Review Results

Comment

The only change in this .SRCINFO diff is a version bump from 7.3.pf1 to 7.3.pf2. There are no changes to source URLs, checksums, build steps, install scripts, dependencies, or packaging behavior. On its face this is a routine upstream version update with no security-relevant red flags in the provided hunk.

@@ -1,6 +1,6 @@
 pkgbase = linux-pf
 	pkgdesc = pf-kernel
-	pkgver = 7.3.pf1
+	pkgver = 7.3.pf2
 	pkgrel = 1
 	url = https://pfkernel.natalenko.name
 	arch = x86_64

Comment

The change only updates the pinned upstream tarball revision and its corresponding B2 checksum in .SRCINFO. The source remains an HTTPS Codeberg archive URL, there are no new build steps, scripts, or packaging directives, and no evidence of added network access, privilege escalation, or persistence mechanisms. This is a routine version bump with integrity metadata updated accordingly.

@@ -26,10 +26,10 @@ pkgbase = linux-pf
 	makedepends = zstd
 	options = !debug
 	options = !strip
-	source = https://codeberg.org/pf-kernel/linux/archive/90ca6ced047fbab83d9f9f1c5d83b23f7f60734d.tar.gz
+	source = https://codeberg.org/pf-kernel/linux/archive/8bf2dbc059c3d7dbc881f9d93d015cdb5e01959b.tar.gz
 	source = config
 	b2sums = SKIP
-	b2sums = 216a9ea28f2ddd3595fe52aeebd315298f7e6723d6a72808cafd747e3040fbfdda8786c5a1ae79872bb43b7f86bca9c6f9fe4a2519696f5af60c33c5a914250b
+	b2sums = 0e01b3bbdf0673038ed63be4017e0b40b659dce89d3b9213e69358801ef45a441e72a96f1daacad141f1fdec4e8ff095cd10207dea11c1400ad6e489f7ba8987
 
 pkgname = linux-pf
 	pkgdesc = The pf-kernel and modules

Comment

The change only bumps the pinned upstream kernel revision and package version, and updates the corresponding B2 checksum. The source remains an HTTPS tarball from the upstream Codeberg repository, with no new build-time downloads, scripts, or packaging logic changes. No additional persistence, privilege escalation, or integrity red flags are introduced by this diff alone.

@@ -3,8 +3,8 @@
 pkgbase="linux-pf"
 _suffix=""
 pkgname=(${pkgbase}${_suffix} ${pkgbase}-headers${_suffix})
-_rev=90ca6ced047fbab83d9f9f1c5d83b23f7f60734d
-pkgver=7.3.pf1
+_rev=8bf2dbc059c3d7dbc881f9d93d015cdb5e01959b
+pkgver=7.3.pf2
 pkgrel=1
 pkgdesc="pf-kernel"
 arch=(x86_64)

Comment

The change only updates the pinned upstream kernel revision and its corresponding b2 checksum in PKGBUILD. The source remains an HTTPS Codeberg archive, there are no new build steps, no added network fetches, and no suspicious packaging changes (install scripts, permissions, or systemd units) in this diff. Risk is low; the main trust question is simply whether the new upstream commit is legitimate, but that is outside the scope of this patch review.

@@ -15,7 +15,7 @@ options=(!debug !strip)
 source=(https://codeberg.org/pf-kernel/linux/archive/${_rev}.tar.gz
 		config)
 b2sums=(SKIP
-		'216a9ea28f2ddd3595fe52aeebd315298f7e6723d6a72808cafd747e3040fbfdda8786c5a1ae79872bb43b7f86bca9c6f9fe4a2519696f5af60c33c5a914250b')
+		'0e01b3bbdf0673038ed63be4017e0b40b659dce89d3b9213e69358801ef45a441e72a96f1daacad141f1fdec4e8ff095cd10207dea11c1400ad6e489f7ba8987')
 
 export KBUILD_BUILD_HOST=archlinux
 export KBUILD_BUILD_USER=${pkgbase}

Comment

The only change in this hunk is a version-string bump in the generated kernel config header from pf1 to pf2. There are no source URL, build-script, install-script, or privilege-related changes here, and no evidence of added network access, persistence, or packaging abuse. This appears to be a benign metadata/version update.

@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 7.3.0-pf1 Kernel Configuration
+# Linux/x86 7.3.0-pf2 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="gcc (GCC) 16.2.1 20260810"
 CONFIG_CC_IS_GCC=y

Comment

The change only adds a kernel config symbol, CONFIG_RUSTC_HAS_APXF=y, in the shipped config file. This is a build-time configuration toggle, not an install script, source fetch, or executable payload. I see no evidence in the provided diff of network access, privilege escalation, persistence, or other supply-chain risk. Based on the single hunk reviewed, this appears low risk.

@@ -450,6 +450,7 @@ CONFIG_ACRN_GUEST=y
 CONFIG_BHYVE_GUEST=y
 CONFIG_INTEL_TDX_GUEST=y
 CONFIG_CC_HAS_MARCH_NATIVE=y
+CONFIG_RUSTC_HAS_APXF=y
 # CONFIG_X86_NATIVE_CPU is not set
 CONFIG_X86_64_ISA_LEVEL=1
 CONFIG_X86_INTERNODE_CACHE_SHIFT=6

Comment

The change only enables an additional in-tree Linux kernel TCP congestion control module (BBR3) in the kernel config. This does not introduce build-time downloads, privilege escalation, persistence, or packaging integrity issues. It is a normal feature toggle with no suspicious source or script changes.

@@ -1481,6 +1482,7 @@ CONFIG_TCP_CONG_ILLINOIS=m
 CONFIG_TCP_CONG_DCTCP=m
 CONFIG_TCP_CONG_CDG=m
 CONFIG_TCP_CONG_BBR=m
+CONFIG_TCP_CONG_BBR3=m
 CONFIG_DEFAULT_CUBIC=y
 # CONFIG_DEFAULT_RENO is not set
 CONFIG_DEFAULT_TCP_CONG="cubic"

Comment

The change only disables CONFIG_MEDIA_SUBDRV_AUTOSELECT in the kernel config. This reduces automatic selection of media subdrivers and does not introduce any new code execution, network access, privilege escalation, or packaging/install-script behavior. I found no security-relevant red flags in this diff hunk.

@@ -6306,7 +6308,7 @@ CONFIG_USB_RAINSHADOW_CEC=m
 
 CONFIG_MEDIA_SUPPORT=m
 CONFIG_MEDIA_SUPPORT_FILTER=y
-CONFIG_MEDIA_SUBDRV_AUTOSELECT=y
+# CONFIG_MEDIA_SUBDRV_AUTOSELECT is not set
 
 #
 # Media device types

Comment

The change only removes a kernel config option that hid ancillary media subdrivers and deletes a comment about IR I2C autoselection. It does not introduce new code, scripts, network activity, privilege changes, or packaging behavior. This is a low-risk configuration tweak with no obvious security impact in the AUR packaging context.

@@ -6774,16 +6776,10 @@ CONFIG_VIDEOBUF2_DMA_SG=m
 CONFIG_VIDEOBUF2_DVB=m
 # end of Media drivers
 
-CONFIG_MEDIA_HIDE_ANCILLARY_SUBDRV=y
-
 #
 # Media ancillary drivers
 #
 CONFIG_MEDIA_ATTACH=y
-
-#
-# IR I2C driver auto-selected by 'Autoselect ancillary drivers'
-#
 CONFIG_VIDEO_IR_I2C=m
 CONFIG_VIDEO_CAMERA_SENSOR=y
 CONFIG_VIDEO_APTINA_PLL=m

Comment

The change only expands the kernel config to enable additional V4L2/I2C media drivers (mostly as modules) and related CEC support. I don’t see any supply-chain, persistence, privilege-escalation, or build-time execution risk in this diff: no scripts, no downloads, no package install logic, and no suspicious metadata changes. The new options are standard upstream kernel driver symbols and remain modular, so the impact is limited to a broader kernel attack surface at runtime, which is expected for a kernel config change and not inherently malicious.

@@ -6893,39 +6889,113 @@ CONFIG_VIDEO_LM3646=m
 # end of Flash devices
 
 #
-# audio, video and radio I2C drivers auto-selected by 'Autoselect ancillary drivers'
+# Audio decoders, processors and mixers
 #
 CONFIG_VIDEO_CS3308=m
 CONFIG_VIDEO_CS5345=m
 CONFIG_VIDEO_CS53L32A=m
 CONFIG_VIDEO_MSP3400=m
 CONFIG_VIDEO_SONY_BTF_MPX=m
+CONFIG_VIDEO_TDA1997X=m
 CONFIG_VIDEO_TDA7432=m
 CONFIG_VIDEO_TDA9840=m
 CONFIG_VIDEO_TEA6415C=m
 CONFIG_VIDEO_TEA6420=m
+CONFIG_VIDEO_TLV320AIC23B=m
 CONFIG_VIDEO_TVAUDIO=m
 CONFIG_VIDEO_UDA1342=m
 CONFIG_VIDEO_VP27SMPX=m
 CONFIG_VIDEO_WM8739=m
 CONFIG_VIDEO_WM8775=m
+# end of Audio decoders, processors and mixers
+
+#
+# RDS decoders
+#
 CONFIG_VIDEO_SAA6588=m
+# end of RDS decoders
+
+#
+# Video decoders
+#
+CONFIG_VIDEO_ADV7180=m
+CONFIG_VIDEO_ADV7183=m
+CONFIG_VIDEO_ADV7604=m
+CONFIG_VIDEO_ADV7604_CEC=y
+CONFIG_VIDEO_ADV7842=m
+CONFIG_VIDEO_ADV7842_CEC=y
+CONFIG_VIDEO_BT819=m
+CONFIG_VIDEO_BT856=m
+CONFIG_VIDEO_BT866=m
+CONFIG_VIDEO_ISL7998X=m
+CONFIG_VIDEO_LT6911UXE=m
+CONFIG_VIDEO_KS0127=m
+CONFIG_VIDEO_MAX9286=m
+CONFIG_VIDEO_ML86V7667=m
+CONFIG_VIDEO_SAA7110=m
 CONFIG_VIDEO_SAA711X=m
+CONFIG_VIDEO_TC358743=m
+CONFIG_VIDEO_TC358743_CEC=y
+CONFIG_VIDEO_TC358746=m
+CONFIG_VIDEO_TVP514X=m
 CONFIG_VIDEO_TVP5150=m
+CONFIG_VIDEO_TVP7002=m
 CONFIG_VIDEO_TW2804=m
+CONFIG_VIDEO_TW9900=m
 CONFIG_VIDEO_TW9903=m
 CONFIG_VIDEO_TW9906=m
+CONFIG_VIDEO_TW9910=m
+CONFIG_VIDEO_VPX3220=m
 
 #
 # Video and audio decoders
 #
 CONFIG_VIDEO_SAA717X=m
 CONFIG_VIDEO_CX25840=m
+# end of Video decoders
+
+#
+# Video encoders
+#
+CONFIG_VIDEO_ADV7170=m
+CONFIG_VIDEO_ADV7175=m
+CONFIG_VIDEO_ADV7343=m
+CONFIG_VIDEO_ADV7393=m
+CONFIG_VIDEO_ADV7511=m
+CONFIG_VIDEO_ADV7511_CEC=y
+CONFIG_VIDEO_AK881X=m
 CONFIG_VIDEO_SAA7127=m
+CONFIG_VIDEO_SAA7185=m
+CONFIG_VIDEO_THS8200=m
+# end of Video encoders
+
+#
+# Video improvement chips
+#
 CONFIG_VIDEO_UPD64031A=m
 CONFIG_VIDEO_UPD64083=m
+# end of Video improvement chips
+
+#
+# Audio/Video compression chips
+#
 CONFIG_VIDEO_SAA6752HS=m
+# end of Audio/Video compression chips
+
+#
+# SDR tuner chips
+#
+# end of SDR tuner chips
+
+#
+# Miscellaneous helper chips
+#
+CONFIG_VIDEO_INTEL_CVS=m
+CONFIG_VIDEO_I2C=m
 CONFIG_VIDEO_M52790=m
+CONFIG_VIDEO_ST_MIPID02=m
+CONFIG_VIDEO_THS7303=m
+# end of Miscellaneous helper chips
 
 #
 # Video serializers and deserializers

Comment

The change only removes a comment block from the kernel config file and does not alter any actual configuration symbols, build behavior, dependencies, or install-time actions. There are no security-relevant effects visible in this hunk.

@@ -6934,10 +7004,6 @@ CONFIG_VIDEO_MAX96717=m
 # end of Video serializers and deserializers
 
 #
-# SPI I2C drivers auto-selected by 'Autoselect ancillary drivers'
-#
-
-#
 # Media SPI Adapters
 #
 CONFIG_CXD2880_SPI_DRV=m

Comment

The change is a comment-only edit in the kernel config, renaming the section header from an autogenerated note to a generic label. It does not alter any CONFIG_* values, build steps, sources, install scripts, or runtime behavior. No security impact is evident from this diff hunk alone.

@@ -6947,7 +7013,7 @@ CONFIG_VIDEO_GS1662=m
 CONFIG_MEDIA_TUNER=m
 
 #
-# Tuner drivers auto-selected by 'Autoselect ancillary drivers'
+# Customize TV tuners
 #
 CONFIG_MEDIA_TUNER_E4000=m
 CONFIG_MEDIA_TUNER_FC0011=m

Comment

The reviewed hunk only enables an additional kernel module, CONFIG_MEDIA_TUNER_MSI001=m, in the shipped kernel config. This is a normal upstream kernel feature toggle with no evidence of malicious build logic, network access, privilege escalation, or persistence mechanisms. No integrity or packaging red flags are introduced by this single-line config change.

@@ -6958,6 +7024,7 @@ CONFIG_MEDIA_TUNER_IT913X=m
 CONFIG_MEDIA_TUNER_M88RS6000T=m
 CONFIG_MEDIA_TUNER_MAX2165=m
 CONFIG_MEDIA_TUNER_MC44S803=m
+CONFIG_MEDIA_TUNER_MSI001=m
 CONFIG_MEDIA_TUNER_MT2060=m
 CONFIG_MEDIA_TUNER_MT2063=m
 CONFIG_MEDIA_TUNER_MT20XX=m

Comment

This change only edits comments in the kernel config file, renaming/adding section headers around TV tuner and DVB frontend options. It does not alter any enabled features, build logic, sources, scripts, permissions, or runtime behavior. No security-relevant impact is evident from the diff hunk provided.

@@ -6985,9 +7052,10 @@ CONFIG_MEDIA_TUNER_TUA9001=m
 CONFIG_MEDIA_TUNER_XC2028=m
 CONFIG_MEDIA_TUNER_XC4000=m
 CONFIG_MEDIA_TUNER_XC5000=m
+# end of Customize TV tuners
 
 #
-# DVB Frontend drivers auto-selected by 'Autoselect ancillary drivers'
+# Customise DVB Frontends
 #
 
 #

Comment

The change only enables an additional Linux kernel DVB driver option (CONFIG_DVB_DIB9000=m) in the kernel config. This is a normal feature toggle in a kernel package configuration and does not introduce any build-time downloads, scripts, privilege changes, persistence mechanisms, or suspicious packaging behavior. No security-relevant issues are evident from this diff hunk alone.

@@ -7055,6 +7123,7 @@ CONFIG_DVB_DIB3000MB=m
 CONFIG_DVB_DIB3000MC=m
 CONFIG_DVB_DIB7000M=m
 CONFIG_DVB_DIB7000P=m
+CONFIG_DVB_DIB9000=m
 CONFIG_DVB_DRXD=m
 CONFIG_DVB_EC100=m
 CONFIG_DVB_GP8PSK_FE=m

Comment

The change only enables an additional Linux kernel DVB driver module (CONFIG_DVB_S5H1432=m) in the package config. This is a standard kernel configuration toggle, does not introduce build-time downloads, scripts, privilege changes, or packaging/install-time behavior, and there are no obvious supply-chain or persistence concerns in this hunk.

@@ -7063,6 +7132,7 @@ CONFIG_DVB_MT352=m
 CONFIG_DVB_NXT6000=m
 CONFIG_DVB_RTL2830=m
 CONFIG_DVB_RTL2832=m
+CONFIG_DVB_S5H1432=m
 CONFIG_DVB_SI2168=m
 CONFIG_DVB_SP887X=m
 CONFIG_DVB_STV0367=m

Comment

The change only enables the Sony CXD2880 DVB frontend driver as a loadable module in the kernel config. This is a normal hardware-support addition with no indication of malicious behavior, privilege escalation, persistence, network access, or packaging integrity issues. No suspicious scripts, sources, or install-time actions are involved in this hunk.

@@ -7070,6 +7140,7 @@ CONFIG_DVB_TDA10048=m
 CONFIG_DVB_TDA1004X=m
 CONFIG_DVB_ZD1301_DEMOD=m
 CONFIG_DVB_ZL10353=m
+CONFIG_DVB_CXD2880=m
 
 #
 # DVB-C (cable) frontends

Comment

The change only enables one additional kernel module option in the shipped kernel config: CONFIG_DVB_MN88443X=m. This is a normal upstream-style configuration change for a DVB frontend driver and does not introduce build-time downloads, scripts, privilege changes, persistence mechanisms, or packaging integrity issues. No suspicious sources or executable artifacts are involved in this hunk.

@@ -7107,6 +7178,7 @@ CONFIG_DVB_S921=m
 #
 # ISDB-S (satellite) & ISDB-T (terrestrial) frontends
 #
+CONFIG_DVB_MN88443X=m
 CONFIG_DVB_TC90522=m
 
 #

Comment

The change only enables two additional Linux kernel DVB frontend/PLL driver modules in the shipped kernel config: CONFIG_DVB_LGS8GL5=m and CONFIG_DVB_LNBH29=m. This is a normal kernel feature toggle, does not introduce build-time downloads, scripts, privilege changes, persistence, or packaging behavior changes, and the options are consistent with adjacent DVB module selections. No security concern is evident from this diff alone.

@@ -7129,8 +7201,10 @@ CONFIG_DVB_ISL6405=m
 CONFIG_DVB_ISL6421=m
 CONFIG_DVB_ISL6423=m
 CONFIG_DVB_IX2505V=m
+CONFIG_DVB_LGS8GL5=m
 CONFIG_DVB_LGS8GXX=m
 CONFIG_DVB_LNBH25=m
+CONFIG_DVB_LNBH29=m
 CONFIG_DVB_LNBP21=m
 CONFIG_DVB_LNBP22=m
 CONFIG_DVB_M88RS2000=m

Comment

The change is a harmless comment insertion in the kernel config file: it adds a marker line '# end of Customise DVB Frontends' and does not alter any build options, sources, scripts, permissions, or runtime behavior. No security-relevant impact is evident from this diff hunk.

@@ -7142,6 +7216,7 @@ CONFIG_DVB_DRX39XYJ=m
 #
 CONFIG_DVB_CXD2099=m
 CONFIG_DVB_SP2=m
+# end of Customise DVB Frontends
 
 #
 # Tools to develop new frontends

Comment

The change only increases the default dummy console dimensions from 80x25 to 160x50 in the kernel config. This affects console display size/scrollback behavior but does not introduce code execution, privilege changes, network access, persistence, or packaging integrity issues. No security-relevant risk is apparent from this diff hunk alone.

@@ -7503,8 +7578,8 @@ CONFIG_HDMI=y
 #
 CONFIG_VGA_CONSOLE=y
 CONFIG_DUMMY_CONSOLE=y
-CONFIG_DUMMY_CONSOLE_COLUMNS=80
-CONFIG_DUMMY_CONSOLE_ROWS=25
+CONFIG_DUMMY_CONSOLE_COLUMNS=160
+CONFIG_DUMMY_CONSOLE_ROWS=50
 CONFIG_FRAMEBUFFER_CONSOLE=y
 # CONFIG_FRAMEBUFFER_CONSOLE_LEGACY_ACCELERATION is not set
 CONFIG_FRAMEBUFFER_CONSOLE_DETECT_PRIMARY=y

Comment

The change only enables three additional Linux kernel sound codec drivers (ADAU1977 SPI/I2C support) in the kernel config. This is a straightforward feature addition with no evidence of network access, privilege escalation, persistence, or packaging integrity issues. It does not alter build scripts, install scripts, or introduce external sources/binaries. Risk is minimal.

@@ -8142,6 +8217,9 @@ CONFIG_SND_SOC_ADAU17X1=m
 CONFIG_SND_SOC_ADAU1761=m
 CONFIG_SND_SOC_ADAU1761_I2C=m
 CONFIG_SND_SOC_ADAU1761_SPI=m
+CONFIG_SND_SOC_ADAU1977=m
+CONFIG_SND_SOC_ADAU1977_SPI=m
+CONFIG_SND_SOC_ADAU1977_I2C=m
 CONFIG_SND_SOC_ADAU7002=m
 CONFIG_SND_SOC_ADAU7118=m
 CONFIG_SND_SOC_ADAU7118_HW=m