From: ftpmaster@ftp-master.debian.org 
  
 Thank you for your contribution to Debian. 
  
  
  
 Accepted: 
  
 -----BEGIN PGP SIGNED MESSAGE----- 
 Hash: SHA512 
  
 Format: 1.8 
 Date: Tue, 12 Aug 2025 05:28:04 +0200 
 Source: linux 
 Architecture: source 
 Version: 6.12.41-1 
 Distribution: trixie-security 
 Urgency: high 
 Maintainer: Debian Kernel Team  
 Changed-By: Salvatore Bonaccorso  
 Closes: 1088522 1108430 1109344 1109676 1109734 1109799 
 Changes: 
  linux (6.12.41-1) trixie-security; urgency=high 
  . 
    * New upstream stable update: 
      https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.39 
      - eventpoll: don't decrement ep refcount while still holding the ep 
 mutex 
        (CVE-2025-38349) 
      - drm/amdgpu/discovery: use specific ip_discovery.bin for legacy asics 
      - drm/amdgpu/ip_discovery: add missing ip_discovery fw 
      - [s390x] crypto: s390/sha - Fix uninitialized variable in SHA-1 and 
 SHA-2 
      - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to 
 avoid 
        Priority Inversion in SRIOV (CVE-2025-38104) 
      - [amd64] ASoC: Intel: SND_SOC_INTEL_SOF_BOARD_HELPERS select 
        SND_SOC_ACPI_INTEL_MATCH 
      - [amd64] ASoC: Intel: soc-acpi: arl: Correct naming of a cs35l56 
 address 
        struct 
      - [amd64] ASoC: Intel: soc-acpi: arl: Add match entries for new cs42l43 
        laptops 
      - [amd64] ASoC: soc-acpi: add get_function_tplg_files ops 
      - [amd64] ASoC: Intel: add sof_sdw_get_tplg_files ops 
      - [amd64] ASoC: Intel: soc-acpi-intel-arl-match: set get_fu 
 ction_tplg_files 
        ops 
      - [amd64] ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches 
      - perf/core: Fix the WARN_ON_ONCE is out of lock protected region 
      - irqchip/irq-msi-lib: Select CONFIG_GENERIC_MSI_IRQ 
      - sched/core: Fix migrate_swap() vs. hotplug 
      - perf: Revert to requiring CAP_SYS_ADMIN for uprobes 
      - ASoC: cs35l56: probe() should fail if the device ID is not recognized 
      - Bluetooth: hci_sync: Fix not disabling advertising instance 
      - Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected 
      - pinctrl: amd: Clear GPIO debounce for suspend 
      - fix proc_sys_compare() handling of in-lookup dentries 
      - sched/deadline: Fix dl_server runtime calculation formula 
      - bnxt_en: eliminate the compile warning in bnxt_request_irq due to 
        CONFIG_RFS_ACCEL 
      - [arm64] poe: Handle spurious Overlay faults 
      - [arm64] net: phy: qcom: move the WoL function to shared library 
      - [arm64] net: phy: qcom: qca808x: Fix WoL issue by utilizing 
        at8031_set_wol() 
      - netlink: Fix wraparounds of sk->sk_rmem_alloc. 
      - vsock: fix `vsock_proto` declaration 
      - tipc: Fix use-after-free in tipc_conn_close(). 
      - tcp: Correct signedness in skb remaining space calculation 
      - vsock: Fix transport_{g2h,h2g} TOCTOU 
      - vsock: Fix transport_* TOCTOU 
      - vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also ` 
 ransport_local` 
      - net: stmmac: Fix interrupt handling for level-triggered mode in 
 DWC_XGMAC2 
      - net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap 
      - net: phy: smsc: Force predictable MDI-X state on LAN87xx 
      - net: phy: smsc: Fix link failure in forced mode with Auto-MDIX 
      - atm: clip: Fix potential null-ptr-deref in to_atmarpd(). 
      - atm: clip: Fix memory leak of struct clip_vcc. 
      - atm: clip: Fix infinite recursive call of clip_push(). 
      - atm: clip: Fix NULL pointer dereference in vcc_sendmsg() 
      - [arm64] net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting 
 for 
        skb_shared_info 
      - net/sched: Abort __tc_modify_qdisc if parent class does not exist 
      - rxrpc: Fix bug due to prealloc collision 
      - rxrpc: Fix oops due to non-existence of prealloc backlog struct 
      - ipmi:msghandler: Fix potential memory corruption in 
 ipmi_create_user() 
      - [amd64] x86/mce/amd: Add default names for MCA banks and blocks 
      - [amd64] x86/mce/amd: Fix threshold limit reset 
      - [amd64] x86/mce: Don't remove sysfs if thresholding sysfs init fails 
      - [amd64] x86/mce: Ensure user polling settings are honored when 
 restarting 
        timer 
      - [amd64] x86/mce: Make sure CMCI banks are cleared during shutdown on 
 Intel 
      - [amd64] KVM: x86/xen: Allow 'out of range' event channel ports in IRQ 
        routing table. 
      - [amd64] KVM: SVM: Add missing member in SNP_LAUNCH_START command 
 structure 
      - [amd64] KVM: SVM: Reject SEV{-ES} intra host migration if vCPU 
 creation 
 is 
        in-flight 
      - KVM: Allow CPU to reschedule while setting per-page memory attributes 
      - ASoC: fsl_sai: Force a software reset when starting in consumer mode 
      - gre: Fix IPv6 multicast route creation. (Closes: #1108430) 
      - md/md-bitmap: fix GPF in bitmap_get_stats() (Closes: #1109734) 
      - [arm64] pinctrl: qcom: msm: mark certain pins as invalid for 
 interrupts 
      - pwm: Fix invalid state detection 
      - pwm: mediatek: Ensure to disable clocks in error path 
      - wifi: prevent A-MSDU attacks in mesh networks (CVE-2025-27558) 
      - wifi: mwifiex: discard erroneous disassoc frames on STA interface 
      - wifi: mt76: mt7921: prevent decap offload config before STA 
 initialization 
      - wifi: mt76: mt7925: prevent NULL pointer dereference in 
        mt7925_sta_set_decap_offload() 
      - wifi: mt76: mt7925: fix the wrong config for tx interrupt 
      - wifi: mt76: mt7925: fix invalid array index in ssid assignment 
 during hw 
  
 [continued in next message] 
  
 --- SoupGate-Win32 v1.05 
  * Origin: you cannot sedate... all the things you hate (1:229/2)