Comment 1 Quality Assurance 2025-04-28 10:00:11 CEST

--- mirror/ftp/pool/main/l/linux-signed-amd64/linux-signed-amd64_6.1.133+1.dsc
+++ apt/ucs_5.2-0-errata5.2-1/source/linux-signed-amd64_6.1.135+1.dsc
@@ -1,6 +1,471 @@
-6.1.133+1 [Thu, 10 Apr 2025 21:32:42 +0200] Salvatore Bonaccorso <carnil@debian.org>:
+6.1.135+1 [Fri, 25 Apr 2025 21:51:43 +0200] Salvatore Bonaccorso <carnil@debian.org>:
 
-  * Sign kernel from linux 6.1.133-1
+  * Sign kernel from linux 6.1.135-1
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.134
+    - watch_queue: fix pipe accounting mismatch
+    - [x86] mm/pat: cpa-test: fix length for CPA_ARRAY test
+    - cpufreq: scpi: compare kHz instead of Hz
+    - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
+    - [x86] fpu: Fix guest FPU state buffer allocation size
+    - [x86] fpu: Avoid copying dynamic FP state from init_task in
+      arch_dup_task_struct()
+    - [x86] platform: Only allow CONFIG_EISA for 32-bit
+    - [x86] sev: Add missing RIP_REL_REF() invocations during sme_enable()
+    - lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock
+    - PM: sleep: Adjust check before setting power.must_resume
+    - selinux: Chain up tool resolving errors in install_policy.sh
+    - [x86] EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
+    - [x86] EDAC/ie31200: Fix the DIMM size mask for several SoCs
+    - [x86] EDAC/ie31200: Fix the error path order of ie31200_init()
+    - thermal: int340x: Add NULL check for adev
+    - PM: sleep: Fix handling devices with direct_complete set on errors
+    - lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
+    - perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
+    - [x86] fpu/xstate: Fix inconsistencies in guest FPU xfeatures
+    - [arm64,armhf] media: verisilicon: HEVC: Initialize start_bit field
+    - [x86] ASoC: cs35l41: check the return value from spi_setup()
+    - HID: remove superfluous (and wrong) Makefile entry for
+      CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
+    - ALSA: hda/realtek: Always honor no_shutup_pins
+    - [arm64] drm/bridge: ti-sn65dsi86: Fix multiple instances
+    - drm/dp_mst: Fix drm RAD print
+    - PCI: Use downstream bridges for distributing resources
+    - PCI/ASPM: Fix link state exit during switch upstream function removal
+    - [arm64] drm/msm/dsi: Set PHY usescase (and mode) before registering DSI
+      host
+    - [arm64] PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without
+      data payload
+    - [arm64] PCI: brcmstb: Use internal register to change link capability
+    - [arm64] PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
+    - [arm64] PCI: brcmstb: Fix potential premature regulator disabling
+    - PCI/portdrv: Only disable pciehp interrupts early when needed
+    - PCI: Avoid reset when disabled via sysfs
+    - drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
+    - PCI: Remove stray put_device() in pci_register_host_bridge()
+    - drm/amd/display: avoid NPD when ASIC does not support DMUB
+    - PCI: pciehp: Don't enable HPIE when resuming in poll mode
+    - [mips*] fbdev: sm501fb: Add some geometry checks.
+    - [arm64] clk: amlogic: gxbb: drop incorrect flag on 32k clock
+    - [arm64,armhf] remoteproc: core: Clear table_sz when rproc_shutdown
+    - bpf: Use preempt_count() directly in bpf_send_signal_common()
+    - lib: 842: Improve error handling in sw842_compress()
+    - [arm64] clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
+    - RDMA/core: Don't expose hw_counters outside of init net namespace
+    - RDMA/mlx5: Fix calculation of total invalidated pages
+    - RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
+    - IB/mad: Check available slots before posting receive WRs
+    - [arm64,armhf] pinctrl: tegra: Set SFIO mode to Mux Register
+    - [arm64] clk: amlogic: g12b: fix cluster A parent data
+    - [arm64] clk: amlogic: gxbb: drop non existing 32k clock parent
+    - [arm64] clk: amlogic: g12a: fix mmc A peripheral clock
+    - [x86] entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
+    - power: supply: max77693: Fix wrong conversion of charge input threshold
+      value
+    - [powerpc*] crypto: nx - Fix uninitialised hv_nxc on error
+    - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
+    - [mips*] mfd: sm501: Switch to BIT() to mitigate integer overflows
+    - [x86] dumpstack: Fix inaccurate unwinding from exception stacks due to
+      misplaced assignment
+    - isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
+    - soundwire: slave: fix an OF node reference leak in soundwire slave device
+    - [arm64] coresight-etm4x: add isb() before reading the TRCSTATR
+    - iio: accel: mma8452: Ensure error return on failure to matching
+      oversampling ratio
+    - iio: accel: msa311: Fix failure to release runtime pm if direct mode claim
+      fails.
+    - usb: xhci: correct debug message page size calculation
+    - iio: adc: ad7124: Fix comparison of channel configs
+    - perf evlist: Add success path to evlist__create_syswide_maps
+    - perf units: Fix insufficient array space
+    - kexec: initialize ELF lowest address to ULONG_MAX
+    - ocfs2: validate l_tree_depth to avoid out-of-bounds access
+    - NFSv4: Don't trigger uneccessary scans for return-on-close delegations
+    - fuse: fix dax truncate/punch_hole fault path
+    - i3c: master: svc: Fix missing the IBI rules
+    - perf python: Fixup description of sample.id event member
+    - perf python: Decrement the refcount of just created event on failure
+    - perf python: Don't keep a raw_data pointer to consumed ring buffer space
+    - perf python: Check if there is space to copy all the event
+    - fs/procfs: fix the comment above proc_pid_wchan()
+    - perf tools: annotate asm_pure_loop.S
+    - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
+    - exfat: fix the infinite loop in exfat_find_last_cluster()
+    - rtnetlink: Allocate vfinfo size for VF GUIDs when supported
+    - rndis_host: Flag RNDIS modems as WWAN devices
+    - ksmbd: use aead_request_free to match aead_request_alloc
+    - ksmbd: fix multichannel connection failure
+    - net/mlx5e: SHAMPO, Make reserved size independent of page size
+    - ring-buffer: Fix bytes_dropped calculation issue
+    - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are
+      invalid
+    - sched/smt: Always inline sched_smt_active()
+    - context_tracking: Always inline ct_{nmi,irq}_{enter,exit}()
+    - rcu-tasks: Always inline rcu_irq_work_resched()
+    - wifi: iwlwifi: fw: allocate chained SG tables for dump
+    - wifi: iwlwifi: mvm: use the right version of the rate API
+    - nvme-tcp: fix possible UAF in nvme_tcp_poll
+    - nvme-pci: clean up CMBMSC when registering CMB fails
+    - nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
+    - wifi: brcmfmac: keep power during suspend if board requires it
+    - affs: generate OFS sequence numbers starting at 1
+    - affs: don't write overlarge OFS data block size fields
+    - ALSA: hda/realtek: Fix Asus Z13 2025 audio
+    - ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0
+    - [x86] platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go
+      4 tablet
+    - HID: i2c-hid: improve i2c_hid_get_report error message
+    - ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using
+      CS35L41 HDA
+    - ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using
+      CS35L41 HDA
+    - sched/deadline: Use online cpus for validating runtime
+    - locking/semaphore: Use wake_q to wake up processes outside lock critical
+      section
+    - [x86] sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
+    - drm/amd: Keep display off while going into S4
+    - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
+    - can: statistics: use atomic access in hot path
+    - memory: omap-gpmc: drop no compatible check
+    - hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
+    - spufs: fix a leak on spufs_new_file() failure
+    - spufs: fix gang directory lifetimes
+    - spufs: fix a leak in spufs_create_context()
+    - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
+    - ntb: intel: Fix using link status DB's
+    - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets
+      only
+    - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
+    - net_sched: skbprio: Remove overly strict queue assertions
+    - [arm64,armhf] net: mvpp2: Prevent parser TCAM memory corruption
+    - udp: Fix memory accounting leak.
+    - vsock: avoid timeout during connect() if the socket is closing
+    - tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
+    - netfilter: nft_tunnel: fix geneve_opt type confusion addition
+    - ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
+    - net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy
+    - net: fix geneve_opt length integer overflow
+    - ipv6: Start path selection from the first nexthop
+    - ipv6: Do not consider link down nexthops in path selection
+    - arcnet: Add NULL check in com20020pci_probe()
+    - io_uring/filetable: ensure node switch is always done, if needed
+    - drm/amdgpu/gfx11: fix num_mec
+    - tty: serial: fsl_lpuart: use UARTMODIR register bits for lpuart32 platform
+    - tty: serial: fsl_lpuart: disable transmitter before changing RS485 related
+      registers
+    - usbnet:fix NPE during rx_complete
+    - [x86] platform/x86: ISST: Correct command storage data length
+    - ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
+    - [x86] perf/x86/intel: Apply static call for drain_pebs
+    - [x86] perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read
+    - kunit/overflow: Fix UB in overflow_allocation_test (CVE-2024-46823)
+    - btrfs: handle errors from btrfs_dec_ref() properly (CVE-2024-46753)
+    - [x86] tsc: Always save/restore TSC sched_clock() on suspend/resume
+    - [x86] mm: Fix flush_tlb_range() when used for zapping normal PMDs
+    - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
+    - ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
+    - mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
+    - mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD
+    - ksmbd: add bounds check for create lease context
+    - ksmbd: fix use-after-free in ksmbd_sessions_deregister()
+    - ksmbd: fix session use-after-free in multichannel connection
+    - ksmbd: validate zero num_subauth before sub_auth is accessed
+    - tracing: Fix use-after-free in print_graph_function_flags during tracer
+      switching
+    - tracing: Ensure module defining synth event cannot be unloaded while
+      tracing
+    - tracing: Fix synth event printk format for str fields
+    - tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
+    - [arm64] Don't call NULL in do_compat_alignment_fixup()
+    - ext4: don't over-report free space or inodes in statvfs
+    - ext4: fix OOB read when checking dotdot dir
+    - jfs: fix slab-out-of-bounds read in ea_get()
+    - jfs: add index corruption check to DT_GETPAGE()
+    - media: streamzap: fix race between device disconnection and urb callback
+    - nfsd: put dl_stid if fail to queue dl_recall
+    - NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
+    - tracing: Do not use PERF enums when perf is not defined
+    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.135
+    - tipc: fix memory leak in tipc_link_xmit
+    - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
+    - net: tls: explicitly disallow disconnect
+    - rtnl: add helper to check if rtnl group has listeners
+    - rtnl: add helper to check if a notification is needed
+    - net/sched: cls_api: conditional notification of events
+    - tc: Ensure we have enough buffer space when sending filter netlink
+      notifications
+    - net: ethtool: Don't call .cleanup_data when prepare_data fails
+    - ata: sata_sx4: Add error handling in pdc20621_i2c_read()
+    - nvmet-fcloop: swap list_add_tail arguments
+    - net_sched: sch_sfq: use a temporary work area for validating configuration
+    - net_sched: sch_sfq: move the limit validation
+    - ipv6: Align behavior across nexthops during path selection
+    - net: ppp: Add bound checking for skb data on ppp_sync_txmung
+    - nft_set_pipapo: fix incorrect avx2 match of 5th field octet
+    - fs: consistently deref the files table with rcu_dereference_raw()
+    - umount: Allow superblock owners to force umount
+    - pm: cpupower: bench: Prevent NULL dereference on malloc failure
+    - [x86] cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD
+      when running in a virtual machine
+    - [arm*] perf: arm_pmu: Don't disable counter in armpmu_add()
+    - [arm64] cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
+    - xen/mcelog: Add __nonstring annotations for unterminated strings
+    - HID: pidff: Convert infinite length from Linux API to PID standard
+    - HID: pidff: Do not send effect envelope if it's empty
+    - HID: pidff: Fix null pointer dereference in pidff_find_fields
+    - ALSA: hda: intel: Fix Optimus when GPU has no sound
+    - ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist
+    - [arm64] ASoC: fsl_audmix: register card device depends on 'dais' property
+    - [arm64,armhf] mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two
+      halves
+    - ALSA: usb-audio: Fix CME quirk for UF series keyboards
+    - [x86] ASoC: amd: Add DMI quirk for ACP6X mic support
+    - f2fs: don't retry IO for corrupted data scenario
+    - page_pool: avoid infinite loop to schedule delayed worker
+    - jfs: Fix uninit-value access of imap allocated in the diMount() function
+    - fs/jfs: cast inactags to s64 to prevent potential overflow
+    - fs/jfs: Prevent integer overflow in AG size calculation
+    - jfs: Prevent copying of nlink with value 0 from disk inode
+    - jfs: add sanity check for agwidth in dbMount
+    - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
+    - f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
+    - ahci: add PCI ID for Marvell 88SE9215 SATA Controller
+    - ext4: protect ext4_release_dquot against freezing
+    - ext4: ignore xattrs past end
+    - scsi: st: Fix array overflow in st_setup()
+    - wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
+    - net: vlan: don't propagate flags on open
+    - tracing: fix return value in __ftrace_event_enable_disable for
+      TRACE_REG_UNREGISTER
+    - Bluetooth: hci_uart: fix race during initialization
+    - Bluetooth: qca: simplify WCN399x NVM loading
+    - drm: allow encoder mode_set even when connectors change for crtc
+    - drm/amd/display: Update Cursor request mode to the beginning prefetch
+      always
+    - drm: panel-orientation-quirks: Add support for AYANEO 2S
+    - drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB
+    - drm: panel-orientation-quirks: Add quirk for AYA NEO Slide
+    - drm: panel-orientation-quirks: Add new quirk for GPD Win 2
+    - drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel)
+    - drm/bridge: panel: forbid initializing a panel with unknown connector type
+    - drivers: base: devres: Allow to release group on device release
+    - drm/amdkfd: clamp queue size to minimum
+    - drm/amdkfd: Fix mode1 reset crash issue
+    - drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
+    - drm/amdgpu: handle amdgpu_cgs_create_device() errors in
+      amd_powerplay_create()
+    - [amd64] PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
+    - drm/amdgpu: grab an additional reference on the gang fence v2
+    - tpm, tpm_tis: Workaround failed command reception on Infineon devices
+    - bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
+    - ext4: don't treat fhandle lookup of ea_inode as FS corruption
+    - xenfs/xensyms: respect hypervisor's "next" indication
+    - [arm64] cputype: Add MIDR_CORTEX_A76AE
+    - [arm64] errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
+    - [arm64] errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
+    - [arm64] errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
+    - [arm64] KVM: arm64: Tear down vGIC on failed vCPU creation
+    - spi: cadence-qspi: Fix probe on AM62A LP SK
+    - tpm, tpm_tis: Fix timeout handling when waiting for TPM status
+    - media: streamzap: prevent processing IR data on URB failure
+    - media: platform: stm32: Add check for clk_enable()
+    - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
+    - media: i2c: ccs: Set the device's runtime PM status correctly in remove
+    - media: i2c: ccs: Set the device's runtime PM status correctly in probe
+    - media: i2c: ov7251: Set enable GPIO low in probe
+    - media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
+    - mptcp: sockopt: fix getting IPV6_V6ONLY
+    - mtd: Add check for devm_kcalloc()
+    - [arm64,armhf] net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum
+      for 6320 family
+    - wifi: mt76: Add check for devm_kstrdup()
+    - wifi: mac80211: fix integer overflow in hwmp_route_info_get()
+    - io_uring/kbuf: reject zero sized provided buffers
+    - bus: mhi: host: Fix race between unprepare and queue_buf
+    - ext4: fix off-by-one error in do_split
+    - [armhf] soc: samsung: exynos-chipid: Add NULL pointer check in
+      exynos_chipid_probe()
+    - smb311 client: fix missing tcon check when mounting with linux/posix
+      extensions
+    - i3c: master: svc: Use readsb helper for reading MDB
+    - i3c: Add NULL pointer check in i3c_master_queue_ibi()
+    - jbd2: remove wrong sb->s_sequence check
+    - [armhf] mfd: ene-kb3930: Fix a potential NULL pointer dereference
+    - locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
+    - lib: scatterlist: fix sg_split_phys to preserve original scatterlist
+      offsets
+    - mptcp: fix NULL pointer in can_accept_new_subflow
+    - mptcp: only inc MPJoinAckHMacFailure for HMAC failures
+    - mtd: inftlcore: Add error check for inftl_read_oob()
+    - mtd: rawnand: Add status chack in r852_ready()
+    - [arm64] mm: Correct the update of max_pfn
+    - [arm64] dts: mediatek: mt8173: Fix disp-pwm compatible string
+    - btrfs: fix non-empty delayed iputs list on unmount due to compressed write
+      workers
+    - mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
+    - mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
+    - mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
+    - sctp: detect and prevent references to a freed transport in sendmsg
+    - thermal/drivers/rockchip: Add missing rk3328 mapping entry
+    - cifs: avoid NULL pointer dereference in dbg call
+    - cifs: fix integer overflow in match_server()
+    - [arm64] clk: qcom: gdsc: Release pm subdomains in reverse add order
+    - [arm64] clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code
+    - [arm64] clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
+    - [x86] crypto: ccp - Fix check for the primary ASP device
+    - dm-integrity: set ti->error on memory allocation failure
+    - dm-verity: fix prefetch-vs-suspend race
+    - ftrace: Add cond_resched() to ftrace_graph_set_hash()
+    - [arm64] gpio: zynq: Fix wakeup source leaks on device unbind
+    - gve: handle overflow when reporting TX consumed descriptors
+    - [x86] KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory
+      accesses
+    - of/irq: Fix device node refcount leakage in API of_irq_parse_one()
+    - of/irq: Fix device node refcount leakage in API of_irq_parse_raw()
+    - of/irq: Fix device node refcount leakages in of_irq_count()
+    - of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
+    - of/irq: Fix device node refcount leakages in of_irq_init()
+    - PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
+    - PCI: Fix reference leak in pci_alloc_child_bus()
+    - [arm64] pinctrl: qcom: Clear latched interrupt status when changing IRQ
+      type
+    - [arm64] errata: Add newer ARM cores to the spectre_bhb_loop_affected()
+      lists
+    - [x86] ACPI: platform-profile: Fix CFI violation when accessing sysfs files
+    - [x86] e820: Fix handling of subpage regions when calculating nosave ranges
+      in e820__register_nosave_regions()
+    - Bluetooth: hci_uart: Fix another race during initialization
+    - [armhf] HSI: ssi_protocol: Fix use after free vulnerability in
+      ssi_protocol Driver Due to Race Condition (CVE-2025-37838)
+    - [arm64] scsi: hisi_sas: Enable force phy when SATA disk directly connected
+    - wifi: at76c50x: fix use after free access in at76_disconnect
+    - wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
+    - wifi: mac80211: Purge vif txq in ieee80211_do_stop()
+    - wifi: wl1251: fix memory leak in wl1251_tx_work
+    - scsi: iscsi: Fix missing scsi_host_put() in error path
+    - md/raid10: fix missing discard IO accounting
+    - md/md-bitmap: fix stats collection for external bitmaps
+    - [amd64] RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
+    - [arm64] RDMA/hns: Fix wrong maximum DMA segment size
+    - RDMA/core: Silence oversized kvmalloc() warning
+    - Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
+    - Bluetooth: btrtl: Prevent potential NULL dereference
+    - Bluetooth: l2cap: Check encryption key size on incoming connection
+    - Revert "wifi: mac80211: Update skb's control block key in
+      ieee80211_tx_dequeue()"
+    - igc: fix PTM cycle trigger logic
+    - igc: move ktime snapshot into PTM retry loop
+    - igc: handle the IGC_PTP_ENABLED flag correctly
+    - igc: cleanup PTP module if probe fails
+    - net: mctp: Set SOCK_RCU_FREE
+    - net: openvswitch: fix nested key length validation in the set() action
+    - cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
+    - net: b53: enable BPDU reception for management port
+    - net: bridge: switchdev: do not notify new brentries as changed
+    - [arm64,armhf] net: dsa: mv88e6xxx: avoid unregistering devlink regions
+      which were never registered
+    - [arm64,armhf] net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST
+      is unsupported
+    - [arm64,armhf] net: dsa: avoid refcount warnings when
+      ds->ops->tag_8021q_vlan_del() fails
+    - ptp: ocp: fix start time alignment in ptp_ocp_signal_set
+    - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
+    - writeback: fix false warning in inode_to_wb()
+    - Revert "PCI: Avoid reset when disabled via sysfs"
+    - [x86] asus-laptop: Fix an uninitialized variable
+    - nfs: move nfs_fhandle_hash to common include file
+    - nfs: add missing selections of CONFIG_CRC32
+    - nfsd: decrease sc_count directly if fail to queue dl_recall
+    - btrfs: correctly escape subvol in btrfs_show_options()
+    - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
+    - i2c: cros-ec-tunnel: defer probe if parent EC is not present
+    - isofs: Prevent the use of too small fid
+    - loop: properly send KOBJ_CHANGED uevent for disk device
+    - loop: LOOP_SET_FD: send uevents for partitions
+    - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
+    - mm: fix filemap_get_folios_contig returning batches of identical folios
+    - ksmbd: Fix dangling pointer in krb_authenticate
+    - ksmbd: Prevent integer overflow in calculation of deadtime
+    - ksmbd: fix the warning from __kernel_write_iter
+    - smb3 client: fix open hardlink on deferred close file error
+    - string: Add load_unaligned_zeropad() code path to sized_strscpy()
+    - tracing: Fix filter string testing
+    - virtiofs: add filesystem context source name check
+    - scsi: megaraid_sas: Block zero-length ATA VPD inquiry
+    - scsi: ufs: exynos: Ensure consistent phy reference counts
+    - [x86] perf/x86/intel: Allow to update user space GPRs from PEBS records
+    - [x86] perf/x86/intel/uncore: Fix the scale of IIO free running counters on
+      SNR
+    - [x86] perf/x86/intel/uncore: Fix the scale of IIO free running counters on
+      ICX
+    - [x86] perf/x86/intel/uncore: Fix the scale of IIO free running counters on
+      SPR
+    - [arm64] drm/msm/a6xx: Fix stale rpmh votes from GPU
+    - drm/amd: Handle being compiled without SI or CIK support better
+    - drm/amd/pm: Prevent division by zero
+    - drm/amd/pm/powerplay: Prevent division by zero
+    - drm/amd/pm/smu11: Prevent division by zero
+    - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
+    - drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
+    - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
+    - drm/amdgpu/dma_buf: fix page_link check
+    - drm/nouveau: prime: fix ttm_bo_delayed_delete oops
+    - [x86] drm/i915/gvt: fix unterminated-string-initialization warning
+    - io_uring/net: fix accept multishot handling
+    - [arm64] KVM: arm64: Discard any SVE state when entering KVM guests
+    - [arm64] fpsimd: Track the saved FPSIMD state type separately to TIF_SVE
+    - [arm64] fpsimd: Have KVM explicitly say which FP registers to save
+    - [arm64] fpsimd: Stop using TIF_SVE to manage register saving in KVM
+    - [arm64] KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
+    - [arm64] KVM: arm64: Remove host FPSIMD saving for non-protected KVM
+    - [arm64] KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN
+    - [arm64] KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN
+    - [arm64] KVM: arm64: Refactor exit handlers
+    - [arm64] KVM: arm64: Mark some header functions as inline
+    - [arm64] KVM: arm64: Calculate cptr_el2 traps on activating traps
+    - [arm64] KVM: arm64: Eagerly switch ZCR_EL{1,2}
+    - cpufreq: Reference count policy in cpufreq_update_limits()
+    - kbuild: Add '-fno-builtin-wcslen'
+    - mptcp: sockopt: fix getting freebind & transparent
+    - mm: Fix is_zero_page() usage in try_grab_page() (Closes: #1102914)
+    - [x86] split_lock: Fix the delayed detection logic
+    - [x86] pvh: Call C code via the kernel virtual mapping
+    - [powerpc*] rtas: Prevent Spectre v1 gadget construction in sys_rtas()
+      (CVE-2024-46774)
+    - btrfs: fix qgroup reserve leaks in cow_file_range (CVE-2024-46733)
+    - btrfs: zoned: fix zone activation with missing devices
+    - btrfs: zoned: fix zone finishing with missing devices
+    - Revert "Xen/swiotlb: mark xen_swiotlb_fixup() __init"
+    - drm/amd/display: Stop amdgpu_dm initialize when link nums greater than
+      max_links (CVE-2024-46816)
+    - landlock: Add the errata interface
+    - nvmet-fc: Remove unused functions
+    - smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
+      (CVE-2024-46742)
+    - cifs: use origin fullpath for automounts
+    - btrfs: fix the length of reserved qgroup to free
+    - bpf: avoid holding freeze_mutex during mmap operation (CVE-2025-21853)
+    - bpf: Prevent tail call between progs attached to different hooks
+      (CVE-2024-50063)
+    - blk-cgroup: support to track if policy is online
+    - blk-iocost: do not WARN if iocg was already offlined (CVE-2024-36908)
+    - mm: fix apply_to_existing_page_range()
+    - sign-file,extract-cert: move common SSL helper functions to a header
+    - sign-file,extract-cert: avoid using deprecated ERR_get_error_line()
+    - sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3
+    - [mips*] ds1287: Match ds1287_set_base_clock() function types
+    - md: factor out a helper from mddev_put()
+    - md: fix mddev uaf while iterating all_mddevs list (CVE-2025-22126)
+      (Closes: #1086175)
+
+  [ Salvatore Bonaccorso ]
+  * Bump ABI to 34
+
+  [ Ben Hutchings ]
+  * d/rules.d/certs: Add newly required include directory to CPPFLAGS
+
+6.1.133-1 [Thu, 10 Apr 2025 21:32:42 +0200] Salvatore Bonaccorso <carnil@debian.org>:
 
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.130

<http://piuparts.knut.univention.de/5.2-1/#5747130661281528208>

Comment 2 Christian Castens 2025-05-05 10:09:33 CEST

*** This bug has been marked as a duplicate of bug 58227 ***

Comment 3 Christian Castens 2025-05-05 15:36:32 CEST

*** This bug has been marked as a duplicate of bug 58227 ***

Comment 4 Christian Castens 2025-05-05 15:46:37 CEST

OK: bug
OK: yaml
OK: announce_errata
OK: patch
~OK: piuparts
 manual test installing the header packages fine

[5.2-1] 539323b02a Bug #58225: linux-signed-amd64 6.1.135+1
 doc/errata/staging/linux-signed-amd64.yaml | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

Comment 5 Monika Turfeld 2025-09-09 10:12:33 CEST

Please reopen if necessary