[ANNOUNCE] Release v4.19.325-cip123

[Ulrich Hecht <uli@fpond.eu>]

Hi,

the CIP kernel team has released Linux kernel v4.19.325-cip123. The linux-4.19.y-cip tree's base version has been updated to v4.19-st7. The trees are up-to-date with kernel 5.4.296.

You can get this release via the git tree or as a tarball from https://mirrors.edge.kernel.org/pub/linux/kernel/projects/cip/4.19/

  v4.19.325-cip123:
    repository:
      https://git.kernel.org/pub/scm/linux/kernel/git/cip/linux-cip.git
    branch:
      linux-4.19.y-cip
    commit hash:
      1e9cb006c55b0164de79c50947377a71deca9975
    Fixed CVEs:
      CVE-2024-26644: btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
      CVE-2024-49935: ACPI: PAD: fix crash in exit_round_robin()
      CVE-2025-38102: VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
      CVE-2025-38211: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
      CVE-2025-38226: media: vivid: Change the siize of the composing
      CVE-2025-38230: jfs: validate AG parameters in dbMount() to prevent crashes
      CVE-2025-38245: atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
      CVE-2025-38249: ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
      CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty
      CVE-2025-38377: rose: fix dangling neighbour pointers in rose_rt_device_down()
      CVE-2025-38386: ACPICA: Refuse to evaluate a method if arguments are missing
      CVE-2025-38391: usb: typec: altmodes/displayport: do not index invalid pin_assignments
      CVE-2025-38401: mtk-sd: Prevent memory corruption from DMA map failure
      CVE-2025-38403: vsock/vmci: Clear the vmci transport packet properly when initializing it
      CVE-2025-38406: wifi: ath6kl: remove WARN on bad firmware input
      CVE-2025-38445: md/raid1: Fix stack memory use after return in raid1_reshape
      CVE-2025-38448: usb: gadget: u_serial: Fix race condition in TTY wakeup
      CVE-2025-38457: net/sched: Abort __tc_modify_qdisc if parent class does not exist
      CVE-2025-38458: atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
      CVE-2025-38459: atm: clip: Fix infinite recursive call of clip_push().
      CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd().
      CVE-2025-38464: tipc: Fix use-after-free in tipc_conn_close().
      CVE-2025-38465: netlink: Fix wraparounds of sk->sk_rmem_alloc.
      CVE-2025-38404: usb: typec: displayport: Fix potential deadlock
      CVE-2025-38513: wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
      CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct
      CVE-2025-38515: drm/sched: Increment job count before swapping tail spsc queue
      CVE-2025-38540: HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
      CVE-2025-38542: net: appletalk: Fix device refcount leak in atrtr_create()
      CVE-2025-38546: atm: clip: Fix memory leak of struct clip_vcc.

Best regards,
Ulrich Hecht