
    • tracing: Prevent out-of-bounds read in glob matching
    • audit: fix potential integer overflow in audit_log_n_hex()
    • NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
    • module: decompress: check return value of module_extend_max_pages()
    • exfat: bound uniname advance in exfat_find_dir_entry()
    • NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
    • riscv: mm: Unconditionally sfence.vma for spurious fault
    • mm: fix mmap errno value when MAP_DROPPABLE is not supported
    • mm: do file ownership checks with the proper mount idmap
    • [amd64] iommu/amd: Don't split flush for amd_iommu_domain_flush_all()
    • iommufd: Set upper bounds on cache invalidation entry_num and entry_len
    • [amd64] KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs
    • [amd64] KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits
    • [amd64] KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode
    • udmabuf: fix DMA direction mismatch in release_udmabuf()
    • dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning
    • i2c: core: fix irq domain leak on adapter registration failure
    • i2c: core: fix NULL-deref on adapter registration failure
    • i2c: core: fix adapter probe deferral loop
    • i2c: core: fix adapter debugfs creation
    • i2c: core: fix adapter deregistration race
    • i2c: mpc: Fix timeout calculations
    • i2c: stm32f7: truncate clock period instead of rounding it
    • Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure
    • Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
    • Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
    • Input: elan_i2c - prevent division by zero and arithmetic underflow
    • Input: goodix - clamp the device-reported contact count
    • Input: iforce - bound the device-reported force-feedback effect index
    • Input: mms114 - fix touch indexing for MMS134S and MMS136
    • Input: touchwin - reset the packet index on every complete packet
    • Input: mms114 - reject an oversized device packet size
    • Input: maplemouse - fix NULL pointer dereference in open()
    • Input: mms114 - fix multi-touch slot corruption
    • Input: maple_keyb - set driver data before registering input device
    • Input: maplemouse - set driver data before registering input device
    • Input: maplecontrol - set driver data before registering input device
    • RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
    • RDMA/siw: bound Read Response placement to the RREAD length
    • fuse: fix device node leak in cuse_process_init_reply()
    • fuse: re-lock request before returning from fuse_ref_folio()
    • fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req
    • usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks
    • smb: client: reject overlapping data areas in SMB2 responses
    • xfs: fix null pointer dereference in tracepoint
    • xfs: fail recovery on a committed log item with no regions
    • xfs: resample the data fork mapping after cycling ILOCK
    • xfs: don't wrap around quota ids in dqiterate
    • xfs: set xfarray killable sort correctly
    • xfs: clamp timestamp nanoseconds correctly
    • xfs: fully check the parent handle when it points to the rootdir
    • xfs: don't zap bmbt forks if they are MAXLEVELS tall . [ Han Gao ]
  • [riscv64] set NR_CPUS to 128 (Closes: #1140651) . [ Salvatore Bonaccorso ]
  • [rt] Refresh "locking/rt: Annotate unlock followed by lock for sparse." (context changes) Checksums-Sha1: 21b661746036e4cba3c16a788288983c9120733b 288306 linux_6.12.96-1.dsc 78e6ea9b3f9652a1e2fee2824d0335d4cf37d841 151315096 linux_6.12.96.orig.tar.xz c5b3683fcb5d262dc1c46dd52d8b90f05a15d696 1845940 linux_6.12.96-1.debian.tar.xz 4e749797757361bb58d1c932965a50959b91c53a 6883 linux_6.12.96-1_source.buildinfo Checksums-Sha256: 4fca3ebc4d2c1c2c7b88e05dc67fef7a7f539f03b19b4308f61d7ee3e2f1b738 288306 linux_6.12.96-1.dsc 59f9548e0384dbafd08eaf05872576de8de50206f972b091c567a9fc91867ca7 151315096 linux_6.12.96.orig.tar.xz 6052af0c3d43d5676853e25d1a52521d09440fa000dd73c30350783d47271918 1845940 linux_6.12.96-1.debian.tar.xz e933adf1588e7c1230b55602f1351d396f638adf55f53e933a14fcf23d5bfeb3 6883 linux_6.12.96-1_source.buildinfo Files: 5ddd7f2e226b76d61b2d2c472ebf573e 288306 kernel optional linux_6.12.96-1.dsc 295e51ef19b14cb2101caf7c77b44bc6 151315096 kernel optional linux_6.12.96.orig.tar.xz 3f9d5d60e812635c31775930800269f9 1845940 kernel optional linux_6.12.96-1.debian.tar.xz 675d3c6a7738c657452553ae335789a4 6883 kernel optional linux_6.12.96-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmpdzthfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89E7RYQAI93uK9bmXsh/MtqLQ7t1Zx009T+iA/j uAEdt4Ab8Y9FAhqS9vStYeDl39Hgx5JnYpEz98U7tTl1ttJ7QFPZ7KDTvtD5+k/P 4pwASsnmKL3cFSEsRXc1ihTcsqbDOwfZr4ESkD7ojH+YYOKcnENsE+GPHaWNEtMB tble4lNlWVMNfZBurO42IK1nirzb3aTR7yYIzB1QGGLtXvuLDrMiQgndhCqrHPx6 cStigaufry4xvdoCUmcd+Y59dh6rbGevBTROPrpaxe74xkKVyG0gXBRPqu248QZk Wa4ds450lYEXtTQGtqpnYItmsEah3iRNZy+Nd2VlJVbtxxz/SLouk0viyxDV3cHl CDYDJHuQysTl5L11tb2ztvaKF5hwxRd+PD6lrTp1Ys4kvqb7Zoqj2DjRI6ER9z8L 3I6e9CJ0QhA1OTYYqna9fdtVbypvnpW1yAZ/OsnvfM4WqrueezkjCpammefHqxt+ C4bhjGbIXkmp7l+Pcz449Mwho/MQ6QwZAJ2h3dg6YPWgwV5/IYY4VS0qWStFBNK4 yIx4fhwOgA4Ycg9k14oQuI9iA/pj//IN/li02Jw1pFUlcsXpfhH7MT8nX5Nfhz// vEkW8l4427bc9g567krlbve/mAijmsG+oxBja8meVvvGB6uhKx7szuGkmdLIMOt0 DPS5c3qePZLD =J7FM -----END PGP SIGNATURE-----

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2025-21807

HIGH

7.8

2025-02-27

CVE-2026-46093

HIGH

7.8

HIGH

7.8

2026-05-27

CVE-2026-53027

HIGH

7.8

2026-06-24

CVE-2026-53226

HIGH

7.8

2026-06-25

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Debian PTS — linux (Quellpaket)

debian_pts_linux

package_tracker debian, linux, kernel - de https://tracker.debian.org/pkg/linux/rss