[PATCH 6.12 00/35] 6.12.84-rc1 review

From: Greg Kroah-Hartman

Date: Fri Apr 24 2026 - 09:43:46 EST


This is the start of the stable review cycle for the 6.12.84 release.
There are 35 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sun, 26 Apr 2026 13:23:21 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.84-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 6.12.84-rc1

Anderson Nascimento <anderson@xxxxxxxxxxxxxxxxxx>
rxrpc: Fix missing validation of ticket length in non-XDR key preparsing

Sean Christopherson <seanjc@xxxxxxxxxx>
crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed

Sean Christopherson <seanjc@xxxxxxxxxx>
crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed

Sean Christopherson <seanjc@xxxxxxxxxx>
crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed

Bingquan Chen <patzilla007@xxxxxxxxx>
net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()

Berk Cem Goksel <berkcgoksel@xxxxxxxxx>
ALSA: caiaq: take a reference on the USB device in create_card()

Cryolitia PukNgae <cryolitia.pukngae@xxxxxxxxx>
ALSA: usb-audio: apply quirk for MOONDROP JU Jiu

George Saad <geoo115@xxxxxxxxx>
f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()

Tristan Madani <tristan@xxxxxxxxxxxxxxxxxxx>
ksmbd: use check_add_overflow() to prevent u16 DACL size overflow

Tristan Madani <tristan@xxxxxxxxxxxxxxxxxxx>
ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment

Michael Bommarito <michael.bommarito@xxxxxxxxx>
ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()

Michael Bommarito <michael.bommarito@xxxxxxxxx>
ksmbd: validate response sizes in ipc_validate_msg()

Michael Bommarito <michael.bommarito@xxxxxxxxx>
smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path

Michael Bommarito <michael.bommarito@xxxxxxxxx>
smb: client: require a full NFS mode SID before reading mode bits

DaeMyung Kang <charsyam@xxxxxxxxx>
smb: server: fix max_connections off-by-one in tcp accept path

Michael Bommarito <michael.bommarito@xxxxxxxxx>
smb: server: fix active_num_conn leak on transport allocation failure

Michael Bommarito <michael.bommarito@xxxxxxxxx>
ksmbd: require minimum ACE size in smb_check_perm_dacl()

Darrick J. Wong <djwong@xxxxxxxxxx>
fuse: quiet down complaints in fuse_conn_limit_write

Bernd Schubert <bschubert@xxxxxxx>
fuse: Check for large folio with SPLICE_F_MOVE

Samuel Page <sam@xxxxxxxx>
fuse: reject oversized dirents in page cache

Chao Yu <chao@xxxxxxxxxx>
f2fs: fix to avoid memory leak in f2fs_rename()

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
fs/ntfs3: validate rec->used in journal-replay file record check

Wang Jie <jiewang2024@xxxxxxxxxx>
rxrpc: only handle RESPONSE during service challenge

Nathan Chancellor <nathan@xxxxxxxxxx>
scripts/dtc: Remove unused dts_version in dtc-lexer.l

Namjae Jeon <linkinjeon@xxxxxxxxxx>
ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger

Max Boone <mboone@xxxxxxxxxx>
mm/pagewalk: fix race between concurrent split and refault

Tamir Duberstein <tamird@xxxxxxxxxx>
scripts: generate_rust_analyzer.py: define scripts

Mikhail Gavrilov <mikhail.v.gavrilov@xxxxxxxxx>
drm/amdgpu: replace PASID IDR with XArray

Daniel Golle <daniel@xxxxxxxxxxxxxx>
net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers

Miguel Ojeda <ojeda@xxxxxxxxxx>
rust: warn on bindgen < 0.69.5 and libclang >= 19.1

Felix Fietkau <nbd@xxxxxxxx>
wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure

Steven Chen <chenste@xxxxxxxxxxxxxxxxxxx>
ima: do not copy measurement list to kdump kernel

Steven Chen <chenste@xxxxxxxxxxxxxxxxxxx>
ima: verify if the segment size has changed

Koichiro Den <den@xxxxxxxxxxxxx>
PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown

Jianhui Zhou <jianhuizzzzz@xxxxxxxxx>
mm/userfaultfd: fix hugetlb fault mutex hash calculation


-------------

Diffstat:

Makefile | 4 +-
drivers/crypto/ccp/sev-dev.c | 19 ++++++-
drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 39 +++++++-------
drivers/net/ethernet/mediatek/mtk_eth_soc.c | 22 +++++++-
drivers/net/ethernet/mediatek/mtk_ppe.c | 30 +++++++++++
drivers/net/ethernet/mediatek/mtk_ppe.h | 1 +
drivers/net/wireless/ath/ath9k/channel.c | 6 +--
drivers/net/wireless/virtual/mac80211_hwsim.c | 1 -
drivers/pci/endpoint/functions/pci-epf-vntb.c | 18 +------
fs/f2fs/compress.c | 14 +++--
fs/f2fs/namei.c | 1 +
fs/fuse/control.c | 4 +-
fs/fuse/dev.c | 3 ++
fs/fuse/readdir.c | 4 ++
fs/ntfs3/fslog.c | 12 ++++-
fs/smb/client/cifsacl.c | 1 +
fs/smb/client/smb2ops.c | 6 +++
fs/smb/server/mgmt/user_config.c | 6 ---
fs/smb/server/smb2pdu.c | 2 +
fs/smb/server/smbacl.c | 61 +++++++++++++++++-----
fs/smb/server/transport_ipc.c | 16 ++++--
fs/smb/server/transport_tcp.c | 4 +-
fs/smb/server/vfs_cache.c | 41 +++++++++++----
include/linux/hugetlb.h | 17 ++++++
include/net/mac80211.h | 4 +-
mm/pagewalk.c | 24 ++++++++-
mm/userfaultfd.c | 2 +-
net/mac80211/tx.c | 4 +-
net/packet/af_packet.c | 21 +++++---
net/rxrpc/conn_event.c | 14 ++++-
net/rxrpc/key.c | 4 ++
scripts/dtc/dtc-lexer.l | 3 --
scripts/generate_rust_analyzer.py | 14 ++++-
scripts/rust_is_available.sh | 15 ++++++
.../rust_is_available_bindgen_libclang_concat.h | 3 ++
scripts/rust_is_available_test.py | 34 +++++++++++-
security/integrity/ima/ima_kexec.c | 13 +++++
sound/usb/caiaq/device.c | 4 +-
sound/usb/mixer.c | 7 +++
39 files changed, 389 insertions(+), 109 deletions(-)