-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 20 Jul 2026 09:13:07 +0200
Source: linux
Binary: bpftool bpftool-dbgsym libcpupower-dev libcpupower1 libcpupower1-dbgsym linux-config-6.12 linux-cpupower linux-cpupower-dbgsym linux-headers-6.12.96+deb13-rpi linux-headers-rpi linux-image-6.12.96+deb13-rpi linux-image-6.12.96+deb13-rpi-dbg linux-image-rpi linux-image-rpi-dbg linux-kbuild-6.12.96+deb13 linux-kbuild-6.12.96+deb13-dbgsym linux-perf linux-perf-dbgsym usbip usbip-dbgsym
Architecture: armel
Version: 6.12.96-1
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 bpftool    - Inspection and simple manipulation of BPF programs and maps
 libcpupower-dev - CPU frequency and voltage scaling tools for Linux (development fi
 libcpupower1 - CPU frequency and voltage scaling tools for Linux (libraries)
 linux-config-6.12 - Debian kernel configurations for Linux 6.12
 linux-cpupower - CPU power management tools for Linux
 linux-headers-6.12.96+deb13-rpi - Header files for Linux 6.12.96+deb13-rpi
 linux-headers-rpi - Header files for Linux rpi configuration (meta-package)
 linux-image-6.12.96+deb13-rpi - Linux 6.12 for Raspberry Pi Zero, Zero W and 1
 linux-image-6.12.96+deb13-rpi-dbg - Debug symbols for linux-image-6.12.96+deb13-rpi
 linux-image-rpi - Linux for Raspberry Pi Zero, Zero W and 1 (meta-package)
 linux-image-rpi-dbg - Debugging symbols for Linux rpi configuration (meta-package)
 linux-kbuild-6.12.96+deb13 - Kbuild infrastructure for Linux 6.12.96+deb13
 linux-perf - Performance analysis tools for Linux
 usbip      - USB device sharing system over IP network
Closes: 1140651
Changes:
 linux (6.12.96-1) trixie-security; urgency=high
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.96
     - [arm64] bpf, arm64: Reject out-of-range B.cond targets
     - nfsd: fix file change detection in CB_GETATTR
     - nfsd: release layout stid on setlease failure
     - userfaultfd: gate must_wait writability check on pte_present()
     - perf: Fix dangling cgroup pointer in cpuctx backport
     - bcachefs: avoid truncating fiemap extent length
     - drm/amd: Fix set but not used warnings
     - gpio: rockchip: change the GPIO version judgment logic
     - gpio: rockchip: teardown bugs and resource leaks
     - gpio: rockchip: fix generic IRQ chip leak on remove (CVE-2026-53226)
     - mm/vmalloc: take vmap_purge_lock in shrinker (CVE-2026-46093)
     - device property: initialize the remaining fields of fwnode_handle in
       fwnode_init()
     - f2fs: validate orphan inode entry count
     - f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
     - f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
     - f2fs: fix potential deadlock in f2fs_balance_fs()
     - f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()
     - f2fs: fix listxattr handling of corrupted xattr entries
     - fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
     - nfsd: add nfsd_file_{get,put} to 'nfs_to' nfsd_localio_operations
     - nfs_common: rename functions that invalidate LOCALIO nfs_clients
     - NFSv4/flexfiles: Remove cred local variable dependency
     - NFSv4/flexfiles: Add data structure support for striped layouts
     - NFSv4/flexfiles: reject zero filehandle version count
     - locking/rtmutex: Make sure we wake anything on the wake_q when we release
       the lock->wait_lock
     - apparmor: advertise the tcp fast open fix is applied
     - nfsd: move name lookup out of nfsd4_list_rec_dir()
     - nfsd: change nfs4_client_to_reclaim() to allocate data
     - bonding: fix xfrm offload feature setup on active-backup mode
     - block: add a store_limit operations for sysfs entries
     - block: fix queue freeze vs limits lock order in sysfs store methods
       (CVE-2025-21807)
     - mm/khugepaged: write all dirty file folios when collapsing
     - perf trace beauty fcntl: Fix build with older kernel headers
     - ACPI: CPPC: Suppress UBSAN warning caused by field misuse
     - ACPI: NFIT: core: Fix possible NULL pointer dereference
     - [amd64] platform/x86: intel-hid: Protect ACPI notify handler against
       recursion
     - perf/core: Detach event groups during remove_on_exec
     - [amd64] drm/i915: ensure segment offset never exceeds allowed max
     - usb: gadget: function: rndis: add length check to response query
     - usb: gadget: function: rndis: add length check for header
     - iio: accel: bmc150: clamp the device-reported FIFO frame count
     - iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
     - iio: adc: lpc32xx: Initialize completion before requesting IRQ
     - iio: adc: spear: Initialize completion before requesting IRQ
     - iio: adc: ti-ads1119: fix PM reference leak in buffer preenable
     - iio: adc: ti-ads124s08: Return reset GPIO lookup errors
     - iio: backend: fix uninitialized data in debugfs
     - iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
     - iio: common: st_sensors: honour channel endianness in read_axis_data
     - iio: event: Fix event FIFO reset race
     - iio: gyro: bmg160: bail out when bandwidth/filter is not in table
     - iio: gyro: bmg160: wait full startup time after mode change at probe
     - iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
     - iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
     - iio: imu: inv_icm42600: fix timestamp clock period by using lower value
     - iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
     - iio: imu: st_lsm6dsx: deselect shub page before reading whoami
     - iio: light: al3010: fix incorrect scale for the highest gain range
     - iio: light: gp2ap002: fix runtime PM leak on read error
     - iio: light: opt3001: fix missing state reset on timeout
     - iio: light: tsl2591: return actual error from probe IRQ failure
     - iio: light: veml6030: fix channel type when pushing events
     - iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call
     - iio: resolver: ad2s1210: notify trigger and clear state on fault read
       error
     - iio: temperature: Build mlx90635 with CONFIG_MLX90635
     - iio: temperature: ltc2983: Fix n_wires default bypassing rotation check
     - iio: temperature: ltc2983: Fix reinit_completion() called after conversion
       start
     - ALSA: virtio: Add missing 384 kHz PCM rate mapping
     - ALSA: virtio: Validate control metadata from the device
     - ALSA: ymfpci: check snd_ctl_new1() return value
     - ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
     - ALSA: cmipci: check snd_ctl_new1() return value
     - ALSA: es1938: check snd_ctl_new1() return value
     - ALSA: firewire: isight: bound the sample count to the packet payload
     - ALSA: gus: check snd_ctl_new1() return value
     - ALSA: ice1712: check snd_ctl_new1() return value
     - ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
     - ALSA: usb-audio: avoid kobject path lookup in DualSense match
     - ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
     - ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch
       put callbacks
     - ALSA: usb-audio: Roll back quirk control caches on write errors
     - ALSA: usb-audio: Update Babyface Pro control caches only after successful
       writes
     - ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful
       writes
     - vfio/pci: Use a private flag to prevent power state change with VFs
     - vfio/pci: Latch disable_idle_d3 per device
     - vfio/pci: Release the VGA arbiter client on register_device() failure
     - vfio/pci: Fix racy bitfields and tighten struct layout
     - vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
     - vfio: Remove device debugfs before releasing devres
     - Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB
     - Bluetooth: btusb: fix use-after-free on registration failure
     - Bluetooth: btusb: fix use-after-free on marvell probe failure
     - Bluetooth: btusb: fix wakeup source leak on probe failure
     - [arm*] binder: fix UAF in binder_thread_release()
     - [arm*] binder: fix UAF in binder_free_transaction()
     - usb: xhci: Fix sleep in atomic context in xhci_free_streams()
     - usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
     - PCI: host-common: Request bus reassignment when not probe-only
     - [arm*] PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
     - mm/damon/ops-common: handle extreme intervals in damon_hot_score()
     - netfilter: ipset: fix race between dump and ip_set_list resize
     - virtio_pci: fix vq info pointer lookup via wrong index
     - virtio-mmio: fix device release warning on module unload
     - hwrng: virtio: clamp device-reported used.len at copy_data()
     - USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
     - usb: dwc3: run gadget disconnect from sleepable suspend context
     - 6lowpan: fix NHC entry use-after-free on error path
     - tipc: fix out-of-bounds read in broadcast Gap ACK blocks
     - staging: vme_user: bound slave read/write to the kern_buf size
     - smb: client: restrict implied bcc[0] exemption to responses without data
       area
     - staging: vme_user: fix location monitor leak in fake bridge
     - staging: vme_user: fix location monitor leak in tsi148 bridge
     - media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe
     - staging: media: atomisp: reduce load_primary_binaries() stack usage
     - staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
     - staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
     - staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
     - staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
     - staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and
       join_cmd_hdl()
     - staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
     - staging: rtl8723bs: fix OOB write in HT_caps_handler()
     - crypto: amlogic - avoid double cleanup in meson_crypto_probe()
     - ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then
       SMB2_CANCEL
     - net: af_key: initialize alg_key_len for IPComp states
     - audit: Fix data races of skb_queue_len() readers on audit_queue
     - Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
     - coresight: etb10: restore atomic_t for shared reading state
     - debugobjects: Plug race against a concurrent OOM disable
     - fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
     - NTB: epf: Avoid calling pci_irq_vector() from hardirq context
     - gpio: eic-sprd: use raw_spinlock_t in the irq startup path
     - io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
     - netpoll: fix a use-after-free on shutdown path
     - ipv4: igmp: remove multicast group from hash table on device destruction
     - net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
     - mfd: cros_ec: Delay dev_set_drvdata() until probe success
     - mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
     - mm: shrinker: fix shrinker_info teardown race with expansion
     - mm: shrinker: fix NULL pointer dereference in debugfs
     - mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent
       softlockup
     - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
     - netfilter: handle unreadable frags
     - netfilter: ebtables: module names must be null-terminated
     - netfilter: ebtables: terminate table name before find_table_lock()
     - Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
     - Bluetooth: bnep: pin L2CAP connection during netdev registration
     - Bluetooth: btnxpuart: Fix out-of-bounds firmware read in
       nxp_recv_fw_req_v3()
     - Bluetooth: fix UAF in bt_accept_dequeue()
     - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled
     - Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()
     - Bluetooth: L2CAP: validate option length before reading conf opt value
     - fs/ntfs3: rename ni_readpage_cmpr into ni_read_folio_cmpr
     - fs/ntfs3: fsync files by syncing parent inodes
     - fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()
     - fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
       (CVE-2026-53027)
     - coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
     - smb/client: Fix error code in smb2_aead_req_alloc()
     - ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
     - ksmbd: add a permission check for FSCTL_SET_ZERO_DATA
     - ksmbd: serialize QUERY_DIRECTORY requests per file
     - ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation
     - ksmbd: require source read access for duplicate extents
     - ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY
     - ksmbd: run set info with opener credentials
     - ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION
     - ksmbd: add per-handle permission check to FILE_LINK_INFORMATION
     - ksmbd: use opener credentials for delete-on-close
     - ksmbd: use opener credentials for ADS I/O
     - smb: client: fix query directory replay double-free
     - smb: client: fix query_info() replay double-free
     - smb: client: fix double-free in SMB2_ioctl() replay
     - smb: client: fix change notify replay double-free
     - smb: client: fix double-free in SMB2_flush() replay
     - smb: client: fix double-free in SMB2_open() replay
     - smb: client: fix double-free in SMB2_close() replay
     - smb: client: Fix next buffer leak in receive_encrypted_standard()
     - smb: client: use unaligned reads in parse_posix_ctxt()
     - smb: client: harden POSIX SID length parsing
     - smb: client: fix atime clamp check in read completion
     - smb: client: mask server-provided mode to 07777 in modefromsid
     - writeback: fix race between cgroup_writeback_umount() and
       inode_switch_wbs()
     - cpufreq: qcom-cpufreq-hw: Fix possible double free
     - firmware_loader: fix device reference leak in firmware_upload_register()
     - [amd64] cpufreq: intel_pstate: Sync policy->cur during CPU offline
     - sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
     - cpufreq: Fix hotplug-suspend race during reboot
     - cpufreq: pcc: fix use-after-free and double free in _OSC evaluation
     - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
     - clocksource/drivers/timer-tegra186: Fix support for multiple watchdog
       instances
     - X.509: Fix validation of ASN.1 certificate header
     - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
     - tools/mm/slabinfo: Fix trace disable logic inversion
     - tools/mm/slabinfo: fix total_objects attribute name
     - HID: hid-goodix-spi: validate report size to prevent stack buffer overflow
     - HID: wacom: stop hardware after post-start probe failures
     - HID: letsketch: fix UAF on inrange_timer at driver unbind
     - HID: lg-g15: cancel pending work on remove to fix a use-after-free
     - HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte
       reads
     - hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
     - nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
     - media: mtk-jpeg: cancel workqueue on release for supported platforms only
     - serial: 8250_mid: Disable DMA for selected platforms
     - xfs: use null daddr for unset first bad log block
     - xfs: release dquot buffer after dqflush failure
     - xfs: fix unreachable BIGTIME check in dquot flush validation
     - xfs: fix pointer arithmetic error on 32-bit systems
     - xfs: fix exchmaps reservation limit check
     - bpf: Reject fragmented frames in devmap
     - bpf: Restore sysctl new-value from 1 to 0
     - bpf: Validate BTF repeated field counts before expansion
     - net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
     - usb: cdc_acm: Add quirk for Uniden BC125AT scanner
     - usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
     - USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
     - usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()
     - usb: free iso schedules on failed submit
     - usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
     - usb: gadget: udc: Fix use-after-free in gadget_match_driver
     - usb: gadget: f_printer: take kref only for successful open
     - USB: idmouse: fix use-after-free on disconnect race
     - USB: ldusb: fix use-after-free on disconnect race
     - USB: iowarrior: fix use-after-free on disconnect
     - USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
     - USB: legousbtower: fix use-after-free on disconnect race
     - usb: sl811-hcd: disable controller wakeup on remove
     - USB: storage: include US_FL_NO_SAME in quirks mask
     - USB: misc: uss720: unregister parport on probe failure
     - usb: mtu3: unmap request DMA on queue failure
     - USB: serial: keyspan_pda: fix information leak
     - USB: serial: option: add Telit Cinterion FE990D50 compositions
     - USB: serial: digi_acceleport: fix broken rx after throttle
     - USB: serial: digi_acceleport: fix hard lockup on disconnect
     - USB: serial: digi_acceleport: fix write buffer corruption
     - USB: ulpi: fix memory leak on registration failure
     - USB: usb-storage: ene_ub6250: restore media-ready check
     - usbip: tools: support SuperSpeedPlus devices
     - usbip: vudc: fix NULL deref in vep_dequeue()
     - usb: typec: anx7411: use devm_pm_runtime_enable()
     - usb: typec: class: drop PD lookup reference
     - usb: typec: tcpm: Fix VDM type for Enter Mode commands
     - usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
     - usb: typec: ucsi: Invert DisplayPort role assignment
     - usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt
       mode
     - usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
     - usb: typec: ucsi: cancel pending work on system suspend
     - usb: gadget: f_fs: Fix DMA fence leak
     - block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
     - [amd64] x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU
       when SNC enabled
     - PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining
     - udf: validate free block extents against the partition length
     - udf: validate VAT header length against the VAT inode size
     - udf: validate sparing table length as an entry count, not a byte count
     - hwrng: jh7110 - fix refcount leak in starfive_trng_read()
     - nvme: target: rdma: fix ndev refcount leak on queue connect
     - dm-ioctl: report an error if a device has no table
     - nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace
       disks
     - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
     - nvmet-auth: validate reply message payload bounds against transfer length
     - btrfs: do not trim a device which is not writeable
     - partitions: aix: bound the pp_count scan to the ppe array
     - isofs: bound Rock Ridge symlink components to the SL record
     - crypto: af_alg - Remove zero-copy support from skcipher and aead
     - [arm64] crypto: caam - use print_hex_dump_devel to guard key hex dumps
     - [arm64] crypto: caam - use print_hex_dump_devel to guard key hex dumps
       again
     - crypto: ecc - Fix carry overflow in vli multiplication
     - crypto: pcrypt - restore callback for non-parallel fallback
     - [amd64] crypto: ccp - Do not initialize SNP for SEV ioctls
     - [amd64] crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)
     - [amd64] crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)
     - crypto: drbg - Fix returning success on failure in CTR_DRBG
     - crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
     - crypto: drbg - Fix the fips_enabled priority boost
     - [amd64] crypto: qat - keep VFs enabled during reset
     - [amd64] crypto: qat - notify fatal error before AER reset preparation
     - [amd64] crypto: qat - protect service table iterations with service_lock
     - [amd64] crypto: qat - validate RSA CRT component lengths
     - [arm64] fpsimd: Fix type mismatch in sme_{save,load}_state()
     - spi: fsl-lpspi: replace dmaengine_terminate_all() with
       dmaengine_terminate_sync()
     - spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
     - EDAC/i10nm: Don't fail probing if ADXL is missing
     - watchdog: apple: Add "apple,t8103-wdt" compatible
     - regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
     - i2c: core: fix hang on adapter registration failure
     - tracing: Prevent out-of-bounds read in glob matching
     - audit: fix potential integer overflow in audit_log_n_hex()
     - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
     - module: decompress: check return value of module_extend_max_pages()
     - exfat: bound uniname advance in exfat_find_dir_entry()
     - NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
     - riscv: mm: Unconditionally sfence.vma for spurious fault
     - mm: fix mmap errno value when MAP_DROPPABLE is not supported
     - mm: do file ownership checks with the proper mount idmap
     - [amd64] iommu/amd: Don't split flush for amd_iommu_domain_flush_all()
     - iommufd: Set upper bounds on cache invalidation entry_num and entry_len
     - [amd64] KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected
       #DBs
     - [amd64] KVM: x86: Ensure vendor's exit handler runs before fastpath
       userspace exits
     - [amd64] KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in
       guest mode
     - udmabuf: fix DMA direction mismatch in release_udmabuf()
     - dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning
     - i2c: core: fix irq domain leak on adapter registration failure
     - i2c: core: fix NULL-deref on adapter registration failure
     - i2c: core: fix adapter probe deferral loop
     - i2c: core: fix adapter debugfs creation
     - i2c: core: fix adapter deregistration race
     - i2c: mpc: Fix timeout calculations
     - i2c: stm32f7: truncate clock period instead of rounding it
     - Input: synaptics-rmi4 - unregister function handlers on physical driver
       registration failure
     - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
     - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
     - Input: elan_i2c - prevent division by zero and arithmetic underflow
     - Input: goodix - clamp the device-reported contact count
     - Input: iforce - bound the device-reported force-feedback effect index
     - Input: mms114 - fix touch indexing for MMS134S and MMS136
     - Input: touchwin - reset the packet index on every complete packet
     - Input: mms114 - reject an oversized device packet size
     - Input: maplemouse - fix NULL pointer dereference in open()
     - Input: mms114 - fix multi-touch slot corruption
     - Input: maple_keyb - set driver data before registering input device
     - Input: maplemouse - set driver data before registering input device
     - Input: maplecontrol - set driver data before registering input device
     - RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
     - RDMA/siw: bound Read Response placement to the RREAD length
     - fuse: fix device node leak in cuse_process_init_reply()
     - fuse: re-lock request before returning from fuse_ref_folio()
     - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req
     - usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction
       checks
     - smb: client: reject overlapping data areas in SMB2 responses
     - xfs: fix null pointer dereference in tracepoint
     - xfs: fail recovery on a committed log item with no regions
     - xfs: resample the data fork mapping after cycling ILOCK
     - xfs: don't wrap around quota ids in dqiterate
     - xfs: set xfarray killable sort correctly
     - xfs: clamp timestamp nanoseconds correctly
     - xfs: fully check the parent handle when it points to the rootdir
     - xfs: don't zap bmbt forks if they are MAXLEVELS tall
 .
   [ Han Gao ]
   * [riscv64] set NR_CPUS to 128 (Closes: #1140651)
 .
   [ Salvatore Bonaccorso ]
   * [rt] Refresh "locking/rt: Annotate unlock followed by lock for sparse."
     (context changes)
Checksums-Sha1:
 149c2705eed9854cd092f1e2890dce65474c985a 942396 bpftool-dbgsym_7.5.0+6.12.96-1_armel.deb
 9067dd1a73c6ce4873eef30109bfb78326fd5aea 1552252 bpftool_7.5.0+6.12.96-1_armel.deb
 e0d08c727a25cd5b981751d5c8c85eb6c8503fe5 1306020 libcpupower-dev_6.12.96-1_armel.deb
 dff3c6c4c8dbbdf1f5b9e5b37a63a5b396a92912 32752 libcpupower1-dbgsym_6.12.96-1_armel.deb
 cf6bbf897565f6338c699faa1ce1b64c33f1d7d9 1312276 libcpupower1_6.12.96-1_armel.deb
 e23c533c88433208e8c8f86d763fd3bd3dd7ab5b 1347140 linux-config-6.12_6.12.96-1_armel.deb
 8e460321276ddf8019fb82a36ae0ca12d73d8419 66088 linux-cpupower-dbgsym_6.12.96-1_armel.deb
 44e24f5d704efb9b0cfe893332289fdeab412eee 1350156 linux-cpupower_6.12.96-1_armel.deb
 a689fcefab9f499e9230bff21d2ae80d4711d856 1707768 linux-headers-6.12.96+deb13-rpi_6.12.96-1_armel.deb
 bd9215baa2b7a7353a51ce05ea1c6c0562716a61 1148 linux-headers-rpi_6.12.96-1_armel.deb
 1194e4cb34722dcc459f1c7e6426c2a8beb73dc4 412795520 linux-image-6.12.96+deb13-rpi-dbg_6.12.96-1_armel.deb
 dc65f3e46e6e77a0606e9fb691a9bc0a731704d4 33344584 linux-image-6.12.96+deb13-rpi_6.12.96-1_armel.deb
 d811ba4f1f765d9b33b426a9279dccf7b7b65734 1164 linux-image-rpi-dbg_6.12.96-1_armel.deb
 289087b6876ee0fba3c0a8ae406a9efa81951f97 1436 linux-image-rpi_6.12.96-1_armel.deb
 bdc811daafa13ca96a1d1c8f81360621a79d4b52 1891076 linux-kbuild-6.12.96+deb13-dbgsym_6.12.96-1_armel.deb
 bb62fa394e4a1702dc1f3e35ace137b69956a413 1683160 linux-kbuild-6.12.96+deb13_6.12.96-1_armel.deb
 249da12f1b5004efaf89f59c5f7be0f14102fd49 11971632 linux-perf-dbgsym_6.12.96-1_armel.deb
 65b578c42b9db26a6194f454f264d135b3dba75f 3166988 linux-perf_6.12.96-1_armel.deb
 5f63f7debd537e4928e868ef71603c25bd8da1e9 16715 linux_6.12.96-1_armel-buildd.buildinfo
 dc6eb829ea69e105ab9c45ab441b26f1cd1cabc9 151496 usbip-dbgsym_2.0+6.12.96-1_armel.deb
 ff5e25349752f84afcc389c2a6f028b3fbe8526d 1342120 usbip_2.0+6.12.96-1_armel.deb
Checksums-Sha256:
 c8a2c941cffb8fc12b394ccfe58468b07c7633a95532912cf6012f70aa98094e 942396 bpftool-dbgsym_7.5.0+6.12.96-1_armel.deb
 e4d06e64a3d05421b3ed4b3fae3406fa697e348599dc96de00b31d732105816b 1552252 bpftool_7.5.0+6.12.96-1_armel.deb
 83e853f3763a1f1103dad2febf785389f3f430fec641848a53543e7aaee138f8 1306020 libcpupower-dev_6.12.96-1_armel.deb
 bd790a52434641f4692e3135aa5b63ff5be7f046b0416524320bab1f3ebe8dc6 32752 libcpupower1-dbgsym_6.12.96-1_armel.deb
 ce3df988092f7be913d989df4e1cb73e1cb27d2685aa84701a7b83fcb1e9f996 1312276 libcpupower1_6.12.96-1_armel.deb
 3225e36b42159927aa501685e3b756773df891061108811e433d7d2c946bef14 1347140 linux-config-6.12_6.12.96-1_armel.deb
 cb967a3255df756ee216510223c7161e8b91a8d7f22976889f492eeab640878c 66088 linux-cpupower-dbgsym_6.12.96-1_armel.deb
 52c94374d216b39487012e4648fa47d9f9b5f8198e1e9958d158f68ccaf4ed99 1350156 linux-cpupower_6.12.96-1_armel.deb
 300ad1f02301e5725a6af3d851bd8b81305831a21847b89bd2abff0241a68a79 1707768 linux-headers-6.12.96+deb13-rpi_6.12.96-1_armel.deb
 f2d1314a663b68d296e3ea5a370899b08ffa7938b91591aeb5469527ec518d84 1148 linux-headers-rpi_6.12.96-1_armel.deb
 dab873de252e2c1d93aa9018c74f421dd71768cec783e624679b072b0cbe9e7d 412795520 linux-image-6.12.96+deb13-rpi-dbg_6.12.96-1_armel.deb
 173c5b39084d9a0bbde617fa33142587826df381926ac041b5b1104dd713a12a 33344584 linux-image-6.12.96+deb13-rpi_6.12.96-1_armel.deb
 0092eeb07bc2a8c895ee662a1686238dd9abeeefe739ff7f8ac1012277298804 1164 linux-image-rpi-dbg_6.12.96-1_armel.deb
 d7df02fdf2fac310674c68b03ce55d883bc16e1884ed964ffd044bf9b6c14478 1436 linux-image-rpi_6.12.96-1_armel.deb
 1e15c58d74c30a3d9218d256b6b305bdcd8c86c728d9ebc557a661e313fe858f 1891076 linux-kbuild-6.12.96+deb13-dbgsym_6.12.96-1_armel.deb
 63e8542eaa8a5c44e9d60e59137cf6ea2b94e54382c15ba625f87444572342df 1683160 linux-kbuild-6.12.96+deb13_6.12.96-1_armel.deb
 79c2505cb3fe4b205e9ee91e3b5b8773ad9f320a50421f7e6543b14168e4b576 11971632 linux-perf-dbgsym_6.12.96-1_armel.deb
 12265491d4ee9862cad0b9b25b763a4d14df8e8cdb15dc72e63781bc2ea0c39b 3166988 linux-perf_6.12.96-1_armel.deb
 a1f62bca9d00341ab7920b5f3c74affc44432f327abb643cdc254272776a2ea0 16715 linux_6.12.96-1_armel-buildd.buildinfo
 9c90b010d3c6a6eed7ed3477da52021ab39a6f335ae55ee87f46ec70af23718b 151496 usbip-dbgsym_2.0+6.12.96-1_armel.deb
 61b0c0eb60e49f4e44ae4dd6844e5ad49f4947a1846df57166b01976ccabab4c 1342120 usbip_2.0+6.12.96-1_armel.deb
Files:
 89b65257a9deb4d48149b17369db4d4e 942396 debug optional bpftool-dbgsym_7.5.0+6.12.96-1_armel.deb
 d1f269c647a69f3b6d7f7875ce4c9395 1552252 devel optional bpftool_7.5.0+6.12.96-1_armel.deb
 e660112a0ea55f457392937b8fe534c1 1306020 libdevel optional libcpupower-dev_6.12.96-1_armel.deb
 9f22327abdfb2af1d6cc7fc7581d7bbf 32752 debug optional libcpupower1-dbgsym_6.12.96-1_armel.deb
 5e7cf00afcbab915d289d91fe4a6fcb2 1312276 libs optional libcpupower1_6.12.96-1_armel.deb
 c2fcd511e9a833dad89ec865786f7d95 1347140 kernel optional linux-config-6.12_6.12.96-1_armel.deb
 266b492735708ce47b27527099566cb6 66088 debug optional linux-cpupower-dbgsym_6.12.96-1_armel.deb
 bbc8f1c3900c565cb76d1d6228f63234 1350156 admin optional linux-cpupower_6.12.96-1_armel.deb
 6108eb3081e06f546aa17a16e8732abb 1707768 kernel optional linux-headers-6.12.96+deb13-rpi_6.12.96-1_armel.deb
 e7f5edd2e9993eae2ccb3f78d65efbb0 1148 kernel optional linux-headers-rpi_6.12.96-1_armel.deb
 07188399e85acd751d04392f1afa89f0 412795520 debug optional linux-image-6.12.96+deb13-rpi-dbg_6.12.96-1_armel.deb
 f4e93310e666e818e421dfcb2d2a0c24 33344584 kernel optional linux-image-6.12.96+deb13-rpi_6.12.96-1_armel.deb
 b4646c938b84614fb04dbf83988f15c9 1164 kernel optional linux-image-rpi-dbg_6.12.96-1_armel.deb
 def1a0f91af2029cf0ed3292e55d86c8 1436 kernel optional linux-image-rpi_6.12.96-1_armel.deb
 e60ea5b2ba44142edec44d39d3c9fab8 1891076 debug optional linux-kbuild-6.12.96+deb13-dbgsym_6.12.96-1_armel.deb
 1ca622883d515b9b833140655e583592 1683160 kernel optional linux-kbuild-6.12.96+deb13_6.12.96-1_armel.deb
 fd979e70288d5f79a495f66f2fcb109e 11971632 debug optional linux-perf-dbgsym_6.12.96-1_armel.deb
 513b3c300e0de982875e2cf084a8b227 3166988 devel optional linux-perf_6.12.96-1_armel.deb
 019a5146ead78d362f680579f19042e8 16715 kernel optional linux_6.12.96-1_armel-buildd.buildinfo
 d98649879ae0996f339382d669114076 151496 debug optional usbip-dbgsym_2.0+6.12.96-1_armel.deb
 992d766eed0c6be263ef515c33fb9bf9 1342120 admin optional usbip_2.0+6.12.96-1_armel.deb

-----BEGIN PGP SIGNATURE-----
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=G3eh
-----END PGP SIGNATURE-----
