Daily update · Oct 3–4, 2026

Kernel update: Thunderbolt stability, AMD display fixes, and new hardware support

A roundup of today's mainline kernel changes, including security hardening, USB/Thunderbolt fixes, and expanded hardware compatibility.

Hardware support Security and hardening

#AMD GPU #ARM64 #Hardware support #Security #Thunderbolt #USB

217 meaningful commitsDaily snapshot

In brief

Today's mainline kernel updates focus on stability and security: Thunderbolt and USB fixes prevent crashes, AMD GPU display issues are addressed, and new hardware support lands for LTE/5G modems and laptops. Several memory safety issues in serial, console, and sensor drivers are also fixed.

Security and hardening

Fix memory disclosure in USB serial drivers

Two fixes prevent kernel memory leaks: one orders port teardown after disconnect to avoid a use-after-free, the other rejects short control transfers in the Sierra Wireless driver that previously exposed uninitialized heap memory via sysfs.

Why it matters: Prevents potential kernel memory disclosure and crashes when using USB serial devices.

33c920f7c595 8a0200d14acd

Harden virtual console against memory safety bugs

Two fixes address a use-after-free in /dev/vcs writes and a slab out-of-bounds read during selection paste, both triggered by concurrent console access.

Why it matters: Improves stability and security for users of virtual consoles, including screen readers and terminal emulators.

226bd5603371 39495ef5d6f8

Fix IIO sensor data buffer leak

The IIO core now zero-allocates extra space in the unaligned bounce buffer, preventing uninitialized heap data from being exposed to userspace when timestamps are enabled.

Why it matters: Prevents a potential kernel memory disclosure for applications reading sensor data via IIO.

5330036bc68d

Validate USB audio gadget request index

The UAC1 legacy gadget handler now validates the request index before using it as an array index, blocking out-of-bounds access from a malicious USB host.

Why it matters: Hardens USB audio gadget implementations against memory corruption.

9062d50e75c2

Prevent Thunderbolt XDomain out-of-bounds read

A malicious Thunderbolt peer could report an oversized response length, causing a buffer over-read. The driver now rejects such responses.

Why it matters: Hardens Thunderbolt networking against remote memory disclosure or crash.

80756e263846

USB and Thunderbolt

Thunderbolt stability and feature fixes

A batch of fixes addresses use-after-free, NULL pointer dereferences, and reference leaks in Thunderbolt DP tunnel and control channel handling during hot-unplug and teardown. A reset quirk that caused shutdown deadlock on AMD USB4 routers is reverted, non-blocking I/O is enabled for stream devices, and CL states are disabled for the Anker Prime TB5 dock to prevent tunnel aborts.

Why it matters: Prevents crashes, hangs, and memory corruption for Thunderbolt/USB4 users, and improves dock stability.

032c59c7681c 12f5d8b85a66 1fd1f67c94d3 419fa32fa5bc c222f80be55f 0b457c6733f7 4310c6b8e75d a02188ddc24b e6df180e976f c230bc2b926d 47c73a43c1de 395e9f2967a7

USB core and gadget fixes

Fixes an IRQ storm in DWC3 gadget controllers that could panic the kernel, reduces the USB 3 root hub resume hold time to avoid crashes on AMD platforms, and resolves multiple USB gadget/core issues including FunctionFS endpoint descriptor NULL deref, CDC ACM URB use-after-free, control endpoint cleanup, and Type-C connector mapping/USB4 matching.

Why it matters: Improves stability for USB devices, especially on AMD systems and for USB gadget users.

1ff77cbefe5a 29480b05e6e2 9cd072788c76 dc614d6bc991 0e8baa78d872 6c51f09c6db5 aef5a7e20765

Serial and console

Serial driver fixes

A collection of fixes improves serial port reliability: restores TIOCMIWAIT on Amiga, fixes OMAP UART wake IRQ during suspend, prevents a NULL pointer dereference on unregister, reduces IRQ overhead for modem-status handling, and corrects Qualcomm GENI serial console power management and interconnect vote constants.

Why it matters: Fixes crashes, wake issues, and console problems on a range of systems from Amiga to Qualcomm.

615f35fd5aee 73f3e6ca7a6a 499485a67fba 37aba16e7943 63ef71d1474b 3098c989bd38 2de1066dc859 1cd9b1be5a9c

Display and graphics

AMD display fixes

Corrects HDMI color range for CTA modes to avoid washed-out or crushed blacks, restores legacy fast update path for DCE 6.x/8.1 GPUs to prevent black screens, allows system suspend when the GPU is parked by vga_switcheroo, adds NULL checks to prevent crashes on MST display unplug, and fixes PWM backlight curve mapping to match Windows behavior.

Why it matters: Fixes display issues on AMD GPUs, from older HD 6000 series to modern laptops, and improves suspend reliability on hybrid graphics systems.

eb5650d1f367 106b4a2a78b2 88427119e1f0 687d31ea9ac7 eadb85cca111 217f64f348c9 51cc916648d1

Disable Intel i915 VRR DC balance by default

VRR DC balance caused timing issues on some panel/TCON combinations and is now off by default, with a module parameter to re-enable it for debugging.

Why it matters: Avoids display flicker or timing problems on Intel GPUs with variable refresh rate displays.

c034e8a46e4c

Hardware support and platform

New hardware support

Adds USB serial driver support for Quectel EG060W/RG660QB, SIMCom SIM8260C, and Compal EXM-G1x/EXC-T1 LTE/5G modems, enables monitoring of Corsair AX1500i PSUs, enables SMBus touchpad on ThinkPad T490, fixes keyboard/touchpad on Fujitsu LIFEBOOK U7410, makes USB-C work on Acer Nitro ANV15-41, restores SMBus on ThinkPad L440 by restricting a T440p quirk, and fixes Samsung S6SY761 touchscreen resume.

Why it matters: Expands hardware compatibility and fixes input/power issues on specific laptops and modems.

cd2434019948 35c950c9ec2c 7f11480cda08 6177bcd94be8 b51faf3f2e30 d84e27d87738 a961417c5ae7 495cd7f858b4 8c51ea651d04 f0fd8993082c a215720959c5

ARM64 and Qualcomm platform fixes

Reverts an interconnect QoS change that caused hard resets on Snapdragon X1 laptops, fixes the ARM64 TLB flush range for erratum 2645198, corrects CPU frequency reporting above 4.19 GHz, and prevents invalid signal context restoration on SME-only systems.

Why it matters: Improves stability and correctness on ARM64 laptops and Qualcomm platforms.

2cc67425a97e 1fef81669147 3872cc6b9294 e060d9069b49

Source commits217 entries +

a02188ddc24b

thunderbolt: Fix KASAN reported use-after-free when request is canceled

Mika Westerberg · May 7, 2026 · 1 files

96ff396e6e0e

thunderbolt: Use separate lock class for each ring

Mika Westerberg · May 15, 2026 · 2 files

1a7c522a3547

iio: proximity: aw96103: validate firmware data length

Laxman Acharya Padhya · Aug 1, 2026 · 1 files

5330036bc68d

iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.

Jonathan Cameron · Aug 3, 2026 · 1 files

0f3f42707624

iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind

Fan Wu · Aug 3, 2026 · 1 files

1f71f565e358

tty: vcc: zero-initialize control packet in vcc_send_ctl()

Joshua Rogers · Aug 3, 2026 · 1 files

03b49c991abb

tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup

Joshua Rogers · Aug 3, 2026 · 1 files

5b114bfc1dfd

tty: vt: fix memory leak in vc_allocate()

Mingyu Wang · Aug 3, 2026 · 1 files

c5df31f10880

usb: typec: tipd: don't send GAID when probe fails in APP mode

Marian Rotariu · Aug 6, 2026 · 1 files

e62e601cfd3c

MAINTAINERS: Add self for the sb1250-duart serial driver

Maciej W. Rozycki · Aug 6, 2026 · 1 files

63213927b141

iio: light: gp2ap020a00f: drain irq_work after free_irq

Fan Wu · Aug 6, 2026 · 1 files

2a57b9246cec

iio: trigger: cancel reenable_work before freeing trigger

Fan Wu · Aug 6, 2026 · 1 files

88fda1ed51a5

iio: adc: ade9000: request interrupts after powering the device

Antoniu Miclaus · Aug 7, 2026 · 1 files

d01f63f673e1

iio: adc: ade9000: fix overlapping scan_index for current and voltage channels

Antoniu Miclaus · Aug 7, 2026 · 1 files

fafefa925ed7

iio: adc: ade9000: handle Phase C dip events in IRQ1 handler

Antoniu Miclaus · Aug 7, 2026 · 1 files

f0ea4824deeb

iio: health: max30102: fix NULL dereference in interrupt handler

Marco Chen · Aug 8, 2026 · 1 files

e5052f2c5c73