-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 20 Jul 2026 09:13:07 +0200
Source: linux
Binary: bpftool bpftool-dbgsym hyperv-daemons hyperv-daemons-dbgsym intel-sdsi intel-sdsi-dbgsym libcpupower-dev libcpupower1 libcpupower1-dbgsym linux-bpf-dev linux-config-6.12 linux-cpupower linux-cpupower-dbgsym linux-headers-6.12.96+deb13-amd64 linux-headers-6.12.96+deb13-cloud-amd64 linux-headers-6.12.96+deb13-rt-amd64 linux-image-6.12.96+deb13-amd64-dbg linux-image-6.12.96+deb13-amd64-unsigned linux-image-6.12.96+deb13-cloud-amd64-dbg linux-image-6.12.96+deb13-cloud-amd64-unsigned linux-image-6.12.96+deb13-rt-amd64-dbg linux-image-6.12.96+deb13-rt-amd64-unsigned linux-image-amd64-dbg linux-image-amd64-signed-template linux-image-cloud-amd64-dbg linux-image-rt-amd64-dbg linux-kbuild-6.12.96+deb13 linux-kbuild-6.12.96+deb13-dbgsym linux-perf linux-perf-dbgsym rtla rtla-dbgsym usbip usbip-dbgsym
Architecture: amd64
Version: 6.12.96-1
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 bpftool    - Inspection and simple manipulation of BPF programs and maps
 hyperv-daemons - Support daemons for Linux running on Hyper-V
 intel-sdsi - Intel On Demand (SDSi) provisioning tool
 libcpupower-dev - CPU frequency and voltage scaling tools for Linux (development fi
 libcpupower1 - CPU frequency and voltage scaling tools for Linux (libraries)
 linux-bpf-dev - Headers for BPF development
 linux-config-6.12 - Debian kernel configurations for Linux 6.12
 linux-cpupower - CPU power management tools for Linux
 linux-headers-6.12.96+deb13-amd64 - Header files for Linux 6.12.96+deb13-amd64
 linux-headers-6.12.96+deb13-cloud-amd64 - Header files for Linux 6.12.96+deb13-cloud-amd64
 linux-headers-6.12.96+deb13-rt-amd64 - Header files for Linux 6.12.96+deb13-rt-amd64
 linux-image-6.12.96+deb13-amd64-dbg - Debug symbols for linux-image-6.12.96+deb13-amd64
 linux-image-6.12.96+deb13-amd64-unsigned - Linux 6.12 for 64-bit PCs
 linux-image-6.12.96+deb13-cloud-amd64-dbg - Debug symbols for linux-image-6.12.96+deb13-cloud-amd64
 linux-image-6.12.96+deb13-cloud-amd64-unsigned - Linux 6.12 for x86-64 cloud
 linux-image-6.12.96+deb13-rt-amd64-dbg - Debug symbols for linux-image-6.12.96+deb13-rt-amd64
 linux-image-6.12.96+deb13-rt-amd64-unsigned - Linux 6.12 for 64-bit PCs, PREEMPT_RT
 linux-image-amd64-dbg - Debugging symbols for Linux amd64 configuration (meta-package)
 linux-image-amd64-signed-template - Template for signed linux-image packages for amd64
 linux-image-cloud-amd64-dbg - Debugging symbols for Linux cloud-amd64 configuration (meta-packa
 linux-image-rt-amd64-dbg - Debugging symbols for Linux rt-amd64 configuration (meta-package)
 linux-kbuild-6.12.96+deb13 - Kbuild infrastructure for Linux 6.12.96+deb13
 linux-perf - Performance analysis tools for Linux
 rtla       - Real-Time Linux Analysis tools
 usbip      - USB device sharing system over IP network
Closes: 1140651
Changes:
 linux (6.12.96-1) trixie-security; urgency=high
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.96
     - [arm64] bpf, arm64: Reject out-of-range B.cond targets
     - nfsd: fix file change detection in CB_GETATTR
     - nfsd: release layout stid on setlease failure
     - userfaultfd: gate must_wait writability check on pte_present()
     - perf: Fix dangling cgroup pointer in cpuctx backport
     - bcachefs: avoid truncating fiemap extent length
     - drm/amd: Fix set but not used warnings
     - gpio: rockchip: change the GPIO version judgment logic
     - gpio: rockchip: teardown bugs and resource leaks
     - gpio: rockchip: fix generic IRQ chip leak on remove (CVE-2026-53226)
     - mm/vmalloc: take vmap_purge_lock in shrinker (CVE-2026-46093)
     - device property: initialize the remaining fields of fwnode_handle in
       fwnode_init()
     - f2fs: validate orphan inode entry count
     - f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
     - f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
     - f2fs: fix potential deadlock in f2fs_balance_fs()
     - f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()
     - f2fs: fix listxattr handling of corrupted xattr entries
     - fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
     - nfsd: add nfsd_file_{get,put} to 'nfs_to' nfsd_localio_operations
     - nfs_common: rename functions that invalidate LOCALIO nfs_clients
     - NFSv4/flexfiles: Remove cred local variable dependency
     - NFSv4/flexfiles: Add data structure support for striped layouts
     - NFSv4/flexfiles: reject zero filehandle version count
     - locking/rtmutex: Make sure we wake anything on the wake_q when we release
       the lock->wait_lock
     - apparmor: advertise the tcp fast open fix is applied
     - nfsd: move name lookup out of nfsd4_list_rec_dir()
     - nfsd: change nfs4_client_to_reclaim() to allocate data
     - bonding: fix xfrm offload feature setup on active-backup mode
     - block: add a store_limit operations for sysfs entries
     - block: fix queue freeze vs limits lock order in sysfs store methods
       (CVE-2025-21807)
     - mm/khugepaged: write all dirty file folios when collapsing
     - perf trace beauty fcntl: Fix build with older kernel headers
     - ACPI: CPPC: Suppress UBSAN warning caused by field misuse
     - ACPI: NFIT: core: Fix possible NULL pointer dereference
     - [amd64] platform/x86: intel-hid: Protect ACPI notify handler against
       recursion
     - perf/core: Detach event groups during remove_on_exec
     - [amd64] drm/i915: ensure segment offset never exceeds allowed max
     - usb: gadget: function: rndis: add length check to response query
     - usb: gadget: function: rndis: add length check for header
     - iio: accel: bmc150: clamp the device-reported FIFO frame count
     - iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
     - iio: adc: lpc32xx: Initialize completion before requesting IRQ
     - iio: adc: spear: Initialize completion before requesting IRQ
     - iio: adc: ti-ads1119: fix PM reference leak in buffer preenable
     - iio: adc: ti-ads124s08: Return reset GPIO lookup errors
     - iio: backend: fix uninitialized data in debugfs
     - iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
     - iio: common: st_sensors: honour channel endianness in read_axis_data
     - iio: event: Fix event FIFO reset race
     - iio: gyro: bmg160: bail out when bandwidth/filter is not in table
     - iio: gyro: bmg160: wait full startup time after mode change at probe
     - iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
     - iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
     - iio: imu: inv_icm42600: fix timestamp clock period by using lower value
     - iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
     - iio: imu: st_lsm6dsx: deselect shub page before reading whoami
     - iio: light: al3010: fix incorrect scale for the highest gain range
     - iio: light: gp2ap002: fix runtime PM leak on read error
     - iio: light: opt3001: fix missing state reset on timeout
     - iio: light: tsl2591: return actual error from probe IRQ failure
     - iio: light: veml6030: fix channel type when pushing events
     - iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call
     - iio: resolver: ad2s1210: notify trigger and clear state on fault read
       error
     - iio: temperature: Build mlx90635 with CONFIG_MLX90635
     - iio: temperature: ltc2983: Fix n_wires default bypassing rotation check
     - iio: temperature: ltc2983: Fix reinit_completion() called after conversion
       start
     - ALSA: virtio: Add missing 384 kHz PCM rate mapping
     - ALSA: virtio: Validate control metadata from the device
     - ALSA: ymfpci: check snd_ctl_new1() return value
     - ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
     - ALSA: cmipci: check snd_ctl_new1() return value
     - ALSA: es1938: check snd_ctl_new1() return value
     - ALSA: firewire: isight: bound the sample count to the packet payload
     - ALSA: gus: check snd_ctl_new1() return value
     - ALSA: ice1712: check snd_ctl_new1() return value
     - ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
     - ALSA: usb-audio: avoid kobject path lookup in DualSense match
     - ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
     - ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch
       put callbacks
     - ALSA: usb-audio: Roll back quirk control caches on write errors
     - ALSA: usb-audio: Update Babyface Pro control caches only after successful
       writes
     - ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful
       writes
     - vfio/pci: Use a private flag to prevent power state change with VFs
     - vfio/pci: Latch disable_idle_d3 per device
     - vfio/pci: Release the VGA arbiter client on register_device() failure
     - vfio/pci: Fix racy bitfields and tighten struct layout
     - vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
     - vfio: Remove device debugfs before releasing devres
     - Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB
     - Bluetooth: btusb: fix use-after-free on registration failure
     - Bluetooth: btusb: fix use-after-free on marvell probe failure
     - Bluetooth: btusb: fix wakeup source leak on probe failure
     - [arm*] binder: fix UAF in binder_thread_release()
     - [arm*] binder: fix UAF in binder_free_transaction()
     - usb: xhci: Fix sleep in atomic context in xhci_free_streams()
     - usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
     - PCI: host-common: Request bus reassignment when not probe-only
     - [arm*] PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
     - mm/damon/ops-common: handle extreme intervals in damon_hot_score()
     - netfilter: ipset: fix race between dump and ip_set_list resize
     - virtio_pci: fix vq info pointer lookup via wrong index
     - virtio-mmio: fix device release warning on module unload
     - hwrng: virtio: clamp device-reported used.len at copy_data()
     - USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
     - usb: dwc3: run gadget disconnect from sleepable suspend context
     - 6lowpan: fix NHC entry use-after-free on error path
     - tipc: fix out-of-bounds read in broadcast Gap ACK blocks
     - staging: vme_user: bound slave read/write to the kern_buf size
     - smb: client: restrict implied bcc[0] exemption to responses without data
       area
     - staging: vme_user: fix location monitor leak in fake bridge
     - staging: vme_user: fix location monitor leak in tsi148 bridge
     - media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe
     - staging: media: atomisp: reduce load_primary_binaries() stack usage
     - staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
     - staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
     - staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
     - staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
     - staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and
       join_cmd_hdl()
     - staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
     - staging: rtl8723bs: fix OOB write in HT_caps_handler()
     - crypto: amlogic - avoid double cleanup in meson_crypto_probe()
     - ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then
       SMB2_CANCEL
     - net: af_key: initialize alg_key_len for IPComp states
     - audit: Fix data races of skb_queue_len() readers on audit_queue
     - Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
     - coresight: etb10: restore atomic_t for shared reading state
     - debugobjects: Plug race against a concurrent OOM disable
     - fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
     - NTB: epf: Avoid calling pci_irq_vector() from hardirq context
     - gpio: eic-sprd: use raw_spinlock_t in the irq startup path
     - io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
     - netpoll: fix a use-after-free on shutdown path
     - ipv4: igmp: remove multicast group from hash table on device destruction
     - net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
     - mfd: cros_ec: Delay dev_set_drvdata() until probe success
     - mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
     - mm: shrinker: fix shrinker_info teardown race with expansion
     - mm: shrinker: fix NULL pointer dereference in debugfs
     - mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent
       softlockup
     - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
     - netfilter: handle unreadable frags
     - netfilter: ebtables: module names must be null-terminated
     - netfilter: ebtables: terminate table name before find_table_lock()
     - Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
     - Bluetooth: bnep: pin L2CAP connection during netdev registration
     - Bluetooth: btnxpuart: Fix out-of-bounds firmware read in
       nxp_recv_fw_req_v3()
     - Bluetooth: fix UAF in bt_accept_dequeue()
     - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled
     - Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()
     - Bluetooth: L2CAP: validate option length before reading conf opt value
     - fs/ntfs3: rename ni_readpage_cmpr into ni_read_folio_cmpr
     - fs/ntfs3: fsync files by syncing parent inodes
     - fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()
     - fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
       (CVE-2026-53027)
     - coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
     - smb/client: Fix error code in smb2_aead_req_alloc()
     - ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
     - ksmbd: add a permission check for FSCTL_SET_ZERO_DATA
     - ksmbd: serialize QUERY_DIRECTORY requests per file
     - ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation
     - ksmbd: require source read access for duplicate extents
     - ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY
     - ksmbd: run set info with opener credentials
     - ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION
     - ksmbd: add per-handle permission check to FILE_LINK_INFORMATION
     - ksmbd: use opener credentials for delete-on-close
     - ksmbd: use opener credentials for ADS I/O
     - smb: client: fix query directory replay double-free
     - smb: client: fix query_info() replay double-free
     - smb: client: fix double-free in SMB2_ioctl() replay
     - smb: client: fix change notify replay double-free
     - smb: client: fix double-free in SMB2_flush() replay
     - smb: client: fix double-free in SMB2_open() replay
     - smb: client: fix double-free in SMB2_close() replay
     - smb: client: Fix next buffer leak in receive_encrypted_standard()
     - smb: client: use unaligned reads in parse_posix_ctxt()
     - smb: client: harden POSIX SID length parsing
     - smb: client: fix atime clamp check in read completion
     - smb: client: mask server-provided mode to 07777 in modefromsid
     - writeback: fix race between cgroup_writeback_umount() and
       inode_switch_wbs()
     - cpufreq: qcom-cpufreq-hw: Fix possible double free
     - firmware_loader: fix device reference leak in firmware_upload_register()
     - [amd64] cpufreq: intel_pstate: Sync policy->cur during CPU offline
     - sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
     - cpufreq: Fix hotplug-suspend race during reboot
     - cpufreq: pcc: fix use-after-free and double free in _OSC evaluation
     - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
     - clocksource/drivers/timer-tegra186: Fix support for multiple watchdog
       instances
     - X.509: Fix validation of ASN.1 certificate header
     - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
     - tools/mm/slabinfo: Fix trace disable logic inversion
     - tools/mm/slabinfo: fix total_objects attribute name
     - HID: hid-goodix-spi: validate report size to prevent stack buffer overflow
     - HID: wacom: stop hardware after post-start probe failures
     - HID: letsketch: fix UAF on inrange_timer at driver unbind
     - HID: lg-g15: cancel pending work on remove to fix a use-after-free
     - HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte
       reads
     - hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
     - nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
     - media: mtk-jpeg: cancel workqueue on release for supported platforms only
     - serial: 8250_mid: Disable DMA for selected platforms
     - xfs: use null daddr for unset first bad log block
     - xfs: release dquot buffer after dqflush failure
     - xfs: fix unreachable BIGTIME check in dquot flush validation
     - xfs: fix pointer arithmetic error on 32-bit systems
     - xfs: fix exchmaps reservation limit check
     - bpf: Reject fragmented frames in devmap
     - bpf: Restore sysctl new-value from 1 to 0
     - bpf: Validate BTF repeated field counts before expansion
     - net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
     - usb: cdc_acm: Add quirk for Uniden BC125AT scanner
     - usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
     - USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
     - usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()
     - usb: free iso schedules on failed submit
     - usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
     - usb: gadget: udc: Fix use-after-free in gadget_match_driver
     - usb: gadget: f_printer: take kref only for successful open
     - USB: idmouse: fix use-after-free on disconnect race
     - USB: ldusb: fix use-after-free on disconnect race
     - USB: iowarrior: fix use-after-free on disconnect
     - USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
     - USB: legousbtower: fix use-after-free on disconnect race
     - usb: sl811-hcd: disable controller wakeup on remove
     - USB: storage: include US_FL_NO_SAME in quirks mask
     - USB: misc: uss720: unregister parport on probe failure
     - usb: mtu3: unmap request DMA on queue failure
     - USB: serial: keyspan_pda: fix information leak
     - USB: serial: option: add Telit Cinterion FE990D50 compositions
     - USB: serial: digi_acceleport: fix broken rx after throttle
     - USB: serial: digi_acceleport: fix hard lockup on disconnect
     - USB: serial: digi_acceleport: fix write buffer corruption
     - USB: ulpi: fix memory leak on registration failure
     - USB: usb-storage: ene_ub6250: restore media-ready check
     - usbip: tools: support SuperSpeedPlus devices
     - usbip: vudc: fix NULL deref in vep_dequeue()
     - usb: typec: anx7411: use devm_pm_runtime_enable()
     - usb: typec: class: drop PD lookup reference
     - usb: typec: tcpm: Fix VDM type for Enter Mode commands
     - usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
     - usb: typec: ucsi: Invert DisplayPort role assignment
     - usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt
       mode
     - usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
     - usb: typec: ucsi: cancel pending work on system suspend
     - usb: gadget: f_fs: Fix DMA fence leak
     - block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
     - [amd64] x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU
       when SNC enabled
     - PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining
     - udf: validate free block extents against the partition length
     - udf: validate VAT header length against the VAT inode size
     - udf: validate sparing table length as an entry count, not a byte count
     - hwrng: jh7110 - fix refcount leak in starfive_trng_read()
     - nvme: target: rdma: fix ndev refcount leak on queue connect
     - dm-ioctl: report an error if a device has no table
     - nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace
       disks
     - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
     - nvmet-auth: validate reply message payload bounds against transfer length
     - btrfs: do not trim a device which is not writeable
     - partitions: aix: bound the pp_count scan to the ppe array
     - isofs: bound Rock Ridge symlink components to the SL record
     - crypto: af_alg - Remove zero-copy support from skcipher and aead
     - [arm64] crypto: caam - use print_hex_dump_devel to guard key hex dumps
     - [arm64] crypto: caam - use print_hex_dump_devel to guard key hex dumps
       again
     - crypto: ecc - Fix carry overflow in vli multiplication
     - crypto: pcrypt - restore callback for non-parallel fallback
     - [amd64] crypto: ccp - Do not initialize SNP for SEV ioctls
     - [amd64] crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)
     - [amd64] crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)
     - crypto: drbg - Fix returning success on failure in CTR_DRBG
     - crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
     - crypto: drbg - Fix the fips_enabled priority boost
     - [amd64] crypto: qat - keep VFs enabled during reset
     - [amd64] crypto: qat - notify fatal error before AER reset preparation
     - [amd64] crypto: qat - protect service table iterations with service_lock
     - [amd64] crypto: qat - validate RSA CRT component lengths
     - [arm64] fpsimd: Fix type mismatch in sme_{save,load}_state()
     - spi: fsl-lpspi: replace dmaengine_terminate_all() with
       dmaengine_terminate_sync()
     - spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
     - EDAC/i10nm: Don't fail probing if ADXL is missing
     - watchdog: apple: Add "apple,t8103-wdt" compatible
     - regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
     - i2c: core: fix hang on adapter registration failure
     - tracing: Prevent out-of-bounds read in glob matching
     - audit: fix potential integer overflow in audit_log_n_hex()
     - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
     - module: decompress: check return value of module_extend_max_pages()
     - exfat: bound uniname advance in exfat_find_dir_entry()
     - NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
     - riscv: mm: Unconditionally sfence.vma for spurious fault
     - mm: fix mmap errno value when MAP_DROPPABLE is not supported
     - mm: do file ownership checks with the proper mount idmap
     - [amd64] iommu/amd: Don't split flush for amd_iommu_domain_flush_all()
     - iommufd: Set upper bounds on cache invalidation entry_num and entry_len
     - [amd64] KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected
       #DBs
     - [amd64] KVM: x86: Ensure vendor's exit handler runs before fastpath
       userspace exits
     - [amd64] KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in
       guest mode
     - udmabuf: fix DMA direction mismatch in release_udmabuf()
     - dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning
     - i2c: core: fix irq domain leak on adapter registration failure
     - i2c: core: fix NULL-deref on adapter registration failure
     - i2c: core: fix adapter probe deferral loop
     - i2c: core: fix adapter debugfs creation
     - i2c: core: fix adapter deregistration race
     - i2c: mpc: Fix timeout calculations
     - i2c: stm32f7: truncate clock period instead of rounding it
     - Input: synaptics-rmi4 - unregister function handlers on physical driver
       registration failure
     - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
     - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
     - Input: elan_i2c - prevent division by zero and arithmetic underflow
     - Input: goodix - clamp the device-reported contact count
     - Input: iforce - bound the device-reported force-feedback effect index
     - Input: mms114 - fix touch indexing for MMS134S and MMS136
     - Input: touchwin - reset the packet index on every complete packet
     - Input: mms114 - reject an oversized device packet size
     - Input: maplemouse - fix NULL pointer dereference in open()
     - Input: mms114 - fix multi-touch slot corruption
     - Input: maple_keyb - set driver data before registering input device
     - Input: maplemouse - set driver data before registering input device
     - Input: maplecontrol - set driver data before registering input device
     - RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
     - RDMA/siw: bound Read Response placement to the RREAD length
     - fuse: fix device node leak in cuse_process_init_reply()
     - fuse: re-lock request before returning from fuse_ref_folio()
     - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req
     - usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction
       checks
     - smb: client: reject overlapping data areas in SMB2 responses
     - xfs: fix null pointer dereference in tracepoint
     - xfs: fail recovery on a committed log item with no regions
     - xfs: resample the data fork mapping after cycling ILOCK
     - xfs: don't wrap around quota ids in dqiterate
     - xfs: set xfarray killable sort correctly
     - xfs: clamp timestamp nanoseconds correctly
     - xfs: fully check the parent handle when it points to the rootdir
     - xfs: don't zap bmbt forks if they are MAXLEVELS tall
 .
   [ Han Gao ]
   * [riscv64] set NR_CPUS to 128 (Closes: #1140651)
 .
   [ Salvatore Bonaccorso ]
   * [rt] Refresh "locking/rt: Annotate unlock followed by lock for sparse."
     (context changes)
Checksums-Sha1:
 3f018fe1aa6a91933249cfdedade2fdf1c974485 965508 bpftool-dbgsym_7.5.0+6.12.96-1_amd64.deb
 dc200d83da7957bea6565c5818c7148e586a297a 1588420 bpftool_7.5.0+6.12.96-1_amd64.deb
 8645394b7621d7cce0eb46fbd86eb5c308148d6c 46360 hyperv-daemons-dbgsym_6.12.96-1_amd64.deb
 b78813efaefff4c6de858ac46b9e0c678daf4076 1321924 hyperv-daemons_6.12.96-1_amd64.deb
 35495754e7022497537d56ca1f87cca4d8cfcd1e 19668 intel-sdsi-dbgsym_6.12.96-1_amd64.deb
 57a113394d2cacee122e12586e55f6c52c06eb81 1310236 intel-sdsi_6.12.96-1_amd64.deb
 e4914df51dedd83bce5572401c77bfeb85471aed 1306020 libcpupower-dev_6.12.96-1_amd64.deb
 8cad57203335957284fe082f9a405d9482e7260b 32364 libcpupower1-dbgsym_6.12.96-1_amd64.deb
 3de5ab294eab393d7af46ce1953d69d3e110eb73 1313784 libcpupower1_6.12.96-1_amd64.deb
 e3632262bcec4201f71ce92c33258dd789743634 1773372 linux-bpf-dev_6.12.96-1_amd64.deb
 de95ed524f1418eb5a4eeaa2b308889c1f3f7527 1447656 linux-config-6.12_6.12.96-1_amd64.deb
 9a22fde6ef0426c04fdad11fdb11f48946665bba 402196 linux-cpupower-dbgsym_6.12.96-1_amd64.deb
 7e51a3047cbd0f17d778e2195299eb7c062eefa1 1479316 linux-cpupower_6.12.96-1_amd64.deb
 d1b7c2cc2c84f5f5cf08d802b4bc2527ed45739b 3062812 linux-headers-6.12.96+deb13-amd64_6.12.96-1_amd64.deb
 a155c8a298ca370cc0689fd90bb0719b8e19d9da 2726172 linux-headers-6.12.96+deb13-cloud-amd64_6.12.96-1_amd64.deb
 d9fc574ce95848f595811d083ce2ec0dd37f7528 3061376 linux-headers-6.12.96+deb13-rt-amd64_6.12.96-1_amd64.deb
 9f4a4ddd11b947d39a992a233354898e2c36d731 1040153728 linux-image-6.12.96+deb13-amd64-dbg_6.12.96-1_amd64.deb
 414db5b32ffb9bf9c5a336b3819efdbcf7336139 107768440 linux-image-6.12.96+deb13-amd64-unsigned_6.12.96-1_amd64.deb
 da8eb1a32cf7b0115a133a0ce950a9b470964d72 318569424 linux-image-6.12.96+deb13-cloud-amd64-dbg_6.12.96-1_amd64.deb
 23b7fc1cf2064a9a42258d438f25f055575435f1 34306308 linux-image-6.12.96+deb13-cloud-amd64-unsigned_6.12.96-1_amd64.deb
 bcb22c9bb888b0d90c1f42827146a1996cc4a7ff 1040458624 linux-image-6.12.96+deb13-rt-amd64-dbg_6.12.96-1_amd64.deb
 c5f8b5448ead3a57da394beeb2a8bb8f256684cd 107757796 linux-image-6.12.96+deb13-rt-amd64-unsigned_6.12.96-1_amd64.deb
 ea62e15028352eeb5dcffe66e91c8fb25d03a095 1164 linux-image-amd64-dbg_6.12.96-1_amd64.deb
 c4c5fb72914792f9a8466a3550d8cfd05d563de5 2271908 linux-image-amd64-signed-template_6.12.96-1_amd64.deb
 918a708c69b6c99fe3b63b23dad9c240f525723d 1184 linux-image-cloud-amd64-dbg_6.12.96-1_amd64.deb
 e470a71dc8f3bd34404a6c79069dd403f5f82f2f 1176 linux-image-rt-amd64-dbg_6.12.96-1_amd64.deb
 23ffdb571b7155ffa4fbdf2815074e2f6367593e 1919072 linux-kbuild-6.12.96+deb13-dbgsym_6.12.96-1_amd64.deb
 078781cb95e02080347a938b48e912dd2df6dd59 1737656 linux-kbuild-6.12.96+deb13_6.12.96-1_amd64.deb
 510355cdd743b227d78c621a210f5479ecc26718 12373936 linux-perf-dbgsym_6.12.96-1_amd64.deb
 404556ef2c59e1b72df60901a060ff3129bc379e 4857104 linux-perf_6.12.96-1_amd64.deb
 bb033b8cf50cb77a2f4f57b52bd138d6dc3cdefd 22506 linux_6.12.96-1_amd64-buildd.buildinfo
 b23c144122903a84cfea3d33e193314e52f42ca1 112140 rtla-dbgsym_6.12.96-1_amd64.deb
 6fe96610a82480a39256f3645076f01f0a72e0c3 1360320 rtla_6.12.96-1_amd64.deb
 a02dff7e06e921c52f1070676d16eec07917f948 146044 usbip-dbgsym_2.0+6.12.96-1_amd64.deb
 9c68cb55be91b7468da4692beac7ca801ba8f46f 1346108 usbip_2.0+6.12.96-1_amd64.deb
Checksums-Sha256:
 f8f80d983e3333904e23b71b0ebd92407d46e8b4e99260a007d545ff6ccc22fd 965508 bpftool-dbgsym_7.5.0+6.12.96-1_amd64.deb
 2dbe3464ad458af9f4752ab165661bd4a14fc0512a14f9fc01cc353e81b5a837 1588420 bpftool_7.5.0+6.12.96-1_amd64.deb
 8786b00a487eaeed5422b7ecdbc5570b257fba2e728632fc4aa29a4f4450acfa 46360 hyperv-daemons-dbgsym_6.12.96-1_amd64.deb
 55150efe18ede2f7885776e415a0cbd87ea034669de7efceeb38eabf3e48b5f5 1321924 hyperv-daemons_6.12.96-1_amd64.deb
 066f3e757bc0da163ee92069b06eb21876ba0f789580ca88180dc1c856ea9997 19668 intel-sdsi-dbgsym_6.12.96-1_amd64.deb
 b31a77355d405e03d0f97a76c93a392645e0200968f0e48d67dc293947b8ca4c 1310236 intel-sdsi_6.12.96-1_amd64.deb
 1535d1cbedd3a2be00b7d7d43eb53c136face22883c21b91380f5a3df8d4bbe9 1306020 libcpupower-dev_6.12.96-1_amd64.deb
 dc9348fc327c4c9d3c9fc2a0e9e54e80247796faac7ccdc0f6c732337e4e2829 32364 libcpupower1-dbgsym_6.12.96-1_amd64.deb
 3db6a0c90a1373d378dad5a5bdb2568f589b05c751d91d124acfb00cec2ed0c7 1313784 libcpupower1_6.12.96-1_amd64.deb
 87811376d93d129940e72cf50758de3065fdbd5cc3bd960b99bb8faefac0ef0f 1773372 linux-bpf-dev_6.12.96-1_amd64.deb
 c815a6777fa5f5207720de142bdeb861f3fcba1447948d7a68687dab89b22a08 1447656 linux-config-6.12_6.12.96-1_amd64.deb
 f4b6f2a6fee18f71e731a18f8fcbec1646e3e536516d0d046609deb5b62a1714 402196 linux-cpupower-dbgsym_6.12.96-1_amd64.deb
 635683114b8b32d343722929530f4579d0c6a57287434540f51f00d1a750db50 1479316 linux-cpupower_6.12.96-1_amd64.deb
 bbd3b57b8ec71c8061a7272ced6df8b63e00367e915e9624c798e93c34beb5a9 3062812 linux-headers-6.12.96+deb13-amd64_6.12.96-1_amd64.deb
 f1f2c80b7e7cdfdc3ade5fcb7b02685fadb37803fcdbb6efdd6c8638668a4b00 2726172 linux-headers-6.12.96+deb13-cloud-amd64_6.12.96-1_amd64.deb
 63e4250c0028442f13925710e45c640b458e27f3d8b98ba19ca0242c3ebbb41a 3061376 linux-headers-6.12.96+deb13-rt-amd64_6.12.96-1_amd64.deb
 60ca1faa6aa1611104bbad3fbae7af839ecde79d9f2c79e8589afcb3b2f0d2cc 1040153728 linux-image-6.12.96+deb13-amd64-dbg_6.12.96-1_amd64.deb
 a50f52858d478ac07b14952eb704dc827812ea9ce2f84f44f54fae23aaaa1ed9 107768440 linux-image-6.12.96+deb13-amd64-unsigned_6.12.96-1_amd64.deb
 2a55f6a9649f239fb5a6f816b5a986f68151679d1f64cb57137a2123e61257b7 318569424 linux-image-6.12.96+deb13-cloud-amd64-dbg_6.12.96-1_amd64.deb
 78aa4e7481ad78962b24afb8e100eb44d2fdf36df071c84c1f8bd21cb1ff70d5 34306308 linux-image-6.12.96+deb13-cloud-amd64-unsigned_6.12.96-1_amd64.deb
 799d12dbb380c149abfdc49bb0642c4ccaafa73afe963ac024cc1714c99ff8bf 1040458624 linux-image-6.12.96+deb13-rt-amd64-dbg_6.12.96-1_amd64.deb
 63121c6f36435cf18d5296f43104f3c698dd0a3cc0ab563c7b8196cab0f24daa 107757796 linux-image-6.12.96+deb13-rt-amd64-unsigned_6.12.96-1_amd64.deb
 c6f219bc2a348eb42af64c82709a7b9bed3a593ac8115e6efb9165949d7bb7ee 1164 linux-image-amd64-dbg_6.12.96-1_amd64.deb
 b2d59f8b617b207342f53cb89c23b8fa5fe12d7aec26d3d1d7c62477000c9a73 2271908 linux-image-amd64-signed-template_6.12.96-1_amd64.deb
 7d225177f84bc6af4476091d9a387efd7eb26d56985a1f2b83c482883d014189 1184 linux-image-cloud-amd64-dbg_6.12.96-1_amd64.deb
 7a323e69decff2c90e8f0efe2a008a1f2eafc16357cdbac91ffc63e434e926e3 1176 linux-image-rt-amd64-dbg_6.12.96-1_amd64.deb
 9a15d06b6891033d587f4858cd0c514aa1f8df7557503523ab8de4ac6205f04d 1919072 linux-kbuild-6.12.96+deb13-dbgsym_6.12.96-1_amd64.deb
 6f1c548a8f9bb24473c7972ac8fe2c6dc3b7c5b1482ddbdab7d71e126a3f6af5 1737656 linux-kbuild-6.12.96+deb13_6.12.96-1_amd64.deb
 2fba624e720d143bda0f8078638a332a1e28f18fabf393ebacb8b055f96747ca 12373936 linux-perf-dbgsym_6.12.96-1_amd64.deb
 809df261b117b24edad3c3e72552213f22a9153d79f5f300c211d4983c4f7e6a 4857104 linux-perf_6.12.96-1_amd64.deb
 27b7eac361ea06ff94fa25e1e79170c04546bb25131bb15204f6b31af3ee1ebc 22506 linux_6.12.96-1_amd64-buildd.buildinfo
 950abd3180a209a14701f5ea8d26007f81debc1dff18c55e99223685682205b2 112140 rtla-dbgsym_6.12.96-1_amd64.deb
 49037bd2a5b01205a6193ee45b2de2e4648dbbe84fc228dca7f47996a7576c8f 1360320 rtla_6.12.96-1_amd64.deb
 d5a3f2cec41e8b0180d8aa975935b7d75f64a692be96134ecb294fed18985177 146044 usbip-dbgsym_2.0+6.12.96-1_amd64.deb
 a516ce75b8725428e5e9c65fc75dca8fca6f2384c256d4a1590194d4c1629d5f 1346108 usbip_2.0+6.12.96-1_amd64.deb
Files:
 e579ba4e21f9b71b729128ae88ca3427 965508 debug optional bpftool-dbgsym_7.5.0+6.12.96-1_amd64.deb
 87e12c12d231fea15bca2bae69c57d85 1588420 devel optional bpftool_7.5.0+6.12.96-1_amd64.deb
 2b1f80d817df6cef3a821609f7167648 46360 debug optional hyperv-daemons-dbgsym_6.12.96-1_amd64.deb
 2ef8d6d3e480de409cc10c2d54102f3c 1321924 admin optional hyperv-daemons_6.12.96-1_amd64.deb
 c66d58e0173068ef4bde131982f51900 19668 debug optional intel-sdsi-dbgsym_6.12.96-1_amd64.deb
 28c6b5b120389f11ea62851e748aae72 1310236 admin optional intel-sdsi_6.12.96-1_amd64.deb
 59effe9f0a1002249374bf1e602407ff 1306020 libdevel optional libcpupower-dev_6.12.96-1_amd64.deb
 aaca66014883be43ba79dfba5327f453 32364 debug optional libcpupower1-dbgsym_6.12.96-1_amd64.deb
 715ffc9e97461e5bf976e3b8e4c9d997 1313784 libs optional libcpupower1_6.12.96-1_amd64.deb
 fc2dffbe3ccfbaa26e8936aeefde6e29 1773372 devel optional linux-bpf-dev_6.12.96-1_amd64.deb
 325b06dfaa72724ea245c84bb03cafaa 1447656 kernel optional linux-config-6.12_6.12.96-1_amd64.deb
 eb13e4d843c82d10a927e1d6be07afc3 402196 debug optional linux-cpupower-dbgsym_6.12.96-1_amd64.deb
 4067d774bfdcb317d9633c191f5b9aec 1479316 admin optional linux-cpupower_6.12.96-1_amd64.deb
 e51ba67b5ee9ae2f5ef6c876c67d6cf0 3062812 kernel optional linux-headers-6.12.96+deb13-amd64_6.12.96-1_amd64.deb
 d081db244d974c3e80d1aa156b4a3f6b 2726172 kernel optional linux-headers-6.12.96+deb13-cloud-amd64_6.12.96-1_amd64.deb
 dbe5c861cd3fa5480f88f8dad3b232de 3061376 kernel optional linux-headers-6.12.96+deb13-rt-amd64_6.12.96-1_amd64.deb
 ed19f02844a260c9c41b7860b1373e47 1040153728 debug optional linux-image-6.12.96+deb13-amd64-dbg_6.12.96-1_amd64.deb
 e4b5d5a38aa85c4b57a2b2c15973d172 107768440 kernel optional linux-image-6.12.96+deb13-amd64-unsigned_6.12.96-1_amd64.deb
 3622473eb0b8cfeadea8df08b20d8c1c 318569424 debug optional linux-image-6.12.96+deb13-cloud-amd64-dbg_6.12.96-1_amd64.deb
 ad5a23411ccbc00dc4d44c1db7239886 34306308 kernel optional linux-image-6.12.96+deb13-cloud-amd64-unsigned_6.12.96-1_amd64.deb
 9f16b56ef1ca1c1e8abdd0c1b2b38f06 1040458624 debug optional linux-image-6.12.96+deb13-rt-amd64-dbg_6.12.96-1_amd64.deb
 7c9da4208b2ca3a2ec9c063dea6fdc30 107757796 kernel optional linux-image-6.12.96+deb13-rt-amd64-unsigned_6.12.96-1_amd64.deb
 59dcee8a3e23099d446b88343984d372 1164 kernel optional linux-image-amd64-dbg_6.12.96-1_amd64.deb
 54639f0a1851cac2194b4a03ab57df02 2271908 kernel optional linux-image-amd64-signed-template_6.12.96-1_amd64.deb
 c0bc9734c7a3be020982eec1d2b9c23c 1184 kernel optional linux-image-cloud-amd64-dbg_6.12.96-1_amd64.deb
 ff2a5d7cf070986758bb5d4edb0d8b4e 1176 kernel optional linux-image-rt-amd64-dbg_6.12.96-1_amd64.deb
 141de0d39c06f4a040b542dd296d3217 1919072 debug optional linux-kbuild-6.12.96+deb13-dbgsym_6.12.96-1_amd64.deb
 1737525d161482c8bbb00cd014b2ecbe 1737656 kernel optional linux-kbuild-6.12.96+deb13_6.12.96-1_amd64.deb
 9c7b0fd06d4621e350e1aefc93b6164f 12373936 debug optional linux-perf-dbgsym_6.12.96-1_amd64.deb
 362ce54502ee9c7d360d5ee8a0ccf188 4857104 devel optional linux-perf_6.12.96-1_amd64.deb
 78be1723890b2192f490f2be5938c6d5 22506 kernel optional linux_6.12.96-1_amd64-buildd.buildinfo
 715b12d74326426057a7f2140e927c9a 112140 debug optional rtla-dbgsym_6.12.96-1_amd64.deb
 40e62f5a542273af144064ccd0c59730 1360320 devel optional rtla_6.12.96-1_amd64.deb
 5d1cbaf36c6757143b1718c18dab1eaf 146044 debug optional usbip-dbgsym_2.0+6.12.96-1_amd64.deb
 701d067e7bbdb3949862d65053961a63 1346108 admin optional usbip_2.0+6.12.96-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=2qC+
-----END PGP SIGNATURE-----
