[Deepin-Kernel-SIG] [linux 6.18.y] [Upstream] Update kernel base to 6.18.49 - #2152

Merged

opsiff merged 76 commits into

deepin-community:linux-6.18.yfrom

opsiff:linux-6.18-update-6.18.49

Sep 16, 2026

Commits on Sep 15, 2026

RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp

Ibrahim Hashimov
authored and
opsiff
committed
eb1bf0e
RDMA/rxe: Fix OOB in free_rd_atomic_resources()

BaldDemian
authored and
opsiff
committed
6d124fb
KVM: x86/mmu: Check write tracking in all address spaces

0range1337
authored and
opsiff
committed
a3894b5
nvme-tcp: fix usage of page_frag_cache

logost
authored and
opsiff
committed
5641a80
ASoC: nau8821: Cancel delayed work on component remove

cristicc
authored and
opsiff
committed
d75081e
bpf: Fix use-after-free in offloaded map/prog info fill

mrpre
authored and
opsiff
committed
9985ba7
riscv: Fix register corruption from uninitialized cregs on error

mikey
authored and
opsiff
committed
74dd8bc
ASoC: nau8821: Cancel pending work before suspend

cristicc
authored and
opsiff
committed
f1cb4c4
selinux: switch two allocations to use kzalloc_objs()

stephensmalley
authored and
opsiff
committed
ecb393d
veth: fix OOB txq access in veth_poll() with asymmetric queue counts

netoptimizer
authored and
opsiff
committed
2574a76
powerpc/hv-gpci: fix preempt count leak in sysfs show paths

AboorvaDevarajan
authored and
opsiff
committed
b434cde
io_uring/futex: only mark private futex waits as inflight

axboe
authored and
opsiff
committed
77b60fe
io_uring: simplify IORING_SETUP_DEFER_TASKRUN && !SQPOLL check

calebsander
authored and
opsiff
committed
3a4493b
io_uring/rsrc: improve regbuf iov validation

isilence
authored and
opsiff
committed
bf1054e
io_uring: defer eventfd signaling when queued from a wakeup handler

axboe
authored and
opsiff
committed
f86a30c
HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()

montfort
authored and
opsiff
committed
23474ec
HID: asus: simplify RGB init sequence

antheas
authored and
opsiff
committed
25b3861
HID: asus: fix missing hid_is_usb() check

thejh
authored and
opsiff
committed
12899f7
HID: ft260: validate i2c input report length

MichaelZaidman
authored and
opsiff
committed
1b29fc4
HID: ft260: fix stack-use-after-return write in I2C read race

Raman Varabets
authored and
opsiff
committed
5e1bbc9
ksmbd: harden file lifetime during session teardown

charsyam
authored and
opsiff
committed
d5c8767
fpga: dfl: fme: add error handling

griffinkh
authored and
opsiff
committed
aab12f6
accessibility: speakup: unregister tty ldisc on later init failures

Haoxiang Li
authored and
opsiff
committed
d4f8356
usb: xhci: Handle bogus TRB pointers in Missed Service Error events

Michal Pecio
authored and
opsiff
committed
62203d8
usb: xhci: Handle USB3 port events when there is one roothub

strrs
authored and
opsiff
committed
3248247
xhci: dbgtty: Fix unregister on tty_register_driver() failure

lucasdemarchi
authored and
opsiff
committed
36c3d91
xhci: dbgtty: Fix unregister on tty_alloc_driver() failure

lucasdemarchi
authored and
opsiff
committed
fd2d2e7
fuse: fix invalidate lock leak on setattr writeback failure

LiBaokun96
authored and
opsiff
committed
4df88be
fuse: fix invalidate lock leak on open O_TRUNC DAX failure

LiBaokun96
authored and
opsiff
committed
dc3d892
usb: usbtest: disable dynamic ID support

a-nogikh
authored and
opsiff
committed
9eab59e
usb: gadget: f_tcm: keep port count until LUN teardown completes

shuangpeng-kernel
authored and
opsiff
committed
eb820ae
KVM: SEV: Drop FOLL_WRITE for encrypted region registration

pagupta
authored and
opsiff
committed
48e1669
KVM: SEV: Track the GPA of the guest-controlled VMSA used for SNP guests

sean-jc
authored and
opsiff
committed
c86107f
KVM: SEV: Extract loading of guest-provided VMSA to a separate helper

sean-jc
authored and
opsiff
committed
78711cb
KVM: SEV: Mark vCPU RUNNABLE after AP_CREATE, even if VMSA is unusable

sean-jc
authored and
opsiff
committed
7cbfb9d
KVM: SEV: Wire up kvm_x86_ops.gmem_xxx() if and only if CONFIG_KVM_AMD_SEV=y

sean-jc
authored and
opsiff
committed
7599121
tls: device: fix out-of-bounds write in tls_append_frag()

mrpre
authored and
opsiff
committed
bd45ab4
gtp: serialize PDP context updates

Qing Ming
authored and
opsiff
committed
e7c9e50

Commits on Sep 16, 2026

x86/CPU/AMD: Carve out a Zen5 models range

amd-pvishwak
authored and
opsiff
committed
2cb309e
net/tcp: fix TCP-AO key deletion in VRFs

rastislavs
authored and
opsiff
committed
c585c33
tcp: fix AO info use-after-free in tcp_ao_connect_init()

Qing Ming
authored and
opsiff
committed
7609bbb
net/tcp-ao: fix use-after-free of current_key on reconnect to another peer

V4bel
authored and
opsiff
committed
f3816ec
xfrm: espintcp: fix UAF during close

qsn
authored and
opsiff
committed
c0c529f
xfrm: drop ESP-in-TCP packets with no ingress device

rr00xxyy
authored and
opsiff
committed
75293a5
xfrm: avoid lock inversion in nat keepalive work

Zihan Xi
authored and
opsiff
committed
0e1f8e9
xfrm: ah6: validate routing header segments_left

manizada
authored and
opsiff
committed
154b327
xfrm: fix xfrm_state_construct() auth-trunc leak

Zihan Xi
authored and
opsiff
committed
c386492
xfrm: bound nat keepalive state collection

Zihan Xi
authored and
opsiff
committed
85b2fe1
net: bridge: mcast: fix use-after-free of a master VLAN's multicast context

nszetei
authored and
opsiff
committed
95e856f
ipv6: seg6: clear IPv4 control block on IPIP decapsulation

kylebot-oai
authored and
opsiff
committed
ae8d197
batman-adv: reject unrepresentable multicast TVLV offsets

kylebot-oai
authored and
opsiff
committed
9174215
vxlan: keep the last remote linked during FDB flush

kylebot-oai
authored and
opsiff
committed
42d8aa8
netfilter: nft_set_pipapo_avx2: add missing vzeroupper

Eric Biggers
authored and
opsiff
committed
93e4d78
netfilter: nf_tables: don't queue packet path object notifications

corvusaisec
authored and
opsiff
committed
752a323
mm/swap: reject swapon() on filesystem-level encrypted files

Eric Biggers
authored and
opsiff
committed
7458ba0
kunit: irq: Continue increasing hrtimer interval for longer

Eric Biggers
authored and
opsiff
committed
16b3409
crypto: virtio - bound the akcipher result length

bryamzxz
authored and
opsiff
committed
86f3ad8
crypto: qcom-rng - Enable clock in hwrng case

Eric Biggers
authored and
opsiff
committed
1ee4d66
crypto: qcom-rng - Remove crypto_rng interface

Eric Biggers
authored and
opsiff
committed
7ce1ac0
crypto: qcom-rng - Allow zero as a random number

Eric Biggers
authored and
opsiff
committed
c83eb47
crypto: atmel-tdes - use scatterlist length before DMA mapping

toblux
authored and
opsiff
committed
390c375
crypto: krb5 - use kfree_sensitive() for derived key buffers

Jan Sebastian Götte
authored and
opsiff
committed
243cf49
crypto: qce - fix CCM AAD buffer underallocation

mdalam-qcom
authored and
opsiff
committed
e4fc670
crypto: mxs-dcp - fix source scatterlist length access

toblux
authored and
opsiff
committed
e8840af
crypto: qce - Remove unsafe/deprecated algorithms

brgl
authored and
opsiff
committed
6e9ddb1
KVM: s390: vsie: zero stale crypto bits

borntraeger
authored and
opsiff
committed
4b21e95
usb: core: Add lock to usb_wakeup_notification()

griffinkh
authored and
opsiff
committed
8868c92
usb: core: Strengthen error handling in hub_hub_status()

griffinkh
authored and
opsiff
committed
8ea9ac5
ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()

Espilon-Org
authored and
opsiff
committed
0729171
ALSA: usb-audio: Complete cleanup after system-resume errors

willyp713
authored and
opsiff
committed
6d31841
USB: serial: option: fix slab OOB read in interrupt URB callback

Jiale Yao
authored and
opsiff
committed
3fe8ace
USB: serial: spcp8x5: drop broken carrier detect support

jhovold
authored and
opsiff
committed
af2fb58
USB: c67x00: fix use-after-free in c67x00_add_iso_urb()

shuangpeng-kernel
authored and
opsiff
committed
5aacf3e
wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb

Lucid-Duck
authored and
opsiff
committed
d0f4724
usb: usbfs: fix use-after-free of usb_device in usbdev_release()

mzereza
authored and
opsiff
committed
524095c
Linux 6.18.49

gregkh
authored and
opsiff
committed
9ada2c2