The standard kernel - without any SUSE patches
Source Timestamp: 2026-08-03 10:04:30 +0000
GIT Revision: ae5c1b55de3bd891574adbec8ff5c8802def979e
GIT Branch: stable
Provides
Requires
License
GPL-2.0-only
Changelog
* Mon Aug 03 2026 jslaby@suse.cz
- Linux 7.1.6 (bsc#1012628).
- platform/x86/intel-uncore-freq: Fix current_freq_khz after
CPU hotplug (bsc#1012628).
- sched_ext: Skip ops.set_weight() for disabled tasks
(bsc#1012628).
- drm/virtio: fix deadlock in display_info_cb by removing hotplug
from dequeue worker (bsc#1012628).
- seqlock: Allow UBSAN_ALIGNMENT to fail optimizing (bsc#1012628).
- KVM: x86: Check for invalid/obsolete root *after* making MMU
pages available (bsc#1012628).
- KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired
on KVM_RUN (bsc#1012628).
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1012628).
- KVM: x86/mmu: Fix use-after-free on vendor module reload
(bsc#1012628).
- gpu: host1x: Fix use-after-free in
host1x_bo_clear_cached_mappings (bsc#1012628).
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin
(bsc#1012628).
- xprtrdma: Clear receive-side ownership pointers on release
(bsc#1012628).
- arm64: tegra: Remove fallback compatible for GPCDMA
(bsc#1012628).
- Docs/admin-guide/cgroup-v2: fix memory.stat doc details
(bsc#1012628).
- sched_ext: Annotate ksyncs with __rcu in alloc/free_kick_syncs()
(bsc#1012628).
- arm64: tegra: Fix CPU compatible string to cortex-a78ae on
Tegra234 (bsc#1012628).
- xfrm: propagate -EINPROGRESS from validate_xmit_xfrm()
(bsc#1012628).
- xfrm: fix stale skb->prev after async crypto steals a GSO
segment (bsc#1012628).
- firmware: arm_ffa: Respect firmware advertised RX/TX buffer
size limits (bsc#1012628).
- IB/mad: Drop unmatched RMPP responses before reassembly
(bsc#1012628).
- mtd: virt_concat: fix use-after-free in
mtd_virt_concat_destroy_joins() (bsc#1012628).
- mtd: virt_concat: fix use-after-free in
mtd_virt_concat_destroy() (bsc#1012628).
- mtd: mtdswap: remove debugfs stats file on teardown
(bsc#1012628).
- mtd: nand: mtk-ecc: stop on ECC idle timeouts (bsc#1012628).
- btrfs: reject free space cache with more entries than pages
(bsc#1012628).
- btrfs: fix root leak if its reloc root is unexpected in
merge_reloc_roots() (bsc#1012628).
- btrfs: fallback to transaction csum tree on a commit root csum
miss (bsc#1012628).
- firmware: arm_ffa: Fix NULL dereference in
ffa_partition_info_get() (bsc#1012628).
- sched_ext: Don't warn on core-sched forced idle in
put_prev_task_scx() (bsc#1012628).
- reset: spacemit: k3: fix USB2 ahb reset (bsc#1012628).
- xfrm: fix sk_dst_cache double-free in xfrm_user_policy()
(bsc#1012628).
- xfrm: reject optional IPTFS templates in outbound policies
(bsc#1012628).
- RDMA/cma: Fix hardware address comparison length in netevent
callback (bsc#1012628).
- RDMA/irdma: Prevent rereg_mr for non-mem regions (bsc#1012628).
- RDMA/irdma: Remove redundant legacy_mode checks (bsc#1012628).
- RDMA/irdma: Prevent user-triggered null deref on QP create
(bsc#1012628).
- RDMA/erdma: initialize ret for empty receive WR lists
(bsc#1012628).
- RDMA/mana_ib: initialize err for empty send WR lists
(bsc#1012628).
- RDMA/core: Fix memory leak in __ib_create_cq() on invalid cqe
(bsc#1012628).
- RDMA/hns: Fix potential integer overflow in mhop hem cleanup
(bsc#1012628).
- RDMA/siw: publish QP after initialization (bsc#1012628).
- mtd: fix double free and WARN_ON in add_mtd_device() error paths
(bsc#1012628).
- selftests/alsa: Fix memory leak in find_controls error path
(bsc#1012628).
- RDMA/irdma: Prevent overflows in memory contiguity checks
(bsc#1012628).
- xfrm: clear mode callbacks after failed mode setup
(bsc#1012628).
- xfrm: iptfs: propagate SKBFL_SHARED_FRAG in
iptfs_skb_add_frags() (bsc#1012628).
- xfrm6: clear dst.dev on error to avoid double netdev_put in
xfrm6_fill_dst() (bsc#1012628).
- xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild
reinsert (bsc#1012628).
- wifi: mac80211: allocate backup ieee80211_nan_sched_cfg off
stack (bsc#1012628).
- ALSA: usb-audio: Fix imbalance per-channel volume of sticky
mixers (bsc#1012628).
- wifi: cfg80211: cancel sched scan results work on unregister
(bsc#1012628).
- wifi: ipw2100: fix potential memory leak in
ipw2100_pci_init_one() (bsc#1012628).
- wifi: cfg80211: Fix an error handling path in
cfg80211_wext_siwscan() (bsc#1012628).
- wifi: mac80211_hwsim: clamp virtio RX length before skb_put
(bsc#1012628).
- wifi: mac80211: fix unsol_bcast_probe_resp double free on
alloc failure (bsc#1012628).
- wifi: mac80211: fix fils_discovery double free on alloc failure
(bsc#1012628).
- wifi: libertas: fix memory leak in helper_firmware_cb()
(bsc#1012628).
- wifi: mac80211: defer link RX stats percpu free to RCU
(bsc#1012628).
- wifi: p54: validate RX frame length in p54_rx_eeprom_readback()
(bsc#1012628).
- wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix
deadlock (bsc#1012628).
- wifi: nl80211: free RNR data on MBSSID mismatch (bsc#1012628).
- wifi: cfg80211: derive S1G beacon TSF from S1G fields
(bsc#1012628).
- wifi: nl80211: validate nested MBSSID IE blobs (bsc#1012628).
- wifi: nl80211: constrain MBSSID TX link ID range (bsc#1012628).
- wifi: cfg80211: validate PMSR measurement type data
(bsc#1012628).
- wifi: cfg80211: validate PMSR FTM preamble range (bsc#1012628).
- wifi: cfg80211: reject unsupported PMSR FTM location requests
(bsc#1012628).
- wifi: cfg80211: reject empty PMSR peer lists (bsc#1012628).
- wifi: mac80211: avoid non-S1G AID fallback for S1G assoc
(bsc#1012628).
- ASoC: amd: acp: Fix linker error with SDCA quirks (bsc#1012628).
- wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock
(bsc#1012628).
- wifi: cfg80211: use wiphy work for socket owner autodisconnect
(bsc#1012628).
- wifi: brcmfmac: initialize SDIO data work before cleanup
(bsc#1012628).
- wifi: cfg80211: bound element ID read when checking
non-inheritance (bsc#1012628).
- firmware: arm_ffa: Fix out-of-bound writes in
ffa_setup_and_transmit() (bsc#1012628).
- firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset
calculation (bsc#1012628).
- ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath
on start/stop (bsc#1012628).
- ASoC: amd: ps: disable MSI on resume in ACP PCI driver
(bsc#1012628).
- ASoC: amd: ps: fix wrong ACP version string in
pci_request_regions() (bsc#1012628).
- ASoC: amd: ps: replace bitwise OR with logical OR in IRQ return
check (bsc#1012628).
- erofs: relax sanity check for tail pclusters due to ztailpacking
(bsc#1012628).
- ASoC: cs42l43: Correct report for forced microphone jack
(bsc#1012628).
- sched_ext: Enable tick for finite slices on nohz_full
(bsc#1012628).
- ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared
after lookup (bsc#1012628).
- firmware: arm_scmi: Rate-limit queue-full warnings in IRQ
context (bsc#1012628).
- bpf: Fix UAF in sock clone early bailouts (bsc#1012628).
- cpufreq: Make cpufreq_update_pressure() fall back to
cpuinfo.max_freq (bsc#1012628).
- sched_ext: Record an error on errno-only sub-enable failure
(bsc#1012628).
- ppp: defer channel free to an RCU grace period to fix pppol2tp
RX UAF (bsc#1012628).
- ipv4: fib: free fib_alias with kfree_rcu() on insert error path
(bsc#1012628).
- net/iucv: take a reference on the socket found in
afiucv_hs_rcv() (bsc#1012628).
- scsi: core: wake eh reliably when using scsi_schedule_eh
(bsc#1012628).
- ata: sata_dwc_460ex: enable SATA interrupts only after IRQ
handler is registered (bsc#1012628).
- ata: sata_dwc_460ex: use platform_get_irq() (bsc#1012628).
- ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all
pending interrupts (bsc#1012628).
- ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion
bit-scanning (bsc#1012628).
- accel/ivpu: Fix wrong register read in LNL failure diagnostics
(bsc#1012628).
- ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC
(bsc#1012628).
- Bluetooth: qca: fix NVM tag length underflow in TLV parser
(bsc#1012628).
- Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update
(bsc#1012628).
- Bluetooth: hci_sync: extend conn_hash lookup critical sections
(bsc#1012628).
- Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync
(bsc#1012628).
- Bluetooth: mgmt: hold reference for hci_conn in
mgmt_pending_cmds (bsc#1012628).
- Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups
(bsc#1012628).
- Bluetooth: hci_qca: Clear memdump state on invalid dump size
(bsc#1012628).
- Bluetooth: mgmt: Translate HCI reason in Device Disconnected
event (bsc#1012628).
- smb/client: handle overlapping allocated ranges in fallocate
(bsc#1012628).
- riscv: Gate FUNCTION_ALIGNMENT_4B on DYNAMIC_FTRACE
(bsc#1012628).
- drm/i915/gt: use correct selftest config symbol (bsc#1012628).
- can: raw: add locking for raw flags bitfield (bsc#1012628).
- spi: cadence-quadspi: Fix indirect write timeout when DMA read
mode is enabled (bsc#1012628).
- powerpc/85xx: Add fsl,ifc to common device ids (bsc#1012628).
- powerpc/time: Prepare to stop elapsing in dynticks-idle
(bsc#1012628).
- powerpc/vtime: Initialize starttime at boot for native
accounting (bsc#1012628).
- bpf, sockmap: Reject unhashed UDP sockets on sockmap update
(bsc#1012628).
- drm/panthor: Check debugfs GEM lock initialization
(bsc#1012628).
- s390/checksum: Fix csum_partial() without vector facility
(bsc#1012628).
- riscv: hwprobe: Avoid uninitialized read in hwprobe_get_cpus()
(bsc#1012628).
- can: j1939: fix lockless local-destination check (bsc#1012628).
- drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves
(bsc#1012628).
- drm/xe/wopcm: fix WOPCM size for LNL+ (bsc#1012628).
- drm/xe: Assign queue name in time for drm_sched_init
(bsc#1012628).
- drm/xe/guc: Keep scheduler timeline name alive (bsc#1012628).
- drm/xe/guc: Hold device ref until queue teardown completes
(bsc#1012628).
- ksmbd: pin conn during async oplock break notification
(bsc#1012628).
- ksmbd: validate compound request size before reading
StructureSize2 (bsc#1012628).
- drm/i915/wm: clear the plane ddb_y entries on plane disable
(bsc#1012628).
- drm/i915/selftests: Fix GT PM sort comparators (bsc#1012628).
- accel/amdxdna: Fix use-after-free of mm_struct in job scheduler
(bsc#1012628).
- tcp: fix TIME_WAIT socket reference leak on PSP policy failure
(bsc#1012628).
- dpll: fix NULL pointer dereference in
dpll_msg_add_pin_ref_sync() (bsc#1012628).
- net/sched: act_tunnel_key: Defer dst_release to RCU callback
(bsc#1012628).
- sctp: fix auth_hmacs array size in struct sctp_cookie
(bsc#1012628).
- bnxt_en: Handle partially initialized auxiliary devices
(bsc#1012628).
- selftests: netconsole: only restore MAC when it changed on
resume (bsc#1012628).
- mpls: fix NULL deref in mpls_valid_fib_dump_req() on
CONFIG_INET=n (bsc#1012628).
- usb: core: sysfs: add lock to bos_descriptors_read()
(bsc#1012628).
- wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()
(bsc#1012628).
- usb: core: port: Deattach Type-C connector on component unbind
(bsc#1012628).
- usb: musb: omap2430: Do not put borrowed of_node in probe
(bsc#1012628).
- USB: storage: add NO_ATA_1X quirk for Longmai USB Key
(bsc#1012628).
- usb: chipidea: fix usage_count leak when autosuspend_delay is
negative (bsc#1012628).
- usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
(bsc#1012628).
- usb: gadget: f_midi: cancel pending IN work before freeing
the midi object (bsc#1012628).
- usb: gadget: printer: fix infinite loop in printer_read()
(bsc#1012628).
- USB: gadget: snps-udc: fix device name leak on probe failure
(bsc#1012628).
- USB: gadget: fsl-udc: fix device name leak on probe failure
(bsc#1012628).
- USB: gadget: fsl-udc: fix dev_printk() device (bsc#1012628).
- usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()
(bsc#1012628).
- usb: gadget: f_tcm: synchronize delayed set_alt with teardown
(bsc#1012628).
- usb: gadget: udc: bdc: free IRQ and drain func_wake_notify
before teardown (bsc#1012628).
- usb: gadget: uvc: clamp SEND_RESPONSE length to the response
buffer (bsc#1012628).
- USB: serial: ftdi_sio: add support for E+H FXA291 (bsc#1012628).
- USB: serial: io_edgeport: cap received transmit credits
(bsc#1012628).
- USB: serial: keyspan_pda: fix data loss on receive throttling
(bsc#1012628).
- USB: serial: option: add TDTECH MT5710-CN (bsc#1012628).
- usb: typec: ucsi: Detect and skip duplicate altmodes from
buggy firmware (bsc#1012628).
- usb: typec: ucsi: Add duplicate detection to nvidia registration
path (bsc#1012628).
- drm/amd/display: Fix ISM dc_lock deadlock during suspend
(bsc#1012628).
- drm/amd/display: Fix preferred link rate for NUTMEG
(bsc#1012628).
- drm/amd/display: Add dp_skip_rbr flag for NUTMEG (bsc#1012628).
- wifi: mwifiex: fix freeze for 60 seconds caused by
request_firmware (bsc#1012628).
- RISC-V: KVM: Serialize virtual interrupt pending state updates
(bsc#1012628).
- Revert "drm/amd/display: Add missing kdoc for ALLM parameters"
(bsc#1012628).
- usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits
(bsc#1012628).
- selftests/bpf: Adjust verifier_map_ptr for the map's excl field
(bsc#1012628).
- selftests/bpf: Keep verifier_map_ptr exercising ops pointer
access (bsc#1012628).
- watchdog: ni903x_wdt: Check ACPI_COMPANION() against NULL
(bsc#1012628).
- wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming
firmware request (bsc#1012628).
- wifi: ath11k: fix NULL pointer dereference in
ath11k_hal_srng_access_begin (bsc#1012628).
- hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
(bsc#1012628).
- hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop
(bsc#1012628).
- hwmon: (gigabyte_waterforce) Stop device IO before calling
hid_hw_stop (bsc#1012628).
- hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop
(bsc#1012628).
- hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop
(bsc#1012628).
- watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()
(bsc#1012628).
- watchdog: airoha: Prevent division by zero when clock frequency
is zero (bsc#1012628).
- wifi: ath10k: fix skb leak on incomplete msdu during rx pop
(bsc#1012628).
- wifi: ath11k: fix potential buffer underflow in
ath11k_hal_rx_msdu_list_get() (bsc#1012628).
- wifi: ath11k: Flush the posted write after writing to
PCIE_SOC_GLOBAL_RESET (bsc#1012628).
- wifi: ath12k: Flush the posted write after writing to
PCIE_SOC_GLOBAL_RESET (bsc#1012628).
- platform/x86/intel/vsec: allocate res with intel_vsec_dev
(bsc#1012628).
- platform/x86/intel/vsec: free ACPI discovery data on early
errors (bsc#1012628).
- platform/x86: asus-wmi: temporarily revert to setting a charge
limit (bsc#1012628).
- firewire: net: Fix fragmented datagram reassembly (bsc#1012628).
- wifi: ath12k: Fix low MLO RX throughput on WCN7850
(bsc#1012628).
- wifi: ath6kl: fix OOB read from firmware num_msg in TX complete
handler (bsc#1012628).
- wifi: ath6kl: fix OOB read from firmware IE lengths in connect
event (bsc#1012628).
- wifi: carl9170: bound memcpy length in cmd callback to prevent
OOB read (bsc#1012628).
- wifi: carl9170: fix OOB read from off-by-two in TX status
handler (bsc#1012628).
- wifi: carl9170: fix buffer overflow in rx_stream failover path
(bsc#1012628).
- btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8
(bsc#1012628).
- btrfs: fix u32 to s64 type conversion in dirty_metadata_bytes
accounting (bsc#1012628).
- btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps
(bsc#1012628).
- btrfs: free mapping node on duplicate reloc root insert
(bsc#1012628).
- ASoC: tas2781: bound firmware description string parsing
(bsc#1012628).
- ASoC: sun4i-codec: Set quirks.playback_only for H616 codec
(bsc#1012628).
- iommu/amd: Fix IRQ unsafe locking in gdom allocation
(bsc#1012628).
- iommu/amd: Fix nested domain leak (bsc#1012628).
- ALSA: hda: cs35l41: validate and free ACPI mute object
(bsc#1012628).
- ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI
(bsc#1012628).
- arm_mpam: Fix software reset values of MPAMCFG_PRI
(bsc#1012628).
- arm_mpam: Fix MPAMCFG_MBW_PBM register setting (bsc#1012628).
- arm_mpam: guard MBWU state before adding it to garbage
(bsc#1012628).
- ASoC: cs35l56: Fix potential probe() deadlock (bsc#1012628).
- ASoC: cs35l56: Use complete_all() to signal init_completion
(bsc#1012628).
- wifi: iwlwifi: mvm: validate SAR GEO response payload size
(bsc#1012628).
- wifi: iwlwifi: fix pointer arithmetic in
iwl_add_mcc_to_tas_block_list (bsc#1012628).
- wifi: iwlwifi: validate payload length in iwl_pnvm_complete_fn
(bsc#1012628).
- wifi: iwlwifi: mvm: fix read in wake packet notification handler
(bsc#1012628).
- drivers/virt: pkvm: Fix end calculation in
mmio_guard_ioremap_hook() (bsc#1012628).
- hwmon: Drop unused i2c driver_data (bsc#1012628).
- hwmon: Use named initializers for arrays of i2c_device_data
(bsc#1012628).
- hwmon: (pmbus/max34440): add support adpm12250 (bsc#1012628).
- hwmon: (pmbus/max34440) block unsupported VIN and IIN limit
registers (bsc#1012628).
- hwmon: (asus-ec-sensors) fix looping over banks while reading
from EC (bsc#1012628).
- hwmon: (asus-ec-sensors) fix EC read intervals (bsc#1012628).
- hwmon: (asus-ec-sensors) add missed handle for ENOMEM
(bsc#1012628).
- smb: client: validate DFS referral PathConsumed (bsc#1012628).
- drm/i915/backlight: Remove DP_EDP_BACKLIGHT_AUX_ENABLE_CAP
check for DPCD backlight (bsc#1012628).
- ovpn: avoid putting unrelated P2P peer on socket release
(bsc#1012628).
- selftests/net: ovpn: fix getaddrinfo memory leak in
ovpn_parse_remote() (bsc#1012628).
- ovpn: fix use after free in unlock_ovpn() (bsc#1012628).
- ovpn: use monotonic clock for peer keepalive timeouts
(bsc#1012628).
- hwmon: occ: validate poll response sensor blocks (bsc#1012628).
- regulator: mt6358: use regmap helper to read fixed LDO
calibration (bsc#1012628).
- Bluetooth: btusb: validate Realtek vendor event length
(bsc#1012628).
- net: phy: marvell: fix return code (bsc#1012628).
- selftests/net: Fix tun IPv6 test addresses to avoid 6to4 range
(bsc#1012628).
- netlink: specs: rt-link: convert bridge port flag attributes
to u8 (bsc#1012628).
- net/packet: avoid fanout hook re-registration after unregister
(bsc#1012628).
- bpf: Reject redirect helpers without a bpf_net_context
(bsc#1012628).
- net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains
(bsc#1012628).
- bonding: fix devconf_all NULL dereference when IPv6 is disabled
(bsc#1012628).
- rds: drop incoming messages that cross network namespace
boundaries (bsc#1012628).
- gtp: parse extension headers before reading inner protocol
(bsc#1012628).
- rxrpc: fix io_thread race in rxrpc_wake_up_io_thread()
(bsc#1012628).
- dpaa2-switch: put MAC endpoint device on disconnect
(bsc#1012628).
- net: airoha: Fix potential use-after-free in airoha_ppe_deinit()
(bsc#1012628).
- dpaa2-eth: put MAC endpoint device on disconnect (bsc#1012628).
- net: airoha: Fix DMA direction for NPU mailbox buffer
(bsc#1012628).
- iommu/amd: Wait for completion instead of returning early in
iommu_completion_wait() (bsc#1012628).
- wifi: mac80211: tear down new links on vif update error path
(bsc#1012628).
- nfp: Check resource mutex allocation (bsc#1012628).
- wan: wanxl: Only reset hardware after BAR mapping (bsc#1012628).
- vhost-net: fix TX stall when vhost owns virtio-net header
(bsc#1012628).
- wifi: mac80211: copy aggregation information (bsc#1012628).
- wifi: mwifiex: bound uAP association event IEs to the event
buffer (bsc#1012628).
- iommu/amd: Bound the early ACPI HID map (bsc#1012628).
- iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()
(bsc#1012628).
- wifi: mac80211: recalculate TIM when a station enters power save
(bsc#1012628).
- pds_core: reject component parameter in legacy firmware update
(bsc#1012628).
- arm64: Correct value returned by ESR_ELx_FSC_ADDRSZ_nL()
(bsc#1012628).
- arm64/mm: Check the requested PFN range during memory removal
(bsc#1012628).
- amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN (bsc#1012628).
- soreuseport: Clear sk_reuseport_cb before failure in sk_clone()
(bsc#1012628).
- net: Call net_enable_timestamp() before failure in sk_clone()
(bsc#1012628).
- geneve: fix hint header definition wrt endianness (bsc#1012628).
- geneve: ensure the skb is writable before fixing its headers
(bsc#1012628).
- tipc: serialize udp bearer replicast list updates (bsc#1012628).
- net: txgbe: fix heap overflow when reading module EEPROM
(bsc#1012628).
- rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled
(bsc#1012628).
- net: txgbe: fix FDIR filter leak on remove (bsc#1012628).
- sctp: fix auth_chunk_list capacity check in
sctp_auth_ep_add_chunkid (bsc#1012628).
- pds_core: fix deadlock between reset thread and remove
(bsc#1012628).
- pds_core: fix use-after-free on workqueue during remove
(bsc#1012628).
- pds_core: yield the CPU while waiting for the adminq to drain
(bsc#1012628).
- pds_core: order completion reads after the ownership check
(bsc#1012628).
- pds_core: fix auxiliary device add/del races (bsc#1012628).
- pds_core: check for workqueue allocation failure (bsc#1012628).
- accel: ethosu: Fix element size accounting for cmd stream
validation (bsc#1012628).
- accel: ethosu: Handle U85 internal chaining buffer
(bsc#1012628).
- sctp: validate stream count in sctp_process_strreset_inreq()
(bsc#1012628).
- net: mctp i3c: clean up notifier and buses if driver register
fails (bsc#1012628).
- tls: device: push pending open record on splice EOF
(bsc#1012628).
- selftests: af_unix: add USER_NS config (bsc#1012628).
- selftests: openvswitch: add config file (bsc#1012628).
- selftests: ovpn: add IPV6 and VETH configs (bsc#1012628).
- selftests: ovpn: increase timeout (bsc#1012628).
- selftests: drv-net: increase timeout (bsc#1012628).
- selftests: drv-net: convert so_txtime to drv-net (bsc#1012628).
- gtp: check skb_pull_data() return in gtp1u_send_echo_resp()
(bsc#1012628).
- nexthop: initialize extack in nh_res_bucket_migrate()
(bsc#1012628).
- tipc: fix infinite loop in __tipc_nl_compat_dumpit
(bsc#1012628).
- cifs: prevent readdir from changing file size due to stale
directory metadata (bsc#1012628).
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred
close drain paths (bsc#1012628).
- ppp: annotate concurrent dev->stats accesses (bsc#1012628).
- wifi: mt76: mt7925: guard link STA in decap offload
(bsc#1012628).
- wifi: mt76: mt7915: guard HE capability lookups (bsc#1012628).
- wifi: mt76: connac: fix possible NULL-pointer deref in
mt76_connac_mcu_uni_bss_he_tlv() (bsc#1012628).
- wifi: mt76: mt7925: fix possible NULL-pointer deref in
mt7925_mcu_bss_he_tlv() (bsc#1012628).
- wifi: mt76: mt7996: check pointer returned by
mt76_connac_get_he_phy_cap() (bsc#1012628).
- wifi: mt76: fix airoha_npu dependency tracking (bsc#1012628).
- wifi: mt76: mt7925: fix crash in reset link replay
(bsc#1012628).
- wifi: mt76: mt7996: fix possible NULL-pointer deref in
mt7996_mcu_sta_bfer_eht() (bsc#1012628).
- drm/xe/vf: Add drm_dev guards when detaching CCS read/write
buffers (bsc#1012628).
- wifi: brcmfmac: fix 802.1X-SHA256 call trace warning
(bsc#1012628).
- ovl: fix trusted xattr escape prefix matching (bsc#1012628).
- drm/panel: ilitek-ili9882t: fix unmet dependency for
DRM_PANEL_ILITEK_ILI9882T (bsc#1012628).
- drm/panel: s6e3ha8: fix unmet dependency on DRM_DISPLAY_HELPER
(bsc#1012628).
- drm/panel: fix unmet dependency bug for DRM_PANEL_HIMAX_HX83121A
(bsc#1012628).
- drm/vc4: hvs/v3d: Fix null dereference in unbind (bsc#1012628).
- ovl: check access to copy_file_range source with src mounter
creds (bsc#1012628).
- amt: re-read skb header pointers after every pull (bsc#1012628).
- amt: make the head writable before rewriting the L2 header
(bsc#1012628).
- net: bridge: vlan: fix vlan range dumps starting with pvid
(bsc#1012628).
- net: hsr: fix memory leak on slave unregistration by removing
synced VLANs (bsc#1012628).
- smp: Avoid invalid per-CPU CSD lookup with CSD lock debug
(bsc#1012628).
- smp: Make CSD lock acquisition atomic for debug mode
(bsc#1012628).
- net: dpaa: fix mode setting (bsc#1012628).
- net: stmmac: dwmac4: mask interrupts when stopping DMA in
suspend (bsc#1012628).
- sctp: auth: verify auth requirement when auth_chunk is NULL
(bsc#1012628).
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets
(bsc#1012628).
- drm/xe/i2c: Allow per domain unique id (bsc#1012628).
- drm/xe/vm: Fix SVM leak on resv obj alloc failure in
xe_vm_create() (bsc#1012628).
- iomap: correct the range of a partial dirty clear (bsc#1012628).
- iomap: fix incorrect did_zero setting in iomap_zero_iter()
(bsc#1012628).
- tipc: fix u16 MTU truncation in media and bearer MTU validation
(bsc#1012628).
- drm/tests: shmem: Set DMA mask to 64-bit in drm_gem_shmem
(bsc#1012628).
- bpf: tcp: fix double sock release on batch realloc
(bsc#1012628).
- net: stmmac: xgmac: fix l4 filter port overwrite on register
update (bsc#1012628).
- net: stmmac: fix l3l4 filter rejecting unsupported offload
requests (bsc#1012628).
- net: stmmac: reset residual action in L3L4 filters on delete
(bsc#1012628).
- net: stmmac: enable the MAC on link up for all supported speeds
(bsc#1012628).
- net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM
(bsc#1012628).
- mpls: Set rt->rt_nhn just before returning from
mpls_nh_build_multi() (bsc#1012628).
- octeontx2-vf: set TC flower flag on MCAM entry allocation
(bsc#1012628).
- ipv4: icmp: fill flow parameters in icmp_route_lookup decoy
lookup (bsc#1012628).
- ppp: annotate data races in ppp_generic (bsc#1012628).
- hinic: remove unused ethtool RSS user configuration buffers
(bsc#1012628).
- LoongArch: BPF: Zero-extend signed ALU32 div/mod results
(bsc#1012628).
- net: qrtr: restrict socket creation to the initial network
namespace (bsc#1012628).
- raw: annotate lockless match fields in raw_v4_match()
(bsc#1012628).
- net/mlx5: Fix MCIA register buffer overflow on 32 dword reads
(bsc#1012628).
- net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan
rule (bsc#1012628).
- net/mlx5e: Report zero bandwidth for non-ETS traffic classes
(bsc#1012628).
- net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation
(bsc#1012628).
- octeontx2-pf: tc: fix egress ratelimiting (bsc#1012628).
- net: ipv6: fix dif and sdif mismatch in raw6_icmp_error
(bsc#1012628).
- ice: allow creating VFs when !CONFIG_ICE_SWITCHDEV
(bsc#1012628).
- ice: fix LAG recipe to profile association (bsc#1012628).
- ice: prevent tstamp ring allocation for non-PF VSI types
(bsc#1012628).
- idpf: fix max_vport related crash on allocation error during
init (bsc#1012628).
- ipv6: Change allocation flags to match rcu_read_lock section
requirements (bsc#1012628).
- rds: tcp: unregister sysctl before tearing down listen socket
(bsc#1012628).
- ptp: netc: explicitly clear TMR_OFF during initialization
(bsc#1012628).
- mctp: check register_netdevice_notifier() error in
mctp_device_init() (bsc#1012628).
- net: airoha: fix ETS channel derivation in
airoha_tc_setup_qdisc_ets() (bsc#1012628).
- tipc: fix integer overflow in tipc_recvmsg() and
tipc_recvstream() (bsc#1012628).
- bnge/bng_re: fix ring ID widths (bsc#1012628).
- net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD
(bsc#1012628).
- drop_monitor: fix size calculations for 64-bit attributes
(bsc#1012628).
- drop_monitor: perform u64_stats updates under IRQ-disabled
section (bsc#1012628).
- pidfs: make pidfs_ino_lock static (bsc#1012628).
- LoongArch: BPF: Fix memory leak in bpf_jit_free() (bsc#1012628).
- bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()
(bsc#1012628).
- tracing: Fix use-after-free freeing trigger private data
(bsc#1012628).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
(bsc#1012628).
- drm: renesas: rzg2l_mipi_dsi: Move
rzg2l_mipi_dsi_set_display_timing() (bsc#1012628).
- drm/tidss: Fix missing drm_bridge_add() call (bsc#1012628).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
(bsc#1012628).
- drm/rockchip: analogix_dp: Add missing error check for
platform_get_resource() (bsc#1012628).
- drm/imagination: Count paired job fence as dependency in
prepare_job() (bsc#1012628).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
(bsc#1012628).
- drm/exynos: fbdev: Remove offset into screen_buffer
(bsc#1012628).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
parsers (bsc#1012628).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
(bsc#1012628).
- drm/tegra: fbdev: Remove offset into framebuffer memory
(bsc#1012628).
- drm/imagination: Fit paired fragment job in the correct CCCB
(bsc#1012628).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
parsers (bsc#1012628).
- drm/i915/cdclk: Fix up CDCLK_FREQ_DECIMAL without a full PLL
re-enable (bsc#1012628).
- drm/amd/pm: re-enable MC access after PrepareMp1ForUnload on
SMU V15 APUs (bsc#1012628).
- drm/amdgpu/gfx: fix cleaner shader IB buffer overflow
(bsc#1012628).
- drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when
it isn't at 0 (v2) (bsc#1012628).
- drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older
(bsc#1012628).
- drm/amdgpu: check amdgpu_vm_bo_find() result in GET_MAPPING_INFO
(bsc#1012628).
- drm/sysfb: Do not page-align visible size of the framebuffer
(bsc#1012628).
- drm/sysfb: Avoid truncating maximum stride (bsc#1012628).
- drm/xe/guc: Fix buffer overflow in steered register list
allocation (bsc#1012628).
- drm/xe: Add compact-PT and addr mask handling for page reclaim
(bsc#1012628).
- drm/amd/display: Restore periodic detection for DCN35
(bsc#1012628).
- drm/amdgpu/gfx9: Fix Ring and IB test fail after mode2
(bsc#1012628).
- drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are
both GTT (bsc#1012628).
- drm/amdgpu: Fix context pstate override handling (bsc#1012628).
- drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1
(bsc#1012628).
- drm/nouveau: fix reversed error cleanup order in ucopy functions
(bsc#1012628).
- drm/sysfb: Avoid possible truncation with calculating visible
size (bsc#1012628).
- drm/sysfb: Return errno code from drm_sysfb_get_visible_size()
(bsc#1012628).
- drm/amdgpu: Respect placement requirements in amdgpu_gtt_mgr
functions (bsc#1012628).
- drm/amdkfd: Use exclusive bounds for SVM split alignment checks
(bsc#1012628).
- drm/displayid: fix Tiled Display Topology ID size (bsc#1012628).
- drm/i915/gem: Add missing nospec on parallel submit slot
(bsc#1012628).
- drm/nouveau/acr: fix missing nvkm_done() in error path of
nvkm_acr_oneinit() (bsc#1012628).
- drm/radeon: fix r100_copy_blit for large BOs (bsc#1012628).
- drm/xe/display: skip FORCE_WC and vm_bound check for external
dma-bufs (bsc#1012628).
- drm/xe: Return error on non-migratable faults requiring devmem
(bsc#1012628).
- drm/xe/oa: Fix offset alignment for MERT
WHITELIST_OA_MERT_MMIO_TRG (bsc#1012628).
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists
(bsc#1012628).
- drm/xe: Fix PTE index in xe_vm_populate_pgtable() for chunked
binds (bsc#1012628).
- drm/xe: Hold a dma-buf reference for imported BOs (bsc#1012628).
- drm/xe/vm: Fix BO prefetch with CONSULT_MEM_ADVISE_PREF_LOC
(bsc#1012628).
- drm/xe/pt: Reset current_op in xe_pt_update_ops_init()
(bsc#1012628).
- drm/xe/nvm: fix writable override for CRI (bsc#1012628).
- drm/xe/madvise: Skip invalidation for purgeable state updates
(bsc#1012628).
- drm/imagination: Fix double call to drm_sched_entity_fini()
(bsc#1012628).
- drm/imagination: Fix user array stride in pvr_set_uobj_array()
(bsc#1012628).
- drm/imagination: fix error checking of pvr_vm_context_lookup()
(bsc#1012628).
- drm/imagination: acquire vm_ctx->lock before mapping memory
to GPU VM (bsc#1012628).
- drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO
size (bsc#1012628).
- drm/amdkfd: Guard m->cp_hqd_eop_control setting by
q->eop_ring_buffer_size (bsc#1012628).
- drm/amdkfd: Use kvcalloc to allocate arrays (bsc#1012628).
- drm/amdkfd: Check bounds in allocate_event_notification_slot
(bsc#1012628).
- drm/amdkfd: Check bounds on CRIU restore queue type and mqd size
(bsc#1012628).
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation
(bsc#1012628).
- drm/amdkfd: free MQD managers on DQM init failures
(bsc#1012628).
- drm/amd/display: set MSA MISC1 bit 6 when using VSC SDP for
DCE 11.x (bsc#1012628).
- drm/amd/display: Handle struct
drm_plane_state.ignore_damage_clips (bsc#1012628).
- drm/amd/display: use kvzalloc to allocate struct dc
(bsc#1012628).
- drm/amd/display: detect_link_and_local_sink: DP alt mode
timeout path leaks prev_sink reference (bsc#1012628).
- Revert "drm/amd/display: Restore 5s vbl offdelay for NV3x+
DGPUs" (bsc#1012628).
- drm/virtio: bound EDID block reads to the response buffer
(bsc#1012628).
- drm/i915/vrr: require valid min/max vfreq for VRR (bsc#1012628).
- drm/i915/hdcp: require monotonically increasing seq_num_v
(bsc#1012628).
- drm/i915/hdcp: check streams[] bounds before overflow
(bsc#1012628).
- drm/amdgpu: add the doorbell index input for suspending userq
(bsc#1012628).
- drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON()
(bsc#1012628).
- drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()
(bsc#1012628).
- drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()
(bsc#1012628).
- drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()
(bsc#1012628).
- drm/i915: Return NULL on error in active_instance (bsc#1012628).
- drm/i915/bios: range check LFP Data Block panel_type2
(bsc#1012628).
- drm/amdgpu/soc24: reset dGPU if suspend got aborted
(bsc#1012628).
- drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() (bsc#1012628).
- drm/amd/amdgpu: disable ASPM on VI if pcie dpm is disabled
(bsc#1012628).
- drm/amdgpu: fix lifetime issue of
amdgpu_vm_get_task_info_pasid() (bsc#1012628).
- drm/amdgpu: trigger GPU recovery when userq destroy fails to
unmap a hung queue (bsc#1012628).
- drm/i915/gem: Do not leak siblings[] on proto context error
(bsc#1012628).
- drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU
(bsc#1012628).
- drm/i915/gt: Fix NULL deref on sched_engine alloc failure
(bsc#1012628).
- drm/i915/mst: limit DP MST ESI service loop (bsc#1012628).
- drm/amd/pm: fix smu14 power limit range calculation
(bsc#1012628).
- drm/gfx10: Program DB_RING_CONTROL (bsc#1012628).
- drm/virtio: Don't detach GEM from a non-created context
(bsc#1012628).
- drm/gpusvm: publish dpagemap early to avoid device mapping
leak on error (bsc#1012628).
- drm/ttm: Account for NULL and handle pages in ttm_pool_backup
(bsc#1012628).
- drm/panthor: return error on truncated firmware (bsc#1012628).
- drm/amdgpu: Release VFCT ACPI table reference (bsc#1012628).
- drm/amdgpu: Fix VFCT bus number matching with soft filter
(bsc#1012628).
- drm/amdgpu/userq: fix indefinite fence wait during GPU reset
(bsc#1012628).
- drm/amd: Create a device link between APU display and XHCI
devices (bsc#1012628).
- drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7
260X) (bsc#1012628).
- drm/amd/display: set new_stream to NULL after release
(bsc#1012628).
- drm/amd/display: consolidate DCN vblank/flip handling onto
vupdate_no_lock (bsc#1012628).
- drm/amd/display: dce100: skip non-DP stream encoders for DP MST
(bsc#1012628).
- drm/amd/display: Force PWM backlight on Lenovo Legion 5 15ARH05
(bsc#1012628).
- drm/amd/display: Fix backlight max_brightness to match exported
range (bsc#1012628).
- drm/amdgpu: Disable PCIe dynamic speed switching on Ryzen
Pinnacle Ridge (bsc#1012628).
- drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved
(bsc#1012628).
- drm/amdgpu: Print vmid, pasid and more task info in devcoredump
(bsc#1012628).
- drm/amdgpu: always emit the job vm fence (bsc#1012628).
- drm/amd/display: Fix flip-done timeouts on mode1 reset
(bsc#1012628).
- drm/vc4: Shut down BO cache timer before teardown (bsc#1012628).
- drm/amd/display: Fix missing DCE check in
dm_gpureset_toggle_interrupts() (bsc#1012628).
- drm/pagemap: Clear driver-provided PFNs from migration PFN array
(bsc#1012628).
- drm/vmwgfx: Validate vmw_surface_metadata::array_size
(bsc#1012628).
- drm/vc4: Prevent shader BO mappings from becoming writable
(bsc#1012628).
- drm/pagemap: Guard HPAGE_PMD_ORDER use with
CONFIG_ARCH_ENABLE_THP_MIGRATION (bsc#1012628).
- drm/ttm/pool: back up at native page order (bsc#1012628).
- drm/gpusvm: Zero HMM PFNs before scanning ranges (bsc#1012628).
- drm/gpusvm: Fix MM reference leak in drm_gpusvm_range_evict
(bsc#1012628).
- drm/v3d: Reach the GMP through the hub registers on V3D 7.x
(bsc#1012628).
- media: airspy: Return queued buffers on start_streaming()
failure (bsc#1012628).
- media: amlogic-c3: Add validations for ae and awb config
(bsc#1012628).
- media: aspeed: fix missing of_reserved_mem_device_release()
on probe failure (bsc#1012628).
- media: cec: seco: unregister adapter on IR probe failure
(bsc#1012628).
- media: cedrus: clean up media device on probe failure
(bsc#1012628).
- media: cedrus: Fix missing cleanup in error path (bsc#1012628).
- media: cedrus: skip invalid H.264 reference list entries
(bsc#1012628).
- media: chips-media: wave5: Move src_buf Removal to finish_encode
(bsc#1012628).
- media: cx231xx: fix devres lifetime (bsc#1012628).
- media: cx23885: add ioremap return check and cleanup
(bsc#1012628).
- =?UTF-8?q?media:=20dw9719:=20Add=20back=20the=20I=C2=B2C?=
=?UTF-8?q?=20device=20id=20table?= (bsc#1012628).
- media: i2c: alvium: fix critical pointer access in
alvium_ctrl_init (bsc#1012628).
- media: imx219: Fix maximum frame length in lines (bsc#1012628).
- media: intel/ipu6: Improve DWC PHY HSFREQRANGE band selection
for overlapping ranges (bsc#1012628).
- media: iris: Fix use IRQF_NO_AUTOEN when requesting the IRQ
(bsc#1012628).
- media: mali-c55: Add missing of_reserved_mem_device_release()
(bsc#1012628).
- media: mali-c55: Disable pm_runtime on probe error
(bsc#1012628).
- media: mali-c55: Fix possible ERR_PTR in enable_streams
(bsc#1012628).
- media: mali-c55: Power-off the peripheral in remove()
(bsc#1012628).
- media: marvell-cam: fix missing pci_disable_device() on remove
(bsc#1012628).
- media: meson: vdec: Fix memory leak in error path of vdec_open
(bsc#1012628).
- media: msi2500: Return queued buffers on start_streaming()
failure (bsc#1012628).
- media: nuvoton: npcm-video: fix error handling in
npcm_video_init() (bsc#1012628).
- media: nuvoton: npcm-video: fix memory leaks in probe and remove
(bsc#1012628).
- media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in
crossbar and pipe (bsc#1012628).
- media: nxp: imx8-isi: Clean up already-initialized pipes on
probe failure (bsc#1012628).
- media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in
pipe init error path (bsc#1012628).
- media: nxp: imx8-isi: Fix potential out-of-bounds issues
(bsc#1012628).
- media: nxp: imx8-isi: Fix scale factor calculation for hardware
rounding (bsc#1012628).
- media: pci: dm1105: Free allocated workqueue (bsc#1012628).
- media: pwc: Drain fill_buf on start_streaming() failure
(bsc#1012628).
- media: pwc: Return queued buffers on start_streaming() failure
(bsc#1012628).
- media: qcom: camss: Fix RDI streaming for CSID 680
(bsc#1012628).
- media: qcom: camss: Fix RDI streaming for CSID GEN2
(bsc#1012628).
- media: qcom: camss: Fix RDI streaming for CSID GEN3
(bsc#1012628).
- media: qcom: camss: Fix RDI streaming for CSID 340
(bsc#1012628).
- media: radio-si476x: Unregister v4l2_device on probe failure
(bsc#1012628).
- media: rtl2832: fix use-after-free in rtl2832_remove()
(bsc#1012628).
- media: rtl2832_sdr: Return queued buffers on start_streaming()
failure (bsc#1012628).
- media: rzg2l-cru: Skip ICnMC configuration when ICnSVC is used
(bsc#1012628).
- media: rzv2h-ivc: Wait for frame end in stop_streaming
(bsc#1012628).
- media: saa7134: Fix a possible memory leak in
saa7134_video_init1 (bsc#1012628).
- media: stm32-dcmipp: Return queued buffers on start_streaming()
failure (bsc#1012628).
- media: stm32: dcmi: unregister notifier on probe failure
(bsc#1012628).
- media: sun4i-csi: Return queued buffers on start_streaming()
failure (bsc#1012628).
- media: synopsys: hdmirx: Fix HPD lane hold time (bsc#1012628).
- media: tegra-video: vi: fix invalid u32 return value in format
lookup (bsc#1012628).
- media: ti: vpe: Fix fwnode_handle leak in vip_probe_complete()
(bsc#1012628).
- media: ti: vpe: Fix the error code of devm_kzalloc() in
vip_probe_slice() (bsc#1012628).
- media: ti: vpe: Fix the error code of devm_request_irq()
(bsc#1012628).
- media: ti: vpe: unwind v4l2 device registration on probe error
(bsc#1012628).
- media: uapi: rkisp: Correct name version enum (bsc#1012628).
- media: v4l2-ctrls-request: add NULL check in
v4l2_ctrl_request_complete() (bsc#1012628).
- media: v4l2-ctrls: validate HEVC active reference counts
(bsc#1012628).
- media: v4l2-fwnode: Fix subdev owner overwritten in
v4l2_async_register_subdev_sensor() (bsc#1012628).
- media: v4l2-subdev: Fail {enable,disable}_streams and
s_streaming nicely (bsc#1012628).
- media: vb2: use ssize_t for vb2_read/vb2_write (bsc#1012628).
- media: verisilicon: Export only needed pixels formats
(bsc#1012628).
- media: vidtv: fix reference leak on failed device registration
(bsc#1012628).
- media: vimc: fix reference leak on failed device registration
(bsc#1012628).
- media: vivid: add vivid_update_reduced_fps() (bsc#1012628).
- media: vivid: check for vb2_is_busy() when toggling caps
(bsc#1012628).
- media: vivid: fix cleanup bugs in vivid_init() (bsc#1012628).
- media: vpif_capture: fix OF node reference imbalance
(bsc#1012628).
- ALSA: hda/realtek: Fix speakers on Lunnen Ground 14
(bsc#1012628).
- ALSA: seq: close a re-opened queue timer in the destructor
(bsc#1012628).
- ALSA: hda: codecs: hdmi: disable keep-alive before audio format
change (bsc#1012628).
- ALSA: timer: drain a slave's callback before its master detaches
it (bsc#1012628).
- ALSA: timer: don't re-enter an instance callback that is still
running (bsc#1012628).
- wifi: ath6kl: fix OOB access from firmware ADDBA window size
(bsc#1012628).
- wifi: ath6kl: fix use-after-free in aggr_reset_state()
(bsc#1012628).
- wifi: mwifiex: fix NULL dereference when the AP has HT-cap
but no HT-oper (bsc#1012628).
- wifi: wilc1000: validate assoc response length before
subtracting header (bsc#1012628).
- wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses
(bsc#1012628).
- wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses
(bsc#1012628).
- wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses
(bsc#1012628).
- wifi: mt76: restrict NPU/PPE active checks to MMIO devices
(bsc#1012628).
- wifi: brcmfmac: drain bus_reset work on device removal
(bsc#1012628).
- wifi: brcmfmac: make release_scratchbuffers idempotent
(bsc#1012628).
- wifi: brcmfmac: set F2 blocksize to 256 for BCM43752
(bsc#1012628).
- wifi: ath11k: fix refcount leak in
ath11k_ahb_fw_resources_init() (bsc#1012628).
- wifi: ath12k: fix NULL pointer dereference in rhash table
destroy (bsc#1012628).
- staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()
(bsc#1012628).
- staging: rtl8723bs: fix inverted HT40 secondary channel offset
(bsc#1012628).
- Bluetooth: hci_sync: Protect UUID list traversal (bsc#1012628).
- Bluetooth: RFCOMM: Fix session UAF in set_termios (bsc#1012628).
- exec: fix unsigned loop counter wrap in transfer_args_to_stack()
(bsc#1012628).
- binfmt_misc: set have_execfd only once the interpreter is opened
(bsc#1012628).
- platform/loongarch: laptop: Explicitly reset bl_powered state
when suspend (bsc#1012628).
- rust_binder: only print failure if error has source
(bsc#1012628).
- rust: time: fix as_micros_ceil() to round correctly for negative
Delta (bsc#1012628).
- rust: device: avoid trailing ; in printing macros (bsc#1012628).
- rust: allow `suspicious_runtime_symbol_definitions` lint for
Rust >= 1.98 (bsc#1012628).
- rust: allow `clippy::unwrap_or_default` globally (bsc#1012628).
- objtool/rust: add one more `noreturn` Rust function for Rust
1.99.0 (bsc#1012628).
- LoongArch: Fix address space mismatch in kexec command line
lookup (bsc#1012628).
- LoongArch: Fix build errors due to wrong instructions for 32BIT
(bsc#1012628).
- LoongArch: Fix oops during single-step debugging (bsc#1012628).
- LoongArch: Increase TASK_STRUCT_OFFSET up to 2040 for 32BIT
(bsc#1012628).
- LoongArch: Move jump_label_init() before parse_early_param()
(bsc#1012628).
- LoongArch: Retrieve CPU package ID from PPTT when available
(bsc#1012628).
- cdrom: fix stack out-of-bounds read in CDROMVOLCTRL
(bsc#1012628).
- rhashtable: clear stale iter->p on table restart (bsc#1012628).
- firmware: stratix10-svc: fix memory leaks and list corruption
bugs (bsc#1012628).
- firmware: stratix10-svc: fix teardown order in remove to
prevent race (bsc#1012628).
- firmware: stratix10-svc: handle NO_RESPONSE in async poll
(bsc#1012628).
- x86/boot/compressed: Disable jump tables (bsc#1012628).
- comedi: comedi_parport: deal with premature interrupt
(bsc#1012628).
- uio_hv_generic: Bind to FCopy device by default (bsc#1012628).
- serial: sc16is7xx: implement gpio get_direction() callback
(bsc#1012628).
- serial: 8250_mid: Fix NULL function pointer dereference on
DNV/ICX-D/SNR platforms (bsc#1012628).
- selftests: ntsync: correct CONFIG_NTSYNC name (bsc#1012628).
- mei: bus: access mei_device under device_lock on cleanup
(bsc#1012628).
- intel_th: fix MSC output device reference leak (bsc#1012628).
- misc: nsm: only unlock nsm_dev on post-lock error paths
(bsc#1012628).
- misc: nsm: pin the module while the device is open
(bsc#1012628).
- tracing: Delay module ref count for "enable_event" trigger
(bsc#1012628).
- tracing: Fix context switch counter truncation (bsc#1012628).
- tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev
(bsc#1012628).
- tracing: Fix resource leak on mmiotrace trace_pipe close
(bsc#1012628).
- tracing: Fix union collision of module and refcnt for dynamic
events (bsc#1012628).
- tracing: perf: Fix stale head for perf syscall tracing
(bsc#1012628).
- tracing: Propagate errors from remote event bulk updates
(bsc#1012628).
- ublk: wait on ublk_dev_ready() instead of ub->completion
(bsc#1012628).
- tracing/eprobe: Fix exact system name matching in
eprobe_dyn_event_match() (bsc#1012628).
- tracing/probes: Avoid temporary buffer truncation in
trace_probe_match_command_args() (bsc#1012628).
- tracing/probes: Fix potential underflow in LEN_OR_ZERO macro
(bsc#1012628).
- tracing/probes: Prevent out-of-bounds write in
__trace_probe_log_err() (bsc#1012628).
- tracing/remotes: Fix page_va[] access before counter update
in trace_remote_alloc_buffer() (bsc#1012628).
- arm64: make huge_ptep_get handled unaligned addresses
(bsc#1012628).
- arm64: syscall: Ensure saved x0 is kept in-sync with tracer
updates (bsc#1012628).
- Revert "arm64: syscall: Ensure saved x0 is kept in-sync with
tracer updates" (bsc#1012628).
- mptcp: decrement subflows counter on failed passive join
(bsc#1012628).
- mptcp: fix BUILD_BUG_ON on legacy ARM config (bsc#1012628).
- mptcp: fix stale skb->sk reference on subflow close
(bsc#1012628).
- mptcp: only set DATA_FIN when a mapping is present
(bsc#1012628).
- mptcp: pm: userspace: fix use-after-free in get_local_id
(bsc#1012628).
- selftests: mptcp: userspace_pm: fix undefined variable port
(bsc#1012628).
- afs: Fix afs_edit_dir_remove() to get, not find, block 0
(bsc#1012628).
- btrfs: do not try compression for data reloc inodes
(bsc#1012628).
- userfaultfd: prevent registration of special VMAs (bsc#1012628).
- mm/damon/core: validate ranges in damon_set_regions()
(bsc#1012628).
- m68k: avoid -Wunused-but-set-parameter in clear_user_page()
(bsc#1012628).
- mm/damon/core: disallow overlapping input ranges for
damon_set_regions() (bsc#1012628).
- mm/kmemleak: fix checksum computation for per-cpu objects
(bsc#1012628).
- mm/memory-failure: trace: change memory_failure_event to ras
subsystem (bsc#1012628).
- mm/page_vma_mapped: fix device-private PMD handling
(bsc#1012628).
- mm/huge_memory: set PG_has_hwpoisoned only after new folio
head is established (bsc#1012628).
- sctp: don't free the ASCONF's own transport in DEL-IP processing
(bsc#1012628).
- sctp: avoid auth_enable sysctl UAF during netns teardown
(bsc#1012628).
- sctp: close UDP tunnel sockets during netns teardown
(bsc#1012628).
- ceph: fix pre-auth out-of-bounds read on snaptrace in
ceph_handle_caps() (bsc#1012628).
- ceph: fix refcount leak in ceph_readdir() (bsc#1012628).
- ceph: fix writeback_count leak in write_folio_nounlock()
(bsc#1012628).
- libceph: bound get_version reply decode to front len
(bsc#1012628).
- libceph: bound pg_{temp,upmap,upmap_items} length to
CEPH_PG_MAX_SIZE (bsc#1012628).
- libceph: Fix multiplication overflow in
decode_new_up_state_weight() (bsc#1012628).
- libceph: fix two unsafe bare decodes in decode_lockers()
(bsc#1012628).
- libceph: guard missing CRUSH type name lookup (bsc#1012628).
- libceph: refresh auth->authorizer_buf{,_len} after authorizer
update (bsc#1012628).
- libceph: Reject monmaps advertising zero monitors (bsc#1012628).
- libceph: reject zero bucket types in crush_decode (bsc#1012628).
- libceph: remove debugfs files before client teardown
(bsc#1012628).
- amt: fix use-after-free in AMT delayed works (bsc#1012628).
- ASoC: fsl: imx-card: Skip sysclk reset for active DAIs in
shutdown (bsc#1012628).
- ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP
(bsc#1012628).
- binfmt_elf_fdpic: only honour the first PT_INTERP (bsc#1012628).
- fs/super: fix emergency thaw double-unlock of s_umount
(bsc#1012628).
- fs: preserve ACL_DONT_CACHE state in forget_cached_acl()
(bsc#1012628).
- fscrypt: Add missing superblock check in
find_or_insert_direct_key() (bsc#1012628).
- fscrypt: Avoid dynamic allocation in fscrypt_get_devices()
(bsc#1012628).
- ftrace: Add global mutex to serialize trace_parser access
(bsc#1012628).
- io_uring/rw: fix missing ERESTARTSYS conversion in read paths
(bsc#1012628).
- iomap: fix out-of-bounds bitmap_set() with zero-length range
(bsc#1012628).
- iommu/vt-d: Disallow SVA if page walk is not coherent
(bsc#1012628).
- mm/slub: fix lost local objects when bulk remote free batch
fills (bsc#1012628).
- mm/slab: fix a memory leak due to bootstrapping sheaves twice
(bsc#1012628).
- net: stmmac: intel: skip SerDes reconfig when rate is unchanged
(bsc#1012628).
- phonet: pep: fix use-after-free in pep_get_sb() (bsc#1012628).
- vxlan: require CAP_NET_ADMIN in the device netns for changelink
(bsc#1012628).
- net: slip: serialize receive against buffer reallocation
(bsc#1012628).
- geneve: require CAP_NET_ADMIN in the device netns for changelink
(bsc#1012628).
- net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()
(bsc#1012628).
- net/iucv: fix use-after-free of a severed iucv_path
(bsc#1012628).
- net/mlx5e: Use sender devcom for MPV master-up (bsc#1012628).
- net/sched: serialize qdisc_rtab_list against concurrent get/put
(bsc#1012628).
- net/x25: fix use-after-free in x25_kill_by_neigh()
(bsc#1012628).
- net: gro: fix double aggregation of flush-marked skbs
(bsc#1012628).
- net: hip04: fix RX buffer leak on build_skb failure
(bsc#1012628).
- net: pcs: xpcs: fix SGMII state reading (bsc#1012628).
- net: qrtr: ns: Raise node count limit to 512 (bsc#1012628).
- proc: Fix broken error paths for namespace links (bsc#1012628).
- s390/ptff: Export ptff_function_mask[] (bsc#1012628).
- ptp: ptp_s390: Add missing facility check (bsc#1012628).
- ice: fix PTP Call Trace during PTP release (bsc#1012628).
- super: fix emergency thaw deadlock on frozen block devices
(bsc#1012628).
- rbd: Reset positive result codes to zero in object map update
path (bsc#1012628).
- smb: client: handle STATUS_STOPPED_ON_SYMLINK responses without
a symlink target (bsc#1012628).
- ksmbd: defer destroy_previous_session() until after NTLM
authentication (bsc#1012628).
- ksmbd: validate minimum PDU size for transform requests
(bsc#1012628).
- gve: fix Rx queue stall on alloc failure (bsc#1012628).
- ice: reject out-of-range ptype in ice_parser_profile_init
(bsc#1012628).
- ice: use READ_ONCE() to access cached PHC time (bsc#1012628).
- ila: reload IPv6 header after pskb_may_pull in checksum adjust
(bsc#1012628).
- mac802154: hold an interface reference across the scan worker
(bsc#1012628).
- mac802154: llsec: reject frames shorter than the authentication
tag (bsc#1012628).
- mctp: serial: handle zero-length frames to prevent rx buffer
overflow (bsc#1012628).
- openvswitch: fix GSO userspace truncation underflow
(bsc#1012628).
- ovpn: fix peer refcount leak in TCP error paths (bsc#1012628).
- ovpn: hold peer before scheduling keepalive work (bsc#1012628).
- pppoe: reload header pointer after dev_hard_header()
(bsc#1012628).
- rtase: Workaround for TX hang caused by hardware packet parsing
(bsc#1012628).
- tcp: initialize standalone TCP-AO response padding
(bsc#1012628).
- tcp: challenge ACK for non-exact RST in SYN-RECEIVED
(bsc#1012628).
- tipc: clear sock->sk on the failed-insert path in
tipc_sk_create() (bsc#1012628).
- vsock/virtio: collapse receive queue under memory pressure
(bsc#1012628).
- vxlan: mdb: Fix source list corruption on a failed replace
(bsc#1012628).
- watchdog: s32g_wdt: remove incorrect options in watchdog_info
struct (bsc#1012628).
- drm/amd/pm: fix amdgpu_pm_info power display units
(bsc#1012628).
- drm/amd/pm: make pp_features read-only when scpm is enabled
(bsc#1012628).
- drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() (bsc#1012628).
- drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON()
(bsc#1012628).
- drm/amdgpu/gfx11: fix EOP interrupt routing for KQ and userq
(bsc#1012628).
- drm/amdgpu/gfx12: fix EOP interrupt routing for KQ and userq
(bsc#1012628).
- drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON() (bsc#1012628).
- drm/amdgpu/gfx8: drop unecessary BUG_ON() (bsc#1012628).
- drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON()
(bsc#1012628).
- drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() (bsc#1012628).
- drm/amdgpu/jpeg: fix jpeg_v4_0_3_is_idle detection
(bsc#1012628).
- drm/amdgpu/jpeg: fix jpeg_v5_0_1_is_idle detection
(bsc#1012628).
- drm/amdgpu/mes11: set doorbell offset for suspending userq
(bsc#1012628).
- drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()
(bsc#1012628).
- drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON()
(bsc#1012628).
- drm/amdgpu/vce: fix integer overflow in image size
(bsc#1012628).
- drm/amdgpu/vcn4: avoid rereading IB param length (bsc#1012628).
- drm/dp_mst: Handle torn-down topology gracefully in
drm_dp_mst_topology_queue_probe() (bsc#1012628).
- drm/amdgpu: fix division by zero with invalid uvd dimensions
(bsc#1012628).
- drm/amdgpu: Fix kernel panic during driver load failure
(bsc#1012628).
- drm/amdgpu: fix resource leak on ACP reset timeout
(bsc#1012628).
- drm/amdgpu: invoke pm_genpd_remove() before freeing genpd
(bsc#1012628).
- drm/amdgpu: reject mapping a reserved doorbell to a new queue
(bsc#1012628).
- drm/amdgpu: fix aperture mapping leak (bsc#1012628).
- drm/amd/pm: fix smu13 power limit range calculation
(bsc#1012628).
- drm/amdgpu: fix check in amdgpu_hmm_invalidate_gfx
(bsc#1012628).
- selftests: drv-net: add missing kconfig for psp.py
(bsc#1012628).
- ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl
(bsc#1012628).
- ksmbd: restore DACL size on check_add_overflow() to avoid
malformed ACL (bsc#1012628).
- ksmbd: bound DACL dedup walk to copied ACEs (bsc#1012628).
- ksmbd: validate ACE size against SID sub-authorities
(bsc#1012628).
- drm/amd/display: Fix DTB DTO updates breaking live pixel rate
sources (bsc#1012628).
- audit: use 'unsigned int' instead of 'unsigned' (bsc#1012628).
- audit: fix recursive locking deadlock in audit_dupe_exe()
(bsc#1012628).
- fuse-uring: fix race between registration and connection
abortion (bsc#1012628).
- xfs: don't replace the wrong part of the cow fork (bsc#1012628).
- SUNRPC: Add helpers to convert xdr_buf byte ranges to
scatterlists (bsc#1012628).
- SUNRPC: Return an error from xdr_buf_to_bvec() on overflow
(bsc#1012628).
- mm/sparse-vmemmap: pass @pgmap argument to memory deactivation
paths (bsc#1012628).
- mm/sparse-vmemmap: fix DAX vmemmap accounting with optimization
(bsc#1012628).
- net: mana: Optimize irq affinity for low vcpu configs
(bsc#1012628).
- bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c
(bsc#1012628).
- bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()
(bsc#1012628).
- sched_ext: Move shared helpers from ext.c into internal.h and
cid.h (bsc#1012628).
- sched_ext: Preserve rq tracking across local DSQ dispatch
(bsc#1012628).
- selftests: drv-net: cope with slow env in so_txtime.py test
(bsc#1012628).
- selftests: drv-net: so_txtime: relax variance bounds
(bsc#1012628).
- KVM: SVM: Bump asid_generation on CPU online to avoid ASID
collision after hotplug (bsc#1012628).
- cifs: fix time_last_write stamp placement in setattr/truncate
paths (bsc#1012628).
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put()
(bsc#1012628).
- Update config files.
- Refresh patches.suse/vfs-add-super_operations-get_inode_dev.
- Rename to
patches.kernel.org/7.1.6-091-udmabuf-Ensure-to-perform-cache-synchronisation.patch.
- Rename to
patches.kernel.org/7.1.6-211-usb-atm-ueagle-atm-reject-descriptors-that-conf.patch.
- Rename to
patches.kernel.org/7.1.6-394-drm-i915-mtl-Enable-PPS-before-PLL.patch.
- commit 5de54b0
* Mon Aug 03 2026 jslaby@suse.cz
- Refresh
patches.suse/x86-alternative-dump-more-on-failure-in-__text_poke.patch.
Fix for 32bit.
- commit be5c025
* Mon Aug 03 2026 jslaby@suse.cz
- Refresh
patches.suse/x86-alternative-dump-more-on-failure-in-__text_poke.patch.
Dump more.
- commit 6d96b09
* Fri Jul 31 2026 pfalcato@suse.de
- Delete patches.suse/crasher.patch (bsc#1273084).
Sunset the crasher module and remove it from configs.
(cherry picked from commit 4527af7006350b5e062f5d7843fc87eb4999238c)
- commit dd8e4c7
* Thu Jul 30 2026 jslaby@suse.cz
- Refresh patches.suse/crasher.patch.
Add MODULE_DESCRIPTION() to fix:
WARNING: modpost: missing MODULE_DESCRIPTION() in drivers/char/crasher.o
(cherry picked from commit 71c8b26203eb694b1af88296142da73b9d7adde5)
- commit 05b8588
* Tue Jul 28 2026 jslaby@suse.cz
- usb: atm: ueagle-atm: reject descriptors that confuse probe
and disconnect (git-fixes).
- commit 862e13e
* Tue Jul 28 2026 msuchanek@suse.de
- mkspec-dtb: Move provides-obsoletes to package list
- commit 62b3949
* Tue Jul 28 2026 msuchanek@suse.de
- mkspec-dtb: Move DTS prefix into package list
- commit 225c506
* Tue Jul 28 2026 msuchanek@suse.de
- mkspec-dtb: Put per-architecture package lists into a hash
- commit c4b48e1
* Tue Jul 28 2026 msuchanek@suse.de
- mkspec-dtb: re-indent
- commit 1e2a2b0
* Tue Jul 28 2026 jslaby@suse.cz
- Linux 7.1.5 (bsc#1012628).
- crypto: algif_skcipher - force synchronous processing
(bsc#1012628).
- iommu/vt-d: Clear Present bit before tearing down scalable-mode
context entry (bsc#1012628).
- crypto: sun4i-ss - Remove insecure and unused rng_alg
(bsc#1012628).
- media: uvcvideo: Fix deadlock if uvc_status_stop is called
from async_ctrl.work (bsc#1012628).
- ALSA: hda/realtek: Add quirk for TongFang X6xx45xU
(bsc#1012628).
- ALSA: hda: conexant: Remove mic bias threshold override
(bsc#1012628).
- ALSA: hda: Fix cached processing coefficient verbs
(bsc#1012628).
- ALSA: hda/realtek: Fix speakers on Legion Pro 7 16ARX8H with
codec SSID 17aa:38a7 (bsc#1012628).
- media: uvcvideo: Use hw timestaming if the clock buffer is full
(bsc#1012628).
- media: uvcvideo: Avoid partial metadata buffers (bsc#1012628).
- media: uvcvideo: Fix buffer sequence in frame gaps
(bsc#1012628).
- media: uvcvideo: Fix dev_sof filtering in hw timestamp
(bsc#1012628).
- media: uvcvideo: Do not add clock samples with small sof delta
(bsc#1012628).
- media: uvcvideo: Relax the constrains for interpolating the
hw clock (bsc#1012628).
- media: uvcvideo: Fix sequence number when no EOF (bsc#1012628).
- dt-bindings: media: sun4i-a10-video-engine: Add interconnect
properties (bsc#1012628).
- dt-bindings: power: imx93: Add MIPI PHY power domain
(bsc#1012628).
- serial: msm: Disable DMA for kernel console UART (bsc#1012628).
- serial: max310x: implement gpio_chip::get_direction()
(bsc#1012628).
- serial: 8250_omap: clear rx_running on zero-length DMA completes
(bsc#1012628).
- rxrpc: serialize kernel accept preallocation with socket
teardown (bsc#1012628).
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc
(bsc#1012628).
- rxrpc: Don't move a peeked OOB message onto the pending queue
(bsc#1012628).
- rxrpc: Fix UAF in rxgk_issue_challenge() (bsc#1012628).
- rxrpc: Fix socket notification race (bsc#1012628).
- rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)
(bsc#1012628).
- rxrpc: Fix potential infinite loop in rxrpc_recvmsg()
(bsc#1012628).
- rxrpc: Fix rxrpc_rotate_tx_rotate() to check there's something
to rotate (bsc#1012628).
- rxrpc: Fix oob challenge leak in cleanup after notification
failure (bsc#1012628).
- rxrpc: Fix ACKALL packet handling (bsc#1012628).
- rxrpc: Fix the reception of a reply packet before data
transmission (bsc#1012628).
- rxrpc: Fix leak of connection from OOB challenge (bsc#1012628).
- rxrpc: Fix double unlock in rxrpc_recvmsg() (bsc#1012628).
- afs: Fix netns teardown to cancel the preallocation charger
(bsc#1012628).
- afs: fix NULL pointer dereference in afs_get_tree()
(bsc#1012628).
- afs: handle CB.InitCallBackState3 requests without a server
record (bsc#1012628).
- afs: Fix further netns teardown to cancel the preallocation
charger (bsc#1012628).
- afs: Fix uncancelled rxrpc OOB message handler (bsc#1012628).
- fbcon: fix NULL pointer dereference for a console without
vc_data (bsc#1012628).
- fbcon: Use correct type for vc_resize() return value
(bsc#1012628).
- soc: fsl: qe_ports_ic: Add missing cleanup on device removal
(bsc#1012628).
- openrisc: mm: Fix section mismatch between map_page and
__set_fixmap (bsc#1012628).
- clocksource/drivers/sun5i: Handle error returns from
devm_reset_control_get_optional_exclusive() (bsc#1012628).
- accel/amdxdna: Fix leak when pinning ubuf pages (bsc#1012628).
- drm/rockchip: inno-hdmi: Switch to drmm_kzalloc() (bsc#1012628).
- drm/rockchip: dw_dp: Switch to drmm_kzalloc() (bsc#1012628).
- drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove()
(bsc#1012628).
- drm/rockchip: Test for imported buffers with
drm_gem_is_imported() (bsc#1012628).
- drm/tidss: Drop extra drm_mode_config_reset() call
(bsc#1012628).
- drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating
SVM ranges (bsc#1012628).
- accel/amdxdna: Create shared functions for AIE2 and AIE4
(bsc#1012628).
- accel/amdxdna: Adjust size for copy_to_user() (bsc#1012628).
- accel/amdxdna: Handle DETACH_DEBUG_BO through config_debug_bo
path (bsc#1012628).
- accel/amdxdna: Fix iommu_map_sgtable() return value handling
(bsc#1012628).
- accel/amdxdna: Fix order of canceled mailbox messages
(bsc#1012628).
- dma-fence: Fix potential tracepoint null pointer dereferences
(bsc#1012628).
- accel/amdxdna: Fix fatal_error_info layout in firmware interface
(bsc#1012628).
- accel/amdxdna: Fix memory leak in amdxdna_iommu_alloc()
(bsc#1012628).
- drm/gpuvm: Do not prepare NULL objects (bsc#1012628).
- accel/amdxdna: Guard management mailbox channel cleanup against
NULL pointer (bsc#1012628).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
(bsc#1012628).
- drm/amdkfd: fix redundant MQD iterations in GFX v12.1
(bsc#1012628).
- drm/radeon: fix integer overflow in radeon_align_pitch()
(bsc#1012628).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
failure (bsc#1012628).
- libbpf: Report error when a negative kprobe offset is specified
(bsc#1012628).
- selftests/bpf: Fix off-by-one in bpf_cpumask_populate related
selftest (bsc#1012628).
- dt-bindings: timer: Remove sifive,fine-ctr-bits property
(bsc#1012628).
- wifi: ath12k: Fix invalid IRQ requests during AHB probe
(bsc#1012628).
- libbpf: Fix deduplication of typedef with base definitions
(bsc#1012628).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
macro (bsc#1012628).
- spi: atcspi200: fix use-after-free when driver unbind
(bsc#1012628).
- selftests/bpf: Use local type for flow_offload_tuple_rhash in
xdp_flowtable (bsc#1012628).
- selftests/bpf: Use local type for bpf_fou_encap in
test_tunnel_kern (bsc#1012628).
- Documentation: proc: fix section numbering in table of contents
(bsc#1012628).
- arm64: dts: rockchip: Fix vdec register blocks order on RK3576
(bsc#1012628).
- arm64: dts: rockchip: Update vdec register blocks order on
RK3588 (bsc#1012628).
- arm64: dts: rockchip: fix Ethernet PHY not found on PX30 Cobra
(bsc#1012628).
- arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S
(bsc#1012628).
- ima: Fix sigv3 signature handling for EVM_IMA_XATTR_DIGSIG
(bsc#1012628).
- dt-bindings: net: bluetooth: qualcomm: Fix WCN6855 regulator
names (bsc#1012628).
- x86/bug: Add printf() validation to HAVE_ARCH_BUG_FORMAT_ARGS
WARNs (bsc#1012628).
- arm64: dts: qcom: milos: Reduce rmtfs_mem size to 2.5MiB
(bsc#1012628).
- arm64: dts: qcom: sdm845-oneplus: Drop address from framebuffer
node (bsc#1012628).
- arm64: dts: qcom: glymur: Fix USB simple_bus_reg warning
(bsc#1012628).
- arm64: dts: qcom: glymur: Fix cache and SRAM simple_bus_reg
warnings (bsc#1012628).
- arm64: dts: qcom: ipq5424: Fix USB simple_bus_reg warnings
(bsc#1012628).
- arm64: dts: qcom: sc8180x: Fix phy simple_bus_reg warning
(bsc#1012628).
- arm64: dts: qcom: sdm845-mezzanine: Fix camss ports
unit_address_vs_reg warning (bsc#1012628).
- arm64: dts: qcom: fix temp-alarm probe failure for PMH0104 on
Glymur (bsc#1012628).
- arm64: dts: qcom: sdm845-shift-axolotl: Correct touchscreen
sleep state (bsc#1012628).
- hfsplus: Remove the duplicate attr inode dirty marking action
(bsc#1012628).
- hfsplus: Add a sanity check for btree node size (bsc#1012628).
- wifi: cfg80211: fix grammar in MLO group key error message
(bsc#1012628).
- arm64: tegra: Fix Tegra234 MGBE PTP clock (bsc#1012628).
- dt-bindings: pinctrl: nvidia,tegra234: Add missing required
block (bsc#1012628).
- pinctrl: pinconf-generic: fix properties bitmap leak in
parse_fw_cfg() (bsc#1012628).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
(bsc#1012628).
- driver core: use READ_ONCE() for dev->driver in
dev_has_sync_state() (bsc#1012628).
- wifi: rtw89: fix wrong pci_get_drvdata type in AER handlers
(bsc#1012628).
- wifi: rtw88: fix wrong pci_get_drvdata type in AER handlers
(bsc#1012628).
- wifi: rtw89: Correct data type for scan index to avoid infinite
loop (bsc#1012628).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
DMA buffer (bsc#1012628).
- wifi: rtw89: add bounds check on firmware mac_id in link lookup
(bsc#1012628).
- kconfig: fix potential NULL pointer dereference in conf_askvalue
(bsc#1012628).
- soc: xilinx: Fix race condition in event registration
(bsc#1012628).
- soc: xilinx: Shutdown and free rx mailbox channel (bsc#1012628).
- pinctrl: mediatek: eint: Drop base from
mtk_eint_chip_write_mask() (bsc#1012628).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
(bsc#1012628).
- wifi: ath11k: cancel SSR work items during PCI shutdown
(bsc#1012628).
- ARM: dts: am335x-sl50: Fix audio bitclock and frame master
endpoint (bsc#1012628).
- ixgbe: fix unaligned u32 access in ixgbe_update_flash_X550()
(bsc#1012628).
- Documentation/rv: Replace stale website link (bsc#1012628).
- watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH
(bsc#1012628).
- watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and
SAMA7G5 (bsc#1012628).
- watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on
register failure (bsc#1012628).
- media: cedrus: Fix failure to clean up hardware on probe failure
(bsc#1012628).
- media: v4l2-common: Add YUV24 format info (bsc#1012628).
- drm: verisilicon: call atomic helper's plane state check even
if no CRTC (bsc#1012628).
- memory: tegra: Wire up system sleep PM ops (bsc#1012628).
- objtool/klp: Fix is_uncorrelated_static_local() for Clang
(bsc#1012628).
- objtool/klp: Fix .data..once static local non-correlation
(bsc#1012628).
- objtool/klp: Fix create_fake_symbols() skipping entsize-based
sections (bsc#1012628).
- objtool/klp: Fix handling of zero-length .altinstr_replacement
sections (bsc#1012628).
- objtool/klp: Fix cloning of zero-length section symbols
(bsc#1012628).
- objtool/klp: Fix extraction of text annotations for alternatives
(bsc#1012628).
- objtool/klp: Fix relocation conversion failures for
R_X86_64_NONE (bsc#1012628).
- objtool: Replace iterator callback with
for_each_sym_by_mangled_name() (bsc#1012628).
- objtool: Fix reloc hash collision in find_reloc_by_dest_range()
(bsc#1012628).
- klp-build: Fix hang on out-of-date .config (bsc#1012628).
- klp-build: Fix checksum comparison for changed offsets
(bsc#1012628).
- klp-build: Fix patch cleanup on interrupt (bsc#1012628).
- crypto: qat - fix heartbeat error injection (bsc#1012628).
- lib/vsprintf: Fix to check field_width and precision
(bsc#1012628).
- dts: spacemit: set console baud rate on bpif3 (bsc#1012628).
- pinctrl: sunxi: fix regulator leak in sunxi_pmx_request()
error path (bsc#1012628).
- riscv: dts: microchip: gpio controllers on mpfs need 2 interrupt
cells (bsc#1012628).
- riscv: dts: microchip: remove gpio hogs from beaglev-fire
(bsc#1012628).
- dt-bindings: vendor-prefixes: Add Displaytech Ltd (bsc#1012628).
- drm/gpuvm: take refcount on DRM device (bsc#1012628).
- wifi: cfg80211: restrict LMR feedback check to TB and non-TB
ranging (bsc#1012628).
- drm/panel: Clean up SOFEF00 config dependencies (bsc#1012628).
- drm/panel: Clean up S6E3FC2X01 config dependencies
(bsc#1012628).
- drm/panel: Clean up S6E3HA2 config dependencies and fill help
text (bsc#1012628).
- riscv: dts: microchip: update pic64gx gpio interrupts to better
match the SoC (bsc#1012628).
- riscv: dts: microchip: fix pic64gx gpio interrupt-cells
(bsc#1012628).
- arm64: dts: marvell: samsung-coreprimevelte: Increase
touchscreen voltage (bsc#1012628).
- ARM: dts: rockchip: Add #{address,size}-cells to Chromium-based
/firmware (bsc#1012628).
- arm64: dts: rockchip: Add #{address,size}-cells to
Chromium-based /firmware (bsc#1012628).
- arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc
(bsc#1012628).
- arm64: dts: imx8x-colibri: Correct SODIMM PAD settings
(bsc#1012628).
- arm64: dts: imx8mn-vhip4-evalboard-v1: Correct interrupt flags
(bsc#1012628).
- arm64: dts: imx8mn-vhip4-evalboard-v2: Correct interrupt flags
(bsc#1012628).
- arm64: dts: imx8mp-ab2: Correct interrupt flags (bsc#1012628).
- Revert "arm64: dts: imx8mm-kontron: Add support for reading
SD_VSEL signal" (bsc#1012628).
- Revert "arm64: dts: imx8mp-kontron: Add support for reading
SD_VSEL signal" (bsc#1012628).
- vxlan: Fix potential null-ptr-deref in
vxlan_gro_prepare_receive() (bsc#1012628).
- drm: renesas: rz-du: mipi_dsi: Fix return path on error
(bsc#1012628).
- alarmtimer: Remove stale return description from
alarm_handle_timer() (bsc#1012628).
- OPP: Fix race between OPP addition and lookup (bsc#1012628).
- crypto: ccp - Reverse the cleanup order in psp_dev_destroy()
(bsc#1012628).
- crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one
(bsc#1012628).
- crypto: ccp - Check for page allocation failure correctly in
TIO (bsc#1012628).
- crypto: ccp - Initialize data during __sev_snp_init_locked()
(bsc#1012628).
- crypto: atmel-sha204a - fix blocking and non-blocking rng logic
(bsc#1012628).
- crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve
(bsc#1012628).
- crypto: asymmetric_keys - fix OOB read in
pefile_digest_pe_contents (bsc#1012628).
- ARM: multi_v7_defconfig: Correct QCOM_RPMH and QCOM_RPMHPD
(bsc#1012628).
- accel/amdxdna: Fix clflush buffer size (bsc#1012628).
- dlm: fix add msg handle in send_queue ordered (bsc#1012628).
- nilfs2: fix backing_dev_info reference leak (bsc#1012628).
- ntb: Store original DMA address for future release
(bsc#1012628).
- ntb: Use consistent DMA attributes when freeing DMA mappings
(bsc#1012628).
- media: qcom: camss: vfe: fix PIX subdev naming on VFE lite
(bsc#1012628).
- dts: riscv: spacemit: correct 32k clock frequency (bsc#1012628).
- arm64: dts: qcom: sdm660: set cdsp compute-cbs' regs properly
(bsc#1012628).
- arm64: dts: qcom: sdm630: set adsp compute-cbs' regs properly
(bsc#1012628).
- arm64: dts: qcom: lemans: Move PCIe devices into soc node
(bsc#1012628).
- media: iris: scale MMCX power domain on SM8250 (bsc#1012628).
- media: venus: scale MMCX power domain on SM8250 (bsc#1012628).
- iommu/amd: Fix a stale comment about which legacy mode is user
visible (bsc#1012628).
- soc: mediatek: mtk-mmsys: Restore MT8167 routing masks lost
during merge (bsc#1012628).
- bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative
dentries (bsc#1012628).
- uaccess: fix ignored_trailing logic in copy_struct_to_user()
(bsc#1012628).
- sockptr: fix usize check in copy_struct_from_sockptr() for
user pointers (bsc#1012628).
- arm64: dts: mediatek: mt7988a-bpi-r4pro: rework pcie gpio-hog
handling (bsc#1012628).
- arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce
buffer to host (bsc#1012628).
- workqueue: forbid TEST_WORKQUEUE from being built-in
(bsc#1012628).
- drm/amdgpu: fix error return code in mes_v12_1_map_test_bo
(bsc#1012628).
- arm64: dts: qcom: glymur-crd: Drop forced host mode for USB
SS0 and SS1 (bsc#1012628).
- arm64: dts: qcom: glymur: Mark USB SS1 and SS2 as role-switch
capable (bsc#1012628).
- rhashtable: give each instance its own lockdep class
(bsc#1012628).
- rust: alloc: fix `Vec::extend_with` SAFETY comment
(bsc#1012628).
- clk: scmi: Fix clock rate rounding (bsc#1012628).
- arm64: dts: qcom: sm8750: Fix DSI1 phy reference clock rate
(bsc#1012628).
- arm64: dts: qcom: kodiak: Fix ICE reg size (bsc#1012628).
- arm64: dts: qcom: sm8450: Fix ICE reg size (bsc#1012628).
- platform/chrome: chromeos_privacy_screen: Check ACPI_COMPANION()
(bsc#1012628).
- platform/chrome: chromeos_tbmc: Check ACPI_COMPANION()
(bsc#1012628).
- platform/chrome: wilco_ec: event: Check ACPI_COMPANION()
(bsc#1012628).
- drm/hisilicon/hibmc: add updating link cap in DP detect()
(bsc#1012628).
- drm/hisilicon/hibmc: fix no showing when no connectors connected
(bsc#1012628).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
(bsc#1012628).
- drm/hisilicon/hibmc: use clock to look up the PLL value
(bsc#1012628).
- evm: terminate and bound the evm_xattrs read buffer
(bsc#1012628).
- thermal: hwmon: Fix critical temperature attribute removal
(bsc#1012628).
- thermal: hwmon: Register a hwmon device for each thermal zone
(bsc#1012628).
- clk: scpi: Unregister child clock providers on remove
(bsc#1012628).
- net/sched: sch_hfsc: annotate data-races in
hfsc_dump_class_stats() (bsc#1012628).
- scsi: hisi_sas: Add slave_destroy interface for v3 hw
(bsc#1012628).
- crypto: ccp - Treat zero-length cert chain as query for blob
lengths (bsc#1012628).
- crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1012628).
- crypto: ccp/sev-dev-tsm - bail out early when pdev->bus is NULL
(bsc#1012628).
- crypto: safexcel - Fix potential memory leak in
safexcel_pci_probe() (bsc#1012628).
- spi: hisi-kunpeng: Use dev_err_probe() for host registration
failure (bsc#1012628).
- net/sched: add qdisc_qlen_inc() and qdisc_qlen_dec()
(bsc#1012628).
- net/sched: sch_dualpi2: annotate data-races in
dualpi2_dump_stats() (bsc#1012628).
- net/sched: sch_htb: do not change sch->flags in htb_dump()
(bsc#1012628).
- net/sched: sch_htb: annotate data-races (I) (bsc#1012628).
- ipv6: addrconf: bail out of dad_failure when state is no longer
POSTDAD (bsc#1012628).
- IB/mlx5: Fix transport-domain rollback and initialize lb mutex
earlier (bsc#1012628).
- RDMA/hns: Fix arithmetic overflow in calc_hem_config()
(bsc#1012628).
- RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure
(bsc#1012628).
- RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference
(bsc#1012628).
- RDMA/srpt: fix integer overflow in immediate data length check
(bsc#1012628).
- RDMA/hns: Initialize seqfile before creating file (bsc#1012628).
- tools/rtla: Fix --dump-tasks usage in timerlat (bsc#1012628).
- rtla: Stop the record trace on interrupt (bsc#1012628).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
(bsc#1012628).
- dm: limit target bio polling to one shot (bsc#1012628).
- selftests/bpf: Override EXTRA_LDFLAGS for static builds
(bsc#1012628).
- selftests/bpf: Reject unsupported -k option in vmtest.sh
(bsc#1012628).
- selftests/bpf: Fix test for refinement of single-value tnum
(bsc#1012628).
- iommu/arm-smmu-qcom: Fix fastrpc compatible string in ACTLR
client match table (bsc#1012628).
- sched/fair: Update util_est after updating util_avg during
dequeue (bsc#1012628).
- selftests/mm: Fix resv_sz when parsing arm64 signal frame
(bsc#1012628).
- firmware: arm_ffa: Honor partition info descriptor size
(bsc#1012628).
- arm64: dts: freescale: imx95-verdin-ivy: fix RS485 RTS polarity
(bsc#1012628).
- arm64: dts: imx8dxl-evk: Remove unnecessary PCIe EP properties
(bsc#1012628).
- arm64: dts: imx8qxp-mek: Remove unnecessary PCIe EP vpcie-supply
(bsc#1012628).
- arm64: dts: imx95-19x19-evk: Fix PCIe EP vpcie-supply
(bsc#1012628).
- hfs: fix incorrect inode ID assignment in hfs_new_inode()
(bsc#1012628).
- media: atomisp: Fix memory leak in atomisp_fixed_pattern_table()
(bsc#1012628).
- media: atomisp: gc2235: fix UAF and memory leak (bsc#1012628).
- staging: media: atomisp: fix loop shadowing in
ia_css_stream_destroy() (bsc#1012628).
- riscv: dts: spacemit: set console baud rate on Milk-V Jupiter
(bsc#1012628).
- riscv: dts: spacemit: fix uboot partition offset on Milk-V
Jupiter (bsc#1012628).
- firmware: smccc: Fix Arm SMCCC SOC_ID name call (bsc#1012628).
- firmware: arm_scmi: Read sensor config as 32-bit value
(bsc#1012628).
- media: synopsys: Fix IPI using hardcoded datatype (bsc#1012628).
- sysfs: clamp show() return value in sysfs_kf_read()
(bsc#1012628).
- bitops: use common function parameter names (bsc#1012628).
- regulator: dt-bindings: mt6359: Drop regulator-name pattern
restrictions (bsc#1012628).
- tools/nolibc: getopt: Fix potential out of bounds access
(bsc#1012628).
- vfio: selftests: Fix out-of-tree build with make O=
(bsc#1012628).
- vfio: selftests: Allow builds when ARCH=x86 (bsc#1012628).
- nilfs2: Fix return in nilfs_mkdir (bsc#1012628).
- vfio/xe: avoid duplicate reset in xe_vfio_pci_reset_done
(bsc#1012628).
- net/sched: sch_drr: annotate data-races around cl->deficit
(bsc#1012628).
- regmap-i2c: fix sparse warning in regmap_smbus_word_write_reg16
(bsc#1012628).
- media: rockchip: rga: fix too small buffer size (bsc#1012628).
- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
(bsc#1012628).
- arm64: dts: qcom: eliza-mtp: Fix the debug UART index
(bsc#1012628).
- arm64: dts: qcom: kaanapali: Add power-domain and iface clk
for ice node (bsc#1012628).
- arm64: dts: qcom: lemans: Add power-domain and iface clk for
ice node (bsc#1012628).
- arm64: dts: qcom: monaco: Add power-domain and iface clk for
ice node (bsc#1012628).
- arm64: dts: qcom: sc7180: Add power-domain and iface clk for
ice node (bsc#1012628).
- arm64: dts: qcom: kodiak: Add power-domain and iface clk for
ice node (bsc#1012628).
- arm64: dts: qcom: sm8450: Add power-domain and iface clk for
ice node (bsc#1012628).
- arm64: dts: qcom: sm8550: Add power-domain and iface clk for
ice node (bsc#1012628).
- arm64: dts: qcom: sm8650: Add power-domain and iface clk for
ice node (bsc#1012628).
- arm64: dts: qcom: sm8750: Add power-domain and iface clk for
ice node (bsc#1012628).
- tracing: Bound synthetic-field strings with seq_buf
(bsc#1012628).
- arm64: dts: qcom: lemans: Add eDP ref clock for eDP PHYs
(bsc#1012628).
- arm64: dts: qcom: glymur: Fix wrong interrupt number for i2c19
(bsc#1012628).
- arm64: dts: qcom: sdm845-xiaomi-beryllium: Correct IPA FW path
(bsc#1012628).
- writeback: drop now-unnecessary rcu_barrier() in
cgroup_writeback_umount() (bsc#1012628).
- kernfs: fix suspicious RCU usage in kernfs_put() (bsc#1012628).
- device property: fix fwnode reference leak in
fwnode_graph_get_endpoint_by_id() (bsc#1012628).
- driver core: Use mod_delayed_work to prevent lost deferred
probe work (bsc#1012628).
- Revert "treewide: Fix probing of devices in DT overlays"
(bsc#1012628).
- of: dynamic: Fix overlayed devices not probing because of
fw_devlink (bsc#1012628).
- crypto: eip93 - fix reset ring register definition
(bsc#1012628).
- ASoC: mediatek: mt8189: Fix probe resource cleanup
(bsc#1012628).
- drm/msm/mdss: correct UBWC programming sequences (bsc#1012628).
- cpufreq: Documentation: fix sampling_down_factor range
(bsc#1012628).
- cpufreq: conservative: Simplify frequency limit handling
(bsc#1012628).
- pwm: imx27: Fix variable truncation in .apply() (bsc#1012628).
- RDMA/mana_ib: Use ib_get_eth_speed for reporting port speed
(bsc#1012628).
- tools/nolibc: stackprotector: Avoid stalling program startup
if crng is not init yet (bsc#1012628).
- bus: sunxi-rsb: Always check register address validity
(bsc#1012628).
- pinctrl: spacemit: fix NULL check in spacemit_pin_set_config
(bsc#1012628).
- ASoC: dapm: Fix widget lookup with prefixed names across DAPM
contexts (bsc#1012628).
- RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs
(bsc#1012628).
- RDMA/rxe: Fix a use-after-free problem in rxe_mmap
(bsc#1012628).
- IB/mlx4: Fix refcount leak in add_port() error path
(bsc#1012628).
- RDMA/hns: Fix warning in poll cq direct mode (bsc#1012628).
- RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1012628).
- ACPI: PAD: Fix teardown ordering in acpi_pad_remove()
(bsc#1012628).
- RDMA/counter: Fix incorrect port index in rdma_counter_init()
error cleanup (bsc#1012628).
- pinctrl: meson: amlogic-a4: fix gpio output glitch
(bsc#1012628).
- PM: sleep: Use complete() in device_pm_sleep_init()
(bsc#1012628).
- MIPS: Fix big-endian stack argument fetching in o32 wrapper
(bsc#1012628).
- MIPS: DEC: Remove do_IRQ() call indirection (bsc#1012628).
- mips: ralink: mt7621: add missing __iomem (bsc#1012628).
- mips: n64: add __iomem for writel call (bsc#1012628).
- driver core: Fix missing jiffies conversion in
deferred_probe_extend_timeout() (bsc#1012628).
- driver core: Guard deferred probe timeout extension with
delayed_work_pending() (bsc#1012628).
- arm64: tegra: Fix address of Tegra264 main GPIO controller
(bsc#1012628).
- mtd: spi-nor: debugfs: Fix the flags list (bsc#1012628).
- mtd: spi-nor: Drop duplicate Kconfig dependency (bsc#1012628).
- wifi: ath12k: fix error unwind on arch_init() failure in PCI
probe (bsc#1012628).
- cpufreq: governor: Fix data races on per-CPU idle/nice baselines
(bsc#1012628).
- cpufreq: governor: Fix stale prev_cpu_nice spike when enabling
ignore_nice_load (bsc#1012628).
- ALSA: xen-front: Reset event channel state on stream clear
(bsc#1012628).
- ALSA: xen-front: Connect event channel after stream prepare
(bsc#1012628).
- ALSA: seq: oss: Fix UAF at handling events with embedded SysEx
data (bsc#1012628).
- ALSA: seq: midi: Serialize output teardown with event_input
(bsc#1012628).
- selftests: Fix Makefile target for nsfs (bsc#1012628).
- pinctrl: nuvoton: ma35d1: fix MFP register offset and pin table
(bsc#1012628).
- pinctrl: cs42l43: Fix leaked pm reference on error path
(bsc#1012628).
- pinctrl: cs42l43: Fix polarity on debounce (bsc#1012628).
- init/initramfs_test: wait_for_initramfs() before running
(bsc#1012628).
- nvmet-tcp: fix page fragment cache leak in error path
(bsc#1012628).
- nvmet-tcp: check return value of nvmet_tcp_set_queue_sock
(bsc#1012628).
- nvme-multipath: fix flex array size in struct nvme_ns_head
(bsc#1012628).
- nvme-pci: fix out-of-bounds access in
nvme_setup_descriptor_pools (bsc#1012628).
- workqueue: drop spurious '*' from print_worker_info() fn
declaration (bsc#1012628).
- ipv6: guard against possible NULL deref in __in6_dev_stats_get()
(bsc#1012628).
- net/sched: cls_bpf: prevent unbounded recursion in offload
rollback (bsc#1012628).
- iommu/amd: Fix premature break in init_iommu_one()
(bsc#1012628).
- ALSA: hda/realtek:ALC269 fixup for Yoga Pro 7 15ASH11 mic mute
LED (bsc#1012628).
- dt-bindings: vendor-prefixes: Add Verbatim Corporation
(bsc#1012628).
- rtla/actions: Restore continue flag in actions_perform()
(bsc#1012628).
- drm/tegra: gr2d/gr3d: Initialize address register map before
HOST1X client is registered (bsc#1012628).
- drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove
(bsc#1012628).
- gpu: host1x: Allow entries in BO caches to be freed
(bsc#1012628).
- drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info
(bsc#1012628).
- gpu: host1x: mipi: Fix device_node reference leak in
tegra_mipi_request() (bsc#1012628).
- drm/tegra: dc: Fix device node reference leak in
tegra_dc_has_output() (bsc#1012628).
- gpu: host1x: Fix iommu_map_sgtable() return value check
(bsc#1012628).
- drm/tegra: Fix iommu_map_sgtable() return value check
(bsc#1012628).
- drm/nouveau/bios: specify correct display fuse register for
Ampere and Ada (bsc#1012628).
- libbpf: Harden parse_vma_segs() path parsing (bsc#1012628).
- bpftool: Fix typo in struct_ops map FD generation for light
skeleton (bsc#1012628).
- libbpf: Fix UAF in strset__add_str() (bsc#1012628).
- ARM: tegra: Add #{address,size}-cells to Chromium-based
/firmware (bsc#1012628).
- arm64: tegra: Add #{address,size}-cells to Chromium-based
/firmware (bsc#1012628).
- rust: devres: add 'static bound to Devres<T> (bsc#1012628).
- dax/kmem: account for partial discontiguous resource upon
removal (bsc#1012628).
- lib/base64: validate before writing in decode tail path
(bsc#1012628).
- rust: uaccess: use INLINE_COPY_TO_USER to guard copy_to_user()
(bsc#1012628).
- uaccess: unify inline vs outline copy_{from,to}_user() selection
(bsc#1012628).
- uaccess: minimize INLINE_COPY_USER-related ifdefery
(bsc#1012628).
- rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()
(bsc#1012628).
- ocfs2: don't BUG_ON an invalid journal dinode (bsc#1012628).
- ocfs2: kill osb->system_file_mutex lock (bsc#1012628).
- crypto: hisilicon/qm - disable error report before flr
(bsc#1012628).
- crypto: inside-secure/eip93 - Add check for
devm_request_threaded_irq (bsc#1012628).
- crypto: tegra - Fix dma_free_coherent size error (bsc#1012628).
- crypto: tegra - Return ENOMEM when input buffer allocation
fails for ccm (bsc#1012628).
- crypto: ccp/tsm - Enable the root port after the endpoint
(bsc#1012628).
- sched/deadline: Reject debugfs dl_server writes for offline CPUs
(bsc#1012628).
- drm/msm/dp: fix HPD state status bit shift value (bsc#1012628).
- drm/msm/dp: Fix the ISR_* enum values (bsc#1012628).
- firmware: samsung: acpm: Add devm_acpm_get_by_phandle helper
(bsc#1012628).
- firmware: samsung: acpm: remove compile-testing stubs
(bsc#1012628).
- drm/msm/a8xx: Make a8xx_recover IFPC safe (bsc#1012628).
- drm/msm/a8xx: Fix RSCC offset (bsc#1012628).
- EDAC/igen6: Fix call trace due to missing release()
(bsc#1012628).
- EDAC/igen6: Fix memory topology parsing for Panther Lake-H SoCs
(bsc#1012628).
- EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in
skx_get_dimm_info (bsc#1012628).
- arm64: dts: st: Fix SAI addresses on stm32mp251 (bsc#1012628).
- arm: dts: bcm2711: Fix typo in gpio-line-names (bsc#1012628).
- RDMA/umem: Add ib_umem_is_contiguous() stub for
!CONFIG_INFINIBAND_USER_MEM (bsc#1012628).
- RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1012628).
- RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path
(bsc#1012628).
- dts: riscv: spacemit: k3: Fix I/O power settings (bsc#1012628).
- Revert "media: venus: hfi_platform: Correct supported codecs
for sc7280" (bsc#1012628).
- media: qcom: venus: drop extra padding in NV12 raw size
calculation (bsc#1012628).
- media: qcom: venus: relax encoder frame/blur dimension steps
on v4 (bsc#1012628).
- media: qcom: venus: relax encoder frame/blur step size on v6
(bsc#1012628).
- amba: use generic driver_override infrastructure (bsc#1012628).
- cdx: use generic driver_override infrastructure (bsc#1012628).
- Drivers: hv: vmbus: use generic driver_override infrastructure
(bsc#1012628).
- rpmsg: use generic driver_override infrastructure (bsc#1012628).
- arm64: dts: renesas: r8a78000: Fix GIC-720AE View 1
Redistributor description (bsc#1012628).
- arm64: dts: renesas: ironhide: Describe all reserved memory
(bsc#1012628).
- md/raid10: reset read_slot when reusing r10bio for discard
(bsc#1012628).
- md/raid1,raid10: fix deadlock in read error recovery path
(bsc#1012628).
- md/raid1,raid10: fix error-path detection with md_cloned_bio()
(bsc#1012628).
- md/raid1,raid10: fix bio accounting for split md cloned bios
(bsc#1012628).
- raid1: fix nr_pending leak in REQ_ATOMIC bad-block error path
(bsc#1012628).
- bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat
(bsc#1012628).
- selftests/bpf: add verification for BPF_PROG_QUERY attr size
boundaries (bsc#1012628).
- liveupdate: Use refcount_t for FLB reference counts
(bsc#1012628).
- liveupdate: Reference count incoming FLB data (bsc#1012628).
- libbpf: Skip hash computation when loader generation failed
(bsc#1012628).
- libbpf: Skip endianness swap when loader generation failed
(bsc#1012628).
- liveupdate: skip serialization for context-preserving kexec
(bsc#1012628).
- liveupdate: fix TOCTOU race in luo_session_retrieve()
(bsc#1012628).
- liveupdate: block session mutations during reboot (bsc#1012628).
- liveupdate: fix u-a-f in luo_file_unpreserve_files() and
luo_file_finish() (bsc#1012628).
- ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode
data writeback (bsc#1012628).
- spi: atmel: fix DMA channel and bounce buffer leaks
(bsc#1012628).
- spi: imx: replace dmaengine_terminate_all() with
dmaengine_terminate_sync() (bsc#1012628).
- ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble
(bsc#1012628).
- NFSD: Fix delegation reference leak in nfsd4_revoke_states
(bsc#1012628).
- ARM: imx3: Fix CCM node reference leak (bsc#1012628).
- HID: wiimote: Fix table layout and whitespace errors
(bsc#1012628).
- wifi: ath12k: fix incorrect HT/VHT/HE/EHT MCS reporting in
monitor mode (bsc#1012628).
- wifi: ath12k: fix memory leak in
ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1012628).
- wifi: ath12k: fix inconsistent arvif state in vdev_create
error paths (bsc#1012628).
- wifi: ath12k: fix NULL deref in change_sta_links for unready
link (bsc#1012628).
- ata: libata: Fix ata_exec_internal() (bsc#1012628).
- ACPI: button: Fix lid_device value leak past driver removal
(bsc#1012628).
- ARM: imx31: Fix IIM mapping leak in revision check
(bsc#1012628).
- x86/cpu: Keep the PROCESSOR_SELECT menu together (bsc#1012628).
- nvdimm/btt: Handle preemption in BTT lane acquisition
(bsc#1012628).
- tcp_bbr: fix SPDX-License-Identifier to be GPL-2.0 OR
BSD-3-Clause (bsc#1012628).
- scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard
and multi-channel scans" (bsc#1012628).
- bpf: Reject exclusive maps as inner maps in map-in-map
(bsc#1012628).
- libbpf: Reject non-exclusive metadata maps in the signed loader
(bsc#1012628).
- libbpf: Skip initial_value override on signed loaders
(bsc#1012628).
- libbpf: Skip max_entries override on signed loaders
(bsc#1012628).
- scsi: pm8001: Fix error code in non_fatal_log_show()
(bsc#1012628).
- scsi: ufs: Fix wrong value printed in unexpected UPIU response
case (bsc#1012628).
- bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
(bsc#1012628).
- mm/fake-numa: fix under-allocation detection in uniform split
(bsc#1012628).
- ext2: fix ignored return value of generic_write_sync()
(bsc#1012628).
- sched: restore timer_slack_ns when resetting RT policy on fork
(bsc#1012628).
- nvme: fix FDP fdpcidx bounds check (bsc#1012628).
- driver core: Use system_percpu_wq instead of system_wq
(bsc#1012628).
- bpf: Reject exclusive maps for bpf_map_elem iterators
(bsc#1012628).
- tick/sched: Fix TOCTOU in nohz idle time fetch (bsc#1012628).
- lib/test_meminit: use && for bools (bsc#1012628).
- riscv: dts: sophgo: sg2044: use hex for CPU unit address
(bsc#1012628).
- riscv: dts: sophgo: sg2042: use hex for CPU unit address
(bsc#1012628).
- configfs_lookup(): don't leave ->s_dentry dangling on failure
(bsc#1012628).
- lockdep/selftests: Restore migrate_disable() state on PREEMPT_RT
(bsc#1012628).
- lockdep/selftests: Restore sched_rt_mutex state on PREEMPT_RT
(bsc#1012628).
- ext4: fix fast commit wait/wake bit mapping on 64-bit
(bsc#1012628).
- irqchip/exynos-combiner: Remove useless spinlock (bsc#1012628).
- drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu_coredump
ring dump (bsc#1012628).
- drm/amd/pm: Add empty string validation to sysfs store functions
(bsc#1012628).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
(bsc#1012628).
- accel/amdxdna: Return errors for failed debug BO commands
(bsc#1012628).
- bpftool: Use libbpf error code for flow dissector query
(bsc#1012628).
- vhost: fix vhost_get_avail_idx for a non empty ring
(bsc#1012628).
- iommu/vt-d: Fix RB-tree corruption in probe error path
(bsc#1012628).
- mm: preserve PG_dropbehind flag during folio split
(bsc#1012628).
- eventpoll: rename attach_epitem() to ep_attach_file()
(bsc#1012628).
- eventpoll: split ep_insert() into alloc + register stages
(bsc#1012628).
- eventpoll: extract ep_deliver_event() from ep_send_events()
(bsc#1012628).
- eventpoll: wrap EP_UNACTIVE_PTR in typed sentinel helpers
(bsc#1012628).
- perf/x86/amd/core: Always use the NMI latency mitigation
(bsc#1012628).
- perf/x86/intel/uncore: Fix discovery unit lookup for multi-die
systems (bsc#1012628).
- perf/x86/intel/uncore: Fix PCI device refcount leak in UPI
discovery (bsc#1012628).
- perf/x86/amd/uncore: Use Node ID to identify DF and UMC domains
(bsc#1012628).
- xfrm: fix NAT-related field inheritance in SA migration
(bsc#1012628).
- wifi: wlcore: enable the right set of ciphers (bsc#1012628).
- cxl/fwctl: Fix __fortify_panic (bsc#1012628).
- cxl/test: Fix __fortify_panic (bsc#1012628).
- bpf: Take mmap_lock in zap_pages() (bsc#1012628).
- drm/amdkfd: always resume_all after suspend_all (bsc#1012628).
- of: reserved_mem: avoid post-init UAF when
alloc_reserved_mem_array() fails (bsc#1012628).
- ocfs2: rebase copied fsdlm LVB pointers in locking_state
(bsc#1012628).
- lib: kunit_iov_iter: repeatedly call alloc_pages_bulk()
(bsc#1012628).
- ocfs2: fix buffer head management in ocfs2_read_blocks()
(bsc#1012628).
- ocfs2: validate fast symlink target during inode read
(bsc#1012628).
- ocfs2: reject FITRIM ranges shorter than a cluster
(bsc#1012628).
- ocfs2/dlm: require a ref for locking_state debugfs open
(bsc#1012628).
- ocfs2: fix race between ocfs2_control_install_private() and
ocfs2_control_release() (bsc#1012628).
- ocfs2: fix out-of-bounds write in ocfs2_remove_refcount_extent
(bsc#1012628).
- cxl/pci: Fix the incorrect check of pci_read_config_word()
return (bsc#1012628).
- cxl/pci: Convert PCIBIOS errors to errno on DVSEC config
accesses (bsc#1012628).
- netfilter: nfnetlink_osf: fix mss parsing on big-endian
architectures (bsc#1012628).
- netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for
accessing helper flags (bsc#1012628).
- netfilter: synproxy: drop packets if timestamp adjustment fails
(bsc#1012628).
- netfilter: synproxy: adjust duplicate timestamp options
(bsc#1012628).
- netfilter: synproxy: fix unaligned memory access in timestamp
adjustment (bsc#1012628).
- netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack
lock (bsc#1012628).
- netfilter: cttimeout: detach dataplane timeout policy and
repurpose refcount (bsc#1012628).
- ALSA: usb-audio: qcom: Initialize offload control return value
(bsc#1012628).
- mm/slub: preserve original size in _kmalloc_nolock_noprof
retry path (bsc#1012628).
- x86/cpu: Remove obsolete aperfmperf_get_khz() declaration
(bsc#1012628).
- netfilter: conntrack: revert ct extension genid infrastructure
(bsc#1012628).
- netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master
helper is pptp (bsc#1012628).
- ntfs: free link name from ntfs_name_cache (bsc#1012628).
- RDMA/hfi1: Open-code rvt_set_ibdev_name() (bsc#1012628).
- IB/cm: Fix av cm device leak on an error path in
cm_init_av_by_path() (bsc#1012628).
- ALSA: hda: fix Kconfig dependency of HD Audio PCI (bsc#1012628).
- RDMA/irdma: Fix OOB read during CQ MR registration
(bsc#1012628).
- RDMA/irdma: Initialize iwmr->access during MR registration
(bsc#1012628).
- arm64: dts: imx8mp-kontron: Reduce EERAM SPI clock frequency
(bsc#1012628).
- arm64: dts: imx94: fix DDR PMU interrupt number (bsc#1012628).
- arm64: dts: imx95: Correct PCIe outbound address space
configuration (bsc#1012628).
- arm64: dts: lx2162a-clearfog: use rev2 SoC dtsi (bsc#1012628).
- arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio
codec as well (bsc#1012628).
- arm64: dts: imx8mp-kontron: Fix GPIO for display power switch
(bsc#1012628).
- arm64: dts: freescale: fsl-ls1028a-tqmls1028a-mbls1028a:
switch mmc aliases (bsc#1012628).
- RDMA/siw: Fix endpoint/socket association handling
(bsc#1012628).
- selftests/bpf: Fix flaky file_reader test (bsc#1012628).
- bpf: Clear rb node linkage when freeing bpf_rb_root
(bsc#1012628).
- bpf: Check tail zero of bpf_map_info (bsc#1012628).
- bpf: Check tail zero of bpf_prog_info (bsc#1012628).
- bpf: Update transport_header when encapsulating UDP tunnel in
lwt (bsc#1012628).
- kernfs: fix xattr race condition with multiple superblocks
(bsc#1012628).
- tmpfs: simplify constructing "security.foo" xattr names
(bsc#1012628).
- simple_xattr: change interface to pass struct simple_xattrs **
(bsc#1012628).
- simpe_xattr: use per-sb cache (bsc#1012628).
- kernfs: link kn to its parent before the LSM init hook
(bsc#1012628).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
response (bsc#1012628).
- wifi: wcn36xx: fix OOB read from firmware count in
PRINT_REG_INFO indication (bsc#1012628).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
response (bsc#1012628).
- ALSA: seq: Fix partial userptr event expansion (bsc#1012628).
- ALSA: pcm: Fix unlocked runtime state reads in xfer ioctls
(bsc#1012628).
- riscv: cpu_ops: Change return value type of cpu_is_stopped()
to bool (bsc#1012628).
- riscv: stacktrace: Remove bogus -0x4 offset in non-FP
walk_stackframe (bsc#1012628).
- ALSA: seq: Clear variable event pointer on read (bsc#1012628).
- riscv: alternative: Use IS_ENABLED() over ifdeffery for
apply_vdso_alternatives() (bsc#1012628).
- riscv: alternative: Pass vDSO start as parameter to
apply_vdso_alternatives() (bsc#1012628).
- riscv: alternative: Also patch the CFI vDSO (bsc#1012628).
- bpf: Verifier support for sleepable tracepoint programs
(bsc#1012628).
- bpf: Reject sleepable BPF_LSM_CGROUP programs at load time
(bsc#1012628).
- netfilter: flowtable: avoid num_encaps underflow on bridge
VLAN untag (bsc#1012628).
- filelock: fix break_lease() stub signature for
CONFIG_FILE_LOCKING=n (bsc#1012628).
- bpf: Fix NMI/tracepoint re-entry deadlock on lru locks
(bsc#1012628).
- kunit:tool: Don't write to stdout when it should be disabled
(bsc#1012628).
- wifi: mac80211: bound S1G TIM PVB walk to the TIM element
(bsc#1012628).
- powerpc/8xx: implement get_direction() in cpm1 (bsc#1012628).
- bpf: Fix NULL pointer dereference in bpf_task_from_vpid()
(bsc#1012628).
- ACPI: IPMI: Fix message kref handling on dead device
(bsc#1012628).
- ACPI: processor: Add cpuidle driver check in
acpi_processor_register_idle_driver() (bsc#1012628).
- cpufreq: Documentation: fix conservative governor freq_step
description (bsc#1012628).
- thermal: testing: reject missing command arguments
(bsc#1012628).
- btrfs: don't force DIO writes to be serialized (bsc#1012628).
- ntfs: validate resident attribute lists and harden the validator
(bsc#1012628).
- ntfs: bound the look-ahead attribute-list entry in
ntfs_external_attr_find() (bsc#1012628).
- ntfs: bound the attribute-list entry in ntfs_read_inode_mount()
(bsc#1012628).
- ntfs: fix u16 truncation of restart-area length check
(bsc#1012628).
- IB/mlx5: Don't take the rereg_mr fallback without a new
translation (bsc#1012628).
- IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1012628).
- RDMA/nldev: Fix locking when accessing mr->pd (bsc#1012628).
- IB/mlx5: Remove unused mkc bits in
mlx5r_umr_update_mr_page_shift() (bsc#1012628).
- IB/mlx5: Pull the pdn out of the depths of the umr machinery
(bsc#1012628).
- IB/mlx5: Don't mangle the mr->pd inside the rereg callback
(bsc#1012628).
- spi: ep93xx: fix double-free of zeropage on DMA setup failure
(bsc#1012628).
- ASoC: amd: acp-sdw-legacy: Bound DAI link iteration
(bsc#1012628).
- ASoC: amd: acp-sdw-sof: Bound DAI link iteration (bsc#1012628).
- firmware_loader: Fix recursive lock in device_cache_fw_images()
(bsc#1012628).
- configfs: fix lockless traversals of ->s_children (bsc#1012628).
- watchdog: unregister PM notifier on watchdog unregister
(bsc#1012628).
- pinctrl: qcom: Fix resolving register base address from device
node (bsc#1012628).
- scsi: target: Fix hexadecimal CHAP_I handling (bsc#1012628).
- scsi: ufs: core: Handle PM commands timeout before SCSI EH
(bsc#1012628).
- scsi: target: Remove tcm_loop target reset handling
(bsc#1012628).
- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset
of pins 34-39 (bsc#1012628).
- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset
of pins 34-39 (bsc#1012628).
- dt-bindings: pinctrl: realtek,rtd1625: Fix input voltage
property name (bsc#1012628).
- pinctrl: PINCTRL_STMFX should depend on CONFIG_OF (bsc#1012628).
- iommufd: Take dma_resv lock before dma_buf_unpin() in release
path (bsc#1012628).
- iommufd: Destroy the pages content after detaching from dmabuf
(bsc#1012628).
- lib/test_hmm: fix memory leak in dmirror_migrate_to_system()
(bsc#1012628).
- vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()
(bsc#1012628).
- rust: kbuild: show the right `quiet_cmd_rustc_procmacrolibrary`
(bsc#1012628).
- remoteproc: qcom_q6v5_wcss: drop redundant wcss_q6_bcr_reset
(bsc#1012628).
- hwspinlock: qcom: avoid uninitialized struct members
(bsc#1012628).
- sched/fair: Fix cpu_util runnable_avg arithmetic (bsc#1012628).
- ARM: configs: Drop duplicated CONFIG_EXT4_FS (bsc#1012628).
- wifi: mt76: mt7925: clean up DMA on probe failure (bsc#1012628).
- wifi: mt76: mt7921: fix resource leak in probe error path
(bsc#1012628).
- wifi: mt76: use kfree_rcu for offchannel link in
mt76_put_vif_phy_link (bsc#1012628).
- wifi: mt76: mt7996: add missing max_remain_on_channel_duration
(bsc#1012628).
- wifi: mt76: mt7996: Fix NULL pointer dereference in
mt7996_init_tx_queues() (bsc#1012628).
- wifi: mt76: mt7925: fix stale pointer comparisons in
change_vif_links (bsc#1012628).
- wifi: mt76: mt7925: keep TX BA state in the primary WCID
(bsc#1012628).
- wifi: mt76: mt792x: skip MLD header rewrite for 802.3 encap TX
(bsc#1012628).
- wifi: mt76: mt7925: validate skb length in testmode query
(bsc#1012628).
- wifi: mt76: mt7996: Fix possible token leak in
mt7996_tx_prepare_skb() (bsc#1012628).
- wifi: mt76: mt7996: Fix possible NULL pointer dereference in
mt7996_mac_write_txwi_80211() (bsc#1012628).
- wifi: mt76: mt7996: fix reading zeroed info->control.flags
after mt76_tx_status_skb_add() (bsc#1012628).
- wifi: mt76: mt7996: remove redundant pdev->bus check in probe
(bsc#1012628).
- wifi: mt76: mt7996: limit work in set_bitrate_mask
(bsc#1012628).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
(bsc#1012628).
- wifi: mt76: mt7915: fix potential tx_retries underflow
(bsc#1012628).
- wifi: mt76: mt7921: fix potential tx_retries underflow
(bsc#1012628).
- wifi: mt76: mt7925: fix potential tx_retries underflow
(bsc#1012628).
- wifi: mt76: mt7996: fix potential tx_retries underflow
(bsc#1012628).
- btrfs: fix invalid pointer dereference in
__btrfs_run_delayed_refs() (bsc#1012628).
- ALSA: aloop: Drop superfluous break (bsc#1012628).
- gpio: mt7621: fix interrupt banks mapping on gpio chips
(bsc#1012628).
- wifi: ath12k: fix EAPOL TX failure caused by stale tcl_metadata
bits (bsc#1012628).
- wifi: ath12k: enable IEEE80211_VHT_EXT_NSS_BW_CAPABLE when
NSS ratio is reported (bsc#1012628).
- fbdev/arm: Export acorndata_8x8 font symbol for bootloader
(bsc#1012628).
- fbdev: sm501fb: Fix buffer errors in OF binding code
(bsc#1012628).
- memory: tegra186-emc: stop borrowing MC aggregate hook for EMC
(bsc#1012628).
- vfs: add FS_USERNS_DELEGATABLE flag and set it for NFS
(bsc#1012628).
- hwmon: (it87) Clamp negative values to zero in set_fan()
(bsc#1012628).
- PM: QoS: Fix misc device registration unwind (bsc#1012628).
- btrfs: zoned: don't account data relocation space-info in
statfs free space (bsc#1012628).
- btrfs: zoned: fix deadlock waiting for ticket during data
relocation (bsc#1012628).
- Revert "btrfs: fix the file offset calculation inside
btrfs_decompress_buf2page()" (bsc#1012628).
- btrfs: zoned: always set max_active_zones for zoned devices
(bsc#1012628).
- btrfs: annotate lockless read of defrag_bytes in should_nocow()
(bsc#1012628).
- btrfs: fix deadlock cloning inline extent when using
flushoncommit (bsc#1012628).
- btrfs: lzo: reject compressed segment that overflows the
compressed input (bsc#1012628).
- ixgbe: do not configure xps for XDP queues (bsc#1012628).
- igc: skip RX timestamp header for frame preemption verification
(bsc#1012628).
- ASoC: sma1307: Fix uevent string leaks in fault worker
(bsc#1012628).
- IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is
not specified (bsc#1012628).
- NFSD: Handle layout stid in nfsd4_drop_revoked_stid()
(bsc#1012628).
- lockd: Stop warning on nlm__int__drop_reply in !V4 cast_status
(bsc#1012628).
- lockd: Translate nlm__int__deadlock in __nlm4svc_proc_lock_msg()
(bsc#1012628).
- lockd: Do not monitor when looking up the LOCK_MSG callback host
(bsc#1012628).
- lockd: Avoid hashing uninitialized bytes in
nlm4svc_lookup_file() (bsc#1012628).
- spi: meson-spifc: fix runtime PM leak on remove (bsc#1012628).
- ASoC: codecs: aw88261: fix incorrect masks for boost regs
(bsc#1012628).
- bpf: Cancel special fields on map value recycle (bsc#1012628).
- clocksource: move NXP timer selection to drivers/clocksource
(bsc#1012628).
- vduse: hold vduse_lock across IDR lookup in open path
(bsc#1012628).
- vhost/vdpa: validate virtqueue index in mmap and fault paths
(bsc#1012628).
- virtio: rtc: tear down old virtqueues before restore
(bsc#1012628).
- virtio_console: read size from config space during device init
(bsc#1012628).
- vduse: Requeue failed read to send_list head (bsc#1012628).
- vhost/net: complete zerocopy ubufs only once (bsc#1012628).
- tools/virtio: check mmap return value in vringh_test
(bsc#1012628).
- vduse: fix compat handling for
VDUSE_IOTLB_GET_FD/VDUSE_VQ_GET_INFO (bsc#1012628).
- vdpa/octeon_ep: Fix PF->VF mailbox data address calculation
(bsc#1012628).
- vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler
(bsc#1012628).
- iomap: pass the correct len to fserror_report_io in
__iomap_write_begin (bsc#1012628).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
(bsc#1012628).
- ASoC: cs35l56: Prevent double-free of debugfs (bsc#1012628).
- ASoC: cs35l56: Cleanup if component_probe fails (bsc#1012628).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
fails (bsc#1012628).
- hwmon: (gpd-fan): drop global driver data and use per-device
allocation (bsc#1012628).
- hwmon: (gpd-fan): Initialize EC before registering hwmon device
(bsc#1012628).
- hwmon: (gpd-fan): fix race condition between device removal
and sysfs access (bsc#1012628).
- ext4: fix ERR_PTR(0) in ext4_mkdir() (bsc#1012628).
- tools: missed broadcast_neigh if_link uapi header (bsc#1012628).
- netlink: specs: rt-link: missed broadcast-neigh (bsc#1012628).
- bonding: 3ad: add lacp_strict configuration knob (bsc#1012628).
- bonding: 3ad: fix carrier when no usable slaves (bsc#1012628).
- bonding: 3ad: fix mux port state on oper down (bsc#1012628).
- ext4: fix kernel BUG in ext4_write_inline_data_end
(bsc#1012628).
- ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT
(bsc#1012628).
- selftests/bpf: Fix bpf_iter/task_vma test (bsc#1012628).
- cxl/test: Verify cmd->size_in before accessing payload
(bsc#1012628).
- cxl/test: Fix integer overflow in mock LSA bounds checks
(bsc#1012628).
- cxl/test: Zero out LSA backing memory to avoid leaking to user
(bsc#1012628).
- of: cpu: add check in __of_find_n_match_cpu_property()
(bsc#1012628).
- vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1012628).
- bpf: Tighten cgroup storage cookie checks for prog arrays
(bsc#1012628).
- m68k: mcf5441x: fix clocks numbering (bsc#1012628).
- pinctrl: sunxi: a523: Remove unneeded IRQ remuxing flag
(bsc#1012628).
- pinctrl: airoha: an7581: add missed gpio32 pin group
(bsc#1012628).
- pinctrl: airoha: an7583: add missed gpio32 pin group
(bsc#1012628).
- pinctrl: airoha: an7581: fix misprint in gpio19 pinconf
(bsc#1012628).
- pinctrl: airoha: an7583: fix misprint in gpio19 pinconf
(bsc#1012628).
- pinctrl: airoha: an7581: fix incorrect led mapping in phy4_led1
pin function (bsc#1012628).
- pinctrl: airoha: an7583: fix incorrect led mapping in phy4_led1
pin function (bsc#1012628).
- pinctrl: airoha: fix pwm pin function for an7581 and an7583
(bsc#1012628).
- pinctrl: airoha: an7583: fix gpio21 pin group (bsc#1012628).
- pinctrl: airoha: an7583: add missed gpio22 pin group
(bsc#1012628).
- pinctrl: airoha: an7583: fix phy1_led1 pin function
(bsc#1012628).
- pinctrl: airoha: an7583: remove undefined groups from pcm_spi
pin function (bsc#1012628).
- arm64: dts: allwinner: a523: Add missing GPIO interrupt
(bsc#1012628).
- ASoC: cs35l56: Fix possible uninitialized value in
cs35l56_spi_system_reset() (bsc#1012628).
- s390/process: Fix kernel thread function pointer type
(bsc#1012628).
- Bluetooth: hci_qca: fix NULL pointer dereference in qca_setup()
for non-serdev device (bsc#1012628).
- Bluetooth: hci_qca: fix NULL pointer dereference in
qca_dmp_hdr() for non-serdev device (bsc#1012628).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
(bsc#1012628).
- Bluetooth: hci_event: fix simultaneous discovery stuck in
FINDING (bsc#1012628).
- Bluetooth: hci_core: Fix UAF in hci_unregister_dev()
(bsc#1012628).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
(bsc#1012628).
- Bluetooth: btintel_pcie: Load IOSF debug regs by controller
variant (bsc#1012628).
- Bluetooth: hci: validate codec capability element length
(bsc#1012628).
- Bluetooth: vhci: validate devcoredump state before side effects
(bsc#1012628).
- RDMA/mlx5: Fix mkey creation error flow rollback (bsc#1012628).
- RDMA/mlx5: Fix TPH extraction in FRMR pool key (bsc#1012628).
- RDMA/core: Fix skipped usage for driver built FRMR key
(bsc#1012628).
- RDMA/core: Fix FRMR aging push to queue error flow
(bsc#1012628).
- RDMA/core: Fix FRMR set pinned push error path (bsc#1012628).
- RDMA/core: Avoid NULL dereference on FRMR bad usage
(bsc#1012628).
- RDMA/core: Fix FRMR handle leak on push failure (bsc#1012628).
- RDMA/core: Add ib_frmr_pool_drop for unrecoverable handles
(bsc#1012628).
- RDMA/mlx5: Drop FRMR pool handle on UMR revoke failure
(bsc#1012628).
- fs: efs: remove unneeded debug prints (bsc#1012628).
- RDMA/mlx5: Remove DCT restrack tracking (bsc#1012628).
- RDMA/mlx5: Remove raw RSS QP restrack tracking (bsc#1012628).
- RDMA/mlx5: Fix undefined shift of user RQ WQE size
(bsc#1012628).
- =?UTF-8?q?RDMA/mlx5:=20Release=20the=20HW=E2=80=91provide?=
=?UTF-8?q?d=20UAR=20index=20rather=20than=20the=20SW=20one?=
(bsc#1012628).
- ASoC: cs35l56: Fix wrong error test on simple_write_to_buffer()
(bsc#1012628).
- ASoC: SOF: Intel: select SND_SOC_SDW_UTILS=y from
SND_SOC_SOF_HDA_GENERIC=y (bsc#1012628).
- ASoC: SOF: Intel: hda-sdw-bpt: select SND_SOF_SOF_HDA_SDW_BPT
properly (bsc#1012628).
- ASoC: codecs: hdac_hdmi: Validate written enum value
(bsc#1012628).
- ASoC: meson: aiu: Validate written enum values (bsc#1012628).
- ASoC: fsl: fsl_audmix: Validate written enum values
(bsc#1012628).
- ASoC: tegra: tegra210_ahub: Validate written enum value
(bsc#1012628).
- ASoC: topology: Check PCM and DAI name strings before use
(bsc#1012628).
- net: dsa: qca8k: fix led devicename when using external mdio
bus (bsc#1012628).
- net/sched: cls_flow: Dont expose folded kernel pointers
(bsc#1012628).
- ipv4: fib: Don't dump dying fib_info in fib_leaf_notify()
(bsc#1012628).
- net: fib_rules: Don't dump dying fib_rule in fib_rules_dump()
(bsc#1012628).
- bridge: cfm: reject invalid CCM interval at configuration time
(bsc#1012628).
- sctp: validate embedded address parameter length (bsc#1012628).
- net: pfcp: allocate per-cpu tstats for PFCP netdevs
(bsc#1012628).
- net: Stop leased rxq before uninstalling its memory provider
(bsc#1012628).
- net/sched: sch_hfsc: Don't make class passive twice
(bsc#1012628).
- tipc: require net admin for TIPCv2 netlink mutators
(bsc#1012628).
- tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1012628).
- tipc: reject inverted service ranges from peer bindings
(bsc#1012628).
- cxl/test: Unregister cxl_acpi in cxl_test_init() error path
(bsc#1012628).
- cxl/test: Add check after kzalloc() memory in alloc_mock_res()
(bsc#1012628).
- crypto: marvell/octeontx - fix DMA cleanup using wrong loop
index (bsc#1012628).
- crypto: cavium/cpt - fix DMA cleanup using wrong loop index
(bsc#1012628).
- crypto: rng - Free default RNG on module exit (bsc#1012628).
- ALSA: usb-audio: qcom: Guard sideband endpoint removal
(bsc#1012628).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
(bsc#1012628).
- iommu/dma-iommu: Fix wrong scatterlist length assignment in
P2PDMA path (bsc#1012628).
- iommufd: Clarify IOAS_MAP_FILE dma-buf support (bsc#1012628).
- spi: xilinx: use FIFO occupancy register to determine buffer
size (bsc#1012628).
- iommu: Avoid copying the user array twice in the full-array
copy helper (bsc#1012628).
- ASoC: sdw_utils: fix missing component_name for cs42l43 part_id
0x2A3B (bsc#1012628).
- cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach()
(bsc#1012628).
- cxl/region: Fill first free targets[] slot during auto-discovery
(bsc#1012628).
- vfio: selftests: Ensure libvfio output dirs are always created
(bsc#1012628).
- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
GPIO (bsc#1012628).
- cxl/region: Block region delete during region creation
(bsc#1012628).
- cxl/region: Resolve region deletion races (bsc#1012628).
- cxl/memdev: Pin parents for entire memdev lifetime
(bsc#1012628).
- power: supply: core: fix supplied_from allocations
(bsc#1012628).
- handshake: Require admin permission for DONE command
(bsc#1012628).
- bnxt: fix head underflow on XDP head-grow (bsc#1012628).
- tcp: clear sock_ops cb flags before force-closing a child socket
(bsc#1012628).
- virtio_net: do not allow tunnel csum offload for non GSO packets
(bsc#1012628).
- net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog
during peek before restoring qlen (bsc#1012628).
- net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog
during peek before restoring qlen (bsc#1012628).
- net/sched: sch_dualpi2: Do not call qdisc_tree_reduce_backlog
during peek before restoring qlen (bsc#1012628).
- net: mana: initialize gdma queue id to INVALID_QUEUE_ID
(bsc#1012628).
- net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE
check (bsc#1012628).
- net: watchdog: fix refcount tracking races (bsc#1012628).
- net: ethernet: mtk_wed: fix loading WO firmware for MT7986
(bsc#1012628).
- net/sched: sch_dualpi2: Add missing module alias (bsc#1012628).
- bpf: Run generic devmap egress prog on private skb
(bsc#1012628).
- net/mlx5: Check max_macs devlink param value against max
capability (bsc#1012628).
- bpf: Fix setting retval to -EPERM for cgroup hooks not returning
errno (bsc#1012628).
- octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1012628).
- net: airoha: Fix error handling in
airoha_ppe_flush_sram_entries() (bsc#1012628).
- net: ethernet: mtk_wed: debugfs: correct index in
wed_amsdu_show() (bsc#1012628).
- net: wwan: t7xx: check skb_clone in control TX (bsc#1012628).
- dpll: fix stale iteration in dpll_pin_on_pin_unregister()
(bsc#1012628).
- dpll: send delete notification before unregister in on-pin
rollback (bsc#1012628).
- dpll: emit per-dpll delete notifications in
dpll_pin_on_pin_unregister() (bsc#1012628).
- dpll: guard sync-pair removal on full pin unregister
(bsc#1012628).
- dpll: balance create/delete notifications in
__dpll_pin_(un)register (bsc#1012628).
- landlock: Fix unmarked concurrent access to socket family
(bsc#1012628).
- net: bcmgenet: Use weighted round-robin TX DMA arbitration
(bsc#1012628).
- octeontx2-af: fix NPC mailbox codes in mbox.h (bsc#1012628).
- net: airoha: Fix register index for Tx-fwd counter configuration
(bsc#1012628).
- net: airoha: Fix debugfs new-tuple display for IPv4 ROUTE
entries (bsc#1012628).
- kcm: use WRITE_ONCE() when changing lower socket callbacks
(bsc#1012628).
- ALSA: seq: oss: Serialize readq reset state with q->lock
(bsc#1012628).
- ALSA: seq: avoid stale FIFO cells during resize (bsc#1012628).
- netfilter: nf_conncount: callers must hold rcu read lock
(bsc#1012628).
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers
and use them (bsc#1012628).
- geneve: Fix off-by-one comparing with GRO_LEGACY_MAX_SIZE
(bsc#1012628).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
(bsc#1012628).
- smb: client: fix conflicting option validation for new mount
API (bsc#1012628).
- cifs: remove all cifs files before kill super (bsc#1012628).
- smb/client: always return a value for FS_IOC_GETFLAGS
(bsc#1012628).
- btrfs: Drop WQ_PERCPU from ordered_flags in
btrfs_init_workqueues() (bsc#1012628).
- bpf: Guard __get_user acesss with access_ok for uprobe_multi
data (bsc#1012628).
- selftests/bpf: Fix typo in verify_umulti_link_info
(bsc#1012628).
- selftests/bpf: Initialize operation name before use
(bsc#1012628).
- bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket
(bsc#1012628).
- udf: fix nls leak on udf_fill_super() failure (bsc#1012628).
- bpf, sockmap: reject overflowing copy + len in
bpf_msg_push_data() (bsc#1012628).
- sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1012628).
- bpf, sockmap: fix integer overflow in bpf_msg_pop_data()
bounds check (bsc#1012628).
- MIPS: mm: Fix out-of-bounds write in maar_res_walk()
(bsc#1012628).
- powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del
(bsc#1012628).
- powerpc/powernv: fix preempt count leak in
pnv_kexec_wait_secondaries_down (bsc#1012628).
- powerpc/kexec: fix double get_cpu() imbalance in
kexec_prepare_cpus (bsc#1012628).
- KEYS: Use acquire when reading state in keyring search
(bsc#1012628).
- tipc: fix UAF in tipc_l2_send_msg() (bsc#1012628).
- tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS
(0xFFFF) (bsc#1012628).
- net: airoha: Fix always-true condition in PPE1 queue reservation
loop (bsc#1012628).
- net: ti: icssg-prueth: Fix AF_XDP fill ring alloc and wakeup
condition (bsc#1012628).
- net: ti: icssg: Use undirected TX tag for native XDP in HSR
offload mode (bsc#1012628).
- net: ti: icssg: Use undirected TX tag for XDP zero copy in
HSR offload mode (bsc#1012628).
- net: ethernet: oa_tc6: Remove FCS size in RX frame
(bsc#1012628).
- ionic: Fix check in ionic_get_link_ext_stats (bsc#1012628).
- RDMA/bnxt_re: Initialize dpi variable to zero (bsc#1012628).
- RDMA/bnxt_re: Free SRQ toggle page after firmware teardown
(bsc#1012628).
- RDMA/bnxt_re: Free CQ toggle page after firmware teardown
(bsc#1012628).
- RDMA/bnxt_re: Avoid displaying the kernel pointer (bsc#1012628).
- RDMA/bnxt_re: Refactor bnxt_re_init_user_qp() (bsc#1012628).
- RDMA/bnxt_re: Update msn table size for app allocated QPs
(bsc#1012628).
- RDMA/bnxt_re: Enhance dbr usecnt logic in doorbell uapis
(bsc#1012628).
- RDMA/bnxt_re: Support doorbells for app allocated QPs
(bsc#1012628).
- RDMA/bnxt_re: Enable app allocated QPs (bsc#1012628).
- RDMA/bnxt_re: Add a max slot check for SQ (bsc#1012628).
- RDMA/bnxt_re: Proper rollback if the ioremap fails
(bsc#1012628).
- RDMA/bnxt_re: Avoid repeated requests to allocate WC pages
(bsc#1012628).
- RDMA/bnxt_re: Fail DBR related page allocation UAPIs if the
feature is disabled (bsc#1012628).
- RDMA/bnxt_re: Reject GET_TOGGLE_MEM when toggle page was not
allocated (bsc#1012628).
- RDMA/hns: Fix memory leak of bonding resources (bsc#1012628).
- RDMA/irdma: Replace waitqueue and flag with completion
(bsc#1012628).
- net: serialize netif_running() check in enqueue_to_backlog()
(bsc#1012628).
- ksmbd: fix use-after-free in same_client_has_lease()
(bsc#1012628).
- mfd: bd72720: Drop BUCK11 ID (bsc#1012628).
- mfd: rsmu: Fix page register setup (bsc#1012628).
- mfd: cs42l43: Sanity check firmware size (bsc#1012628).
- ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write
(bsc#1012628).
- 9p: avoid returning ERR_PTR(0) from mkdir operations
(bsc#1012628).
- net/9p: fix race condition on rdma->state in trans_rdma.c
(bsc#1012628).
- 9p: Add missing read barrier in virtio zero-copy path
(bsc#1012628).
- eventpoll: expand top-of-file overview / locking doc
(bsc#1012628).
- eventpoll: rename epi->next and txlist for clarity
(bsc#1012628).
- eventpoll: Fix epoll_wait() report false negative (bsc#1012628).
- gpiolib: acpi: Only trigger ActiveBoth interrupts on boot
(bsc#1012628).
- i3c: master: svc: Fix missed IBI after false SLVSTART on NPCM845
(bsc#1012628).
- staging: rtl8723bs: fix stainfo check in rtw_aes_decrypt
(bsc#1012628).
- staging: nvec: fix use-after-free in nvec_rx_completed()
(bsc#1012628).
- perf dwarf-aux: Fix libdw segmentation fault in
cu_walk_functions_at (bsc#1012628).
- perf dwarf-aux: Fix libdw API contract violations (bsc#1012628).
- perf srcline: Introduce inline_node__clear_frames()
(bsc#1012628).
- perf libdw: Fix libdw API contract violations and memory leaks
(bsc#1012628).
- perf probe-finder: Fix libdw API contract violations
(bsc#1012628).
- perf annotate-data: Fix libdw API contract violations
(bsc#1012628).
- perf debuginfo: Fix libdw API contract violations (bsc#1012628).
- perf callchain: Handle multiple address spaces (bsc#1012628).
- coresight: cti: Fix DT filter signals silently ignored
(bsc#1012628).
- soundwire: don't program SDW_SCP_BUSCLOCK_SCALE on a unattached
Peripheral (bsc#1012628).
- soundwire: fix bug in sdw_add_element_group_count found by
syzkaller (bsc#1012628).
- coresight: tmc: Fix overflow when calculating is bigger than
2GiB (bsc#1012628).
- coresight: ete: Always save state on power down (bsc#1012628).
- coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore
(bsc#1012628).
- PCI/ASPM: Don't reconfigure ASPM entering low-power state
(bsc#1012628).
- PCI: Introduce named defines for PCI ROM (bsc#1012628).
- PCI: Check ROM header and data structure addr before accessing
(bsc#1012628).
- x86/platform/olpc: xo15: Drop wakeup source on driver removal
(bsc#1012628).
- platform/x86: xo15-ebook: Fix wakeup source and GPE handling
(bsc#1012628).
- perf sched: Add missing mmap2 handler in timehist (bsc#1012628).
- perf tool: Fix missing schedstat delegates and
dont_split_sample_group in delegate_tool (bsc#1012628).
- PCI: intel-gw: Move interrupt enable to own function
(bsc#1012628).
- PCI: intel-gw: Enable clock before PHY init (bsc#1012628).
- PCI: intel-gw: Add .start_link() callback (bsc#1012628).
- PCI: loongson: Do not ignore downstream devices on external
bridges (bsc#1012628).
- rust: alloc: fix assert in `Vec::reserve` doc test
(bsc#1012628).
- bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker()
(bsc#1012628).
- bus: mhi: ep: Add missing state_lock protection for mhi_state
access (bsc#1012628).
- coresight: fix missing error code when trace ID is invalid
(bsc#1012628).
- clk: qcom: cmnpll: Account for reference clock divider
(bsc#1012628).
- dt-bindings: clock: qcom,sm6125-dispcc: reference qcom,gcc.yaml
(bsc#1012628).
- PCI: dwc: Apply ECRC workaround for DesignWare cores prior to
5.10a (bsc#1012628).
- PCI: qcom: Set max OPP before DBI access during resume
(bsc#1012628).
- phy: phy-can-transceiver: Check driver match and driver data
against NULL (bsc#1012628).
- perf pmu-events AMD: Switch l2_itlb_misses to
bp_l1_tlb_miss_l2_tlb_miss.all (bsc#1012628).
- perf unwind: Refactor get_entries to allow dynamic
libdw/libunwind selection (bsc#1012628).
- perf pmu: Skip test on Arm64 when #slots is zero (bsc#1012628).
- clk: at91: sam9x7: Fix gmac_gclk clock definition (bsc#1012628).
- iio: light: acpi-als: Check ACPI_COMPANION() against NULL
(bsc#1012628).
- soundwire: intel_ace2x: release bpt_stream when close it
(bsc#1012628).
- coresight: Fix source not disabled on idr_alloc_u32 failure
(bsc#1012628).
- coresight: Handle helper enable failure properly (bsc#1012628).
- PCI: mediatek-gen3: Do full device power down on removal
(bsc#1012628).
- mailbox: mpfs: fix check for syscon presence in
mpfs_mbox_inbox_isr() (bsc#1012628).
- mailbox: mtk-adsp: fix UAF during device teardown (bsc#1012628).
- mailbox: don't free the channel if the startup callback failed
(bsc#1012628).
- PCI/pwrctrl: Lock device when calling device_is_bound()
(bsc#1012628).
- coresight: platform: defer connection counter increment until
alloc succeeds (bsc#1012628).
- PCI: dwc: Fix signedness bug in fault injection test code
(bsc#1012628).
- PCI: mediatek-gen3: Fix incorrectly skipped pwrctrl error
message (bsc#1012628).
- platform/x86: classmate-laptop: Address memory leaks on driver
removal (bsc#1012628).
- clk: microchip: mpfs-ccc: fix peripheral driver registration
failures after oob fix (bsc#1012628).
- perf build-id: Fix off-by-one bug when printing kernel/module
build-id (bsc#1012628).
- perf event: Fix size of synthesized sample with branch stacks
(bsc#1012628).
- perf inject: Fix itrace branch stack synthesis (bsc#1012628).
- staging: most: video: avoid double free on video register
failure (bsc#1012628).
- usb: host: max3421: Fix shift-out-of-bounds in
max3421_hub_control() (bsc#1012628).
- usb: host: max3421: Reject hub port requests for non-existent
ports (bsc#1012628).
- perf test amd ibs: Fix incorrect kernel version check
(bsc#1012628).
- gpib: Fix inappropriate ioctl error return (bsc#1012628).
- char: tlclk: fix use-after-free in tlclk_cleanup()
(bsc#1012628).
- hpet: Check ACPI_COMPANION() against NULL at probe time
(bsc#1012628).
- sonypi: Check ACPI_COMPANION() against NULL at probe time
(bsc#1012628).
- gpib: fix double decrement of descriptor_busy in command_ioctl()
(bsc#1012628).
- gpib: cb7210: Fix region leak when request_irq fails
(bsc#1012628).
- clk: renesas: rzg2l: Rename iterator in for_each_mod_clock()
to avoid shadowing (bsc#1012628).
- docs: threat-model: add missing closing parenthesis
(bsc#1012628).
- powerpc tools perf: Initialize error code in
auxtrace_record_init function (bsc#1012628).
- PCI: qcom: Disable ASPM L0s for SA8775P (bsc#1012628).
- timers/migration: Update stale @online doc to @available
(bsc#1012628).
- perf header: Sanity check HEADER_EVENT_DESC attr.size before
swap (bsc#1012628).
- perf header: Validate bitmap size before allocating in
do_read_bitmap() (bsc#1012628).
- iio: light: si1133: reset counter to prevent race condition
(bsc#1012628).
- iio: light: si1133: prevent race condition on timeout
(bsc#1012628).
- iio: magnetometer: ak8975: fix potential kernel stack memory
leak (bsc#1012628).
- iio: adc: xilinx-ams: fix out-of-bounds channel lookup in
event handling (bsc#1012628).
- iio: accel: mma8452: handle I2C read error(s) in mma8452_read()
(bsc#1012628).
- iio: tcs3472: power down chip on probe failure (bsc#1012628).
- clk: at91: keep securam node alive while mapping it
(bsc#1012628).
- HID: logitech-hidpp: remove excess kernel-doc member in
hidpp_scroll_counter (bsc#1012628).
- docs: changes.rst: restore pahole 1.26 minimum (regressed by
sort) (bsc#1012628).
- clk: spacemit: k3: Switch to pll2_d6 as parent for PCIe clock
(bsc#1012628).
- clk: spacemit: k3: Fix PCIe clock register offset (bsc#1012628).
- fs/ntfs3: add bounds check to run_get_highest_vcn()
(bsc#1012628).
- fs/ntfs3: fix wrong LCN in run_remove_range() when splitting
a run (bsc#1012628).
- fs/ntfs3: call _ntfs_bad_inode() when failing to rename
(bsc#1012628).
- ntfs3: Allocate iomap inline_data using alloc_page
(bsc#1012628).
- ntfs3: avoid another -Wmaybe-uninitialized warning
(bsc#1012628).
- fs/ntfs3: fix mount failure on 64K page-size kernels
(bsc#1012628).
- drm/amd/display: Add missing kdoc for ALLM parameters
(bsc#1012628).
- thunderbolt: debugfs: Fix margining error counter buffer leak
(bsc#1012628).
- dmaengine: imx-sdma: Refine spba bus searching in probe
(bsc#1012628).
- dt-bindings: dma: nvidia,tegra186-gpc-dma: Make reset optional
(bsc#1012628).
- perf: Fix off-by-one stack buffer overflow in kallsyms__parse()
(bsc#1012628).
- perf annotate: Fix crashes on empty annotate windows
(bsc#1012628).
- perf tools: Guard test_bit from out-of-bounds sample CPU
(bsc#1012628).
- perf sched: Fix thread reference leak in latency_switch_event
(bsc#1012628).
- perf sample: Add file_offset field to struct perf_sample
(bsc#1012628).
- perf sched: Replace BUG_ON on invalid CPU with graceful skip
(bsc#1012628).
- perf sched: Fix NULL dereference in latency_runtime_event
(bsc#1012628).
- perf sched: Fix comp_cpus heap overflow with cross-machine
recordings (bsc#1012628).
- perf tools: Guard remaining test_bit calls from OOB sample CPU
(bsc#1012628).
- perf tools: Add bounds check to cpu__get_node() (bsc#1012628).
- perf sched: Fix thread reference leaks in timehist_get_thread()
(bsc#1012628).
- perf sched: Cap max_cpu at MAX_CPUS in timehist sample
processing (bsc#1012628).
- perf sched: Fix register_pid() overflow, strcpy, and BUG_ON
(bsc#1012628).
- perf mmap: Guard cpu__get_node() return in aio_bind()
(bsc#1012628).
- perf stat: Bounds-check CPU index in topology aggregation
callbacks (bsc#1012628).
- perf c2c: Bounds-check CPU and node IDs before bitmap and
array access (bsc#1012628).
- perf c2c: Bounds-check CPU IDs in setup_nodes() topology loop
(bsc#1012628).
- perf sched: Clean up idle_threads entry on init failure
(bsc#1012628).
- perf sched: Use is_idle_sample() for idle thread runtime cast
guard (bsc#1012628).
- perf sched: Fix thread reference leak in idle hist processing
(bsc#1012628).
- perf sched: Use thread__put() in free_idle_threads()
(bsc#1012628).
- perf sched: Replace BUG_ON and add NULL checks in replay event
helpers (bsc#1012628).
- perf mmap: Fix NULL deref in aio cleanup on alloc failure
(bsc#1012628).
- perf stat: Introduce perf_env__get_cpu_topology() to guard
NULL env->cpu (bsc#1012628).
- perf c2c: Fix use-after-free in he__get_c2c_hists() error path
(bsc#1012628).
- perf timechart: Fix cpu2y() OOB read on untrusted CPU index
(bsc#1012628).
- perf tools: Fix int16_t truncation of max_cpu_num in
set_max_cpu_num() (bsc#1012628).
- perf sched: Free callchain nodes in idle thread cleanup
(bsc#1012628).
- dt-bindings: clock: qcom: Add X1P42100 camera clock controller
(bsc#1012628).
- clk: qcom: camcc-x1e80100: Add support for camera QDSS debug
clocks (bsc#1012628).
- docs: memfd_preservation: fix rendering of ABI documentation
(bsc#1012628).
- mshv: add bounds check on vp_index in mshv_intercept_isr()
(bsc#1012628).
- dmaengine: qcom: gpi: set DMA_PRIVATE capability (bsc#1012628).
- dmaengine: Fix possible use after free (bsc#1012628).
- dmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc
(bsc#1012628).
- dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor
(bsc#1012628).
- clk: qcom: a53: Corrected frequency multiplier for 1152MHz
(bsc#1012628).
- sunrpc: Fix error handling in
rpc_sysfs_xprt_switch_add_xprt_store() (bsc#1012628).
- pNFS/filelayout: fix cheking if a layout is striped
(bsc#1012628).
- xprtrdma: Use sendctx DMA state for Send signaling
(bsc#1012628).
- xprtrdma: Decouple req recycling from RPC completion
(bsc#1012628).
- NFSv4/pnfs: defer return_range callbacks until after inode
unlock (bsc#1012628).
- nfs: keep PG_UPTODATE clear after read errors in page groups
(bsc#1012628).
- NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS
connect errors (bsc#1012628).
- NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in
pg_get_mirror_count_write (bsc#1012628).
- nfs: use nfsi->rwsem to protect traversal of the file lock list
(bsc#1012628).
- PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro
(bsc#1012628).
- pwm: rzg2l-gpt: Add missing newlines to dev_err_probe() messages
(bsc#1012628).
- PCI: meson: Propagate devm_add_action_or_reset() failure
(bsc#1012628).
- PCI: meson: Add missing remove callback (bsc#1012628).
- lockd: Correct kernel-doc status descriptions for NLMv4 GRANTED
(bsc#1012628).
- virtio: add missing kernel-doc for map and vmap members
(bsc#1012628).
- fs/ntfs3: prevent potential lcn remains uninitialized
(bsc#1012628).
- fs/ntfs3: resize log->one_page_buf when adopting on-disk page
size (bsc#1012628).
- platform/x86/intel/vsec: Restore BAR fallback for header walk
(bsc#1012628).
- perf tools: Fix get_max_num() size_t underflow on empty sysfs
file (bsc#1012628).
- perf tools: Use scnprintf() in cpu_map__snprint() to prevent
overflow (bsc#1012628).
- perf tools: Use perf_env__get_cpu_topology() in
machine__resolve() (bsc#1012628).
- perf tools: NULL bitmap pointers after bitmap_free()
(bsc#1012628).
- PCI: rcar-host: Remove unused LIST_HEAD(res) (bsc#1012628).
- perf sched: Bounds-check prio before test_bit() in timehist
(bsc#1012628).
- perf sched: Fix idle-hist callchain display using wrong rb_first
variant (bsc#1012628).
- perf tools: Add O_CLOEXEC to open() calls in DSO and ELF code
(bsc#1012628).
- perf bpf: Use scnprintf() in snprintf_hex() and
synthesize_bpf_prog_name() (bsc#1012628).
- perf hists: Fix snprintf() in hists__scnprintf_title() UID
filter path (bsc#1012628).
- perf tools: Use scnprintf() in build_id__snprintf() and hwmon
read_events() (bsc#1012628).
- xprtrdma: Fix ep kref imbalance on ADDR_CHANGE (bsc#1012628).
- xprtrdma: Initialize re_id before removal registration
(bsc#1012628).
- xprtrdma: Check frwr_wp_create() during connect (bsc#1012628).
- xprtrdma: Document and assert reply-handler invariants
(bsc#1012628).
- xprtrdma: Resize reply buffers before reposting receives
(bsc#1012628).
- xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1012628).
- xprtrdma: Sanitize the reply credit grant after parsing
(bsc#1012628).
- xprtrdma: Repost Receive buffers for malformed replies
(bsc#1012628).
- xprtrdma: Return sendctx slot after Send preparation failure
(bsc#1012628).
- perf s390: Fix TEXTREL in Python extension by compiling as PIC
(bsc#1012628).
- perf data convert json: Fix addr_location leak on time-filtered
samples (bsc#1012628).
- perf cs-etm: Queue context packets for frontend (bsc#1012628).
- perf pmu: Fix pmu_id() heap underwrite on empty identifier file
(bsc#1012628).
- perf pmu: Fix perf_pmu__parse_scale/unit() OOB access on empty
sysfs file (bsc#1012628).
- tools lib api: Fix missing null termination in
filename__read_int/ull() (bsc#1012628).
- perf symbols: Fix signed overflow in sysfs__read_build_id()
size check (bsc#1012628).
- perf symbols: Bounds-check .gnu_debuglink section data
(bsc#1012628).
- perf tools: Use mkostemp() for O_CLOEXEC on temporary files
(bsc#1012628).
- perf intel-pt: Fix snprintf size tracking bug in insn decoder
(bsc#1012628).
- perf tools: Fix thread__set_comm_from_proc() on empty comm file
(bsc#1012628).
- perf hwmon: Fix off-by-one null termination on sysfs reads
(bsc#1012628).
- perf hwmon: Use scnprintf() in hwmon_pmu__for_each_event()
(bsc#1012628).
- perf hwmon: Fix parse_hwmon_filename() strlcpy buffer overflow
(bsc#1012628).
- perf symbols: Bounds-check descsz in sysfs__read_build_id()
GNU fallback (bsc#1012628).
- perf tools: Fix uninitialized pathname on uncompressed fallback
in filename__decompress() (bsc#1012628).
- perf hwmon: Guard label read against empty or failed reads
(bsc#1012628).
- perf tools: Use snprintf() in
dso__read_running_kernel_build_id() (bsc#1012628).
- tools lib api: Fix filename__write_int() writing uninitialized
stack data (bsc#1012628).
- tools lib api: Fix mount_overload() snprintf truncation and
toupper range (bsc#1012628).
- perf bpf: Add NULL check for btf__type_by_id() in
synthesize_bpf_prog_name() (bsc#1012628).
- perf bpf: Fix map data leak in bpf_metadata_create() on alloc
failure (bsc#1012628).
- perf bpf: Fix metadata leak in perf_env__add_bpf_info() on
duplicate insert (bsc#1012628).
- perf symbols: Add bounds checks to elf_read_build_id() note
iteration (bsc#1012628).
- perf symbols: Add bounds checks to read_build_id() note
iteration in minimal build (bsc#1012628).
- dt-bindings: dma: snps,dw-axi-dmac: Add fallback compatible
for CV1800B (bsc#1012628).
- dt-bindings: phy: sc8280xp-qmp-pcie: Disallow bifurcation
register on Purwa (bsc#1012628).
- PCI: mediatek: Use actual physical address instead of
virt_to_phys() (bsc#1012628).
- phy: freescale: phy-fsl-imx8qm-lvds-phy: Use synchronous PM
runtime put in reset (bsc#1012628).
- phy: freescale: phy-fsl-imx8qm-lvds-phy: Fix missing
pm_runtime_disable() on probe error path (bsc#1012628).
- PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL
dereference when no RAS DES capability (bsc#1012628).
- xfrm: Fix dev use-after-free in xfrm async resumption
(bsc#1012628).
- sparc: Avoid -Wunused-but-set-parameter in clear_user_page()
(bsc#1012628).
- Documentation: ABI: sysfs-class-reboot-mode-reboot_modes:
fix doc warnings (bsc#1012628).
- Revert "PCI/MSI: Unmap MSI-X region on error" (bsc#1012628).
- apparmor: fix shadowing of plabel that prevents cache from
being updated (bsc#1012628).
- apparmor: fix race in unix socket mediation when peer_path is
used (bsc#1012628).
- apparmor: fix refcount leak when updating the sk_ctx
(bsc#1012628).
- security/apparmor/apparmorfs.c: conditionally compile
get_loaddata_common_ref() (bsc#1012628).
- apparmor: check label build before no_new_privs test
(bsc#1012628).
- apparmor: aa_label_alloc use aa_label_free on alloc failure
(bsc#1012628).
- apparmor: fix rawdata_f_data implicit flex array (bsc#1012628).
- apparmor: grab ns lock and refresh when looking up changehat
child profiles (bsc#1012628).
- apparmor: fix potential UAF in aa_replace_profiles
(bsc#1012628).
- apparmor: fix NULL pointer dereference in unpack_pdb
(bsc#1012628).
- apparmor: remove or add symlinks to rawdata according to
export_binary (bsc#1012628).
- apparmor: Fix return in ns_mkdir_op (bsc#1012628).
- apparmor: fail policy unpack on accept2 allocation failure
(bsc#1012628).
- apparmor: release exe file resources on path failure
(bsc#1012628).
- apparmor: remove unnecessary goto and associated label
(bsc#1012628).
- apparmor: aa_getprocattr free procattr leak on format failure
(bsc#1012628).
- apparmor: put secmark label after secid lookup (bsc#1012628).
- apparmor: Fix inverted comparison in cache_hold_inc()
(bsc#1012628).
- i3c: mipi-i3c-hci: Fix suspend behavior when bus disable falls
back to software reset (bsc#1012628).
- i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ring
(bsc#1012628).
- i3c: master: Make hot-join workqueue freezable to block hot-join
during suspend (bsc#1012628).
- i3c: master: Serialize i3c_set_hotjoin() with the maintenance
lock (bsc#1012628).
- i3c: master: Consolidate Hot-Join DAA work in the core
(bsc#1012628).
- i3c: master: Ensure Hot-Join operations are stopped on shutdown
(bsc#1012628).
- i3c: master: Defer new-device registration out of DAA caller
context (bsc#1012628).
- i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev()
(bsc#1012628).
- i3c: master: Prevent reuse of dynamic address on device add
failure (bsc#1012628).
- apparmor: fix label can not be immediately before a declaration
(bsc#1012628).
- accel/ivpu: fix HWS command queue leak on registration failure
(bsc#1012628).
- sparc: led: avoid trimming a newline from empty writes
(bsc#1012628).
- perf maps: Add maps__mutate_mapping (bsc#1012628).
- perf symbols: Fix bswap copy-paste error for 32-bit ELF p_filesz
(bsc#1012628).
- perf symbols: Validate p_filesz before use in
filename__read_build_id() (bsc#1012628).
- perf symbols: Break infinite loop on zero-filled notes in
sysfs__read_build_id() (bsc#1012628).
- perf dso: Fix heap overflow in dso__get_filename() on
decompressed path (bsc#1012628).
- perf dso: Set error code when open() fails on uncompressed
fallback path (bsc#1012628).
- perf tools: Use snprintf() for root_dir path construction
(bsc#1012628).
- perf hwmon: Fix fd check to accept fd 0 in
hwmon_pmu__describe_items() (bsc#1012628).
- perf sched: Replace (void*)1 sentinel with proper runtime
allocation (bsc#1012628).
- perf bpf: Validate func_info_rec_size and sub_id in
synthesize_bpf_prog_name() (bsc#1012628).
- perf bpf: Reject oversized BPF metadata events that truncate
header.size (bsc#1012628).
- perf bpf: Bounds-check array offsets in bpil_offs_to_addr()
(bsc#1012628).
- perf c2c: Free format list entries when releasing c2c hist
entries (bsc#1012628).
- perf cs-etm: Reject CPU IDs that would overflow signed
comparison (bsc#1012628).
- gpio: mlxbf3: fail probe if gpiochip registration fails
(bsc#1012628).
- regcache: Do not overwrite error code when finalizing cache
after error (bsc#1012628).
- drm/i915: clear CRTC color blob pointers after dropping refs
(bsc#1012628).
- drm/xe: Fix wa_oob codegen recipe for external module builds
(bsc#1012628).
- spi: dw: fix wrong BAUDR setting after resume (bsc#1012628).
- i3c: master: Update dev_nack_retry_count under maintenance lock
(bsc#1012628).
- i3c: master: Add missing runtime PM get in
dev_nack_retry_count_store() (bsc#1012628).
- erofs: call erofs_exit_ishare() before rcu_barrier()
(bsc#1012628).
- ALSA: usb-audio: qcom: Free sideband sg_table objects
(bsc#1012628).
- xfrm: Fix xfrm state cache insertion race (bsc#1012628).
- xfrm: annotate data-races around xfrm_policy_count[] and
xfrm_policy_default[] (bsc#1012628).
- xfrm: validate selector family and prefixlen during match
(bsc#1012628).
- perf machine: Use snprintf() for guestmount path construction
(bsc#1012628).
- perf cs-etm: Validate num_cpu before metadata allocation
(bsc#1012628).
- perf cs-etm: Require full global header in auxtrace_info size
check (bsc#1012628).
- perf cs-etm: Bounds-check CPU in cs_etm__get_queue()
(bsc#1012628).
- perf c2c: Free format list entries when c2c_hists__init()
fails (bsc#1012628).
- perf c2c: Fix hist entry and format list leaks in c2c_he_free()
(bsc#1012628).
- perf bpf: Validate array presence before casting BPF prog info
pointers (bsc#1012628).
- perf dso: Set standard errno on decompression failure
(bsc#1012628).
- ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate
mode (bsc#1012628).
- drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free
(bsc#1012628).
- drm/amdgpu: initialize iter.start in amdgpu_devcoredump_format
(bsc#1012628).
- drm/amd/display: Skip PHY SSC reduction on some 8K panels
(bsc#1012628).
- drm/amd/display: Fix mem_type change detection for async flips
(bsc#1012628).
- drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm
(bsc#1012628).
- drm/amdgpu: initialize irq.lock spinlock earlier (bsc#1012628).
- net: ethernet: mtk_eth_soc: fix supported_interface set after
phylink_create (bsc#1012628).
- selftests/ftrace: Fix trace_marker_raw test on 64K page kernels
(bsc#1012628).
- octeontx2-pf: Fix leak of SQ timestamp buffer on teardown
(bsc#1012628).
- octeontx2-af: npc: Log successful MCAM drop-on-non-hit install
at debug level (bsc#1012628).
- net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1012628).
- sctp: hold socket lock when dumping endpoints in sctp_diag
(bsc#1012628).
- ALSA: usb-audio: qcom: reject stream disable with no active
interface (bsc#1012628).
- ALSA: usb-audio: qcom: clear opened when stream enable fails
(bsc#1012628).
- PCI: iproc: Restore .map_irq() for the platform bus driver
(bsc#1012628).
- spi: rpc-if: Use correct device for hardware reinitialization
on resume (bsc#1012628).
- virtio-net: fix len check in receive_big() (bsc#1012628).
- dpaa2-switch: fix VLAN upper check not rejecting bridge join
(bsc#1012628).
- devlink: Fix parent ref leak in devl_rate_node_create()
(bsc#1012628).
- devlink: Fix parent ref leak on tc-bw failure (bsc#1012628).
- net: airoha: fix foe_check_time allocation size (bsc#1012628).
- net: macb: add TX stall timeout callback to recover from lost
TSTART write (bsc#1012628).
- flow_dissector: check device type before reading ETH_ADDRS
(bsc#1012628).
- netconsole: don't drop the last byte of a full-sized message
(bsc#1012628).
- selftests: vlan_bridge_binding: Fix flaky operational state
check (bsc#1012628).
- eth: fbnic: take netif_addr_lock_bh() around rx mode address
programming (bsc#1012628).
- ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints
(bsc#1012628).
- netfilter: flowtable: fix and simplify IP6IP6 tunnel handling
(bsc#1012628).
- arm64: static_call: include asm/insns.h (bsc#1012628).
- arm64/hw_breakpoint: reject unaligned watchpoints that would
truncate BAS (bsc#1012628).
- thermal: intel: Fix dangling resources on
thermal_throttle_online() failure (bsc#1012628).
- ACPI: resource: Amend kernel-doc style (bsc#1012628).
- ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone()
(bsc#1012628).
- ieee802154: Restore initial state on failed device_rename()
in cfg802154_switch_netns() (bsc#1012628).
- ieee802154: Avoid calling WARN_ON() on -ENOMEM in
cfg802154_switch_netns() (bsc#1012628).
- ieee802154: Remove WARN_ON() in cfg802154_pernet_exit()
(bsc#1012628).
- ieee802154: fix kernel-infoleak in dgram_recvmsg()
(bsc#1012628).
- mac802154: Prevent overwrite return code in
mac802154_perform_association() (bsc#1012628).
- md/raid1: fix writes_pending and barrier reference leaks on
write failures (bsc#1012628).
- md/raid10: fix writes_pending leak on write request failures
(bsc#1012628).
- md/raid10: fix writes_pending and barrier reference leaks on
discard failures (bsc#1012628).
- md/raid1: honor REQ_NOWAIT when waiting for behind writes
(bsc#1012628).
- md/raid1: free r1_bio when REQ_NOWAIT is set and read would
block on retry (bsc#1012628).
- netfilter: ipset: Don't use test_bit() in lockless RCU readers
in hash types (bsc#1012628).
- netfilter: ipset: Don't use test_bit() in lockless RCU readers
in bitmap types (bsc#1012628).
- netfilter: ipset: fix order of kfree_rcu() and
rcu_assign_pointer() (bsc#1012628).
- netfilter: ipset: make sure gc is properly stopped
(bsc#1012628).
- netfilter: nft_payload: reject offsets exceeding 65535 bytes
(bsc#1012628).
- netfilter: nft_meta_bridge: add validate callback for get
operations (bsc#1012628).
- netfilter: nft_flow_offload: zero device address for non-ether
case (bsc#1012628).
- netfilter: nf_reject: skip iphdr options when looking for icmp
header (bsc#1012628).
- netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak
(bsc#1012628).
- tpm_crb: Check ACPI_COMPANION() against NULL during probe
(bsc#1012628).
- mailbox: imx: Forward the timeout/ error in imx_mu_generic_tx()
(bsc#1012628).
- irqchip/crossbar: Fix parent domain resource leak (bsc#1012628).
- alloc_tag: fix use-after-free in /proc/allocinfo after module
unload (bsc#1012628).
- selftests/mm: restore default nr_hugepages value via exit trap
in charge_reserved_hugetlb.sh (bsc#1012628).
- selftests/mm: fix hugetlb pathname construction in
charge_reserved_hugetlb.sh (bsc#1012628).
- selftests/mm: restore default nr_hugepages value via exit trap
in hugetlb_reparenting_test.sh (bsc#1012628).
- selftests/mm: fix hugetlb pathname construction in
hugetlb_reparenting_test.sh (bsc#1012628).
- selftests/mm: fix cgroup task placement and drop memory.current
checks in hugetlb_reparenting_test.sh (bsc#1012628).
- selftests/mm: size tmpfs according to PMD page size in
split_huge_page_test (bsc#1012628).
- selftests/mm: free dynamically allocated PMD-sized buffers in
split_huge_page_test (bsc#1012628).
- selftest/mm: register existing mapping with userfaultfd in
hugetlb-mremap (bsc#1012628).
- selftests/mm: ensure destination is hugetlb-backed in
hugetlb-mremap (bsc#1012628).
- selftests/mm: skip uffd-stress test when nr_pages_per_cpu is
zero (bsc#1012628).
- selftests/mm: run_vmtests.sh: free memory if available memory
is low (bsc#1012628).
- selftests/mm: move hwpoison setup into run_test() and silence
modprobe output for memory-failure category (bsc#1012628).
- selftests/mm: clarify alternate unmapping in compaction_test
(bsc#1012628).
- selftests/mm: allow PUD-level entries in compound testcase of
hmm tests (bsc#1012628).
- selftests/mm: remove hardcoded THP sizing assumptions in hmm
tests (bsc#1012628).
- selftests/mm: fix exclusive_cow test fork() handling
(bsc#1012628).
- net: marvell: prestera: initialize err in prestera_port_sfp_bind
(bsc#1012628).
- tipc: fix use-after-free of the discoverer in tipc_disc_rcv()
(bsc#1012628).
- net: dst_metadata: fix false-positive memcpy overflow in
tun_dst_unclone (bsc#1012628).
- net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init
error paths (bsc#1012628).
- octeontx2-af: npc: cn20k: fix NPC defrag (bsc#1012628).
- octeontx2-af: mcs: Fix unsupported secy stats read
(bsc#1012628).
- octeontx2-pf: Clear stats of all resources when freeing
resources (bsc#1012628).
- octeontx2-pf: mcs: Fix mcs resources free on PF shutdown
(bsc#1012628).
- net: emac: Fix NULL pointer dereference in emac_probe
(bsc#1012628).
- net/sched: act_ct: fix nf_connlabels leak on two error paths
(bsc#1012628).
- net: airoha: Fix skb->priority underflow in
airoha_dev_select_queue() (bsc#1012628).
- ipv6: ndisc: fix NULL deref in accept_untracked_na()
(bsc#1012628).
- ipv6: ioam: fix type confusion of dst_entry (bsc#1012628).
- dpaa2-switch: do not accept VLAN uppers while bridged
(bsc#1012628).
- rtc: abx80x: fix the RTC_VL_CLR clearing all status flags
(bsc#1012628).
- rtc: ds1307: handle oscillator stop flag for
ds1337/ds1339/ds3231 (bsc#1012628).
- bpf: Fix stack slot index in nospec checks (bsc#1012628).
- bpf: Fix partial copy of non-linear test_run output
(bsc#1012628).
- bpftool: Fix vmlinux BTF leak in cgroup commands (bsc#1012628).
- bpf: zero-initialize the fib lookup flow struct (bsc#1012628).
- bpf: Fix BPF_PROG_ASSOC_STRUCT_OPS last field check
(bsc#1012628).
- bpf: Fix effective prog array index with BPF_F_PREORDER
(bsc#1012628).
- power: sequencing: fix ABBA deadlock in
pwrseq_device_unregister() (bsc#1012628).
- gpiolib: initialize return value in gpiochip_set_multiple()
(bsc#1012628).
- drm/edid: fix OOB read in drm_parse_tiled_block() (bsc#1012628).
- erofs: handle 48-bit blocks_hi for compressed inodes
(bsc#1012628).
- ASoC: cs530x: Fix expected MCLK rates for CS5302/4/8
(bsc#1012628).
- PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count'
value of 0 (bsc#1012628).
- PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count'
value of 0 (bsc#1012628).
- PCI: endpoint: pci-epf-vntb: Document legacy MSI doorbell offset
(bsc#1012628).
- PCI: endpoint: pci-epf-vntb: Defer pci_epc_raise_irq() out of
atomic context (bsc#1012628).
- PCI: endpoint: pci-epf-vntb: Report 0-based doorbell vector
via ntb_db_event() (bsc#1012628).
- bpf: Preserve pointer spill metadata during half-slot cleanup
(bsc#1012628).
- ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()
(bsc#1012628).
- ice: fix AQ error code comparison in ice_set_pauseparam()
(bsc#1012628).
- ice: call netif_keep_dst() once when entering switchdev mode
(bsc#1012628).
- rtc: isl1208: Balance enable_irq_wake() with disable_irq_wake()
on cleanup (bsc#1012628).
- ice: dpll: set pointers to NULL after kfree in
ice_dpll_deinit_info (bsc#1012628).
- ice: dpll: fix memory leak in ice_dpll_init_info error paths
(bsc#1012628).
- i40e: Fix i40e_debug() to use struct i40e_hw argument
(bsc#1012628).
- e1000e: Reconfigure PLL clock gate timeout and re-enable K1
on Meteor Lake (bsc#1012628).
- rtc: msc313: fix NULL deref in shared IRQ handler at probe
(bsc#1012628).
- bpf: Guard conntrack opts error writes (bsc#1012628).
- selftests/bpf: Cover small conntrack opts error writes
(bsc#1012628).
- ksmbd: fix use-after-free of conn->preauth_info in concurrent
SMB2 NEGOTIATE (bsc#1012628).
- ipv6: Fix null-ptr-deref in fib6_nh_mtu_change() (bsc#1012628).
- eth: bnxt: improve the timing of stats (bsc#1012628).
- ipv4: fib: Don't ignore error route in local/main tables
(bsc#1012628).
- md/raid5: use stripe state snapshot in break_stripe_batch_list()
(bsc#1012628).
- md/raid5: avoid R5_Overlap races while breaking stripe batches
(bsc#1012628).
- bpf: Disable xfrm_decode_session hook attachment (bsc#1012628).
- netfilter: nf_nat: avoid invalid nat_net pointer use on failed
nf_nat_init() (bsc#1012628).
- netfilter: nf_conncount: prevent connlimit drops for early
confirmed ct (bsc#1012628).
- netfilter: flowtable: Validate iph->ihl in
nf_flow_ip4_tunnel_proto() (bsc#1012628).
- netfilter: nft_synproxy: stop bypassing the priv->info snapshot
(bsc#1012628).
- netfilter: nft_compat: ebtables emulation must reject non-bridge
targets (bsc#1012628).
- gpio: davinci: fix IRQ domain leak on devm_kzalloc failure
(bsc#1012628).
- netfilter: nf_conntrack_helper: dynamically allocate struct
nf_conntrack_helper (bsc#1012628).
- netfilter: nf_conntrack_pptp: move GRE specific cleanup to
GRE tracker (bsc#1012628).
- netfilter: conntrack: check NULL when retrieving ct extension
(bsc#1012628).
- netfilter: nf_conntrack_expect: use conntrack GC to reap
expectations (bsc#1012628).
- netfilter: nf_conntrack_expect: store master_tuple in
expectation (bsc#1012628).
- netfilter: nf_conntrack_expect: run expectation eviction with
no helper (bsc#1012628).
- netfilter: nft_ct: expectation timeouts are passed in
milliseconds (bsc#1012628).
- netfilter: nf_conntrack_helper: cap maximum number of
expectation at helper registration (bsc#1012628).
- cpuidle: Allow exit latency to exceed target residency
(bsc#1012628).
- ASoC: SDCA: Validate written enum value in ge_put_enum_double()
(bsc#1012628).
- ASoC: rt5575: Use __le32 for SPI burst write address
(bsc#1012628).
- PCI: endpoint: pci-epf-vntb: Exclude reserved slots from
db_valid_mask (bsc#1012628).
- NTB: epf: Make db_valid_mask cover only real doorbell bits
(bsc#1012628).
- NTB: epf: Report 0-based doorbell vector via ntb_db_event()
(bsc#1012628).
- NTB: epf: Fix doorbell bitmask and IRQ vector handling
(bsc#1012628).
- alpha/PCI: Add security_locked_down() check to
pci_mmap_resource() (bsc#1012628).
- alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs
(bsc#1012628).
- Docs/driver-api/uio-howto: document mmap_prepare callback
(bsc#1012628).
- net, bpf: check master for NULL in xdp_master_redirect()
(bsc#1012628).
- net: do not acquire dev->tx_global_lock in netdev_watchdog_up()
(bsc#1012628).
- net: dsa: sja1105: round up PTP perout pin duration
(bsc#1012628).
- net: ti: icssg: Fix XSK zero copy TX during application wakeup
(bsc#1012628).
- veth: fix NAPI leak in XDP enable error path (bsc#1012628).
- net: usb: lan78xx: restore VLAN and hash filters after link up
(bsc#1012628).
- net: lwtunnel: Drop skb metadata before LWT encapsulation
(bsc#1012628).
- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
(bsc#1012628).
- sctp: fix err_chunk memory leaks in INIT handling (bsc#1012628).
- ipv6: fix error handling in disable_ipv6 sysctl (bsc#1012628).
- ipv6: fix error handling in ignore_routes_with_linkdown sysctl
(bsc#1012628).
- ipv6: fix error handling in forwarding sysctl (bsc#1012628).
- ipv6: fix error handling in disable_policy sysctl (bsc#1012628).
- ipv6: fix state corruption during proxy_ndp sysctl restart
(bsc#1012628).
- ipv6: fix missing notification for ignore_routes_with_linkdown
(bsc#1012628).
- eth: fbnic: fix ordering of heartbeat vs ownership
(bsc#1012628).
- s390/mm: Fix handling of _PAGE_UNUSED pte bit (bsc#1012628).
- thermal: testing: zone: Flush work items during cleanup
(bsc#1012628).
- ACPI: processor_idle: Mark LPI enter functions as __cpuidle
(bsc#1012628).
- smb/client: preserve errors from smb2_set_sparse()
(bsc#1012628).
- rtc: ds1307: Fix off-by-one issue with wday for rx8130
(bsc#1012628).
- rtc: cmos: unregister HPET IRQ handler on probe failure
(bsc#1012628).
- net: dsa: realtek: fix memory leak in rtl8366rb_setup_led()
(bsc#1012628).
- net: dsa: mxl862xx: avoid unaligned 16-bit access in api_wrap
(bsc#1012628).
- net: dsa: mxl862xx: fix use-after-free of DSA ports in
crc_err_work (bsc#1012628).
- net: mana: Fall back to standard MTU when PF reports adapter_mtu
of 0 (bsc#1012628).
- net: phy: realtek: Clear MDIO_AN_10GBT_CTRL_ADV10G bit
(bsc#1012628).
- octeontx2-af: Validate NIX maximum LFs correctly (bsc#1012628).
- octeontx2-af: fix CGX debugfs RVU AF PCI reference leaks
(bsc#1012628).
- net: mvneta: re-enable percpu interrupt on resume (bsc#1012628).
- geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint
(bsc#1012628).
- geneve: validate inner network offset in geneve_gro_complete()
(bsc#1012628).
- tools: ynl: build archives with $(AR) (bsc#1012628).
- net: sungem: fix probe error cleanup (bsc#1012628).
- net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in
remove (bsc#1012628).
- net: stmmac: dwmac-spacemit: Fix wrong phy interface definition
(bsc#1012628).
- net: stmmac: dwmac-spacemit: Fix wrong irq definition
(bsc#1012628).
- LoongArch: Move struct kimage forward declaration before use
(bsc#1012628).
- LoongArch: BPF: Fix outdated tail call comments (bsc#1012628).
- LoongArch: BPF: Fix off-by-one error in tail call (bsc#1012628).
- ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel
count (bsc#1012628).
- net: udp_tunnel: prevent double queueing in
udp_tunnel_nic_device_sync (bsc#1012628).
- dt-bindings: net: renesas,ether: Drop example
"ethernet-phy-ieee802.3-c22" fallback (bsc#1012628).
- net: enetc: fix potential divide-by-zero when num_vsi is zero
(bsc#1012628).
- udp_tunnel: Pass struct sock to udp_tunnel_sock_release()
(bsc#1012628).
- udp_tunnel: Pass struct sock to setup_udp_tunnel_sock()
(bsc#1012628).
- tipc: Store struct sock in struct udp_bearer (bsc#1012628).
- tipc: fix UAF in cleanup_bearer() due to premature
dst_cache_destroy() (bsc#1012628).
- tipc: avoid busy looping in tipc_exit_net() (bsc#1012628).
- selftests: tls: size splice_short pipe by page size
(bsc#1012628).
- net: hns3: unify copper port ksettings configuration path
(bsc#1012628).
- net: hns3: refactor MAC autoneg and speed configuration
(bsc#1012628).
- net: hns3: fix permanent link down deadlock after reset
(bsc#1012628).
- net: hns3: differentiate autoneg default values between copper
and fiber (bsc#1012628).
- ALSA: FCP: Fix NULL pointer dereference in interface lookup
(bsc#1012628).
- tracing: probes: fix typo in a log message (bsc#1012628).
- spi: sh-msiof: abort transfers when reset times out
(bsc#1012628).
- ACPI: RIMT: Only defer the IOMMU configuration in init stage
(bsc#1012628).
- riscv: Fix 32-bit call_on_irq_stack() frame pointer ABI
(bsc#1012628).
- bpf: Mask pseudo pointer values in verifier logs (bsc#1012628).
- bpf: Fix insn_aux_data leak on verifier err_free_env path
(bsc#1012628).
- gpio: mvebu: fail probe if gpiochip registration fails
(bsc#1012628).
- gpio: htc-egpio: use managed gpiochip registration
(bsc#1012628).
- net: pse-pd: scope pse_control regulator handle to kref lifetime
(bsc#1012628).
- seg6: validate SRH length before reading fixed fields
(bsc#1012628).
- qede: fix out-of-bounds check for cqe->len_list[] (bsc#1012628).
- net: enetc: check the number of BDs needed for xdp_frame
(bsc#1012628).
- sctp: fix SCTP_RESET_STREAMS stream list length limit
(bsc#1012628).
- sctp: add INIT verification after cookie unpacking
(bsc#1012628).
- MIPS: DEC: Ensure RTC platform device deregistration upon
failure (bsc#1012628).
- MIPS: mm: Add check for highmem before removing memory block
(bsc#1012628).
- ASoC: codecs: lpass-va-macro: Fix LPASS Codec Version for SC7280
(bsc#1012628).
- hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid()
(bsc#1012628).
- accel/amdxdna: Fix iommu domain lifetime race during device
removal (bsc#1012628).
- hwmon: adm1275: Prevent reading uninitialized stack
(bsc#1012628).
- hwmon: (pmbus) Fix passing events to regulator core
(bsc#1012628).
- hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against
divide-by-zero (bsc#1012628).
- eth: fbnic: don't cache shinfo across skb realloc (bsc#1012628).
- ipv6: fib6: fix NULL deref in fib6_walk_continue() on
multi-batch dump (bsc#1012628).
- usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()
(bsc#1012628).
- net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy
(bsc#1012628).
- net: libwx: fix VMDQ mask for 1-queue mode (bsc#1012628).
- net: gianfar: dispose irq mappings on probe failure and device
removal (bsc#1012628).
- net/sched: sch_teql: Introduce slaves_lock to avoid race
condition and UAF (bsc#1012628).
- bridge: stp: Fix a potential use-after-free when deleting a
bridge (bsc#1012628).
- gpio: shared-proxy: always serialize with a sleeping mutex
(bsc#1012628).
- drm/panthor: Always use the IRQ-safe variant when acquiring
the fence lock (bsc#1012628).
- drm/panthor: Keep the reset work disabled until everything is
initialized (bsc#1012628).
- drm/panthor: Fix potential invalid pointer deref in
group_process_tiler_oom() (bsc#1012628).
- drm/panthor: Pass an iomem pointer to GPU register access
helpers (bsc#1012628).
- drm/panthor: Split register definitions by components
(bsc#1012628).
- drm/panthor: Store IRQ register base iomem pointer in
panthor_irq (bsc#1012628).
- drm/panthor: Fix theoretical IOMEM access in suspended state
(bsc#1012628).
- drm/panthor: Don't overrule pending immediate ticks in
sched_resume_tick() (bsc#1012628).
- drm/panthor: Fix panthor_pwr_unplug() (bsc#1012628).
- drm/panthor: Fix a leak when a group is evicted before the
tiler OOM is serviced (bsc#1012628).
- drm/panthor: Interrupt group start/resumption if
group_bind_locked() fails (bsc#1012628).
- tracing/eprobes: Allow use of BTF names to dereference pointers
(bsc#1012628).
- tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg
(bsc#1012628).
- tracing/events: Fix to check the simple_tsk_fn creation
(bsc#1012628).
- tracing: eprobe: read the complete FILTER_PTR_STRING pointer
(bsc#1012628).
- tracing/fprobe: Fix NULL pointer dereference in
fprobe_fgraph_entry() (bsc#1012628).
- tracing/probes: Make the $ prefix mandatory for comm access
(bsc#1012628).
- irqchip/gic-v3-its: Fix OF node reference leak (bsc#1012628).
- irqchip/ts4800: Fix missing chained handler cleanup on remove
(bsc#1012628).
- spi: rzv2h-rspi: Fix DMA transfer error handling for signal
interruption (bsc#1012628).
- sctp: fix addr_wq_timer race in sctp_free_addr_wq()
(bsc#1012628).
- virtio_net: disable cb when NAPI is busy-polled (bsc#1012628).
- cxgb4: Fix decode strings dump for T6 adapters (bsc#1012628).
- selftests: drv-net: tso: don't touch dangerous feature bits
(bsc#1012628).
- net/sched: act_bpf: use rcu_dereference_bh() to read the filter
(bsc#1012628).
- ksmbd: reject undersized DACLs before parsing ACEs
(bsc#1012628).
- ksmbd: fix use-after-free of fp->owner.name in durable handle
owner check (bsc#1012628).
- gpio: timberdale: Return -ENOMEM on dynamic memory allocation
in probe (bsc#1012628).
- pinctrl: meson: restore non-sleeping GPIO access (bsc#1012628).
- xen/pvcalls: bound backend response req_id before indexing rsp[]
(bsc#1012628).
- net/sched: dualpi2: clear stale classification on filter miss
(bsc#1012628).
- net/sched: hhf: clear heavy-hitter state on reset (bsc#1012628).
- fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid
(bsc#1012628).
- afs: Fix error code in afs_extract_vl_addrs() (bsc#1012628).
- afs: Fix double netfs initialisation in afs_root_iget()
(bsc#1012628).
- afs: Remove setting of AS_RELEASE_ALWAYS for symlinks and
mountpoints (bsc#1012628).
- afs: Fix directory inode initialisation order (bsc#1012628).
- afs: use kvfree() to free memory allocated by kvcalloc()
(bsc#1012628).
- afs: Remove erroneous seq |= 1 in volume lookup loop
(bsc#1012628).
- afs: Fix bulk lookup malfunction due to change in dir_emit()
API (bsc#1012628).
- afs: Fix misplaced inc of net->cells_outstanding (bsc#1012628).
- afs: Fix reinitialisation of the inode, in particular
- >lock_work (bsc#1012628).
- afs: Fix callback service message parsers to pass through
- EAGAIN (bsc#1012628).
- afs: Fix missing NULL pointer check in
afs_break_some_callbacks() (bsc#1012628).
- afs: Use scoped_seqlock_read() rather than manually doing
seqlock stuff (bsc#1012628).
- afs: Fix leak of ungot volume (bsc#1012628).
- afs: Fix vllist leak (bsc#1012628).
- afs: Fix lack of locking around modifications of
net->cells_dyn_ino (bsc#1012628).
- afs: Fix premature cell exposure through /afs (bsc#1012628).
- afs: Fix the volume AFS_VOLUME_RM_TREE is set on (bsc#1012628).
- afs: Fix unchecked-length string display in debug statement
(bsc#1012628).
- iomap: release pages on atomic dio size mismatch (bsc#1012628).
- minix: avoid overflow in bitmap block count calculation
(bsc#1012628).
- cachefiles: Fix double unlock in nomem_d_alloc error path
(bsc#1012628).
- ovl: fix comment about locking order (bsc#1012628).
- iomap: guard io_size EOF trim against concurrent truncate
underflow (bsc#1012628).
- netfs: Fix netfs_create_write_req() to handle async cache
object creation (bsc#1012628).
- cachefiles: Fix file burial to take lock when unsetting
S_KERNEL_FILE (bsc#1012628).
- netfs: Fix writethrough to use collection offload (bsc#1012628).
- netfs: Fix writeback error handling (bsc#1012628).
- netfs: Fix folio state after ENOMEM whilst under writeback
iteration (bsc#1012628).
- drm/xe/pt: Fix NULL pointer dereference in
xe_pt_zap_ptes_entry() (bsc#1012628).
- drm/imagination: Fix returned size for DRM_IOCTL_PVR_DEV_QUERY
(bsc#1012628).
- drm/xe/userptr: Hold notifier_lock for write on inject test path
(bsc#1012628).
- drm/xe/userptr: Drop bogus static from finish in
force_invalidate (bsc#1012628).
- drm/xe/hw_engine: Fix double-free of managed BO in error path
(bsc#1012628).
- drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays
(bsc#1012628).
- drm/xe: fix NPD in bo_meminfo() (bsc#1012628).
- drm/xe/pt: prevent invalid cursor access for purged BOs
(bsc#1012628).
- x86/uprobes: Keep shadow stack in sync for emulated CALLs
(bsc#1012628).
- uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline
(bsc#1012628).
- cifs: Fix missing credit release on failure in cifs_issue_read()
(bsc#1012628).
- ata: sata_gemini: unwind clocks on IDE pinctrl errors
(bsc#1012628).
- ata: libata-scsi: limit simulated SCSI command copy to response
length (bsc#1012628).
- netfs: Fix barriering when walking subrequest list
(bsc#1012628).
- ntfs: avoid stale runlist element dereference in MFT writeback
(bsc#1012628).
- HID: picolcd: prevent NULL pointer dereference in
picolcd_send_and_wait() (bsc#1012628).
- HID: core: Fix OOB read in hid_get_report for numbered reports
(bsc#1012628).
- arm64: Avoid eager DVMSync reclaim batches with C1-Pro SME
erratum (bsc#1012628).
- arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range()
(bsc#1012628).
- iio: dac: mcp47feb02: Fix passing uninitialized vref1_uV for
no Vref1 case (bsc#1012628).
- ntfs: avoid stale runlist element dereference in fallocate
(bsc#1012628).
- HID: bpf: Fix hid_bpf_get_data() range check (bsc#1012628).
- selftests/hid: Load only requested struct_ops maps
(bsc#1012628).
- selftests/hid: Cover hid_bpf_get_data() size overflow
(bsc#1012628).
- arm64/sysreg: Fix BWE field encoding in ID_AA64DFR2_EL1
(bsc#1012628).
- net: usb: net1080: validate packet_len before pad-byte access
in rx_fixup (bsc#1012628).
- gue: validate REMCSUM private option length (bsc#1012628).
- netfilter: xt_u32: reject invalid shift counts (bsc#1012628).
- netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
(bsc#1012628).
- netfilter: ip6tables: mark malformed IPv6 extension headers
for hotdrop (bsc#1012628).
- netfilter: nft_set_rbtree: get command skips end element with
open interval (bsc#1012628).
- netfilter: xt_connmark: reject invalid shift parameters
(bsc#1012628).
- platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference
during suspend/resume (bsc#1012628).
- net/mlx5: Lag: refactor representor reload handling
(bsc#1012628).
- net/mlx5: E-Switch, add representor lifecycle lock
(bsc#1012628).
- net/mlx5: Lag, avoid LAG and representor lock cycles
(bsc#1012628).
- net/mlx5: LAG, factor out shared FDB code into dedicated file
(bsc#1012628).
- net/mlx5: LAG, replace peer count check with direct peer lookup
(bsc#1012628).
- net/mlx5: LAG, prepare for SD device integration (bsc#1012628).
- net/mlx5: LAG, extend shared FDB API with group_id filter
(bsc#1012628).
- net/mlx5: LAG, Fix off-by-one in single-FDB error rollback
(bsc#1012628).
- net/mlx5: LAG, MPESW, Fix missing complete() on devcom error
(bsc#1012628).
- net/mlx5e: TC, skip peer flow cleanup when LAG seq is
unavailable (bsc#1012628).
- drm/bridge: analogix_dp: Fix PE/VS value shift mismatch during
link training (bsc#1012628).
- net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation
(bsc#1012628).
- net/mlx5e: Fix HV VHCA stats agent registration race
(bsc#1012628).
- net/mlx5e: Fix publication race for priv->channel_stats[]
(bsc#1012628).
- net: microchip: vcap: fix races on the shared Super VCAP block
(bsc#1012628).
- qede: fix off-by-one in BD ring consumption on build_skb failure
(bsc#1012628).
- net: qualcomm: rmnet: validate MAP frame length before ingress
parsing (bsc#1012628).
- net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload
(bsc#1012628).
- net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket
(bsc#1012628).
- amt: fix size calculation in amt_get_size() (bsc#1012628).
- ksmbd: fix multichannel binding and enforce channel limit
(bsc#1012628).
- smb: client: preserve leading slash for POSIX absolute symlink
targets (bsc#1012628).
- gpio: shared: make the voting mechanism adaptable (bsc#1012628).
- drm/i915/ltphy: Fix SSC Enablement bit in PORT_CLOCK_CTL
(bsc#1012628).
- Bluetooth: 6lowpan: avoid untracked enable work (bsc#1012628).
- Bluetooth: 6lowpan: hold L2CAP conn across debugfs control
(bsc#1012628).
- Bluetooth: MGMT: Fix adv monitor add failure cleanup
(bsc#1012628).
- Bluetooth: sco: Fix a race condition in sco_sock_timeout()
(bsc#1012628).
- Bluetooth: btintel_pcie: Support Product level reset
(bsc#1012628).
- Bluetooth: btintel_pcie: Add support for smart trigger dump
(bsc#1012628).
- Bluetooth: btintel_pcie: Separate coredump work from RX work
(bsc#1012628).
- Bluetooth: btintel_pcie: Refactor FLR to use device_reprobe()
(bsc#1012628).
- Bluetooth: ISO: fix malformed ISO_END/CONT handling
(bsc#1012628).
- Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length
(bsc#1012628).
- Bluetooth: bpa10x: avoid OOB read of revision string in
bpa10x_setup() (bsc#1012628).
- Bluetooth: L2CAP: fix tx ident leak for commands without a
response (bsc#1012628).
- ring-buffer: Fix event length with forced 8-byte alignment
(bsc#1012628).
- accel/amdxdna: Prevent PM resume deadlock in
hwctx_sync_debug_bo() (bsc#1012628).
- accel/amdxdna: Use unsigned long for nr_pages in
amdxdna_hmm_register() (bsc#1012628).
- accel/amdxdna: Fix VMA access race (bsc#1012628).
- net/tls: Consume empty data records in tls_sw_read_sock()
(bsc#1012628).
- net: rnpgbe: fix mailbox endianness and remove pointer casts
(bsc#1012628).
- net/liquidio: drop cached VF pci_dev LUT (bsc#1012628).
- net: usb: lan78xx: disable VLAN filter in promiscuous mode
(bsc#1012628).
- gpio: dwapb: Defer clock gating until noirq (bsc#1012628).
- drm: Guard DRM_CLIENT_CAP_PLANE_COLOR_PIPELINE (bsc#1012628).
- tracing: Make tracepoint_printk static as not exported
(bsc#1012628).
- accel/amdxdna: Fix potential amdxdna_umap lifetime race
(bsc#1012628).
- drm/v3d: Reject invalid indirect BO handle in indirect CSD setup
(bsc#1012628).
- selftests: gpio: add gpio-cdev-uaf to .gitignore (bsc#1012628).
- net: mdio: select REGMAP_MMIO instead of depending on it
(bsc#1012628).
- net/sched: cake: reject overhead values that underflow length
(bsc#1012628).
- octeontx2-pf: check DMAC extraction support before filtering
(bsc#1012628).
- perf/x86/amd/core: Avoid enabling BRS from the SVM reload path
(bsc#1012628).
- gpio: mvebu: free generic chips on unbind (bsc#1012628).
- ipv4: igmp: Fix potential UAF in igmp_gq_start_timer()
(bsc#1012628).
- ipv6: mcast: Fix potential UAF in MLD delayed work
(bsc#1012628).
- ipv4: igmp: annotate data-races around im->users (bsc#1012628).
- ipv4: igmp: annotate data-races around timer-related fields
(bsc#1012628).
- ipv4: igmp: Fix potential memory leaks in igmp_mod_timer()
and igmp_stop_timer() (bsc#1012628).
- netfilter: nft_lookup: fix catchall element handling with
inverted lookups (bsc#1012628).
- ipvs: pass parsed transport offset to state handlers
(bsc#1012628).
- ipvs: use parsed transport offset in TCP state lookup
(bsc#1012628).
- ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1012628).
- ipvs: ensure inner headers in ICMP errors are in headroom
(bsc#1012628).
- s390/zcrypt: Remove the empty file (bsc#1012628).
- cifs: validate DFS referral string offsets (bsc#1012628).
- SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED
(bsc#1012628).
- SUNRPC: pin upper rpc_clnt across the TLS connect_worker
(bsc#1012628).
- dm era: fix NULL pointer dereference in metadata_open()
(bsc#1012628).
- smb: client: fix busy dentry warning on unmount after DIO
(bsc#1012628).
- regulator: core: regulator_lock_two() should test for EDEADLK
not EDEADLOCK (bsc#1012628).
- drm/fb-helper: Only consider active CRTCs for vblank sync
(bsc#1012628).
- selftests/net: fix EVP_MD_CTX leak in tcp_mmap (bsc#1012628).
- net/mlx5: Fix L3 tunnel entropy refcount leak (bsc#1012628).
- ethtool: rss: Fix hfunc and input_xfrm parsing on big endian
(bsc#1012628).
- octeontx2-af: fix VF bringup affecting PF promiscuous state
(bsc#1012628).
- drm/xe: remove duplicate <kunit/test-bug.h> include
(bsc#1012628).
- drm/xe: free madvise VMA array on L2 flush failure
(bsc#1012628).
- smb: client: fix overflow in passthrough ioctl bounds check
(bsc#1012628).
- drm/imagination: make pvr_fw_trace_init_mask_ops static
(bsc#1012628).
- tracing/remotes: Fix leak in trace_remote_alloc_buffer()
error path (bsc#1012628).
- tracing/remotes: Fix struct_len in trace_remote_alloc_buffer()
(bsc#1012628).
- ring-buffer: Allow sparse CPU masks in ring_buffer_desc()
(bsc#1012628).
- idpf: add padding to PTP virtchnl structures (bsc#1012628).
- mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()
(bsc#1012628).
- mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()
(bsc#1012628).
- vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter
(bsc#1012628).
- VDUSE: avoid leaking information to userspace (bsc#1012628).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
(bsc#1012628).
- ASoC: SOF: ipc4-control: Validate notification payload size
(bsc#1012628).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
size calc (bsc#1012628).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
(bsc#1012628).
- ASoC: SOF: topology: validate vendor array size before parsing
(bsc#1012628).
- tipc: restrict socket queue dumps in enqueue tracepoints
(bsc#1012628).
- net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post()
(bsc#1012628).
- net: atm: reject out-of-range traffic classes in QoS validation
(bsc#1012628).
- octeontx2-pf: clear stale mailbox IRQ state before request_irq()
(bsc#1012628).
- octeontx2-vf: clear stale mailbox IRQ state before request_irq()
(bsc#1012628).
- net: ife: require ETH_HLEN to be pullable in ife_decode()
(bsc#1012628).
- arm64: fpsimd: Fix type mismatch in sve_{save,load}_state()
(bsc#1012628).
- arm64: dts: s32g3: Fix SWT8 watchdog address (bsc#1012628).
- arm64: dts: renesas: ironhide: Describe inline ECC carveouts
(bsc#1012628).
- ARM: dts: imx6ul-var-som: fix warning for non-existent dc-supply
property (bsc#1012628).
- arm64: dts: qcom: sdm630: describe adsp_mem region properly
(bsc#1012628).
- arm64: dts: rockchip: fix Ethernet PHY not found on PX30
Ringneck (bsc#1012628).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Fix ADC sampling times
(bsc#1012628).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Move divergent mecio1
ADC channels to board files (bsc#1012628).
- arm64: dts: ti: k3-am62a7-sk: Add bootph-all tag to vqmmc
(bsc#1012628).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Enable internal ADC
reference (bsc#1012628).
- arm64: dts: imx8ulp-evk: Correct Type-C int GPIO flags
(bsc#1012628).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Fix GPIO names typo
(bsc#1012628).
- arm64: dts: qcom: hamoa: Fix OPP tables for all DisplayPort
controllers (bsc#1012628).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Move gpio-line-names
to board files (bsc#1012628).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Fix expander gpio line
typo (bsc#1012628).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Move expander
gpio-line-names to board files (bsc#1012628).
- LoongArch: KVM: Validate irqchip index in irqfd routing
(bsc#1012628).
- LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt()
(bsc#1012628).
- LoongArch: KVM: Check the return values for put_user()
(bsc#1012628).
- LoongArch: KVM: Fix FPU register width with user access API
(bsc#1012628).
- LoongArch: KVM: Return full old CSR value from
kvm_emu_xchg_csr() (bsc#1012628).
- KVM: s390: vsie: Fix allocation of struct vsie_rmap
(bsc#1012628).
- KVM: s390: vsie: Add missing radix_tree_preload() in
_gaccess_shadow_fault() (bsc#1012628).
- KVM: s390: Silence potential warnings in
_gmap_crstep_xchg_atomic() (bsc#1012628).
- KVM: s390: vsie: Use mmu cache to allocate rmap (bsc#1012628).
- KVM: s390: Initialize KVM_S390_GET_CMMA_BITS memory
(bsc#1012628).
- KVM: s390: Fix unlikely race in try_get_locked_pte()
(bsc#1012628).
- powerpc/pseries/Kconfig: Enable CONFIG_VPA_PMU to be used with
KVM (bsc#1012628).
- KVM: s390: pci: Fix GISC refcount leak on AIF enable failure
(bsc#1012628).
- KVM: arm64: vgic: Check the interrupt is still ours before
migrating it (bsc#1012628).
- KVM: arm64: vgic: Handle race between interrupt affinity change
and LPI disabling (bsc#1012628).
- KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into
"normal" checks (bsc#1012628).
- KVM: s390: pci: Fix handling of AIF enable without AISB
(bsc#1012628).
- KVM: SEV: Do not allow intra-host migration/mirroring of SNP
VMs (bsc#1012628).
- KVM: TDX: Reject concurrent change to CPUID entry count
(bsc#1012628).
- KVM: x86: Ignore pending PV EOI if the vCPU has since disabled
PV EOIs (bsc#1012628).
- KVM: x86: Nullify irqfd->producer if updating IRTE for bypass
fails (bsc#1012628).
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to
invalid guest state (bsc#1012628).
- KVM: Move kvm_io_bus_get_dev() locking responsibilities to
callers (bsc#1012628).
- KVM: arm64: account pKVM reclaim against the VM mm
(bsc#1012628).
- KVM: arm64: Ensure level is always initialized when relaxing
perms (bsc#1012628).
- KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2
(bsc#1012628).
- KVM: arm64: nv: Write ESR_EL2 for injected nested SError
exceptions (bsc#1012628).
- KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops()
(bsc#1012628).
- KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR
(bsc#1012628).
- KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't
resolve PFN (bsc#1012628).
- KVM: arm64: nv: Re-translate VNCR before injecting abort
(bsc#1012628).
- KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory
(bsc#1012628).
- fbdev: metronomefb: fix potential memory leak in
metronomefb_probe() (bsc#1012628).
- fbdev: broadsheetfb: fix potential memory leak in
broadsheetfb_probe() (bsc#1012628).
- fbdev: hecubafb: fix potential memory leak in hecubafb_probe()
(bsc#1012628).
- fbdev: sm712: Fix operator precedence in big_swap macro
(bsc#1012628).
- fbdev: efifb: fix memory leak in efifb_probe() (bsc#1012628).
- fbdev: radeon: fix potential memory leak in
radeonfb_pci_register() (bsc#1012628).
- fbdev: i740fb: fix potential memory leak in i740fb_probe()
(bsc#1012628).
- fbdev: s3fb: fix potential memory leak in s3_pci_probe()
(bsc#1012628).
- fbdev: uvesafb: fix potential memory leak in uvesafb_probe()
(bsc#1012628).
- fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe()
(bsc#1012628).
- fbdev: carminefb: fix potential memory leak in
alloc_carmine_fb() (bsc#1012628).
- fbdev: vesafb: fix memory leak in vesafb_probe() (bsc#1012628).
- fbdev: nvidia: fix potential memory leak in nvidiafb_probe()
(bsc#1012628).
- fbdev: tridentfb: fix potential memory leak in
trident_pci_probe() (bsc#1012628).
- ASoC: SOF: topology: fix memory leak in snd_sof_load_topology
(bsc#1012628).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
(bsc#1012628).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
(bsc#1012628).
- ASoC: mediatek: mt8192: Check runtime resume during probe
(bsc#1012628).
- ASoC: mediatek: mt8192: Release reserved memory on cleanup
(bsc#1012628).
- ASoC: mediatek: mt8183: Check runtime resume during probe
(bsc#1012628).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
(bsc#1012628).
- ASoC: qcom: q6apm: fix NULL pointer dereference in
graph_callback (bsc#1012628).
- netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
(bsc#1012628).
- netfilter: nfnl_cthelper: apply per-class values when updating
policies (bsc#1012628).
- netfilter: xt_cluster: reject template conntracks in hash match
(bsc#1012628).
- netfilter: nf_queue: pin bridge device while NFQUEUE holds
fake dst (bsc#1012628).
- netfilter: nft_fib: reject fib expression on the netdev egress
hook (bsc#1012628).
- netfilter: nf_conntrack_sip: validate skb_dst() before accessing
it (bsc#1012628).
- netfilter: nft_set_pipapo: don't leak bad clone into future
transaction (bsc#1012628).
- netfilter: nf_nat_sip: reload possible stale data pointer
(bsc#1012628).
- netfilter: nf_conntrack_reasm: guard mac_header adjustment
after IPv6 defrag (bsc#1012628).
- netfilter: flowtable: use dst in this direction when pushing
IPIP header (bsc#1012628).
- netfilter: flowtable: support IPIP tunnel with direct xmit
(bsc#1012628).
- netfilter: nf_conncount: fix zone comparison in tuple dedup
(bsc#1012628).
- netfilter: xt_physdev: masks are not c-strings (bsc#1012628).
- netfilter: ecache: fix inverted time_after() check
(bsc#1012628).
- netfilter: xt_nat: reject unsupported target families
(bsc#1012628).
- netfilter: bridge: fix stale prevhdr pointer in
br_ip6_fragment() (bsc#1012628).
- netfilter: flowtable: use correct direction to set up tunnel
route (bsc#1012628).
- gpu: host1x: Fix device reference leak in
host1x_device_parse_dt() error path (bsc#1012628).
- gpu/buddy: bail out of try_harder when alignment cannot be
honoured (bsc#1012628).
- soc: ti: k3-ringacc: Fix access mode for
k3_ringacc_ring_pop_tail_io/proxy (bsc#1012628).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
(bsc#1012628).
- selinux: check connect-related permissions on TCP Fast Open
(bsc#1012628).
- selinux: avoid sk_socket dereference in
selinux_sctp_bind_connect() (bsc#1012628).
- selinux: fix incorrect execmem checks on overlayfs
(bsc#1012628).
- leds: uleds: Fix potential buffer overread (bsc#1012628).
- mfd: sm501: Fix reference leak on failed device registration
(bsc#1012628).
- tools/power/x86/intel-speed-select: Harden daemon pidfile open
(bsc#1012628).
- x86/video: Only fall back to vga_default_device() without
screen info (bsc#1012628).
- x86/virt/sev: Revert "Drop WBINVD before setting
MSR_AMD64_SYSCFG_SNP_EN" (bsc#1012628).
- x86/boot: Validate console=uart8250 baud rate to fix early
boot hang (bsc#1012628).
- x86/boot: Reject too long acpi_rsdp= values (bsc#1012628).
- perf/x86/amd/brs: Fix kernel address leakage (bsc#1012628).
- perf/x86/amd/lbr: Fix kernel address leakage (bsc#1012628).
- cpufreq: schedutil: Fix uncleared need_freq_update on the
.adjust_perf() path (bsc#1012628).
- cpufreq: intel_pstate: Set non-turbo capacity to
HWP_GUARANTEED_PERF() (bsc#1012628).
- s390/perf_cpum_cf: Add missing array_index_nospec() to
__hw_perf_event_init() (bsc#1012628).
- batman-adv: gw: acquire ethernet header only after skb realloc
(bsc#1012628).
- batman-adv: retrieve ethhdr after potential skb realloc on RX
(bsc#1012628).
- batman-adv: access unicast_ttvn skb->data only after skb realloc
(bsc#1012628).
- batman-adv: dat: acquire ARP hw source only after skb realloc
(bsc#1012628).
- batman-adv: bla: reacquire gw address after skb realloc
(bsc#1012628).
- batman-adv: dat: ensure accessible eth_hdr proto field
(bsc#1012628).
- batman-adv: ensure minimal ethernet header on TX (bsc#1012628).
- batman-adv: dat: fix tie-break for candidate selection
(bsc#1012628).
- batman-adv: tt: avoid request storms during pending request
(bsc#1012628).
- batman-adv: fix VLAN priority offset (bsc#1012628).
- batman-adv: frag: free unfragmentable packet (bsc#1012628).
- batman-adv: clean untagged VLAN on netdev registration failure
(bsc#1012628).
- batman-adv: frag: fix primary_if leak on failed linearization
(bsc#1012628).
- batman-adv: mcast: avoid OOB read of num_dests header
(bsc#1012628).
- batman-adv: tt: prevent TVLV OOB check overflow (bsc#1012628).
- cifs: invalidate cfid on unlink/rename/rmdir (bsc#1012628).
- mfd: tps6586x: Fix OF node refcount (bsc#1012628).
- backlight: ktd2801: Enable BL_CORE_SUSPENDRESUME (bsc#1012628).
- cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size
(bsc#1012628).
- jbd2: fix integer underflow in
jbd2_journal_initialize_fast_commit() (bsc#1012628).
- nvdimm/btt: Free arenas on btt_init() error paths (bsc#1012628).
- nvdimm/btt: Free arena sub-allocations on discover_arenas()
error path (bsc#1012628).
- pinctrl: renesas: rzg2l: Use -ENOTSUPP instead of -EOPNOTSUPP
(bsc#1012628).
- sunrpc: pin svc_xprt across the asynchronous TLS handshake
callback (bsc#1012628).
- sunrpc: wait for in-flight TLS handshake callback when cancel
loses race (bsc#1012628).
- sunrpc: harden rq_procinfo lifecycle to prevent double-free
(bsc#1012628).
- lockd: Plug nlm_file leak when nlm_do_fopen() fails
(bsc#1012628).
- lockd: Plug nlm_file refcount leak on cached nlm_do_fopen()
failure (bsc#1012628).
- SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing
(bsc#1012628).
- remoteproc: qcom: Fix leak when custom dump_segments addition
fails (bsc#1012628).
- remoteproc: xlnx: Check remote core state (bsc#1012628).
- mm/sparse-vmemmap: fix vmemmap accounting underflow
(bsc#1012628).
- MIPS: ip22-gio: fix gio device memory leak (bsc#1012628).
- MIPS: ip22-gio: fix kfree() of static object (bsc#1012628).
- MIPS: ip22-gio: fix device reference leak in probe
(bsc#1012628).
- MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()
(bsc#1012628).
- mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound
pages (bsc#1012628).
- power: supply: cpcap-battery: Fix missing nvmem_device_put()
causing reference leak (bsc#1012628).
- power: supply: max17042: fix OF node reference imbalance
(bsc#1012628).
- mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch
(bsc#1012628).
- mm/memory_hotplug: fix incorrect altmap passing in error path
(bsc#1012628).
- mm/damon/core: make charge_addr_from aware of end-address
exclusivity (bsc#1012628).
- ntfs: grow index root value before reparent header update
(bsc#1012628).
- ntfs: fix incorrect size of symbolic link (bsc#1012628).
- ntfs: fix off-by-one in mapping pairs decoding bounds checks
(bsc#1012628).
- ntfs: Add WQ_PERCPU to alloc_workqueue users (bsc#1012628).
- ntfs: validate attribute values on lookup (bsc#1012628).
- ntfs: add bounds check before accessing EA entries
(bsc#1012628).
- ntfs: not change 0-byte $DATA attribute to non-resident
(bsc#1012628).
- ntfs: validate index block header more strictly (bsc#1012628).
- ntfs: free volume-wide resources on fill_super failure
(bsc#1012628).
- ntfs: update index root allocated size before shrink
(bsc#1012628).
- ntfs: centalize $INDEX_ROOT header validation (bsc#1012628).
- ntfs: skip extent mft records in writeback to prevent deadlock
(bsc#1012628).
- ntfs: reinit search context before volume information lookup
(bsc#1012628).
- ntfs: only alias volume $UpCase to default on exact match
(bsc#1012628).
- ntfs: avoid heap allocation for free-cluster readahead state
(bsc#1012628).
- ntfs: validate index entries on reading (bsc#1012628).
- ntfs: detect mapping-pairs LCN accumulator overflow
(bsc#1012628).
- ntfs: do not replace volume name after lookup errors
(bsc#1012628).
- ntfs: validate resident volume name values on lookup
(bsc#1012628).
- ntfs: validate resident index root values on lookup
(bsc#1012628).
- ntfs: reject non-resident records for resident-only attributes
(bsc#1012628).
- fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory
rename (bsc#1012628).
- fs/ntfs3: bound DeleteIndexEntryAllocation memmove length
(bsc#1012628).
- fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass
(bsc#1012628).
- fs/ntfs3: bound attr_off in UpdateResidentValue against data_off
(bsc#1012628).
- fs/ntfs3: validate lcns_follow in log_replay conversion
(bsc#1012628).
- fs/ntfs3: add depth limit to indx_find_buffer to prevent stack
overflow (bsc#1012628).
- fs/ntfs3: bound NTFS_DE view.data_off in
UpdateRecordData{Root,Allocation} (bsc#1012628).
- ntfs3: cap RESTART_TABLE free-chain walker at rt->used
(bsc#1012628).
- ntfs3: bound to_move in indx_insert_into_root before
hdr_insert_head (bsc#1012628).
- ntfs3: validate split-point offset in indx_insert_into_buffer
(bsc#1012628).
- ntfs3: fix out-of-bounds read in decompress_lznt (bsc#1012628).
- ntfs: fix mrec_lock ABBA deadlock in rename (bsc#1012628).
- ntfs: fail attrlist updates when the superblock is inactive
(bsc#1012628).
- ntfs: sanitize MFT references returned from
ntfs_lookup_inode_by_name() (bsc#1012628).
- ntfs: avoid self-deadlock during inode eviction (bsc#1012628).
- ntfs: make system files immutable to prevent corruption
(bsc#1012628).
- ntfs: fix WARN_ON for resident attribute in
ntfs_map_runlist_nolock() (bsc#1012628).
- ntfs: fix hole runlist memory leak in insert range error path
(bsc#1012628).
- landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path
(bsc#1012628).
- power: supply: charger-manager: fix refcount leak in
is_full_charged() (bsc#1012628).
- selftests/landlock: Test SCOPE_SIGNAL on the SIGIO/fowner pgid
path (bsc#1012628).
- mips: sched: Fix CPUMASK_OFFSTACK memory corruption
(bsc#1012628).
- mm/huge_memory: preserve pmd_swp_uffd_wp on device-private
PMD downgrade (bsc#1012628).
- riscv: cacheinfo: Fix node reference leak in
populate_cache_leaves (bsc#1012628).
- mm/damon/core: always put unsuccessfully committed target pids
(bsc#1012628).
- mm/damon/sysfs-schemes: fix dir put orders in
access_pattern_add_dirs() (bsc#1012628).
- mm/damon/sysfs-schemes: put stats for scheme_add_dirs()
internal error (bsc#1012628).
- fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-update race
(bsc#1012628).
- fs/proc/task_mmu: fix hugetlb self-deadlock in
pagemap_scan_pte_hole() (bsc#1012628).
- fs/proc/task_mmu: use huge_page_size() in
pagemap_scan_hugetlb_entry() (bsc#1012628).
- fs/proc/task_mmu: do not warn on seeing non-migration pmd entry
(bsc#1012628).
- proc: only bump parent nlink when registering directories
(bsc#1012628).
- fs/proc: fix KPF_KSM reported for all anonymous pages
(bsc#1012628).
- powerpc/dt_cpu_ftrs: Set CPU_FTR_P11_PVR for Power11 and later
processors (bsc#1012628).
- mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE
(bsc#1012628).
- kcov: use WRITE_ONCE() for selftest mode stores (bsc#1012628).
- mtd: slram: remove failed entries from the device list
(bsc#1012628).
- 9p: skip nlink update in cacheless mode to fix WARN_ON
(bsc#1012628).
- power: supply: bq257xx: Fix VSYSMIN clamping logic
(bsc#1012628).
- scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished()
(bsc#1012628).
- kho: make sure scratch size is always aligned by
CMA_MIN_ALIGNMENT_BYTES (bsc#1012628).
- scsi: sas: Skip opt_sectors when DMA reports no real
optimization hint (bsc#1012628).
- openrisc: Add full instruction cache invalidate functions
(bsc#1012628).
- mtd: maps: vmu-flash: fix fault in unaligned fixup
(bsc#1012628).
- ocfs2: use kzalloc for quota recovery bitmap allocation
(bsc#1012628).
- mtd: rawnand: pl353: fix probe resource allocation
(bsc#1012628).
- net/9p: fix infinite loop in p9_client_rpc on fatal signal
(bsc#1012628).
- mtd: rawnand: fix condition in 'nand_select_target()'
(bsc#1012628).
- ocfs2: avoid moving extents to occupied clusters (bsc#1012628).
- ocfs2: fix NULL h_transaction deref in
ocfs2_assure_trans_credits (bsc#1012628).
- ocfs2: fix UBSAN array-index-out-of-bounds in
ocfs2_sum_rightmost_rec (bsc#1012628).
- ocfs2: add journal NULL check in ocfs2_checkpoint_inode()
(bsc#1012628).
- ocfs2: reject dinodes with non-canonical i_mode type
(bsc#1012628).
- ocfs2: reject dinodes whose i_rdev disagrees with the file type
(bsc#1012628).
- ocfs2: reject non-inline dinodes with i_size and zero i_clusters
(bsc#1012628).
- fpga: dfl: add bounds check in dfh_get_param_size()
(bsc#1012628).
- bus: mhi: host: pci_generic: Fix the physical function check
(bsc#1012628).
- bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path
(bsc#1012628).
- net: thunderbolt: Fix frags[] overflow by bounding frame_count
(bsc#1012628).
- fpga: microchip-spi: fix zero header_size OOB read in
mpf_ops_parse_header() (bsc#1012628).
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (bsc#1012628).
- s390/pkey: Check length in pkey_pckmo handler implementation
(bsc#1012628).
- mtd: spi-nor: swp: Improve locking user experience
(bsc#1012628).
- mtd: spi-nor: spansion: use die erase for multi-die devices only
(bsc#1012628).
- mtd: rawnand: Pause continuous reads at block boundaries
(bsc#1012628).
- openrisc: Fix jump_label smp syncing (bsc#1012628).
- mtd: maps: vmu-flash: fix NULL pointer dereference in
initialization (bsc#1012628).
- taskstats: retain dead thread stats in TGID queries
(bsc#1012628).
- irqchip/crossbar: Use correct index in crossbar_domain_free()
(bsc#1012628).
- tpm: restore timeout for key creation commands (bsc#1012628).
- tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()
(bsc#1012628).
- tpm: tpm2-sessions: wait for async KPP completion in
tpm_buf_append_salt (bsc#1012628).
- sunrpc: fix uninitialized xprt_create_args structure
(bsc#1012628).
- dmaengine: tegra: Fix burst size calculation (bsc#1012628).
- dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and
ABORT_INT_MASK (bsc#1012628).
- dmaengine: sh: rz-dmac: Fix incorrect NULL check for
list_first_entry() (bsc#1012628).
- dmaengine: dw-edma-pcie: Reject devices without driver data
(bsc#1012628).
- dmaengine: sh: rz-dmac: Move interrupt request after everything
is set up (bsc#1012628).
- platform/x86/intel/tpmi: use cleanup helpers in mem_write()
(bsc#1012628).
- platform/x86: dell-laptop: fix missing cleanups in init error
path (bsc#1012628).
- platform/x86: hp-wmi: Add support for Omen 16-ap0xxx (8D26)
(bsc#1012628).
- platform/x86: hp-wmi: Add support for Omen 16-ap0xxx (8E35)
(bsc#1012628).
- platform/x86: ISST: Restore SST-PP control to all domains
(bsc#1012628).
- platform/x86/amd/pmc: Check for intermediate wakeup in function
(bsc#1012628).
- platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops
(bsc#1012628).
- platform/x86/amd/pmc: Add delay_suspend module parameter
(bsc#1012628).
- platform/x86/amd/pmc: Don't log during intermediate wakeups
(bsc#1012628).
- pkey: Move keytype check from pkey api to handler (bsc#1012628).
- smb: client: use kvzalloc() for megabyte buffer in simple
fallocate (bsc#1012628).
- ksmbd: fix integer overflow in set_file_allocation_info()
(bsc#1012628).
- hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig
(bsc#1012628).
- hwmon: (max6697) add missing 'select REGMAP_I2C' to Kconfig
(bsc#1012628).
- i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)
(bsc#1012628).
- i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ)
(bsc#1012628).
- i2c: mediatek: fix WRRD for SoCs without auto_restart option
(bsc#1012628).
- i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()
(bsc#1012628).
- i2c: spacemit: fix spurious IRQ handling returning IRQ_HANDLED
(bsc#1012628).
- ice: fix ice_init_link() error return preventing probe
(bsc#1012628).
- tcp: defer md5sig_info kfree past RCU grace period in
tcp_connect (bsc#1012628).
- tcp: Decrement tcp_md5_needed static branch (bsc#1012628).
- ufs: core: tracing: Do not dereference pointers in TP_printk()
(bsc#1012628).
- xen/gntdev: fix error handling in ioctl (bsc#1012628).
- xfrm: nat_keepalive: avoid double free on send error
(bsc#1012628).
- xfrm: use compat translator only for u64 alignment mismatch
(bsc#1012628).
- xfrm: xfrm_interface: require CAP_NET_ADMIN in the device
netns for changelink (bsc#1012628).
- tpm: fix event_size output in tpm1_binary_bios_measurements_show
(bsc#1012628).
- tpm: Make the TPM character devices non-seekable (bsc#1012628).
- time: Fix off-by-one in compat settimeofday() usec validation
(bsc#1012628).
- spi: imx: reconfigure for PIO when DMA cannot be started
(bsc#1012628).
- spi: uniphier: Fix completion initialization order before
devm_request_irq() (bsc#1012628).
- sctp: validate STALE_COOKIE cause length before reading
staleness (bsc#1012628).
- NFS: Charge unstable writes by request size, not folio size
(bsc#1012628).
- nvme-apple: Prevent shared tags across queues on Apple A11
(bsc#1012628).
- nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1012628).
- nvmet-rdma: handle inline data with a nonzero offset
(bsc#1012628).
- nvmet: fix refcount leak in nvmet_sq_create() (bsc#1012628).
- netdev-genl: report NAPI thread PID in the caller's pid
namespace (bsc#1012628).
- ovl: use linked upper dentry in copy-up tmpfile (bsc#1012628).
- can: esd_usb: kill anchored URBs before freeing netdevs
(bsc#1012628).
- can: isotp: use unconditional synchronize_rcu() in
isotp_release() (bsc#1012628).
- can: isotp: fix use-after-free race with concurrent
NETDEV_UNREGISTER (bsc#1012628).
- can: isotp: serialize TX state transitions under so->rx_lock
(bsc#1012628).
- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer
UAF (bsc#1012628).
- can: bcm: fix lockless bound/ifindex race and silent RX_SETUP
failure (bsc#1012628).
- can: bcm: add locking when updating filter and timer values
(bsc#1012628).
- can: bcm: add missing rcu list annotations and operations
(bsc#1012628).
- can: bcm: extend bcm_tx_lock usage for data and timer updates
(bsc#1012628).
- can: bcm: fix CAN frame rx/tx statistics (bsc#1012628).
- can: bcm: fix data race on rx_stamp/rx_ifindex in
bcm_rx_handler() (bsc#1012628).
- can: bcm: fix stale rx/tx ops after device removal
(bsc#1012628).
- can: bcm: track a single source interface for ANYDEV
timeout/throttle ops (bsc#1012628).
- can: bcm: validate frame length in bcm_rx_setup() for RTR
replies (bsc#1012628).
- can: bcm: add missing device refcount for CAN filter removal
(bsc#1012628).
- io_uring/bpf-ops: reject re-registration of an already-bound
ops (bsc#1012628).
- bpf: Reset register bounds before narrowing retval range in
check_mem_access() (bsc#1012628).
- bpf,fork: wipe ->bpf_storage before bailouts that access it
(bsc#1012628).
- bpf: Add missing access_ok call to copy_user_syms (bsc#1012628).
- selftests/bpf: Cover negative buffer pointer offsets
(bsc#1012628).
- block: remove redundant GD_NEED_PART_SCAN in add_disk_final()
(bsc#1012628).
- block: fix race in blk_time_get_ns() returning 0 (bsc#1012628).
- block: fix IORING_URING_CMD_REISSUE flags check in
blkdev_uring_cmd (bsc#1012628).
- net: sparx5: unregister blocking notifier on init failure
(bsc#1012628).
- dm thin metadata: fix superblock refcount leak on snapshot
shadow failure (bsc#1012628).
- dm thin metadata: fix metadata snapshot consistency on commit
failure (bsc#1012628).
- dm era: fix out-of-bounds memory access for non-zero start
sector (bsc#1012628).
- dm-bufio: fix wrong count calculation in dm_bufio_issue_discard
(bsc#1012628).
- dm-ioctl: fix a possible overflow in list_version_get_info
(bsc#1012628).
- dm-log: fix a bitset_size overflow on 32bit machines
(bsc#1012628).
- dm-pcache: reject option groups without values (bsc#1012628).
- dm-stats: fix dm_jiffies_to_msec64 (bsc#1012628).
- dm-stats: fix merge accounting (bsc#1012628).
- dm: avoid leaking the caller's thread keyring via the table
device file (bsc#1012628).
- dm_early_create: fix freeing used table on dm_resume failure
(bsc#1012628).
- dm-integrity: fix leaking uninitialized kernel memory
(bsc#1012628).
- dm-integrity: fix a bug if the bio is out of limits
(bsc#1012628).
- dm-integrity: don't increment hash_offset twice (bsc#1012628).
- dm-verity: fix buffer overflow in FEC calculation (bsc#1012628).
- dm-verity: avoid double increment of &use_bh_wq_enabled
(bsc#1012628).
- dm-verity: fix a possible NULL pointer dereference
(bsc#1012628).
- dm-verity: increase sprintf buffer size (bsc#1012628).
- dm-verity: make error counter atomic (bsc#1012628).
- dma-fence: Make dma_fence_dedup_array() robust against 0-count
input (bsc#1012628).
- dma-fence: use correct callback in dma_fence_timeline_name()
(bsc#1012628).
- dma-buf: dma-fence: Fix potential NULL pointer dereference
(bsc#1012628).
- accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap()
(bsc#1012628).
- accel/amdxdna: reject command submission on devices without
a submit op (bsc#1012628).
- accel/amdxdna: reject user command submission without a command
BO (bsc#1012628).
- accel/amdxdna: Use caller client for debug BO sync
(bsc#1012628).
- accel/ivpu: Reject firmware log with size smaller than header
(bsc#1012628).
- scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
(bsc#1012628).
- scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()
(bsc#1012628).
- scsi: sg: Report request-table problems when any status is set
(bsc#1012628).
- scsi: xen: scsiback: Free the command tag on the TMR
submit-failure path (bsc#1012628).
- scsi: xen: scsiback: Free unsubmitted command instead of
double-putting it (bsc#1012628).
- scsi: target: Bound PR-OUT TransportID parsing to the received
buffer (bsc#1012628).
- scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER
AND MOVE (bsc#1012628).
- scsi: elx: efct: Fix refcount leak in efct_hw_io_abort()
(bsc#1012628).
- scsi: elx: efct: Fix I/O leak on unsupported additional CDB
(bsc#1012628).
- fs/resctrl: Fix use-after-free during unmount (bsc#1012628).
- Input: ims-pcu - fix use-after-free and double-free in
disconnect (bsc#1012628).
- Input: ims-pcu - only expose sysfs attributes on control
interface (bsc#1012628).
- Input: ims-pcu - release data interface on disconnect
(bsc#1012628).
- Input: ims-pcu - validate control endpoint type (bsc#1012628).
- Input: ims-pcu - add response length checks (bsc#1012628).
- Input: ims-pcu - fix DMA mapping violation in line setup
(bsc#1012628).
- Input: ims-pcu - fix firmware leak in async update
(bsc#1012628).
- Input: ims-pcu - fix logic error in packet reset (bsc#1012628).
- Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq()
debug logging (bsc#1012628).
- Input: ims-pcu - fix potential infinite loop in CDC union
descriptor parsing (bsc#1012628).
- Input: ims-pcu - fix race condition in reset_device sysfs
callback (bsc#1012628).
- Input: ims-pcu - fix type confusion in CDC union descriptor
parsing (bsc#1012628).
- mmc: vub300: fix use-after-free on probe failure (bsc#1012628).
- net/mlx5e: macsec: fix use-after-free of metadata_dst on RX
SC delete (bsc#1012628).
- tracing/user_events: Fix use-after-free in user_event_mm_dup()
(bsc#1012628).
- wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()
(bsc#1012628).
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()
(bsc#1012628).
- posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()
(bsc#1012628).
- selftests/ftrace: Drop invalid top-level local in test_ownership
(bsc#1012628).
- cpu: hotplug: Preserve per instance callback errors
(bsc#1012628).
- cpu: hotplug: Bound hotplug states sysfs output (bsc#1012628).
- net: mana: Validate the packet length reported by the NIC
(bsc#1012628).
- net: mana: Sync page pool RX frags for CPU (bsc#1012628).
- gpio: mt7621: more robust management of IRQ domain teardown
(bsc#1012628).
- gpio: tegra: do not call pinctrl for GPIO direction
(bsc#1012628).
- gpio: mt7621: be sure IRQ domain is created before exposing
GPIO chips (bsc#1012628).
- gpio-f7188x: Add support for NCT6126D version B (bsc#1012628).
- gpio: mt7621: avoid corruption of shared interrupt trigger state
(bsc#1012628).
- gpios: palmas: add .get_direction() op (bsc#1012628).
- net: sit: require CAP_NET_ADMIN in the device netns for
changelink (bsc#1012628).
- net: ethernet: ti: icssg: guard PA stat lookups (bsc#1012628).
- net: wwan: t7xx: destroy DMA pool on CLDMA late init failure
(bsc#1012628).
- net: ixp4xx_hss: fix duplicate HDLC netdev allocation
(bsc#1012628).
- net/sched: act_ct: preserve tc_skb_cb across defragmentation
(bsc#1012628).
- selftests: net: fix file owner for broadcast_ether_dst test
(bsc#1012628).
- net: ena: clean up XDP TX queues when regular TX setup fails
(bsc#1012628).
- net: ip6_vti: require CAP_NET_ADMIN in the device netns for
changelink (bsc#1012628).
- net: ip_vti: require CAP_NET_ADMIN in the device netns for
changelink (bsc#1012628).
- net: ipip: require CAP_NET_ADMIN in the device netns for
changelink (bsc#1012628).
- net: ip6_gre: require CAP_NET_ADMIN in the device netns for
changelink (bsc#1012628).
- net: ip6_tunnel: require CAP_NET_ADMIN in the device netns
for changelink (bsc#1012628).
- octeontx2-af: Free BPID bitmap on setup failure (bsc#1012628).
- ieee802154: admin-gate legacy LLSEC dump operations
(bsc#1012628).
- ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict
validation (bsc#1012628).
- ieee802154: ca8210: fix cas_ctl leak on spi_async failure
(bsc#1012628).
- ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit
(bsc#1012628).
- gve: fix header buffer corruption with header-split and HW-GRO
(bsc#1012628).
- octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF
(bsc#1012628).
- ksmbd: fix stack buffer overflow in multichannel session-key
copy (bsc#1012628).
- netfilter: nfnetlink_cthelper: cap to maximum number of
expectation per master (bsc#1012628).
- platform/x86/amd/pmc: Avoid logging "(null)" for DMI values
(bsc#1012628).
- net/sched: sch_teql: move rcu_read_lock()/spin_lock() from
_bh variants (bsc#1012628).
- ACPICA: Define acpi_ut_safe_strncpy() as strscpy_pad() alias
(bsc#1012628).
- drm/xe/userptr: Stub notifier_lock helpers when DRM_GPUSVM=n
(bsc#1012628).
- netfilter: nfnetlink_cthelper: cap to maximum number of
expectation per master on updates (bsc#1012628).
- KVM: arm64: Fix propagation of TLBI level in
kvm_pgtable_stage2_relax_perms() (bsc#1012628).
- riscv: vdso: Always declare vdso_start symbols (bsc#1012628).
- pwm: rzg2l-gpt: Fix period_ticks type from u32 to u64
(bsc#1012628).
- LoongArch: Fix nr passing in set_direct_map_valid_noflush()
(bsc#1012628).
- LoongArch: Fix missing dirty page tracking in
{pte,pmd}_wrprotect() (bsc#1012628).
- ipmi: Fix user refcount underflow in event delivery
(bsc#1012628).
- espintcp: use sk_msg_free_partial to fix partial send
(bsc#1012628).
- ipmi: fix refcount leak in i_ipmi_request() (bsc#1012628).
- bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()
(bsc#1012628).
- rtc: renesas-rtca3: Fix PIE clear polling condition in alarm
setup error path (bsc#1012628).
- fscrypt: Replace mk_users keyring with simple list
(bsc#1012628).
- rtc: mpfs: fix counter upload completion condition
(bsc#1012628).
- hwmon: (w83627hf) remove VID sysfs files on error and remove
(bsc#1012628).
- hwmon: (w83793) remove vrm sysfs file on probe failure
(bsc#1012628).
- net: liquidio: fix BAR resource leak on PF number failure
(bsc#1012628).
- ACPI: TAD: Check AC wake capability before enabling wakeup
(bsc#1012628).
- hwmon: (occ) unregister sysfs devices outside occ lock
(bsc#1012628).
- fsl/fman: Free init resources on KeyGen failure in fman_init()
(bsc#1012628).
- net: lan743x: Initialize eth_syslock spinlock before use
(bsc#1012628).
- net/sched: sch_multiq: Replace direct dequeue call with peek
and qdisc_dequeue_peeked (bsc#1012628).
- net/sched: sch_taprio: Replace direct dequeue call with peek
and qdisc_dequeue_peeked (bsc#1012628).
- fhandle: reject detached mounts in capable_wrt_mount()
(bsc#1012628).
- hwmon: (max1619) add missing 'select REGMAP' to Kconfig
(bsc#1012628).
- tracing/probes: Fix double addition of offset for @+FOFFSET
(bsc#1012628).
- orangefs: keep the readdir entry size 64-bit in fill_from_part()
(bsc#1012628).
- net/mlx5: HWS, fix matcher leak on resize target setup failure
(bsc#1012628).
- ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD
(bsc#1012628).
- ata: pata_pxa: Fix DMA channel leak on probe error
(bsc#1012628).
- ata: libata-core: Reject an invalid concurrent positioning
ranges count (bsc#1012628).
- net: wwan: iosm: bound device offsets in the MUX downlink
decoder (bsc#1012628).
- net: ipa: fix SMEM state handle leaks in SMP2P init
(bsc#1012628).
- hwmon: (asus_atk0110) Check package count before accessing
element (bsc#1012628).
- riscv: probes: save original sp in rethook trampoline
(bsc#1012628).
- mm/compaction: handle free_pages_prepare() properly in
compaction_free() (bsc#1012628).
- irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup
failure (bsc#1012628).
- s390/monwriter: Reject buffer reuse with different data length
(bsc#1012628).
- mac802154: remove interfaces with RCU list deletion
(bsc#1012628).
- octeontx2-pf: fix SQB pointer leak on init failure
(bsc#1012628).
- selftests: net: make busywait timeout clock portable
(bsc#1012628).
- llc: fix SAP refcount leak in llc_ui_autobind() (bsc#1012628).
- ipvs: use parsed transport offset in SCTP state lookup
(bsc#1012628).
- ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
(bsc#1012628).
- macsec: don't read an unset MAC header in macsec_encrypt()
(bsc#1012628).
- dibs: loopback: validate offset and size in move_data()
(bsc#1012628).
- net: macb: drop in-flight Tx SKBs on close (bsc#1012628).
- amdkfd: properly free secondary context id (bsc#1012628).
- arm64: smp: Fix hot-unplug tearing by forcing unregistration
(bsc#1012628).
- cpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable()
(bsc#1012628).
- fs/resctrl: Free mon_data structures on rdt_get_tree() failure
(bsc#1012628).
- fs/resctrl: Fix double-add of pseudo-locked region's RMID to
free list (bsc#1012628).
- ata: libata-core: Skip HPA resize for locked drives
(bsc#1012628).
- ata: libata-core: Allow capacity transition to zero for locked
drives (bsc#1012628).
- drbd: reject data replies with an out-of-range payload size
(bsc#1012628).
- riscv: Prevent NULL pointer dereference in
machine_kexec_prepare() (bsc#1012628).
- tracing/osnoise: Call synchronize_rcu() when unregistering
(bsc#1012628).
- s390/diag: Add missing array_index_nospec() call to
memtop_get_page_count() (bsc#1012628).
- s390/mm: Fix type mismatch in get_align_mask() (bsc#1012628).
- selftests/rseq: Fix a building error for riscv arch
(bsc#1012628).
- cgroup/cpuset: rebind mm mempolicy to effective_mems, not
mems_allowed (bsc#1012628).
- pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for
DSI/CSI (bsc#1012628).
- pmdomain: mediatek: Fix possible nullptr KP in HWV
cleanup/on-check (bsc#1012628).
- pmdomain: imx: Fix i.MX8MP power notifier (bsc#1012628).
- pmdomain: imx: Fix i.MX8MP VC8000E power up sequence
(bsc#1012628).
- selftests/landlock: Skip scoped_signal subtest with MSG_OOB
if not available (bsc#1012628).
- selftests/landlock: Fix screwed up pointers in the
scoped_signal_test (bsc#1012628).
- mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios
timing on resume (bsc#1012628).
- powerpc/pseries: fix memory leak on krealloc failure in
papr_init (bsc#1012628).
- net/mlx5: free mlx5_st_idx_data on final dealloc (bsc#1012628).
- wifi: rt2x00: avoid full teardown before work setup in probe
(bsc#1012628).
- wifi: mwifiex: fix roaming to different channel in host_mlme
mode (bsc#1012628).
- wifi: mac80211: fix memory leak in ieee80211_register_hw()
(bsc#1012628).
- wifi: brcmfmac: cyw: fix heap overflow on a short auth frame
(bsc#1012628).
- riscv: vdso: Do not use LTO for the vDSO (bsc#1012628).
- arch/riscv: vdso: remove CFI landing pad from rt_sigreturn
(bsc#1012628).
- regulator: ltc3676: Fix incorrect IRQSTAT bit offsets
(bsc#1012628).
- net: openvswitch: reject oversized nested action attrs
(bsc#1012628).
- Bluetooth: btrtl: validate firmware patch bounds (bsc#1012628).
- crypto: aes - Fix conditions for selecting MAC dependencies
(bsc#1012628).
- llc: fix SAP refcount leak when creating incoming sockets
(bsc#1012628).
- macsec: fix promiscuity refcount leak in macsec_dev_open()
(bsc#1012628).
- memstick: ms_block: reject a card that reports too many blocks
(bsc#1012628).
- ipvs: fix more places with wrong ipv6 transport offsets
(bsc#1012628).
- ipvs: reload ip header after head reallocation (bsc#1012628).
- reset: imx7: Correct polarity of MIPI CSI resets on i.MX8MQ
(bsc#1012628).
- reset: sunxi: fix memory region leak on ioremap failure
(bsc#1012628).
- powerpc/spufs: fix out-of-bounds access in
spufs_mem_mmap_access() (bsc#1012628).
- powerpc/uaccess: correct check for CONFIG_PPC_E500 in
mask_user_address() (bsc#1012628).
- wifi: cfg80211: validate EHT MLE before MLD ID read
(bsc#1012628).
- wifi: ieee80211: validate MLE common info length (bsc#1012628).
- wifi: mac80211: free ack status frame on TX header build failure
(bsc#1012628).
- wifi: mac80211: validate extension-frame layout before RX
(bsc#1012628).
- wifi: mwifiex: fix permanently busy scans after multiple roam
iterations (bsc#1012628).
- mtd: virt-concat: free duplicate generated name (bsc#1012628).
- mtd: onenand: samsung: report DMA completion timeouts
(bsc#1012628).
- mtd: mchp23k256: use SPI match data for chip caps (bsc#1012628).
- mmc: vub300: defer reset until cmd_mutex is unlocked
(bsc#1012628).
- mtd: rawnand: fsl_ifc: return errors for failed page reads
(bsc#1012628).
- mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout
(bsc#1012628).
- mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion
timeout (bsc#1012628).
- mmc: block: fix RPMB device unregister ordering (bsc#1012628).
- mmc: mmc_test: Fix __counted_by handling after kzalloc_flex()
conversion (bsc#1012628).
- mmc: sdhci-of-dwcmshc: check bus clock enable result in the
probe() method (bsc#1012628).
- mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq
check for tuning save/restore (bsc#1012628).
- mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on
resume (bsc#1012628).
- mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow
default state restore (bsc#1012628).
- mmc: sdhci-esdhc-imx: disable irq during suspend to fix
unhandled interrupt (bsc#1012628).
- mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend
(bsc#1012628).
- mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in
suspend (bsc#1012628).
- mmc: sdhci-esdhc-imx: fix resume error handling (bsc#1012628).
- bpf: Reject negative const offsets for buffer pointers
(bsc#1012628).
- mm/damon/core: trace esz at first setup (bsc#1012628).
- samples/damon/mtier: fail early if address range parameters
are invalid (bsc#1012628).
- device property: initialize the remaining fields of
fwnode_handle in fwnode_init() (bsc#1012628).
- f2fs: fix potential deadlock in f2fs_balance_fs() (bsc#1012628).
- f2fs: fix potential deadlock in gc_merge path of
f2fs_balance_fs() (bsc#1012628).
- f2fs: fix listxattr handling of corrupted xattr entries
(bsc#1012628).
- iio: hid-sensor-rotation: Fix stale or zero output when reading
raw values (bsc#1012628).
- ALSA: scarlett2: Allow selecting config_set by firmware version
(bsc#1012628).
- ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417
(bsc#1012628).
- firmware_loader: Add cancel helper for async requests
(bsc#1012628).
- ALSA: hda/tas2781: Cancel async firmware request at unbind
(bsc#1012628).
- binder: Use LIST_HEAD() to initialize on stack list head
(bsc#1012628).
- binder: cache secctx size before release zeroes it
(bsc#1012628).
- Bluetooth: 6lowpan: fix cyclic locking warning on netdev
unregister (bsc#1012628).
- Bluetooth: L2CAP: Fix use-after-free in
l2cap_sock_new_connection_cb() (bsc#1012628).
- ksmbd: fix path resolution in ksmbd_vfs_kern_path_create
(bsc#1012628).
- smb: move compression definitions into common/fscc.h
(bsc#1012628).
- ksmbd: use opener credentials for FSCTL mutations (bsc#1012628).
- xfs: factor out a xfs_zone_mark_free helper (bsc#1012628).
- xfs: add newly added RTGs to the free pool in growfs
(bsc#1012628).
- usb: atm: ueagle-atm: use dev_dbg() for 'device found' message
(bsc#1012628).
- usb: atm: ueagle-atm: remove function entry/exit debug messages
(bsc#1012628).
- usb: atm: ueagle-atm: wait for pre-firmware load in
.disconnect() (bsc#1012628).
- liveupdate: validate session type before performing operation
(bsc#1012628).
- crypto: xilinx-trng - Remove crypto_rng interface (bsc#1012628).
- exfat: replace unsafe macros with static inline functions
(bsc#1012628).
- exfat: add balloc parameter to exfat_map_cluster() for iomap
support (bsc#1012628).
- exfat: add data_start_bytes and exfat_cluster_to_phys_bytes()
helper (bsc#1012628).
- exfat: fix implicit declaration of brelse() (bsc#1012628).
- iomap: consolidate bio submission (bsc#1012628).
- drm/amd/display: Fix Color Manager (3DLUT, Shaper, Blend)
(bsc#1012628).
- posix-timers: Expand timer_[re]arm() callbacks with a boolean
return value (bsc#1012628).
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race
(bsc#1012628).
- Revert "gpib: cb7210: Fix region leak when request_irq fails"
(bsc#1012628).
- Rename to
patches.kernel.org/7.1.5-1045-apparmor-don-t-audit-files-pointing-to-aa_null.patch.
- Rename to
patches.kernel.org/7.1.5-1046-apparmor-fix-uninitialised-pointer-passed-to-a.patch.
- Rename to
patches.kernel.org/7.1.5-1260-ACPICA-Unbreak-tools-build-after-switching-ove.patch.
- Update config files.
- commit 1704591
* Mon Jul 27 2026 msuchanek@suse.de
- pkspec-dtb: Fix dtb-al rename.
- commit 98ec660
* Mon Jul 27 2026 msuchanek@suse.de
- mkspec-dtb: Skip missing DTBs.
- commit 133d77b
* Thu Jul 23 2026 mwilck@suse.com
- md/raid1: create serial pool adding rdev to array with
serialize_policy=1 (bsc#1272261).
- commit 50997db
* Wed Jul 22 2026 tiwai@suse.de
- drm/i915/mtl+: Enable PPS before PLL (bsc#1264698).
- commit 1d4fda8
* Tue Jul 21 2026 tiwai@suse.de
- soundwire: dmi-quirks: Disable ghost Realtek on Asus Zenbook
Duo (bsc#1271264).
- commit bce4269
* Tue Jul 21 2026 tiwai@suse.de
- soundwire: dmi-quirks: Disable ghost Realtek devices
(bsc#1271264).
- commit 5c9ff0f
* Mon Jul 20 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.1.2-002-fuse-re-lock-request-before-replacing-page-cach.patch
(bsc#1012628 CVE-2026-53388).
- Update
patches.kernel.org/7.1.2-005-iio-light-veml6075-add-bounds-check-to-veml6075.patch
(bsc#1012628 CVE-2026-53387).
- Update
patches.kernel.org/7.1.2-006-iio-adc-ti-ads1298-add-bounds-check-to-pga_sett.patch
(bsc#1012628 CVE-2026-53386).
- Update
patches.kernel.org/7.1.2-008-vc_screen-fix-null-ptr-deref-in-vcs_notifier-du.patch
(bsc#1012628 CVE-2026-53385).
- Update
patches.kernel.org/7.1.2-010-serial-8250_dw-unregister-8250-port-if-clk_noti.patch
(bsc#1012628 CVE-2026-53384).
- Update
patches.kernel.org/7.1.2-012-ksmbd-reject-non-VALID-session-in-compound-requ.patch
(bsc#1012628 CVE-2026-53383).
- Update
patches.kernel.org/7.1.2-013-media-vidtv-fix-NULL-pointer-dereference-in-vid.patch
(bsc#1012628 CVE-2026-53382).
- Update
patches.kernel.org/7.1.2-014-virtiofs-fix-UAF-on-submount-umount.patch
(bsc#1012628 CVE-2026-53381).
- Update
patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
(bsc#1012628 CVE-2026-53359 bsc#1270059).
- Update
patches.kernel.org/7.1.3-006-batman-adv-tp_meter-avoid-divide-by-zero-for-de.patch
(bsc#1012628 CVE-2026-63836).
- Update
patches.kernel.org/7.1.3-018-batman-adv-v-prevent-OGM-aggregation-on-disable.patch
(bsc#1012628 CVE-2026-63835).
- Update
patches.kernel.org/7.1.3-019-batman-adv-tp_meter-restrict-number-of-unacked-.patch
(bsc#1012628 CVE-2026-63834).
- Update
patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
(bsc#1012628 CVE-2026-53362 bsc#1269493).
- Update
patches.kernel.org/7.1.3-029-ipv4-account-for-fraggap-on-the-paged-allocatio.patch
(bsc#1012628 CVE-2026-53366 bsc#1271366).
- Update
patches.kernel.org/7.1.3-030-ntfs3-reject-direct-userspace-writes-to-reserve.patch
(bsc#1012628 CVE-2026-63833).
- Update
patches.kernel.org/7.1.3-031-wifi-mt76-add-wcid-publish-check-in-mt76_sta_ad.patch
(bsc#1012628 CVE-2026-63832).
- Update
patches.kernel.org/7.1.3-032-mac802154-llsec-add-skb_cow_data-before-in-plac.patch
(bsc#1012628 CVE-2026-63831).
- Update
patches.kernel.org/7.1.3-033-net-skmsg-preserve-sg.copy-across-SG-transforms.patch
(bsc#1012628 CVE-2026-63830).
- Update
patches.kernel.org/7.1.3-034-net-ip_gre-require-CAP_NET_ADMIN-in-the-device-.patch
(bsc#1012628 CVE-2026-63829).
- Update
patches.kernel.org/7.1.3-036-apparmor-mediate-the-implicit-connect-of-TCP-fa.patch
(bsc#1012628 CVE-2026-63828).
- Update
patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch
(bko#221513 bsc#1012628 CVE-2026-63827).
- Update
patches.kernel.org/7.1.3-039-fbdev-fix-use-after-free-in-store_modes.patch
(bsc#1012628 CVE-2026-63826).
- Update
patches.kernel.org/7.1.3-045-gcov-use-atomic-counter-updates-to-fix-concurre.patch
(bsc#1012628 CVE-2026-63825).
- Update
patches.kernel.org/7.1.3-046-KEYS-fix-overflow-in-keyctl_pkey_params_get_2.patch
(bsc#1012628 CVE-2026-63824).
- Update
patches.kernel.org/7.1.3-047-keys-Pin-request_key_auth-payload-in-instantiat.patch
(bsc#1012628 CVE-2026-63823).
- Update
patches.kernel.org/7.1.3-052-wifi-ath11k-fix-warning-when-unbinding.patch
(bsc#1012628 CVE-2026-63822).
- Update
patches.kernel.org/7.1.3-056-wifi-rtw88-usb-fix-memory-leaks-on-USB-write-fa.patch
(bsc#1012628 CVE-2026-63821).
- Update
patches.kernel.org/7.1.3-060-f2fs-fix-missing-read-bio-submission-on-large-f.patch
(bsc#1012628 CVE-2026-63820).
- Update
patches.kernel.org/7.1.3-063-f2fs-fix-to-do-sanity-check-on-f2fs_get_node_fo.patch
(bsc#1012628 CVE-2026-63819).
- Update
patches.kernel.org/7.1.3-064-f2fs-validate-orphan-inode-entry-count.patch
(bsc#1012628 CVE-2026-63818).
- Update
patches.kernel.org/7.1.3-065-f2fs-validate-compress-cache-inode-only-when-en.patch
(bsc#1012628 CVE-2026-63817).
- Update
patches.kernel.org/7.1.3-066-f2fs-atomic-fix-UAF-issue-on-f2fs_inode_info.at.patch
(bsc#1012628 CVE-2026-63816).
- Update
patches.kernel.org/7.1.3-068-f2fs-bound-i_inline_xattr_size-for-non-inline-x.patch
(bsc#1012628 CVE-2026-63815).
- Update
patches.kernel.org/7.1.3-069-f2fs-validate-ACL-entry-sizes-in-f2fs_acl_from_.patch
(bsc#1012628 CVE-2026-63814).
- Update
patches.kernel.org/7.1.3-070-Revert-f2fs-remove-non-uptodate-folio-from-the-.patch
(bsc#1012628 CVE-2026-63813).
- Update
patches.kernel.org/7.1.3-071-f2fs-fix-incorrect-FI_NO_EXTENT-handling-in-__d.patch
(bsc#1012628 CVE-2026-63812).
- Update
patches.kernel.org/7.1.3-073-f2fs-read-COW-data-with-the-original-inode-duri.patch
(bsc#1012628 CVE-2026-63811).
- Update
patches.kernel.org/7.1.3-074-block-Avoid-mounting-the-bdev-pseudo-filesystem.patch
(bsc#1012628 CVE-2026-63810).
- Update
patches.kernel.org/7.1.3-075-bpf-use-kvfree-for-replaced-sysctl-write-buffer.patch
(bsc#1012628 CVE-2026-63809).
- Update
patches.kernel.org/7.1.3-077-exfat-fix-potential-use-after-free-in-exfat_fin.patch
(bsc#1012628 CVE-2026-63808).
- Update
patches.kernel.org/7.1.3-078-KVM-x86-mmu-Ensure-hugepage-is-in-by-slot-befor.patch
(bsc#1012628 CVE-2026-63807).
- Update
patches.kernel.org/7.1.3-079-KVM-Replace-guest-triggerable-BUG_ON-in-ioevent.patch
(bsc#1012628 CVE-2026-63806).
- Update
patches.kernel.org/7.1.3-080-crypto-nx-fix-nx_crypto_ctx_exit-argument.patch
(bsc#1012628 CVE-2026-63805).
- Update
patches.kernel.org/7.1.3-081-gfs2-fix-use-after-free-in-gfs2_qd_dealloc.patch
(bsc#1012628 CVE-2026-63804).
- Update
patches.kernel.org/7.1.3-083-hdlc_ppp-sync-per-proto-timers-before-freeing-h.patch
(bsc#1012628 CVE-2026-63803).
- Update
patches.kernel.org/7.1.3-084-blk-cgroup-fix-UAF-in-__blkcg_rstat_flush.patch
(bsc#1012628 CVE-2026-63802).
- Update
patches.kernel.org/7.1.3-085-tipc-fix-slab-use-after-free-Read-in-tipc_aead_.patch
(bsc#1012628 CVE-2026-63801).
- Update
patches.kernel.org/7.1.3-087-pNFS-Fix-use-after-free-in-pnfs_update_layout.patch
(bsc#1012628 CVE-2026-63800).
- Update
patches.kernel.org/7.1.3-088-sched-mmcid-Fix-OOB-clear_bit-when-CID-is-MM_CI.patch
(bsc#1012628 CVE-2026-63799).
- Update
patches.kernel.org/7.1.3-089-irqchip-imgpdc-Fix-resource-leak-add-missing-ch.patch
(bsc#1012628 CVE-2026-63798).
- Update
patches.kernel.org/7.1.3-091-rpmsg-char-Fix-use-after-free-on-probe-error-pa.patch
(bsc#1012628 CVE-2026-63797).
- Update
patches.kernel.org/7.1.3-092-ocfs2-reject-oversized-group-bitmap-descriptors.patch
(bsc#1012628 CVE-2026-63796).
- Update
patches.kernel.org/7.1.3-093-9p-avoid-putting-oldfid-in-p9_client_walk-error.patch
(bsc#1012628 CVE-2026-63795).
- Update
patches.kernel.org/7.1.3-096-KVM-SVM-Fix-page-overflow-in-sev_dbg_crypt-for-.patch
(bsc#1012628 CVE-2026-63794).
- Update
patches.kernel.org/7.1.3-100-ntfs-serialize-volume-label-accesses.patch
(bsc#1012628 CVE-2026-63793).
- Update
patches.kernel.org/7.1.3-101-fbdev-Fix-fb_new_modelist-to-prevent-null-ptr-d.patch
(bsc#1012628 CVE-2026-53403).
- Update
patches.kernel.org/7.1.3-102-fbdev-fbcon-fix-out-of-bounds-read-in-err_out-o.patch
(bsc#1012628 CVE-2026-53402).
- Update
patches.kernel.org/7.1.3-103-fbdev-omap2-fix-use-after-free-in-omapfb_mmap.patch
(bsc#1012628 CVE-2026-53401).
- Update
patches.kernel.org/7.1.3-106-i2c-core-fix-adapter-registration-race.patch
(bsc#1012628 CVE-2026-53400).
- Update
patches.kernel.org/7.1.3-107-nfsd-release-layout-stid-on-setlease-failure.patch
(bsc#1012628 CVE-2026-53399).
- Update
patches.kernel.org/7.1.3-108-NFSD-Fix-SECINFO_NO_NAME-decode-error-cleanup.patch
(bsc#1012628 CVE-2026-53398).
- Update
patches.kernel.org/7.1.3-109-nfsd-fix-posix_acl-leak-on-SETACL-decode-failur.patch
(bsc#1012628 CVE-2026-53397).
- Update
patches.kernel.org/7.1.3-111-nfsd-fix-posix_acl-leak-and-ignored-error-in-nf.patch
(bsc#1012628 CVE-2026-53396).
- Update
patches.kernel.org/7.1.3-113-nfsd-fix-dead-ACL-conflict-guard-in-nfsd4_creat.patch
(bsc#1012628 CVE-2026-53395).
- Update
patches.kernel.org/7.1.3-114-nfsd-avoid-leaking-pre-allocated-openowner-on-u.patch
(bsc#1012628 CVE-2026-53394).
- Update
patches.kernel.org/7.1.3-115-nfsd-reset-write-verifier-on-deferred-writeback.patch
(bsc#1012628 CVE-2026-53393).
- Update
patches.kernel.org/7.1.3-116-NFSv4-flexfiles-reject-zero-filehandle-version-.patch
(bsc#1012628 CVE-2026-53392).
- Update
patches.kernel.org/7.1.3-117-NFSv4-pNFS-reject-zero-length-r_addr-in-nfs4_de.patch
(bsc#1012628 CVE-2026-53391).
- Update
patches.kernel.org/7.1.3-120-ksmbd-fix-out-of-bounds-read-in-smb_check_perm_.patch
(bsc#1012628 CVE-2026-53390).
- Update
patches.kernel.org/7.1.3-121-net-tcp-ao-fix-use-after-free-of-key-in-del_asy.patch
(bsc#1012628 CVE-2026-53389).
suse-add-cves
- commit 46107bf
* Mon Jul 20 2026 jslaby@suse.cz
- udmabuf: Ensure to perform cache synchronisation in
begin_cpu_udmabuf() (git-fixes).
- commit 4d139b6
* Mon Jul 20 2026 jslaby@suse.cz
- Linux 7.1.4 (bsc#1012628).
- rust: str: use the "kernel vertical" imports style
(bsc#1012628).
- rust: str: clean unused import for Rust >= 1.98 (bsc#1012628).
- userfaultfd: gate must_wait writability check on pte_present()
(bsc#1012628).
- net/sched: dualpi2: fix GSO backlog accounting (bsc#1012628).
- mm/khugepaged: write all dirty file folios when collapsing
(bsc#1012628).
- slab: recognize @GFP parameter as optional in kernel-doc
(bsc#1012628).
- perf trace beauty fcntl: Fix build with older kernel headers
(bsc#1012628).
- KVM: x86: Move update_cr8_intercept() to lapic.c (bsc#1012628).
- KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is
in guest mode (bsc#1012628).
- KVM: x86: Unconditionally recompute CR8 intercept on PPR update
(bsc#1012628).
- ACPI: CPPC: Suppress UBSAN warning caused by field misuse
(bsc#1012628).
- ACPI: NFIT: core: Fix possible NULL pointer dereference
(bsc#1012628).
- ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
(bsc#1012628).
- platform/x86: intel-hid: Protect ACPI notify handler against
recursion (bsc#1012628).
- LoongArch: Add PIO for early access before ACPI PCI root
register (bsc#1012628).
- rust: cpufreq: clean new `clippy::map_or_identity` lint for
Rust 1.98.0 (bsc#1012628).
- rust: kasan: KASAN+RUST requires clang (bsc#1012628).
- rust: pci: use 'static lifetime for PCI BAR resource names
(bsc#1012628).
- rust: block: fix GenDisk cleanup paths (bsc#1012628).
- rust: doctest: fix incorrect pattern in replacement
(bsc#1012628).
- rust: Kbuild: set frame-pointer llvm module flag for
CONFIG_FRAME_POINTER (bsc#1012628).
- futex/requeue: Revert "Prevent NULL pointer dereference in
remove_waiter() on self-deadlock"" (bsc#1012628).
- perf/core: Detach event groups during remove_on_exec
(bsc#1012628).
- bpf: Support for hardening against JIT spraying (bsc#1012628).
- x86/bugs: Enable IBPB flush on BPF JIT allocation (bsc#1012628).
- bpf: Restrict JIT predictor flush to cBPF (bsc#1012628).
- bpf: Skip redundant IBPB in pack allocator (bsc#1012628).
- bpf: Prefer packs that won't trigger an IBPB flush on allocation
(bsc#1012628).
- bpf: Prefer dirty packs for eBPF allocations (bsc#1012628).
- usb: gadget: function: rndis: add length check to response query
(bsc#1012628).
- usb: gadget: function: rndis: add length check for header
(bsc#1012628).
- iio: accel: bmc150: clamp the device-reported FIFO frame count
(bsc#1012628).
- iio: accel: kxsd9: fix runtime PM imbalance on write_raw()
error (bsc#1012628).
- iio: adc: ad4062: add GPIOLIB dependency (bsc#1012628).
- iio: adc: ad7380: select REGMAP (bsc#1012628).
- iio: adc: ad7768-1: Select GPIOLIB (bsc#1012628).
- iio: adc: ad7779: add missing 'select IIO_TRIGGERED_BUFFER'
to Kconfig (bsc#1012628).
- iio: adc: ad_sigma_delta: fix clear_pending_event for
registerless devices (bsc#1012628).
- iio: adc: ad_sigma_delta: fix CS held asserted and state leaks
(bsc#1012628).
- iio: adc: lpc32xx: Initialize completion before requesting IRQ
(bsc#1012628).
- iio: adc: nxp-sar-adc: Fix the delay calculation in
nxp_sar_adc_wait_for() (bsc#1012628).
- iio: adc: spear: Initialize completion before requesting IRQ
(bsc#1012628).
- iio: adc: ti-ads1119: fix PM reference leak in buffer preenable
(bsc#1012628).
- iio: adc: ti-ads124s08: Return reset GPIO lookup errors
(bsc#1012628).
- iio: backend: fix uninitialized data in debugfs (bsc#1012628).
- iio: buffer: hw-consumer: free scan_mask on buffer release
(bsc#1012628).
- iio: chemical: scd30: Cleanup initializations and fix
sign-extension bug (bsc#1012628).
- iio: common: st_sensors: honour channel endianness in
read_axis_data (bsc#1012628).
- iio: core: fix uninitialized data in debugfs (bsc#1012628).
- iio: dac: ad3552r-hs: fix uninitialized data ni
ad3552r_hs_write_data_source() (bsc#1012628).
- iio: event: Fix event FIFO reset race (bsc#1012628).
- iio: gyro: bmg160: bail out when bandwidth/filter is not in
table (bsc#1012628).
- iio: gyro: bmg160: wait full startup time after mode change
at probe (bsc#1012628).
- iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
(bsc#1012628).
- iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
(bsc#1012628).
- iio: imu: inv_icm42600: fix timestamp clock period by using
lower value (bsc#1012628).
- iio: imu: inv_icm42600: fix timestamping by limiting FIFO
reading (bsc#1012628).
- iio: imu: st_lsm6dsx: deselect shub page before reading whoami
(bsc#1012628).
- iio: light: al3000a: add missing REGMAP_I2C to Kconfig
(bsc#1012628).
- iio: light: al3010: add missing REGMAP_I2C to Kconfig
(bsc#1012628).
- iio: light: al3010: fix incorrect scale for the highest gain
range (bsc#1012628).
- iio: light: al3010: read both ALS ADC registers again
(bsc#1012628).
- iio: light: al3320a: add missing REGMAP_I2C to Kconfig
(bsc#1012628).
- iio: light: al3320a: read both ALS ADC registers again
(bsc#1012628).
- iio: light: gp2ap002: fix runtime PM leak on read error
(bsc#1012628).
- iio: light: opt3001: fix missing state reset on timeout
(bsc#1012628).
- iio: light: tsl2591: return actual error from probe IRQ failure
(bsc#1012628).
- iio: light: veml6030: fix channel type when pushing events
(bsc#1012628).
- iio: magnetometer: ak8975: Add missed
pm_runtime_put_autosuspend() call (bsc#1012628).
- iio: pressure: bmp280: zero-init bmp580 trigger handler buffer
(bsc#1012628).
- iio: pressure: mpl115: fix runtime PM leak on read error
(bsc#1012628).
- iio: proximity: vl53l0x: notify trigger and clear IRQ on error
paths (bsc#1012628).
- iio: resolver: ad2s1210: notify trigger and clear state on
fault read error (bsc#1012628).
- iio: temperature: Build mlx90635 with CONFIG_MLX90635
(bsc#1012628).
- iio: temperature: ltc2983: Fix n_wires default bypassing
rotation check (bsc#1012628).
- iio: temperature: ltc2983: Fix reinit_completion() called
after conversion start (bsc#1012628).
- iio: temperature: tmp006: use devm_iio_trigger_register
(bsc#1012628).
- ALSA: usx2y: us144mkii: fix work UAF on disconnect
(bsc#1012628).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping
(bsc#1012628).
- ALSA: virtio: Validate control metadata from the device
(bsc#1012628).
- ALSA: ymfpci: check snd_ctl_new1() return value (bsc#1012628).
- ALSA: aoa: check snd_ctl_new1() return value (bsc#1012628).
- ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4
input parser (bsc#1012628).
- ALSA: cmipci: check snd_ctl_new1() return value (bsc#1012628).
- ALSA: compress: Fix task creation error unwind (bsc#1012628).
- ALSA: es1938: check snd_ctl_new1() return value (bsc#1012628).
- ALSA: FCP: Add Focusrite ISA C8X support (bsc#1012628).
- ALSA: firewire: isight: bound the sample count to the packet
payload (bsc#1012628).
- ALSA: gus: check snd_ctl_new1() return value (bsc#1012628).
- ALSA: hda/cs35l41: Fix firmware load work teardown
(bsc#1012628).
- ALSA: hda/hdmi: Add force-connect quirk for HP EliteDesk 800
G5 Mini (bsc#1012628).
- ALSA: hda/hdmi: Use 'AC_PINSENSE_ELDV' to detect pinsense for
Loongson (bsc#1012628).
- ALSA: hda/realtek: Fix noisy mic for Clevo V6xxAW (bsc#1012628).
- ALSA: ice1712: check snd_ctl_new1() return value (bsc#1012628).
- ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
(bsc#1012628).
- ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb
corrupts anchor list on each resubmission (bsc#1012628).
- ALSA: usb-audio: add IFB_SILENCE_ON_EMPTY quirk for Behringer
Flow 8 (bsc#1012628).
- ALSA: usb-audio: avoid kobject path lookup in DualSense match
(bsc#1012628).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
(bsc#1012628).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
EQ-switch put callbacks (bsc#1012628).
- ALSA: usb-audio: Roll back quirk control caches on write errors
(bsc#1012628).
- ALSA: usb-audio: Update Babyface Pro control caches only after
successful writes (bsc#1012628).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
successful writes (bsc#1012628).
- x86,fs/resctrl: Prevent out-of-bounds access while offlining
CPU when SNC enabled (bsc#1012628).
- vfio/pci: Use a private flag to prevent power state change
with VFs (bsc#1012628).
- vfio/pci: Latch disable_idle_d3 per device (bsc#1012628).
- vfio/pci: Release the VGA arbiter client on register_device()
failure (bsc#1012628).
- vfio/pci: Fix racy bitfields and tighten struct layout
(bsc#1012628).
- vfio: prevent infinite loop in vfio_mig_get_next_state()
on blocked arc (bsc#1012628).
- vfio: Remove device debugfs before releasing devres
(bsc#1012628).
- vfio/mlx5: Fix racy bitfields and tighten struct layout
(bsc#1012628).
- Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB
(bsc#1012628).
- Bluetooth: btusb: fix use-after-free on registration failure
(bsc#1012628).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
(bsc#1012628).
- Bluetooth: btusb: fix wakeup source leak on probe failure
(bsc#1012628).
- binder: fix UAF in binder_thread_release() (bsc#1012628).
- binder: fix UAF in binder_free_transaction() (bsc#1012628).
- rust_binder: use a u64 stride when cleaning up the offsets array
(bsc#1012628).
- rust_binder: fix BINDER_GET_EXTENDED_ERROR (bsc#1012628).
- rust_binder: reject context manager self-transaction
(bsc#1012628).
- rust_binder: synchronize Rust Binder stats with freeze commands
(bsc#1012628).
- rust_binder: clear freeze listener on node removal
(bsc#1012628).
- usb: xhci: Fix sleep in atomic context in xhci_free_streams()
(bsc#1012628).
- xhci: sideband: fix ring sg table pages leak (bsc#1012628).
- usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
(bsc#1012628).
- riscv: dts: sophgo: Add dma-coherent to SG2042 PCIe controllers
(bsc#1012628).
- PCI: loongson: Override PCIe bridge supported speeds for
Loongson-3C6000 series (bsc#1012628).
- PCI: altera: Do not dispose parent IRQ mapping (bsc#1012628).
- PCI: altera: Fix resource leaks on probe failure (bsc#1012628).
- PCI: Always lift 2.5GT/s restriction in PCIe failed link
retraining (bsc#1012628).
- PCI: host-common: Request bus reassignment when not probe-only
(bsc#1012628).
- PCI: imx6: Configure REF_USE_PAD before PHY reset for i.MX95
(bsc#1012628).
- PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
(bsc#1012628).
- PCI: imx6: Assert ref_clk_en after reference clock stabilizes
on i.MX95 (bsc#1012628).
- PCI: mediatek: Fix IRQ domain leak when port fails to enable
(bsc#1012628).
- PCI: qcom: Initialize DWC MSI lock for firmware-managed ECAM
hosts (bsc#1012628).
- PCI: Skip Resizable BAR restore on read error (bsc#1012628).
- PCI/IOV: Skip VF Resizable BAR restore on read error
(bsc#1012628).
- tcp: restore RCU grace period in tcp_ao_destroy_sock
(bsc#1012628).
- mm/damon/ops-common: handle extreme intervals in
damon_hot_score() (bsc#1012628).
- netfilter: ipset: fix race between dump and ip_set_list resize
(bsc#1012628).
- virtio_pci: fix vq info pointer lookup via wrong index
(bsc#1012628).
- virtio-mmio: fix device release warning on module unload
(bsc#1012628).
- hwrng: virtio: clamp device-reported used.len at copy_data()
(bsc#1012628).
- USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
(bsc#1012628).
- usb: dwc3: run gadget disconnect from sleepable suspend context
(bsc#1012628).
- usb: misc: usbio: fix disconnect UAF in client teardown
(bsc#1012628).
- 6lowpan: fix NHC entry use-after-free on error path
(bsc#1012628).
- tracing: Fix NULL pointer dereference in func_set_flag()
(bsc#1012628).
- tipc: fix out-of-bounds read in broadcast Gap ACK blocks
(bsc#1012628).
- staging: vme_user: bound slave read/write to the kern_buf size
(bsc#1012628).
- smb: client: restrict implied bcc[0] exemption to responses
without data area (bsc#1012628).
- staging: vme_user: fix location monitor leak in fake bridge
(bsc#1012628).
- staging: vme_user: fix location monitor leak in tsi148 bridge
(bsc#1012628).
- media: staging: ipu3-imgu: Add range check for
imgu_css_cfg_acc_stripe (bsc#1012628).
- staging: media: atomisp: reduce load_primary_binaries() stack
usage (bsc#1012628).
- staging: media: ipu7: fix double-free and use-after-free in
error paths (bsc#1012628).
- staging: rtl8723bs: don't drop short TX frames in
_rtw_pktfile_read() (bsc#1012628).
- staging: rtl8723bs: fix heap buffer overflow in
rtw_cfg80211_set_wpa_ie() (bsc#1012628).
- staging: rtl8723bs: fix WEP length underflow and OOB read in
OnAuth() (bsc#1012628).
- staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
(bsc#1012628).
- staging: rtl8723bs: fix OOB read in update_beacon_info()
IE loop (bsc#1012628).
- staging: rtl8723bs: fix OOB reads in IE loops in
issue_assocreq() and join_cmd_hdl() (bsc#1012628).
- staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
(bsc#1012628).
- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(),
rtw_get_wapi_ie(), and rtw_get_wps_attr() (bsc#1012628).
- staging: rtl8723bs: fix OOB write in HT_caps_handler()
(bsc#1012628).
- crypto: amlogic - avoid double cleanup in meson_crypto_probe()
(bsc#1012628).
- crypto: krb5 - filter out async aead implementations at alloc
(bsc#1012628).
- crypto: qat - fix VF2PF work teardown race in
adf_disable_sriov() (bsc#1012628).
- ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE
then SMB2_CANCEL (bsc#1012628).
- net: af_key: initialize alg_key_len for IPComp states
(bsc#1012628).
- audit: Fix data races of skb_queue_len() readers on audit_queue
(bsc#1012628).
- Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn
ref (bsc#1012628).
- Bluetooth: MGMT: Fix UAF of hci_conn_params in
add_device_complete (bsc#1012628).
- coresight: etb10: restore atomic_t for shared reading state
(bsc#1012628).
- debugobjects: Plug race against a concurrent OOM disable
(bsc#1012628).
- fs/ntfs3: validate Dirty Page Table capacity in log_replay
copy_lcns (bsc#1012628).
- ntfs: avoid calling post_write_mst_fixup() for invalid
index_block (bsc#1012628).
- NTB: epf: Avoid calling pci_irq_vector() from hardirq context
(bsc#1012628).
- gpio: eic-sprd: use raw_spinlock_t in the irq startup path
(bsc#1012628).
- gpio: sch: use raw_spinlock_t in the irq startup path
(bsc#1012628).
- HID: logitech-dj: Fix maxfield check in DJ short report
validation (bsc#1012628).
- io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work
item (bsc#1012628).
- io_uring/rw: preserve partial result for iopoll (bsc#1012628).
- netpoll: fix a use-after-free on shutdown path (bsc#1012628).
- ipv4: igmp: remove multicast group from hash table on device
destruction (bsc#1012628).
- net: ipv4: bound TCP reordering sysctl writes and MTU probe
sizes (bsc#1012628).
- media: nxp: imx8-isi: Fix use-after-free on remove
(bsc#1012628).
- mfd: cros_ec: Delay dev_set_drvdata() until probe success
(bsc#1012628).
- mm/shrinker: do not hold RCU lock in
shrinker_debugfs_count_show() (bsc#1012628).
- mm: shrinker: fix shrinker_info teardown race with expansion
(bsc#1012628).
- mm: shrinker: fix NULL pointer dereference in debugfs
(bsc#1012628).
- mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on
swapless host (bsc#1012628).
- mm/swap: add cond_resched() in swap_reclaim_full_clusters to
prevent softlockup (bsc#1012628).
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
(bsc#1012628).
- netfilter: handle unreadable frags (bsc#1012628).
- netfilter: ebtables: zero chainstack array (bsc#1012628).
- netfilter: ebtables: module names must be null-terminated
(bsc#1012628).
- netfilter: ebtables: terminate table name before
find_table_lock() (bsc#1012628).
- netfilter: flowtable: fix offloaded ct timeout never being
extended (bsc#1012628).
- netfilter: flowtable: IPIP tunnel hardware offload is not yet
support (bsc#1012628).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
(bsc#1012628).
- Bluetooth: bnep: pin L2CAP connection during netdev registration
(bsc#1012628).
- Bluetooth: btnxpuart: Fix out-of-bounds firmware read in
nxp_recv_fw_req_v3() (bsc#1012628).
- Bluetooth: fix UAF in bt_accept_dequeue() (bsc#1012628).
- Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()
(bsc#1012628).
- Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work
is canceled (bsc#1012628).
- Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()
(bsc#1012628).
- Bluetooth: L2CAP: cancel pending_rx_work before taking
conn->lock (bsc#1012628).
- Bluetooth: L2CAP: validate option length before reading conf
opt value (bsc#1012628).
- coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
(bsc#1012628).
- smb: client: resolve SWN tcon from live registrations
(bsc#1012628).
- smb/client: Fix error code in smb2_aead_req_alloc()
(bsc#1012628).
- ksmbd: prevent path traversal bypass by restricting caseless
retry (bsc#1012628).
- ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
(bsc#1012628).
- ksmbd: add a permission check for FSCTL_SET_ZERO_DATA
(bsc#1012628).
- ksmbd: serialize QUERY_DIRECTORY requests per file
(bsc#1012628).
- ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock
cancellation (bsc#1012628).
- ksmbd: require source read access for duplicate extents
(bsc#1012628).
- ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO
SECURITY (bsc#1012628).
- ksmbd: run set info with opener credentials (bsc#1012628).
- ksmbd: enforce FILE_READ_ATTRIBUTES on
SMB_FIND_FILE_POSIX_INFORMATION (bsc#1012628).
- ksmbd: add per-handle permission check to FILE_LINK_INFORMATION
(bsc#1012628).
- ksmbd: use opener credentials for delete-on-close (bsc#1012628).
- ksmbd: use opener credentials for ADS I/O (bsc#1012628).
- ksmbd: track the connection owning a byte-range lock
(bsc#1012628).
- ksmbd: validate NTLMv2 response before updating session key
(bsc#1012628).
- smb/client: fix chown/chgrp with SMB3 POSIX Extensions
(bsc#1012628).
- smb: client: fix query directory replay double-free
(bsc#1012628).
- smb: client: fix query_info() replay double-free (bsc#1012628).
- smb: client: fix double-free in SMB2_ioctl() replay
(bsc#1012628).
- smb: client: fix change notify replay double-free (bsc#1012628).
- smb: client: fix double-free in SMB2_flush() replay
(bsc#1012628).
- smb: client: fix double-free in SMB2_open() replay
(bsc#1012628).
- smb: client: fix double-free in SMB2_close() replay
(bsc#1012628).
- smb: client: Fix next buffer leak in
receive_encrypted_standard() (bsc#1012628).
- smb: client: use unaligned reads in parse_posix_ctxt()
(bsc#1012628).
- smb: client: harden POSIX SID length parsing (bsc#1012628).
- smb: client: fix atime clamp check in read completion
(bsc#1012628).
- smb: client: mask server-provided mode to 07777 in modefromsid
(bsc#1012628).
- smb/server: do not require delete access for non-replacing links
(bsc#1012628).
- writeback: fix race between cgroup_writeback_umount() and
inode_switch_wbs() (bsc#1012628).
- OPP: of: Fix potential memory leak in opp_parse_supplies()
(bsc#1012628).
- cpufreq: qcom-cpufreq-hw: Fix possible double free
(bsc#1012628).
- firmware_loader: fix device reference leak in
firmware_upload_register() (bsc#1012628).
- libfs: set SB_I_NOEXEC and SB_I_NODEV by default in
init_pseudo() (bsc#1012628).
- proc: protect ptrace_may_access() with exec_update_lock (FD
links) (bsc#1012628).
- perf/x86/intel/uncore: Defer ADL global PMON enable to
enable_box() (bsc#1012628).
- cpufreq: intel_pstate: Sync policy->cur during CPU offline
(bsc#1012628).
- sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
(bsc#1012628).
- cpufreq: Fix hotplug-suspend race during reboot (bsc#1012628).
- cpufreq: pcc: fix use-after-free and double free in _OSC
evaluation (bsc#1012628).
- proc: protect ptrace_may_access() with exec_update_lock (part 1)
(bsc#1012628).
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep()
error path (bsc#1012628).
- time/jiffies: Register jiffies clocksource before usage
(bsc#1012628).
- clocksource/drivers/timer-tegra186: Fix support for multiple
watchdog instances (bsc#1012628).
- s390: Revert support for DCACHE_WORD_ACCESS (bsc#1012628).
- perf/arm-cmn: Fix DVM node events (bsc#1012628).
- X.509: Fix validation of ASN.1 certificate header (bsc#1012628).
- mm/slab: do not limit zeroing to orig_size when only red zoning
is enabled (bsc#1012628).
- tools/mm/slabinfo: Fix trace disable logic inversion
(bsc#1012628).
- tools/mm/slabinfo: fix total_objects attribute name
(bsc#1012628).
- HID: hid-goodix-spi: validate report size to prevent stack
buffer overflow (bsc#1012628).
- HID: uhid: convert to hid_safe_input_report() (bsc#1012628).
- HID: wacom: stop hardware after post-start probe failures
(bsc#1012628).
- HID: pidff: Use correct effect type in effect update
(bsc#1012628).
- HID: hid-lenovo-go: cancel cfg_setup work in hid_go_cfg_remove()
(bsc#1012628).
- HID: wacom: fix slab-out-of-bounds write in
wacom_wac_queue_insert (bsc#1012628).
- HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()
(bsc#1012628).
- HID: letsketch: fix UAF on inrange_timer at driver unbind
(bsc#1012628).
- HID: multitouch: fix out-of-bounds bit access on mt_io_flags
(bsc#1012628).
- HID: appleir: fix UAF on pending key_up_timer in remove()
(bsc#1012628).
- HID: lg-g15: cancel pending work on remove to fix a
use-after-free (bsc#1012628).
- HID: sensor-hub: Add sensor_hub_input_attr_read_values()
for multi-byte reads (bsc#1012628).
- hfs/hfsplus: fix u32 overflow in
check_and_correct_requested_length (bsc#1012628).
- hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
(bsc#1012628).
- nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment
numbers (bsc#1012628).
- media: mtk-jpeg: cancel workqueue on release for supported
platforms only (bsc#1012628).
- serial: 8250_mid: Disable DMA for selected platforms
(bsc#1012628).
- xfs: use null daddr for unset first bad log block (bsc#1012628).
- xfs: release dquot buffer after dqflush failure (bsc#1012628).
- xfs: pass back updated nb from xfs_growfs_compute_deltas
(bsc#1012628).
- xfs: only log freed extents for the current RTG in zoned growfs
(bsc#1012628).
- xfs: initialize iomap->flags earlier in xfs_bmbt_to_iomap
(bsc#1012628).
- xfs: fix unreachable BIGTIME check in dquot flush validation
(bsc#1012628).
- xfs: fix pointer arithmetic error on 32-bit systems
(bsc#1012628).
- xfs: fix exchmaps reservation limit check (bsc#1012628).
- xfs: fix memory leak in xfs_dqinode_metadir_create()
(bsc#1012628).
- bpf: Reject fragmented frames in devmap (bsc#1012628).
- bpf: Restore sysctl new-value from 1 to 0 (bsc#1012628).
- bpf: Validate BTF repeated field counts before expansion
(bsc#1012628).
- bpf: Keep dynamic inner array lookups nullable (bsc#1012628).
- bpf: Allow LPM map access from sleepable BPF programs
(bsc#1012628).
- net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
(bsc#1012628).
- Revert "usb: typec: mux: avoid duplicated mux switches"
(bsc#1012628).
- usb: cdc_acm: Add quirk for Uniden BC125AT scanner
(bsc#1012628).
- usb: cdnsp: fix stream context array leak in
cdnsp_alloc_stream_info() (bsc#1012628).
- USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
(bsc#1012628).
- usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in
dwc3_ulpi_setup() (bsc#1012628).
- usb: dwc3: meson-g12a: fix refcount leak in
dwc3_meson_g12a_resume() (bsc#1012628).
- usb: free iso schedules on failed submit (bsc#1012628).
- usb: gadget: composite: fix dead empty check in the USB_DT_OTG
handler (bsc#1012628).
- usb: gadget: udc: Fix use-after-free in gadget_match_driver
(bsc#1012628).
- usb: gadget: f_printer: take kref only for successful open
(bsc#1012628).
- USB: idmouse: fix use-after-free on disconnect race
(bsc#1012628).
- USB: ldusb: fix use-after-free on disconnect race (bsc#1012628).
- USB: iowarrior: fix use-after-free on disconnect (bsc#1012628).
- USB: iowarrior: fix use-after-free on disconnect race
(bsc#1012628).
- USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
(bsc#1012628).
- USB: legousbtower: fix use-after-free on disconnect race
(bsc#1012628).
- usb: sl811-hcd: disable controller wakeup on remove
(bsc#1012628).
- USB: storage: include US_FL_NO_SAME in quirks mask
(bsc#1012628).
- usb: misc: usbio: bound bulk IN response length to the received
transfer (bsc#1012628).
- USB: misc: uss720: unregister parport on probe failure
(bsc#1012628).
- usb: mtu3: unmap request DMA on queue failure (bsc#1012628).
- USB: serial: keyspan_pda: fix information leak (bsc#1012628).
- USB: serial: option: add Telit Cinterion FE990D50 compositions
(bsc#1012628).
- USB: serial: digi_acceleport: fix broken rx after throttle
(bsc#1012628).
- USB: serial: digi_acceleport: fix hard lockup on disconnect
(bsc#1012628).
- USB: serial: digi_acceleport: fix write buffer corruption
(bsc#1012628).
- USB: ulpi: fix memory leak on registration failure
(bsc#1012628).
- USB: usb-storage: ene_ub6250: restore media-ready check
(bsc#1012628).
- usbip: tools: support SuperSpeedPlus devices (bsc#1012628).
- usbip: vudc: fix NULL deref in vep_dequeue() (bsc#1012628).
- usb: typec: anx7411: use devm_pm_runtime_enable() (bsc#1012628).
- usb: typec: class: drop PD lookup reference (bsc#1012628).
- usb: typec: ps883x: Fix DP+USB3 configuration (bsc#1012628).
- usb: typec: tcpm: Fix VDM type for Enter Mode commands
(bsc#1012628).
- usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
(bsc#1012628).
- usb: typec: ucsi: Invert DisplayPort role assignment
(bsc#1012628).
- usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM
for DP alt mode (bsc#1012628).
- usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
(bsc#1012628).
- usb: typec: ucsi: cancel pending work on system suspend
(bsc#1012628).
- usb: gadget: f_fs: initialize reset_work at allocation time
(bsc#1012628).
- usb: gadget: f_fs: Fix DMA fence leak (bsc#1012628).
- usb: gadget: f_fs: Initialize epfile->in early to fix endpoint
direction checks (bsc#1012628).
- usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
(bsc#1012628).
- block: skip sync_blockdev() on surprise removal in
bdev_mark_dead() (bsc#1012628).
- wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon
(bsc#1012628).
- udf: validate free block extents against the partition length
(bsc#1012628).
- udf: validate VAT header length against the VAT inode size
(bsc#1012628).
- udf: validate sparing table length as an entry count, not a
byte count (bsc#1012628).
- hwrng: jh7110 - fix refcount leak in starfive_trng_read()
(bsc#1012628).
- crypto: atmel-sha204a - drop hwrng quality reduction for
ATSHA204A (bsc#1012628).
- crypto: atmel-sha204a - fail on hwrng registration error in
probe path (bsc#1012628).
- nvme: target: rdma: fix ndev refcount leak on queue connect
(bsc#1012628).
- block: partitions: fix of_node refcount leak in of_partition()
(bsc#1012628).
- dm-ioctl: report an error if a device has no table
(bsc#1012628).
- nvme-multipath: set BIO_REMAPPED on bios remapped to per-path
namespace disks (bsc#1012628).
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get
Log Page (bsc#1012628).
- btrfs: fix false IO failure after falling back to buffered write
(bsc#1012628).
- nvmet-auth: validate reply message payload bounds against
transfer length (bsc#1012628).
- btrfs: check and set EXTENT_DELALLOC_NEW before clearing
EXTENT_DELALLOC (bsc#1012628).
- btrfs: do not trim a device which is not writeable
(bsc#1012628).
- partitions: aix: bound the pp_count scan to the ppe array
(bsc#1012628).
- btrfs: fix incorrect buffered IO fallback for append direct
writes (bsc#1012628).
- isofs: bound Rock Ridge symlink components to the SL record
(bsc#1012628).
- crypto: af_alg - Remove zero-copy support from skcipher and aead
(bsc#1012628).
- crypto: caam - use print_hex_dump_devel to guard key hex dumps
(bsc#1012628).
- crypto: caam - use print_hex_dump_devel to guard key hex dumps
again (bsc#1012628).
- crypto: chacha20poly1305 - validate poly1305 template argument
(bsc#1012628).
- crypto: crypto4xx - Remove insecure and unused rng_alg
(bsc#1012628).
- crypto: ecc - Fix carry overflow in vli multiplication
(bsc#1012628).
- crypto: hisi-trng - Remove crypto_rng interface (bsc#1012628).
- crypto: pcrypt - restore callback for non-parallel fallback
(bsc#1012628).
- crypto: tegra - fix refcount leak in tegra_se_host1x_submit()
(bsc#1012628).
- crypto: loongson - Select CRYPTO_RNG (bsc#1012628).
- crypto: loongson - Remove broken and unused loongson-rng
(bsc#1012628).
- crypto: ccp - Do not initialize SNP for SEV ioctls
(bsc#1012628).
- crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)
(bsc#1012628).
- crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)
(bsc#1012628).
- crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)
(bsc#1012628).
- crypto: drbg - Fix returning success on failure in CTR_DRBG
(bsc#1012628).
- crypto: drbg - Fix misaligned writes in CTR_DRBG and HASH_DRBG
(bsc#1012628).
- crypto: drbg - Fix ineffective sanity check (bsc#1012628).
- crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
(bsc#1012628).
- crypto: drbg - Fix the fips_enabled priority boost
(bsc#1012628).
- crypto: qat - centralize bus master enable (bsc#1012628).
- crypto: qat - fix restarting state leak on allocation failure
(bsc#1012628).
- crypto: qat - handle sysfs-triggered reset callbacks
(bsc#1012628).
- crypto: qat - keep VFs enabled during reset (bsc#1012628).
- crypto: qat - notify fatal error before AER reset preparation
(bsc#1012628).
- crypto: qat - protect service table iterations with service_lock
(bsc#1012628).
- crypto: qat - skip restart for down devices (bsc#1012628).
- crypto: qat - validate RSA CRT component lengths (bsc#1012628).
- crypto: qat - factor out AER reset helpers (bsc#1012628).
- crypto: talitos - use dma_sync_single_for_cpu() before reading
descriptor header (bsc#1012628).
- crypto: talitos - add chaining of arbitrary number of descriptor
for the SEC1 (bsc#1012628).
- crypto: talitos - move dma unmapping code in flush_channel()
into a standalone dma_unmap_request() function (bsc#1012628).
- crypto: talitos - move dma mapping code in talitos_submit()
into a standalone dma_map_request() function (bsc#1012628).
- crypto: talitos - move code in current_desc_hdr() into a
standalone function (bsc#1012628).
- crypto: talitos/hash - prepare SEC1 descriptor chaining,
remove additional descriptor (bsc#1012628).
- crypto: talitos/hash - use descriptor chaining for SEC1 instead
of workqueue (bsc#1012628).
- crypto: talitos/hash - drop workqueue mechanism for SEC1
(bsc#1012628).
- crypto: talitos/hash - rename first_desc/last_desc to
first_request/last_request (bsc#1012628).
- crypto: talitos/hash - remove useless wrapper (bsc#1012628).
- crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation
(bsc#1012628).
- arm64: fpsimd: Fix type mismatch in sme_{save,load}_state()
(bsc#1012628).
- spi: fsl-lpspi: replace dmaengine_terminate_all() with
dmaengine_terminate_sync() (bsc#1012628).
- spi: fsl-lpspi: terminate the RX channel on TX prepare failure
path (bsc#1012628).
- x86/mm: Fix freeing of PMD-sized vmemmap pages (bsc#1012628).
- EDAC/i10nm: Don't fail probing if ADXL is missing (bsc#1012628).
- watchdog: apple: Add "apple,t8103-wdt" compatible (bsc#1012628).
- regulator: scmi: fix of_node refcount leak in
scmi_regulator_probe() (bsc#1012628).
- i2c: core: fix hang on adapter registration failure
(bsc#1012628).
- perf/aux: Fix page UAF in map_range() (bsc#1012628).
- liveupdate: reject LIVEUPDATE_IOCTL_CREATE_SESSION with invalid
name length (bsc#1012628).
- selftests/liveupdate: add test cases for
LIVEUPDATE_IOCTL_CREATE_SESSION calls with invalid length
(bsc#1012628).
- tracing: Prevent out-of-bounds read in glob matching
(bsc#1012628).
- audit: fix potential integer overflow in audit_log_n_hex()
(bsc#1012628).
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
(bsc#1012628).
- rqspinlock: Fix order in raw_res_spin_(un)lock_irq to allow
schedule (bsc#1012628).
- module: decompress: check return value of
module_extend_max_pages() (bsc#1012628).
- vt: fix spurious modifier in CSI/cursor key sequences
(bsc#1012628).
- exfat: preserve benign secondary entries during rename and move
(bsc#1012628).
- exfat: bound uniname advance in exfat_find_dir_entry()
(bsc#1012628).
- NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
(bsc#1012628).
- riscv: mm: Define DIRECT_MAP_PHYSMEM_END (bsc#1012628).
- riscv: mm: Unconditionally sfence.vma for spurious fault
(bsc#1012628).
- lib/test_hmm: use kvfree() to free kvcalloc() allocations
(bsc#1012628).
- mm: fix mmap errno value when MAP_DROPPABLE is not supported
(bsc#1012628).
- selftests: mm: fix and speedup "droppable" test (bsc#1012628).
- mm: page_ext: add count limit to page_ext_iter_next to prevent
invalid PFN access (bsc#1012628).
- mm: do file ownership checks with the proper mount idmap
(bsc#1012628).
- selftests/mm: pagemap_ioctl: use the correct page size for
transact_test() (bsc#1012628).
- selftests/mm: fix ksft_process_madv.sh test category
(bsc#1012628).
- nouveau/vmm: fix another SPT/LPT race (bsc#1012628).
- bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is
uninitialized (bsc#1012628).
- iommu/vt-d: Avoid WARNING in sva unbind path (bsc#1012628).
- iommu/amd: Don't split flush for amd_iommu_domain_flush_all()
(bsc#1012628).
- iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read
(bsc#1012628).
- iommufd: Fix data_len byte-count vs element-count mismatch
(bsc#1012628).
- iommufd: Move vevent memory allocation outside spinlock
(bsc#1012628).
- iommufd: Set veventq_depth upper bound (bsc#1012628).
- iommufd: Rewind header length in done if
iommufd_veventq_fops_read() fails (bsc#1012628).
- iommufd: Reject invalid read count in
iommufd_veventq_fops_read() (bsc#1012628).
- iommufd: Propagate allocation failure in
iommufd_veventq_deliver_fetch() (bsc#1012628).
- iommufd: Reject invalid read count in iommufd_fault_fops_read()
(bsc#1012628).
- iommufd: Break the loop on failure in iommufd_fault_fops_read()
(bsc#1012628).
- iommufd: Avoid partial fault group delivery in
iommufd_fault_fops_read() (bsc#1012628).
- iommufd: Set upper bounds on cache invalidation entry_num and
entry_len (bsc#1012628).
- audit: fix removal of dangling executable rules (bsc#1012628).
- landlock: Set audit_net.sk for socket access checks
(bsc#1012628).
- selftests/landlock: Explicitly disable audit in teardowns
(bsc#1012628).
- landlock: Account all audit data allocations to user space
(bsc#1012628).
- selftests/landlock: Filter dealloc records in
audit_count_records() (bsc#1012628).
- selftests/landlock: Increase default audit socket timeout
(bsc#1012628).
- KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB
(bsc#1012628).
- LoongArch: KVM: Add missing slots_lock for device
register/unregister (bsc#1012628).
- KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU
(bsc#1012628).
- KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM
hyp vCPU (bsc#1012628).
- KVM: SEV: Pin source page for write when adding CPUID data
for SNP guest (bsc#1012628).
- KVM: x86: Add dedicated API for getting mask of accelerated
x2APIC MSRs (bsc#1012628).
- KVM: SVM: Disable x2AVIC RDMSR interception for MSRs KVM
actually supports (bsc#1012628).
- KVM: SVM: Only disable x2AVIC WRMSR interception for MSRs that
are accelerated (bsc#1012628).
- KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all
injected #DBs (bsc#1012628).
- KVM: SEV: Don't terminate SNP VMs on #VMGEXIT without a
registered GHCB (bsc#1012628).
- KVM: VMX: Handle bad values on proxied writes to LBR MSRs
(bsc#1012628).
- KVM: TDX: Account all non-transient page allocations for per-TD
structures (bsc#1012628).
- KVM: x86: Ensure vendor's exit handler runs before fastpath
userspace exits (bsc#1012628).
- KVM: guest_memfd: Treat memslot binding offset+size as unsigned
values (bsc#1012628).
- KVM: arm64: Don't leak PFN when kvm_translate_vncr() races
MMU notifier (bsc#1012628).
- udmabuf: fix DMA direction mismatch in release_udmabuf()
(bsc#1012628).
- dma-buf/udmabuf: skip redundant cpu sync to fix cacheline
EEXIST warning (bsc#1012628).
- svcrdma: wake sq waiters when the transport closes
(bsc#1012628).
- Revert "svcrdma: Use contiguous pages for RDMA Read sink
buffers" (bsc#1012628).
- fpga: dfl-afu: validate DMA mapping length in
afu_dma_map_region() (bsc#1012628).
- i2c: core: fix irq domain leak on adapter registration failure
(bsc#1012628).
- i2c: core: fix NULL-deref on adapter registration failure
(bsc#1012628).
- i2c: core: fix adapter probe deferral loop (bsc#1012628).
- i2c: core: fix adapter debugfs creation (bsc#1012628).
- i2c: core: fix adapter deregistration race (bsc#1012628).
- i2c: mpc: Fix timeout calculations (bsc#1012628).
- i2c: davinci: Unregister cpufreq notifier on probe failure
(bsc#1012628).
- i2c: stm32f7: truncate clock period instead of rounding it
(bsc#1012628).
- i2c: imx-lpi2c: mark I2C adapter when hardware is powered down
(bsc#1012628).
- i2c: i801: fix hardware state machine corruption in error path
(bsc#1012628).
- Input: synaptics-rmi4 - unregister function handlers on physical
driver registration failure (bsc#1012628).
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
(bsc#1012628).
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED
count (bsc#1012628).
- Input: elan_i2c - prevent division by zero and arithmetic
underflow (bsc#1012628).
- Input: goodix - clamp the device-reported contact count
(bsc#1012628).
- Input: iforce - bound the device-reported force-feedback effect
index (bsc#1012628).
- Input: mms114 - fix touch indexing for MMS134S and MMS136
(bsc#1012628).
- Input: ads7846 - don't use scratch for tx_buf when clearing
register (bsc#1012628).
- Input: touchwin - reset the packet index on every complete
packet (bsc#1012628).
- Input: mms114 - reject an oversized device packet size
(bsc#1012628).
- Input: gscps2 - advance receive buffer write index
(bsc#1012628).
- Input: maplemouse - fix NULL pointer dereference in open()
(bsc#1012628).
- Input: mms114 - fix multi-touch slot corruption (bsc#1012628).
- Input: maple_keyb - set driver data before registering input
device (bsc#1012628).
- Input: maplemouse - set driver data before registering input
device (bsc#1012628).
- Input: maplecontrol - set driver data before registering input
device (bsc#1012628).
- RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in
rdma_write_sg (bsc#1012628).
- RDMA/core: Fix broadcast address falsely detected as local
(bsc#1012628).
- RDMA/siw: bound Read Response placement to the RREAD length
(bsc#1012628).
- fuse: back uncached readdir buffers with pages (bsc#1012628).
- fuse: avoid 32-bit prune notification count wrap (bsc#1012628).
- Revert "fuse: fix conversion of fuse_reverse_inval_entry()
to start_removing()" (bsc#1012628).
- fuse: fix device node leak in cuse_process_init_reply()
(bsc#1012628).
- fuse: do not use start_removing_noperm() (bsc#1012628).
- fuse: re-lock request before returning from fuse_ref_folio()
(bsc#1012628).
- fuse: fix io-uring background queue dispatch on request
completion (bsc#1012628).
- fuse: don't block in fuse_get_dev() for non-sync_init case
(bsc#1012628).
- fuse: clear intr_entry in fuse_resend and
fuse_remove_pending_req (bsc#1012628).
- fuse-uring: fix EFAULT clobber in fuse_uring_commit
(bsc#1012628).
- fuse-uring: fix data races on ring->ready (bsc#1012628).
- fuse-uring: fix moving cancelled entry to ent_in_userspace list
(bsc#1012628).
- fuse-uring: end fuse_req on io-uring cancel task work
(bsc#1012628).
- fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues
(bsc#1012628).
- fuse-uring: Avoid queue->stopped races and set/read that value
under lock (bsc#1012628).
- fuse-uring: make a fuse_req on SQE commit only findable after
memcpy (bsc#1012628).
- fuse-uring: remove request-less entries from ent_w_req_queue
to fix NULL deref (bsc#1012628).
- ALSA: doc: usb-audio: Add doc for
QUIRK_FLAG_IFB_SILENCE_ON_EMPTY (bsc#1012628).
- timekeeping: Register default clocksource before taking
tk_core.lock (bsc#1012628).
- Bluetooth: 6lowpan: Fix using chan->conn as indication to no
remote netdev (bsc#1012628).
- smb: client: reject overlapping data areas in SMB2 responses
(bsc#1012628).
- xfs: fix null pointer dereference in tracepoint (bsc#1012628).
- xfs: fail recovery on a committed log item with no regions
(bsc#1012628).
- xfs: resample the data fork mapping after cycling ILOCK
(bsc#1012628).
- xfs: don't wrap around quota ids in dqiterate (bsc#1012628).
- xfs: grab rtrmap btree when checking rgsuper (bsc#1012628).
- xfs: use the rt version of the cow staging checker
(bsc#1012628).
- xfs: set xfarray killable sort correctly (bsc#1012628).
- xfs: handle non-inode owners for rtrmap record checking
(bsc#1012628).
- xfs: clamp timestamp nanoseconds correctly (bsc#1012628).
- xfs: fully check the parent handle when it points to the rootdir
(bsc#1012628).
- xfs: don't zap bmbt forks if they are MAXLEVELS tall
(bsc#1012628).
- xfs: fix off-by-one error when calling xchk_xref_has_rt_owner
(bsc#1012628).
- xfs: write the rg superblock when fixing it (bsc#1012628).
- xfs: use rtrefcount btree cursor in xchk_xref_is_rt_cow_staging
(bsc#1012628).
- Rename to
patches.kernel.org/7.1.4-030-wifi-rtw89-correct-drop-logic-for-malformed-AMP.patch.
- Rename to
patches.kernel.org/7.1.4-184-io_uring-nop-fix-file-reference-leak-with-IOSQE.patch.
- commit 9ad6d99
* Tue Jul 14 2026 jslaby@suse.cz
- wifi: rtw89: correct drop logic for malformed AMPDU frames
(bsc#1271359).
- commit 5a35dfd
* Fri Jul 10 2026 jslaby@suse.cz
- Refresh
patches.suse/x86-alternative-dump-more-on-failure-in-__text_poke.patch.
Fixed 32bit build warnings.
- commit 7018243
* Fri Jul 10 2026 jslaby@suse.cz
- Refresh
patches.suse/x86-alternative-dump-more-on-failure-in-__text_poke.patch.
Dump also ptes.
- commit 7ed9bfa
* Fri Jul 10 2026 jslaby@suse.cz
- x86/alternative: dump more on failure in __text_poke()
(bsc#1271202).
- commit 5482b39
* Fri Jul 10 2026 jslaby@suse.cz
- io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE
(https://github.com/axboe/liburing/issues/1611).
- commit c00d577
* Thu Jul 09 2026 jslaby@suse.cz
- Delete
patches.suse/wifi-iwlwifi-Add-missing-firmware-info-for-bz-b0-mod.patch.
Drop as per:
https://bugzilla.suse.com/show_bug.cgi?id=1252084#c20
> Let's close this one. The upstream linux-firmware includes more newer
> versions, so the condition doesn't apply any longer.
> It's a a Whack-a-Mole issue, after all...
(cherry picked from commit 00fa88f271a1bd686db8274ca442c4e1bbcce68c)
- commit 14ca9d4
* Tue Jul 07 2026 schwab@suse.de
- config: riscv64: raise CONFIG_NR_CPUS
Set CONFIG_NR_CPUS to the new default of 256.
(cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e
* Sat Jul 04 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
(bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
(bsc#1012628 CVE-2026-53359).
- Update
patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
(bsc#1012628 CVE-2026-53362).
suse-add-cves
- commit 1cb5006
* Sat Jul 04 2026 jslaby@suse.cz
- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
(bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
(bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
(bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
(bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
(bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
(bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
(bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
(bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
(bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
(bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
(bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
(bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
(bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
(bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
(bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
(bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
(bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
(bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
(bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
(bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
(bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
(bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
(bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
(bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
(bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
(bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
(bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
(bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
(bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
(bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
(bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
(bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
(bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
(bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
(bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
(bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
(bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
(bsc#1012628).
- f2fs: pass correct iostat type for single node writes
(bsc#1012628).
- f2fs: reject setattr size changes on large folio files
(bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
(bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
(bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
(bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
(bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
(bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
(bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
__destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
(bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
(bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
(bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
(bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
(bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
(bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
(bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
(bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
(bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
(bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
(bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
(bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
(bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
(bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
(bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
(bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
(bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
(bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
(bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
(bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
(bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
(bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
(bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
(bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
(bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
(bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
(bsc#1012628).
- Rename to
patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777
* Fri Jul 03 2026 jslaby@suse.cz
- Refresh
patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
Update upstream status.
- commit 0709164
* Thu Jul 02 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
(bsc#1012628 CVE-2026-53354).
- Update
patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
(bsc#1012628 CVE-2026-53325 bsc#1269726).
suse-add-cves
- commit 992f18c
* Thu Jul 02 2026 jslaby@suse.cz
- KVM: x86/tdx: Do not print error message on non-present feature
(bsc#1270053).
- commit 15c3ef6
* Sat Jun 27 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
(bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022
* Sat Jun 27 2026 jslaby@suse.cz
- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
(bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
(bsc#1012628).
- drivers/base/memory: set mem->altmap after successful device
registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
(bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
(bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
(bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
(bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
(bsc#1012628).
- fuse: re-lock request before replacing page cache folio
(bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
(bsc#1012628).
- commit 8d2f9d1
* Fri Jun 26 2026 mkoutny@suse.com
- Update config files.
Enable PSI measurement (jsc#PED-15418).
Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042
* Fri Jun 26 2026 jslaby@suse.cz
- Refresh
patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
Update upstream status by: ./scripts/series_sort -u
- commit 594ea34
* Fri Jun 26 2026 jslaby@suse.cz
- Refresh
patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
Update upstream status.
- commit c4d22cc
* Tue Jun 23 2026 rbm@suse.com
- selftests/bpf: Tolerate missing files during install
(poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
(poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
(poo#202224).
- selftests/bpf: Tolerate test file compilation failures
(poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
(poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
(poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9
* Tue Jun 23 2026 jslaby@suse.cz
- ACPICA: Unbreak tools build after switching over to
strscpy_pad() (bsc#1268472).
- Delete
patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8
* Sun Jun 21 2026 jslaby@suse.cz
- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
(bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
(bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
(bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
(bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
100 CPU (bsc#1012628).
- Rename to
patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122
* Fri Jun 19 2026 jslaby@suse.cz
- HID: Input: Add battery list cleanup with devm action
(git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
(git-fixes).
- commit 396d3f6
* Thu Jun 18 2026 jslaby@suse.cz
- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47
* Mon Jun 15 2026 jslaby@suse.cz
- Delete
patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5
* Mon Jun 15 2026 jslaby@suse.cz
- Refresh
patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
Update upstream status.
- commit 2ebf0bc
* Mon Jun 15 2026 mkubecek@suse.cz
- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
for 7.1 kernel.
- commit e6e2f10
* Mon Jun 15 2026 ddiss@suse.de
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
(cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63
* Mon Jun 15 2026 ddiss@suse.de
- apparmor: fix uninitialised pointer passed to
audit_log_untrustedstring() (bsc#1259668).
(cherry picked from commit 65d5a585a9fea5f40a1da0e20217aa062f95b44a)
- apparmor: don't audit files pointing to aa_null.dentry
(bsc#1259668).
(cherry picked from commit 43454f55637bff80a9bbe035dd7a8c52cb494e83)
- apparmor: fix uninitialised pointer passed to
audit_log_untrustedstring() (bsc#1259668).
- apparmor: don't audit files pointing to aa_null.dentry
(bsc#1259668).
- commit d8bfaae
* Sun Jun 14 2026 mkubecek@suse.cz
- update to 7.1 final
- refresh configs
- commit 957a9a8
* Sun Jun 14 2026 mkubecek@suse.cz
- config: update and reenable armv7hl configs
- option values copied from armv7hl
- commit cce93c7
* Sun Jun 14 2026 mkubecek@suse.cz
- config: update and reenable armv7hl configs
- option values copied from arm64 except
- DRM_TILCDC_PANEL_LEGACY=y
- CLK_RV1103B=y
- commit 8a5016d
* Sun Jun 14 2026 mkubecek@suse.cz
- config: update and reenable arm64 configs
- option values copied from x86_64, i386 and riscv64 except
- ARM64_ERRATUM_4193714=y
- ARM64_LSUI=n
- STM32_DBG_BUS=n
- DWMAC_NUVOTON=m
- PINCTRL_ELIZA=m
- PINCTRL_HAWI=m
- PINCTRL_IPQ5210=m
- PINCTRL_MILOS_LPASS_LPI=m
- PINCTRL_SDM670_LPASS_LPI=m
- PINCTRL_RTD1625=m
- CHARGER_MAX77759=m
- MACSMC_POWER=m
- SND_SOC_TEGRA_WM8962=n
- SND_SOC_TEGRA_CPCAP=n
- USB_DWC3_IMX=m
- MMC_SDHCI_BST=m
- CLK_ELIZA_DISPCC=m
- CLK_ELIZA_TCSRCC=m
- CLK_GLYMUR_GPUCC=m
- CLK_GLYMUR_VIDEOCC=m
- CLK_NORD_GCC=m
- IPQ_GCC_5210=m
- CLK_NORD_TCSRCC=m
- SM_GPUCC_8750=m
- ARCH_R9A08G046=y
- ARCH_TEGRA_238_SOC=y
- RESET_SKY1=y
- NVIDIA_TEGRA410_CMEM_LATENCY_PMU=m
- NVIDIA_TEGRA410_C2C_PMU=m
- INTERCONNECT_QCOM_ELIZA=m
- NTFS_DEBUG=n
- NTFS_FS_POSIX_ACL=y
- commit 4326118
* Thu Jun 11 2026 jslaby@suse.cz
- Update config files. Disable CAIF (bsc#1266716 CVE-2026-45866).
The whole code is removed in 7.1 anyway by 6d5431555de0 ("caif: remove
CAIF NETWORK LAYER"). Let's be proactive as there are holes.
- commit 3512c44
* Wed Jun 10 2026 jslaby@suse.cz
- Linux 7.0.12 (bsc#1012628).
- Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB
buffer size (bsc#1012628).
- ACPI: button: Fix ACPI GPE handler leak during removal
(bsc#1012628).
- ACPI: button: Enable wakeup GPEs for ACPI buttons at probe time
(bsc#1012628).
- xfrm: move policy_bydst RCU sync from per-netns .exit to
.pre_exit (bsc#1012628).
- net/sched: sch_sfb: Replace direct dequeue call with peek and
qdisc_dequeue_peeked (bsc#1012628).
- nfc: llcp: Fix use-after-free in llcp_sock_release()
(bsc#1012628).
- nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()
(bsc#1012628).
- xfrm: Check for underflow in xfrm_state_mtu (bsc#1012628).
- nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems
(bsc#1012628).
- tools/bootconfig: Fix buf leaks in apply_xbc (bsc#1012628).
- HID: remove duplicate hid_warn_ratelimited definition
(bsc#1012628).
- kunit: fix use-after-free in debugfs when using kunit.filter
(bsc#1012628).
- accel/rocket: fix UAF via dangling GEM handle in create_bo
(bsc#1012628).
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable
(bsc#1012628).
- netfilter: xt_cpu: prefer raw_smp_processor_id (bsc#1012628).
- netfilter: ebtables: fix OOB read in compat_mtw_from_user
(bsc#1012628).
- netfilter: nf_tables: fix dst corruption in same register
operation (bsc#1012628).
- tun: free page on short-frame rejection in tun_xdp_one()
(bsc#1012628).
- tap: free page on error paths in tap_get_user_xdp()
(bsc#1012628).
- tun: free page on build_skb failure in tun_xdp_one()
(bsc#1012628).
- vsock: keep poll shutdown state consistent (bsc#1012628).
- net: netlink: fix sending unassigned nsid after assigned one
(bsc#1012628).
- net: netlink: don't set nsid on local notifications
(bsc#1012628).
- net/smc: Do not re-initialize smc hashtables (bsc#1012628).
- net/iucv: fix locking in .getsockopt (bsc#1012628).
- scsi: core: Run queues for all non-SDEV_DEL devices from
scsi_run_host_queues (bsc#1012628).
- scsi: scsi_debug: Add missing newline in
scsi_debug_device_reset() (bsc#1012628).
- ipv4: free net->ipv4.sysctl_local_reserved_ports after
unregister_net_sysctl_table() (bsc#1012628).
- ALSA: hda: cs35l56: Fix system name string leaks (bsc#1012628).
- ALSA: pcm: oss: Fix setup list UAF on proc write error
(bsc#1012628).
- ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors
(bsc#1012628).
- net/mlx5: HWS: Reject unsupported remove-header action
(bsc#1012628).
- net: hsr: fix potential OOB access in supervision frame handling
(bsc#1012628).
- accel/ivpu: prevent uninitialized data bug in debugfs
(bsc#1012628).
- gpio: mxc: fix irq_high handling (bsc#1012628).
- drm/i915/aux: use polling when irqs are unavailable
(bsc#1012628).
- net: Avoid checksumming unreadable skb tail on trim
(bsc#1012628).
- ethtool: rss: avoid modifying the RSS context response
(bsc#1012628).
- ethtool: rss: add missing errno on RSS context delete
(bsc#1012628).
- ethtool: rss: fix falsely ignoring indir table updates
(bsc#1012628).
- ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
(bsc#1012628).
- ethtool: rss: fix hkey leak when indir_size is 0 (bsc#1012628).
- ethtool: rss: avoid device context leak on reply-build failure
(bsc#1012628).
- ethtool: module: call ethnl_ops_complete() on module flash
errors (bsc#1012628).
- ethtool: module: avoid leaking a netdev ref on module flash
errors (bsc#1012628).
- ethtool: module: avoid racy updates to dev->ethtool bitfield
(bsc#1012628).
- ethtool: module: check fw_flash_in_progress under rtnl_lock
(bsc#1012628).
- ethtool: module: fix cleanup if socket used for flashing
multiple devices (bsc#1012628).
- ethtool: cmis: require exact CDB reply length (bsc#1012628).
- ethtool: cmis: fix u16-to-u8 truncation of msleep_pre_rpl
(bsc#1012628).
- ethtool: cmis: validate start_cmd_payload_size from module
(bsc#1012628).
- ethtool: cmis: validate fw->size against start_cmd_payload_size
(bsc#1012628).
- cxl/test: Update mock dev array before calling
platform_device_add() (bsc#1012628).
- tunnels: load network headers after skb_cow() in
iptunnel_pmtud_build_icmp[v6]() (bsc#1012628).
- vxlan: do not reuse cached ip_hdr() value after
skb_tunnel_check_pmtu() (bsc#1012628).
- tunnels: do not assume transport header in
iptunnel_pmtud_check_icmp() (bsc#1012628).
- ksmbd: fix FSCTL permission bypass by adding a permission
check for FSCTL_SET_SPARSE (bsc#1012628).
- ASoC: codecs: simple-mux: Fix enum control bounds check
(bsc#1012628).
- drm/xe: Restore IDLEDLY regiter on engine reset (bsc#1012628).
- Bluetooth: 6lowpan: check skb_clone() return value in
send_mcast_pkt() (bsc#1012628).
- bonding: refuse to enslave CAN devices (bsc#1012628).
- bridge: Fix sleep in atomic context in netlink path
(bsc#1012628).
- bridge: Fix sleep in atomic context in sysfs path (bsc#1012628).
- ethtool: coalesce: cap profile updates at
NET_DIM_PARAMS_NUM_PROFILES (bsc#1012628).
- ethtool: tsconfig: fix reply error handling (bsc#1012628).
- ethtool: linkstate: fix unbalanced ethnl_ops_complete() on
PHY lookup error (bsc#1012628).
- ethtool: pse-pd: fix missing ethnl_ops_complete() (bsc#1012628).
- ethtool: tsconfig: fix missing ethnl_ops_complete()
(bsc#1012628).
- ethtool: tsinfo: fix uninitialized stats on the by-PHC path
(bsc#1012628).
- ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on
prepare failure (bsc#1012628).
- ethtool: strset: fix header attribute index in
ethnl_req_get_phydev() (bsc#1012628).
- ethtool: eeprom: add missing ethnl_ops_begin() / _complete()
during fallback (bsc#1012628).
- ethtool: eeprom: add more safeties to EEPROM Netlink fallback
(bsc#1012628).
- ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()
(bsc#1012628).
- net/sched: Revert "net/sched: Restrict conditions for adding
duplicating netems to qdisc tree" (bsc#1012628).
- net/sched: fix packet loop on netem when duplicate is on
(bsc#1012628).
- net: Introduce skb tc depth field to track packet loops
(bsc#1012628).
- net/sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress
mirred loop (bsc#1012628).
- net/sched: act_mirred: Fix blockcast recursion bypass leading
to stack overflow (bsc#1012628).
- net/sched: act_mirred: Fix return code in early mirred redirect
error paths (bsc#1012628).
- net: hibmcge: disable Relaxed Ordering to fix RX packet
corruption (bsc#1012628).
- net: hibmcge: move dma_rmb() after dma_sync_single_for_cpu()
in RX path (bsc#1012628).
- net/handshake: Use spin_lock_bh for hn_lock (bsc#1012628).
- nvme-tcp: store negative errno in queue->tls_err (bsc#1012628).
- net/handshake: Pass negative errno through handshake_complete()
(bsc#1012628).
- net/handshake: hand off the pinned file reference to accept_doit
(bsc#1012628).
- net/handshake: Take a long-lived file reference at submit
(bsc#1012628).
- net/handshake: Drain pending requests at net namespace exit
(bsc#1012628).
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime
(bsc#1012628).
- dpll: zl3073x: add die temperature reporting for supported chips
(bsc#1012628).
- dpll: export __dpll_device_change_ntf() for use under dpll_lock
(bsc#1012628).
- dpll: zl3073x: use __dpll_device_change_ntf() and remove
change_work (bsc#1012628).
- Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration
success (bsc#1012628).
- Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp
(bsc#1012628).
- Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device
close (bsc#1012628).
- Bluetooth: hci_sync: Reset device counters in
hci_dev_close_sync() (bsc#1012628).
- gpio: adnp: fix flow control regression caused by scoped_guard()
(bsc#1012628).
- gpio: virtuser: Fix uninitialized data bug in
gpio_virtuser_direction_do_write() (bsc#1012628).
- gpio: rockchip: convert bank->clk to devm_clk_get_enabled()
(bsc#1012628).
- gpio: rockchip: teardown bugs and resource leaks (bsc#1012628).
- net: mana: Add NULL guards in teardown path to prevent panic
on attach failure (bsc#1012628).
- net: mana: Skip redundant detach on already-detached port
(bsc#1012628).
- sctp: fix race between sctp_wait_for_connect and peeloff
(bsc#1012628).
- net: pcs: pcs-mtk-lynxi: fix bpi-r3 serdes configuration
(bsc#1012628).
- vsock/virtio: bind uarg before filling zerocopy skb
(bsc#1012628).
- ipv6: fix possible infinite loop in rt6_fill_node()
(bsc#1012628).
- ipv6: fix possible infinite loop in fib6_select_path()
(bsc#1012628).
- net: skbuff: fix pskb_carve leaking zcopy pages (bsc#1012628).
- Revert "ipv6: preserve insertion order for same-scope addresses"
(bsc#1012628).
- Revert "x86/fpu: Refine and simplify the magic number check
during signal return" (bsc#1012628).
- drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS
DPCD register (bsc#1012628).
- drm/i915/psr: Read Intel DPCD workaround register (bsc#1012628).
- drm/i915/psr: Apply Intel DPCD workaround when SDP on prior
line used (bsc#1012628).
- iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer
(bsc#1012628).
- iio: imu: adis16550: fix stack leak in trigger handler
(bsc#1012628).
- iio: pressure: bmp280: fix stack leak in bmp580 trigger handler
(bsc#1012628).
- usb: typec: ucsi: ccg: reject firmware images without a ':'
record header (bsc#1012628).
- usb: typec: tcpm: validate VDO count in Discover Identity ACK
handlers (bsc#1012628).
- usb: typec: tcpm: bound altmode_desc[] per iteration in
svdm_consume_modes() (bsc#1012628).
- usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without
a payload VDO (bsc#1012628).
- usb: typec: altmodes/displayport: validate count before reading
Status Update VDO (bsc#1012628).
- usb: typec: wcove: don't write past struct pd_message in
wcove_read_rx_buffer() (bsc#1012628).
- usb: typec: tcpm/tcpci_maxim: validate header NDO against
RX_BYTE_CNT (bsc#1012628).
- usb: typec: ucsi: validate connector number in
ucsi_connector_change() (bsc#1012628).
- USB: serial: safe_serial: fix memory corruption with small
endpoint (bsc#1012628).
- media: rc: igorplugusb: fix control request setup packet
(bsc#1012628).
- Input: ims-pcu - fix usb_free_coherent() size in
ims_pcu_buffers_free() (bsc#1012628).
- USB: serial: cypress_m8: fix memory corruption with small
endpoint (bsc#1012628).
- HID: quirks: Add ALWAYS_POLL quirk for SIGMACHIP USB mouse
(bsc#1012628).
- Bluetooth: btusb: Allow firmware re-download when version
matches (bsc#1012628).
- mm/vmalloc: do not trigger BUG() on BH disabled context
(bsc#1012628).
- hpfs: fix a crash if hpfs_map_dnode_bitmap fails (bsc#1012628).
- mm/damon/sysfs-schemes: delete tried region in regions_rmdirs()
(bsc#1012628).
- ipc: limit next_id allocation to the valid ID range
(bsc#1012628).
- mm: memcontrol: propagate NMI slab stats to memcg vmstats
(bsc#1012628).
- mm/migrate_device: fix pgtable leak in
migrate_vma_insert_huge_pmd_page (bsc#1012628).
- memfd: deny writeable mappings when implying SEAL_WRITE
(bsc#1012628).
- zram: fix use-after-free in zram_writeback_endio (bsc#1012628).
- mm/rmap: initialize nr_pages to 1 at loop start in
try_to_unmap_one (bsc#1012628).
- auxdisplay: line-display: fix OOB read on zero-length
message_store() (bsc#1012628).
- smb: client: fix uninitialized variable in smb2_writev_callback
(bsc#1012628).
- Bluetooth: L2CAP: use chan timer to close channels in
cleanup_listen() (bsc#1012628).
- Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout()
on !conn (bsc#1012628).
- Bluetooth: HIDP: fix missing length checks in
hidp_input_report() (bsc#1012628).
- Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1012628).
- Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock
(bsc#1012628).
- Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()
(bsc#1012628).
- Bluetooth: hci_qca: Use 100 ms SSR delay for rampatch and NVM
loading (bsc#1012628).
- Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync
(bsc#1012628).
- Input: xpad - fix out-of-bounds access for Share button
(bsc#1012628).
- parport: Fix race between port and client registration
(bsc#1012628).
- rust_binder: Avoid holding lock when dropping delivered_death
(bsc#1012628).
- rust_binder: avoid calling pending_oneway_finished() on
TF_UPDATE_TXN (bsc#1012628).
- USB: cdc-acm: Fix bit overlap and move quirk definitions to
header (bsc#1012628).
- KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor
(bsc#1012628).
- KVM: arm64: PMU: Preserve AArch32 counter low bits
(bsc#1012628).
- KVM: SVM: Flush the current TLB when transitioning from xAVIC =>
x2AVIC (bsc#1012628).
- KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use
(bsc#1012628).
- KVM: SEV: Ignore Port I/O requests of length '0' (bsc#1012628).
- KVM: SEV: Use the size of the PSC header as the minimum size
for PSC requests (bsc#1012628).
- KVM: SEV: WARN if KVM attempts to setup scratch area with
min_len==0 (bsc#1012628).
- KVM: SEV: Compute the correct max length of the in-GHCB scratch
area (bsc#1012628).
- KVM: SEV: Check PSC request indices against the actual size
of the buffer (bsc#1012628).
- KVM: SEV: Use READ_ONCE() when reading entries/indices from
PSC buffer (bsc#1012628).
- KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc()
(bsc#1012628).
- gpio: shared: undo the vote of the proxy on GPIO free
(bsc#1012628).
- gpio: shared: fix deadlock on shared proxy's parent removal
(bsc#1012628).
- gpio: shared: fix lockdep false positive by removing unneeded
lock (bsc#1012628).
- Disable -Wattribute-alias for clang-23 and newer (bsc#1012628).
- iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for
dual mux (bsc#1012628).
- iio: adc: npcm: fix unbalanced clk_disable_unprepare()
(bsc#1012628).
- iio: dac: ad3530r: Fix AD3531/AD3531R powerdown mode strings
(bsc#1012628).
- iio: dac: max5821: fix return value check in powerdown sync
(bsc#1012628).
- iio: dac: ad5686: fix ref bit initialization for single-channel
parts (bsc#1012628).
- iio: dac: ad5686: fix input raw value check (bsc#1012628).
- iio: dac: ad5686: acquire lock when doing powerdown control
(bsc#1012628).
- iio: dac: ad5686: fix powerdown control on dual-channel devices
(bsc#1012628).
- iio: adc: mt6359: fix unchecked return value in mt6358_read_imp
(bsc#1012628).
- iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw
(bsc#1012628).
- iio: adc: ad4695: Fix call ordering in offload buffer postenable
(bsc#1012628).
- iio: adc: nxp-sar-adc: fix division by zero in write_raw
(bsc#1012628).
- iio: adc: nxp-sar-adc: Avoid division by zero (bsc#1012628).
- iio: adc: nxp-sar-adc: zero-initialize dma_slave_config
(bsc#1012628).
- iio: gyro: itg3200: fix i2c read into the wrong stack location
(bsc#1012628).
- iio: gyro: adis16260: fix division by zero in write_raw
(bsc#1012628).
- iio: ssp_sensors: cancel delayed work_refresh on remove
(bsc#1012628).
- iio: temperature: tsys01: fix broken PROM checksum validation
(bsc#1012628).
- iio: magnetometer: st_magn: fix default DRDY pin selection
for LIS2MDL (bsc#1012628).
- iio: light: veml6070: Fix resource leak in probe error path
(bsc#1012628).
- iio: Fix iio_multiply_value use in
iio_read_channel_processed_scale (bsc#1012628).
- iio: chemical: mhz19b: reject oversized serial replies
(bsc#1012628).
- iio: chemical: scd30: fix division by zero in write_raw
(bsc#1012628).
- iio: light: cm3323: fix reg_conf not being initialized correctly
(bsc#1012628).
- iio: buffer: hw-consumer: fix use-after-free in error path
(bsc#1012628).
- iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf()
(bsc#1012628).
- USB: serial: omninet: fix memory corruption with small endpoint
(bsc#1012628).
- usb: cdns3: gadget: fix request skipping after clearing halt
(bsc#1012628).
- usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy
acquisition failure (bsc#1012628).
- usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call
permanently leaks the runtime PM usage counter across
bind/unbind cycles (bsc#1012628).
- usb: dwc2: Fix use after free in debug code (bsc#1012628).
- Input: elan_i2c - validate firmware size before use
(bsc#1012628).
- i2c: davinci: fix division by zero on missing clock-frequency
(bsc#1012628).
- x86/ftrace: Relocate %rip-relative percpu refs in dynamic
trampolines (bsc#1012628).
- wireguard: send: append trailer after expanding head
(bsc#1012628).
- bpf: sockmap: fix tail fragment offset in bpf_msg_push_data
(bsc#1012628).
- macsec: fix replay protection at XPN lower-PN wrap
(bsc#1012628).
- ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()
(bsc#1012628).
- ASoC: qcom: q6asm-dai: fix error handling in prepare and
set_params (bsc#1012628).
- octeontx2-af: validate body pcifunc in
rvu_mbox_handler_rep_event_notify (bsc#1012628).
- ipv6: exthdrs: refresh nh after handling HAO option
(bsc#1012628).
- ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate()
(bsc#1012628).
- ipv6: validate extension header length before copying to cmsg
(bsc#1012628).
- xfrm: input: hold netns during deferred transport reinjection
(bsc#1012628).
- l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname
(bsc#1012628).
- ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1012628).
- net: skbuff: fix missing zerocopy reference in pskb_carve
helpers (bsc#1012628).
- spi: spi-mem: avoid mutating op template in
spi_mem_supports_op() (bsc#1012628).
- HID: wacom: Fix OOB write in wacom_hid_set_device_mode()
(bsc#1012628).
- iommu, debugobjects: avoid gcc-16.1 section mismatch warnings
(bsc#1012628).
- nfc: hci: fix out-of-bounds read in HCP header parsing
(bsc#1012628).
- xfrm: route MIGRATE notifications to caller's netns
(bsc#1012628).
- xfrm: ipcomp: Free destination pages on acomp errors
(bsc#1012628).
- xfrm: ah: use skb_to_full_sk in async output callbacks
(bsc#1012628).
- ALSA: scarlett2: Fix 2i2 Gen 4 direct monitor gain on firmware
2417 (bsc#1012628).
- ALSA: firewire-motu: Protect register DSP event queue positions
(bsc#1012628).
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq
RST without direction check (bsc#1012628).
- ASoC: qcom: q6asm-dai: close stream only when running
(bsc#1012628).
- ASoC: qcom: q6asm-dai: do not set stream state in event and
trigger callbacks (bsc#1012628).
- xfrm: esp: restore combined single-frag length gate
(bsc#1012628).
- ALSA: hda/realtek: Fix speaker output on ASUS ROG Strix G615LP
(bsc#1012628).
- xfrm: iptfs: reset runtime state when cloning SAs (bsc#1012628).
- dma-buf: fix UAF in dma_buf_fd() tracepoint (bsc#1012628).
- Input: xpad - add "Nova 2 Lite" from GameSir (bsc#1012628).
- Input: xpad - add support for ASUS ROG RAIKIRI II (bsc#1012628).
- ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk
loops (bsc#1012628).
- misc: rp1: Send IACK on IRQ activate to fix kdump/kexec
(bsc#1012628).
- Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem
(bsc#1012628).
- Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad
E490 (bsc#1012628).
- dt-bindings: usb: Fix EIC7700 USB reset's issue (bsc#1012628).
- comedi: comedi_test: fix check for valid scan_begin_src in
waveform_ai_cmdtest() (bsc#1012628).
- comedi: comedi_test: Fix limiting of convert_arg in
waveform_ai_cmdtest() (bsc#1012628).
- counter: Fix refcount leak in counter_alloc() error path
(bsc#1012628).
- tty: serial: pch_uart: add check for dma_alloc_coherent()
(bsc#1012628).
- tty: serial: samsung: Remove redundant port lock acquisition
in rx helpers (bsc#1012628).
- uio: uio_pci_generic_sva: fix double free of devm_kzalloc()
memory (bsc#1012628).
- usb: chipidea: core: convert ci_role_switch to local variable
(bsc#1012628).
- usb: core: Fix up Interrupt IN endpoints with bogus
wBytesPerInterval (bsc#1012628).
- usb: dwc3: xilinx: fix error handling in zynqmp init error paths
(bsc#1012628).
- usb: musb: omap2430: Fix use-after-free in omap2430_probe()
(bsc#1012628).
- USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2
hub controllers (bsc#1012628).
- usb: storage: Add quirks for PNY Elite Portable SSD
(bsc#1012628).
- usbip: vudc: Fix use after free bug in vudc_remove due to race
condition (bsc#1012628).
- usb: usbtmc: check URB actual_length for interrupt-IN
notifications (bsc#1012628).
- usb: usbtmc: reject interrupt endpoints with small
wMaxPacketSize (bsc#1012628).
- usb: typec: tipd: Fix error code in tps6598x_probe()
(bsc#1012628).
- usb: typec: tcpm: improve handling of DISCOVER_MODES failures
(bsc#1012628).
- usb: typec: ucsi: Check if power role change actually happened
before handling (bsc#1012628).
- usb: typec: ucsi: Don't update power_supply on power role
change if not connected (bsc#1012628).
- USB: serial: option: add MeiG SRM813Q (bsc#1012628).
- USB: serial: option: add missing RSVD(5) flag for Rolling
RW135R-GL (bsc#1012628).
- USB: serial: belkin_sa: validate interrupt status length
(bsc#1012628).
- USB: serial: cypress_m8: validate interrupt packet headers
(bsc#1012628).
- USB: serial: digi_acceleport: fix memory corruption with small
endpoints (bsc#1012628).
- USB: serial: keyspan: fix missing indat transfer sanity check
(bsc#1012628).
- USB: serial: mxuport: fix memory corruption with small endpoint
(bsc#1012628).
- USB: serial: mct_u232: fix memory corruption with small endpoint
(bsc#1012628).
- USB: serial: mct_u232: fix missing interrupt-in transfer sanity
check (bsc#1012628).
- usb: gadget: uvc: hold opts->lock across XU walks in
uvc_function_bind (bsc#1012628).
- usb: gadget: net2280: Fix double free in probe error path
(bsc#1012628).
- usb: gadget: f_hid: fix device reference leak in hidg_alloc()
(bsc#1012628).
- usb: gadget: composite: fix integer underflow in WebUSB GET_URL
handling (bsc#1012628).
- usb: gadget: dummy_hcd: Reject hub port requests for
non-existent ports (bsc#1012628).
- usb: gadget: f_fs: copy only received bytes on short ep0 read
(bsc#1012628).
- usb: gadget: f_fs: serialize DMABUF cancel against request
completion (bsc#1012628).
- thunderbolt: property: Reject u32 wrap in
tb_property_entry_valid() (bsc#1012628).
- thunderbolt: property: Reject dir_len < 4 to prevent size_t
underflow (bsc#1012628).
- thunderbolt: property: Cap recursion depth in
__tb_property_parse_dir() (bsc#1012628).
- scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL
walker (bsc#1012628).
- scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32
(bsc#1012628).
- scsi: target: iscsi: Fix CRC overread and double-free in
iscsit_handle_text_cmd() (bsc#1012628).
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends
to rsp_buf (bsc#1012628).
- scsi: target: iscsi: Validate CHAP_R length before base64 decode
(bsc#1012628).
- drm/hyperv: validate resolution_count and fix WIN8 fallback
(bsc#1012628).
- drm/hyperv: validate VMBus packet size in receive callback
(bsc#1012628).
- drm/gem: fix race between change_handle and handle_delete
(bsc#1012628).
- drm/i915/color: Fix HDR pre-CSC LUT programming loop
(bsc#1012628).
- drm/i915/psr: Block DC states on vblank enable when Panel
Replay supported (bsc#1012628).
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank
enable (bsc#1012628).
- drm/i915: Fix potential UAF in TTM object purge (bsc#1012628).
- drm/amd/pm/si: Disregard vblank time when no displays are
connected (bsc#1012628).
- serial: altera_jtaguart: handle uart_add_one_port() failures
(bsc#1012628).
- serial: qcom-geni: fix UART_RX_PAR_EN bit position
(bsc#1012628).
- serial: qcom_geni: fix kfifo underflow when flush precedes
DMA completion IRQ (bsc#1012628).
- serial: sh-sci: fix memory region release in error path
(bsc#1012628).
- serial: zs: Fix swapped RI/DSR modem line transition counting
(bsc#1012628).
- serial: fsl_lpuart: fix rx buffer and DMA map leaks in
start_rx_dma (bsc#1012628).
- drm/amdkfd: fix NULL pointer bug in svm_range_set_attr
(bsc#1012628).
- drm/amdkfd: fix a vulnerability of integer overflow in kfd
debugger (bsc#1012628).
- drm/amdkfd: Check for pdd drm file first in CRIU restore path
(bsc#1012628).
- drm/amdgpu: fix lock leak on ENOMEM in
AMDGPU_GEM_OP_GET_MAPPING_INFO (bsc#1012628).
- drm/amdgpu: fix calling VM invalidation in
amdgpu_hmm_invalidate_gfx (bsc#1012628).
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1012628).
- drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO
(bsc#1012628).
- serial: dz: Fix bootconsole message clobbering at chip reset
(bsc#1012628).
- serial: dz: Fix bootconsole handover lockup (bsc#1012628).
- serial: dz: Convert to use a platform device (bsc#1012628).
- serial: zs: Fix bootconsole handover lockup (bsc#1012628).
- serial: zs: Switch to using channel reset (bsc#1012628).
- serial: zs: Convert to use a platform device (bsc#1012628).
- serial: core: introduce
guard(uart_port_lock_check_sysrq_irqsave) (bsc#1012628).
- serial: 8250: dispatch SysRq character in
serial8250_handle_irq() (bsc#1012628).
- serial: 8250_dw: dispatch SysRq character in dw8250_handle_irq()
(bsc#1012628).
- Revert "mm/hugetlbfs: update hugetlbfs to use mmap_prepare"
(bsc#1012628).
- platform/x86/intel/vsec: Refactor base_addr handling
(bsc#1012628).
- platform/x86/intel/vsec: Make driver_data info const
(bsc#1012628).
- platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe
error recovery (bsc#1012628).
- rxrpc: Fix RESPONSE packet verification to extract skb to a
linear buffer (bsc#1012628).
- ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360
15-fh0xxx (bsc#1012628).
- ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP 16 Piston
OmniBook X (bsc#1012628).
- arm64: tlb: Flush walk cache when unsharing PMD tables
(bsc#1012628).
- i2c: tegra: make tegra_i2c_mutex_unlock() return void
(bsc#1012628).
- hwmon: (pmbus) Add support for guarded PMBus lock (bsc#1012628).
- hwmon: (pmbus/adm1266) serialize sequencer_state debugfs read
with pmbus_lock (bsc#1012628).
- hwmon: (pmbus/adm1266) serialize GPIO PMBus accesses with
pmbus_lock (bsc#1012628).
- net: phy: micrel: fix LAN8814 QSGMII soft reset (bsc#1012628).
- xhci: tegra: Fix ghost USB device on dual-role port unplug
(bsc#1012628).
- mailbox: Fix NULL message support in mbox_send_message()
(bsc#1012628).
- usb: core: Fix SuperSpeed root hub wMaxPacketSize (bsc#1012628).
- tools: ynl: add scope qualifier for definitions (bsc#1012628).
- KVM: arm64: vgic-its: Drop the translation cache reference
only for the erased entry (bsc#1012628).
- KVM: arm64: Reassign nested_mmus array behind mmu_lock
(bsc#1012628).
- Rename to
patches.kernel.org/7.0.12-006-bcache-fix-uninitialized-closure-object.patch.
- Rename to
patches.kernel.org/7.0.12-055-blk-mq-reinsert-cached-request-to-the-list.patch.
- commit 32bf651
* Wed Jun 10 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.0.10-0188-net-sched-act_ct-Only-release-RCU-read-lock-a.patch
(bsc#1012628 CVE-2026-46319).
- Update
patches.kernel.org/7.0.10-0860-eventpoll-fix-ep_remove-struct-eventpoll-stru.patch
(bsc#1012628 CVE-2026-46242 bsc#1267618).
- Update
patches.kernel.org/7.0.10-0889-netfilter-nf_tables-use-list_del_rcu-for-netl.patch
(bsc#1012628 CVE-2026-46324 bsc#1267995).
- Update
patches.kernel.org/7.0.10-1090-io-wq-check-that-the-predecessor-is-hashed-in.patch
(bsc#1012628 CVE-2026-46274 bsc#1267918).
- Update
patches.kernel.org/7.0.11-004-smb-client-reject-userspace-cifs.spnego-descri.patch
(bsc#1012628 CVE-2026-46243 bsc#1266238).
- Update
patches.kernel.org/7.0.11-030-io_uring-waitid-clear-waitid-info-before-copyi.patch
(bsc#1012628 CVE-2026-46315 bsc#1267953).
- Update
patches.kernel.org/7.0.11-044-Bluetooth-hci_uart-fix-UAFs-and-race-condition.patch
(bsc#1012628 CVE-2026-46275 bsc#1267968).
- Update
patches.kernel.org/7.0.11-060-netfilter-nft_inner-Fix-IPv6-inner_thoff-desyn.patch
(bsc#1012628 CVE-2026-46244 bsc#1267654).
- Update
patches.kernel.org/7.0.11-452-net-gro-don-t-merge-zcopy-skbs.patch
(bsc#1012628 CVE-2026-46323).
- Update
patches.kernel.org/7.0.12-019-tun-free-page-on-short-frame-rejection-in-tun_.patch
(bsc#1012628 CVE-2026-46321).
- Update
patches.kernel.org/7.0.12-020-tap-free-page-on-error-paths-in-tap_get_user_x.patch
(bsc#1012628 CVE-2026-46320 bsc#1267993).
- Update
patches.kernel.org/7.0.12-021-tun-free-page-on-build_skb-failure-in-tun_xdp_.patch
(bsc#1012628 CVE-2026-46322 bsc#1267994).
- Update
patches.kernel.org/7.0.12-315-Revert-mm-hugetlbfs-update-hugetlbfs-to-use-mm.patch
(bsc#1012628 CVE-2026-46318).
- Update
patches.kernel.org/7.0.12-332-KVM-arm64-vgic-its-Drop-the-translation-cache-.patch
(bsc#1012628 CVE-2026-46316).
- Update
patches.kernel.org/7.0.12-333-KVM-arm64-Reassign-nested_mmus-array-behind-mm.patch
(bsc#1012628 CVE-2026-46317).
- Update
patches.kernel.org/7.0.4-008-LoongArch-Add-spectre-boundry-for-syscall-dispa.patch
(bsc#1012628 CVE-2026-45993 bsc#1267352).
- Update
patches.kernel.org/7.0.4-009-drm-nouveau-fix-u32-overflow-in-pushbuf-reloc-b.patch
(bsc#1012628 CVE-2026-46006 bsc#1267479).
- Update
patches.kernel.org/7.0.4-010-leds-qcom-lpg-Check-for-array-overflow-when-sel.patch
(bsc#1012628 CVE-2026-46286 bsc#1267932).
- Update
patches.kernel.org/7.0.4-011-greybus-gb-beagleplay-bound-bootloader-receive-.patch
(bsc#1012628 CVE-2026-46332).
- Update
patches.kernel.org/7.0.4-012-greybus-gb-beagleplay-fix-sleep-in-atomic-conte.patch
(bsc#1012628 CVE-2026-46041 bsc#1267589).
- Update
patches.kernel.org/7.0.4-013-misc-ibmasm-fix-OOB-MMIO-read-in-ibmasm_handle_.patch
(bsc#1012628 CVE-2026-46022 bsc#1267434).
- Update
patches.kernel.org/7.0.4-014-ibmasm-fix-OOB-reads-in-command_file_write-due-.patch
(bsc#1012628 CVE-2026-45994 bsc#1267432).
- Update
patches.kernel.org/7.0.4-015-ibmasm-fix-heap-over-read-in-ibmasm_send_i2o_me.patch
(bsc#1012628 CVE-2026-46064 bsc#1267497).
- Update
patches.kernel.org/7.0.4-019-drm-nouveau-fix-nvkm_device-leak-on-aperture-re.patch
(bsc#1012628 CVE-2026-52904).
- Update
patches.kernel.org/7.0.4-022-fs-afs-revert-mmap_prepare-change.patch
(bsc#1012628 CVE-2026-46100 bsc#1267447).
- Update
patches.kernel.org/7.0.4-024-lib-test_hmm-evict-device-pages-on-file-close-t.patch
(bsc#1012628 CVE-2026-46280 bsc#1267958).
- Update
patches.kernel.org/7.0.4-030-ocfs2-split-transactions-in-dio-completion-to-a.patch
(bsc#1012628 CVE-2026-46080 bsc#1267596).
- Update
patches.kernel.org/7.0.4-031-Input-edt-ft5x06-fix-use-after-free-in-debugfs-.patch
(bsc#1012628 CVE-2026-46097 bsc#1267428).
- Update
patches.kernel.org/7.0.4-032-zram-do-not-forget-to-endio-for-partial-discard.patch
(bsc#1012628 CVE-2026-46089 bsc#1267445).
- Update
patches.kernel.org/7.0.4-033-wifi-rtw88-check-for-PCI-upstream-bridge-existe.patch
(bsc#1012628 CVE-2026-46092 bsc#1267595).
- Update
patches.kernel.org/7.0.4-034-wifi-mwifiex-fix-use-after-free-in-mwifiex_adap.patch
(bsc#1012628 CVE-2026-46069 bsc#1267437).
- Update
patches.kernel.org/7.0.4-038-vfio-cdx-Serialize-VFIO_DEVICE_SET_IRQS-with-a-.patch
(bsc#1012628 CVE-2026-46036 bsc#1267470).
- Update
patches.kernel.org/7.0.4-042-spi-imx-fix-use-after-free-on-unbind.patch
(bsc#1012628 CVE-2026-45996 bsc#1267436).
- Update
patches.kernel.org/7.0.4-043-spi-ch341-fix-memory-leaks-on-probe-failures.patch
(bsc#1012628 CVE-2026-46074 bsc#1267468).
- Update
patches.kernel.org/7.0.4-044-crypto-algif_aead-snapshot-IV-for-async-AEAD-re.patch
(bsc#1012628 CVE-2026-46028 bsc#1267430).
- Update
patches.kernel.org/7.0.4-047-of-unittest-fix-use-after-free-in-of_unittest_c.patch
(bsc#1012628 CVE-2026-46288 bsc#1267941).
- Update
patches.kernel.org/7.0.4-049-hwmon-powerz-Fix-missing-usb_kill_urb-on-signal.patch
(bsc#1012628 CVE-2026-46073 bsc#1267597).
- Update
patches.kernel.org/7.0.4-050-EDAC-versalnet-Fix-device_node-leak-in-mc_probe.patch
(bsc#1012628 CVE-2026-46030 bsc#1267451).
- Update
patches.kernel.org/7.0.4-054-net-caif-clear-client-service-pointer-on-teardo.patch
(bsc#1012628 CVE-2026-46098 bsc#1267552).
- Update
patches.kernel.org/7.0.4-055-net-strparser-fix-skb_head-leak-in-strp_abort_s.patch
(bsc#1012628 CVE-2026-46102 bsc#1267502).
- Update
patches.kernel.org/7.0.4-056-media-mtk-jpeg-fix-use-after-free-in-release-pa.patch
(bsc#1012628 CVE-2026-46011 bsc#1267491).
- Update
patches.kernel.org/7.0.4-065-ext2-reject-inodes-with-zero-i_nlink-and-valid-.patch
(bsc#1012628 CVE-2026-46002 bsc#1267587).
- Update
patches.kernel.org/7.0.4-070-ALSA-ctxfi-Add-fallback-to-default-RSR-for-S-PD.patch
(bsc#1012628 CVE-2026-46049 bsc#1267448).
- Update
patches.kernel.org/7.0.4-072-erofs-fix-the-out-of-bounds-nameoff-handling-fo.patch
(bsc#1012628 CVE-2026-46078 bsc#1267505).
- Update
patches.kernel.org/7.0.4-073-ipmi-ssif-Clean-up-kthread-on-errors.patch
(bsc#1012628 CVE-2026-46044 bsc#1267464).
- Update
patches.kernel.org/7.0.4-078-media-rockchip-rkcif-fix-off-by-one-bugs.patch
(bsc#1012628 CVE-2026-52907).
- Update
patches.kernel.org/7.0.4-081-mm-alloc_tag-clear-codetag-for-pages-allocated-.patch
(bsc#1012628 CVE-2026-46279 bsc#1267929).
- Update
patches.kernel.org/7.0.4-082-mm-damon-core-fix-damon_call-vs-kdamond_fn-exit.patch
(bsc#1012628 CVE-2026-46025 bsc#1267585).
- Update
patches.kernel.org/7.0.4-084-mm-hugetlb-fix-early-boot-crash-on-parameters-w.patch
(bsc#1012628 CVE-2026-46284 bsc#1267938).
- Update
patches.kernel.org/7.0.4-085-mtd-docg3-fix-use-after-free-in-docg3_release.patch
(bsc#1012628 CVE-2026-46285 bsc#1267948).
- Update
patches.kernel.org/7.0.4-105-mm-zone_device-do-not-touch-device-folio-after-.patch
(bsc#1012628 CVE-2026-46277 bsc#1267960).
- Update
patches.kernel.org/7.0.4-126-rxrpc-Fix-potential-UAF-after-skb_unshare-failu.patch
(bsc#1012628 CVE-2026-45998 bsc#1267452).
- Update
patches.kernel.org/7.0.4-127-rxrpc-Fix-memory-leaks-in-rxkad_verify_response.patch
(bsc#1012628 CVE-2026-46012 bsc#1267350).
- Update
patches.kernel.org/7.0.4-128-rxrpc-Fix-conn-level-packet-handling-to-unshare.patch
(bsc#1012628 CVE-2026-46000 bsc#1267490).
- Update
patches.kernel.org/7.0.4-135-net-txgbe-fix-RTNL-assertion-warning-when-remov.patch
(bsc#1012628 CVE-2026-46287 bsc#1267954).
- Update
patches.kernel.org/7.0.4-141-net-rds-fix-MR-cleanup-on-copy-error.patch
(bsc#1012628 CVE-2026-46053 bsc#1267427).
- Update
patches.kernel.org/7.0.4-144-net-ks8851-Reinstate-disabling-of-BHs-around-IR.patch
(bsc#1012628 CVE-2026-46031 bsc#1267463).
- Update
patches.kernel.org/7.0.4-145-net-bridge-use-a-stable-FDB-dst-snapshot-in-RCU.patch
(bsc#1012628 CVE-2026-46086 bsc#1267524).
- Update
patches.kernel.org/7.0.4-154-ipv4-icmp-validate-reply-type-before-using-icmp.patch
(bsc#1012628 CVE-2026-46037 bsc#1267361).
- Update
patches.kernel.org/7.0.4-162-fbdev-defio-Disconnect-deferred-I-O-from-the-li.patch
(bsc#1012628 CVE-2026-46065 bsc#1267458).
- Update
patches.kernel.org/7.0.4-165-hwmon-powerz-Avoid-cacheline-sharing-for-DMA-bu.patch
(bsc#1012628 CVE-2026-46007 bsc#1267586).
- Update
patches.kernel.org/7.0.4-170-selinux-fix-overlayfs-mmap-and-mprotect-access-.patch
(bsc#1012628 CVE-2026-46054 bsc#1267475).
- Update
patches.kernel.org/7.0.4-176-crypto-qat-fix-IRQ-cleanup-on-6xxx-probe-failur.patch
(bsc#1012628 CVE-2026-46060 bsc#1267594).
- Update
patches.kernel.org/7.0.4-178-xfs-fix-a-resource-leak-in-xfs_alloc_buftarg.patch
(bsc#1012628 CVE-2026-46005 bsc#1267431).
- Update
patches.kernel.org/7.0.4-184-tpm2-sessions-Fix-missing-tpm_buf_destroy-in-tp.patch
(bsc#1012628 CVE-2026-46096 bsc#1267371).
- Update
patches.kernel.org/7.0.4-186-tpm-Use-kfree_sensitive-to-free-auth-session-in.patch
(bsc#1012628 CVE-2026-46283 bsc#1267952).
- Update
patches.kernel.org/7.0.4-190-mm-vmalloc-take-vmap_purge_lock-in-shrinker.patch
(bsc#1012628 CVE-2026-46093 bsc#1267548).
- Update
patches.kernel.org/7.0.4-191-mm-memfd_luo-fix-physical-address-conversion-in.patch
(bsc#1012628 CVE-2026-46013 bsc#1267351).
- Update
patches.kernel.org/7.0.4-192-mm-mempolicy-fix-memory-leaks-in-weighted_inter.patch
(bsc#1012628 CVE-2026-46042 bsc#1267588).
- Update
patches.kernel.org/7.0.4-193-mm-damon-stat-fix-memory-leak-on-damon_start-fa.patch
(bsc#1012628 CVE-2026-46087 bsc#1267492).
- Update
patches.kernel.org/7.0.4-194-mm-damon-core-validate-damos_quota_goal-nid-for.patch
(bsc#1012628 CVE-2026-46020 bsc#1267446).
- Update
patches.kernel.org/7.0.4-195-mm-damon-core-validate-damos_quota_goal-nid-for.patch
(bsc#1012628 CVE-2026-46067 bsc#1267498).
- Update
patches.kernel.org/7.0.4-198-mm-damon-core-disallow-non-power-of-two-min_reg.patch
(bsc#1012628 CVE-2026-52905).
- Update
patches.kernel.org/7.0.4-205-KVM-SVM-Inject-UD-for-INVLPGA-if-EFER.SVME-0.patch
(bsc#1012628 CVE-2026-46082 bsc#1267473).
- Update
patches.kernel.org/7.0.4-208-KVM-nSVM-Always-use-NextRIP-as-vmcb02-s-NextRIP.patch
(bsc#1012628 CVE-2026-46059 bsc#1267495).
- Update
patches.kernel.org/7.0.4-212-KVM-nSVM-Avoid-clearing-VMCB_LBR-in-vmcb12.patch
(bsc#1012628 CVE-2026-46071 bsc#1267591).
- Update
patches.kernel.org/7.0.4-215-KVM-SVM-Add-missing-save-restore-handling-of-LB.patch
(bsc#1012628 CVE-2026-46014 bsc#1267440).
- Update
patches.kernel.org/7.0.4-219-KVM-nSVM-Triple-fault-if-restore-host-CR3-fails.patch
(bsc#1012628 CVE-2026-46032 bsc#1267476).
- Update
patches.kernel.org/7.0.4-227-KVM-nSVM-Raise-UD-if-unhandled-VMMCALL-isn-t-in.patch
(bsc#1012628 CVE-2026-46076 bsc#1267365).
- Update
patches.kernel.org/7.0.4-237-md-md-llbitmap-skip-reading-rdevs-that-are-not-.patch
(bsc#1012628 CVE-2026-46045 bsc#1267474).
- Update
patches.kernel.org/7.0.4-238-md-md-llbitmap-raise-barrier-before-state-machi.patch
(bsc#1012628 CVE-2026-46095 bsc#1267363).
- Update
patches.kernel.org/7.0.4-239-md-raid5-fix-soft-lockup-in-retry_aligned_read.patch
(bsc#1012628 CVE-2026-46051 bsc#1267360).
- Update
patches.kernel.org/7.0.4-240-md-raid5-validate-payload-size-before-accessing.patch
(bsc#1012628 CVE-2026-46070 bsc#1267501).
- Update
patches.kernel.org/7.0.4-244-inotify-fix-watch-count-leak-when-fsnotify_add_.patch
(bsc#1012628 CVE-2026-46040 bsc#1267472).
- Update
patches.kernel.org/7.0.4-248-tcp-call-sk_data_ready-after-listener-migration.patch
(bsc#1012628 CVE-2026-46015 bsc#1267439).
- Update
patches.kernel.org/7.0.4-252-9p-fix-access-mode-flags-being-ORed-instead-of-.patch
(bsc#1012628 CVE-2026-52906).
- Update
patches.kernel.org/7.0.4-254-Bluetooth-hci_event-fix-potential-UAF-in-SSP-pa.patch
(bsc#1012628 CVE-2026-46056 bsc#1267435).
- Update
patches.kernel.org/7.0.4-256-can-ucan-fix-devres-lifetime.patch
(bsc#1012628 CVE-2026-46103 bsc#1267555).
- Update
patches.kernel.org/7.0.4-263-crypto-atmel-tdes-fix-DMA-sync-direction.patch
(bsc#1012628 CVE-2026-46077 bsc#1267466).
- Update
patches.kernel.org/7.0.4-265-crypto-atmel-sha204a-Fix-potential-UAF-and-memo.patch
(bsc#1012628 CVE-2026-46075 bsc#1267367).
- Update
patches.kernel.org/7.0.4-267-crypto-nx-fix-bounce-buffer-leaks-in-nx842_cryp.patch
(bsc#1012628 CVE-2026-46068 bsc#1267592).
- Update
patches.kernel.org/7.0.4-270-dm-mirror-fix-integer-overflow-in-create_dirty_.patch
(bsc#1012628 CVE-2026-46023 bsc#1267449).
- Update
patches.kernel.org/7.0.4-272-ceph-fix-num_ops-off-by-one-when-crypto-allocat.patch
(bsc#1012628 CVE-2026-46066 bsc#1267593).
- Update
patches.kernel.org/7.0.4-273-ceph-only-d_add-negative-dentries-when-they-are.patch
(bsc#1012628 CVE-2026-46052 bsc#1267494).
- Update
patches.kernel.org/7.0.4-278-ntfs3-add-buffer-boundary-checks-to-run_unpack.patch
(bsc#1012628 CVE-2026-46072 bsc#1267441).
- Update
patches.kernel.org/7.0.4-279-ntfs3-fix-integer-overflow-in-run_unpack-volume.patch
(bsc#1012628 CVE-2026-46062 bsc#1267358).
- Update
patches.kernel.org/7.0.4-281-rxgk-Fix-potential-integer-overflow-in-length-c.patch
(bsc#1012628 CVE-2026-46039 bsc#1267465).
- Update
patches.kernel.org/7.0.4-287-iio-frequency-admv1013-fix-NULL-pointer-derefer.patch
(bsc#1012628 CVE-2026-46282 bsc#1267919).
- Update
patches.kernel.org/7.0.4-299-drm-amdgpu-fix-zero-size-GDS-range-init-on-RDNA.patch
(bsc#1012628 CVE-2026-46276 bsc#1267922).
- Update
patches.kernel.org/7.0.4-300-drm-imagination-Fix-segfault-when-updating-ftra.patch
(bsc#1012628 CVE-2026-46278 bsc#1267915).
- Update
patches.kernel.org/7.0.4-301-ALSA-caiaq-fix-usb_dev-refcount-leak-on-probe-f.patch
(bsc#1012628 CVE-2026-46048 bsc#1267496).
- Update
patches.kernel.org/7.0.4-302-ALSA-aloop-Fix-peer-runtime-UAF-during-format-c.patch
(bsc#1012628 CVE-2026-46090 bsc#1267531).
- Update
patches.kernel.org/7.0.4-303-vmalloc-fix-buffer-overflow-in-vrealloc_node_al.patch
(bsc#1012628 CVE-2026-46281 bsc#1267961).
- Update
patches.kernel.org/7.0.4-305-mm-slab-return-NULL-early-from-kmalloc_nolock-i.patch
(bsc#1012628 CVE-2026-46029 bsc#1267590).
- Update
patches.kernel.org/7.0.7-001-scsi-target-configfs-Bound-snprintf-return-in-t.patch
(bsc#1012628 CVE-2026-46149 bsc#1267648).
- Update
patches.kernel.org/7.0.7-002-ipmi-Add-limits-to-event-and-receive-message-re.patch
(bsc#1012628 CVE-2026-46177 bsc#1267725).
- Update
patches.kernel.org/7.0.7-003-ipmi-Check-event-message-buffer-response-for-ba.patch
(bsc#1012628 CVE-2026-46128 bsc#1267643).
- Update
patches.kernel.org/7.0.7-004-ipmi-si-Return-state-to-normal-if-message-alloc.patch
(bsc#1012628 CVE-2026-46108 bsc#1267615).
- Update
patches.kernel.org/7.0.7-013-ASoC-SOF-Don-t-allow-pointer-operations-on-unco.patch
(bsc#1012628 CVE-2026-46179 bsc#1267719).
- Update
patches.kernel.org/7.0.7-018-flow_dissector-do-not-dissect-PPPoE-PFC-frames.patch
(bsc#1012628 CVE-2026-46306 bsc#1267986).
- Update
patches.kernel.org/7.0.7-021-exit-prevent-preemption-of-oopsing-TASK_DEAD-ta.patch
(bsc#1012628 CVE-2026-46173 bsc#1267723).
- Update
patches.kernel.org/7.0.7-030-wifi-ath5k-do-not-access-array-OOB.patch
(bsc#1012628 CVE-2026-46307 bsc#1267987).
- Update
patches.kernel.org/7.0.7-032-wifi-b43-enforce-bounds-check-on-firmware-key-i.patch
(bsc#1012628 CVE-2026-46122 bsc#1267583).
- Update
patches.kernel.org/7.0.7-034-usb-usblp-fix-heap-leak-in-IEEE-1284-device-ID-.patch
(bsc#1012628 CVE-2026-46151 bsc#1267728).
- Update
patches.kernel.org/7.0.7-037-ALSA-usb-audio-Avoid-potential-endless-loop-in-.patch
(bsc#1012628 CVE-2026-46146 bsc#1267571).
- Update
patches.kernel.org/7.0.7-045-ALSA-pcm-oss-Fix-data-race-at-accessing-runtime.patch
(bsc#1012628 CVE-2026-46157 bsc#1267726).
- Update
patches.kernel.org/7.0.7-054-xfrm-defensively-unhash-xfrm_state-lists-in-__x.patch
(bsc#1012628 CVE-2026-46116 bsc#1267369).
- Update
patches.kernel.org/7.0.7-056-xfrm-ah-account-for-ESN-high-bits-in-async-call.patch
(bsc#1012628 CVE-2026-46193 bsc#1267656).
- Update
patches.kernel.org/7.0.7-058-selinux-use-sk-blob-accessor-in-socket-permissi.patch
(bsc#1012628 CVE-2026-46104 bsc#1267559).
- Update
patches.kernel.org/7.0.7-064-selinux-allow-multiple-opens-of-sys-fs-selinux-.patch
(bsc#1012628 CVE-2026-46302 bsc#1267947).
- Update
patches.kernel.org/7.0.7-068-Bluetooth-virtio_bt-clamp-rx-length-before-skb_.patch
(bsc#1012628 CVE-2026-46123 bsc#1267621).
- Update
patches.kernel.org/7.0.7-070-Bluetooth-btmtk-validate-WMT-event-SKB-length-b.patch
(bsc#1012628 CVE-2026-46140 bsc#1267677).
- Update
patches.kernel.org/7.0.7-071-Bluetooth-hci_conn-fix-potential-UAF-in-create_.patch
(bsc#1012628 CVE-2026-46111 bsc#1267626).
- Update
patches.kernel.org/7.0.7-072-Bluetooth-hci_event-Fix-OOB-read-and-infinite-l.patch
(bsc#1012628 CVE-2026-46138 bsc#1267649).
- Update
patches.kernel.org/7.0.7-088-spi-s3c64xx-fix-NULL-deref-on-driver-unbind.patch
(bsc#1012628 CVE-2026-46296 bsc#1267927).
- Update
patches.kernel.org/7.0.7-089-staging-rtl8723bs-os_dep-avoid-NULL-pointer-der.patch
(bsc#1012628 CVE-2026-46305 bsc#1267930).
- Update
patches.kernel.org/7.0.7-091-fanotify-fix-false-positive-on-permission-event.patch
(bsc#1012628 CVE-2026-46150 bsc#1267388).
- Update
patches.kernel.org/7.0.7-098-net-rtnetlink-zero-ifla_vf_broadcast-to-avoid-s.patch
(bsc#1012628 CVE-2026-46132 bsc#1267616).
- Update
patches.kernel.org/7.0.7-111-pseries-papr-hvpipe-Fix-race-with-interrupt-han.patch
(bsc#1012628 CVE-2026-46298 bsc#1267923).
- Update
patches.kernel.org/7.0.7-112-pseries-papr-hvpipe-Prevent-kernel-stack-memory.patch
(bsc#1012628 CVE-2026-46182 bsc#1267383).
- Update
patches.kernel.org/7.0.7-117-ip6_gre-Use-cached-t-net-in-ip6erspan_changelin.patch
(bsc#1012628 CVE-2026-46120 bsc#1267640).
- Update
patches.kernel.org/7.0.7-118-net-libwx-use-request_irq-for-VF-misc-interrupt.patch
(bsc#1012628 CVE-2026-46297 bsc#1267935).
- Update
patches.kernel.org/7.0.7-125-x86-efi-Fix-graceful-fault-handling-after-FPU-s.patch
(bsc#1012628 CVE-2026-46290 bsc#1267973).
- Update
patches.kernel.org/7.0.7-132-pmdomain-mediatek-fix-use-after-free-in-scpsys_.patch
(bsc#1012628 CVE-2026-46308 bsc#1267988).
- Update
patches.kernel.org/7.0.7-139-fbcon-Avoid-OOB-font-access-if-console-rotation.patch
(bsc#1012628 CVE-2026-46191 bsc#1267690).
- Update
patches.kernel.org/7.0.7-145-ibmveth-Disable-GSO-for-packets-with-small-MSS.patch
(bsc#1012628 CVE-2026-46273 bsc#1267651).
- Update
patches.kernel.org/7.0.7-150-spi-microchip-core-qspi-control-built-in-cs-man.patch
(bsc#1012628 CVE-2026-46148 bsc#1267718).
- Update
patches.kernel.org/7.0.7-158-spi-topcliff-pch-fix-use-after-free-on-unbind.patch
(bsc#1012628 CVE-2026-46301 bsc#1267983).
- Update
patches.kernel.org/7.0.7-165-clk-microchip-mpfs-ccc-fix-out-of-bounds-access.patch
(bsc#1012628 CVE-2026-46293 bsc#1267933).
- Update
patches.kernel.org/7.0.7-172-ASoC-qcom-q6apm-lpass-dai-Fix-multiple-graph-op.patch
(bsc#1012628 CVE-2026-46143 bsc#1267712).
- Update
patches.kernel.org/7.0.7-175-btrfs-fix-btrfs_ioctl_space_info-slot_count-TOC.patch
(bsc#1012628 CVE-2026-46159 bsc#1267652).
- Update
patches.kernel.org/7.0.7-178-btrfs-fix-missing-last_unlink_trans-update-when.patch
(bsc#1012628 CVE-2026-46160 bsc#1267624).
- Update
patches.kernel.org/7.0.7-179-dm-thin-fix-metadata-refcount-underflow.patch
(bsc#1012628 CVE-2026-46107 bsc#1267612).
- Update
patches.kernel.org/7.0.7-181-dm-fix-a-buffer-overflow-in-ioctl-processing.patch
(bsc#1012628 CVE-2026-46294 bsc#1267939).
- Update
patches.kernel.org/7.0.7-182-eventfs-Hold-eventfs_mutex-and-SRCU-when-remoun.patch
(bsc#1012628 CVE-2026-46106 bsc#1267613).
- Update
patches.kernel.org/7.0.7-186-dm-verity-fec-fix-reading-parity-bytes-split-ac.patch
(bsc#1012628 CVE-2026-46130 bsc#1267629).
- Update
patches.kernel.org/7.0.7-188-isofs-validate-Rock-Ridge-CE-continuation-exten.patch
(bsc#1012628 CVE-2026-46303 bsc#1267984).
- Update
patches.kernel.org/7.0.7-195-lib-scatterlist-fix-length-calculations-in-extr.patch
(bsc#1012628 CVE-2026-46289 bsc#1267966).
- Update
patches.kernel.org/7.0.7-197-libceph-Fix-slab-out-of-bounds-access-in-auth-m.patch
(bsc#1012628 CVE-2026-46119 bsc#1267628).
- Update
patches.kernel.org/7.0.7-200-nvmet-tcp-fix-race-between-ICReq-handling-and-q.patch
(bsc#1012628 CVE-2026-46135 bsc#1267373).
- Update
patches.kernel.org/7.0.7-201-nvmet-avoid-recursive-nvmet-wq-flush-in-nvmet_c.patch
(bsc#1012628 CVE-2026-46304 bsc#1267985).
- Update
patches.kernel.org/7.0.7-203-pmdomain-core-Fix-detach-procedure-for-virtual-.patch
(bsc#1012628 CVE-2026-46292 bsc#1267943).
- Update
patches.kernel.org/7.0.7-205-RDMA-hns-Fix-unlocked-call-to-hns_roce_qp_remov.patch
(bsc#1012628 CVE-2026-46112 bsc#1267582).
- Update
patches.kernel.org/7.0.7-209-scsi-mpt3sas-Limit-NVMe-request-size-to-2-MiB.patch
(bsc#1012628 CVE-2026-46105 bsc#1267372).
- Update
patches.kernel.org/7.0.7-210-smb-client-fix-out-of-bounds-read-in-smb2_compo.patch
(bsc#1012628 CVE-2026-46155 bsc#1267720).
- Update
patches.kernel.org/7.0.7-212-smb-client-use-kzalloc-to-zero-initialize-secur.patch
(bsc#1012628 CVE-2026-46139 bsc#1267681).
- Update
patches.kernel.org/7.0.7-214-KVM-x86-check-for-nEPT-nNPT-in-slow-flush-hyper.patch
(bsc#1012628 CVE-2026-46131 bsc#1267636).
- Update
patches.kernel.org/7.0.7-215-KVM-x86-Do-IRR-scan-in-__kvm_apic_update_irr-ev.patch
(bsc#1012628 CVE-2026-46295 bsc#1267931).
- Update
patches.kernel.org/7.0.7-233-RDMA-mana-Fix-mana_destroy_wq_obj-cleanup-in-ma.patch
(bsc#1012628 CVE-2026-46126 bsc#1267584).
- Update
patches.kernel.org/7.0.7-234-RDMA-mana-Remove-user-triggerable-WARN_ON-in-ma.patch
(bsc#1012628 CVE-2026-46117 bsc#1267375).
- Update
patches.kernel.org/7.0.7-235-RDMA-mana-Validate-rx_hash_key_len.patch
(bsc#1012628 CVE-2026-46145 bsc#1267715).
- Update
patches.kernel.org/7.0.7-237-RDMA-mlx4-Fix-resource-leak-on-error-in-mlx4_ib.patch
(bsc#1012628 CVE-2026-46178 bsc#1267493).
- Update
patches.kernel.org/7.0.7-260-mptcp-pm-ADD_ADDR-rtx-fix-potential-data-race.patch
(bsc#1012628 CVE-2026-46137 bsc#1267570).
- Update
patches.kernel.org/7.0.7-262-mptcp-pm-ADD_ADDR-rtx-free-sk-if-last.patch
(bsc#1012628 CVE-2026-46170 bsc#1267714).
- Update
patches.kernel.org/7.0.7-271-f2fs-fix-node_cnt-race-between-extent-node-dest.patch
(bsc#1012628 CVE-2026-46194 bsc#1267569).
- Update
patches.kernel.org/7.0.7-281-KVM-arm64-Fix-pin-leak-and-publication-ordering.patch
(bsc#1012628 CVE-2026-46147 bsc#1267689).
- Update
patches.kernel.org/7.0.7-282-LoongArch-Fix-potential-ADE-in-loongson_gpu_fix.patch
(bsc#1012628 CVE-2026-46156 bsc#1267385).
- Update
patches.kernel.org/7.0.7-296-hfsplus-fix-uninit-value-by-validating-catalog-.patch
(bsc#1012628 CVE-2026-46169 bsc#1267713).
- Update
patches.kernel.org/7.0.7-297-hfsplus-fix-held-lock-freed-on-hfsplus_fill_sup.patch
(bsc#1012628 CVE-2026-46299 bsc#1267920).
- Update
patches.kernel.org/7.0.7-299-8021q-delete-cleared-egress-QoS-mappings.patch
(bsc#1012628 CVE-2026-46153 bsc#1267574).
- Update
patches.kernel.org/7.0.7-301-crypto-caam-guard-HMAC-key-hex-dumps-in-hash_di.patch
(bsc#1012628 CVE-2026-46291 bsc#1267937).
- Update
patches.kernel.org/7.0.7-305-x86-CPU-AMD-Prevent-improper-isolation-of-share.patch
(bsc#1012628 CVE-2026-46174 bsc#1267384).
- Update
patches.kernel.org/7.0.9-001-HID-playstation-Clamp-num_touch_reports.patch
(bsc#1012628 CVE-2026-46232 bsc#1267669).
- Update
patches.kernel.org/7.0.9-002-HID-appletb-kbd-fix-UAF-in-inactivity-timer-cle.patch
(bsc#1012628 CVE-2026-46213 bsc#1267665).
- Update
patches.kernel.org/7.0.9-014-media-renesas-vsp1-Fix-NULL-pointer-deref-on-mo.patch
(bsc#1012628 CVE-2026-46310 bsc#1267934).
- Update
patches.kernel.org/7.0.9-035-media-i2c-ov5647-Fix-runtime-PM-refcount-leak-i.patch
(bsc#1012628 CVE-2026-46239 bsc#1267530).
- Update
patches.kernel.org/7.0.9-039-media-videobuf2-Set-vma_flags-in-vb2_dma_sg_mma.patch
(bsc#1012628 CVE-2026-46312 bsc#1267990).
- Update
patches.kernel.org/7.0.9-040-media-rockchip-rkcif-Add-missing-MUST_CONNECT-f.patch
(bsc#1012628 CVE-2026-46222 bsc#1267695).
- Update
patches.kernel.org/7.0.9-042-media-intel-ipu6-fix-error-pointer-dereference.patch
(bsc#1012628 CVE-2026-46313 bsc#1267991).
- Update
patches.kernel.org/7.0.9-053-media-saa7164-add-ioremap-return-checks-and-cle.patch
(bsc#1012628 CVE-2026-46235 bsc#1267702).
- Update
patches.kernel.org/7.0.9-076-media-iris-fix-use-after-free-of-fmt_src-during.patch
(bsc#1012628 CVE-2026-46210 bsc#1267692).
- Update
patches.kernel.org/7.0.9-090-spi-ch341-fix-devres-lifetime.patch
(bsc#1012628 CVE-2026-46228 bsc#1267705).
- Update
patches.kernel.org/7.0.9-092-spi-fsl-fix-controller-deregistration.patch
(bsc#1012628 CVE-2026-46226 bsc#1267673).
- Update
patches.kernel.org/7.0.9-099-spi-rspi-fix-controller-deregistration.patch
(bsc#1012628 CVE-2026-46225 bsc#1267627).
- Update
patches.kernel.org/7.0.9-112-spi-mpc52xx-fix-use-after-free-on-unbind.patch
(bsc#1012628 CVE-2026-46219 bsc#1267667).
- Update
patches.kernel.org/7.0.9-120-spi-cadence-quadspi-fix-unclocked-access-on-unb.patch
(bsc#1012628 CVE-2026-46203 bsc#1267620).
- Update
patches.kernel.org/7.0.9-121-drm-msm-gem-fix-error-handling-in-msm_ioctl_gem.patch
(bsc#1012628 CVE-2026-46211 bsc#1267380).
- Update
patches.kernel.org/7.0.9-125-drm-v3d-Reject-empty-multisync-extension-to-pre.patch
(bsc#1012628 CVE-2026-46314 bsc#1267992).
- Update
patches.kernel.org/7.0.9-127-drm-amdkfd-Clear-VRAM-on-allocation-to-prevent-.patch
(bsc#1012628 CVE-2026-46229 bsc#1267567).
- Update
patches.kernel.org/7.0.9-135-drm-amdgpu-Add-bounds-checking-to-ib_-get-set-_.patch
(bsc#1012628 CVE-2026-46218 bsc#1267632).
- Update
patches.kernel.org/7.0.9-136-drm-amdgpu-vcn4-Prevent-OOB-reads-when-parsing-.patch
(bsc#1012628 CVE-2026-46204 bsc#1267661).
- Update
patches.kernel.org/7.0.9-138-drm-amdgpu-vcn4-Prevent-OOB-reads-when-parsing-.patch
(bsc#1012628 CVE-2026-46199 bsc#1267638).
- Update
patches.kernel.org/7.0.9-139-drm-amdgpu-vcn3-Prevent-OOB-reads-when-parsing-.patch
(bsc#1012628 CVE-2026-46230 bsc#1267623).
- Update
patches.kernel.org/7.0.9-141-drm-gem-Fix-inconsistent-plane-dimension-calcul.patch
(bsc#1012628 CVE-2026-46209 bsc#1267663).
- Update
patches.kernel.org/7.0.9-143-drm-amdkfd-validate-SVM-ioctl-nattr-against-buf.patch
(bsc#1012628 CVE-2026-46197 bsc#1267381).
- Update
patches.kernel.org/7.0.9-150-drm-xe-uapi-Reject-coh_none-PAT-index-for-CPU-c.patch
(bsc#1012628 CVE-2026-46309 bsc#1267989).
- Update
patches.kernel.org/7.0.9-155-drm-amdgpu-userq-fix-access-to-stale-wptr-mappi.patch
(bsc#1012628 CVE-2026-46311 bsc#1267949).
- Update
patches.kernel.org/7.0.9-162-drm-amdgpu-sdma4-replace-BUG_ON-with-WARN_ON-in.patch
(bsc#1012628 CVE-2026-46220 bsc#1267704).
- Update
patches.kernel.org/7.0.9-169-sctp-revalidate-list-cursor-after-sctp_sendmsg_.patch
(bsc#1012628 CVE-2026-46227 bsc#1267697).
- Update
patches.kernel.org/7.0.9-175-batman-adv-bla-prevent-use-after-free-when-dele.patch
(bsc#1012628 CVE-2026-46212 bsc#1267693).
- Update
patches.kernel.org/7.0.9-176-batman-adv-bla-only-purge-non-released-claims.patch
(bsc#1012628 CVE-2026-46233 bsc#1267701).
- Update
patches.kernel.org/7.0.9-177-batman-adv-bla-put-backbone-reference-on-failed.patch
(bsc#1012628 CVE-2026-46231 bsc#1267565).
- Update
patches.kernel.org/7.0.9-184-EDAC-versalnet-Fix-device-name-memory-leak.patch
(bsc#1012628 CVE-2026-46221 bsc#1267523).
- Update
patches.kernel.org/7.0.9-188-cgroup-Defer-css-percpu_ref-kill-on-rmdir-until.patch
(bsc#1012628 CVE-2026-46223 bsc#1267699).
- Update
patches.kernel.org/7.0.9-194-vsock-virtio-fix-empty-payload-in-tap-skb-for-n.patch
(bsc#1012628 CVE-2026-46207 bsc#1267691).
- Update
patches.kernel.org/7.0.9-195-vsock-virtio-fix-accept-queue-count-leak-on-tra.patch
(bsc#1012628 CVE-2026-46214 bsc#1267717).
- Update
patches.kernel.org/7.0.9-197-drm-amdgpu-vcn4-Avoid-overflow-on-msg-bound-che.patch
(bsc#1012628 CVE-2026-46217 bsc#1267655).
suse-add-cves
- commit 8beab0b
* Wed Jun 10 2026 jslaby@suse.cz
- drm/gem: Try to fix change_handle ioctl, attempt 4 (git-fixes).
- commit 41887ca
* Tue Jun 09 2026 jslaby@suse.cz
- i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl
(git-fixes).
- commit e3cc0a5
* Mon Jun 08 2026 mkubecek@suse.cz
- update to 7.1-rc7
- commit f7dda10
* Fri Jun 05 2026 msuchanek@suse.de
- packaging: Add nvidia kernel description
- commit 5f2699f
* Wed Jun 03 2026 tiwai@suse.de
- rpm/mkspec: Conditionally set Rust BuildReqs (bsc#1258538)
This is a further optimization of kernel packaging rust-enablement.
Add the check of CONFIG_RUST at creating the spec for each kernel
flavor, and set BuildRequires conditionally only for archs that have
CONFIG_RUST. This avoids the unnecessary dependency chains due to
unused rust.
The main knob ENABLE_RUST is still needed because otherwise we can't
know whether to pass the dummy-tools or not at processing
run_oldconfig.
- commit ccf4b93
* Wed Jun 03 2026 tiwai@suse.de
- rpm/check-for-config-changes: ignore Rust-related configs (bsc#1258538)
Those configs may be dynamically changed at the build time
- commit 5251980
* Wed Jun 03 2026 tiwai@suse.de
- rpm: Add BuildRequires for Rust enablement (bsc#1258538)
Update mkspec and template to generate the spec files with
BuildRequires of Rust-related packages when ENABLE_RUST=Yes is set in
rpm/config.sh.
- commit d0f276f
* Wed Jun 03 2026 rgoldwyn@suse.com
- ima: return error early if file xattr cannot be changed (bsc#1261041).
(cherry picked from commit 5d98aa3da261a44f676d60ae2e11bfbf8f691928)
- ima: return error early if file xattr cannot be changed (bsc#1261041).
- commit c8ca8cf
* Tue Jun 02 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.0.10-0148-bpf-fix-end-of-list-detection-in-cgroup_stora.patch
(bsc#1012628 CVE-2026-45838 bsc#1266396).
- Update
patches.kernel.org/7.0.10-0155-bpf-reject-negative-CO-RE-accessor-indices-in.patch
(bsc#1012628 CVE-2026-45839 bsc#1266399).
- Update
patches.kernel.org/7.0.10-0802-openvswitch-cap-upcall-PID-array-size-and-pre.patch
(bsc#1012628 CVE-2026-45840 bsc#1266397).
- Update
patches.kernel.org/7.0.10-0805-netfilter-nfnetlink_osf-fix-divide-by-zero-in.patch
(bsc#1012628 CVE-2026-45841 bsc#1266390).
- Update
patches.kernel.org/7.0.10-0812-slip-reject-VJ-receive-packets-on-instances-w.patch
(bsc#1012628 CVE-2026-45842 bsc#1266400).
- Update
patches.kernel.org/7.0.10-0813-slip-bound-decode-reads-against-the-compresse.patch
(bsc#1012628 CVE-2026-45843 bsc#1266395).
- Update
patches.kernel.org/7.0.10-0860-eventpoll-fix-ep_remove-struct-eventpoll-stru.patch
(bsc#1012628 CVE-2026-46242).
- Update
patches.kernel.org/7.0.10-0888-netfilter-arp_tables-fix-IEEE1394-ARP-payload.patch
(bsc#1012628 CVE-2026-45844 bsc#1266392).
- Update
patches.kernel.org/7.0.10-0939-net-sched-taprio-fix-NULL-pointer-dereference.patch
(bsc#1012628 CVE-2026-45845 bsc#1266393).
- Update
patches.kernel.org/7.0.10-0981-bareudp-fix-NULL-pointer-dereference-in-bareu.patch
(bsc#1012628 CVE-2026-45846 bsc#1266394).
- Update
patches.kernel.org/7.0.10-1139-net-rds-reset-op_nents-when-zerocopy-page-pin.patch
(bsc#1012628 CVE-2026-43494 bsc#1265626).
- Update
patches.kernel.org/7.0.10-1142-net-skbuff-preserve-shared-frag-marker-during.patch
(bsc#1012628 CVE-2026-46300 bsc#1265209).
- Update
patches.kernel.org/7.0.10-1143-net-skbuff-propagate-shared-frag-marker-throu.patch
(bsc#1012628 CVE-2026-43503 bsc#1266229).
- Update
patches.kernel.org/7.0.11-004-smb-client-reject-userspace-cifs.spnego-descri.patch
(bsc#1012628 CVE-2026-46243).
- Update
patches.kernel.org/7.0.4-001-ALSA-usb-audio-stop-parsing-UAC2-rates-at-MAX_N.patch
(bsc#1012628 CVE-2026-46018 bsc#1266751).
- Update
patches.kernel.org/7.0.4-008-LoongArch-Add-spectre-boundry-for-syscall-dispa.patch
(bsc#1012628 CVE-2026-45993).
- Update
patches.kernel.org/7.0.4-009-drm-nouveau-fix-u32-overflow-in-pushbuf-reloc-b.patch
(bsc#1012628 CVE-2026-46006).
- Update
patches.kernel.org/7.0.4-012-greybus-gb-beagleplay-fix-sleep-in-atomic-conte.patch
(bsc#1012628 CVE-2026-46041).
- Update
patches.kernel.org/7.0.4-013-misc-ibmasm-fix-OOB-MMIO-read-in-ibmasm_handle_.patch
(bsc#1012628 CVE-2026-46022).
- Update
patches.kernel.org/7.0.4-014-ibmasm-fix-OOB-reads-in-command_file_write-due-.patch
(bsc#1012628 CVE-2026-45994).
- Update
patches.kernel.org/7.0.4-015-ibmasm-fix-heap-over-read-in-ibmasm_send_i2o_me.patch
(bsc#1012628 CVE-2026-46064).
- Update
patches.kernel.org/7.0.4-022-fs-afs-revert-mmap_prepare-change.patch
(bsc#1012628 CVE-2026-46100).
- Update
patches.kernel.org/7.0.4-029-mm-fix-deferred-split-queue-races-during-migrat.patch
(bsc#1012628 CVE-2026-46017 bsc#1267241).
- Update
patches.kernel.org/7.0.4-030-ocfs2-split-transactions-in-dio-completion-to-a.patch
(bsc#1012628 CVE-2026-46080).
- Update
patches.kernel.org/7.0.4-031-Input-edt-ft5x06-fix-use-after-free-in-debugfs-.patch
(bsc#1012628 CVE-2026-46097).
- Update
patches.kernel.org/7.0.4-032-zram-do-not-forget-to-endio-for-partial-discard.patch
(bsc#1012628 CVE-2026-46089).
- Update
patches.kernel.org/7.0.4-033-wifi-rtw88-check-for-PCI-upstream-bridge-existe.patch
(bsc#1012628 CVE-2026-46092).
- Update
patches.kernel.org/7.0.4-034-wifi-mwifiex-fix-use-after-free-in-mwifiex_adap.patch
(bsc#1012628 CVE-2026-46069).
- Update
patches.kernel.org/7.0.4-038-vfio-cdx-Serialize-VFIO_DEVICE_SET_IRQS-with-a-.patch
(bsc#1012628 CVE-2026-46036).
- Update
patches.kernel.org/7.0.4-039-vfio-cdx-Fix-NULL-pointer-dereference-in-interr.patch
(bsc#1012628 CVE-2026-46034 bsc#1266757).
- Update
patches.kernel.org/7.0.4-041-thermal-core-Fix-thermal-zone-governor-cleanup-.patch
(bsc#1012628 CVE-2026-46021 bsc#1267220).
- Update
patches.kernel.org/7.0.4-042-spi-imx-fix-use-after-free-on-unbind.patch
(bsc#1012628 CVE-2026-45996).
- Update
patches.kernel.org/7.0.4-043-spi-ch341-fix-memory-leaks-on-probe-failures.patch
(bsc#1012628 CVE-2026-46074).
- Update
patches.kernel.org/7.0.4-044-crypto-algif_aead-snapshot-IV-for-async-AEAD-re.patch
(bsc#1012628 CVE-2026-46028).
- Update
patches.kernel.org/7.0.4-048-of-unittest-fix-use-after-free-in-testdrv_probe.patch
(bsc#1012628 CVE-2026-45989 bsc#1266676).
- Update
patches.kernel.org/7.0.4-049-hwmon-powerz-Fix-missing-usb_kill_urb-on-signal.patch
(bsc#1012628 CVE-2026-46073).
- Update
patches.kernel.org/7.0.4-050-EDAC-versalnet-Fix-device_node-leak-in-mc_probe.patch
(bsc#1012628 CVE-2026-46030).
- Update
patches.kernel.org/7.0.4-052-media-amphion-Fix-race-between-m2m-job_abort-an.patch
(bsc#1012628 CVE-2026-46058 bsc#1266677).
- Update
patches.kernel.org/7.0.4-053-ALSA-control-Validate-buf_len-before-strnlen-in.patch
(bsc#1012628 CVE-2026-46088 bsc#1267226).
- Update
patches.kernel.org/7.0.4-054-net-caif-clear-client-service-pointer-on-teardo.patch
(bsc#1012628 CVE-2026-46098).
- Update
patches.kernel.org/7.0.4-055-net-strparser-fix-skb_head-leak-in-strp_abort_s.patch
(bsc#1012628 CVE-2026-46102).
- Update
patches.kernel.org/7.0.4-056-media-mtk-jpeg-fix-use-after-free-in-release-pa.patch
(bsc#1012628 CVE-2026-46011).
- Update
patches.kernel.org/7.0.4-058-PCI-endpoint-pci-epf-ntb-Remove-duplicate-resou.patch
(bsc#1012628 CVE-2026-46009 bsc#1266684).
- Update
patches.kernel.org/7.0.4-064-net-qrtr-ns-Fix-use-after-free-in-driver-remove.patch
(bsc#1012628 CVE-2026-46047 bsc#1267229).
- Update
patches.kernel.org/7.0.4-065-ext2-reject-inodes-with-zero-i_nlink-and-valid-.patch
(bsc#1012628 CVE-2026-46002).
- Update
patches.kernel.org/7.0.4-070-ALSA-ctxfi-Add-fallback-to-default-RSR-for-S-PD.patch
(bsc#1012628 CVE-2026-46049).
- Update
patches.kernel.org/7.0.4-072-erofs-fix-the-out-of-bounds-nameoff-handling-fo.patch
(bsc#1012628 CVE-2026-46078).
- Update
patches.kernel.org/7.0.4-073-ipmi-ssif-Clean-up-kthread-on-errors.patch
(bsc#1012628 CVE-2026-46044).
- Update
patches.kernel.org/7.0.4-074-jbd2-fix-deadlock-in-jbd2_journal_cancel_revoke.patch
(bsc#1012628 CVE-2026-46061 bsc#1266454).
- Update
patches.kernel.org/7.0.4-076-md-raid10-fix-deadlock-with-check-operation-and.patch
(bsc#1012628 CVE-2026-46050 bsc#1266686).
- Update
patches.kernel.org/7.0.4-077-media-rc-igorplugusb-heed-coherency-rules.patch
(bsc#1012628 CVE-2026-46091 bsc#1267238).
- Update
patches.kernel.org/7.0.4-082-mm-damon-core-fix-damon_call-vs-kdamond_fn-exit.patch
(bsc#1012628 CVE-2026-46025).
- Update
patches.kernel.org/7.0.4-083-mm-damon-core-fix-damos_walk-vs-kdamond_fn-exit.patch
(bsc#1012628 CVE-2026-46008 bsc#1266689).
- Update
patches.kernel.org/7.0.4-093-RDMA-mana_ib-Disable-RX-steering-on-RSS-QP-dest.patch
(bsc#1012628 CVE-2026-46084 bsc#1266758).
- Update
patches.kernel.org/7.0.4-094-remoteproc-xlnx-Only-access-buffer-information-.patch
(bsc#1012628 CVE-2026-46016 bsc#1266729).
- Update
patches.kernel.org/7.0.4-098-landlock-Fix-LOG_SUBDOMAINS_OFF-inheritance-acr.patch
(bsc#1012628 CVE-2026-46057 bsc#1266683).
- Update
patches.kernel.org/7.0.4-104-rbd-fix-null-ptr-deref-when-device_add_disk-fai.patch
(bsc#1012628 CVE-2026-46079 bsc#1266452).
- Update
patches.kernel.org/7.0.4-112-io_uring-zcrx-fix-user_struct-uaf.patch
(bsc#1012628 CVE-2026-45995 bsc#1267242).
- Update
patches.kernel.org/7.0.4-119-ALSA-caiaq-Handle-probe-errors-properly.patch
(bsc#1012628 CVE-2026-46004 bsc#1267222).
- Update
patches.kernel.org/7.0.4-126-rxrpc-Fix-potential-UAF-after-skb_unshare-failu.patch
(bsc#1012628 CVE-2026-45998).
- Update
patches.kernel.org/7.0.4-127-rxrpc-Fix-memory-leaks-in-rxkad_verify_response.patch
(bsc#1012628 CVE-2026-46012).
- Update
patches.kernel.org/7.0.4-128-rxrpc-Fix-conn-level-packet-handling-to-unshare.patch
(bsc#1012628 CVE-2026-46000).
- Update
patches.kernel.org/7.0.4-129-rxrpc-Fix-rxkad-crypto-unalignment-handling.patch
(bsc#1012628 CVE-2026-46085 bsc#1266724).
- Update
patches.kernel.org/7.0.4-130-rxrpc-Fix-error-handling-in-rxgk_extract_token.patch
(bsc#1012628 CVE-2026-46010 bsc#1266760).
- Update
patches.kernel.org/7.0.4-131-rxrpc-Fix-re-decryption-of-RESPONSE-packets.patch
(bsc#1012628 CVE-2026-45988 bsc#1266455).
- Update
patches.kernel.org/7.0.4-138-net-qrtr-ns-Limit-the-maximum-number-of-lookups.patch
(bsc#1012628 CVE-2026-46026 bsc#1266876).
- Update
patches.kernel.org/7.0.4-139-net-qrtr-ns-Free-the-node-during-ctrl_cmd_bye.patch
(bsc#1012628 CVE-2026-46038 bsc#1266695).
- Update
patches.kernel.org/7.0.4-140-net-qrtr-ns-Limit-the-total-number-of-nodes.patch
(bsc#1012628 CVE-2026-46003 bsc#1267210).
- Update
patches.kernel.org/7.0.4-141-net-rds-fix-MR-cleanup-on-copy-error.patch
(bsc#1012628 CVE-2026-46053).
- Update
patches.kernel.org/7.0.4-143-net-smc-avoid-early-lgr-access-in-smc_clc_wait_.patch
(bsc#1012628 CVE-2026-46027 bsc#1266744).
- Update
patches.kernel.org/7.0.4-144-net-ks8851-Reinstate-disabling-of-BHs-around-IR.patch
(bsc#1012628 CVE-2026-46031).
- Update
patches.kernel.org/7.0.4-145-net-bridge-use-a-stable-FDB-dst-snapshot-in-RCU.patch
(bsc#1012628 CVE-2026-46086).
- Update
patches.kernel.org/7.0.4-150-slub-fix-data-loss-and-overflow-in-krealloc.patch
(bsc#1012628 CVE-2026-45990 bsc#1267225).
- Update
patches.kernel.org/7.0.4-152-RDMA-rxe-Validate-pad-and-ICRC-before-payload_s.patch
(bsc#1012628 CVE-2026-46043 bsc#1266901).
- Update
patches.kernel.org/7.0.4-154-ipv4-icmp-validate-reply-type-before-using-icmp.patch
(bsc#1012628 CVE-2026-46037).
- Update
patches.kernel.org/7.0.4-155-libceph-Prevent-potential-null-ptr-deref-in-cep.patch
(bsc#1012628 CVE-2026-46024 bsc#1267218).
- Update
patches.kernel.org/7.0.4-156-spi-fix-resource-leaks-on-device-setup-failure.patch
(bsc#1012628 CVE-2026-46083 bsc#1266696).
- Update
patches.kernel.org/7.0.4-157-apparmor-Fix-string-overrun-due-to-missing-term.patch
(bsc#1012628 CVE-2026-46055 bsc#1266682).
- Update
patches.kernel.org/7.0.4-162-fbdev-defio-Disconnect-deferred-I-O-from-the-li.patch
(bsc#1012628 CVE-2026-46065).
- Update
patches.kernel.org/7.0.4-165-hwmon-powerz-Avoid-cacheline-sharing-for-DMA-bu.patch
(bsc#1012628 CVE-2026-46007).
- Update
patches.kernel.org/7.0.4-170-selinux-fix-overlayfs-mmap-and-mprotect-access-.patch
(bsc#1012628 CVE-2026-46054).
- Update
patches.kernel.org/7.0.4-171-hwmon-pt5161l-Fix-bugs-in-pt5161l_read_block_da.patch
(bsc#1012628 CVE-2026-46001 bsc#1266736).
- Update
patches.kernel.org/7.0.4-176-crypto-qat-fix-IRQ-cleanup-on-6xxx-probe-failur.patch
(bsc#1012628 CVE-2026-46060).
- Update
patches.kernel.org/7.0.4-178-xfs-fix-a-resource-leak-in-xfs_alloc_buftarg.patch
(bsc#1012628 CVE-2026-46005).
- Update
patches.kernel.org/7.0.4-184-tpm2-sessions-Fix-missing-tpm_buf_destroy-in-tp.patch
(bsc#1012628 CVE-2026-46096).
- Update
patches.kernel.org/7.0.4-190-mm-vmalloc-take-vmap_purge_lock-in-shrinker.patch
(bsc#1012628 CVE-2026-46093).
- Update
patches.kernel.org/7.0.4-191-mm-memfd_luo-fix-physical-address-conversion-in.patch
(bsc#1012628 CVE-2026-46013).
- Update
patches.kernel.org/7.0.4-192-mm-mempolicy-fix-memory-leaks-in-weighted_inter.patch
(bsc#1012628 CVE-2026-46042).
- Update
patches.kernel.org/7.0.4-193-mm-damon-stat-fix-memory-leak-on-damon_start-fa.patch
(bsc#1012628 CVE-2026-46087).
- Update
patches.kernel.org/7.0.4-194-mm-damon-core-validate-damos_quota_goal-nid-for.patch
(bsc#1012628 CVE-2026-46020).
- Update
patches.kernel.org/7.0.4-195-mm-damon-core-validate-damos_quota_goal-nid-for.patch
(bsc#1012628 CVE-2026-46067).
- Update
patches.kernel.org/7.0.4-204-KVM-nSVM-Sync-interrupt-shadow-to-cached-vmcb12.patch
(bsc#1012628 CVE-2026-45987 bsc#1267213).
- Update
patches.kernel.org/7.0.4-205-KVM-SVM-Inject-UD-for-INVLPGA-if-EFER.SVME-0.patch
(bsc#1012628 CVE-2026-46082).
- Update
patches.kernel.org/7.0.4-208-KVM-nSVM-Always-use-NextRIP-as-vmcb02-s-NextRIP.patch
(bsc#1012628 CVE-2026-46059).
- Update
patches.kernel.org/7.0.4-212-KVM-nSVM-Avoid-clearing-VMCB_LBR-in-vmcb12.patch
(bsc#1012628 CVE-2026-46071).
- Update
patches.kernel.org/7.0.4-215-KVM-SVM-Add-missing-save-restore-handling-of-LB.patch
(bsc#1012628 CVE-2026-46014).
- Update
patches.kernel.org/7.0.4-219-KVM-nSVM-Triple-fault-if-restore-host-CR3-fails.patch
(bsc#1012628 CVE-2026-46032).
- Update
patches.kernel.org/7.0.4-227-KVM-nSVM-Raise-UD-if-unhandled-VMMCALL-isn-t-in.patch
(bsc#1012628 CVE-2026-46076).
- Update
patches.kernel.org/7.0.4-231-ext4-fix-bounds-check-in-check_xattrs-to-preven.patch
(bsc#1012628 CVE-2026-46094 bsc#1266927).
- Update
patches.kernel.org/7.0.4-232-ext4-fix-missing-brelse-in-ext4_xattr_inode_dec.patch
(bsc#1012628 CVE-2026-46046 bsc#1266726).
- Update
patches.kernel.org/7.0.4-233-udf-fix-partition-descriptor-append-bookkeeping.patch
(bsc#1012628 CVE-2026-45991 bsc#1267227).
- Update
patches.kernel.org/7.0.4-237-md-md-llbitmap-skip-reading-rdevs-that-are-not-.patch
(bsc#1012628 CVE-2026-46045).
- Update
patches.kernel.org/7.0.4-238-md-md-llbitmap-raise-barrier-before-state-machi.patch
(bsc#1012628 CVE-2026-46095).
- Update
patches.kernel.org/7.0.4-239-md-raid5-fix-soft-lockup-in-retry_aligned_read.patch
(bsc#1012628 CVE-2026-46051).
- Update
patches.kernel.org/7.0.4-240-md-raid5-validate-payload-size-before-accessing.patch
(bsc#1012628 CVE-2026-46070).
- Update
patches.kernel.org/7.0.4-244-inotify-fix-watch-count-leak-when-fsnotify_add_.patch
(bsc#1012628 CVE-2026-46040).
- Update
patches.kernel.org/7.0.4-246-x86-shstk-Prevent-deadlock-during-shstk-sigretu.patch
(bsc#1012628 CVE-2026-46063 bsc#1267228).
- Update
patches.kernel.org/7.0.4-248-tcp-call-sk_data_ready-after-listener-migration.patch
(bsc#1012628 CVE-2026-46015).
- Update
patches.kernel.org/7.0.4-254-Bluetooth-hci_event-fix-potential-UAF-in-SSP-pa.patch
(bsc#1012628 CVE-2026-46056).
- Update
patches.kernel.org/7.0.4-256-can-ucan-fix-devres-lifetime.patch
(bsc#1012628 CVE-2026-46103).
- Update
patches.kernel.org/7.0.4-257-crypto-acomp-fix-wrong-pointer-stored-by-acomp_.patch
(bsc#1012628 CVE-2026-46081 bsc#1266453).
- Update
patches.kernel.org/7.0.4-259-crypto-atmel-aes-Fix-3-page-memory-leak-in-atme.patch
(bsc#1012628 CVE-2026-46019 bsc#1266732).
- Update
patches.kernel.org/7.0.4-262-crypto-ccree-fix-a-memory-leak-in-cc_mac_digest.patch
(bsc#1012628 CVE-2026-45986 bsc#1266739).
- Update
patches.kernel.org/7.0.4-263-crypto-atmel-tdes-fix-DMA-sync-direction.patch
(bsc#1012628 CVE-2026-46077).
- Update
patches.kernel.org/7.0.4-265-crypto-atmel-sha204a-Fix-potential-UAF-and-memo.patch
(bsc#1012628 CVE-2026-46075).
- Update
patches.kernel.org/7.0.4-267-crypto-nx-fix-bounce-buffer-leaks-in-nx842_cryp.patch
(bsc#1012628 CVE-2026-46068).
- Update
patches.kernel.org/7.0.4-270-dm-mirror-fix-integer-overflow-in-create_dirty_.patch
(bsc#1012628 CVE-2026-46023).
- Update
patches.kernel.org/7.0.4-271-erofs-fix-unsigned-underflow-in-z_erofs_lz4_han.patch
(bsc#1012628 CVE-2026-45999 bsc#1266750).
- Update
patches.kernel.org/7.0.4-272-ceph-fix-num_ops-off-by-one-when-crypto-allocat.patch
(bsc#1012628 CVE-2026-46066).
- Update
patches.kernel.org/7.0.4-273-ceph-only-d_add-negative-dentries-when-they-are.patch
(bsc#1012628 CVE-2026-46052).
- Update
patches.kernel.org/7.0.4-278-ntfs3-add-buffer-boundary-checks-to-run_unpack.patch
(bsc#1012628 CVE-2026-46072).
- Update
patches.kernel.org/7.0.4-279-ntfs3-fix-integer-overflow-in-run_unpack-volume.patch
(bsc#1012628 CVE-2026-46062).
- Update
patches.kernel.org/7.0.4-281-rxgk-Fix-potential-integer-overflow-in-length-c.patch
(bsc#1012628 CVE-2026-46039).
- Update
patches.kernel.org/7.0.4-283-scsi-sd-fix-missing-put_disk-when-device_add-di.patch
(bsc#1012628 CVE-2026-45997 bsc#1266740).
- Update
patches.kernel.org/7.0.4-294-crypto-authencesn-reject-short-ahash-digests-du.patch
(bsc#1012628 CVE-2026-46033 bsc#1266692).
- Update
patches.kernel.org/7.0.4-296-ALSA-caiaq-Fix-potentially-leftover-ep1_in_urb-.patch
(bsc#1012628 CVE-2026-45992 bsc#1267231).
- Update
patches.kernel.org/7.0.4-301-ALSA-caiaq-fix-usb_dev-refcount-leak-on-probe-f.patch
(bsc#1012628 CVE-2026-46048).
- Update
patches.kernel.org/7.0.4-302-ALSA-aloop-Fix-peer-runtime-UAF-during-format-c.patch
(bsc#1012628 CVE-2026-46090).
- Update
patches.kernel.org/7.0.4-304-mm-page_alloc-return-NULL-early-from-alloc_froz.patch
(bsc#1012628 CVE-2026-46035 bsc#1266756).
- Update
patches.kernel.org/7.0.4-305-mm-slab-return-NULL-early-from-kmalloc_nolock-i.patch
(bsc#1012628 CVE-2026-46029).
- Update
patches.kernel.org/7.0.4-306-net-ipv6-fix-NOREF-dst-use-in-seg6-and-rpl-lwtu.patch
(bsc#1012628 CVE-2026-46099 bsc#1266722).
- Update
patches.kernel.org/7.0.4-307-netfilter-reject-zero-shift-in-nft_bitwise.patch
(bsc#1012628 CVE-2026-46101 bsc#1266878).
- Update
patches.kernel.org/7.0.7-001-scsi-target-configfs-Bound-snprintf-return-in-t.patch
(bsc#1012628 CVE-2026-46149).
- Update
patches.kernel.org/7.0.7-002-ipmi-Add-limits-to-event-and-receive-message-re.patch
(bsc#1012628 CVE-2026-46177).
- Update
patches.kernel.org/7.0.7-003-ipmi-Check-event-message-buffer-response-for-ba.patch
(bsc#1012628 CVE-2026-46128).
- Update
patches.kernel.org/7.0.7-004-ipmi-si-Return-state-to-normal-if-message-alloc.patch
(bsc#1012628 CVE-2026-46108).
- Update
patches.kernel.org/7.0.7-011-tracepoint-balance-regfunc-on-func_add-failure-.patch
(bsc#1012628 CVE-2026-46196 bsc#1266848).
- Update
patches.kernel.org/7.0.7-013-ASoC-SOF-Don-t-allow-pointer-operations-on-unco.patch
(bsc#1012628 CVE-2026-46179).
- Update
patches.kernel.org/7.0.7-017-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
(bsc#1012628 CVE-2026-46113 bsc#1266969).
- Update
patches.kernel.org/7.0.7-021-exit-prevent-preemption-of-oopsing-TASK_DEAD-ta.patch
(bsc#1012628 CVE-2026-46173).
- Update
patches.kernel.org/7.0.7-024-wifi-mt76-mt7921-fix-a-potential-clc-buffer-len.patch
(bsc#1012628 CVE-2026-46136 bsc#1266831).
- Update
patches.kernel.org/7.0.7-026-wifi-b43legacy-enforce-bounds-check-on-firmware.patch
(bsc#1012628 CVE-2026-46163 bsc#1266863).
- Update
patches.kernel.org/7.0.7-027-wifi-mac80211-drop-stray-static-from-fast-RX-rx.patch
(bsc#1012628 CVE-2026-46152 bsc#1266855).
- Update
patches.kernel.org/7.0.7-028-wifi-rsi-fix-kthread-lifetime-race-between-self.patch
(bsc#1012628 CVE-2026-46187 bsc#1266842).
- Update
patches.kernel.org/7.0.7-029-wifi-mac80211-use-safe-list-iteration-in-radar-.patch
(bsc#1012628 CVE-2026-46166 bsc#1266839).
- Update
patches.kernel.org/7.0.7-031-wifi-mac80211-remove-station-if-connection-prep.patch
(bsc#1012628 CVE-2026-46125 bsc#1266879).
- Update
patches.kernel.org/7.0.7-032-wifi-b43-enforce-bounds-check-on-firmware-key-i.patch
(bsc#1012628 CVE-2026-46122).
- Update
patches.kernel.org/7.0.7-033-wifi-brcmfmac-Fix-potential-use-after-free-issu.patch
(bsc#1012628 CVE-2026-46180 bsc#1266813).
- Update
patches.kernel.org/7.0.7-034-usb-usblp-fix-heap-leak-in-IEEE-1284-device-ID-.patch
(bsc#1012628 CVE-2026-46151).
- Update
patches.kernel.org/7.0.7-035-usb-usblp-fix-uninitialized-heap-leak-via-LPGET.patch
(bsc#1012628 CVE-2026-46167 bsc#1266832).
- Update
patches.kernel.org/7.0.7-037-ALSA-usb-audio-Avoid-potential-endless-loop-in-.patch
(bsc#1012628 CVE-2026-46146).
- Update
patches.kernel.org/7.0.7-042-usb-ulpi-fix-memory-leak-on-ulpi_register-error.patch
(bsc#1012628 CVE-2026-46109 bsc#1266850).
- Update
patches.kernel.org/7.0.7-045-ALSA-pcm-oss-Fix-data-race-at-accessing-runtime.patch
(bsc#1012628 CVE-2026-46157).
- Update
patches.kernel.org/7.0.7-052-sched_ext-Read-scx_root-under-scx_cgroup_ops_rw.patch
(bsc#1012628 CVE-2026-46154 bsc#1266812).
- Update
patches.kernel.org/7.0.7-054-xfrm-defensively-unhash-xfrm_state-lists-in-__x.patch
(bsc#1012628 CVE-2026-46116).
- Update
patches.kernel.org/7.0.7-055-ipv6-xfrm6-release-dst-on-error-in-xfrm6_rcv_en.patch
(bsc#1012628 CVE-2026-46172 bsc#1266903).
- Update
patches.kernel.org/7.0.7-056-xfrm-ah-account-for-ESN-high-bits-in-async-call.patch
(bsc#1012628 CVE-2026-46193).
- Update
patches.kernel.org/7.0.7-058-selinux-use-sk-blob-accessor-in-socket-permissi.patch
(bsc#1012628 CVE-2026-46104).
- Update
patches.kernel.org/7.0.7-068-Bluetooth-virtio_bt-clamp-rx-length-before-skb_.patch
(bsc#1012628 CVE-2026-46123).
- Update
patches.kernel.org/7.0.7-069-Bluetooth-virtio_bt-validate-rx-pkt_type-header.patch
(bsc#1012628 CVE-2026-46186 bsc#1266917).
- Update
patches.kernel.org/7.0.7-070-Bluetooth-btmtk-validate-WMT-event-SKB-length-b.patch
(bsc#1012628 CVE-2026-46140).
- Update
patches.kernel.org/7.0.7-071-Bluetooth-hci_conn-fix-potential-UAF-in-create_.patch
(bsc#1012628 CVE-2026-46111).
- Update
patches.kernel.org/7.0.7-072-Bluetooth-hci_event-Fix-OOB-read-and-infinite-l.patch
(bsc#1012628 CVE-2026-46138).
- Update
patches.kernel.org/7.0.7-073-Bluetooth-L2CAP-Fix-null-ptr-deref-in-l2cap_soc.patch
(bsc#1012628 CVE-2026-45835 bsc#1266411).
- Update
patches.kernel.org/7.0.7-074-Bluetooth-L2CAP-Fix-null-ptr-deref-in-l2cap_soc.patch
(bsc#1012628 CVE-2026-45834 bsc#1266412).
- Update
patches.kernel.org/7.0.7-075-Bluetooth-L2CAP-Fix-null-ptr-deref-in-l2cap_soc.patch
(bsc#1012628 CVE-2026-45836 bsc#1266410).
- Update
patches.kernel.org/7.0.7-091-fanotify-fix-false-positive-on-permission-event.patch
(bsc#1012628 CVE-2026-46150).
- Update
patches.kernel.org/7.0.7-093-mtd-spi-nor-debugfs-fix-out-of-bounds-read-in-s.patch
(bsc#1012628 CVE-2026-46190 bsc#1266934).
- Update
patches.kernel.org/7.0.7-098-net-rtnetlink-zero-ifla_vf_broadcast-to-avoid-s.patch
(bsc#1012628 CVE-2026-46132).
- Update
patches.kernel.org/7.0.7-110-sound-ua101-fix-division-by-zero-at-probe.patch
(bsc#1012628 CVE-2026-46184 bsc#1266864).
- Update
patches.kernel.org/7.0.7-112-pseries-papr-hvpipe-Prevent-kernel-stack-memory.patch
(bsc#1012628 CVE-2026-46182).
- Update
patches.kernel.org/7.0.7-113-pseries-papr-hvpipe-Fix-null-ptr-deref-in-papr_.patch
(bsc#1012628 CVE-2026-46118 bsc#1267237).
- Update
patches.kernel.org/7.0.7-116-net-libwx-fix-VF-illegal-register-access.patch
(bsc#1012628 CVE-2026-46142 bsc#1266824).
- Update
patches.kernel.org/7.0.7-117-ip6_gre-Use-cached-t-net-in-ip6erspan_changelin.patch
(bsc#1012628 CVE-2026-46120).
- Update
patches.kernel.org/7.0.7-123-platform-chrome-cros_ec_typec-Init-mutex-in-Thu.patch
(bsc#1012628 CVE-2026-46134 bsc#1266940).
- Update
patches.kernel.org/7.0.7-133-block-add-pgmap-check-to-biovec_phys_mergeable.patch
(bsc#1012628 CVE-2026-46115 bsc#1266874).
- Update
patches.kernel.org/7.0.7-139-fbcon-Avoid-OOB-font-access-if-console-rotation.patch
(bsc#1012628 CVE-2026-46191).
- Update
patches.kernel.org/7.0.7-146-ice-fix-double-free-in-ice_sf_eth_activate-erro.patch
(bsc#1012628 CVE-2026-46162 bsc#1266840).
- Update
patches.kernel.org/7.0.7-149-spi-microchip-core-qspi-don-t-attempt-to-transm.patch
(bsc#1012628 CVE-2026-46192 bsc#1266909).
- Update
patches.kernel.org/7.0.7-150-spi-microchip-core-qspi-control-built-in-cs-man.patch
(bsc#1012628 CVE-2026-46148).
- Update
patches.kernel.org/7.0.7-172-ASoC-qcom-q6apm-lpass-dai-Fix-multiple-graph-op.patch
(bsc#1012628 CVE-2026-46143).
- Update
patches.kernel.org/7.0.7-175-btrfs-fix-btrfs_ioctl_space_info-slot_count-TOC.patch
(bsc#1012628 CVE-2026-46159).
- Update
patches.kernel.org/7.0.7-176-btrfs-fix-double-free-in-create_space_info-erro.patch
(bsc#1012628 CVE-2026-46129 bsc#1266828).
- Update
patches.kernel.org/7.0.7-177-btrfs-fix-double-free-in-create_space_info_sub_.patch
(bsc#1012628 CVE-2026-46164 bsc#1266906).
- Update
patches.kernel.org/7.0.7-178-btrfs-fix-missing-last_unlink_trans-update-when.patch
(bsc#1012628 CVE-2026-46160).
- Update
patches.kernel.org/7.0.7-179-dm-thin-fix-metadata-refcount-underflow.patch
(bsc#1012628 CVE-2026-46107).
- Update
patches.kernel.org/7.0.7-182-eventfs-Hold-eventfs_mutex-and-SRCU-when-remoun.patch
(bsc#1012628 CVE-2026-46106).
- Update
patches.kernel.org/7.0.7-186-dm-verity-fec-fix-reading-parity-bytes-split-ac.patch
(bsc#1012628 CVE-2026-46130).
- Update
patches.kernel.org/7.0.7-189-isofs-validate-block-number-from-NFS-file-handl.patch
(bsc#1012628 CVE-2026-46124 bsc#1266847).
- Update
patches.kernel.org/7.0.7-197-libceph-Fix-slab-out-of-bounds-access-in-auth-m.patch
(bsc#1012628 CVE-2026-46119).
- Update
patches.kernel.org/7.0.7-198-md-raid10-fix-divide-by-zero-in-setup_geo-with-.patch
(bsc#1012628 CVE-2026-46161 bsc#1266838).
- Update
patches.kernel.org/7.0.7-200-nvmet-tcp-fix-race-between-ICReq-handling-and-q.patch
(bsc#1012628 CVE-2026-46135).
- Update
patches.kernel.org/7.0.7-202-openvswitch-vport-fix-self-deadlock-on-release-.patch
(bsc#1012628 CVE-2026-46165 bsc#1266836).
- Update
patches.kernel.org/7.0.7-205-RDMA-hns-Fix-unlocked-call-to-hns_roce_qp_remov.patch
(bsc#1012628 CVE-2026-46112).
- Update
patches.kernel.org/7.0.7-206-riscv-kvm-fix-vector-context-allocation-leak.patch
(bsc#1012628 CVE-2026-46171 bsc#1266866).
- Update
patches.kernel.org/7.0.7-209-scsi-mpt3sas-Limit-NVMe-request-size-to-2-MiB.patch
(bsc#1012628 CVE-2026-46105).
- Update
patches.kernel.org/7.0.7-210-smb-client-fix-out-of-bounds-read-in-smb2_compo.patch
(bsc#1012628 CVE-2026-46155).
- Update
patches.kernel.org/7.0.7-211-smb-client-fix-out-of-bounds-read-in-symlink_da.patch
(bsc#1012628 CVE-2026-46185 bsc#1266830).
- Update
patches.kernel.org/7.0.7-212-smb-client-use-kzalloc-to-zero-initialize-secur.patch
(bsc#1012628 CVE-2026-46139).
- Update
patches.kernel.org/7.0.7-213-smb-client-validate-dacloffset-before-building-.patch
(bsc#1012628 CVE-2026-46195 bsc#1266860).
- Update
patches.kernel.org/7.0.7-214-KVM-x86-check-for-nEPT-nNPT-in-slow-flush-hyper.patch
(bsc#1012628 CVE-2026-46131).
- Update
patches.kernel.org/7.0.7-219-mm-damon-sysfs-schemes-protect-memcg_path-kfree.patch
(bsc#1012628 CVE-2026-46121 bsc#1266932).
- Update
patches.kernel.org/7.0.7-220-mm-damon-sysfs-schemes-protect-path-kfree-with-.patch
(bsc#1012628 CVE-2026-46183 bsc#1266924).
- Update
patches.kernel.org/7.0.7-226-powerpc-xive-fix-kmemleak-caused-by-incorrect-c.patch
(bsc#1012628 CVE-2026-46141 bsc#1266877).
- Update
patches.kernel.org/7.0.7-232-RDMA-mana-Fix-error-unwind-in-mana_ib_create_qp.patch
(bsc#1012628 CVE-2026-46144 bsc#1266913).
- Update
patches.kernel.org/7.0.7-233-RDMA-mana-Fix-mana_destroy_wq_obj-cleanup-in-ma.patch
(bsc#1012628 CVE-2026-46126).
- Update
patches.kernel.org/7.0.7-234-RDMA-mana-Remove-user-triggerable-WARN_ON-in-ma.patch
(bsc#1012628 CVE-2026-46117).
- Update
patches.kernel.org/7.0.7-235-RDMA-mana-Validate-rx_hash_key_len.patch
(bsc#1012628 CVE-2026-46145).
- Update
patches.kernel.org/7.0.7-236-RDMA-mlx4-Fix-mis-use-of-RCU-in-mlx4_srq_event.patch
(bsc#1012628 CVE-2026-46181 bsc#1266826).
- Update
patches.kernel.org/7.0.7-237-RDMA-mlx4-Fix-resource-leak-on-error-in-mlx4_ib.patch
(bsc#1012628 CVE-2026-46178).
- Update
patches.kernel.org/7.0.7-238-RDMA-mlx5-Fix-error-path-fall-through-in-mlx5_i.patch
(bsc#1012628 CVE-2026-46176 bsc#1266816).
- Update
patches.kernel.org/7.0.7-239-RDMA-ocrdma-Don-t-NULL-deref-uctx-on-errors-in-.patch
(bsc#1012628 CVE-2026-46127 bsc#1267236).
- Update
patches.kernel.org/7.0.7-240-RDMA-rxe-Reject-non-8-byte-ATOMIC_WRITE-payload.patch
(bsc#1012628 CVE-2026-46114 bsc#1266972).
- Update
patches.kernel.org/7.0.7-241-RDMA-rxe-Reject-unknown-opcodes-before-ICRC-pro.patch
(bsc#1012628 CVE-2026-46133 bsc#1266928).
- Update
patches.kernel.org/7.0.7-242-RDMA-vmw_pvrdma-Fix-double-free-on-pvrdma_alloc.patch
(bsc#1012628 CVE-2026-46189 bsc#1266918).
- Update
patches.kernel.org/7.0.7-255-mptcp-fix-scheduling-with-atomic-in-timestamp-s.patch
(bsc#1012628 CVE-2026-46168 bsc#1266869).
- Update
patches.kernel.org/7.0.7-260-mptcp-pm-ADD_ADDR-rtx-fix-potential-data-race.patch
(bsc#1012628 CVE-2026-46137).
- Update
patches.kernel.org/7.0.7-261-mptcp-pm-ADD_ADDR-rtx-always-decrease-sk-refcou.patch
(bsc#1012628 CVE-2026-46158 bsc#1266880).
- Update
patches.kernel.org/7.0.7-262-mptcp-pm-ADD_ADDR-rtx-free-sk-if-last.patch
(bsc#1012628 CVE-2026-46170).
- Update
patches.kernel.org/7.0.7-271-f2fs-fix-node_cnt-race-between-extent-node-dest.patch
(bsc#1012628 CVE-2026-46194).
- Update
patches.kernel.org/7.0.7-275-f2fs-fix-fsck-inconsistency-caused-by-FGGC-of-n.patch
(bsc#1012628 CVE-2026-46175 bsc#1266865).
- Update
patches.kernel.org/7.0.7-281-KVM-arm64-Fix-pin-leak-and-publication-ordering.patch
(bsc#1012628 CVE-2026-46147).
- Update
patches.kernel.org/7.0.7-282-LoongArch-Fix-potential-ADE-in-loongson_gpu_fix.patch
(bsc#1012628 CVE-2026-46156).
- Update
patches.kernel.org/7.0.7-289-bpf-Fix-use-after-free-in-arena_vm_close-on-for.patch
(bsc#1012628 CVE-2026-45837 bsc#1266398).
- Update
patches.kernel.org/7.0.7-290-octeon_ep_vf-add-NULL-check-for-napi_build_skb.patch
(bsc#1012628 CVE-2026-46188 bsc#1266859).
- Update
patches.kernel.org/7.0.7-296-hfsplus-fix-uninit-value-by-validating-catalog-.patch
(bsc#1012628 CVE-2026-46169).
- Update
patches.kernel.org/7.0.7-299-8021q-delete-cleared-egress-QoS-mappings.patch
(bsc#1012628 CVE-2026-46153).
- Update
patches.kernel.org/7.0.7-303-net-stmmac-Prevent-NULL-deref-when-RX-memory-ex.patch
(bsc#1012628 CVE-2026-46110 bsc#1266759).
- Update
patches.kernel.org/7.0.7-305-x86-CPU-AMD-Prevent-improper-isolation-of-share.patch
(bsc#1012628 CVE-2026-46174).
- Update
patches.kernel.org/7.0.9-001-HID-playstation-Clamp-num_touch_reports.patch
(bsc#1012628 CVE-2026-46232).
- Update
patches.kernel.org/7.0.9-002-HID-appletb-kbd-fix-UAF-in-inactivity-timer-cle.patch
(bsc#1012628 CVE-2026-46213).
- Update
patches.kernel.org/7.0.9-003-HID-appletb-kbd-run-inactivity-autodim-from-wor.patch
(bsc#1012628 CVE-2026-46202 bsc#1266849).
- Update
patches.kernel.org/7.0.9-028-staging-media-atomisp-Disallow-all-private-IOCT.patch
(bsc#1012628 CVE-2026-46205 bsc#1266908).
- Update
patches.kernel.org/7.0.9-033-media-rc-xbox_remote-heed-DMA-restrictions.patch
(bsc#1012628 CVE-2026-46236 bsc#1266910).
- Update
patches.kernel.org/7.0.9-035-media-i2c-ov5647-Fix-runtime-PM-refcount-leak-i.patch
(bsc#1012628 CVE-2026-46239).
- Update
patches.kernel.org/7.0.9-040-media-rockchip-rkcif-Add-missing-MUST_CONNECT-f.patch
(bsc#1012628 CVE-2026-46222).
- Update
patches.kernel.org/7.0.9-053-media-saa7164-add-ioremap-return-checks-and-cle.patch
(bsc#1012628 CVE-2026-46235).
- Update
patches.kernel.org/7.0.9-070-media-iris-Fix-use-after-free-in-iris_release_i.patch
(bsc#1012628 CVE-2026-46240 bsc#1266843).
- Update
patches.kernel.org/7.0.9-076-media-iris-fix-use-after-free-of-fmt_src-during.patch
(bsc#1012628 CVE-2026-46210).
- Update
patches.kernel.org/7.0.9-079-drm-xe-hdcp-Add-NULL-check-for-media_gt-in-inte.patch
(bsc#1012628 CVE-2026-46216 bsc#1267234).
- Update
patches.kernel.org/7.0.9-090-spi-ch341-fix-devres-lifetime.patch
(bsc#1012628 CVE-2026-46228).
- Update
patches.kernel.org/7.0.9-092-spi-fsl-fix-controller-deregistration.patch
(bsc#1012628 CVE-2026-46226).
- Update
patches.kernel.org/7.0.9-099-spi-rspi-fix-controller-deregistration.patch
(bsc#1012628 CVE-2026-46225).
- Update
patches.kernel.org/7.0.9-110-spi-mpc52xx-fix-use-after-free-on-registration-.patch
(bsc#1012628 CVE-2026-46241 bsc#1266931).
- Update
patches.kernel.org/7.0.9-111-spi-mpc52xx-fix-controller-deregistration.patch
(bsc#1012628 CVE-2026-46200 bsc#1266835).
- Update
patches.kernel.org/7.0.9-112-spi-mpc52xx-fix-use-after-free-on-unbind.patch
(bsc#1012628 CVE-2026-46219).
- Update
patches.kernel.org/7.0.9-120-spi-cadence-quadspi-fix-unclocked-access-on-unb.patch
(bsc#1012628 CVE-2026-46203).
- Update
patches.kernel.org/7.0.9-121-drm-msm-gem-fix-error-handling-in-msm_ioctl_gem.patch
(bsc#1012628 CVE-2026-46211).
- Update
patches.kernel.org/7.0.9-127-drm-amdkfd-Clear-VRAM-on-allocation-to-prevent-.patch
(bsc#1012628 CVE-2026-46229).
- Update
patches.kernel.org/7.0.9-135-drm-amdgpu-Add-bounds-checking-to-ib_-get-set-_.patch
(bsc#1012628 CVE-2026-46218).
- Update
patches.kernel.org/7.0.9-136-drm-amdgpu-vcn4-Prevent-OOB-reads-when-parsing-.patch
(bsc#1012628 CVE-2026-46204).
- Update
patches.kernel.org/7.0.9-138-drm-amdgpu-vcn4-Prevent-OOB-reads-when-parsing-.patch
(bsc#1012628 CVE-2026-46199).
- Update
patches.kernel.org/7.0.9-139-drm-amdgpu-vcn3-Prevent-OOB-reads-when-parsing-.patch
(bsc#1012628 CVE-2026-46230).
- Update
patches.kernel.org/7.0.9-141-drm-gem-Fix-inconsistent-plane-dimension-calcul.patch
(bsc#1012628 CVE-2026-46209).
- Update
patches.kernel.org/7.0.9-143-drm-amdkfd-validate-SVM-ioctl-nattr-against-buf.patch
(bsc#1012628 CVE-2026-46197).
- Update
patches.kernel.org/7.0.9-146-drm-xe-Fix-bo-leak-in-xe_dma_buf_init_obj-on-al.patch
(bsc#1012628 CVE-2026-46224 bsc#1266845).
- Update
patches.kernel.org/7.0.9-148-drm-xe-Fix-dma-buf-attachment-leak-in-xe_gem_pr.patch
(bsc#1012628 CVE-2026-46201 bsc#1266841).
- Update
patches.kernel.org/7.0.9-151-drm-Set-old-handle-to-NULL-before-prime-swap-in.patch
(bsc#1012628 CVE-2026-46215 bsc#1267235).
- Update
patches.kernel.org/7.0.9-162-drm-amdgpu-sdma4-replace-BUG_ON-with-WARN_ON-in.patch
(bsc#1012628 CVE-2026-46220).
- Update
patches.kernel.org/7.0.9-169-sctp-revalidate-list-cursor-after-sctp_sendmsg_.patch
(bsc#1012628 CVE-2026-46227).
- Update
patches.kernel.org/7.0.9-170-batman-adv-fix-integer-overflow-on-buff_pos.patch
(bsc#1012628 CVE-2026-46198 bsc#1266854).
- Update
patches.kernel.org/7.0.9-171-batman-adv-reject-new-tp_meter-sessions-during-.patch
(bsc#1012628 CVE-2026-46206 bsc#1266834).
- Update
patches.kernel.org/7.0.9-172-batman-adv-stop-tp_meter-sessions-during-mesh-t.patch
(bsc#1012628 CVE-2026-46208 bsc#1266853).
- Update
patches.kernel.org/7.0.9-173-batman-adv-stop-caching-unowned-originator-poin.patch
(bsc#1012628 CVE-2026-46238 bsc#1266846).
- Update
patches.kernel.org/7.0.9-175-batman-adv-bla-prevent-use-after-free-when-dele.patch
(bsc#1012628 CVE-2026-46212).
- Update
patches.kernel.org/7.0.9-176-batman-adv-bla-only-purge-non-released-claims.patch
(bsc#1012628 CVE-2026-46233).
- Update
patches.kernel.org/7.0.9-177-batman-adv-bla-put-backbone-reference-on-failed.patch
(bsc#1012628 CVE-2026-46231).
- Update
patches.kernel.org/7.0.9-184-EDAC-versalnet-Fix-device-name-memory-leak.patch
(bsc#1012628 CVE-2026-46221).
- Update
patches.kernel.org/7.0.9-188-cgroup-Defer-css-percpu_ref-kill-on-rmdir-until.patch
(bsc#1012628 CVE-2026-46223).
- Update
patches.kernel.org/7.0.9-192-vsock-fix-buffer-size-clamping-order.patch
(bsc#1012628 CVE-2026-46234 bsc#1266904).
- Update
patches.kernel.org/7.0.9-194-vsock-virtio-fix-empty-payload-in-tap-skb-for-n.patch
(bsc#1012628 CVE-2026-46207).
- Update
patches.kernel.org/7.0.9-195-vsock-virtio-fix-accept-queue-count-leak-on-tra.patch
(bsc#1012628 CVE-2026-46214).
- Update
patches.kernel.org/7.0.9-196-drm-amdgpu-vcn3-Avoid-overflow-on-msg-bound-che.patch
(bsc#1012628 CVE-2026-46237 bsc#1266871).
- Update
patches.kernel.org/7.0.9-197-drm-amdgpu-vcn4-Avoid-overflow-on-msg-bound-che.patch
(bsc#1012628 CVE-2026-46217).
suse-add-cves
- commit d1677f1
* Tue Jun 02 2026 jslaby@suse.cz
- blk-mq: reinsert cached request to the list (git-fixes).
- batman-adv: fix batadv_skb_is_frag() kernel-doc (git-fixes).
- net: ethernet: cortina: No mapping is a dropped rx (git-fixes).
- commit 6fbeab5
* Tue Jun 02 2026 jslaby@suse.cz
- Linux 7.0.11 (bsc#1012628).
- iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs
(bsc#1012628).
- iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs
(bsc#1012628).
- ksmbd: close durable scavenger races against m_fp_list lookups
(bsc#1012628).
- smb: client: reject userspace cifs.spnego descriptions
(bsc#1012628).
- ata: libata-scsi: improve readability of ata_scsi_qc_issue()
(bsc#1012628).
- ata: libata-scsi: do not use the deferred QC feature for
ATA_DEFER_PORT (bsc#1012628).
- ata: libata-scsi: do not use the deferred QC feature on PMPs
with CBS (bsc#1012628).
- ata: libata-scsi: do not needlessly defer commands when using
PMP with FBS (bsc#1012628).
- sysfs: don't remove existing directory on update failure
(bsc#1012628).
- mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break()
(bsc#1012628).
- ksmbd: fix null pointer dereference in compare_guid_key()
(bsc#1012628).
- ksmbd: fix null pointer dereference in proc_show_files()
(bsc#1012628).
- ksmbd: fix SID memory leak in set_posix_acl_entries_dacl()
on overflow (bsc#1012628).
- ksmbd: validate SID in parent security descriptor during ACL
inheritance (bsc#1012628).
- regulator: tps65219: fix irq_data.rdev not being assigned
(bsc#1012628).
- x86/mm: Disable broadcast TLB flush when PCID is disabled
(bsc#1012628).
- scripts/gdb: mm: cast untyped symbols in x86_page_ops
(bsc#1012628).
- smb: client: require net admin for CIFS SWN netlink
(bsc#1012628).
- smb: client: protect tc_count increment in
smb2_find_smb_sess_tcon_unlocked() (bsc#1012628).
- smb: client: use data_len for SMB2 READ encrypted folioq copy
(bsc#1012628).
- smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close
(bsc#1012628).
- hwmon: (pmbus/adm1266) widen blackbox-info buffer to
I2C_SMBUS_BLOCK_MAX (bsc#1012628).
- ALSA: ua101: Reject too-short USB descriptors (bsc#1012628).
- ALSA: pcm: Don't setup bogus iov_iter for silencing
(bsc#1012628).
- ALSA: asihpi: Fix potential OOB array access at reading cache
(bsc#1012628).
- ALSA: scarlett2: Allow flash writes ending at segment boundary
(bsc#1012628).
- ACPI: battery: Fix system wakeup on critical battery status
(bsc#1012628).
- efi: Allocate runtime workqueue before ACPI init (bsc#1012628).
- spi: amd: Set correct bus number in ACPI probe path
(bsc#1012628).
- io_uring/waitid: clear waitid info before copying it to
userspace (bsc#1012628).
- drivers/base/memory: fix memory block reference leak in poison
accounting (bsc#1012628).
- ipv6: ioam: refresh hdr pointer before ioam6_event()
(bsc#1012628).
- mm/memory: fix spurious warning when unmapping
device-private/exclusive pages (bsc#1012628).
- mm: fix __vm_normal_page() to handle missing support for
pmd_special()/pud_special() (bsc#1012628).
- mm/memory_hotplug: fix memory block reference leak on remove
(bsc#1012628).
- mm/page_alloc: fix initialization of tags of the huge zero
folio with init_on_free (bsc#1012628).
- mm/migrate_device: fix spinlock leak in
migrate_vma_insert_huge_pmd_page (bsc#1012628).
- selftests/mm: run_vmtests.sh: fix destructive tests invocation
(bsc#1012628).
- mm/damon: fix damos_stat tracepoint format for sz_applied
(bsc#1012628).
- net: wwan: iosm: fix potential memory leaks in ipc_imem_init()
(bsc#1012628).
- Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs
l2cap_conn_del() (bsc#1012628).
- Bluetooth: ISO: drop ISO_END frames received without prior
ISO_START (bsc#1012628).
- Bluetooth: bnep: Fix UAF read of dev->name (bsc#1012628).
- Bluetooth: hci_uart: fix UAFs and race conditions in close
and init paths (bsc#1012628).
- Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not
stack pointer (bsc#1012628).
- Bluetooth: hci_qca: Convert timeout from jiffies to ms
(bsc#1012628).
- Bluetooth: MGMT: validate Add Extended Advertising Data length
(bsc#1012628).
- Bluetooth: serialize accept_q access (bsc#1012628).
- phonet/pep: disable BH around forwarded sk_receive_skb()
(bsc#1012628).
- net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1012628).
- net: devmem: reject dma-buf bind with non-page-aligned size
or SG length (bsc#1012628).
- net: phy: skip EEE advertisement write when autoneg is disabled
(bsc#1012628).
- net: hsr: defer node table free until after RCU readers
(bsc#1012628).
- net/mlx5e: Fix use-after-free in
mlx5e_tx_reporter_timeout_recover (bsc#1012628).
- net: ifb: report ethtool stats over num_tx_queues (bsc#1012628).
- net: pse-pd: fix sign on -ENOENT check in of_load_pse_pis()
(bsc#1012628).
- netfilter: ip6t_hbh: reject oversized option lists
(bsc#1012628).
- netfilter: nf_queue: hold bridge skb->dev while queued
(bsc#1012628).
- netfilter: ipset: stop hash:* range iteration at end
(bsc#1012628).
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (bsc#1012628).
- net: ethtool: fix NULL pointer dereference in phy_reply_size
(bsc#1012628).
- net: ethtool: phy: avoid NULL deref when PHY driver is unbound
(bsc#1012628).
- ACPI: driver: Check ACPI_COMPANION() against NULL during probe
(bsc#1012628).
- sched_ext: Fix missing warning in scx_set_task_state() default
case (bsc#1012628).
- sched_ext: Avoid UAF in scx_root_enable_workfn() init failure
path (bsc#1012628).
- l2tp: use list_del_rcu in l2tp_session_unhash (bsc#1012628).
- qed: fix double free in qed_cxt_tables_alloc() (bsc#1012628).
- ring-buffer: Fix reporting of missed events in iterator
(bsc#1012628).
- ring-buffer: Flush and stop persistent ring buffer on panic
(bsc#1012628).
- wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb
(bsc#1012628).
- ipv6: ioam: add NULL check for idev in ipv6_hop_ioam()
(bsc#1012628).
- selftests: mptcp: drop nanoseconds width specifier
(bsc#1012628).
- mptcp: pm: fix ADD_ADDR timer infinite retry on option space
insufficient (bsc#1012628).
- vsock/vmci: fix UAF when peer resets connection during handshake
(bsc#1012628).
- vsock/virtio: reset connection on receiving queue overflow
(bsc#1012628).
- ice: fix VF queue configuration with low MTU values
(bsc#1012628).
- wifi: ath11k: clear shared SRNG pointer state on restart
(bsc#1012628).
- wifi: iwlwifi: mvm: fix driver-set TX rates on old devices
(bsc#1012628).
- wifi: iwlwifi: mld: stop TX during firmware restart
(bsc#1012628).
- ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1012628).
- ixgbevf: fix use-after-free in VEPA multicast source pruning
(bsc#1012628).
- rbd: eliminate a race in lock_dwork draining on unmap
(bsc#1012628).
- mptcp: do not drop partial packets (bsc#1012628).
- mptcp: reset rcv wnd on disconnect (bsc#1012628).
- lsm: hold cred_guard_mutex for lsm_set_self_attr()
(bsc#1012628).
- octeontx2-af: CGX: add bounds check to cgx_speed_mbps index
(bsc#1012628).
- octeontx2-pf: fix double free in rvu_rep_rsrc_init()
(bsc#1012628).
- igc: fix potential skb leak in igc_fpe_xmit_smd_frame()
(bsc#1012628).
- ice: fix locking around wait_event_interruptible_locked_irq
(bsc#1012628).
- ice: fix setting promisc mode while adding VID filter
(bsc#1012628).
- ice: restore PTP Rx timestamp config after ethtool set-channels
(bsc#1012628).
- wifi: cfg80211: advance loop vars in cfg80211_merge_profile()
(bsc#1012628).
- af_unix: Fix UAF read of tail->len in unix_stream_data_wait()
(bsc#1012628).
- wifi: mac80211: consume only present negotiated TTLM maps
(bsc#1012628).
- octeontx2-pf: avoid double free of pool->stack on AQ init
failure (bsc#1012628).
- cifs: Fix busy dentry used after unmounting (bsc#1012628).
- tracing: Do not call map->ops->elt_free() if elt_alloc() fails
(bsc#1012628).
- ASoC: codecs: pcm512x: fix null-ptr dereference in
pcm512x_overclock_xxx_put() (bsc#1012628).
- arm64: probes: Handle probes on hinted conditional branch
instructions (bsc#1012628).
- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
num_eventid_bits (bsc#1012628).
- KVM: arm64: vgic: Free private_irqs when init fails after
allocation (bsc#1012628).
- KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h
(erratum #1235) (bsc#1012628).
- riscv: kvm: return SBI_ERR_FAILURE for pmu_snapshot_set_shmem()
when OOM (bsc#1012628).
- riscv: kvm: return SBI_ERR_FAILURE for pmu_event_info() when
OOM (bsc#1012628).
- virt: sev-guest: Explicitly leak pages in unknown state
(bsc#1012628).
- i2c: tegra: fix pm_runtime leak on mutex_lock failure
(bsc#1012628).
- drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c
probe (bsc#1012628).
- spi: qup: fix error pointer deref after DMA setup failure
(bsc#1012628).
- phy: exynos5-usbdrd: fix USB 2.0 HS PHY tuning values for
Exynos7870 (bsc#1012628).
- phy: tegra: xusb: Fix per-pad high-speed termination calibration
(bsc#1012628).
- phy: qcom-qmp-ufs: Fix kaanapali PHY PLL lock failure after
SM8650 G4 fix (bsc#1012628).
- phy: qcom: edp: Unify generic DP/eDP swing and pre-emphasis
tables (bsc#1012628).
- phy: qcom: edp: Add eDP/DP mode switch support (bsc#1012628).
- phy: qcom: edp: Fix AUX_CFG8 programming for DP mode
(bsc#1012628).
- scsi: isci: Fix use-after-free in device removal path
(bsc#1012628).
- spi: ep93xx: fix error pointer deref after DMA setup failure
(bsc#1012628).
- spi: sprd: fix error pointer deref after DMA setup failure
(bsc#1012628).
- spi: ti-qspi: fix use-after-free after DMA setup failure
(bsc#1012628).
- mm/slub: hold cpus_read_lock around flush_rcu_sheaves_on_cache()
(bsc#1012628).
- RDMA/siw: Reject MPA FPDU length underflow before signed
receive math (bsc#1012628).
- s390/cio: Restore GFP_DMA for CHSC allocation (bsc#1012628).
- s390/pai: Disable duplicate read of kernel PAI counter value
(bsc#1012628).
- s390/pai: Fix missing PAI counter increments under heavy load
(bsc#1012628).
- fwctl: pds: Validate RPC input size before parsing
(bsc#1012628).
- LoongArch: kprobes: Use larch_insn_text_copy() to patch
instructions (bsc#1012628).
- LoongArch: Remove unused code to avoid build warning
(bsc#1012628).
- cpufreq: intel_pstate: Use correct scaling factor on Raptor
Lake-E (bsc#1012628).
- device property: set fwnode->secondary to NULL in fwnode_init()
(bsc#1012628).
- drm/i915/display: Copy color pipeline from plane in the primary
joiner pipe (bsc#1012628).
- drm/msm: Fix shrinker deadlock (bsc#1012628).
- drm/v3d: Fix use-after-free of CPU job query arrays on error
path (bsc#1012628).
- drm/v3d: Release indirect CSD GEM reference on CPU job free
(bsc#1012628).
- drm/virtio: use uninterruptible resv lock for plane updates
(bsc#1012628).
- drm/xe/multi_queue: Fix secondary queue error case
(bsc#1012628).
- drm/amdgpu/vpe: Force collaborate sync after TRAP (bsc#1012628).
- drm/bridge: it66121: acquire reset GPIO in probe (bsc#1012628).
- drm/bridge: megachips: remove bridge when irq request fails
(bsc#1012628).
- drm/amd/display: Fix integer overflow in bios_get_image()
(bsc#1012628).
- drm/amd/display: Validate GPIO pin LUT table size before
iterating (bsc#1012628).
- drm/amd/display: Validate payload length and link_index in
dc_process_dmub_aux_transfer_async (bsc#1012628).
- batman-adv: v: stop OGMv2 on disabled interface (bsc#1012628).
- batman-adv: tvlv: abort OGM send on tvlv append failure
(bsc#1012628).
- batman-adv: tvlv: reject oversized TVLV packets (bsc#1012628).
- batman-adv: iv: recover OGM scheduling after forward packet
error (bsc#1012628).
- batman-adv: mcast: fix use-after-free in orig_node RCU release
(bsc#1012628).
- batman-adv: clear current gateway during teardown (bsc#1012628).
- batman-adv: dat: handle forward allocation error (bsc#1012628).
- batman-adv: fix fragment reassembly length accounting
(bsc#1012628).
- batman-adv: fix tp_meter counter underflow during shutdown
(bsc#1012628).
- batman-adv: frag: disallow unicast fragment in fragment
(bsc#1012628).
- batman-adv: bla: fix report_work leak on backbone_gw purge
(bsc#1012628).
- batman-adv: bla: avoid double decrement of bla.num_requests
(bsc#1012628).
- batman-adv: bla: avoid NULL-ptr deref for claim via dropped
interface (bsc#1012628).
- batman-adv: tp_meter: avoid use of uninit sender vars
(bsc#1012628).
- batman-adv: tp_meter: directly shut down timer on cleanup
(bsc#1012628).
- batman-adv: tp_meter: fix tp_vars reference leak in receiver
shutdown (bsc#1012628).
- batman-adv: tp_meter: fix race condition in send error reporting
(bsc#1012628).
- batman-adv: tp_meter: avoid role confusion in tp_list
(bsc#1012628).
- batman-adv: tt: fix TOCTOU race for reported vlans
(bsc#1012628).
- batman-adv: tt: reject oversized local TVLV buffers
(bsc#1012628).
- batman-adv: tt: avoid empty VLAN responses (bsc#1012628).
- batman-adv: tt: fix negative last_changeset_len (bsc#1012628).
- batman-adv: tt: fix negative tt_buff_len (bsc#1012628).
- batman-adv: tt: prevent TVLV entry number overflow
(bsc#1012628).
- hwmon: (pmbus/adm1266) seed timestamp from the real-time clock
(bsc#1012628).
- hwmon: (pmbus/adm1266) reject implausible blackbox record_count
(bsc#1012628).
- hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer
read buffer (bsc#1012628).
- hwmon: (pmbus/adm1266) bounce blackbox records through a
protocol-sized buffer (bsc#1012628).
- hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at
ADM1266_PDIO_NR (bsc#1012628).
- hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO
read in get_multiple (bsc#1012628).
- hwmon: (pmbus/adm1266) register the gpio_chip after
pmbus_do_probe() (bsc#1012628).
- hwmon: (pmbus/adm1266) register the nvmem device after
pmbus_do_probe() (bsc#1012628).
- hwmon: (pmbus/adm1266) reject short block-read responses in
the GPIO accessors (bsc#1012628).
- pinctrl: mediatek: moore: implement gpio_chip::get_direction()
(bsc#1012628).
- pinctrl: qcom: ipq4019: mark gpio as a GPIO pin function
(bsc#1012628).
- arm64: dts: renesas: r8a78000: Fix SCIF brg_int clocks
(bsc#1012628).
- ARM: dts: renesas: genmai: Drop superfluous cells (bsc#1012628).
- ARM: dts: renesas: rskrza1: Drop superfluous cells
(bsc#1012628).
- pinctrl: renesas: rzg2l: Fix incorrect PUPD register offset
for high pins during suspend/resume (bsc#1012628).
- pinctrl: renesas: rzg2l: Fix SMT register cache handling
(bsc#1012628).
- pinctrl: meson: amlogic-a4: fix deadlock issue (bsc#1012628).
- pinctrl: qcom: Fix GPIO to PDC wake irq map for qcs615
(bsc#1012628).
- kho: skip KHO for crash kernel (bsc#1012628).
- mm/memfd_luo: report error when restoring a folio fails mid-loop
(bsc#1012628).
- HID: intel-thc-hid: Intel-quickspi: Fix some error codes
(bsc#1012628).
- HID: uclogic: Fix regression of input name assignment
(bsc#1012628).
- firmware: arm_ffa: Check for NULL FF-A ID table while driver
registration (bsc#1012628).
- firmware: arm_ffa: Skip free_pages on RX buffer alloc failure
(bsc#1012628).
- firmware: arm_ffa: Fix per-vcpu self notifications handling
in workqueue (bsc#1012628).
- firmware: arm_ffa: Unregister bus notifier on teardown for
FF-A v1.0 (bsc#1012628).
- riscv: errata: Fix bitwise vs logical AND in MIPS errata
patching (bsc#1012628).
- riscv: Fix register corruption from uninitialized cregs on error
(bsc#1012628).
- riscv: mm: Fixup no5lvl failure when vaddr is invalid
(bsc#1012628).
- kunit: config: Enable KUNIT_DEBUGFS by default (bsc#1012628).
- kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS
(bsc#1012628).
- pinctrl: qcom: Fix wakeirq map by removing disconnected irqs
for sm8150 (bsc#1012628).
- firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies
(bsc#1012628).
- firmware: arm_ffa: Keep framework RX release under lock
(bsc#1012628).
- firmware: arm_ffa: Validate framework notification message
layout (bsc#1012628).
- firmware: arm_ffa: Snapshot notifier callbacks under lock
(bsc#1012628).
- firmware: arm_ffa: Fix sched-recv callback partition lookup
(bsc#1012628).
- ARM: integrator: Fix early initialization (bsc#1012628).
- ALSA: hda: cs35l56: Put ACPI device after setting companion
(bsc#1012628).
- ALSA: hda: cs35l41: Put ACPI device on missing physical node
(bsc#1012628).
- btrfs: tracepoints: fix sleep while in atomic context in
btrfs_sync_file() (bsc#1012628).
- netfilter: x_tables: allow initial table replace without
emitting audit log message (bsc#1012628).
- netfilter: x_tables: allocate hook ops while under mutex
(bsc#1012628).
- netfilter: x_tables: unregister the templates first
(bsc#1012628).
- netfilter: x_tables: add and use xt_unregister_table_pre_exit
(bsc#1012628).
- netfilter: x_tables: add and use xtables_unregister_table_exit
(bsc#1012628).
- netfilter: ebtables: move to two-stage removal scheme
(bsc#1012628).
- netfilter: ebtables: close dangling table module init race
(bsc#1012628).
- netfilter: x_tables: close dangling table module init race
(bsc#1012628).
- netfilter: bridge: eb_tables: close module init race
(bsc#1012628).
- netfilter: nf_conntrack_expect: restore helper propagation
via expectation (bsc#1012628).
- kprobes: skip non-symbol addresses in
kprobe_add_ksym_blacklist() (bsc#1012628).
- test_kprobes: clear kprobes between test runs (bsc#1012628).
- tcp: Fix imbalanced icsk_accept_queue count (bsc#1012628).
- net: napi: Avoid gro timer misfiring at end of busypoll
(bsc#1012628).
- net: shaper: Reject reparenting of existing nodes (bsc#1012628).
- idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()
(bsc#1012628).
- ice: fix setting RSS VSI hash for E830 (bsc#1012628).
- ice: fix locking in ice_dcb_rebuild() (bsc#1012628).
- ice: dpll: fix rclk pin state get for E810 (bsc#1012628).
- ice: dpll: fix misplaced header macros (bsc#1012628).
- net: lan966x: avoid unregistering netdev on register failure
(bsc#1012628).
- net: ti: icssm-prueth: fix eth_ports_node leak in probe
(bsc#1012628).
- phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL
register access (bsc#1012628).
- phy: spacemit: Remove incorrect clk_disable() in
spacemit_usb2phy_init() (bsc#1012628).
- NFSD: Fix infinite loop in layout state revocation
(bsc#1012628).
- ASoC: sdw_utils: Add quirk to ignore RT712 CODEC_MIC
(bsc#1012628).
- ASoC: sdw_utils: Add quirk to ignore RT721 CODEC_MIC
(bsc#1012628).
- fprobe: Fix unregister_fprobe() to wait for RCU grace period
(bsc#1012628).
- fs/statmount: fix slab out-of-bounds write in
statmount_mnt_idmap (bsc#1012628).
- fs: Fix return in jfs_mkdir and orangefs_mkdir (bsc#1012628).
- irqchip/ath79-cpu: Remove unused function (bsc#1012628).
- fs: fix forced iversion increment on lazytime timestamp updates
(bsc#1012628).
- ublk: reject max_sectors smaller than PAGE_SECTORS in parameter
validation (bsc#1012628).
- nsfs: fix wrong error code returned for pidns ioctls
(bsc#1012628).
- irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT
(bsc#1012628).
- nvme: fix bio leak on mapping failure (bsc#1012628).
- nvme-pci: fix use-after-free in nvme_free_host_mem()
(bsc#1012628).
- zonefs: handle integer overflow in zonefs_fname_to_fno
(bsc#1012628).
- tcp: Fix out-of-bounds access for twsk in
tcp_ao_established_key() (bsc#1012628).
- ASoC: SOF: amd: Fix error code handling in psp_send_cmd()
(bsc#1012628).
- powerpc: 82xx: fix uninitialized pointers with free attribute
(bsc#1012628).
- powerpc: fix dead default for GUEST_STATE_BUFFER_TEST
(bsc#1012628).
- powerpc/hv-gpci: fix preempt count leak in sysfs show paths
(bsc#1012628).
- netfs: Fix cancellation of a DIO and single read subrequests
(bsc#1012628).
- netfs: Fix missing locking around retry adding new subreqs
(bsc#1012628).
- netfs: Fix missing barriers when accessing stream->subrequests
locklessly (bsc#1012628).
- netfs: Fix netfs_read_to_pagecache() to pause on subreq failure
(bsc#1012628).
- netfs: Fix potential for tearing in ->remote_i_size and
- >zero_point (bsc#1012628).
- netfs: Fix zeropoint update where i_size > remote_i_size
(bsc#1012628).
- netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call
(bsc#1012628).
- netfs: Fix overrun check in netfs_extract_user_iter()
(bsc#1012628).
- netfs: Fix netfs_invalidate_folio() to clear dirty bit if all
changes gone (bsc#1012628).
- netfs: Defer the emission of trace_netfs_folio() (bsc#1012628).
- netfs: Fix streaming write being overwritten (bsc#1012628).
- netfs: Fix potential deadlock in write-through mode
(bsc#1012628).
- netfs: Fix read-gaps to remove netfs_folio from filled folio
(bsc#1012628).
- netfs: Fix write streaming disablement if fd open O_RDWR
(bsc#1012628).
- netfs: Fix early put of sink folio in netfs_read_gaps()
(bsc#1012628).
- netfs: Fix leak of request in netfs_write_begin() error handling
(bsc#1012628).
- netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()
(bsc#1012628).
- netfs: Fix partial invalidation of streaming-write folio
(bsc#1012628).
- netfs: Fix folio->private handling in netfs_perform_write()
(bsc#1012628).
- netfs: Fix netfs_read_folio() to wait on writeback
(bsc#1012628).
- netfs, afs: Fix write skipping in dir/link writepages
(bsc#1012628).
- afs: Fix the locking used by afs_get_link() (bsc#1012628).
- net: ethernet: cortina: Make RX SKB per-port (bsc#1012628).
- net: ethernet: cortina: Drop half-assembled SKB (bsc#1012628).
- net: ethernet: cortina: Carry over frag counter (bsc#1012628).
- net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS
reference (bsc#1012628).
- wifi: ath11k: fix error path leaks in some WMI WOW calls
(bsc#1012628).
- wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm()
(bsc#1012628).
- wifi: ath10k: skip WMI and beacon transmission when device is
wedged (bsc#1012628).
- net: shaper: flip the polarity of the valid flag (bsc#1012628).
- net: shaper: fix trivial ordering issue in net_shaper_commit()
(bsc#1012628).
- net: shaper: reject duplicate leaves in GROUP request
(bsc#1012628).
- net: shaper: set ret to -ENOMEM when genlmsg_new() fails in
group_doit (bsc#1012628).
- net: shaper: fix undersized reply skb allocation in GROUP
command (bsc#1012628).
- net: shaper: enforce singleton NETDEV scope with id 0
(bsc#1012628).
- net: shaper: reject QUEUE scope handle with missing id
(bsc#1012628).
- block: don't overwrite bip_vcnt in bio_integrity_copy_user()
(bsc#1012628).
- block: recompute nr_integrity_segments in
blk_insert_cloned_request (bsc#1012628).
- HID: quirks: really enable the intended work around for
appledisplay (bsc#1012628).
- block: bio-integrity: Fix null-ptr-deref in
bio_integrity_map_user() (bsc#1012628).
- accel/qaic: Add overflow check to remap_pfn_range during mmap
(bsc#1012628).
- net/smc: avoid NULL deref of conn->lnk in smc_msg_event
tracepoint (bsc#1012628).
- ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics
(bsc#1012628).
- drm/msm/dpu: fix UV scanlines calculation for YUV UBWC formats
(bsc#1012628).
- drm/msm/dpu: Fix Kaanapali CWB register configuration
(bsc#1012628).
- drm/msm/dsi: don't dump registers past the mapped region
(bsc#1012628).
- drm/msm/dpu: don't mix devm and drmm functions (bsc#1012628).
- block: rename struct gendisk zone_wplugs_lock field
(bsc#1012628).
- block: allow submitting all zone writes from a single context
(bsc#1012628).
- block: fix handling of dead zone write plugs (bsc#1012628).
- selftests: ublk: cap nthreads to kernel's actual nr_hw_queues
(bsc#1012628).
- x86/mce: Restore MCA polling interval halving (bsc#1012628).
- Documentation: intel_pstate: Fix description of asymmetric
packing with SMT (bsc#1012628).
- drm/msm: Fix GMEM_BASE for A650 (bsc#1012628).
- drm/msm/a6xx: Add soft fuse detection support (bsc#1012628).
- drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()
(bsc#1012628).
- drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx
(bsc#1012628).
- drm/msm/a6xx: Restore sysprof_active (bsc#1012628).
- drm/msm: Fix iommu_map_sgtable() return value check and avoid
WARN (bsc#1012628).
- drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table
(bsc#1012628).
- ASoC: intel: sof_sdw: Prepare for configuration without a jack
(bsc#1012628).
- ASoC: sdw_utils: cs42l43: allow spk component names to be
combined (bsc#1012628).
- ASoC: sdw_utils: Check speaker component string allocation
(bsc#1012628).
- riscv: Docs: fix unmatched quote warning (bsc#1012628).
- powerpc/time: Remove redundant preempt_disable|enable() calls
from arch_irq_work_raise() (bsc#1012628).
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot
(bsc#1012628).
- net: tls: fix off-by-one in sg_chain entry count for wrapped
sk_msg ring (bsc#1012628).
- net: tls: prevent chain-after-chain in plain text SG
(bsc#1012628).
- net: phy: DP83TC811: add reading of abilities (bsc#1012628).
- ovpn: tcp - use cached peer pointer in ovpn_tcp_close()
(bsc#1012628).
- ovpn: respect peer refcount in CMD_NEW_PEER error path
(bsc#1012628).
- ovpn: fix race between deleting interface and adding new peer
(bsc#1012628).
- cifs: client: stage smb3_reconfigure() updates and restore
ctx on failure (bsc#1012628).
- phy: apple: atc: Fix typec switch/mux leak on unbind
(bsc#1012628).
- gcc-plugins: Always define CONST_CAST_GIMPLE and CONST_CAST_TREE
(bsc#1012628).
- x86/xen: Fix xen_e820_swap_entry_with_ram() (bsc#1012628).
- vfio/pci: Check BAR resources before exporting a DMABUF
(bsc#1012628).
- ovpn: disable BHs when updating device stats (bsc#1012628).
- tls: Preserve sk_err across recvmsg() when data has been copied
(bsc#1012628).
- net/mlx5: Do not restore destination-less TC rules
(bsc#1012628).
- net/mlx5: Skip disabled vports when setting max TX speed
(bsc#1012628).
- scsi: sd: Fix return code handling in sd_spinup_disk()
(bsc#1012628).
- ASoC: codecs: fs210x: fix possible buffer overflow
(bsc#1012628).
- iommupt: Directly call iommupt's unmap_range() (bsc#1012628).
- iommupt: Avoid rewalking during map (bsc#1012628).
- iommu: Fix loss of errno on map failure for classic ops
(bsc#1012628).
- iommu: Fix up map/unmap debugging for iommupt domains
(bsc#1012628).
- iommu: Handle unmap error when iommu_debug is enabled
(bsc#1012628).
- iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap
(bsc#1012628).
- iommupt: Fix the end_index calculation in __map_range_leaf()
(bsc#1012628).
- ALSA: scarlett2: Add missing error check when initialise
Autogain Status (bsc#1012628).
- ALSA: hda/ca0132: Disable auto-detect on manual output select
(bsc#1012628).
- cachefiles: Fix error return when vfs_mkdir() fails
(bsc#1012628).
- io_uring/net: punt IORING_OP_BIND async if it needs file create
(bsc#1012628).
- vsock/virtio: fix zerocopy completion for multi-skb sends
(bsc#1012628).
- btrfs: check for subvolume before deleting squota qgroup
(bsc#1012628).
- btrfs: fix squota accounting during enable generation
(bsc#1012628).
- ASoC: amd: acp-sdw-legacy: check CPU DAI name before logging
(bsc#1012628).
- spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache()
(bsc#1012628).
- netfilter: nft_inner: release local_lock before re-enabling
softirqs (bsc#1012628).
- ALSA: hda/realtek: Use ALC287_FIXUP_TXNW2781_I2C for ASUS
Strix Gxx5 (bsc#1012628).
- drm/msm/snapshot: fix dumping of the unaligned regions
(bsc#1012628).
- hwmon: (lm90) Stop work before releasing hwmon device
(bsc#1012628).
- hwmon: (lm90) Add lock protection to lm90_alert (bsc#1012628).
- wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU
is disabled (bsc#1012628).
- wifi: iwlwifi: mld: don't dereference a pointer before NULL
checking it (bsc#1012628).
- dma-mapping: move dma_map_resource() sanity check into debug
code (bsc#1012628).
- drm/gem: Make the GEM LRU lock part of drm_device (bsc#1012628).
- drm/xe/gsc: Fix double-free of managed BO in error path
(bsc#1012628).
- drm/xe/vf: Fix signature of print functions (bsc#1012628).
- drm/xe/pf: Fix CFI failure in debugfs access (bsc#1012628).
- drm/xe: Consolidate workaround entries for Wa_14019988906
(bsc#1012628).
- drm/xe: Consolidate workaround entries for Wa_18033852989
(bsc#1012628).
- drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN1
(bsc#1012628).
- drm/xe/tuning: Apply windower hardware filtering setting on
Xe3 and Xe3p (bsc#1012628).
- drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN4
(bsc#1012628).
- wifi: ath11k: fix peer resolution on rx path when peer_id=0
(bsc#1012628).
- wifi: ath12k: fix EHT TX MCS limitation due to wrong 20 MHz-only
parsing (bsc#1012628).
- drm/mediatek: mtk_hdmi_ddc_v2: Fix non-static global variable
(bsc#1012628).
- drm/mediatek: mtk_hdmi_v2: Fix non-static global variable
(bsc#1012628).
- drm/mediatek: mtk_cec: Fix non-static global variable
(bsc#1012628).
- drm/mediatek: mtk_hdmi_ddc: Fix non-static global variable
(bsc#1012628).
- io_uring: propagate array_index_nospec opcode into req->opcode
(bsc#1012628).
- cgroup/rstat: validate cpu before css_rstat_cpu() access
(bsc#1012628).
- net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1012628).
- cifs: Fix undefined variables (bsc#1012628).
- ice: ptp: serialize E825 PHY timer start with PTP lock
(bsc#1012628).
- ice: ptp: use primary NAC semaphore on E825 (bsc#1012628).
- igc: set tx buffer type for SMD frames (bsc#1012628).
- drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP
(bsc#1012628).
- phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp
swing config (bsc#1012628).
- kbuild: pacman-pkg: make "rc" releases adhere to pacman
versioning scheme (bsc#1012628).
- net: dsa: mt7530: fix FDB entries not aging out with short
timeout (bsc#1012628).
- net: dsa: mt7530: preserve VLAN tags on trapped link-local
frames (bsc#1012628).
- net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer
(bsc#1012628).
- platform/surface: aggregator_registry: omit battery & AC nodes
on Surface Laptop 7 (bsc#1012628).
- platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL
(bsc#1012628).
- platform/x86: hp_accel: Check ACPI_COMPANION() against NULL
(bsc#1012628).
- platform/x86: intel-hid: Check ACPI_HANDLE() against NULL
(bsc#1012628).
- platform/x86: intel_sar: Check ACPI_HANDLE() against NULL
(bsc#1012628).
- platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL
(bsc#1012628).
- platform/x86: uniwill-laptop: Properly initialize charging
threshold (bsc#1012628).
- platform/x86: uniwill-laptop: Accept charging threshold of 0
(bsc#1012628).
- platform/x86: uniwill-laptop: Fix behavior of "force" module
param (bsc#1012628).
- platform/x86: asus-armoury: fix mini-LED mode get/set on MODE2
devices (bsc#1012628).
- ASoC: soc-utils: Add missing va_end in snd_soc_ret()
(bsc#1012628).
- drm/amdgpu: Align amdgpu_gtt_mgr entries to TLB size on Tahiti
(v2) (bsc#1012628).
- drm/amdgpu/vce1: Check that the GPU address is < 128 MiB
(bsc#1012628).
- drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets
(bsc#1012628).
- RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port
(bsc#1012628).
- RDMA/rtrs: Fix use-after-free in path file creation cleanup
(bsc#1012628).
- bridge: mcast: Fix a possible use-after-free when removing a
bridge port (bsc#1012628).
- net: phy: honor eee_disabled_modes in phy_support_eee()
(bsc#1012628).
- net: phy: honor eee_disabled_modes in phy_advertise_eee_all()
(bsc#1012628).
- net: airoha: Fix NPU RX DMA descriptor bits (bsc#1012628).
- pds_core: fix error handling in pdsc_devcmd_wait (bsc#1012628).
- pds_core: fix debugfs_lookup dentry leak and error handling
(bsc#1012628).
- erofs: fix managed cache race for unaligned extents
(bsc#1012628).
- erofs: harden h_shared_count in erofs_init_inode_xattrs()
(bsc#1012628).
- erofs: fix metabuf leak in inode xattr initialization
(bsc#1012628).
- wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs
(bsc#1012628).
- wifi: mac80211: fix MLE defragmentation (bsc#1012628).
- wifi: mac80211: fix multi-link element inheritance
(bsc#1012628).
- wifi: wilc1000: fix dma_buffer leak on bus acquire failure
(bsc#1012628).
- ALSA: seq: Serialize UMP output teardown with event_input
(bsc#1012628).
- cgroup: rstat: relax NMI guard after switch to try_cmpxchg
(bsc#1012628).
- Bluetooth: hci_sync: Fix not setting mask for
HCI_EVT_LE_ALL_REMOTE_FEATURES_COMPLETE (bsc#1012628).
- Bluetooth: btintel_pcie: Fix incorrect MAC access programming
(bsc#1012628).
- Bluetooth: btmtk: fix urb->setup_packet leak in error paths
(bsc#1012628).
- udp: gso: Fix handling checksum in __udp_gso_segment
(bsc#1012628).
- udp: Fix UDP length on last GSO_PARTIAL segment (bsc#1012628).
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA
(bsc#1012628).
- net: shaper: annotate the data races (bsc#1012628).
- net: shaper: rework the VALID marking (again) (bsc#1012628).
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length
checks (bsc#1012628).
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer
in recvmsg (bsc#1012628).
- net: ag71xx: check error for platform_get_irq (bsc#1012628).
- bpf, skmsg: fix verdict sk_data_ready racing with ktls rx
(bsc#1012628).
- tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction
(bsc#1012628).
- net: stmmac: eswin: fix HSP CSR init ordering after clock enable
(bsc#1012628).
- net: stmmac: eswin: clear TXD and RXD delay registers during
initialization (bsc#1012628).
- net: stmmac: eswin: correct RGMII delay granularity to 20 ps
(bsc#1012628).
- net: stmmac: eswin: validate RGMII delay values (bsc#1012628).
- gpio: cdev: check if uAPI v2 config attributes are correctly
zeroed (bsc#1012628).
- gpio: aggregator: fix a potential use-after-free (bsc#1012628).
- gpio: aggregator: stop using dev-sync-probe (bsc#1012628).
- gpio: aggregator: remove the software node when deactivating
the aggregator (bsc#1012628).
- gpio: aggregator: lock device when calling device_is_bound()
(bsc#1012628).
- ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove()
(bsc#1012628).
- drm/xe/oa: Fix exec_queue leak on width check in stream open
(bsc#1012628).
- ASoC: cs-amp-lib: Fix wrong sizeof() in
_cs_amp_set_efi_calibration_data() (bsc#1012628).
- ASoC: cs-amp-lib: Fix missing dput() after debugfs_lookup()
(bsc#1012628).
- selftests: net: Fix checksums in xdp_native (bsc#1012628).
- nvme-pci: fix dma_vecs leak on p2p memory (bsc#1012628).
- nvme-pci: fix dma mapping leak on data setup error
(bsc#1012628).
- octeontx2-af: npc: Fix allmulticast skip logic for LBK and
SDP VFs (bsc#1012628).
- net: mana: validate rx_req_idx to prevent out-of-bounds array
access (bsc#1012628).
- tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR
(bsc#1012628).
- net: airoha: Disable GDM2 forwarding before configuring GDM2
loopback (bsc#1012628).
- pds_core: ensure null-termination for firmware version strings
(bsc#1012628).
- net: gro: don't merge zcopy skbs (bsc#1012628).
- net: enetc: fix missing error code when pf->vf_state allocation
fails (bsc#1012628).
- io_uring/nop: pass all errors to userspace (bsc#1012628).
- blk-mq: pop cached request if it is usable (bsc#1012628).
- ksmbd: fix durable reconnect error path file lifetime
(bsc#1012628).
- LoongArch: kprobes: Fix handling of fatal unrecoverable
recursions (bsc#1012628).
- block: avoid use-after-free in disk_free_zone_resources()
(bsc#1012628).
- Documentation: laptops: Update documentation for uniwill laptops
(bsc#1012628).
- platform/x86: uniwill-laptop: Do not enable the charging limit
even when forced (bsc#1012628).
- drm/msm: Restore second parameter name in purge() and evict()
(bsc#1012628).
- security/keys: fix missed RCU read section on lookup
(bsc#1012628).
- Rename to
patches.kernel.org/7.0.11-200-firmware-arm_ffa-Align-RxTx-buffer-size-before.patch.
- Rename to
patches.kernel.org/7.0.11-373-srcu-Don-t-queue-workqueue-handlers-to-never-o.patch.
- Rename to
patches.kernel.org/7.0.11-417-tracing-Avoid-NULL-return-from-hist_field_name.patch.
- commit 9c40593
* Mon Jun 01 2026 msuchanek@suse.de
- packaging: Replace compute-PATCHVERSION with python implementation
This script is copied by kkspec to the package directory and called from
there. That means that libraries from kernel-source cannot be loaded,
and that's the reason why the script is appended to the library that is
most useful for it. compute-PATCHVERSION and mkspec are no longer
shipped in rpm packages which means compute-PATCHVERSION could be folded
into mkspec, and that in turn into tar-up. However, these are all
written in different languages.
- commit de458e0
* Mon Jun 01 2026 mkubecek@suse.cz
- update to 7.1-rc6
- commit e6c850a
* Wed May 27 2026 dmueller@suse.com
- Improve compatibility with awk 2.4.0 (bsc#1266214)
This was meant to match the literal '+', so it needs to be backslashed
not a repetition of the '^' symbol.
- commit fbbce3e
* Tue May 26 2026 msuchanek@suse.de
- compute-PATCHVERSION: Do not append .. to default patch directories
All the callers are either using . or a specific patch directory.
If a caller really needs to load patches from .. it should be passed as
parameter.
- commit d383394
* Tue May 26 2026 msuchanek@suse.de
- compute-PATCHVERSION: Remove unpack logic
This used to be needed when compute-PATCHVERSION was shipped as part of
the rpm package where unpacked patches are not available.
It is not done annymore, and the unpackinng is not needed.
- commit 9a8fa0e
* Tue May 26 2026 msuchanek@suse.de
- packaging: Rip out extra symbols support
Extra symbols are not supported for a long time.
The oldest branch we maintain is SLE 11 SP1 and it does not use patch
guards to select patches.
- commit 7b3d5b0
* Mon May 25 2026 msuchanek@suse.de
- packaging: compute-PATCHVERSION.sh -> compute-PATCHVERSION
- commit fc624df
* Sun May 24 2026 mkubecek@suse.cz
- update to 7.1-rc5
- update configs
- EL3=m (i386 only, reverted driver removal)
- commit 78f8dcb
* Sat May 23 2026 jslaby@suse.cz
- tracing: Avoid NULL return from hist_field_name() on truncation
(git-fixes).
- firmware: arm_ffa: Align RxTx buffer size before mapping
(git-fixes).
- commit bb95589
* Sat May 23 2026 jslaby@suse.cz
- Linux 7.0.10 (bsc#1012628).
- blk-cgroup: wait for blkcg cleanup before initializing new disk
(bsc#1012628).
- md: suppress spurious superblock update error message for
dm-raid (bsc#1012628).
- fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START
(bsc#1012628).
- fs/mbcache: cancel shrink work before destroying the cache
(bsc#1012628).
- md/raid1: fix the comparing region of interval tree
(bsc#1012628).
- fs: fix archiecture-specific compat_ftruncate64 (bsc#1012628).
- drbd: Balance RCU calls in drbd_adm_dump_devices()
(bsc#1012628).
- loop: fix partition scan race between udev and
loop_reread_partitions() (bsc#1012628).
- block: fix zones_cond memory leak on zone revalidation error
paths (bsc#1012628).
- nilfs2: reject zero bd_oblocknr in
nilfs_ioctl_mark_blocks_dirty() (bsc#1012628).
- blk-cgroup: fix disk reference leak in
blkcg_maybe_throttle_current() (bsc#1012628).
- pstore/ram: fix resource leak when ioremap() fails
(bsc#1012628).
- erofs: include the trailing NUL in FS_IOC_GETFSLABEL
(bsc#1012628).
- md: fix array_state=clear sysfs deadlock (bsc#1012628).
- ublk: reset per-IO canceled flag on each fetch (bsc#1012628).
- blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default()
(bsc#1012628).
- erofs: handle 48-bit blocks/uniaddr for extra devices
(bsc#1012628).
- md: remove unused static md_wq workqueue (bsc#1012628).
- md: wake raid456 reshape waiters before suspend (bsc#1012628).
- dcache: permit dynamic_dname()s up to NAME_MAX (bsc#1012628).
- btrfs: fix the inline compressed extent check in
inode_need_compress() (bsc#1012628).
- btrfs: fix deadlock between reflink and transaction commit
when using flushoncommit (bsc#1012628).
- btrfs: do not reject a valid running dev-replace (bsc#1012628).
- OPP: debugfs: Use performance level if available to distinguish
between rates (bsc#1012628).
- OPP: Move break out of scoped_guard in
dev_pm_opp_xlate_required_opp() (bsc#1012628).
- ACPI: x86: cmos_rtc: Clean up address space handler driver
(bsc#1012628).
- ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver
(bsc#1012628).
- devres: fix missing node debug info in devm_krealloc()
(bsc#1012628).
- thermal/drivers/spear: Fix error condition for reading
st,thermal-flags (bsc#1012628).
- debugfs: check for NULL pointer in debugfs_create_str()
(bsc#1012628).
- debugfs: fix placement of EXPORT_SYMBOL_GPL for
debugfs_create_str() (bsc#1012628).
- soundwire: debugfs: initialize firmware_file to empty string
(bsc#1012628).
- amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init()
(bsc#1012628).
- amd-pstate: Update cppc_req_cached in fast_switch case
(bsc#1012628).
- cpufreq: Pass the policy to cpufreq_driver->adjust_perf()
(bsc#1012628).
- PCI: use generic driver_override infrastructure (bsc#1012628).
- platform/wmi: use generic driver_override infrastructure
(bsc#1012628).
- vdpa: use generic driver_override infrastructure (bsc#1012628).
- s390/cio: use generic driver_override infrastructure
(bsc#1012628).
- s390/ap: use generic driver_override infrastructure
(bsc#1012628).
- bus: fsl-mc: use generic driver_override infrastructure
(bsc#1012628).
- locking/mutex: Rename mutex_init_lockep() (bsc#1012628).
- locking/mutex: Fix wrong comment for CONFIG_DEBUG_LOCK_ALLOC
(bsc#1012628).
- irqchip/irq-pic32-evic: Address warning related to wrong
printf() formatter (bsc#1012628).
- hrtimer: Avoid pointless reprogramming in
__hrtimer_start_range_ns() (bsc#1012628).
- hrtimer: Reduce trace noise in hrtimer_start() (bsc#1012628).
- locking: Fix rwlock and spinlock lock context annotations
(bsc#1012628).
- signal: Fix the lock_task_sighand() annotation (bsc#1012628).
- ww-mutex: Fix the ww_acquire_ctx function annotations
(bsc#1012628).
- perf/amd/ibs: Account interrupt for discarded samples
(bsc#1012628).
- perf/amd/ibs: Preserve PhyAddrVal bit when clearing PhyAddr MSR
(bsc#1012628).
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS
NMI handler (bsc#1012628).
- x86/tdx: Fix the typo in TDX_ATTR_MIGRTABLE (bsc#1012628).
- rust: sync: atomic: Remove bound `T: Sync` for
`Atomic::from_ptr()` (bsc#1012628).
- sparc64: vdso: Link with -z noexecstack (bsc#1012628).
- scripts/gdb: timerlist: Adapt to move of tk_core (bsc#1012628).
- locking: Fix rwlock support in <linux/spinlock_up.h>
(bsc#1012628).
- sched/topology: Compute sd_weight considering cpuset partitions
(bsc#1012628).
- x86/irqflags: Preemptively move include paravirt.h directive
where it belongs (bsc#1012628).
- sched/topology: Fix sched_domain_span() (bsc#1012628).
- irqchip/renesas-rzg2l: Fix error path in
rzg2l_irqc_common_probe() (bsc#1012628).
- ASoC: Intel: avs: Check maximum valid CPUID leaf (bsc#1012628).
- ASoC: Intel: avs: Include CPUID header at file scope
(bsc#1012628).
- x86/vdso: Clean up remnants of VDSO32_NOTE_MASK (bsc#1012628).
- firmware: dmi: Correct an indexing error in dmi.h (bsc#1012628).
- fs/resctrl: Report invalid domain ID when parsing io_alloc_cbm
(bsc#1012628).
- sched: Make class_schedulers avoid pushing current, and get
rid of proxy_tag_curr() (bsc#1012628).
- sched/rt: Skip group schedulable check with rt_group_sched=0
(bsc#1012628).
- wifi: ath11k: fix memory leaks in beacon template setup
(bsc#1012628).
- wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt()
(bsc#1012628).
- wifi: rtlwifi: pci: fix possible use-after-free caused by
unfinished irq_prepare_bcn_tasklet (bsc#1012628).
- bpf: test_run: Fix the null pointer dereference issue in
bpf_lwt_xmit_push_encap (bsc#1012628).
- wifi: ath12k: account TX stats only when ACK/BA status is
present (bsc#1012628).
- wifi: ath12k: Fix legacy rate mapping for monitor mode capture
(bsc#1012628).
- selftests/bpf: Handle !CONFIG_SMC in bpf_smc.c (bsc#1012628).
- wifi: ieee80211: fix definition of EHT-MCS 15 in MRU
(bsc#1012628).
- dpaa2: add independent dependencies for FSL_DPAA2_SWITCH
(bsc#1012628).
- dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n (bsc#1012628).
- s390/bpf: Zero-extend bpf prog return values and kfunc arguments
(bsc#1012628).
- powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy
(bsc#1012628).
- powerpc/64s: Fix unmap race with PMD migration entries
(bsc#1012628).
- module: Fix freeing of charp module parameters when
CONFIG_SYSFS=n (bsc#1012628).
- wifi: libertas: use USB anchors for tracking in-flight URBs
(bsc#1012628).
- wifi: libertas: don't kill URBs in interrupt context
(bsc#1012628).
- bpf: Do not allow deleting local storage in NMI (bsc#1012628).
- selftests/nolibc: fix test_file_stream() on musl libc
(bsc#1012628).
- selftests/nolibc: Fix build with host headers and libc
(bsc#1012628).
- tools/nolibc/printf: Change variables 'c' to 'ch' and 'tmpbuf[]'
to 'outbuf[]' (bsc#1012628).
- tools/nolibc/printf: Move snprintf length check to callback
(bsc#1012628).
- tools/nolibc: MIPS: fix clobbers of 'lo' and 'hi' registers
on different ISAs (bsc#1012628).
- tools/nolibc: avoid -Wundef warning for __STDC_VERSION__
(bsc#1012628).
- wifi: mt76: mt7996: fix the behavior of radar detection
(bsc#1012628).
- wifi: mt76: mt7996: fix iface combination for different chipsets
(bsc#1012628).
- wifi: mt76: mt7996: Set mtxq->wcid just for primary link
(bsc#1012628).
- wifi: mt76: mt7996: Reset mtxq->idx if primary link is removed
in mt7996_vif_link_remove() (bsc#1012628).
- wifi: mt76: mt7996: Switch to the secondary link if the default
one is removed (bsc#1012628).
- wifi: mt76: mt7996: Clear wcid pointer in
mt7996_mac_sta_deinit_link() (bsc#1012628).
- wifi: mt76: mt7996: Reset ampdu_state state in case of failure
in mt7996_tx_check_aggr() (bsc#1012628).
- wifi: mt76: mt7921: Reset ampdu_state state in case of failure
in mt76_connac2_tx_check_aggr() (bsc#1012628).
- wifi: mt76: mt7925: Fix incorrect MLO mode in firmware control
(bsc#1012628).
- wifi: mt76: mt7615: fix use_cts_prot support (bsc#1012628).
- wifi: mt76: mt7915: fix use_cts_prot support (bsc#1012628).
- wifi: mt76: mt7925: prevent NULL pointer dereference in
mt7925_tx_check_aggr() (bsc#1012628).
- wifi: mt76: mt7925: prevent NULL vif dereference in
mt7925_mac_write_txwi (bsc#1012628).
- wifi: mt76: mt7996: fix FCS error flag check in RX descriptor
(bsc#1012628).
- wifi: mt76: mt7921: Place upper limit on station AID
(bsc#1012628).
- wifi: mt76: Fix memory leak destroying device (bsc#1012628).
- wifi: mt76: mt7996: Fix NPU stop procedure (bsc#1012628).
- wifi: mt76: npu: Add missing rx_token_size initialization
(bsc#1012628).
- wifi: mt76: mt7925: drop puncturing handling from BSS change
path (bsc#1012628).
- wifi: mt76: mt7925: fix potential deadlock in
mt7925_roc_abort_sync (bsc#1012628).
- wifi: mt76: Fix memory leak after
mt76_connac_mcu_alloc_sta_req() (bsc#1012628).
- wifi: mt76: mt7925: fix tx power setting failure after chip
reset (bsc#1012628).
- wifi: mt76: mt7921: fix potential deadlock in
mt7921_roc_abort_sync (bsc#1012628).
- wifi: mt76: fix deadlock in remain-on-channel (bsc#1012628).
- wifi: mt76: fix backoff fields and max_power calculation
(bsc#1012628).
- arm64: cpufeature: Make PMUVer and PerfMon unsigned
(bsc#1012628).
- bpf: Switch CONFIG_CFI_CLANG to CONFIG_CFI (bsc#1012628).
- wifi: mt76: mt7996: fix wrong DMAD length when using MAC TXP
(bsc#1012628).
- wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event
(bsc#1012628).
- wifi: mt76: mt7915: fix use-after-free bugs in
mt7915_mac_dump_work() (bsc#1012628).
- wifi: mt76: mt7996: fix use-after-free bugs in
mt7996_mac_dump_work() (bsc#1012628).
- wifi: mt76: mt7921: fix 6GHz regulatory update on connection
(bsc#1012628).
- wifi: mt76: mt7996: Add missing CHANCTX_STA_CSA property
(bsc#1012628).
- wifi: mt76: mt7996: Remove link pointer dependency in
mt7996_mac_sta_remove_links() (bsc#1012628).
- wifi: mt76: mt7996: Decrement sta counter removing the link
in mt7996_mac_reset_sta_iter() (bsc#1012628).
- wifi: mt76: fix multi-radio on-channel scanning (bsc#1012628).
- wifi: mt76: support upgrading passive scans to active
(bsc#1012628).
- wifi: mt76: mt7996: fix RRO EMU configuration (bsc#1012628).
- bpf: Fix refcount check in check_struct_ops_btf_id()
(bsc#1012628).
- selftests/bpf: Fix sockmap_multi_channels reliability
(bsc#1012628).
- bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path
(bsc#1012628).
- bpf: Fix variable length stack write over spilled pointers
(bsc#1012628).
- arm_mpam: Ensure in_reset_state is false after applying
configuration (bsc#1012628).
- arm_mpam: Reset when feature configuration bit unset
(bsc#1012628).
- bpf,arc_jit: Fix missing newline in pr_err messages
(bsc#1012628).
- wifi: rtw89: phy: fix uninitialized variable access in
rtw89_phy_cfo_set_crystal_cap() (bsc#1012628).
- drivers/vfio_pci_core: Change PXD_ORDER check from switch case
to if/else block (bsc#1012628).
- r8152: fix incorrect register write to USB_UPHY_XTAL
(bsc#1012628).
- selftests/tracing: Fix to make --logdir option work again
(bsc#1012628).
- selftests/tracing: Fix to check awk supports non POSIX
strtonum() (bsc#1012628).
- powerpc/crash: fix backup region offset update to elfcorehdr
(bsc#1012628).
- powerpc/crash: Update backup region offset in elfcorehdr on
memory hotplug (bsc#1012628).
- selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
(bsc#1012628).
- bpf: Fix abuse of kprobe_write_ctx via freplace (bsc#1012628).
- macvlan: annotate data-races around port->bc_queue_len_used
(bsc#1012628).
- bpf: Use copy_map_value_locked() in alloc_htab_elem() for
BPF_F_LOCK (bsc#1012628).
- bpf: fix end-of-list detection in cgroup_storage_get_next_key()
(bsc#1012628).
- bpf: Fix stale offload->prog pointer after constant blinding
(bsc#1012628).
- net: ethernet: ti-cpsw:: rename soft_reset() function
(bsc#1012628).
- net: ethernet: ti-cpsw: fix linking built-in code to modules
(bsc#1012628).
- wifi: brcmfmac: Fix error pointer dereference (bsc#1012628).
- wifi: mac80211: handle VHT EXT NSS in
ieee80211_determine_our_sta_mode() (bsc#1012628).
- bpf: Drop task_to_inode and inet_conn_established from lsm
sleepable hooks (bsc#1012628).
- bpf: reject negative CO-RE accessor indices in
bpf_core_parse_spec() (bsc#1012628).
- bpf: Prefer vmlinux symbols over module symbols for unqualified
kprobes (bsc#1012628).
- wifi: ath10k: fix station lookup failure during disconnect
(bsc#1012628).
- bpf: Fix linked reg delta tracking when src_reg == dst_reg
(bsc#1012628).
- net: dropreason: add SKB_DROP_REASON_RECURSION_LIMIT
(bsc#1012628).
- net: plumb drop reasons to __dev_queue_xmit() (bsc#1012628).
- net: qdisc_pkt_len_segs_init() cleanup (bsc#1012628).
- net: pull headers in qdisc_pkt_len_segs_init() (bsc#1012628).
- arm64: entry: Don't preempt with SError or Debug masked
(bsc#1012628).
- ACPI: AGDI: fix missing newline in error message (bsc#1012628).
- arm64: kexec: Remove duplicate allocation for trans_pgd
(bsc#1012628).
- bpf: Propagate error from visit_tailcall_insn (bsc#1012628).
- bpf: Fix ld_{abs,ind} failure path analysis in subprogs
(bsc#1012628).
- bpf: Remove static qualifier from local subprog pointer
(bsc#1012628).
- mptcp: better mptcp-level RTT estimator (bsc#1012628).
- bpf: Fix use-after-free in offloaded map/prog info fill
(bsc#1012628).
- macsec: Support VLAN-filtering lower devices (bsc#1012628).
- net: bcmgenet: fix off-by-one in bcmgenet_put_txcb
(bsc#1012628).
- net: bcmgenet: fix leaking free_bds (bsc#1012628).
- net: bcmgenet: fix racing timeout handler (bsc#1012628).
- net: airoha: Add dma_rmb() and READ_ONCE() in
airoha_qdma_rx_process() (bsc#1012628).
- eth: fbnic: Use wake instead of start (bsc#1012628).
- netfilter: xt_socket: enable defrag after all other checks
(bsc#1012628).
- netfilter: nft_fwd_netdev: check ttl/hl before forwarding
(bsc#1012628).
- bpf: fix mm lifecycle in open-coded task_vma iterator
(bsc#1012628).
- bpf: switch task_vma iterator from mmap_lock to per-VMA locks
(bsc#1012628).
- bpf: return VMA snapshot from task_vma iterator (bsc#1012628).
- bpf: Fix RCU stall in bpf_fd_array_map_clear() (bsc#1012628).
- net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf
(bsc#1012628).
- net: airoha: Fix FE_PSE_BUF_SET configuration if PPE2 is
available (bsc#1012628).
- bpf: Enforce regsafe base id consistency for BPF_ADD_CONST
scalars (bsc#1012628).
- selftests/bpf: fix __jited_unpriv tag name (bsc#1012628).
- net/sched: cls_fw: fix NULL dereference of "old" filters before
change() (bsc#1012628).
- net/sched: act_ct: Only release RCU read lock after ct_ft
(bsc#1012628).
- selftests: netfilter: nft_tproxy.sh: adjust to socat changes
(bsc#1012628).
- net: mana: Use pci_name() for debugfs directory naming
(bsc#1012628).
- net: mana: Move current_speed debugfs file to mana_init_port()
(bsc#1012628).
- net: airoha: Add missing RX_CPU_IDX() configuration in
airoha_qdma_cleanup_rx_queue() (bsc#1012628).
- net_sched: fix skb memory leak in deferred qdisc drops
(bsc#1012628).
- bpf: Fix same-register dst/src OOB read and pointer leak in
sock_ops (bsc#1012628).
- bpf: Allow instructions with arena source and non-arena dest
registers (bsc#1012628).
- selftests/bpf: Fix reg_bounds to match new tnum-based refinement
(bsc#1012628).
- net/rds: Optimize rds_ib_laddr_check (bsc#1012628).
- net/rds: Restrict use of RDS/IB to the initial network namespace
(bsc#1012628).
- bpf: Fix OOB in pcpu_init_value (bsc#1012628).
- ppp: require CAP_NET_ADMIN in target netns for unattached ioctls
(bsc#1012628).
- net: ipa: Fix programming of QTIME_TIMESTAMP_CFG (bsc#1012628).
- net: ipa: Fix decoding EV_PER_EE for IPA v5.0+ (bsc#1012628).
- dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional
for sja1110 (bsc#1012628).
- net: phy: fix a return path in get_phy_c45_ids() (bsc#1012628).
- net/mlx5e: Fix features not applied during netdev registration
(bsc#1012628).
- net/mlx5e: IPsec, fix ASO poll timeout with
read_poll_timeout_atomic() (bsc#1012628).
- net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU
registers (bsc#1012628).
- net: fix skb_ext_total_length() BUILD_BUG_ON with
CONFIG_GCOV_PROFILE_ALL (bsc#1012628).
- bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
(bsc#1012628).
- Bluetooth: L2CAP: Fix printing wrong information if SDU length
exceeds MTU (bsc#1012628).
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error
(bsc#1012628).
- Bluetooth: fix locking in hci_conn_request_evt() with
HCI_PROTO_DEFER (bsc#1012628).
- Bluetooth: l2cap: Add missing chan lock in
l2cap_ecred_reconf_rsp (bsc#1012628).
- Bluetooth: SCO: check for codecs->num_codecs == 1 before
assigning to sco_pi(sk)->codec (bsc#1012628).
- net: phy: qcom: at803x: Use the correct bit to disable extended
next page (bsc#1012628).
- udp: Force compute_score to always inline (bsc#1012628).
- tcp: Don't set treq->req_usec_ts in cookie_tcp_reqsk_init()
(bsc#1012628).
- sctp: fix missing encap_port propagation for GSO fragments
(bsc#1012628).
- sctp: disable BH before calling udp_tunnel_xmit_skb()
(bsc#1012628).
- selftests/namespaces: remove unused utils.h include from
listns_efault_test (bsc#1012628).
- net, bpf: fix null-ptr-deref in xdp_master_redirect() for down
master (bsc#1012628).
- net: airoha: Fix VIP configuration for AN7583 SoC (bsc#1012628).
- net: airoha: Add missing PPE configurations in
airoha_ppe_hw_init() (bsc#1012628).
- drm/panel: ilitek-ili9882t: Select DRM_DISPLAY_DSC_HELPER
(bsc#1012628).
- selftests/futex: Fix incorrect result reporting of futex_requeue
test item (bsc#1012628).
- drm/komeda: fix integer overflow in AFBC framebuffer size check
(bsc#1012628).
- dma-fence: Fix sparse warnings due __rcu annotations
(bsc#1012628).
- drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm()
(bsc#1012628).
- drm/virtio: Allow importing prime buffers when 3D is enabled
(bsc#1012628).
- ASoC: soc-compress: use function to clear symmetric params
(bsc#1012628).
- PCI/TPH: Allow TPH enable for RCiEPs (bsc#1012628).
- PCI: endpoint: pci-epf-vntb: Fix MSI doorbell IRQ unwind
(bsc#1012628).
- PCI: endpoint: pci-epf-test: Don't free doorbell IRQ unless
requested (bsc#1012628).
- PCI: endpoint: pci-ep-msi: Fix error unwind and prevent double
alloc (bsc#1012628).
- drm/sun4i: mixer: Fix layer init code (bsc#1012628).
- drm/sun4i: backend: fix error pointer dereference (bsc#1012628).
- drm/xe: Consolidate workaround entries for Wa_14019877138
(bsc#1012628).
- drm/xe: Consolidate workaround entries for Wa_14019386621
(bsc#1012628).
- drm/xe/xe2_hpg: Drop invalid workaround Wa_15010599737
(bsc#1012628).
- gpu: nova-core: gsp: use empty slices instead of [0..0] ranges
(bsc#1012628).
- gpu: nova-core: gsp: fix improper handling of empty slot in cmdq
(bsc#1012628).
- drm/amdkfd: Removed commented line for MQD queue priority
(bsc#1012628).
- PCI: imx6: Fix device node reference leak in imx_pcie_probe()
(bsc#1012628).
- ASoC: SDCA: Add default value for
mipi-sdca-function-reset-max-delay (bsc#1012628).
- ASoC: SDCA: Update counting of SU/GE DAPM routes (bsc#1012628).
- crypto: inside-secure/eip93 - fix register definition
(bsc#1012628).
- ASoC: sti: Return errors from regmap_field_alloc()
(bsc#1012628).
- ASoC: sti: use managed regmap_field allocations (bsc#1012628).
- dm cache: fix null-deref with concurrent writes in passthrough
mode (bsc#1012628).
- dm cache: fix write path cache coherency in passthrough mode
(bsc#1012628).
- dm cache: fix write hang in passthrough mode (bsc#1012628).
- dm cache policy smq: fix missing locks in invalidating cache
blocks (bsc#1012628).
- dm cache: fix concurrent write failure in passthrough mode
(bsc#1012628).
- dm cache: fix dirty mapping checking in passthrough mode
switching (bsc#1012628).
- dm-mpath: don't stop probing paths at presuspend (bsc#1012628).
- drm/amd/ras: Fix type size of remainder argument (bsc#1012628).
- dt-bindings: mmc: dwcmshc-sdhci: Fix resets array validation
(bsc#1012628).
- drm/amdgpu: GFX12.1 scratch memory limit up to 57-bit
(bsc#1012628).
- platform/chrome: chromeos_tbmc: Drop wakeup source on remove
(bsc#1012628).
- gpu: nova-core: use checked arithmetic in FWSEC firmware parsing
(bsc#1012628).
- gpu: nova-core: create falcon firmware DMA objects lazily
(bsc#1012628).
- gpu: nova-core: falcon: rename load parameters to reflect DMA
dependency (bsc#1012628).
- gpu: nova-core: firmware: fix and explain v2 header offsets
computations (bsc#1012628).
- PCI: dwc: ep: Fix MSI-X Table Size configuration in
dw_pcie_ep_set_msix() (bsc#1012628).
- PCI: dwc: ep: Mirror the max link width and speed fields to
all functions (bsc#1012628).
- PCI: dwc: Perform cleanup in the error path of
dw_pcie_resume_noirq() (bsc#1012628).
- dm cache metadata: fix memory leak on metadata abort retry
(bsc#1012628).
- dm log: fix out-of-bounds write due to region_count overflow
(bsc#1012628).
- iopoll: fix function parameter names in
read_poll_timeout_atomic() (bsc#1012628).
- drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector
earlier in atomic_enable() (bsc#1012628).
- drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook
to drm_bridge_funcs (bsc#1012628).
- drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in
bridge atomic check (bsc#1012628).
- spi: nxp-xspi: Use reinit_completion() for repeated operations
(bsc#1012628).
- spi: nxp-fspi: Use reinit_completion() for repeated operations
(bsc#1012628).
- spi: fsl-qspi: Use reinit_completion() for repeated operations
(bsc#1012628).
- spi: axiado: Remove redundant pm_runtime_mark_last_busy() call
(bsc#1012628).
- media: i2c: og01a1b: Fix V4L2 subdevice data initialization
on probe (bsc#1012628).
- media: synopsys: VIDEO_DW_MIPI_CSI2RX should depend on
ARCH_ROCKCHIP (bsc#1012628).
- drm/amd/pm: Fix xgmi max speed reporting (bsc#1012628).
- spi: atcspi200: fix mutex initialization order (bsc#1012628).
- selftests/sched_ext: Add missing error check for exit__load()
(bsc#1012628).
- drm/v3d: Handle error from drm_sched_entity_init()
(bsc#1012628).
- drm/sun4i: Fix resource leaks (bsc#1012628).
- crypto: inside-secure/eip93 - register hash before authenc
algorithms (bsc#1012628).
- PCI: rzg3s-host: Fix reset handling in probe error path
(bsc#1012628).
- PCI: rzg3s-host: Reorder reset assertion during suspend
(bsc#1012628).
- dt-bindings: PCI: renesas,r9a08g045s33-pcie: Fix naming
properties (bsc#1012628).
- iommu/riscv: Add IOTINVAL after updating DDT/PDT entries
(bsc#1012628).
- iommu/riscv: Skip IRQ count check when using MSI interrupts
(bsc#1012628).
- iommu/riscv: Add missing GENERIC_MSI_IRQ (bsc#1012628).
- iommu/riscv: Stop polling when CQCSR reports an error
(bsc#1012628).
- drm/amdkfd: Update queue properties for metadata ring
(bsc#1012628).
- drm/amd/ras: Fix NULL deref in ras_core_ras_interrupt_detected()
(bsc#1012628).
- drm/amdgpu: Add default case in DVI mode validation
(bsc#1012628).
- regulator: dt-bindings: fp9931: Make vin-supply property as
required (bsc#1012628).
- regulator: fp9931: Fix handling of mandatory "vin" supply
(bsc#1012628).
- drm/amd/ras: Fix NULL deref in
ras_core_get_utc_second_timestamp() (bsc#1012628).
- drm/amdgpu: Drop redundant queue NULL check in hang detect
worker (bsc#1012628).
- drm/amdgpu: Remove dead negative offset check in
amdgpu_virt_init_critical_region() (bsc#1012628).
- dm init: ensure device probing has finished in dm-mod.waitfor=
(bsc#1012628).
- fbdev: matroxfb: Mark variable with __maybe_unused to avoid
W=1 build break (bsc#1012628).
- crypto: simd - reject compat registrations without __ prefixes
(bsc#1012628).
- crypto: tegra - Disable softirqs before finalizing request
(bsc#1012628).
- crypto: atmel-aes - guard unregister on error in
atmel_aes_register_algs (bsc#1012628).
- padata: Remove cpu online check from cpu add and removal
(bsc#1012628).
- padata: Put CPU offline callback in ONLINE section to allow
failure (bsc#1012628).
- PCI: dwc: rcar-gen4: Change EPC BAR alignment to 4K as per
the documentation (bsc#1012628).
- accel/amdxdna: fix missing newline in pr_err message
(bsc#1012628).
- drm/amd/ras: Remove redundant NULL check in pending bad-bank
list iteration (bsc#1012628).
- drm/amdgpu/gfx10: look at the right prop for gfx queue priority
(bsc#1012628).
- drm/amdgpu/gfx11: look at the right prop for gfx queue priority
(bsc#1012628).
- spi: hisi-kunpeng: prevent infinite while() loop in
hisi_spi_flush_fifo (bsc#1012628).
- PCI: sky1: Fix missing cleanup of ECAM config on probe failure
(bsc#1012628).
- drm/imagination: Switch reset_reason fields from enum to u32
(bsc#1012628).
- iommu/tegra241-cmdqv: Set supports_cmd op in
tegra241_vcmdq_hw_init() (bsc#1012628).
- iommu/tegra241-cmdqv: Update uAPI to clarify HYP_OWN requirement
(bsc#1012628).
- drm/msm: add missing MODULE_DEVICE_ID definitions (bsc#1012628).
- drm/msm/dpu: fix mismatch between power and frequency
(bsc#1012628).
- drm/msm/dsi: add the missing parameter description
(bsc#1012628).
- drm/msm/dpu: don't try using 2 LMs if only one DSC is available
(bsc#1012628).
- drm/msm/dsi: fix bits_per_pclk (bsc#1012628).
- drm/msm/dsi: fix hdisplay calculation for CMD mode panel
(bsc#1012628).
- drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0
(bsc#1012628).
- ASoC: rockchip: rockchip_sai: Set slot width for non-TDM mode
(bsc#1012628).
- tools/sched_ext: scx_pair: fix pair_ctx indexing for CPU pairs
(bsc#1012628).
- drm/panel: sharp-ls043t1le01: make use of prepare_prev_first
(bsc#1012628).
- drm/panel: simple: Correct G190EAN01 prepare timing
(bsc#1012628).
- PCI: qcom: Advertise Hotplug Slot Capability with no Command
Completion support (bsc#1012628).
- PCI: Prevent shrinking bridge window from its required size
(bsc#1012628).
- PCI: Fix premature removal from realloc_head list during
resource assignment (bsc#1012628).
- crypto: hisilicon/sec2 - prevent req used-after-free for sec
(bsc#1012628).
- PCI: Fix alignment calculation for resource size larger than
align (bsc#1012628).
- iommu/riscv: Fix signedness bug (bsc#1012628).
- ALSA: core: Validate compress device numbers without dynamic
minors (bsc#1012628).
- drm/amd/display: Avoid NULL dereference in dc_dmub_srv error
paths (bsc#1012628).
- ASoC: amd: acp: update dmic_num logic for acp pdm dmic
(bsc#1012628).
- drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled
(bsc#1012628).
- drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs
(bsc#1012628).
- drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock
(bsc#1012628).
- drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0
(bsc#1012628).
- drm/amd/pm/ci: Clear EnabledForActivity field for memory levels
(bsc#1012628).
- drm/amd/pm/ci: Fill DW8 fields from SMC (bsc#1012628).
- drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board
(bsc#1012628).
- drm/amdgpu/uvd4.2: Don't initialize UVD 4.2 when DPM is disabled
(bsc#1012628).
- PCI/DPC: Log AER error info for DPC/EDR uncorrectable errors
(bsc#1012628).
- hwmon: (aspeed-g6-pwm-tach): remove redundant driver remove
callback (bsc#1012628).
- ALSA: hda/realtek: fix bad indentation for alc269 (bsc#1012628).
- ALSA: hda/realtek: fix code style (ERROR: else should follow
close brace '}') (bsc#1012628).
- ASoC: SOF: Intel: hda: Place check before dereference
(bsc#1012628).
- drm/msm/vma: Avoid lock in VM_BIND fence signaling path
(bsc#1012628).
- drm/msm/a6xx: Add missing aperture_lock init (bsc#1012628).
- drm/msm: Reject fb creation from _NO_SHARE objs (bsc#1012628).
- drm/msm: Fix VM_BIND UNMAP locking (bsc#1012628).
- drm/msm/a6xx: Fix HLSQ register dumping (bsc#1012628).
- drm/msm/shrinker: Fix can_block() logic (bsc#1012628).
- drm/msm/a6xx: Fix dumping A650+ debugbus blocks (bsc#1012628).
- drm/msm/a6xx: Use barriers while updating HFI Q headers
(bsc#1012628).
- drm/msm/a8xx: Fix the ticks used in submit traces (bsc#1012628).
- drm/msm/a6xx: Switch to preemption safe AO counter
(bsc#1012628).
- drm/msm/a6xx: Correct OOB usage (bsc#1012628).
- drm/msm/adreno: Implement gx_is_on() for A8x (bsc#1012628).
- drm/msm/a6xx: Fix gpu init from secure world (bsc#1012628).
- ALSA: hda/cmedia: Remove duplicate pin configuration parsing
(bsc#1012628).
- pmdomain: ti: omap_prm: Fix a reference leak on device node
(bsc#1012628).
- pmdomain: imx: scu-pd: Fix device_node reference leak during
- >probe() (bsc#1012628).
- PM: domains: De-constify fields in struct
dev_pm_domain_attach_data (bsc#1012628).
- drm/msm/dpu: drop INTF_0 on MSM8953 (bsc#1012628).
- ASoC: fsl_micfil: Add access property for "VAD Detected"
(bsc#1012628).
- ASoC: fsl_micfil: Fix event generation in hwvad_put_enable()
(bsc#1012628).
- ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode()
(bsc#1012628).
- ASoC: fsl_micfil: Fix event generation in micfil_range_set()
(bsc#1012628).
- ASoC: fsl_micfil: Fix event generation in
micfil_put_dc_remover_state() (bsc#1012628).
- ASoC: fsl_micfil: Fix event generation in micfil_quality_set()
(bsc#1012628).
- ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put()
(bsc#1012628).
- ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put()
(bsc#1012628).
- ASoC: fsl_easrc: Check the variable range in
fsl_easrc_iec958_put_bits() (bsc#1012628).
- ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits()
(bsc#1012628).
- ASoC: fsl_easrc: Change the type for iec958 channel status
controls (bsc#1012628).
- iommu/amd: Fix clone_alias() to use the original device's devid
(bsc#1012628).
- iommu/riscv: Remove overflows on the invalidation path
(bsc#1012628).
- ASoC: qcom: qdsp6: topology: check widget type before accessing
data (bsc#1012628).
- PCI: dwc: Fix type mismatch for kstrtou32_from_user() return
value (bsc#1012628).
- crypto: qat - disable 4xxx AE cluster when lead engine is
fused off (bsc#1012628).
- crypto: qat - disable 420xx AE cluster when lead engine is
fused off (bsc#1012628).
- crypto: qat - fix compression instance leak (bsc#1012628).
- crypto: qat - fix type mismatch in RAS sysfs show functions
(bsc#1012628).
- crypto: iaa - fix per-node CPU counter reset in
rebalance_wq_table() (bsc#1012628).
- crypto: qat - use swab32 macro (bsc#1012628).
- ALSA: hda: Notify IEC958 Default PCM switch state changes
(bsc#1012628).
- ASoC: rsnd: Fix potential out-of-bounds access of
component_dais[] (bsc#1012628).
- PCI: Enable AtomicOps only if Root Port supports them
(bsc#1012628).
- PCI: imx6: Keep Root Port MSI capability with iMSI-RX to work
around hardware bug (bsc#1012628).
- PCI: aspeed: Fix IRQ domain leak on platform_get_irq() failure
(bsc#1012628).
- dt-bindings: PCI: imx6q-pcie: Fix maxItems of clocks and
clock-names (bsc#1012628).
- PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not
found (bsc#1012628).
- gpu: nova-core: bitfield: fix broken Default implementation
(bsc#1012628).
- selftests/mm: skip migration tests if NUMA is unavailable
(bsc#1012628).
- Documentation: fix a hugetlbfs reservation statement
(bsc#1012628).
- Docs/admin-guide/mm/damn/lru_sort: fix intervals autotune
parameter name (bsc#1012628).
- Docs/mm/damon/index: fix typo: autoamted -> automated
(bsc#1012628).
- zram: do not permit params change after init (bsc#1012628).
- selftest: memcg: skip memcg_sock test if address family not
supported (bsc#1012628).
- gpu: nova-core: remove redundant `.as_ref()` for `dev_*` print
(bsc#1012628).
- gpu: nova-core: fix missing colon in SEC2 boot debug message
(bsc#1012628).
- ALSA: scarlett2: Add missing sentinel initializer field
(bsc#1012628).
- ASoC: qcom: audioreach: explicitly enable speaker protection
modules (bsc#1012628).
- ASoC: SOF: compress: return the configured codec from get_params
(bsc#1012628).
- PCI/NPEM: Set LED_HW_PLUGGABLE for hotplug-capable ports
(bsc#1012628).
- tools/sched_ext: Fix off-by-one in scx_sdt payload zeroing
(bsc#1012628).
- ASoC: soc-component: re-add pcm_new()/pcm_free() (bsc#1012628).
- ASoC: amd: name back to pcm_new()/pcm_free() (bsc#1012628).
- ASoC: amd: ps: fix the pcm device numbering for acp pdm dmic
(bsc#1012628).
- ALSA: usb-audio: qcom: Fix incorrect type in enable_audio_stream
(bsc#1012628).
- PCI: tegra194: Fix polling delay for L2 state (bsc#1012628).
- PCI: tegra194: Increase LTSSM poll time on surprise link down
(bsc#1012628).
- PCI: tegra194: Disable LTSSM after transition to Detect on
surprise link down (bsc#1012628).
- PCI: tegra194: Don't force the device into the D0 state before
L2 (bsc#1012628).
- PCI: tegra194: Disable PERST# IRQ only in Endpoint mode
(bsc#1012628).
- PCI: tegra194: Use devm_gpiod_get_optional() to parse
"nvidia,refclk-select" (bsc#1012628).
- PCI: tegra194: Disable direct speed change for Endpoint mode
(bsc#1012628).
- PCI: tegra194: Set LTR message request before PCIe link up in
Endpoint mode (bsc#1012628).
- PCI: tegra194: Allow system suspend when the Endpoint link is
not up (bsc#1012628).
- PCI: tegra194: Free up Endpoint resources during remove()
(bsc#1012628).
- PCI: tegra194: Use DWC IP core version (bsc#1012628).
- PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well
(bsc#1012628).
- PCI: tegra194: Disable L1.2 capability of Tegra234 EP
(bsc#1012628).
- PCI: tegra194: Fix CBB timeout caused by DBI access before
core power-on (bsc#1012628).
- drm/fb-helper: Fix a locking bug in an error path (bsc#1012628).
- PCI: cadence: Add flags for disabling ASPM capability for
broken Root Ports (bsc#1012628).
- PCI: sg2042: Avoid L0s and L1 on Sophgo 2042 PCIe Root Ports
(bsc#1012628).
- ASoC: SDCA: Fix cleanup inversion in class driver (bsc#1012628).
- spi: rzv2h-rspi: Fix invalid SPR=0/BRDV=0 clock configuration
(bsc#1012628).
- spi: mtk-snfi: unregister ECC engine on probe failure and
remove() callback (bsc#1012628).
- ALSA: sc6000: Keep the programmed board state in card-private
data (bsc#1012628).
- dm cache: fix missing return in invalidate_committed's error
path (bsc#1012628).
- sched_ext: Track @p's rq lock across set_cpus_allowed_scx ->
ops.set_cpumask (bsc#1012628).
- sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq
tracking (bsc#1012628).
- spi: cadence-qspi: Revert the filtering of certain opcodes in
ODTR (bsc#1012628).
- crypto: jitterentropy - replace long-held spinlock with mutex
(bsc#1012628).
- ALSA: usb-audio: Exclude Scarlett 18i20 1st Gen from
SKIP_IFACE_SETUP (bsc#1012628).
- ALSA: hda/realtek - fixed speaker no sound update (bsc#1012628).
- gfs2: Call unlock_new_inode before d_instantiate (bsc#1012628).
- fanotify: avoid/silence premature LSM capability checks
(bsc#1012628).
- fanotify: call fanotify_events_supported() before
path_permission() and security_path_notify() (bsc#1012628).
- fuse: fix uninit-value in fuse_dentry_revalidate()
(bsc#1012628).
- ktest: Avoid undef warning when WARNINGS_FILE is unset
(bsc#1012628).
- ktest: Honor empty per-test option overrides (bsc#1012628).
- ktest: Run POST_KTEST hooks on failure and cancellation
(bsc#1012628).
- vfio: selftests: fix crash in vfio_dma_mapping_mmio_test
(bsc#1012628).
- rtla/utils: Fix resource leak in set_comm_sched_attr()
(bsc#1012628).
- tools/rtla: Generate optstring from long options (bsc#1012628).
- rtla: Fix segfault on multiple SIGINTs (bsc#1012628).
- vfio: selftests: Build tests on aarch64 (bsc#1012628).
- gfs2: less aggressive low-memory log flushing (bsc#1012628).
- quota: Fix race of dquot_scan_active() with quota deactivation
(bsc#1012628).
- vfio: unhide vdev->debug_root (bsc#1012628).
- gfs2: add some missing log locking (bsc#1012628).
- gfs2: prevent NULL pointer dereference during unmount
(bsc#1012628).
- efi/capsule-loader: fix incorrect sizeof in phys array
reallocation (bsc#1012628).
- ksmbd: fix use-after-free from async crypto on Qualcomm crypto
engine (bsc#1012628).
- arm64: dts: mediatek: mt8365: Describe infracfg-nao as a pure
syscon (bsc#1012628).
- ARM: dts: mediatek: mt7623: fix efuse fallback compatible
(bsc#1012628).
- memory: tegra124-emc: Fix dll_change check (bsc#1012628).
- memory: tegra30-emc: Fix dll_change check (bsc#1012628).
- arm64: dts: imx8-apalis: Fix LEDs name collision (bsc#1012628).
- arm64: dts: imx91-11x11-evk: change usdhc tuning step for eMMC
and SD (bsc#1012628).
- riscv: dts: spacemit: pcie: fix missing power regulator
(bsc#1012628).
- arm64: dts: mediatek: mt7988a-bpi-r4pro: fix model string
(bsc#1012628).
- arm64: dts: rockchip: Make Jaguar PCIe-refclk pin use pull-up
config (bsc#1012628).
- arm64: dts: imx8mp-evk: Enable pull select bit for PCIe
regulator GPIO (M.2 W_DISABLE1) (bsc#1012628).
- iommufd: vfio compatibility extension check for noiommu mode
(bsc#1012628).
- arm64: dts: qcom: sm6125-xiaomi-ginkgo: Remove board-id
(bsc#1012628).
- arm64: dts: qcom: sm6125-xiaomi-ginkgo: Correct reserved memory
ranges (bsc#1012628).
- arm64: dts: qcom: sm6125-xiaomi-ginkgo: Remove extcon
(bsc#1012628).
- arm64: dts: qcom: sm6125-xiaomi-ginkgo: Fix reserved gpio ranges
(bsc#1012628).
- arm64: dts: qcom: qcs6490-rubikpi3: Use lt9611 DSI Port B
(bsc#1012628).
- arm64: dts: qcom: talos: Add missing clock-names to GCC
(bsc#1012628).
- arm64: dts: ti: k3-am62l: include WKUP_UART0 in wakeup
peripheral window (bsc#1012628).
- arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count
(bsc#1012628).
- arm64: dts: mediatek: mt7981b: Fix gpio-ranges pin count
(bsc#1012628).
- arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count
(bsc#1012628).
- iommufd/selftest: Fix page leaks in mock_viommu_{init,destroy}
(bsc#1012628).
- arm64: dts: imx8mp-kontron: Fix touch reset configuration on
DL devices (bsc#1012628).
- arm64: dts: imx8mp-kontron: Drop vmmc-supply to fix SD card
on SMARC eval carrier (bsc#1012628).
- arm64: dts: imx8mp-hummingboard-pulse/cubox-m: fix vmmc gpio
polarity (bsc#1012628).
- arm64: dts: imx8mp-hummingboard-pulse: fix mini-hdmi dsi port
reference (bsc#1012628).
- ARM: dts: BCM5301X: Drop extra NAND controller compatible
(bsc#1012628).
- arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value
(bsc#1012628).
- arm64: dts: qcom: msm8937-xiaomi-land: correct wled ovp value
(bsc#1012628).
- arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight
(bsc#1012628).
- firmware: qcom_scm: don't opencode kmemdup (bsc#1012628).
- soc: qcom: ubwc: disable bank swizzling for Glymur platform
(bsc#1012628).
- arm64: dts: rockchip: Fix Bluetooth stability on LCKFB TaiShan
Pi (bsc#1012628).
- Revert "arm64: dts: rockchip: add SPDIF audio to Beelink A1"
(bsc#1012628).
- arm64: dts: rockchip: Correct Fan Supply for Gameforce Ace
(bsc#1012628).
- arm64: dts: rockchip: Correct Joystick Axes on Gameforce Ace
(bsc#1012628).
- soc: qcom: ocmem: make the core clock optional (bsc#1012628).
- soc: qcom: ocmem: register reasons for probe deferrals
(bsc#1012628).
- soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available
(bsc#1012628).
- riscv: dts: spacemit: drop incorrect pinctrl for combo PHY
(bsc#1012628).
- arm64: dts: rockchip: Fix RK3562 EVB2 model name (bsc#1012628).
- arm64: dts: rockchip: Add mphy reset to ufshc node
(bsc#1012628).
- bus: rifsc: fix RIF configuration check for peripherals
(bsc#1012628).
- arm64: dts: qcom: arduino-imola: fix faulty spidev node
(bsc#1012628).
- arm64: dts: qcom: add missing denali-oled.dtb to Makefile
(bsc#1012628).
- arm64: dts: qcom: hamoa: correct Iris corners for the MXC rail
(bsc#1012628).
- arm64: dts: qcom: lemans: correct Iris corners for the MXC rail
(bsc#1012628).
- arm64: dts: qcom: monaco: correct Iris corners for the MXC rail
(bsc#1012628).
- arm64: dts: qcom: sm8550: correct Iris corners for the MXC rail
(bsc#1012628).
- arm64: dts: qcom: sm8650: correct Iris corners for the MXC rail
(bsc#1012628).
- arm64: dts: qcom: sm8750: correct Iris corners for the MXC rail
(bsc#1012628).
- arm64: dts: qcom: kaanapali: Fix GIC_ITS range length
(bsc#1012628).
- arm64: dts: qcom: milos: Fix GIC_ITS range length (bsc#1012628).
- arm64: dts: qcom: sm8450: Fix GIC_ITS range length
(bsc#1012628).
- arm64: dts: qcom: sm8550: Fix GIC_ITS range length
(bsc#1012628).
- arm64: dts: qcom: sm8650: Fix GIC_ITS range length
(bsc#1012628).
- arm64: dts: qcom: sm8750: Fix GIC_ITS range length
(bsc#1012628).
- arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD
host controller (bsc#1012628).
- arm64: dts: qcom: sm8650: Fix xo clock supply of SD host
controller (bsc#1012628).
- arm64: dts: qcom: hamoa: Fix xo clock supply of platform SD
host controller (bsc#1012628).
- arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD
card modes (bsc#1012628).
- arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD
card modes (bsc#1012628).
- arm64: dts: qcom: sm8650: Enable UHS-I SDR50 and SDR104 SD
card modes (bsc#1012628).
- arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias
pinctrl (bsc#1012628).
- arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator
as powered during boot (bsc#1012628).
- arm64: dts: qcom: msm8917-xiaomi-riva: Fix board-id for all
bootloader (bsc#1012628).
- arm64: dts: ti: k3-am62p5-sk: Disable MMC1 internal pulls on
data pins (bsc#1012628).
- arm64: dts: ti: k3-am62l3-evm: Disable MMC1 internal pulls on
data pins (bsc#1012628).
- arm64: dts: ti: k3-am62-lp-sk: Enable internal pulls for MMC0
data pins (bsc#1012628).
- arm64: dts: ti: k3-am62-verdin: Fix SPI_1 GPIO CS pinctrl label
(bsc#1012628).
- arm64: dts: freescale: imx8mp-tqma8mpql-mba8mp-ras314: fix
UART1 RTS/CTS muxing (bsc#1012628).
- arm64: dts: imx91: Remove TMU's superfluous sensor ID
(bsc#1012628).
- arm64: dts: imx8mp-kontron: Fix boot order for PMIC and RTC
(bsc#1012628).
- arm64: dts: imx8dxl-evk: Use audio-graph-card2 for wm8960-2
and wm8960-3 (bsc#1012628).
- arm64: dts: imx8mp-evk: Specify ADV7535 register addresses
(bsc#1012628).
- arm64: dts: lx2160a: change i2c0 (iic1) pinmux mask to one bit
(bsc#1012628).
- arm64: dts: lx2160a: remove duplicate pinmux nodes
(bsc#1012628).
- arm64: dts: lx2160a: rename pinmux nodes for readability
(bsc#1012628).
- arm64: dts: lx2160a: add sda gpio references for i2c bus
recovery (bsc#1012628).
- arm64: dts: lx2160a: change zeros to hexadecimal in pinmux nodes
(bsc#1012628).
- arm64: dts: lx2160a: complete pinmux for rcwsr12 configuration
word (bsc#1012628).
- arm64: dts: imx8qm-mek: switch Type-C connector power-role to
dual (bsc#1012628).
- arm64: dts: imx8qxp-mek: switch Type-C connector power-role
to dual (bsc#1012628).
- soc/tegra: cbb: Set ERD on resume for err interrupt
(bsc#1012628).
- soc/tegra: cbb: Fix incorrect ARRAY_SIZE in fabric lookup tables
(bsc#1012628).
- soc/tegra: cbb: Fix cross-fabric target timeout lookup
(bsc#1012628).
- arm64: tegra: Fix RTC aliases (bsc#1012628).
- soc/tegra: pmc: Add kerneldoc for reboot notifier (bsc#1012628).
- soc/tegra: pmc: Correct function names in kerneldoc
(bsc#1012628).
- soc/tegra: pmc: Add kerneldoc for wake-up variables
(bsc#1012628).
- unshare: fix nsproxy leak in ksys_unshare() on
set_cred_ucounts() failure (bsc#1012628).
- ocfs2/dlm: validate qr_numregions in dlm_match_regions()
(bsc#1012628).
- ocfs2/dlm: fix off-by-one in dlm_match_regions() region
comparison (bsc#1012628).
- soc: qcom: llcc: fix v1 SB syndrome register offset
(bsc#1012628).
- soc: qcom: aoss: compare against normalized cooling state
(bsc#1012628).
- arm64: dts: qcom: milos: Add missing CX power domain to GCC
(bsc#1012628).
- arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP
(bsc#1012628).
- ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX
(bsc#1012628).
- arm64/xor: fix conflicting attributes for xor_block_template
(bsc#1012628).
- lib: kunit_iov_iter: fix memory leaks (bsc#1012628).
- ARM: dts: imx27-eukrea: replace interrupts with
interrupts-extended (bsc#1012628).
- firmware: arm_ffa: Use the correct buffer size during RXTX_MAP
(bsc#1012628).
- fwctl: Fix class init ordering to avoid NULL pointer dereference
on device removal (bsc#1012628).
- ocfs2: fix listxattr handling when the buffer is full
(bsc#1012628).
- ocfs2: validate bg_bits during freefrag scan (bsc#1012628).
- ocfs2: validate group add input before caching (bsc#1012628).
- dmaengine: dw-axi-dmac: fix Alignment should match open
parenthesis (bsc#1012628).
- dmaengine: dw-axi-dmac: Remove unnecessary return statement
from void function (bsc#1012628).
- phy: apple: apple: Use local variable for ioremap return value
(bsc#1012628).
- soundwire: bus: demote UNATTACHED state warnings to dev_dbg()
(bsc#1012628).
- soundwire: Intel: test bus.bpt_stream before assigning it
(bsc#1012628).
- dmaengine: mxs-dma: Fix missing return value from
of_dma_controller_register() (bsc#1012628).
- soundwire: cadence: Clear message complete before signaling
waiting thread (bsc#1012628).
- tracing: move __printf() attribute on __ftrace_vbprintk()
(bsc#1012628).
- tracing: Rebuild full_name on each hist_field_name() call
(bsc#1012628).
- hte: tegra194: remove Kconfig dependency on Tegra194 SoC
(bsc#1012628).
- remoteproc: xlnx: Fix sram property parsing (bsc#1012628).
- stop_machine: Fix the documentation for a NULL cpus argument
(bsc#1012628).
- remoteproc: imx_rproc: Check return value of regmap_attach_dev()
in imx_rproc_mmio_detect_mode() (bsc#1012628).
- ima: check return value of crypto_shash_final() in boot
aggregate (bsc#1012628).
- HID: asus: make asus_resume adhere to linux kernel coding
standards (bsc#1012628).
- HID: asus: do not abort probe when not necessary (bsc#1012628).
- workqueue: devres: Add device-managed allocate workqueue
(bsc#1012628).
- power: supply: max77705: Drop duplicated IRQ error message
(bsc#1012628).
- power: supply: max77705: Free allocated workqueue and fix
removal order (bsc#1012628).
- mtd: physmap_of_gemini: Fix disabled pinctrl state check
(bsc#1012628).
- ima_fs: Correctly create securityfs files for unsupported hash
algos (bsc#1012628).
- dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range
(bsc#1012628).
- mtd: spi-nor: core: correct the op.dummy.nbytes when check
read operations (bsc#1012628).
- mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation
(bsc#1012628).
- mtd: spi-nor: micron-st: add SNOR_CMD_PP_8_8_8_DTR sfdp fixup
for mt35xu512aba (bsc#1012628).
- mtd: spi-nor: swp: check SR_TB flag when getting tb_mask
(bsc#1012628).
- mtd: parsers: ofpart: call of_node_put() only in ofpart_fail
path (bsc#1012628).
- mtd: parsers: ofpart: call of_node_get() for dedicated
subpartitions (bsc#1012628).
- cxl/pci: Check memdev driver binding status in cxl_reset_done()
(bsc#1012628).
- mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob
(bsc#1012628).
- mtd: spinand: winbond: Clarify when to enable the HS bit
(bsc#1012628).
- HID: usbhid: fix deadlock in hid_post_reset() (bsc#1012628).
- ext4: fix miss unlock 'sb->s_umount' in extents_kunit_init()
(bsc#1012628).
- ext4: call deactivate_super() in extents_kunit_exit()
(bsc#1012628).
- ext4: fix the error handling process in extents_kunit_init)
(bsc#1012628).
- ext4: fix possible null-ptr-deref in extents_kunit_exit()
(bsc#1012628).
- ext4: fix possible null-ptr-deref in mbt_kunit_exit()
(bsc#1012628).
- bpf, arm64: Reject out-of-range B.cond targets (bsc#1012628).
- bpf, arm64: Fix off-by-one in check_imm signed range check
(bsc#1012628).
- bpf, arm64: Remove redundant bpf_flush_icache() after pack
allocator finalize (bsc#1012628).
- bpf, riscv: Remove redundant bpf_flush_icache() after pack
allocator finalize (bsc#1012628).
- bpf, sockmap: Fix af_unix iter deadlock (bsc#1012628).
- bpf, sockmap: Fix af_unix null-ptr-deref in proto update
(bsc#1012628).
- bpf, sockmap: Take state lock for af_unix iter (bsc#1012628).
- bpf: Fix precedence bug in convert_bpf_ld_abs alignment check
(bsc#1012628).
- bpf: Fix NULL deref in map_kptr_match_type for scalar regs
(bsc#1012628).
- bpf: allow UTF-8 literals in bpf_bprintf_prepare()
(bsc#1012628).
- libbpf: Prevent double close and leak of btf objects
(bsc#1012628).
- bpf: Validate node_id in arena_alloc_pages() (bsc#1012628).
- bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT
(bsc#1012628).
- perf trace: Fix IS_ERR() vs NULL check bug (bsc#1012628).
- dt-bindings: pinctrl: marvell,armada3710-xb-pinctrl: add
missing items keyword (bsc#1012628).
- pinctrl: pinctrl-pic32: Fix resource leak (bsc#1012628).
- perf trace: Avoid an ERR_PTR in syscall_stats (bsc#1012628).
- pinctrl: microchip-mssio: Fix missing return in probe
(bsc#1012628).
- perf test type profiling: Remote typedef on struct
(bsc#1012628).
- pinctrl: cy8c95x0: remove duplicate error message (bsc#1012628).
- pinctrl: cy8c95x0: Unify messages with help of dev_err_probe()
(bsc#1012628).
- pinctrl: cy8c95x0: Avoid returning positive values to user space
(bsc#1012628).
- perf branch: Avoid incrementing NULL (bsc#1012628).
- perf: tools: cs-etm: Fix print issue for Coresight debug in
ETE/TRBE trace (bsc#1012628).
- pinctrl: pinconf-generic: Fully validate 'pinmux' property
(bsc#1012628).
- pinctrl: realtek: Fix function signature for config argument
(bsc#1012628).
- pinctrl: abx500: Fix type of 'argument' variable (bsc#1012628).
- pinctrl: renesas: rzg2l: Fix save/restore of {IOLH,IEN,PUPD,SMT}
registers (bsc#1012628).
- tools build: Correct link flags for libopenssl (bsc#1012628).
- perf lock: Fix option value type in parse_max_stack
(bsc#1012628).
- perf stat: Fix opt->value type for parse_cache_level
(bsc#1012628).
- memblock: reserve_mem: fix end caclulation in
reserve_mem_release_by_name() (bsc#1012628).
- perf stat: Fix crash on arm64 (bsc#1012628).
- perf tools: Fix module symbol resolution for non-zero .text
sh_addr (bsc#1012628).
- perf test: Fix ratio_to_prev event parsing test (bsc#1012628).
- perf test: Skip perf data type profiling tests for s390
(bsc#1012628).
- perf expr: Return -EINVAL for syntax error in expr__find_ids()
(bsc#1012628).
- perf metrics: Make common stalled metrics conditional on having
the event (bsc#1012628).
- ipmi: ssif_bmc: fix missing check for copy_to_user() partial
failure (bsc#1012628).
- ipmi: ssif_bmc: fix message desynchronization after truncated
response (bsc#1012628).
- ipmi: ssif_bmc: change log level to dbg in irq callback
(bsc#1012628).
- perf cgroup: Update metric leader in evlist__expand_cgroup
(bsc#1012628).
- pinctrl: sophgo: pinctrl-sg2042: Fix wrong module description
(bsc#1012628).
- pinctrl: sophgo: pinctrl-sg2044: Fix wrong module description
(bsc#1012628).
- perf maps: Fix fixup_overlap_and_insert that can break sorted
by name order (bsc#1012628).
- perf maps: Fix copy_from that can break sorted by name order
(bsc#1012628).
- perf util: Kill die() prototype, dead for a long time
(bsc#1012628).
- i3c: master: dw-i3c: Fix missing reset assertion in remove()
callback (bsc#1012628).
- i3c: master: dw-i3c: Balance PM runtime usage count on probe
failure (bsc#1012628).
- i3c: master: renesas: Fix memory leak in renesas_i3c_i3c_xfers()
(bsc#1012628).
- i3c: dw: Fix memory leak in dw_i3c_master_i3c_xfers()
(bsc#1012628).
- i3c: master: adi: Fix error propagation for CCCs (bsc#1012628).
- i3c: mipi-i3c-hci: fix IBI payload length calculation for
final status (bsc#1012628).
- fs/ntfs3: prevent uninitialized lcn caused by zero len
(bsc#1012628).
- backlight: sky81452-backlight: Check return value of
devm_gpiod_get_optional() in sky81452_bl_parse_dt()
(bsc#1012628).
- platform/surface: surfacepro3_button: Drop wakeup source on
remove (bsc#1012628).
- leds: lgm-sso: Remove duplicate assignments for priv->mmap
(bsc#1012628).
- usb: typec: Fix error pointer dereference (bsc#1012628).
- tty: hvc_iucv: fix off-by-one in number of supported devices
(bsc#1012628).
- usb: typec: ps883x: Fix Oops at unbind (bsc#1012628).
- platform/x86: panasonic-laptop: Fix OPTD notifier registration
and cleanup (bsc#1012628).
- platform/x86: barco-p50-gpio: normalize return value of gpio_get
(bsc#1012628).
- fs/ntfs3: fix missing run load for vcn0 in
attr_data_get_block_locked() (bsc#1012628).
- mfd: mc13xxx-core: Fix memory leak in
mc13xxx_add_subdevice_pdata() (bsc#1012628).
- nfs/blocklayout: Fix compilation error (`make W=1`) in
bl_write_pagelist() (bsc#1012628).
- sunrpc: Kill RPC_IFDEBUG() (bsc#1012628).
- sunrpc: Fix compilation error (`make W=1`) when dprintk()
is no-op (bsc#1012628).
- NFSD: fix nfs4_file access extra count in
nfsd4_add_rdaccess_to_wrdeleg (bsc#1012628).
- nfsd: use dynamic allocation for oversized NFSv4.0 replay cache
(bsc#1012628).
- RDMA/umem: Use consistent DMA attributes when unmapping entries
(bsc#1012628).
- greybus: raw: fix use-after-free on cdev close (bsc#1012628).
- greybus: raw: fix use-after-free if write is called after
disconnect (bsc#1012628).
- platform/x86: asus-wmi: adjust screenpad power/brightness
handling (bsc#1012628).
- platform/x86: asus-wmi: fix screenpad brightness range
(bsc#1012628).
- tty: serial: ip22zilog: Fix section mispatch warning
(bsc#1012628).
- fs/ntfs3: terminate the cached volume label after UTF-8
conversion (bsc#1012628).
- platform/x86: hp-wmi: fix ignored return values in fan settings
(bsc#1012628).
- platform/x86: hp-wmi: avoid cancel_delayed_work_sync from work
handler (bsc#1012628).
- platform/x86: hp-wmi: use mod_delayed_work to reset keep-alive
timer (bsc#1012628).
- platform/x86: hp-wmi: fix u8 underflow in gpu_delta calculation
(bsc#1012628).
- platform/x86: hp-wmi: add locking for concurrent hwmon access
(bsc#1012628).
- platform/x86: dell_rbu: avoid uninit value usage in
packet_size_write() (bsc#1012628).
- platform/x86: dell-wmi-sysman: bound enumeration string
aggregation (bsc#1012628).
- RDMA/core: Prefer NLA_NUL_STRING (bsc#1012628).
- platform/x86: hp-wmi: fix fan table parsing (bsc#1012628).
- dt-bindings: clock: qcom: Add GCC video axi reset clock for
Glymur (bsc#1012628).
- clk: qcom: gcc-glymur: Add video axi clock resets for glymur
(bsc#1012628).
- clk: qcom: dispcc-glymur: use RCG2 ops for DPTX1 AUX clock
source (bsc#1012628).
- clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock
source (bsc#1012628).
- clk: renesas: r9a09g057: Fix ordering of module clocks array
(bsc#1012628).
- clk: renesas: r9a09g056: Fix ordering of module clocks array
(bsc#1012628).
- clk: sunxi-ng: sun55i-a523-r: Add missing r-spi module clock
(bsc#1012628).
- scsi: sg: Fix sysctl sg-big-buff register during sg_init()
(bsc#1012628).
- scsi: sg: Resolve soft lockup issue when opening /dev/sgX
(bsc#1012628).
- clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from
byte_div_clk_src dividers (bsc#1012628).
- clk: qcom: dispcc-glymur: Fix DSI byte clock rate setting
(bsc#1012628).
- clk: qcom: dispcc-kaanapali: Fix DSI byte clock rate setting
(bsc#1012628).
- clk: qcom: dispcc-milos: Fix DSI byte clock rate setting
(bsc#1012628).
- clk: qcom: dispcc-sm4450: Fix DSI byte clock rate setting
(bsc#1012628).
- clk: qcom: dispcc[01]-sa8775p: Fix DSI byte clock rate setting
(bsc#1012628).
- clk: renesas: r9a09g057: Remove entries for WDT{0,2,3}
(bsc#1012628).
- scsi: qla2xxx: Add support to report MPI FW state (bsc#1012628).
- scsi: target: core: Fix integer overflow in UNMAP bounds check
(bsc#1012628).
- scsi: ufs: rockchip,rk3576-ufshc: dt-bindings: Add new mphy
reset item (bsc#1012628).
- dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs
(bsc#1012628).
- clk: qcom: gcc-sc8180x: Add missing GDSCs (bsc#1012628).
- clk: qcom: gcc-sc8180x: Use retention for USB power domains
(bsc#1012628).
- clk: qcom: gcc-sc8180x: Use retention for PCIe power domains
(bsc#1012628).
- clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk
(bsc#1012628).
- clk: qcom: dispcc-sm8250: Enable parents for pixel clocks
(bsc#1012628).
- clk: imx: imx6q: Fix device node reference leak in
pll6_bypassed() (bsc#1012628).
- clk: imx: imx6q: Fix device node reference leak in
of_assigned_ldb_sels() (bsc#1012628).
- clk: imx8mq: Correct the CSI PHY sels (bsc#1012628).
- um: Fix potential race condition in TLB sync (bsc#1012628).
- x86/um: fix vDSO installation (bsc#1012628).
- clk: qoriq: avoid format string warning (bsc#1012628).
- clk: xgene: Fix mapping leak in xgene_pllclk_init()
(bsc#1012628).
- clk: spacemit: ccu_mix: fix inverted condition in
ccu_mix_trigger_fc() (bsc#1012628).
- f2fs: avoid reading already updated pages during GC
(bsc#1012628).
- printk_ringbuffer: Fix get_data() size sanity check
(bsc#1012628).
- clk: qcom: gdsc: Fix error path on registration of multiple
pm subdomains (bsc#1012628).
- lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug()
(bsc#1012628).
- f2fs: fix data loss caused by incorrect use of nat_entry flag
(bsc#1012628).
- f2fs: fix to preserve previous reserve_{blocks,node} value
when remount (bsc#1012628).
- scsi: hpsa: Enlarge controller and IRQ name buffers
(bsc#1012628).
- drm/amd/display: Fix parameter mismatch in panel self-refresh
helper (bsc#1012628).
- clk: qcom: gcc-x1e80100: Keep GCC USB QTB clock always ON
(bsc#1012628).
- clk: visconti: pll: initialize clk_init_data to zero
(bsc#1012628).
- f2fs: allow empty mount string for Opt_usr|grp|projjquota
(bsc#1012628).
- f2fs: protect extension_list reading with sb_lock in
f2fs_sbi_show() (bsc#1012628).
- drm/i915/wm: Verify the correct plane DDB entry (bsc#1012628).
- virt: arm-cca-guest: fix error check for RSI_INCOMPLETE
(bsc#1012628).
- crypto: eip93 - fix hmac setkey algo selection (bsc#1012628).
- crypto: sa2ul - Fix AEAD fallback algorithm names (bsc#1012628).
- crypto: ccp - copy IV using skcipher ivsize (bsc#1012628).
- sh: Include <linux/io.h> in dac.h (bsc#1012628).
- erofs: unify lcn as u64 for 32-bit platforms (bsc#1012628).
- tools: hv: Fix cross-compilation (bsc#1012628).
- Drivers: hv: vmbus: fix hyperv_cpuhp_online variable shadowing
(bsc#1012628).
- arm64: dts: imx8mp-debix-model-a: Correct PAD settings for
PMIC_nINT (bsc#1012628).
- arm64: dts: imx8mp-debix-som-a: Correct PAD settings for
PMIC_nINT (bsc#1012628).
- arm64: dts: imx8mp-navqp: Correct PAD settings for PMIC_nINT
(bsc#1012628).
- arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for
PMIC_nINT (bsc#1012628).
- arm64: dts: imx8mp-edm-g: Correct PAD settings for PMIC_nINT
(bsc#1012628).
- arm64: dts: imx8mp-aristainetos3a-som-v1: Correct PAD settings
for PMIC_nINT (bsc#1012628).
- arm64: dts: imx8mp-nitrogen-som: Correct PAD settings for
PMIC_nINT (bsc#1012628).
- arm64: dts: imx8mp-sr-som: Correct PAD settings for PMIC_nINT
(bsc#1012628).
- arm64: dts: imx8mp-ultra-mach-sbc: Correct PAD settings for
PMIC_nINT (bsc#1012628).
- arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT
(bsc#1012628).
- arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings
for PMIC_nINT (bsc#1012628).
- PCMCIA: Fix garbled log messages for KERN_CONT (bsc#1012628).
- reset: amlogic: t7: Fix null reset ops (bsc#1012628).
- arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT
(bsc#1012628).
- arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT
(bsc#1012628).
- arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT
(bsc#1012628).
- arm64: dts: marvell: armada-37xx: use 'usb2-phy' in USB3
controller's phy-names (bsc#1012628).
- pwm: stm32: Fix rounding issue for requests with inverted
polarity (bsc#1012628).
- net/sched: act_mirred: fix wrong device for mac_header_xmit
check in tcf_blockcast_redir (bsc#1012628).
- macvlan: fix macvlan_get_size() not reserving space for
IFLA_MACVLAN_BC_CUTOFF (bsc#1012628).
- net/sched: sch_cake: fix NAT destination port not being updated
in cake_update_flowkeys (bsc#1012628).
- nexthop: fix IPv6 route referencing IPv4 nexthop (bsc#1012628).
- net: airoha: Wait for NPU PPE configuration to complete in
airoha_ppe_offload_setup() (bsc#1012628).
- net/sched: taprio: fix use-after-free in advance_sched()
on schedule switch (bsc#1012628).
- net: dsa: remove redundant netdev_lock_ops() from conduit
ethtool ops (bsc#1012628).
- net: enetc: correct the command BD ring consumer index
(bsc#1012628).
- net: enetc: fix NTMP DMA use-after-free issue (bsc#1012628).
- ksmbd: fix use-after-free in smb2_open during durable reconnect
(bsc#1012628).
- tcp: move tp->chrono_type next tp->chrono_stat[] (bsc#1012628).
- tcp: inline tcp_chrono_start() (bsc#1012628).
- tcp: annotate data-races in tcp_get_info_chrono_stats()
(bsc#1012628).
- tcp: add data-race annotations around tp->data_segs_out and
tp->total_retrans (bsc#1012628).
- tcp: add data-races annotations around tp->reordering,
tp->snd_cwnd (bsc#1012628).
- tcp: annotate data-races around tp->snd_ssthresh (bsc#1012628).
- tcp: annotate data-races around tp->delivered and
tp->delivered_ce (bsc#1012628).
- tcp: add data-race annotations for TCP_NLA_SNDQ_SIZE
(bsc#1012628).
- tcp: annotate data-races around tp->bytes_sent (bsc#1012628).
- tcp: annotate data-races around tp->bytes_retrans (bsc#1012628).
- tcp: annotate data-races around tp->dsack_dups (bsc#1012628).
- tcp: annotate data-races around tp->reord_seen (bsc#1012628).
- tcp: annotate data-races around tp->srtt_us (bsc#1012628).
- tcp: annotate data-races around tp->timeout_rehash
(bsc#1012628).
- tcp: annotate data-races around (tp->write_seq - tp->snd_nxt)
(bsc#1012628).
- tcp: annotate data-races around tp->plb_rehash (bsc#1012628).
- ice: fix 'adjust' timer programming for E830 devices
(bsc#1012628).
- ice: update PCS latency settings for E825 10G/25Gb modes
(bsc#1012628).
- ice: fix double-free of tx_buf skb (bsc#1012628).
- ice: fix PHY config on media change with link-down-on-close
(bsc#1012628).
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (bsc#1012628).
- ice: fix race condition in TX timestamp ring cleanup
(bsc#1012628).
- ice: fix potential NULL pointer deref in error path of
ice_set_ringparam() (bsc#1012628).
- i40e: don't advertise IFF_SUPP_NOFCS (bsc#1012628).
- iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2
(bsc#1012628).
- e1000e: Unroll PTP in probe error handling (bsc#1012628).
- ipv6: fix possible UAF in icmpv6_rcv() (bsc#1012628).
- af_unix: Drop all SCM attributes for SOCKMAP (bsc#1012628).
- sctp: fix OOB write to userspace in
sctp_getsockopt_peer_auth_chunks (bsc#1012628).
- pppoe: drop PFC frames (bsc#1012628).
- net/mlx5: Fix HCA caps leak on notifier init failure
(bsc#1012628).
- openvswitch: cap upcall PID array size and pre-size vport
replies (bsc#1012628).
- net: airoha: Fix possible TX queue stall in
airoha_qdma_tx_napi_poll() (bsc#1012628).
- netfilter: nft_osf: restrict it to ipv4 (bsc#1012628).
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
(bsc#1012628).
- netfilter: conntrack: remove sprintf usage (bsc#1012628).
- netfilter: xtables: restrict several matches to inet family
(bsc#1012628).
- netfilter: nat: use kfree_rcu to release ops (bsc#1012628).
- ipvs: fix MTU check for GSO packets in tunnel mode
(bsc#1012628).
- netfilter: nfnetlink_osf: fix out-of-bounds read on option
matching (bsc#1012628).
- netfilter: nfnetlink_osf: fix potential NULL dereference in
ttl check (bsc#1012628).
- slip: reject VJ receive packets on instances with no rstate
array (bsc#1012628).
- slip: bound decode() reads against the compressed packet length
(bsc#1012628).
- net/sched: sch_dualpi2: drain both C-queue and L-queue in
dualpi2_change() (bsc#1012628).
- arm64: dts: amlogic: meson-axg: Add missing cache information
to cpu0 (bsc#1012628).
- arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number
(bsc#1012628).
- vfio/pci: Clean up DMABUFs before disabling function
(bsc#1012628).
- pwm: atmel-tcb: Cache clock rates and mark chip as atomic
(bsc#1012628).
- ksmbd: destroy tree_conn_ida in ksmbd_session_destroy()
(bsc#1012628).
- ksmbd: destroy async_ida in ksmbd_conn_free() (bsc#1012628).
- ksmbd: fix durable fd leak on ClientGUID mismatch in durable
v2 open (bsc#1012628).
- ksmbd: scope conn->binding slowpath to bound sessions only
(bsc#1012628).
- net: validate skb->napi_id in RX tracepoints (bsc#1012628).
- bnge: fix initial HWRM sequence (bsc#1012628).
- bnge: remove unsupported backing store type (bsc#1012628).
- sctp: fix sockets_allocated imbalance after sk_clone()
(bsc#1012628).
- net/rds: zero per-item info buffer before handing it to visitors
(bsc#1012628).
- ice: fix timestamp interrupt configuration for E825C
(bsc#1012628).
- ice: perform PHY soft reset for E825C ports at initialization
(bsc#1012628).
- ice: fix ready bitmap check for non-E822 devices (bsc#1012628).
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (bsc#1012628).
- net_sched: sch_hhf: annotate data-races in hhf_dump_stats()
(bsc#1012628).
- net/sched: sch_pie: annotate data-races in pie_dump_stats()
(bsc#1012628).
- net/sched: sch_fq_codel: remove data-races from
fq_codel_dump_stats() (bsc#1012628).
- net/sched: sch_red: annotate data-races in red_dump_stats()
(bsc#1012628).
- net/sched: sch_sfb: annotate data-races in sfb_dump_stats()
(bsc#1012628).
- net: airoha: Move ndesc initialization at end of
airoha_qdma_init_tx() (bsc#1012628).
- net: airoha: Add missing bits in airoha_qdma_cleanup_tx_queue()
(bsc#1012628).
- net: dsa: realtek: rtl8365mb: fix mode mask calculation
(bsc#1012628).
- net: airoha: Move ndesc initialization at end of
airoha_qdma_init_rx_queue() (bsc#1012628).
- net: airoha: Rework the code flow in airoha_remove() and in
airoha_probe() error path (bsc#1012628).
- net: airoha: Add size check for TX NAPIs in
airoha_qdma_cleanup() (bsc#1012628).
- net: mana: Init link_change_work before potential error paths
in probe (bsc#1012628).
- net: mana: Init gf_stats_work before potential error paths in
probe (bsc#1012628).
- net: mana: Guard mana_remove against double invocation
(bsc#1012628).
- net: mana: Don't overwrite port probe error with add_adev result
(bsc#1012628).
- net: mana: Fix EQ leak in mana_remove on NULL port
(bsc#1012628).
- vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting
(bsc#1012628).
- virtio_net: sync rss_trailer.max_tx_vq on queue_pairs change
via VQ_PAIRS_SET (bsc#1012628).
- nfp: fix swapped arguments in nfp_encode_basic_qdr() calls
(bsc#1012628).
- tcp: send a challenge ACK on SEG.ACK > SND.NXT (bsc#1012628).
- tipc: fix double-free in tipc_buf_append() (bsc#1012628).
- vhost_net: fix sleeping with preempt-disabled in
vhost_net_busy_poll() (bsc#1012628).
- nstree: fix func. parameter kernel-doc warnings (bsc#1012628).
- eventpoll: use hlist_is_singular_node() in __ep_remove()
(bsc#1012628).
- eventpoll: split __ep_remove() (bsc#1012628).
- eventpoll: kill __ep_remove() (bsc#1012628).
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}()
(bsc#1012628).
- eventpoll: move epi_fget() up (bsc#1012628).
- eventpoll: fix ep_remove struct eventpoll / struct file UAF
(bsc#1012628).
- fs/adfs: validate nzones in adfs_validate_bblk() (bsc#1012628).
- rtc: abx80x: Disable alarm feature if no interrupt attached
(bsc#1012628).
- kbuild: builddeb - avoid recompiles for non-cross-compiles
(bsc#1012628).
- tools/power turbostat: Fix AMD RAPL regression on big systems
(bsc#1012628).
- fbdev: offb: fix PCI device reference leak on probe failure
(bsc#1012628).
- tools/power turbostat: Fix unrecognized option '-P'
(bsc#1012628).
- tools/power turbostat: Fix --cpu-set 0 regression on HT systems
(bsc#1012628).
- tools/power turbostat: Fix --cpu-set 1 regression on HT systems
(bsc#1012628).
- kbuild: Never respect CONFIG_WERROR / W=e to fixdep
(bsc#1012628).
- mailbox: mtk-vcp-mailbox: Fix the return value in
mtk_vcp_mbox_xlate() (bsc#1012628).
- mailbox: mtk-cmdq: Fix CURR and END addr for task insert case
(bsc#1012628).
- mailbox: mailbox-test: free channels on probe error
(bsc#1012628).
- sched/psi: fix race between file release and pressure write
(bsc#1012628).
- cgroup/rdma: fix integer overflow in rdmacg_try_charge()
(bsc#1012628).
- cgroup/cpuset: record DL BW alloc CPU for attach rollback
(bsc#1012628).
- mailbox: add sanity check for channel array (bsc#1012628).
- mailbox: mailbox-test: handle channel errors consistently
(bsc#1012628).
- mailbox: mailbox-test: don't free the reused channel
(bsc#1012628).
- mailbox: mailbox-test: initialize struct earlier (bsc#1012628).
- mailbox: mailbox-test: make data_ready a per-instance variable
(bsc#1012628).
- fsnotify: fix inode reference leak in fsnotify_recalc_mask()
(bsc#1012628).
- btrfs: fix bytes_may_use leak in move_existing_remap()
(bsc#1012628).
- btrfs: fix bytes_may_use leak in do_remap_reloc_trans()
(bsc#1012628).
- btrfs: don't clobber errors in add_remap_tree_entries()
(bsc#1012628).
- btrfs: fix double-decrement of bytes_may_use in
submit_one_async_extent() (bsc#1012628).
- tracing: branch: Fix inverted check on stat tracer registration
(bsc#1012628).
- nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to
its callers (bsc#1012628).
- netfilter: arp_tables: fix IEEE1394 ARP payload parsing
(bsc#1012628).
- netfilter: nf_tables: use list_del_rcu for netlink hooks
(bsc#1012628).
- rculist: add list_splice_rcu() for private lists (bsc#1012628).
- netfilter: nf_tables: join hook list via splice_list_rcu()
in commit phase (bsc#1012628).
- netfilter: nf_tables: add hook transactions for device deletions
(bsc#1012628).
- nvme-pci: fix missed admin queue sq doorbell write
(bsc#1012628).
- drm/amdgpu: avoid double drm_exec_fini() in userq validate
(bsc#1012628).
- drm/amdgpu/gmc: Fix AMDGPU_GART_PLACEMENT_LOW to not overlap
with VRAM (bsc#1012628).
- drm/amd/pm: fix missing fine-grained dpm table flag on aldebaran
(bsc#1012628).
- drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG (bsc#1012628).
- drm/amdgpu/uvd3.1: Don't validate the firmware when already
validated (bsc#1012628).
- drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs
(v2) (bsc#1012628).
- drm/amdgpu: Only send RMA CPER when threshold is exceeded
(bsc#1012628).
- netfilter: xt_policy: fix strict mode inbound policy matching
(bsc#1012628).
- netfilter: nf_conntrack_sip: don't use simple_strtoul
(bsc#1012628).
- spi: rzv2h-rspi: Fix silent failure in clock setup error path
(bsc#1012628).
- ASoC: amd: acp: Add DMI quirk for Valve Steam Deck OLED
(bsc#1012628).
- ASoC: SOF: Intel: add an empty adr_link (bsc#1012628).
- spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ
(bsc#1012628).
- ASoC: tas2764: Mark die temp register as volatile (bsc#1012628).
- ASoC: tas2770: Fix order of operations for temperature
calculation (bsc#1012628).
- drm/sysfb: ofdrm: fix PCI device reference leaks (bsc#1012628).
- drm/color-mgmt: Typo s/R332/RGB332/ (bsc#1012628).
- arm64/scs: Fix potential sign extension issue of advance_loc4
(bsc#1012628).
- spi: spi-mem: Add a packed command operation (bsc#1012628).
- mtd: spinand: Add support for packed read data ODTR commands
(bsc#1012628).
- mtd: spinand: winbond: Set the packed page read flag to
W35N02/04JW (bsc#1012628).
- mtd: spinand: winbond: Fix ODTR write VCR on W35NxxJW
(bsc#1012628).
- ACPICA: Provide #defines for EINJV2 error types (bsc#1012628).
- ACPI: APEI: EINJ: Fix EINJV2 memory error injection
(bsc#1012628).
- cdrom, scsi: sr: propagate read-only status to block layer
via set_disk_ro() (bsc#1012628).
- spi: axiado: replace usleep_range() with udelay() in IRQ path
(bsc#1012628).
- netdevsim: zero initialize struct iphdr in dummy sk_buff
(bsc#1012628).
- net/sched: netem: fix probability gaps in 4-state loss model
(bsc#1012628).
- net/sched: netem: fix queue limit check to include reordered
packets (bsc#1012628).
- net/sched: netem: only reseed PRNG when seed is explicitly
provided (bsc#1012628).
- net/sched: netem: validate slot configuration (bsc#1012628).
- net/sched: netem: fix slot delay calculation overflow
(bsc#1012628).
- net/sched: netem: check for negative latency and jitter
(bsc#1012628).
- net: airoha: fix BQL imbalance in TX path (bsc#1012628).
- net: airoha: stop net_device TX queue before updating CPU index
(bsc#1012628).
- net: airoha: fix typo in function name (bsc#1012628).
- net: airoha: Do not wake all netdev TX queues in
airoha_qdma_wake_netdev_txqs() (bsc#1012628).
- net: airoha: Do not read uninitialized fragment address in
airoha_dev_xmit() (bsc#1012628).
- net/sched: sch_choke: annotate data-races in choke_dump_stats()
(bsc#1012628).
- net/sched: sch_fq_pie: annotate data-races in
fq_pie_dump_stats() (bsc#1012628).
- vrf: Fix a potential NPD when removing a port from a VRF
(bsc#1012628).
- net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()
(bsc#1012628).
- net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit
(bsc#1012628).
- spi: amlogic-spisg: initialize completion before requesting IRQ
(bsc#1012628).
- NFC: trf7970a: Ignore antenna noise when checking for RF field
(bsc#1012628).
- net/sched: taprio: fix NULL pointer dereference in class dump
(bsc#1012628).
- net: phonet: do not BUG_ON() in pn_socket_autobind() on failed
bind (bsc#1012628).
- neigh: let neigh_xmit take skb ownership (bsc#1012628).
- tcp: make probe0 timer handle expired user timeout
(bsc#1012628).
- netpoll: fix IPv6 local-address corruption (bsc#1012628).
- ALSA: usb-audio: Fix potential leak of pd at parsing UAC3
streams (bsc#1012628).
- sched/fair: Fix wakeup_preempt_fair() vs delayed dequeue
(bsc#1012628).
- sched/fair: Clear rel_deadline when initializing forked entities
(bsc#1012628).
- net: mctp i2c: check length before marking flow active
(bsc#1012628).
- md/raid1,raid10: don't fail devices for invalid IO errors
(bsc#1012628).
- md: add fallback to correct bitmap_ops on version mismatch
(bsc#1012628).
- md: factor bitmap creation away from sysfs handling
(bsc#1012628).
- md/md-bitmap: split bitmap sysfs groups (bsc#1012628).
- md/md-bitmap: add a none backend for bitmap grow (bsc#1012628).
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access()
(bsc#1012628).
- net: phy: dp83869: fix setting CLK_O_SEL field (bsc#1012628).
- drm/amd/display: properly handle family setting for early GC
11.5.4 (bsc#1012628).
- drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings
(bsc#1012628).
- drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings
(bsc#1012628).
- drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings
(bsc#1012628).
- drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring
(bsc#1012628).
- drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring
(bsc#1012628).
- drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring
(bsc#1012628).
- drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring
(bsc#1012628).
- drm/amdgpu/vcn: set no_user_fence for VCN v5.0.1 enc ring
(bsc#1012628).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring
(bsc#1012628).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring
(bsc#1012628).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring
(bsc#1012628).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring
(bsc#1012628).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring
(bsc#1012628).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring
(bsc#1012628).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring
(bsc#1012628).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring
(bsc#1012628).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v5.3.0 ring
(bsc#1012628).
- drm/amd/pm: Add fine grained flag to SMU v13.0.6 (bsc#1012628).
- io_uring/napi: cap busy_poll_to 10 msec (bsc#1012628).
- ASoC: cs35l56: Fix illegal writes to OTP_MEM registers
(bsc#1012628).
- net: psp: check for device unregister when creating assoc
(bsc#1012628).
- net: psp: require admin permission for dev-set and key-rotate
(bsc#1012628).
- ASoC: codecs: ab8500: Fix casting of private data (bsc#1012628).
- netfilter: skip recording stale or retransmitted INIT
(bsc#1012628).
- sctp: discard stale INIT after handshake completion
(bsc#1012628).
- bareudp: fix NULL pointer dereference in
bareudp_fill_metadata_dst() (bsc#1012628).
- net/sched: sch_cake: annotate data-races in cake_dump_stats()
(I) (bsc#1012628).
- net/sched: sch_cake: annotate data-races in cake_dump_stats()
(II) (bsc#1012628).
- net/sched: sch_cake: annotate data-races in cake_dump_stats()
(III) (bsc#1012628).
- net/sched: sch_cake: annotate data-races in cake_dump_stats()
(IV) (bsc#1012628).
- net/sched: sch_cake: annotate data-races in cake_dump_stats()
(V) (bsc#1012628).
- netconsole: return count instead of strnlen(buf, count) from
store callbacks (bsc#1012628).
- netconsole: avoid clobbering userdatum value on truncated write
(bsc#1012628).
- netconsole: propagate device name truncation in dev_name_store()
(bsc#1012628).
- netconsole: restore userdatum value on update_userdata()
failure (bsc#1012628).
- ALSA: hda/conexant: Fix missing error check for jack detection
(bsc#1012628).
- ALSA: hda: cs35l56: Fix uninitialized value in
cs35l56_hda_read_acpi() (bsc#1012628).
- ALSA: hda/tas2781: Fix incorrect bit update for non-book-zero
or book 0 pages >1 (bsc#1012628).
- futex: Prevent lockup in requeue-PI during signal/ timeout
wakeup (bsc#1012628).
- drm/amd/display: Allow embedded connectors without DDC
(bsc#1012628).
- drm/amd/display: Allow DCE link encoder without AUX registers
(bsc#1012628).
- drm/amd/display: Allow constructing DCE6 link encoder without
DDC (bsc#1012628).
- drm/amd/display: Allow constructing DCE8 link encoder without
DDC (bsc#1012628).
- drm/amd/display: Read EDID from VBIOS embedded panel info
(bsc#1012628).
- drm/amd/display: Use EDID from VBIOS embedded panel info
(bsc#1012628).
- drm/xe: Use XE_WEDGED_MODE_UPON_ANY_HANG_NO_RESET enum instead
of magic number (bsc#1012628).
- drm/xe: Drop registration of guc_submit_wedged_fini from
xe_guc_submit_wedge() (bsc#1012628).
- drm/xe/debugfs: Correct printing of register whitelist ranges
(bsc#1012628).
- drm/xe: Fix potential NULL deref in
xe_exec_queue_tlb_inval_last_fence_put_unlocked (bsc#1012628).
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()
(bsc#1012628).
- drm/xe/eustall: Fix drm_dev_put called before stream disable
in close (bsc#1012628).
- drm/xe/gsc: Fix BO leak on error in
query_compatibility_version() (bsc#1012628).
- drm/xe/xelp: Fix Wa_18022495364 (bsc#1012628).
- net: airoha: Do not return err in ndo_stop() callback
(bsc#1012628).
- bonding: print churn state via netlink (bsc#1012628).
- bonding: 3ad: implement proper RCU rules for port->aggregator
(bsc#1012628).
- page_pool: fix memory-provider leak in page_pool_create_percpu()
error path (bsc#1012628).
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (bsc#1012628).
- iavf: stop removing VLAN filters from PF on interface down
(bsc#1012628).
- iavf: wait for PF confirmation before removing VLAN filters
(bsc#1012628).
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler
(bsc#1012628).
- ice: fix NULL pointer dereference in ice_reset_all_vfs()
(bsc#1012628).
- ice: fix infinite recursion in ice_cfg_tx_topo via
ice_init_dev_hw (bsc#1012628).
- ice: fix missing SMA pin initialization in DPLL subsystem
(bsc#1012628).
- ice: fix SMA and U.FL pin state changes affecting paired pin
(bsc#1012628).
- ice: fix missing dpll notifications for SW pins (bsc#1012628).
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock
(bsc#1012628).
- ice: add dpll peer notification for paired SMA and U.FL pins
(bsc#1012628).
- net: tls: fix strparser anchor skb leak on offload RX setup
failure (bsc#1012628).
- sfc: fix error code in efx_devlink_info_running_versions()
(bsc#1012628).
- net/sched: cls_flower: revert unintended changes (bsc#1012628).
- kselftest/arm64: Include <asm/ptrace.h> for user_gcs definition
(bsc#1012628).
- arm64: Reserve an extra page for early kernel mapping
(bsc#1012628).
- futex: Drop CLONE_THREAD requirement for private default hash
alloc (bsc#1012628).
- PCI: Initialize temporary device in new_id_store()
(bsc#1012628).
- workqueue: fix devm_alloc_workqueue() va_list misuse
(bsc#1012628).
- net/sched: sch_pie: annotate more data-races in pie_dump_stats()
(bsc#1012628).
- sched/fair: Fix wakeup_preempt_fair() for not waking up task
(bsc#1012628).
- crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1012628).
- i40e: Cleanup PTP pins on probe failure (bsc#1012628).
- workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs()
WQ_UNBOUND path (bsc#1012628).
- net: ena: PHC: Fix potential use-after-free in get_timestamp
(bsc#1012628).
- cgroup/cpuset: Reset DL migration state on can_attach() failure
(bsc#1012628).
- netfilter: nf_conntrack_sip: get helper before allocating
expectation (bsc#1012628).
- audit: fix incorrect inheritable capability in CAPSET records
(bsc#1012628).
- net: ena: PHC: Check return code before setting timestamp output
(bsc#1012628).
- cgroup/dmem: Return -ENOMEM on failed pool preallocation
(bsc#1012628).
- idpf: fix double free and use-after-free in aux device error
paths (bsc#1012628).
- cgroup/cpuset: Reserve DL bandwidth only for root-domain moves
(bsc#1012628).
- Revert "ACPI: CPPC: Adjust debug messages in
amd_set_max_freq_ratio() to warn" (bsc#1012628).
- netfilter: nft_ct: fix missing expect put in obj eval
(bsc#1012628).
- net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL
enabled (bsc#1012628).
- audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV
(bsc#1012628).
- cgroup/cpuset: Return only actually allocated CPUs during
partition invalidation (bsc#1012628).
- KVM: x86: Swap the dst and src operand for MOVNTDQA
(bsc#1012628).
- KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
(bsc#1012628).
- KVM: s390: pci: fix GAIT table indexing due to double-scaling
pointer arithmetic (bsc#1012628).
- KVM: x86: Fix Xen hypercall tracepoint argument assignment
(bsc#1012628).
- HID: pass the buffer size to hid_report_raw_event (bsc#1012628).
- HID: core: introduce hid_safe_input_report() (bsc#1012628).
- rseq: Revert to historical performance killing behaviour
(bsc#1012628).
- rseq: Implement read only ABI enforcement for optimized RSEQ
V2 mode (bsc#1012628).
- rseq: Reenable performance optimizations conditionally
(bsc#1012628).
- HID: core: Fix size_t specifier in hid_report_raw_event()
(bsc#1012628).
- ata: libata-scsi: fix requeue of deferred ATA PASS-THROUGH
commands (bsc#1012628).
- media: staging: imx: configure src_mux in csi_start
(bsc#1012628).
- nvme-apple: Reset q->sq_tail during queue init (bsc#1012628).
- smb/client: fix possible infinite loop and oob read in
symlink_data() (bsc#1012628).
- drm/loongson: Use managed KMS polling (bsc#1012628).
- drm/bridge: imx8qxp-pxl2dpi: avoid ERR_PTR with device_node
cleanup (bsc#1012628).
- drm/i915/dp: Fix VSC dynamic range signaling for RGB formats
(bsc#1012628).
- drm/amd/display: Wrap DCN32 phantom-plane allocation in
DC_RUN_WITH_PREEMPTION_ENABLED (bsc#1012628).
- drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout
failure (bsc#1012628).
- platform/x86: intel: Move debugfs register before creating
devices (bsc#1012628).
- platform/x86: lenovo-wmi-helpers: Move gamezone enums to
wmi-helpers (bsc#1012628).
- platform/x86: lenovo-wmi-helpers: Fix memory leak in
lwmi_dev_evaluate_int() (bsc#1012628).
- platform/x86: lenovo-wmi-other: Balance IDA id allocation and
free (bsc#1012628).
- platform/x86: lenovo-wmi-other: Balance component bind and
unbind (bsc#1012628).
- platform/x86: lenovo-wmi-other: Zero initialize WMI arguments
(bsc#1012628).
- platform/x86: lenovo-wmi-other: Fix tunable_attr_01 struct
members (bsc#1012628).
- platform/x86: lenovo-wmi-other: Add Attribute ID helper
functions (bsc#1012628).
- platform/x86: lenovo-wmi-other: Limit adding attributes to
supported devices (bsc#1012628).
- accel/rocket: Fix prep_bo ioctl leaking positive return from
dma_resv_wait_timeout() (bsc#1012628).
- ALSA: hda/realtek: Add mute LED quirk for HP Pavilion Laptop
16-ag0xxx (bsc#1012628).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Book5 360
headphone (bsc#1012628).
- ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans
(bsc#1012628).
- ALSA: usb-audio: Bound MIDI endpoint descriptor scans
(bsc#1012628).
- ALSA: usb-audio: qcom: Check offload mapping failures
(bsc#1012628).
- btrfs: only release the dirty pages io tree after successful
writes (bsc#1012628).
- ceph: fix a buffer leak in __ceph_setxattr() (bsc#1012628).
- ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale
blob size (bsc#1012628).
- ceph: put folios not suitable for writeback (bsc#1012628).
- io-wq: check that the predecessor is hashed in
io_wq_remove_pending() (bsc#1012628).
- iommu/amd: Bounds-check devid in __rlookup_amd_iommu()
(bsc#1012628).
- x86/kexec: Push kjump return address even for non-kjump kexec
(bsc#1012628).
- xfs: fix memory leak on error in xfs_alloc_zone_info()
(bsc#1012628).
- virt: sev-guest: Do not use host-controlled page order in
cleanup path (bsc#1012628).
- powerpc/warp: Fix error handling in pika_dtm_thread
(bsc#1012628).
- netfs: fix error handling in netfs_extract_user_iter()
(bsc#1012628).
- nfsd: fix GET_DIR_DELEGATION when VFS leases are disabled
(bsc#1012628).
- nfsd: fix file change detection in CB_GETATTR (bsc#1012628).
- nfsd: update mtime/ctime on CLONE in presense of delegated
attributes (bsc#1012628).
- nfsd: update mtime/ctime on COPY in presence of delegated
attributes (bsc#1012628).
- irqchip/riscv-imsic: Clear interrupt move state during CPU
offlining (bsc#1012628).
- irqchip/meson-gpio: Use the correct register in
meson_s4_gpio_irq_set_type() (bsc#1012628).
- irqchip/gic-v5: Move LPI allocation into the LPI domain
(bsc#1012628).
- irqchip/gic-v5: Support range allocation for LPIs (bsc#1012628).
- irqchip/gic-v5: Allocate ITS parent LPIs as a range
(bsc#1012628).
- libceph: Fix potential out-of-bounds access in osdmap_decode()
(bsc#1012628).
- libceph: Fix potential null-ptr-deref in decode_choose_args()
(bsc#1012628).
- libceph: Fix potential out-of-bounds access in
__ceph_x_decrypt() (bsc#1012628).
- libceph: Fix potential out-of-bounds access in crush_decode()
(bsc#1012628).
- libceph: handle rbtree insertion error in decode_choose_args()
(bsc#1012628).
- iommu/vt-d: Disable DMAR for Intel Q35 IGFX (bsc#1012628).
- iommu/vt-d: Fix oops due to out of scope access (bsc#1012628).
- iommu/vt-d: Avoid NULL pointer dereference or refcount
corruption (bsc#1012628).
- iommu: Fix NULL group->domain dereference in
pci_dev_reset_iommu_done() (bsc#1012628).
- iommu: Replace per-group resetting_domain with per-gdev blocked
flag (bsc#1012628).
- iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due
to reset (bsc#1012628).
- iommu: Fix pasid attach in pci_dev_reset_iommu_prepare/done()
(bsc#1012628).
- iommu: Fix nested pci_dev_reset_iommu_prepare/done()
(bsc#1012628).
- iommu: Fix ATS invalidation timeouts during
__iommu_remove_group_pasid() (bsc#1012628).
- drm/i915: skip __i915_request_skip() for already signaled
requests (bsc#1012628).
- drm/panfrost: Fix wait_bo ioctl leaking positive return from
dma_resv_wait_timeout() (bsc#1012628).
- drm/xe/dma-buf: handle empty bo and UAF races (bsc#1012628).
- drm/xe/dma-buf: fix UAF with retry loop (bsc#1012628).
- drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure
(bsc#1012628).
- drm/ttm: Convert -EAGAIN from dmem_cgroup_try_charge to -ENOSPC
(bsc#1012628).
- drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup
(bsc#1012628).
- drm/gma500/oaktrail_lvds: fix hang on init failure
(bsc#1012628).
- drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init
(bsc#1012628).
- arm_mpam: Fix monitor instance selection when checking for
hardware NRDY (bsc#1012628).
- arm_mpam: Pretend that NRDY is always hardware managed
(bsc#1012628).
- arm_mpam: Improve check for whether or not NRDY is hardware
managed (bsc#1012628).
- arm_mpam: Fix false positive assert failure during
mpam_disable() (bsc#1012628).
- arm_mpam: Check whether the config array is allocated before
destroying it (bsc#1012628).
- eventfs: Simplify code using guard()s (bsc#1012628).
- eventfs: Use list_add_tail_rcu() for SRCU-protected children
list (bsc#1012628).
- smb: client: Use FullSessionKey for AES-256 encryption key
derivation (bsc#1012628).
- spi: sifive: Simplify clock handling with devm_clk_get_enabled()
(bsc#1012628).
- spi: sifive: fix controller deregistration (bsc#1012628).
- net/rds: reset op_nents when zerocopy page pin fails
(bsc#1012628).
- tracefs: Removed unused 'ret' variable in eventfs_iterate()
(bsc#1012628).
- workqueue: Annotate alloc_workqueue_va() with __printf(1, 0)
(bsc#1012628).
- net: skbuff: preserve shared-frag marker during coalescing
(bsc#1012628).
- net: skbuff: propagate shared-frag marker through frag-transfer
helpers (bsc#1012628).
- selftests/bpf: Remove test_access_variable_array (bsc#1012628).
- netfs: Fix potential uninitialised var in
netfs_extract_user_iter() (bsc#1012628).
- Rename to
patches.kernel.org/7.0.10-1062-Bluetooth-btmtk-accept-too-short-WMT-FUNC_CTR.patch.
- Rename to
patches.kernel.org/7.0.10-1066-drm-Replace-old-pointer-to-new-idr.patch.
- Update config files.
- commit 5d35845
* Fri May 22 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.0.4-045-crypto-pcrypt-Fix-handling-of-MAY_BACKLOG-reque.patch
(bsc#1012628 CVE-2026-43493 bsc#1265627).
- Update
patches.kernel.org/7.0.4-137-net-qrtr-ns-Limit-the-maximum-server-registrati.patch
(bsc#1012628 CVE-2026-43491 bsc#1265628).
- Update
patches.kernel.org/7.0.4-280-rtmutex-Use-waiter-task-instead-of-current-in-r.patch
(bsc#1012628 CVE-2026-43499 bsc#1266001).
- Update
patches.kernel.org/7.0.4-298-ipv6-rpl-reserve-mac_len-headroom-when-recompre.patch
(bsc#1012628 CVE-2026-43501 bsc#1266009).
- Update
patches.kernel.org/7.0.7-005-fbdev-udlfb-add-vm_ops-to-dlfb_ops_mmap-to-prev.patch
(bsc#1012628 CVE-2026-43497 bsc#1266003).
- Update
patches.kernel.org/7.0.7-020-net-sched-sch_red-Replace-direct-dequeue-call-w.patch
(bsc#1012628 CVE-2026-43496 bsc#1266000).
- Update
patches.kernel.org/7.0.7-109-accel-ivpu-Disallow-re-exporting-imported-GEM-o.patch
(bsc#1012628 CVE-2026-43498 bsc#1266002).
- Update
patches.kernel.org/7.0.7-120-net-rds-handle-zerocopy-send-cleanup-before-the.patch
(bsc#1012628 CVE-2026-43502 bsc#1266008).
- Update
patches.kernel.org/7.0.7-121-net-wwan-t7xx-validate-port_count-against-messa.patch
(bsc#1012628 CVE-2026-43495 bsc#1265999).
- Update
patches.kernel.org/7.0.7-193-lib-crypto-mpi-Fix-integer-underflow-in-mpi_rea.patch
(bsc#1012628 CVE-2026-43492 bsc#1265629).
suse-add-cves
- commit 2564307
* Fri May 22 2026 jslaby@suse.cz
- Refresh
patches.suse/Bluetooth-btmtk-accept-too-short-WMT-FUNC_CTRL-event.patch.
- Refresh
patches.suse/srcu-Don-t-queue-workqueue-handlers-to-never-online-.patch.
Update upstream info.
- commit 90e5100
* Thu May 21 2026 msuchanek@suse.de
- kernel-binary: Only apply vmlinux workaround on SLE15 and later
To create debuginfo for vmlinux the file needs to be present even if
it's not packaged because a compressed file is packaged insteand.
To accomplish that the file is marked as ghost in the file list. Then
rpm does not complain that the file exists but does not package it.
However, rpm still reserves space for ghost files when installing a
package. To avoid reserving space for a file that is not used the file
is truncated.
That works on SLE 15 but on SLE 12 rpm then fails packaging the
debuginfo complaiing that extra debuginfo files are present. Limit the
workaround to SLE 15 and later.
Fixes: 222edac2a18 (kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements)
- commit 1ef7451
* Thu May 21 2026 msuchanek@suse.de
- Kernel-binary: Do not truncate vmlinux when it's the boot image
Some architectures use vmlinux to boot. Truncating vmlinux on those
architectures causes signing failure during build. Also if the signing
was disabled a brokne kernel would be produced.
Fixes: 222edac2a18 (kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements)
- commit d3cf603
* Wed May 20 2026 sangeetha.thackarajan@suse.com
- kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements
define %__spec_install_post to truncate the uncompressed vmlinux
to 0 bytes after find-debuginfo.sh and brp-* scripts run. This prevents
rpmbuild from baking the %ghost file size into the FILESIZES
header, which can cause installation failures on smaller /boot partitions.
Fixes: bsc#1265456
- commit 222edac
* Tue May 19 2026 jslaby@suse.cz
- Bluetooth: btmtk: accept too short WMT FUNC_CTRL events
(bsc#1265457).
- commit 17ac7c8
* Mon May 18 2026 mkubecek@suse.cz
- update to 7.1-rc4
- update configs
- NVME_TARGET_AUTH_DEBUG=n
- commit 1ff3c85
* Sun May 17 2026 jslaby@suse.cz
- drm: Replace old pointer to new idr (git-fixes).
- commit 9b5964b
* Sun May 17 2026 jslaby@suse.cz
- Linux 7.0.9 (bsc#1012628).
- HID: playstation: Clamp num_touch_reports (bsc#1012628).
- HID: appletb-kbd: fix UAF in inactivity-timer cleanup path
(bsc#1012628).
- HID: appletb-kbd: run inactivity autodim from workqueues
(bsc#1012628).
- HID: pidff: Fix integer overflow in pidff_rescale (bsc#1012628).
- media: uvcvideo: Enable VB2_DMABUF for metadata stream
(bsc#1012628).
- drm/msm/hdmi: Fix wrong CTRL1 register used in writing info
frames (bsc#1012628).
- media: rzv2h-ivc: Avoid double job scheduling (bsc#1012628).
- media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0
(bsc#1012628).
- media: rzv2h-ivc: Write AXIRX_PIXFMT once (bsc#1012628).
- media: rzv2h-ivc: Fix FM_STOP register write (bsc#1012628).
- media: rzv2h-ivc: Fix concurrent buffer list access
(bsc#1012628).
- media: mali-c55: Initialize the ISP in enable_streams()
(bsc#1012628).
- media: mali-c55: Fix Iridix bypass macros (bsc#1012628).
- media: renesas: vsp1: Fix NULL pointer deref on module unload
(bsc#1012628).
- media: renesas: vin: Fix RAW8 (again) (bsc#1012628).
- media: i2c: ov8856: free control handler on error in
ov8856_init_controls() (bsc#1012628).
- media: dt-bindings: rockchip,vdec: Add alternative reg-names
order for RK35{76,88} (bsc#1012628).
- media: dt-bindings: rockchip,vdec: Mark reg-names required
for RK35{76,88} (bsc#1012628).
- media: chips-media: wave5: fix a potential memory leak in
wave5_vdi_init() (bsc#1012628).
- media: chips-media: wave5: add missing spinlock protection
for send_eos_event() (bsc#1012628).
- media: chips-media: wave5: add missing spinlock protection
for handle_dynamic_resolution_change() (bsc#1012628).
- arm64: dts: freescale: imx95-toradex-smarc: fix PMIC_SD2_VSEL
label position (bsc#1012628).
- drm/gpusvm: Allow device pages to be mapped in mixed mappings
after system pages (bsc#1012628).
- drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages
(bsc#1012628).
- spi: bcm63xx: fix controller deregistration (bsc#1012628).
- spi: atmel: fix controller deregistration (bsc#1012628).
- arm64: dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio
pinmux (bsc#1012628).
- staging: media: atomisp: Disallow all private IOCTLs
(bsc#1012628).
- regulator: mt6357: fix OF node reference imbalance
(bsc#1012628).
- spi: st-ssc4: fix controller deregistration (bsc#1012628).
- regulator: max77650: fix OF node reference imbalance
(bsc#1012628).
- media: ti: vpe: Add missing v4l2_device_unregister in
vip_remove() (bsc#1012628).
- media: rc: xbox_remote: heed DMA restrictions (bsc#1012628).
- media: rc: streamzap: Error handling in probe (bsc#1012628).
- media: i2c: ov5647: Fix runtime PM refcount leak in s_ctrl
(bsc#1012628).
- media: i2c: imx283: Enter full standby when stopping streaming
(bsc#1012628).
- regulator: bq257xx: fix OF node reference imbalance
(bsc#1012628).
- regulator: rk808: fix OF node reference imbalance (bsc#1012628).
- media: videobuf2: Set vma_flags in vb2_dma_sg_mmap
(bsc#1012628).
- media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads
(bsc#1012628).
- media: mali-c55: Fully reset the ISP configuration
(bsc#1012628).
- media: intel/ipu6: fix error pointer dereference (bsc#1012628).
- media: i2c: imx283: Fix hang when going from large to small
resolution (bsc#1012628).
- regulator: act8945a: fix OF node reference imbalance
(bsc#1012628).
- regulator: s2dos05: fix OF node reference imbalance
(bsc#1012628).
- regulator: bd9571mwv: fix OF node reference imbalance
(bsc#1012628).
- spi: lantiq-ssc: fix controller deregistration (bsc#1012628).
- spi: meson-spicc: fix controller deregistration (bsc#1012628).
- spi: qup: fix controller deregistration (bsc#1012628).
- arm64: dts: ti: k3-am69-aquila-clover: Fix DP regulator enable
GPIO (bsc#1012628).
- spi: at91-usart: fix controller deregistration (bsc#1012628).
- media: saa7164: add ioremap return checks and cleanups
(bsc#1012628).
- spi: amlogic-spisg: fix controller deregistration (bsc#1012628).
- spi: aspeed-smc: fix controller deregistration (bsc#1012628).
- drm/colorop: Preserve bypass value in duplicate_state()
(bsc#1012628).
- drm/atomic: Add affected colorops with affected planes
(bsc#1012628).
- platform/x86: hp-wmi: Ignore backlight and FnLock events
(bsc#1012628).
- vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating
bytes to copy (bsc#1012628).
- arm64: dts: broadcom: bcm2712-d-rpi-5-b: add fixes for
pinctrl/pinctrl_aon (bsc#1012628).
- arm64: dts: broadcom: bcm2712-d-rpi-5-b: update uart10 interrupt
(bsc#1012628).
- media: pci: zoran: fix potential memory leak in zoran_probe()
(bsc#1012628).
- media: dib8000: avoid division by 0 in dib8000_set_dds()
(bsc#1012628).
- media: i2c: imx412: Assert reset GPIO during probe
(bsc#1012628).
- media: staging: imx: request mbus_config in csi_start
(bsc#1012628).
- media: i2c: ov08d10: fix image vertical start setting
(bsc#1012628).
- media: i2c: ov08d10: fix runtime PM handling in probe
(bsc#1012628).
- media: omap3isp: drop the use count of v4l2 pipeline
(bsc#1012628).
- media: iris: fix QCOM_MDT_LOADER dependency (bsc#1012628).
- media: iris: Fix use-after-free in
iris_release_internal_buffers() (bsc#1012628).
- media: qcom: camss: Fix csid clock configuration for sa8775p
(bsc#1012628).
- media: qcom: camss: Fix csid IRQ offset for sa8775p
(bsc#1012628).
- media: qcom: iris: increase H265D_MAX_SLICE to fix H.265
decoding on SC7280 (bsc#1012628).
- media: venus: fix QCOM_MDT_LOADER dependency (bsc#1012628).
- media: iris: Fix dma_free_attrs() size in iris_hfi_queues_init()
(bsc#1012628).
- media: iris: fix use-after-free of fmt_src during MBPF check
(bsc#1012628).
- media: iris: switch to hardware mode after firmware boot
(bsc#1012628).
- media: qcom: camss: Add missing clocks for VFE lite on sa8775p
(bsc#1012628).
- drm/xe/hdcp: Add NULL check for media_gt in
intel_hdcp_gsc_check_status() (bsc#1012628).
- spi: mxs: fix controller deregistration (bsc#1012628).
- spi: mt65xx: fix controller deregistration (bsc#1012628).
- spi: dln2: fix controller deregistration (bsc#1012628).
- spi: s3c64xx: fix controller deregistration (bsc#1012628).
- spi: fsl-espi: fix controller deregistration (bsc#1012628).
- spi: omap2-mcspi: fix controller deregistration (bsc#1012628).
- spi: pic32: fix controller deregistration (bsc#1012628).
- spi: ep93xx: fix controller deregistration (bsc#1012628).
- spi: mtk-nor: fix controller deregistration (bsc#1012628).
- spi: pl022: fix controller deregistration (bsc#1012628).
- spi: ch341: fix devres lifetime (bsc#1012628).
- spi: sh-hspi: fix controller deregistration (bsc#1012628).
- spi: fsl: fix controller deregistration (bsc#1012628).
- spi: bcmbca-hsspi: fix controller deregistration (bsc#1012628).
- spi: coldfire-qspi: fix controller deregistration (bsc#1012628).
- spi: npcm-pspi: fix controller deregistration (bsc#1012628).
- spi: cavium-thunderx: fix controller deregistration
(bsc#1012628).
- spi: pic32-sqi: fix controller deregistration (bsc#1012628).
- spi: sprd: fix controller deregistration (bsc#1012628).
- spi: rspi: fix controller deregistration (bsc#1012628).
- spi: sh-msiof: fix controller deregistration (bsc#1012628).
- spi: slave-mt27xx: fix controller deregistration (bsc#1012628).
- spi: img-spfi: fix controller deregistration (bsc#1012628).
- spi: mpfs: fix controller deregistration (bsc#1012628).
- spi: octeon: fix controller deregistration (bsc#1012628).
- spi: imx: fix runtime pm leak on probe deferral (bsc#1012628).
- spi: mxic: fix controller deregistration (bsc#1012628).
- spi: orion: fix controller deregistration (bsc#1012628).
- spi: orion: fix runtime pm leak on unbind (bsc#1012628).
- spi: orion: fix clock imbalance on registration failure
(bsc#1012628).
- spi: mpc52xx: fix use-after-free on registration failure
(bsc#1012628).
- spi: mpc52xx: fix controller deregistration (bsc#1012628).
- spi: mpc52xx: fix use-after-free on unbind (bsc#1012628).
- spi: cadence: fix controller deregistration (bsc#1012628).
- spi: cadence-quadspi: fix controller deregistration
(bsc#1012628).
- spi: cadence: fix unclocked access on unbind (bsc#1012628).
- spi: cadence: fix clock imbalance on probe failure
(bsc#1012628).
- spi: cadence-quadspi: fix runtime pm disable imbalance on
probe failure (bsc#1012628).
- spi: cadence-quadspi: fix clock imbalance on probe failure
(bsc#1012628).
- spi: cadence-quadspi: fix runtime pm and clock imbalance on
unbind (bsc#1012628).
- spi: cadence-quadspi: fix unclocked access on unbind
(bsc#1012628).
- drm/msm/gem: fix error handling in
msm_ioctl_gem_info_get_metadata() (bsc#1012628).
- drm/colorop: Fix blob property reference tracking in state
lifecycle (bsc#1012628).
- drm/imx: parallel-display: Prefer bus format set via legacy
"interface-pix-fmt" DT property (bsc#1012628).
- drm/msm: always recover the gpu (bsc#1012628).
- drm/v3d: Reject empty multisync extension to prevent infinite
loop (bsc#1012628).
- drm/i915/psr: Init variable to avoid early exit from et
alignment loop (bsc#1012628).
- drm/amdkfd: Clear VRAM on allocation to prevent stale data
exposure (bsc#1012628).
- drm/amd/display: fix math_mod() using arg1 instead of arg2
(bsc#1012628).
- drm/amd: Add missing firmware declaration for PSP v15.0.0
(bsc#1012628).
- drm/amdgpu: Use NBIF offset for register
RCC_STRAP0_RCC_DEV0_EPF0_STRAP0 (bsc#1012628).
- drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower
count (bsc#1012628).
- drm/amdgpu: gate VM CPU HDP flush on reset lock (bsc#1012628).
- drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x
(bsc#1012628).
- drm/amdkfd: Add upper bound check for num_of_nodes
(bsc#1012628).
- drm/amdgpu: Add bounds checking to ib_{get,set}_value
(bsc#1012628).
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
(bsc#1012628).
- drm/amdgpu/vce: Prevent partial address patches (bsc#1012628).
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg
(bsc#1012628).
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
(bsc#1012628).
- drm/amd/display: Change dither policy for 10 bpc output back
to dithering (bsc#1012628).
- drm/gem: Fix inconsistent plane dimension calculation in
drm_gem_fb_init_with_funcs() (bsc#1012628).
- drm/appletbdrm: Use kvzalloc for big allocations (bsc#1012628).
- drm/amdkfd: validate SVM ioctl nattr against buffer size
(bsc#1012628).
- drm/amdgpu: Avoid reset in AMDGPU unload path for APUs with
GFX V11 and higher (bsc#1012628).
- drm/udl: Increase GET_URB_TIMEOUT (bsc#1012628).
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation
failure (bsc#1012628).
- drm/xe/bo: Fix bo leak on GGTT flag validation in
xe_bo_init_locked() (bsc#1012628).
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()
(bsc#1012628).
- drm/xe/bo: Fix bo leak on unaligned size validation in
xe_bo_init_locked() (bsc#1012628).
- drm/xe/uapi: Reject coh_none PAT index for CPU cached memory
in madvise (bsc#1012628).
- drm: Set old handle to NULL before prime swap in change_handle
(bsc#1012628).
- drm/radeon: add missing revision check for CI (bsc#1012628).
- drm/amdgpu: zero-initialize GART table on allocation
(bsc#1012628).
- drm/exynos: remove bridge when component_add fails
(bsc#1012628).
- drm/amdgpu/userq: fix access to stale wptr mapping
(bsc#1012628).
- drm/panel: himax-hx83102: restore MODE_LPM after sending
disable cmds (bsc#1012628).
- drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in
KIQ (bsc#1012628).
- drm/bridge: tda998x: Use __be32 for audio port OF property
pointer (bsc#1012628).
- drm/sti: remove bridge when sti_hda component_add fails
(bsc#1012628).
- drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending
disable cmds (bsc#1012628).
- drm/amdkfd: Make all TLB-flushes heavy-weight (bsc#1012628).
- drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission
(bsc#1012628).
- drm/amdgpu/pm: add missing revision check for CI (bsc#1012628).
- drm/amdgpu/pm: align Hawaii mclk workaround with radeon
(bsc#1012628).
- arm64: dts: qcom: kodiak: Fix PCIe1 PHY ref clock voting
(bsc#1012628).
- arm64: dts: qcom: lemans: Correct QUP interrupt numbers
(bsc#1012628).
- arm64: dts: ti: k3-am62a7-sk: Fix pin name in comment from
M19 to N22 (bsc#1012628).
- arm64: dts: ti: k3-am69-aquila-dev: Fix DP regulator enable GPIO
(bsc#1012628).
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc()
in SCTP_SENDALL (bsc#1012628).
- batman-adv: fix integer overflow on buff_pos (bsc#1012628).
- batman-adv: reject new tp_meter sessions during teardown
(bsc#1012628).
- batman-adv: stop tp_meter sessions during mesh teardown
(bsc#1012628).
- batman-adv: stop caching unowned originator pointers in BAT IV
(bsc#1012628).
- batman-adv: tp_meter: fix tp_num leak on kmalloc failure
(bsc#1012628).
- batman-adv: bla: prevent use-after-free when deleting claims
(bsc#1012628).
- batman-adv: bla: only purge non-released claims (bsc#1012628).
- batman-adv: bla: put backbone reference on failed claim hash
insert (bsc#1012628).
- sched_ext: Use HK_TYPE_DOMAIN_BOOT to detect isolcpus= domain
isolation (bsc#1012628).
- usb: typec: tcpm: reset internal port states on soft reset AMS
(bsc#1012628).
- io_uring/zcrx: use guards for locking (bsc#1012628).
- io_uring/zcrx: warn on freelist violations (bsc#1012628).
- kho: fix error handling in kho_add_subtree() (bsc#1012628).
- EDAC/versalnet: Refactor memory controller initialization and
cleanup (bsc#1012628).
- EDAC/versalnet: Fix device name memory leak (bsc#1012628).
- spi: uniphier: Simplify clock handling with
devm_clk_get_enabled() (bsc#1012628).
- spi: uniphier: fix controller deregistration (bsc#1012628).
- cgroup: Increment nr_dying_subsys_* from rmdir context
(bsc#1012628).
- cgroup: Defer css percpu_ref kill on rmdir until cgroup is
depopulated (bsc#1012628).
- sched_ext: Skip tasks with stale task_rq in bypass_lb_cpu()
(bsc#1012628).
- perf build: fix "argument list too long" in second location
(bsc#1012628).
- mm/vma: do not try to unmap a VMA if mmap_prepare() invoked
from mmap() (bsc#1012628).
- vsock: fix buffer size clamping order (bsc#1012628).
- vsock/virtio: fix length and offset in tap skb for split packets
(bsc#1012628).
- vsock/virtio: fix empty payload in tap skb for non-linear
buffers (bsc#1012628).
- vsock/virtio: fix accept queue count leak on transport mismatch
(bsc#1012628).
- drm/amdgpu/vcn3: Avoid overflow on msg bound check
(bsc#1012628).
- drm/amdgpu/vcn4: Avoid overflow on msg bound check
(bsc#1012628).
- Rename to
patches.kernel.org/7.0.9-052-media-ipu-bridge-Add-upside-down-sensor-DMI-qui.patch.
- commit e4a2ce0
* Sun May 17 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.0.7-306-ksmbd-validate-inherited-ACE-SID-length.patch
(bsc#1012628 CVE-2026-43490 bsc#1265333).
- Update
patches.kernel.org/7.0.8-001-ptrace-slightly-saner-get_dumpable-logic.patch
(bsc#1012628 bsc#1265308 CVE-2026-46333).
suse-add-cves
- commit 1684d62
* Sun May 17 2026 jslaby@suse.cz
- Linux 7.0.8 (bsc#1012628).
- Rename to
patches.kernel.org/7.0.8-001-ptrace-slightly-saner-get_dumpable-logic.patch.
- commit ce3b8c5
* Fri May 15 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.0.2-014-f2fs-fix-to-avoid-uninit-value-access-in-f2fs_s.patch
(bsc#1012628 CVE-2026-43349 bsc#1265131).
- Update
patches.kernel.org/7.0.2-024-smb-client-require-a-full-NFS-mode-SID-before-r.patch
(bsc#1012628 CVE-2026-43350 bsc#1264985).
- Update
patches.kernel.org/7.0.2-042-mshv_vtl-Fix-vmemmap_shift-exceeding-MAX_FOLIO_.patch
(bsc#1012628 CVE-2026-43348 bsc#1264981).
- Update
patches.kernel.org/7.0.7-306-ksmbd-validate-inherited-ACE-SID-length.patch
(bsc#1012628 CVE-2026-43490).
suse-add-cves
- commit f1d450c
* Fri May 15 2026 ddiss@suse.de
- ptrace: slightly saner 'get_dumpable()' logic (bsc#1265308).
- commit 67ebcde
* Thu May 14 2026 rbm@suse.com
- selftests/namespaces: Skip efault tests when listns() is not
available (poo#196367).
(cherry picked from commit 37898a99d0da51559e0f2159e578acf0a0ff8642)
- selftests/namespaces: Fix waitpid race in listns_efault_test
cleanup (poo#196367).
(cherry picked from commit e8033b51eb0f5ebe7efa2cc2dcb11ae92f7fa7eb)
- selftests/namespaces: Kill grandchild in nsid fixture teardown
(poo#196367).
(cherry picked from commit 4b12ab2750c6c833963adaf74e6e421b32a57233)
- selftests/namespaces: Skip efault tests when listns() is not
available (poo#196367).
- selftests/namespaces: Fix waitpid race in listns_efault_test
cleanup (poo#196367).
- selftests/namespaces: Kill grandchild in nsid fixture teardown
(poo#196367).
- commit cd396ff
* Thu May 14 2026 jslaby@suse.cz
- Linux 7.0.7 (bsc#1012628).
- scsi: target: configfs: Bound snprintf() return in
tg_pt_gp_members_show() (bsc#1012628).
- ipmi: Add limits to event and receive message requests
(bsc#1012628).
- ipmi: Check event message buffer response for bad data
(bsc#1012628).
- ipmi:si: Return state to normal if message allocation fails
(bsc#1012628).
- fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent
use-after-free (bsc#1012628).
- ACPI: arm64: cpuidle: Tolerate platforms with no deep PSCI
idle states (bsc#1012628).
- ACPI: scan: Use acpi_dev_put() in object add error paths
(bsc#1012628).
- ACPI: video: Add backlight=native quirk for Dell OptiPlex 7770
AIO (bsc#1012628).
- ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug
(bsc#1012628).
- ACPI: video: force native backlight on HP OMEN 16 (8A44)
(bsc#1012628).
- tracepoint: balance regfunc() on func_add() failure in
tracepoint_add_func() (bsc#1012628).
- iommufd: Fix a race with concurrent allocation and unmap
(bsc#1012628).
- ASoC: SOF: Don't allow pointer operations on unconfigured
streams (bsc#1012628).
- wifi: mt76: mt7925: fix incorrect TLV length in CLC command
(bsc#1012628).
- spi: rockchip: fix controller deregistration (bsc#1012628).
- ksmbd: rewrite stop_sessions() with restartable iteration
(bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
GFN (bsc#1012628).
- flow_dissector: do not dissect PPPoE PFC frames (bsc#1012628).
- smb: client/smbdirect: fix MR registration for coalesced SG
lists (bsc#1012628).
- net/sched: sch_red: Replace direct dequeue call with peek and
qdisc_dequeue_peeked (bsc#1012628).
- exit: prevent preemption of oopsing TASK_DEAD task
(bsc#1012628).
- wifi: mt76: mt7925: fix AMPDU state handling in
mt7925_tx_check_aggr (bsc#1012628).
- wifi: mt76: mt7925: fix incorrect length field in txpower
command (bsc#1012628).
- wifi: mt76: mt7921: fix a potential clc buffer length underflow
(bsc#1012628).
- wifi: mt76: mt7921: fix ROC abort flow interruption in
mt7921_roc_work (bsc#1012628).
- wifi: b43legacy: enforce bounds check on firmware key index
in RX path (bsc#1012628).
- wifi: mac80211: drop stray 'static' from fast-RX rx_result
(bsc#1012628).
- wifi: rsi: fix kthread lifetime race between self-exit and
external-stop (bsc#1012628).
- wifi: mac80211: use safe list iteration in radar detect work
(bsc#1012628).
- wifi: ath5k: do not access array OOB (bsc#1012628).
- wifi: mac80211: remove station if connection prep fails
(bsc#1012628).
- wifi: b43: enforce bounds check on firmware key index in
b43_rx() (bsc#1012628).
- wifi: brcmfmac: Fix potential use-after-free issue when stopping
watchdog task (bsc#1012628).
- usb: usblp: fix heap leak in IEEE 1284 device ID via short
response (bsc#1012628).
- usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
(bsc#1012628).
- ALSA: usb-audio: midi2: Restart output URBs on resume
(bsc#1012628).
- ALSA: usb-audio: Avoid potential endless loop in
convert_chmap_v3() (bsc#1012628).
- ALSA: usb-audio: Fix UAC3 cluster descriptor size check
(bsc#1012628).
- usb: dwc3: Move GUID programming after PHY initialization
(bsc#1012628).
- USB: omap_udc: DMA: Don't enable burst 4 mode (bsc#1012628).
- USB: serial: option: add Telit Cinterion LE910Cx compositions
(bsc#1012628).
- usb: ulpi: fix memory leak on ulpi_register() error paths
(bsc#1012628).
- usb: typec: tcpm: fix debug accessory mode detection for sink
ports (bsc#1012628).
- ALSA: hda: cs35l56: Propagate ASP TX source control errors
(bsc#1012628).
- ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger
(bsc#1012628).
- ALSA: hda/realtek: Fix speaker silence after S3 resume on
Xiaomi Mi Laptop Pro 15 (bsc#1012628).
- ALSA: firewire-tascam: Do not drop unread control events
(bsc#1012628).
- ALSA: seq: Fix UMP group 16 filtering (bsc#1012628).
- powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o
(bsc#1012628).
- x86/efi: Restore IRQ state in EFI page fault handler
(bsc#1012628).
- sched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup
setters (bsc#1012628).
- xfrm: provide message size for XFRM_MSG_MAPPING (bsc#1012628).
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
(bsc#1012628).
- ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
(bsc#1012628).
- xfrm: ah: account for ESN high bits in async callbacks
(bsc#1012628).
- selinux: fix avdcache auditing (bsc#1012628).
- selinux: use sk blob accessor in socket permission helpers
(bsc#1012628).
- selinux: don't reserve xattr slot when we won't fill it
(bsc#1012628).
- selinux: shrink critical section in sel_write_load()
(bsc#1012628).
- selinux: prune /sys/fs/selinux/checkreqprot (bsc#1012628).
- selinux: prune /sys/fs/selinux/disable (bsc#1012628).
- selinux: prune /sys/fs/selinux/user (bsc#1012628).
- selinux: allow multiple opens of /sys/fs/selinux/policy
(bsc#1012628).
- io_uring/kbuf: support min length left for incremental buffers
(bsc#1012628).
- io_uring/tw: serialize ctx->retry_llist with ->uring_lock
(bsc#1012628).
- LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read()
(bsc#1012628).
- Bluetooth: virtio_bt: clamp rx length before skb_put
(bsc#1012628).
- Bluetooth: virtio_bt: validate rx pkt_type header length
(bsc#1012628).
- Bluetooth: btmtk: validate WMT event SKB length before struct
access (bsc#1012628).
- Bluetooth: hci_conn: fix potential UAF in create_big_sync
(bsc#1012628).
- Bluetooth: hci_event: Fix OOB read and infinite loop in
hci_le_create_big_complete_evt (bsc#1012628).
- Bluetooth: L2CAP: Fix null-ptr-deref in
l2cap_sock_new_connection_cb() (bsc#1012628).
- Bluetooth: L2CAP: Fix null-ptr-deref in
l2cap_sock_state_change_cb() (bsc#1012628).
- Bluetooth: L2CAP: Fix null-ptr-deref in
l2cap_sock_get_sndtimeo_cb() (bsc#1012628).
- rust: drm: gem: clean up GEM state in init failure case
(bsc#1012628).
- rust: allow `clippy::collapsible_match` globally (bsc#1012628).
- rust: allow `clippy::collapsible_if` globally (bsc#1012628).
- rust: pin-init: internal: move alignment check to
`make_field_check` (bsc#1012628).
- spi: syncuacer: fix controller deregistration (bsc#1012628).
- spi: sun4i: fix controller deregistration (bsc#1012628).
- spi: zynq-qspi: fix controller deregistration (bsc#1012628).
- spi: ti-qspi: fix controller deregistration (bsc#1012628).
- spi: sun6i: fix controller deregistration (bsc#1012628).
- spi: tegra114: fix controller deregistration (bsc#1012628).
- spi: zynqmp-gqspi: fix controller deregistration (bsc#1012628).
- spi: tegra20-sflash: fix controller deregistration
(bsc#1012628).
- spi: s3c64xx: fix NULL-deref on driver unbind (bsc#1012628).
- staging: rtl8723bs: os_dep: avoid NULL pointer dereference in
rtw_cbuf_alloc (bsc#1012628).
- staging: vme_user: fix root device leak on init failure
(bsc#1012628).
- fanotify: fix false positive on permission events (bsc#1012628).
- KVM: arm64: Fix kvm_vcpu_initialized() macro parameter
(bsc#1012628).
- mtd: spi-nor: debugfs: fix out-of-bounds read in
spi_nor_params_show() (bsc#1012628).
- arm64: signal: Preserve POR_EL0 if poe_context is missing
(bsc#1012628).
- mm/hugetlb_cma: round up per_node before logging it
(bsc#1012628).
- LoongArch: Fix SYM_SIGFUNC_START definition for 32BIT
(bsc#1012628).
- LoongArch: KVM: Compile switch.S directly into the kernel
(bsc#1012628).
- net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak
in rtnl_fill_vfinfo (bsc#1012628).
- mptcp: pm: ADD_ADDR rtx: skip inactive subflows (bsc#1012628).
- perf/x86/intel: Improve validation and configuration of ACR
masks (bsc#1012628).
- selftests/rseq: Don't run tests with runner scripts outside
of the scripts (bsc#1012628).
- rseq: Set rseq::cpu_id_start to 0 on unregistration
(bsc#1012628).
- rseq: Protect rseq_reset() against interrupts (bsc#1012628).
- rseq: Don't advertise time slice extensions if disabled
(bsc#1012628).
- selftests/rseq: Make registration flexible for legacy and
optimized mode (bsc#1012628).
- selftests/rseq: Skip tests if time slice extensions are not
available (bsc#1012628).
- selftests/rseq: Validate legacy behavior (bsc#1012628).
- selftests/rseq: Expand for optimized RSEQ ABI v2 (bsc#1012628).
- accel/ivpu: Disallow re-exporting imported GEM objects
(bsc#1012628).
- sound: ua101: fix division by zero at probe (bsc#1012628).
- pseries/papr-hvpipe: Fix race with interrupt handler
(bsc#1012628).
- pseries/papr-hvpipe: Prevent kernel stack memory leak to
userspace (bsc#1012628).
- pseries/papr-hvpipe: Fix null ptr deref in
papr_hvpipe_dev_create_handle() (bsc#1012628).
- pseries/papr-hvpipe: Fix & simplify error handling in
papr_hvpipe_init() (bsc#1012628).
- pseries/papr-hvpipe: Fix the usage of copy_to_user()
(bsc#1012628).
- net: libwx: fix VF illegal register access (bsc#1012628).
- ip6_gre: Use cached t->net in ip6erspan_changelink()
(bsc#1012628).
- net: libwx: use request_irq for VF misc interrupt (bsc#1012628).
- netpoll: pass buffer size to egress_dev() to avoid MAC
truncation (bsc#1012628).
- net/rds: handle zerocopy send cleanup before the message is
queued (bsc#1012628).
- net: wwan: t7xx: validate port_count against message length
in t7xx_port_enum_msg_handler (bsc#1012628).
- ovl: fix verity lazy-load guard broken by fsverity_active()
semantic change (bsc#1012628).
- platform/chrome: cros_ec_typec: Init mutex in Thunderbolt
registration (bsc#1012628).
- parisc: Fix IRQ leak in LASI driver (bsc#1012628).
- x86/efi: Fix graceful fault handling after FPU softirq changes
(bsc#1012628).
- hwmon: (ltc2992) Clamp threshold writes to hardware range
(bsc#1012628).
- hwmon: (ltc2992) Fix u32 overflow in power read path
(bsc#1012628).
- clk: rk808: fix OF node reference imbalance (bsc#1012628).
- hwmon: (corsair-psu) Close HID device on probe errors
(bsc#1012628).
- af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1012628).
- arm64/fpsimd: ptrace: zero target's fpsimd_state, not the
tracer's (bsc#1012628).
- pmdomain: mediatek: fix use-after-free in
scpsys_get_bus_protection_legacy() (bsc#1012628).
- block: add pgmap check to biovec_phys_mergeable (bsc#1012628).
- block: fix zone write plug removal (bsc#1012628).
- block: only read from sqe on initial invocation of
blkdev_uring_cmd() (bsc#1012628).
- cifs: abort open_cached_dir if we don't request leases
(bsc#1012628).
- cifs: change_conf needs to be called for session setup
(bsc#1012628).
- extcon: ptn5150: handle pending IRQ events during system resume
(bsc#1012628).
- fbcon: Avoid OOB font access if console rotation fails
(bsc#1012628).
- gpio: of: clear OF_POPULATED on hog nodes in remove path
(bsc#1012628).
- hv: Select CONFIG_SYSFB only for CONFIG_HYPERV_VMBUS
(bsc#1012628).
- hv_sock: fix ARM64 support (bsc#1012628).
- hv_sock: Report EOF instead of -EIO for FIN (bsc#1012628).
- hv_sock: Return -EIO for malformed/short packets (bsc#1012628).
- ibmveth: Disable GSO for packets with small MSS (bsc#1012628).
- ice: fix double free in ice_sf_eth_activate() error path
(bsc#1012628).
- spi: microchip-core-qspi: fix controller deregistration
(bsc#1012628).
- spi: microchip-core-spi: fix controller deregistration
(bsc#1012628).
- spi: microchip-core-qspi: don't attempt to transmit during
emulated read-only dual/quad operations (bsc#1012628).
- spi: microchip-core-qspi: control built-in cs manually
(bsc#1012628).
- tracefs: Fix default permissions not being applied on initial
mount (bsc#1012628).
- udf: reject descriptors with oversized CRC length (bsc#1012628).
- x86/boot/e820: Re-enable BIOS fallback if e820 table is empty
(bsc#1012628).
- thermal: core: Free thermal zone ID later during removal
(bsc#1012628).
- thermal/drivers/sprd: Fix temperature clamping in
sprd_thm_temp_to_rawdata (bsc#1012628).
- thermal/drivers/sprd: Fix raw temperature clamping in
sprd_thm_rawdata_to_temp (bsc#1012628).
- spi: topcliff-pch: fix controller deregistration (bsc#1012628).
- spi: topcliff-pch: fix use-after-free on unbind (bsc#1012628).
- tracing/fprobe: Avoid kcalloc() in rcu_read_lock section
(bsc#1012628).
- tracing/fprobe: Remove fprobe from hash in failure path
(bsc#1012628).
- tracing/fprobe: Unregister fprobe even if memory allocation
fails (bsc#1012628).
- tracing/probes: Limit size of event probe to 3K (bsc#1012628).
- tracing/fprobe: Check the same type fprobe on table as the
unregistered one (bsc#1012628).
- clk: imx: imx8-acm: fix flags for acm clocks (bsc#1012628).
- clk: microchip: mpfs-ccc: fix out of bounds access during
output registration (bsc#1012628).
- cpuidle: powerpc: avoid double clear when breaking snooze
(bsc#1012628).
- ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product
line in quirk table (bsc#1012628).
- ASoC: ES8389: convert to devm_clk_get_optional() to get clock
(bsc#1012628).
- ASoC: fsl_easrc: fix comment typo (bsc#1012628).
- ASoC: Intel: bytcr_wm5102: Fix MCLK leak on
platform_clock_control error (bsc#1012628).
- ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop
(bsc#1012628).
- ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens
(bsc#1012628).
- ASoC: qcom: q6apm: remove child devices when apm is removed
(bsc#1012628).
- btrfs: do not mark inode incompressible after inline attempt
fails (bsc#1012628).
- btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which
can lead to info-leak (bsc#1012628).
- btrfs: fix double free in create_space_info() error path
(bsc#1012628).
- btrfs: fix double free in create_space_info_sub_group() error
path (bsc#1012628).
- btrfs: fix missing last_unlink_trans update when removing a
directory (bsc#1012628).
- dm-thin: fix metadata refcount underflow (bsc#1012628).
- dm: don't report warning when doing deferred remove
(bsc#1012628).
- dm: fix a buffer overflow in ioctl processing (bsc#1012628).
- eventfs: Hold eventfs_mutex and SRCU when remount walks events
(bsc#1012628).
- dm-verity-fec: correctly reject too-small FEC devices
(bsc#1012628).
- dm-verity-fec: correctly reject too-small hash devices
(bsc#1012628).
- dm-verity-fec: fix corrected block count stat (bsc#1012628).
- dm-verity-fec: fix reading parity bytes split across blocks
(take 3) (bsc#1012628).
- dm-verity-fec: fix the size of dm_verity_fec_io::erasures
(bsc#1012628).
- isofs: validate Rock Ridge CE continuation extent against
volume size (bsc#1012628).
- isofs: validate block number from NFS file handle in
isofs_export_iget (bsc#1012628).
- iommufd: Fix return value of iommufd_fault_fops_write()
(bsc#1012628).
- iommu/vt-d: Block PASID attachment to nested domain with dirty
tracking (bsc#1012628).
- iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE
update (bsc#1012628).
- lib/crypto: mpi: Fix integer underflow in
mpi_read_raw_from_sgl() (bsc#1012628).
- lib/crc: tests: Make crc_kunit test only the enabled CRC
variants (bsc#1012628).
- lib/scatterlist: fix length calculations in extract_kvec_to_sg
(bsc#1012628).
- lib/scatterlist: fix temp buffer in extract_user_to_sg()
(bsc#1012628).
- libceph: Fix slab-out-of-bounds access in auth message
processing (bsc#1012628).
- md/raid10: fix divide-by-zero in setup_geo() with zero
far_copies (bsc#1012628).
- nvme-apple: drop invalid put of admin queue reference count
(bsc#1012628).
- nvmet-tcp: fix race between ICReq handling and queue teardown
(bsc#1012628).
- nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free
(bsc#1012628).
- openvswitch: vport: fix self-deadlock on release of tunnel ports
(bsc#1012628).
- pmdomain: core: Fix detach procedure for virtual devices in
genpd (bsc#1012628).
- psp: strip variable-length PSP header in psp_dev_rcv()
(bsc#1012628).
- RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
(bsc#1012628).
- riscv: kvm: fix vector context allocation leak (bsc#1012628).
- s390/debug: Reject zero-length input in debug_input_flush_fn()
(bsc#1012628).
- s390/debug: Reject zero-length input before trimming a newline
(bsc#1012628).
- scsi: mpt3sas: Limit NVMe request size to 2 MiB (bsc#1012628).
- smb/client: fix out-of-bounds read in smb2_compound_op()
(bsc#1012628).
- smb/client: fix out-of-bounds read in symlink_data()
(bsc#1012628).
- smb: client: use kzalloc to zero-initialize security descriptor
buffer (bsc#1012628).
- smb: client: validate dacloffset before building DACL pointers
(bsc#1012628).
- KVM: x86: check for nEPT/nNPT in slow flush hypercalls
(bsc#1012628).
- KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is
empty (bsc#1012628).
- mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid
values (bsc#1012628).
- mm/damon/reclaim: detect and use fresh enabled and kdamond_pid
values (bsc#1012628).
- mm/damon/stat: detect and use fresh enabled value (bsc#1012628).
- mm/damon/sysfs-schemes: protect memcg_path kfree() with
damon_sysfs_lock (bsc#1012628).
- mm/damon/sysfs-schemes: protect path kfree() with
damon_sysfs_lock (bsc#1012628).
- PCI: Update saved_config_space upon resource assignment
(bsc#1012628).
- PCI/AER: Clear only error bits in PCIe Device Status
(bsc#1012628).
- PCI/AER: Stop ruling out unbound devices as error source
(bsc#1012628).
- PCI/ASPM: Fix pci_clear_and_set_config_dword() usage
(bsc#1012628).
- power: supply: max17042: avoid overflow when determining health
(bsc#1012628).
- powerpc/xive: fix kmemleak caused by incorrect chip_data lookup
(bsc#1012628).
- perf/x86/intel: Always reprogram ACR events to prevent stale
masks (bsc#1012628).
- perf/x86/intel: Disable PMI for self-reloaded ACR events
(bsc#1012628).
- perf/x86/intel: Enable auto counter reload for DMR
(bsc#1012628).
- RDMA/ionic: bound node_desc sysfs read with %.64s (bsc#1012628).
- RDMA/ionic: Fix typo in format string (bsc#1012628).
- RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()
(bsc#1012628).
- RDMA/mana: Fix mana_destroy_wq_obj() cleanup in
mana_ib_create_qp_rss() (bsc#1012628).
- RDMA/mana: Remove user triggerable WARN_ON() in
mana_ib_create_qp_rss() (bsc#1012628).
- RDMA/mana: Validate rx_hash_key_len (bsc#1012628).
- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (bsc#1012628).
- RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
(bsc#1012628).
- RDMA/mlx5: Fix error path fall-through in
mlx5_ib_dev_res_srq_init() (bsc#1012628).
- RDMA/ocrdma: Don't NULL deref uctx on errors in
ocrdma_copy_pd_uresp() (bsc#1012628).
- RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (bsc#1012628).
- RDMA/rxe: Reject unknown opcodes before ICRC processing
(bsc#1012628).
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext()
error path (bsc#1012628).
- remoteproc: imx_rproc: Fix NULL vs IS_ERR() bug in
imx_rproc_addr_init() (bsc#1012628).
- remoteproc: k3: Fix NULL vs IS_ERR() bug in
k3_reserved_mem_init() (bsc#1012628).
- sched_ext: idle: Recheck prev_cpu after narrowing allowed mask
(bsc#1012628).
- sched_ext: Use dsq->first_task instead of list_empty() in
dispatch_enqueue() FIFO-tail (bsc#1012628).
- selftests: mptcp: check output: catch cmd errors (bsc#1012628).
- selftests: mptcp: pm: restrict 'unknown' check to pm_nl_ctl
(bsc#1012628).
- mptcp: fastclose msk when linger time is 0 (bsc#1012628).
- mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure
(bsc#1012628).
- mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure
(bsc#1012628).
- mptcp: sockopt: set timestamp flags on subflow socket, not msk
(bsc#1012628).
- mptcp: sockopt: increase seq in mptcp_setsockopt_all_sf
(bsc#1012628).
- mptcp: fix rx timestamp corruption on fastopen (bsc#1012628).
- mptcp: fix scheduling with atomic in timestamp sockopt
(bsc#1012628).
- mptcp: pm: prio: skip closed subflows (bsc#1012628).
- mptcp: pm: kernel: reset fullmesh counter after flush
(bsc#1012628).
- mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0
(bsc#1012628).
- mptcp: pm: ADD_ADDR rtx: allow ID 0 (bsc#1012628).
- mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1012628).
- mptcp: pm: ADD_ADDR rtx: always decrease sk refcount
(bsc#1012628).
- mptcp: pm: ADD_ADDR rtx: free sk if last (bsc#1012628).
- mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker
(bsc#1012628).
- mptcp: pm: ADD_ADDR rtx: return early if no retrans
(bsc#1012628).
- f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode()
(bsc#1012628).
- f2fs: fix false alarm of lockdep on cp_global_sem lock
(bsc#1012628).
- f2fs: fix fiemap boundary handling when read extent cache is
incomplete (bsc#1012628).
- f2fs: fix fsck inconsistency caused by incorrect nat_entry
flag usage (bsc#1012628).
- f2fs: fix incorrect file address mapping when inline inode is
unwritten (bsc#1012628).
- f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks()
(bsc#1012628).
- f2fs: fix node_cnt race between extent node destroy and
writeback (bsc#1012628).
- f2fs: fix uninitialized kobject put in f2fs_init_sysfs()
(bsc#1012628).
- f2fs: refactor f2fs_move_node_folio function (bsc#1012628).
- f2fs: fix inline data not being written to disk in writeback
path (bsc#1012628).
- f2fs: fix fsck inconsistency caused by FGGC of node block
(bsc#1012628).
- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
(bsc#1012628).
- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
value (bsc#1012628).
- KVM: arm64: Fix initialisation order in __pkvm_init_finalise()
(bsc#1012628).
- KVM: arm64: Fix FEAT_SPE_FnE to use PMSIDR_EL1.FnE, not PMSVer
(bsc#1012628).
- KVM: arm64: Fix FEAT_Debugv8p9 to check DebugVer, not PMUVer
(bsc#1012628).
- KVM: arm64: Fix pin leak and publication ordering in
__pkvm_init_vcpu() (bsc#1012628).
- LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()
(bsc#1012628).
- LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS
(bsc#1012628).
- LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry
(bsc#1012628).
- LoongArch: KVM: Fix HW timer interrupt lost when inject
interrupt by software (bsc#1012628).
- LoongArch: KVM: Move unconditional delay into timer clear
scenery (bsc#1012628).
- LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte()
(bsc#1012628).
- LoongArch: Use per-root-bridge PCIH flag to skip mem resource
fixup (bsc#1012628).
- bpf: Fix use-after-free in arena_vm_close on fork (bsc#1012628).
- octeon_ep_vf: add NULL check for napi_build_skb() (bsc#1012628).
- mmc: core: Adjust MDT beyond 2025 (bsc#1012628).
- mmc: core: Add quirk for incorrect manufacturing date
(bsc#1012628).
- mmc: core: Optimize time for secure erase/trim for some Kingston
eMMCs (bsc#1012628).
- crypto: qat - fix indentation of macros in qat_hal.c
(bsc#1012628).
- crypto: qat - fix firmware loading failure for GEN6 devices
(bsc#1012628).
- hfsplus: fix uninit-value by validating catalog record size
(bsc#1012628).
- hfsplus: fix held lock freed on hfsplus_fill_super()
(bsc#1012628).
- 8021q: use RCU for egress QoS mappings (bsc#1012628).
- 8021q: delete cleared egress QoS mappings (bsc#1012628).
- printk: add print_hex_dump_devel() (bsc#1012628).
- crypto: caam - guard HMAC key hex dumps in hash_digest_key
(bsc#1012628).
- net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY()
(bsc#1012628).
- net: stmmac: Prevent NULL deref when RX memory exhausted
(bsc#1012628).
- rust: pin-init: fix incorrect accessor reference lifetime
(bsc#1012628).
- x86/CPU/AMD: Prevent improper isolation of shared resources
in Zen2's op cache (bsc#1012628).
- ksmbd: validate inherited ACE SID length (bsc#1012628).
- Rename to
patches.kernel.org/7.0.7-048-ALSA-core-Serialize-deferred-fasync-state-check.patch.
- commit cd9577c
* Wed May 13 2026 jslaby@suse.cz
- srcu: Don't queue workqueue handlers to never-online CPUs
(bsc#1263947).
- commit 71994e6
* Tue May 12 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.0.1-001-nfc-llcp-add-missing-return-after-LLCP_CLOSED-c.patch
(bsc#1012628 CVE-2026-31629 bsc#1263790).
- Update
patches.kernel.org/7.0.1-002-x86-CPU-Fix-FPDSS-on-Zen1.patch
(bsc#1012628 CVE-2026-31628 bsc#1263788).
- Update
patches.kernel.org/7.0.1-004-i2c-s3c24xx-check-the-size-of-the-SMBUS-message.patch
(bsc#1012628 CVE-2026-31627 bsc#1263786).
- Update
patches.kernel.org/7.0.1-005-staging-rtl8723bs-initialize-le_tmp64-in-rtw_BI.patch
(bsc#1012628 CVE-2026-31626 bsc#1263782).
- Update
patches.kernel.org/7.0.1-008-net-usb-cdc-phonet-fix-skb-frags-overflow-in-rx.patch
(bsc#1012628 CVE-2026-31623 bsc#1263778).
- Update
patches.kernel.org/7.0.1-009-NFC-digital-Bounds-check-NFC-A-cascade-depth-in.patch
(bsc#1012628 CVE-2026-31622 bsc#1263797).
- Update
patches.kernel.org/7.0.1-010-drm-vc4-platform_get_irq_byname-returns-an-int.patch
(bsc#1012628 CVE-2026-43072 bsc#1264451).
- Update
patches.kernel.org/7.0.1-011-bnge-return-after-auxiliary_device_uninit-in-er.patch
(bsc#1012628 CVE-2026-31621 bsc#1263771).
- Update
patches.kernel.org/7.0.1-013-ALSA-fireworks-bound-device-supplied-status-bef.patch
(bsc#1012628 CVE-2026-31619 bsc#1263806).
- Update
patches.kernel.org/7.0.1-014-fbdev-tdfxfb-avoid-divide-by-zero-on-FBIOPUT_VS.patch
(bsc#1012628 CVE-2026-31618 bsc#1263785).
- Update
patches.kernel.org/7.0.1-015-usb-gadget-f_ncm-validate-minimum-block_len-in-.patch
(bsc#1012628 CVE-2026-31617 bsc#1263780).
- Update
patches.kernel.org/7.0.1-016-usb-gadget-f_phonet-fix-skb-frags-overflow-in-p.patch
(bsc#1012628 CVE-2026-31616 bsc#1263777).
- Update
patches.kernel.org/7.0.1-017-usb-gadget-renesas_usb3-validate-endpoint-index.patch
(bsc#1012628 CVE-2026-31615 bsc#1263776).
- Update
patches.kernel.org/7.0.1-018-smb-client-fix-off-by-8-bounds-check-in-check_w.patch
(bsc#1012628 CVE-2026-31614 bsc#1263774).
- Update
patches.kernel.org/7.0.1-019-smb-client-fix-OOB-reads-parsing-symlink-error-.patch
(bsc#1012628 CVE-2026-31613 bsc#1263769).
- Update
patches.kernel.org/7.0.1-020-ksmbd-validate-EaNameLength-in-smb2_get_ea.patch
(bsc#1012628 CVE-2026-31612 bsc#1263768).
- Update
patches.kernel.org/7.0.1-021-ksmbd-require-3-sub-authorities-before-reading-.patch
(bsc#1012628 CVE-2026-31611 bsc#1263763).
- Update
patches.kernel.org/7.0.1-041-dcache-Limit-the-minimal-number-of-bucket-to-tw.patch
(bsc#1012628 CVE-2026-43071 bsc#1264289).
- Update
patches.kernel.org/7.0.1-058-x86-64-rename-misleadingly-named-__copy_user_no.patch
(bsc#1012628 CVE-2026-43073 bsc#1264454).
- Update
patches.kernel.org/7.0.1-074-media-vidtv-fix-pass-by-value-structs-causing-M.patch
(bsc#1012628 CVE-2026-43058 bsc#1264129).
- Update
patches.kernel.org/7.0.2-005-crypto-krb5enc-fix-async-decrypt-skipping-hash-.patch
(bsc#1012628 CVE-2026-31719 bsc#1264115).
- Update
patches.kernel.org/7.0.2-006-ksmbd-fix-use-after-free-in-__ksmbd_close_fd-vi.patch
(bsc#1012628 CVE-2026-31718 bsc#1264114).
- Update
patches.kernel.org/7.0.2-007-ksmbd-validate-owner-of-durable-handle-on-recon.patch
(bsc#1012628 CVE-2026-31717 bsc#1264118).
- Update
patches.kernel.org/7.0.2-010-fs-ntfs3-validate-rec-used-in-journal-replay-fi.patch
(bsc#1012628 CVE-2026-31716 bsc#1264107).
- Update
patches.kernel.org/7.0.2-012-f2fs-fix-UAF-caused-by-decrementing-sbi-nr_page.patch
(bsc#1012628 CVE-2026-31715 bsc#1264120).
- Update
patches.kernel.org/7.0.2-013-f2fs-fix-to-avoid-memory-leak-in-f2fs_rename.patch
(bsc#1012628 CVE-2026-31714 bsc#1263899).
- Update
patches.kernel.org/7.0.2-014-f2fs-fix-to-avoid-uninit-value-access-in-f2fs_s.patch
(bsc#1012628 CVE-2026-43349).
- Update
patches.kernel.org/7.0.2-015-fuse-reject-oversized-dirents-in-page-cache.patch
(bsc#1012628 CVE-2026-31694 bsc#1263901).
- Update
patches.kernel.org/7.0.2-016-fuse-abort-on-fatal-signal-during-sync-init.patch
(bsc#1012628 CVE-2026-31713 bsc#1264108).
- Update
patches.kernel.org/7.0.2-020-ksmbd-require-minimum-ACE-size-in-smb_check_per.patch
(bsc#1012628 CVE-2026-31712 bsc#1264113).
- Update
patches.kernel.org/7.0.2-021-smb-server-fix-active_num_conn-leak-on-transpor.patch
(bsc#1012628 CVE-2026-31711 bsc#1264029).
- Update
patches.kernel.org/7.0.2-022-smb-client-fix-dir-separator-in-SMB1-UNIX-mount.patch
(bsc#1012628 CVE-2026-31710 bsc#1264027).
- Update
patches.kernel.org/7.0.2-024-smb-client-require-a-full-NFS-mode-SID-before-r.patch
(bsc#1012628 CVE-2026-43350).
- Update
patches.kernel.org/7.0.2-025-smb-client-validate-the-whole-DACL-before-rewri.patch
(bsc#1012628 CVE-2026-31709 bsc#1264024).
- Update
patches.kernel.org/7.0.2-026-smb-client-fix-OOB-read-in-smb2_ioctl_query_inf.patch
(bsc#1012628 CVE-2026-31708 bsc#1264022).
- Update
patches.kernel.org/7.0.2-027-ksmbd-validate-response-sizes-in-ipc_validate_m.patch
(bsc#1012628 CVE-2026-31707 bsc#1263875).
- Update
patches.kernel.org/7.0.2-028-ksmbd-validate-num_aces-and-harden-ACE-walk-in-.patch
(bsc#1012628 CVE-2026-31706 bsc#1263885).
- Update
patches.kernel.org/7.0.2-029-ksmbd-fix-out-of-bounds-write-in-smb2_get_ea-EA.patch
(bsc#1012628 CVE-2026-31705 bsc#1263878).
- Update
patches.kernel.org/7.0.2-030-ksmbd-use-check_add_overflow-to-prevent-u16-DAC.patch
(bsc#1012628 CVE-2026-31704 bsc#1263881).
- Update
patches.kernel.org/7.0.2-032-writeback-Fix-use-after-free-in-inode_switch_wb.patch
(bsc#1012628 bsc#1259701 CVE-2026-31703 bsc#1263883).
- Update
patches.kernel.org/7.0.2-033-f2fs-fix-use-after-free-of-sbi-in-f2fs_compress.patch
(bsc#1012628 CVE-2026-31702 bsc#1263884).
- Update
patches.kernel.org/7.0.2-036-ALSA-caiaq-take-a-reference-on-the-USB-device-i.patch
(bsc#1012628 CVE-2026-31701 bsc#1263876).
- Update
patches.kernel.org/7.0.2-037-net-packet-fix-TOCTOU-race-on-mmap-d-vnet_hdr-i.patch
(bsc#1012628 CVE-2026-31700 bsc#1263882).
- Update
patches.kernel.org/7.0.2-038-crypto-ccp-Don-t-attempt-to-copy-CSR-to-userspa.patch
(bsc#1012628 CVE-2026-31699 bsc#1263879).
- Update
patches.kernel.org/7.0.2-039-crypto-ccp-Don-t-attempt-to-copy-PDH-cert-to-us.patch
(bsc#1012628 CVE-2026-31698 bsc#1263880).
- Update
patches.kernel.org/7.0.2-040-crypto-ccp-Don-t-attempt-to-copy-ID-to-userspac.patch
(bsc#1012628 CVE-2026-31697 bsc#1264116).
- Update
patches.kernel.org/7.0.2-041-rxrpc-Fix-missing-validation-of-ticket-length-i.patch
(bsc#1012628 CVE-2026-31696 bsc#1263900).
- Update
patches.kernel.org/7.0.2-042-mshv_vtl-Fix-vmemmap_shift-exceeding-MAX_FOLIO_.patch
(bsc#1012628 CVE-2026-43348).
- Update
patches.kernel.org/7.0.5-001-xfrm-esp-avoid-in-place-decrypt-on-shared-skb-f.patch
(bsc#1012628 CVE-2026-43284 bsc#1264449).
- Update
patches.kernel.org/7.0.6-001-rxrpc-Also-unshare-DATA-RESPONSE-packets-when-p.patch
(bsc#1012628 CVE-2026-43500 bsc#1264450).
Run suse-add-cves.
- commit 96c854d
* Mon May 11 2026 msuchanek@suse.de
- mkspec: Add signature to source list only when it exists
- commit e496e84
* Mon May 11 2026 jslaby@suse.cz
- Linux 7.0.6 (bsc#1012628).
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags
are present (bsc#1012628).
- commit 437be88
* Mon May 11 2026 mkubecek@suse.cz
- update to 7.1-rc3
- drop 1 mainline patch
- patches.suse/xfrm-esp-avoid-in-place-decrypt-on-shared-skb-frags.patch
- commit 5b69a3b
* Sat May 09 2026 jslaby@suse.cz
- ALSA: core: Serialize deferred fasync state checks (git-fixes).
- commit 6661b4c
* Fri May 08 2026 pfalcato@suse.de
- Update
patches.suse/xfrm-esp-avoid-in-place-decrypt-on-shared-skb-frags.patch
(dirty-frag git-fixes).
References: was wrong, it's obviously dirty-frag, not pipe. In my defense,
it was late...
- commit 7726775
* Fri May 08 2026 jslaby@suse.cz
- Linux 7.0.5 (bsc#1012628).
- xfrm: esp: avoid in-place decrypt on shared skb frags
(bsc#1012628).
- commit 77ae3c4
* Fri May 08 2026 pfalcato@suse.de
- xfrm: esp: avoid in-place decrypt on shared skb frags
(dirty-pipe git-fixes).
- commit 43f0141
* Thu May 07 2026 ailiop@suse.com
- Update config files: reenable NFS v4.0 (bsc#1264351)
Upstream commit 4e0269352534 ("NFS: Add a way to disable NFS v4.0 via
KConfig") merged in v7.0-rc1 made NFS v4.0 support configurable, and it
got disabled by default.
Reenable it as otherwise mounting with nfs4 type shares that do not
support higher protocols will fail. While it is advisable and
preferrable to always use NFS v4.1 or higher, it may not always be
available. Also since we are still enabling NFS v3, there is no good
reason to completely disable NFS v4.0 yet. The client will anyway
negotiate and use the highest protocol version available with the
server.
- commit 2a164bc
* Thu May 07 2026 jslaby@suse.cz
- Linux 7.0.4 (bsc#1012628).
- ipmi:ssif: NULL thread on error (bsc#1012628).
- ipmi:ssif: Remove unnecessary indention (bsc#1012628).
- netfilter: reject zero shift in nft_bitwise (bsc#1012628).
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
(bsc#1012628).
- mm/slab: return NULL early from kmalloc_nolock() in NMI on UP
(bsc#1012628).
- mm/page_alloc: return NULL early from
alloc_frozen_pages_nolock() in NMI on UP (bsc#1012628).
- vmalloc: fix buffer overflow in vrealloc_node_align()
(bsc#1012628).
- ALSA: aloop: Fix peer runtime UAF during format-change stop
(bsc#1012628).
- ALSA: caiaq: fix usb_dev refcount leak on probe failure
(bsc#1012628).
- drm/imagination: Fix segfault when updating ftrace mask
(bsc#1012628).
- drm/amdgpu: fix zero-size GDS range init on RDNA4 (bsc#1012628).
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows
(bsc#1012628).
- ALSA: caiaq: Don't abort when no input device is available
(bsc#1012628).
- ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path
(bsc#1012628).
- driver core: Add kernel-doc for DEV_FLAG_COUNT enum value
(bsc#1012628).
- crypto: authencesn - reject short ahash digests during instance
creation (bsc#1012628).
- mei: me: add nova lake point H DID (bsc#1012628).
- mei: me: use PCI_DEVICE_DATA macro (bsc#1012628).
- mm: avoid deadlock when holding rmap on mmap_prepare error
(bsc#1012628).
- mm: various small mmap_prepare cleanups (bsc#1012628).
- wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling
(bsc#1012628).
- wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor
(bsc#1012628).
- iio: frequency: admv1013: fix NULL pointer dereference on str
(bsc#1012628).
- iio: frequency: admv1013: add dev variable (bsc#1012628).
- perf loongarch: Fix build failure with CONFIG_LIBDW_DWARF_UNWIND
(bsc#1012628).
- seg6: fix seg6 lwtunnel output redirect for L2 reduced encap
mode (bsc#1012628).
- scsi: sd: fix missing put_disk() when device_add(&disk_dev)
fails (bsc#1012628).
- sched_ext: Documentation: Clarify ops.dispatch() role in task
lifecycle (bsc#1012628).
- rxgk: Fix potential integer overflow in length check
(bsc#1012628).
- rtmutex: Use waiter::task instead of current in remove_waiter()
(bsc#1012628).
- ntfs3: fix integer overflow in run_unpack() volume boundary
check (bsc#1012628).
- ntfs3: add buffer boundary checks to run_unpack() (bsc#1012628).
- NFSv4.1: Apply session size limits on clone path (bsc#1012628).
- ktest: Fix the month in the name of the failure directory
(bsc#1012628).
- IB/core: Fix zero dmac race in neighbor resolution
(bsc#1012628).
- gtp: disable BH before calling udp_tunnel_xmit_skb()
(bsc#1012628).
- ceph: only d_add() negative dentries when they are unhashed
(bsc#1012628).
- ceph: fix num_ops off-by-one when crypto allocation fails
(bsc#1012628).
- erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()
(bsc#1012628).
- dm mirror: fix integer overflow in create_dirty_log()
(bsc#1012628).
- crypto: nx - Fix packed layout in struct nx842_crypto_header
(bsc#1012628).
- crypto: nx - fix context leak in nx842_crypto_free_ctx
(bsc#1012628).
- crypto: nx - fix bounce buffer leaks in
nx842_crypto_{alloc,free}_ctx (bsc#1012628).
- crypto: atmel-sha204a - Fix uninitialized data access on OTP
read error (bsc#1012628).
- crypto: atmel-sha204a - Fix potential UAF and memory leak in
remove path (bsc#1012628).
- crypto: atmel-sha204a - Fix error codes in OTP reads
(bsc#1012628).
- crypto: atmel-tdes - fix DMA sync direction (bsc#1012628).
- crypto: ccree - fix a memory leak in cc_mac_digest()
(bsc#1012628).
- crypto: hisilicon - Fix dma_unmap_single() direction
(bsc#1012628).
- crypto: atmel-ecc - Release client on allocation failure
(bsc#1012628).
- crypto: atmel-aes - Fix 3-page memory leak in
atmel_aes_buff_cleanup (bsc#1012628).
- crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated
as 64-bit (bsc#1012628).
- crypto: acomp - fix wrong pointer stored by acomp_save_req()
(bsc#1012628).
- can: ucan: fix devres lifetime (bsc#1012628).
- bus: mhi: host: pci_generic: Switch to async power up to avoid
boot delays (bsc#1012628).
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
(bsc#1012628).
- apparmor: use target task's context in apparmor_getprocattr()
(bsc#1012628).
- 9p: fix access mode flags being ORed instead of replaced
(bsc#1012628).
- mfd: core: Preserve OF node when ACPI handle is present
(bsc#1012628).
- mptcp: sync the msk->sndbuf at accept() time (bsc#1012628).
- taskstats: set version in TGID exit notifications (bsc#1012628).
- tcp: call sk_data_ready() after listener migration
(bsc#1012628).
- wifi: rtl8xxxu: fix potential use of uninitialized value
(bsc#1012628).
- x86/shstk: Prevent deadlock during shstk sigreturn
(bsc#1012628).
- x86/cpu: Disable FRED when PTI is forced on (bsc#1012628).
- inotify: fix watch count leak when
fsnotify_add_inode_mark_locked() fails (bsc#1012628).
- HID: apple: ensure the keyboard backlight is off if suspending
(bsc#1012628).
- mm, swap: speed up hibernation allocation and writeout
(bsc#1012628).
- check-uapi: link into shared objects (bsc#1012628).
- md/raid5: validate payload size before accessing journal
metadata (bsc#1012628).
- md/raid5: fix soft lockup in retry_aligned_read() (bsc#1012628).
- md/md-llbitmap: raise barrier before state machine transition
(bsc#1012628).
- md/md-llbitmap: skip reading rdevs that are not in_sync
(bsc#1012628).
- amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2
(bsc#1012628).
- mtd: spinand: winbond: Declare the QE bit on W25NxxJW
(bsc#1012628).
- mtd: spi-nor: sst: Fix write enable before AAI sequence
(bsc#1012628).
- udf: fix partition descriptor append bookkeeping (bsc#1012628).
- ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()
(bsc#1012628).
- ext4: fix bounds check in check_xattrs() to prevent
out-of-bounds access (bsc#1012628).
- ring-buffer: Do not double count the reader_page (bsc#1012628).
- ARM: 9472/1: fix race condition on PG_dcache_clean in
__sync_icache_dcache() (bsc#1012628).
- KVM: nSVM: Always intercept VMMCALL when L2 is active
(bsc#1012628).
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted
by L1 (bsc#1012628).
- KVM: nSVM: Add missing consistency check for nCR3 validity
(bsc#1012628).
- KVM: nSVM: Drop the non-architectural consistency check for
NP_ENABLE (bsc#1012628).
- KVM: nSVM: Add missing consistency check for EFER, CR0, CR4,
and CS (bsc#1012628).
- KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested
[#]VMEXIT (bsc#1012628).
- KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT
(bsc#1012628).
- KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) (bsc#1012628).
- KVM: nSVM: Triple fault if mapping VMCB12 fails on nested
[#]VMEXIT (bsc#1012628).
- KVM: nSVM: Triple fault if restore host CR3 fails on nested
[#]VMEXIT (bsc#1012628).
- KVM: nSVM: Refactor writing vmcb12 on nested #VMEXIT as a helper
(bsc#1012628).
- KVM: nSVM: Refactor checking LBRV enablement in vmcb12 into
a helper (bsc#1012628).
- KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on
nested VMRUN (bsc#1012628).
- KVM: SVM: Add missing save/restore handling of LBR MSRs
(bsc#1012628).
- KVM: SVM: Switch svm_copy_lbrs() to a macro (bsc#1012628).
- KVM: nSVM: Delay setting soft IRQ RIP tracking fields until
vCPU run (bsc#1012628).
- KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 (bsc#1012628).
- KVM: arm64: Account for RESx bits in __compute_fgt()
(bsc#1012628).
- KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested
[#]VMEXIT (bsc#1012628).
- KVM: nSVM: Delay stuffing L2's current RIP into NextRIP until
vCPU run (bsc#1012628).
- KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first
L2 VMRUN (bsc#1012628).
- KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to
guest mode (bsc#1012628).
- KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB
intercepts (bsc#1012628).
- KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 (bsc#1012628).
- KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN
of L2 (bsc#1012628).
- KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2
(bsc#1012628).
- KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state
(bsc#1012628).
- KVM: x86: Defer non-architectural deliver of exception payload
to userspace read (bsc#1012628).
- LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel()
(bsc#1012628).
- userfaultfd: allow registration of ranges below mmap_min_addr
(bsc#1012628).
- mm/damon/core: disallow non-power of two min_region_sz on
damon_start() (bsc#1012628).
- mm/damon/core: disallow time-quota setting zero esz
(bsc#1012628).
- mm/damon/core: use time_in_range_open() for damos quota window
start (bsc#1012628).
- mm/damon/core: validate damos_quota_goal->nid for
node_memcg_{used,free}_bp (bsc#1012628).
- mm/damon/core: validate damos_quota_goal->nid for
node_mem_{used,free}_bp (bsc#1012628).
- mm/damon/stat: fix memory leak on damon_start() failure in
damon_stat_start() (bsc#1012628).
- mm/mempolicy: fix memory leaks in
weighted_interleave_auto_store() (bsc#1012628).
- mm/memfd_luo: fix physical address conversion in put_folios
cleanup (bsc#1012628).
- mm/vmalloc: take vmap_purge_lock in shrinker (bsc#1012628).
- rtc: ntxec: fix OF node reference imbalance (bsc#1012628).
- tpm: tpm_tis: stop transmit if retries are exhausted
(bsc#1012628).
- tpm: tpm_tis: add error logging for data transfer (bsc#1012628).
- tpm: Use kfree_sensitive() to free auth session in
tpm_dev_release() (bsc#1012628).
- tpm: Fix auth session leak in tpm2_get_random() error path
(bsc#1012628).
- tpm2-sessions: Fix missing tpm_buf_destroy() in
tpm2_read_public() (bsc#1012628).
- pwm: imx-tpm: Count the number of enabled channels in probe
(bsc#1012628).
- crypto: talitos - rename first/last to first_desc/last_desc
(bsc#1012628).
- crypto: talitos - fix SEC1 32k ahash request limitation
(bsc#1012628).
- firmware: exynos-acpm: Drop fake 'const' on handle pointer
(bsc#1012628).
- firmware: google: framebuffer: Do not unregister platform device
(bsc#1012628).
- xfs: fix a resource leak in xfs_alloc_buftarg() (bsc#1012628).
- xfs: start gc on zonegc_low_space attribute updates
(bsc#1012628).
- crypto: qat - fix IRQ cleanup on 6xxx probe failure
(bsc#1012628).
- arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins
(bsc#1012628).
- mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration
(bsc#1012628).
- mmc: block: use single block write in retry (bsc#1012628).
- randomize_kstack: Maintain kstack_offset per task (bsc#1012628).
- hwmon: (pt5161l) Fix bugs in pt5161l_read_block_data()
(bsc#1012628).
- selinux: fix overlayfs mmap() and mprotect() access checks
(bsc#1012628).
- lsm: add backing_file LSM hooks (bsc#1012628).
- fs: prepare for adding LSM blob to backing_file (bsc#1012628).
- media: rzv2h-ivc: Fix AXIRX_VBLANK register write (bsc#1012628).
- media: rzv2h-ivc: Revise default VBLANK formula (bsc#1012628).
- hwmon: (powerz) Avoid cacheline sharing for DMA buffer
(bsc#1012628).
- hwmon: (isl28022) Fix integer overflow in power calculation
on 32-bit (bsc#1012628).
- power: supply: axp288_charger: Do not cancel work before
initializing it (bsc#1012628).
- fbdev: defio: Disconnect deferred I/O from the lifetime of
struct fb_info (bsc#1012628).
- LoongArch: Show CPU vulnerabilites correctly (bsc#1012628).
- LoongArch: Make arch_irq_work_has_interrupt() true only if
IPI HW exist (bsc#1012628).
- tpm: avoid -Wunused-but-set-variable (bsc#1012628).
- extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE'
(bsc#1012628).
- apparmor: Fix string overrun due to missing termination
(bsc#1012628).
- spi: fix resource leaks on device setup failure (bsc#1012628).
- libceph: Prevent potential null-ptr-deref in
ceph_handle_auth_reply() (bsc#1012628).
- ipv4: icmp: validate reply type before using icmp_pointers
(bsc#1012628).
- printf: Compile the kunit test with DISABLE_BRANCH_PROFILING
DISABLE_BRANCH_PROFILING (bsc#1012628).
- RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv
(bsc#1012628).
- tracing/fprobe: Reject registration of a registered fprobe
before init (bsc#1012628).
- slub: fix data loss and overflow in krealloc() (bsc#1012628).
- drm/arcpgu: fix device node leak (bsc#1012628).
- net: ks8851: Avoid excess softirq scheduling (bsc#1012628).
- net: mctp: fix don't require received header reserved bits to
be zero (bsc#1012628).
- netconsole: avoid out-of-bounds access on empty string in
trim_newline() (bsc#1012628).
- net: bridge: use a stable FDB dst snapshot in RCU readers
(bsc#1012628).
- net: ks8851: Reinstate disabling of BHs around IRQ handler
(bsc#1012628).
- net/smc: avoid early lgr access in smc_clc_wait_msg
(bsc#1012628).
- net: txgbe: fix firmware version check (bsc#1012628).
- net: rds: fix MR cleanup on copy error (bsc#1012628).
- net: qrtr: ns: Limit the total number of nodes (bsc#1012628).
- net: qrtr: ns: Free the node during ctrl_cmd_bye()
(bsc#1012628).
- net: qrtr: ns: Limit the maximum number of lookups
(bsc#1012628).
- net: qrtr: ns: Limit the maximum server registration per node
(bsc#1012628).
- arm64: dts: marvell: uDPU: add ethernet aliases (bsc#1012628).
- net: txgbe: fix RTNL assertion warning when remove module
(bsc#1012628).
- tools/accounting: handle truncated taskstats netlink messages
(bsc#1012628).
- EDAC/versalnet: Fix memory leak in remove and probe error paths
(bsc#1012628).
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets
(bsc#1012628).
- rxrpc: Fix re-decryption of RESPONSE packets (bsc#1012628).
- rxrpc: Fix error handling in rxgk_extract_token() (bsc#1012628).
- rxrpc: Fix rxkad crypto unalignment handling (bsc#1012628).
- rxrpc: Fix conn-level packet handling to unshare RESPONSE
packets (bsc#1012628).
- rxrpc: Fix memory leaks in rxkad_verify_response()
(bsc#1012628).
- rxrpc: Fix potential UAF after skb_unshare() failure
(bsc#1012628).
- iio: adc: ad7768-1: remove switch to one-shot mode
(bsc#1012628).
- iio: adc: ad7768-1: fix one-shot mode data acquisition
(bsc#1012628).
- ALSA: pcmtest: Fix resource leaks in module init error paths
(bsc#1012628).
- ALSA: pcmtest: fix reference leak on failed device registration
(bsc#1012628).
- ALSA: hda/realtek - Add mute LED support for HP Victus 15-fa2xxx
(bsc#1012628).
- ALSA: 6fire: Fix input volume change detection (bsc#1012628).
- ALSA: caiaq: Handle probe errors properly (bsc#1012628).
- ALSA: caiaq: Fix control_put() result and cache rollback
(bsc#1012628).
- ALSA: core: Fix potential data race at fasync handling
(bsc#1012628).
- module.lds.S: Fix modules on 32-bit parisc architecture
(bsc#1012628).
- module.lds,codetag: force 0 sh_addr for sections (bsc#1012628).
- io_uring/poll: ensure EPOLL_ONESHOT is propagated for
EPOLL_URING_WAKE (bsc#1012628).
- io_uring/poll: fix signed comparison in io_poll_get_ownership()
(bsc#1012628).
- io_uring/zcrx: fix user_struct uaf (bsc#1012628).
- io_uring/register: fix ring resizing with mixed/large SQEs/CQEs
(bsc#1012628).
- iio: adc: ti-ads7950: use
iio_push_to_buffers_with_ts_unaligned() (bsc#1012628).
- block: relax pgmap check in bio_add_page for compatible zone
device pages (bsc#1012628).
- io_uring/timeout: check unused sqe fields (bsc#1012628).
- io_uring/zcrx: return back two step unregistration
(bsc#1012628).
- block: fix zone write plugs refcount handling in
disk_zone_wplug_schedule_bio_work() (bsc#1012628).
- mm/zone_device: do not touch device folio after calling
- >folio_free() (bsc#1012628).
- rbd: fix null-ptr-deref when device_add_disk() fails
(bsc#1012628).
- selftests/landlock: Skip stale records in audit_match_record()
(bsc#1012628).
- selftests/landlock: Fix snprintf truncation checks in audit
helpers (bsc#1012628).
- selftests/landlock: Fix format warning for __u64 in net_test
(bsc#1012628).
- selftests/landlock: Drain stale audit records on init
(bsc#1012628).
- landlock: Allow TSYNC with LOG_SUBDOMAINS_OFF and fd=-1
(bsc#1012628).
- landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork()
(bsc#1012628).
- selftests/mqueue: Fix incorrectly named file (bsc#1012628).
- sched: Use u64 for bandwidth ratio calculations (bsc#1012628).
- reset: rzv2h-usb2phy: Keep PHY clock enabled for entire device
lifetime (bsc#1012628).
- remoteproc: xlnx: Only access buffer information if IPI is
buffered (bsc#1012628).
- RDMA/mana_ib: Disable RX steering on RSS QP destroy
(bsc#1012628).
- perf annotate: Use jump__delete when freeing LoongArch jumps
(bsc#1012628).
- PCI: imx6: Fix reference clock source selection for i.MX95
(bsc#1012628).
- PCI: cadence: Use cdns_pcie_read_sz() for byte or word read
access (bsc#1012628).
- parisc: Drop ip_fast_csum() inline assembly implementation
(bsc#1012628).
- parisc: _llseek syscall is only available for 32-bit userspace
(bsc#1012628).
- nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set
(bsc#1012628).
- nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston
OM3SGP4 (bsc#1012628).
- mtd: docg3: fix use-after-free in docg3_release() (bsc#1012628).
- mm/hugetlb: fix early boot crash on parameters without '='
separator (bsc#1012628).
- mm/damon/core: fix damos_walk() vs kdamond_fn() exit race
(bsc#1012628).
- mm/damon/core: fix damon_call() vs kdamond_fn() exit race
(bsc#1012628).
- mm/alloc_tag: clear codetag for pages allocated before page_ext
initialization (bsc#1012628).
- mfd: stpmic1: Attempt system shutdown twice in case PMIC is
confused (bsc#1012628).
- media: rockchip: rkcif: comply with minimum number of buffers
requirement (bsc#1012628).
- media: rockchip: rkcif: fix off by one bugs (bsc#1012628).
- media: rc: igorplugusb: heed coherency rules (bsc#1012628).
- md/raid10: fix deadlock with check operation and nowait requests
(bsc#1012628).
- KVM: selftests: Fix reserved value WRMSR testcase for
multi-feature MSRs (bsc#1012628).
- jbd2: fix deadlock in jbd2_journal_cancel_revoke()
(bsc#1012628).
- ipmi:ssif: Clean up kthread on errors (bsc#1012628).
- erofs: fix the out-of-bounds nameoff handling for trailing
dirents (bsc#1012628).
- ALSA: seq_oss: return full count for successful SEQ_FULLSIZE
writes (bsc#1012628).
- ALSA: ctxfi: Add fallback to default RSR for S/PDIF
(bsc#1012628).
- ALSA: aoa: Skip devices with no codecs in i2sbus_resume()
(bsc#1012628).
- ALSA: aoa: i2sbus: fix OF node lifetime handling (bsc#1012628).
- ALSA: aoa: i2sbus: clear stale prepared state (bsc#1012628).
- mm/zsmalloc: copy KMSAN metadata in zs_page_migrate()
(bsc#1012628).
- ext2: reject inodes with zero i_nlink and valid mode in
ext2_iget() (bsc#1012628).
- net: qrtr: ns: Fix use-after-free in driver remove()
(bsc#1012628).
- media: i2c: imx219: Check return value of
devm_gpiod_get_optional() in imx219_probe() (bsc#1012628).
- lib/ts_kmp: fix integer overflow in pattern length calculation
(bsc#1012628).
- PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops
complete (bsc#1012628).
- phy: qcom: m31-eusb2: clear PLL_EN during init (bsc#1012628).
- Revert "ALSA: usb: Increase volume range that triggers a
warning" (bsc#1012628).
- PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown
(bsc#1012628).
- crypto: atmel-sha204a - Fix OTP sysfs read and error handling
(bsc#1012628).
- media: mtk-jpeg: fix use-after-free in release path due to
uncancelled work (bsc#1012628).
- net: strparser: fix skb_head leak in strp_abort_strp()
(bsc#1012628).
- net: caif: clear client service pointer on teardown
(bsc#1012628).
- ALSA: control: Validate buf_len before strnlen() in
snd_ctl_elem_init_enum_names() (bsc#1012628).
- media: amphion: Fix race between m2m job_abort and device_run
(bsc#1012628).
- PCI: imx6: Skip waiting for L2/L3 Ready on i.MX6SX
(bsc#1012628).
- EDAC/versalnet: Fix device_node leak in mc_probe()
(bsc#1012628).
- hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt
(bsc#1012628).
- of: unittest: fix use-after-free in testdrv_probe()
(bsc#1012628).
- of: unittest: fix use-after-free in of_unittest_changeset()
(bsc#1012628).
- dt-bindings: display: ti, am65x-dss: Fix AM62L DSS reg and
clock constraints (bsc#1012628).
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests
(bsc#1012628).
- crypto: algif_aead - snapshot IV for async AEAD requests
(bsc#1012628).
- spi: ch341: fix memory leaks on probe failures (bsc#1012628).
- spi: imx: fix use-after-free on unbind (bsc#1012628).
- thermal: core: Fix thermal zone governor cleanup issues
(bsc#1012628).
- um: drivers: call kernel_strrchr() explicitly in cow_user.c
(bsc#1012628).
- vfio/cdx: Fix NULL pointer dereference in interrupt trigger path
(bsc#1012628).
- vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex
(bsc#1012628).
- vfio/virtio: Convert list_lock from spinlock to mutex
(bsc#1012628).
- vfio/xe: Add a missing vfio_pci_core_release_dev()
(bsc#1012628).
- vfio: selftests: Fix VLA initialisation in vfio_pci_irq_set()
(bsc#1012628).
- wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()
(bsc#1012628).
- wifi: rtw88: check for PCI upstream bridge existence
(bsc#1012628).
- zram: do not forget to endio for partial discard requests
(bsc#1012628).
- Input: edt-ft5x06 - fix use-after-free in debugfs teardown
(bsc#1012628).
- ocfs2: split transactions in dio completion to avoid credit
exhaustion (bsc#1012628).
- mm: fix deferred split queue races during migration
(bsc#1012628).
- mm: prevent droppable mappings from being locked (bsc#1012628).
- mm: migrate: requeue destination folio on deferred split queue
(bsc#1012628).
- arm64: mm: Fix rodata=full block mapping support for realm
guests (bsc#1012628).
- arm64/mm: Enable batched TLB flush in unmap_hotplug_range()
(bsc#1012628).
- lib: test_hmm: evict device pages on file close to avoid
use-after-free (bsc#1012628).
- firmware: google: framebuffer: Do not mark framebuffer as busy
(bsc#1012628).
- fs: afs: revert mmap_prepare() change (bsc#1012628).
- kbuild: rust: allow `clippy::uninlined_format_args`
(bsc#1012628).
- rust: dma: remove DMA_ATTR_NO_KERNEL_MAPPING from public attrs
(bsc#1012628).
- drm/nouveau: fix nvkm_device leak on aperture removal failure
(bsc#1012628).
- device property: Make modifications of fwnode "flags" thread
safe (bsc#1012628).
- driver core: Don't let a device probe until it's ready
(bsc#1012628).
- sysfs: attribute_group: Respect is_visible_const() when changing
owner (bsc#1012628).
- ibmasm: fix heap over-read in ibmasm_send_i2o_message()
(bsc#1012628).
- ibmasm: fix OOB reads in command_file_write due to missing
size checks (bsc#1012628).
- misc: ibmasm: fix OOB MMIO read in
ibmasm_handle_mouse_interrupt() (bsc#1012628).
- greybus: gb-beagleplay: fix sleep in atomic context in
hdlc_tx_frames() (bsc#1012628).
- greybus: gb-beagleplay: bound bootloader receive buffering
(bsc#1012628).
- leds: qcom-lpg: Check for array overflow when selecting the
high resolution (bsc#1012628).
- drm/nouveau: fix u32 overflow in pushbuf reloc bounds check
(bsc#1012628).
- LoongArch: Add spectre boundry for syscall dispatch table
(bsc#1012628).
- ALSA: usb-audio: Evaluate packsize caps at the right place
(bsc#1012628).
- usb: chipidea: core: allow ci_irq_handler() handle both ID
and VBUS change (bsc#1012628).
- usb: chipidea: otg: not wait vbus drop if use role_switch
(bsc#1012628).
- usb: xhci: Make usb_host_endpoint.hcpriv survive
endpoint_disable() (bsc#1012628).
- ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch
(bsc#1012628).
- ALSA: usb-audio: Avoid false E-MU sample-rate notifications
(bsc#1012628).
- ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
(bsc#1012628).
- commit 0d9ad46
* Thu May 07 2026 jslaby@suse.cz
- Delete
patches.suse/iwlwifi-declare-missing-firmware-files.patch (bsc#1254352).
See:
https://bugzilla.suse.com/show_bug.cgi?id=1254352#c17
(cherry picked from commit 80f0df78b90666c98e9d3e12cc9109631ed0b7b2)
- Delete
patches.suse/iwlwifi-declare-missing-firmware-files.patch (bsc#1254352).
See:
https://bugzilla.suse.com/show_bug.cgi?id=1254352#c17
- commit 650b0c2
* Mon May 04 2026 jslaby@suse.cz
- Refresh
patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
Update upstream status.
- commit 2d1ff64
* Mon May 04 2026 pfalcato@suse.de
- update to 7.1-rc2
- refresh configs
- commit f495535
* Thu Apr 30 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.0.1-001-nfc-llcp-add-missing-return-after-LLCP_CLOSED-c.patch
(bsc#1012628 CVE-2026-31629).
- Update
patches.kernel.org/7.0.1-002-x86-CPU-Fix-FPDSS-on-Zen1.patch
(bsc#1012628 CVE-2026-31628).
- Update
patches.kernel.org/7.0.1-003-can-raw-fix-ro-uniq-use-after-free-in-raw_rcv.patch
(bsc#1012628 CVE-2026-31532 bsc#1262757).
- Update
patches.kernel.org/7.0.1-004-i2c-s3c24xx-check-the-size-of-the-SMBUS-message.patch
(bsc#1012628 CVE-2026-31627).
- Update
patches.kernel.org/7.0.1-005-staging-rtl8723bs-initialize-le_tmp64-in-rtw_BI.patch
(bsc#1012628 CVE-2026-31626).
- Update
patches.kernel.org/7.0.1-006-HID-alps-fix-NULL-pointer-dereference-in-alps_r.patch
(bsc#1012628 CVE-2026-31625 bsc#1263030).
- Update
patches.kernel.org/7.0.1-007-HID-core-clamp-report_size-in-s32ton-to-avoid-u.patch
(bsc#1012628 CVE-2026-31624 bsc#1263657).
- Update
patches.kernel.org/7.0.1-008-net-usb-cdc-phonet-fix-skb-frags-overflow-in-rx.patch
(bsc#1012628 CVE-2026-31623).
- Update
patches.kernel.org/7.0.1-009-NFC-digital-Bounds-check-NFC-A-cascade-depth-in.patch
(bsc#1012628 CVE-2026-31622).
- Update
patches.kernel.org/7.0.1-011-bnge-return-after-auxiliary_device_uninit-in-er.patch
(bsc#1012628 CVE-2026-31621).
- Update
patches.kernel.org/7.0.1-012-ALSA-usx2y-us144mkii-fix-NULL-deref-on-missing-.patch
(bsc#1012628 CVE-2026-31620 bsc#1263029).
- Update
patches.kernel.org/7.0.1-013-ALSA-fireworks-bound-device-supplied-status-bef.patch
(bsc#1012628 CVE-2026-31619).
- Update
patches.kernel.org/7.0.1-014-fbdev-tdfxfb-avoid-divide-by-zero-on-FBIOPUT_VS.patch
(bsc#1012628 CVE-2026-31618).
- Update
patches.kernel.org/7.0.1-015-usb-gadget-f_ncm-validate-minimum-block_len-in-.patch
(bsc#1012628 CVE-2026-31617).
- Update
patches.kernel.org/7.0.1-016-usb-gadget-f_phonet-fix-skb-frags-overflow-in-p.patch
(bsc#1012628 CVE-2026-31616).
- Update
patches.kernel.org/7.0.1-017-usb-gadget-renesas_usb3-validate-endpoint-index.patch
(bsc#1012628 CVE-2026-31615).
- Update
patches.kernel.org/7.0.1-018-smb-client-fix-off-by-8-bounds-check-in-check_w.patch
(bsc#1012628 CVE-2026-31614).
- Update
patches.kernel.org/7.0.1-019-smb-client-fix-OOB-reads-parsing-symlink-error-.patch
(bsc#1012628 CVE-2026-31613).
- Update
patches.kernel.org/7.0.1-020-ksmbd-validate-EaNameLength-in-smb2_get_ea.patch
(bsc#1012628 CVE-2026-31612).
- Update
patches.kernel.org/7.0.1-021-ksmbd-require-3-sub-authorities-before-reading-.patch
(bsc#1012628 CVE-2026-31611).
- Update
patches.kernel.org/7.0.1-022-ksmbd-fix-mechToken-leak-when-SPNEGO-decode-fai.patch
(bsc#1012628 CVE-2026-31610 bsc#1263046).
- Update
patches.kernel.org/7.0.1-023-smb-client-avoid-double-free-in-smbd_free_send_.patch
(bsc#1012628 CVE-2026-31609 bsc#1263663).
- Update
patches.kernel.org/7.0.1-024-smb-server-avoid-double-free-in-smb_direct_free.patch
(bsc#1012628 CVE-2026-31608 bsc#1263664).
- Update
patches.kernel.org/7.0.1-025-usbip-validate-number_of_packets-in-usbip_pack_.patch
(bsc#1012628 CVE-2026-31607 bsc#1263600).
- Update
patches.kernel.org/7.0.1-029-usb-gadget-f_hid-don-t-call-cdev_init-while-cde.patch
(bsc#1012628 CVE-2026-31606 bsc#1263591).
- Update
patches.kernel.org/7.0.1-031-fbdev-udlfb-avoid-divide-by-zero-on-FBIOPUT_VSC.patch
(bsc#1012628 CVE-2026-31605 bsc#1263493).
- Update
patches.kernel.org/7.0.1-034-wifi-rtw88-fix-device-leak-on-probe-failure.patch
(bsc#1012628 CVE-2026-31604 bsc#1263045).
- Update
patches.kernel.org/7.0.1-035-staging-sm750fb-fix-division-by-zero-in-ps_to_h.patch
(bsc#1012628 CVE-2026-31603 bsc#1263491).
- Update
patches.kernel.org/7.0.1-040-ALSA-ctxfi-Limit-PTP-to-a-single-page.patch
(bsc#1012628 CVE-2026-31602 bsc#1263723).
- Update
patches.kernel.org/7.0.1-042-vfio-xe-Reorganize-the-init-to-decouple-migrati.patch
(bsc#1012628 CVE-2026-31601 bsc#1263722).
- Update
patches.kernel.org/7.0.1-043-arm64-mm-Handle-invalid-large-leaf-mappings-cor.patch
(bsc#1012628 CVE-2026-31600 bsc#1263721).
- Update
patches.kernel.org/7.0.1-044-media-vidtv-fix-NULL-pointer-dereference-in-vid.patch
(bsc#1012628 CVE-2026-31599 bsc#1263031).
- Update
patches.kernel.org/7.0.1-045-ocfs2-fix-possible-deadlock-between-unlink-and-.patch
(bsc#1012628 CVE-2026-31598 bsc#1263718).
- Update
patches.kernel.org/7.0.1-046-ocfs2-fix-use-after-free-in-ocfs2_fault-when-VM.patch
(bsc#1012628 CVE-2026-31597 bsc#1263717).
- Update
patches.kernel.org/7.0.1-047-ocfs2-handle-invalid-dinode-in-ocfs2_group_exte.patch
(bsc#1012628 CVE-2026-31596 bsc#1263319).
- Update
patches.kernel.org/7.0.1-048-PCI-endpoint-pci-epf-vntb-Stop-cmd_handler-work.patch
(bsc#1012628 CVE-2026-31595 bsc#1263130).
- Update
patches.kernel.org/7.0.1-049-PCI-endpoint-pci-epf-vntb-Remove-duplicate-reso.patch
(bsc#1012628 CVE-2026-31594 bsc#1263129).
- Update
patches.kernel.org/7.0.1-051-KVM-SEV-Reject-attempts-to-sync-VMSA-of-an-alre.patch
(bsc#1012628 CVE-2026-31593 bsc#1263124).
- Update
patches.kernel.org/7.0.1-052-KVM-SEV-Protect-all-of-sev_mem_enc_register_reg.patch
(bsc#1012628 CVE-2026-31592 bsc#1263123).
- Update
patches.kernel.org/7.0.1-054-KVM-SEV-Lock-all-vCPUs-when-synchronzing-VMSAs-.patch
(bsc#1012628 CVE-2026-31591 bsc#1263122).
- Update
patches.kernel.org/7.0.1-055-KVM-SEV-Drop-WARN-on-large-size-for-KVM_MEMORY_.patch
(bsc#1012628 CVE-2026-31590 bsc#1263152).
- Update
patches.kernel.org/7.0.1-056-mm-call-free_folio-directly-in-folio_unmap_inva.patch
(bsc#1012628 CVE-2026-31589 bsc#1263125).
- Update
patches.kernel.org/7.0.1-061-KVM-x86-Use-scratch-field-in-MMIO-fragment-to-h.patch
(bsc#1012628 CVE-2026-31588 bsc#1263165).
- Update
patches.kernel.org/7.0.1-062-ASoC-qcom-q6apm-move-component-registration-to-.patch
(bsc#1012628 CVE-2026-31587 bsc#1263145).
- Update
patches.kernel.org/7.0.1-063-mm-kasan-fix-double-free-for-kasan-pXds.patch
(bsc#1012628 CVE-2026-31686 bsc#1263597).
- Update
patches.kernel.org/7.0.1-064-mm-blk-cgroup-fix-use-after-free-in-cgwb_releas.patch
(bsc#1012628 CVE-2026-31586 bsc#1263176).
- Update
patches.kernel.org/7.0.1-065-media-vidtv-fix-nfeeds-state-corruption-on-star.patch
(bsc#1012628 CVE-2026-31585 bsc#1263134).
- Update
patches.kernel.org/7.0.1-066-media-mediatek-vcodec-fix-use-after-free-in-enc.patch
(bsc#1012628 CVE-2026-31584 bsc#1263180).
- Update
patches.kernel.org/7.0.1-067-media-em28xx-fix-use-after-free-in-em28xx_v4l2_.patch
(bsc#1012628 CVE-2026-31583 bsc#1263173).
- Update
patches.kernel.org/7.0.1-068-hwmon-powerz-Fix-use-after-free-on-USB-disconne.patch
(bsc#1012628 CVE-2026-31582 bsc#1263588).
- Update
patches.kernel.org/7.0.1-069-ALSA-6fire-fix-use-after-free-on-disconnect.patch
(bsc#1012628 CVE-2026-31581 bsc#1263167).
- Update
patches.kernel.org/7.0.1-070-bcache-fix-cached_dev.sb_bio-use-after-free-and.patch
(bsc#1012628 CVE-2026-31580 bsc#1263169).
- Update
patches.kernel.org/7.0.1-071-wireguard-device-use-exit_rtnl-callback-instead.patch
(bsc#1012628 CVE-2026-31579 bsc#1263074).
- Update
patches.kernel.org/7.0.1-072-media-as102-fix-to-not-free-memory-after-the-de.patch
(bsc#1012628 CVE-2026-31578 bsc#1263075).
- Update
patches.kernel.org/7.0.1-073-nilfs2-fix-NULL-i_assoc_inode-dereference-in-ni.patch
(bsc#1012628 CVE-2026-31577 bsc#1263028).
- Update
patches.kernel.org/7.0.1-075-media-hackrf-fix-to-not-free-memory-after-the-d.patch
(bsc#1012628 CVE-2026-31576 bsc#1263073).
- Update
patches.kernel.org/7.0.1-076-mm-userfaultfd-fix-hugetlb-fault-mutex-hash-cal.patch
(bsc#1012628 CVE-2026-31575 bsc#1263067).
- Update
patches.kernel.org/7.0.1-077-clockevents-Add-missing-resets-of-the-next_even.patch
(bsc#1012628 CVE-2026-31574 bsc#1263071).
- Update
patches.kernel.org/7.0.3-001-Buffer-overflow-in-drivers-xen-sys-hypervisor.c.patch
(bsc#1012628 CVE-2026-31786 bsc#1262179).
- Update
patches.kernel.org/7.0.3-002-xen-privcmd-fix-double-free-via-VMA-splitting.patch
(bsc#1012628 CVE-2026-31787 bsc#1262181).
suse-add-cves
- commit 752ba7f
* Thu Apr 30 2026 jslaby@suse.cz
- Linux 7.0.3 (bsc#1012628).
- xen/privcmd: fix double free via VMA splitting (bsc#1012628).
- Buffer overflow in drivers/xen/sys-hypervisor.c (bsc#1012628).
- commit 59ed080
* Thu Apr 30 2026 jslaby@suse.cz
- Update config files. Set CONFIG_CRYPTO_BENCHMARK=m on arm (bsc#1247996)
The commit below omitted arm. Set this on arm too.
Fixes: c17c50da0497 ("Update config files (bsc#1247996)")
(cherry picked from commit 086d181cbac7a36b7d8fd9df243a6ef72efc1ded)
- Update config files. Set CONFIG_CRYPTO_BENCHMARK=m on arm (bsc#1247996)
The commit below omitted arm. Set this on arm too.
Fixes: c17c50da0497 ("Update config files (bsc#1247996)")
- commit fbfc4da
* Tue Apr 28 2026 jslaby@suse.cz
- Linux 7.0.2 (bsc#1012628).
- crypto: authencesn - Fix src offset when decrypting in-place
(bsc#1012628).
- pwm: th1520: fix `CLIPPY=1` warning (bsc#1012628).
- drm/amdgpu: replace PASID IDR with XArray (bsc#1012628).
- crypto: krb5enc - fix sleepable flag handling in encrypt
dispatch (bsc#1012628).
- crypto: krb5enc - fix async decrypt skipping hash verification
(bsc#1012628).
- ksmbd: fix use-after-free in __ksmbd_close_fd() via durable
scavenger (bsc#1012628).
- ksmbd: validate owner of durable handle on reconnect
(bsc#1012628).
- scripts: generate_rust_analyzer.py: define scripts
(bsc#1012628).
- scripts/dtc: Remove unused dts_version in dtc-lexer.l
(bsc#1012628).
- fs/ntfs3: validate rec->used in journal-replay file record check
(bsc#1012628).
- f2fs: fix to do sanity check on dcc->discard_cmd_cnt
conditionally (bsc#1012628).
- f2fs: fix UAF caused by decrementing sbi->nr_pages[] in
f2fs_write_end_io() (bsc#1012628).
- f2fs: fix to avoid memory leak in f2fs_rename() (bsc#1012628).
- f2fs: fix to avoid uninit-value access in
f2fs_sanity_check_node_footer (bsc#1012628).
- fuse: reject oversized dirents in page cache (bsc#1012628).
- fuse: abort on fatal signal during sync init (bsc#1012628).
- fuse: Check for large folio with SPLICE_F_MOVE (bsc#1012628).
- fuse: quiet down complaints in fuse_conn_limit_write
(bsc#1012628).
- fuse: fuse_dev_ioctl_clone() should wait for device file to
be initialized (bsc#1012628).
- ksmbd: require minimum ACE size in smb_check_perm_dacl()
(bsc#1012628).
- smb: server: fix active_num_conn leak on transport allocation
failure (bsc#1012628).
- smb: client: fix dir separator in SMB1 UNIX mounts
(bsc#1012628).
- smb: server: fix max_connections off-by-one in tcp accept path
(bsc#1012628).
- smb: client: require a full NFS mode SID before reading mode
bits (bsc#1012628).
- smb: client: validate the whole DACL before rewriting it in
cifsacl (bsc#1012628).
- smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO
path (bsc#1012628).
- ksmbd: validate response sizes in ipc_validate_msg()
(bsc#1012628).
- ksmbd: validate num_aces and harden ACE walk in
smb_inherit_dacl() (bsc#1012628).
- ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment
(bsc#1012628).
- ksmbd: use check_add_overflow() to prevent u16 DACL size
overflow (bsc#1012628).
- ksmbd: reset rcount per connection in
ksmbd_conn_wait_idle_sess_id() (bsc#1012628).
- f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()
(bsc#1012628).
- ALSA: usb-audio: apply quirk for MOONDROP JU Jiu (bsc#1012628).
- ALSA: hda/realtek: Add quirk for Legion S7 15IMH (bsc#1012628).
- ALSA: caiaq: take a reference on the USB device in create_card()
(bsc#1012628).
- net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
(bsc#1012628).
- crypto: ccp: Don't attempt to copy CSR to userspace if PSP
command failed (bsc#1012628).
- crypto: ccp: Don't attempt to copy PDH cert to userspace if
PSP command failed (bsc#1012628).
- crypto: ccp: Don't attempt to copy ID to userspace if PSP
command failed (bsc#1012628).
- rxrpc: Fix missing validation of ticket length in non-XDR key
preparsing (bsc#1012628).
- mshv_vtl: Fix vmemmap_shift exceeding MAX_FOLIO_ORDER
(bsc#1012628).
- Rename to
patches.kernel.org/7.0.2-032-writeback-Fix-use-after-free-in-inode_switch_wb.patch.
- commit 46da294
* Mon Apr 27 2026 pfalcato@suse.de
- update to 7.1-rc1
- drop patches (78 stable, 5 mainline, 1 unneeded)
- patches.kernel.org/*
- patches.suse/bcache-fix-uninitialized-closure-object.patch
- patches.suse/crypto-hkdf-skip-TVs-with-unapproved-salt-lengths-in.patch
- patches.suse/mfd-bcm2835-pm-Add-BCM2712-PM-device-support.patch
- patches.suse/mfd-bcm2835-pm-Introduce-SoC-specific-type-identifier.patch
- patches.suse/usb-gadget-f_hid-Add-missing-error-code.patch
- patches.suse/writeback-Fix-use-after-free-in-inode_switch_wbs_wor.patch
- refresh
- patches.rpmify/certs-Replace-openssl-invocation-with-OPENSSL.patch
- patches.suse/Restore-kABI-for-NVidia-vGPU-driver.patch
- patches.suse/add-suse-supported-flag.patch
- patches.suse/btrfs-provide-super_operations-get_inode_dev
- patches.suse/vfs-add-super_operations-get_inode_dev
- disable ARM architectures (need config update)
- new config options
- Processor type and features
- Power management and ACPI options
- ACPI (Advanced Configuration and Power Interface) Support
- CONFIG_ACPI_APEI_GHES_NVIDIA=m
- CPU Frequency scaling
- CONFIG_X86_AMD_PSTATE_DYNAMIC_EPP=y
- Memory Management options
- CONFIG_NUMA_MIGRATION=y
- Data Access Monitoring
- CONFIG_DAMON_DEBUG_SANITY=n
- Device Drivers
- PCI support
- CONFIG_PCI_PWRCTRL_GENERIC=m
- Generic Driver Options
- CONFIG_DRIVER_DEFERRED_PROBE_TIMEOUT=10
- fwctl device firmware access framework
- CONFIG_FWCTL_BNXT=m
- Memory Technology Device (MTD) support
- Partition parsers
- CONFIG_MTD_VIRT_CONCAT=y
- Misc devices
- EEPROM support
- CONFIG_INTEL_MEI_CSC=m
- Pin controllers
- CONFIG_PINCTRL_STMFX=m
- GPIO Support
- Memory mapped GPIO drivers
- CONFIG_GPIO_BY_PINCTRL=m
- Port-mapped I/O GPIO drivers
- CONFIG_GPIO_NOVALAKE=m
- Power supply class support
- CONFIG_BATTERY_S2MU005=m
- Hardware Monitoring support
- CONFIG_SENSORS_GPIO_FAN=m
- CONFIG_SENSORS_LATTEPANDA_SIGMA_EC=m
- CONFIG_SENSORS_MCP9982=m
- PMBus support
- CONFIG_SENSORS_APS_379=m
- CONFIG_SENSORS_XDP720=m
- CONFIG_SENSORS_XDPE1A2G7B=m
- CONFIG_SENSORS_YOGAFAN=m
- Multimedia support
- Media ancillary drivers
- Camera sensor devices
- CONFIG_VIDEO_T4KA3=m
- Graphics support
- Direct Rendering Manager (XFree86 4.1.0 and higher DRI support)
- CONFIG_DRM_RAS=y
- Drivers for system framebuffers
- CONFIG_DRM_COREBOOTDRM=m
- Sound card support
- Advanced Linux Sound Architecture
- ALSA for SoC audio support
- CODEC drivers
- CS35L56 driver options
- CONFIG_SND_SOC_CS35L56_CAL_PERFORM_CTRL=n
- CONFIG_SND_SOC_UDA1380=m
- HID bus support
- Special HID drivers
- CONFIG_HID_LENOVO_GO=m
- CONFIG_HID_LENOVO_GO_S=m
- CONFIG_HID_HUAWEI=m
- DMA Engine support
- CONFIG_SWITCHTEC_DMA=m
- X86 Platform Specific Device Drivers
- CONFIG_BITLAND_MIFS_WMI=m
- Generic Radix Page Table
- CONFIG_IOMMU_PT_RISCV64=n
- Industrial I/O support
- Analog to digital converters
- CONFIG_QCOM_SPMI_ADC5_GEN3=n
- Proximity and distance sensors
- CONFIG_VL53L1X_I2C=n
- CONFIG_MUX_CORE=y
- File systems
- DOS/FAT/EXFAT/NT Filesystems
- CONFIG_NTFS_FS=n
- CONFIG_NTFS_DEBUG=n
- CONFIG_NTFS_FS_POSIX_ACL=n
- Cryptographic API
- Hashes, digests, and MACs
- CONFIG_CRYPTO_SM3=m
- Kernel hacking
- Tracers
- CONFIG_TRACE_REMOTE_TEST=n
- Kernel Testing and Coverage
- Runtime Testing
- CONFIG_TEST_WORKQUEUE=n
- other architectures (OF-based options)
- VIDEO_OV2732=m
- DRM_LONTIUM_LT8713SX=n
- DRM_PANEL_HIMAX_HX83121A=n
- DRM_PANEL_ILITEK_ILI9806E_DSI=n
- DRM_PANEL_ILITEK_ILI9806E_SPI=n
- DRM_PANEL_LXD_M9189A=n
- DRM_PANEL_MOTOROLA_MOT=n
- DRM_PANEL_NOVATEK_NT37700F=n
- DRM_PANEL_SAMSUNG_S6E8FC0=n
- x86_64 options
- PINCTRL_STMFX=n
- ppc64le options
- HSA_AMD_P2P=y
- s390x options
- ISM_VFIO_PCI=m
- PAGE_TABLE_CHECK=y
- PAGE_TABLE_CHECK_ENFORCED=n
- riscv64 options
- PCIE_ANDES_QILAI=m
- PCIE_ESWIN=m
- DWMAC_SPACEMIT=m
- MDIO_PIC64HPSC=m
- POWER_RESET_QEMU_VIRT_CTRL=m
- HSA_AMD_P2P=y
- DRM_THEAD_TH1520_DW_HDMI=m
- DRM_DW_HDMI_AHB_AUDIO=n
- DRM_DW_HDMI_I2S_AUDIO=n
- DRM_DW_HDMI_GP_AUDIO=n
- DRM_DW_HDMI_CEC=n
- DRM_VERISILICON_DC=m
- COMMON_CLK_EIC7700=m
- TENSTORRENT_ATLANTIS_PRCM=m
- DEBUG_GENERIC_PT=n
- IOMMU_PT_AMDV1=n
- IOMMU_PT_VTDSS=n
- IOMMU_PT_RISCV64=y
- IOMMU_PT_X86_64=n
- POLARFIRE_SOC_IRQ_MUX=y
- RESET_TENSTORRENT_ATLANTIS=m
- PHY_EIC7700_SATA=m
- commit 4ffd344
* Sun Apr 26 2026 jslaby@suse.cz
- Refresh
patches.suse/mfd-bcm2835-pm-Add-BCM2712-PM-device-support.patch.
- Refresh
patches.suse/mfd-bcm2835-pm-Introduce-SoC-specific-type-identifier.patch.
- Refresh
patches.suse/writeback-Fix-use-after-free-in-inode_switch_wbs_wor.patch.
Update upstream status.
- commit 8e3001e
* Thu Apr 23 2026 pfalcato@suse.de
- Re-enable ARM architectures and update configs
Rather late (well, that's an understatement) but better than never.
- commit 46dfbfa
* Thu Apr 23 2026 jslaby@suse.cz
- Update config files. Set INTEL_IOMMU_SCALABLE_MODE_DEFAULT_ON=y (bsc#1262308)
The same as for SL-16.*.
- commit ccbbbdf
* Thu Apr 23 2026 jslaby@suse.cz
- Linux 7.0.1 (bsc#1012628).
- clockevents: Add missing resets of the next_event_forced flag
(bsc#1012628).
- mm/userfaultfd: fix hugetlb fault mutex hash calculation
(bsc#1012628).
- media: hackrf: fix to not free memory after the device is
registered in hackrf_probe() (bsc#1012628).
- media: vidtv: fix pass-by-value structs causing MSAN warnings
(bsc#1012628).
- nilfs2: fix NULL i_assoc_inode dereference in
nilfs_mdt_save_to_shadow_map (bsc#1012628).
- media: as102: fix to not free memory after the device is
registered in as102_usb_probe() (bsc#1012628).
- wireguard: device: use exit_rtnl callback instead of manual
rtnl_lock in pre_exit (bsc#1012628).
- bcache: fix cached_dev.sb_bio use-after-free and crash
(bsc#1012628).
- ALSA: 6fire: fix use-after-free on disconnect (bsc#1012628).
- hwmon: (powerz) Fix use-after-free on USB disconnect
(bsc#1012628).
- media: em28xx: fix use-after-free in em28xx_v4l2_open()
(bsc#1012628).
- media: mediatek: vcodec: fix use-after-free in encoder release
path (bsc#1012628).
- media: vidtv: fix nfeeds state corruption on start_streaming
failure (bsc#1012628).
- mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
(bsc#1012628).
- mm/kasan: fix double free for kasan pXds (bsc#1012628).
- ASoC: qcom: q6apm: move component registration to unmanaged
version (bsc#1012628).
- KVM: x86: Use scratch field in MMIO fragment to hold small
write values (bsc#1012628).
- x86-64/arm64/powerpc: clean up and rename
__copy_from_user_flushcache (bsc#1012628).
- x86: rename and clean up __copy_from_user_inatomic_nocache()
(bsc#1012628).
- x86-64: rename misleadingly named '__copy_user_nocache()'
function (bsc#1012628).
- checkpatch: add support for Assisted-by tag (bsc#1012628).
- mm: call ->free_folio() directly in folio_unmap_invalidate()
(bsc#1012628).
- KVM: SEV: Drop WARN on large size for
KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1012628).
- KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch
finish (bsc#1012628).
- KVM: SEV: Disallow LAUNCH_FINISH if vCPUs are actively being
created (bsc#1012628).
- KVM: SEV: Protect *all* of sev_mem_enc_register_region()
with kvm->lock (bsc#1012628).
- KVM: SEV: Reject attempts to sync VMSA of an
already-launched/encrypted vCPU (bsc#1012628).
- KVM: selftests: Remove duplicate LAUNCH_UPDATE_VMSA call in
SEV-ES migrate test (bsc#1012628).
- PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown
(bsc#1012628).
- PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in
epf_ntb_epc_cleanup (bsc#1012628).
- ocfs2: handle invalid dinode in ocfs2_group_extend
(bsc#1012628).
- ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY
(bsc#1012628).
- ocfs2: fix possible deadlock between unlink and dio_end_io_write
(bsc#1012628).
- media: vidtv: fix NULL pointer dereference in
vidtv_channel_pmt_match_sections (bsc#1012628).
- arm64: mm: Handle invalid large leaf mappings correctly
(bsc#1012628).
- vfio/xe: Reorganize the init to decouple migration from reset
(bsc#1012628).
- dcache: Limit the minimal number of bucket to two (bsc#1012628).
- ALSA: ctxfi: Limit PTP to a single page (bsc#1012628).
- Docs/admin-guide/mm/damon/lru_sort: warn commit_inputs vs
param updates race (bsc#1012628).
- Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param
updates race (bsc#1012628).
- USB: serial: option: add Telit Cinterion FN990A MBIM composition
(bsc#1012628).
- selftests/mm: hmm-tests: don't hardcode THP size to 2MB
(bsc#1012628).
- staging: sm750fb: fix division by zero in ps_to_hz()
(bsc#1012628).
- wifi: rtw88: fix device leak on probe failure (bsc#1012628).
- scripts: generate_rust_analyzer.py: avoid FD leak (bsc#1012628).
- scripts/gdb/symbols: handle module path parameters
(bsc#1012628).
- fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
(bsc#1012628).
- usb: port: add delay after usb_hub_set_port_power()
(bsc#1012628).
- usb: gadget: f_hid: don't call cdev_init while cdev in use
(bsc#1012628).
- USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC
touchscreen (bsc#1012628).
- usb: storage: Expand range of matched versions for VL817 quirks
entry (bsc#1012628).
- usb: typec: fusb302: Switch to threaded IRQ handler
(bsc#1012628).
- usbip: validate number_of_packets in usbip_pack_ret_submit()
(bsc#1012628).
- smb: server: avoid double-free in smb_direct_free_sendmsg
after smb_direct_flush_send_list() (bsc#1012628).
- smb: client: avoid double-free in smbd_free_send_io() after
smbd_send_batch_flush() (bsc#1012628).
- ksmbd: fix mechToken leak when SPNEGO decode fails after token
alloc (bsc#1012628).
- ksmbd: require 3 sub-authorities before reading sub_auth[2]
(bsc#1012628).
- ksmbd: validate EaNameLength in smb2_get_ea() (bsc#1012628).
- smb: client: fix OOB reads parsing symlink error response
(bsc#1012628).
- smb: client: fix off-by-8 bounds check in check_wsl_eas()
(bsc#1012628).
- usb: gadget: renesas_usb3: validate endpoint index in standard
request handlers (bsc#1012628).
- usb: gadget: f_phonet: fix skb frags[] overflow in
pn_rx_complete() (bsc#1012628).
- usb: gadget: f_ncm: validate minimum block_len in
ncm_unwrap_ntb() (bsc#1012628).
- fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
(bsc#1012628).
- ALSA: fireworks: bound device-supplied status before string
array lookup (bsc#1012628).
- ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0
(bsc#1012628).
- bnge: return after auxiliary_device_uninit() in error path
(bsc#1012628).
- drm/vc4: platform_get_irq_byname() returns an int (bsc#1012628).
- NFC: digital: Bounds check NFC-A cascade depth in SDD response
handler (bsc#1012628).
- net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()
(bsc#1012628).
- HID: core: clamp report_size in s32ton() to avoid undefined
shift (bsc#1012628).
- HID: alps: fix NULL pointer dereference in alps_raw_event()
(bsc#1012628).
- staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()
(bsc#1012628).
- i2c: s3c24xx: check the size of the SMBUS message before using
it (bsc#1012628).
- can: raw: fix ro->uniq use-after-free in raw_rcv()
(bsc#1012628).
- x86/CPU: Fix FPDSS on Zen1 (bsc#1012628).
- nfc: llcp: add missing return after LLCP_CLOSED checks
(bsc#1012628).
- commit a523726
* Mon Apr 20 2026 jslaby@suse.cz
- usb: gadget: f_hid: Add missing error code (git-fixes).
- bcache: fix uninitialized closure object (git-fixes).
- commit dbb12f6
* Mon Apr 20 2026 jslaby@suse.cz
- Update config files. Enable TPS68470 drivers (bsc#1261843)
- commit 9e15f59
* Fri Apr 17 2026 tiwai@suse.de
- Update config files: (re-)enable CONFIG_TN3270*=y (bsc#1243081)
- commit a9c6a75
* Fri Apr 17 2026 jslaby@suse.cz
- writeback: Fix use after free in inode_switch_wbs_work_fn()
(bsc#1259701).
- commit 5021f62
* Thu Apr 16 2026 msuchanek@suse.de
- check-for-config-changes: Exclude CC_MS_EXTENSIONS
- commit c04d7e7
* Mon Apr 13 2026 msuchanek@suse.de
- check-for-config-changes: Exclude HAVE_CFI_ICALL_NORMALIZE_INTEGERS{,_RUSTC}
- commit ba5597d
* Mon Apr 13 2026 jslaby@suse.cz
- Refresh
patches.suse/selftests-bpf-Support-when-CONFIG_VXLAN-m.patch.
Fix upstream status.
- commit 9f6830f
* Mon Apr 13 2026 jslaby@suse.cz
- Delete
patches.suse/locking-qspinlock-Save-previous-node-owner-CPU-into-.patch.
This was a debugging aid for bsc#1258936. It is no longer needed.
- commit e54d311
* Mon Apr 13 2026 pfalcato@suse.de
- update to 7.0 final
- refresh configs
- rebase patch patches.suse/vfs-add-super_operations-get_inode_dev
- commit 5844293
* Sun Apr 12 2026 jslaby@suse.cz
- usb: typec: ucsi: skip connector validation before init
(git-fixes).
- commit c7234f7
* Sat Apr 11 2026 jslaby@suse.cz
- Linux 6.19.12 (bsc#1012628).
- drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid
for smu v13 (bsc#1012628).
- net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback
(bsc#1012628).
- net: mana: fix use-after-free in add_adev() error path
(bsc#1012628).
- scsi: target: file: Use kzalloc_flex for aio_cmd (bsc#1012628).
- scsi: target: tcm_loop: Drain commands in target_reset handler
(bsc#1012628).
- xfs: only assert new size for datafork during truncate extents
(bsc#1012628).
- xfs: factor out xfs_attr3_node_entry_remove (bsc#1012628).
- xfs: factor out xfs_attr3_leaf_init (bsc#1012628).
- xfs: close crash window in attr dabtree inactivation
(bsc#1012628).
- arm64/scs: Fix handling of advance_loc4 (bsc#1012628).
- HID: logitech-hidpp: Enable MX Master 4 over bluetooth
(bsc#1012628).
- wifi: mac80211: check tdls flag in ieee80211_tdls_oper
(bsc#1012628).
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq
(bsc#1012628).
- atm: lec: fix use-after-free in sock_def_readable()
(bsc#1012628).
- btrfs: don't take device_list_mutex when querying zone info
(bsc#1012628).
- tg3: replace placeholder MAC address with device property
(bsc#1012628).
- objtool: Fix Clang jump table detection (bsc#1012628).
- HID: logitech-hidpp: Prevent use-after-free on force feedback
initialisation failure (bsc#1012628).
- HID: core: Mitigate potential OOB by removing bogus memset()
(bsc#1012628).
- objtool/klp: fix mkstemp() failure with long paths
(bsc#1012628).
- HID: multitouch: Check to ensure report responses match the
request (bsc#1012628).
- btrfs: reserve enough transaction items for qgroup ioctls
(bsc#1012628).
- i2c: tegra: Don't mark devices with pins as IRQ safe
(bsc#1012628).
- btrfs: reject root items with drop_progress and zero drop_level
(bsc#1012628).
- drm/amd/display: Fix gamma 2.2 colorop TFs (bsc#1012628).
- smb: client: fix generic/694 due to wrong ->i_blocks
(bsc#1012628).
- spi: geni-qcom: Check DMA interrupts early in ISR (bsc#1012628).
- mshv: Fix error handling in mshv_region_pin (bsc#1012628).
- dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties
to fix common property warning (bsc#1012628).
- wifi: iwlwifi: mld: Fix MLO scan timing (bsc#1012628).
- wifi: iwlwifi: mvm: don't send a 6E related command when not
supported (bsc#1012628).
- wifi: iwlwifi: mld: correctly set wifi generation data
(bsc#1012628).
- wifi: ath11k: Pass the correct value of each TID during a stop
AMPDU session (bsc#1012628).
- cgroup: Wait for dying tasks to leave on rmdir (bsc#1012628).
- selftests/cgroup: Don't require synchronous populated update
on task exit (bsc#1012628).
- cgroup: Fix cgroup_drain_dying() testing the wrong condition
(bsc#1012628).
- crypto: caam - fix DMA corruption on long hmac keys
(bsc#1012628).
- crypto: caam - fix overflow on long hmac keys (bsc#1012628).
- crypto: deflate - fix spurious -ENOSPC (bsc#1012628).
- crypto: af-alg - fix NULL pointer dereference in scatterwalk
(bsc#1012628).
- mpls: add seqcount to protect the platform_label{,s} pair
(bsc#1012628).
- net: mana: Fix RX skb truesize accounting (bsc#1012628).
- netdevsim: fix build if SKB_EXTENSIONS=n (bsc#1012628).
- net: fec: fix the PTP periodic output sysfs interface
(bsc#1012628).
- net: enetc: reset PIR and CIR if they are not equal when
initializing TX ring (bsc#1012628).
- net: enetc: add graceful stop to safely reinitialize the TX Ring
(bsc#1012628).
- net: enetc: do not access non-existent registers on pseudo MAC
(bsc#1012628).
- net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix
memory leak (bsc#1012628).
- net: ipv6: ndisc: fix ndisc_ra_useropt to initialize
nduseropt_padX fields to zero to prevent an info-leak
(bsc#1012628).
- iommupt/amdv1: mark amdv1pt_install_leaf_entry as
__always_inline (bsc#1012628).
- net/ipv6: ioam6: prevent schema length wraparound in trace fill
(bsc#1012628).
- tg3: Fix race for querying speed/duplex (bsc#1012628).
- net: ti: icssg-prueth: fix missing data copy and wrong recycle
in ZC RX dispatch (bsc#1012628).
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
(bsc#1012628).
- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1012628).
- eth: fbnic: Account for page fragments when updating BDQ tail
(bsc#1012628).
- bridge: br_nd_send: linearize skb before parsing ND options
(bsc#1012628).
- net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
(bsc#1012628).
- net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta
(bsc#1012628).
- net: enetc: check whether the RSS algorithm is Toeplitz
(bsc#1012628).
- net: enetc: do not allow VF to configure the RSS key
(bsc#1012628).
- ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from
SKIP_IFACE_SETUP (bsc#1012628).
- ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add
rollback on failure (bsc#1012628).
- ipv6: prevent possible UaF in addrconf_permanent_addr()
(bsc#1012628).
- net: airoha: Add missing cleanup bits in
airoha_qdma_cleanup_rx_queue() (bsc#1012628).
- net: introduce mangleid_features (bsc#1012628).
- net: use skb_header_pointer() for TCPv4 GSO frag_off check
(bsc#1012628).
- net: sched: cls_api: fix tc_chain_fill_node to initialize
tcm_info to zero to prevent an info-leak (bsc#1012628).
- bnxt_en: set backing store type from query type (bsc#1012628).
- crypto: algif_aead - Revert to operating out-of-place
(bsc#1012628).
- crypto: authencesn - Do not place hiseq at end of dst for
out-of-place decryption (bsc#1012628).
- net: bonding: fix use-after-free in bond_xmit_broadcast()
(bsc#1012628).
- NFC: pn533: bound the UART receive buffer (bsc#1012628).
- net: xilinx: axienet: Correct BD length masks to match AXIDMA
IP spec (bsc#1012628).
- net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets
(bsc#1012628).
- ASoC: Intel: boards: fix unmet dependency on PINCTRL
(bsc#1012628).
- bridge: mrp: reject zero test interval to avoid OOM panic
(bsc#1012628).
- bpf: Fix regsafe() for pointers to packet (bsc#1012628).
- net: ipv6: flowlabel: defer exclusive option free until RCU
teardown (bsc#1012628).
- mptcp: add eat_recv_skb helper (bsc#1012628).
- mptcp: fix soft lockup in mptcp_recvmsg() (bsc#1012628).
- net: stmmac: skip VLAN restore when VLAN hash ops are missing
(bsc#1012628).
- ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from
SKIP_IFACE_SETUP (bsc#1012628).
- netfilter: flowtable: strictly check for maximum number of
actions (bsc#1012628).
- netfilter: nfnetlink_log: account for netlink header size
(bsc#1012628).
- netfilter: x_tables: ensure names are nul-terminated
(bsc#1012628).
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr
(bsc#1012628).
- netfilter: nf_conntrack_helper: pass helper to expect cleanup
(bsc#1012628).
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT
absent (bsc#1012628).
- netfilter: nf_conntrack_expect: honor expectation helper field
(bsc#1012628).
- netfilter: nf_conntrack_expect: use expect->helper
(bsc#1012628).
- netfilter: nf_conntrack_expect: store netns and zone in
expectation (bsc#1012628).
- netfilter: ctnetlink: ignore explicit helper on new expectations
(bsc#1012628).
- netfilter: x_tables: restrict xt_check_match/xt_check_target
extensions for NFPROTO_ARP (bsc#1012628).
- netfilter: nf_tables: reject immediate NF_QUEUE verdict
(bsc#1012628).
- Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if
immediate (bsc#1012628).
- Bluetooth: SCO: fix race conditions in sco_sock_connect()
(bsc#1012628).
- Bluetooth: L2CAP: Add support for setting BT_PHY (bsc#1012628).
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST
if exists (bsc#1012628).
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once
fails (bsc#1012628).
- Bluetooth: hci_sync: Fix UAF in le_read_features_complete
(bsc#1012628).
- Bluetooth: hci_h4: Fix race during initialization (bsc#1012628).
- Bluetooth: MGMT: validate LTK enc_size on load (bsc#1012628).
- Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
(bsc#1012628).
- Bluetooth: hci_event: fix potential UAF in
hci_le_remote_conn_param_req_evt (bsc#1012628).
- Bluetooth: MGMT: validate mesh send advertising payload length
(bsc#1012628).
- rds: ib: reject FRMR registration before IB connection is
established (bsc#1012628).
- bpf: sockmap: Fix use-after-free of sk->sk_socket in
sk_psock_verdict_data_ready() (bsc#1012628).
- net/sched: sch_netem: fix out-of-bounds access in packet
corruption (bsc#1012628).
- net: macb: fix clk handling on PCI glue driver removal
(bsc#1012628).
- net: macb: properly unregister fixed rate clocks (bsc#1012628).
- net/mlx5: lag: Check for LAG device before creating debugfs
(bsc#1012628).
- net/mlx5: Avoid "No data available" when FW version queries fail
(bsc#1012628).
- net/mlx5: Fix switchdev mode rollback in case of failure
(bsc#1012628).
- bnxt_en: Refactor some basic ring setup and adjustment logic
(bsc#1012628).
- bnxt_en: Don't assume XDP is never enabled in
bnxt_init_dflt_ring_mode() (bsc#1012628).
- bnxt_en: Restore default stat ctxs for ULP when resource is
available (bsc#1012628).
- net/x25: Fix potential double free of skb (bsc#1012628).
- net/x25: Fix overflow when accumulating packets (bsc#1012628).
- net/sched: cls_fw: fix NULL pointer dereference on shared blocks
(bsc#1012628).
- net/sched: cls_flow: fix NULL pointer dereference on shared
blocks (bsc#1012628).
- net: hsr: fix VLAN add unwind on slave errors (bsc#1012628).
- ipv6: avoid overflows in ip6_datagram_send_ctl() (bsc#1012628).
- eth: fbnic: Increase FBNIC_QUEUE_SIZE_MIN to 64 (bsc#1012628).
- bpf: reject direct access to nullable PTR_TO_BUF pointers
(bsc#1012628).
- bpf: Reject sleepable kprobe_multi programs at attach time
(bsc#1012628).
- bpf: Fix incorrect pruning due to atomic fetch precision
tracking (bsc#1012628).
- Revert "drm: Fix use-after-free on framebuffers and property
blobs when calling drm_dev_unplug" (bsc#1012628).
- iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one
(bsc#1012628).
- gpiolib: clear requested flag if line is invalid (bsc#1012628).
- interconnect: qcom: sm8450: Fix NULL pointer dereference in
icc_link_nodes() (bsc#1012628).
- gpio: shared: call gpio_chip::of_xlate() if set (bsc#1012628).
- gpio: shared: handle pins shared by child nodes of devices
(bsc#1012628).
- gpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio()
(bsc#1012628).
- drm/bridge: Fix refcount shown via debugfs for
encoder_bridges_show() (bsc#1012628).
- accel/qaic: Handle DBC deactivation if the owner went away
(bsc#1012628).
- io_uring/rsrc: reject zero-length fixed buffer import
(bsc#1012628).
- hwmon: (tps53679) Fix array access with zero-length block read
(bsc#1012628).
- hwmon: (pxe1610) Check return value of page-select write in
probe (bsc#1012628).
- hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS")
(bsc#1012628).
- gpio: shared: shorten the critical section in
gpiochip_setup_shared() (bsc#1012628).
- dt-bindings: gpio: fix microchip #interrupt-cells (bsc#1012628).
- spi: stm32-ospi: Fix resource leak in remove() callback
(bsc#1012628).
- spi: stm32-ospi: Fix reset control leak on probe error
(bsc#1012628).
- drm/xe/xe_pagefault: Disallow writes to read-only VMAs
(bsc#1012628).
- drm/xe/pxp: Clean up termination status on failure
(bsc#1012628).
- drm/xe/pxp: Remove incorrect handling of impossible state
during suspend (bsc#1012628).
- drm/xe/pxp: Clear restart flag in pxp_start after jumping back
(bsc#1012628).
- hwmon: (tps53679) Fix device ID comparison and printing in
tps53676_identify() (bsc#1012628).
- spi: amlogic: spifc-a4: unregister ECC engine on probe failure
and remove() callback (bsc#1012628).
- hwmon: (occ) Fix missing newline in occ_show_extended()
(bsc#1012628).
- irqchip/riscv-aplic: Restrict genpd notifier to device tree only
(bsc#1012628).
- drm/sysfb: Fix efidrm error handling and memory type mismatch
(bsc#1012628).
- hwmon: (asus-ec-sensors) Fix T_Sensor for PRIME X670E-PRO WIFI
(bsc#1012628).
- mips: ralink: update CPU clock index (bsc#1012628).
- sched/fair: Fix zero_vruntime tracking fix (bsc#1012628).
- sched/debug: Fix avg_vruntime() usage (bsc#1012628).
- perf/x86: Fix potential bad container_of in intel_pmu_hw_config
(bsc#1012628).
- riscv: kgdb: fix several debug register assignment bugs
(bsc#1012628).
- riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set
(bsc#1012628).
- ACPI: RIMT: Add dependency between iommu and devices
(bsc#1012628).
- drm/ioc32: stop speculation on the drm_compat_ioctl path
(bsc#1012628).
- rust_binder: use AssertSync for BINDER_VM_OPS (bsc#1012628).
- wifi: wilc1000: fix u8 overflow in SSID scan buffer size
calculation (bsc#1012628).
- wifi: iwlwifi: mvm: fix potential out-of-bounds read in
iwl_mvm_nd_match_info_handler() (bsc#1012628).
- USB: serial: option: add MeiG Smart SRM825WN (bsc#1012628).
- drm/amd/display: Fix NULL pointer dereference in
dcn401_init_hw() (bsc#1012628).
- sched_ext: Fix inconsistent NUMA node lookup in
scx_select_cpu_dfl() (bsc#1012628).
- lib/crypto: chacha: Zeroize permuted_state before it leaves
scope (bsc#1012628).
- sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to
balance callback (bsc#1012628).
- ALSA: caiaq: fix stack out-of-bounds read in init_card
(bsc#1012628).
- ALSA: hda/realtek: add quirk for Acer Swift SFG14-73
(bsc#1012628).
- ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15
(bsc#1012628).
- ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxx
(bsc#1012628).
- ALSA: hda/realtek: change quirk for HP OmniBook 7 Laptop
16-bh0xxx (bsc#1012628).
- io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()
(bsc#1012628).
- Bluetooth: SMP: derive legacy responder STK authentication
from MITM state (bsc#1012628).
- Bluetooth: SMP: force responder MITM requirements before
building the pairing response (bsc#1012628).
- Bluetooth: hci_sync: fix stack buffer overflow in
hci_le_big_create_sync (bsc#1012628).
- Bluetooth: hci_event: move wake reason storage into validated
event handlers (bsc#1012628).
- ksmbd: fix OOB write in QUERY_INFO for compound requests
(bsc#1012628).
- MIPS: SiByte: Bring back cache initialisation (bsc#1012628).
- MIPS: Fix the GCC version check for `__multi3' workaround
(bsc#1012628).
- hwmon: (occ) Fix division by zero in occ_show_power_1()
(bsc#1012628).
- mips: mm: Allocate tlb_vpn array atomically (bsc#1012628).
- x86/kexec: Disable KCOV instrumentation after load_segments()
(bsc#1012628).
- drm/amdgpu: fix the idr allocation flags (bsc#1012628).
- gpib: fix use-after-free in IO ioctl handlers (bsc#1012628).
- iio: add IIO_DECLARE_QUATERNION() macro (bsc#1012628).
- iio: orientation: hid-sensor-rotation: fix quaternion alignment
(bsc#1012628).
- iio: orientation: hid-sensor-rotation: add timestamp hack to
not break userspace (bsc#1012628).
- iio: adc: ti-adc161s626: fix buffer read on big-endian
(bsc#1012628).
- iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()
(bsc#1012628).
- iio: adc: ti-ads1119: Fix unbalanced pm reference count in
ds1119_single_conversion() (bsc#1012628).
- iio: adc: ti-ads1119: Reinit completion before
wait_for_completion_timeout() (bsc#1012628).
- iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD
(bsc#1012628).
- drm/ast: dp501: Fix initialization of SCU2C (bsc#1012628).
- drm/i915/dsi: Don't do DSC horizontal timing adjustments in
command mode (bsc#1012628).
- drm/i915/dp: Use crtc_state->enhanced_framing properly on
ivb/hsw CPU eDP (bsc#1012628).
- drm/i915/cdclk: Do the full CDCLK dance for min_voltage_level
changes (bsc#1012628).
- drm/amdgpu: Fix wait after reset sequence in S4