-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 22 May 2026 21:01:16 +0200 Source: linux Binary: linux-doc linux-doc-6.12 linux-headers-6.12.90+deb13-common linux-headers-6.12.90+deb13-common-rt linux-libc-dev linux-source linux-source-6.12 linux-support-6.12.90+deb13 Architecture: all Version: 6.12.90-1 Distribution: trixie-security Urgency: high Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Salvatore Bonaccorso Description: linux-doc - Linux kernel specific documentation (meta-package) linux-doc-6.12 - Linux kernel specific documentation for version 6.12 linux-headers-6.12.90+deb13-common - Common header files for Linux 6.12.90+deb13 linux-headers-6.12.90+deb13-common-rt - Common header files for Linux 6.12.90+deb13-rt linux-libc-dev - Linux support headers for userspace development linux-source - Linux kernel source (meta-package) linux-source-6.12 - Linux kernel source for version 6.12 with Debian patches linux-support-6.12.90+deb13 - Support files for Linux 6.12 Closes: 1136790 Changes: linux (6.12.90-1) trixie-security; urgency=high . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.89 https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.90 - HID: playstation: Clamp num_touch_reports - media: uvcvideo: Enable VB2_DMABUF for metadata stream - [arm64] dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio pinmux - [arm64] regulator: mt6357: fix OF node reference imbalance - [arm64,armhf] regulator: rk808: fix OF node reference imbalance - media: videobuf2: Set vma_flags in vb2_dma_sg_mmap - [amd64] media: intel/ipu6: fix error pointer dereference - media: saa7164: add ioremap return checks and cleanups - spi: aspeed-smc: fix controller deregistration - [amd64] platform/x86: hp-wmi: Ignore backlight and FnLock events - vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating bytes to copy - [arm64] drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata() - [amd64] drm/i915/psr: Init variable to avoid early exit from et alignment loop - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure - drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. - drm/amdgpu: gate VM CPU HDP flush on reset lock - drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x - drm/amdkfd: Add upper bound check for num_of_nodes - drm/amdgpu: Add bounds checking to ib_{get,set}_value - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB - drm/amdgpu/vce: Prevent partial address patches - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg - drm/amd/display: Change dither policy for 10 bpc output back to dithering - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() - drm/amdkfd: validate SVM ioctl nattr against buffer size - drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() - drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() - drm/radeon: add missing revision check for CI - drm/amdgpu: zero-initialize GART table on allocation - drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ - drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds - drm/amdkfd: Make all TLB-flushes heavy-weight - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission - drm/amdgpu/pm: add missing revision check for CI - drm/amdgpu/pm: align Hawaii mclk workaround with radeon - [arm64] dts: ti: k3-am62a7-sk: Fix pin name in comment from M19 to N22 - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL - batman-adv: fix integer overflow on buff_pos - batman-adv: reject new tp_meter sessions during teardown - batman-adv: stop caching unowned originator pointers in BAT IV - batman-adv: bla: prevent use-after-free when deleting claims - batman-adv: bla: only purge non-released claims - batman-adv: bla: put backbone reference on failed claim hash insert - usb: typec: tcpm: reset internal port states on soft reset AMS - usb: dwc3: Move GUID programming after PHY initialization - ALSA: hda: cs35l56: Propagate ASP TX source control errors - ALSA: misc: Use guard() for spin locks - ALSA: core: Serialize deferred fasync state checks - ALSA: seq: Notify client and port info changes - ALSA: seq: Fix UMP group 16 filtering - Bluetooth: hci_conn: fix potential UAF in create_big_sync - [arm64,armhf] spi: tegra20-sflash: fix controller deregistration - [arm64,armhf] spi: tegra114: fix controller deregistration - mm/hugetlb_cma: round up per_node before logging it - block: cleanup blkdev_report_zones() - block: reorganize struct blk_zone_wplug - block: fix zone write plug removal - tracefs: Fix default permissions not being applied on initial mount - fbcon: Avoid OOB font access if console rotation fails - mm/damon/core: disallow time-quota setting zero esz - mm/damon/core: implement damon_kdamond_pid() - mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values - mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values - bonding: fix use-after-free due to enslave fail after slave array update (CVE-2026-23171) - io_uring/kbuf: support min length left for incremental buffers - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() - btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type() - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak - tracing/probes: Limit size of event probe to 3K - batman-adv: stop tp_meter sessions during mesh teardown - batman-adv: tp_meter: fix tp_num leak on kmalloc failure - vsock: fix buffer size clamping order - vsock/virtio: fix length and offset in tap skb for split packets - vsock/virtio: fix empty payload in tap skb for non-linear buffers - vsock/virtio: fix accept queue count leak on transport mismatch - drm/amdgpu/vcn3: Avoid overflow on msg bound check - drm/amdgpu/vcn4: Avoid overflow on msg bound check . [ Salvatore Bonaccorso ] * Bluetooth: btmtk: accept too short WMT FUNC_CTRL events (Closes: #1136790) * net: skbuff: preserve shared-frag marker during coalescing (CVE-2026-46300) * net: skbuff: propagate shared-frag marker through frag-transfer helpers Checksums-Sha1: 6fa4d1f8d6f73f8dcf5b9a50772cf5fb14e73fd0 39426756 linux-doc-6.12_6.12.90-1_all.deb 0cb240a696aae9647b0fe0da94594f10367be4dc 1108 linux-doc_6.12.90-1_all.deb 266fb975c5a11198462daefd22029d423d37ddf6 9456840 linux-headers-6.12.90+deb13-common-rt_6.12.90-1_all.deb 9c4b3bdbc16c62300652537486d34bcff25b11b1 11098484 linux-headers-6.12.90+deb13-common_6.12.90-1_all.deb f62fc5a0fda7e34d5f79de31484594bad96c229d 2813044 linux-libc-dev_6.12.90-1_all.deb 42b4e7c32a0899b0f469a2c9e772b34244819bb7 152506096 linux-source-6.12_6.12.90-1_all.deb 48165328f6499eae81525f9f1d7510f3eec6387d 1100 linux-source_6.12.90-1_all.deb 11906696bbb485281e79e641f6b1177abc658ba0 1299928 linux-support-6.12.90+deb13_6.12.90-1_all.deb c6d2bf3fb99ccfab27683e54116d38a29edfb192 13754 linux_6.12.90-1_all-buildd.buildinfo Checksums-Sha256: a9b0f7c85b5634c85d48d089c469345c4ea44db9c0eedb0fb243657e2f735d22 39426756 linux-doc-6.12_6.12.90-1_all.deb 58275ea3317ff0c097d54ae5785f47ac380df5fdbc8a0ebbdd3e774a08f339ca 1108 linux-doc_6.12.90-1_all.deb 271a2be3682aa5f1c72603cc4432b139b9d0b484d179961a8d64fa1fea21ad12 9456840 linux-headers-6.12.90+deb13-common-rt_6.12.90-1_all.deb 511f18d30550384ed9680e0328b3896209e4e46f6f19301f2e6e7bf14cf0555b 11098484 linux-headers-6.12.90+deb13-common_6.12.90-1_all.deb 060c071d55235eaf944272ba90d848116dcface359903b1920ab46af7d63c31d 2813044 linux-libc-dev_6.12.90-1_all.deb e2f83912f59b9ffcdc5d12e3b67d52af644c3acde8bf2c3bf150d3c523aede17 152506096 linux-source-6.12_6.12.90-1_all.deb 8205ef4ef0ba97bfcaac5e89713b6874c90d9d1a4451bebf014c120721465a87 1100 linux-source_6.12.90-1_all.deb fdf885b174fa8d70f5dd7e0c4c70ddc7b99f67a519760dac3140ecd43ae8caa5 1299928 linux-support-6.12.90+deb13_6.12.90-1_all.deb 13b554d5920566d0934378d1bc522fd2c735ebaca705bf9ab6e7f306d6b0afbf 13754 linux_6.12.90-1_all-buildd.buildinfo Files: 6da3c69442f264f27f90df2f3a120e03 39426756 doc optional linux-doc-6.12_6.12.90-1_all.deb e25caef357fa7c0ffce45ca5f3dd3277 1108 doc optional linux-doc_6.12.90-1_all.deb adfebbfaadd648616c43602df1ac227c 9456840 kernel optional linux-headers-6.12.90+deb13-common-rt_6.12.90-1_all.deb 3ea5cba0861ea768b9ca91ef0f5b040e 11098484 kernel optional linux-headers-6.12.90+deb13-common_6.12.90-1_all.deb c9c667eb44ab251a37f326e35747cb01 2813044 devel optional linux-libc-dev_6.12.90-1_all.deb 19b9ab5004804867998c2d15899e0160 152506096 kernel optional linux-source-6.12_6.12.90-1_all.deb 4c0008bd75e694975170281d8a5c8754 1100 kernel optional linux-source_6.12.90-1_all.deb 14dc095f17094adaacbb2fd87bb3f469 1299928 devel optional linux-support-6.12.90+deb13_6.12.90-1_all.deb 6149e66008290b96e071cb36cf470353 13754 kernel optional linux_6.12.90-1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE81O8NL+3kjBAqEvLmgPNRvTf/zcFAmoQzecACgkQmgPNRvTf /zfITA/9EQ6pZnuBu/fqllfJAoDVJKDCjDr1nFabpT+XieonhBff2pI/pEULw2xh TbNKiY2EhOBYY5CsRp433DCmDzekliO9GgwvoBQcJbyiOblCc1B1akJsecFAiZCq k7YwUPfqqYcPY8RkH+S59L1SXSeBdznhHE5UudlEOzbetLCkipqAL04i3Hx62dxh LUxhuVJXbWmwdUUapRf7m7MRpDBC0wJ2IxHrWvE28ONpB0QCrjxJtrZeJw8053OO Be3CFvUeryPc5PTAPCfCgE7ZX20XNR+Yi5KEdBvMtj/ZHbW0B45SoUW3CACQX3F/ 1PH3Rg/U65iiFGMka9/t5vyf5x/uKp5UlfVF/o1y4yAWMqRHqkKn9S10H48Ak82r uAa9zYXTU1ii4AYUsbd3vpbqn+g8ONXsFr/FC/de9ujI87EFXMDYVJQ+BY02wGWg 1oH/OBweuf8U/4gPWjJCFm1NNVE4FiXvzoPqh1feKErrXCcAgvS5q0NQ9/kdm7f8 EJDjKMMhttlgRmxmPPFJB0LKpKzZQGszcouuJ+WinpGjwHgygunxUxWxGuOxO6N5 KB7jyIvPDAFRWah/7iBO/fhhO2aibrGfucJJY3pRD2/pi81dipOYRe63r8rfCsRH q70oNEB18NufPb6rJW5GOu+5GcsfiD8JV5gY+0wGhjYWtCedY4I= =7V0T -----END PGP SIGNATURE-----