Dear Maintainer, It used to work with kernel version 6.12.57+deb13-amd64 - after update it ceased working. When doing mount -t ceph -o name=... cn1,cn2,cn3:/directory /remote/mountpoint ls /remote/mountpoint results in Killed instead of A normal directory listing
Hi Reinhard,
As I understand this is now a regression from 6.12.57-1 to 6.12.63-1.
Would it be possible that you bisect the issue to narrow down the
change which beaks? That would involve compiling and testing a few
kernels:
git clone --single-branch -b linux-6.12.y https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git
cd linux-stable
git checkout v6.12.57
cp /boot/config-$(uname -r) .config
yes '' | make localmodconfig
make savedefconfig
mv defconfig arch/x86/configs/my_defconfig
# test 6.12.57 to ensure this is "good"
make my_defconfig
make -j $(nproc) bindeb-pkg
... install the resulting .deb package and confirm problem does
not exist.
# test 6.12.63 to ensure this is "bad"
git checkout v6.12.63
make my_defconfig
make -j $(nproc) bindeb-pkg
... install the resulting .deb package and confirm poblem exists.
With that confirmed, the bisection can start:
git bisect start
git bisect good v6.12.57
git bisect bad v6.12.63
In each bisection step git checks out a state between the oldest
known-bad and the newest known-good commit. In each step test using:
make my_defconfig
make -j $(nproc) bindeb-pkg
... install, and verify if problem exists.
and if the problem is hit run:
git bisect bad
and if the problem doesn't trigger run:
git bisect good
. Please pay attention to always select the just built kernel for
booting, it won't always be the default kernel picked up by grub.
Iterate until git announces to have identified the first bad commit.
Then provide the output of
git bisect log
In the course of the bisection you might have to uninstall previous
kernels again to not exhaust the disk space in /boot. Also in the end
uninstall all self-built kernels again.
Regards,
Salvatore
Hi Reinhard, Before running the 'make savedefconfig' step, make sure to have the ceph required configuration enabled, either by writing the config options directly in the .config file or by running; ./scripts/config --module CEPH_FS ./scripts/config --module CEPH_LIB ./scripts/config --enable CEPH_FSCACHE ./scripts/config --enable CEPH_FS_POSIX_ACL then the remaining make savedefconfig mv defconfig arch/x86/configs/my_defconfig (make sure that they are configured before compiling the respective ersions). The rest remains the same in the procedure, but you need to make sure the ceph support is enabled in the config you use. Hope this help, Regards, Salvatore
Ciao Reinhard, you should at the first commit to test land at: $ git bisect good 8a243ecde1f6447b8e237f2c1c67c0bb67d16d67 status: waiting for bad commit, 1 good commit known $ git bisect bad 567bd8cbc2fe6b28b78864cbbbc41b0d405eb83c Bisecting: 698 revisions left to test after this (roughly 10 steps) [850c7f0537cc5a37ed012592907920637cc548b6] x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev So the next commit to test with the procedure was 850c7f0537cc5a37ed012592907920637cc548b6 and not as in the above log. Can you reset the bisection and start freshly with the procedure? Thanks for your time helping to identify the issue! FWIW, I have so far not seen other ceph related regressions reports upstream for 6.12.y, so this is puzzling me a bit. Regards, Salvatore
Hi Reinhard, This is still not the bisect procedure :). The next ommit pointed out by the procedure to bisec would be 850c7f0537cc5a37ed012592907920637cc548b6 . You need to build with that commit up a kernel, boot into it, test if ceph mount works or not and based on the result mark it with 'git bisect bad' or 'git bisect good'. Git will then calculate you the next commit to test, and you interate until you get 'the first bad commit' result. We need to have that (or worst case a range, if you needed to skip one). But in meahwhile I have found an upstream repot which matches your report: https://tracker.ceph.com/issues/73886 https://lore.kernel.org/ceph-devel/20260114195524.1025067-2-slava@dubeyko.com/ So it would be great if you instead could built the current kernel in trixie with this patch added on top. The procedure for this one is documented in https://kernel-team.pages.debian.net/kernel-handbook/ch-common-tasks.html#id-1.6.6.4 but let me know if you need help with that. Regards, Salvatore
Hi Reinhard, Let's shortcut that step, I have built *test* packages at https://people.debian.org/~carnil/tmp/linux/1125405-cephfs/ (if you want to trust them, unsigned, but I have put a sha256sum file for those signed with my gpg key in the Debian keyring). Please report back if that fixes the problem. Regards, Salvatore
Hi Reinhard, earlier message. Can you test please as well my test package at: https://people.debian.org/~carnil/tmp/linux/1125405-cephfs/ (as mentioned they are inofficial packages with the required patch on top, to confirm the issue would be fixed with). Regards, Salvatore
Hi Reinhard, Thanks for the confirmation. Regards, Salvatore
Hi, FWIW, the regression has been reported in Debian as well as https://bugs.debian.org/1125405 and Reinhard confirmed that the patch seems to resolve the observed regression. Regards, Salvatore
We believe that the bug you reported is fixed in the latest version of
linux, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1125405@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Salvatore Bonaccorso <carnil@debian.org> (supplier of updated linux package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 12 Feb 2026 20:41:59 +0100
Source: linux
Architecture: source
Version: 6.19-1~exp1
Distribution: experimental
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 1125405
Changes:
linux (6.19-1~exp1) experimental; urgency=medium
.
* New upstream release: https://kernelnewbies.org/Linux_6.19
- ceph: fix NULL pointer dereference in ceph_mds_auth_match()
(Closes: #1125405)
.
[ Matthias Geiger ]
* [x86] drivers/media/i2c: Enable VIDEO_OV8858 as module
* [arm64] drivers/gpib: Enable GPIB_GPIO as module
.
[ Bastian Blank ]
* Unsplit configs for some kernel architectures. We don't support multiple
variants of arm, sparc or x86 anymore.
.
[ Loïc Minier ]
* [arm64] Enable Qualcomm SA8775P platforms: add SA_GCC_8775P,
PINCTRL_SA8775P, INTERCONNECT_QCOM_SA8775P as builtins and
SA_GPUCC_8775P, SA_CAMCC_8775P, SA_DISPCC_8775P, SA_VIDEOCC_8775P as
modules.
.
[ Shawn Guo ]
* [arm64] udeb: fb-modules: Add display-connector module
.
[ John Paul Adrian Glaubitz ]
* [sparc64] Add patch to update uapi headers for glibc >= 2.42
Checksums-Sha1:
74007b3f97d604414fe253265ffe4ae0d3396836 183378 linux_6.19-1~exp1.dsc
8ef5b517efb1932142ec083acd191ff7ded89788 159152724 linux_6.19.orig.tar.xz
4602176a9dd719a46825fd92953d8cde091d245d 1452624 linux_6.19-1~exp1.debian.tar.xz
9ac4e772746576489358b40ca2a1f76b646f8dc2 6994 linux_6.19-1~exp1_source.buildinfo
Checksums-Sha256:
9ad850e7fd9c404d4d6587b97e2c5021adab0f353ea15bad2e8bf0bbc02f0e19 183378 linux_6.19-1~exp1.dsc
eb2b8f34d0d643882312e64d8848412a6cd4c8f141805ac0748c97967ccdd750 159152724 linux_6.19.orig.tar.xz
ab990d8406f70eb98bfc472603d853dbc0ce5165def37d0706965e3a25cb32e3 1452624 linux_6.19-1~exp1.debian.tar.xz
39556848ca832d1c634db59243be029a1cf716f1cc9cbf1a01ad313b8220d8e2 6994 linux_6.19-1~exp1_source.buildinfo
Files:
8993c046484d591efe1e32a84acb79ff 183378 kernel optional linux_6.19-1~exp1.dsc
9cb789a03f3b26271f9119a340e6e4dc 159152724 kernel optional linux_6.19.orig.tar.xz
ea060f4a4f3c877f7031929695e6d1d5 1452624 kernel optional linux_6.19-1~exp1.debian.tar.xz
a47b7ed5d2fc28e22c997a4d2f3773bc 6994 kernel optional linux_6.19-1~exp1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmmOLm9fFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
ZWJpYW4ub3JnAAoJEAVMuPMTQ89EkrUP/32bdhyfW7oT+Rk7UxBkq2DFnY6kAOha
9lTp7oU2oRiqZ0DBzroeb4hisMuZZqwgfp3Nh298loWiiDXYT6qx3LARtjGhEzXH
x92Rgc6ARk6TxI8kpsdwjLvwSVgL7jrSQdGmCkDs2+b+jr2ZjpfnJHPXZSr6xlPu
O3Uaz9sGnH4oOoig7cbv4lfqwHJDULWhCcslKOLxN5raEUfnb8Ok8VAtCnPPZL+n
Vh7R7PFyuLw12t6ge0cgKsh0eIa5vbfLniL+pdeAg++0NGwGJVIZO4SaNBCTheu7
IWWClu/sApaVLlZDDtx+/3RL88kh+2V9EB98E3cJ9GfRkvYG26jHw6AXoDA6pFsb
Wmbykmt2s/wustMta3rBZwWN92X1ezOQWK+Dwt+IRNvwGZLDKjJjW9Sbf5gX3q+l
I9YdJz9OCmv8mvgGSJ9VjzMDX6rM8bytm41+2nh4KPiQ3cd7kg/C4nd7gVLHGwQo
pe/FCFmnxaiNKV630r8TRkqxexUeZF9cirkmL6vT8Sp+tZExWHd5XSLMNYwETvVC
4BoTpwG3AtBKM3+aPity2KxVUlgdbwVeIhyWQfii+/Yfm6vLf1kwgQbENLgvlHwP
SqxUKERhQ70Eg4iMliECO+O1d5eOcZqtQCplQ0f+2m1OYaMjFzRbcUyjjhQJaZDs
AAfjXR41FoiU
=B32z
-----END PGP SIGNATURE-----
We believe that the bug you reported is fixed in the latest version of linux, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1125405@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <carnil@debian.org> (supplier of updated linux package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) Format: 1.8 Date: Fri, 13 Feb 2026 23:31:16 +0100 Source: linux Architecture: source Version: 6.18.10-1 Distribution: unstable Urgency: medium Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1125405 Changes: linux (6.18.10-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.10 - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - [amd64] x86/vmware: Fix hypercall clobbers - [amd64] x86/kfence: fix booting on 32bit non-PAE systems - [amd64] KVM: x86: Explicitly configure supported XSS from {svm,vmx}_set_cpu_caps() - [amd64] platform/x86: intel_telemetry: Fix swapped arrays in PSS output - ALSA: aloop: Fix racy access at PCM trigger - [arm64] pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - [arm64] pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - [arm64,armhf] pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - [arm64] pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - [arm64] pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - procfs: avoid fetching build ID while holding VMA lock - mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single - ceph: fix NULL pointer dereference in ceph_mds_auth_match() (Closes: #1125405) - rbd: check for EOD after exclusive lock is ensured to be held - ceph: fix oops due to invalid pointer for kfree() in parse_longname() - cgroup/dmem: fix NULL pointer dereference when setting max - cgroup/dmem: avoid rcu warning when unregister region - cgroup/dmem: avoid pool UAF - drm/amd: Set minimum version for set_hw_resource_1 on gfx11 to 0x52 - gve: Fix stats report corruption on queue count change - gve: Correct ethtool rx_dropped calculation - mm, shmem: prevent infinite loop on truncate race - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - nouveau: add a third state to the fini handler. - nouveau/gsp: use rpc sequence numbers properly. - nouveau/gsp: fix suspend/resume regression on r570 firmware - [armhf] net: cpsw: Execute ndo_set_rx_mode callback in a work queue - [armhf] net: cpsw_new: Execute ndo_set_rx_mode callback in a work queue - [riscv64] net: spacemit: k1-emac: fix jumbo frame support - KVM: Don't clobber irqfd routing type when deassigning irqfd - hwmon: (gpio-fan) Fix set_rpm() return value - hwmon: (gpio-fan) Allow to stop FANs when CONFIG_PM is disabled - PCI/ERR: Ensure error recoverability at all times - treewide: Drop pci_save_state() after pci_restore_state() - bus: mhi: host: pci_generic: Add Telit FE990B40 modem support - sched/fair: Skip sched_balance_running cmpxchg when balance is not due - sched/fair: Have SD_SERIALIZE affect newidle balancing - rust_binder: correctly handle FDA objects of length zero - rust_binder: add additional alignment checks - rust_binderfs: fix ida_alloc_max() upper bound - binder: fix UAF in binder_netlink_report() - binder: fix BR_FROZEN_REPLY error log - binderfs: fix ida_alloc_max() upper bound - tracing: Fix ftrace event field alignments - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - wifi: wlcore: ensure skb headroom before skb_push - wifi: mac80211: don't WARN for connections on invalid channels - net: usb: sr9700: support devices with virtual driver CD - wifi: iwlwifi: Implement settime64 as stub for MVM/MLD PTP - [amd64] platform/x86: dell-lis3lv02d: Add Latitude 5400 - block,bfq: fix aux stat accumulation destination - smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() - md: suspend array while updating raid_disks via sysfs - smb/server: fix refcount leak in smb2_open() - io_uring: use GFP_NOWAIT for overflow CQEs on legacy rings - smb/server: fix refcount leak in parse_durable_handle_context() - btrfs: do not free data reservation in fallback from inline due to -ENOSPC - [amd64] HID: intel-ish-hid: Update ishtp bus match to support device ID table - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - btrfs: fix reservation leak in some error paths when inserting inline extent - [riscv64] Sanitize syscall table indexing under speculation - [amd64] HID: intel-ish-hid: Reset enum_devices_done before enumeration - HID: playstation: Center initial joystick axes to prevent spurious events - ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55 - [amd64] x86/sev: Disable GCOV on noinstr object - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - [arm64] PCI: qcom: Remove ASPM L0s support for MSM8996 SoC - netfilter: replace -EEXIST with -EBUSY - drm/amd/display: Reduce number of arguments of dcn30's CalculatePrefetchSchedule() - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - [amd64] HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - drm/amd/pm: Disable MMIO access during SMU Mode 1 reset - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - [riscv64] trace: fix snapshot deadlock with sbi ecall - HID: logitech: add HID++ support for Logitech MX Anywhere 3S - HID: Elecom: Add support for ELECOM M-XT3DRBK (018C) - wifi: mac80211: collect station statistics earlier when disconnect - [amd64] ASoC: Intel: sof_sdw: Add new quirks for PTL on Dell with CS42L43 - [riscv64] dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - ASoC: simple-card-utils: Check device node before overwrite direction - nvme-fc: release admin tagset if init fails - ALSA: usb-audio: Prevent excessive number of frames - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() - [amd64] ASoC: amd: yc: Fix microphone on ASUS M6500RE - ALSA: hda/tas2781: Add newly-released HP laptop - regmap: maple: free entry on mas_store_gfp() failure - ALSA: usb-audio: Add delay quirk for MOONDROP Moonriver2 Ti - spi: intel-pci: Add support for Nova Lake SPI serial flash - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() - [riscv64] Use 64-bit variable for output in __get_user_asm - io_uring/rw: free potentially allocated iovec on cache put failure - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - btrfs: fix Wmaybe-uninitialized warning in replay_one_buffer() - wifi: mac80211: correctly check if CSA is active - btrfs: sync read disk super and set block size - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - btrfs: reject new transactions if the fs is fully read-only - ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio - tracing: Avoid possible signed 64-bit truncation - Revert "drm/amd/display: pause the workload setting in dm" - [amd64] platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - [amd64] platform/x86: intel_telemetry: Fix PSS event register mask - [amd64] platform/x86: hp-bioscfg: Skip empty attribute names - [amd64] platform/x86/intel/tpmi/plr: Make the file domain<n>/status writeable - smb/client: fix memory leak in smb2_open_file() - [amd64] hwmon: (dell-smm) Add Dell G15 5510 to fan control whitelist - net: add skb_header_pointer_careful() helper - net/sched: cls_u32: use skb_header_pointer_careful() - net: liquidio: Initialize netdev pointer before queue setup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - ice: fix missing TX timestamps interrupts on E825 devices - ice: PTP: fix missing timestamps on E825 hardware - ice: Fix PTP NULL pointer dereference during VSI rebuild - ice: drop udp_tunnel_get_rx_info() call from ndo_open() - i40e: drop udp_tunnel_get_rx_info() call from i40e_open() - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - macvlan: fix error recovery in macvlan_common_newlink() - net: usb: r8152: fix resume reset deadlock - hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify() - net: don't touch dev->stats in BPF redirect paths - io_uring/zcrx: fix page array leak - linkwatch: use __dev_put() in callers to prevent UAF - net: rss: fix reporting RXH_XFRM_NO_CHANGE as input_xfrm for contexts - tipc: use kfree_sensitive() for session key material - [arm64] net: enetc: Remove SI/BDR cacheability AXI settings for ENETC v4 - [arm64] net: enetc: Remove CBDR cacheability AXI settings for ENETC v4 - [arm64] net: enetc: Convert 16-bit register writes to 32-bit for ENETC v4 - [arm64] net: enetc: Convert 16-bit register reads to 32-bit for ENETC v4 - wifi: iwlwifi: mld: cancel mlo_scan_start_wk - wifi: iwlwifi: mvm: pause TCM on fast resume - drm/amd/display: fix wrong color value mapping on MCM shaper LUT - net: add proper RCU protection to /proc/net/ptype - net: gro: fix outer network offset - [amd64] drm/mgag200: fix mgag200_bmc_stop_scanout() - drm/xe/query: Fix topology query pointer advance - drm/xe/pm: Disable D3Cold for BMG only on specific platforms - [armhf] hwmon: (occ) Mark occ_init_attribute() as __printf - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() - drm/xe/guc: Fix CFI violation in debugfs access. - nvme-pci: handle changing device dma map requirements - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF - firmware: cs_dsp: Factor out common debugfs string read - firmware: cs_dsp: rate-limit log messages in KUnit builds - ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update() - [amd64] ASoC: amd: fix memory leak in acp3x pdm dma ops - i2c: imx: preserve error state in block data length handler - [riscv64] regulator: spacemit-p1: Fix n_voltages for BUCK and LDO regulators - [arm64] spi: tegra: Fix a memory leak in tegra_slink_probe() - [arm64,armhf] spi: tegra114: Preserve SPI mode bits in def_command1_reg - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - ALSA: usb-audio: Use the right limit for PCM OOB check - [riscv64] Add intermediate cast to 'unsigned long' in __get_user_asm Checksums-Sha1: ebd3f477c7fb6d838bedae55b149808bacc539a2 183309 linux_6.18.10-1.dsc fd7601e93712f3359c3106c96210c494a55db538 157407580 linux_6.18.10.orig.tar.xz 4132fd8e393609972495d7e9c879a0e4154badcb 1463156 linux_6.18.10-1.debian.tar.xz 3068645fe1507e9cf1277cd29935590195b5ad04 6875 linux_6.18.10-1_source.buildinfo Checksums-Sha256: 8fadd004e9ccdef9f4e888594d4ac35878bd70c181d544c7aafd8f130f4c09e2 183309 linux_6.18.10-1.dsc 89f0ba0c5c2ce62b527c329b8cc67f9f6add8804e9f9ab4f866ab6b559b8c785 157407580 linux_6.18.10.orig.tar.xz 399cabb736cba7cd78fd7684ee9a2e0fdef3630adefdd45b84f727f9ae4b5edb 1463156 linux_6.18.10-1.debian.tar.xz 3084ef64b71260b881899f90c0b1bbab019c2aaa8dfcdf68175c782fcc149290 6875 linux_6.18.10-1_source.buildinfo Files: f6f7bdebe89268b97f6501a89a93c939 183309 kernel optional linux_6.18.10-1.dsc b9e073c0bc95b7ec0bbbd5e36043e340 157407580 kernel optional linux_6.18.10.orig.tar.xz 684a0173de87f30c6425587ad1175e21 1463156 kernel optional linux_6.18.10-1.debian.tar.xz 57ce2068050e1d1dc316b0f2267de21d 6875 kernel optional linux_6.18.10-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmmPptNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EhlQP/1h2J/tEyN2saDaLOQkqSfQ+3xRcMEsL 9p2hC28vMO1bfU5kBF0VkasHCEgeScwuv13lIHiZYYQIcCWEMJcY0NIJ9qrKNQYx FArptT7DcM5/UrXy0hz5da4cWClS32R5KcpSB9IlPv++XSeUxTWS2DXRUiCMqM2s lmd8P3jeDPgF4MKaMta005lVwtrHqY0lbclSj1VuxYoBaIn4cOzeHYBKhl+4JV8/ BPPrn9NcAdE1yHrzqSX5wAzNq4ct9dOoMq9wrafkjHU6YHUd8FMRhTdFIGI9xDBP nrJfSRtK7GDJoduIAdIZXSYZ9q3589sN2CrwEn6o41l481tGG9SyTLRL4R3FBeSn 2ylXVaT8nS2uLGinTRZ00sog58m7dxWq+ANqHHbgxTNmEsdzwFtB1EFko/soEh+v ChvUJ3s/8SXAc8JXMa9k4A1sl+woXaTg1FPPWuqk3RlZOPDhfZR3TogW3RKJa2su wz9WWMiuo6y9JYo7cMgBKhR6k/NaCBkH6eOYRIzpPukq4lAuSTSuprPKr0wdaDoY YjwJ2libRHFaoQo0oxA/XoZ2Us/JKU6euaAGyiU1Tdgr1D08Xz8VBqb/NLcuPHrh +MyihPNwTP1ShuhFZvYfZhL2/ISEmCg2YGwKmpPtrH0OcEb8mWFEfP+zZaScZMfg dkcom6qLwW+0 =DUGb -----END PGP SIGNATURE-----
We believe that the bug you reported is fixed in the latest version of linux, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1125405@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <carnil@debian.org> (supplier of updated linux package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) Format: 1.8 Date: Tue, 17 Feb 2026 06:47:26 +0100 Source: linux Architecture: source Version: 6.12.73-1 Distribution: trixie-security Urgency: high Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1125405 1127597 Changes: linux (6.12.73-1) trixie-security; urgency=high . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.70 - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - [amd64] x86/vmware: Fix hypercall clobbers - [amd64] x86/kfence: fix booting on 32bit non-PAE systems - [amd64] platform/x86: intel_telemetry: Fix swapped arrays in PSS output - ALSA: aloop: Fix racy access at PCM trigger - [arm64] pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - [arm64] pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - [arm64,armhf] pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - [arm64] pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - [arm64] pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single - ceph: fix NULL pointer dereference in ceph_mds_auth_match() (Closes: #1125405) - rbd: check for EOD after exclusive lock is ensured to be held - ceph: fix oops due to invalid pointer for kfree() in parse_longname() - gve: Fix stats report corruption on queue count change - gve: Correct ethtool rx_dropped calculation - mm, shmem: prevent infinite loop on truncate race - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - KVM: Don't clobber irqfd routing type when deassigning irqfd - PCI/ERR: Ensure error recoverability at all times - ublk: fix deadlock when reading partition table (CVE-2025-68823) - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (CVE-2025-40082) - [arm*] binder: fix BR_FROZEN_REPLY error log - binderfs: fix ida_alloc_max() upper bound - procfs: avoid fetching build ID while holding VMA lock - tracing: Fix ftrace event field alignments - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - wifi: wlcore: ensure skb headroom before skb_push - net: usb: sr9700: support devices with virtual driver CD - block,bfq: fix aux stat accumulation destination - smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() - md: suspend array while updating raid_disks via sysfs - smb/server: fix refcount leak in smb2_open() - smb/server: fix refcount leak in parse_durable_handle_context() - [amd64] HID: intel-ish-hid: Update ishtp bus match to support device ID table - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - btrfs: fix reservation leak in some error paths when inserting inline extent - [riscv64] Sanitize syscall table indexing under speculation - [amd64] HID: intel-ish-hid: Reset enum_devices_done before enumeration - HID: playstation: Center initial joystick axes to prevent spurious events - ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55 - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - [arm64] PCI: qcom: Remove ASPM L0s support for MSM8996 SoC - netfilter: replace -EEXIST with -EBUSY - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - drm/amd/pm: Disable MMIO access during SMU Mode 1 reset - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - HID: logitech: add HID++ support for Logitech MX Anywhere 3S - wifi: mac80211: collect station statistics earlier when disconnect - ASoC: simple-card-utils: Check device node before overwrite direction - nvme-fc: release admin tagset if init fails - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() - [amd64] ASoC: amd: yc: Fix microphone on ASUS M6500RE - regmap: maple: free entry on mas_store_gfp() failure - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - wifi: mac80211: correctly check if CSA is active - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - btrfs: reject new transactions if the fs is fully read-only - ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio - [amd64] platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - [amd64] platform/x86: intel_telemetry: Fix PSS event register mask - [amd64] platform/x86: hp-bioscfg: Skip empty attribute names - [amd64] platform/x86/intel/tpmi/plr: Make the file domain<n>/status writeable - smb/client: fix memory leak in smb2_open_file() - net: add skb_header_pointer_careful() helper - net/sched: cls_u32: use skb_header_pointer_careful() - net: liquidio: Initialize netdev pointer before queue setup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: phy: add phy_interface_weight() - net: phy: add phy_interface_copy() - net: sfp: pre-parse the module support - net: sfp: convert sfp quirks to modify struct sfp_module_support - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - macvlan: fix error recovery in macvlan_common_newlink() - net: usb: r8152: fix resume reset deadlock - net: don't touch dev->stats in BPF redirect paths - tipc: use kfree_sensitive() for session key material - drm/amd/display: fix wrong color value mapping on MCM shaper LUT - net: gro: fix outer network offset - [amd64] drm/mgag200: fix mgag200_bmc_stop_scanout() - drm/xe/query: Fix topology query pointer advance - drm/xe/pm: Also avoid missing outer rpm warning on system suspend - drm/xe/pm: Disable D3Cold for BMG only on specific platforms - [armhf] hwmon: (occ) Mark occ_init_attribute() as __printf - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF - ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update() - [amd64] ASoC: amd: fix memory leak in acp3x pdm dma ops - [arm64] ipi: tegra: Fix a memory leak in tegra_slink_probe() - [arm64,armhf] spi: tegra114: Preserve SPI mode bits in def_command1_reg - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - gpiolib-acpi: Update file references in the Documentation and MAINTAINERS https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.71 - net: tunnel: make skb_vlan_inet_prepare() return drop reasons (Closes: #1127597) - io_uring/rw: recycle buffers manually for non-mshot reads https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.72 - smb: client: split cached_fid bitfields to avoid shared-byte RMW races - ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths - smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() - driver core: enforce device_lock for driver_match_device() - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - [amd64] crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode - [armhf] crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: virtio - Add spinlock protection with virtqueue notification - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - nilfs2: Fix potential block overflow that cause system hang - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - scsi: qla2xxx: Validate sp before freeing associated memory - scsi: qla2xxx: Allow recovery for tape devices - scsi: qla2xxx: Delay module unload while fabric scan in progress - scsi: qla2xxx: Free sp in error path to fix system crash - scsi: qla2xxx: Query FW again before proceeding with login - bus: mhi: host: pci_generic: Add Telit FE990B40 modem support - mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() (CVE-2026-23169) - erofs: fix UAF issue for file-backed mounts w/ directio option - xfs: fix UAF in xchk_btree_check_block_owner - PCI: endpoint: Avoid creating sub-groups asynchronously - wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add - [armhf] gpio: omap: do not register driver in probe() https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.73 - Revert "driver core: enforce device_lock for driver_match_device()" Checksums-Sha1: e4dc765f90d5cbcf66c7d6b01291426546e3fa4f 288306 linux_6.12.73-1.dsc b03824827216845fe25ecaf87982e8aa759d3c04 151178828 linux_6.12.73.orig.tar.xz c66d0da0b9f22365a2dd1e4061d7cf0e96842e94 1768260 linux_6.12.73-1.debian.tar.xz 0747c1266635783b7035169036f8a4b4e33faf4d 6842 linux_6.12.73-1_source.buildinfo Checksums-Sha256: 462e3bd3f4ba9b5154ac3e139bbfd7597520724bf7ff1ff366c86a9091f84d0f 288306 linux_6.12.73-1.dsc 9859365560620929322068bea4b93e0dbcf02a06b98b766f986c5d7b93c0ca58 151178828 linux_6.12.73.orig.tar.xz c61c469d9eecd6e3b87664034b3ceb0903d1b1d050e5e91ac15388309263c50f 1768260 linux_6.12.73-1.debian.tar.xz 6f8ba4c8b4e6e877e2aa04062d20975531f509a2326676b51f467d5773c8ef6a 6842 linux_6.12.73-1_source.buildinfo Files: dcadcc042562b4e9a17e97d689f9367a 288306 kernel optional linux_6.12.73-1.dsc bad516c5fef95168598da7271f1ea363 151178828 kernel optional linux_6.12.73.orig.tar.xz 2968c6a9949381f1775518e240114482 1768260 kernel optional linux_6.12.73-1.debian.tar.xz a024883455ef90f1cd6cfbb898e56bff 6842 kernel optional linux_6.12.73-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmmUAWlfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EwJMP/iX3G/D284/sinWbbdfepQJDkk1HRcpe cHZ4Moaxle0yzjjZpj5NlVi7AjxGQT+wpbDBbARKJALtZ/redy0gte5q+X9K6fgo E9hijjd3hhPpVZqHnh4vC+4XN5HTjtDJ//6jSq804pmgbYRIqXKAU9uhrAVivTcC yjMQ8/hXo/n6Yay71oirwFly6UbSjVvvVIK1VbSAppJMPlhOj+/z4UXQiN/y3acO YlZmTk/jB6he+PeGjVvEV33WcOfX0i5LJp6otWiKczaA5v8mFuYSSbRU09x7O/S9 tF5TQMTM3ViUomEqL48l1hpXfwOZ5+BU3GqBRg+oGjxnx6CG4V4QW/VLlpNVeYaE aXBeKARt4r3DOe25HVIBSrWHLjtH4h0VdnV0vgt8DQJZA2DHbX8v8FSPHGNqlYsz lPVyXzS3o4XeGeNvmK0zBNHPiAkEqD0qLK6to0SWf8d6pAjUbOqP2p27HcxfxC19 lLAbq3k19u22OWyQVr+FnjvKU/SjPxCgBlqpCQtnO21jL599+I99HABxC6xqZ13p 80PIX9OdaH3lqvp4DC47CTADhHgWc0w7IKa54Oi5Gfoi+ovQz3HN3YiB2mJfZ2cS zAopChRCJNHdwgpn/ry5H3gg4l3ckTQk2MK5/IIqkUaJQ3gjsNCjvQU1HWaxnaGJ EFQDClRCyu78 =9yqZ -----END PGP SIGNATURE-----