Commit Graph
67742 Commits
Author SHA1 Message Date
Shiji Yang 12d27e860b kernel: bump 6.12 to 6.12.112
Changelog: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.112

Upstream merged patches:
- microchipsw/patches-6.12/0087-v6.17-dmaengine-Add-devm_dma_request_chan.patch[1]

Manually rebased patches:
- generic/backport-6.12/720-05-v6.13-net-phy-mediatek-Move-LED-helper-functions-into-mtk-.patch[2]
- generic/pending-6.12/700-netfilter-nft_flow_offload-handle-netdevice-events-f.patch[3]
- qualcommax/patches-6.12/0185-firmware-qcom_scm-ipq5332-add-support-to-pass-metadata-size.patch[4]
- qualcommax/patches-6.12/0803-firmware-qcom_scm-ipq5332-add-msa-lock-unlock-suppor.patch[4]
- qualcommax/patches-6.12/0811-firmware-qcom_scm-support-MPD.patch[4]

All other patches are automatically refreshed.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=325ee501c55bd4c5a1f0fb283e7d37a1fcc0c04e
[2] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=298fddcfd19422cb09861051ff8f8755e15a1372
[3] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=8274cdc5f9c57e17ed77fc4ba76212536c840f25
[4] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=7265be88c6569c151dec5dbe7298f84be3fab0a6
Signed-off-by: Shiji Yang <yangshiji66@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/25553
(cherry picked from commit fc4c9e6ff7)
Link: https://github.com/openwrt/openwrt/pull/25502
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-10-06 01:45:31 +02:00
Shiji Yang ebe71a07b8 kernel: bump 6.12 to 6.12.111
Changelog: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.111

Upstream merged patches:
- generic/backport-6.12/720-04-v6.13-net-phy-mediatek-Re-organize-MediaTek-ethernet-phy-d.patch[1]
- generic/backport-6.12/751-v7.2-net-dsa-qca8k-add-support-for-force-mode-for-fixed-l.patch[2]
- generic/backport-6.12/941-v7.2-net-dsa-realtek-rtl8365mb-add-support-for-rtl8367sb.patch[3]
- airoha/patches-6.12/220-08-usb-host-add-ARCH_AIROHA-in-XHCI-MTK-dependency.patch[4]

Manually rebased patches:
- ath79/patches-6.12/900-unaligned_access_hacks.patch[5]
- econet/patches-6.12/310-usb-enable-econet-usb.patch[4]

All other patches are automatically refreshed.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=eceb15fbc345b2e9cc1c1aa94baec2af828f6bfc
[2] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1d256b5b49066afdfbf854d866e91d0fdbf7285b
[3] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=9baa7b30dff52e7c0bfa441adf69213410eb932c
[4] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=95d0804351811619c242a96883fa3e6f492dabb6
[5] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=7ecfa46a536578a7ed335ddf31a854127268c27c
Signed-off-by: Shiji Yang <yangshiji66@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/25179
(cherry picked from commit 939a6efb1b)
Link: https://github.com/openwrt/openwrt/pull/25502
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-10-06 01:45:31 +02:00
Shiji Yang c337f787b5 kernel: generic: remove kconfig symbol ARCH_HAS_PTDUMP
This is a CPU architecture specific feature. It will be automatically
selected if CPU support it, and we should not enable it globally.

It is worth noting that in the 6.18 kernel, GENERIC_PTDUMP has already
been renamed[1], but we did not add the new symbol ARCH_HAS_PTDUMP, so
we simply drop GENERIC_PTDUMP.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f9aad622006bd64c28fdf73c03a1c5139fcbf049
Signed-off-by: Shiji Yang <yangshiji66@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/25179
(cherry picked from commit 252773a268)
Link: https://github.com/openwrt/openwrt/pull/25502
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-10-06 01:45:31 +02:00
Shiji Yang 498c40531d kernel: bump 6.12 to 6.12.110
Changelog: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.110

Upstream merged patches:
- generic/backport-6.12/201-v6.13-of-property-add-of_graph_get_next_port.patch[1]
- mvebu/patches-6.12/101-arm64-dts-armada-3720-turris-mox-fix-usb3-phys.patch[2]

Manually rebased patches:
- generic/hack-6.12/200-tools_portability.patch[3]

kconfig symbol changes:
- Rename GENERIC_PTDUMP -> ARCH_HAS_PTDUMP[4]
- Rename PTDUMP_CORE -> PTDUMP[4]

We also reverted the upstream commit[5]
0662b3dd0c61 ("pps-gpio: remove dead capture_clear code") because
bcm27xx target still relies on it.

All other patches are automatically refreshed.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=59d1a468e5e53bc8ca274966ee1935c39e403593
[2] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=ea29992e27417a628caadfb03f0f312f15f24072
[3] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=11bdce7911eba18d96283a212a9b8435cc4b94d2
[4] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=654a60dcc384ae2cb65bbb59d11a3e7c3911b446
[5] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=0662b3dd0c61fced109a08841f4d92f75742c7dd
Signed-off-by: Shiji Yang <yangshiji66@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/25179
(cherry picked from commit 0d3a5dfdf4)
Link: https://github.com/openwrt/openwrt/pull/25502
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-10-06 01:45:31 +02:00
Shiji Yang 4c8e22c44b kernel: bump 6.12 to 6.12.109
Changelog: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.109

All patches are automatically refreshed.

Kconfig symbol changes:
- Remove CRYPTO_DEV_SUN8I_CE_PRNG[1]
- Remove CRYPTO_DEV_SUN8I_SS_PRNG[2]

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=7bb9e6060710eb7b59491d9826169190297adace
[2] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=d29ccf9eeb67d775221e49a079caa1af83427afa
Signed-off-by: Shiji Yang <yangshiji66@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/25179
(cherry picked from commit 5150a2ede1)
Link: https://github.com/openwrt/openwrt/pull/25502
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-10-06 01:45:31 +02:00
Max Plekh 0aaa16fc9e bmips: enetsw: fix probe after EPROBE_DEFER
Since the MAC lookup started returning -EPROBE_DEFER, a probe that
defers while its nvmem provider (e.g. a mac-base cell in the CFE
partition) isn't ready yet leaves the power domain devices attached
by genpd_dev_pm_attach_by_id() behind. The next probe then fails to
re-create them:

  sysfs: cannot create duplicate filename '/devices/genpd:0:1000d800.ethernet'
  bcm6368-enetsw 1000d800.ethernet: error getting pm 0
  bcm6368-enetsw 1000d800.ethernet: probe with driver bcm6368-enetsw failed with error -22

leaving the board without ethernet and the DSA switch deferred forever.
Look up the MAC first, before anything that isn't device-managed has
been set up, so a deferred probe can simply be retried.

Seen on a BCM6328 (BeWAN A2100N) with kernel 6.18.

Fixes: ed545519ee ("bmips: enet: handle EPROBE_DEFER for the MAC address")
Signed-off-by: Max Plekh <mplekh@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/25454
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 81919eb7e4)
Link: https://github.com/openwrt/openwrt/pull/25624
Signed-off-by: Robert Marko <robimarko@gmail.com>
2026-10-05 13:39:01 +02:00
Grische 192a447688 build: fix image headers silently truncated with uutils coreutils
Build/elx-header and Build/znet-header convert a hex string into \xHH
escape sequences using `fold -s2`. This relies on the obsolete -WIDTH
option syntax of GNU fold, which parses "-s2" as "-s -2". uutils
coreutils does not support this syntax and fails with:

  error: unexpected argument '-2' found

    tip: to pass '-2' as a value, use '-- -2'

Since fold writes nothing to stdout in this case, the command
substitution expands to an empty string. The following
`dd bs=N count=1 conv=sync` then writes zero bytes, because conv=sync
only pads partial input blocks and never pads empty input. The header
field is dropped entirely, and all subsequent fields move to lower
offsets.

The build still succeeds, because the failure happens inside the
subshell which is then handed to echo.
The malformed images are only rejected when a device tries to
boot them.

For example, on the Zyxel WSM20, the missing payload size field in the
znet-header moves the 0x12345678 magic and the payload to unexpected
offsets. The bootloader then rejects the image, even though sysupgrade
accepted it.

This affects all builds on Ubuntu 25.10 and later, because these
releases use uutils coreutils by default.

Replace `fold -s2` with `fold -w2`, which is the documented way to set
the line width and produces identical output with GNU fold.

Affected devices:
- Build/znet-header is used in all images of the Zyxel WSM20 and the
  ELECOM WRC-X1800GS
- Build/elx-header is used in the factory images of the ELECOM
  WAB-I1750-PS, WAB-S1167-PS, WAB-S600-PS, WRC-2533GHBK-I and
  WRC-2533GHBK2-T, the I-O DATA WN-AC1167GR, WN-AC733GR3 and WNPR2600G,
  the Edimax RA21S and RG21S, and the D-Link DAP-X1860 A1

Signed-off-by: Grische <github@grische.xyz>
Assisted-by: Claude:claude-opus-5
Link: https://github.com/openwrt/openwrt/pull/25410
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 195c2ce324)
2026-10-04 16:36:55 +02:00
Mario Andrés Pérez 6ea0478bef bcm47xx: base-files: hack sysinfo to allow ASU sysupgrades
This old platform(no DTS) is using nvram numeric fields (or "unknown"
string) for its board_name [1]. Allow ASU sysupgrades by preserving
that value in /tmp/sysinfo/boardtype for board-detection/configuration
logic, and derive a canonical board_name from /tmp/sysinfo/model in
the form "vendor,device-variant".

Only a few target profile image names are not consistent in the last
suffix, uniform them.

A few images with (NA) and (ROW) variants are only meant to be
compatible with the upgrade process in the OEM firmware using these
NETGEAR_BOARD_ID and NETGEAR_REGION fields but the images are
compatibles(only if the NETGEAR_BOARD_ID is shared,due to platform
check) [2] (i.e. netgear_wnr3500l).
Add SUPPORTED_DEVICES to one of these variant in order to allow ASU
sysupgrade profile identification.

*Since this target has never implemented fwtool's SUPPORTED_DEVICES
metadata check, there is no risk of breaking forceless sysupgrade with
new board_name values.

[1]: bcm47xx board info https://github.com/gregkh/linux/blob/master/arch/mips/bcm47xx/board.c
[2]: sysupgrade platform check https://github.com/openwrt/openwrt/blob/main/target/linux/bcm47xx/base-files/lib/upgrade/platform.sh

Fixes: 7d10f2c1e851 "brcm47xx: rework model detection"
Fixes: https://github.com/openwrt/asu/issues/419 (Netgear wnr3500L)
Closes: https://github.com/openwrt/asu/issues/878
Fixes: https://github.com/openwrt/asu/issues/1042 (Asus RT-N16)
Fixes: https://forum.openwrt.org/t/luci-attended-sysupgrade-support-thread/230552/115 (Asus RT-N16)

Signed-off-by: Mario Andrés Pérez <mapb_@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/21147
(cherry picked from commit 6d9b4a4c41)
Link: https://github.com/openwrt/openwrt/pull/25443
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-10-04 16:29:35 +02:00
Mario Andrés Pérez b89e7b9599 layerscape: armv8_64b: traverse ten64-mtd fix ASU support
The profiles.json[1] in generated and used during ASU sysupgrades takes
DEVICE_NAME as profile name which break ASU sysupgrades, use BOARD_NAME
which serves the same goal as overwriting DEVICE_NAME, allowing
sysupgrade-tar's checks be succesfully passed using the old name used in
older installations. Without affecting the generated profiles.json, thus
recovering ASU support.

*Keep the non-stardand device name with suffix "-mtd"(replaced underscore
by hyphen) to remark that this device is also supported in the armsr
(armvirt) target as originally intented[2].
*I think I have fully checked the sysupgrade path to confirm this change
does not have side effects.

[1]: https://downloads.openwrt.org/releases/25.12.0/targets/layerscape/armv8_64b/profiles.json
[2]: https://github.com/openwrt/openwrt/pull/12828
Fixes: af0546da34 ("layerscape: armv8_64b: add Traverse Ten64 NAND variant")
Fixes: https://github.com/openwrt/asu/issues/1583

Reported-by: DanaGoyette (github)
Co-developed-by: Eric Fahlgren <ericfahlgren@gmail.com>
Signed-off-by: Mario Andrés Pérez <mapb_@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/22359
(cherry picked from commit 908c82925c)
Link: https://github.com/openwrt/openwrt/pull/25443
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-10-04 16:29:35 +02:00
Mario Andrés Pérez 1439de1777 imx: cortexa9: ventana, fix profiles names in profiles.json
These two image profiles overwrite DEVICE_NAME making the two image
profiles appear with the same name "ventana" in the "profiles.json"
mixing ramdomly the two profiles.

Use BOARD_NAME instead to keep the two profiles names unique (orginal
DEVICE_NAME) hence generating a coherent "profiles.json".

Since there are image recipes hardconding DEVICE_NAME, change them to use
BOARD_NAME if defined, in order to preserve the previous names used in
those recipes.

Fixes: cbc8bcfbaa ("imx6: image: use vendor_model scheme")

Reported-by: Eric Fahlgren <ericfahlgren@gmail.com>
Signed-off-by: Mario Andrés Pérez <mapb_@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/22994
(cherry picked from commit 0d21956ecd)
Link: https://github.com/openwrt/openwrt/pull/25443
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-10-04 16:29:35 +02:00
Mario Andrés Pérez f3c0b084b1 qualcommbe: ipq95xx: require image metadata for sysupgrade checks
Add the flag required to enforce the fwtool's image metadata checks.
All sysupgrade image recipes on this platform already append the metadata.

Fixes: 93173aee96 ("qualcommbe: ipq95xx: Add initial support for new target")
Signed-off-by: Mario Andrés Pérez <mapb_@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/22010
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit db91c68233)
Link: https://github.com/openwrt/openwrt/pull/25443
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-10-04 16:29:35 +02:00
Hauke Mehrtens 244ed490a2 libiwinfo: update to Git HEAD (2026-05-26)
f35c47d50bf2 devices: add device id for MediaTek MT7921E
6e198d375752 nl80211: fix corrupt scan results from wpa_supplicant
cd7db6194a71 devices: add device id for Qualcomm Technologies QCN6224/9224/9274
66bdd1a07189 devices: add device id for Qualcomm Atheros QCA9994

(cherry picked from commit 81fde127a8)
Link: https://github.com/openwrt/openwrt/pull/25591
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-10-04 16:11:12 +02:00
Ivan Pavlov e594c1dbf3 openssl: update to 3.5.9
Is a security patch release.  The most severe CVE fixed
in this release is High.

This release incorporates the following bug fixes and mitigations:

  * Fixed DTLS retransmissions of handshake messages from a stale buffer offset.
    ([CVE-2026-84782])

  * Fixed excessive memory allocation in relative CRLDP processing.
    ([CVE-2026-35189])

  * Fixed QUIC unvalidated amplification credit may be over-accounted.
    ([CVE-2026-35191])

  * Fixed potential CPU DoS via O(n^2) fragment reassembly in QUIC.
    ([CVE-2026-42772])

  * Fixed a timing side-channel in scalar multiplication for mon-NIST EC curves.
    ([CVE-2026-54872])

  * Fixed QUIC `STREAM` fragment metadata DoS.
    ([CVE-2026-54873])

  * Fixed non-constant-time SM2 scalar multiplication on ARM64 and RISC-V.
    ([CVE-2026-54875])

  * Fixed out-of-bounds access after `SSL_set_SSL_CTX()` during a handshake.
    ([CVE-2026-72897])

  * Fixed QUIC connection-level flow control was not enforced for streams.
    ([CVE-2026-75804])

  * Fixed a NULL pointer dereference in CMP client revocation response handling.
    ([CVE-2026-75805])

  * Fixed an unauthenticated and undersized DTLS 1.2 AEAD record causing DoS.
    ([CVE-2026-75806])

  * Fixed a timing side-channel in SM2 signature generation.
    ([CVE-2026-77696])

  * Fixed an unbounded `RETIRE_CONNECTION_ID` backlog in QUIC stack
    implementation.
    ([CVE-2026-84784])

  * Fixed a bug where `EVP_DecryptFinal()` incorrectly reported a stale success
    on AES-SIV authentication failure.

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>

(cherry picked from commit 5edcc1c43c)
Link: https://github.com/openwrt/openwrt/pull/25558
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-10-04 16:04:09 +02:00
Tianling Shen 60827c1dc2 kselftests-bpf: isolate target userspace compiler flags
Passing target flags through EXTRA_CFLAGS leaks them into kernel
module builds on Linux 6.6 and 6.12, causing ARM hard-float ABI
mismatches in generated module objects. Linux 6.18 also forwards
these flags to host tools, where the host compiler rejects them.

Reuse SAN_CFLAGS, normally used for sanitizer options, to pass
target flags to both userspace selftests and their target libbpf
builds on Linux 6.6, 6.12 and 6.18. Host tools and kernel modules
do not consume this variable. USERCFLAGS would only cover the
selftests, leaving their libbpf builds without the target flags.

This covers the targets built by this package; CROSS_BPFTOOL
does not consume SAN_CFLAGS.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Link: https://github.com/openwrt/openwrt/pull/25345
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 8694449c7a)
Link: https://github.com/openwrt/openwrt/pull/25535
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-10-04 15:49:57 +02:00
Shiji Yang a429d63d59 wireless-regdb: update to version 2026.09.03
Git commit changes:
389b9b7 wireless-regdb: update regulatory database based on preceding changes
8f1e802 wireless-regdb: allow 320MHz channel width for Hong Kong (HK)
74cb99f wireless-regdb: Update 2.4 and 5 GHz rules for South Africa (ZA)
2482838 wireless-regdb: Remove DFS flag from 60 GHz band for Togo (TG)

Signed-off-by: Shiji Yang <yangshiji66@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/25008
(cherry picked from commit 6bfbb7ef9d)
Link: https://github.com/openwrt/openwrt/pull/25589
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-10-04 15:48:44 +02:00
Hauke Mehrtens 93b5c6220e umdns: update to Git HEAD (2026-06-27)
dbee55098c2e Change domain variable to const char* for gcc 15 compatibility

(cherry picked from commit f5d928e52a)
Link: https://github.com/openwrt/openwrt/pull/25589
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-10-04 15:48:44 +02:00
Hauke Mehrtens 61afc164a5 uhttpd: update to Git HEAD (2026-08-03)
f6c2fcfa539d client: cap cumulative header count and bytes per request
4f307a2156f3 client: verify chunk data is followed by CRLF before resyncing
628a073fef44 listen: set IP_FREEBIND so binding to a not-yet-present address works
0910904b75a3 client: reject empty chunk size lines in chunked transfer parsing
893fed8577d7 client: use strict chunk size parsing to fix issue #3
8867514f51fa client: fix parse_chunksize() return type and stale comment
daa5078b959b client: reject invalid header names to prevent request smuggling
69f9cabd0d7d http: use chartypes table consistently, drop ctype.h
003cd188b8f9 http: further consolidate character classification and header parsing
f682ccabee9e client: parse and discard chunked trailer sections, use enum chunked_state
e76736e5676f ubus: guard params type in uh_ubus_send_request()
42e30caa704e ubus: set d->free unconditionally to fix url_path leak
d6205aad6176 client: move unread-body guard into uh_request_done()
3c48b9e17d20 ubus: release client refcount on successful /ubus/subscribe
d0b89eb7c70b utils: strip trailing whitespace from header field-values
067466662368 file: dereference symlinks when looking up MIME type
c54ba119cf54 lua, ucode: use buffered stdio for script output
60f64bec40c8 tls: add SNI-based redirect support

This closes five published security advisories, three of them rated
high: an unauthenticated header-accumulation memory-exhaustion DoS,
an out-of-bounds write via ubus params type confusion, a url_path
leak, a CL.0 request smuggling desync and a leaked client refcount
that wedges the listener.

Fixes: https://github.com/openwrt/uhttpd/issues/3
Fixes: https://github.com/openwrt/uhttpd/issues/5
Fixes: https://github.com/openwrt/uhttpd/issues/10
Fixes: https://github.com/openwrt/uhttpd/issues/11
Fixes: https://github.com/openwrt/uhttpd/issues/14
Fixes: https://github.com/openwrt/uhttpd/issues/17
Closes: https://github.com/openwrt/uhttpd/issues/19
Link: https://github.com/openwrt/uhttpd/security/advisories/GHSA-vhx4-3p5q-m59q
Link: https://github.com/openwrt/uhttpd/security/advisories/GHSA-2mpg-6wp5-435p
Link: https://github.com/openwrt/uhttpd/security/advisories/GHSA-83vv-qrc6-h3hx
Link: https://github.com/openwrt/uhttpd/security/advisories/GHSA-c2wg-hcff-hqrm
Link: https://github.com/openwrt/uhttpd/security/advisories/GHSA-wvgh-cm54-q6f6
Link: https://github.com/openwrt/openwrt/pull/24680
(cherry picked from commit 80de19ea3b)
Link: https://github.com/openwrt/openwrt/pull/25589
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-10-04 15:48:44 +02:00
Hauke Mehrtens 69c6eebf56 mac80211: update to version 6.18.55
The removed patch was integrated upstream.
 * ath9k/341-wifi-ath9k-obtain-system-gpios.patch

Link: https://github.com/openwrt/openwrt/pull/25516
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-10-04 00:47:51 +02:00
Tianling Shen 5545740354 valgrind: fix ARMv7 detection on AArch64
The mvebu target enables CONFIG_CPU_V7 even for AArch64 subtargets,
which also causes CONFIG_arm_v7 to be set. This makes Valgrind use
the ARMv7 configure host triplet on AArch64, breaking the build.

Only apply the ARMv7 host override when ARCH is arm.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Link: https://github.com/openwrt/openwrt/pull/25346
(cherry picked from commit da415b6a69)
Link: https://github.com/openwrt/openwrt/pull/25533
Signed-off-by: Robert Marko <robimarko@gmail.com>
2026-10-03 11:48:07 +02:00
Michael Pfeifroth 15421742a9 wifi-scripts: enforce WPA3 for all encryption types on 6 GHz
The existing 6 GHz auth_type override only covers mixed modes
(psk-sae, eap-eap2), upgrading them to their WPA3 equivalents.
However, if a user configures pure WPA2 (psk or eap) on a 6 GHz
radio, the configuration falls through unchanged and hostapd rejects
it with a confusing error about invalid AKM suite.

Extend the override to also cover pure WPA2 modes:
  - psk / psk-sae -> sae
  - eap / eap-eap2 -> eap2

This matches the existing silent-upgrade pattern and ensures the
radio comes up regardless of which legacy encryption the user
selected.

Signed-off-by: Michael Pfeifroth <micpf@westermo.com>
Link: https://github.com/openwrt/openwrt/pull/23914
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 4fed8d3c79)
Link: https://github.com/openwrt/openwrt/pull/25528
Signed-off-by: Robert Marko <robert.marko@sartura.hr>
2026-10-02 11:47:36 +02:00
Christian Marangi 6ad13aa729 arm-trusted-firmware-airoha: update to Git HEAD (2026-08-20)
b0911074d3cf plat: update closed-source object for AN7581 and AN7583
705478c3d84f plat: add DRAM calibration closed-source object for EN7523

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 14ce351772)
2026-09-30 09:49:49 +02:00
Mikhail Zhilkin b72d70255b arm-trusted-firmware-airoha: update to Git HEAD (2026-08-14)
823d6509db33 plat: flash: add spi-nand W25N01KV support
94892b9e42eb plat: flash: add Gigadevice GD5F2GM7UEYIG SPI NAND

Signed-off-by: Mikhail Zhilkin <csharper2005@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/24654
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit a62b5f1faf)
2026-09-30 09:49:49 +02:00
Robert Marko e8b0f87ba3 arm-trusted-firmware-airoha: fix BL2 packing on Debian 11
Debian 11 ships coreutils 8.32, whose cksum does not support the
-a crc32b option. This leaves crc empty and causes the subsequent shell
arithmetic expression to fail.

Use Python's built-in binascii.crc32 implementation instead. Python 3 is
already required by the OpenWrt build system and produces the same CRC-32
value before the existing final XOR.

Signed-off-by: Robert Marko <robert.marko@sartura.hr>
(cherry picked from commit 831900b41b)
2026-09-30 09:49:48 +02:00
Christian Marangi 88730313a2 packages/boot: add arm-trusted-firmware-airoha
Add support for compiling Airoha ATF, based on a modified version of the
TF-A based on 2.10.

The package will clone the base TF-A and apply the modified source and
pre-compiled objects (DDR calibration, eFUSE handling, TX/RX path...) to
correctly compile.

An helper script is added to implement the same format used for special BL2
handling. BL2 is composed of 3 sub-phase with a initial BL21, a BL22 that
loads a LZMA decompressor and BL23 that actually calibrate and loads BL31
ATF.

Also a special flash_table is used to handle SPI-NAND externally to the
BL2, a special Host target is added for that.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/24257
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit c249552ea5)
2026-09-30 09:49:48 +02:00
Kenneth Kasilag cc2716a6aa airoha: configure FWNODE_PCS
Update the kernel configuration.

FWNODE_PCS is now a user-visible Kconfig option and must be explicitly
configured.

Disable it by default in the generic kernel configuration and enable it
for the Airoha AN7581 and AN7583 subtargets which require PCS firmware
node support.

This prevents non-interactive kernel configuration from failing during
syncconfig.

Signed-off-by: Kenneth Kasilag <kenneth@kasilag.me>
Link: https://github.com/openwrt/openwrt/pull/21019
Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
(cherry picked from commit 40f6298d06)
Link: https://github.com/openwrt/openwrt/pull/24823
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2026-09-30 08:52:31 +02:00
George Moussalem 07671e89b0 generic: update to latest fwnode phylink PCS patches
Backport v7.3 phylink patches to the generic target required for the
latest fwnode phylink PCS patches which support multiple (sub-)targets,
including MTK and qualcommax.

This update includes better PCS release logic, switch to full notifier
add/release PCS handling, devres managed PCS provider variant and
general code improvements.

In addition, update every user to the latest fwnode phylink PCS API.

In the latest API, fwnode_pcs_add_provider() returns a pointer to
the provider or the error code instead of the previous plain return
value. As such, update error handling and add a descriptive error
message upon failure. Also the provider remove logic changed and with
the support of devres API, switch every user to devm_ variant.

Signed-off-by: George Moussalem <george.moussalem@outlook.com>
[ improve commit description, refresh patch, update any driver to new API]
Co-Developed-by: Christian Marangi <ansuelsmth@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/24973
(cherry picked from commit b6a035fc2b)
Link: https://github.com/openwrt/openwrt/pull/24823
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2026-09-30 08:52:31 +02:00
Christian Marangi bcbf4a406a generic: update pending PCS patch with .fill_available_pcs OP
While implementing standalone PCS support for DSA, it was found that making
the MAC driver passing the available_pcs array is limiting and problematic
for memory handling and allocation. To better handle this, change the logic
and make phylink allocate the struct and make the MAC driver implement a
function in phylink_config .fill_available_pcs to fill the PCS array.

Update the Airoha and Mediatek driver to reflect this new implementation.

Link: https://github.com/openwrt/openwrt/pull/23413
(cherry picked from commit 627cd79e1c)
Link: https://github.com/openwrt/openwrt/pull/24823
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2026-09-30 08:52:30 +02:00
Christian Marangi b08e87dd98 airoha: update ethernet node for new PCS implementation
With new PCS implementation, the pcs property needs to be updated to the
new name of 'pcs-handle' to correctly work with PCS fwnode
consumer/provider.

Fixes: 4d5f579a81 ("airoha: update PCS node in DTSI for new PCS implementation")
(cherry picked from commit 953f1aaa93)
Link: https://github.com/openwrt/openwrt/pull/24823
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2026-09-30 08:52:29 +02:00
Christian Marangi c8b8ee607c airoha: update PCS node in DTSI for new PCS implementation
Update the PCS node in AN7581/AN7583 .dtsi for new PCS implementation.

The #pcs-cell is now needed for the produced/consumer implementation.
Also add entry for USB and PCIe PCS for AN7581 but keep them disabled
by default. USB and PCIe PCS for AN7583 node will be added later once PHY
code will stabilize.

Link: https://github.com/openwrt/openwrt/pull/23271
(cherry picked from commit 4d5f579a81)
Link: https://github.com/openwrt/openwrt/pull/24823
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2026-09-30 08:52:29 +02:00
Christian Marangi e95dfc524d airoha: migrate to PCS standalone implementation
Migrate Airoha PCS/Ethernet pending patch to PCS standalone implementation.
This new implementation drop the hack of reading and accessing the dev from
a different device and drop the legacy pcs_create/drop implementation in
favor of fwnode one with a provider/consumer approach.

This is also to sync with the proposed series posted upstream for revision.
The new PCS patch for AN7581 implement full support for USB and PCIe PCS.

The 25.12 variants of 310-10 and 606 are not applicable to this branch and are dropped.

Link: https://github.com/openwrt/openwrt/pull/23271
(cherry picked from commit c5427d4cbe)
Link: https://github.com/openwrt/openwrt/pull/24823
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2026-09-30 08:52:28 +02:00
Christian Marangi 7bb083b6b4 generic: 6.12: backport PCS standalone feature
Backport pending PCS standalone feature for kernel 6.12 and all the
required dependency patch.

All affected patch automatically refreshed.

Link: https://github.com/openwrt/openwrt/pull/23271
(cherry picked from commit e90f3f1f5a)
Link: https://github.com/openwrt/openwrt/pull/24823
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2026-09-30 08:52:28 +02:00
Christian Marangi 67e761fe9e generic: 6.12: backport netdev_from_priv() helper
Backport netdev_from_priv() helper from upstream kernel to reduce patch
delta on backporting new driver and fixes from upstream kernel.

Link: https://github.com/openwrt/openwrt/pull/23849
(cherry picked from commit cdb3dee613)
Link: https://github.com/openwrt/openwrt/pull/24823
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2026-09-30 08:52:27 +02:00
Tianling Shen 7673104ad5 rockchip: import pending naneng ComboPHY RTERM detection fix
Some RK356x ComboPHY revisions can fail to detect the PCIe endpoint
RX termination, leaving the link down before endpoint enumeration.

Import the Rockchip workaround to force the RTERM detection-ready
signal. This restores the RTL8111H PCIe link on a 1 GiB NanoPi R3S.

Link: https://lore.kernel.org/linux-rockchip/1788158204-161347-1-git-send-email-shawn.lin@rock-chips.com/
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Link: https://github.com/openwrt/openwrt/pull/25089
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 12fa348112)
[rebase upon kernel 6.12]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Link: https://github.com/openwrt/openwrt/pull/25347
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-09-26 23:50:48 +02:00
Fredrik Hallin 71118d6522 comgt: add ncm support for Fibocom FG621-EA modem
Add a vendor profile for Fibocom modems so that proto ncm can drive them.
Without it ncm.sh reports UNSUPPORTED_MODEM, as the manufacturer string
returned by AT+CGMI has no matching key in ncm.json.

The FG621-EA is used in the ASUS 4G-AX56 and the TP-Link TL-MR500 v1. The
profile keys off the manufacturer string rather than any particular board,
so it applies to Fibocom NCM modems generally.

ncm.json is installed by comgt-ncm, so bump PKG_RELEASE to make sure
existing installations pick up the new vendor profile on upgrade.

This change originates from PR #19793 by kddred, open in draft since
August 2025 without review. The original commit is authored and signed
off with a GitHub noreply address, which the commit formality check
rejects, so it could not be carried unmodified, and kddred has not been
active since August 2025. Authorship is reassigned for that reason alone;
the work is theirs. Happy to restore the original authorship if a usable
address becomes available.

Tested on an ASUS 4G-AX56 (HW rev A1) on both main and openwrt-25.12.

Link: https://github.com/openwrt/openwrt/pull/19793
Signed-off-by: Fredrik Hallin <fredappsdev@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/24974
Signed-off-by: Jonas Jelonek <jonas@jonasjelonek.de>
(cherry picked from commit 19ff245b92)
Signed-off-by: Fredrik Hallin <fredappsdev@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/25401
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-09-26 23:37:28 +02:00
Ivan Rainbolt c208f29307 mediatek: filogic: light the Internet LED on Cudy WR3000S v1
The WR3000S has a GPIO LED behind its front-panel "Internet" lamp
(white:wan-online, &pio 11), but no board.d entry, so no trigger is ever
set and the lamp stays dark. Give it the same netdev trigger the WR3000H
and WR3000P already use for their white:wan-online LED: follow the link
state of the wan port. As on those boards, "link" means the wan port has
carrier, not that connectivity works.

The panel's WAN and LAN1-4 lamps are not GPIO LEDs and are not registered
as Linux LEDs at all; they light on link in hardware, so board.d cannot
address them and they are untouched here. The -ubootmod variant includes
the same mt7981b-cudy-wr3000s-v1.dtsi, and so the identical LED, and is
listed alongside.

Tested on a WR3000S v1 (OEM layout), on an image built from main at
6727587d24 plus this commit: after a config-wipe sysupgrade the board.d
entry is applied automatically (board.json -> system.led_internet), the
lamp lights while the WAN port has link, and it goes dark when it loses
link. Only the OEM-layout variant was flashed.

Signed-off-by: Ivan Rainbolt <ivan@github.ivanthegeek.com>
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Link: https://github.com/openwrt/openwrt/pull/25335
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit bafaf2665a)
Link: https://github.com/openwrt/openwrt/pull/25336
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-09-26 23:34:06 +02:00
Fengyu Wu 8771bd0dfb ca-certificates: update to 20260816
changelog: https://salsa.debian.org/debian/ca-certificates/-/blob/master/debian/changelog

  * Update Mozilla certificate authority bundle to version 2.90
    The following certificate authorities were added (+):
    + "SECOM TLS ECC Root CA 2024"
    + "SECOM TLS RSA Root CA 2024"
    + "Telia EC TLS Root CA v3"
    + "Telia RSA TLS Root CA v3"
    The following certificate authorities were removed (-):
    - "Atos TrustedRoot 2011"
    - "Entrust Root Certification Authority"
    - "SecureSign Root CA12"
    - "ePKI Root Certification Authority"

Signed-off-by: Fengyu Wu <saldry@proton.me>
Link: https://github.com/openwrt/openwrt/pull/24839
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 7484295381)
Link: https://github.com/openwrt/openwrt/pull/25324
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-09-26 23:28:35 +02:00
Nick Hainke 3fbd5a8e73 tools/expat: update to 2.7.5
Changelog:
https://github.com/libexpat/libexpat/blob/R_2_7_5/expat/Changes

Fixes: CVE-2026-32776 CVE-2026-32777 CVE-2026-32778
Link: https://github.com/openwrt/openwrt/pull/23007
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 76928eb34a)
Link: https://github.com/openwrt/openwrt/pull/25328
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-09-26 23:26:29 +02:00
Nick Hainke e4a0481538 tools/expat: update to 2.7.4
Changelog:
https://github.com/libexpat/libexpat/blob/R_2_7_4/expat/Changes

Fixes: CVE-2026-24515 CVE-2026-25210
Link: https://github.com/openwrt/openwrt/pull/21907
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 274e9aff7c)
Link: https://github.com/openwrt/openwrt/pull/25328
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-09-26 23:26:29 +02:00
Hauke Mehrtens c9e33c7467 openssl: drop the AES-GCM-SIV part of the zero-length message patch
OpenSSL 3.5.8 fixes zero-length message handling for AES-GCM-SIV
upstream with commit bdeb0cd994d9 ("Check the tag on EVP_Cipher()
finalize: Poly1305 and OCB AEADs", CVE-2026-75803, backport of
5741d29a5f35): aes_gcm_siv_finish() now generates the tag when the
finalization is the first empty-message operation.

That makes the cipher_aes_gcm_siv.c hunk of our local patch redundant,
and worse than redundant. By substituting the address of an empty
object for the NULL input pointer it keeps routing the terminal
EVP_Cipher(ctx, out, NULL, 0) call to aes_gcm_siv_encrypt()/
aes_gcm_siv_decrypt() instead of aes_gcm_siv_finish(), so the tag
supplied by the caller is never compared and a forged tag is accepted.
That is the hole the upstream commit closes.

Measured against a locally built 3.5.8; the EVP_Cipher() return value
is a byte count, so 0 means the tag was accepted and -1 means it was
rejected:

                       decrypt empty msg      EVP_Cipher(out, NULL, 0)
                       genuine    forged      genuine    forged
  3.5.8 vanilla        ok         rejected      0          -1
  3.5.8 + patch 010    ok         rejected      0           0  <- bad
  3.5.8 + this commit  ok         rejected      0          -1

AES-SIV has no equivalent fix in 3.5.8 or in openssl master, and
without the second hunk a zero-length message cannot be encrypted at
all, so keep that hunk and rename the patch to match what is left.

Fixes: 2bc7978323 ("openssl: fix AES-GCM-SIV and AES-SIV with zero-length messages")
Assisted-by: Claude:claude-opus-5
Link: https://github.com/openwrt/openwrt/pull/24944
(cherry picked from commit bacf308ec0)
Link: https://github.com/openwrt/openwrt/pull/25326
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-09-26 23:23:34 +02:00
Peter Polonec 7ac5eaf362 openssl: update to 3.5.8
Update OpenSSL to 3.5.8, a security patch release.

This fixes:
- CVE-2026-18798
- CVE-2026-63072
- CVE-2026-63076
- CVE-2026-14456
- CVE-2026-14457
- CVE-2026-54874
- CVE-2026-63073
- CVE-2026-63074
- CVE-2026-63075
- CVE-2026-75803

Link: https://openssl-library.org/news/secadv/20260825.txt
Signed-off-by: Peter Polonec <polonec.devel@pm.me>
Link: https://github.com/openwrt/openwrt/pull/24915
(cherry picked from commit 78f136f03d)
Link: https://github.com/openwrt/openwrt/pull/25326
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-09-26 23:22:14 +02:00
Vitaliy Sochnev 44b73b738d airoha: an7583: add USB nodes to SoC dtsi
Add the xHCI controller and the USB PHY node. The single controller
exposes two USB 2.0 ports and one USB 3.0 port, all served by one PHY
block: two U2 subnodes at offset 0x0/0x1000 and one U3 subnode that
needs the SCU to switch the shared serdes between USB and HSGMII.

Both nodes are left disabled, boards enable them as needed.

Signed-off-by: Vitaliy Sochnev <sochnev.v.74@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/24609
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit afc8753821)
Link: https://github.com/openwrt/openwrt/pull/25320
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2026-09-25 09:06:29 +02:00
Julius Bairaktaris cf3a79a511 airoha: add the missing PHY_AIROHA_AN7583_PCIE config symbol
The AN7583 PCIe PHY driver adds a Kconfig symbol that neither subtarget
config carries, so syncconfig prompts for it and every airoha kernel
build fails. Enable it on an7583 and leave it off on an7581.

Fixes: 443e267bdb ("airoha: add support for AN7583 PCIe Gen3 PHY")
Signed-off-by: Julius Bairaktaris <julius@bairaktaris.de>
Assisted-by: Claude:Opus 5
Link: https://github.com/openwrt/openwrt/pull/25132
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit e59c787622)
Link: https://github.com/openwrt/openwrt/pull/25320
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2026-09-25 09:06:29 +02:00
Christian Marangi 0fdde70113 airoha: add support for AN7583 PCIe Gen3 PHY
Add support for the PCIe required to make the PCIe Gen3 Controller work for
Airoha AN7583 SoC. To correctly work both the PCIe PHY and the QPHY needs
to be configured or PCIe card will fail to train and detect.

Automatically refresh any affected patch.

(cherry picked from commit 443e267bdb)
Link: https://github.com/openwrt/openwrt/pull/25320
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2026-09-25 09:06:28 +02:00
Vitaliy Sochnev 56da8deffa airoha: add support for AN7583 USB PHY
The AN7581 USB PHY driver can't be reused on AN7583: the SoC has a
single USB PHY block driving two U2 ports and one U3 port, and both the
PLL init sequence and the U3 calibration differ.

Add the AN7583 USB PHY driver from Christian Marangi, with the PCIe PHY
part dropped (the AN7583 PCIe serdes has no DT node yet) and five bugs
fixed: an uninitialized "ret" passed to dev_err_probe(); a NULL check on
syscon_regmap_lookup_by_phandle(), which returns an ERR_PTR on failure;
a missing per-instance offset in u2_set_mode(), which made it write the
first U2 port's register regardless of the PHY it was called on; an
off-by-one bound in parse_subnode() allowing a write past the end of
priv->phys[]; and a discarded return value in phy_init(), which
swallowed the U3 calibration failure reported by u3_init().

Enable the driver on the an7583 subtarget. The an7581 subtarget keeps
its own PHY_AIROHA_USB driver untouched.

Signed-off-by: Vitaliy Sochnev <sochnev.v.74@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/24609
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 38ac788893)
Link: https://github.com/openwrt/openwrt/pull/25320
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2026-09-25 09:06:28 +02:00
Vitaliy Sochnev d212cd4adc airoha: an7583: add DT binding for AN7583 USB PHY
The airoha,an7583-usb-phy compatible added by the USB PHY driver had no
matching binding document. The AN7581 equivalent ships one as a separate
patch (220-05), which is also where the AIROHA_USB2_MONCLK_SEL* defines
used by an7583.dtsi come from.

The AN7583 binding is not simply "same as AN7581": the SoC has a single
PHY block with four named reg regions, per-port child nodes carrying
node itself.

The AIROHA_USB2_MONCLK_SEL* defines are reused from the AN7581 binding
header, as the values are identical on AN7583.

Signed-off-by: Vitaliy Sochnev <sochnev.v.74@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/24609
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit ec50342362)
Link: https://github.com/openwrt/openwrt/pull/25320
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2026-09-25 09:06:27 +02:00
Sheikh Faisal e73b5f91a3 mediatek: filogic: fix SPI-NAND write failures on JioRouter AX6000
Currently, sysupgrade silently fails to erase or write to the SPI-NAND
flash on the JioRouter AX6000. This is caused by the SPI pinctrl group
mistakenly using `bias-disable`, which leaves the flash chip's hardware
HOLD and Write Protect (#WP) pins floating.

When combined with an upstream kernel regression that accidentally
arms the #HOLD function on Winbond W25N0xKV chips, these floating pins
drop low (often exacerbated by UART noise). This pauses the chip and
causes all flash operations to silently fail while returning success.

Fix this by properly configuring `bias-pull-up = <MTK_PUPD_SET_R1R0_11>`
for `SPI2_CS`, `SPI2_HOLD`, and `SPI2_WP`, ensuring the flash chip
remains electrically unpaused and unlocked. Additionally, apply
`bias-pull-down` to the clock and data lines to match MediaTek reference
designs.

Signed-off-by: Sheikh Faisal <sheikhfaisal713@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/25122
(cherry picked from commit 817b17cc34)
Link: https://github.com/openwrt/openwrt/pull/25095
Signed-off-by: Jonas Jelonek <jonas@jonasjelonek.de>
2026-09-22 21:45:49 +02:00
Sheikh Faisal 363256ce99 mediatek: add support for JioRouter AX6000 JIDU6J01
| Component        | Details                                        |
|------------------|------------------------------------------------|
| **SoC**          | MediaTek MT7986A (4× ARM Cortex-A53 @ 2.0 GHz) |
| **RAM**          | 512 MB                                         |
| **Flash**        | 256 MB NAND                                    |
| **Ethernet**     | 5× 10/100/1000 Mbps (1 WAN + 4 LAN)            |
| **WLAN 2.4 GHz** | MediaTek MT7976GN — 802.11b/g/n/ax, 4×4 MIMO   |
| **WLAN 5 GHz**   | MediaTek MT7976AN — 802.11n/ac/ax, 4×4 MIMO    |
| **LEDs**         | 1× RGB LED (GPIO-controlled)                   |
| **Button**       | 1× Reset                                       |
| **USB**          | Yes                                            |

**MAC Addresses:**

| Interface  | Source                                          |
|------------|-------------------------------------------------|
| WAN/Label  | MFG MTD partition (variant-specific fallback)   |
| LAN        | WAN + 1                                         |
| 2.4 GHz    | WAN + 2                                         |
| 5 GHz      | WAN + 3                                         |

Supported variants and MAC source:
- JIDU6J01,JIDU6201: binary at offset 0x00
- JIDU6401: binary at offset 0x20
- JIDU6601: ASCII text at offset 0x1d0
- JIDU6701: ASCII mac= key

---

**1. Extracting U-Boot Credentials**
The U-Boot username and password are stored in the `MFG` partition. To retrieve them:
- With root access on stock OS: Read directly from the MFG partition.
- Without root access: Dump the NAND flash first, then extract the credentials from the dump.

**2. Prepare TFTP server**
- Set a static IP on the ethernet interface of your computer
  (e.g. default: ip `192.168.1.2`, gateway `192.168.1.1`).
- Download the initramfs image and host it with the TFTP server.

**3. Interrupt boot**

Attach UART and power on the router. When the boot menu appears, select **Failsafe Mode**,
then press `Ctrl-C` to interrupt and enter the credentials extracted from `MFG` partition.

**4. Load and run initramfs image**
```sh
setenv ipaddr 192.168.1.1
setenv serverip 192.168.1.2
tftpboot 0x46000000 openwrt-mediatek-filogic-jiorouter_ax6000-jidu6j01-initramfs-kernel.bin
fdt addr $(fdtcontroladdr)
fdt rm /signature
bootm
```

**5. Flash sysupgrade image**

Place the sysupgrade image in `/tmp`, then run:
```sh
sysupgrade /tmp/openwrt-mediatek-filogic-jiorouter_ax6000-jidu6j01-squashfs-sysupgrade.bin
```
Alternatively, use the sysupgrade option in LuCI.

Signed-off-by: Sheikh Faisal <sheikhfaisal713@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/23510
(cherry picked from commit 552e617bd0)
Link: https://github.com/openwrt/openwrt/pull/25095
Signed-off-by: Jonas Jelonek <jonas@jonasjelonek.de>
2026-09-22 21:45:49 +02:00
Sheikh Faisal 1017574c7a mediatek: filogic: drop kmod-mt7916-firmware from JIDU6101
This device uses MT7976 radios and does not use the MT7916 blob.
Drop the unnecessary firmware package.

Signed-off-by: Sheikh Faisal <sheikhfaisal713@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/23510
(cherry picked from commit 42eab6a9d3)
Link: https://github.com/openwrt/openwrt/pull/25095
Signed-off-by: Jonas Jelonek <jonas@jonasjelonek.de>
2026-09-22 21:45:49 +02:00
Sheikh Faisal 608b0769c6 mediatek: fix U-Boot env geometry for JioRouter AX6000 JIDU6101
Correct the U-Boot env geometry from "0x80000" "1" to "0x1f000" "5".
The correct LEB size for 128k PEB / 2k page is 0x1f000, and the 0x80000 volume spans 5 LEBs.

This also hardens jiorouter_initial_setup by adding proper error handling
and dynamic UBI device/volume lookups, and generates /etc/fw_env.config to be consistent.

Signed-off-by: Sheikh Faisal <sheikhfaisal713@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/23510
(cherry picked from commit dcb5ede455)
Link: https://github.com/openwrt/openwrt/pull/25095
Signed-off-by: Jonas Jelonek <jonas@jonasjelonek.de>
2026-09-22 21:45:48 +02:00
John Audia 03be7efbab wireguard-tools: bump to 20260223
% git shortlog v1.0.20250521..v1.0.20260223

Doug Freed (1):
      wg-quick@.service: add deps on wg-quick.target

Jason A. Donenfeld (8):
      wg-quick: linux: use smallest mtu, not largest
      syncconf: account for psks removed from config file
      wg-quick: linux: deal with resolvconf migration more gracefully
      wg-quick: use addconf instead of setconf
      wg-quick: linux: do not unnecessarily set sysctl
      config: preserve const correctness
      syncconf: account for persistent keepalive removed from config file
      version: bump

Robyn Kosching (1):
      wg-quick: pass on # comments to {Pre,Post}{Up,Down}

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <therealgraysky@proton.me>
Link: https://github.com/openwrt/openwrt/pull/22190
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit eda2630ceb)
Signed-off-by: Sander van Deijck <sander@vandeijck.com>
Link: https://github.com/openwrt/openwrt/pull/24666
Signed-off-by: Robert Marko <robimarko@gmail.com>
2026-09-21 13:33:42 +02:00