Commit Graph

65999 Commits

Author SHA1 Message Date
Hauke Mehrtens
029fa04f50 odhcpd: cherry pick patches from main
CVE-2026-53918: Use-after-free (dangling first lease pointer)
CVE-2026-53920: Stack memory disclosure via truncated IA_NA/IA_PD option (GHSA-p769-5v73-pc4f)
CVE-2026-53921: Out-of-bounds write in build_ia (stack overflow in IA reply serialization)
CVE-2026-53922: Integer/size_t underflow DoS in dhcpv6_ia_handle_IAs
GHSA-hhmc-92hw-535f: odhcpd/LuCI stored XSS — unauth DHCPv6 client injects lease-file lines via crafted FQDN
TOB-OWRT-5: Trail of Bits audit finding (snprintf return handling)

There's also an unassigned NDP hop-limit spoofing fix, CVSS 5.4,
that IS included: ndp: enforce RFC4861 §7.1.1 hop-limit.

Link: https://github.com/openwrt/openwrt/pull/24184
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 67c5b71d77e5277dc7f364238588d8e37e9a3ffa)
2026-08-18 11:40:42 +01:00
Hauke Mehrtens
f75c726430 dropbear: backport some security fixes from 2026.90
This cherry picks the following changes:

- Security: server: Fix ability to bypass an authorized_keys "forced_command"
  option by an authenticated user, if Dropbear is running with "-t" option.
  ("-t" is require both password and public key).
  c60db64081
  Reported by Jeremy Brown

- Security: server: Open authorized_keys non-blocking. This avoids getting stuck
  with special files, could allow denial of service from local users.
  8b579571b5
  Reported by Turistu

- Security: scp: Add missed patch to fix CVE-2019-6111 allowing a malicious server
  to overwrite unexpected files.
  143291baca
  Patch from OpenSSH, reported missing by Asim Viladi Oglu Manizada @manizada

  Note breaking change: "-r" is now disallowed when the target directory exists
  (an additional change in Dropbear's version). If that's required an alternative
  such as rsync could be used.
  61bd0e3e65

- Security: scp: Clear setuid/setgid bits on received files.
  443ccc1fd1
  Patch from OpenSSH, tracked as CVE-2026-35385

- Security: client/server: Fix close() of a file descriptor from an out-of-bounds
  read. This seems difficult to exploit but may have unforeseen effects.
  067fd3846c
  Reported by Ankit Singh and @j499261162

Link: https://github.com/openwrt/openwrt/pull/23980
(cherry picked from commit 2218cb19494609076776ae8c13254de60c5f40f3)
Link: https://github.com/openwrt/openwrt/pull/24296
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 262c09368fda76c85c519b7554f33bb98fb3263f)
2026-08-18 11:40:42 +01:00
Hauke Mehrtens
9287454eee uhttpd: cherry pick patches from main
This fixes the following security isseus with CVE numbers:
CVE-2026-55614: GHSA-mcfg-c4r7-pjpf — case-sensitive Transfer-Encoding matching
CVE-2026-55612: GHSA-p55c-rmhc-qfm5 — invalid chunk-length state reset
CVE-2026-55613: GHSA-wgwp-64hh-f52p — ubus POST body parse-error desync

The branch also carries hardening with no CVE: one-byte overflow in
uh_urldecode, off-by-one OOB read in uh_b64decode, constant-time
password compare, $p$ crypt-hash handling.

Link: https://github.com/openwrt/openwrt/pull/24259
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit f68fa732873c280f290f16aef32b3240c790b390)
2026-08-18 11:40:42 +01:00
Hauke Mehrtens
328e3c3f35 hostapd: fix security advisory 2026-1
Cherry pick the patches recommended in the hostapd security advisory
2026-1:
https://w1.fi/security/2026-1/missing-ml-parsing-validation.txt

Vulnerability

Vulnerabilities in parsing and use of received multi-link (MLO/EHT/IEEE
802.11be/Wi-Fi 7) information has been identified in hostapd and
wpa_supplicant. These issues show up in various cases where frames
including information on affiliated links are parsed and processed in
both AP and STA modes. The issues can result in process termination due
to buffer read overflow checks and memory corruption.

The issues for AP mode (hostapd or wpa_supplicant) can result in
denial-of-service attacks due to process termination and small memory
corruption that could theoretically cause other issues, but it does not
seem likely that those could be exploiting in practice. Affected areas
can be reached by sending invalid Management frames without needing
authentication or user action on the target device.

Link: https://github.com/openwrt/openwrt/pull/24043
(cherry picked from commit 8614a2ba6885d0bec345a1010a0d59c64abe403c)
[Removed 004, 0005 and 008 which do not apply and fix some others]
Link: https://github.com/openwrt/openwrt/pull/24295
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 452bc24984b7df0ab12e73372d3fbb3930d404fe)
2026-08-18 11:40:42 +01:00
Hauke Mehrtens
c510069ea2 tools/cmake: backport bootstrap fix for GCC 16
CMake fails to bootstrap its host tool with GCC 16:

    cmake.o: undefined reference to
    `cmGlobalGhsMultiGenerator::cmGlobalGhsMultiGenerator(cmake*)'

Source/cmake.cxx includes cmGlobalGhsMultiGenerator.h guarded only by
__linux__, not by CMAKE_BOOTSTRAP. The NewFactory() call is compiled out
during bootstrap, but GCC 16 devirtualization still emits the uncalled
inline NewFactory() and the cmGlobalGeneratorSimpleFactory<> template,
which reference symbols only defined in cmGlobalGhsMultiGenerator.cxx, a
file that is not compiled during bootstrap.

Backport the upstream fix, which moves the include behind the existing
CMAKE_BOOTSTRAP guard. It is in no 3.30.x release (that branch is EOL);
upstream shipped it first in 3.31.10 / 4.0.5 / 4.1.2.

Assisted-by: Claude:claude-opus-4-8
Link: https://github.com/openwrt/openwrt/pull/24303
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit ee6e56c82ef738199312e3eb28df40806ddf41cf)
2026-08-18 11:40:42 +01:00
Lars Gierth
7aab64280d toolchain: gcc: fix include memory against GCC 16
This patch backports a small but important part of the upstream commit:

b3f1b9e2aa07 build: Remove INCLUDE_MEMORY [PR117737]

Its original commit message fails to mention that the commit also moves
the `#include <memory>` to an earlier position within system.h,
which is the actual change that we're after in this patch.

Building our GCC 14.3 with host GCC 16, the inclusion order starts to matter,
which is an issue that was also touched upon by the upstream commits:

9970b576b7e4 Include safe-ctype.h after C++ standard headers, to avoid over-poisoning
f6e00226a4ca build: Move sstream include above safe-ctype.h {PR117771]

Signed-off-by: Lars Gierth <larsg@systemli.org>
Link: https://github.com/openwrt/openwrt/pull/23095
Signed-off-by: Robert Marko <robimarko@gmail.com>
[hauke: Add GCC 13 too]
(cherry picked from commit a32a367259574958768f44916d6cce8c8939ad27)
Link: https://github.com/openwrt/openwrt/pull/24302
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 35369da86f1b9540ad738c2225eebf310e7348a4)
2026-08-18 11:40:42 +01:00
Robert Marko
1aff061c04 toolchain: gcc: 14/15: fix libcody compilation with GCC16
libcody will fail to build if building using a GCC16 host compiler, so
backport the upstream fix.

Signed-off-by: Robert Marko <robert.marko@sartura.hr>
[hauke: Add patch for GCC 13 too]
(cherry picked from commit e7e5d470c166561698078727f7ac154d2e4dbfb0)
Link: https://github.com/openwrt/openwrt/pull/24302
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit f05b9f96e0a4e77bd295d4518dab380e336aba57)
2026-08-18 11:40:42 +01:00
Josef Schlehofer
12732ac6b3 CI: remove labeler workflow and enable webhook-based labeling
Remove the .github/workflows/labeler.yml workflow and enable the "enable_labeler_yml" option in .github/formalities.json to let the webhook bot handle pull request labeling. This avoids running on GitHub Actions, so it is faster and uses fewer resources.

It uses the existing .github/labeler.yml for labels.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/24256
(cherry picked from commit 4f2dc5cc6497a6cef0a43bdefde522e734c1f40d)
Link: https://github.com/openwrt/openwrt/pull/24319
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 7df79b25f5ebcb51d5f059cf73f8ae72fae4419d)
2026-08-18 11:40:42 +01:00
Josef Schlehofer
743de64b48 CI: migrate to webhook bot and simplify labeler
This commit migrates the repository validation to a webhook-based bot instead of the GitHub Actions workflow (.github/workflows/formal.yml).

Since the bot handles stable branch labeling automatically (via the "branch_labeling: true" configuration option), the redundant branch check and labeling steps are removed from .github/workflows/labeler.yml.

The following configuration choices are applied in formalities.json:
- check_space_after_assignment: false (Disabled temporarily to catch any issues since it is a newly implemented check)
- check_makefile_indentation: false (Disabled temporarily to catch any issues since it is a new feature)
- check_patch_headers: 'warning' (Changed to warning instead of hard error since many legacy patches lack headers)
- enable_stale_bot: false (Disabled for now)

Other configurations can be adjusted in formalities.json based on the openwrt-bot-worker repository [1].

[1] https://github.com/openwrt/openwrt-bot-worker

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/24256
(cherry picked from commit 9146f931b62e9b20df84566187a837b904df1e2f)
Link: https://github.com/openwrt/openwrt/pull/24319
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit a30deed6bd4348283e8e116014f7da0d8697fdc5)
2026-08-18 11:40:42 +01:00
Hauke Mehrtens
9113b2c4bf github: labeler: Update dependencies
Update to the most recent version.
The biggest change is the switch to Node.js 24.

Link: https://github.com/openwrt/openwrt/pull/22903
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 05b6a93173135ab86f82663523b531577f5e6062)
Link: https://github.com/openwrt/openwrt/pull/24319
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 263acdfb657945bf3c3bb5db8fee752215637d42)
2026-08-18 11:40:42 +01:00
Hauke Mehrtens
cf54631a08 github: github-release: update dependencies
Update the dependencies to the latest version.
The biggest change is the update to Node.js 24.

Link: https://github.com/openwrt/openwrt/pull/22903
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 372e57f243456da71d1bb28df7b332d9296b76d9)
Link: https://github.com/openwrt/openwrt/pull/24319
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 04fd025d6bde57a338cb5b50c70bd30e11d07a0e)
2026-08-18 11:40:42 +01:00
Paul Spooren
4c01dd2726 ci: rework and move build-on-comment action
Run this only when a PR is created, so either author or anyone who can
edit the PR message (all maintainers) can trigger such build.

Instead of maintaining it in the main repository, move it to the
external repository to bloat this repository less with further CI
commits.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 8cff0d8ca0d42aec4cb47313cd0c3dd99e06bbec)
Link: https://github.com/openwrt/openwrt/pull/24319
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit d91a9ac1efc06b58c92b0e20951288a3de214416)
2026-08-18 11:40:42 +01:00
Hauke Mehrtens
a7a423902c umdns: update to Git HEAD (2026-06-16)
1b5e7bf1cec7 cache: bound cache size and clamp hostile TTLs

Link: https://github.com/openwrt/mdnsd/security/advisories/GHSA-jg8f-fhfw-jg46
(cherry picked from commit 5b2c8f4ff94ef7c339586c8a59a684009f1b7194)
Link: https://github.com/openwrt/openwrt/pull/24297
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 924f06e76cd73e24d39691a4de621bdcae80a756)
2026-08-18 11:40:42 +01:00
Felix Fietkau
277526ab71 umdns: update to Git HEAD (2026-05-22)
bd7599d02157 fix calloc_a size argument type

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit 74da669505b0dc3c1c1231e89a52589b71cbb29f)
Link: https://github.com/openwrt/openwrt/pull/24297
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 81bc4a3cc514a42869a0153b52a9902be8fc98f8)
2026-08-18 11:40:42 +01:00
Hafiz Zafran
01d4cd5be5 wireless-regdb: update to version 2026.05.30
Change-log since version 2026.03.18, retrieved from the wireless-regdb mailing lists:
  wireless-regdb: update regulatory database based on preceding changes
  wireless-regdb: Update regulatory info for Brunei Darussalam (BN) for 2022
  wireless-regdb: allow 320MHz channel width for Russia
  wireless-regdb: Update 6 GHz rules for Hong Kong (HK)
  wireless-regdb: Update 5/6 GHz power rules for Russia (RU)
  wireless-regdb: Fix 60 GHz power unit for Ukraine (UA)
  wireless-regdb: Update 6 GHz rules for South Africa (ZA)
  wireless-regdb: Update 6 GHz rules for South Korea (KR)
  wireless-regdb: Update regulatory rules for Sri Lanka (LK)
  wireless-regdb: Add regulatory info for CEPT countries FO, GI, IM, SM and VA listed by WiFi Alliance

Signed-off-by: Hafiz Zafran <hfzz7@duck.com>
Link: https://github.com/openwrt/openwrt/pull/23594
(cherry picked from commit 848c54b5f42904d4afaae077efd5180cb6752b9c)
Link: https://github.com/openwrt/openwrt/pull/24301
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 9f11fa9de18de615bf0a34822600fbe5399879c0)
2026-08-18 11:40:42 +01:00
Hauke Mehrtens
f1470a1600 ead: Increase PKG_RELEASE
Indicate that there are some changes. This should make sure that the
package gets updated.

Fixes: 63c0767f3d02 ("ead: fix integer underflow in handle_send_a()")
(cherry picked from commit 75fad162df8e88d0b535cca83453b0ad05267349)
Link: https://github.com/openwrt/openwrt/pull/24298
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 58264cce83b0837fabf94021b5677dd3209b2655)
2026-08-18 11:40:42 +01:00
Hauke Mehrtens
3a550aa906 ead: fix integer underflow in handle_send_a()
handle_send_a() computed the SRP "A" parameter length as

    len = ntohl(msg->len) - sizeof(struct ead_msg_number);

sizeof(struct ead_msg_number) is 1, and the subtraction is evaluated in
unsigned arithmetic. A packet with msg->len == 0 therefore wraps the
result to a huge value which, assigned to the signed int len, becomes -1.
The following bounds check is signed:

    if (len > MAXPARAMLEN + 1)
        return false;

so -1 passes, and memcpy(A.data, number->data, len) runs with len cast to
size_t (~SIZE_MAX) against the 257-byte abuf, crashing the daemon.

Neither parse_message() nor handle_packet() validate msg->len (only the
captured packet length), so an unauthenticated attacker on the local
segment can reach this path and crash ead with a single crafted packet.

Validate the claimed length in unsigned arithmetic before the subtraction
and bound it on both sides. Doing the upper-bound check unsigned as well
also closes a 32-bit-only variant where sizeof(ead_packet) + msg->len
overflows in handle_packet(), letting a large msg->len reach the same
negative-len path.

Link: https://github.com/openwrt/openwrt/security/advisories/GHSA-9558-77jp-g3fw
Reported-by: @Vasco0x4
Assisted-by: Claude:claude-opus-4-8
(cherry picked from commit 63c0767f3d02f7b10b0f0b5293366bd059a08ca5)
Link: https://github.com/openwrt/openwrt/pull/24298
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 3944c026aa7cd27222ce334df72d2bcb6be86b9c)
2026-08-18 11:40:42 +01:00
Hauke Mehrtens
abf575dba1 toolchain: musl: backport patches with CVE fixes
This fixes:
 * CVE-2026-6042: Algorithmic Complexity DoS in musl libc iconv
 * CVE-2026-40200: musl libc: stack corruption in qsort with sufficiently large inputs

Link: https://github.com/openwrt/openwrt/pull/23329
(cherry picked from commit 6865d489d21ff5ab172d1e20533e072a32132e98)
Link: https://github.com/openwrt/openwrt/pull/24299
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 818f69638719b3a4cfb92b6ea999ce0bfe15b086)
2026-08-18 11:40:42 +01:00
Goetz Goerisch
7bac6a34cf kernel: bump 6.6 to 6.6.144
Changelog: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.144

Manual rebased patch:
bcm27xx/patches-6.6/950-0464-drm-v3d-New-debugfs-end-points-to-query-GPU-usage-st.patch [1]

Removes upstreamed patch:
bcm27xx/patches-6.6/950-1552-drm-v3d-Set-job-pointer-to-NULL-when-the-job-s-fence.patch [2]

All other patches autorefreshed.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit?h=v6.6.144&id=756724002c5a65b07af067849ba365a51fc6f207
[2] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit?h=v6.6.144&id=756724002c5a65b07af067849ba365a51fc6f207

Signed-off-by: Goetz Goerisch <ggoerisch@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/24082
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 25920e84257edd4630fbc6fdec6b20038b6df944)
2026-08-18 11:40:42 +01:00
Martin Schiller
525d3f45be openssl: update to version 3.0.21
OpenSSL 3.0.21 is a security patch release. The most severe CVE fixed in
this release is High.

This release incorporates the following bug fixes and mitigations:

 * Fixed heap use-after-free in PKCS7_verify(). (CVE-2026-45447)

 * Fixed CMS AuthEnvelopedData processing may accept forged messages.
   (CVE-2026-34182)

 * Fixed AES-OCB IV ignored on EVP_Cipher() path. (CVE-2026-45445)

 * Fixed possible heap buffer overflow in ASN.1 multibyte string
   conversion. (CVE-2026-7383)

 * Fixed out-of-bounds read in CMS password-based decryption.
   (CVE-2026-9076)

 * Fixed heap buffer over-read in ASN.1 content parsing.
   (CVE-2026-34180)

 * Fixed possible NULL dereference in password-dased CMS decryption.
   (CVE-2026-42766)

 * Fixed FFC-DH peer validation uses attacker-supplied q.
   (CVE-2026-42770)

 * Fixed incorrect tag processing for empty messages in AES-GCM-SIV and
   AES-SIV modes. (CVE-2026-45446)

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
Link: https://github.com/openwrt/openwrt/pull/23843
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 95d0ca014c4ce5e225579f859c066dc74a20763b)
2026-08-18 11:40:41 +01:00
Goetz Goerisch
8633ac27f3 kernel: bump 6.6 to 6.6.143
Changelog: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.143

New kconfig symbols:
- ARM64_ERRATUM_4118414: enabled on ARM Cortex-A76 and newer targets.
- ARM64_ERRATUM_4193714: enabled on ARM C1-Pro and newer targets. [1]

Manually rebased patches:
generic/pending-6.6/610-netfilter_match_bypass_default_checks.patch [2]

All other patches autorefreshed.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.143&id=e717a4d08779f1a28d6e0275e75040b12c33c753
[2] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.143&id=f513f308cc4bdb4530d033431592ffbc29b7fca1

Signed-off-by: Goetz Goerisch <ggoerisch@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/23890
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit b704cf7842be6ed4abc6688d13aeaf18495cbfe7)
2026-08-18 11:40:41 +01:00
John Audia
d8de4343df backport: update dnsmasq to v2.93 from master
Wholesale drop of dnsmasq from master/not a cherry pick.

Reference PR: https://github.com/openwrt/openwrt/pull/23669

Signed-off-by: John Audia <therealgraysky@proton.me>
Link: https://github.com/openwrt/openwrt/pull/23804
Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
(cherry picked from commit cd8d701c7fc0efe9b8170b44354945a21474c066)
2026-08-18 11:40:41 +01:00
Michael Pratt
08b5ae4067 tools/util-linux: include macOS system uuid header
The type definition of uuid_string_t and possibly other details
used by macOS SDKs like XCode is missing from util-linux.

Headers on macOS have a different inclusion guard
compared to the unique util-linux "_UL" prefix.

This uuid.h header is guaranteed to be present since macOS 10.8 and iOS 6
even without the presence of XCode or other SDKs on the system,
so adding an include_next directive is safe after checking for clang.

Link: https://developer.apple.com/documentation/foundation/uuid
Link: https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/uuid.3.html
Tested-by: Georgi Valkov <gvalkov@gmail.com> # macOS
Signed-off-by: Michael Pratt <mcpratt@pm.me>
Link: https://github.com/openwrt/openwrt/pull/16522
(cherry picked from commit 89056bd7b109ff4264f07cf721e6d9f4b7ad983e)
Link: https://github.com/openwrt/openwrt/pull/23729
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 886e0248e82c0bfa571add7a099360cc035dbeee)
2026-08-18 11:40:41 +01:00
Georgi Valkov
be41cc497c generic: fix PATH_MAX macro redefined in exec-cmd.c on macOS 15.4
Fix an error while building target/linux x64 on macOS 15.4 host,
due to the PATH_MAX macro being redefined:

mkdir -p /Volumes/test/openwrt/build_dir/target-x86_64_musl/linux-x86_64/linux-6.6.86/tools/objtool && make O=/Volumes/test/openwrt/build_dir/target-x86_64_musl/linux-x86_64/linux-6.6.86 subdir=tools/objtool --no-print-directory -C objtool
exec-cmd.c:15:9: error: 'PATH_MAX' macro redefined [-Werror,-Wmacro-redefined]
   15 | #define PATH_MAX        4096
      |         ^
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/usr/include/sys/syslimits.h:103:9: note: previous definition is here
  103 | #define PATH_MAX                 1024   /* max bytes in pathname */
      |         ^

exec-cmd.c is compiled as part of objtool to run on the host, and
therefore host headers are used, where PATH_MAX is already defined.
Using an old OpenWRT snapshot from 2025-02-16, where linux-6.6.77
used to build correctly, does not help. Reverting from Xcode 16.3 to
16.2 does not help either.

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/18530
(cherry picked from commit b77e6cd6272d55af7ea64200dd2358666d25b6db)
Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/23710
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 33a8c1c96c25f870e5d86cbb1a3e66c2d388a83c)
2026-08-18 11:40:41 +01:00
Grische
be85697eb8 ipq806x: ap3935: disable hibernation on LAN1
The Extreme Networks AP3935's LAN1 port (gmac0/RGMII to AR8035 at MDIO
addr 1) fails to acquire a link if no Ethernet cable is connected at
power-on; the port stays dead even after a cable is later inserted, and
only a network restart recovers it.

The AR803x family enables hibernation mode by default, this setting
overrides it.

Signed-off-by: Grische <github@grische.xyz>
Link: https://github.com/openwrt/openwrt/pull/23208
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 33ed49c948b0a2cb90ef50ffe7afdcff8bb42c07)
(cherry picked from commit 8c3c253692ec5a97012261225695a2abc8dc3f1c)
2026-08-18 11:40:41 +01:00
Josef Schlehofer
67f16e0127 toolchain: gdb: backport patch to fix build with Clang 21
Backport a patch [1] to fix a compile error in enum-flags.h [2].

[1] https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=commit;h=4a0b2cb7210
[2] https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293168

Fixes: https://github.com/openwrt/openwrt/issues/23122

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/23701
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 81b3344b60f50d43ddf007376ec275376646822f)
2026-08-18 11:40:41 +01:00
Goetz Goerisch
7b7afa7232 kernel: bump 6.6 to 6.6.142
Dropped upstreamed patch:
generic/backport-6.6/750-01-v6.8-net-phy-add-genphy_c45_pma_read_ext_abilities.patch [1]
generic/backport-6.6/790-41-v6.10-net-dsa-mt7530-rename-mt753x_bpdu_port_fw-enum-to-mt.patch [2]
target/linux/ath79/patches-6.6/301-irqchip-irq-ath79-cpu-drop-OF-init-helper.patch [3]

All other patches autorefreshed.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.142&id=d04494596b5e5bfc8b9026455333447c3b8b5347
[2] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.142&id=1bddf306212a1f7f09e167a2b5ca4f9b1019bca1
[3] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.142&id=6760af11a26e93305ed4becb3470edfcabaa01a3

Signed-off-by: Goetz Goerisch <ggoerisch@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/23624
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 4508dd6014bc948f1ceb1dd705202527ac508e3d)
2026-08-18 11:40:41 +01:00
Hauke Mehrtens
e29da1875f OpenWrt v24.10.7: revert to branch defaults
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit d5ac5cdfb2461a8deb399504af4bba158b00a917)
2026-08-18 11:40:41 +01:00
Hauke Mehrtens
70237dccca OpenWrt v24.10.7: adjust config defaults
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit b40dfac0a31695596f7c1f5f1519302ca8237f6e)
2026-08-18 11:40:41 +01:00
Ziyang Huang
f25eb7191f airoha: an7581: enable USB support
The an7581.dtsi contains the mediatek,mtk-xhci device.

Signed-off-by: Ziyang Huang <hzyitc@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/21460
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit f8a6798bf38c3d3e6fe6af9367ea5628df46429a)
[ fix conflict error ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit ab4c7d6af71a576571e6ab57d73072dbf7733072)
2026-08-18 11:40:41 +01:00
Goetz Goerisch
0c6e847eea kernel: bump 6.6 to 6.6.141
Changelog: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.141

Drop upstreamed patches:
generic/backport-6.6/702-01-v6.7-net-phy-aquantia-move-to-separate-directory.patch [1]
generic/backport-6.6/713-v6.9-01-net-phy-move-at803x-PHY-driver-to-dedicated-director.patch [2]

Manually refreshed patches:
generic/backport-6.6/707-v6.8-02-net-phy-at803x-move-disable-WOL-to-specific-at8031-p.patch
generic/backport-6.6/707-v6.8-03-net-phy-at803x-raname-hw_stats-functions-to-qca83xx-.patch
generic/backport-6.6/707-v6.8-04-net-phy-at803x-move-qca83xx-specific-check-in-dedica.patch
generic/backport-6.6/707-v6.8-05-net-phy-at803x-move-specific-DT-option-for-at8031-to.patch
generic/backport-6.6/707-v6.8-06-net-phy-at803x-move-specific-at8031-probe-mode-check.patch
generic/backport-6.6/707-v6.8-07-net-phy-at803x-move-specific-at8031-config_init-to-d.patch
generic/backport-6.6/707-v6.8-08-net-phy-at803x-move-specific-at8031-WOL-bits-to-dedi.patch
generic/backport-6.6/707-v6.8-09-net-phy-at803x-move-specific-at8031-config_intr-to-d.patch
generic/backport-6.6/707-v6.8-10-net-phy-at803x-make-at8031-related-DT-functions-name.patch
generic/backport-6.6/707-v6.8-11-net-phy-at803x-move-at8031-functions-in-dedicated-se.patch
generic/backport-6.6/707-v6.8-12-net-phy-at803x-move-at8035-specific-DT-parse-to-dedi.patch
generic/backport-6.6/707-v6.8-13-net-phy-at803x-drop-specific-PHY-ID-check-from-cable.patch
generic/backport-6.6/708-v6.8-01-net-phy-at803x-move-specific-qca808x-config_aneg-to-.patch
generic/backport-6.6/708-v6.8-02-net-phy-at803x-make-read-specific-status-function-mo.patch
generic/backport-6.6/709-v6.8-01-net-phy-at803x-remove-extra-space-after-cast.patch
generic/backport-6.6/709-v6.8-02-net-phy-at803x-replace-msleep-1-with-usleep_range.patch
generic/backport-6.6/710-v6.8-net-phy-at803x-better-align-function-varibles-to-ope.patch
generic/backport-6.6/711-v6.8-01-net-phy-at803x-generalize-cdt-fault-length-function.patch
generic/backport-6.6/711-v6.8-02-net-phy-at803x-refactor-qca808x-cable-test-get-statu.patch
generic/backport-6.6/711-v6.8-03-net-phy-at803x-add-support-for-cdt-cross-short-test-.patch
generic/backport-6.6/711-v6.8-04-net-phy-at803x-make-read_status-more-generic.patch
generic/backport-6.6/712-v6.9-net-phy-at803x-add-LED-support-for-qca808x.patch
updated file path for all due to [2]

generic/pending-6.6/680-net-add-TCP-fraglist-GRO-support.patch [3]
bcm27xx/patches-6.6/950-0158-bcmgenet-Better-coalescing-parameter-defaults.patch [4]

All other patches autorefreshed.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.141&id=014860036d1ffe2e84e4b612fb0b9aab2fa38e67
[2] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.141&id=22f22f1346b4add431b509a64bfb3f8cf3daa8c3
[3] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.141&id=989214c66884d70716d83dc1d0bf5e16287bf349
[4] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.141&id=355b61569e84c9ac171d36878bd9cd503cac7e2c

Signed-off-by: Goetz Goerisch <ggoerisch@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/23435
[Add SKBFL_SHARED_FRAG to skb_gro_receive_list() again]
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit ca4a3dde42b97f948304f489352f1c1049d2b6bd)
2026-08-18 11:40:41 +01:00
Goetz Goerisch
0eb1a86262 kernel: bump 6.6 to 6.6.140
Changelog: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.140

Manually refreshed patches:
generic/pending-6.6/151-net-bridge-do-not-send-arp-replies-if-src-and-target.patch [1]
bcm27xx/patches-6.6/950-0092-MMC-added-alternative-MMC-driver.patch [2]

All other patches autorefreshed.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.140&id=0b9e4bbfb7c949151e3acd44ed4aa33614d2e110
[2] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.140&id=b58baa1d50aa98fd3f6a8432ff0e36f83224450b

Signed-off-by: Goetz Goerisch <ggoerisch@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/23435
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit b3e40122a36e384c6cb4396b6ac2c2316543c193)
2026-08-18 11:40:41 +01:00
Goetz Goerisch
073d11aef3 kernel: backport crypto: talitos - stop using crypto_ahash::init
This patch is not yet backported to the 6.6.y tree.
It is a prerequisite for kernel 6.6.140 to build for mpc85xx.

drivers/crypto/talitos.c: In function 'ahash_digest':
drivers/crypto/talitos.c:2204:16: error: 'struct talitos_ahash_req_ctx' has no member named 'last'
2204 | req_ctx->last = 1;
     |        ^~~~~

Link: https://lore.kernel.org/all/DIOA24QU02W5.2RSVK05RE7BJK@bootlin.com/
Signed-off-by: Goetz Goerisch <ggoerisch@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/23435
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit bcff9902c3db5e130ccd5f66fdc5c7cfbe71f8e8)
2026-08-18 11:40:41 +01:00
Christian Marangi
053c25fbb6 airoha: backport patch fixing offload support with GDM2 present
Backport upstream patch fixing offload support in the presence of GDM2
interface.

(cherry picked from commit b7aa0aa9bf603c01500f791df4636b35434c6224)
[ fix conflict error ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit a8382a4821e8b845fe15dc357a86d1a33c5bdc55)
2026-08-18 11:40:41 +01:00
Fengyu Wu
6a0db93195 ca-certificates: update to 20260223
Debian changelog:

  * Update Mozilla certificate authority bundle to version 2.82
    The following certificate authorities were added (+):
    + TrustAsia TLS ECC Root CA
    + TrustAsia TLS RSA Root CA
    + SwissSign RSA TLS Root CA 2022 - 1
    + OISTE Server Root ECC G1
    +  OISTE Server Root RSA G1
    The following certificate authorities were removed (-):
    - GlobalSign Root CA
    - Entrust.net Premium 2048 Secure Server CA
    - Baltimore CyberTrust Root (closes: #1121936)
    - Comodo AAA Services root
    - XRamp Global CA Root
    - Go Daddy Class 2 CA
    - Starfield Class 2 CA
    - CommScope Public Trust ECC Root-01
    - CommScope Public Trust ECC Root-02
    - CommScope Public Trust RSA Root-01
    - CommScope Public Trust RSA Root-02
  * Use dh_usrlocal to create /usr/local/share/ca-certificates
    (closes: #1127100)

Signed-off-by: Fengyu Wu <saldry@proton.me>
Link: https://github.com/openwrt/openwrt/pull/23155
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 403c52db37c74246469e1cdf532aa576235d69fb)
(cherry picked from commit db8cbe9de8864cd4a362db8e39142ed13149da18)
2026-08-18 11:40:41 +01:00
xiao bo
599dab26c3 wireless-regdb: update to version 2026.03.18
Changes:
  update regulatory database based on preceding
  Update regulatory rules for India (IN) on 6GHz
  Replace M2Crypto with cryptography package
  Fix regulatory.bin signing with new

Signed-off-by: xiao bo <peterwillcn@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/23101
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit ce7bc7ac22a73df0ab58f325806eff4dfc332a40)
(cherry picked from commit 4d7129790fd6f740618e5cbb584e5a1964742a56)
2026-08-18 11:40:41 +01:00
Hauke Mehrtens
ef0d2083be kernel: bump 6.6 to 6.6.139
Changelog: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.139

All patches autorefreshed.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 224995b31ab8aacae6ea30222f441c6ebb3d4e26)
2026-08-18 11:40:41 +01:00
Hannu Nyman
e3a77299f7 dnsmasq: apply six CVE-fix upstream patches to 2.90
Apply upstream patches for the recently published CVEs in dnsmasq.

Source: https://thekelleys.org.uk/dnsmasq/CVE/
Reference: https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Link: https://github.com/openwrt/openwrt/pull/23328
(cherry picked from commit dc04999b1ff41d6bac64c484e62502f933c32852)
[added this to main branch first, 002-CVE-2026-4890.dnsmasq-2.91.patch modified]
Link: https://github.com/openwrt/openwrt/pull/23365
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 15250e11aa4e77e47cee3afca0625fca02c97917)
2026-08-18 11:40:41 +01:00
Sander van Deijck
c20df05b53 wolfssl: update to 5.9.1
For changes, see:
https://github.com/wolfSSL/wolfssl/releases/tag/v5.9.1-stable

This includes a fix for a critical (CVSS 9.3) vulnerability:
https://github.com/advisories/GHSA-f5h9-5q52-qrx7

Signed-off-by: Sander van Deijck <sander@vandeijck.com>
Link: https://github.com/openwrt/openwrt/pull/23072
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 8ef7b4ee4ba77a8d58e734753d1c87b1d4d332d7)
Link: https://github.com/openwrt/openwrt/pull/23363
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 766cbba1de7843878a6a74dab9759f608a133f78)
2026-08-18 11:40:41 +01:00
Ignat Loskutov
9124e1a8ff wolfssl: update to 5.9.0
Release Notes:
https://www.wolfssl.com/wolfssl-5-9-0-released/

Fixes CVEs:
- CVE-2026-3548
- CVE-2026-3549
- CVE-2026-3547
- CVE-2026-2646
- CVE-2026-3849
- CVE-2026-0819
- CVE-2026-1005
- CVE-2026-2645
- CVE-2026-3230
- CVE-2026-3229
- CVE-2026-3579
- CVE-2026-3580
- CVE-2026-3503
- CVE-2026-4159
- CVE-2026-4395

Signed-off-by: Ignat Loskutov <ignat.loskutov@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/22595
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit e9531860e698da4094b95860a669c37fa44aa83f)
Link: https://github.com/openwrt/openwrt/pull/23363
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit b2defe9b63a6b6b722ef4403aff5bdb0e2700b58)
2026-08-18 11:40:41 +01:00
Nick Hainke
4816427b90 wolfssl: update to 5.8.4
Release Notes:
https://www.wolfssl.com/wolfssl-5-8-4-now-available/

Fixes CVEs:
- CVE-2025-12889
- CVE-2025-12888
- CVE-2025-11936
- CVE-2025-11935
- CVE-2025-11934
- CVE-2025-11933
- CVE-2025-11932
- CVE-2025-11931

Link: https://github.com/openwrt/openwrt/pull/20922
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit b03c79f382f745b43746fd5cc2e2d28cd11ee1ef)
Link: https://github.com/openwrt/openwrt/pull/23363
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 6da707484b02a968c14bc8fb290ebe7d49654974)
2026-08-18 11:40:41 +01:00
Hauke Mehrtens
c853233ac1 wolfssl: Update to version 5.8.2
This version fixes multiple security problems:
CVE-2025-7395: Problem in certificate verification on Apple devices
CVE-2025-7394: Predictable results from RAND_bytes() after fork call in OpenSSL compatibility layer
CVE-2025-7396: Activate Curve25519 blinding support

See Release notes:
https://github.com/wolfSSL/wolfssl/releases/tag/v5.8.0-stable
https://github.com/wolfSSL/wolfssl/releases/tag/v5.8.2-stable

wolfSSL is now GPLv3 instead of GPLv2, see:
629c5b4cf6

The file size increased a bit:
```
546060 bin/packages/mipsel_24kc/base/libwolfssl5.7.6.e624513f-5.7.6-r1.apk
560684 bin/packages/mipsel_24kc/base/libwolfssl5.8.2.e624513f-5.8.2-r1.apk
```

Link: https://github.com/openwrt/openwrt/pull/20547
(cherry picked from commit 92f07864c1f29b39df73b0f3858c500a8d8fa931)
Link: https://github.com/openwrt/openwrt/pull/23363
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 4c472ca84d9e3ce18fbe052762b2bd235fa35cc7)
2026-08-18 11:40:41 +01:00
Magnus Kroken
778613a683 mbedtls: backport upstream patches to fix TLS 1.2 client issues
Fix a TLS 1.2 regression that caused clients to reject valid
ServerKeyExchange signatures using RSA-PSS signature algorithms.

The TLS 1.2 regression resulted in errors like:
$ curl https://api.domeneshop.no/v0/
curl: (35) ssl_handshake returned: (-0x6600) SSL - A field in a message was incorrect or inconsistent with other fields

Fixes: https://github.com/openwrt/openwrt/issues/22874
Fixes: https://github.com/openwrt/openwrt/issues/23116
Fixes: f48ef0040b7e ("mbedtls: update to 3.6.6")
Signed-off-by: Magnus Kroken <mkroken@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/23066
(cherry picked from commit e65001e3e7ce8509ab937f339d92409668c4af9c)
Link: https://github.com/openwrt/openwrt/pull/23362
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 002aa2402850af78e41201e05d71d69ca8b0f606)
2026-08-18 11:40:41 +01:00
Hauke Mehrtens
2937c1bb7d mbedtls: update to 3.6.6
This version fixes some security problems:
 * Client impersonation while resuming a TLS 1.3 session
   (CVE-2026-34873)
 * Entropy on Linux can fall back to /dev/urandom (CVE-2026-34871)
 * PSA random generator cloning (CVE-2026-25835)
 * Compiler-induced constant-time violations (CVE-2025-66442)
 * Null pointer dereference when setting a distinguished name
   (CVE-2026-34874)
 * Buffer overflow in FFDH public key export (CVE-2026-34875)
 * FFDH: lack of contributory behaviour due to improper input validation
   (CVE-2026-34872)
 * Signature Algorithm Injection (CVE-2026-25834)
 * CCM multipart finish tag-length validation bypass (CVE-2026-34876)
 * Risk of insufficient protection of serialized session or context data
   leading to potential memory safety issues (CVE-2026-34877)
 * Buffer underflow in x509_inet_pton_ipv6() (CVE-2026-25833)

Changelog: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.6

Size increases by 470 bytes on aarch64:
343995 bin/packages/aarch64_generic/base/libmbedtls21-3.6.5-r1.apk
344465 bin/packages/aarch64_generic/base/libmbedtls21-3.6.6-r1.apk

Link: https://github.com/openwrt/openwrt/pull/22787
(cherry picked from commit f48ef0040b7e4a80283d0775d397b8a3c66b7275)
Link: https://github.com/openwrt/openwrt/pull/23362
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit c334b9a9d59f2d572da006469976f29989eb2565)
2026-08-18 11:40:41 +01:00
Christian Marangi
65aa72ec74 airoha: an7581: move internal PHY interrupt to specific device DTS
It was discovered that the internal PHY interrupt are not always connected
and PHY link up/down is not correctly detected.

This is the case of the Nokia Valyrian board that suffer from this problem.

To handle this, drop the internal PHY interrupt property from DTSI and add
it only to the Gemtek W1700K DTS where it was reported to work correctly.

(cherry picked from commit 89d8dc13d066e5dc44586e3db670cb8daabf7c23)
[ drop Gemtek W1700K ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit af35693db2ec3faa81ef2042135f14308e9b286d)
2026-08-18 11:40:41 +01:00
Christian Marangi
c303dfe2cd generic: backport new field_prep()/get() helper for non-const bitmask
Backport new field_prep()/get() particularly useful to handle case where a
bitmask is not const and FIELD_PREP can't be used. This permit to replace
manual shift with these macro. (also needed to permit backport of some
patch without modification)

Backport reworked patch that drop the local field_prep()/get() macro in
favor of the global one.

Link: https://github.com/openwrt/openwrt/pull/22479
(cherry picked from commit 25f92aaae1795f992fc288c5c877724249d59296)
[ fix conflict error, drop invalid patch ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 72dbda434454c615979fbd8cc1f25bbd7860f487)
2026-08-18 11:40:41 +01:00
Lorenzo Bianconi
b9a2811f43 airoha: backport some missing airoha_eth upstream patches
Backport more upstream patch to include all the fixes pushed upstream and
add all the preliminary patch for multi-serdes support.

While at it also move 2 patch in the 6xx numbering to the 000-1xx backport
numbering to keep things tidy.

All the affected patch manually and automatically refreshed.

Signed-off-by: Lorenzo Bianconi <lorenzo@kernel.org>
[ add comment, renumber patch, add more patch, fix PCS patch ]
Link: https://github.com/openwrt/openwrt/pull/22479
(cherry picked from commit c5a8ddd0acb3163d3c1a4ef13b9963cc0340557f)
[ fix conflict errors ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 6bbc109633252c04d59c227a6184c47d6637b2f2)
2026-08-18 11:40:41 +01:00
Mikhail Kshevetskiy
cb3f06bc57 airoha: net: fix building for en7523
Latest an7581/an7583 improvements breaks en7523. This patch just fixes
en7523 building.

Signed-off-by: Mikhail Kshevetskiy <mikhail.kshevetskiy@iopsys.eu>
Link: https://github.com/openwrt/openwrt/pull/20365
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit fe31e5c82ad6fbabd44969ac075c57a57c9f796b)
[ fix conflict error, refresh patch ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit fb959f67fe1d3aae796f563edcf93d4514cddd44)
2026-08-18 11:40:41 +01:00
Lorenzo Bianconi
69825981b5 airoha: npu: Init BA memory region if provided via DTS
Initialize NPU Block Ack memory region if reserved via DTS.
Block Ack memory region is used by NPU MT7996 (Eagle) offloading.

Signed-off-by: Lorenzo Bianconi <lorenzo@kernel.org>
Link: https://github.com/openwrt/openwrt/pull/22289
(cherry picked from commit 305f685f83fc1332102273cb09bb386ff1561d94)
[ fix conflict error ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit ecb7f66949bc9c52f5dc506c58f49d9c358add7f)
2026-08-18 11:40:41 +01:00
Aleksander Jan Bajkowski
f894dc95fe airoha: show link rate and duplex
Implement the .get_link_ksettings to get the rate, duplex, and
auto-negotiation status.

Signed-off-by: Aleksander Jan Bajkowski <olek2@wp.pl>
Link: https://github.com/openwrt/openwrt/pull/21530
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 4953db3aeff052223e4588fe892f94a32e917a05)
[ fix conflict error ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 0c77a7d8dd1bdec2e7c1158eadd36ab2743aa227)
2026-08-18 11:40:41 +01:00