[PATCH 6.12 000/113] 6.12.70-rc1 review
From: Greg Kroah-Hartman
Date: Mon Feb 09 2026 - 09:38:38 EST
This is the start of the stable review cycle for the 6.12.70 release.
There are 113 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 11 Feb 2026 14:22:44 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.70-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 6.12.70-rc1
Werner Sembach <wse@xxxxxxxxxxxxxxxxxxx>
ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU.
Vishwaroop A <va@xxxxxxxxxx>
spi: tegra114: Preserve SPI mode bits in def_command1_reg
Felix Gu <ustc.gu@xxxxxxxxx>
spi: tegra: Fix a memory leak in tegra_slink_probe()
Breno Leitao <leitao@xxxxxxxxxx>
spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer
Breno Leitao <leitao@xxxxxxxxxx>
spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer
Breno Leitao <leitao@xxxxxxxxxx>
spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one
Breno Leitao <leitao@xxxxxxxxxx>
spi: tegra210-quad: Move curr_xfer read inside spinlock
Breno Leitao <leitao@xxxxxxxxxx>
spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer
Chris Bainbridge <chris.bainbridge@xxxxxxxxx>
ASoC: amd: fix memory leak in acp3x pdm dma ops
Sergey Shtylyov <s.shtylyov@xxxxxxxxxxxx>
ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update()
Shigeru Yoshida <syoshida@xxxxxxxxxx>
ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF
Andrew Fasano <andrew.fasano@xxxxxxxx>
netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()
Arnd Bergmann <arnd@xxxxxxxx>
hwmon: (occ) Mark occ_init_attribute() as __printf
Karthik Poosa <karthik.poosa@xxxxxxxxx>
drm/xe/pm: Disable D3Cold for BMG only on specific platforms
Rodrigo Vivi <rodrigo.vivi@xxxxxxxxx>
drm/xe/pm: Also avoid missing outer rpm warning on system suspend
Shuicheng Lin <shuicheng.lin@xxxxxxxxx>
drm/xe/query: Fix topology query pointer advance
Jacob Keller <jacob.e.keller@xxxxxxxxx>
drm/mgag200: fix mgag200_bmc_stop_scanout()
Paolo Abeni <pabeni@xxxxxxxxxx>
net: gro: fix outer network offset
Chen Ni <nichen@xxxxxxxxxxx>
net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi()
Melissa Wen <mwen@xxxxxxxxxx>
drm/amd/display: fix wrong color value mapping on MCM shaper LUT
Daniel Hodges <hodgesd@xxxxxxxx>
tipc: use kfree_sensitive() for session key material
Jakub Kicinski <kuba@xxxxxxxxxx>
net: don't touch dev->stats in BPF redirect paths
Sergey Senozhatsky <senozhatsky@xxxxxxxxxxxx>
net: usb: r8152: fix resume reset deadlock
Eric Dumazet <edumazet@xxxxxxxxxx>
macvlan: fix error recovery in macvlan_common_newlink()
Marek Behún <kabel@xxxxxxxxxx>
net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module
Russell King (Oracle) <rmk+kernel@xxxxxxxxxxxxxxx>
net: sfp: convert sfp quirks to modify struct sfp_module_support
Russell King (Oracle) <rmk+kernel@xxxxxxxxxxxxxxx>
net: sfp: pre-parse the module support
Russell King (Oracle) <rmk+kernel@xxxxxxxxxxxxxxx>
net: phy: add phy_interface_copy()
Russell King (Oracle) <rmk+kernel@xxxxxxxxxxxxxxx>
net: phy: add phy_interface_weight()
Junrui Luo <moonafterrain@xxxxxxxxxxx>
dpaa2-switch: add bounds check for if_id in IRQ handler
Zilin Guan <zilin@xxxxxxxxxx>
net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup
Zilin Guan <zilin@xxxxxxxxxx>
net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup
Zilin Guan <zilin@xxxxxxxxxx>
net: liquidio: Initialize netdev pointer before queue setup
Junrui Luo <moonafterrain@xxxxxxxxxxx>
dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero
Eric Dumazet <edumazet@xxxxxxxxxx>
net/sched: cls_u32: use skb_header_pointer_careful()
Eric Dumazet <edumazet@xxxxxxxxxx>
net: add skb_header_pointer_careful() helper
ChenXiaoSong <chenxiaosong@xxxxxxxxxx>
smb/client: fix memory leak in smb2_open_file()
Ricardo Neri <ricardo.neri-calderon@xxxxxxxxxxxxxxx>
platform/x86/intel/tpmi/plr: Make the file domain<n>/status writeable
Mario Limonciello <mario.limonciello@xxxxxxx>
platform/x86: hp-bioscfg: Skip empty attribute names
Kaushlendra Kumar <kaushlendra.kumar@xxxxxxxxx>
platform/x86: intel_telemetry: Fix PSS event register mask
Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
Martin Hamilton <m@xxxxxxxxxxx>
ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio
Qu Wenruo <wqu@xxxxxxxx>
btrfs: reject new transactions if the fs is fully read-only
Miri Korenblit <miriam.rachel.korenblit@xxxxxxxxx>
wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice
Miri Korenblit <miriam.rachel.korenblit@xxxxxxxxx>
wifi: mac80211: correctly check if CSA is active
Maurizio Lombardi <mlombard@xxxxxxxxxx>
scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
Tim Guttzeit <t.guttzeit@xxxxxxxxxxxxxxxxxxx>
ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU
Maurizio Lombardi <mlombard@xxxxxxxxxx>
scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()
Veerendranath Jakkam <veerendranath.jakkam@xxxxxxxxxxxxxxxx>
wifi: cfg80211: Fix bitrate calculation overflow for HE rates
Kaushlendra Kumar <kaushlendra.kumar@xxxxxxxxx>
regmap: maple: free entry on mas_store_gfp() failure
Devyn Liu <liudingyuan@xxxxxxxxxxxxxx>
spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization
Dimitrios Katsaros <patcherwork@xxxxxxxxx>
ASoC: tlv320adcx140: Propagate error codes during probe
Radhi Bajahaw <bajahawradhi@xxxxxxxxx>
ASoC: amd: yc: Fix microphone on ASUS M6500RE
Hannes Reinecke <hare@xxxxxxxxxx>
nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()
Chaitanya Kulkarni <ckulkarnilinux@xxxxxxxxx>
nvme-fc: release admin tagset if init fails
Shengjiu Wang <shengjiu.wang@xxxxxxx>
ASoC: simple-card-utils: Check device node before overwrite direction
Kery Qi <qikeyu2017@xxxxxxxxx>
ASoC: davinci-evm: Fix reference leak in davinci_evm_probe
Baochen Qiang <baochen.qiang@xxxxxxxxxxxxxxxx>
wifi: mac80211: collect station statistics earlier when disconnect
Dennis Marttinen <twelho@xxxxxxxxxx>
HID: logitech: add HID++ support for Logitech MX Anywhere 3S
Wupeng Ma <mawupeng1@xxxxxxxxxx>
ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free
Perry Yuan <perry.yuan@xxxxxxx>
drm/amd/pm: Disable MMIO access during SMU Mode 1 reset
Rodrigo Lugathe da Conceição Alves <lugathe2@xxxxxxxxx>
HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101)
Kwok Kin Ming <kenkinming2002@xxxxxxxxx>
HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report()
Chris Chiu <chris.chiu@xxxxxxxxxxxxx>
HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list
Daniel Gomez <da.gomez@xxxxxxxxxxx>
netfilter: replace -EEXIST with -EBUSY
Manivannan Sadhasivam <manivannan.sadhasivam@xxxxxxxxxxxxxxxx>
PCI: qcom: Remove ASPM L0s support for MSM8996 SoC
Ruslan Krupitsa <krupitsarus@xxxxxxxxxxx>
ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk
Matouš Lánský <matouslansky@xxxxxxx>
ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55
Siarhei Vishniakou <svv@xxxxxxxxxx>
HID: playstation: Center initial joystick axes to prevent spurious events
Zhang Lixu <lixu.zhang@xxxxxxxxx>
HID: intel-ish-hid: Reset enum_devices_done before enumeration
Lukas Gerlach <lukas.gerlach@xxxxxxxx>
riscv: Sanitize syscall table indexing under speculation
Filipe Manana <fdmanana@xxxxxxxx>
btrfs: fix reservation leak in some error paths when inserting inline extent
DaytonCL <artem749507@xxxxxxxxx>
HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL
Zhang Lixu <lixu.zhang@xxxxxxxxx>
HID: intel-ish-hid: Update ishtp bus match to support device ID table
ZhangGuoDong <zhangguodong@xxxxxxxxxx>
smb/server: fix refcount leak in parse_durable_handle_context()
Chenghao Duan <duanchenghao@xxxxxxxxxx>
LoongArch: Enable exception fixup for specific ADE subcode
ZhangGuoDong <zhangguodong@xxxxxxxxxx>
smb/server: fix refcount leak in smb2_open()
FengWei Shih <dannyshih@xxxxxxxxxxxx>
md: suspend array while updating raid_disks via sysfs
Huacai Chen <chenhuacai@xxxxxxxxxx>
LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED
ZhangGuoDong <zhangguodong@xxxxxxxxxx>
smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()
shechenglong <shechenglong@xxxxxxxxxxx>
block,bfq: fix aux stat accumulation destination
Ethan Nelson-Moore <enelsonmoore@xxxxxxxxx>
net: usb: sr9700: support devices with virtual driver CD
Peter Åstrand <astrand@xxxxxxxxxxxxxx>
wifi: wlcore: ensure skb headroom before skb_push
Moon Hee Lee <moonhee.lee.ca@xxxxxxxxx>
wifi: mac80211: ocb: skip rx_no_sta when interface is not joined
Steven Rostedt <rostedt@xxxxxxxxxxx>
tracing: Fix ftrace event field alignments
Andrii Nakryiko <andrii@xxxxxxxxxx>
procfs: avoid fetching build ID while holding VMA lock
Zhiquan Li <zhiquan_li@xxxxxxx>
KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures
Carlos Llamas <cmllamas@xxxxxxxxxx>
binderfs: fix ida_alloc_max() upper bound
Carlos Llamas <cmllamas@xxxxxxxxxx>
binder: fix BR_FROZEN_REPLY error log
Kang Chen <k.chen@xxxxxxxxxxxxxxxx>
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
Ming Lei <ming.lei@xxxxxxxxxx>
ublk: fix deadlock when reading partition table
Todd Brandt <todd.e.brandt@xxxxxxxxx>
tools/power turbostat: fix GCC9 build regression
Lukas Wunner <lukas@xxxxxxxxx>
PCI/ERR: Ensure error recoverability at all times
Sean Christopherson <seanjc@xxxxxxxxxx>
KVM: Don't clobber irqfd routing type when deassigning irqfd
Bert Karwatzki <spasswolf@xxxxxx>
Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem"
Kairui Song <kasong@xxxxxxxxxxx>
mm, shmem: prevent infinite loop on truncate race
Max Yuan <maxyuan@xxxxxxxxxx>
gve: Correct ethtool rx_dropped calculation
Debarghya Kundu <debarghyak@xxxxxxxxxx>
gve: Fix stats report corruption on queue count change
Daniel Vogelbacher <daniel@xxxxxxxxxxxxxx>
ceph: fix oops due to invalid pointer for kfree() in parse_longname()
Thomas Weissschuh <thomas.weissschuh@xxxxxxxxxxxxx>
ARM: 9468/1: fix memset64() on big-endian
Ilya Dryomov <idryomov@xxxxxxxxx>
rbd: check for EOD after exclusive lock is ensured to be held
Viacheslav Dubeyko <Slava.Dubeyko@xxxxxxx>
ceph: fix NULL pointer dereference in ceph_mds_auth_match()
Hao Ge <hao.ge@xxxxxxxxx>
mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single
Xu Yang <xu.yang_2@xxxxxxx>
pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains
Xu Yang <xu.yang_2@xxxxxxx>
pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup
Jacky Bai <ping.bai@xxxxxxx>
pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset
Xu Yang <xu.yang_2@xxxxxxx>
pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup
Gabor Juhos <j4g8y7@xxxxxxxxx>
pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state
Takashi Iwai <tiwai@xxxxxxx>
ALSA: aloop: Fix racy access at PCM trigger
Kaushlendra Kumar <kaushlendra.kumar@xxxxxxxxx>
platform/x86: intel_telemetry: Fix swapped arrays in PSS output
Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
x86/kfence: fix booting on 32bit non-PAE systems
Josh Poimboeuf <jpoimboe@xxxxxxxxxx>
x86/vmware: Fix hypercall clobbers
YunJe Shin <yjshin0438@xxxxxxxxx>
nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
-------------
Diffstat:
Makefile | 4 +-
arch/arm/include/asm/string.h | 5 +-
arch/loongarch/kernel/traps.c | 5 ++
arch/loongarch/mm/cache.c | 8 +--
arch/riscv/kernel/traps.c | 4 +-
arch/x86/include/asm/kfence.h | 7 +-
arch/x86/include/asm/vmware.h | 4 +-
block/bfq-cgroup.c | 2 +-
drivers/android/binder.c | 5 +-
drivers/android/binderfs.c | 8 +--
drivers/base/regmap/regcache-maple.c | 11 +--
drivers/block/rbd.c | 33 +++++----
drivers/block/ublk_drv.c | 30 +++++++-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 3 +
drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 3 -
.../gpu/drm/amd/display/dc/dcn30/dcn30_cm_common.c | 7 +-
.../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 7 +-
.../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 9 ++-
drivers/gpu/drm/mgag200/mgag200_bmc.c | 31 ++++----
drivers/gpu/drm/mgag200/mgag200_drv.h | 6 ++
drivers/gpu/drm/xe/xe_pm.c | 17 +++--
drivers/gpu/drm/xe/xe_query.c | 2 +-
drivers/hid/hid-ids.h | 4 ++
drivers/hid/hid-logitech-hidpp.c | 2 +
drivers/hid/hid-multitouch.c | 1 +
drivers/hid/hid-playstation.c | 5 ++
drivers/hid/hid-quirks.c | 2 +
drivers/hid/i2c-hid/i2c-hid-core.c | 1 +
drivers/hid/intel-ish-hid/ishtp-hid-client.c | 1 +
drivers/hid/intel-ish-hid/ishtp/bus.c | 12 +++-
drivers/hwmon/occ/common.c | 1 +
drivers/md/md.c | 4 +-
drivers/net/ethernet/adi/adin1110.c | 3 +
drivers/net/ethernet/cavium/liquidio/lio_main.c | 39 +++++-----
drivers/net/ethernet/cavium/liquidio/lio_vf_main.c | 4 +-
.../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 10 +++
drivers/net/ethernet/google/gve/gve_ethtool.c | 77 +++++++++++++-------
drivers/net/ethernet/google/gve/gve_main.c | 4 +-
drivers/net/macvlan.c | 5 +-
drivers/net/phy/sfp-bus.c | 83 +++++++++++++++-------
drivers/net/phy/sfp.c | 51 ++++++-------
drivers/net/phy/sfp.h | 4 +-
drivers/net/usb/r8152.c | 29 ++++----
drivers/net/usb/sr9700.c | 5 ++
drivers/net/wireless/ti/wlcore/tx.c | 5 ++
drivers/nvme/host/fc.c | 2 +
drivers/nvme/target/tcp.c | 26 +++++--
drivers/pci/bus.c | 3 +
drivers/pci/controller/dwc/pcie-qcom.c | 4 +-
drivers/pci/pci.c | 3 -
drivers/platform/x86/hp/hp-bioscfg/bioscfg.c | 5 ++
drivers/platform/x86/intel/intel_plr_tpmi.c | 2 +-
drivers/platform/x86/intel/telemetry/debugfs.c | 4 +-
drivers/platform/x86/intel/telemetry/pltdrv.c | 2 +-
drivers/platform/x86/toshiba_haps.c | 2 +-
drivers/pmdomain/imx/gpcv2.c | 8 +--
drivers/pmdomain/imx/imx8m-blk-ctrl.c | 2 +-
drivers/pmdomain/imx/imx8mp-blk-ctrl.c | 30 ++++++++
drivers/pmdomain/qcom/rpmpd.c | 2 +-
drivers/spi/spi-hisi-kunpeng.c | 4 +-
drivers/spi/spi-tegra114.c | 3 +
drivers/spi/spi-tegra20-slink.c | 6 +-
drivers/spi/spi-tegra210-quad.c | 36 ++++++++--
drivers/target/iscsi/iscsi_target_util.c | 10 ++-
fs/btrfs/disk-io.c | 13 ++++
fs/btrfs/fs.h | 8 +++
fs/btrfs/inode.c | 16 +++--
fs/ceph/crypto.c | 9 +--
fs/ceph/mds_client.c | 5 +-
fs/ceph/mdsmap.c | 26 +++++--
fs/ceph/mdsmap.h | 1 +
fs/ceph/super.h | 16 ++++-
fs/hfsplus/dir.c | 2 +-
fs/hfsplus/hfsplus_fs.h | 8 ++-
fs/hfsplus/unicode.c | 24 +++++--
fs/hfsplus/xattr.c | 6 +-
fs/proc/task_mmu.c | 42 +++++++----
fs/smb/client/smb2file.c | 1 +
fs/smb/server/smb2pdu.c | 8 ++-
include/linux/buildid.h | 3 +
include/linux/ceph/ceph_fs.h | 6 ++
include/linux/phy.h | 10 +++
include/linux/sfp.h | 22 ++++++
include/linux/skbuff.h | 12 ++++
kernel/trace/ring_buffer.c | 2 +
kernel/trace/trace.h | 7 +-
kernel/trace/trace_entries.h | 26 +++----
kernel/trace/trace_export.c | 21 ++++--
lib/buildid.c | 42 +++++++----
mm/shmem.c | 23 +++---
mm/slub.c | 6 +-
net/bridge/netfilter/ebtables.c | 2 +-
net/core/filter.c | 8 +--
net/core/gro.c | 2 +
net/ipv6/ip6_fib.c | 3 +-
net/mac80211/iface.c | 8 ++-
net/mac80211/key.c | 3 +-
net/mac80211/ocb.c | 3 +
net/mac80211/sta_info.c | 7 +-
net/netfilter/nf_log.c | 4 +-
net/netfilter/nf_tables_api.c | 2 +-
net/netfilter/x_tables.c | 2 +-
net/sched/cls_u32.c | 13 ++--
net/tipc/crypto.c | 4 +-
net/wireless/util.c | 8 ++-
sound/drivers/aloop.c | 62 +++++++++-------
sound/pci/hda/patch_realtek.c | 27 ++++++-
sound/soc/amd/renoir/acp3x-pdm-dma.c | 2 +
sound/soc/amd/yc/acp6x-mach.c | 7 ++
sound/soc/codecs/tlv320adcx140.c | 3 +
sound/soc/generic/simple-card-utils.c | 4 +-
sound/soc/ti/davinci-evm.c | 39 +++++++---
sound/usb/mixer_quirks.c | 9 +--
tools/power/x86/turbostat/turbostat.c | 15 ++--
tools/testing/selftests/kvm/Makefile | 1 +
virt/kvm/eventfd.c | 44 ++++++------
116 files changed, 943 insertions(+), 421 deletions(-)