[ciqlts9_2] Multiple patches tested (9 commits)

[ciq-kernel-automation]

Summary

This PR has been automatically created after successful completion of all CI stages.

Commit Message(s)

xsk: check IFF_UP earlier in Tx path

jira VULN-154576
cve CVE-2023-53240
commit-author Maciej Fijalkowski <[email protected]>
commit 1596dae2f17ec5c6e8c8f0e3fec78c5ae55c1e0b

drm/i915: mark requests for GuC virtual engines to avoid use-after-free

jira VULN-157599
cve CVE-2023-53552
commit-author Andrzej Hajda <[email protected]>
commit 5eefc5307c983b59344a4cb89009819f580c84fa

net/mlx5e: Check for NOT_READY flag state after locking

jira VULN-157713
cve CVE-2023-53581
commit-author Vlad Buslov <[email protected]>
commit 65e64640e97c0f223e77f9ea69b5a46186b93470

ipv6: Fix out-of-bounds access in ipv6_find_tlv()

jira VULN-159018
cve CVE-2023-53705
commit-author Gavrilov Ilia <[email protected]>
commit 878ecb0897f4737a4c9401f3523fd49589025671

sctp: detect and prevent references to a freed transport in sendmsg

jira VULN-66665
cve CVE-2025-23142
commit-author Ricardo Cañuelo Navarro <[email protected]>
commit f1a69a940de58b16e8249dff26f74c8cc59b32be

KVM: arm64: Tear down vGIC on failed vCPU creation

jira VULN-67833
cve CVE-2025-37849
commit-author Will Deacon <[email protected]>
commit 250f25367b58d8c65a1b060a2dda037eea09a672

Bluetooth: ISO: Fix possible UAF on iso_conn_free

jira VULN-160178
cve CVE-2025-40141
commit-author Luiz Augusto von Dentz <[email protected]>
commit 9950f095d6c875dbe0c9ebfcf972ec88fdf26fc8

ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping

jira VULN-160203
cve CVE-2025-40154
commit-author Takashi Iwai <[email protected]>
commit fba404e4b4af4f4f747bb0e41e9fff7d03c7bcc0

drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE

jira VULN-161156
cve CVE-2025-40277
commit-author Ian Forbes <[email protected]>
commit 32b415a9dc2c212e809b7ebc2b14bc3fbda2b9af

Test Results

✅ Build Stage

• Status: Passed
• Build Time: 23m 58s
• Total Time: 25m 21s
• View build logs

✅ Boot Verification

• Status: Passed
• View boot logs

✅ Kernel Selftests

• Passed: 138
• Failed: 25
• View kselftest logs

⚠️ Test Comparison

• Status: Skipped
• Reason: No baseline test results available from ciqlts9_2
• Note: Manual review recommended to ensure no regressions

---

🤖 This PR was automatically generated by GitHub Actions
Run ID: 21513076487

[github-actions]

🤖 Validation Checks In Progress Workflow run: https://github.com/ctrliq/kernel-src-tree/actions/runs/21515290063

[github-actions]

🔍 Upstream Linux Kernel Commit Check

• ⚠️ PR commit 94fe2c25a2f (xsk: check IFF_UP earlier in Tx path) references upstream commit
  1596dae2f17e which has been referenced by a Fixes: tag in the upstream
  Linux kernel:

    e4d008d49a7 xsk: Skip polling event check for unbound socket (Yewon Choi)

This is an automated message from the kernel commit checker workflow.

[github-actions]

🔍 Interdiff Analysis

• ⚠️ PR commit 94fe2c25a2f (xsk: check IFF_UP earlier in Tx path) → upstream 1596dae2f17e
  Differences found:

diff -u b/net/xdp/xsk.c b/net/xdp/xsk.c
--- b/net/xdp/xsk.c
+++ b/net/xdp/xsk.c
@@ -634,6 +635,7 @@ INTERDIFF: rejected hunk from patch1, cannot diff context
 	struct sock *sk = sock->sk;
 	struct xdp_sock *xs = xdp_sk(sk);
 	struct xsk_buff_pool *pool;
+	int err;
 
 	if (unlikely(!xsk_is_bound(xs)))
 		return -ENXIO;
@@ -634,6 +635,7 @@ INTERDIFF: rejected hunk from patch2, cannot diff context
 	struct sock *sk = sock->sk;
 	struct xdp_sock *xs = xdp_sk(sk);
 	struct xsk_buff_pool *pool;
+	int err;
 
 	if (unlikely(!xsk_is_bound(xs)))
 		return -ENXIO;
@@ -728,7 +734,7 @@ INTERDIFF: rejected hunk from patch1, cannot diff context
 	if (pool->cached_need_wakeup) {
 		if (xs->zc)
 			xsk_wakeup(xs, pool->cached_need_wakeup);
-		else
+		else if (xs->tx)
 			/* Poll needs to drive Tx also in copy mode */
 			xsk_xmit(sk);
 	}
@@ -728,7 +734,7 @@ INTERDIFF: rejected hunk from patch2, cannot diff context
 	if (pool->cached_need_wakeup) {
 		if (xs->zc)
 			xsk_wakeup(xs, pool->cached_need_wakeup);
-		else
+		else if (xs->tx)
 			/* Poll needs to drive Tx also in copy mode */
 			xsk_xmit(sk);
 	}

• ⚠️ PR commit 8fce84b9575 (sctp: detect and prevent references to a freed transport in sendmsg) → upstream f1a69a940de5
  Differences found:

diff -u b/net/sctp/socket.c b/net/sctp/socket.c
--- b/net/sctp/socket.c
+++ b/net/sctp/socket.c
@@ -68,5 +68,5 @@
 /* Forward declarations for internal helper functions. */
-static bool sctp_writeable(const struct sock *sk);
+static bool sctp_writeable(struct sock *sk);
 static void sctp_wfree(struct sk_buff *skb);
 static int sctp_wait_for_sndbuf(struct sctp_association *asoc,
 				struct sctp_transport *transport,
@@ -1830,4 +1830,4 @@
 		err = sctp_wait_for_sndbuf(asoc, transport, &timeo, msg_len);
 		if (err)
 			goto err;
-		if (unlikely(sinfo->sinfo_stream >= asoc->stream.outcnt)) {
+	}

This is an automated interdiff check for backported commits.

[github-actions]

✅ Validation checks completed successfully View full results: https://github.com/ctrliq/kernel-src-tree/actions/runs/21515290063

[roxanan1996]

🔍 Upstream Linux Kernel Commit Check

* ⚠️ PR commit `94fe2c25a2f (xsk: check IFF_UP earlier in Tx path)` references upstream commit
  `1596dae2f17e` which has been referenced by a `Fixes:` tag in the upstream
  Linux kernel:

    e4d008d49a7 xsk: Skip polling event check for unbound socket (Yewon Choi)

This is an automated message from the kernel commit checker workflow.

Did you use the updated ciq-cherry-pick and cve_remediation scripts? It does this automatically.

[shreeya-patel98]

Did you use the updated ciq-cherry-pick and cve_remediation scripts? It does this automatically.

I think I haven't rebased my branch so need to still do that. For now will update it manually.