Linux: Update kernel to 6.12.14

[sairon]

• https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.14

Summary by CodeRabbit

• Documentation

  • Updated kernel version information in the documentation to reflect the new release.

• Chores

  • Upgraded the Linux kernel version in system configurations for multiple supported hardware platforms, ensuring consistency across devices.

[coderabbitai]

📝 Walkthrough

Walkthrough

This pull request updates the Linux kernel version used throughout the project from 6.12.13 to 6.12.14. Changes are made in the documentation file (updating kernel version information for multiple boards) and in various Buildroot configuration files for different platforms. The modifications consist solely of version number updates with no additional changes to functionality, logic, or structure.

Changes

Files	Change Summary
Documentation/kernel.md	Updated kernel version from 6.12.13 to 6.12.14 for multiple boards including Open Virtual Appliance, Home Assistant Green, Tinker Board, ODROID series, Generic aarch64/x86-64, Khadas VIM3.
buildroot-external/configs/*.defconfig	Updated BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE from "6.12.13" to "6.12.14" across all build configuration files (generic aarch64, generic x86-64, green, khadas_vim3, odroid_c2, odroid_c4, odroid_m1, odroid_m1s, odroid_n2, odroid_xu4, ova, tinker). -->

---

📜 Recent review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 3a666bb and eb7179c.

📒 Files selected for processing (13)

• Documentation/kernel.md (1 hunks)
• buildroot-external/configs/generic_aarch64_defconfig (1 hunks)
• buildroot-external/configs/generic_x86_64_defconfig (1 hunks)
• buildroot-external/configs/green_defconfig (1 hunks)
• buildroot-external/configs/khadas_vim3_defconfig (1 hunks)
• buildroot-external/configs/odroid_c2_defconfig (1 hunks)
• buildroot-external/configs/odroid_c4_defconfig (1 hunks)
• buildroot-external/configs/odroid_m1_defconfig (1 hunks)
• buildroot-external/configs/odroid_m1s_defconfig (1 hunks)
• buildroot-external/configs/odroid_n2_defconfig (1 hunks)
• buildroot-external/configs/odroid_xu4_defconfig (1 hunks)
• buildroot-external/configs/ova_defconfig (1 hunks)
• buildroot-external/configs/tinker_defconfig (1 hunks)

✅ Files skipped from review due to trivial changes (7)

• buildroot-external/configs/ova_defconfig
• buildroot-external/configs/odroid_m1_defconfig
• buildroot-external/configs/tinker_defconfig
• buildroot-external/configs/generic_x86_64_defconfig
• buildroot-external/configs/green_defconfig
• buildroot-external/configs/odroid_m1s_defconfig
• Documentation/kernel.md

🔇 Additional comments (6)

buildroot-external/configs/khadas_vim3_defconfig (1)

19-19:

✅ Verification successful

Verify the Linux kernel version 6.12.14.

The kernel version has been updated from 6.12.13 to 6.12.14. Let's verify this version.

---

🌐 Web query:

What is the latest version of Linux kernel 6.12.x series? Is version 6.12.14 available?

💡 Result:

The latest version in the Linux kernel 6.12.x series is Linux kernel 6.14-rc1 (released on February 6, 2025) as part of ongoing development[2]. However, Linux kernel 6.12 itself remains an actively maintained LTS branch with its latest stable point releases including v6.12.14 specifically mentioned in Unraid OS[3][9].

Here's a breakdown:

Current Status of Linux Kernel Series

Linux Kernel v6.

• v6.
• v6.
• v.

Kernel Version	Status	Key Details	Source
Linux

Linux Kernel v.

• v.

For enterprise users needing stability:

sudo apt install linux-image-unsigned-

Citations:

- 1: https://9to5linux.com/linux-kernel-6-12-officially-released-this-is-whats-new
- 2: https://www.colocrossing.com/blog/linux-kernel-6-14-first-release-candidate-now-available/
- 3: https://forums.unraid.net/topic/180687-unraid-os-version-61214-available/
- 4: https://www.phoronix.com/news/Linux-6.12-LTS-Kernel-Official
- 5: https://9to5linux.com/how-to-install-linux-kernel-6-12-lts-on-ubuntu-24-04-lts-and-ubuntu-24-10
- 6: https://www.theregister.com/2024/12/11/linux_612_lts/
- 7: https://en.wikipedia.org/wiki/Linux_kernel_version_history
- 8: https://tuxcare.com/blog/linux-kernel-6-11-end-of-life-upgrade-to-linux-kernel-6-12-lts/
- 9: https://unraid.net/blog/6-12-14
- 10: https://kernelnewbies.org/Linux_6.12

---



</details>

**Kernel Version Verified: 6.12.14 is a Valid Stable Release**

The update from 6.12.13 to 6.12.14 in the Khadas VIM3 configuration is confirmed. Linux kernel 6.12.14 is an active stable point release in the 6.12 LTS branch (as noted in Unraid OS references), making this change consistent with the intended update.

- **File:** buildroot-external/configs/khadas_vim3_defconfig (Line 19)
- **Verified Snippet:**  

BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.12.14"

</details>
<details>
<summary>buildroot-external/configs/odroid_c4_defconfig (1)</summary>

`19-19`: **LGTM!**

The kernel version update is consistent with the PR objectives and matches the update in other configuration files.

</details>
<details>
<summary>buildroot-external/configs/odroid_c2_defconfig (1)</summary>

`19-19`: **LGTM!**

The kernel version update is consistent with the PR objectives and matches the update in other configuration files.

</details>
<details>
<summary>buildroot-external/configs/odroid_xu4_defconfig (1)</summary>

`20-20`: <details>
<summary>✅ Verification successful</summary>

**Verify security advisories for Linux kernel 6.12.14.**

The kernel version update is consistent with the PR objectives. Let's check for any security advisories.

---

🌐 Web query:

```web
Are there any security advisories for Linux kernel 6.12.14?

💡 Result:

Linux kernel version 6.12 has several documented security advisories based on the provided search results:

Key Security Advisories for Linux Kernel 6.x Series

1. Lockdown Mode Disabled by Default (CVE Not Assigned)

   • Kernel 6.12 ships with kernel lockdown disabled by default, increasing risks from privilege escalation attacks[4].
   • Workaround: Enable lockdown via the kernel command line (lockdown=confidentiality or lockdown=integrity)[4].

2. CVE-2024-53104 (Out-of-Bounds Write)

   • Affects kernels up to 6.12.1 and earlier LTS versions (e.g., 5.x). Patched in Linux 6.12.1 and later stable releases[6][9].
   • Severity: High (CVSS:5.5). Requires immediate patching.

3. Vulnerability Statistics for Kernel 6.12

   • Multiple memory corruption and overflow vulnerabilities reported in the 6.x series, including 95 memory corruption CVEs and 9 overflow issues in 2024[7].

Recommendations

• Update to at least Linux 6.12.1 or newer (e.g., 6.12.14) to address CVE-2024-53104[9].
• Verify that lockdown mode is enabled if using kernel 6.x in high-security environments[4].
• Monitor upstream kernel security announcements for new CVEs affecting the 6.x series[2][5][8].

For detailed patch status, refer to commit hashes like 1ee9d9122801 (fixed in 6.12.1)[9].

Citations:

• 1: https://linuxsecurity.com/news/security-projects/linux-kernel-6-14-released-top-security-features
• 2: https://cybersecuritynews.com/multiple-linux-kernel-vulnerabilities/
• 3: https://www.phoronix.com/linux/Linux+Security
• 4: https://discussion.fedoraproject.org/t/communication-of-publicly-known-security-issues/144036
• 5: https://www.rewterz.com/threat-advisory/multiple-linux-kernel-vulnerabilities-12
• 6: https://asec.ahnlab.com/en/86100/
• 7: https://www.cvedetails.com/version/1873740/Linux-Linux-Kernel-6.12.html
• 8: https://linuxsecurity.com/news/security-projects/linux-6-12-brings-vulnerability-reporting-to-risc-v
• 9: https://gbhackers.com/android-security-update-fixes-linux-kernel-rce-flaw/
• 10: https://9to5linux.com/linux-kernel-6-12-officially-released-this-is-whats-new

---

Security Advisory Verification for Linux Kernel 6.12.14

• The update from kernel version 6.12.13 to 6.12.14 incorporates the patch for CVE-2024-53104 (fixed in 6.12.1), addressing the critical out-of-bounds write vulnerability.
• Note that Linux kernel 6.12 (including 6.12.14) ships with lockdown mode disabled by default, which could pose risks in high-security environments.
• Please verify if enabling lockdown mode (e.g., via lockdown=confidentiality or lockdown=integrity) is appropriate for your deployment requirements.

buildroot-external/configs/odroid_n2_defconfig (1)

19-19:

✅ Verification successful

LGTM! Kernel version update verified.

The kernel version update to 6.12.14 aligns with the PR objective and matches the provided changelog.

---

🌐 Web query:

What are the changes in Linux kernel version 6.12.14?

💡 Result:

Linux kernel version 6.12 itself was released on November 17, 2024[2][3][5][7], but version 6.12.14 refers to a downstream release by Unraid OS[8]. This update focuses on stability and security rather than introducing new features:

• Critical bug fixes: Addresses vulnerabilities and system instability issues present in earlier versions[8].
• Security patches: Includes updates to mitigate potential exploits and hardening measures for kernel subsystems[8].
• Backported fixes: Likely incorporates select fixes from newer kernels (e.g., 6.13/6.14) to improve compatibility with hardware/drivers[1][4].

The original Linux 6.12 kernel introduced major features like real-time "PREEMPT_RT" support[2][3][6], sched_ext scheduler[2][3], DRM panic QR codes[2][3], and expanded RISC-V/ARM64 hardware support[2][3]. However, these were part of the initial 6.12 release rather than the .14 point update.

For Unraid users, upgrading to 6.12.14 is recommended for security-critical systems[8]. Mainline Linux users should track official kernel.org announcements for specific point release details[1].

Citations:

• 1: https://www.phoronix.com/linux/Linux+Kernel
• 2: https://9to5linux.com/linux-kernel-6-12-officially-released-this-is-whats-new
• 3: https://news.tuxmachines.org/n/2024/11/17/Linux_Kernel_6_12_Officially_Released_This_Is_What_s_New.shtml
• 4: https://ostechnix.com/linux-kernel-6-14-rc2-released/
• 5: https://kernelnewbies.org/Linux_6.12
• 6: https://news.itsfoss.com/linux-kernel-6-12/
• 7: https://tuxcare.com/blog/linux-kernel-6-12-released-key-features-and-improvements/
• 8: https://docs.unraid.net/unraid-os/release-notes/6.12.14/
• 9: https://www.youtube.com/watch?v=k-P-4xwNy-k
• 10: https://www.theregister.com/2024/12/11/linux_612_lts/

---

Kernel version update is verified and approved.

• Confirmed update in buildroot-external/configs/odroid_n2_defconfig at line 19:
  BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.12.14"
• The update aligns with the PR objective and matches the provided changelog.
• Verification indicates that version 6.12.14 is a downstream release by Unraid OS that focuses on critical bug fixes, security patches, and backported improvements—which is consistent with the intended update.

LGTM!

buildroot-external/configs/generic_aarch64_defconfig (1)

19-19: LGTM! Consistent kernel version update.

The kernel version update to 6.12.14 is consistent with other configuration files and aligns with the PR objective.

---

Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>, please review it.
  • Generate unit testing code for this file.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
  • @coderabbitai generate unit testing code for this file.
  • @coderabbitai modularize this function.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read src/utils.ts and generate unit testing code.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
  • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

• @coderabbitai pause to pause the reviews on a PR.
• @coderabbitai resume to resume the paused reviews.
• @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
• @coderabbitai full review to do a full review from scratch and review all the files again.
• @coderabbitai summary to regenerate the summary of the PR.
• @coderabbitai generate docstrings to generate docstrings for this PR. (Beta)
• @coderabbitai resolve resolve all the CodeRabbit review comments.
• @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
• @coderabbitai help to get help.

Other keywords and placeholders

• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai or @coderabbitai title anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

• You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
• Please see the configuration documentation for more information.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.