#1136910 firmware-mediatek: mt7615e (mt7663 binary wifi and bluetooth) not working with kernel 6.12.88 amd64 #1136910
- Package:
- firmware-mediatek
- Source:
- firmware-mediatek
- Submitter:
- Benoit BERTRAND
- Date:
- 2026-05-26 10:05:06 UTC
- Severity:
- normal
- Tags:
Dear Maintainer, After updating to linux kernel 6.12.88 (debian 13.5), I noticed I lost both Bluetooth and WiFi. During boot, I get the message "Failed to get patch semaphore" and "mt7615e: Failed to load mediatek/mt7663" The impact is strong: no WiFi nor Bluetooth connectivity. The only fix is to revert to linux kernel 6.12.86. Best regards,
Dear Maintainer, I'd like to some additional information regarding the message displayed during the boot sequence (kernel 6.12.86-amd64): "mt7615e 0000:02:00.0: Failed to get patch semaphore mt7615e 0000:02:00.0: Failed to get patch semaphore mt7615e 0000:02:00.0: failed to load mediatek/mt7663pr2h_rebb.bin Bluetooth: hci0; HCI Enhanced Setup Synchronous Connection command is advertised, but not supported." The first 3 messages appears all the time when using debian 13 (since 13.0). But the difference is WiFi and Bluetooth works on kernel 6.12.86 - while getting these messages. On kernel 6.12.88, both WiFi and Bluetooth doesn't work, and these messages are displayed. The only fix I've found is to revert to kernel 6.12.86. Thanks for your help.
We believe that the bug you reported is fixed in the latest version of linux, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1136790@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <carnil@debian.org> (supplier of updated linux package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) Format: 1.8 Date: Fri, 22 May 2026 08:02:48 +0200 Source: linux Architecture: source Version: 7.1~rc4-1~exp2 Distribution: experimental Urgency: medium Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1136790 Changes: linux (7.1~rc4-1~exp2) experimental; urgency=medium . [ Johannes Schauer Marin Rodrigues ] * [arm64] enable CONFIG_MEMTEST . [ Salvatore Bonaccorso ] * Bluetooth: btmtk: accept too short WMT FUNC_CTRL events (Closes: #1136790) * net: skbuff: preserve shared-frag marker during coalescing (CVE-2026-46300) * net: skbuff: propagate shared-frag marker through frag-transfer helpers Checksums-Sha1: f278b9b15d39a69bd25d57a67c7dcd5d18e5453d 183288 linux_7.1~rc4-1~exp2.dsc eb1989378ee0498321675e252edd6a3960c0a668 1458164 linux_7.1~rc4-1~exp2.debian.tar.xz 4ae36f66e93297d74b2b580e2266ed2955c27e67 6899 linux_7.1~rc4-1~exp2_source.buildinfo Checksums-Sha256: 9a1bd58ded3e616c0f8ccc800dac9b87fa4bde13ef5c57497a27a65efb68f0ca 183288 linux_7.1~rc4-1~exp2.dsc c3981a38449b6ff02bc75ec1dbc712c88b9041ba4f267e2a8845b696e2fea5d3 1458164 linux_7.1~rc4-1~exp2.debian.tar.xz b39809738cb174b909427bc164ed155661a70b697bb15753fd329494e410fd94 6899 linux_7.1~rc4-1~exp2_source.buildinfo Files: 0ba9a91214382e796e61a61f8ae8dcb9 183288 kernel optional linux_7.1~rc4-1~exp2.dsc 7d97ed9e88529d399f87f165dc55fe8f 1458164 kernel optional linux_7.1~rc4-1~exp2.debian.tar.xz 6bd14ddac432f1dee58040da39b02437 6899 kernel optional linux_7.1~rc4-1~exp2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmoP8gRfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89Ena4P/2IWKmuBos5MXhZW02AufgcGpaESDkA2 +jxr+iPPKC9/aOAR3OKkh++lvNq5rltu97v3hHEZWuyyJb/X4Qjyq3JPsW34P2Qk Qf03gEiwLSObs9C2OBJoAoRhUhI46Qd+Gzfp9TDlhKiOUCNFCuJBnLANx+eLboVj w29C5oJeJ/nXHpso9BGkckRQFOljyZV/BIT6qGa4zcxsP9J9KmIvqogPAhsz86U6 3epCD5HwxKRDcbLiADmHnMo/lgCs6ThWoa8Rt+w8MgTfMN8ngq076ctHjlDr9piC uQsm8K77Fthj/OUJ4nJ5yTuQGya64rIGHru/ZQI7OGKbpa2tYirybrjATiYuFBfu cfh/d7g94aytBcoSeJHSSuGPwv99B8Tw90OB8RLt+i9eFKN1PvAtO639fLHwLdug u6lfzCcKa/kThAyoiJPXUONt/HxrZjSmi+so6ut0M3sDsON2Nf7IDhsUEXqotjul 1Dyt5sr67mOHVdxufyp9ryrEOEIWwcQh8mt/R9rUec7Vgz0nD1TBhA17E+Mk0/2T 6PsA9ehGeERAVVq47i/IWBMzOVsl54MnHvT0yW/yTyk26kSztvx2kX+yhrZieDOt mdXWNOgTZXdbqf7UcYUX6ovWCi4kedX/RmS5isrK0HCqH+Yun+GhwaNjcMn3F+iG DhxkteXJcsk5 =zDYL -----END PGP SIGNATURE-----
We believe that the bug you reported is fixed in the latest version of linux, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1136790@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <carnil@debian.org> (supplier of updated linux package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) Format: 1.8 Date: Fri, 22 May 2026 20:41:53 +0200 Source: linux Architecture: source Version: 7.0.9-1 Distribution: unstable Urgency: medium Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1130114 1130365 1135359 1136132 1136790 Changes: linux (7.0.9-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.0.8 https://www.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.0.9 - HID: playstation: Clamp num_touch_reports - HID: pidff: Fix integer overflow in pidff_rescale - media: uvcvideo: Enable VB2_DMABUF for metadata stream - [arm64] drm/msm/hdmi: Fix wrong CTRL1 register used in writing info frames - [amd64] media: i2c: ov8856: free control handler on error in ov8856_init_controls() - media: dt-bindings: rockchip,vdec: Add alternative reg-names order for RK35{76,88} - media: dt-bindings: rockchip,vdec: Mark reg-names required for RK35{76,88} - drm/gpusvm: Allow device pages to be mapped in mixed mappings after system pages - drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages - [arm64] dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio pinmux - [arm64] regulator: mt6357: fix OF node reference imbalance - [arm64,armhf] regulator: rk808: fix OF node reference imbalance - media: videobuf2: Set vma_flags in vb2_dma_sg_mmap - [amd64] media: intel/ipu6: fix error pointer dereference - [arm64] dts: ti: k3-am69-aquila-clover: Fix DP regulator enable GPIO - [amd64] media: ipu-bridge: Add upside-down sensor DMI quirk for Dell XPS 13 9340 and XPS 14 9440 - drm/colorop: Preserve bypass value in duplicate_state() - drm/atomic: Add affected colorops with affected planes - [amd64] platform/x86: hp-wmi: Ignore backlight and FnLock events - vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating bytes to copy - [arm64] dts: broadcom: bcm2712-d-rpi-5-b: add fixes for pinctrl/pinctrl_aon - [arm64] dts: broadcom: bcm2712-d-rpi-5-b: update uart10 interrupt - [arm64] media: qcom: camss: Fix csid clock configuration for sa8775p - [arm64] media: qcom: camss: Fix csid IRQ offset for sa8775p - [arm64] media: qcom: camss: Add missing clocks for VFE lite on sa8775p - drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status() - [arm64] drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata() - drm/colorop: Fix blob property reference tracking in state lifecycle - [armhf] drm/imx: parallel-display: Prefer bus format set via legacy "interface-pix-fmt" DT property - [arm64] drm/msm: always recover the gpu - drm/v3d: Reject empty multisync extension to prevent infinite loop - [amd64] drm/i915/psr: Init variable to avoid early exit from et alignment loop - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure - drm/amd/display: fix math_mod() using arg1 instead of arg2 - drm/amd: Add missing firmware declaration for PSP v15.0.0 - drm/amdgpu: Use NBIF offset for register RCC_STRAP0_RCC_DEV0_EPF0_STRAP0 . - drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. - drm/amdgpu: gate VM CPU HDP flush on reset lock - drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x - drm/amdkfd: Add upper bound check for num_of_nodes - drm/amdgpu: Add bounds checking to ib_{get,set}_value - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB - drm/amdgpu/vce: Prevent partial address patches - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg - drm/amd/display: Change dither policy for 10 bpc output back to dithering - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() - drm/appletbdrm: Use kvzalloc for big allocations - drm/amdkfd: validate SVM ioctl nattr against buffer size - drm/amdgpu: Avoid reset in AMDGPU unload path for APUs with GFX V11 and higher. - drm/udl: Increase GET_URB_TIMEOUT - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure - drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() - drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise - drm: Set old handle to NULL before prime swap in change_handle - drm/radeon: add missing revision check for CI - drm/amdgpu: zero-initialize GART table on allocation - drm/amdgpu/userq: fix access to stale wptr mapping - drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ - drm/bridge: tda998x: Use __be32 for audio port OF property pointer - drm/sti: remove bridge when sti_hda component_add fails - drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds - drm/amdkfd: Make all TLB-flushes heavy-weight - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission - drm/amdgpu/pm: add missing revision check for CI - drm/amdgpu/pm: align Hawaii mclk workaround with radeon - [arm64] dts: ti: k3-am62a7-sk: Fix pin name in comment from M19 to N22 - [arm64] dts: ti: k3-am69-aquila-dev: Fix DP regulator enable GPIO - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL - batman-adv: fix integer overflow on buff_pos - batman-adv: reject new tp_meter sessions during teardown - batman-adv: stop tp_meter sessions during mesh teardown - batman-adv: stop caching unowned originator pointers in BAT IV - batman-adv: tp_meter: fix tp_num leak on kmalloc failure - batman-adv: bla: prevent use-after-free when deleting claims - batman-adv: bla: only purge non-released claims - batman-adv: bla: put backbone reference on failed claim hash insert - sched_ext: Use HK_TYPE_DOMAIN_BOOT to detect isolcpus= domain isolation - usb: typec: tcpm: reset internal port states on soft reset AMS - io_uring/zcrx: use guards for locking - io_uring/zcrx: warn on freelist violations - kho: fix error handling in kho_add_subtree() - cgroup: Increment nr_dying_subsys_* from rmdir context - cgroup: Defer css percpu_ref kill on rmdir until cgroup is depopulated - sched_ext: Skip tasks with stale task_rq in bypass_lb_cpu() - perf build: fix "argument list too long" in second location - mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap() - vsock: fix buffer size clamping order - vsock/virtio: fix length and offset in tap skb for split packets - vsock/virtio: fix empty payload in tap skb for non-linear buffers - vsock/virtio: fix accept queue count leak on transport mismatch - drm/amdgpu/vcn3: Avoid overflow on msg bound check - drm/amdgpu/vcn4: Avoid overflow on msg bound check . [ Marco Nenciarini ] * [amd64] drivers/usb/misc: Enable USB_USBIO as module * [amd64] drivers/gpio: Enable GPIO_USBIO as module * [amd64] drivers/i2c/busses: Enable I2C_USBIO as module (Closes: #1130114) . [ Salvatore Bonaccorso ] * [amd64] Enable INTEL_MEI_LB as module (Closes: #1136132) * Bluetooth: btmtk: accept too short WMT FUNC_CTRL events (Closes: #1136790) * net: skbuff: preserve shared-frag marker during coalescing (CVE-2026-46300) * net: skbuff: propagate shared-frag marker through frag-transfer helpers * parport: Fix race between port and client registration (Closes: #1130365) . [ Yunseong Kim ] * Enable SND_SOC_SDCA_CLASS as modules SND_SOC_SDCA_FDL, SND_SOC_SDCA_HID, SND_SOC_SDCA_IRQ as built-in for Panther Lake audio support. (Closes: #1135359) Checksums-Sha1: 1d3050218b3d2aa9547efd5973ef118bed2a32f4 194732 linux_7.0.9-1.dsc c5f1da9939a18af39e83f5c39b5126484b2444e2 160367628 linux_7.0.9.orig.tar.xz f91d6e37758178bf8fc286534accd1fa592a77b5 1474420 linux_7.0.9-1.debian.tar.xz 7a0b8d0d24f50bdaefb79ab41efc92c0f62da3fc 6871 linux_7.0.9-1_source.buildinfo Checksums-Sha256: 1db5045f666f8d3e4db76c27162046a492e95616a56a71463cee2df4576d45ed 194732 linux_7.0.9-1.dsc dc9060fa8fd6ae9b09c208c73f80d4222962c2c43270a71b9f553558d3b9f715 160367628 linux_7.0.9.orig.tar.xz 8de95cee2fe2839d79f2a5c9465b51b59f773ced36a1abab403e9791e17b49f4 1474420 linux_7.0.9-1.debian.tar.xz 5150d7fa7b7543914d88a86ad3cb5384410a0c28f2575b4c22d402ef2f3d5ef5 6871 linux_7.0.9-1_source.buildinfo Files: da48c28fe476df09641eace5b096a1bc 194732 kernel optional linux_7.0.9-1.dsc 0724dc7a956e54bf1ac8813ed652c15d 160367628 kernel optional linux_7.0.9.orig.tar.xz af71acd6f6935f185ced906329760fd4 1474420 kernel optional linux_7.0.9-1.debian.tar.xz 7fe2e89617943f6be20db9b19e8678e2 6871 kernel optional linux_7.0.9-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmoQpABfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EKVoP/15115UUJU941OSXtFCrtNzOEiXQmWVn ZTnfQlm0HKlHz68h1J8LGzmQgW3+lcOYVISfboItc9YzZGNaqbnTDiQpTSBw1y/d G5VGxGAUDI5mNLlvET8jniKP0nzhDJFOCmz/zBieFvw+gdl/I3095qvU+RNl8rKx JEkqOrBc+WPqYoMisyPrbJzHgzjcOnrsvHs8N53RrZg9DlLnECerV/xF9pv/5rk3 pZdMrDa2IDJiZ6sjMN22LyIi/7RC2zarKgjGXfEKJyx1szuQmzW4F2yEHF5SxbtU tbr26K8Wgt8fNgZsCGzvWDfradHOCTRpwgoPf/AgJZD5MPM/c4zBDZOh7ERV8O+0 MJqE0X80GqpgOZmComt540eNNxSxKfZg6iOcuo/AWLbQ91nb/PiEr1QwaWAnzitM 2bN1j4LBCZlxm6u5giUFBhXNwHDsIe5bWe2LabEcay8T42FxyVFOVLvRo8IbJQBd dnRJ5oaPraGvswCWCF6v+ZYLdsIwxWmood6Pm0eudCrkX92WMR1m5p/ZV83ClPLO e0FLw+p1oslJDo7mYio6JI6uWvbmzu4bpKP6p9Te/CCUcZ590/Ab8JQ8VYY2uTGs 7ZkRlafZj5T/2C0vJjaduTUNOyH6iaGMiL0jE02ku0PekJLPFZK/mI+THbXnOlOT JAvp0x5kHcNR =9nyS -----END PGP SIGNATURE-----
We believe that the bug you reported is fixed in the latest version of linux, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1136790@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <carnil@debian.org> (supplier of updated linux package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) Format: 1.8 Date: Fri, 22 May 2026 21:01:16 +0200 Source: linux Architecture: source Version: 6.12.90-1 Distribution: trixie-security Urgency: high Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1136790 Changes: linux (6.12.90-1) trixie-security; urgency=high . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.89 https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.90 - HID: playstation: Clamp num_touch_reports - media: uvcvideo: Enable VB2_DMABUF for metadata stream - [arm64] dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio pinmux - [arm64] regulator: mt6357: fix OF node reference imbalance - [arm64,armhf] regulator: rk808: fix OF node reference imbalance - media: videobuf2: Set vma_flags in vb2_dma_sg_mmap - [amd64] media: intel/ipu6: fix error pointer dereference - media: saa7164: add ioremap return checks and cleanups - spi: aspeed-smc: fix controller deregistration - [amd64] platform/x86: hp-wmi: Ignore backlight and FnLock events - vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating bytes to copy - [arm64] drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata() - [amd64] drm/i915/psr: Init variable to avoid early exit from et alignment loop - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure - drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. - drm/amdgpu: gate VM CPU HDP flush on reset lock - drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x - drm/amdkfd: Add upper bound check for num_of_nodes - drm/amdgpu: Add bounds checking to ib_{get,set}_value - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB - drm/amdgpu/vce: Prevent partial address patches - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg - drm/amd/display: Change dither policy for 10 bpc output back to dithering - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() - drm/amdkfd: validate SVM ioctl nattr against buffer size - drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() - drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() - drm/radeon: add missing revision check for CI - drm/amdgpu: zero-initialize GART table on allocation - drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ - drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds - drm/amdkfd: Make all TLB-flushes heavy-weight - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission - drm/amdgpu/pm: add missing revision check for CI - drm/amdgpu/pm: align Hawaii mclk workaround with radeon - [arm64] dts: ti: k3-am62a7-sk: Fix pin name in comment from M19 to N22 - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL - batman-adv: fix integer overflow on buff_pos - batman-adv: reject new tp_meter sessions during teardown - batman-adv: stop caching unowned originator pointers in BAT IV - batman-adv: bla: prevent use-after-free when deleting claims - batman-adv: bla: only purge non-released claims - batman-adv: bla: put backbone reference on failed claim hash insert - usb: typec: tcpm: reset internal port states on soft reset AMS - usb: dwc3: Move GUID programming after PHY initialization - ALSA: hda: cs35l56: Propagate ASP TX source control errors - ALSA: misc: Use guard() for spin locks - ALSA: core: Serialize deferred fasync state checks - ALSA: seq: Notify client and port info changes - ALSA: seq: Fix UMP group 16 filtering - Bluetooth: hci_conn: fix potential UAF in create_big_sync - [arm64,armhf] spi: tegra20-sflash: fix controller deregistration - [arm64,armhf] spi: tegra114: fix controller deregistration - mm/hugetlb_cma: round up per_node before logging it - block: cleanup blkdev_report_zones() - block: reorganize struct blk_zone_wplug - block: fix zone write plug removal - tracefs: Fix default permissions not being applied on initial mount - fbcon: Avoid OOB font access if console rotation fails - mm/damon/core: disallow time-quota setting zero esz - mm/damon/core: implement damon_kdamond_pid() - mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values - mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values - bonding: fix use-after-free due to enslave fail after slave array update (CVE-2026-23171) - io_uring/kbuf: support min length left for incremental buffers - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() - btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type() - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak - tracing/probes: Limit size of event probe to 3K - batman-adv: stop tp_meter sessions during mesh teardown - batman-adv: tp_meter: fix tp_num leak on kmalloc failure - vsock: fix buffer size clamping order - vsock/virtio: fix length and offset in tap skb for split packets - vsock/virtio: fix empty payload in tap skb for non-linear buffers - vsock/virtio: fix accept queue count leak on transport mismatch - drm/amdgpu/vcn3: Avoid overflow on msg bound check - drm/amdgpu/vcn4: Avoid overflow on msg bound check . [ Salvatore Bonaccorso ] * Bluetooth: btmtk: accept too short WMT FUNC_CTRL events (Closes: #1136790) * net: skbuff: preserve shared-frag marker during coalescing (CVE-2026-46300) * net: skbuff: propagate shared-frag marker through frag-transfer helpers Checksums-Sha1: 7f597a2ca6fb396f9ed85d5f7034654c6970fbb8 288306 linux_6.12.90-1.dsc 0659536149f0573d10892259fa0f41392806b71e 151267988 linux_6.12.90.orig.tar.xz 15bd28f2ead8e8497d8ef1ca06f6f73eb7e55551 1817660 linux_6.12.90-1.debian.tar.xz cdbeb30b5a83d28d7888c7b546400593392a741e 6854 linux_6.12.90-1_source.buildinfo Checksums-Sha256: 59fe14b7688e3f2c1a2f68c7179e58ce9f22f15acd3c99fd8c963ab1b8a17428 288306 linux_6.12.90-1.dsc 6e7fc837feac9d07b96e60c4a97f616d33ef694f67703228f027f816117fb82b 151267988 linux_6.12.90.orig.tar.xz b4f57ceae5a2895c3a6767d98a6a682e5a2ae35a1a27ed087d0a8297b36ba7d2 1817660 linux_6.12.90-1.debian.tar.xz e97902052dae76d7f1f5782de9672f45d813b146a1b797fd6f4ca9b590290e05 6854 linux_6.12.90-1_source.buildinfo Files: 13acea0f8de34f5efab8ecc6365f180c 288306 kernel optional linux_6.12.90-1.dsc acfae91a9d3a378012c874008a5a7945 151267988 kernel optional linux_6.12.90.orig.tar.xz bb2df52a7876f8c8e51bf1d892b4ed6c 1817660 kernel optional linux_6.12.90-1.debian.tar.xz 7caafe454797414d2c31582e64088646 6854 kernel optional linux_6.12.90-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmoQqQ1fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89E2YQP/3lSiv+EMEQ3jguikTsWH/Ql8J3VEx0g 42wXlidaEirwwtKaf+4m3q0MCxzwyXTMPvYXJ6iGjLibk5FBRFjr35wcDxKn8CwF JodQiMH6gns0UDLekHp68xqlkxaOKkMdjxjB5wD3WNgT5xP2EEe7nf1yHWZ5c/gr Lt02+z3TFsF/aZ19Ebr/iOTqaIBGDj0Jjle2t/7SvvAqmjvC5KLt4L7vuC54Wkc+ HfTve5N/1Eg3pF7Oi2i/uTT93wHQwSHqE2B23nqBfrL3m0inU50Z9LB3sPzgjRJd VR3j5LZ4oInH2vb+UiXEiHprY2L5G/EIx6W/DeY4DlFNe3SaYfh2nCHqO1YhyNgO fnOGJ4p1yQ9g1Z6ZBDk0Ba7OeHNJsi3Kbqtix2USPE/qgMiAzQuLh9hS5ZxJjtxz ZRZlEi3iIF1X4hbpdCIkoF8q8abwcHFPmzLy3lrJstTagy+xAquwed35SU2dNzik w/Odx4oqZ27/kK7bdajwi1oQSHW0k0mmDg5hf2D3MQ/mZ/5xXZwgYHstjUWbanWu 92OvLDWnHxl8JtJ1/pJn5tebq//dX6RaujulLrAPSaRzuZdXf8zzFv85W5uZcEn7 0skp203i7DrL05FCqcXhWHpQMb9H082oXm42iQfzYYijz8yqyeqzLTeSfp8pR7uQ 3zAVbuFNBGk4 =JU2c -----END PGP SIGNATURE-----