[ciqlts9_2] Multiple patches tested (8 commits)

[ciq-kernel-automation]

Summary

This PR has been automatically created after successful completion of all CI stages.

Commit Message(s)

kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address

jira VULN-37443
cve CVE-2024-26946
commit-author Masami Hiramatsu (Google) <mhiramat@kernel.org>
commit 4e51653d5d871f40f1bd5cf95cc7f2d8b33d063b

wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes

jira VULN-47154
cve CVE-2024-35789
commit-author Felix Fietkau <nbd@nbd.name>
commit 4f2bdb3c5e3189297e156b3ff84b140423d64685

scsi: mpi3mr: Avoid memcpy field-spanning write WARNING

jira VULN-47431
cve CVE-2024-36920
commit-author Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com>
commit 429846b4b6ce9853e0d803a2357bb2e55083adf0

i40e: fix vf may be used uninitialized in this function warning

jira VULN-5279
cve CVE-2024-36020
commit-author Aleksandr Loktionov <aleksandr.loktionov@intel.com>
commit f37c4eac99c258111d414d31b740437e1925b8e8

xen-netfront: Add missing skb_mark_for_recycle

jira VULN-3103
cve CVE-2024-27393
commit-author Jesper Dangaard Brouer <hawk@kernel.org>
commit 037965402a010898d34f4e35327d22c0a95cd51f

gro: fix ownership transfer

jira VULN-37821
cve CVE-2024-35890
commit-author Antoine Tenart <atenart@kernel.org>
commit ed4cccef64c1d0d5b91e69f7a8a6697c3a865486

net: fix memory leak in skb_segment_list for GRO packets

jira VULN-174746
cve CVE-2026-22979
commit-author Mohammad Heib <mheib@redhat.com>
commit 238e03d0466239410b72294b79494e43d4fabe77

mlxbf_gige: stop interface during shutdown

jira VULN-37795
cve CVE-2024-35885
commit-author David Thompson <davthompson@nvidia.com>
commit 09ba28e1cd3cf715daab1fca6e1623e22fd754a6

Test Results

✅ Build Stage

Architecture	Build Time	Total Time
x86_64	24m 25s	25m 15s
aarch64	12m 48s	13m 22s

• View build logs

✅ Boot Verification

• Status: Passed (all architectures)
• View boot logs

✅ Kernel Selftests

Architecture	Passed	Failed	Compared Against	Status
x86_64	174	24	ciqlts9_2	✅ No regressions
aarch64	140	28	ciqlts9_2	✅ No regressions

• View kselftest logs

✅ LTP Results

Architecture	Passed	Failed	Compared Against	Status
x86_64	1439	81	ciqlts9_2	✅ No regressions
aarch64	1409	83	ciqlts9_2	✅ No regressions

• View LTP logs

aarch64 newly passing:

• fcntl14 (FAIL -> PASS)
• fcntl14_64 (FAIL -> PASS)
• fork14 (FAIL -> PASS)
• futex_cmp_requeue01 (FAIL -> PASS)
• mmap16 (FAIL -> PASS)

---

🤖 This PR was automatically generated by GitHub Actions
Run ID: 27613911257

[github-actions]

🤖 Validation Checks In Progress Workflow run: https://github.com/ctrliq/kernel-src-tree/actions/runs/27556375466

[github-actions]

🔍 Interdiff Analysis

• ⚠️ PR commit 78c848fd959 (net: fix memory leak in skb_segment_list for GRO packets) → upstream 238e03d04662
  Differences found:

================================================================================
*    CONTEXT DIFFERENCES - surrounding code differences between the patches    *
================================================================================

--- b/net/core/skbuff.c
+++ b/net/core/skbuff.c
@@ -4015,4 +4644,4 @@
 
 	skb_push(skb, -skb_network_offset(skb) + offset);
 
-	skb_shinfo(skb)->frag_list = NULL;
+	/* Ensure the head is writeable before touching the shared info */
@@ -4062,5 +4696,5 @@
-
-	} while (list_skb);
+			goto err_linearize;
+	}
 
 	skb->truesize = skb->truesize - delta_truesize;
 	skb->data_len = skb->data_len - delta_len;

This is an automated interdiff check for backported commits.

[github-actions]

JIRA PR Check Results

86 commit(s) with issues found:

Commit d38622996959

Summary: arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit fb7b641c2421

Summary: arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit 72fbbaf2fb1a

Summary: arm64: errata: Mitigate TLBI errata on various Arm CPUs

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit b9b315ad55fd

Summary: arm64: cputype: Add C1-Premium definitions

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit 61af6a9fbdb3

Summary: arm64: cputype: Add C1-Ultra definitions

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit b08eac74804c

Summary: arm64: cputype: Add NVIDIA Olympus definitions

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit dc80cb350d7b

Summary: arm64: cputype: Add C1-Pro definitions

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit faa19e6bfb7d

Summary: arm64: cputype: Add Neoverse-V3AE definitions

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit 8544ec262d7a

Summary: arm64: cputype: Add Neoverse-N3 definitions

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit 05a06ade0aeb

Summary: arm64: cputype: Add Cortex-A720AE definitions

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit 30b48bb5f465

Summary: arm64: cputype: Add Cortex-A725 definitions

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit 60e8f4c54dbd

Summary: arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit f85162db395b

Summary: arm64: cputype: Add Cortex-X925 definitions

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit c58354e931b5

Summary: arm64: cputype: Add Neoverse-V3 definitions

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit 87c99755c42b

Summary: arm64: cputype: Add Cortex-X4 definitions

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit 4fa650214be6

Summary: arm64: cputype: Add Cortex-A720 definitions

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit c1cfc9b452e0

Summary: arm64: Add Neoverse-V2 part

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit 4eb4a74799ce

Summary: arm64: cputype: Add Cortex-X3 definitions

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit 958889b256ba

Summary: arm64: cputype: Add Cortex-X1C definitions

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit f807da37bfba

Summary: arm64: cputype: Add MIDR_CORTEX_A76AE

❌ Errors:

• VULN-187521: Status is 'Done', expected 'In Progress'

Commit 982a49d9ebf6

Summary: ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

❌ Errors:

• VULN-183731: Status is 'Done', expected 'In Progress'

Commit f01206a4a971

Summary: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

❌ Errors:

• VULN-183737: Status is 'Done', expected 'In Progress'

Commit 02aa6f4153fb

Summary: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop

❌ Errors:

• VULN-187517: Status is 'Done', expected 'In Progress'

Commit 195e5dc6b012

Summary: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit

❌ Errors:

• VULN-152970: Status is 'Done', expected 'In Progress'

Commit 40080203cd45

Summary: net: sched: fix ordering of qlen adjustment

❌ Errors:

• VULN-46603: Status is 'Done', expected 'In Progress'

Commit 697905776c09

Summary: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

❌ Errors:

• VULN-176072: Status is 'Done', expected 'In Progress'

Commit 435af4f1f4b6

Summary: netfilter: nf_tables: do not compare internal table flags on updates

❌ Errors:

• VULN-4986: Status is 'Done', expected 'In Progress'

Commit 2d2b563a476d

Summary: octeontx2-af: Use separate handlers for interrupts

❌ Errors:

• VULN-37687: Status is 'Done', expected 'In Progress'

Commit 60e898ba4825

Summary: dm: call the resume method on internal suspend

❌ Errors:

• VULN-37132: Status is 'Done', expected 'In Progress'

Commit e0047cb8c74d

Summary: nfp: flower: handle acti_netdevs allocation failure

❌ Errors:

• VULN-37723: Status is 'Done', expected 'In Progress'

Commit 831028cb3487

Summary: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up

❌ Errors:

• VULN-47578: Status is 'Done', expected 'In Progress'

Commit 31bc7323ed64

Summary: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()

❌ Errors:

• VULN-47487: Status is 'Done', expected 'In Progress'

Commit 15016e4ce174

Summary: scsi: qla2xxx: Fix command flush on cable pull

❌ Errors:

• VULN-37382: Status is 'Done', expected 'In Progress'

Commit 034be15ae09f

Summary: netfilter: nf_tables: disallow anonymous set with timeout flag

❌ Errors:

• VULN-828: Status is 'Done', expected 'In Progress'

Commit 84c48b17c96d

Summary: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

❌ Errors:

• VULN-180163: Status is 'Done', expected 'In Progress'

Commit 15f65a192965

Summary: NFSD: Fix crash in nfsd4_read_release()

❌ Errors:

• VULN-161290: Status is 'Done', expected 'In Progress'

Commit f2244de83ca4

Summary: nfsd: call op_release, even when op_func returns an error

❌ Errors:

• VULN-154845: Status is 'Done', expected 'In Progress'

Commit 9a55104d838a

Summary: can: raw: fix ro->uniq use-after-free in raw_rcv()

❌ Errors:

• VULN-182364: Status is 'Done', expected 'In Progress'

Commit 66fce69467df

Summary: RDMA/umad: Reject negative data_len in ib_umad_write

❌ Errors:

• VULN-178540: Status is 'Done', expected 'In Progress'

Commit e3f5fbc0e1ae

Summary: blk-mq: fix IO hang from sbitmap wakeup race

❌ Errors:

• VULN-860: Status is 'Done', expected 'In Progress'

Commit 753361483fd7

Summary: PM / devfreq: Synchronize devfreq_monitor_[start/stop]

❌ Errors:

• VULN-35274: Status is 'Done', expected 'In Progress'

Commit d31ec9714663

Summary: wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()

❌ Errors:

• VULN-35352: Status is 'Done', expected 'In Progress'

Commit 786a1793123e

Summary: gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump

❌ Errors:

• VULN-518: Status is 'Done', expected 'In Progress'

Commit 02140632878a

Summary: block: add check that partition length needs to be aligned with block size

❌ Errors:

• VULN-34806: Status is 'Done', expected 'In Progress'

Commit ff3f81b1bbbc

Summary: pstore/ram: Fix crash when setting number of cpus to an odd number

❌ Errors:

• VULN-4502: Status is 'Done', expected 'In Progress'

Commit 64c6f93dc2fe

Summary: tcp: do not accept ACK of bytes we never sent

❌ Errors:

• VULN-36192: Status is 'Done', expected 'In Progress'

Commit 18156adc35ab

Summary: perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology()

❌ Errors:

• VULN-34776: Status is 'Done', expected 'In Progress'

Commit a65f82f87dc3

Summary: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()

❌ Errors:

• VULN-35889: Status is 'Done', expected 'In Progress'

Commit b64691d0cdfb

Summary: scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool

❌ Errors:

• VULN-4654: Status is 'Done', expected 'In Progress'

Commit 3a6db402aca2

Summary: Bluetooth: hci_codec: Fix leaking content of local_codecs

❌ Errors:

• VULN-35032: Status is 'Done', expected 'In Progress'

Commit 0077ab073f15

Summary: Bluetooth: Fix support for Read Local Supported Codecs V2

❌ Errors:

• VULN-35032: Status is 'Done', expected 'In Progress'

Commit 908bee4d3cdc

Summary: mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy()

❌ Errors:

• VULN-6753: Status is 'Done', expected 'In Progress'

Commit d8fcb9e02ece

Summary: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc

❌ Errors:

• VULN-36184: Status is 'Done', expected 'In Progress'

Commit 52abe0c2e07a

Summary: vxlan: Fix nexthop hash size

❌ Errors:

• VULN-154381: Status is 'Done', expected 'In Progress'

Commit fc7143c78b2e

Summary: blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()

❌ Errors:

• VULN-155913: Status is 'Done', expected 'In Progress'

Commit b91ef7fa5f5d

Summary: ptrace: slightly saner 'get_dumpable()' logic

❌ Errors:

• VULN-185426: Status is 'Done', expected 'In Progress'

Commit 70b87459079b

Summary: net: skbuff: propagate shared-frag marker through frag-transfer helpers

❌ Errors:

• VULN-185346: Status is 'Done', expected 'In Progress'

Commit b9ea22e0e20e

Summary: xfrm: esp: avoid in-place decrypt on shared skb frags

❌ Errors:

• VULN-184830: Status is 'Done', expected 'In Progress'

Commit 441c7ea1550c

Summary: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()

❌ Errors:

• VULN-176313: Status is 'Done', expected 'In Progress'

Commit 86d094c11e26

Summary: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()

❌ Errors:

• VULN-157177: Status is 'Done', expected 'In Progress'

Commit 26cf99c81443

Summary: scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()

❌ Errors:

• VULN-169340: Status is 'Done', expected 'In Progress'

Commit 674462ecd784

Summary: cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask()

❌ Errors:

• VULN-55110: Status is 'Done', expected 'In Progress'

Commit be8b74b46b64

Summary: bpf, sockmap: Avoid using sk_socket after free when sending

❌ Errors:

• VULN-71872: Status is 'Done', expected 'In Progress'

Commit 40396b360d78

Summary: sock_map: avoid race between sock_map_close and sk_psock_put

❌ Errors:

• VULN-43557: Status is 'Done', expected 'In Progress'

Commit 68b2a48155b1

Summary: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself

❌ Errors:

• VULN-35577: Status is 'Done', expected 'In Progress'

Commit 7aeeec8ac081

Summary: Bluetooth: hci_conn: Fix crash on hci_create_cis_sync

❌ Errors:

• VULN-156737: Status is 'Done', expected 'In Progress'

Commit f14e1cacc553

Summary: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()

❌ Errors:

• VULN-168502: Status is 'Done', expected 'In Progress'

Commit f70b4a018b4f

Summary: objtool: Fix SEGFAULT

❌ Errors:

• VULN-173009: Status is 'Done', expected 'In Progress'

Commit 7d033beb18ed

Summary: net: genl: fix error path memory leak in policy dumping

❌ Errors:

• VULN-69357: Status is 'Done', expected 'In Progress'

Commit a1fac0a428d9

Summary: crypto: algif_aead - snapshot IV for async AEAD requests

❌ Errors:

• VULN-181879: Status is 'Done', expected 'In Progress'

Commit 75e31518673b

Summary: crypto: algif_aead - Fix minimum RX size check for decryption

❌ Errors:

• VULN-181879: Status is 'Done', expected 'In Progress'

Commit 3dc6b0a75326

Summary: crypto: authencesn - reject short ahash digests during instance creation

❌ Errors:

• VULN-181879: Status is 'Done', expected 'In Progress'

Commit 5aa64d636016

Summary: crypto: authencesn - Fix src offset when decrypting in-place

❌ Errors:

• VULN-181879: Status is 'Done', expected 'In Progress'

Commit 01a882048511

Summary: crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption

❌ Errors:

• VULN-181879: Status is 'Done', expected 'In Progress'

Commit ca6d12fdea71

Summary: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec

❌ Errors:

• VULN-175567: Status is 'Done', expected 'In Progress'

Commit 9e1d2f257723

Summary: crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl

❌ Errors:

• VULN-182989: Status is 'Done', expected 'In Progress'

Commit c40da5c6fc89

Summary: crypto: af_alg - limit RX SG extraction by receive buffer budget

❌ Errors:

• VULN-182989: Status is 'Done', expected 'In Progress'

Commit e2ce9f2cb88b

Summary: crypto: algif_aead - Revert to operating out-of-place

❌ Errors:

• VULN-181879: Status is 'Done', expected 'In Progress'

Commit 9fb217d2c561

Summary: crypto: af-alg - fix NULL pointer dereference in scatterwalk

❌ Errors:

• VULN-181879: Status is 'Done', expected 'In Progress'

Commit b2740b43062d

Summary: vt: fix memory overlapping when deleting chars in the buffer

❌ Errors:

• VULN-241: Status is 'Done', expected 'In Progress'

Commit 872d60b03187

Summary: um: Fix out-of-bounds read in LDT setup

❌ Errors:

• VULN-51243: Status is 'Done', expected 'In Progress'

Commit 73788615067e

Summary: net: amd-xgbe: Fix skb data length underflow

❌ Errors:

• VULN-4427: Status is 'Done', expected 'In Progress'

Commit b7d26c479448

Summary: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()

❌ Errors:

• VULN-4395: Status is 'Done', expected 'In Progress'

Commit 8ec9494cc961

Summary: hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field

❌ Errors:

• VULN-63632: Status is 'Done', expected 'In Progress'

Commit 5442314412da

Summary: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field

❌ Errors:

• VULN-63624: Status is 'Done', expected 'In Progress'

Commit 55a8a460264d

Summary: net: hns3: do not allow call hns3_nic_net_open repeatedly

❌ Errors:

• VULN-3098: Status is 'Done', expected 'In Progress'

---

Summary: Checked 100 commit(s) total.

[github-actions]

❌ Validation checks completed with issues View full results: https://github.com/ctrliq/kernel-src-tree/actions/runs/27556375466

[github-actions]

🤖 Validation Checks In Progress Workflow run: https://github.com/ctrliq/kernel-src-tree/actions/runs/27614305100

[github-actions]

🔍 Interdiff Analysis

• ⚠️ PR commit abdf3971b76 (net: fix memory leak in skb_segment_list for GRO packets) → upstream 238e03d04662
  Differences found:

================================================================================
*    CONTEXT DIFFERENCES - surrounding code differences between the patches    *
================================================================================

--- b/net/core/skbuff.c
+++ b/net/core/skbuff.c
@@ -4015,4 +4644,4 @@
 
 	skb_push(skb, -skb_network_offset(skb) + offset);
 
-	skb_shinfo(skb)->frag_list = NULL;
+	/* Ensure the head is writeable before touching the shared info */
@@ -4062,5 +4696,5 @@
-
-	} while (list_skb);
+			goto err_linearize;
+	}
 
 	skb->truesize = skb->truesize - delta_truesize;
 	skb->data_len = skb->data_len - delta_len;

This is an automated interdiff check for backported commits.

[github-actions]

🤖 Validation Checks In Progress Workflow run: https://github.com/ctrliq/kernel-src-tree/actions/runs/27614314441

[github-actions]

🔍 Interdiff Analysis

• ⚠️ PR commit abdf3971b76 (net: fix memory leak in skb_segment_list for GRO packets) → upstream 238e03d04662
  Differences found:

================================================================================
*    CONTEXT DIFFERENCES - surrounding code differences between the patches    *
================================================================================

--- b/net/core/skbuff.c
+++ b/net/core/skbuff.c
@@ -4015,4 +4644,4 @@
 
 	skb_push(skb, -skb_network_offset(skb) + offset);
 
-	skb_shinfo(skb)->frag_list = NULL;
+	/* Ensure the head is writeable before touching the shared info */
@@ -4062,5 +4696,5 @@
-
-	} while (list_skb);
+			goto err_linearize;
+	}
 
 	skb->truesize = skb->truesize - delta_truesize;
 	skb->data_len = skb->data_len - delta_len;

This is an automated interdiff check for backported commits.

[github-actions]

✅ Validation checks completed successfully View full results: https://github.com/ctrliq/kernel-src-tree/actions/runs/27614305100

[github-actions]

✅ Validation checks completed successfully View full results: https://github.com/ctrliq/kernel-src-tree/actions/runs/27614314441

[bmastbergen]

🥌