-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 20 Jul 2026 09:13:07 +0200
Source: linux
Binary: bpftool bpftool-dbgsym hyperv-daemons hyperv-daemons-dbgsym libcpupower-dev libcpupower1 libcpupower1-dbgsym linux-bpf-dev linux-config-6.12 linux-cpupower linux-cpupower-dbgsym linux-headers-6.12.96+deb13-arm64 linux-headers-6.12.96+deb13-arm64-16k linux-headers-6.12.96+deb13-cloud-arm64 linux-headers-6.12.96+deb13-rt-arm64 linux-image-6.12.96+deb13-arm64-16k-dbg linux-image-6.12.96+deb13-arm64-16k-unsigned linux-image-6.12.96+deb13-arm64-dbg linux-image-6.12.96+deb13-arm64-unsigned linux-image-6.12.96+deb13-cloud-arm64-dbg linux-image-6.12.96+deb13-cloud-arm64-unsigned linux-image-6.12.96+deb13-rt-arm64-dbg linux-image-6.12.96+deb13-rt-arm64-unsigned linux-image-arm64-16k-dbg linux-image-arm64-dbg linux-image-arm64-signed-template linux-image-cloud-arm64-dbg linux-image-rt-arm64-dbg linux-kbuild-6.12.96+deb13 linux-kbuild-6.12.96+deb13-dbgsym linux-perf linux-perf-dbgsym rtla rtla-dbgsym usbip usbip-dbgsym
Architecture: arm64
Version: 6.12.96-1
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 bpftool    - Inspection and simple manipulation of BPF programs and maps
 hyperv-daemons - Support daemons for Linux running on Hyper-V
 libcpupower-dev - CPU frequency and voltage scaling tools for Linux (development fi
 libcpupower1 - CPU frequency and voltage scaling tools for Linux (libraries)
 linux-bpf-dev - Headers for BPF development
 linux-config-6.12 - Debian kernel configurations for Linux 6.12
 linux-cpupower - CPU power management tools for Linux
 linux-headers-6.12.96+deb13-arm64 - Header files for Linux 6.12.96+deb13-arm64
 linux-headers-6.12.96+deb13-arm64-16k - Header files for Linux 6.12.96+deb13-arm64-16k
 linux-headers-6.12.96+deb13-cloud-arm64 - Header files for Linux 6.12.96+deb13-cloud-arm64
 linux-headers-6.12.96+deb13-rt-arm64 - Header files for Linux 6.12.96+deb13-rt-arm64
 linux-image-6.12.96+deb13-arm64-16k-dbg - Debug symbols for linux-image-6.12.96+deb13-arm64-16k
 linux-image-6.12.96+deb13-arm64-16k-unsigned - Linux 6.12 for 64-bit ARMv8 machines with 16k pages
 linux-image-6.12.96+deb13-arm64-dbg - Debug symbols for linux-image-6.12.96+deb13-arm64
 linux-image-6.12.96+deb13-arm64-unsigned - Linux 6.12 for 64-bit ARMv8 machines
 linux-image-6.12.96+deb13-cloud-arm64-dbg - Debug symbols for linux-image-6.12.96+deb13-cloud-arm64
 linux-image-6.12.96+deb13-cloud-arm64-unsigned - Linux 6.12 for arm64 cloud
 linux-image-6.12.96+deb13-rt-arm64-dbg - Debug symbols for linux-image-6.12.96+deb13-rt-arm64
 linux-image-6.12.96+deb13-rt-arm64-unsigned - Linux 6.12 for 64-bit ARMv8 machines, PREEMPT_RT
 linux-image-arm64-16k-dbg - Debugging symbols for Linux arm64-16k configuration (meta-package
 linux-image-arm64-dbg - Debugging symbols for Linux arm64 configuration (meta-package)
 linux-image-arm64-signed-template - Template for signed linux-image packages for arm64
 linux-image-cloud-arm64-dbg - Debugging symbols for Linux cloud-arm64 configuration (meta-packa
 linux-image-rt-arm64-dbg - Debugging symbols for Linux rt-arm64 configuration (meta-package)
 linux-kbuild-6.12.96+deb13 - Kbuild infrastructure for Linux 6.12.96+deb13
 linux-perf - Performance analysis tools for Linux
 rtla       - Real-Time Linux Analysis tools
 usbip      - USB device sharing system over IP network
Closes: 1140651
Changes:
 linux (6.12.96-1) trixie-security; urgency=high
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.96
     - [arm64] bpf, arm64: Reject out-of-range B.cond targets
     - nfsd: fix file change detection in CB_GETATTR
     - nfsd: release layout stid on setlease failure
     - userfaultfd: gate must_wait writability check on pte_present()
     - perf: Fix dangling cgroup pointer in cpuctx backport
     - bcachefs: avoid truncating fiemap extent length
     - drm/amd: Fix set but not used warnings
     - gpio: rockchip: change the GPIO version judgment logic
     - gpio: rockchip: teardown bugs and resource leaks
     - gpio: rockchip: fix generic IRQ chip leak on remove (CVE-2026-53226)
     - mm/vmalloc: take vmap_purge_lock in shrinker (CVE-2026-46093)
     - device property: initialize the remaining fields of fwnode_handle in
       fwnode_init()
     - f2fs: validate orphan inode entry count
     - f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
     - f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
     - f2fs: fix potential deadlock in f2fs_balance_fs()
     - f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()
     - f2fs: fix listxattr handling of corrupted xattr entries
     - fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
     - nfsd: add nfsd_file_{get,put} to 'nfs_to' nfsd_localio_operations
     - nfs_common: rename functions that invalidate LOCALIO nfs_clients
     - NFSv4/flexfiles: Remove cred local variable dependency
     - NFSv4/flexfiles: Add data structure support for striped layouts
     - NFSv4/flexfiles: reject zero filehandle version count
     - locking/rtmutex: Make sure we wake anything on the wake_q when we release
       the lock->wait_lock
     - apparmor: advertise the tcp fast open fix is applied
     - nfsd: move name lookup out of nfsd4_list_rec_dir()
     - nfsd: change nfs4_client_to_reclaim() to allocate data
     - bonding: fix xfrm offload feature setup on active-backup mode
     - block: add a store_limit operations for sysfs entries
     - block: fix queue freeze vs limits lock order in sysfs store methods
       (CVE-2025-21807)
     - mm/khugepaged: write all dirty file folios when collapsing
     - perf trace beauty fcntl: Fix build with older kernel headers
     - ACPI: CPPC: Suppress UBSAN warning caused by field misuse
     - ACPI: NFIT: core: Fix possible NULL pointer dereference
     - [amd64] platform/x86: intel-hid: Protect ACPI notify handler against
       recursion
     - perf/core: Detach event groups during remove_on_exec
     - [amd64] drm/i915: ensure segment offset never exceeds allowed max
     - usb: gadget: function: rndis: add length check to response query
     - usb: gadget: function: rndis: add length check for header
     - iio: accel: bmc150: clamp the device-reported FIFO frame count
     - iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
     - iio: adc: lpc32xx: Initialize completion before requesting IRQ
     - iio: adc: spear: Initialize completion before requesting IRQ
     - iio: adc: ti-ads1119: fix PM reference leak in buffer preenable
     - iio: adc: ti-ads124s08: Return reset GPIO lookup errors
     - iio: backend: fix uninitialized data in debugfs
     - iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
     - iio: common: st_sensors: honour channel endianness in read_axis_data
     - iio: event: Fix event FIFO reset race
     - iio: gyro: bmg160: bail out when bandwidth/filter is not in table
     - iio: gyro: bmg160: wait full startup time after mode change at probe
     - iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
     - iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
     - iio: imu: inv_icm42600: fix timestamp clock period by using lower value
     - iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
     - iio: imu: st_lsm6dsx: deselect shub page before reading whoami
     - iio: light: al3010: fix incorrect scale for the highest gain range
     - iio: light: gp2ap002: fix runtime PM leak on read error
     - iio: light: opt3001: fix missing state reset on timeout
     - iio: light: tsl2591: return actual error from probe IRQ failure
     - iio: light: veml6030: fix channel type when pushing events
     - iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call
     - iio: resolver: ad2s1210: notify trigger and clear state on fault read
       error
     - iio: temperature: Build mlx90635 with CONFIG_MLX90635
     - iio: temperature: ltc2983: Fix n_wires default bypassing rotation check
     - iio: temperature: ltc2983: Fix reinit_completion() called after conversion
       start
     - ALSA: virtio: Add missing 384 kHz PCM rate mapping
     - ALSA: virtio: Validate control metadata from the device
     - ALSA: ymfpci: check snd_ctl_new1() return value
     - ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
     - ALSA: cmipci: check snd_ctl_new1() return value
     - ALSA: es1938: check snd_ctl_new1() return value
     - ALSA: firewire: isight: bound the sample count to the packet payload
     - ALSA: gus: check snd_ctl_new1() return value
     - ALSA: ice1712: check snd_ctl_new1() return value
     - ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
     - ALSA: usb-audio: avoid kobject path lookup in DualSense match
     - ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
     - ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch
       put callbacks
     - ALSA: usb-audio: Roll back quirk control caches on write errors
     - ALSA: usb-audio: Update Babyface Pro control caches only after successful
       writes
     - ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful
       writes
     - vfio/pci: Use a private flag to prevent power state change with VFs
     - vfio/pci: Latch disable_idle_d3 per device
     - vfio/pci: Release the VGA arbiter client on register_device() failure
     - vfio/pci: Fix racy bitfields and tighten struct layout
     - vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
     - vfio: Remove device debugfs before releasing devres
     - Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB
     - Bluetooth: btusb: fix use-after-free on registration failure
     - Bluetooth: btusb: fix use-after-free on marvell probe failure
     - Bluetooth: btusb: fix wakeup source leak on probe failure
     - [arm*] binder: fix UAF in binder_thread_release()
     - [arm*] binder: fix UAF in binder_free_transaction()
     - usb: xhci: Fix sleep in atomic context in xhci_free_streams()
     - usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
     - PCI: host-common: Request bus reassignment when not probe-only
     - [arm*] PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
     - mm/damon/ops-common: handle extreme intervals in damon_hot_score()
     - netfilter: ipset: fix race between dump and ip_set_list resize
     - virtio_pci: fix vq info pointer lookup via wrong index
     - virtio-mmio: fix device release warning on module unload
     - hwrng: virtio: clamp device-reported used.len at copy_data()
     - USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
     - usb: dwc3: run gadget disconnect from sleepable suspend context
     - 6lowpan: fix NHC entry use-after-free on error path
     - tipc: fix out-of-bounds read in broadcast Gap ACK blocks
     - staging: vme_user: bound slave read/write to the kern_buf size
     - smb: client: restrict implied bcc[0] exemption to responses without data
       area
     - staging: vme_user: fix location monitor leak in fake bridge
     - staging: vme_user: fix location monitor leak in tsi148 bridge
     - media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe
     - staging: media: atomisp: reduce load_primary_binaries() stack usage
     - staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
     - staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
     - staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
     - staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
     - staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and
       join_cmd_hdl()
     - staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
     - staging: rtl8723bs: fix OOB write in HT_caps_handler()
     - crypto: amlogic - avoid double cleanup in meson_crypto_probe()
     - ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then
       SMB2_CANCEL
     - net: af_key: initialize alg_key_len for IPComp states
     - audit: Fix data races of skb_queue_len() readers on audit_queue
     - Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
     - coresight: etb10: restore atomic_t for shared reading state
     - debugobjects: Plug race against a concurrent OOM disable
     - fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
     - NTB: epf: Avoid calling pci_irq_vector() from hardirq context
     - gpio: eic-sprd: use raw_spinlock_t in the irq startup path
     - io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
     - netpoll: fix a use-after-free on shutdown path
     - ipv4: igmp: remove multicast group from hash table on device destruction
     - net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
     - mfd: cros_ec: Delay dev_set_drvdata() until probe success
     - mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
     - mm: shrinker: fix shrinker_info teardown race with expansion
     - mm: shrinker: fix NULL pointer dereference in debugfs
     - mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent
       softlockup
     - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
     - netfilter: handle unreadable frags
     - netfilter: ebtables: module names must be null-terminated
     - netfilter: ebtables: terminate table name before find_table_lock()
     - Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
     - Bluetooth: bnep: pin L2CAP connection during netdev registration
     - Bluetooth: btnxpuart: Fix out-of-bounds firmware read in
       nxp_recv_fw_req_v3()
     - Bluetooth: fix UAF in bt_accept_dequeue()
     - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled
     - Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()
     - Bluetooth: L2CAP: validate option length before reading conf opt value
     - fs/ntfs3: rename ni_readpage_cmpr into ni_read_folio_cmpr
     - fs/ntfs3: fsync files by syncing parent inodes
     - fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()
     - fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
       (CVE-2026-53027)
     - coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
     - smb/client: Fix error code in smb2_aead_req_alloc()
     - ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
     - ksmbd: add a permission check for FSCTL_SET_ZERO_DATA
     - ksmbd: serialize QUERY_DIRECTORY requests per file
     - ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation
     - ksmbd: require source read access for duplicate extents
     - ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY
     - ksmbd: run set info with opener credentials
     - ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION
     - ksmbd: add per-handle permission check to FILE_LINK_INFORMATION
     - ksmbd: use opener credentials for delete-on-close
     - ksmbd: use opener credentials for ADS I/O
     - smb: client: fix query directory replay double-free
     - smb: client: fix query_info() replay double-free
     - smb: client: fix double-free in SMB2_ioctl() replay
     - smb: client: fix change notify replay double-free
     - smb: client: fix double-free in SMB2_flush() replay
     - smb: client: fix double-free in SMB2_open() replay
     - smb: client: fix double-free in SMB2_close() replay
     - smb: client: Fix next buffer leak in receive_encrypted_standard()
     - smb: client: use unaligned reads in parse_posix_ctxt()
     - smb: client: harden POSIX SID length parsing
     - smb: client: fix atime clamp check in read completion
     - smb: client: mask server-provided mode to 07777 in modefromsid
     - writeback: fix race between cgroup_writeback_umount() and
       inode_switch_wbs()
     - cpufreq: qcom-cpufreq-hw: Fix possible double free
     - firmware_loader: fix device reference leak in firmware_upload_register()
     - [amd64] cpufreq: intel_pstate: Sync policy->cur during CPU offline
     - sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
     - cpufreq: Fix hotplug-suspend race during reboot
     - cpufreq: pcc: fix use-after-free and double free in _OSC evaluation
     - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
     - clocksource/drivers/timer-tegra186: Fix support for multiple watchdog
       instances
     - X.509: Fix validation of ASN.1 certificate header
     - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
     - tools/mm/slabinfo: Fix trace disable logic inversion
     - tools/mm/slabinfo: fix total_objects attribute name
     - HID: hid-goodix-spi: validate report size to prevent stack buffer overflow
     - HID: wacom: stop hardware after post-start probe failures
     - HID: letsketch: fix UAF on inrange_timer at driver unbind
     - HID: lg-g15: cancel pending work on remove to fix a use-after-free
     - HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte
       reads
     - hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
     - nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
     - media: mtk-jpeg: cancel workqueue on release for supported platforms only
     - serial: 8250_mid: Disable DMA for selected platforms
     - xfs: use null daddr for unset first bad log block
     - xfs: release dquot buffer after dqflush failure
     - xfs: fix unreachable BIGTIME check in dquot flush validation
     - xfs: fix pointer arithmetic error on 32-bit systems
     - xfs: fix exchmaps reservation limit check
     - bpf: Reject fragmented frames in devmap
     - bpf: Restore sysctl new-value from 1 to 0
     - bpf: Validate BTF repeated field counts before expansion
     - net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
     - usb: cdc_acm: Add quirk for Uniden BC125AT scanner
     - usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
     - USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
     - usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()
     - usb: free iso schedules on failed submit
     - usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
     - usb: gadget: udc: Fix use-after-free in gadget_match_driver
     - usb: gadget: f_printer: take kref only for successful open
     - USB: idmouse: fix use-after-free on disconnect race
     - USB: ldusb: fix use-after-free on disconnect race
     - USB: iowarrior: fix use-after-free on disconnect
     - USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
     - USB: legousbtower: fix use-after-free on disconnect race
     - usb: sl811-hcd: disable controller wakeup on remove
     - USB: storage: include US_FL_NO_SAME in quirks mask
     - USB: misc: uss720: unregister parport on probe failure
     - usb: mtu3: unmap request DMA on queue failure
     - USB: serial: keyspan_pda: fix information leak
     - USB: serial: option: add Telit Cinterion FE990D50 compositions
     - USB: serial: digi_acceleport: fix broken rx after throttle
     - USB: serial: digi_acceleport: fix hard lockup on disconnect
     - USB: serial: digi_acceleport: fix write buffer corruption
     - USB: ulpi: fix memory leak on registration failure
     - USB: usb-storage: ene_ub6250: restore media-ready check
     - usbip: tools: support SuperSpeedPlus devices
     - usbip: vudc: fix NULL deref in vep_dequeue()
     - usb: typec: anx7411: use devm_pm_runtime_enable()
     - usb: typec: class: drop PD lookup reference
     - usb: typec: tcpm: Fix VDM type for Enter Mode commands
     - usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
     - usb: typec: ucsi: Invert DisplayPort role assignment
     - usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt
       mode
     - usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
     - usb: typec: ucsi: cancel pending work on system suspend
     - usb: gadget: f_fs: Fix DMA fence leak
     - block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
     - [amd64] x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU
       when SNC enabled
     - PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining
     - udf: validate free block extents against the partition length
     - udf: validate VAT header length against the VAT inode size
     - udf: validate sparing table length as an entry count, not a byte count
     - hwrng: jh7110 - fix refcount leak in starfive_trng_read()
     - nvme: target: rdma: fix ndev refcount leak on queue connect
     - dm-ioctl: report an error if a device has no table
     - nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace
       disks
     - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
     - nvmet-auth: validate reply message payload bounds against transfer length
     - btrfs: do not trim a device which is not writeable
     - partitions: aix: bound the pp_count scan to the ppe array
     - isofs: bound Rock Ridge symlink components to the SL record
     - crypto: af_alg - Remove zero-copy support from skcipher and aead
     - [arm64] crypto: caam - use print_hex_dump_devel to guard key hex dumps
     - [arm64] crypto: caam - use print_hex_dump_devel to guard key hex dumps
       again
     - crypto: ecc - Fix carry overflow in vli multiplication
     - crypto: pcrypt - restore callback for non-parallel fallback
     - [amd64] crypto: ccp - Do not initialize SNP for SEV ioctls
     - [amd64] crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)
     - [amd64] crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)
     - crypto: drbg - Fix returning success on failure in CTR_DRBG
     - crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
     - crypto: drbg - Fix the fips_enabled priority boost
     - [amd64] crypto: qat - keep VFs enabled during reset
     - [amd64] crypto: qat - notify fatal error before AER reset preparation
     - [amd64] crypto: qat - protect service table iterations with service_lock
     - [amd64] crypto: qat - validate RSA CRT component lengths
     - [arm64] fpsimd: Fix type mismatch in sme_{save,load}_state()
     - spi: fsl-lpspi: replace dmaengine_terminate_all() with
       dmaengine_terminate_sync()
     - spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
     - EDAC/i10nm: Don't fail probing if ADXL is missing
     - watchdog: apple: Add "apple,t8103-wdt" compatible
     - regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
     - i2c: core: fix hang on adapter registration failure
     - tracing: Prevent out-of-bounds read in glob matching
     - audit: fix potential integer overflow in audit_log_n_hex()
     - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
     - module: decompress: check return value of module_extend_max_pages()
     - exfat: bound uniname advance in exfat_find_dir_entry()
     - NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
     - riscv: mm: Unconditionally sfence.vma for spurious fault
     - mm: fix mmap errno value when MAP_DROPPABLE is not supported
     - mm: do file ownership checks with the proper mount idmap
     - [amd64] iommu/amd: Don't split flush for amd_iommu_domain_flush_all()
     - iommufd: Set upper bounds on cache invalidation entry_num and entry_len
     - [amd64] KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected
       #DBs
     - [amd64] KVM: x86: Ensure vendor's exit handler runs before fastpath
       userspace exits
     - [amd64] KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in
       guest mode
     - udmabuf: fix DMA direction mismatch in release_udmabuf()
     - dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning
     - i2c: core: fix irq domain leak on adapter registration failure
     - i2c: core: fix NULL-deref on adapter registration failure
     - i2c: core: fix adapter probe deferral loop
     - i2c: core: fix adapter debugfs creation
     - i2c: core: fix adapter deregistration race
     - i2c: mpc: Fix timeout calculations
     - i2c: stm32f7: truncate clock period instead of rounding it
     - Input: synaptics-rmi4 - unregister function handlers on physical driver
       registration failure
     - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
     - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
     - Input: elan_i2c - prevent division by zero and arithmetic underflow
     - Input: goodix - clamp the device-reported contact count
     - Input: iforce - bound the device-reported force-feedback effect index
     - Input: mms114 - fix touch indexing for MMS134S and MMS136
     - Input: touchwin - reset the packet index on every complete packet
     - Input: mms114 - reject an oversized device packet size
     - Input: maplemouse - fix NULL pointer dereference in open()
     - Input: mms114 - fix multi-touch slot corruption
     - Input: maple_keyb - set driver data before registering input device
     - Input: maplemouse - set driver data before registering input device
     - Input: maplecontrol - set driver data before registering input device
     - RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
     - RDMA/siw: bound Read Response placement to the RREAD length
     - fuse: fix device node leak in cuse_process_init_reply()
     - fuse: re-lock request before returning from fuse_ref_folio()
     - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req
     - usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction
       checks
     - smb: client: reject overlapping data areas in SMB2 responses
     - xfs: fix null pointer dereference in tracepoint
     - xfs: fail recovery on a committed log item with no regions
     - xfs: resample the data fork mapping after cycling ILOCK
     - xfs: don't wrap around quota ids in dqiterate
     - xfs: set xfarray killable sort correctly
     - xfs: clamp timestamp nanoseconds correctly
     - xfs: fully check the parent handle when it points to the rootdir
     - xfs: don't zap bmbt forks if they are MAXLEVELS tall
 .
   [ Han Gao ]
   * [riscv64] set NR_CPUS to 128 (Closes: #1140651)
 .
   [ Salvatore Bonaccorso ]
   * [rt] Refresh "locking/rt: Annotate unlock followed by lock for sparse."
     (context changes)
Checksums-Sha1:
 046450e90d63f34be9117ccc47f98de2c9770146 960756 bpftool-dbgsym_7.5.0+6.12.96-1_arm64.deb
 6569fb38c0ab26f2b0027696c801a08ee45ea7ce 1572772 bpftool_7.5.0+6.12.96-1_arm64.deb
 e411e41f0848fdcc014dcbe6ee55959f14a900c9 45476 hyperv-daemons-dbgsym_6.12.96-1_arm64.deb
 8bb9bb69cf7d0b63062ce47e934d1ebae9d3e193 1321012 hyperv-daemons_6.12.96-1_arm64.deb
 85846ab82a93f6ea04884e773ff7f364c72f8edd 1306020 libcpupower-dev_6.12.96-1_arm64.deb
 42bbd7739cb533215acc4bdb00b2e8d8b93ccc59 31900 libcpupower1-dbgsym_6.12.96-1_arm64.deb
 fe270c35691e385cb530fb18e6eaca876b20ebf1 1313516 libcpupower1_6.12.96-1_arm64.deb
 dac896df0c35fb95ad459c76733906902c4379f1 1839080 linux-bpf-dev_6.12.96-1_arm64.deb
 c4f1b657615992f231b6c4deab36b0117a432176 1528808 linux-config-6.12_6.12.96-1_arm64.deb
 db4c9ab188531ac49a0a05829212228f652b4555 64544 linux-cpupower-dbgsym_6.12.96-1_arm64.deb
 862ae481c2860f5836d3360bfd883c0d6483b99c 1349940 linux-cpupower_6.12.96-1_arm64.deb
 0d4c5762290adbcee1d10671a96424b4f2732dab 3243004 linux-headers-6.12.96+deb13-arm64-16k_6.12.96-1_arm64.deb
 34f730673ac9ebae34abd4425a074221686bb5b9 3247628 linux-headers-6.12.96+deb13-arm64_6.12.96-1_arm64.deb
 e5e7391588b0992e045a664b26005d56757d8ddf 2777220 linux-headers-6.12.96+deb13-cloud-arm64_6.12.96-1_arm64.deb
 fed8e4f6e02da2cbb87240720c8317cdf0f46252 3243192 linux-headers-6.12.96+deb13-rt-arm64_6.12.96-1_arm64.deb
 702db5c938241213b138a27e162eab580f44be1a 1012133080 linux-image-6.12.96+deb13-arm64-16k-dbg_6.12.96-1_arm64.deb
 abb22f85962142b3d81b51caa634a8bf4ec0b7db 91912808 linux-image-6.12.96+deb13-arm64-16k-unsigned_6.12.96-1_arm64.deb
 2ae4d9563a71c8421b43dbfea72344b4d4e2d217 1028361552 linux-image-6.12.96+deb13-arm64-dbg_6.12.96-1_arm64.deb
 804346a5e999ca27cda43096221e5d503e3119d4 92752200 linux-image-6.12.96+deb13-arm64-unsigned_6.12.96-1_arm64.deb
 fc0fbb693ccff1a879234abdf0f405c34424a031 321248368 linux-image-6.12.96+deb13-cloud-arm64-dbg_6.12.96-1_arm64.deb
 3fde32dc4c2d09d0eaedc6320d1584d4ae2f2ea2 28009488 linux-image-6.12.96+deb13-cloud-arm64-unsigned_6.12.96-1_arm64.deb
 79c6af28fffde18d69476ed20fdd848f25f23cf2 1004670812 linux-image-6.12.96+deb13-rt-arm64-dbg_6.12.96-1_arm64.deb
 c7b7530d60a9c45b6285560cff754980074db3cb 92456448 linux-image-6.12.96+deb13-rt-arm64-unsigned_6.12.96-1_arm64.deb
 97e7ce605c073a78c010ccaa99f105d3849c8d08 1176 linux-image-arm64-16k-dbg_6.12.96-1_arm64.deb
 6008e72cba35f20608cd5cd57e9937f2f0763f51 1164 linux-image-arm64-dbg_6.12.96-1_arm64.deb
 266b17c9441b1039546dc9b17e6004c3b885b623 2272096 linux-image-arm64-signed-template_6.12.96-1_arm64.deb
 91f94370494a7afafd5d52c7ec9700e76cc7bdb0 1184 linux-image-cloud-arm64-dbg_6.12.96-1_arm64.deb
 653c4e999742a93bdd69fa5190b5b9df24c0fbb0 1176 linux-image-rt-arm64-dbg_6.12.96-1_arm64.deb
 fb404d8c60d97aa79c778e11b5c026a21ef59ef1 1924964 linux-kbuild-6.12.96+deb13-dbgsym_6.12.96-1_arm64.deb
 290b76049ed44eccba0efdad405b3fd9c1f8d1ed 1712696 linux-kbuild-6.12.96+deb13_6.12.96-1_arm64.deb
 c280c4d426ee3e2cddbc4d63bf5034dd09dc4cbe 12057128 linux-perf-dbgsym_6.12.96-1_arm64.deb
 5ca38fd25071b544f8e663dc62de58ae9994566d 3285228 linux-perf_6.12.96-1_arm64.deb
 182a43ec165e72ab9628b813a08371684957fb7a 23368 linux_6.12.96-1_arm64-buildd.buildinfo
 d5a3d1f617fbe578c1d5b4ad49cb24fdb93aaafc 111364 rtla-dbgsym_6.12.96-1_arm64.deb
 114890dbaf503b553e4fab5b966645deb43dd7e1 1357536 rtla_6.12.96-1_arm64.deb
 3b61bfd603ce84257bc973cdbb048be33786aa18 154784 usbip-dbgsym_2.0+6.12.96-1_arm64.deb
 71cdce939b6bb574da1bed904c7a2d65eedf3a6e 1339928 usbip_2.0+6.12.96-1_arm64.deb
Checksums-Sha256:
 103dbc57cde27e3f613a0682ce5c69b7b0d0275000a03184c47eb416734178b8 960756 bpftool-dbgsym_7.5.0+6.12.96-1_arm64.deb
 63e2dde78901748630f94d63031b6123b34cca57612ac29a35d53e3ddc4682b1 1572772 bpftool_7.5.0+6.12.96-1_arm64.deb
 6132474026e16bb29e368c1ec2a60634b52d6c27b723d69b0bf26ae4360a1d91 45476 hyperv-daemons-dbgsym_6.12.96-1_arm64.deb
 37aa5179c64bc67d84c89a1493f8b28d8cdbfb0331bc98797ac8bbe64e81a7f3 1321012 hyperv-daemons_6.12.96-1_arm64.deb
 c72f9724ba9037c3bee5906508aa97c760796c7e93085587aadc4e6ee99ae39d 1306020 libcpupower-dev_6.12.96-1_arm64.deb
 0cf7cc07bae68c5a2a7df91204d1788aa6bbe796b3d56abd150bf655d15161e7 31900 libcpupower1-dbgsym_6.12.96-1_arm64.deb
 4e3ebeeb950816eed8ce387f9533fe003e6fd26fd45208271c79c4219a127efc 1313516 libcpupower1_6.12.96-1_arm64.deb
 9d06f512d8cc1bcb574098ef7e86175a4dfa27ef1efbd181eef14ea715b28df0 1839080 linux-bpf-dev_6.12.96-1_arm64.deb
 0022a36c9248ecf5fb5ebf1c8f74fc5048f778798f92cfb7dd524f84e8933506 1528808 linux-config-6.12_6.12.96-1_arm64.deb
 3190b569d2d6fef1bd5df15e886afaf2f36e6feec6b566a6017a4c74e624e0cd 64544 linux-cpupower-dbgsym_6.12.96-1_arm64.deb
 1d55b553d9c0bbdfee0d4c1c6d41e5d6bd8689b2769d9b40e492ff87d52a9934 1349940 linux-cpupower_6.12.96-1_arm64.deb
 2904d2ed9c5da58d25da5da719db88454d3777ff5e88d9864773b280390415cf 3243004 linux-headers-6.12.96+deb13-arm64-16k_6.12.96-1_arm64.deb
 64771586338fd341d1c2e9b89e6864f599cdbaf65b36a70f209e0e65be250a3c 3247628 linux-headers-6.12.96+deb13-arm64_6.12.96-1_arm64.deb
 4f39dace052b584b35f63a45ef3841bffca7a081d605d25921952c5a1f74042d 2777220 linux-headers-6.12.96+deb13-cloud-arm64_6.12.96-1_arm64.deb
 b9f2f9ac80d69c5376e5345a6e88307c15bd17c66762ede2e8f404eeed6fe87f 3243192 linux-headers-6.12.96+deb13-rt-arm64_6.12.96-1_arm64.deb
 bb36f435e6e4cd1e0a8611c0530100f8a1518f80187f3892fb4eddf1e608c4b8 1012133080 linux-image-6.12.96+deb13-arm64-16k-dbg_6.12.96-1_arm64.deb
 ed00ce924e93819ec03afc8f48546df1e98e71d1baea57bab2b73da757128268 91912808 linux-image-6.12.96+deb13-arm64-16k-unsigned_6.12.96-1_arm64.deb
 47aa89e6aa711ed3b566bbe2deaa345494686393893d56b326e8e30028a85e41 1028361552 linux-image-6.12.96+deb13-arm64-dbg_6.12.96-1_arm64.deb
 7a7963af0d24e3600a7627a3fe76fef5e92f9efaeed0ff3ce6eb1d09909a6113 92752200 linux-image-6.12.96+deb13-arm64-unsigned_6.12.96-1_arm64.deb
 f05d2ab17d5cb44da0d7d904831bb01275e4307d3d0c7a25c7d3020dd41f0abc 321248368 linux-image-6.12.96+deb13-cloud-arm64-dbg_6.12.96-1_arm64.deb
 3e8e53f584fd5315dc47b551a81dadfe051117fe1f15cb581110afa767bacf76 28009488 linux-image-6.12.96+deb13-cloud-arm64-unsigned_6.12.96-1_arm64.deb
 4c848a3d8258f948a028a3fd114d0487c1c99b83c39963c9a2813129f501a317 1004670812 linux-image-6.12.96+deb13-rt-arm64-dbg_6.12.96-1_arm64.deb
 773dadcd48f5b42cdb8a33d9f6f365e0c0ed3e4fb089b753dadbc04261dd3ea7 92456448 linux-image-6.12.96+deb13-rt-arm64-unsigned_6.12.96-1_arm64.deb
 81f3797ee18a22383a76cd4b8a51728b5779f6b685e03bbfa7373193b653dbef 1176 linux-image-arm64-16k-dbg_6.12.96-1_arm64.deb
 2b875950c32e96e3e0eb71583a3a7e801c5a318dedf740c10f83149dc12b21d7 1164 linux-image-arm64-dbg_6.12.96-1_arm64.deb
 dd9144f3bc85ed5cd3525f09e59d18859a11aab56fd6016249d53fc48fd03a1a 2272096 linux-image-arm64-signed-template_6.12.96-1_arm64.deb
 164f0c8ab01042e9b7ad7e8665c8d10a2d3df70165dffdca2eda88737033292b 1184 linux-image-cloud-arm64-dbg_6.12.96-1_arm64.deb
 03a5d33c7354a185459608c0f88a6e5b7a9a5bda65025931b947e51563d92523 1176 linux-image-rt-arm64-dbg_6.12.96-1_arm64.deb
 4ef78a63ca586c8f8063e82fa9db0156dbf7b565e2ce89de3cf709f4963a7b94 1924964 linux-kbuild-6.12.96+deb13-dbgsym_6.12.96-1_arm64.deb
 e319c66c39c2440d7edcac010ec8dd861e4a1c9edc1facd216ab78e8e023d059 1712696 linux-kbuild-6.12.96+deb13_6.12.96-1_arm64.deb
 bf1464c1d402a1dc0824a87358d16ba66a1464ef97f073efdc2ab54b59a649e1 12057128 linux-perf-dbgsym_6.12.96-1_arm64.deb
 0600530f23f8d0a00391d07c2285373a6f92079f6c852c23dffdf0e2e64080fa 3285228 linux-perf_6.12.96-1_arm64.deb
 7a076daa6e765c0a3284f83b028524f61d4e446fd83bb1260c1cec33eab939b5 23368 linux_6.12.96-1_arm64-buildd.buildinfo
 99f2948f1e2b33d4021a5c1eb42b4370cd229356c76a9af904194ac3184489a9 111364 rtla-dbgsym_6.12.96-1_arm64.deb
 5e6bd6d35ae461cb4ce666a05ab1b4a2eb9465e4b5c11038f8c80fc3a1738c15 1357536 rtla_6.12.96-1_arm64.deb
 c4717c2244e94ffd4ce81786b7d18e4db45a9c9acbad36a0ce7370c1ea768894 154784 usbip-dbgsym_2.0+6.12.96-1_arm64.deb
 e601996dc414472e8c76860147188fd848bf26016fe200e3720d204892b94bcc 1339928 usbip_2.0+6.12.96-1_arm64.deb
Files:
 d039e4802ff0c6a62d56901b448064a8 960756 debug optional bpftool-dbgsym_7.5.0+6.12.96-1_arm64.deb
 ea6ac6c046cacee929565dc633b8f8a2 1572772 devel optional bpftool_7.5.0+6.12.96-1_arm64.deb
 36cb6c858037cf234cae0fac9bf53de1 45476 debug optional hyperv-daemons-dbgsym_6.12.96-1_arm64.deb
 4032b535b5aec3d4825a67d3cbb848f5 1321012 admin optional hyperv-daemons_6.12.96-1_arm64.deb
 3147d43837dd474a22c3f243c3effa16 1306020 libdevel optional libcpupower-dev_6.12.96-1_arm64.deb
 61ffe0b10ebc0132cd2c717f94f8eb77 31900 debug optional libcpupower1-dbgsym_6.12.96-1_arm64.deb
 dcf45c74f1d65c3fe69b4c966aa0848e 1313516 libs optional libcpupower1_6.12.96-1_arm64.deb
 9e2b4e0ea55ef9091af41315d34e79bb 1839080 devel optional linux-bpf-dev_6.12.96-1_arm64.deb
 c68411501fd680fe296ea91e2a04c72d 1528808 kernel optional linux-config-6.12_6.12.96-1_arm64.deb
 5f0352941036cf1c91bae3865cd8f1a5 64544 debug optional linux-cpupower-dbgsym_6.12.96-1_arm64.deb
 bbc67cb12b172dc7a75d727a614d664a 1349940 admin optional linux-cpupower_6.12.96-1_arm64.deb
 1379c441d5c78cef61940a69538e489b 3243004 kernel optional linux-headers-6.12.96+deb13-arm64-16k_6.12.96-1_arm64.deb
 24c77bb22c784635886ff9c234ceccef 3247628 kernel optional linux-headers-6.12.96+deb13-arm64_6.12.96-1_arm64.deb
 669ad04605960ad449f194d5dba685e6 2777220 kernel optional linux-headers-6.12.96+deb13-cloud-arm64_6.12.96-1_arm64.deb
 16001185baf3c585a49581631a3fa4d6 3243192 kernel optional linux-headers-6.12.96+deb13-rt-arm64_6.12.96-1_arm64.deb
 8f37feac02007c93199cf7ce851f40d8 1012133080 debug optional linux-image-6.12.96+deb13-arm64-16k-dbg_6.12.96-1_arm64.deb
 41e26c207b9ff0f37f766c1713f1f649 91912808 kernel optional linux-image-6.12.96+deb13-arm64-16k-unsigned_6.12.96-1_arm64.deb
 1dae4c63e7b22b535ffcf0a3ef3c22c2 1028361552 debug optional linux-image-6.12.96+deb13-arm64-dbg_6.12.96-1_arm64.deb
 5e5a0d1858bc842a103da9f5cf14950b 92752200 kernel optional linux-image-6.12.96+deb13-arm64-unsigned_6.12.96-1_arm64.deb
 4f19212c6efc898e5068add29a73968c 321248368 debug optional linux-image-6.12.96+deb13-cloud-arm64-dbg_6.12.96-1_arm64.deb
 8919efcde0560d7bfd16c4a3dc1f8c51 28009488 kernel optional linux-image-6.12.96+deb13-cloud-arm64-unsigned_6.12.96-1_arm64.deb
 abcbbf7b50f0b570212a4aaa672551be 1004670812 debug optional linux-image-6.12.96+deb13-rt-arm64-dbg_6.12.96-1_arm64.deb
 a0ed08854eeb7c7295e0964e5b20f719 92456448 kernel optional linux-image-6.12.96+deb13-rt-arm64-unsigned_6.12.96-1_arm64.deb
 f544362f3a926e8de2b68941535446d9 1176 kernel optional linux-image-arm64-16k-dbg_6.12.96-1_arm64.deb
 4e5846123a026bd336c25dffb42830c4 1164 kernel optional linux-image-arm64-dbg_6.12.96-1_arm64.deb
 9cd4259e5dad7c75b8092cffa9c08f85 2272096 kernel optional linux-image-arm64-signed-template_6.12.96-1_arm64.deb
 b1abbc8da6cfba0145ce83880103d29a 1184 kernel optional linux-image-cloud-arm64-dbg_6.12.96-1_arm64.deb
 9134fc392158ac624e86a0f250d2f654 1176 kernel optional linux-image-rt-arm64-dbg_6.12.96-1_arm64.deb
 2635465df7baae14f2b393cadd820694 1924964 debug optional linux-kbuild-6.12.96+deb13-dbgsym_6.12.96-1_arm64.deb
 bb15f2d8fdbcf361d559ca6e7b6c8086 1712696 kernel optional linux-kbuild-6.12.96+deb13_6.12.96-1_arm64.deb
 b70e5236183bfd2b6c435230a0361e73 12057128 debug optional linux-perf-dbgsym_6.12.96-1_arm64.deb
 7b2ae15b38060ea99fd494a59f1ac094 3285228 devel optional linux-perf_6.12.96-1_arm64.deb
 0194bd5c4aa58c78b6f5766806451aaa 23368 kernel optional linux_6.12.96-1_arm64-buildd.buildinfo
 df7111aea9f7e040c34385909bd6a5a5 111364 debug optional rtla-dbgsym_6.12.96-1_arm64.deb
 0470e100202e452a9acd6d5df1a4eb61 1357536 devel optional rtla_6.12.96-1_arm64.deb
 e016059fe81ce5951afcb7726ae3d245 154784 debug optional usbip-dbgsym_2.0+6.12.96-1_arm64.deb
 cdbafb2825994264a828308136c890b1 1339928 admin optional usbip_2.0+6.12.96-1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=kiGl
-----END PGP SIGNATURE-----
