linux (6.17.13-1~bpo13+1) trixie-backports; urgency=medium

  * Rebuild for trixie-backports

linux (6.17.13-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.17.13
    - [arm64,armhf] gpu: host1x: Fix race in syncpt alloc/free
    - [amd64] accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume
      fail
    - [amd64] accel/ivpu: Rework bind/unbind of imported buffers
    - [amd64] accel/ivpu: Fix page fault in
      ivpu_bo_unbind_all_bos_from_context()
    - [amd64] accel/ivpu: Make function parameter names consistent
    - [amd64] accel/ivpu: Fix DCT active percent format
    - drm/vgem-fence: Fix potential deadlock on release
    - bpf: Cleanup unused func args in rqspinlock implementation
    - tools/nolibc: handle NULL wstatus argument to waitpid()
    - USB: Fix descriptor count when handling invalid MBIM extended descriptor
    - perf bpf_counter: Fix opening of "any"(-1) CPU events
    - ima: Attach CREDS_CHECK IMA hook to bprm_creds_from_file LSM hook
    - [arm64] pinctrl: renesas: rzg2l: Fix PMC restore
    - [arm64] clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle
      callback
    - [arm64] clk: renesas: cpg-mssr: Read back reset registers to assure values
      latched
    - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync()
    - objtool: Fix standalone --hacks=jump_label
    - objtool: Fix weak symbol detection
    - [amd64] accel/ivpu: Fix race condition when mapping dmabuf
    - perf parse-events: Fix legacy cache events if event is duplicated in a PMU
    - wifi: ath10k: move recovery check logic into a new work
    - wifi: ath11k: restore register window after global reset
    - wifi: ath12k: Fix MSDU buffer types handling in RX error path
    - wifi: ath12k: fix VHT MCS assignment
    - wifi: ath12k: fix TX and RX MCS rate configurations in HE mode
    - sched/fair: Forfeit vruntime on yield
    - [arm64,armhf] irqchip/bcm2712-mip: Fix OF node reference imbalance
    - [arm64,armhf] irqchip/bcm2712-mip: Fix section mismatch
    - [arm64,armhf] irqchip/irq-brcmstb-l2: Fix section mismatch
    - [arm64,armhf] irqchip/imx-mu-msi: Fix section mismatch
    - [arm64] irqchip/renesas-rzg2l: Fix section mismatch
    - [riscv64] irqchip/starfive-jh8100: Fix section mismatch
    - [arm64] irqchip/qcom-irq-combiner: Fix section mismatch
    - crypto: authenc - Correctly pass EINPROGRESS back up to the caller
    - ntfs3: fix uninit memory after failed mi_read in mi_format_new
    - ntfs3: Fix uninit buffer allocated by __getname()
    - dt-bindings: clock: qcom,x1e80100-gcc: Add missing USB4 clocks/resets
    - [arm64] clk: qcom: gcc-x1e80100: Add missing USB4 clocks/resets
    - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu()
    - inet: Avoid ehash lookup race in inet_ehash_insert()
    - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule()
    - [arm64] firmware: qcom: tzmem: fix qcom_tzmem_policy kernel-doc
    - crypto: aead - Fix reqsize handling
    - block/mq-deadline: Introduce dd_start_request()
    - block/mq-deadline: Switch back to a single dispatch list
    - [arm64] dts: imx95-15x15-evk: add fan-supply property for pwm-fan
    - perf annotate: Check return value of evsel__get_arch() properly
    - tty: introduce tty_port_tty guard()
    - tty: serial: imx: Only configure the wake register when device is set as
      wakeup source
    - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
    - wifi: ath11k: fix VHT MCS assignment
    - wifi: ath11k: fix peer HE MCS assignment
    - [s390x] smp: Fix fallback CPU detection
    - scsi: ufs: core: Move the ufshcd_enable_intr() declaration
    - [s390x] ap: Don't leak debug feature files if AP instructions are not
      available
    - tools/power turbostat: Regression fix Uncore MHz printed in hex
    - wifi: ath12k: restore register window after global reset
    - leds: upboard: Fix module alias
    - PCI: endpoint: pci-epf-test: Fix sleeping function being called from
      atomic context
    - perf hwmon_pmu: Fix uninitialized variable warning
    - phy: mscc: Fix PTP for VSC8574 and VSC8572
    - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock().
    - [arm64] dts: qcom: qcm2290: Add CCI node
    - [arm64] dts: qcom: qcm2290: Fix camss register prop ordering
    - RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
    - drm/amdgpu: add userq object va track helpers
    - drm/amdgpu/userq: fix SDMA and compute validation
    - wifi: iwlwifi: mld: add null check for kzalloc() in
      iwl_mld_send_proto_offload()
    - Revert "mtd: rawnand: marvell: fix layouts"
    - mtd: nand: relax ECC parameter validation check
    - perf: Remove get_perf_callchain() init_nr argument
    - bpf: Refactor stack map trace depth calculation into helper function
    - bpf: Fix stackmap overflow check in __bpf_get_stackid()
    - [amd64] perf/x86/intel/cstate: Remove PC3 support from LunarLake
    - task_work: Fix NMI race condition
    - [amd64] x86/dumpstack: Prevent KASAN false positive warnings in
      __show_regs()
    - [amd64] accel/ivpu: Remove skip of dma unmap for imported buffers
    - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set
    - tools/nolibc/dirent: avoid errno in readdir_r
    - [armhf] pinctrl: stm32: fix hwspinlock resource leak in probe function
    - drm: nova: select NOVA_CORE
    - [amd64] accel/ivpu: Fix race condition when unbinding BOs
    - pidfs: add missing PIDFD_INFO_SIZE_VER1
    - pidfs: add missing BUILD_BUG_ON() assert on struct pidfd_info
    - i3c: fix refcount inconsistency in i3c_master_register
    - i3c: master: svc: Prevent incomplete IBI transaction
    - random: use offstack cpumask when necessary
    - wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload()
    - wifi: ath12k: fix reusing m3 memory
    - wifi: ath12k: fix error handling in creating hardware group
    - wifi: ath12k: unassign arvif on scan vdev create failure
    - [arm64] interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS
    - [arm64] dts: qcom: msm8996: add interconnect paths to USB2 controller
    - [arm64,armhf] interconnect: debugfs: Fix incorrect error handling for NULL
      path
    - drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource()
    - perf lock contention: Load kernel map before lookup
    - perf record: skip synthesize event when open evsel failed
    - timers/migration: Convert "while" loops to use "for"
    - timers/migration: Remove locking on group connection
    - timers/migration: Fix imbalanced NUMA trees
    - power: supply: rt5033_charger: Fix device node reference leaks
    - power: supply: cw2015: Check devm_delayed_work_autocancel() return code
    - power: supply: max17040: Check iio_read_channel_processed() return code
    - power: supply: rt9467: Return error on failure in
      rt9467_set_value_from_ranges()
    - power: supply: rt9467: Prevent using uninitialized local variable in
      rt9467_set_value_from_ranges()
    - power: supply: wm831x: Check wm831x_set_bits() return value
    - power: supply: apm_power: only unset own apm_get_power_status
    - scsi: target: Do not write NUL characters into ASCII configfs output
    - scsi: target: Fix LUN/device R/W and total command stats
    - fs/9p: Don't open remote file with APPEND mode when writeback cache is
      used
    - [arm64] drm/panthor: Handle errors returned by drm_sched_entity_init()
    - [arm64] drm/panthor: Fix group_free_queue() for partially initialized
      queues
    - [arm64] drm/panthor: Fix UAF race between device unplug and FW event
      processing
    - [arm64] drm/panthor: Fix race with suspend during unplug
    - [arm64] drm/panthor: Fix UAF on kernel BO VA nodes
    - [arm64] firmware: ti_sci: Set IO Isolation only if the firmware is capable
    - [amd64] iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show
    - cleanup: fix scoped_class()
    - libbpf: Fix parsing of multi-split BTF
    - [armhf] dts: am335x-netcom-plus-2xx: add missing GPIO labels
    - [armhf] dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible
    - [armhf] dts: omap3: n900: Correct obsolete TWL4030 power compatible
    - entry,unwind/deferred: Fix unwind_reset_info() placement
    - coresight: ETR: Fix ETR buffer use-after-free issue
    - [amd64] x86/boot: Fix page table access in 5-level to 4-level paging
      transition
    - efi/libstub: Fix page table access in 5-level to 4-level paging transition
    - wifi: rtw89: usb: use common error path for skbs in rtw89_usb_rx_handler()
    - wifi: rtw89: usb: fix leak in rtw89_usb_write_port()
    - wifi: ath12k: Fix timeout error during beacon stats retrieval
    - ext4: correct the checking of quota files before moving extents
    - io_uring: use WRITE_ONCE for user shared memory
    - [amd64] perf/x86: Fix NULL event access and potential PEBS record loss
    - [amd64] perf/x86/intel: Correct large PEBS flag check
    - regulator: core: disable supply if enabling main regulator fails
    - md: delete mddev kobj before deleting gendisk kobj
    - md: fix rcu protection in md_wakeup_thread
    - md: avoid repeated calls to del_gendisk
    - nbd: defer config put in recv_work
    - scsi: stex: Fix reboot_notifier leak in probe error path
    - scsi: smartpqi: Fix device resources accessed after device removal
    - iio: imu: bmi270: fix dev_err_probe error msg
    - dt-bindings: PCI: amlogic: Fix the register name of the DBI region
    - RDMA/rtrs: server: Fix error handling in get_or_create_srv
    - [arm64,armhf] coresight: tmc: add the handle of the event to the path
    - ntfs3: init run lock for extend inode
    - [arm64] drm/panthor: Fix potential memleak of vma structure
    - scsi: ufs: core: fix incorrect buffer duplication in
      ufshcd_read_string_desc()
    - md: delete md_redundancy_group when array is becoming inactive
    - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs
    - [powerpc*] kdump: Fix size calculation for hot-removed memory ranges
    - [powerpc*] 32: Fix unpaired stwcx. on interrupt exit
    - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper()
    - nbd: defer config unlock in nbd_genl_connect
    - coresight: Change device mode to atomic type
    - [arm64] coresight: etm4x: Always set tracer's device mode on target CPU
    - [armhf] coresight: etm3x: Always set tracer's device mode on target CPU
    - [arm64] coresight: etm4x: Correct polling IDLE bit
    - [arm64] coresight: etm4x: Add context synchronization before enabling
      trace
    - [arm64] coresight: etm4x: Properly control filter in CPU idle with
      FEAT_TRF
    - perf tools: Fix missing feature check for inherit + SAMPLE_READ
    - drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display
      features
    - drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook
    - [arm64] clk: renesas: r9a09g077: Propagate rate changes to parent clocks
    - lib/vsprintf: Check pointer before dereferencing in time_and_date()
    - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
    - ocfs2: use correct endian in ocfs2_dinode_has_extents
    - ACPI: property: Fix fwnode refcount leak in
      acpi_fwnode_graph_parse_endpoint()
    - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls
    - leds: netxbig: Fix GPIO descriptor leak in error paths
    - bpf: Free special fields when update [lru_,]percpu_hash maps
    - PCI: keystone: Exit ks_pcie_probe() for invalid mode
    - [arm64] dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A
    - [arm64] dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A
    - [arm64] dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 3C
    - [amd64] crypto: iaa - Fix incorrect return value in save_iaa_wq()
    - [s390x] fpu: Fix false-positive kmsan report in fpu_vstl()
    - [arm64] dts: qcom: qrb2210-rb1: Fix UART3 wakeup IRQ storm
    - [arm64] drm/msm/dpu: drop dpu_hw_dsc_destroy() prototype
    - ps3disk: use memcpy_{from,to}_bvec index
    - PCI: Prevent resource tree corruption when BAR resize fails
    - bpf: Prevent nesting overflow in bpf_try_get_buffers
    - bpf: Handle return value of ftrace_set_filter_ip in register_fentry
    - bpf: Check skb->transport_header is set in bpf_skb_check_mtu
    - mshv: Fix deposit memory in MSHV_ROOT_HVCALL
    - mshv: Fix create memory region overlap check
    - watchdog: wdat_wdt: Fix ACPI table leak in probe function
    - watchdog: starfive: Fix resource leak in probe error path
    - fuse_ctl_add_conn(): fix nlink breakage in case of early failure
    - tracefs: fix a leak in eventfs_create_events_dir()
    - NFSD/blocklayout: Fix minlength check in proc_layoutget
    - [arm64] dts: imx95-tqma9596sa: fix TPM5 pinctrl node name
    - [arm64] dts: imx95-tqma9596sa: reduce maximum FlexSPI frequency to 66MHz
    - block/blk-throttle: Fix throttle slice time for SSDs
    - [arm64] drm/msm: Fix NULL pointer dereference in crashstate_get_vm_logs()
    - [arm64] drm/msm: fix missing NULL check after kcalloc in
      crashstate_get_bos()
    - [arm64] drm/msm/a2xx: stop over-complaining about the legacy firmware
    - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
    - net: phy: Add helper for fixing RGMII PHY mode based on internal mac delay
    - [riscv64] net: stmmac: dwmac-sophgo: Add phy interface filter
    - bpf: Fix invalid prog->stats access when update_effective_progs fails
    - [powerpc*] 64s/hash: Restrict stress_hpt_struct memblock region to within
      RMA limit
    - [powerpc*] 64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE
      format
    - net: stmmac: Fix VLAN 0 deletion in vlan_del_hw_rx_fltr()
    - fs/ntfs3: out1 also needs to put mi
    - fs/ntfs3: Prevent memory leaks in add sub record
    - [arm64] drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue
    - [arm64] drm/msm/a6xx: Flush LRZ cache before PT switch
    - [arm64] drm/msm/a6xx: Fix the gemnoc workaround
    - [arm64] drm/msm/a6xx: Improve MX rail fallback in RPMH vote init
    - ipv6: clear RA flags when adding a static route (Closes: #1117959)
    - [arm64,armhf] pwm: bcm2835: Make sure the channel is enabled after
      pwm_request()
    - scsi: ufs: rockchip: Reset controller on PRE_CHANGE of hce enable notify
    - scsi: qla2xxx: Fix improper freeing of purex item
    - net: phy: realtek: create rtl8211f_config_rgmii_delay()
    - [amd64] iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb
    - wifi: mac80211: fix CMAC functions not handling errors
    - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path
    - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path
    - of/fdt: Consolidate duplicate code into helper functions
    - of/fdt: Fix incorrect use of dt_root_addr_cells in
      early_init_dt_check_kho()
    - leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM
    - [arm64] phy: renesas: rcar-gen3-usb2: Fix an error handling path in
      rcar_gen3_phy_usb2_probe()
    - [arm64] phy: rockchip: naneng-combphy: Add SoC prefix to register
      definitions
    - [arm64] phy: rockchip: naneng-combphy: Fix PCIe L1ss support RK3562
    - [arm64] phy: rockchip: samsung-hdptx: Fix reported clock rate in high bpc
      mode
    - [arm64] phy: rockchip: samsung-hdptx: Reduce ROPLL loop bandwidth
    - [arm64] phy: rockchip: samsung-hdptx: Prevent Inter-Pair Skew from
      exceeding the limits
    - [amd64] ASoC: SDCA: Fix missing dash in HIDE DisCo property
    - net: phy: adin1100: Fix software power-down ready condition
    - cpuset: Treat cpusets in attaching as populated
    - [riscv64] clk: spacemit: Set clk_hw_onecell_data::num before using flex
      array
    - wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
    - RAS: Report all ARM processor CPER information to userspace
    - ima: Handle error code returned by ima_filter_rule_match()
    - usb: chaoskey: fix locking for O_NONBLOCK
    - usb: dwc2: fix hang during shutdown if set as peripheral
    - usb: dwc2: fix hang during suspend if set as peripheral
    - usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
    - regulator: pca9450: Fix error code in probe()
    - PM / devfreq: hisi: Fix potential UAF in OPP handling
    - [riscv64] KVM: Fix guest page fault within HLV* instructions
    - erofs: correct FSDAX detection
    - erofs: limit the level of fs stacking for file-backed mounts
    - RDMA/bnxt_re: Fix the inline size for GenP7 devices
    - RDMA/bnxt_re: Pass correct flag for dma mr creation
    - crypto: ahash - Fix crypto_ahash_import with partial block data
    - crypto: ahash - Zero positive err value in ahash_update_finish
    - ASoC: tas2781: correct the wrong period
    - wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx()
    - wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks
    - wifi: mt76: mt7925: add MBSSID support
    - wifi: mt76: mt7921: add MBSSID support
    - Revert "wifi: mt76: mt792x: improve monitor interface handling"
    - wifi: mt76: mt7996: fix max nss value when getting rx chainmask
    - wifi: mt76: mt7996: fix implicit beamforming support for mt7992
    - wifi: mt76: mt7996: fix several fields in mt7996_mcu_bss_basic_tlv()
    - wifi: mt76: mt7996: fix teardown command for an MLD peer
    - wifi: mt76: mt7996: set link_valid field when initializing wcid
    - wifi: mt76: mt7996: fix MLD group index assignment
    - wifi: mt76: mt7996: fix using wrong phy to start in mt7996_mac_restart()
    - wifi: mt76: mt7996: grab mt76 mutex in mt7996_mac_sta_event()
    - wifi: mt76: mt7996: skip deflink accounting for offchannel links
    - wifi: mt76: mt7996: Add missing locking in mt7996_mac_sta_rc_work()
    - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
    - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc
    - [arm64] iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables
    - btrfs: fix double free of qgroup record after failure to add delayed ref
      head
    - btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
    - btrfs: fix leaf leak in an error path in btrfs_del_items()
    - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition
    - drm/nouveau: restrict the flush page to a 32-bit address
    - iomap: always run error completions in user context
    - wifi: ieee80211: correct FILS status codes
    - backlight: led-bl: Add devlink to supplier LEDs
    - backlight: lp855x: Fix lp855x.h kernel-doc warnings
    - [arm64] iommu/arm-smmu-qcom: Enable use of all SMR groups when running
      bare-metal
    - RDMA/irdma: Fix data race in irdma_sc_ccq_arm
    - RDMA/irdma: Fix data race in irdma_free_pble
    - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY
    - [arm64] drm/panthor: Avoid adding of kernel BOs to extobj list
    - gfs2: Prevent recursive memory reclaim
    - firmware_loader: make RUST_FW_LOADER_ABSTRACTIONS select FW_LOADER
    - greybus: gb-beagleplay: Fix timeout handling in bootloader functions
    - drm/amd/display: Fix logical vs bitwise bug in
      get_embedded_panel_info_v2_1()
    - hwmon: sy7636a: Fix regulator_enable resource leak on error path
    - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4
    - ublk: prevent invalid access with DEBUG
    - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0
      validation
    - of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node
    - virtio_vdpa: fix misleading return in void function
    - virtio: fix typo in virtio_device_ready() comment
    - virtio: fix whitespace in virtio_config_ops
    - virtio: fix grammar in virtio_queue_info docs
    - virtio: fix virtqueue_set_affinity() docs
    - vdpa/mlx5: Fix incorrect error code reporting in query_virtqueues
    - vhost: Fix kthread worker cgroup failure handling
    - vdpa/pds: use %pe for ERR_PTR() in event handler registration
    - virtio: clean up features qword/dword terms
    - [amd64] ASoC: Intel: catpt: Fix error path in hw_params()
    - [armhf] dts: samsung: universal_c210: turn off SDIO WLAN chip during
      system suspend
    - [armhf] dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during
      system suspend
    - [armhf] dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during
      system suspend
    - [armhf] dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during
      system suspend
    - regulator: core: Protect regulator_supply_alias_list with
      regulator_list_mutex
    - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()"
    - netfilter: flowtable: check for maximum number of encapsulations in bridge
      vlan
    - netfilter: nf_conncount: rework API to use sk_buff directly
    - netfilter: nft_connlimit: update the count if add was skipped
    - iavf: Implement settime64 with -EOPNOTSUPP
    - net: stmmac: fix rx limit check in stmmac_rx_zc()
    - vfio/pci: Use RCU for error/request triggers to avoid circular locking
    - net: phy: aquantia: check for NVMEM deferral
    - net: netpoll: initialize work queue before error checks
    - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
    - rqspinlock: Enclose lock/unlock within lock entry acquisitions
    - rqspinlock: Use trylock fallback when per-CPU rqnode is busy
    - [arm64] remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
    - md/raid5: fix IO hang when array is broken with IO inflight
    - [armhf] net: dsa: b53: fix VLAN_ID_IDX write size for BCM5325/65
    - [armhf] net: dsa: b53: fix extracting VID from entry for BCM5325/65
    - [armhf] net: dsa: b53: b53_arl_read{,25}(): use the entry for comparision
    - [armhf] net: dsa: b53: move reading ARL entries into their own function
    - [armhf] net: dsa: b53: move writing ARL entries into their own functions
    - [armhf] net: dsa: b53: provide accessors for accessing ARL_SRCH_CTL
    - [armhf] net: dsa: b53: split reading search entry into their own functions
    - [armhf] net: dsa: b53: move ARL entry functions into ops struct
    - [armhf] net: dsa: b53: add support for 5389/5397/5398 ARL entry format
    - [armhf] net: dsa: b53: use same ARL search result offset for BCM5325/65
    - [armhf] net: dsa: b53: fix CPU port unicast ARL entries for BCM5325/65
    - [armhf] net: dsa: b53: add support for bcm63xx ARL entry format
    - [armhf] net: dsa: b53: fix BCM5325/65 ARL entry multicast port masks
    - [armhf] net: dsa: b53: fix BCM5325/65 ARL entry VIDs
    - net: hsr: create an API to get hsr port type
    - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
      (CVE-2025-68325)
    - perf jitdump: Add sym/str-tables to build-ID generation
    - perf tools: Mark split kallsyms DSOs as loaded
    - perf tools: Fix split kallsyms DSO counting
    - perf hist: In init, ensure mem_info is put on error paths
    - [arm64,armhf] pinctrl: single: Fix incorrect type for error return
      variable
    - 9p: fix cache/debug options printing in v9fs_show_options
    - sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the
      last task migrates out
    - sched/core: Fix psi_dequeue() for Proxy Execution
    - [amd64] platform/x86:intel/pmc: Update Arrow Lake telemetry GUID
    - f2fs: maintain one time GC mode is enabled during whole zoned GC cycle
    - rtc: amlogic-a4: fix double free caused by devm
    - kbuild: install-extmod-build: Fix when given dir outside the build dir
    - kbuild: install-extmod-build: Properly fix CC expansion when ccache is
      used
    - NFS: Avoid changing nlink when file removes and attribute updates race
    - fs/nls: Fix utf16 to utf8 conversion
    - NFS: Initialise verifiers for visible dentries in readdir and lookup
    - NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
    - NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state
    - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
    - [arm64] panthor: save task pid and comm in panthor_group
    - [arm64] drm/panthor: Prevent potential UAF in group creation
    - Revert "nfs: ignore SB_RDONLY when remounting nfs"
    - Revert "nfs: clear SB_RDONLY before getting superblock"
    - Revert "nfs: ignore SB_RDONLY when mounting nfs"
    - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
    - NFS: Fix inheritance of the block sizes when automounting
    - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
    - [amd64] platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
    - [amd64] ASoC: amd: acp: Audio is not resuming after s0ix
    - f2fs: revert summary entry count from 2048 to 512 in 16kb block support
    - blk-mq: Abort suspend when wakeup events are pending
    - block: fix comment for op_is_zone_mgmt() to include RESET_ALL
    - block: fix memory leak in __blkdev_issue_zero_pages
    - nvme-auth: use kvfree() for memory allocated with kvcalloc()
    - drm/plane: Fix IS_ERR() vs NULL check in
      drm_plane_create_hotspot_properties()
    - regulator: fixed: Rely on the core freeing the enable GPIO
    - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
    - drm/nouveau: refactor deprecated strcpy
    - drm/nouveau: fix circular dep oops from vendored i2c encoder
    - cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB1
    - cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2
    - docs: hwmon: fix link to g762 devicetree binding
    - i2c: spacemit: fix detect issue
    - dma/pool: eliminate alloc_pages warning in atomic_pool_expand
    - ALSA: uapi: Fix typo in asound.h comment
    - drm/amdkfd: Use huge page size to check split svm range alignment
    - rtc: gamecube: Check the return value of ioremap()
    - rtc: max31335: Fix ignored return value in set_alarm
    - ALSA: firewire-motu: add bounds check in put_user loop for DSP events
    - drm/xe/fbdev: use the same 64-byte stride alignment as i915
    - [amd64] drm/i915/fbdev: make intel_framebuffer_create() error return
      handling explicit
    - drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc()
    - drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init
    - [amd64] drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation
    - block: Use RCU in blk_mq_[un]quiesce_tagset() instead of
      set->tag_list_lock
    - [amd64] ASoC: amd: acp: update tdm channels for specific DAI
    - dm-raid: fix possible NULL dereference with undefined raid type
    - dm log-writes: Add missing set_freezable() for freezable kthread
    - efi/cper: Add a new helper function to print bitmasks
    - efi/cper: Adjust infopfx size to accept an extra space
    - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
    - scsi: imm: Fix use-after-free bug caused by unfinished delayed work
      (CVE-2025-68324)
    - perf/core: Fix missing read event generation on task exit
    - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
    - cpu: Make atomic hotplug callbacks run with interrupts disabled on UP
    - ocfs2: fix memory leak in ocfs2_merge_rec_left()
    - [amd64] perf/x86/intel: Fix NULL event dereference crash in
      handle_pmi_common()
    - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt
    - usb: typec: ucsi: fix probe failure in gaokun_ucsi_probe()
    - usb: phy: Initialize struct usb_phy list_head
    - usb: typec: ucsi: fix use-after-free caused by uec->work (CVE-2025-68323)
    - usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required
    - ALSA: dice: fix buffer overflow in detect_stream_formats()
    - ALSA: hda/realtek: Add match for ASUS Xbox Ally projects
    - ALSA: hda/tas2781: fix speaker id retrieval for multiple probes
    - ALSA: hda: cs35l41: Fix NULL pointer dereference in
      cs35l41_hda_read_acpi()
    - ALSA: wavefront: Fix integer overflow in sample size validation

linux (6.17.12-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.17.12
    - Documentation: process: Also mention Sasha Levin as stable tree maintainer
    - jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system
      corrupted
    - ext4: refresh inline data size before write operations
    - ksmbd: ipc: fix use-after-free in ipc_msg_send_request
    - crypto: zstd - fix double-free in per-CPU stream cleanup
    - ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()
    - [amd64] KVM: SVM: Don't skip unrelated instruction if INT3/INTO is
      replaced
    - USB: serial: option: add Foxconn T99W760
    - USB: serial: option: add Telit Cinterion FE910C04 new compositions
    - USB: serial: option: move Telit 0x10c7 composition in the right place
    - USB: serial: ftdi_sio: match on interface number for jtag
    - serial: add support of CPCI cards
    - dt-bindings: serial: rsci: Drop "uart-has-rtscts: false"
    - serial: sh-sci: Fix deadlock during RSCI FIFO overrun error
    - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC
    - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC
    - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct()
    - [arm64,armhf] spi: imx: keep dma request disabled before dma transfer
      setup
    - [amd64] ACPI: MRRM: Fix memory leaks and improve error handling
    - drm/vmwgfx: Use kref in vmw_bo_dirty
    - [arm64] Reject modules with internal alternative callbacks
    - ALSA: hda/tas2781: Add new quirk for HP new projects
    - Bluetooth: btrtl: Avoid loading the config file on security chips
    - [amd64] ASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list
    - smb: fix invalid username check in smb3_fs_context_parse_param()
    - drm/amdkfd: Fix GPU mappings for APU after prefetch
    - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series
    - HID: lenovo: fixup Lenovo Yoga Slim 7x Keyboard rdesc
    - bfs: Reconstruct file type when loading from disk
    - HID: hid-input: Extend Elan ignore battery quirk to USB
    - [amd64] platform/x86/amd/pmc: Add support for Van Gogh SoC
    - [amd64] platform/x86: hp-wmi: mark Victus 16-r0 and 16-s0 for victus_s fan
      and thermal profile support
    - nvme: fix admin request_queue lifetime
    - [arm64] pinctrl: qcom: msm: Fix deadlock in pinmux configuration
    - [amd64] platform/x86: acer-wmi: Ignore backlight event
    - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list
    - [amd64] platform/x86: huawei-wmi: add keys for HONOR models
    - [amd64] platform/x86: intel-uncore-freq: Add additional client processors
    - [amd64] platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list
    - [amd64] platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally
    - sched_ext: Fix possible deadlock in the deferred_irq_workfn()
    - [amd64] platform/x86/intel/hid: Add Nova Lake support
    - HID: elecom: Add support for ELECOM M-XT3URBK (018F)
    - sched_ext: Use IRQ_WORK_INIT_HARD() to initialize
      rq->scx.kick_cpus_irq_work
    - samples: work around glibc redefining some of our defines wrong
    - [amd64] platform/x86: hp-wmi: Add Omen 16-wf1xxx fan support
    - [amd64] platform/x86: hp-wmi: Add Omen MAX 16-ah0xx fan support and
      thermal profile
    - wifi: rtl8xxxu: Add USB ID 2001:3328 for D-Link AN3U rev. A1
    - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1
    - iio: adc: ad4080: fix chip identification
    - [amd64] comedi: check device's attached status in compat ioctls
    - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser
    - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing
    - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing

linux (6.17.11-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.17.11
    - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
    - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted
      URBs
    - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before
      accessing header
    - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before
      accessing data
    - Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso
      interface
    - Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOP
    - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
    - Bluetooth: hci_core: lookup hci_conn on RX path on protocol side
    - Bluetooth: SMP: Fix not generating mackey and ltk when repairing
    - veth: reduce XDP no_direct return section to fix race
    - [arm64,armhf] drm/bridge: sii902x: Fix HDMI detection with
      DRM_BRIDGE_ATTACH_NO_CONNECTOR
    - [amd64] platform/x86: intel: punit_ipc: fix memory corruption
    - net: aquantia: Add missing descriptor cache invalidation on ATL2
    - drm/xe: Fix conversion from clock ticks to milliseconds
    - net/mlx5e: Fix validation logic in rate limiting
    - team: Move team device type change at the end of team_port_add
    - net: sxgbe: fix potential NULL dereference in sxgbe_rx()
    - xsk: avoid overwriting skb fields for multi-buffer traffic
    - xsk: avoid data corruption on cq descriptor number (Closes: #1118437)
    - drm/amdgpu: fix cyan_skillfish2 gpu info fw handling
    - dma-direct: Fix missing sg_dma_len assignment in P2PDMA bus mappings
    - net: wwan: mhi: Keep modem name match with Foxconn T99W640
    - eth: fbnic: Fix counter roll-over issue
    - net: atlantic: fix fragment overflow handling in RX path
    - net: mctp: unconditionally set skb->dev on dst output
    - [arm64,armhf] net: fec: cancel perout_timer when PEROUT is disabled
    - [arm64,armhf] net: fec: do not update PEROUT if it is enabled
    - [arm64,armhf] net: fec: do not allow enabling PPS and PEROUT
      simultaneously
    - [arm64,armhf] net: fec: do not register PPS event for PEROUT
    - iio: st_lsm6dsx: Fixed calibrated timestamp calculation
    - [arm64] mailbox: mtk-cmdq: Refine DMA address handling for the command
      buffer
    - mailbox: pcc: don't zero error register
    - spi: spi-cadence-quadspi: Remove duplicate pm_runtime_put_autosuspend()
      call
    - spi: spi-cadence-quadspi: Enable pm runtime earlier to avoid imbalance
    - fs/namespace: fix reference leak in grab_requested_mnt_ns
    - afs: Fix delayed allocation of a cell's anonymous key
    - ovl: fail ovl_lock_rename_workdir() if either target is unhashed
    - [arm64] spi: spi-nxp-fspi: Add OCT-DTR mode support
    - [arm64] spi: nxp-fspi: Propagate fwnode in ACPI case as well
    - afs: Fix uninit var in afs_alloc_anon_key()
    - timekeeping: Fix error code in tk_aux_sysfs_init()
    - Revert "drm/amd/display: Move setup_stream_attribute"
    - [amd64] Revert "perf/x86: Always store regs->ip in
      perf_callchain_kernel()"
    - iio: buffer-dma: support getting the DMA channel
    - iio: buffer-dmaengine: enable .get_dma_dev()
    - iio: buffer: support getting dma channel from the buffer
    - iio: humditiy: hdc3020: fix units for temperature and humidity measurement
    - iio: humditiy: hdc3020: fix units for thresholds and hysteresis
    - iio: pressure: bmp280: correct meas_time_us calculation
    - iio:common:ssp_sensors: Fix an error handling path ssp_probe()
    - iio: adc: stm32-dfsdm: fix st,adc-alt-channel property handling
    - iio: accel: bmc150: Fix irq assumption regression (Closes: #1106411)
    - virtio-net: avoid unnecessary checksum calculation on guest RX
    - vhost: rewind next_avail_head while discarding descriptors
    - tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs
    - ALSA: hda/cirrus fix cs420x MacPro 6,1 inverted jack detection
    - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230
    - [arm64] dts: imx8qm-mek: fix mux-controller select/enable-gpios polarity
    - atm/fore200e: Fix possible data race in fore200e_open()
    - Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref
    - can: sja1000: fix max irq loop handling
    - [armhf] can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
    - ceph: fix crash in process_v2_sparse_read() for encrypted directories
    - dm-verity: fix unreliable memory allocation
    - drivers/usb/dwc3: fix PCI parent check
    - drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup
    - smb: client: fix memory leak in cifs_construct_tcon()
    - [amd64] thunderbolt: Add support for Intel Wildcat Lake
    - [arm64] slimbus: ngd: Fix reference count leak in
      qcom_slim_ngd_notify_slaves
    - nvmem: layouts: fix nvmem_layout_bus_uevent
    - r8169: fix RTL8127 hang on suspend/shutdown
    - io_uring/net: ensure vectored buffer node import is tied to notification
    - firmware: stratix10-svc: fix bug in saving controller data
    - iommufd/driver: Fix counter initialization for counted_by annotation
    - mm/huge_memory: fix NULL pointer deference when splitting folio
    - mm/memfd: fix information leak in hugetlb folios
    - mmc: sdhci-of-dwcmshc: Promote the th1520 reset handling to ip level
    - mptcp: clear scheduled subflows on retransmit
    - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in
      mptcp_do_fastclose().
    - serial: 8250: Fix 8250_rsa symbol loop
    - [arm64,armhf] serial: amba-pl011: prefer dma_mapping_error() over explicit
      address checking
    - [arm64,riscv64] usb: cdns3: Fix double resource release in cdns3_pci_probe
    - usb: gadget: f_eem: Fix memory leak in eem_unwrap
    - usb: storage: Fix memory leak in USB bulk transport
    - USB: storage: Remove subclass and protocol overrides from Novatek quirk
    - usb: storage: sddr55: Reject out-of-bound new_pba
    - usb: typec: ucsi: psy: Set max current to zero when disconnected
    - usb: uas: fix urb unmapping issue when the uas device is remove during
      ongoing data transfer
    - [amd64,arm64] usb: dwc3: pci: add support for the Intel Nova Lake -S
    - [amd64,arm64] usb: dwc3: pci: Sort out the Intel device IDs
    - [amd64,arm64] usb: dwc3: Fix race condition between concurrent
      dwc3_remove_requests() call paths
    - xhci: fix stale flag preventig URBs after link state error is cleared
    - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host
    - xhci: dbgtty: fix device unregister
    - USB: serial: ftdi_sio: add support for u-blox EVK-M101
    - USB: serial: option: add support for Rolling RW101R-GL
    - [amd64] drm/i915/psr: Reject async flips when selective fetch is enabled
    - drm/xe/guc: Fix stack_depot usage
    - drm/amdgpu: attach tlb fence to the PTs update
    - drm/amd/amdgpu: reserve vm invalidation engine for uni_mes
    - drm/amd/display: Check NULL before accessing
    - drm/amd/display: Don't change brightness for disabled connectors
    - drm/amd/display: Increase EDID read retries
    - [armhf] net: dsa: microchip: common: Fix checks on irq_find_mapping()
    - [armhf] net: dsa: microchip: ptp: Fix checks on irq_find_mapping()
    - [armhf] net: dsa: microchip: Don't free uninitialized ksz_irq
    - [armhf] net: dsa: microchip: Free previously initialized ports on init
      failures
    - [armhf] net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}()
    - libceph: fix potential use-after-free in have_mon_and_osd_map()
    - libceph: prevent potential out-of-bounds writes in
      handle_auth_session_key()
    - libceph: replace BUG_ON with bounds check for map->max_osd
    - mm: swap: remove duplicate nr_swap_pages decrement in
      get_swap_page_of_type()
    - usb: udc: Add trace event for usb_gadget_set_state
    - usb: gadget: udc: fix use-after-free in usb_gadget_state_work
    - Revert "ACPI: Suppress misleading SPCR console message when SPCR table is
      absent"
    - spi: cadence-quadspi: Fix cqspi_probe() error handling for runtime pm

linux (6.17.10-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.17.10
    - [arm64] KVM: arm64: Check the untrusted offset in FF-A memory share
    - timers: Fix NULL function pointer race in timer_shutdown_sync()
    - [amd64] HID: amd_sfh: Stop sensor before starting
    - HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
      (Closes: #1114557)
    - [arm64] dts: rockchip: fix PCIe 3.3V regulator voltage on orangepi-5
    - [arm64] reset: imx8mp-audiomix: Fix bad mask values
    - [amd64] KVM: SVM: Fix redundant updates of LBR MSR intercepts
    - vfat: fix missing sb_min_blocksize() return value checks
    - fs: Fix uninitialized 'offp' in statmount_string()
    - mtdchar: fix integer overflow in read/write ioctls
    - xfs: check the return value of sb_min_blocksize() in xfs_fs_fill_super
    - isofs: check the return value of sb_min_blocksize() in isofs_fill_super
    - shmem: fix tmpfs reconfiguration (remount) when noswap is set
    - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector
    - mptcp: Disallow MPTCP subflows from sockmap
    - [s390x] mm: Fix __ptep_rdp() inline assembly
    - mptcp: Fix proto fallback detection with BPF
    - ACPI: APEI: EINJ: Fix EINJV2 initialization and injection
    - ata: libata-scsi: Fix system suspend for a security locked drive
    - selinux: rename task_security_struct to cred_security_struct
    - selinux: move avdcache to per-task security struct
    - smb: client: introduce close_cached_dir_locked()
    - wifi: rtw89: hw_scan: Don't let the operating channel be last
    - ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan()
    - be2net: pass wrb_params in case of OS2BMC
    - io_uring/cmd_net: fix wrong argument types for skb_queue_splice()
    - [armhf] net: dsa: microchip: lan937x: Fix RGMII delay tuning
    - Revert "drm/tegra: dsi: Clear enable register if powered by bootloader"
    - Input: cros_ec_keyb - fix an invalid memory access
    - Input: goodix - add support for ACPI ID GDIX1003
    - Input: pegasus-notetaker - fix potential out-of-bounds access
    - mm/mempool: fix poisoning order>0 pages with HIGHMEM
    - nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot
    - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl()
    - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
    - PM: sleep: core: Fix runtime PM enabling in device_resume_early()
    - sched_ext: Fix scx_enable() crash on helper kthread creation failure
    - scsi: sg: Do not sleep in atomic context
    - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
    - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups
    - [amd64] platform/x86: alienware-wmi-wmax: Fix "Alienware m16 R1 AMD" quirk
      order
    - [amd64] platform/x86: alienware-wmi-wmax: Add support for the whole "M"
      family
    - [amd64] platform/x86: alienware-wmi-wmax: Add support for the whole "X"
      family
    - [amd64] platform/x86: alienware-wmi-wmax: Add support for the whole "G"
      family
    - [amd64] platform/x86: alienware-wmi-wmax: Add AWCC support to Alienware 16
      Aurora
    - mptcp: fix race condition in mptcp_schedule_work()
    - mptcp: fix a race in mptcp_pm_del_add_timer()
    - mptcp: fix ack generation for fallback msk
    - mptcp: fix duplicate reset on fastclose
    - mptcp: fix premature close in case of fallback
    - mptcp: avoid unneeded subflow-level drops
    - mptcp: decouple mptcp fastclose from tcp close
    - mptcp: do not fallback when OoO is present
    - [arm64,armhf] drm/tegra: dc: Fix reference leak in tegra_dc_couple()
    - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
    - drm/plane: Fix create_in_format_blob() return value
    - drm/amd: Skip power ungate during suspend for VPE
    - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled
    - drm/amd/display: Increase DPCD read retries
    - drm/amd/display: Move sleep into each retry for retrieve_link_cap()
    - drm/amd/display: Fix pbn to kbps Conversion
    - drm/amd/display: Clear the CUR_ENABLE register on DCN20 on DPP5
    - mm/truncate: unmap large folio on split failure
    - [arm64] pinctrl: mediatek: mt8196: align register base names to
      dt-bindings ones
    - xfrm: drop SA reference in xfrm_state_update if dir doesn't match
    - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that
      were never added
    - xfrm: call xfrm_dev_state_delete when xfrm_state_migrate fails to add the
      state
    - xfrm: set err and extack on failure to create pcpu SA
    - [arm64] clk: sunxi-ng: Mark A523 bus-r-cpucfg clock as critical
    - [arm64] clk: sunxi-ng: sun55i-a523-r-ccu: Mark bus-r-dma as critical
    - [arm64] clk: sunxi-ng: sun55i-a523-ccu: Lower audio0 pll minimum rate
    - xfrm: Check inner packet family directly from skb_dst
    - xfrm: Determine inner GSO type from packet inner protocol
    - xfrm: Prevent locally generated packets from direct output in tunnel mode
    - [amd64] pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe()
    - net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
    - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
    - [amd64,armhf] drm/tegra: Add call to put_pid()
    - net: mlxsw: linecards: fix missing error check in
      mlxsw_linecard_devlink_info_get()
    - net: openvswitch: remove never-working support for setting nsh fields
    - veth: more robust handing of race to avoid txq getting stuck
    - nvmet-auth: update sc_c in target host hash calculation
    - nvme-multipath: fix lockdep WARN due to partition scan work
    - [amd64] drm/i915/xe3lpd: Load DMC for Xe3_LPD version 30.02
    - [s390x] ctcm: Fix double-kfree
    - [amd64] platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes
      to errnos
    - [amd64] platform/x86: intel-uncore-freq: fix all header kernel-doc
      warnings
    - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and
      qede_tpa_end()
    - drm/pcids: Split PTL pciids group to make wcl subplatform
    - [amd64] drm/i915/display: Add definition for wcl as subplatform
    - [amd64] drm/i915/xe3: Restrict PTL intel_encoder_is_c10phy() to only PHY A
    - drm/xe/kunit: Fix forcewake assertion in mocs test
    - drm/xe/irq: Handle msix vector0 interrupt
    - [amd64,arm64] idpf: fix possible vport_config NULL pointer deref in remove
    - ice: fix PTP cleanup on driver removal in error path
    - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
    - net/mlx5: Clean up only new IRQ glue on request_irq() failure
    - af_unix: Read sk_peek_offset() again after sleeping in
      unix_stream_read_generic().
    - gpio: cdev: make sure the cdev fd is still active before emitting events
    - net: phylink: add missing supported link modes for the fixed-link
    - tick/sched: Fix bogus condition in report_idle_softirq()
    - cifs: fix memory leak in smb3_fs_context_parse_param error path
    - perf: Fix 0 count issue of cpu-clock
    - vsock: Ignore signal/timeout on connect() if already established
    - timekeeping: Fix resource leak in tk_aux_sysfs_init() error paths
    - ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 2-in-1 14AKP10
    - sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc()
    - bcma: don't register devices disabled in OF
    - sched_ext: defer queue_balance_callback() until after ops.dispatch
    - [arm64] drm/msm: Fix pgtable prealloc error path
    - [amd64] ASoC: rt721: fix prepare clock stop failed
    - cifs: fix typo in enable_gcm_256 module parameter
    - scsi: core: Fix a regression triggered by scsi_host_busy()
    - ALSA: hda/realtek: Fix mute led for HP Victus 15-fa1xxx (MB 8C2D)
    - [amd64] perf/x86/intel/uncore: Add uncore PMU support for Wildcat Lake
    - [amd64] x86/microcode/AMD: Limit Entrysign signature checking to known
      generations
    - smb: client: handle lack of IPC in dfs_cache_refresh()
    - net: tls: Change async resync helpers argument
    - blk-crypto: use BLK_STS_INVAL for alignment errors
    - net: tls: Cancel RX async resync request on rcd_delta overflow
    - [amd64] x86/CPU/AMD: Extend Zen6 model range
    - drm/xe: Prevent BIT() overflow when handling invalid prefetch region
    - ALSA: usb-audio: fix uac2 clock source at terminal parser
    - scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3)
    - tracing/tools: Fix incorrcet short option in usage text for --threads
    - btrfs: set inode flag BTRFS_INODE_COPY_EVERYTHING when logging new name
    - drm/amdgpu: fix gpu page fault after hibernation on PF passthrough
    - smb: client: fix incomplete backport in cfids_invalidation_worker()
    - [amd64] drm/i915/psr: Check drm_dp_dpcd_read return value on PSR dpcd init
    - [amd64] drm/i915/dp_mst: Disable Panel Replay
    - drm/amdgpu/jpeg: Move parse_cs to amdgpu_jpeg.c
    - drm/amdgpu/jpeg: Add parse_cs for JPEG5_0_1
    - xfs: Replace strncpy with memcpy
    - xfs: fix out of bounds memory read error in symlink repair
    - mptcp: fix address removal logic in mptcp_pm_nl_rm_addr
    - drm/amd/display: Insert dccg log for easy debug
    - drm/amd/display: Prevent Gating DTBCLK before It Is Properly Latched
    - tty/vt: fix up incorrect backport to stable releases
    - [amd64] Revert "drm/i915/dp: Reject HBR3 when sink doesn't support TPS4"
    - [amd64] drm/i915/dp: Add device specific quirk to limit eDP rate to HBR2
    - sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads
    - sched_ext: fix flag check for deferred callbacks
    - Revert "gpio: swnode: don't use the swnode's name as the key for GPIO
      lookup"

linux (6.17.9-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.17.9
    - [arm64] drm/mediatek: Add pm_runtime support for GCE power control
    - [amd64] drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD
    - [amd64] drm/i915: Fix conversion between clock ticks and nanoseconds
    - drm/amdgpu: set default gfx reset masks for gfx6-8
    - drm/amd/display: Don't stretch non-native images by default in eDP
    - smb: client: fix refcount leak in smb2_set_path_attr
    - iommufd: Make vfio_compat's unmap succeed if the range is already empty
    - futex: Optimize per-cpu reference counting
    - drm/amd: Fix suspend failure with secure display TA
    - drm/xe/guc: Synchronize Dead CT worker with unbind
    - drm/xe: Move declarations under conditional branch
    - drm/xe: Do clean shutdown also when using flr
    - drm/amd/display: Add pixel_clock to amd_pp_display_configuration
    - drm/amd/pm: Use pm_display_cfg in legacy DPM (v2)
    - drm/amd/display: Disable fastboot on DCE 6 too
    - drm/amd/pm: Disable MCLK switching on SI at high pixel clocks
    - drm/amd: Disable ASPM on SI
    - [arm64] kprobes: check the return value of set_memory_rox()
    - compiler_types: Move unused static inline functions warning to W=2
    - [riscv64] clear hot-unplugged cores from all task mm_cpumasks to avoid
      rfence errors
    - [riscv64] acpi: avoid errors caused by probing DT devices when ACPI is
      used
    - fs: return EOPNOTSUPP from file_setattr/file_getattr syscalls
    - [amd64] ASoC: nau8821: Avoid unnecessary blocking in IRQ handler
    - drm/amdgpu: remove two invalid BUG_ON()s
    - drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM
    - drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices
    - NFS4: Fix state renewals missing after boot
    - drm/amdkfd: fix suspend/resume all calls in mes based eviction path
    - NFS4: Apply delay_retrans to async operations
    - HID: intel-thc-hid: intel-quickspi: Add ARL PCI Device Id's
    - HID: quirks: avoid Cooler Master MM712 dongle wakeup bug
    - ixgbe: handle IXGBE_VF_GET_PF_LINK_STATE mailbox operation
    - HID: nintendo: Wait longer for initial probe
    - NFS: check if suid/sgid was cleared after a write as needed
    - HID: quirks: Add ALWAYS_POLL quirk for VRS R295 steering wheel
    - exfat: fix improper check of dentry.stream.valid_size
    - io_uring: fix unexpected placement on same size resizing
    - smb/server: fix possible memory leak in smb2_read()
    - smb/server: fix possible refcount leak in smb2_sess_setup()
    - HID: logitech-hidpp: Add HIDPP_QUIRK_RESET_HI_RES_SCROLL
    - ASoC: max98090/91: fixed max98091 ALSA widget powering up/down
    - ALSA: hda/realtek: Fix mute led for HP Omen 17-cb0xxx
    - ixgbe: handle IXGBE_VF_FEATURES_NEGOTIATE mbox cmd
    - wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp()
    - erofs: avoid infinite loop due to incomplete zstd-compressed data
    - [arm64,armhf] net: fec: correct rx_bytes statistic for the case SHIFT16 is
      set
    - net: phy: micrel: Introduce lanphy_modify_page_reg
    - net: phy: micrel: Replace hardcoded pages with defines
    - net: phy: micrel: lan8814 fix reset of the QSGMII interface
    - NFSD: Skip close replay processing if XDR encoding fails
    - Bluetooth: MGMT: cancel mesh send timer when hdev removed
    - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
    - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
    - Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion
    - Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions
    - Bluetooth: hci_conn: Fix not cleaning up PA_LINK connections
    - sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
    - [armhf] net: dsa: tag_brcm: do not mark link local traffic as offloaded
    - net/smc: fix mismatch between CLC header and proposal
    - net/handshake: Fix memory leak in tls_handshake_accept()
    - tipc: Fix use-after-free in tipc_mon_reinit_self().
    - net: mdio: fix resource leak in mdiobus_register_device()
    - wifi: mac80211: skip rate verification for not captured PSDUs
    - af_unix: Initialise scc_index in unix_add_edge().
    - Bluetooth: hci_event: Fix not handling PA Sync Lost event
    - net: sched: act_connmark: initialize struct tc_ife to fix kernel leak
    - net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
    - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state()
    - net/mlx5e: Fix maxrate wraparound in threshold between units
    - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps
    - net/mlx5e: Fix potentially misleading debug message
    - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET
    - net/mlx5: Store the global doorbell in mlx5_priv
    - net/mlx5e: Prepare for using different CQ doorbells
    - mlx5: Fix default values in create CQ
    - net_sched: limit try_bulk_dequeue_skb() batches
    - wifi: iwlwifi: mvm: fix beacon template/fixed rate
    - wifi: iwlwifi: mld: always take beacon ies in link grading
    - virtio-net: fix incorrect flags recording in big mode
    - hsr: Fix supervision frame sending on HSRv0
    - hsr: Follow standard for HSRv0 supervision frames
    - [amd64] ACPI: CPPC: Detect preferred core availability on online CPUs
    - [amd64] ACPI: CPPC: Check _CPC validity for only the online CPUs
    - [amd64] ACPI: CPPC: Perform fast check switch only for online CPUs
    - [amd64] ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs
    - [amd64] cpufreq: intel_pstate: Check IDA only before MSR_IA32_PERF_CTL
      writes
    - Bluetooth: L2CAP: export l2cap_chan_hold for modules
    - netfilter: nft_ct: add seqadj extension for natted connections
    - io_uring/rsrc: don't use blk_rq_nr_phys_segments() as number of bvecs
    - acpi,srat: Fix incorrect device handle check for Generic Initiator
    - regulator: fixed: fix GPIO descriptor leak on register failure
    - [arm64] ASoC: codecs: va-macro: fix resource leak in probe error path
    - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
    - drm/vmwgfx: Restore Guest-Backed only cursor plane support
    - ASoC: tas2781: fix getting the wrong device number
    - [arm64] drm/panthor: Flush shmem writes before mapping buffers
      CPU-uncached
    - pnfs: Fix TLS logic in _nfs4_pnfs_v3_ds_connect()
    - pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect()
    - pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS
    - NFS: Check the TLS certificate fields in nfs_match_client()
    - simplify nfs_atomic_open_v23()
    - NFSv2/v3: Fix error handling in nfs_atomic_open_v23()
    - NFS: sysfs: fix leak when nfs_client kobject add fails
    - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync()
    - NFS: Fix LTP test failures when timestamps are delegated
    - ALSA: usb-audio: Fix NULL pointer dereference in
      snd_usb_mixer_controls_badd
    - drm/amd/amdgpu: Ensure isp_kernel_buffer_alloc() creates a new BO
    - acpi/hmat: Fix lockdep warning for hmem_register_resource()
    - drm/client: fix MODULE_PARM_DESC string for "active"
    - bpf: Add bpf_prog_run_data_pointers()
    - bpf: account for current allocated stack depth in
      widen_imprecise_scalars()
    - [riscv64] irqchip/riscv-intc: Add missing free() callback in
      riscv_intc_domain_ops
    - posix-timers: Plug potential memory leak in do_timer_create()
    - hostfs: Fix only passing host root in boot stage with new mount
    - afs: Fix dynamic lookup to fail on cell lookup failure
    - virtio-fs: fix incorrect check for fsvq->kobj
    - binfmt_misc: restore write access before closing files opened by
      open_exec()
    - fs/namespace: correctly handle errors returned by grab_requested_mnt_ns
    - sched_ext: Fix unsafe locking in the scx_dump_state()
    - perf header: Write bpf_prog (infos|btfs)_cnt to data file
    - perf build: Don't fail fast path feature detection when binutils-devel is
      not available
    - perf lock: Fix segfault due to missing kernel map
    - perf test shell lock_contention: Extra debug diagnostics
    - perf test: Fix lock contention test
    - [arm64] dts: rockchip: Set correct pinctrl for I2S1 8ch TX on odroid-m1
    - [arm64] dts: rockchip: Fix PCIe power enable pin for BigTreeTech CB2 and
      Pi2
    - [arm64] dts: rockchip: Make RK3588 GPU OPP table naming less generic
    - HID: hid-ntrig: Prevent memory leak in ntrig_report_version()
    - [arm64] dts: rockchip: Fix USB power enable pin for BTT CB2 and Pi2
    - [arm64] dts: rockchip: drop reset from rk3576 i2c9 node
    - HID: playstation: Fix memory leak in dualshock4_get_calibration_data()
    - HID: uclogic: Fix potential memory leak in error path
    - KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying
    - [arm64] KVM: arm64: Make all 32bit ID registers fully writable
    - [amd64] KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated
    - [amd64] KVM: nSVM: Always recalculate LBR MSR intercepts in
      svm_update_lbrv()
    - [amd64] KVM: nSVM: Fix and simplify LBR virtualization handling with
      nested
    - [amd64] KVM: VMX: Fix check for valid GVA on an EPT violation
    - nfsd: fix refcount leak in nfsd_set_fh_dentry() (CVE-2025-40212)
    - nfsd: add missing FATTR4_WORD2_CLONE_BLKSIZE from supported attributes
    - NFSD: free copynotify stateid in nfs4_free_ol_stateid()
    - gcov: add support for GCC 15
    - ksmbd: close accepted socket when per-IP limit rejects connection
    - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item
    - kho: warn and exit when unpreserved page wasn't preserved
    - strparser: Fix signed/unsigned mismatch bug
    - dma-mapping: benchmark: Restore padding to ensure uABI remained consistent
    - maple_tree: fix tracepoint string pointers
    - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
    - mm/damon/sysfs: change next_update_jiffies to a global variable
    - nilfs2: avoid having an active sc_timer before freeing sci
    - net: netpoll: fix incorrect refcount handling causing incorrect cleanup
    - mm/secretmem: fix use-after-free race in fault handler
    - wifi: mac80211: reject address change while connecting
    - mm/huge_memory: preserve PG_has_hwpoisoned if a folio is split to >0 order
    - fs/proc: fix uaf in proc_readdir_de()
    - mm/mm_init: fix hash table order logging in alloc_large_system_hash()
    - mm/damon/stat: change last_refresh_jiffies to a global variable
    - mm/shmem: fix THP allocation and fallback loop
    - mm/mremap: honour writable bit in mremap pte batching
    - mm, swap: fix potential UAF issue for VMA readahead
    - mm/huge_memory: fix folio split check for anon folios in swapcache
    - mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4
    - [arm64,armhf] mmc: dw_mmc-rockchip: Fix wrong internal phase calculate
    - ALSA: hda/hdmi: Fix breakage at probing nvhdmi-mcp driver
    - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
    - [amd64] ASoC: sdw_utils: fix device reference leak in
      is_sdca_endpoint_present()
    - cifs: client: fix memory leak in smb3_fs_context_parse_param
    - codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for
      slabobj_ext
    - crash: fix crashkernel resource shrink
    - smb: client: fix cifs_pick_channel when channel needs reconnect
    - spi: Try to get ACPI GPIO IRQ earlier
    - [amd64] x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev
    - [amd64] x86/CPU/AMD: Add additional fixed RDSEED microcode revisions
    - gendwarfksyms: Skip files with no exports
    - io_uring/rw: ensure allocated iovec gets cleared for early failure
    - ftrace: Fix BPF fexit with livepatch
    - PM: hibernate: Emit an error when image writing fails
    - PM: hibernate: Use atomic64_t for compressed_size variable
    - btrfs: zoned: fix conventional zone capacity calculation
    - btrfs: zoned: fix stripe width calculation
    - btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe()
    - btrfs: do not update last_log_commit when logging inode due to a new name
    - btrfs: release root after error in data_reloc_print_warning_inode()
    - drm/amdkfd: relax checks for over allocation of save area
    - drm/amdgpu: fix lock warning in amdgpu_userq_fence_driver_process
    - drm/amdgpu: disable peer-to-peer access for DCC-enabled GC12 VRAM surfaces
    - [amd64] drm/i915/psr: fix pipe to vblank conversion
    - drm/xe/xe3lpg: Extend Wa_15016589081 for xe3lpg
    - drm/xe/xe3: Extend wa_14023061436
    - drm/xe/xe3: Add WA_14024681466 for Xe3_LPG
    - pmdomain: arm: scmi: Fix genpd leak on provider registration failure
    - pmdomain: imx: Fix reference count leak in imx_gpc_remove
    - pmdomain: samsung: plug potential memleak during probe
    - pmdomain: samsung: Rework legacy splash-screen handover workaround
    - mm/huge_memory: do not change split_huge_page*() target order silently
    - mm/memory: do not populate page table entries beyond i_size
    - scripts/decode_stacktrace.sh: symbol: avoid trailing whitespaces
    - scripts/decode_stacktrace.sh: symbol: preserve alignment
    - scripts/decode_stacktrace.sh: fix build ID and PC source parsing
    - [amd64] ASoC: da7213: Convert to DEFINE_RUNTIME_DEV_PM_OPS()
    - [amd64] ASoC: da7213: Use component driver suspend/resume
    - [amd64] KVM: x86: Rename local "ecx" variables to "msr" and "pmc" as
      appropriate
    - [amd64] KVM: x86: Add support for RDMSR/WRMSRNS w/ immediate on Intel
    - [amd64] KVM: VMX: Inject #UD if guest tries to execute SEAMCALL or TDCALL
    - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
    - net: phy: micrel: Fix lan8814_config_init

e98bf902715a1dac31333e665aa06656 213741 kernel optional linux_6.17.13-1~bpo13+1.dsc
4012b4c1e02006bea3a9a6071ea7fe37 1490860 kernel optional linux_6.17.13-1~bpo13+1.debian.tar.xz
f84a1976ca4a9b0a128010aff95e0e7c 5973 kernel optional linux_6.17.13-1~bpo13+1_source.buildinfo