Skip to content

6.12.84-rc1 review

Greg Kroah-Hartman linux-patches lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest35 patches 12 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/35mm/userfaultfd: fix hugetlb fault mutex hash calculationinclude/linux/hugetlb.h mm/userfaultfd.c+18 -10 replies
2/35PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardowndrivers/pci/endpoint/functions/pci-epf-vntb.c+1 -170 replies
3/35ima: verify if the segment size has changedsecurity/integrity/ima/ima_kexec.c+10 -00 replies
4/35ima: do not copy measurement list to kdump kernelsecurity/integrity/ima/ima_kexec.c+3 -00 replies
5/35wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failuredrivers/net/wireless/ath/ath9k/channel.c drivers/net/wireless/virtual/mac80211_hwsim.c include/net/mac80211.h +1 more+8 -70 replies
6/35rust: warn on bindgen < 0.69.5 and libclang >= 19.1scripts/rust_is_available.sh scripts/rust_is_available_bindgen_libclang_concat.h scripts/rust_is_available_test.py+51 -10 replies
7/35net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registersdrivers/net/ethernet/mediatek/mtk_eth_soc.c drivers/net/ethernet/mediatek/mtk_ppe.c drivers/net/ethernet/mediatek/mtk_ppe.h+52 -10 replies
8/35drm/amdgpu: replace PASID IDR with XArraydrivers/gpu/drm/amd/amdgpu/amdgpu_ids.c+19 -200 replies
9/35scripts: generate_rust_analyzer.py: define scriptsscripts/generate_rust_analyzer.py+13 -10 replies
10/35mm/pagewalk: fix race between concurrent split and refaultmm/pagewalk.c+22 -20 replies
11/35ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavengerfs/smb/server/vfs_cache.c+30 -110 replies
12/35scripts/dtc: Remove unused dts_version in dtc-lexer.lscripts/dtc/dtc-lexer.l+0 -30 replies
13/35rxrpc: only handle RESPONSE during service challengenet/rxrpc/conn_event.c+12 -20 replies
14/35fs/ntfs3: validate rec->used in journal-replay file record checkfs/ntfs3/fslog.c+11 -10 replies
15/35f2fs: fix to avoid memory leak in f2fs_rename()fs/f2fs/namei.c+1 -00 replies
16/35fuse: reject oversized dirents in page cachefs/fuse/readdir.c+4 -00 replies
17/35fuse: Check for large folio with SPLICE_F_MOVEfs/fuse/dev.c+3 -00 replies
18/35fuse: quiet down complaints in fuse_conn_limit_writefs/fuse/control.c+2 -20 replies
19/35ksmbd: require minimum ACE size in smb_check_perm_dacl()fs/smb/server/smbacl.c+13 -40 replies
20/35smb: server: fix active_num_conn leak on transport allocation failurefs/smb/server/transport_tcp.c+2 -00 replies
21/35smb: server: fix max_connections off-by-one in tcp accept pathfs/smb/server/transport_tcp.c+1 -10 replies
22/35smb: client: require a full NFS mode SID before reading mode bitsfs/smb/client/cifsacl.c+1 -00 replies
23/35smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO pathfs/smb/client/smb2ops.c+6 -00 replies
24/35ksmbd: validate response sizes in ipc_validate_msg()fs/smb/server/mgmt/user_config.c fs/smb/server/transport_ipc.c+13 -90 replies
25/35ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()fs/smb/server/smbacl.c+23 -50 replies
26/35ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignmentfs/smb/server/smb2pdu.c+2 -00 replies
27/35ksmbd: use check_add_overflow() to prevent u16 DACL size overflowfs/smb/server/smbacl.c+12 -40 replies
28/35f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()fs/f2fs/compress.c+11 -30 replies
29/35ALSA: usb-audio: apply quirk for MOONDROP JU Jiusound/usb/mixer.c+7 -00 replies
30/35ALSA: caiaq: take a reference on the USB device in create_card()sound/usb/caiaq/device.c+2 -20 replies
31/35net/packet: fix TOCTOU race on mmapd vnet_hdr in tpacket_snd()net/packet/af_packet.c+13 -80 replies
32/35crypto: ccp: Dont attempt to copy CSR to userspace if PSP command faileddrivers/crypto/ccp/sev-dev.c+7 -10 replies
33/35crypto: ccp: Dont attempt to copy PDH cert to userspace if PSP command faileddrivers/crypto/ccp/sev-dev.c+7 -10 replies
34/35crypto: ccp: Dont attempt to copy ID to userspace if PSP command faileddrivers/crypto/ccp/sev-dev.c+3 -00 replies
35/35rxrpc: Fix missing validation of ticket length in non-XDR key preparsingnet/rxrpc/key.c+4 -00 replies

Reviews trailers per patch

17 of 35 patches have a Reviewed-by or Acked-by.

PatchSeongJae ParkDavid Hildenbrand (Arm)Mike Rapoport (Microsoft)Frank LiStefan BergerBaoquan HeNamjae JeonChristian KönigChao YuWillem de BruijnDaniel AlmeidaFiona BehrensTrevor GrossChenXiaoSongPeter SchneiderPavel Machek (CIP)Florian FainelliMark BrownShuah KhanBarry K. NathanChristian VanBrett A C SheffieldMiguel OjedaRon EconomosFrancesco DolciniHarshit Mogalapalli
SeriesT-b T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b
1/35A-b R-b A-b
2/35R-b
3/35R-b T-b A-b
4/35T-b A-b
5/35
6/35
7/35
8/35R-b
9/35R-b R-b R-b
10/35A-b
11/35R-b
12/35
13/35
14/35
15/35
16/35
17/35
18/35
19/35A-b
20/35A-b
21/35A-b
22/35
23/35
24/35A-b
25/35A-b
26/35A-b
27/35A-b
28/35R-b
29/35
30/35
31/35R-b
32/35
33/35
34/35
35/35

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 26 reviewers.

Read the v1 thread

Cover letter [PATCH 6.12 00/35] 6.12.84-rc1 review

This is the start of the stable review cycle for the 6.12.84 release. There are 35 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sun, 26 Apr 2026 13:23:21 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.84-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.12.84-rc1

Anderson Nascimento <[email protected]>
rxrpc: Fix missing validation of ticket length in non-XDR key preparsing

Sean Christopherson <[email protected]>
crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed

Sean Christopherson <[email protected]>
crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed

Sean Christopherson <[email protected]>
crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed

Bingquan Chen <[email protected]>
net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()

Berk Cem Goksel <[email protected]>
ALSA: caiaq: take a reference on the USB device in create_card()

Cryolitia PukNgae <[email protected]>
ALSA: usb-audio: apply quirk for MOONDROP JU Jiu

George Saad <[email protected]>
f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()

Tristan Madani <[email protected]>
ksmbd: use check_add_overflow() to prevent u16 DACL size overflow

Tristan Madani <[email protected]>
ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment

Michael Bommarito <[email protected]>
ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()

Michael Bommarito <[email protected]>
ksmbd: validate response sizes in ipc_validate_msg()

Michael Bommarito <[email protected]>
smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path

Michael Bommarito <[email protected]>
smb: client: require a full NFS mode SID before reading mode bits

DaeMyung Kang <[email protected]>
smb: server: fix max_connections off-by-one in tcp accept path

Michael Bommarito <[email protected]>
smb: server: fix active_num_conn leak on transport allocation failure

Michael Bommarito <[email protected]>
ksmbd: require minimum ACE size in smb_check_perm_dacl()

Darrick J. Wong <[email protected]>
fuse: quiet down complaints in fuse_conn_limit_write

Bernd Schubert <[email protected]>
fuse: Check for large folio with SPLICE_F_MOVE

Samuel Page <[email protected]>
fuse: reject oversized dirents in page cache

Chao Yu <[email protected]>
f2fs: fix to avoid memory leak in f2fs_rename()

Greg Kroah-Hartman <[email protected]>

    fs/ntfs3: validate rec->used in journal-replay file record check

Wang Jie <[email protected]>
rxrpc: only handle RESPONSE during service challenge

Nathan Chancellor <[email protected]>
scripts/dtc: Remove unused dts_version in dtc-lexer.l

Namjae Jeon <[email protected]>
ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger

Max Boone <[email protected]>
mm/pagewalk: fix race between concurrent split and refault

Tamir Duberstein <[email protected]>
scripts: generate_rust_analyzer.py: define scripts

Mikhail Gavrilov <[email protected]>
drm/amdgpu: replace PASID IDR with XArray

Daniel Golle <[email protected]>
net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers

Miguel Ojeda <[email protected]>

    rust: warn on bindgen < 0.69.5 and libclang >= 19.1

Felix Fietkau <[email protected]>
wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure

Steven Chen <[email protected]>
ima: do not copy measurement list to kdump kernel

Steven Chen <[email protected]>
ima: verify if the segment size has changed

Koichiro Den <[email protected]>
PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown

Jianhui Zhou <[email protected]>
mm/userfaultfd: fix hugetlb fault mutex hash calculation

-------------

Diffstat:

 Makefile                                           |  4 +-
 drivers/crypto/ccp/sev-dev.c                       | 19 ++++++-
 drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c            | 39 +++++++-------
 drivers/net/ethernet/mediatek/mtk_eth_soc.c        | 22 +++++++-
 drivers/net/ethernet/mediatek/mtk_ppe.c            | 30 +++++++++++
 drivers/net/ethernet/mediatek/mtk_ppe.h            |  1 +
 drivers/net/wireless/ath/ath9k/channel.c           |  6 +--
 drivers/net/wireless/virtual/mac80211_hwsim.c      |  1 -
 drivers/pci/endpoint/functions/pci-epf-vntb.c      | 18 +------
 fs/f2fs/compress.c                                 | 14 +++--
 fs/f2fs/namei.c                                    |  1 +
 fs/fuse/control.c                                  |  4 +-
 fs/fuse/dev.c                                      |  3 ++
 fs/fuse/readdir.c                                  |  4 ++
 fs/ntfs3/fslog.c                                   | 12 ++++-
 fs/smb/client/cifsacl.c                            |  1 +
 fs/smb/client/smb2ops.c                            |  6 +++
 fs/smb/server/mgmt/user_config.c                   |  6 ---
 fs/smb/server/smb2pdu.c                            |  2 +
 fs/smb/server/smbacl.c                             | 61 +++++++++++++++++-----
 fs/smb/server/transport_ipc.c                      | 16 ++++--
 fs/smb/server/transport_tcp.c                      |  4 +-
 fs/smb/server/vfs_cache.c                          | 41 +++++++++++----
 include/linux/hugetlb.h                            | 17 ++++++
 include/net/mac80211.h                             |  4 +-
 mm/pagewalk.c                                      | 24 ++++++++-
 mm/userfaultfd.c                                   |  2 +-
 net/mac80211/tx.c                                  |  4 +-
 net/packet/af_packet.c                             | 21 +++++---
 net/rxrpc/conn_event.c                             | 14 ++++-
 net/rxrpc/key.c                                    |  4 ++
 scripts/dtc/dtc-lexer.l                            |  3 --
 scripts/generate_rust_analyzer.py                  | 14 ++++-
 scripts/rust_is_available.sh                       | 15 ++++++
 .../rust_is_available_bindgen_libclang_concat.h    |  3 ++
 scripts/rust_is_available_test.py                  | 34 +++++++++++-
 security/integrity/ima/ima_kexec.c                 | 13 +++++
 sound/usb/caiaq/device.c                           |  4 +-
 sound/usb/mixer.c                                  |  7 +++
 39 files changed, 389 insertions(+), 109 deletions(-)