The standard kernel - without any SUSE patches
Source Timestamp: 2026-08-10 05:03:20 +0000
GIT Revision: f1071afe11a0df6b9bfac324d0180c88ec5e1ee9
GIT Branch: stable
Provides
Requires
License
GPL-2.0-only
Changelog
* Mon Aug 10 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.1.2-007-crypto-qat-remove-unused-character-device-and-I.patch
(bsc#1012628 CVE-2026-64529 bsc#1274262).
- Update
patches.kernel.org/7.1.4-009-KVM-VMX-Grab-vmcs12-on-CR8-interception-update-.patch
(bsc#1012628 CVE-2026-64604 bsc#1274286).
- Update
patches.kernel.org/7.1.4-014-platform-x86-intel-hid-Protect-ACPI-notify-hand.patch
(bsc#1012628 CVE-2026-64603 bsc#1274295).
- Update
patches.kernel.org/7.1.4-019-rust-block-fix-GenDisk-cleanup-paths.patch
(bsc#1012628 CVE-2026-64509 bsc#1274254).
- Update
patches.kernel.org/7.1.4-030-wifi-rtw89-correct-drop-logic-for-malformed-AMP.patch
(bsc#1012628 bsc#1271359 CVE-2026-64506 bsc#1274228).
- Update
patches.kernel.org/7.1.4-039-iio-adc-ad_sigma_delta-fix-clear_pending_event-.patch
(bsc#1012628 CVE-2026-64502 bsc#1274269).
- Update
patches.kernel.org/7.1.4-043-iio-adc-spear-Initialize-completion-before-requ.patch
(bsc#1012628 CVE-2026-64602 bsc#1274294).
- Update
patches.kernel.org/7.1.4-081-ALSA-virtio-Validate-control-metadata-from-the-.patch
(bsc#1012628 CVE-2026-64490 bsc#1274253).
- Update
patches.kernel.org/7.1.4-082-ALSA-ymfpci-check-snd_ctl_new1-return-value.patch
(bsc#1012628 CVE-2026-64489 bsc#1274281).
- Update
patches.kernel.org/7.1.4-085-ALSA-cmipci-check-snd_ctl_new1-return-value.patch
(bsc#1012628 CVE-2026-64486 bsc#1274243).
- Update
patches.kernel.org/7.1.4-091-ALSA-hda-cs35l41-Fix-firmware-load-work-teardow.patch
(bsc#1012628 CVE-2026-64481 bsc#1274547).
- Update
patches.kernel.org/7.1.4-095-ALSA-ice1712-check-snd_ctl_new1-return-value.patch
(bsc#1012628 CVE-2026-64480 bsc#1274239).
- Update
patches.kernel.org/7.1.4-097-ALSA-us144mkii-capture_urb_complete-redundant-u.patch
(bsc#1012628 CVE-2026-64601 bsc#1274293).
- Update
patches.kernel.org/7.1.4-099-ALSA-usb-audio-avoid-kobject-path-lookup-in-Dua.patch
(bsc#1012628 CVE-2026-64478 bsc#1274321).
- Update
patches.kernel.org/7.1.4-105-x86-fs-resctrl-Prevent-out-of-bounds-access-whi.patch
(bsc#1012628 CVE-2026-64477 bsc#1274264).
- Update
patches.kernel.org/7.1.4-107-vfio-pci-Latch-disable_idle_d3-per-device.patch
(bsc#1012628 CVE-2026-64476 bsc#1274245).
- Update
patches.kernel.org/7.1.4-108-vfio-pci-Release-the-VGA-arbiter-client-on-regi.patch
(bsc#1012628 CVE-2026-64475 bsc#1274319).
- Update
patches.kernel.org/7.1.4-110-vfio-prevent-infinite-loop-in-vfio_mig_get_next.patch
(bsc#1012628 CVE-2026-64474 bsc#1274316).
- Update
patches.kernel.org/7.1.4-114-Bluetooth-btusb-fix-use-after-free-on-registrat.patch
(bsc#1012628 CVE-2026-64471 bsc#1274278).
- Update
patches.kernel.org/7.1.4-123-rust_binder-clear-freeze-listener-on-node-remov.patch
(bsc#1012628 CVE-2026-64466 bsc#1274288).
- Update
patches.kernel.org/7.1.4-152-staging-vme_user-bound-slave-read-write-to-the-.patch
(bsc#1012628 CVE-2026-64449 bsc#1274280).
- Update
patches.kernel.org/7.1.4-161-staging-rtl8723bs-fix-WEP-length-underflow-and-.patch
(bsc#1012628 CVE-2026-64445 bsc#1274290).
- Update
patches.kernel.org/7.1.4-162-staging-rtl8723bs-fix-OOB-read-in-OnAssocRsp-IE.patch
(bsc#1012628 CVE-2026-64444 bsc#1274265).
- Update
patches.kernel.org/7.1.4-166-staging-rtl8723bs-fix-OOB-reads-in-rtw_get_sec_.patch
(bsc#1012628 CVE-2026-64441 bsc#1274261).
- Update
patches.kernel.org/7.1.4-167-staging-rtl8723bs-fix-OOB-write-in-HT_caps_hand.patch
(bsc#1012628 CVE-2026-64440 bsc#1274258).
- Update
patches.kernel.org/7.1.4-168-crypto-amlogic-avoid-double-cleanup-in-meson_cr.patch
(bsc#1012628 CVE-2026-64599 bsc#1274314).
- Update
patches.kernel.org/7.1.4-171-ksmbd-fix-use-after-free-of-a-deferred-file_loc.patch
(bsc#1012628 CVE-2026-64437 bsc#1274271).
- Update
patches.kernel.org/7.1.4-172-net-af_key-initialize-alg_key_len-for-IPComp-st.patch
(bsc#1012628 CVE-2026-64436 bsc#1274277).
- Update
patches.kernel.org/7.1.4-175-Bluetooth-MGMT-Fix-UAF-of-hci_conn_params-in-ad.patch
(bsc#1012628 CVE-2026-64433 bsc#1274283).
- Update
patches.kernel.org/7.1.4-178-fs-ntfs3-validate-Dirty-Page-Table-capacity-in-.patch
(bsc#1012628 CVE-2026-64432 bsc#1274231).
- Update
patches.kernel.org/7.1.4-179-ntfs-avoid-calling-post_write_mst_fixup-for-inv.patch
(bsc#1012628 CVE-2026-64431 bsc#1274255).
- Update
patches.kernel.org/7.1.4-180-NTB-epf-Avoid-calling-pci_irq_vector-from-hardi.patch
(bsc#1012628 CVE-2026-64430 bsc#1274257).
- Update
patches.kernel.org/7.1.4-187-netpoll-fix-a-use-after-free-on-shutdown-path.patch
(bsc#1012628 CVE-2026-64424 bsc#1274256).
- Update
patches.kernel.org/7.1.4-188-ipv4-igmp-remove-multicast-group-from-hash-tabl.patch
(bsc#1012628 CVE-2026-64423 bsc#1274274).
- Update
patches.kernel.org/7.1.4-215-smb-client-Fix-error-code-in-smb2_aead_req_allo.patch
(bsc#1012628 CVE-2026-64598 bsc#1274298).
- Update
patches.kernel.org/7.1.4-231-smb-client-fix-query-directory-replay-double-fr.patch
(bsc#1012628 CVE-2026-64387 bsc#1273426 bsc#1274545).
- Update
patches.kernel.org/7.1.4-232-smb-client-fix-query_info-replay-double-free.patch
(bsc#1012628 CVE-2026-64386 bsc#1273426 bsc#1274543).
- Update
patches.kernel.org/7.1.4-233-smb-client-fix-double-free-in-SMB2_ioctl-replay.patch
(bsc#1012628 CVE-2026-64385 bsc#1273426 bsc#1274539).
- Update
patches.kernel.org/7.1.4-234-smb-client-fix-change-notify-replay-double-free.patch
(bsc#1012628 CVE-2026-64384 bsc#1273426 bsc#1274541).
- Update
patches.kernel.org/7.1.4-237-smb-client-fix-double-free-in-SMB2_close-replay.patch
(bsc#1012628 CVE-2026-64597 bsc#1274297).
- Update
patches.kernel.org/7.1.4-248-libfs-set-SB_I_NOEXEC-and-SB_I_NODEV-by-default.patch
(bsc#1012628 CVE-2026-64596 bsc#1274315).
- Update
patches.kernel.org/7.1.4-269-HID-hid-lenovo-go-cancel-cfg_setup-work-in-hid_.patch
(bsc#1012628 CVE-2026-64595 bsc#1274317).
- Update
patches.kernel.org/7.1.4-336-usb-gadget-f_fs-initialize-reset_work-at-alloca.patch
(bsc#1012628 CVE-2026-64594 bsc#1274538).
- Update
patches.kernel.org/7.1.4-356-btrfs-do-not-trim-a-device-which-is-not-writeab.patch
(bsc#1012628 CVE-2026-64593 bsc#1274497).
- Update
patches.kernel.org/7.1.4-421-riscv-mm-Unconditionally-sfence.vma-for-spuriou.patch
(bsc#1012628 CVE-2026-64592 bsc#1274496).
- Update
patches.kernel.org/7.1.4-431-iommu-vt-d-Avoid-WARNING-in-sva-unbind-path.patch
(bsc#1012628 CVE-2026-64591 bsc#1274320).
- Update
patches.kernel.org/7.1.4-466-dma-buf-udmabuf-skip-redundant-cpu-sync-to-fix-.patch
(bsc#1012628 CVE-2026-64590 bsc#1274495).
- Update
patches.kernel.org/7.1.4-471-i2c-core-fix-NULL-deref-on-adapter-registration.patch
(bsc#1012628 CVE-2026-64589 bsc#1274494).
- Update
patches.kernel.org/7.1.4-509-fuse-uring-fix-data-races-on-ring-ready.patch
(bsc#1012628 CVE-2026-64588 bsc#1274224).
- Update
patches.kernel.org/7.1.5-1560-KVM-nVMX-Put-vmcs12-pages-if-nested-VM-Enter-f.patch
(bsc#1012628 CVE-2026-68081).
- Update
patches.kernel.org/7.1.5-1810-can-esd_usb-kill-anchored-URBs-before-freeing-.patch
(bsc#1012628 CVE-2026-64585 bsc#1274491).
- Update
patches.kernel.org/7.1.6-144-usb-gadget-f_midi-cancel-pending-IN-work-before.patch
(bsc#1012628 CVE-2026-64584 bsc#1274296).
- Update
patches.kernel.org/7.1.6-551-wifi-brcmfmac-drain-bus_reset-work-on-device-re.patch
(bsc#1012628 CVE-2026-64586 bsc#1274492).
- Update
patches.kernel.org/7.1.6-631-libceph-fix-two-unsafe-bare-decodes-in-decode_l.patch
(bsc#1012628 CVE-2026-68082).
- Update
patches.kernel.org/7.1.7-001-x86-bugs-Make-Safe-RET-robust-against-interrupt.patch
(bsc#1012628 CVE-2026-68480 bsc#1274208).
suse-add-cves
- commit f1071af
* Mon Aug 10 2026 jslaby@suse.cz
- Linux 7.1.8 (bsc#1012628).
- net: mpls: initialize rtm_tos in mpls_getroute() (bsc#1012628).
- mm/slab: decouple SLAB_NO_SHEAVES from SLAB_NO_OBJ_EXT
(bsc#1012628).
- lib/alloc_tag: introduce
mem_alloc_profiling_permanently_disabled() (bsc#1012628).
- mm/slab: prevent unbounded recursion in free path with new
kmalloc type (bsc#1012628).
- ALSA: hda/realtek: Add quirk for HP Dragonfly Folio G3 2-in-1
(103c:8a05) (bsc#1012628).
- thunderbolt: Prevent XDomain delayed work use-after-free on
disconnect (bsc#1012628).
- KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested
context (bsc#1012628).
- dmaengine: switchtec-dma: fix FIELD_GET misuse when programming
SE threshold (bsc#1012628).
- pinctrl: qcom: Unconditionally mark gpio as wakeup enable
(bsc#1012628).
- pinctrl: qcom: sc8280xp: Add missing wakeup entries for
GPIO143/151 (bsc#1012628).
- dmaengine: sun6i-dma: Fix reclaim descriptors while terminating
DMA (bsc#1012628).
- dmaengine: idxd: fix double free of wq, engine, and group
structs (bsc#1012628).
- dmaengine: idxd: fix fdev setup failure cleanup in
idxd_cdev_open() (bsc#1012628).
- iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for
a vDEVICE (bsc#1012628).
- gpio: sloppy-logic-analyzer: Fix memory leak in
gpio_la_poll_probe() (bsc#1012628).
- selftests/lkdtm: rename STACKLEAK_ERASING to KSTACK_ERASE
(bsc#1012628).
- selftests/seccomp: Fix pointer type mismatch build error
(bsc#1012628).
- ntfs: preserve RECALL_ON_OPEN on WSL special-file reparse points
(bsc#1012628).
- ata: sata_mv: accept 1 or 2 resources in platform probe
(bsc#1012628).
- ata: ahci_ceva: fix error paths in
ceva_ahci_platform_enable_resources() (bsc#1012628).
- phy: qcom: m31-eusb2: Fix return value of init call
(bsc#1012628).
- ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk
lookup (bsc#1012628).
- ASoC: max98090: fix missing IS_ERR() before PTR_ERR() on mclk
lookup (bsc#1012628).
- of: reserved_mem: prevent OOB when too many dynamic regions
are defined (bsc#1012628).
- btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1012628).
- btrfs: zoned: fix deadlock between metadata writeback and
transaction commit (bsc#1012628).
- btrfs: zoned: reset meta_write_pointer on zone reset
(bsc#1012628).
- btrfs: warn about extent buffer that can not be released
(bsc#1012628).
- btrfs: skip global block reserve accounting for rescue mounts
(bsc#1012628).
- btrfs: raid56: fix an incorrect csum skip during scrub
(bsc#1012628).
- btrfs: zoned: skip fully truncated ordered extents at zone
finish (bsc#1012628).
- ntfs: harden runlist realloc size calculations (bsc#1012628).
- ntfs: drop stale page-cache when shrinking a non-resident attr
(bsc#1012628).
- rtla/timerlat_top: Fix on-threshold actions firing on signal
(bsc#1012628).
- phy: zynqmp: fix clock error handling in xpsgtr_phy_init()
(bsc#1012628).
- phy: zynqmp: fix runtime PM leak on probe allocation failure
(bsc#1012628).
- netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32
in sip_help_tcp() (bsc#1012628).
- selftests: netfilter: nft_flowtable.sh: fix offload counter
verification for tunnel tests (bsc#1012628).
- netfilter: nf_conntrack_expect: add and use
nf_ct_expect_related_pair() (bsc#1012628).
- drm/mediatek: Check CRTC state before freeing (bsc#1012628).
- mshv_vtl: fix fd leak in mshv_ioctl_create_vtl() (bsc#1012628).
- Drivers: hv: vmbus: Replace lockdep_hardirq_threaded() with
lockdep annotation (bsc#1012628).
- mshv: Fix duplicate GSI detection for GSI 0 (bsc#1012628).
- mshv: Fix sleeping under spinlock in mshv_portid_alloc
(bsc#1012628).
- KVM: arm64: vgic: Fix race between LPI release and
re-registration (bsc#1012628).
- KVM: arm64: vgic: Mitigate potential LPI registration failure
(bsc#1012628).
- KVM: arm64: Fix hyp_trace clock disabling (bsc#1012628).
- KVM: arm64: Fix potential leak in
hyp_trace_buffer_alloc_bpages_backing (bsc#1012628).
- KVM: arm64: Fix hyp_trace_desc allocation size in
hyp_trace_load() (bsc#1012628).
- KVM: arm64: Add missing hyp_enter when trapping sysreg
(bsc#1012628).
- KVM: arm64: Reject guest_memfd memslots when the VM has MTE
(bsc#1012628).
- KEYS: trusted: dcp: fix key_len validation and calc_blob_len()
return type (bsc#1012628).
- keys: fix out-of-bounds read in keyring_get_key_chunk()
(bsc#1012628).
- keys: make keyring key-chunk byte order agree with
keyring_diff_objects() (bsc#1012628).
- assoc_array: trim the final shortcut word using the current
chunk end (bsc#1012628).
- ipvs: adjust double hashing when fwd method changes
(bsc#1012628).
- netfilter: nf_tables: make nft_object rhltable per table
(bsc#1012628).
- netfilter: xt_hashlimit: validate hashtable supports
XT_HASHLIMIT_RATE_MATCH (bsc#1012628).
- ipvs: fix the checksum validations (bsc#1012628).
- ipvs: fix places with wrong packet offsets (bsc#1012628).
- ipvs: do not mangle ICMP replies for non-first fragments
(bsc#1012628).
- ipvs: clear the nfct flag under lock (bsc#1012628).
- netfilter: nft_payload: fix mask build for partial field offload
(bsc#1012628).
- ASoC: SDCA: Correct pointer passed to devm_acpi_table_put
(bsc#1012628).
- ASoC: SDCA: Always free firmware in FDL path (bsc#1012628).
- ASoC: SDCA: Make UMP message size check more robust
(bsc#1012628).
- ASoC: SDCA: Ensure that Control Range is large enough for header
(bsc#1012628).
- rds: tcp: hold the RCU lock across ipv6_chk_addr() in
rds_tcp_laddr_check() (bsc#1012628).
- nexthop: take nh->lock for f6i_list walks in replace check
and notify (bsc#1012628).
- nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush
(bsc#1012628).
- af_unix: fix listen() succeeding on sockets in the wrong state
(bsc#1012628).
- selftests/net/af_unix: test listen() rejects wrong socket states
(bsc#1012628).
- xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer
Tx (bsc#1012628).
- xsk: drain continuation descs after overflow in xsk_build_skb()
(bsc#1012628).
- xsk: provide sufficient space in pool->tx_descs (bsc#1012628).
- xsk: reclaim invalid Tx descriptors in ZC batch path
(bsc#1012628).
- net/sched: sch_cake: skip clearing unused tins during rate
adjustment (bsc#1012628).
- pinctrl-amd: Don't clear S4 wake bits at probe (bsc#1012628).
- scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer
(bsc#1012628).
- scsi: libiscsi_tcp: Bound SCSI Response data segment to the
connection buffer (bsc#1012628).
- scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race
(bsc#1012628).
- smb: client: fix buffer leaks in SMB1 read and write
(bsc#1012628).
- erofs: clean up erofs_ishare_fill_inode() (bsc#1012628).
- erofs: remove fscache backend entirely (bsc#1012628).
- erofs: ensure valid f_path for page cache sharing (bsc#1012628).
- gpio: gpio-by-pinctrl: Apply initial value in direction output
wrapper (bsc#1012628).
- ACPI: CPPC: Skip writes to unsupported performance controls
(bsc#1012628).
- wifi: ath12k: fix out-of-bounds clear_bit in
ath12k_mac_dp_peer_cleanup() (bsc#1012628).
- ASoC: tas2781: Use correct calibration data for SINEGAIN2
register (bsc#1012628).
- spi: spi-cadence: Move TX FIFO full busy-wait into FIFO
(bsc#1012628).
- hwmon: (nct6775-core) Fix number of temperature registers for
NCT6116 (bsc#1012628).
- hwmon: (ina2xx) Fix various overflow issues (bsc#1012628).
- hwmon: (ltc4282) Fix reading the minimum alarm voltage
(bsc#1012628).
- hwmon: (sht3x) Fix unaligned accesses (bsc#1012628).
- hwmon: (lm90) Only report alarms if driver is ready
(bsc#1012628).
- hwmon: (nzxt-smart2) DMA-align output buffer (bsc#1012628).
- net: do not send ICMP/NDISC Redirects when peer allocation fails
(bsc#1012628).
- hwmon: (nct6775-core) Prevent access to unsupported weight
registers (bsc#1012628).
- net: bridge: mrp: fix Option TLV length in MRP_Test frames
(bsc#1012628).
- ASoC: sophgo: return 1 on volume change in
cv1800b_adc_volume_set() (bsc#1012628).
- forcedeth: fix UAF of txrx_stats in nv_remove (bsc#1012628).
- hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors
(bsc#1012628).
- hwmon: (adt7470) Fix cache updated before hardware write on
I2C error (bsc#1012628).
- hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread
(bsc#1012628).
- hwmon: (adt7470) Fix temperature alarm logic in
hwmon_temp_read() (bsc#1012628).
- hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks
(bsc#1012628).
- hwmon: (adt7470) Use cached PWM frequency value (bsc#1012628).
- hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed
read (bsc#1012628).
- hwmon: (adt7470) Fix PWM auto temp state array and bounds check
(bsc#1012628).
- rtase: fix double free of multi-frag skb on DMA map failure
(bsc#1012628).
- ethtool: Embed FEC hist ranges as buffer in struct
(bsc#1012628).
- powerpc/boot: Fix simpleboot CPU node lookup check
(bsc#1012628).
- powerpc/boot: Fix treeboot-currituck CPU node lookup check
(bsc#1012628).
- powerpc/boot: Fix treeboot-akebono CPU node lookup check
(bsc#1012628).
- net/sched: cls_u32: validate offshift to prevent
shift-out-of-bounds (bsc#1012628).
- net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()
(bsc#1012628).
- wifi: mac80211: validate individual TWT params before driver
setup (bsc#1012628).
- netfs: clear PG_private_2 on copy-to-cache append failure
(bsc#1012628).
- netfs: handle single writeback rolling buffer allocation failure
(bsc#1012628).
- netfs: release readahead folios on iterator preparation failure
(bsc#1012628).
- netfs: Fix folio_queue ENOMEM in writeback by adding a mempool
(bsc#1012628).
- net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in
poll_controller (bsc#1012628).
- hwmon: (pmbus) Fix return value from pmbus_update_byte_data()
(bsc#1012628).
- idpf: bound interrupt-vector register fill to the allocated
array (bsc#1012628).
- idpf: adjust TxQ ring count minimum (bsc#1012628).
- idpf: Fix mailbox IRQ name leak on request failure
(bsc#1012628).
- ice: suppress DPLL errors during reset recovery (bsc#1012628).
- Bluetooth: ISO: clear iso_data always when detaching conn from
hcon (bsc#1012628).
- Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1012628).
- Bluetooth: ISO: fix CONNECTED -> CLOSED transition on
shutdown/release (bsc#1012628).
- Bluetooth: ISO: lock sk in iso_sock_getname (bsc#1012628).
- Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1012628).
- Bluetooth: ISO: fix timeout vs sync_timeout typo in
check_bcast_qos (bsc#1012628).
- Bluetooth: ISO: validate sockaddr_iso first in
iso_sock_rebind_bis() (bsc#1012628).
- Bluetooth: ISO: hold sk properly in iso_conn_ready
(bsc#1012628).
- Bluetooth: ISO: fix leaking sk after socket release
(bsc#1012628).
- Bluetooth: ISO: avoid deadlocks in iso_sock_timeout
(bsc#1012628).
- Bluetooth: ISO: ensure no dangling hcon references in iso_conn
(bsc#1012628).
- Bluetooth: ISO: fix refcounting of iso_conn (bsc#1012628).
- Bluetooth: ISO: fix race of kfree vs kref_get_unless_zero
(bsc#1012628).
- Bluetooth: btintel: Validate length before parsing diagnostics
TLV (bsc#1012628).
- Bluetooth: hci_conn: hold conn reference in abort_conn_sync()
(bsc#1012628).
- Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync()
callbacks (bsc#1012628).
- Bluetooth: hci_sync: hold conn in hci_connect_big_sync()
callback (bsc#1012628).
- Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback
(bsc#1012628).
- Bluetooth: hci_sync: hold conn in hci_past_sync() callback
(bsc#1012628).
- Bluetooth: hci_sync: fix hci_conn_del() use in
hci_le_create_conn_sync (bsc#1012628).
- Bluetooth: hci_sync: remove unnecessary hci_conn_get in
create_conn_sync (bsc#1012628).
- x86/boot: Add volatile, clobbers and zero-length test in
memcmp() (bsc#1012628).
- net: phylink: put link_gpio if phylink_create fails
(bsc#1012628).
- scsi: target: iblock: Fix wrong PR ops NULL check for
PREEMPT/RELEASE (bsc#1012628).
- scsi: ufs: core: Cancel RTC work in active-active suspend
(bsc#1012628).
- scsi: ufs: core: Revert "Delegate the interrupt service routine
to a threaded IRQ handler" (bsc#1012628).
- scsi: zfcp: Fix memory leak during adapter release by destroying
gid_pn_req (bsc#1012628).
- scsi: target: Clear cmd_cnt when initial counter enrollment
fails (bsc#1012628).
- octeontx2: cn20k: Coordinate default rules with NIX LF lifecycle
(bsc#1012628).
- octeontx2-af: Block VFs from clobbering special CGX PKIND state
(bsc#1012628).
- scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit
(bsc#1012628).
- scsi: ufs: core: Initialize hba->rpmbs list in ufshcd
(bsc#1012628).
- net: sxgbe: free TX rings on RX allocation failure
(bsc#1012628).
- net: sxgbe: check descriptor ring allocation failures
(bsc#1012628).
- can: isotp: check register_netdevice_notifier() error in module
init (bsc#1012628).
- drm/i915/dp: Ignore the sink's DSC max FRL rate without a PCON
DSC encoder (bsc#1012628).
- drm/xe/pt: check no-DMA huge-pte cases before DMA segment test
(bsc#1012628).
- fprobe: Fix module reference count leak on error in
register_fprobe() (bsc#1012628).
- tracing/mmiotrace: Reset dropped_count in mmio_reset_data()
(bsc#1012628).
- tracing/mmiotrace: Add NULL check for mmio_trace_array in
logging functions (bsc#1012628).
- riscv: drop __init from
vec_check_unaligned_access_speed_all_cpus (bsc#1012628).
- accel/qaic: use sizeof(*trans_hdr) for transaction length check
(bsc#1012628).
- riscv: mm: Fix out-of-bounds page-table walk during memory
hot-remove (bsc#1012628).
- ring-buffer: Fix reader page read offset for remote buffers
(bsc#1012628).
- ipv6: release fib6_null_entry on subtree failure (bsc#1012628).
- riscv: vdso: Only try to install vDSO when present
(bsc#1012628).
- net: dsa: mt7530: check bus->read() errors in the MDIO regmap
backend (bsc#1012628).
- net: dsa: mt7530: error out on failed reads in ATC/VTCR command
polling (bsc#1012628).
- net: dsa: mt7530: error out on failed reads in MT7531 PHY
polling (bsc#1012628).
- net: stmmac: Fix E2E delay mechanism (bsc#1012628).
- net: mana: Create separate EQs for each vPort (bsc#1012628).
- net: mana: Return error code from mana_create_rxq()
(bsc#1012628).
- ptp: netc: fix potential interrupt storm caused by incorrect
unbind order (bsc#1012628).
- net: libwx: fix FDIR ATR queue mismatch for software VLAN
packets (bsc#1012628).
- octeontx2-pf: Set correct sequence for carrier off and tx
queue stop (bsc#1012628).
- sched/deadline: Use revised wakeup rule only for running
dl_server (bsc#1012628).
- spi: spi-nxp-fspi: add per-SoC SDR/DTR clock rate limits for
all supported SoCs (bsc#1012628).
- qede: sync udp_tunnel ports outside qede_lock in the recovery
path (bsc#1012628).
- drm/i915/hdmi: Poll for 200 msec for TMDS_Scrambler_Status
(bsc#1012628).
- ksmbd: return success for deferred final close (bsc#1012628).
- ksmbd: fix use-after-free in __close_file_table_ids()
(bsc#1012628).
- ksmbd: use memcmp() to compare ClientGUIDs (bsc#1012628).
- iomap: add a separate bio_set for iomap_split_ioend
(bsc#1012628).
- mshv: Fix race in mshv_irqfd_deassign (bsc#1012628).
- mshv: Fix level-triggered check on uninitialized data
(bsc#1012628).
- mshv: Fix missing error code on VP allocation failure
(bsc#1012628).
- mshv: Order pt_vp_array publish against irqfd assertion path
(bsc#1012628).
- mshv: Publish VP to pt_vp_array before installing the file
descriptor (bsc#1012628).
- ring-buffer: Fix subbuf_ids memory leak in
rb_allocate_cpu_buffer() error path (bsc#1012628).
- iommufd/viommu: Release the igroup lock on the vdevice_size
error path (bsc#1012628).
- iommufd/viommu: Publish a vDEVICE only after vdevice_init()
succeeds (bsc#1012628).
- iommufd: Reject DMABUF pages from the access pin path
(bsc#1012628).
- iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults
on replace (bsc#1012628).
- iommu/iommufd: Fix IOPF group ownership UAF (bsc#1012628).
- kbuild: Stop modifying $(objtree)/Makefile when building
oot-kmods oos (bsc#1012628).
- ACPI: CPPC: Check all controls for fast switching (bsc#1012628).
- mm: mglru: fix stale batch updates after memcg reparenting
(bsc#1012628).
- mm/hugetlb: fix swap entry corruption when clearing uffd-wp
at fork() (bsc#1012628).
- pinctrl: microchip-sgpio: add missing select REGMAP_MMIO
(bsc#1012628).
- pinctrl: devicetree: don't free uninitialized dev_name on
error path (bsc#1012628).
- btrfs: raid56: fix scrub read assembly submitting no reads
(bsc#1012628).
- erofs: cap LZMA stream pool size (bsc#1012628).
- pinctrl: bm1880: add missing select GENERIC_PINCONF
(bsc#1012628).
- fortify: Disable -Wstringop-overread in tests (bsc#1012628).
- lib: test_hmm: use device devt for coherent device range
selection (bsc#1012628).
- btrfs: zoned: fix missing chunk metadata reservation
(bsc#1012628).
- ocfs2: fix boundary check in ocfs2_check_dir_entry() to use
buffer offset (bsc#1012628).
- mm: migrate_device: fix pte_pfn/pte_dirty called on non-present
PTE (bsc#1012628).
- mm/util: don't read __page_2 for order-1 folios in
snapshot_page() (bsc#1012628).
- selftest: fix headers in fclog.c (bsc#1012628).
- fs/proc/task_mmu: fix PAGEMAP_SCAN written state for unpopulated
ptes (bsc#1012628).
- fs/proc/task_mmu: fix PAGEMAP_SCAN written state for PMD holes
(bsc#1012628).
- mm/percpu-km: fix bitmap overflow and accounting in
pcpu_create_chunk() (bsc#1012628).
- mm/hugetlb: fix list corruption in
allocate_file_region_entries() (bsc#1012628).
- userfaultfd: wait on source PMD during UFFDIO_MOVE
(bsc#1012628).
- mm/vmstat: fold stranded per-cpu node stats when a node comes
online (bsc#1012628).
- KVM: x86: Cancel delayed I/O APIC EOI handling before destroying
vCPUs (bsc#1012628).
- tracing/probes: Reject $arg0 in meta argument expansion
(bsc#1012628).
- tracing/fprobe: Roll back on enable_trace_fprobe() failure
(bsc#1012628).
- KVM: VMX: add memory clobber to asm for VMX instructions
(bsc#1012628).
- KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited
while L2 is active (bsc#1012628).
- KVM: s390: pci: Reject adapter interrupt forwarding if already
enabled (bsc#1012628).
- KVM: s390: pci: Fix memory accounting for pinned/unpinned pages
(bsc#1012628).
- KVM: s390: pci: Fix missing error codes and memory unaccounting
(bsc#1012628).
- KVM: s390: pci: Fix resource leak on IRQ registration failure
(bsc#1012628).
- KVM: s390: pci: Fix NULL dereference on AIBV allocation failure
(bsc#1012628).
- KVM: s390: pci: Validate AIBV and AISB before pinning guest
pages (bsc#1012628).
- dibs: fix use-after-free of dmb_node in loopback
attach/detach/unregister (bsc#1012628).
- sctp: validate Adaptation Indication parameter length
(bsc#1012628).
- audit: fix potential integer overflow in audit_log_n_string()
(bsc#1012628).
- audit: fix potential use-after-free in audit_del_rule()
(bsc#1012628).
- Bluetooth: btusb: Fix short read errors in
btusb_qca_send_vendor_req() (bsc#1012628).
- Bluetooth: btmtk: Fix short read errors in
btmtk_usb_uhw_reg_read() (bsc#1012628).
- Bluetooth: btmtk: Fix short read errors in btmtk_usb_reg_read()
(bsc#1012628).
- Bluetooth: mgmt: fix pending command UAF in EIR updates
(bsc#1012628).
- Bluetooth: SCO: give the socket its own sco_conn reference
(bsc#1012628).
- Bluetooth: mgmt: fix UAF in pair command cancellation
(bsc#1012628).
- Bluetooth: hci_sync: Fix advertising data UAFs (bsc#1012628).
- Bluetooth: HIDP: reject frames without a transaction header
(bsc#1012628).
- Bluetooth: HIDP: validate numbered report payloads
(bsc#1012628).
- bpf: lwt: Fix dst reference leak on reroute failure
(bsc#1012628).
- afs: Fix afs_fs_fetch_data() to set call->async (bsc#1012628).
- afs: Fix afs_fs_fetch_data() to subtract transferred from len
(bsc#1012628).
- afs: Fix UAF when sending a message (bsc#1012628).
- ALSA: 6fire: Fix UAF at error handling during probe
(bsc#1012628).
- ALSA: hda/realtek: Add quirk for TongFang X6SP45xU
(bsc#1012628).
- ALSA: lx6464es: fix period byte count for 16-bit streams
(bsc#1012628).
- ALSA: pcm: wake linked drain waiters on unlink (bsc#1012628).
- ALSA: seq: Fix division by zero in initialize_timer()
(bsc#1012628).
- ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close
completes (bsc#1012628).
- ALSA: ump: fix double free of out_cvts on rawmidi error
(bsc#1012628).
- ASoC: fsl_asrc: fix m2m_init error path to use goto instead
of bare return (bsc#1012628).
- ASoC: fsl_easrc: fix m2m_init error path to use goto instead
of bare return (bsc#1012628).
- ASoC: tas2562: fix DVC coefficient write order (bsc#1012628).
- ASoC: tas2562: fix broken entries in the volume lookup table
(bsc#1012628).
- ata: libata-eh: Increase STANDBY IMMEDIATE timeout
(bsc#1012628).
- ata: libata-sata: fix ata_scsi_lpm_supported() iteration
(bsc#1012628).
- ata: libata-scsi: terminate deferred commands on time out
(bsc#1012628).
- ata: libata-scsi: schedule deferred atapi command (bsc#1012628).
- ALSA: usb-audio: fix use-after-free in ump_to_endpoint()
(bsc#1012628).
- ALSA: usb-audio: fix stack info leak in RME Digiface status
(bsc#1012628).
- ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()
(bsc#1012628).
- ALSA: usb-audio: Fix DMA buffer out-of-bounds write when
fill_max is set (bsc#1012628).
- ALSA: usb-audio: Clamp frame size in implicit-feedback mode
(bsc#1012628).
- dmaengine: qcom: bam_dma: Fix command element mask field for
BAM v1.6.0+ (bsc#1012628).
- e1000: fix memory leak in e1000_probe() (bsc#1012628).
- fou: Fix use-after-free in fou_create() (bsc#1012628).
- igbvf: Fix leak in TX DMA error cleanup (bsc#1012628).
- igc: remove napi_synchronize() in igc_down() (bsc#1012628).
- ipvs: do not propagate one-packet flag to synced conns
(bsc#1012628).
- ksmbd: reject repeated SMB2 NEGOTIATE requests (bsc#1012628).
- mshv: fix hv_input_get_system_property struct (bsc#1012628).
- net/smc: fix socket use-after-free during link group termination
(bsc#1012628).
- netfilter: ipset: do not update comments from kernel-side hash
adds (bsc#1012628).
- of/address: Fix NULL bus dereference in
of_pci_range_parser_one() (bsc#1012628).
- PCI: imx6: Keep i.MX6 Root Port MSI/MSI-X Capabilities with
iMSI-RX to work around hardware bug (bsc#1012628).
- tipc: avoid use-after-free in poll trace queue dumps
(bsc#1012628).
- x86/CPU/AMD: Carve out a Zen5 models range (bsc#1012628).
- wifi: mac80211: fix tid_tx use-after-free on BA session stop
(bsc#1012628).
- wifi: mwifiex: use the subframe length when parsing A-MSDU
TDLS frames (bsc#1012628).
- binfmt_misc: restore write access when removing an entry
(bsc#1012628).
- binfmt_misc: use exe_file_deny_write_access() for the
interpreter clone (bsc#1012628).
- binfmt_misc: reject a flag character as the field delimiter
(bsc#1012628).
- binfmt_misc: don't let an 'F' entry pin its own instance
(bsc#1012628).
- binfmt_misc: don't leak the user namespace when the mount fails
(bsc#1012628).
- io_uring/net: initialize mshot_len for send (bsc#1012628).
- io_uring: preserve task restrictions across exec (bsc#1012628).
- mm/huge_memory: unlock i_mmap_rwsem before releasing after-split
folios (bsc#1012628).
- mm/page_reporting: use system_freezable_wq to fix UAF during
suspend (bsc#1012628).
- mm: memcg: initialize *locked in memcg1_oom_prepare() stub
(bsc#1012628).
- net: bridge: stop fast-leave after deleting a port group
(bsc#1012628).
- net: ipv6: clear suppressed fib6 rule result (bsc#1012628).
- net: pktgen: fix proc entry use-after-free (bsc#1012628).
- riscv/mm: use physical alignment for vmemmap_start_pfn
(bsc#1012628).
- powerpc/ps3: Fix map failure path in dma_ioc0_map_pages()
(bsc#1012628).
- um: vector: fix use-after-free in vector_mmsg_rx()
(bsc#1012628).
- uprobes: Fix NULL pointer dereference in hprobe_expire()
(bsc#1012628).
- veth: convert frag_list skbs before running XDP (bsc#1012628).
- vxlan: re-fetch eth header after route_shortcircuit()
(bsc#1012628).
- vxlan: unclone skb head before modifying eth header in
route_shortcircuit() (bsc#1012628).
- vxlan: use neigh_ha_snapshot() in route_shortcircuit()
(bsc#1012628).
- vxlan: use pskb_network_may_pull() for transmit path header
pulls (bsc#1012628).
- vxlan: use pskb_network_may_pull() in route_shortcircuit()
(bsc#1012628).
- ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev()
(bsc#1012628).
- tracing: Check return value of __register_event() in
trace_module_add_events() (bsc#1012628).
- tracing/filters: Fix false positive match in regex_match_full()
(bsc#1012628).
- spi: spi-qpic-snand: write the feature value before executing
SET_FEATURE (bsc#1012628).
- spi: qcom-qspi: Correct max DMA length to avoid 64K boundary
failure (bsc#1012628).
- selftests/mm: fix potential wild pointer access of getline
due to missing init (bsc#1012628).
- selftests/clone3: fix wild pointer access of getline due to
missing init (bsc#1012628).
- scsi: libsas: terminate deferred commands on time out
(bsc#1012628).
- scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write
(bsc#1012628).
- scsi: ufs: dt-bindings: Add missing mcq reg for
qcom,sa8255p-ufshc (bsc#1012628).
- sctp: reject stale cookies with mismatched verification tags
(bsc#1012628).
- sctp: prevent peer transport count overflow (bsc#1012628).
- hwmon: (npcm750-pwm-fan): stop fan timer on device detach
(bsc#1012628).
- hwmon: (pmbus/core) notify on the hwmon device, not the i2c
client (bsc#1012628).
- i2c: amd-mp2: Unregister callback on adapter add failure
(bsc#1012628).
- gpiolib: tolerate gpio-hogs lacking a hogging state
(bsc#1012628).
- gpio: pca953x: fix cache_only and IRQ state on restore_context()
failure (bsc#1012628).
- gpio: pch: use raw_spinlock_t for the register lock
(bsc#1012628).
- cifs: add fscache_resize_cookie() to cifs_setsize()
(bsc#1012628).
- cpufreq: cppc: Sanitize lockless policy limit snapshots
(bsc#1012628).
- cpufreq: powernow-k8: Fix possible memory leak in
powernowk8_cpu_init() (bsc#1012628).
- cpufreq: schedutil: Publish util hooks only after all sg_cpu
are initialized (bsc#1012628).
- power: supply: bq25890: fix the -10 C NTC lookup entry
(bsc#1012628).
- power: supply: macsmc: Support macOS 27 SMC firmware
(bsc#1012628).
- power: supply: max17040: handle missing status supplier
(bsc#1012628).
- s390/pci: Fix s390_pci_mmio_write syscall error return without
MIO (bsc#1012628).
- s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1012628).
- s390/dasd: Fix potential NULL pointer dereference (bsc#1012628).
- s390/dasd: Fix undersized format-check buffer (bsc#1012628).
- s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs
(bsc#1012628).
- s390/zcrypt: Close speculative mem read possibility
(bsc#1012628).
- s390/zcrypt: Fix buffer over-read in cca_cipher2protkey
(bsc#1012628).
- s390/zcrypt: Fix missing mem scrub at clear key import in
cca_clr2cipherkey() (bsc#1012628).
- s390/zcrypt: Validate length for CCA AES cipher key requests
(bsc#1012628).
- s390/zcrypt: Validate length for CCA ECC private key requests
(bsc#1012628).
- phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask
(bsc#1012628).
- phy: zynqmp: use read-modify-write for SERDES scrambler bypass
(bsc#1012628).
- phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB
(bsc#1012628).
- net: openvswitch: fix potential UAF on meter attach failure
(bsc#1012628).
- net: openvswitch: fix skb leak on flow key update failure
during recirculation (bsc#1012628).
- net: openvswitch: fix skb leak on flow key update failure
during ct (bsc#1012628).
- ice: wait for reset completion in ice_resume() (bsc#1012628).
- ice: fix VF interrupts cleanup (bsc#1012628).
- ice: fix memory leak in ice_lbtest_prepare_rings()
(bsc#1012628).
- i2c: spacemit: request IRQ after controller initialization
(bsc#1012628).
- i2c: qcom-cci: drop custom suspend/resume and rely on runtime
PM helpers (bsc#1012628).
- i2c: jz4780: Cache host clock rate at probe to prevent CCF
prepare_lock deadlock (bsc#1012628).
- i2c: iproc: reset bus after timeout if START_BUSY is stuck
(bsc#1012628).
- i2c: imx: mark I2C adapter when hardware is powered down
(bsc#1012628).
- i2c: imx: Fix slave registration race and error handling
(bsc#1012628).
- i2c: imx: Cancel hrtimer before clearing slave pointer
(bsc#1012628).
- can: c_can: c_can_chip_config(): keep controller in init mode
until bittiming is configured (bsc#1012628).
- can: ems_usb: validate CPC message lengths (bsc#1012628).
- can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer
leak on URB resubmit failure (bsc#1012628).
- can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on
skb allocation failure (bsc#1012628).
- can: isotp: fix timer drain order, wakeup handling and tx_gen
ordering (bsc#1012628).
- can: j1939: transport: j1939_session_fresh_new(): initialize
receive buffer (bsc#1012628).
- can: j1939: use netdevice_tracker for j1939_{priv,session,ecu}
tracking (bsc#1012628).
- can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory
leak in kvaser_usb_hydra_get_busparams() (bsc#1012628).
- can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate
received command extents (bsc#1012628).
- can: rcar_canfd: change the initializing flow for clocks and
resets (bsc#1012628).
- can: softing: fw_parse(): validate firmware record spans
(bsc#1012628).
- can: peak_usb: add bounds check for USB channel index
(bsc#1012628).
- can: peak_usb: peak_usb_start(): fix double free of transfer
buffer on URB submit error (bsc#1012628).
- can: peak_usb: validate uCAN receive record lengths
(bsc#1012628).
- can: ctucanfd: add missing MODULE_DEVICE_TABLE() (bsc#1012628).
- can: ctucanfd: use self-test mode for PRESUME_ACK (bsc#1012628).
- can: ctucanfd: unmap BAR0 using base address (bsc#1012628).
- can: ctucanfd: handle bus error interrupts (bsc#1012628).
- can: ctucanfd: mark error-active controller status valid
(bsc#1012628).
- drm/dp: Read the PCON max FRL bandwidth only for HDMI DFPs
(bsc#1012628).
- drm/vc4: Supply the overflow slot size in BPOS, not the whole
bin BO size (bsc#1012628).
- drm/vc4: Zero the tile state data array before each BIN job
(bsc#1012628).
- drm/bridge: display-connector: Fix I2C adapter resource leak
(bsc#1012628).
- drm/panthor: reject firmware sections with oversized data
(bsc#1012628).
- drm/panthor: validate firmware interface structure sizes
(bsc#1012628).
- drm/mediatek: mtk_hdmi: Fix DDC adapter double put in v2
(bsc#1012628).
- drm/mediatek: ovl_adaptor: balance component registrations
(bsc#1012628).
- drm/amdgpu: move debug_vm handling to amdgpu_cs_parser_fini
(bsc#1012628).
- drm/amdgpu: restore UMD profile pstate after runtime resume
(bsc#1012628).
- drm/amdgpu: cap GTT size to physical RAM on APUs (bsc#1012628).
- drm/amd/pm: fix torn gpu metrics reads (bsc#1012628).
- drm/amd/pm: fix pptable use-after-free (bsc#1012628).
- drm/amd/pm: hide pp_table sysfs on APUs (bsc#1012628).
- drm/amd/pm: use milliwatts for GPU power sensors (bsc#1012628).
- drm/amd/display: check if dml21_add_phantom_plane() is
successful (bsc#1012628).
- drm/amd/display: Fix divide-by-zero in calculate_mcache_setting
on zero viewport (bsc#1012628).
- drm/amd/display: Increase HDMI AV mute wait from 2 to 3 frames
(bsc#1012628).
- drm/amd/display: Silence link_dpms I2C retimer failures
(bsc#1012628).
- drm/amdkfd: Fix missing authorization check in
KFD_IOC_DBG_TRAP_DISABLE (bsc#1012628).
- drm/amdkfd: fix QID bit leak in pqm_create_queue()
(bsc#1012628).
- drm/amdkfd: fix uint32_t overflow in EOP ring buffer size
alignment (bsc#1012628).
- drm/amdkfd: Handle invalid event type in CRIU event restore
(bsc#1012628).
- drm/amdkfd: hold event_mutex while checkpointing CRIU events
(bsc#1012628).
- drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size
(bsc#1012628).
- drm/vmwgfx: reject DX_BIND_QUERY without a DX context
(bsc#1012628).
- drm/vmwgfx: clamp dirty-page range with min, not max
(bsc#1012628).
- drm/vmwgfx: take fman->lock around fence list mutation in
fifo_down (bsc#1012628).
- drm/vmwgfx: drop dma_buf reference on foreign-fd prime import
(bsc#1012628).
- drm/vmwgfx: validate DRAW_PRIMITIVES header size before division
(bsc#1012628).
- drm/vmwgfx: bound DMA command body size against suffix pointer
(bsc#1012628).
- drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure
(bsc#1012628).
- drm/vmwgfx: enforce cursor size limits for MOB cursors
(bsc#1012628).
- drm/vmwgfx: use check_add_overflow for shader size+offset bound
(bsc#1012628).
- drm/vmwgfx: validate external BO copy bounds for both stride
paths (bsc#1012628).
- drm/xe/rtp: Maintain OA whitelists separately (bsc#1012628).
- drm/xe/rtp: Keep track of non-OA nonpriv slots (bsc#1012628).
- drm/xe/rtp: Generalize whitelist_apply_to_hwe (bsc#1012628).
- drm/xe/rtp: Save OA nonpriv registers to register save/restore
lists (bsc#1012628).
- drm/xe/rtp: Toggle 'deny' bit to (de-)whitelist OA regs
(bsc#1012628).
- drm/xe/rtp: (De-)whitelist OA registers for all hwe's for a gt
(bsc#1012628).
- drm/xe/oa: (De-)whitelist OA registers on OA stream open/release
(bsc#1012628).
- drm/xe/rtp: Ensure locking/ref counting for OA whitelists
(bsc#1012628).
- usb: typec: ucsi: split connector lock classes (bsc#1012628).
- usb: typec: ucsi: Fix race condition and ordering in port
unregistration (bsc#1012628).
- drm/xe: Drop unused param from xe_device_create() (bsc#1012628).
- drm/xe: Move xe->info.force_execlist initialization
(bsc#1012628).
- drm/xe: Move xe->info.devid|revid initialization (bsc#1012628).
- drm/xe: Separate early xe_device initialization (bsc#1012628).
- drm/xe: Set TTM device beneficial_order to 9 (2M) (bsc#1012628).
- drm/exec: Remove the index parameter from
drm_exec_for_each_locked_obj[_reverse] (bsc#1012628).
- drm/xe: Wait on external BO kernel fences in exec IOCTL
(bsc#1012628).
- media: chips-media: wave5: Support CBP profile (bsc#1012628).
- drm/amd/display: check GRPH_FLIP status before sending event
(bsc#1012628).
- drm/amd/display: Exit idle optimizations before programming
(bsc#1012628).
- usb: typec: ucsi: Correct teardown ordering in ucsi_init()
error path (bsc#1012628).
- Update config files.
- Rename to
patches.kernel.org/7.1.8-400-drm-amd-display-use-proper-context-for-logging.patch.
- commit 314b1cb
* Sat Aug 08 2026 jslaby@suse.cz
- ipvs: return the csum validation for forward hook (git-fixes).
- commit 7d2ce4d
* Fri Aug 07 2026 jslaby@suse.cz
- x86/mm: Fix and document DEBUG_PAGEALLOC (bsc#1271202).
- Refresh
patches.suse/x86-mm-pat-acquire-init_mm-read-lock-on-attribute-change-t.patch.
- Refresh
patches.suse/x86-mm-pat-acquire-init_mm-write-lock-on-collapse-to-avoid.patch.
- Refresh
patches.suse/x86-mm-pat-allocate-split-page-tables-as-kernel-page-table.patch.
- Delete
patches.suse/x86-mm-pat-introcude-cpa_lock-and-cpa_unlock.patch.
Replace:
x86-mm-pat-introcude-cpa_lock-and-cpa_unlock.patch
by the solution from upstream (tip):
x86-mm-Fix-and-document-DEBUG_PAGEALLOC.patch.
And fix up the context in the others.
- commit a5cdd68
* Fri Aug 07 2026 jslaby@suse.cz
- Refresh
patches.suse/x86-mm-pat-Don-t-gate-cpa_lock-on-debug_pagealloc_enabled.patch.
- Refresh
patches.suse/x86-mm-pat-Take-cpa_lock-around-large-page-collapse.patch.
Update upstream status.
- commit 67505b5
* Thu Aug 06 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.1.2-002-fuse-re-lock-request-before-replacing-page-cach.patch
(bsc#1012628 CVE-2026-53388 bsc#1271825).
- Update
patches.kernel.org/7.1.2-005-iio-light-veml6075-add-bounds-check-to-veml6075.patch
(bsc#1012628 CVE-2026-53387 bsc#1271835).
- Update
patches.kernel.org/7.1.2-006-iio-adc-ti-ads1298-add-bounds-check-to-pga_sett.patch
(bsc#1012628 CVE-2026-53386 bsc#1271820).
- Update
patches.kernel.org/7.1.2-007-crypto-qat-remove-unused-character-device-and-I.patch
(bsc#1012628 CVE-2026-64529).
- Update
patches.kernel.org/7.1.2-008-vc_screen-fix-null-ptr-deref-in-vcs_notifier-du.patch
(bsc#1012628 CVE-2026-53385 bsc#1271834).
- Update
patches.kernel.org/7.1.2-010-serial-8250_dw-unregister-8250-port-if-clk_noti.patch
(bsc#1012628 CVE-2026-53384 bsc#1271817).
- Update
patches.kernel.org/7.1.2-011-drivers-base-memory-set-mem-altmap-after-succes.patch
(bsc#1012628 CVE-2026-64244 bsc#1273812).
- Update
patches.kernel.org/7.1.2-012-ksmbd-reject-non-VALID-session-in-compound-requ.patch
(bsc#1012628 CVE-2026-53383 bsc#1271719).
- Update
patches.kernel.org/7.1.2-013-media-vidtv-fix-NULL-pointer-dereference-in-vid.patch
(bsc#1012628 CVE-2026-53382 bsc#1271717).
- Update
patches.kernel.org/7.1.2-014-virtiofs-fix-UAF-on-submount-umount.patch
(bsc#1012628 CVE-2026-53381 bsc#1271830).
- Update
patches.kernel.org/7.1.3-006-batman-adv-tp_meter-avoid-divide-by-zero-for-de.patch
(bsc#1012628 CVE-2026-63836 bsc#1272246).
- Update
patches.kernel.org/7.1.3-018-batman-adv-v-prevent-OGM-aggregation-on-disable.patch
(bsc#1012628 CVE-2026-63835 bsc#1272244).
- Update
patches.kernel.org/7.1.3-019-batman-adv-tp_meter-restrict-number-of-unacked-.patch
(bsc#1012628 CVE-2026-63834 bsc#1272239).
- Update
patches.kernel.org/7.1.3-030-ntfs3-reject-direct-userspace-writes-to-reserve.patch
(bsc#1012628 CVE-2026-63833 bsc#1272177).
- Update
patches.kernel.org/7.1.3-031-wifi-mt76-add-wcid-publish-check-in-mt76_sta_ad.patch
(bsc#1012628 CVE-2026-63832 bsc#1272186).
- Update
patches.kernel.org/7.1.3-032-mac802154-llsec-add-skb_cow_data-before-in-plac.patch
(bsc#1012628 CVE-2026-63831 bsc#1272184).
- Update
patches.kernel.org/7.1.3-033-net-skmsg-preserve-sg.copy-across-SG-transforms.patch
(bsc#1012628 CVE-2026-63830 bsc#1272178).
- Update
patches.kernel.org/7.1.3-034-net-ip_gre-require-CAP_NET_ADMIN-in-the-device-.patch
(bsc#1012628 CVE-2026-63829 bsc#1272176).
- Update
patches.kernel.org/7.1.3-036-apparmor-mediate-the-implicit-connect-of-TCP-fa.patch
(bsc#1012628 CVE-2026-63828 bsc#1272175).
- Update
patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch
(bko#221513 bsc#1012628 CVE-2026-63827 bsc#1272179).
- Update
patches.kernel.org/7.1.3-038-NTB-epf-Avoid-pci_iounmap-with-offset-when-PEER.patch
(bsc#1012628 CVE-2026-64254 bsc#1273736).
- Update
patches.kernel.org/7.1.3-039-fbdev-fix-use-after-free-in-store_modes.patch
(bsc#1012628 CVE-2026-63826 bsc#1272183).
- Update
patches.kernel.org/7.1.3-041-kernel-fork-clear-PF_BLOCK_TS-in-copy_process.patch
(bsc#1012628 CVE-2026-64253 bsc#1273904).
- Update
patches.kernel.org/7.1.3-045-gcov-use-atomic-counter-updates-to-fix-concurre.patch
(bsc#1012628 CVE-2026-63825 bsc#1272181).
- Update
patches.kernel.org/7.1.3-046-KEYS-fix-overflow-in-keyctl_pkey_params_get_2.patch
(bsc#1012628 CVE-2026-63824 bsc#1272180).
- Update
patches.kernel.org/7.1.3-047-keys-Pin-request_key_auth-payload-in-instantiat.patch
(bsc#1012628 CVE-2026-63823 bsc#1272182).
- Update
patches.kernel.org/7.1.3-052-wifi-ath11k-fix-warning-when-unbinding.patch
(bsc#1012628 CVE-2026-63822 bsc#1272187).
- Update
patches.kernel.org/7.1.3-056-wifi-rtw88-usb-fix-memory-leaks-on-USB-write-fa.patch
(bsc#1012628 CVE-2026-63821 bsc#1271967).
- Update
patches.kernel.org/7.1.3-059-wifi-iwlwifi-mld-validate-sta_mask-before-ffs-i.patch
(bsc#1012628 CVE-2026-64255 bsc#1273821).
- Update
patches.kernel.org/7.1.3-060-f2fs-fix-missing-read-bio-submission-on-large-f.patch
(bsc#1012628 CVE-2026-63820 bsc#1271966).
- Update
patches.kernel.org/7.1.3-063-f2fs-fix-to-do-sanity-check-on-f2fs_get_node_fo.patch
(bsc#1012628 CVE-2026-63819 bsc#1271962).
- Update
patches.kernel.org/7.1.3-064-f2fs-validate-orphan-inode-entry-count.patch
(bsc#1012628 CVE-2026-63818 bsc#1271958).
- Update
patches.kernel.org/7.1.3-065-f2fs-validate-compress-cache-inode-only-when-en.patch
(bsc#1012628 CVE-2026-63817 bsc#1271954).
- Update
patches.kernel.org/7.1.3-066-f2fs-atomic-fix-UAF-issue-on-f2fs_inode_info.at.patch
(bsc#1012628 CVE-2026-63816 bsc#1272309).
- Update
patches.kernel.org/7.1.3-068-f2fs-bound-i_inline_xattr_size-for-non-inline-x.patch
(bsc#1012628 CVE-2026-63815 bsc#1272308).
- Update
patches.kernel.org/7.1.3-069-f2fs-validate-ACL-entry-sizes-in-f2fs_acl_from_.patch
(bsc#1012628 CVE-2026-63814 bsc#1272285).
- Update
patches.kernel.org/7.1.3-070-Revert-f2fs-remove-non-uptodate-folio-from-the-.patch
(bsc#1012628 CVE-2026-63813 bsc#1272174).
- Update
patches.kernel.org/7.1.3-071-f2fs-fix-incorrect-FI_NO_EXTENT-handling-in-__d.patch
(bsc#1012628 CVE-2026-63812 bsc#1272185).
- Update
patches.kernel.org/7.1.3-073-f2fs-read-COW-data-with-the-original-inode-duri.patch
(bsc#1012628 CVE-2026-63811 bsc#1272173).
- Update
patches.kernel.org/7.1.3-074-block-Avoid-mounting-the-bdev-pseudo-filesystem.patch
(bsc#1012628 CVE-2026-63810 bsc#1272297).
- Update
patches.kernel.org/7.1.3-075-bpf-use-kvfree-for-replaced-sysctl-write-buffer.patch
(bsc#1012628 CVE-2026-63809 bsc#1272296).
- Update
patches.kernel.org/7.1.3-076-MIPS-DEC-Prevent-initial-console-buffer-from-la.patch
(bsc#1012628 CVE-2026-64252 bsc#1273932).
- Update
patches.kernel.org/7.1.3-077-exfat-fix-potential-use-after-free-in-exfat_fin.patch
(bsc#1012628 CVE-2026-63808 bsc#1272260).
- Update
patches.kernel.org/7.1.3-078-KVM-x86-mmu-Ensure-hugepage-is-in-by-slot-befor.patch
(bsc#1012628 CVE-2026-63807 bsc#1272263).
- Update
patches.kernel.org/7.1.3-079-KVM-Replace-guest-triggerable-BUG_ON-in-ioevent.patch
(bsc#1012628 CVE-2026-63806 bsc#1272268).
- Update
patches.kernel.org/7.1.3-080-crypto-nx-fix-nx_crypto_ctx_exit-argument.patch
(bsc#1012628 CVE-2026-63805 bsc#1272288).
- Update
patches.kernel.org/7.1.3-081-gfs2-fix-use-after-free-in-gfs2_qd_dealloc.patch
(bsc#1012628 CVE-2026-63804 bsc#1272287).
- Update
patches.kernel.org/7.1.3-082-pwrseq-core-fix-use-after-free-in-pwrseq_debugf.patch
(bsc#1012628 CVE-2026-64251 bsc#1273777).
- Update
patches.kernel.org/7.1.3-083-hdlc_ppp-sync-per-proto-timers-before-freeing-h.patch
(bsc#1012628 CVE-2026-63803 bsc#1272284).
- Update
patches.kernel.org/7.1.3-084-blk-cgroup-fix-UAF-in-__blkcg_rstat_flush.patch
(bsc#1012628 CVE-2026-63802 bsc#1272282).
- Update
patches.kernel.org/7.1.3-085-tipc-fix-slab-use-after-free-Read-in-tipc_aead_.patch
(bsc#1012628 CVE-2026-63801 bsc#1272230).
- Update
patches.kernel.org/7.1.3-086-LoongArch-Report-dying-CPU-to-RCU-in-stop_this_.patch
(bsc#1012628 CVE-2026-64250 bsc#1273815).
- Update
patches.kernel.org/7.1.3-087-pNFS-Fix-use-after-free-in-pnfs_update_layout.patch
(bsc#1012628 CVE-2026-63800 bsc#1272270).
- Update
patches.kernel.org/7.1.3-088-sched-mmcid-Fix-OOB-clear_bit-when-CID-is-MM_CI.patch
(bsc#1012628 CVE-2026-63799 bsc#1272141).
- Update
patches.kernel.org/7.1.3-089-irqchip-imgpdc-Fix-resource-leak-add-missing-ch.patch
(bsc#1012628 CVE-2026-63798 bsc#1271802).
- Update
patches.kernel.org/7.1.3-090-fpga-region-fix-use-after-free-in-child_regions.patch
(bsc#1012628 CVE-2026-64249 bsc#1273810).
- Update
patches.kernel.org/7.1.3-091-rpmsg-char-Fix-use-after-free-on-probe-error-pa.patch
(bsc#1012628 CVE-2026-63797 bsc#1272138).
- Update
patches.kernel.org/7.1.3-092-ocfs2-reject-oversized-group-bitmap-descriptors.patch
(bsc#1012628 CVE-2026-63796 bsc#1273191).
- Update
patches.kernel.org/7.1.3-093-9p-avoid-putting-oldfid-in-p9_client_walk-error.patch
(bsc#1012628 CVE-2026-63795 bsc#1271955).
- Update
patches.kernel.org/7.1.3-094-MIPS-smp-report-dying-CPU-to-RCU-in-stop_this_c.patch
(bsc#1012628 CVE-2026-64248 bsc#1273820).
- Update
patches.kernel.org/7.1.3-095-KVM-x86-hyper-v-Bound-the-bank-index-when-query.patch
(bsc#1012628 CVE-2026-64247 bsc#1273903).
- Update
patches.kernel.org/7.1.3-096-KVM-SVM-Fix-page-overflow-in-sev_dbg_crypt-for-.patch
(bsc#1012628 CVE-2026-63794 bsc#1271964).
- Update
patches.kernel.org/7.1.3-097-power-reset-linkstation-poweroff-fix-use-after-.patch
(bsc#1012628 CVE-2026-64246 bsc#1273945).
- Update
patches.kernel.org/7.1.3-100-ntfs-serialize-volume-label-accesses.patch
(bsc#1012628 CVE-2026-63793 bsc#1271953).
- Update
patches.kernel.org/7.1.3-101-fbdev-Fix-fb_new_modelist-to-prevent-null-ptr-d.patch
(bsc#1012628 CVE-2026-53403 bsc#1271731).
- Update
patches.kernel.org/7.1.3-102-fbdev-fbcon-fix-out-of-bounds-read-in-err_out-o.patch
(bsc#1012628 CVE-2026-53402 bsc#1271908).
- Update
patches.kernel.org/7.1.3-103-fbdev-omap2-fix-use-after-free-in-omapfb_mmap.patch
(bsc#1012628 CVE-2026-53401 bsc#1271828).
- Update
patches.kernel.org/7.1.3-104-fbdev-modedb-fix-a-possible-UAF-in-fb_find_mode.patch
(bsc#1012628 CVE-2026-64245 bsc#1273905).
- Update
patches.kernel.org/7.1.3-106-i2c-core-fix-adapter-registration-race.patch
(bsc#1012628 CVE-2026-53400 bsc#1271906).
- Update
patches.kernel.org/7.1.3-107-nfsd-release-layout-stid-on-setlease-failure.patch
(bsc#1012628 CVE-2026-53399 bsc#1271832).
- Update
patches.kernel.org/7.1.3-108-NFSD-Fix-SECINFO_NO_NAME-decode-error-cleanup.patch
(bsc#1012628 CVE-2026-53398 bsc#1271870).
- Update
patches.kernel.org/7.1.3-109-nfsd-fix-posix_acl-leak-on-SETACL-decode-failur.patch
(bsc#1012628 CVE-2026-53397 bsc#1271869).
- Update
patches.kernel.org/7.1.3-111-nfsd-fix-posix_acl-leak-and-ignored-error-in-nf.patch
(bsc#1012628 CVE-2026-53396 bsc#1271829).
- Update
patches.kernel.org/7.1.3-113-nfsd-fix-dead-ACL-conflict-guard-in-nfsd4_creat.patch
(bsc#1012628 CVE-2026-53395 bsc#1271865).
- Update
patches.kernel.org/7.1.3-114-nfsd-avoid-leaking-pre-allocated-openowner-on-u.patch
(bsc#1012628 CVE-2026-53394 bsc#1271859).
- Update
patches.kernel.org/7.1.3-115-nfsd-reset-write-verifier-on-deferred-writeback.patch
(bsc#1012628 CVE-2026-53393 bsc#1271858).
- Update
patches.kernel.org/7.1.3-116-NFSv4-flexfiles-reject-zero-filehandle-version-.patch
(bsc#1012628 CVE-2026-53392 bsc#1271826).
- Update
patches.kernel.org/7.1.3-117-NFSv4-pNFS-reject-zero-length-r_addr-in-nfs4_de.patch
(bsc#1012628 CVE-2026-53391 bsc#1271904).
- Update
patches.kernel.org/7.1.3-120-ksmbd-fix-out-of-bounds-read-in-smb_check_perm_.patch
(bsc#1012628 CVE-2026-53390 bsc#1271871).
- Update
patches.kernel.org/7.1.3-121-net-tcp-ao-fix-use-after-free-of-key-in-del_asy.patch
(bsc#1012628 CVE-2026-53389 bsc#1271863).
- Update
patches.kernel.org/7.1.4-003-userfaultfd-gate-must_wait-writability-check-on.patch
(bsc#1012628 CVE-2026-64514 bsc#1274044).
- Update
patches.kernel.org/7.1.4-004-net-sched-dualpi2-fix-GSO-backlog-accounting.patch
(bsc#1012628 CVE-2026-64207 bsc#1272216).
- Update
patches.kernel.org/7.1.4-009-KVM-VMX-Grab-vmcs12-on-CR8-interception-update-.patch
(bsc#1012628 CVE-2026-64604).
- Update
patches.kernel.org/7.1.4-010-KVM-x86-Unconditionally-recompute-CR8-intercept.patch
(bsc#1012628 CVE-2026-64513 bsc#1273327).
- Update
patches.kernel.org/7.1.4-011-ACPI-CPPC-Suppress-UBSAN-warning-caused-by-fiel.patch
(bsc#1012628 CVE-2026-64512 bsc#1273597).
- Update
patches.kernel.org/7.1.4-012-ACPI-NFIT-core-Fix-possible-NULL-pointer-derefe.patch
(bsc#1012628 CVE-2026-64511 bsc#1273796).
- Update
patches.kernel.org/7.1.4-013-ACPI-NFIT-core-Fix-acpi_nfit_init-error-cleanup.patch
(bsc#1012628 CVE-2026-64510).
- Update
patches.kernel.org/7.1.4-014-platform-x86-intel-hid-Protect-ACPI-notify-hand.patch
(bsc#1012628 CVE-2026-64603).
- Update
patches.kernel.org/7.1.4-019-rust-block-fix-GenDisk-cleanup-paths.patch
(bsc#1012628 CVE-2026-64509).
- Update
patches.kernel.org/7.1.4-023-perf-core-Detach-event-groups-during-remove_on_.patch
(bsc#1012628 CVE-2026-64556 bsc#1273251).
- Update
patches.kernel.org/7.1.4-024-bpf-Support-for-hardening-against-JIT-spraying.patch
(bsc#1012628 CVE-2026-64508 bsc#1273292).
- Update
patches.kernel.org/7.1.4-025-x86-bugs-Enable-IBPB-flush-on-BPF-JIT-allocatio.patch
(bsc#1012628 CVE-2026-64507 bsc#1273999).
- Update
patches.kernel.org/7.1.4-030-wifi-rtw89-correct-drop-logic-for-malformed-AMP.patch
(bsc#1012628 bsc#1271359 CVE-2026-64506).
- Update
patches.kernel.org/7.1.4-032-usb-gadget-function-rndis-add-length-check-for-.patch
(bsc#1012628 CVE-2026-64505 bsc#1273443).
- Update
patches.kernel.org/7.1.4-033-iio-accel-bmc150-clamp-the-device-reported-FIFO.patch
(bsc#1012628 CVE-2026-64504 bsc#1273988).
- Update
patches.kernel.org/7.1.4-034-iio-accel-kxsd9-fix-runtime-PM-imbalance-on-wri.patch
(bsc#1012628 CVE-2026-64503 bsc#1273596).
- Update
patches.kernel.org/7.1.4-039-iio-adc-ad_sigma_delta-fix-clear_pending_event-.patch
(bsc#1012628 CVE-2026-64502).
- Update
patches.kernel.org/7.1.4-040-iio-adc-ad_sigma_delta-fix-CS-held-asserted-and.patch
(bsc#1012628 CVE-2026-64501 bsc#1273795).
- Update
patches.kernel.org/7.1.4-041-iio-adc-lpc32xx-Initialize-completion-before-re.patch
(bsc#1012628 CVE-2026-64500 bsc#1273533).
- Update
patches.kernel.org/7.1.4-043-iio-adc-spear-Initialize-completion-before-requ.patch
(bsc#1012628 CVE-2026-64602).
- Update
patches.kernel.org/7.1.4-044-iio-adc-ti-ads1119-fix-PM-reference-leak-in-buf.patch
(bsc#1012628 CVE-2026-64499 bsc#1273866).
- Update
patches.kernel.org/7.1.4-047-iio-buffer-hw-consumer-free-scan_mask-on-buffer.patch
(bsc#1012628 CVE-2026-64498 bsc#1273794).
- Update
patches.kernel.org/7.1.4-048-iio-chemical-scd30-Cleanup-initializations-and-.patch
(bsc#1012628 CVE-2026-64497 bsc#1273536).
- Update
patches.kernel.org/7.1.4-052-iio-event-Fix-event-FIFO-reset-race.patch
(bsc#1012628 CVE-2026-64496 bsc#1273600).
- Update
patches.kernel.org/7.1.4-053-iio-gyro-bmg160-bail-out-when-bandwidth-filter-.patch
(bsc#1012628 CVE-2026-64495 bsc#1273972).
- Update
patches.kernel.org/7.1.4-066-iio-light-gp2ap002-fix-runtime-PM-leak-on-read-.patch
(bsc#1012628 CVE-2026-64494 bsc#1273602).
- Update
patches.kernel.org/7.1.4-072-iio-pressure-mpl115-fix-runtime-PM-leak-on-read.patch
(bsc#1012628 CVE-2026-64493 bsc#1273272).
- Update
patches.kernel.org/7.1.4-078-iio-temperature-tmp006-use-devm_iio_trigger_reg.patch
(bsc#1012628 CVE-2026-64492 bsc#1274047).
- Update
patches.kernel.org/7.1.4-079-ALSA-usx2y-us144mkii-fix-work-UAF-on-disconnect.patch
(bsc#1012628 CVE-2026-64491 bsc#1273295).
- Update
patches.kernel.org/7.1.4-081-ALSA-virtio-Validate-control-metadata-from-the-.patch
(bsc#1012628 CVE-2026-64490).
- Update
patches.kernel.org/7.1.4-082-ALSA-ymfpci-check-snd_ctl_new1-return-value.patch
(bsc#1012628 CVE-2026-64489).
- Update
patches.kernel.org/7.1.4-083-ALSA-aoa-check-snd_ctl_new1-return-value.patch
(bsc#1012628 CVE-2026-64488).
- Update
patches.kernel.org/7.1.4-084-ALSA-caiaq-fix-out-of-bounds-read-in-the-Trakto.patch
(bsc#1012628 CVE-2026-64487 bsc#1273506).
- Update
patches.kernel.org/7.1.4-085-ALSA-cmipci-check-snd_ctl_new1-return-value.patch
(bsc#1012628 CVE-2026-64486).
- Update
patches.kernel.org/7.1.4-086-ALSA-compress-Fix-task-creation-error-unwind.patch
(bsc#1012628 CVE-2026-64485 bsc#1273792).
- Update
patches.kernel.org/7.1.4-087-ALSA-es1938-check-snd_ctl_new1-return-value.patch
(bsc#1012628 CVE-2026-64484).
- Update
patches.kernel.org/7.1.4-089-ALSA-firewire-isight-bound-the-sample-count-to-.patch
(bsc#1012628 CVE-2026-64483 bsc#1273991).
- Update
patches.kernel.org/7.1.4-090-ALSA-gus-check-snd_ctl_new1-return-value.patch
(bsc#1012628 CVE-2026-64482 bsc#1273790).
- Update
patches.kernel.org/7.1.4-091-ALSA-hda-cs35l41-Fix-firmware-load-work-teardow.patch
(bsc#1012628 CVE-2026-64481).
- Update
patches.kernel.org/7.1.4-095-ALSA-ice1712-check-snd_ctl_new1-return-value.patch
(bsc#1012628 CVE-2026-64480).
- Update
patches.kernel.org/7.1.4-096-ALSA-seq-Fix-uninitialised-heap-leak-in-snd_seq.patch
(bsc#1012628 CVE-2026-64479 bsc#1273890).
- Update
patches.kernel.org/7.1.4-097-ALSA-us144mkii-capture_urb_complete-redundant-u.patch
(bsc#1012628 CVE-2026-64601).
- Update
patches.kernel.org/7.1.4-099-ALSA-usb-audio-avoid-kobject-path-lookup-in-Dua.patch
(bsc#1012628 CVE-2026-64478).
- Update
patches.kernel.org/7.1.4-105-x86-fs-resctrl-Prevent-out-of-bounds-access-whi.patch
(bsc#1012628 CVE-2026-64477).
- Update
patches.kernel.org/7.1.4-107-vfio-pci-Latch-disable_idle_d3-per-device.patch
(bsc#1012628 CVE-2026-64476).
- Update
patches.kernel.org/7.1.4-108-vfio-pci-Release-the-VGA-arbiter-client-on-regi.patch
(bsc#1012628 CVE-2026-64475).
- Update
patches.kernel.org/7.1.4-110-vfio-prevent-infinite-loop-in-vfio_mig_get_next.patch
(bsc#1012628 CVE-2026-64474).
- Update
patches.kernel.org/7.1.4-111-vfio-Remove-device-debugfs-before-releasing-dev.patch
(bsc#1012628 CVE-2026-64473 bsc#1273320).
- Update
patches.kernel.org/7.1.4-112-vfio-mlx5-Fix-racy-bitfields-and-tighten-struct.patch
(bsc#1012628 CVE-2026-64472 bsc#1274075).
- Update
patches.kernel.org/7.1.4-114-Bluetooth-btusb-fix-use-after-free-on-registrat.patch
(bsc#1012628 CVE-2026-64471).
- Update
patches.kernel.org/7.1.4-115-Bluetooth-btusb-fix-use-after-free-on-marvell-p.patch
(bsc#1012628 CVE-2026-64470 bsc#1273892).
- Update
patches.kernel.org/7.1.4-117-binder-fix-UAF-in-binder_thread_release.patch
(bsc#1012628 CVE-2026-64469 bsc#1273279).
- Update
patches.kernel.org/7.1.4-118-binder-fix-UAF-in-binder_free_transaction.patch
(bsc#1012628 CVE-2026-64468 bsc#1273532).
- Update
patches.kernel.org/7.1.4-119-rust_binder-use-a-u64-stride-when-cleaning-up-t.patch
(bsc#1012628 CVE-2026-64467 bsc#1273576).
- Update
patches.kernel.org/7.1.4-123-rust_binder-clear-freeze-listener-on-node-remov.patch
(bsc#1012628 CVE-2026-64466).
- Update
patches.kernel.org/7.1.4-124-usb-xhci-Fix-sleep-in-atomic-context-in-xhci_fr.patch
(bsc#1012628 CVE-2026-64465 bsc#1272843).
- Update
patches.kernel.org/7.1.4-125-xhci-sideband-fix-ring-sg-table-pages-leak.patch
(bsc#1012628 CVE-2026-64464 bsc#1273854).
- Update
patches.kernel.org/7.1.4-126-usb-typec-tcpci_rt1711h-unregister-TCPCI-port-w.patch
(bsc#1012628 CVE-2026-64463 bsc#1273273).
- Update
patches.kernel.org/7.1.4-130-PCI-altera-Fix-resource-leaks-on-probe-failure.patch
(bsc#1012628 CVE-2026-64462 bsc#1273843).
- Update
patches.kernel.org/7.1.4-136-PCI-mediatek-Fix-IRQ-domain-leak-when-port-fail.patch
(bsc#1012628 CVE-2026-64461 bsc#1273865).
- Update
patches.kernel.org/7.1.4-139-PCI-IOV-Skip-VF-Resizable-BAR-restore-on-read-e.patch
(bsc#1012628 CVE-2026-64460 bsc#1273448).
- Update
patches.kernel.org/7.1.4-140-tcp-restore-RCU-grace-period-in-tcp_ao_destroy_.patch
(bsc#1012628 CVE-2026-64459 bsc#1273531).
- Update
patches.kernel.org/7.1.4-141-mm-damon-ops-common-handle-extreme-intervals-in.patch
(bsc#1012628 CVE-2026-64458 bsc#1273788).
- Update
patches.kernel.org/7.1.4-142-netfilter-ipset-fix-race-between-dump-and-ip_se.patch
(bsc#1012628 CVE-2026-64189 bsc#1272207).
- Update
patches.kernel.org/7.1.4-143-virtio_pci-fix-vq-info-pointer-lookup-via-wrong.patch
(bsc#1012628 CVE-2026-64457 bsc#1273491).
- Update
patches.kernel.org/7.1.4-145-hwrng-virtio-clamp-device-reported-used.len-at-.patch
(bsc#1012628 CVE-2026-64456 bsc#1273288).
- Update
patches.kernel.org/7.1.4-146-USB-chaoskey-Fix-slab-use-after-free-in-chaoske.patch
(bsc#1012628 CVE-2026-64455 bsc#1273844).
- Update
patches.kernel.org/7.1.4-147-usb-dwc3-run-gadget-disconnect-from-sleepable-s.patch
(bsc#1012628 CVE-2026-64454 bsc#1273503).
- Update
patches.kernel.org/7.1.4-148-usb-misc-usbio-fix-disconnect-UAF-in-client-tea.patch
(bsc#1012628 CVE-2026-64453 bsc#1273534).
- Update
patches.kernel.org/7.1.4-149-6lowpan-fix-NHC-entry-use-after-free-on-error-p.patch
(bsc#1012628 CVE-2026-64452 bsc#1273460).
- Update
patches.kernel.org/7.1.4-150-tracing-Fix-NULL-pointer-dereference-in-func_se.patch
(bsc#1012628 CVE-2026-64451 bsc#1273818).
- Update
patches.kernel.org/7.1.4-151-tipc-fix-out-of-bounds-read-in-broadcast-Gap-AC.patch
(bsc#1012628 CVE-2026-64450 bsc#1273523).
- Update
patches.kernel.org/7.1.4-152-staging-vme_user-bound-slave-read-write-to-the-.patch
(bsc#1012628 CVE-2026-64449).
- Update
patches.kernel.org/7.1.4-153-smb-client-restrict-implied-bcc-0-exemption-to-.patch
(bsc#1012628 CVE-2026-64448 bsc#1273982).
- Update
patches.kernel.org/7.1.4-158-staging-media-ipu7-fix-double-free-and-use-afte.patch
(bsc#1012628 CVE-2026-64447 bsc#1273540).
- Update
patches.kernel.org/7.1.4-160-staging-rtl8723bs-fix-heap-buffer-overflow-in-r.patch
(bsc#1012628 CVE-2026-64446 bsc#1273314).
- Update
patches.kernel.org/7.1.4-161-staging-rtl8723bs-fix-WEP-length-underflow-and-.patch
(bsc#1012628 CVE-2026-64445).
- Update
patches.kernel.org/7.1.4-162-staging-rtl8723bs-fix-OOB-read-in-OnAssocRsp-IE.patch
(bsc#1012628 CVE-2026-64444).
- Update
patches.kernel.org/7.1.4-163-staging-rtl8723bs-fix-OOB-read-in-update_beacon.patch
(bsc#1012628 CVE-2026-64443 bsc#1273249).
- Update
patches.kernel.org/7.1.4-164-staging-rtl8723bs-fix-OOB-reads-in-IE-loops-in-.patch
(bsc#1012628 CVE-2026-64442 bsc#1273849).
- Update
patches.kernel.org/7.1.4-165-staging-rtl8723bs-fix-OOB-reads-in-is_ap_in_tki.patch
(bsc#1012628 CVE-2026-64536 bsc#1273346).
- Update
patches.kernel.org/7.1.4-166-staging-rtl8723bs-fix-OOB-reads-in-rtw_get_sec_.patch
(bsc#1012628 CVE-2026-64441).
- Update
patches.kernel.org/7.1.4-167-staging-rtl8723bs-fix-OOB-write-in-HT_caps_hand.patch
(bsc#1012628 CVE-2026-64440).
- Update
patches.kernel.org/7.1.4-168-crypto-amlogic-avoid-double-cleanup-in-meson_cr.patch
(bsc#1012628 CVE-2026-64599).
- Update
patches.kernel.org/7.1.4-169-crypto-krb5-filter-out-async-aead-implementatio.patch
(bsc#1012628 CVE-2026-64439 bsc#1273541).
- Update
patches.kernel.org/7.1.4-170-crypto-qat-fix-VF2PF-work-teardown-race-in-adf_.patch
(bsc#1012628 CVE-2026-64438 bsc#1273496).
- Update
patches.kernel.org/7.1.4-171-ksmbd-fix-use-after-free-of-a-deferred-file_loc.patch
(bsc#1012628 CVE-2026-64437).
- Update
patches.kernel.org/7.1.4-172-net-af_key-initialize-alg_key_len-for-IPComp-st.patch
(bsc#1012628 CVE-2026-64436).
- Update
patches.kernel.org/7.1.4-173-audit-Fix-data-races-of-skb_queue_len-readers-o.patch
(bsc#1012628 CVE-2026-64435 bsc#1274080).
- Update
patches.kernel.org/7.1.4-174-Bluetooth-L2CAP-Fix-UAF-in-channel-timeout-by-h.patch
(bsc#1012628 CVE-2026-64434 bsc#1273880).
- Update
patches.kernel.org/7.1.4-175-Bluetooth-MGMT-Fix-UAF-of-hci_conn_params-in-ad.patch
(bsc#1012628 CVE-2026-64433).
- Update
patches.kernel.org/7.1.4-178-fs-ntfs3-validate-Dirty-Page-Table-capacity-in-.patch
(bsc#1012628 CVE-2026-64432).
- Update
patches.kernel.org/7.1.4-179-ntfs-avoid-calling-post_write_mst_fixup-for-inv.patch
(bsc#1012628 CVE-2026-64431).
- Update
patches.kernel.org/7.1.4-180-NTB-epf-Avoid-calling-pci_irq_vector-from-hardi.patch
(bsc#1012628 CVE-2026-64430).
- Update
patches.kernel.org/7.1.4-181-gpio-eic-sprd-use-raw_spinlock_t-in-the-irq-sta.patch
(bsc#1012628 CVE-2026-64429 bsc#1273501).
- Update
patches.kernel.org/7.1.4-182-gpio-sch-use-raw_spinlock_t-in-the-irq-startup-.patch
(bsc#1012628 CVE-2026-64428 bsc#1274039).
- Update
patches.kernel.org/7.1.4-183-HID-logitech-dj-Fix-maxfield-check-in-DJ-short-.patch
(bsc#1012628 CVE-2026-64427 bsc#1273281).
- Update
patches.kernel.org/7.1.4-184-io_uring-nop-fix-file-reference-leak-with-IOSQE.patch
(bsc#1012628 https://github.com/axboe/liburing/issues/1611
CVE-2026-64426 bsc#1273893).
- Update
patches.kernel.org/7.1.4-185-io_uring-io-wq-re-check-IO_WQ_BIT_EXIT-for-each.patch
(bsc#1012628 CVE-2026-64425 bsc#1273522).
- Update
patches.kernel.org/7.1.4-187-netpoll-fix-a-use-after-free-on-shutdown-path.patch
(bsc#1012628 CVE-2026-64424).
- Update
patches.kernel.org/7.1.4-188-ipv4-igmp-remove-multicast-group-from-hash-tabl.patch
(bsc#1012628 CVE-2026-64423).
- Update
patches.kernel.org/7.1.4-189-net-ipv4-bound-TCP-reordering-sysctl-writes-and.patch
(bsc#1012628 CVE-2026-64422 bsc#1273290).
- Update
patches.kernel.org/7.1.4-190-media-nxp-imx8-isi-Fix-use-after-free-on-remove.patch
(bsc#1012628 CVE-2026-64421 bsc#1273582).
- Update
patches.kernel.org/7.1.4-191-mfd-cros_ec-Delay-dev_set_drvdata-until-probe-s.patch
(bsc#1012628 CVE-2026-64420 bsc#1273260).
- Update
patches.kernel.org/7.1.4-192-mm-shrinker-do-not-hold-RCU-lock-in-shrinker_de.patch
(bsc#1012628 CVE-2026-64419 bsc#1274084).
- Update
patches.kernel.org/7.1.4-193-mm-shrinker-fix-shrinker_info-teardown-race-wit.patch
(bsc#1012628 CVE-2026-64418 bsc#1273784).
- Update
patches.kernel.org/7.1.4-194-mm-shrinker-fix-NULL-pointer-dereference-in-deb.patch
(bsc#1012628 CVE-2026-64417 bsc#1273510).
- Update
patches.kernel.org/7.1.4-195-mm-swap_cgroup-fix-NULL-deref-in-lookup_swap_cg.patch
(bsc#1012628 CVE-2026-64416 bsc#1273286).
- Update
patches.kernel.org/7.1.4-196-mm-swap-add-cond_resched-in-swap_reclaim_full_c.patch
(bsc#1012628 CVE-2026-64415 bsc#1273317).
- Update
patches.kernel.org/7.1.4-198-netfilter-handle-unreadable-frags.patch
(bsc#1012628 CVE-2026-64414 bsc#1273275).
- Update
patches.kernel.org/7.1.4-199-netfilter-ebtables-zero-chainstack-array.patch
(bsc#1012628 CVE-2026-64413 bsc#1274082).
- Update
patches.kernel.org/7.1.4-200-netfilter-ebtables-module-names-must-be-null-te.patch
(bsc#1012628 CVE-2026-64412 bsc#1273780).
- Update
patches.kernel.org/7.1.4-201-netfilter-ebtables-terminate-table-name-before-.patch
(bsc#1012628 CVE-2026-64411 bsc#1274077).
- Update
patches.kernel.org/7.1.4-203-netfilter-flowtable-IPIP-tunnel-hardware-offloa.patch
(bsc#1012628 CVE-2026-64410 bsc#1273519).
- Update
patches.kernel.org/7.1.4-204-Bluetooth-btmtksdio-fix-infinite-loop-in-btmtks.patch
(bsc#1012628 CVE-2026-64409 bsc#1273862).
- Update
patches.kernel.org/7.1.4-205-Bluetooth-bnep-pin-L2CAP-connection-during-netd.patch
(bsc#1012628 CVE-2026-64408 bsc#1273778).
- Update
patches.kernel.org/7.1.4-206-Bluetooth-btnxpuart-Fix-out-of-bounds-firmware-.patch
(bsc#1012628 CVE-2026-64407 bsc#1273277).
- Update
patches.kernel.org/7.1.4-207-Bluetooth-fix-UAF-in-bt_accept_dequeue.patch
(bsc#1012628 CVE-2026-64406 bsc#1273579).
- Update
patches.kernel.org/7.1.4-208-Bluetooth-hci_conn-Fix-null-ptr-deref-in-hci_ab.patch
(bsc#1012628 CVE-2026-64405 bsc#1273512).
- Update
patches.kernel.org/7.1.4-210-Bluetooth-ISO-avoid-NULL-deref-of-conn-in-iso_c.patch
(bsc#1012628 CVE-2026-64404 bsc#1273511).
- Update
patches.kernel.org/7.1.4-211-Bluetooth-L2CAP-cancel-pending_rx_work-before-t.patch
(bsc#1012628 CVE-2026-64206 bsc#1271058).
- Update
patches.kernel.org/7.1.4-212-Bluetooth-L2CAP-validate-option-length-before-r.patch
(bsc#1012628 CVE-2026-64403 bsc#1274076).
- Update
patches.kernel.org/7.1.4-213-coresight-ultrasoc-smb-Fix-OOB-write-in-smb_syn.patch
(bsc#1012628 CVE-2026-64402 bsc#1273258).
- Update
patches.kernel.org/7.1.4-214-smb-client-resolve-SWN-tcon-from-live-registrat.patch
(bsc#1012628 CVE-2026-64401 bsc#1273872).
- Update
patches.kernel.org/7.1.4-215-smb-client-Fix-error-code-in-smb2_aead_req_allo.patch
(bsc#1012628 CVE-2026-64598).
- Update
patches.kernel.org/7.1.4-216-ksmbd-prevent-path-traversal-bypass-by-restrict.patch
(bsc#1012628 CVE-2026-64400 bsc#1274002).
- Update
patches.kernel.org/7.1.4-217-ksmbd-add-permission-checks-for-FSCTL_DUPLICATE.patch
(bsc#1012628 CVE-2026-64399 bsc#1273455).
- Update
patches.kernel.org/7.1.4-218-ksmbd-add-a-permission-check-for-FSCTL_SET_ZERO.patch
(bsc#1012628 CVE-2026-64398 bsc#1273454).
- Update
patches.kernel.org/7.1.4-219-ksmbd-serialize-QUERY_DIRECTORY-requests-per-fi.patch
(bsc#1012628 CVE-2026-64397 bsc#1273457).
- Update
patches.kernel.org/7.1.4-220-ksmbd-fix-UAF-of-struct-file_lock-in-SMB2_LOCK-.patch
(bsc#1012628 CVE-2026-64396 bsc#1273847).
- Update
patches.kernel.org/7.1.4-221-ksmbd-require-source-read-access-for-duplicate-.patch
(bsc#1012628 CVE-2026-64395 bsc#1274073).
- Update
patches.kernel.org/7.1.4-222-ksmbd-add-a-WRITE_DAC-WRITE_OWNER-check-to-SMB2.patch
(bsc#1012628 CVE-2026-64394 bsc#1274018).
- Update
patches.kernel.org/7.1.4-223-ksmbd-run-set-info-with-opener-credentials.patch
(bsc#1012628 CVE-2026-64393 bsc#1273451).
- Update
patches.kernel.org/7.1.4-226-ksmbd-use-opener-credentials-for-delete-on-clos.patch
(bsc#1012628 CVE-2026-64392 bsc#1273445).
- Update
patches.kernel.org/7.1.4-227-ksmbd-use-opener-credentials-for-ADS-I-O.patch
(bsc#1012628 CVE-2026-64391 bsc#1273307).
- Update
patches.kernel.org/7.1.4-228-ksmbd-track-the-connection-owning-a-byte-range-.patch
(bsc#1012628 CVE-2026-64390 bsc#1274043).
- Update
patches.kernel.org/7.1.4-229-ksmbd-validate-NTLMv2-response-before-updating-.patch
(bsc#1012628 CVE-2026-64389 bsc#1274070).
- Update
patches.kernel.org/7.1.4-230-smb-client-fix-chown-chgrp-with-SMB3-POSIX-Exte.patch
(bsc#1012628 CVE-2026-64388 bsc#1274061).
- Update
patches.kernel.org/7.1.4-231-smb-client-fix-query-directory-replay-double-fr.patch
(bsc#1012628 CVE-2026-64387 bsc#1273426).
- Update
patches.kernel.org/7.1.4-232-smb-client-fix-query_info-replay-double-free.patch
(bsc#1012628 CVE-2026-64386 bsc#1273426).
- Update
patches.kernel.org/7.1.4-233-smb-client-fix-double-free-in-SMB2_ioctl-replay.patch
(bsc#1012628 CVE-2026-64385 bsc#1273426).
- Update
patches.kernel.org/7.1.4-234-smb-client-fix-change-notify-replay-double-free.patch
(bsc#1012628 CVE-2026-64384 bsc#1273426).
- Update
patches.kernel.org/7.1.4-235-smb-client-fix-double-free-in-SMB2_flush-replay.patch
(bsc#1012628 CVE-2026-64383 bsc#1273426).
- Update
patches.kernel.org/7.1.4-236-smb-client-fix-double-free-in-SMB2_open-replay.patch
(bsc#1012628 CVE-2026-64382 bsc#1273291).
- Update
patches.kernel.org/7.1.4-237-smb-client-fix-double-free-in-SMB2_close-replay.patch
(bsc#1012628 CVE-2026-64597).
- Update
patches.kernel.org/7.1.4-238-smb-client-Fix-next-buffer-leak-in-receive_encr.patch
(bsc#1012628 CVE-2026-64381 bsc#1273860).
- Update
patches.kernel.org/7.1.4-240-smb-client-harden-POSIX-SID-length-parsing.patch
(bsc#1012628 CVE-2026-64380 bsc#1273557).
- Update
patches.kernel.org/7.1.4-242-smb-client-mask-server-provided-mode-to-07777-i.patch
(bsc#1012628 CVE-2026-64379 bsc#1273029).
- Update
patches.kernel.org/7.1.4-244-writeback-fix-race-between-cgroup_writeback_umo.patch
(bsc#1012628 CVE-2026-64378 bsc#1273603).
- Update
patches.kernel.org/7.1.4-246-cpufreq-qcom-cpufreq-hw-Fix-possible-double-fre.patch
(bsc#1012628 CVE-2026-64377 bsc#1273297).
- Update
patches.kernel.org/7.1.4-247-firmware_loader-fix-device-reference-leak-in-fi.patch
(bsc#1012628 CVE-2026-64376 bsc#1273817).
- Update
patches.kernel.org/7.1.4-248-libfs-set-SB_I_NOEXEC-and-SB_I_NODEV-by-default.patch
(bsc#1012628 CVE-2026-64596).
- Update
patches.kernel.org/7.1.4-249-proc-protect-ptrace_may_access-with-exec_update.patch
(bsc#1012628 CVE-2026-64375 bsc#1273868).
- Update
patches.kernel.org/7.1.4-252-sched-rt-Have-RT_PUSH_IPI-be-default-off-for-no.patch
(bsc#1012628 CVE-2026-64374 bsc#1273604).
- Update
patches.kernel.org/7.1.4-253-cpufreq-Fix-hotplug-suspend-race-during-reboot.patch
(bsc#1012628 CVE-2026-64373 bsc#1273776).
- Update
patches.kernel.org/7.1.4-254-cpufreq-pcc-fix-use-after-free-and-double-free-.patch
(bsc#1012628 CVE-2026-64372 bsc#1273889).
- Update
patches.kernel.org/7.1.4-255-proc-protect-ptrace_may_access-with-exec_update.patch
(bsc#1012628 CVE-2026-64371 bsc#1273973).
- Update
patches.kernel.org/7.1.4-256-posix-cpu-timers-Fix-pid-refcount-leak-in-do_cp.patch
(bsc#1012628 CVE-2026-64370 bsc#1273805).
- Update
patches.kernel.org/7.1.4-259-s390-Revert-support-for-DCACHE_WORD_ACCESS.patch
(bsc#1012628 CVE-2026-64369 bsc#1273841).
- Update
patches.kernel.org/7.1.4-262-mm-slab-do-not-limit-zeroing-to-orig_size-when-.patch
(bsc#1012628 CVE-2026-64368 bsc#1273997).
- Update
patches.kernel.org/7.1.4-265-HID-hid-goodix-spi-validate-report-size-to-prev.patch
(bsc#1012628 CVE-2026-64367 bsc#1273855).
- Update
patches.kernel.org/7.1.4-269-HID-hid-lenovo-go-cancel-cfg_setup-work-in-hid_.patch
(bsc#1012628 CVE-2026-64595).
- Update
patches.kernel.org/7.1.4-270-HID-wacom-fix-slab-out-of-bounds-write-in-wacom.patch
(bsc#1012628 CVE-2026-64366 bsc#1273861).
- Update
patches.kernel.org/7.1.4-272-HID-letsketch-fix-UAF-on-inrange_timer-at-drive.patch
(bsc#1012628 CVE-2026-64365 bsc#1273310).
- Update
patches.kernel.org/7.1.4-273-HID-multitouch-fix-out-of-bounds-bit-access-on-.patch
(bsc#1012628 CVE-2026-64364 bsc#1273495).
- Update
patches.kernel.org/7.1.4-274-HID-appleir-fix-UAF-on-pending-key_up_timer-in-.patch
(bsc#1012628 CVE-2026-64363 bsc#1273328).
- Update
patches.kernel.org/7.1.4-275-HID-lg-g15-cancel-pending-work-on-remove-to-fix.patch
(bsc#1012628 CVE-2026-64362 bsc#1274078).
- Update
patches.kernel.org/7.1.4-277-hfs-hfsplus-fix-u32-overflow-in-check_and_corre.patch
(bsc#1012628 CVE-2026-64361 bsc#1273515).
- Update
patches.kernel.org/7.1.4-278-hfs-hfsplus-zero-initialize-buffer-in-hfs_bnode.patch
(bsc#1012628 CVE-2026-64360 bsc#1273333).
- Update
patches.kernel.org/7.1.4-279-nilfs2-reject-CLEAN_SEGMENTS-ioctl-with-out-of-.patch
(bsc#1012628 CVE-2026-64359 bsc#1273773).
- Update
patches.kernel.org/7.1.4-280-media-mtk-jpeg-cancel-workqueue-on-release-for-.patch
(bsc#1012628 CVE-2026-64358 bsc#1273601).
- Update
patches.kernel.org/7.1.4-289-xfs-fix-exchmaps-reservation-limit-check.patch
(bsc#1012628 CVE-2026-64357 bsc#1272612).
- Update
patches.kernel.org/7.1.4-290-xfs-fix-memory-leak-in-xfs_dqinode_metadir_crea.patch
(bsc#1012628 CVE-2026-64356 bsc#1272611).
- Update
patches.kernel.org/7.1.4-291-bpf-Reject-fragmented-frames-in-devmap.patch
(bsc#1012628 CVE-2026-64355 bsc#1273422).
- Update
patches.kernel.org/7.1.4-293-bpf-Validate-BTF-repeated-field-counts-before-e.patch
(bsc#1012628 CVE-2026-64354 bsc#1274060).
- Update
patches.kernel.org/7.1.4-294-bpf-Keep-dynamic-inner-array-lookups-nullable.patch
(bsc#1012628 CVE-2026-64353 bsc#1273264).
- Update
patches.kernel.org/7.1.4-295-bpf-Allow-LPM-map-access-from-sleepable-BPF-pro.patch
(bsc#1012628 CVE-2026-64352 bsc#1273456).
- Update
patches.kernel.org/7.1.4-296-net-usb-kalmia-bound-RX-frame-length-in-kalmia_.patch
(bsc#1012628 CVE-2026-64351 bsc#1274057).
- Update
patches.kernel.org/7.1.4-299-usb-cdnsp-fix-stream-context-array-leak-in-cdns.patch
(bsc#1012628 CVE-2026-64350 bsc#1273867).
- Update
patches.kernel.org/7.1.4-301-usb-dwc3-fix-dwc3_readl-and-dwc3_writel-calls-i.patch
(bsc#1012628 CVE-2026-64349 bsc#1274027).
- Update
patches.kernel.org/7.1.4-303-usb-free-iso-schedules-on-failed-submit.patch
(bsc#1012628 CVE-2026-64348 bsc#1274026).
- Update
patches.kernel.org/7.1.4-304-usb-gadget-composite-fix-dead-empty-check-in-th.patch
(bsc#1012628 CVE-2026-64347 bsc#1272807).
- Update
patches.kernel.org/7.1.4-305-usb-gadget-udc-Fix-use-after-free-in-gadget_mat.patch
(bsc#1012628 CVE-2026-64346 bsc#1273896).
- Update
patches.kernel.org/7.1.4-306-usb-gadget-f_printer-take-kref-only-for-success.patch
(bsc#1012628 CVE-2026-64345 bsc#1272689).
- Update
patches.kernel.org/7.1.4-307-USB-idmouse-fix-use-after-free-on-disconnect-ra.patch
(bsc#1012628 CVE-2026-64344 bsc#1274019).
- Update
patches.kernel.org/7.1.4-308-USB-ldusb-fix-use-after-free-on-disconnect-race.patch
(bsc#1012628 CVE-2026-64343 bsc#1273974).
- Update
patches.kernel.org/7.1.4-309-USB-iowarrior-fix-use-after-free-on-disconnect.patch
(bsc#1012628 CVE-2026-64342 bsc#1274011).
- Update
patches.kernel.org/7.1.4-310-USB-iowarrior-fix-use-after-free-on-disconnect-.patch
(bsc#1012628 CVE-2026-64341 bsc#1273895).
- Update
patches.kernel.org/7.1.4-312-USB-legousbtower-fix-use-after-free-on-disconne.patch
(bsc#1012628 CVE-2026-64340 bsc#1274003).
- Update
patches.kernel.org/7.1.4-315-usb-misc-usbio-bound-bulk-IN-response-length-to.patch
(bsc#1012628 CVE-2026-64339 bsc#1273978).
- Update
patches.kernel.org/7.1.4-316-USB-misc-uss720-unregister-parport-on-probe-fai.patch
(bsc#1012628 CVE-2026-64338 bsc#1273990).
- Update
patches.kernel.org/7.1.4-317-usb-mtu3-unmap-request-DMA-on-queue-failure.patch
(bsc#1012628 CVE-2026-64337 bsc#1273738).
- Update
patches.kernel.org/7.1.4-318-USB-serial-keyspan_pda-fix-information-leak.patch
(bsc#1012628 CVE-2026-64336 bsc#1272685).
- Update
patches.kernel.org/7.1.4-320-USB-serial-digi_acceleport-fix-broken-rx-after-.patch
(bsc#1012628 CVE-2026-64335 bsc#1273977).
- Update
patches.kernel.org/7.1.4-321-USB-serial-digi_acceleport-fix-hard-lockup-on-d.patch
(bsc#1012628 CVE-2026-64334 bsc#1273942).
- Update
patches.kernel.org/7.1.4-322-USB-serial-digi_acceleport-fix-write-buffer-cor.patch
(bsc#1012628 CVE-2026-64333 bsc#1273933).
- Update
patches.kernel.org/7.1.4-323-USB-ulpi-fix-memory-leak-on-registration-failur.patch
(bsc#1012628 CVE-2026-64332 bsc#1273285).
- Update
patches.kernel.org/7.1.4-326-usbip-vudc-fix-NULL-deref-in-vep_dequeue.patch
(bsc#1012628 CVE-2026-64331 bsc#1273824).
- Update
patches.kernel.org/7.1.4-331-usb-typec-tcpm-Validate-SVID-index-in-svdm_cons.patch
(bsc#1012628 CVE-2026-64330 bsc#1272681).
- Update
patches.kernel.org/7.1.4-334-usb-typec-ucsi-ccg-Fix-use-after-free-of-ucsi-o.patch
(bsc#1012628 CVE-2026-64329 bsc#1273934).
- Update
patches.kernel.org/7.1.4-336-usb-gadget-f_fs-initialize-reset_work-at-alloca.patch
(bsc#1012628 CVE-2026-64594).
- Update
patches.kernel.org/7.1.4-337-usb-gadget-f_fs-Fix-DMA-fence-leak.patch
(bsc#1012628 CVE-2026-64328 bsc#1273848).
- Update
patches.kernel.org/7.1.4-338-usb-gadget-f_fs-Initialize-epfile-in-early-to-f.patch
(bsc#1012628 CVE-2026-64327 bsc#1273283).
- Update
patches.kernel.org/7.1.4-340-block-skip-sync_blockdev-on-surprise-removal-in.patch
(bsc#1012628 CVE-2026-64326 bsc#1273312).
- Update
patches.kernel.org/7.1.4-341-wifi-mt76-mt7921-mt7925-fix-NULL-dereference-in.patch
(bsc#1012628 CVE-2026-64325 bsc#1273828).
- Update
patches.kernel.org/7.1.4-342-udf-validate-free-block-extents-against-the-par.patch
(bsc#1012628 CVE-2026-64324 bsc#1273970).
- Update
patches.kernel.org/7.1.4-343-udf-validate-VAT-header-length-against-the-VAT-.patch
(bsc#1012628 CVE-2026-64323 bsc#1273305).
- Update
patches.kernel.org/7.1.4-344-udf-validate-sparing-table-length-as-an-entry-c.patch
(bsc#1012628 CVE-2026-64322 bsc#1273958).
- Update
patches.kernel.org/7.1.4-348-nvme-target-rdma-fix-ndev-refcount-leak-on-queu.patch
(bsc#1012628 CVE-2026-64321 bsc#1273864).
- Update
patches.kernel.org/7.1.4-352-nvmet-fix-pre-auth-out-of-bounds-heap-read-in-D.patch
(bsc#1012628 CVE-2026-64320 bsc#1273420).
- Update
patches.kernel.org/7.1.4-354-nvmet-auth-validate-reply-message-payload-bound.patch
(bsc#1012628 CVE-2026-64319 bsc#1273339).
- Update
patches.kernel.org/7.1.4-356-btrfs-do-not-trim-a-device-which-is-not-writeab.patch
(bsc#1012628 CVE-2026-64593).
- Update
patches.kernel.org/7.1.4-357-partitions-aix-bound-the-pp_count-scan-to-the-p.patch
(bsc#1012628 CVE-2026-64318 bsc#1273950).
- Update
patches.kernel.org/7.1.4-359-isofs-bound-Rock-Ridge-symlink-components-to-th.patch
(bsc#1012628 CVE-2026-64317 bsc#1273936).
- Update
patches.kernel.org/7.1.4-361-crypto-caam-use-print_hex_dump_devel-to-guard-k.patch
(bsc#1012628 CVE-2026-64316 bsc#1273598).
- Update
patches.kernel.org/7.1.4-362-crypto-caam-use-print_hex_dump_devel-to-guard-k.patch
(bsc#1012628 CVE-2026-64315 bsc#1274028).
- Update
patches.kernel.org/7.1.4-363-crypto-chacha20poly1305-validate-poly1305-templ.patch
(bsc#1012628 CVE-2026-64314 bsc#1273948).
- Update
patches.kernel.org/7.1.4-365-crypto-ecc-Fix-carry-overflow-in-vli-multiplica.patch
(bsc#1012628 CVE-2026-64313 bsc#1273940).
- Update
patches.kernel.org/7.1.4-367-crypto-pcrypt-restore-callback-for-non-parallel.patch
(bsc#1012628 CVE-2026-64312 bsc#1273968).
- Update
patches.kernel.org/7.1.4-370-crypto-loongson-Remove-broken-and-unused-loongs.patch
(bsc#1012628 CVE-2026-64311 bsc#1273840).
- Update
patches.kernel.org/7.1.4-371-crypto-ccp-Do-not-initialize-SNP-for-SEV-ioctls.patch
(bsc#1012628 CVE-2026-64310 bsc#1273954).
- Update
patches.kernel.org/7.1.4-372-crypto-ccp-Do-not-initialize-SNP-for-ioctl-SNP_.patch
(bsc#1012628 CVE-2026-64309 bsc#1273963).
- Update
patches.kernel.org/7.1.4-373-crypto-ccp-Do-not-initialize-SNP-for-ioctl-SNP_.patch
(bsc#1012628 CVE-2026-64308 bsc#1273737).
- Update
patches.kernel.org/7.1.4-374-crypto-ccp-Do-not-initialize-SNP-for-ioctl-SNP_.patch
(bsc#1012628 CVE-2026-64307 bsc#1273567).
- Update
patches.kernel.org/7.1.4-375-crypto-drbg-Fix-returning-success-on-failure-in.patch
(bsc#1012628 CVE-2026-64306 bsc#1273939).
- Update
patches.kernel.org/7.1.4-385-crypto-qat-protect-service-table-iterations-wit.patch
(bsc#1012628 CVE-2026-64305 bsc#1273294).
- Update
patches.kernel.org/7.1.4-387-crypto-qat-validate-RSA-CRT-component-lengths.patch
(bsc#1012628 CVE-2026-64304 bsc#1273944).
- Update
patches.kernel.org/7.1.4-402-spi-fsl-lpspi-terminate-the-RX-channel-on-TX-pr.patch
(bsc#1012628 CVE-2026-64303 bsc#1273284).
- Update
patches.kernel.org/7.1.4-403-x86-mm-Fix-freeing-of-PMD-sized-vmemmap-pages.patch
(bsc#1012628 CVE-2026-64302 bsc#1273428).
- Update
patches.kernel.org/7.1.4-406-regulator-scmi-fix-of_node-refcount-leak-in-scm.patch
(bsc#1012628 CVE-2026-64301 bsc#1273520).
- Update
patches.kernel.org/7.1.4-408-perf-aux-Fix-page-UAF-in-map_range.patch
(bsc#1012628 CVE-2026-64300 bsc#1273852).
- Update
patches.kernel.org/7.1.4-411-tracing-Prevent-out-of-bounds-read-in-glob-matc.patch
(bsc#1012628 CVE-2026-64299 bsc#1273976).
- Update
patches.kernel.org/7.1.4-413-NFSv4-include-MAY_WRITE-in-open-permission-mask.patch
(bsc#1012628 CVE-2026-64298 bsc#1273550).
- Update
patches.kernel.org/7.1.4-415-module-decompress-check-return-value-of-module_.patch
(bsc#1012628 CVE-2026-64297 bsc#1273938).
- Update
patches.kernel.org/7.1.4-418-exfat-bound-uniname-advance-in-exfat_find_dir_e.patch
(bsc#1012628 CVE-2026-64296 bsc#1273975).
- Update
patches.kernel.org/7.1.4-421-riscv-mm-Unconditionally-sfence.vma-for-spuriou.patch
(bsc#1012628 CVE-2026-64592).
- Update
patches.kernel.org/7.1.4-425-mm-page_ext-add-count-limit-to-page_ext_iter_ne.patch
(bsc#1012628 CVE-2026-64295 bsc#1273943).
- Update
patches.kernel.org/7.1.4-426-mm-do-file-ownership-checks-with-the-proper-mou.patch
(bsc#1012628 CVE-2026-64294 bsc#1273525).
- Update
patches.kernel.org/7.1.4-430-bpf-Reject-BPF_MAP_TYPE_INODE_STORAGE-creation-.patch
(bsc#1012628 CVE-2026-64192 bsc#1272213).
- Update
patches.kernel.org/7.1.4-431-iommu-vt-d-Avoid-WARNING-in-sva-unbind-path.patch
(bsc#1012628 CVE-2026-64591).
- Update
patches.kernel.org/7.1.4-433-iommufd-Use-sizeof-hdr-instead-of-sizeof-hdr-in.patch
(bsc#1012628 CVE-2026-64293 bsc#1274016).
- Update
patches.kernel.org/7.1.4-435-iommufd-Move-vevent-memory-allocation-outside-s.patch
(bsc#1012628 CVE-2026-64292 bsc#1274064).
- Update
patches.kernel.org/7.1.4-436-iommufd-Set-veventq_depth-upper-bound.patch
(bsc#1012628 CVE-2026-64291 bsc#1274025).
- Update
patches.kernel.org/7.1.4-441-iommufd-Break-the-loop-on-failure-in-iommufd_fa.patch
(bsc#1012628 CVE-2026-64290 bsc#1273964).
- Update
patches.kernel.org/7.1.4-443-iommufd-Set-upper-bounds-on-cache-invalidation-.patch
(bsc#1012628 CVE-2026-64289 bsc#1274013).
- Update
patches.kernel.org/7.1.4-450-KVM-arm64-nv-Avoid-dereferencing-NULL-VNCR-pseu.patch
(bsc#1012628 CVE-2026-64288 bsc#1273816).
- Update
patches.kernel.org/7.1.4-452-KVM-arm64-Bound-used_lrs-when-flushing-the-pKVM.patch
(bsc#1012628 CVE-2026-64287 bsc#1273325).
- Update
patches.kernel.org/7.1.4-453-KVM-arm64-Clear-__hyp_running_vcpu-when-flushin.patch
(bsc#1012628 CVE-2026-64286 bsc#1274058).
- Update
patches.kernel.org/7.1.4-454-KVM-SEV-Pin-source-page-for-write-when-adding-C.patch
(bsc#1012628 CVE-2026-64285 bsc#1273951).
- Update
patches.kernel.org/7.1.4-462-KVM-x86-Ensure-vendor-s-exit-handler-runs-befor.patch
(bsc#1012628 CVE-2026-64284 bsc#1273293).
- Update
patches.kernel.org/7.1.4-463-KVM-guest_memfd-Treat-memslot-binding-offset-si.patch
(bsc#1012628 CVE-2026-64283 bsc#1273870).
- Update
patches.kernel.org/7.1.4-464-KVM-arm64-Don-t-leak-PFN-when-kvm_translate_vnc.patch
(bsc#1012628 CVE-2026-64282 bsc#1273452).
- Update
patches.kernel.org/7.1.4-466-dma-buf-udmabuf-skip-redundant-cpu-sync-to-fix-.patch
(bsc#1012628 CVE-2026-64590).
- Update
patches.kernel.org/7.1.4-467-svcrdma-wake-sq-waiters-when-the-transport-clos.patch
(bsc#1012628 CVE-2026-64281 bsc#1273298).
- Update
patches.kernel.org/7.1.4-469-fpga-dfl-afu-validate-DMA-mapping-length-in-afu.patch
(bsc#1012628 CVE-2026-64280 bsc#1273599).
- Update
patches.kernel.org/7.1.4-471-i2c-core-fix-NULL-deref-on-adapter-registration.patch
(bsc#1012628 CVE-2026-64589).
- Update
patches.kernel.org/7.1.4-474-i2c-core-fix-adapter-deregistration-race.patch
(bsc#1012628 CVE-2026-64279 bsc#1273953).
- Update
patches.kernel.org/7.1.4-478-i2c-imx-lpi2c-mark-I2C-adapter-when-hardware-is.patch
(bsc#1012628 CVE-2026-64278 bsc#1273842).
- Update
patches.kernel.org/7.1.4-479-i2c-i801-fix-hardware-state-machine-corruption-.patch
(bsc#1012628 CVE-2026-64205 bsc#1272215).
- Update
patches.kernel.org/7.1.4-481-Input-synaptics-rmi4-bound-the-F3A-keymap-to-th.patch
(bsc#1012628 CVE-2026-64277 bsc#1274035).
- Update
patches.kernel.org/7.1.4-482-Input-synaptics-rmi4-bound-the-F30-keymap-to-th.patch
(bsc#1012628 CVE-2026-64276 bsc#1273877).
- Update
patches.kernel.org/7.1.4-483-Input-elan_i2c-prevent-division-by-zero-and-ari.patch
(bsc#1012628 CVE-2026-64275 bsc#1273876).
- Update
patches.kernel.org/7.1.4-484-Input-goodix-clamp-the-device-reported-contact-.patch
(bsc#1012628 CVE-2026-64274 bsc#1273542).
- Update
patches.kernel.org/7.1.4-485-Input-iforce-bound-the-device-reported-force-fe.patch
(bsc#1012628 CVE-2026-64273 bsc#1273941).
- Update
patches.kernel.org/7.1.4-486-Input-mms114-fix-touch-indexing-for-MMS134S-and.patch
(bsc#1012628 CVE-2026-64272 bsc#1273949).
- Update
patches.kernel.org/7.1.4-488-Input-touchwin-reset-the-packet-index-on-every-.patch
(bsc#1012628 CVE-2026-64271 bsc#1273935).
- Update
patches.kernel.org/7.1.4-489-Input-mms114-reject-an-oversized-device-packet-.patch
(bsc#1012628 CVE-2026-64270 bsc#1273959).
- Update
patches.kernel.org/7.1.4-496-RDMA-rtrs-srv-Bound-RDMA-Write-length-to-chunk-.patch
(bsc#1012628 CVE-2026-64269 bsc#1273280).
- Update
patches.kernel.org/7.1.4-498-RDMA-siw-bound-Read-Response-placement-to-the-R.patch
(bsc#1012628 CVE-2026-64268 bsc#1273276).
- Update
patches.kernel.org/7.1.4-500-fuse-avoid-32-bit-prune-notification-count-wrap.patch
(bsc#1012628 CVE-2026-64267 bsc#1273518).
- Update
patches.kernel.org/7.1.4-504-fuse-re-lock-request-before-returning-from-fuse.patch
(bsc#1012628 CVE-2026-64266 bsc#1273555).
- Update
patches.kernel.org/7.1.4-507-fuse-clear-intr_entry-in-fuse_resend-and-fuse_r.patch
(bsc#1012628 CVE-2026-64265 bsc#1273947).
- Update
patches.kernel.org/7.1.4-508-fuse-uring-fix-EFAULT-clobber-in-fuse_uring_com.patch
(bsc#1012628 CVE-2026-64264 bsc#1273095).
- Update
patches.kernel.org/7.1.4-509-fuse-uring-fix-data-races-on-ring-ready.patch
(bsc#1012628 CVE-2026-64588).
- Update
patches.kernel.org/7.1.4-510-fuse-uring-fix-moving-cancelled-entry-to-ent_in.patch
(bsc#1012628 CVE-2026-64263 bsc#1274068).
- Update
patches.kernel.org/7.1.4-511-fuse-uring-end-fuse_req-on-io-uring-cancel-task.patch
(bsc#1012628 CVE-2026-64262 bsc#1273050).
- Update
patches.kernel.org/7.1.4-512-fuse-uring-Avoid-use-after-free-in-fuse_uring_a.patch
(bsc#1012628 CVE-2026-64261 bsc#1273287).
- Update
patches.kernel.org/7.1.4-513-fuse-uring-Avoid-queue-stopped-races-and-set-re.patch
(bsc#1012628 CVE-2026-64260 bsc#1273047).
- Update
patches.kernel.org/7.1.4-514-fuse-uring-make-a-fuse_req-on-SQE-commit-only-f.patch
(bsc#1012628 CVE-2026-64259 bsc#1273299).
- Update
patches.kernel.org/7.1.4-515-fuse-uring-remove-request-less-entries-from-ent.patch
(bsc#1012628 CVE-2026-64258 bsc#1273045).
- Update
patches.kernel.org/7.1.4-519-smb-client-reject-overlapping-data-areas-in-SMB.patch
(bsc#1012628 CVE-2026-64257 bsc#1273250).
- Update
patches.kernel.org/7.1.4-521-xfs-fail-recovery-on-a-committed-log-item-with-.patch
(bsc#1012628 CVE-2026-64187 bsc#1272204).
- Update
patches.kernel.org/7.1.4-522-xfs-resample-the-data-fork-mapping-after-cyclin.patch
(bsc#1012628 CVE-2026-64600 bsc#1271526).
- Update
patches.kernel.org/7.1.4-523-xfs-don-t-wrap-around-quota-ids-in-dqiterate.patch
(bsc#1012628 CVE-2026-64256 bsc#1273271).
- Update
patches.kernel.org/7.1.5-0166-crypto-asymmetric_keys-fix-OOB-read-in-pefile_.patch
(bsc#1012628 CVE-2026-64544 bsc#1273316).
- Update
patches.kernel.org/7.1.5-0211-crypto-af_alg-Cap-AEAD-AD-length-to-0x80000000.patch
(bsc#1012628 CVE-2026-52972 bsc#1269195).
- Update
patches.kernel.org/7.1.5-0294-RDMA-rxe-Fix-a-use-after-free-problem-in-rxe_m.patch
(bsc#1012628 CVE-2026-64582 bsc#1274040).
- Update
patches.kernel.org/7.1.5-0671-Bluetooth-eir-Fix-stack-OOB-write-when-prepend.patch
(bsc#1012628 CVE-2026-64539 bsc#1273338).
- Update
patches.kernel.org/7.1.5-0704-bridge-cfm-reject-invalid-CCM-interval-at-conf.patch
(bsc#1012628 CVE-2026-64537 bsc#1273289).
- Update
patches.kernel.org/7.1.5-0777-bpf-sockmap-reject-overflowing-copy-len-in-bpf.patch
(bsc#1012628 CVE-2026-64548 bsc#1273337).
- Update
patches.kernel.org/7.1.5-1105-net-psample-fix-info-leak-in-PSAMPLE_ATTR_DATA.patch
(bsc#1012628 CVE-2026-64553 bsc#1273336).
- Update
patches.kernel.org/7.1.5-1111-virtio-net-fix-len-check-in-receive_big.patch
(bsc#1012628 CVE-2026-64552 bsc#1273323).
- Update
patches.kernel.org/7.1.5-1168-tipc-fix-use-after-free-of-the-discoverer-in-t.patch
(bsc#1012628 CVE-2026-64543 bsc#1273311).
- Update
patches.kernel.org/7.1.5-1178-ipv6-ndisc-fix-NULL-deref-in-accept_untracked_.patch
(bsc#1012628 CVE-2026-64542 bsc#1273309).
- Update
patches.kernel.org/7.1.5-1191-drm-edid-fix-OOB-read-in-drm_parse_tiled_block.patch
(bsc#1012628 CVE-2026-64546 bsc#1273334).
- Update
patches.kernel.org/7.1.5-1212-ipv6-Fix-null-ptr-deref-in-fib6_nh_mtu_change.patch
(bsc#1012628 CVE-2026-64538 bsc#1273335).
- Update
patches.kernel.org/7.1.5-1242-net-bpf-check-master-for-NULL-in-xdp_master_re.patch
(bsc#1012628 CVE-2026-64545 bsc#1273318).
- Update
patches.kernel.org/7.1.5-1249-net-sched-cls_api-Handle-TC_ACT_CONSUMED-in-tc.patch
(bsc#1012628 CVE-2026-64530 bsc#1271866).
- Update
patches.kernel.org/7.1.5-1322-usbnet-gl620a-fix-out-of-bounds-read-in-geneli.patch
(bsc#1012628 CVE-2026-64540 bsc#1273302).
- Update
patches.kernel.org/7.1.5-1415-net-usb-net1080-validate-packet_len-before-pad.patch
(bsc#1012628 CVE-2026-64547 bsc#1273319).
- Update
patches.kernel.org/7.1.5-1439-net-qualcomm-rmnet-validate-MAP-frame-length-b.patch
(bsc#1012628 CVE-2026-64550 bsc#1273321).
- Update
patches.kernel.org/7.1.5-1441-net-smc-fix-UAF-in-smc_cdc_rx_handler-by-pinni.patch
(bsc#1012628 CVE-2026-64541 bsc#1273303).
- Update
patches.kernel.org/7.1.5-1457-Bluetooth-bpa10x-avoid-OOB-read-of-revision-st.patch
(bsc#1012628 CVE-2026-64549 bsc#1273341).
- Update
patches.kernel.org/7.1.5-1566-KVM-arm64-nv-Fix-SPSR_EL2-restore-in-kvm_hyp_h.patch
(bsc#1012628 CVE-2026-64555 bsc#1273331).
- Update
patches.kernel.org/7.1.5-1608-netfilter-bridge-fix-stale-prevhdr-pointer-in-.patch
(bsc#1012628 CVE-2026-64554 bsc#1273340).
- Update
patches.kernel.org/7.1.5-1696-fs-ntfs3-validate-lcns_follow-in-log_replay-co.patch
(bsc#1012628 CVE-2026-64533 bsc#1273345).
- Update
patches.kernel.org/7.1.5-1698-fs-ntfs3-bound-NTFS_DE-view.data_off-in-Update.patch
(bsc#1012628 CVE-2026-64532 bsc#1273344).
- Update
patches.kernel.org/7.1.5-1752-s390-pkey-Check-length-in-PKEY_VERIFYPROTK-ioc.patch
(bsc#1012628 CVE-2026-64559 bsc#1273801).
- Update
patches.kernel.org/7.1.5-1753-s390-pkey-Check-length-in-pkey_pckmo-handler-i.patch
(bsc#1012628 CVE-2026-64558 bsc#1273797).
- Update
patches.kernel.org/7.1.5-1802-sctp-validate-STALE_COOKIE-cause-length-before.patch
(bsc#1012628 CVE-2026-64551 bsc#1273813).
- Update
patches.kernel.org/7.1.5-1810-can-esd_usb-kill-anchored-URBs-before-freeing-.patch
(bsc#1012628 CVE-2026-64585).
- Update
patches.kernel.org/7.1.5-2001-net-openvswitch-reject-oversized-nested-action.patch
(bsc#1012628 CVE-2026-64531 bsc#1272372).
- Update
patches.kernel.org/7.1.5-2050-Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_so.patch
(bsc#1012628 CVE-2026-64557 bsc#1273347).
- Update
patches.kernel.org/7.1.5-2068-posix-cpu-timers-Prevent-UAF-caused-by-non-lea.patch
(bsc#1012628 CVE-2026-64560 bsc#1273007).
- Update
patches.kernel.org/7.1.6-005-KVM-x86-Check-for-invalid-obsolete-root-after-m.patch
(bsc#1012628 CVE-2026-64561 bsc#1273231).
- Update
patches.kernel.org/7.1.6-007-KVM-nVMX-Hide-shadow-VMCS-right-after-VMCLEAR.patch
(bsc#1012628 CVE-2026-64562 bsc#1273930).
- Update
patches.kernel.org/7.1.6-024-btrfs-reject-free-space-cache-with-more-entries.patch
(bsc#1012628 CVE-2026-64567 bsc#1274006).
- Update
patches.kernel.org/7.1.6-030-xfrm-fix-sk_dst_cache-double-free-in-xfrm_user_.patch
(bsc#1012628 CVE-2026-64581 bsc#1274041).
- Update
patches.kernel.org/7.1.6-045-xfrm-iptfs-propagate-SKBFL_SHARED_FRAG-in-iptfs.patch
(bsc#1012628 CVE-2026-64566 bsc#1274005).
- Update
patches.kernel.org/7.1.6-046-xfrm6-clear-dst.dev-on-error-to-avoid-double-ne.patch
(bsc#1012628 CVE-2026-64580 bsc#1274037).
- Update
patches.kernel.org/7.1.6-047-xfrm-policy-preallocate-inexact-bins-before-xfr.patch
(bsc#1012628 CVE-2026-64579 bsc#1274036).
- Update
patches.kernel.org/7.1.6-054-wifi-mac80211-fix-unsol_bcast_probe_resp-double.patch
(bsc#1012628 CVE-2026-64568 bsc#1274008).
- Update
patches.kernel.org/7.1.6-055-wifi-mac80211-fix-fils_discovery-double-free-on.patch
(bsc#1012628 CVE-2026-64570 bsc#1274010).
- Update
patches.kernel.org/7.1.6-058-wifi-p54-validate-RX-frame-length-in-p54_rx_eep.patch
(bsc#1012628 CVE-2026-64571 bsc#1274012).
- Update
patches.kernel.org/7.1.6-089-ipv4-fib-free-fib_alias-with-kfree_rcu-on-inser.patch
(bsc#1012628 CVE-2026-64572 bsc#1274014).
- Update
patches.kernel.org/7.1.6-099-Bluetooth-qca-fix-NVM-tag-length-underflow-in-T.patch
(bsc#1012628 CVE-2026-64573 bsc#1274017).
- Update
patches.kernel.org/7.1.6-126-ksmbd-validate-compound-request-size-before-rea.patch
(bsc#1012628 CVE-2026-64578 bsc#1274034).
- Update
patches.kernel.org/7.1.6-136-mpls-fix-NULL-deref-in-mpls_valid_fib_dump_req-.patch
(bsc#1012628 CVE-2026-64569 bsc#1274009).
- Update
patches.kernel.org/7.1.6-144-usb-gadget-f_midi-cancel-pending-IN-work-before.patch
(bsc#1012628 CVE-2026-64584).
- Update
patches.kernel.org/7.1.6-151-usb-gadget-udc-bdc-free-IRQ-and-drain-func_wake.patch
(bsc#1012628 CVE-2026-64583).
- Update
patches.kernel.org/7.1.6-244-wifi-mac80211-tear-down-new-links-on-vif-update.patch
(bsc#1012628 CVE-2026-64574 bsc#1274020).
- Update
patches.kernel.org/7.1.6-283-gtp-check-skb_pull_data-return-in-gtp1u_send_ec.patch
(bsc#1012628 CVE-2026-64577 bsc#1274031).
- Update
patches.kernel.org/7.1.6-284-nexthop-initialize-extack-in-nh_res_bucket_migr.patch
(bsc#1012628 CVE-2026-64576 bsc#1274030).
- Update
patches.kernel.org/7.1.6-321-bpf-tcp-fix-double-sock-release-on-batch-reallo.patch
(bsc#1012628 CVE-2026-64575 bsc#1274024).
- Update
patches.kernel.org/7.1.6-551-wifi-brcmfmac-drain-bus_reset-work-on-device-re.patch
(bsc#1012628 CVE-2026-64586).
- Update
patches.kernel.org/7.1.6-576-rhashtable-clear-stale-iter-p-on-table-restart.patch
(bsc#1012628 CVE-2026-64563 bsc#1273995).
- Update
patches.kernel.org/7.1.6-622-sctp-don-t-free-the-ASCONF-s-own-transport-in-D.patch
(bsc#1012628 CVE-2026-64564 bsc#1274072).
- Update
patches.kernel.org/7.1.7-001-x86-bugs-Make-Safe-RET-robust-against-interrupt.patch
(bsc#1012628 CVE-2026-68480).
suse-add-cves
- commit 4dc2eae
* Thu Aug 06 2026 jslaby@suse.cz
- Linux 7.1.7 (bsc#1012628).
- x86/bugs: Make Safe-RET robust against interrupt injection
(bsc#1012628).
- commit a37442a
* Thu Aug 06 2026 jslaby@suse.cz
- drm/amd/display: use proper context for logging (bsc#1271175).
- commit fe478a8
* Wed Aug 05 2026 pfalcato@suse.de
- x86/alternative: exclude text poking against change_page_attr()
(bsc#1271202).
- x86/mm/pat: fix effective RW computation in
lookup_address_in_pgd_attr() (bsc#1271202).
- x86/mm/pat: allocate split page tables as kernel page tables
(bsc#1271202).
- x86/mm/pat: acquire init_mm read lock on attribute change to
avoid UAF (bsc#1271202).
- x86/mm/pat: acquire init_mm write lock on collapse to avoid UAF
(bsc#1271202).
- x86/mm/pat: introcude cpa_lock() and cpa_unlock() (bsc#1271202).
- x86/mm/pat: Take cpa_lock around large-page collapse
(bsc#1271202).
- x86/mm/pat: Don't gate cpa_lock on debug_pagealloc_enabled()
(bsc#1271202).
- commit 745e015
* Wed Aug 05 2026 petr.pavlu@suse.com
- rpm/modversions: Allow unpacking consolidated data created by ksymtypes
`scripts/sequence-patch --kabi` currently uses rpm/modversions to unpack
consolidated symtypes data. This doesn't work in SL-16.1 where the data is
created by ksymtypes (from suse-kabi-tools).
The problem is that when ksymtypes packs individual symtypes files into
a consolidated file, it uses the original '<path>/<basename>.symtypes'
filename in file separators. However, rpm/modversions expects the format to
use '<path>/<basename>.o' instead.
Update rpm/modversions to recognize the '.symtypes' suffix as well.
- commit 585bfaf
* Mon Aug 03 2026 jslaby@suse.cz
- Linux 7.1.6 (bsc#1012628).
- platform/x86/intel-uncore-freq: Fix current_freq_khz after
CPU hotplug (bsc#1012628).
- sched_ext: Skip ops.set_weight() for disabled tasks
(bsc#1012628).
- drm/virtio: fix deadlock in display_info_cb by removing hotplug
from dequeue worker (bsc#1012628).
- seqlock: Allow UBSAN_ALIGNMENT to fail optimizing (bsc#1012628).
- KVM: x86: Check for invalid/obsolete root *after* making MMU
pages available (bsc#1012628).
- KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired
on KVM_RUN (bsc#1012628).
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1012628).
- KVM: x86/mmu: Fix use-after-free on vendor module reload
(bsc#1012628).
- gpu: host1x: Fix use-after-free in
host1x_bo_clear_cached_mappings (bsc#1012628).
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin
(bsc#1012628).
- xprtrdma: Clear receive-side ownership pointers on release
(bsc#1012628).
- arm64: tegra: Remove fallback compatible for GPCDMA
(bsc#1012628).
- Docs/admin-guide/cgroup-v2: fix memory.stat doc details
(bsc#1012628).
- sched_ext: Annotate ksyncs with __rcu in alloc/free_kick_syncs()
(bsc#1012628).
- arm64: tegra: Fix CPU compatible string to cortex-a78ae on
Tegra234 (bsc#1012628).
- xfrm: propagate -EINPROGRESS from validate_xmit_xfrm()
(bsc#1012628).
- xfrm: fix stale skb->prev after async crypto steals a GSO
segment (bsc#1012628).
- firmware: arm_ffa: Respect firmware advertised RX/TX buffer
size limits (bsc#1012628).
- IB/mad: Drop unmatched RMPP responses before reassembly
(bsc#1012628).
- mtd: virt_concat: fix use-after-free in
mtd_virt_concat_destroy_joins() (bsc#1012628).
- mtd: virt_concat: fix use-after-free in
mtd_virt_concat_destroy() (bsc#1012628).
- mtd: mtdswap: remove debugfs stats file on teardown
(bsc#1012628).
- mtd: nand: mtk-ecc: stop on ECC idle timeouts (bsc#1012628).
- btrfs: reject free space cache with more entries than pages
(bsc#1012628).
- btrfs: fix root leak if its reloc root is unexpected in
merge_reloc_roots() (bsc#1012628).
- btrfs: fallback to transaction csum tree on a commit root csum
miss (bsc#1012628).
- firmware: arm_ffa: Fix NULL dereference in
ffa_partition_info_get() (bsc#1012628).
- sched_ext: Don't warn on core-sched forced idle in
put_prev_task_scx() (bsc#1012628).
- reset: spacemit: k3: fix USB2 ahb reset (bsc#1012628).
- xfrm: fix sk_dst_cache double-free in xfrm_user_policy()
(bsc#1012628).
- xfrm: reject optional IPTFS templates in outbound policies
(bsc#1012628).
- RDMA/cma: Fix hardware address comparison length in netevent
callback (bsc#1012628).
- RDMA/irdma: Prevent rereg_mr for non-mem regions (bsc#1012628).
- RDMA/irdma: Remove redundant legacy_mode checks (bsc#1012628).
- RDMA/irdma: Prevent user-triggered null deref on QP create
(bsc#1012628).
- RDMA/erdma: initialize ret for empty receive WR lists
(bsc#1012628).
- RDMA/mana_ib: initialize err for empty send WR lists
(bsc#1012628).
- RDMA/core: Fix memory leak in __ib_create_cq() on invalid cqe
(bsc#1012628).
- RDMA/hns: Fix potential integer overflow in mhop hem cleanup
(bsc#1012628).
- RDMA/siw: publish QP after initialization (bsc#1012628).
- mtd: fix double free and WARN_ON in add_mtd_device() error paths
(bsc#1012628).
- selftests/alsa: Fix memory leak in find_controls error path
(bsc#1012628).
- RDMA/irdma: Prevent overflows in memory contiguity checks
(bsc#1012628).
- xfrm: clear mode callbacks after failed mode setup
(bsc#1012628).
- xfrm: iptfs: propagate SKBFL_SHARED_FRAG in
iptfs_skb_add_frags() (bsc#1012628).
- xfrm6: clear dst.dev on error to avoid double netdev_put in
xfrm6_fill_dst() (bsc#1012628).
- xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild
reinsert (bsc#1012628).
- wifi: mac80211: allocate backup ieee80211_nan_sched_cfg off
stack (bsc#1012628).
- ALSA: usb-audio: Fix imbalance per-channel volume of sticky
mixers (bsc#1012628).
- wifi: cfg80211: cancel sched scan results work on unregister
(bsc#1012628).
- wifi: ipw2100: fix potential memory leak in
ipw2100_pci_init_one() (bsc#1012628).
- wifi: cfg80211: Fix an error handling path in
cfg80211_wext_siwscan() (bsc#1012628).
- wifi: mac80211_hwsim: clamp virtio RX length before skb_put
(bsc#1012628).
- wifi: mac80211: fix unsol_bcast_probe_resp double free on
alloc failure (bsc#1012628).
- wifi: mac80211: fix fils_discovery double free on alloc failure
(bsc#1012628).
- wifi: libertas: fix memory leak in helper_firmware_cb()
(bsc#1012628).
- wifi: mac80211: defer link RX stats percpu free to RCU
(bsc#1012628).
- wifi: p54: validate RX frame length in p54_rx_eeprom_readback()
(bsc#1012628).
- wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix
deadlock (bsc#1012628).
- wifi: nl80211: free RNR data on MBSSID mismatch (bsc#1012628).
- wifi: cfg80211: derive S1G beacon TSF from S1G fields
(bsc#1012628).
- wifi: nl80211: validate nested MBSSID IE blobs (bsc#1012628).
- wifi: nl80211: constrain MBSSID TX link ID range (bsc#1012628).
- wifi: cfg80211: validate PMSR measurement type data
(bsc#1012628).
- wifi: cfg80211: validate PMSR FTM preamble range (bsc#1012628).
- wifi: cfg80211: reject unsupported PMSR FTM location requests
(bsc#1012628).
- wifi: cfg80211: reject empty PMSR peer lists (bsc#1012628).
- wifi: mac80211: avoid non-S1G AID fallback for S1G assoc
(bsc#1012628).
- ASoC: amd: acp: Fix linker error with SDCA quirks (bsc#1012628).
- wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock
(bsc#1012628).
- wifi: cfg80211: use wiphy work for socket owner autodisconnect
(bsc#1012628).
- wifi: brcmfmac: initialize SDIO data work before cleanup
(bsc#1012628).
- wifi: cfg80211: bound element ID read when checking
non-inheritance (bsc#1012628).
- firmware: arm_ffa: Fix out-of-bound writes in
ffa_setup_and_transmit() (bsc#1012628).
- firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset
calculation (bsc#1012628).
- ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath
on start/stop (bsc#1012628).
- ASoC: amd: ps: disable MSI on resume in ACP PCI driver
(bsc#1012628).
- ASoC: amd: ps: fix wrong ACP version string in
pci_request_regions() (bsc#1012628).
- ASoC: amd: ps: replace bitwise OR with logical OR in IRQ return
check (bsc#1012628).
- erofs: relax sanity check for tail pclusters due to ztailpacking
(bsc#1012628).
- ASoC: cs42l43: Correct report for forced microphone jack
(bsc#1012628).
- sched_ext: Enable tick for finite slices on nohz_full
(bsc#1012628).
- ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared
after lookup (bsc#1012628).
- firmware: arm_scmi: Rate-limit queue-full warnings in IRQ
context (bsc#1012628).
- bpf: Fix UAF in sock clone early bailouts (bsc#1012628).
- cpufreq: Make cpufreq_update_pressure() fall back to
cpuinfo.max_freq (bsc#1012628).
- sched_ext: Record an error on errno-only sub-enable failure
(bsc#1012628).
- ppp: defer channel free to an RCU grace period to fix pppol2tp
RX UAF (bsc#1012628).
- ipv4: fib: free fib_alias with kfree_rcu() on insert error path
(bsc#1012628).
- net/iucv: take a reference on the socket found in
afiucv_hs_rcv() (bsc#1012628).
- scsi: core: wake eh reliably when using scsi_schedule_eh
(bsc#1012628).
- ata: sata_dwc_460ex: enable SATA interrupts only after IRQ
handler is registered (bsc#1012628).
- ata: sata_dwc_460ex: use platform_get_irq() (bsc#1012628).
- ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all
pending interrupts (bsc#1012628).
- ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion
bit-scanning (bsc#1012628).
- accel/ivpu: Fix wrong register read in LNL failure diagnostics
(bsc#1012628).
- ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC
(bsc#1012628).
- Bluetooth: qca: fix NVM tag length underflow in TLV parser
(bsc#1012628).
- Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update
(bsc#1012628).
- Bluetooth: hci_sync: extend conn_hash lookup critical sections
(bsc#1012628).
- Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync
(bsc#1012628).
- Bluetooth: mgmt: hold reference for hci_conn in
mgmt_pending_cmds (bsc#1012628).
- Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups
(bsc#1012628).
- Bluetooth: hci_qca: Clear memdump state on invalid dump size
(bsc#1012628).
- Bluetooth: mgmt: Translate HCI reason in Device Disconnected
event (bsc#1012628).
- smb/client: handle overlapping allocated ranges in fallocate
(bsc#1012628).
- riscv: Gate FUNCTION_ALIGNMENT_4B on DYNAMIC_FTRACE
(bsc#1012628).
- drm/i915/gt: use correct selftest config symbol (bsc#1012628).
- can: raw: add locking for raw flags bitfield (bsc#1012628).
- spi: cadence-quadspi: Fix indirect write timeout when DMA read
mode is enabled (bsc#1012628).
- powerpc/85xx: Add fsl,ifc to common device ids (bsc#1012628).
- powerpc/time: Prepare to stop elapsing in dynticks-idle
(bsc#1012628).
- powerpc/vtime: Initialize starttime at boot for native
accounting (bsc#1012628).
- bpf, sockmap: Reject unhashed UDP sockets on sockmap update
(bsc#1012628).
- drm/panthor: Check debugfs GEM lock initialization
(bsc#1012628).
- s390/checksum: Fix csum_partial() without vector facility
(bsc#1012628).
- riscv: hwprobe: Avoid uninitialized read in hwprobe_get_cpus()
(bsc#1012628).
- can: j1939: fix lockless local-destination check (bsc#1012628).
- drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves
(bsc#1012628).
- drm/xe/wopcm: fix WOPCM size for LNL+ (bsc#1012628).
- drm/xe: Assign queue name in time for drm_sched_init
(bsc#1012628).
- drm/xe/guc: Keep scheduler timeline name alive (bsc#1012628).
- drm/xe/guc: Hold device ref until queue teardown completes
(bsc#1012628).
- ksmbd: pin conn during async oplock break notification
(bsc#1012628).
- ksmbd: validate compound request size before reading
StructureSize2 (bsc#1012628).
- drm/i915/wm: clear the plane ddb_y entries on plane disable
(bsc#1012628).
- drm/i915/selftests: Fix GT PM sort comparators (bsc#1012628).
- accel/amdxdna: Fix use-after-free of mm_struct in job scheduler
(bsc#1012628).
- tcp: fix TIME_WAIT socket reference leak on PSP policy failure
(bsc#1012628).
- dpll: fix NULL pointer dereference in
dpll_msg_add_pin_ref_sync() (bsc#1012628).
- net/sched: act_tunnel_key: Defer dst_release to RCU callback
(bsc#1012628).
- sctp: fix auth_hmacs array size in struct sctp_cookie
(bsc#1012628).
- bnxt_en: Handle partially initialized auxiliary devices
(bsc#1012628).
- selftests: netconsole: only restore MAC when it changed on
resume (bsc#1012628).
- mpls: fix NULL deref in mpls_valid_fib_dump_req() on
CONFIG_INET=n (bsc#1012628).
- usb: core: sysfs: add lock to bos_descriptors_read()
(bsc#1012628).
- wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()
(bsc#1012628).
- usb: core: port: Deattach Type-C connector on component unbind
(bsc#1012628).
- usb: musb: omap2430: Do not put borrowed of_node in probe
(bsc#1012628).
- USB: storage: add NO_ATA_1X quirk for Longmai USB Key
(bsc#1012628).
- usb: chipidea: fix usage_count leak when autosuspend_delay is
negative (bsc#1012628).
- usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
(bsc#1012628).
- usb: gadget: f_midi: cancel pending IN work before freeing
the midi object (bsc#1012628).
- usb: gadget: printer: fix infinite loop in printer_read()
(bsc#1012628).
- USB: gadget: snps-udc: fix device name leak on probe failure
(bsc#1012628).
- USB: gadget: fsl-udc: fix device name leak on probe failure
(bsc#1012628).
- USB: gadget: fsl-udc: fix dev_printk() device (bsc#1012628).
- usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()
(bsc#1012628).
- usb: gadget: f_tcm: synchronize delayed set_alt with teardown
(bsc#1012628).
- usb: gadget: udc: bdc: free IRQ and drain func_wake_notify
before teardown (bsc#1012628).
- usb: gadget: uvc: clamp SEND_RESPONSE length to the response
buffer (bsc#1012628).
- USB: serial: ftdi_sio: add support for E+H FXA291 (bsc#1012628).
- USB: serial: io_edgeport: cap received transmit credits
(bsc#1012628).
- USB: serial: keyspan_pda: fix data loss on receive throttling
(bsc#1012628).
- USB: serial: option: add TDTECH MT5710-CN (bsc#1012628).
- usb: typec: ucsi: Detect and skip duplicate altmodes from
buggy firmware (bsc#1012628).
- usb: typec: ucsi: Add duplicate detection to nvidia registration
path (bsc#1012628).
- drm/amd/display: Fix ISM dc_lock deadlock during suspend
(bsc#1012628).
- drm/amd/display: Fix preferred link rate for NUTMEG
(bsc#1012628).
- drm/amd/display: Add dp_skip_rbr flag for NUTMEG (bsc#1012628).
- wifi: mwifiex: fix freeze for 60 seconds caused by
request_firmware (bsc#1012628).
- RISC-V: KVM: Serialize virtual interrupt pending state updates
(bsc#1012628).
- Revert "drm/amd/display: Add missing kdoc for ALLM parameters"
(bsc#1012628).
- usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits
(bsc#1012628).
- selftests/bpf: Adjust verifier_map_ptr for the map's excl field
(bsc#1012628).
- selftests/bpf: Keep verifier_map_ptr exercising ops pointer
access (bsc#1012628).
- watchdog: ni903x_wdt: Check ACPI_COMPANION() against NULL
(bsc#1012628).
- wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming
firmware request (bsc#1012628).
- wifi: ath11k: fix NULL pointer dereference in
ath11k_hal_srng_access_begin (bsc#1012628).
- hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
(bsc#1012628).
- hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop
(bsc#1012628).
- hwmon: (gigabyte_waterforce) Stop device IO before calling
hid_hw_stop (bsc#1012628).
- hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop
(bsc#1012628).
- hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop
(bsc#1012628).
- watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()
(bsc#1012628).
- watchdog: airoha: Prevent division by zero when clock frequency
is zero (bsc#1012628).
- wifi: ath10k: fix skb leak on incomplete msdu during rx pop
(bsc#1012628).
- wifi: ath11k: fix potential buffer underflow in
ath11k_hal_rx_msdu_list_get() (bsc#1012628).
- wifi: ath11k: Flush the posted write after writing to
PCIE_SOC_GLOBAL_RESET (bsc#1012628).
- wifi: ath12k: Flush the posted write after writing to
PCIE_SOC_GLOBAL_RESET (bsc#1012628).
- platform/x86/intel/vsec: allocate res with intel_vsec_dev
(bsc#1012628).
- platform/x86/intel/vsec: free ACPI discovery data on early
errors (bsc#1012628).
- platform/x86: asus-wmi: temporarily revert to setting a charge
limit (bsc#1012628).
- firewire: net: Fix fragmented datagram reassembly (bsc#1012628).
- wifi: ath12k: Fix low MLO RX throughput on WCN7850
(bsc#1012628).
- wifi: ath6kl: fix OOB read from firmware num_msg in TX complete
handler (bsc#1012628).
- wifi: ath6kl: fix OOB read from firmware IE lengths in connect
event (bsc#1012628).
- wifi: carl9170: bound memcpy length in cmd callback to prevent
OOB read (bsc#1012628).
- wifi: carl9170: fix OOB read from off-by-two in TX status
handler (bsc#1012628).
- wifi: carl9170: fix buffer overflow in rx_stream failover path
(bsc#1012628).
- btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8
(bsc#1012628).
- btrfs: fix u32 to s64 type conversion in dirty_metadata_bytes
accounting (bsc#1012628).
- btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps
(bsc#1012628).
- btrfs: free mapping node on duplicate reloc root insert
(bsc#1012628).
- ASoC: tas2781: bound firmware description string parsing
(bsc#1012628).
- ASoC: sun4i-codec: Set quirks.playback_only for H616 codec
(bsc#1012628).
- iommu/amd: Fix IRQ unsafe locking in gdom allocation
(bsc#1012628).
- iommu/amd: Fix nested domain leak (bsc#1012628).
- ALSA: hda: cs35l41: validate and free ACPI mute object
(bsc#1012628).
- ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI
(bsc#1012628).
- arm_mpam: Fix software reset values of MPAMCFG_PRI
(bsc#1012628).
- arm_mpam: Fix MPAMCFG_MBW_PBM register setting (bsc#1012628).
- arm_mpam: guard MBWU state before adding it to garbage
(bsc#1012628).
- ASoC: cs35l56: Fix potential probe() deadlock (bsc#1012628).
- ASoC: cs35l56: Use complete_all() to signal init_completion
(bsc#1012628).
- wifi: iwlwifi: mvm: validate SAR GEO response payload size
(bsc#1012628).
- wifi: iwlwifi: fix pointer arithmetic in
iwl_add_mcc_to_tas_block_list (bsc#1012628).
- wifi: iwlwifi: validate payload length in iwl_pnvm_complete_fn
(bsc#1012628).
- wifi: iwlwifi: mvm: fix read in wake packet notification handler
(bsc#1012628).
- drivers/virt: pkvm: Fix end calculation in
mmio_guard_ioremap_hook() (bsc#1012628).
- hwmon: Drop unused i2c driver_data (bsc#1012628).
- hwmon: Use named initializers for arrays of i2c_device_data
(bsc#1012628).
- hwmon: (pmbus/max34440): add support adpm12250 (bsc#1012628).
- hwmon: (pmbus/max34440) block unsupported VIN and IIN limit
registers (bsc#1012628).
- hwmon: (asus-ec-sensors) fix looping over banks while reading
from EC (bsc#1012628).
- hwmon: (asus-ec-sensors) fix EC read intervals (bsc#1012628).
- hwmon: (asus-ec-sensors) add missed handle for ENOMEM
(bsc#1012628).
- smb: client: validate DFS referral PathConsumed (bsc#1012628).
- drm/i915/backlight: Remove DP_EDP_BACKLIGHT_AUX_ENABLE_CAP
check for DPCD backlight (bsc#1012628).
- ovpn: avoid putting unrelated P2P peer on socket release
(bsc#1012628).
- selftests/net: ovpn: fix getaddrinfo memory leak in
ovpn_parse_remote() (bsc#1012628).
- ovpn: fix use after free in unlock_ovpn() (bsc#1012628).
- ovpn: use monotonic clock for peer keepalive timeouts
(bsc#1012628).
- hwmon: occ: validate poll response sensor blocks (bsc#1012628).
- regulator: mt6358: use regmap helper to read fixed LDO
calibration (bsc#1012628).
- Bluetooth: btusb: validate Realtek vendor event length
(bsc#1012628).
- net: phy: marvell: fix return code (bsc#1012628).
- selftests/net: Fix tun IPv6 test addresses to avoid 6to4 range
(bsc#1012628).
- netlink: specs: rt-link: convert bridge port flag attributes
to u8 (bsc#1012628).
- net/packet: avoid fanout hook re-registration after unregister
(bsc#1012628).
- bpf: Reject redirect helpers without a bpf_net_context
(bsc#1012628).
- net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains
(bsc#1012628).
- bonding: fix devconf_all NULL dereference when IPv6 is disabled
(bsc#1012628).
- rds: drop incoming messages that cross network namespace
boundaries (bsc#1012628).
- gtp: parse extension headers before reading inner protocol
(bsc#1012628).
- rxrpc: fix io_thread race in rxrpc_wake_up_io_thread()
(bsc#1012628).
- dpaa2-switch: put MAC endpoint device on disconnect
(bsc#1012628).
- net: airoha: Fix potential use-after-free in airoha_ppe_deinit()
(bsc#1012628).
- dpaa2-eth: put MAC endpoint device on disconnect (bsc#1012628).
- net: airoha: Fix DMA direction for NPU mailbox buffer
(bsc#1012628).
- iommu/amd: Wait for completion instead of returning early in
iommu_completion_wait() (bsc#1012628).
- wifi: mac80211: tear down new links on vif update error path
(bsc#1012628).
- nfp: Check resource mutex allocation (bsc#1012628).
- wan: wanxl: Only reset hardware after BAR mapping (bsc#1012628).
- vhost-net: fix TX stall when vhost owns virtio-net header
(bsc#1012628).
- wifi: mac80211: copy aggregation information (bsc#1012628).
- wifi: mwifiex: bound uAP association event IEs to the event
buffer (bsc#1012628).
- iommu/amd: Bound the early ACPI HID map (bsc#1012628).
- iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()
(bsc#1012628).
- wifi: mac80211: recalculate TIM when a station enters power save
(bsc#1012628).
- pds_core: reject component parameter in legacy firmware update
(bsc#1012628).
- arm64: Correct value returned by ESR_ELx_FSC_ADDRSZ_nL()
(bsc#1012628).
- arm64/mm: Check the requested PFN range during memory removal
(bsc#1012628).
- amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN (bsc#1012628).
- soreuseport: Clear sk_reuseport_cb before failure in sk_clone()
(bsc#1012628).
- net: Call net_enable_timestamp() before failure in sk_clone()
(bsc#1012628).
- geneve: fix hint header definition wrt endianness (bsc#1012628).
- geneve: ensure the skb is writable before fixing its headers
(bsc#1012628).
- tipc: serialize udp bearer replicast list updates (bsc#1012628).
- net: txgbe: fix heap overflow when reading module EEPROM
(bsc#1012628).
- rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled
(bsc#1012628).
- net: txgbe: fix FDIR filter leak on remove (bsc#1012628).
- sctp: fix auth_chunk_list capacity check in
sctp_auth_ep_add_chunkid (bsc#1012628).
- pds_core: fix deadlock between reset thread and remove
(bsc#1012628).
- pds_core: fix use-after-free on workqueue during remove
(bsc#1012628).
- pds_core: yield the CPU while waiting for the adminq to drain
(bsc#1012628).
- pds_core: order completion reads after the ownership check
(bsc#1012628).
- pds_core: fix auxiliary device add/del races (bsc#1012628).
- pds_core: check for workqueue allocation failure (bsc#1012628).
- accel: ethosu: Fix element size accounting for cmd stream
validation (bsc#1012628).
- accel: ethosu: Handle U85 internal chaining buffer
(bsc#1012628).
- sctp: validate stream count in sctp_process_strreset_inreq()
(bsc#1012628).
- net: mctp i3c: clean up notifier and buses if driver register
fails (bsc#1012628).
- tls: device: push pending open record on splice EOF
(bsc#1012628).
- selftests: af_unix: add USER_NS config (bsc#1012628).
- selftests: openvswitch: add config file (bsc#1012628).
- selftests: ovpn: add IPV6 and VETH configs (bsc#1012628).
- selftests: ovpn: increase timeout (bsc#1012628).
- selftests: drv-net: increase timeout (bsc#1012628).
- selftests: drv-net: convert so_txtime to drv-net (bsc#1012628).
- gtp: check skb_pull_data() return in gtp1u_send_echo_resp()
(bsc#1012628).
- nexthop: initialize extack in nh_res_bucket_migrate()
(bsc#1012628).
- tipc: fix infinite loop in __tipc_nl_compat_dumpit
(bsc#1012628).
- cifs: prevent readdir from changing file size due to stale
directory metadata (bsc#1012628).
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred
close drain paths (bsc#1012628).
- ppp: annotate concurrent dev->stats accesses (bsc#1012628).
- wifi: mt76: mt7925: guard link STA in decap offload
(bsc#1012628).
- wifi: mt76: mt7915: guard HE capability lookups (bsc#1012628).
- wifi: mt76: connac: fix possible NULL-pointer deref in
mt76_connac_mcu_uni_bss_he_tlv() (bsc#1012628).
- wifi: mt76: mt7925: fix possible NULL-pointer deref in
mt7925_mcu_bss_he_tlv() (bsc#1012628).
- wifi: mt76: mt7996: check pointer returned by
mt76_connac_get_he_phy_cap() (bsc#1012628).
- wifi: mt76: fix airoha_npu dependency tracking (bsc#1012628).
- wifi: mt76: mt7925: fix crash in reset link replay
(bsc#1012628).
- wifi: mt76: mt7996: fix possible NULL-pointer deref in
mt7996_mcu_sta_bfer_eht() (bsc#1012628).
- drm/xe/vf: Add drm_dev guards when detaching CCS read/write
buffers (bsc#1012628).
- wifi: brcmfmac: fix 802.1X-SHA256 call trace warning
(bsc#1012628).
- ovl: fix trusted xattr escape prefix matching (bsc#1012628).
- drm/panel: ilitek-ili9882t: fix unmet dependency for
DRM_PANEL_ILITEK_ILI9882T (bsc#1012628).
- drm/panel: s6e3ha8: fix unmet dependency on DRM_DISPLAY_HELPER
(bsc#1012628).
- drm/panel: fix unmet dependency bug for DRM_PANEL_HIMAX_HX83121A
(bsc#1012628).
- drm/vc4: hvs/v3d: Fix null dereference in unbind (bsc#1012628).
- ovl: check access to copy_file_range source with src mounter
creds (bsc#1012628).
- amt: re-read skb header pointers after every pull (bsc#1012628).
- amt: make the head writable before rewriting the L2 header
(bsc#1012628).
- net: bridge: vlan: fix vlan range dumps starting with pvid
(bsc#1012628).
- net: hsr: fix memory leak on slave unregistration by removing
synced VLANs (bsc#1012628).
- smp: Avoid invalid per-CPU CSD lookup with CSD lock debug
(bsc#1012628).
- smp: Make CSD lock acquisition atomic for debug mode
(bsc#1012628).
- net: dpaa: fix mode setting (bsc#1012628).
- net: stmmac: dwmac4: mask interrupts when stopping DMA in
suspend (bsc#1012628).
- sctp: auth: verify auth requirement when auth_chunk is NULL
(bsc#1012628).
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets
(bsc#1012628).
- drm/xe/i2c: Allow per domain unique id (bsc#1012628).
- drm/xe/vm: Fix SVM leak on resv obj alloc failure in
xe_vm_create() (bsc#1012628).
- iomap: correct the range of a partial dirty clear (bsc#1012628).
- iomap: fix incorrect did_zero setting in iomap_zero_iter()
(bsc#1012628).
- tipc: fix u16 MTU truncation in media and bearer MTU validation
(bsc#1012628).
- drm/tests: shmem: Set DMA mask to 64-bit in drm_gem_shmem
(bsc#1012628).
- bpf: tcp: fix double sock release on batch realloc
(bsc#1012628).
- net: stmmac: xgmac: fix l4 filter port overwrite on register
update (bsc#1012628).
- net: stmmac: fix l3l4 filter rejecting unsupported offload
requests (bsc#1012628).
- net: stmmac: reset residual action in L3L4 filters on delete
(bsc#1012628).
- net: stmmac: enable the MAC on link up for all supported speeds
(bsc#1012628).
- net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM
(bsc#1012628).
- mpls: Set rt->rt_nhn just before returning from
mpls_nh_build_multi() (bsc#1012628).
- octeontx2-vf: set TC flower flag on MCAM entry allocation
(bsc#1012628).
- ipv4: icmp: fill flow parameters in icmp_route_lookup decoy
lookup (bsc#1012628).
- ppp: annotate data races in ppp_generic (bsc#1012628).
- hinic: remove unused ethtool RSS user configuration buffers
(bsc#1012628).
- LoongArch: BPF: Zero-extend signed ALU32 div/mod results
(bsc#1012628).
- net: qrtr: restrict socket creation to the initial network
namespace (bsc#1012628).
- raw: annotate lockless match fields in raw_v4_match()
(bsc#1012628).
- net/mlx5: Fix MCIA register buffer overflow on 32 dword reads
(bsc#1012628).
- net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan
rule (bsc#1012628).
- net/mlx5e: Report zero bandwidth for non-ETS traffic classes
(bsc#1012628).
- net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation
(bsc#1012628).
- octeontx2-pf: tc: fix egress ratelimiting (bsc#1012628).
- net: ipv6: fix dif and sdif mismatch in raw6_icmp_error
(bsc#1012628).
- ice: allow creating VFs when !CONFIG_ICE_SWITCHDEV
(bsc#1012628).
- ice: fix LAG recipe to profile association (bsc#1012628).
- ice: prevent tstamp ring allocation for non-PF VSI types
(bsc#1012628).
- idpf: fix max_vport related crash on allocation error during
init (bsc#1012628).
- ipv6: Change allocation flags to match rcu_read_lock section
requirements (bsc#1012628).
- rds: tcp: unregister sysctl before tearing down listen socket
(bsc#1012628).
- ptp: netc: explicitly clear TMR_OFF during initialization
(bsc#1012628).
- mctp: check register_netdevice_notifier() error in
mctp_device_init() (bsc#1012628).
- net: airoha: fix ETS channel derivation in
airoha_tc_setup_qdisc_ets() (bsc#1012628).
- tipc: fix integer overflow in tipc_recvmsg() and
tipc_recvstream() (bsc#1012628).
- bnge/bng_re: fix ring ID widths (bsc#1012628).
- net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD
(bsc#1012628).
- drop_monitor: fix size calculations for 64-bit attributes
(bsc#1012628).
- drop_monitor: perform u64_stats updates under IRQ-disabled
section (bsc#1012628).
- pidfs: make pidfs_ino_lock static (bsc#1012628).
- LoongArch: BPF: Fix memory leak in bpf_jit_free() (bsc#1012628).
- bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()
(bsc#1012628).
- tracing: Fix use-after-free freeing trigger private data
(bsc#1012628).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
(bsc#1012628).
- drm: renesas: rzg2l_mipi_dsi: Move
rzg2l_mipi_dsi_set_display_timing() (bsc#1012628).
- drm/tidss: Fix missing drm_bridge_add() call (bsc#1012628).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
(bsc#1012628).
- drm/rockchip: analogix_dp: Add missing error check for
platform_get_resource() (bsc#1012628).
- drm/imagination: Count paired job fence as dependency in
prepare_job() (bsc#1012628).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
(bsc#1012628).
- drm/exynos: fbdev: Remove offset into screen_buffer
(bsc#1012628).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
parsers (bsc#1012628).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
(bsc#1012628).
- drm/tegra: fbdev: Remove offset into framebuffer memory
(bsc#1012628).
- drm/imagination: Fit paired fragment job in the correct CCCB
(bsc#1012628).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
parsers (bsc#1012628).
- drm/i915/cdclk: Fix up CDCLK_FREQ_DECIMAL without a full PLL
re-enable (bsc#1012628).
- drm/amd/pm: re-enable MC access after PrepareMp1ForUnload on
SMU V15 APUs (bsc#1012628).
- drm/amdgpu/gfx: fix cleaner shader IB buffer overflow
(bsc#1012628).
- drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when
it isn't at 0 (v2) (bsc#1012628).
- drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older
(bsc#1012628).
- drm/amdgpu: check amdgpu_vm_bo_find() result in GET_MAPPING_INFO
(bsc#1012628).
- drm/sysfb: Do not page-align visible size of the framebuffer
(bsc#1012628).
- drm/sysfb: Avoid truncating maximum stride (bsc#1012628).
- drm/xe/guc: Fix buffer overflow in steered register list
allocation (bsc#1012628).
- drm/xe: Add compact-PT and addr mask handling for page reclaim
(bsc#1012628).
- drm/amd/display: Restore periodic detection for DCN35
(bsc#1012628).
- drm/amdgpu/gfx9: Fix Ring and IB test fail after mode2
(bsc#1012628).
- drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are
both GTT (bsc#1012628).
- drm/amdgpu: Fix context pstate override handling (bsc#1012628).
- drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1
(bsc#1012628).
- drm/nouveau: fix reversed error cleanup order in ucopy functions
(bsc#1012628).
- drm/sysfb: Avoid possible truncation with calculating visible
size (bsc#1012628).
- drm/sysfb: Return errno code from drm_sysfb_get_visible_size()
(bsc#1012628).
- drm/amdgpu: Respect placement requirements in amdgpu_gtt_mgr
functions (bsc#1012628).
- drm/amdkfd: Use exclusive bounds for SVM split alignment checks
(bsc#1012628).
- drm/displayid: fix Tiled Display Topology ID size (bsc#1012628).
- drm/i915/gem: Add missing nospec on parallel submit slot
(bsc#1012628).
- drm/nouveau/acr: fix missing nvkm_done() in error path of
nvkm_acr_oneinit() (bsc#1012628).
- drm/radeon: fix r100_copy_blit for large BOs (bsc#1012628).
- drm/xe/display: skip FORCE_WC and vm_bound check for external
dma-bufs (bsc#1012628).
- drm/xe: Return error on non-migratable faults requiring devmem
(bsc#1012628).
- drm/xe/oa: Fix offset alignment for MERT
WHITELIST_OA_MERT_MMIO_TRG (bsc#1012628).
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists
(bsc#1012628).
- drm/xe: Fix PTE index in xe_vm_populate_pgtable() for chunked
binds (bsc#1012628).
- drm/xe: Hold a dma-buf reference for imported BOs (bsc#1012628).
- drm/xe/vm: Fix BO prefetch with CONSULT_MEM_ADVISE_PREF_LOC
(bsc#1012628).
- drm/xe/pt: Reset current_op in xe_pt_update_ops_init()
(bsc#1012628).
- drm/xe/nvm: fix writable override for CRI (bsc#1012628).
- drm/xe/madvise: Skip invalidation for purgeable state updates
(bsc#1012628).
- drm/imagination: Fix double call to drm_sched_entity_fini()
(bsc#1012628).
- drm/imagination: Fix user array stride in pvr_set_uobj_array()
(bsc#1012628).
- drm/imagination: fix error checking of pvr_vm_context_lookup()
(bsc#1012628).
- drm/imagination: acquire vm_ctx->lock before mapping memory
to GPU VM (bsc#1012628).
- drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO
size (bsc#1012628).
- drm/amdkfd: Guard m->cp_hqd_eop_control setting by
q->eop_ring_buffer_size (bsc#1012628).
- drm/amdkfd: Use kvcalloc to allocate arrays (bsc#1012628).
- drm/amdkfd: Check bounds in allocate_event_notification_slot
(bsc#1012628).
- drm/amdkfd: Check bounds on CRIU restore queue type and mqd size
(bsc#1012628).
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation
(bsc#1012628).
- drm/amdkfd: free MQD managers on DQM init failures
(bsc#1012628).
- drm/amd/display: set MSA MISC1 bit 6 when using VSC SDP for
DCE 11.x (bsc#1012628).
- drm/amd/display: Handle struct
drm_plane_state.ignore_damage_clips (bsc#1012628).
- drm/amd/display: use kvzalloc to allocate struct dc
(bsc#1012628).
- drm/amd/display: detect_link_and_local_sink: DP alt mode
timeout path leaks prev_sink reference (bsc#1012628).
- Revert "drm/amd/display: Restore 5s vbl offdelay for NV3x+
DGPUs" (bsc#1012628).
- drm/virtio: bound EDID block reads to the response buffer
(bsc#1012628).
- drm/i915/vrr: require valid min/max vfreq for VRR (bsc#1012628).
- drm/i915/hdcp: require monotonically increasing seq_num_v
(bsc#1012628).
- drm/i915/hdcp: check streams[] bounds before overflow
(bsc#1012628).
- drm/amdgpu: add the doorbell index input for suspending userq
(bsc#1012628).
- drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON()
(bsc#1012628).
- drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()
(bsc#1012628).
- drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()
(bsc#1012628).
- drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()
(bsc#1012628).
- drm/i915: Return NULL on error in active_instance (bsc#1012628).
- drm/i915/bios: range check LFP Data Block panel_type2
(bsc#1012628).
- drm/amdgpu/soc24: reset dGPU if suspend got aborted
(bsc#1012628).
- drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() (bsc#1012628).
- drm/amd/amdgpu: disable ASPM on VI if pcie dpm is disabled
(bsc#1012628).
- drm/amdgpu: fix lifetime issue of
amdgpu_vm_get_task_info_pasid() (bsc#1012628).
- drm/amdgpu: trigger GPU recovery when userq destroy fails to
unmap a hung queue (bsc#1012628).
- drm/i915/gem: Do not leak siblings[] on proto context error
(bsc#1012628).
- drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU
(bsc#1012628).
- drm/i915/gt: Fix NULL deref on sched_engine alloc failure
(bsc#1012628).
- drm/i915/mst: limit DP MST ESI service loop (bsc#1012628).
- drm/amd/pm: fix smu14 power limit range calculation
(bsc#1012628).
- drm/gfx10: Program DB_RING_CONTROL (bsc#1012628).
- drm/virtio: Don't detach GEM from a non-created context
(bsc#1012628).
- drm/gpusvm: publish dpagemap early to avoid device mapping
leak on error (bsc#1012628).
- drm/ttm: Account for NULL and handle pages in ttm_pool_backup
(bsc#1012628).
- drm/panthor: return error on truncated firmware (bsc#1012628).
- drm/amdgpu: Release VFCT ACPI table reference (bsc#1012628).
- drm/amdgpu: Fix VFCT bus number matching with soft filter
(bsc#1012628).
- drm/amdgpu/userq: fix indefinite fence wait during GPU reset
(bsc#1012628).
- drm/amd: Create a device link between APU display and XHCI
devices (bsc#1012628).
- drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7
260X) (bsc#1012628).
- drm/amd/display: set new_stream to NULL after release
(bsc#1012628).
- drm/amd/display: consolidate DCN vblank/flip handling onto
vupdate_no_lock (bsc#1012628).
- drm/amd/display: dce100: skip non-DP stream encoders for DP MST
(bsc#1012628).
- drm/amd/display: Force PWM backlight on Lenovo Legion 5 15ARH05
(bsc#1012628).
- drm/amd/display: Fix backlight max_brightness to match exported
range (bsc#1012628).
- drm/amdgpu: Disable PCIe dynamic speed switching on Ryzen
Pinnacle Ridge (bsc#1012628).
- drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved
(bsc#1012628).
- drm/amdgpu: Print vmid, pasid and more task info in devcoredump
(bsc#1012628).
- drm/amdgpu: always emit the job vm fence (bsc#1012628).
- drm/amd/display: Fix flip-done timeouts on mode1 reset
(bsc#1012628).
- drm/vc4: Shut down BO cache timer before teardown (bsc#1012628).
- drm/amd/display: Fix missing DCE check in
dm_gpureset_toggle_interrupts() (bsc#1012628).
- drm/pagemap: Clear driver-provided PFNs from migration PFN array
(bsc#1012628).
- drm/vmwgfx: Validate vmw_surface_metadata::array_size
(bsc#1012628).
- drm/vc4: Prevent shader BO mappings from becoming writable
(bsc#1012628).
- drm/pagemap: Guard HPAGE_PMD_ORDER use with
CONFIG_ARCH_ENABLE_THP_MIGRATION (bsc#1012628).
- drm/ttm/pool: back up at native page order (bsc#1012628).
- drm/gpusvm: Zero HMM PFNs before scanning ranges (bsc#1012628).
- drm/gpusvm: Fix MM reference leak in drm_gpusvm_range_evict
(bsc#1012628).
- drm/v3d: Reach the GMP through the hub registers on V3D 7.x
(bsc#1012628).
- media: airspy: Return queued buffers on start_streaming()
failure (bsc#1012628).
- media: amlogic-c3: Add validations for ae and awb config
(bsc#1012628).
- media: aspeed: fix missing of_reserved_mem_device_release()
on probe failure (bsc#1012628).
- media: cec: seco: unregister adapter on IR probe failure
(bsc#1012628).
- media: cedrus: clean up media device on probe failure
(bsc#1012628).
- media: cedrus: Fix missing cleanup in error path (bsc#1012628).
- media: cedrus: skip invalid H.264 reference list entries
(bsc#1012628).
- media: chips-media: wave5: Move src_buf Removal to finish_encode
(bsc#1012628).
- media: cx231xx: fix devres lifetime (bsc#1012628).
- media: cx23885: add ioremap return check and cleanup
(bsc#1012628).
- =?UTF-8?q?media:=20dw9719:=20Add=20back=20the=20I=C2=B2C?=
=?UTF-8?q?=20device=20id=20table?= (bsc#1012628).
- media: i2c: alvium: fix critical pointer access in
alvium_ctrl_init (bsc#1012628).
- media: imx219: Fix maximum frame length in lines (bsc#1012628).
- media: intel/ipu6: Improve DWC PHY HSFREQRANGE band selection
for overlapping ranges (bsc#1012628).
- media: iris: Fix use IRQF_NO_AUTOEN when requesting the IRQ
(bsc#1012628).
- media: mali-c55: Add missing of_reserved_mem_device_release()
(bsc#1012628).
- media: mali-c55: Disable pm_runtime on probe error
(bsc#1012628).
- media: mali-c55: Fix possible ERR_PTR in enable_streams
(bsc#1012628).
- media: mali-c55: Power-off the peripheral in remove()
(bsc#1012628).
- media: marvell-cam: fix missing pci_disable_device() on remove
(bsc#1012628).
- media: meson: vdec: Fix memory leak in error path of vdec_open
(bsc#1012628).
- media: msi2500: Return queued buffers on start_streaming()
failure (bsc#1012628).
- media: nuvoton: npcm-video: fix error handling in
npcm_video_init() (bsc#1012628).
- media: nuvoton: npcm-video: fix memory leaks in probe and remove
(bsc#1012628).
- media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in
crossbar and pipe (bsc#1012628).
- media: nxp: imx8-isi: Clean up already-initialized pipes on
probe failure (bsc#1012628).
- media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in
pipe init error path (bsc#1012628).
- media: nxp: imx8-isi: Fix potential out-of-bounds issues
(bsc#1012628).
- media: nxp: imx8-isi: Fix scale factor calculation for hardware
rounding (bsc#1012628).
- media: pci: dm1105: Free allocated workqueue (bsc#1012628).
- media: pwc: Drain fill_buf on start_streaming() failure
(bsc#1012628).
- media: pwc: Return queued buffers on start_streaming() failure
(bsc#1012628).
- media: qcom: camss: Fix RDI streaming for CSID 680
(bsc#1012628).
- media: qcom: camss: Fix RDI streaming for CSID GEN2
(bsc#1012628).
- media: qcom: camss: Fix RDI streaming for CSID GEN3
(bsc#1012628).
- media: qcom: camss: Fix RDI streaming for CSID 340
(bsc#1012628).
- media: radio-si476x: Unregister v4l2_device on probe failure
(bsc#1012628).
- media: rtl2832: fix use-after-free in rtl2832_remove()
(bsc#1012628).
- media: rtl2832_sdr: Return queued buffers on start_streaming()
failure (bsc#1012628).
- media: rzg2l-cru: Skip ICnMC configuration when ICnSVC is used
(bsc#1012628).
- media: rzv2h-ivc: Wait for frame end in stop_streaming
(bsc#1012628).
- media: saa7134: Fix a possible memory leak in
saa7134_video_init1 (bsc#1012628).
- media: stm32-dcmipp: Return queued buffers on start_streaming()
failure (bsc#1012628).
- media: stm32: dcmi: unregister notifier on probe failure
(bsc#1012628).
- media: sun4i-csi: Return queued buffers on start_streaming()
failure (bsc#1012628).
- media: synopsys: hdmirx: Fix HPD lane hold time (bsc#1012628).
- media: tegra-video: vi: fix invalid u32 return value in format
lookup (bsc#1012628).
- media: ti: vpe: Fix fwnode_handle leak in vip_probe_complete()
(bsc#1012628).
- media: ti: vpe: Fix the error code of devm_kzalloc() in
vip_probe_slice() (bsc#1012628).
- media: ti: vpe: Fix the error code of devm_request_irq()
(bsc#1012628).
- media: ti: vpe: unwind v4l2 device registration on probe error
(bsc#1012628).
- media: uapi: rkisp: Correct name version enum (bsc#1012628).
- media: v4l2-ctrls-request: add NULL check in
v4l2_ctrl_request_complete() (bsc#1012628).
- media: v4l2-ctrls: validate HEVC active reference counts
(bsc#1012628).
- media: v4l2-fwnode: Fix subdev owner overwritten in
v4l2_async_register_subdev_sensor() (bsc#1012628).
- media: v4l2-subdev: Fail {enable,disable}_streams and
s_streaming nicely (bsc#1012628).
- media: vb2: use ssize_t for vb2_read/vb2_write (bsc#1012628).
- media: verisilicon: Export only needed pixels formats
(bsc#1012628).
- media: vidtv: fix reference leak on failed device registration
(bsc#1012628).
- media: vimc: fix reference leak on failed device registration
(bsc#1012628).
- media: vivid: add vivid_update_reduced_fps() (bsc#1012628).
- media: vivid: check for vb2_is_busy() when toggling caps
(bsc#1012628).
- media: vivid: fix cleanup bugs in vivid_init() (bsc#1012628).
- media: vpif_capture: fix OF node reference imbalance
(bsc#1012628).
- ALSA: hda/realtek: Fix speakers on Lunnen Ground 14
(bsc#1012628).
- ALSA: seq: close a re-opened queue timer in the destructor
(bsc#1012628).
- ALSA: hda: codecs: hdmi: disable keep-alive before audio format
change (bsc#1012628).
- ALSA: timer: drain a slave's callback before its master detaches
it (bsc#1012628).
- ALSA: timer: don't re-enter an instance callback that is still
running (bsc#1012628).
- wifi: ath6kl: fix OOB access from firmware ADDBA window size
(bsc#1012628).
- wifi: ath6kl: fix use-after-free in aggr_reset_state()
(bsc#1012628).
- wifi: mwifiex: fix NULL dereference when the AP has HT-cap
but no HT-oper (bsc#1012628).
- wifi: wilc1000: validate assoc response length before
subtracting header (bsc#1012628).
- wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses
(bsc#1012628).
- wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses
(bsc#1012628).
- wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses
(bsc#1012628).
- wifi: mt76: restrict NPU/PPE active checks to MMIO devices
(bsc#1012628).
- wifi: brcmfmac: drain bus_reset work on device removal
(bsc#1012628).
- wifi: brcmfmac: make release_scratchbuffers idempotent
(bsc#1012628).
- wifi: brcmfmac: set F2 blocksize to 256 for BCM43752
(bsc#1012628).
- wifi: ath11k: fix refcount leak in
ath11k_ahb_fw_resources_init() (bsc#1012628).
- wifi: ath12k: fix NULL pointer dereference in rhash table
destroy (bsc#1012628).
- staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()
(bsc#1012628).
- staging: rtl8723bs: fix inverted HT40 secondary channel offset
(bsc#1012628).
- Bluetooth: hci_sync: Protect UUID list traversal (bsc#1012628).
- Bluetooth: RFCOMM: Fix session UAF in set_termios (bsc#1012628).
- exec: fix unsigned loop counter wrap in transfer_args_to_stack()
(bsc#1012628).
- binfmt_misc: set have_execfd only once the interpreter is opened
(bsc#1012628).
- platform/loongarch: laptop: Explicitly reset bl_powered state
when suspend (bsc#1012628).
- rust_binder: only print failure if error has source
(bsc#1012628).
- rust: time: fix as_micros_ceil() to round correctly for negative
Delta (bsc#1012628).
- rust: device: avoid trailing ; in printing macros (bsc#1012628).
- rust: allow `suspicious_runtime_symbol_definitions` lint for
Rust >= 1.98 (bsc#1012628).
- rust: allow `clippy::unwrap_or_default` globally (bsc#1012628).
- objtool/rust: add one more `noreturn` Rust function for Rust
1.99.0 (bsc#1012628).
- LoongArch: Fix address space mismatch in kexec command line
lookup (bsc#1012628).
- LoongArch: Fix build errors due to wrong instructions for 32BIT
(bsc#1012628).
- LoongArch: Fix oops during single-step debugging (bsc#1012628).
- LoongArch: Increase TASK_STRUCT_OFFSET up to 2040 for 32BIT
(bsc#1012628).
- LoongArch: Move jump_label_init() before parse_early_param()
(bsc#1012628).
- LoongArch: Retrieve CPU package ID from PPTT when available
(bsc#1012628).
- cdrom: fix stack out-of-bounds read in CDROMVOLCTRL
(bsc#1012628).
- rhashtable: clear stale iter->p on table restart (bsc#1012628).
- firmware: stratix10-svc: fix memory leaks and list corruption
bugs (bsc#1012628).
- firmware: stratix10-svc: fix teardown order in remove to
prevent race (bsc#1012628).
- firmware: stratix10-svc: handle NO_RESPONSE in async poll
(bsc#1012628).
- x86/boot/compressed: Disable jump tables (bsc#1012628).
- comedi: comedi_parport: deal with premature interrupt
(bsc#1012628).
- uio_hv_generic: Bind to FCopy device by default (bsc#1012628).
- serial: sc16is7xx: implement gpio get_direction() callback
(bsc#1012628).
- serial: 8250_mid: Fix NULL function pointer dereference on
DNV/ICX-D/SNR platforms (bsc#1012628).
- selftests: ntsync: correct CONFIG_NTSYNC name (bsc#1012628).
- mei: bus: access mei_device under device_lock on cleanup
(bsc#1012628).
- intel_th: fix MSC output device reference leak (bsc#1012628).
- misc: nsm: only unlock nsm_dev on post-lock error paths
(bsc#1012628).
- misc: nsm: pin the module while the device is open
(bsc#1012628).
- tracing: Delay module ref count for "enable_event" trigger
(bsc#1012628).
- tracing: Fix context switch counter truncation (bsc#1012628).
- tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev
(bsc#1012628).
- tracing: Fix resource leak on mmiotrace trace_pipe close
(bsc#1012628).
- tracing: Fix union collision of module and refcnt for dynamic
events (bsc#1012628).
- tracing: perf: Fix stale head for perf syscall tracing
(bsc#1012628).
- tracing: Propagate errors from remote event bulk updates
(bsc#1012628).
- ublk: wait on ublk_dev_ready() instead of ub->completion
(bsc#1012628).
- tracing/eprobe: Fix exact system name matching in
eprobe_dyn_event_match() (bsc#1012628).
- tracing/probes: Avoid temporary buffer truncation in
trace_probe_match_command_args() (bsc#1012628).
- tracing/probes: Fix potential underflow in LEN_OR_ZERO macro
(bsc#1012628).
- tracing/probes: Prevent out-of-bounds write in
__trace_probe_log_err() (bsc#1012628).
- tracing/remotes: Fix page_va[] access before counter update
in trace_remote_alloc_buffer() (bsc#1012628).
- arm64: make huge_ptep_get handled unaligned addresses
(bsc#1012628).
- arm64: syscall: Ensure saved x0 is kept in-sync with tracer
updates (bsc#1012628).
- Revert "arm64: syscall: Ensure saved x0 is kept in-sync with
tracer updates" (bsc#1012628).
- mptcp: decrement subflows counter on failed passive join
(bsc#1012628).
- mptcp: fix BUILD_BUG_ON on legacy ARM config (bsc#1012628).
- mptcp: fix stale skb->sk reference on subflow close
(bsc#1012628).
- mptcp: only set DATA_FIN when a mapping is present
(bsc#1012628).
- mptcp: pm: userspace: fix use-after-free in get_local_id
(bsc#1012628).
- selftests: mptcp: userspace_pm: fix undefined variable port
(bsc#1012628).
- afs: Fix afs_edit_dir_remove() to get, not find, block 0
(bsc#1012628).
- btrfs: do not try compression for data reloc inodes
(bsc#1012628).
- userfaultfd: prevent registration of special VMAs (bsc#1012628).
- mm/damon/core: validate ranges in damon_set_regions()
(bsc#1012628).
- m68k: avoid -Wunused-but-set-parameter in clear_user_page()
(bsc#1012628).
- mm/damon/core: disallow overlapping input ranges for
damon_set_regions() (bsc#1012628).
- mm/kmemleak: fix checksum computation for per-cpu objects
(bsc#1012628).
- mm/memory-failure: trace: change memory_failure_event to ras
subsystem (bsc#1012628).
- mm/page_vma_mapped: fix device-private PMD handling
(bsc#1012628).
- mm/huge_memory: set PG_has_hwpoisoned only after new folio
head is established (bsc#1012628).
- sctp: don't free the ASCONF's own transport in DEL-IP processing
(bsc#1012628).
- sctp: avoid auth_enable sysctl UAF during netns teardown
(bsc#1012628).
- sctp: close UDP tunnel sockets during netns teardown
(bsc#1012628).
- ceph: fix pre-auth out-of-bounds read on snaptrace in
ceph_handle_caps() (bsc#1012628).
- ceph: fix refcount leak in ceph_readdir() (bsc#1012628).
- ceph: fix writeback_count leak in write_folio_nounlock()
(bsc#1012628).
- libceph: bound get_version reply decode to front len
(bsc#1012628).
- libceph: bound pg_{temp,upmap,upmap_items} length to
CEPH_PG_MAX_SIZE (bsc#1012628).
- libceph: Fix multiplication overflow in
decode_new_up_state_weight() (bsc#1012628).
- libceph: fix two unsafe bare decodes in decode_lockers()
(bsc#1012628).
- libceph: guard missing CRUSH type name lookup (bsc#1012628).
- libceph: refresh auth->authorizer_buf{,_len} after authorizer
update (bsc#1012628).
- libceph: Reject monmaps advertising zero monitors (bsc#1012628).
- libceph: reject zero bucket types in crush_decode (bsc#1012628).
- libceph: remove debugfs files before client teardown
(bsc#1012628).
- amt: fix use-after-free in AMT delayed works (bsc#1012628).
- ASoC: fsl: imx-card: Skip sysclk reset for active DAIs in
shutdown (bsc#1012628).
- ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP
(bsc#1012628).
- binfmt_elf_fdpic: only honour the first PT_INTERP (bsc#1012628).
- fs/super: fix emergency thaw double-unlock of s_umount
(bsc#1012628).
- fs: preserve ACL_DONT_CACHE state in forget_cached_acl()
(bsc#1012628).
- fscrypt: Add missing superblock check in
find_or_insert_direct_key() (bsc#1012628).
- fscrypt: Avoid dynamic allocation in fscrypt_get_devices()
(bsc#1012628).
- ftrace: Add global mutex to serialize trace_parser access
(bsc#1012628).
- io_uring/rw: fix missing ERESTARTSYS conversion in read paths
(bsc#1012628).
- iomap: fix out-of-bounds bitmap_set() with zero-length range
(bsc#1012628).
- iommu/vt-d: Disallow SVA if page walk is not coherent
(bsc#1012628).
- mm/slub: fix lost local objects when bulk remote free batch
fills (bsc#1012628).
- mm/slab: fix a memory leak due to bootstrapping sheaves twice
(bsc#1012628).
- net: stmmac: intel: skip SerDes reconfig when rate is unchanged
(bsc#1012628).
- phonet: pep: fix use-after-free in pep_get_sb() (bsc#1012628).
- vxlan: require CAP_NET_ADMIN in the device netns for changelink
(bsc#1012628).
- net: slip: serialize receive against buffer reallocation
(bsc#1012628).
- geneve: require CAP_NET_ADMIN in the device netns for changelink
(bsc#1012628).
- net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()
(bsc#1012628).
- net/iucv: fix use-after-free of a severed iucv_path
(bsc#1012628).
- net/mlx5e: Use sender devcom for MPV master-up (bsc#1012628).
- net/sched: serialize qdisc_rtab_list against concurrent get/put
(bsc#1012628).
- net/x25: fix use-after-free in x25_kill_by_neigh()
(bsc#1012628).
- net: gro: fix double aggregation of flush-marked skbs
(bsc#1012628).
- net: hip04: fix RX buffer leak on build_skb failure
(bsc#1012628).
- net: pcs: xpcs: fix SGMII state reading (bsc#1012628).
- net: qrtr: ns: Raise node count limit to 512 (bsc#1012628).
- proc: Fix broken error paths for namespace links (bsc#1012628).
- s390/ptff: Export ptff_function_mask[] (bsc#1012628).
- ptp: ptp_s390: Add missing facility check (bsc#1012628).
- ice: fix PTP Call Trace during PTP release (bsc#1012628).
- super: fix emergency thaw deadlock on frozen block devices
(bsc#1012628).
- rbd: Reset positive result codes to zero in object map update
path (bsc#1012628).
- smb: client: handle STATUS_STOPPED_ON_SYMLINK responses without
a symlink target (bsc#1012628).
- ksmbd: defer destroy_previous_session() until after NTLM
authentication (bsc#1012628).
- ksmbd: validate minimum PDU size for transform requests
(bsc#1012628).
- gve: fix Rx queue stall on alloc failure (bsc#1012628).
- ice: reject out-of-range ptype in ice_parser_profile_init
(bsc#1012628).
- ice: use READ_ONCE() to access cached PHC time (bsc#1012628).
- ila: reload IPv6 header after pskb_may_pull in checksum adjust
(bsc#1012628).
- mac802154: hold an interface reference across the scan worker
(bsc#1012628).
- mac802154: llsec: reject frames shorter than the authentication
tag (bsc#1012628).
- mctp: serial: handle zero-length frames to prevent rx buffer
overflow (bsc#1012628).
- openvswitch: fix GSO userspace truncation underflow
(bsc#1012628).
- ovpn: fix peer refcount leak in TCP error paths (bsc#1012628).
- ovpn: hold peer before scheduling keepalive work (bsc#1012628).
- pppoe: reload header pointer after dev_hard_header()
(bsc#1012628).
- rtase: Workaround for TX hang caused by hardware packet parsing
(bsc#1012628).
- tcp: initialize standalone TCP-AO response padding
(bsc#1012628).
- tcp: challenge ACK for non-exact RST in SYN-RECEIVED
(bsc#1012628).
- tipc: clear sock->sk on the failed-insert path in
tipc_sk_create() (bsc#1012628).
- vsock/virtio: collapse receive queue under memory pressure
(bsc#1012628).
- vxlan: mdb: Fix source list corruption on a failed replace
(bsc#1012628).
- watchdog: s32g_wdt: remove incorrect options in watchdog_info
struct (bsc#1012628).
- drm/amd/pm: fix amdgpu_pm_info power display units
(bsc#1012628).
- drm/amd/pm: make pp_features read-only when scpm is enabled
(bsc#1012628).
- drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() (bsc#1012628).
- drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON()
(bsc#1012628).
- drm/amdgpu/gfx11: fix EOP interrupt routing for KQ and userq
(bsc#1012628).
- drm/amdgpu/gfx12: fix EOP interrupt routing for KQ and userq
(bsc#1012628).
- drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON() (bsc#1012628).
- drm/amdgpu/gfx8: drop unecessary BUG_ON() (bsc#1012628).
- drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON()
(bsc#1012628).
- drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() (bsc#1012628).
- drm/amdgpu/jpeg: fix jpeg_v4_0_3_is_idle detection
(bsc#1012628).
- drm/amdgpu/jpeg: fix jpeg_v5_0_1_is_idle detection
(bsc#1012628).
- drm/amdgpu/mes11: set doorbell offset for suspending userq
(bsc#1012628).
- drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()
(bsc#1012628).
- drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON()
(bsc#1012628).
- drm/amdgpu/vce: fix integer overflow in image size
(bsc#1012628).
- drm/amdgpu/vcn4: avoid rereading IB param length (bsc#1012628).
- drm/dp_mst: Handle torn-down topology gracefully in
drm_dp_mst_topology_queue_probe() (bsc#1012628).
- drm/amdgpu: fix division by zero with invalid uvd dimensions
(bsc#1012628).
- drm/amdgpu: Fix kernel panic during driver load failure
(bsc#1012628).
- drm/amdgpu: fix resource leak on ACP reset timeout
(bsc#1012628).
- drm/amdgpu: invoke pm_genpd_remove() before freeing genpd
(bsc#1012628).
- drm/amdgpu: reject mapping a reserved doorbell to a new queue
(bsc#1012628).
- drm/amdgpu: fix aperture mapping leak (bsc#1012628).
- drm/amd/pm: fix smu13 power limit range calculation
(bsc#1012628).
- drm/amdgpu: fix check in amdgpu_hmm_invalidate_gfx
(bsc#1012628).
- selftests: drv-net: add missing kconfig for psp.py
(bsc#1012628).
- ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl
(bsc#1012628).
- ksmbd: restore DACL size on check_add_overflow() to avoid
malformed ACL (bsc#1012628).
- ksmbd: bound DACL dedup walk to copied ACEs (bsc#1012628).
- ksmbd: validate ACE size against SID sub-authorities
(bsc#1012628).
- drm/amd/display: Fix DTB DTO updates breaking live pixel rate
sources (bsc#1012628).
- audit: use 'unsigned int' instead of 'unsigned' (bsc#1012628).
- audit: fix recursive locking deadlock in audit_dupe_exe()
(bsc#1012628).
- fuse-uring: fix race between registration and connection
abortion (bsc#1012628).
- xfs: don't replace the wrong part of the cow fork (bsc#1012628).
- SUNRPC: Add helpers to convert xdr_buf byte ranges to
scatterlists (bsc#1012628).
- SUNRPC: Return an error from xdr_buf_to_bvec() on overflow
(bsc#1012628).
- mm/sparse-vmemmap: pass @pgmap argument to memory deactivation
paths (bsc#1012628).
- mm/sparse-vmemmap: fix DAX vmemmap accounting with optimization
(bsc#1012628).
- net: mana: Optimize irq affinity for low vcpu configs
(bsc#1012628).
- bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c
(bsc#1012628).
- bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()
(bsc#1012628).
- sched_ext: Move shared helpers from ext.c into internal.h and
cid.h (bsc#1012628).
- sched_ext: Preserve rq tracking across local DSQ dispatch
(bsc#1012628).
- selftests: drv-net: cope with slow env in so_txtime.py test
(bsc#1012628).
- selftests: drv-net: so_txtime: relax variance bounds
(bsc#1012628).
- KVM: SVM: Bump asid_generation on CPU online to avoid ASID
collision after hotplug (bsc#1012628).
- cifs: fix time_last_write stamp placement in setattr/truncate
paths (bsc#1012628).
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put()
(bsc#1012628).
- Update config files.
- Refresh patches.suse/vfs-add-super_operations-get_inode_dev.
- Rename to
patches.kernel.org/7.1.6-091-udmabuf-Ensure-to-perform-cache-synchronisation.patch.
- Rename to
patches.kernel.org/7.1.6-211-usb-atm-ueagle-atm-reject-descriptors-that-conf.patch.
- Rename to
patches.kernel.org/7.1.6-394-drm-i915-mtl-Enable-PPS-before-PLL.patch.
- commit 5de54b0
* Mon Aug 03 2026 jslaby@suse.cz
- Refresh
patches.suse/x86-alternative-dump-more-on-failure-in-__text_poke.patch.
Fix for 32bit.
- commit be5c025
* Mon Aug 03 2026 jslaby@suse.cz
- Refresh
patches.suse/x86-alternative-dump-more-on-failure-in-__text_poke.patch.
Dump more.
- commit 6d96b09
* Fri Jul 31 2026 pfalcato@suse.de
- Delete patches.suse/crasher.patch (bsc#1273084).
Sunset the crasher module and remove it from configs.
(cherry picked from commit 4527af7006350b5e062f5d7843fc87eb4999238c)
- commit dd8e4c7
* Thu Jul 30 2026 jslaby@suse.cz
- Refresh patches.suse/crasher.patch.
Add MODULE_DESCRIPTION() to fix:
WARNING: modpost: missing MODULE_DESCRIPTION() in drivers/char/crasher.o
(cherry picked from commit 71c8b26203eb694b1af88296142da73b9d7adde5)
- commit 05b8588
* Tue Jul 28 2026 jslaby@suse.cz
- usb: atm: ueagle-atm: reject descriptors that confuse probe
and disconnect (git-fixes).
- commit 862e13e
* Tue Jul 28 2026 msuchanek@suse.de
- mkspec-dtb: Move provides-obsoletes to package list
- commit 62b3949
* Tue Jul 28 2026 msuchanek@suse.de
- mkspec-dtb: Move DTS prefix into package list
- commit 225c506
* Tue Jul 28 2026 msuchanek@suse.de
- mkspec-dtb: Put per-architecture package lists into a hash
- commit c4b48e1
* Tue Jul 28 2026 msuchanek@suse.de
- mkspec-dtb: re-indent
- commit 1e2a2b0
* Tue Jul 28 2026 jslaby@suse.cz
- Linux 7.1.5 (bsc#1012628).
- crypto: algif_skcipher - force synchronous processing
(bsc#1012628).
- iommu/vt-d: Clear Present bit before tearing down scalable-mode
context entry (bsc#1012628).
- crypto: sun4i-ss - Remove insecure and unused rng_alg
(bsc#1012628).
- media: uvcvideo: Fix deadlock if uvc_status_stop is called
from async_ctrl.work (bsc#1012628).
- ALSA: hda/realtek: Add quirk for TongFang X6xx45xU
(bsc#1012628).
- ALSA: hda: conexant: Remove mic bias threshold override
(bsc#1012628).
- ALSA: hda: Fix cached processing coefficient verbs
(bsc#1012628).
- ALSA: hda/realtek: Fix speakers on Legion Pro 7 16ARX8H with
codec SSID 17aa:38a7 (bsc#1012628).
- media: uvcvideo: Use hw timestaming if the clock buffer is full
(bsc#1012628).
- media: uvcvideo: Avoid partial metadata buffers (bsc#1012628).
- media: uvcvideo: Fix buffer sequence in frame gaps
(bsc#1012628).
- media: uvcvideo: Fix dev_sof filtering in hw timestamp
(bsc#1012628).
- media: uvcvideo: Do not add clock samples with small sof delta
(bsc#1012628).
- media: uvcvideo: Relax the constrains for interpolating the
hw clock (bsc#1012628).
- media: uvcvideo: Fix sequence number when no EOF (bsc#1012628).
- dt-bindings: media: sun4i-a10-video-engine: Add interconnect
properties (bsc#1012628).
- dt-bindings: power: imx93: Add MIPI PHY power domain
(bsc#1012628).
- serial: msm: Disable DMA for kernel console UART (bsc#1012628).
- serial: max310x: implement gpio_chip::get_direction()
(bsc#1012628).
- serial: 8250_omap: clear rx_running on zero-length DMA completes
(bsc#1012628).
- rxrpc: serialize kernel accept preallocation with socket
teardown (bsc#1012628).
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc
(bsc#1012628).
- rxrpc: Don't move a peeked OOB message onto the pending queue
(bsc#1012628).
- rxrpc: Fix UAF in rxgk_issue_challenge() (bsc#1012628).
- rxrpc: Fix socket notification race (bsc#1012628).
- rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)
(bsc#1012628).
- rxrpc: Fix potential infinite loop in rxrpc_recvmsg()
(bsc#1012628).
- rxrpc: Fix rxrpc_rotate_tx_rotate() to check there's something
to rotate (bsc#1012628).
- rxrpc: Fix oob challenge leak in cleanup after notification
failure (bsc#1012628).
- rxrpc: Fix ACKALL packet handling (bsc#1012628).
- rxrpc: Fix the reception of a reply packet before data
transmission (bsc#1012628).
- rxrpc: Fix leak of connection from OOB challenge (bsc#1012628).
- rxrpc: Fix double unlock in rxrpc_recvmsg() (bsc#1012628).
- afs: Fix netns teardown to cancel the preallocation charger
(bsc#1012628).
- afs: fix NULL pointer dereference in afs_get_tree()
(bsc#1012628).
- afs: handle CB.InitCallBackState3 requests without a server
record (bsc#1012628).
- afs: Fix further netns teardown to cancel the preallocation
charger (bsc#1012628).
- afs: Fix uncancelled rxrpc OOB message handler (bsc#1012628).
- fbcon: fix NULL pointer dereference for a console without
vc_data (bsc#1012628).
- fbcon: Use correct type for vc_resize() return value
(bsc#1012628).
- soc: fsl: qe_ports_ic: Add missing cleanup on device removal
(bsc#1012628).
- openrisc: mm: Fix section mismatch between map_page and
__set_fixmap (bsc#1012628).
- clocksource/drivers/sun5i: Handle error returns from
devm_reset_control_get_optional_exclusive() (bsc#1012628).
- accel/amdxdna: Fix leak when pinning ubuf pages (bsc#1012628).
- drm/rockchip: inno-hdmi: Switch to drmm_kzalloc() (bsc#1012628).
- drm/rockchip: dw_dp: Switch to drmm_kzalloc() (bsc#1012628).
- drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove()
(bsc#1012628).
- drm/rockchip: Test for imported buffers with
drm_gem_is_imported() (bsc#1012628).
- drm/tidss: Drop extra drm_mode_config_reset() call
(bsc#1012628).
- drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating
SVM ranges (bsc#1012628).
- accel/amdxdna: Create shared functions for AIE2 and AIE4
(bsc#1012628).
- accel/amdxdna: Adjust size for copy_to_user() (bsc#1012628).
- accel/amdxdna: Handle DETACH_DEBUG_BO through config_debug_bo
path (bsc#1012628).
- accel/amdxdna: Fix iommu_map_sgtable() return value handling
(bsc#1012628).
- accel/amdxdna: Fix order of canceled mailbox messages
(bsc#1012628).
- dma-fence: Fix potential tracepoint null pointer dereferences
(bsc#1012628).
- accel/amdxdna: Fix fatal_error_info layout in firmware interface
(bsc#1012628).
- accel/amdxdna: Fix memory leak in amdxdna_iommu_alloc()
(bsc#1012628).
- drm/gpuvm: Do not prepare NULL objects (bsc#1012628).
- accel/amdxdna: Guard management mailbox channel cleanup against
NULL pointer (bsc#1012628).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
(bsc#1012628).
- drm/amdkfd: fix redundant MQD iterations in GFX v12.1
(bsc#1012628).
- drm/radeon: fix integer overflow in radeon_align_pitch()
(bsc#1012628).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
failure (bsc#1012628).
- libbpf: Report error when a negative kprobe offset is specified
(bsc#1012628).
- selftests/bpf: Fix off-by-one in bpf_cpumask_populate related
selftest (bsc#1012628).
- dt-bindings: timer: Remove sifive,fine-ctr-bits property
(bsc#1012628).
- wifi: ath12k: Fix invalid IRQ requests during AHB probe
(bsc#1012628).
- libbpf: Fix deduplication of typedef with base definitions
(bsc#1012628).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
macro (bsc#1012628).
- spi: atcspi200: fix use-after-free when driver unbind
(bsc#1012628).
- selftests/bpf: Use local type for flow_offload_tuple_rhash in
xdp_flowtable (bsc#1012628).
- selftests/bpf: Use local type for bpf_fou_encap in
test_tunnel_kern (bsc#1012628).
- Documentation: proc: fix section numbering in table of contents
(bsc#1012628).
- arm64: dts: rockchip: Fix vdec register blocks order on RK3576
(bsc#1012628).
- arm64: dts: rockchip: Update vdec register blocks order on
RK3588 (bsc#1012628).
- arm64: dts: rockchip: fix Ethernet PHY not found on PX30 Cobra
(bsc#1012628).
- arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S
(bsc#1012628).
- ima: Fix sigv3 signature handling for EVM_IMA_XATTR_DIGSIG
(bsc#1012628).
- dt-bindings: net: bluetooth: qualcomm: Fix WCN6855 regulator
names (bsc#1012628).
- x86/bug: Add printf() validation to HAVE_ARCH_BUG_FORMAT_ARGS
WARNs (bsc#1012628).
- arm64: dts: qcom: milos: Reduce rmtfs_mem size to 2.5MiB
(bsc#1012628).
- arm64: dts: qcom: sdm845-oneplus: Drop address from framebuffer
node (bsc#1012628).
- arm64: dts: qcom: glymur: Fix USB simple_bus_reg warning
(bsc#1012628).
- arm64: dts: qcom: glymur: Fix cache and SRAM simple_bus_reg
warnings (bsc#1012628).
- arm64: dts: qcom: ipq5424: Fix USB simple_bus_reg warnings
(bsc#1012628).
- arm64: dts: qcom: sc8180x: Fix phy simple_bus_reg warning
(bsc#1012628).
- arm64: dts: qcom: sdm845-mezzanine: Fix camss ports
unit_address_vs_reg warning (bsc#1012628).
- arm64: dts: qcom: fix temp-alarm probe failure for PMH0104 on
Glymur (bsc#1012628).
- arm64: dts: qcom: sdm845-shift-axolotl: Correct touchscreen
sleep state (bsc#1012628).
- hfsplus: Remove the duplicate attr inode dirty marking action
(bsc#1012628).
- hfsplus: Add a sanity check for btree node size (bsc#1012628).
- wifi: cfg80211: fix grammar in MLO group key error message
(bsc#1012628).
- arm64: tegra: Fix Tegra234 MGBE PTP clock (bsc#1012628).
- dt-bindings: pinctrl: nvidia,tegra234: Add missing required
block (bsc#1012628).
- pinctrl: pinconf-generic: fix properties bitmap leak in
parse_fw_cfg() (bsc#1012628).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
(bsc#1012628).
- driver core: use READ_ONCE() for dev->driver in
dev_has_sync_state() (bsc#1012628).
- wifi: rtw89: fix wrong pci_get_drvdata type in AER handlers
(bsc#1012628).
- wifi: rtw88: fix wrong pci_get_drvdata type in AER handlers
(bsc#1012628).
- wifi: rtw89: Correct data type for scan index to avoid infinite
loop (bsc#1012628).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
DMA buffer (bsc#1012628).
- wifi: rtw89: add bounds check on firmware mac_id in link lookup
(bsc#1012628).
- kconfig: fix potential NULL pointer dereference in conf_askvalue
(bsc#1012628).
- soc: xilinx: Fix race condition in event registration
(bsc#1012628).
- soc: xilinx: Shutdown and free rx mailbox channel (bsc#1012628).
- pinctrl: mediatek: eint: Drop base from
mtk_eint_chip_write_mask() (bsc#1012628).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
(bsc#1012628).
- wifi: ath11k: cancel SSR work items during PCI shutdown
(bsc#1012628).
- ARM: dts: am335x-sl50: Fix audio bitclock and frame master
endpoint (bsc#1012628).
- ixgbe: fix unaligned u32 access in ixgbe_update_flash_X550()
(bsc#1012628).
- Documentation/rv: Replace stale website link (bsc#1012628).
- watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH
(bsc#1012628).
- watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and
SAMA7G5 (bsc#1012628).
- watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on
register failure (bsc#1012628).
- media: cedrus: Fix failure to clean up hardware on probe failure
(bsc#1012628).
- media: v4l2-common: Add YUV24 format info (bsc#1012628).
- drm: verisilicon: call atomic helper's plane state check even
if no CRTC (bsc#1012628).
- memory: tegra: Wire up system sleep PM ops (bsc#1012628).
- objtool/klp: Fix is_uncorrelated_static_local() for Clang
(bsc#1012628).
- objtool/klp: Fix .data..once static local non-correlation
(bsc#1012628).
- objtool/klp: Fix create_fake_symbols() skipping entsize-based
sections (bsc#1012628).
- objtool/klp: Fix handling of zero-length .altinstr_replacement
sections (bsc#1012628).
- objtool/klp: Fix cloning of zero-length section symbols
(bsc#1012628).
- objtool/klp: Fix extraction of text annotations for alternatives
(bsc#1012628).
- objtool/klp: Fix relocation conversion failures for
R_X86_64_NONE (bsc#1012628).
- objtool: Replace iterator callback with
for_each_sym_by_mangled_name() (bsc#1012628).
- objtool: Fix reloc hash collision in find_reloc_by_dest_range()
(bsc#1012628).
- klp-build: Fix hang on out-of-date .config (bsc#1012628).
- klp-build: Fix checksum comparison for changed offsets
(bsc#1012628).
- klp-build: Fix patch cleanup on interrupt (bsc#1012628).
- crypto: qat - fix heartbeat error injection (bsc#1012628).
- lib/vsprintf: Fix to check field_width and precision
(bsc#1012628).
- dts: spacemit: set console baud rate on bpif3 (bsc#1012628).
- pinctrl: sunxi: fix regulator leak in sunxi_pmx_request()
error path (bsc#1012628).
- riscv: dts: microchip: gpio controllers on mpfs need 2 interrupt
cells (bsc#1012628).
- riscv: dts: microchip: remove gpio hogs from beaglev-fire
(bsc#1012628).
- dt-bindings: vendor-prefixes: Add Displaytech Ltd (bsc#1012628).
- drm/gpuvm: take refcount on DRM device (bsc#1012628).
- wifi: cfg80211: restrict LMR feedback check to TB and non-TB
ranging (bsc#1012628).
- drm/panel: Clean up SOFEF00 config dependencies (bsc#1012628).
- drm/panel: Clean up S6E3FC2X01 config dependencies
(bsc#1012628).
- drm/panel: Clean up S6E3HA2 config dependencies and fill help
text (bsc#1012628).
- riscv: dts: microchip: update pic64gx gpio interrupts to better
match the SoC (bsc#1012628).
- riscv: dts: microchip: fix pic64gx gpio interrupt-cells
(bsc#1012628).
- arm64: dts: marvell: samsung-coreprimevelte: Increase
touchscreen voltage (bsc#1012628).
- ARM: dts: rockchip: Add #{address,size}-cells to Chromium-based
/firmware (bsc#1012628).
- arm64: dts: rockchip: Add #{address,size}-cells to
Chromium-based /firmware (bsc#1012628).
- arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc
(bsc#1012628).
- arm64: dts: imx8x-colibri: Correct SODIMM PAD settings
(bsc#1012628).
- arm64: dts: imx8mn-vhip4-evalboard-v1: Correct interrupt flags
(bsc#1012628).
- arm64: dts: imx8mn-vhip4-evalboard-v2: Correct interrupt flags
(bsc#1012628).
- arm64: dts: imx8mp-ab2: Correct interrupt flags (bsc#1012628).
- Revert "arm64: dts: imx8mm-kontron: Add support for reading
SD_VSEL signal" (bsc#1012628).
- Revert "arm64: dts: imx8mp-kontron: Add support for reading
SD_VSEL signal" (bsc#1012628).
- vxlan: Fix potential null-ptr-deref in
vxlan_gro_prepare_receive() (bsc#1012628).
- drm: renesas: rz-du: mipi_dsi: Fix return path on error
(bsc#1012628).
- alarmtimer: Remove stale return description from
alarm_handle_timer() (bsc#1012628).
- OPP: Fix race between OPP addition and lookup (bsc#1012628).
- crypto: ccp - Reverse the cleanup order in psp_dev_destroy()
(bsc#1012628).
- crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one
(bsc#1012628).
- crypto: ccp - Check for page allocation failure correctly in
TIO (bsc#1012628).
- crypto: ccp - Initialize data during __sev_snp_init_locked()
(bsc#1012628).
- crypto: atmel-sha204a - fix blocking and non-blocking rng logic
(bsc#1012628).
- crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve
(bsc#1012628).
- crypto: asymmetric_keys - fix OOB read in
pefile_digest_pe_contents (bsc#1012628).
- ARM: multi_v7_defconfig: Correct QCOM_RPMH and QCOM_RPMHPD
(bsc#1012628).
- accel/amdxdna: Fix clflush buffer size (bsc#1012628).
- dlm: fix add msg handle in send_queue ordered (bsc#1012628).
- nilfs2: fix backing_dev_info reference leak (bsc#1012628).
- ntb: Store original DMA address for future release
(bsc#1012628).
- ntb: Use consistent DMA attributes when freeing DMA mappings
(bsc#1012628).
- media: qcom: camss: vfe: fix PIX subdev naming on VFE lite
(bsc#1012628).
- dts: riscv: spacemit: correct 32k clock frequency (bsc#1012628).
- arm64: dts: qcom: sdm660: set cdsp compute-cbs' regs properly
(bsc#1012628).
- arm64: dts: qcom: sdm630: set adsp compute-cbs' regs properly
(bsc#1012628).
- arm64: dts: qcom: lemans: Move PCIe devices into soc node
(bsc#1012628).
- media: iris: scale MMCX power domain on SM8250 (bsc#1012628).
- media: venus: scale MMCX power domain on SM8250 (bsc#1012628).
- iommu/amd: Fix a stale comment about which legacy mode is user
visible (bsc#1012628).
- soc: mediatek: mtk-mmsys: Restore MT8167 routing masks lost
during merge (bsc#1012628).
- bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative
dentries (bsc#1012628).
- uaccess: fix ignored_trailing logic in copy_struct_to_user()
(bsc#1012628).
- sockptr: fix usize check in copy_struct_from_sockptr() for
user pointers (bsc#1012628).
- arm64: dts: mediatek: mt7988a-bpi-r4pro: rework pcie gpio-hog
handling (bsc#1012628).
- arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce
buffer to host (bsc#1012628).
- workqueue: forbid TEST_WORKQUEUE from being built-in
(bsc#1012628).
- drm/amdgpu: fix error return code in mes_v12_1_map_test_bo
(bsc#1012628).
- arm64: dts: qcom: glymur-crd: Drop forced host mode for USB
SS0 and SS1 (bsc#1012628).
- arm64: dts: qcom: glymur: Mark USB SS1 and SS2 as role-switch
capable (bsc#1012628).
- rhashtable: give each instance its own lockdep class
(bsc#1012628).
- rust: alloc: fix `Vec::extend_with` SAFETY comment
(bsc#1012628).
- clk: scmi: Fix clock rate rounding (bsc#1012628).
- arm64: dts: qcom: sm8750: Fix DSI1 phy reference clock rate
(bsc#1012628).
- arm64: dts: qcom: kodiak: Fix ICE reg size (bsc#1012628).
- arm64: dts: qcom: sm8450: Fix ICE reg size (bsc#1012628).
- platform/chrome: chromeos_privacy_screen: Check ACPI_COMPANION()
(bsc#1012628).
- platform/chrome: chromeos_tbmc: Check ACPI_COMPANION()
(bsc#1012628).
- platform/chrome: wilco_ec: event: Check ACPI_COMPANION()
(bsc#1012628).
- drm/hisilicon/hibmc: add updating link cap in DP detect()
(bsc#1012628).
- drm/hisilicon/hibmc: fix no showing when no connectors connected
(bsc#1012628).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
(bsc#1012628).
- drm/hisilicon/hibmc: use clock to look up the PLL value
(bsc#1012628).
- evm: terminate and bound the evm_xattrs read buffer
(bsc#1012628).
- thermal: hwmon: Fix critical temperature attribute removal
(bsc#1012628).
- thermal: hwmon: Register a hwmon device for each thermal zone
(bsc#1012628).
- clk: scpi: Unregister child clock providers on remove
(bsc#1012628).
- net/sched: sch_hfsc: annotate data-races in
hfsc_dump_class_stats() (bsc#1012628).
- scsi: hisi_sas: Add slave_destroy interface for v3 hw
(bsc#1012628).
- crypto: ccp - Treat zero-length cert chain as query for blob
lengths (bsc#1012628).
- crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1012628).
- crypto: ccp/sev-dev-tsm - bail out early when pdev->bus is NULL
(bsc#1012628).
- crypto: safexcel - Fix potential memory leak in
safexcel_pci_probe() (bsc#1012628).
- spi: hisi-kunpeng: Use dev_err_probe() for host registration
failure (bsc#1012628).
- net/sched: add qdisc_qlen_inc() and qdisc_qlen_dec()
(bsc#1012628).
- net/sched: sch_dualpi2: annotate data-races in
dualpi2_dump_stats() (bsc#1012628).
- net/sched: sch_htb: do not change sch->flags in htb_dump()
(bsc#1012628).
- net/sched: sch_htb: annotate data-races (I) (bsc#1012628).
- ipv6: addrconf: bail out of dad_failure when state is no longer
POSTDAD (bsc#1012628).
- IB/mlx5: Fix transport-domain rollback and initialize lb mutex
earlier (bsc#1012628).
- RDMA/hns: Fix arithmetic overflow in calc_hem_config()
(bsc#1012628).
- RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure
(bsc#1012628).
- RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference
(bsc#1012628).
- RDMA/srpt: fix integer overflow in immediate data length check
(bsc#1012628).
- RDMA/hns: Initialize seqfile before creating file (bsc#1012628).
- tools/rtla: Fix --dump-tasks usage in timerlat (bsc#1012628).
- rtla: Stop the record trace on interrupt (bsc#1012628).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
(bsc#1012628).
- dm: limit target bio polling to one shot (bsc#1012628).
- selftests/bpf: Override EXTRA_LDFLAGS for static builds
(bsc#1012628).
- selftests/bpf: Reject unsupported -k option in vmtest.sh
(bsc#1012628).
- selftests/bpf: Fix test for refinement of single-value tnum
(bsc#1012628).
- iommu/arm-smmu-qcom: Fix fastrpc compatible string in ACTLR
client match table (bsc#1012628).
- sched/fair: Update util_est after updating util_avg during
dequeue (bsc#1012628).
- selftests/mm: Fix resv_sz when parsing arm64 signal frame
(bsc#1012628).
- firmware: arm_ffa: Honor partition info descriptor size
(bsc#1012628).
- arm64: dts: freescale: imx95-verdin-ivy: fix RS485 RTS polarity
(bsc#1012628).
- arm64: dts: imx8dxl-evk: Remove unnecessary PCIe EP properties
(bsc#1012628).
- arm64: dts: imx8qxp-mek: Remove unnecessary PCIe EP vpcie-supply
(bsc#1012628).
- arm64: dts: imx95-19x19-evk: Fix PCIe EP vpcie-supply
(bsc#1012628).
- hfs: fix incorrect inode ID assignment in hfs_new_inode()
(bsc#1012628).
- media: atomisp: Fix memory leak in atomisp_fixed_pattern_table()
(bsc#1012628).
- media: atomisp: gc2235: fix UAF and memory leak (bsc#1012628).
- staging: media: atomisp: fix loop shadowing in
ia_css_stream_destroy() (bsc#1012628).
- riscv: dts: spacemit: set console baud rate on Milk-V Jupiter
(bsc#1012628).
- riscv: dts: spacemit: fix uboot partition offset on Milk-V
Jupiter (bsc#1012628).
- firmware: smccc: Fix Arm SMCCC SOC_ID name call (bsc#1012628).
- firmware: arm_scmi: Read sensor config as 32-bit value
(bsc#1012628).
- media: synopsys: Fix IPI using hardcoded datatype (bsc#1012628).
- sysfs: clamp show() return value in sysfs_kf_read()
(bsc#1012628).
- bitops: use common function parameter names (bsc#1012628).
- regulator: dt-bindings: mt6359: Drop regulator-name pattern
restrictions (bsc#1012628).
- tools/nolibc: getopt: Fix potential out of bounds access
(bsc#1012628).
- vfio: selftests: Fix out-of-tree build with make O=
(bsc#1012628).
- vfio: selftests: Allow builds when ARCH=x86 (bsc#1012628).
- nilfs2: Fix return in nilfs_mkdir (bsc#1012628).
- vfio/xe: avoid duplicate reset in xe_vfio_pci_reset_done
(bsc#1012628).
- net/sched: sch_drr: annotate data-races around cl->deficit
(bsc#1012628).
- regmap-i2c: fix sparse warning in regmap_smbus_word_write_reg16
(bsc#1012628).
- media: rockchip: rga: fix too small buffer size (bsc#1012628).
- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
(bsc#1012628).
- arm64: dts: qcom: eliza-mtp: Fix the debug UART index
(bsc#1012628).
- arm64: dts: qcom: kaanapali: Add power-domain and iface clk
for ice node (bsc#1012628).
- arm64: dts: qcom: lemans: Add power-domain and iface clk for
ice node (bsc#1012628).
- arm64: dts: qcom: monaco: Add power-domain and iface clk for
ice node (bsc#1012628).
- arm64: dts: qcom: sc7180: Add power-domain and iface clk for
ice node (bsc#1012628).
- arm64: dts: qcom: kodiak: Add power-domain and iface clk for
ice node (bsc#1012628).
- arm64: dts: qcom: sm8450: Add power-domain and iface clk for
ice node (bsc#1012628).
- arm64: dts: qcom: sm8550: Add power-domain and iface clk for
ice node (bsc#1012628).
- arm64: dts: qcom: sm8650: Add power-domain and iface clk for
ice node (bsc#1012628).
- arm64: dts: qcom: sm8750: Add power-domain and iface clk for
ice node (bsc#1012628).
- tracing: Bound synthetic-field strings with seq_buf
(bsc#1012628).
- arm64: dts: qcom: lemans: Add eDP ref clock for eDP PHYs
(bsc#1012628).
- arm64: dts: qcom: glymur: Fix wrong interrupt number for i2c19
(bsc#1012628).
- arm64: dts: qcom: sdm845-xiaomi-beryllium: Correct IPA FW path
(bsc#1012628).
- writeback: drop now-unnecessary rcu_barrier() in
cgroup_writeback_umount() (bsc#1012628).
- kernfs: fix suspicious RCU usage in kernfs_put() (bsc#1012628).
- device property: fix fwnode reference leak in
fwnode_graph_get_endpoint_by_id() (bsc#1012628).
- driver core: Use mod_delayed_work to prevent lost deferred
probe work (bsc#1012628).
- Revert "treewide: Fix probing of devices in DT overlays"
(bsc#1012628).
- of: dynamic: Fix overlayed devices not probing because of
fw_devlink (bsc#1012628).
- crypto: eip93 - fix reset ring register definition
(bsc#1012628).
- ASoC: mediatek: mt8189: Fix probe resource cleanup
(bsc#1012628).
- drm/msm/mdss: correct UBWC programming sequences (bsc#1012628).
- cpufreq: Documentation: fix sampling_down_factor range
(bsc#1012628).
- cpufreq: conservative: Simplify frequency limit handling
(bsc#1012628).
- pwm: imx27: Fix variable truncation in .apply() (bsc#1012628).
- RDMA/mana_ib: Use ib_get_eth_speed for reporting port speed
(bsc#1012628).
- tools/nolibc: stackprotector: Avoid stalling program startup
if crng is not init yet (bsc#1012628).
- bus: sunxi-rsb: Always check register address validity
(bsc#1012628).
- pinctrl: spacemit: fix NULL check in spacemit_pin_set_config
(bsc#1012628).
- ASoC: dapm: Fix widget lookup with prefixed names across DAPM
contexts (bsc#1012628).
- RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs
(bsc#1012628).
- RDMA/rxe: Fix a use-after-free problem in rxe_mmap
(bsc#1012628).
- IB/mlx4: Fix refcount leak in add_port() error path
(bsc#1012628).
- RDMA/hns: Fix warning in poll cq direct mode (bsc#1012628).
- RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1012628).
- ACPI: PAD: Fix teardown ordering in acpi_pad_remove()
(bsc#1012628).
- RDMA/counter: Fix incorrect port index in rdma_counter_init()
error cleanup (bsc#1012628).
- pinctrl: meson: amlogic-a4: fix gpio output glitch
(bsc#1012628).
- PM: sleep: Use complete() in device_pm_sleep_init()
(bsc#1012628).
- MIPS: Fix big-endian stack argument fetching in o32 wrapper
(bsc#1012628).
- MIPS: DEC: Remove do_IRQ() call indirection (bsc#1012628).
- mips: ralink: mt7621: add missing __iomem (bsc#1012628).
- mips: n64: add __iomem for writel call (bsc#1012628).
- driver core: Fix missing jiffies conversion in
deferred_probe_extend_timeout() (bsc#1012628).
- driver core: Guard deferred probe timeout extension with
delayed_work_pending() (bsc#1012628).
- arm64: tegra: Fix address of Tegra264 main GPIO controller
(bsc#1012628).
- mtd: spi-nor: debugfs: Fix the flags list (bsc#1012628).
- mtd: spi-nor: Drop duplicate Kconfig dependency (bsc#1012628).
- wifi: ath12k: fix error unwind on arch_init() failure in PCI
probe (bsc#1012628).
- cpufreq: governor: Fix data races on per-CPU idle/nice baselines
(bsc#1012628).
- cpufreq: governor: Fix stale prev_cpu_nice spike when enabling
ignore_nice_load (bsc#1012628).
- ALSA: xen-front: Reset event channel state on stream clear
(bsc#1012628).
- ALSA: xen-front: Connect event channel after stream prepare
(bsc#1012628).
- ALSA: seq: oss: Fix UAF at handling events with embedded SysEx
data (bsc#1012628).
- ALSA: seq: midi: Serialize output teardown with event_input
(bsc#1012628).
- selftests: Fix Makefile target for nsfs (bsc#1012628).
- pinctrl: nuvoton: ma35d1: fix MFP register offset and pin table
(bsc#1012628).
- pinctrl: cs42l43: Fix leaked pm reference on error path
(bsc#1012628).
- pinctrl: cs42l43: Fix polarity on debounce (bsc#1012628).
- init/initramfs_test: wait_for_initramfs() before running
(bsc#1012628).
- nvmet-tcp: fix page fragment cache leak in error path
(bsc#1012628).
- nvmet-tcp: check return value of nvmet_tcp_set_queue_sock
(bsc#1012628).
- nvme-multipath: fix flex array size in struct nvme_ns_head
(bsc#1012628).
- nvme-pci: fix out-of-bounds access in
nvme_setup_descriptor_pools (bsc#1012628).
- workqueue: drop spurious '*' from print_worker_info() fn
declaration (bsc#1012628).
- ipv6: guard against possible NULL deref in __in6_dev_stats_get()
(bsc#1012628).
- net/sched: cls_bpf: prevent unbounded recursion in offload
rollback (bsc#1012628).
- iommu/amd: Fix premature break in init_iommu_one()
(bsc#1012628).
- ALSA: hda/realtek:ALC269 fixup for Yoga Pro 7 15ASH11 mic mute
LED (bsc#1012628).
- dt-bindings: vendor-prefixes: Add Verbatim Corporation
(bsc#1012628).
- rtla/actions: Restore continue flag in actions_perform()
(bsc#1012628).
- drm/tegra: gr2d/gr3d: Initialize address register map before
HOST1X client is registered (bsc#1012628).
- drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove
(bsc#1012628).
- gpu: host1x: Allow entries in BO caches to be freed
(bsc#1012628).
- drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info
(bsc#1012628).
- gpu: host1x: mipi: Fix device_node reference leak in
tegra_mipi_request() (bsc#1012628).
- drm/tegra: dc: Fix device node reference leak in
tegra_dc_has_output() (bsc#1012628).
- gpu: host1x: Fix iommu_map_sgtable() return value check
(bsc#1012628).
- drm/tegra: Fix iommu_map_sgtable() return value check
(bsc#1012628).
- drm/nouveau/bios: specify correct display fuse register for
Ampere and Ada (bsc#1012628).
- libbpf: Harden parse_vma_segs() path parsing (bsc#1012628).
- bpftool: Fix typo in struct_ops map FD generation for light
skeleton (bsc#1012628).
- libbpf: Fix UAF in strset__add_str() (bsc#1012628).
- ARM: tegra: Add #{address,size}-cells to Chromium-based
/firmware (bsc#1012628).
- arm64: tegra: Add #{address,size}-cells to Chromium-based
/firmware (bsc#1012628).
- rust: devres: add 'static bound to Devres<T> (bsc#1012628).
- dax/kmem: account for partial discontiguous resource upon
removal (bsc#1012628).
- lib/base64: validate before writing in decode tail path
(bsc#1012628).
- rust: uaccess: use INLINE_COPY_TO_USER to guard copy_to_user()
(bsc#1012628).
- uaccess: unify inline vs outline copy_{from,to}_user() selection
(bsc#1012628).
- uaccess: minimize INLINE_COPY_USER-related ifdefery
(bsc#1012628).
- rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()
(bsc#1012628).
- ocfs2: don't BUG_ON an invalid journal dinode (bsc#1012628).
- ocfs2: kill osb->system_file_mutex lock (bsc#1012628).
- crypto: hisilicon/qm - disable error report before flr
(bsc#1012628).
- crypto: inside-secure/eip93 - Add check for
devm_request_threaded_irq (bsc#1012628).
- crypto: tegra - Fix dma_free_coherent size error (bsc#1012628).
- crypto: tegra - Return ENOMEM when input buffer allocation
fails for ccm (bsc#1012628).
- crypto: ccp/tsm - Enable the root port after the endpoint
(bsc#1012628).
- sched/deadline: Reject debugfs dl_server writes for offline CPUs
(bsc#1012628).
- drm/msm/dp: fix HPD state status bit shift value (bsc#1012628).
- drm/msm/dp: Fix the ISR_* enum values (bsc#1012628).
- firmware: samsung: acpm: Add devm_acpm_get_by_phandle helper
(bsc#1012628).
- firmware: samsung: acpm: remove compile-testing stubs
(bsc#1012628).
- drm/msm/a8xx: Make a8xx_recover IFPC safe (bsc#1012628).
- drm/msm/a8xx: Fix RSCC offset (bsc#1012628).
- EDAC/igen6: Fix call trace due to missing release()
(bsc#1012628).
- EDAC/igen6: Fix memory topology parsing for Panther Lake-H SoCs
(bsc#1012628).
- EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in
skx_get_dimm_info (bsc#1012628).
- arm64: dts: st: Fix SAI addresses on stm32mp251 (bsc#1012628).
- arm: dts: bcm2711: Fix typo in gpio-line-names (bsc#1012628).
- RDMA/umem: Add ib_umem_is_contiguous() stub for
!CONFIG_INFINIBAND_USER_MEM (bsc#1012628).
- RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1012628).
- RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path
(bsc#1012628).
- dts: riscv: spacemit: k3: Fix I/O power settings (bsc#1012628).
- Revert "media: venus: hfi_platform: Correct supported codecs
for sc7280" (bsc#1012628).
- media: qcom: venus: drop extra padding in NV12 raw size
calculation (bsc#1012628).
- media: qcom: venus: relax encoder frame/blur dimension steps
on v4 (bsc#1012628).
- media: qcom: venus: relax encoder frame/blur step size on v6
(bsc#1012628).
- amba: use generic driver_override infrastructure (bsc#1012628).
- cdx: use generic driver_override infrastructure (bsc#1012628).
- Drivers: hv: vmbus: use generic driver_override infrastructure
(bsc#1012628).
- rpmsg: use generic driver_override infrastructure (bsc#1012628).
- arm64: dts: renesas: r8a78000: Fix GIC-720AE View 1
Redistributor description (bsc#1012628).
- arm64: dts: renesas: ironhide: Describe all reserved memory
(bsc#1012628).
- md/raid10: reset read_slot when reusing r10bio for discard
(bsc#1012628).
- md/raid1,raid10: fix deadlock in read error recovery path
(bsc#1012628).
- md/raid1,raid10: fix error-path detection with md_cloned_bio()
(bsc#1012628).
- md/raid1,raid10: fix bio accounting for split md cloned bios
(bsc#1012628).
- raid1: fix nr_pending leak in REQ_ATOMIC bad-block error path
(bsc#1012628).
- bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat
(bsc#1012628).
- selftests/bpf: add verification for BPF_PROG_QUERY attr size
boundaries (bsc#1012628).
- liveupdate: Use refcount_t for FLB reference counts
(bsc#1012628).
- liveupdate: Reference count incoming FLB data (bsc#1012628).
- libbpf: Skip hash computation when loader generation failed
(bsc#1012628).
- libbpf: Skip endianness swap when loader generation failed
(bsc#1012628).
- liveupdate: skip serialization for context-preserving kexec
(bsc#1012628).
- liveupdate: fix TOCTOU race in luo_session_retrieve()
(bsc#1012628).
- liveupdate: block session mutations during reboot (bsc#1012628).
- liveupdate: fix u-a-f in luo_file_unpreserve_files() and
luo_file_finish() (bsc#1012628).
- ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode
data writeback (bsc#1012628).
- spi: atmel: fix DMA channel and bounce buffer leaks
(bsc#1012628).
- spi: imx: replace dmaengine_terminate_all() with
dmaengine_terminate_sync() (bsc#1012628).
- ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble
(bsc#1012628).
- NFSD: Fix delegation reference leak in nfsd4_revoke_states
(bsc#1012628).
- ARM: imx3: Fix CCM node reference leak (bsc#1012628).
- HID: wiimote: Fix table layout and whitespace errors
(bsc#1012628).
- wifi: ath12k: fix incorrect HT/VHT/HE/EHT MCS reporting in
monitor mode (bsc#1012628).
- wifi: ath12k: fix memory leak in
ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1012628).
- wifi: ath12k: fix inconsistent arvif state in vdev_create
error paths (bsc#1012628).
- wifi: ath12k: fix NULL deref in change_sta_links for unready
link (bsc#1012628).
- ata: libata: Fix ata_exec_internal() (bsc#1012628).
- ACPI: button: Fix lid_device value leak past driver removal
(bsc#1012628).
- ARM: imx31: Fix IIM mapping leak in revision check
(bsc#1012628).
- x86/cpu: Keep the PROCESSOR_SELECT menu together (bsc#1012628).
- nvdimm/btt: Handle preemption in BTT lane acquisition
(bsc#1012628).
- tcp_bbr: fix SPDX-License-Identifier to be GPL-2.0 OR
BSD-3-Clause (bsc#1012628).
- scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard
and multi-channel scans" (bsc#1012628).
- bpf: Reject exclusive maps as inner maps in map-in-map
(bsc#1012628).
- libbpf: Reject non-exclusive metadata maps in the signed loader
(bsc#1012628).
- libbpf: Skip initial_value override on signed loaders
(bsc#1012628).
- libbpf: Skip max_entries override on signed loaders
(bsc#1012628).
- scsi: pm8001: Fix error code in non_fatal_log_show()
(bsc#1012628).
- scsi: ufs: Fix wrong value printed in unexpected UPIU response
case (bsc#1012628).
- bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
(bsc#1012628).
- mm/fake-numa: fix under-allocation detection in uniform split
(bsc#1012628).
- ext2: fix ignored return value of generic_write_sync()
(bsc#1012628).
- sched: restore timer_slack_ns when resetting RT policy on fork
(bsc#1012628).
- nvme: fix FDP fdpcidx bounds check (bsc#1012628).
- driver core: Use system_percpu_wq instead of system_wq
(bsc#1012628).
- bpf: Reject exclusive maps for bpf_map_elem iterators
(bsc#1012628).
- tick/sched: Fix TOCTOU in nohz idle time fetch (bsc#1012628).
- lib/test_meminit: use && for bools (bsc#1012628).
- riscv: dts: sophgo: sg2044: use hex for CPU unit address
(bsc#1012628).
- riscv: dts: sophgo: sg2042: use hex for CPU unit address
(bsc#1012628).
- configfs_lookup(): don't leave ->s_dentry dangling on failure
(bsc#1012628).
- lockdep/selftests: Restore migrate_disable() state on PREEMPT_RT
(bsc#1012628).
- lockdep/selftests: Restore sched_rt_mutex state on PREEMPT_RT
(bsc#1012628).
- ext4: fix fast commit wait/wake bit mapping on 64-bit
(bsc#1012628).
- irqchip/exynos-combiner: Remove useless spinlock (bsc#1012628).
- drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu_coredump
ring dump (bsc#1012628).
- drm/amd/pm: Add empty string validation to sysfs store functions
(bsc#1012628).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
(bsc#1012628).
- accel/amdxdna: Return errors for failed debug BO commands
(bsc#1012628).
- bpftool: Use libbpf error code for flow dissector query
(bsc#1012628).
- vhost: fix vhost_get_avail_idx for a non empty ring
(bsc#1012628).
- iommu/vt-d: Fix RB-tree corruption in probe error path
(bsc#1012628).
- mm: preserve PG_dropbehind flag during folio split
(bsc#1012628).
- eventpoll: rename attach_epitem() to ep_attach_file()
(bsc#1012628).
- eventpoll: split ep_insert() into alloc + register stages
(bsc#1012628).
- eventpoll: extract ep_deliver_event() from ep_send_events()
(bsc#1012628).
- eventpoll: wrap EP_UNACTIVE_PTR in typed sentinel helpers
(bsc#1012628).
- perf/x86/amd/core: Always use the NMI latency mitigation
(bsc#1012628).
- perf/x86/intel/uncore: Fix discovery unit lookup for multi-die
systems (bsc#1012628).
- perf/x86/intel/uncore: Fix PCI device refcount leak in UPI
discovery (bsc#1012628).
- perf/x86/amd/uncore: Use Node ID to identify DF and UMC domains
(bsc#1012628).
- xfrm: fix NAT-related field inheritance in SA migration
(bsc#1012628).
- wifi: wlcore: enable the right set of ciphers (bsc#1012628).
- cxl/fwctl: Fix __fortify_panic (bsc#1012628).
- cxl/test: Fix __fortify_panic (bsc#1012628).
- bpf: Take mmap_lock in zap_pages() (bsc#1012628).
- drm/amdkfd: always resume_all after suspend_all (bsc#1012628).
- of: reserved_mem: avoid post-init UAF when
alloc_reserved_mem_array() fails (bsc#1012628).
- ocfs2: rebase copied fsdlm LVB pointers in locking_state
(bsc#1012628).
- lib: kunit_iov_iter: repeatedly call alloc_pages_bulk()
(bsc#1012628).
- ocfs2: fix buffer head management in ocfs2_read_blocks()
(bsc#1012628).
- ocfs2: validate fast symlink target during inode read
(bsc#1012628).
- ocfs2: reject FITRIM ranges shorter than a cluster
(bsc#1012628).
- ocfs2/dlm: require a ref for locking_state debugfs open
(bsc#1012628).
- ocfs2: fix race between ocfs2_control_install_private() and
ocfs2_control_release() (bsc#1012628).
- ocfs2: fix out-of-bounds write in ocfs2_remove_refcount_extent
(bsc#1012628).
- cxl/pci: Fix the incorrect check of pci_read_config_word()
return (bsc#1012628).
- cxl/pci: Convert PCIBIOS errors to errno on DVSEC config
accesses (bsc#1012628).
- netfilter: nfnetlink_osf: fix mss parsing on big-endian
architectures (bsc#1012628).
- netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for
accessing helper flags (bsc#1012628).
- netfilter: synproxy: drop packets if timestamp adjustment fails
(bsc#1012628).
- netfilter: synproxy: adjust duplicate timestamp options
(bsc#1012628).
- netfilter: synproxy: fix unaligned memory access in timestamp
adjustment (bsc#1012628).
- netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack
lock (bsc#1012628).
- netfilter: cttimeout: detach dataplane timeout policy and
repurpose refcount (bsc#1012628).
- ALSA: usb-audio: qcom: Initialize offload control return value
(bsc#1012628).
- mm/slub: preserve original size in _kmalloc_nolock_noprof
retry path (bsc#1012628).
- x86/cpu: Remove obsolete aperfmperf_get_khz() declaration
(bsc#1012628).
- netfilter: conntrack: revert ct extension genid infrastructure
(bsc#1012628).
- netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master
helper is pptp (bsc#1012628).
- ntfs: free link name from ntfs_name_cache (bsc#1012628).
- RDMA/hfi1: Open-code rvt_set_ibdev_name() (bsc#1012628).
- IB/cm: Fix av cm device leak on an error path in
cm_init_av_by_path() (bsc#1012628).
- ALSA: hda: fix Kconfig dependency of HD Audio PCI (bsc#1012628).
- RDMA/irdma: Fix OOB read during CQ MR registration
(bsc#1012628).
- RDMA/irdma: Initialize iwmr->access during MR registration
(bsc#1012628).
- arm64: dts: imx8mp-kontron: Reduce EERAM SPI clock frequency
(bsc#1012628).
- arm64: dts: imx94: fix DDR PMU interrupt number (bsc#1012628).
- arm64: dts: imx95: Correct PCIe outbound address space
configuration (bsc#1012628).
- arm64: dts: lx2162a-clearfog: use rev2 SoC dtsi (bsc#1012628).
- arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio
codec as well (bsc#1012628).
- arm64: dts: imx8mp-kontron: Fix GPIO for display power switch
(bsc#1012628).
- arm64: dts: freescale: fsl-ls1028a-tqmls1028a-mbls1028a:
switch mmc aliases (bsc#1012628).
- RDMA/siw: Fix endpoint/socket association handling
(bsc#1012628).
- selftests/bpf: Fix flaky file_reader test (bsc#1012628).
- bpf: Clear rb node linkage when freeing bpf_rb_root
(bsc#1012628).
- bpf: Check tail zero of bpf_map_info (bsc#1012628).
- bpf: Check tail zero of bpf_prog_info (bsc#1012628).
- bpf: Update transport_header when encapsulating UDP tunnel in
lwt (bsc#1012628).
- kernfs: fix xattr race condition with multiple superblocks
(bsc#1012628).
- tmpfs: simplify constructing "security.foo" xattr names
(bsc#1012628).
- simple_xattr: change interface to pass struct simple_xattrs **
(bsc#1012628).
- simpe_xattr: use per-sb cache (bsc#1012628).
- kernfs: link kn to its parent before the LSM init hook
(bsc#1012628).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
response (bsc#1012628).
- wifi: wcn36xx: fix OOB read from firmware count in
PRINT_REG_INFO indication (bsc#1012628).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
response (bsc#1012628).
- ALSA: seq: Fix partial userptr event expansion (bsc#1012628).
- ALSA: pcm: Fix unlocked runtime state reads in xfer ioctls
(bsc#1012628).
- riscv: cpu_ops: Change return value type of cpu_is_stopped()
to bool (bsc#1012628).
- riscv: stacktrace: Remove bogus -0x4 offset in non-FP
walk_stackframe (bsc#1012628).
- ALSA: seq: Clear variable event pointer on read (bsc#1012628).
- riscv: alternative: Use IS_ENABLED() over ifdeffery for
apply_vdso_alternatives() (bsc#1012628).
- riscv: alternative: Pass vDSO start as parameter to
apply_vdso_alternatives() (bsc#1012628).
- riscv: alternative: Also patch the CFI vDSO (bsc#1012628).
- bpf: Verifier support for sleepable tracepoint programs
(bsc#1012628).
- bpf: Reject sleepable BPF_LSM_CGROUP programs at load time
(bsc#1012628).
- netfilter: flowtable: avoid num_encaps underflow on bridge
VLAN untag (bsc#1012628).
- filelock: fix break_lease() stub signature for
CONFIG_FILE_LOCKING=n (bsc#1012628).
- bpf: Fix NMI/tracepoint re-entry deadlock on lru locks
(bsc#1012628).
- kunit:tool: Don't write to stdout when it should be disabled
(bsc#1012628).
- wifi: mac80211: bound S1G TIM PVB walk to the TIM element
(bsc#1012628).
- powerpc/8xx: implement get_direction() in cpm1 (bsc#1012628).
- bpf: Fix NULL pointer dereference in bpf_task_from_vpid()
(bsc#1012628).
- ACPI: IPMI: Fix message kref handling on dead device
(bsc#1012628).
- ACPI: processor: Add cpuidle driver check in
acpi_processor_register_idle_driver() (bsc#1012628).
- cpufreq: Documentation: fix conservative governor freq_step
description (bsc#1012628).
- thermal: testing: reject missing command arguments
(bsc#1012628).
- btrfs: don't force DIO writes to be serialized (bsc#1012628).
- ntfs: validate resident attribute lists and harden the validator
(bsc#1012628).
- ntfs: bound the look-ahead attribute-list entry in
ntfs_external_attr_find() (bsc#1012628).
- ntfs: bound the attribute-list entry in ntfs_read_inode_mount()
(bsc#1012628).
- ntfs: fix u16 truncation of restart-area length check
(bsc#1012628).
- IB/mlx5: Don't take the rereg_mr fallback without a new
translation (bsc#1012628).
- IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1012628).
- RDMA/nldev: Fix locking when accessing mr->pd (bsc#1012628).
- IB/mlx5: Remove unused mkc bits in
mlx5r_umr_update_mr_page_shift() (bsc#1012628).
- IB/mlx5: Pull the pdn out of the depths of the umr machinery
(bsc#1012628).
- IB/mlx5: Don't mangle the mr->pd inside the rereg callback
(bsc#1012628).
- spi: ep93xx: fix double-free of zeropage on DMA setup failure
(bsc#1012628).
- ASoC: amd: acp-sdw-legacy: Bound DAI link iteration
(bsc#1012628).
- ASoC: amd: acp-sdw-sof: Bound DAI link iteration (bsc#1012628).
- firmware_loader: Fix recursive lock in device_cache_fw_images()
(bsc#1012628).
- configfs: fix lockless traversals of ->s_children (bsc#1012628).
- watchdog: unregister PM notifier on watchdog unregister
(bsc#1012628).
- pinctrl: qcom: Fix resolving register base address from device
node (bsc#1012628).
- scsi: target: Fix hexadecimal CHAP_I handling (bsc#1012628).
- scsi: ufs: core: Handle PM commands timeout before SCSI EH
(bsc#1012628).
- scsi: target: Remove tcm_loop target reset handling
(bsc#1012628).
- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset
of pins 34-39 (bsc#1012628).
- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset
of pins 34-39 (bsc#1012628).
- dt-bindings: pinctrl: realtek,rtd1625: Fix input voltage
property name (bsc#1012628).
- pinctrl: PINCTRL_STMFX should depend on CONFIG_OF (bsc#1012628).
- iommufd: Take dma_resv lock before dma_buf_unpin() in release
path (bsc#1012628).
- iommufd: Destroy the pages content after detaching from dmabuf
(bsc#1012628).
- lib/test_hmm: fix memory leak in dmirror_migrate_to_system()
(bsc#1012628).
- vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()
(bsc#1012628).
- rust: kbuild: show the right `quiet_cmd_rustc_procmacrolibrary`
(bsc#1012628).
- remoteproc: qcom_q6v5_wcss: drop redundant wcss_q6_bcr_reset
(bsc#1012628).
- hwspinlock: qcom: avoid uninitialized struct members
(bsc#1012628).
- sched/fair: Fix cpu_util runnable_avg arithmetic (bsc#1012628).
- ARM: configs: Drop duplicated CONFIG_EXT4_FS (bsc#1012628).
- wifi: mt76: mt7925: clean up DMA on probe failure (bsc#1012628).
- wifi: mt76: mt7921: fix resource leak in probe error path
(bsc#1012628).
- wifi: mt76: use kfree_rcu for offchannel link in
mt76_put_vif_phy_link (bsc#1012628).
- wifi: mt76: mt7996: add missing max_remain_on_channel_duration
(bsc#1012628).
- wifi: mt76: mt7996: Fix NULL pointer dereference in
mt7996_init_tx_queues() (bsc#1012628).
- wifi: mt76: mt7925: fix stale pointer comparisons in
change_vif_links (bsc#1012628).
- wifi: mt76: mt7925: keep TX BA state in the primary WCID
(bsc#1012628).
- wifi: mt76: mt792x: skip MLD header rewrite for 802.3 encap TX
(bsc#1012628).
- wifi: mt76: mt7925: validate skb length in testmode query
(bsc#1012628).
- wifi: mt76: mt7996: Fix possible token leak in
mt7996_tx_prepare_skb() (bsc#1012628).
- wifi: mt76: mt7996: Fix possible NULL pointer dereference in
mt7996_mac_write_txwi_80211() (bsc#1012628).
- wifi: mt76: mt7996: fix reading zeroed info->control.flags
after mt76_tx_status_skb_add() (bsc#1012628).
- wifi: mt76: mt7996: remove redundant pdev->bus check in probe
(bsc#1012628).
- wifi: mt76: mt7996: limit work in set_bitrate_mask
(bsc#1012628).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
(bsc#1012628).
- wifi: mt76: mt7915: fix potential tx_retries underflow
(bsc#1012628).
- wifi: mt76: mt7921: fix potential tx_retries underflow
(bsc#1012628).
- wifi: mt76: mt7925: fix potential tx_retries underflow
(bsc#1012628).
- wifi: mt76: mt7996: fix potential tx_retries underflow
(bsc#1012628).
- btrfs: fix invalid pointer dereference in
__btrfs_run_delayed_refs() (bsc#1012628).
- ALSA: aloop: Drop superfluous break (bsc#1012628).
- gpio: mt7621: fix interrupt banks mapping on gpio chips
(bsc#1012628).
- wifi: ath12k: fix EAPOL TX failure caused by stale tcl_metadata
bits (bsc#1012628).
- wifi: ath12k: enable IEEE80211_VHT_EXT_NSS_BW_CAPABLE when
NSS ratio is reported (bsc#1012628).
- fbdev/arm: Export acorndata_8x8 font symbol for bootloader
(bsc#1012628).
- fbdev: sm501fb: Fix buffer errors in OF binding code
(bsc#1012628).
- memory: tegra186-emc: stop borrowing MC aggregate hook for EMC
(bsc#1012628).
- vfs: add FS_USERNS_DELEGATABLE flag and set it for NFS
(bsc#1012628).
- hwmon: (it87) Clamp negative values to zero in set_fan()
(bsc#1012628).
- PM: QoS: Fix misc device registration unwind (bsc#1012628).
- btrfs: zoned: don't account data relocation space-info in
statfs free space (bsc#1012628).
- btrfs: zoned: fix deadlock waiting for ticket during data
relocation (bsc#1012628).
- Revert "btrfs: fix the file offset calculation inside
btrfs_decompress_buf2page()" (bsc#1012628).
- btrfs: zoned: always set max_active_zones for zoned devices
(bsc#1012628).
- btrfs: annotate lockless read of defrag_bytes in should_nocow()
(bsc#1012628).
- btrfs: fix deadlock cloning inline extent when using
flushoncommit (bsc#1012628).
- btrfs: lzo: reject compressed segment that overflows the
compressed input (bsc#1012628).
- ixgbe: do not configure xps for XDP queues (bsc#1012628).
- igc: skip RX timestamp header for frame preemption verification
(bsc#1012628).
- ASoC: sma1307: Fix uevent string leaks in fault worker
(bsc#1012628).
- IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is
not specified (bsc#1012628).
- NFSD: Handle layout stid in nfsd4_drop_revoked_stid()
(bsc#1012628).
- lockd: Stop warning on nlm__int__drop_reply in !V4 cast_status
(bsc#1012628).
- lockd: Translate nlm__int__deadlock in __nlm4svc_proc_lock_msg()
(bsc#1012628).
- lockd: Do not monitor when looking up the LOCK_MSG callback host
(bsc#1012628).
- lockd: Avoid hashing uninitialized bytes in
nlm4svc_lookup_file() (bsc#1012628).
- spi: meson-spifc: fix runtime PM leak on remove (bsc#1012628).
- ASoC: codecs: aw88261: fix incorrect masks for boost regs
(bsc#1012628).
- bpf: Cancel special fields on map value recycle (bsc#1012628).
- clocksource: move NXP timer selection to drivers/clocksource
(bsc#1012628).
- vduse: hold vduse_lock across IDR lookup in open path
(bsc#1012628).
- vhost/vdpa: validate virtqueue index in mmap and fault paths
(bsc#1012628).
- virtio: rtc: tear down old virtqueues before restore
(bsc#1012628).
- virtio_console: read size from config space during device init
(bsc#1012628).
- vduse: Requeue failed read to send_list head (bsc#1012628).
- vhost/net: complete zerocopy ubufs only once (bsc#1012628).
- tools/virtio: check mmap return value in vringh_test
(bsc#1012628).
- vduse: fix compat handling for
VDUSE_IOTLB_GET_FD/VDUSE_VQ_GET_INFO (bsc#1012628).
- vdpa/octeon_ep: Fix PF->VF mailbox data address calculation
(bsc#1012628).
- vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler
(bsc#1012628).
- iomap: pass the correct len to fserror_report_io in
__iomap_write_begin (bsc#1012628).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
(bsc#1012628).
- ASoC: cs35l56: Prevent double-free of debugfs (bsc#1012628).
- ASoC: cs35l56: Cleanup if component_probe fails (bsc#1012628).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
fails (bsc#1012628).
- hwmon: (gpd-fan): drop global driver data and use per-device
allocation (bsc#1012628).
- hwmon: (gpd-fan): Initialize EC before registering hwmon device
(bsc#1012628).
- hwmon: (gpd-fan): fix race condition between device removal
and sysfs access (bsc#1012628).
- ext4: fix ERR_PTR(0) in ext4_mkdir() (bsc#1012628).
- tools: missed broadcast_neigh if_link uapi header (bsc#1012628).
- netlink: specs: rt-link: missed broadcast-neigh (bsc#1012628).
- bonding: 3ad: add lacp_strict configuration knob (bsc#1012628).
- bonding: 3ad: fix carrier when no usable slaves (bsc#1012628).
- bonding: 3ad: fix mux port state on oper down (bsc#1012628).
- ext4: fix kernel BUG in ext4_write_inline_data_end
(bsc#1012628).
- ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT
(bsc#1012628).
- selftests/bpf: Fix bpf_iter/task_vma test (bsc#1012628).
- cxl/test: Verify cmd->size_in before accessing payload
(bsc#1012628).
- cxl/test: Fix integer overflow in mock LSA bounds checks
(bsc#1012628).
- cxl/test: Zero out LSA backing memory to avoid leaking to user
(bsc#1012628).
- of: cpu: add check in __of_find_n_match_cpu_property()
(bsc#1012628).
- vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1012628).
- bpf: Tighten cgroup storage cookie checks for prog arrays
(bsc#1012628).
- m68k: mcf5441x: fix clocks numbering (bsc#1012628).
- pinctrl: sunxi: a523: Remove unneeded IRQ remuxing flag
(bsc#1012628).
- pinctrl: airoha: an7581: add missed gpio32 pin group
(bsc#1012628).
- pinctrl: airoha: an7583: add missed gpio32 pin group
(bsc#1012628).
- pinctrl: airoha: an7581: fix misprint in gpio19 pinconf
(bsc#1012628).
- pinctrl: airoha: an7583: fix misprint in gpio19 pinconf
(bsc#1012628).
- pinctrl: airoha: an7581: fix incorrect led mapping in phy4_led1
pin function (bsc#1012628).
- pinctrl: airoha: an7583: fix incorrect led mapping in phy4_led1
pin function (bsc#1012628).
- pinctrl: airoha: fix pwm pin function for an7581 and an7583
(bsc#1012628).
- pinctrl: airoha: an7583: fix gpio21 pin group (bsc#1012628).
- pinctrl: airoha: an7583: add missed gpio22 pin group
(bsc#1012628).
- pinctrl: airoha: an7583: fix phy1_led1 pin function
(bsc#1012628).
- pinctrl: airoha: an7583: remove undefined groups from pcm_spi
pin function (bsc#1012628).
- arm64: dts: allwinner: a523: Add missing GPIO interrupt
(bsc#1012628).
- ASoC: cs35l56: Fix possible uninitialized value in
cs35l56_spi_system_reset() (bsc#1012628).
- s390/process: Fix kernel thread function pointer type
(bsc#1012628).
- Bluetooth: hci_qca: fix NULL pointer dereference in qca_setup()
for non-serdev device (bsc#1012628).
- Bluetooth: hci_qca: fix NULL pointer dereference in
qca_dmp_hdr() for non-serdev device (bsc#1012628).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
(bsc#1012628).
- Bluetooth: hci_event: fix simultaneous discovery stuck in
FINDING (bsc#1012628).
- Bluetooth: hci_core: Fix UAF in hci_unregister_dev()
(bsc#1012628).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
(bsc#1012628).
- Bluetooth: btintel_pcie: Load IOSF debug regs by controller
variant (bsc#1012628).
- Bluetooth: hci: validate codec capability element length
(bsc#1012628).
- Bluetooth: vhci: validate devcoredump state before side effects
(bsc#1012628).
- RDMA/mlx5: Fix mkey creation error flow rollback (bsc#1012628).
- RDMA/mlx5: Fix TPH extraction in FRMR pool key (bsc#1012628).
- RDMA/core: Fix skipped usage for driver built FRMR key
(bsc#1012628).
- RDMA/core: Fix FRMR aging push to queue error flow
(bsc#1012628).
- RDMA/core: Fix FRMR set pinned push error path (bsc#1012628).
- RDMA/core: Avoid NULL dereference on FRMR bad usage
(bsc#1012628).
- RDMA/core: Fix FRMR handle leak on push failure (bsc#1012628).
- RDMA/core: Add ib_frmr_pool_drop for unrecoverable handles
(bsc#1012628).
- RDMA/mlx5: Drop FRMR pool handle on UMR revoke failure
(bsc#1012628).
- fs: efs: remove unneeded debug prints (bsc#1012628).
- RDMA/mlx5: Remove DCT restrack tracking (bsc#1012628).
- RDMA/mlx5: Remove raw RSS QP restrack tracking (bsc#1012628).
- RDMA/mlx5: Fix undefined shift of user RQ WQE size
(bsc#1012628).
- =?UTF-8?q?RDMA/mlx5:=20Release=20the=20HW=E2=80=91provide?=
=?UTF-8?q?d=20UAR=20index=20rather=20than=20the=20SW=20one?=
(bsc#1012628).
- ASoC: cs35l56: Fix wrong error test on simple_write_to_buffer()
(bsc#1012628).
- ASoC: SOF: Intel: select SND_SOC_SDW_UTILS=y from
SND_SOC_SOF_HDA_GENERIC=y (bsc#1012628).
- ASoC: SOF: Intel: hda-sdw-bpt: select SND_SOF_SOF_HDA_SDW_BPT
properly (bsc#1012628).
- ASoC: codecs: hdac_hdmi: Validate written enum value
(bsc#1012628).
- ASoC: meson: aiu: Validate written enum values (bsc#1012628).
- ASoC: fsl: fsl_audmix: Validate written enum values
(bsc#1012628).
- ASoC: tegra: tegra210_ahub: Validate written enum value
(bsc#1012628).
- ASoC: topology: Check PCM and DAI name strings before use
(bsc#1012628).
- net: dsa: qca8k: fix led devicename when using external mdio
bus (bsc#1012628).
- net/sched: cls_flow: Dont expose folded kernel pointers
(bsc#1012628).
- ipv4: fib: Don't dump dying fib_info in fib_leaf_notify()
(bsc#1012628).
- net: fib_rules: Don't dump dying fib_rule in fib_rules_dump()
(bsc#1012628).
- bridge: cfm: reject invalid CCM interval at configuration time
(bsc#1012628).
- sctp: validate embedded address parameter length (bsc#1012628).
- net: pfcp: allocate per-cpu tstats for PFCP netdevs
(bsc#1012628).
- net: Stop leased rxq before uninstalling its memory provider
(bsc#1012628).
- net/sched: sch_hfsc: Don't make class passive twice
(bsc#1012628).
- tipc: require net admin for TIPCv2 netlink mutators
(bsc#1012628).
- tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1012628).
- tipc: reject inverted service ranges from peer bindings
(bsc#1012628).
- cxl/test: Unregister cxl_acpi in cxl_test_init() error path
(bsc#1012628).
- cxl/test: Add check after kzalloc() memory in alloc_mock_res()
(bsc#1012628).
- crypto: marvell/octeontx - fix DMA cleanup using wrong loop
index (bsc#1012628).
- crypto: cavium/cpt - fix DMA cleanup using wrong loop index
(bsc#1012628).
- crypto: rng - Free default RNG on module exit (bsc#1012628).
- ALSA: usb-audio: qcom: Guard sideband endpoint removal
(bsc#1012628).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
(bsc#1012628).
- iommu/dma-iommu: Fix wrong scatterlist length assignment in
P2PDMA path (bsc#1012628).
- iommufd: Clarify IOAS_MAP_FILE dma-buf support (bsc#1012628).
- spi: xilinx: use FIFO occupancy register to determine buffer
size (bsc#1012628).
- iommu: Avoid copying the user array twice in the full-array
copy helper (bsc#1012628).
- ASoC: sdw_utils: fix missing component_name for cs42l43 part_id
0x2A3B (bsc#1012628).
- cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach()
(bsc#1012628).
- cxl/region: Fill first free targets[] slot during auto-discovery
(bsc#1012628).
- vfio: selftests: Ensure libvfio output dirs are always created
(bsc#1012628).
- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
GPIO (bsc#1012628).
- cxl/region: Block region delete during region creation
(bsc#1012628).
- cxl/region: Resolve region deletion races (bsc#1012628).
- cxl/memdev: Pin parents for entire memdev lifetime
(bsc#1012628).
- power: supply: core: fix supplied_from allocations
(bsc#1012628).
- handshake: Require admin permission for DONE command
(bsc#1012628).
- bnxt: fix head underflow on XDP head-grow (bsc#1012628).
- tcp: clear sock_ops cb flags before force-closing a child socket
(bsc#1012628).
- virtio_net: do not allow tunnel csum offload for non GSO packets
(bsc#1012628).
- net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog
during peek before restoring qlen (bsc#1012628).
- net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog
during peek before restoring qlen (bsc#1012628).
- net/sched: sch_dualpi2: Do not call qdisc_tree_reduce_backlog
during peek before restoring qlen (bsc#1012628).
- net: mana: initialize gdma queue id to INVALID_QUEUE_ID
(bsc#1012628).
- net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE
check (bsc#1012628).
- net: watchdog: fix refcount tracking races (bsc#1012628).
- net: ethernet: mtk_wed: fix loading WO firmware for MT7986
(bsc#1012628).
- net/sched: sch_dualpi2: Add missing module alias (bsc#1012628).
- bpf: Run generic devmap egress prog on private skb
(bsc#1012628).
- net/mlx5: Check max_macs devlink param value against max
capability (bsc#1012628).
- bpf: Fix setting retval to -EPERM for cgroup hooks not returning
errno (bsc#1012628).
- octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1012628).
- net: airoha: Fix error handling in
airoha_ppe_flush_sram_entries() (bsc#1012628).
- net: ethernet: mtk_wed: debugfs: correct index in
wed_amsdu_show() (bsc#1012628).
- net: wwan: t7xx: check skb_clone in control TX (bsc#1012628).
- dpll: fix stale iteration in dpll_pin_on_pin_unregister()
(bsc#1012628).
- dpll: send delete notification before unregister in on-pin
rollback (bsc#1012628).
- dpll: emit per-dpll delete notifications in
dpll_pin_on_pin_unregister() (bsc#1012628).
- dpll: guard sync-pair removal on full pin unregister
(bsc#1012628).
- dpll: balance create/delete notifications in
__dpll_pin_(un)register (bsc#1012628).
- landlock: Fix unmarked concurrent access to socket family
(bsc#1012628).
- net: bcmgenet: Use weighted round-robin TX DMA arbitration
(bsc#1012628).
- octeontx2-af: fix NPC mailbox codes in mbox.h (bsc#1012628).
- net: airoha: Fix register index for Tx-fwd counter configuration
(bsc#1012628).
- net: airoha: Fix debugfs new-tuple display for IPv4 ROUTE
entries (bsc#1012628).
- kcm: use WRITE_ONCE() when changing lower socket callbacks
(bsc#1012628).
- ALSA: seq: oss: Serialize readq reset state with q->lock
(bsc#1012628).
- ALSA: seq: avoid stale FIFO cells during resize (bsc#1012628).
- netfilter: nf_conncount: callers must hold rcu read lock
(bsc#1012628).
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers
and use them (bsc#1012628).
- geneve: Fix off-by-one comparing with GRO_LEGACY_MAX_SIZE
(bsc#1012628).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
(bsc#1012628).
- smb: client: fix conflicting option validation for new mount
API (bsc#1012628).
- cifs: remove all cifs files before kill super (bsc#1012628).
- smb/client: always return a value for FS_IOC_GETFLAGS
(bsc#1012628).
- btrfs: Drop WQ_PERCPU from ordered_flags in
btrfs_init_workqueues() (bsc#1012628).
- bpf: Guard __get_user acesss with access_ok for uprobe_multi
data (bsc#1012628).
- selftests/bpf: Fix typo in verify_umulti_link_info
(bsc#1012628).
- selftests/bpf: Initialize operation name before use
(bsc#1012628).
- bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket
(bsc#1012628).
- udf: fix nls leak on udf_fill_super() failure (bsc#1012628).
- bpf, sockmap: reject overflowing copy + len in
bpf_msg_push_data() (bsc#1012628).
- sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1012628).
- bpf, sockmap: fix integer overflow in bpf_msg_pop_data()
bounds check (bsc#1012628).
- MIPS: mm: Fix out-of-bounds write in maar_res_walk()
(bsc#1012628).
- powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del
(bsc#1012628).
- powerpc/powernv: fix preempt count leak in
pnv_kexec_wait_secondaries_down (bsc#1012628).
- powerpc/kexec: fix double get_cpu() imbalance in
kexec_prepare_cpus (bsc#1012628).
- KEYS: Use acquire when reading state in keyring search
(bsc#1012628).
- tipc: fix UAF in tipc_l2_send_msg() (bsc#1012628).
- tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS
(0xFFFF) (bsc#1012628).
- net: airoha: Fix always-true condition in PPE1 queue reservation
loop (bsc#1012628).
- net: ti: icssg-prueth: Fix AF_XDP fill ring alloc and wakeup
condition (bsc#1012628).
- net: ti: icssg: Use undirected TX tag for native XDP in HSR
offload mode (bsc#1012628).
- net: ti: icssg: Use undirected TX tag for XDP zero copy in
HSR offload mode (bsc#1012628).
- net: ethernet: oa_tc6: Remove FCS size in RX frame
(bsc#1012628).
- ionic: Fix check in ionic_get_link_ext_stats (bsc#1012628).
- RDMA/bnxt_re: Initialize dpi variable to zero (bsc#1012628).
- RDMA/bnxt_re: Free SRQ toggle page after firmware teardown
(bsc#1012628).
- RDMA/bnxt_re: Free CQ toggle page after firmware teardown
(bsc#1012628).
- RDMA/bnxt_re: Avoid displaying the kernel pointer (bsc#1012628).
- RDMA/bnxt_re: Refactor bnxt_re_init_user_qp() (bsc#1012628).
- RDMA/bnxt_re: Update msn table size for app allocated QPs
(bsc#1012628).
- RDMA/bnxt_re: Enhance dbr usecnt logic in doorbell uapis
(bsc#1012628).
- RDMA/bnxt_re: Support doorbells for app allocated QPs
(bsc#1012628).
- RDMA/bnxt_re: Enable app allocated QPs (bsc#1012628).
- RDMA/bnxt_re: Add a max slot check for SQ (bsc#1012628).
- RDMA/bnxt_re: Proper rollback if the ioremap fails
(bsc#1012628).
- RDMA/bnxt_re: Avoid repeated requests to allocate WC pages
(bsc#1012628).
- RDMA/bnxt_re: Fail DBR related page allocation UAPIs if the
feature is disabled (bsc#1012628).
- RDMA/bnxt_re: Reject GET_TOGGLE_MEM when toggle page was not
allocated (bsc#1012628).
- RDMA/hns: Fix memory leak of bonding resources (bsc#1012628).
- RDMA/irdma: Replace waitqueue and flag with completion
(bsc#1012628).
- net: serialize netif_running() check in enqueue_to_backlog()
(bsc#1012628).
- ksmbd: fix use-after-free in same_client_has_lease()
(bsc#1012628).
- mfd: bd72720: Drop BUCK11 ID (bsc#1012628).
- mfd: rsmu: Fix page register setup (bsc#1012628).
- mfd: cs42l43: Sanity check firmware size (bsc#1012628).
- ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write
(bsc#1012628).
- 9p: avoid returning ERR_PTR(0) from mkdir operations
(bsc#1012628).
- net/9p: fix race condition on rdma->state in trans_rdma.c
(bsc#1012628).
- 9p: Add missing read barrier in virtio zero-copy path
(bsc#1012628).
- eventpoll: expand top-of-file overview / locking doc
(bsc#1012628).
- eventpoll: rename epi->next and txlist for clarity
(bsc#1012628).
- eventpoll: Fix epoll_wait() report false negative (bsc#1012628).
- gpiolib: acpi: Only trigger ActiveBoth interrupts on boot
(bsc#1012628).
- i3c: master: svc: Fix missed IBI after false SLVSTART on NPCM845
(bsc#1012628).
- staging: rtl8723bs: fix stainfo check in rtw_aes_decrypt
(bsc#1012628).
- staging: nvec: fix use-after-free in nvec_rx_completed()
(bsc#1012628).
- perf dwarf-aux: Fix libdw segmentation fault in
cu_walk_functions_at (bsc#1012628).
- perf dwarf-aux: Fix libdw API contract violations (bsc#1012628).
- perf srcline: Introduce inline_node__clear_frames()
(bsc#1012628).
- perf libdw: Fix libdw API contract violations and memory leaks
(bsc#1012628).
- perf probe-finder: Fix libdw API contract violations
(bsc#1012628).
- perf annotate-data: Fix libdw API contract violations
(bsc#1012628).
- perf debuginfo: Fix libdw API contract violations (bsc#1012628).
- perf callchain: Handle multiple address spaces (bsc#1012628).
- coresight: cti: Fix DT filter signals silently ignored
(bsc#1012628).
- soundwire: don't program SDW_SCP_BUSCLOCK_SCALE on a unattached
Peripheral (bsc#1012628).
- soundwire: fix bug in sdw_add_element_group_count found by
syzkaller (bsc#1012628).
- coresight: tmc: Fix overflow when calculating is bigger than
2GiB (bsc#1012628).
- coresight: ete: Always save state on power down (bsc#1012628).
- coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore
(bsc#1012628).
- PCI/ASPM: Don't reconfigure ASPM entering low-power state
(bsc#1012628).
- PCI: Introduce named defines for PCI ROM (bsc#1012628).
- PCI: Check ROM header and data structure addr before accessing
(bsc#1012628).
- x86/platform/olpc: xo15: Drop wakeup source on driver removal
(bsc#1012628).
- platform/x86: xo15-ebook: Fix wakeup source and GPE handling
(bsc#1012628).
- perf sched: Add missing mmap2 handler in timehist (bsc#1012628).
- perf tool: Fix missing schedstat delegates and
dont_split_sample_group in delegate_tool (bsc#1012628).
- PCI: intel-gw: Move interrupt enable to own function
(bsc#1012628).
- PCI: intel-gw: Enable clock before PHY init (bsc#1012628).
- PCI: intel-gw: Add .start_link() callback (bsc#1012628).
- PCI: loongson: Do not ignore downstream devices on external
bridges (bsc#1012628).
- rust: alloc: fix assert in `Vec::reserve` doc test
(bsc#1012628).
- bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker()
(bsc#1012628).
- bus: mhi: ep: Add missing state_lock protection for mhi_state
access (bsc#1012628).
- coresight: fix missing error code when trace ID is invalid
(bsc#1012628).
- clk: qcom: cmnpll: Account for reference clock divider
(bsc#1012628).
- dt-bindings: clock: qcom,sm6125-dispcc: reference qcom,gcc.yaml
(bsc#1012628).
- PCI: dwc: Apply ECRC workaround for DesignWare cores prior to
5.10a (bsc#1012628).
- PCI: qcom: Set max OPP before DBI access during resume
(bsc#1012628).
- phy: phy-can-transceiver: Check driver match and driver data
against NULL (bsc#1012628).
- perf pmu-events AMD: Switch l2_itlb_misses to
bp_l1_tlb_miss_l2_tlb_miss.all (bsc#1012628).
- perf unwind: Refactor get_entries to allow dynamic
libdw/libunwind selection (bsc#1012628).
- perf pmu: Skip test on Arm64 when #slots is zero (bsc#1012628).
- clk: at91: sam9x7: Fix gmac_gclk clock definition (bsc#1012628).
- iio: light: acpi-als: Check ACPI_COMPANION() against NULL
(bsc#1012628).
- soundwire: intel_ace2x: release bpt_stream when close it
(bsc#1012628).
- coresight: Fix source not disabled on idr_alloc_u32 failure
(bsc#1012628).
- coresight: Handle helper enable failure properly (bsc#1012628).
- PCI: mediatek-gen3: Do full device power down on removal
(bsc#1012628).
- mailbox: mpfs: fix check for syscon presence in
mpfs_mbox_inbox_isr() (bsc#1012628).
- mailbox: mtk-adsp: fix UAF during device teardown (bsc#1012628).
- mailbox: don't free the channel if the startup callback failed
(bsc#1012628).
- PCI/pwrctrl: Lock device when calling device_is_bound()
(bsc#1012628).
- coresight: platform: defer connection counter increment until
alloc succeeds (bsc#1012628).
- PCI: dwc: Fix signedness bug in fault injection test code
(bsc#1012628).
- PCI: mediatek-gen3: Fix incorrectly skipped pwrctrl error
message (bsc#1012628).
- platform/x86: classmate-laptop: Address memory leaks on driver
removal (bsc#1012628).
- clk: microchip: mpfs-ccc: fix peripheral driver registration
failures after oob fix (bsc#1012628).
- perf build-id: Fix off-by-one bug when printing kernel/module
build-id (bsc#1012628).
- perf event: Fix size of synthesized sample with branch stacks
(bsc#1012628).
- perf inject: Fix itrace branch stack synthesis (bsc#1012628).
- staging: most: video: avoid double free on video register
failure (bsc#1012628).
- usb: host: max3421: Fix shift-out-of-bounds in
max3421_hub_control() (bsc#1012628).
- usb: host: max3421: Reject hub port requests for non-existent
ports (bsc#1012628).
- perf test amd ibs: Fix incorrect kernel version check
(bsc#1012628).
- gpib: Fix inappropriate ioctl error return (bsc#1012628).
- char: tlclk: fix use-after-free in tlclk_cleanup()
(bsc#1012628).
- hpet: Check ACPI_COMPANION() against NULL at probe time
(bsc#1012628).
- sonypi: Check ACPI_COMPANION() against NULL at probe time
(bsc#1012628).
- gpib: fix double decrement of descriptor_busy in command_ioctl()
(bsc#1012628).
- gpib: cb7210: Fix region leak when request_irq fails
(bsc#1012628).
- clk: renesas: rzg2l: Rename iterator in for_each_mod_clock()
to avoid shadowing (bsc#1012628).
- docs: threat-model: add missing closing parenthesis
(bsc#1012628).
- powerpc tools perf: Initialize error code in
auxtrace_record_init function (bsc#1012628).
- PCI: qcom: Disable ASPM L0s for SA8775P (bsc#1012628).
- timers/migration: Update stale @online doc to @available
(bsc#1012628).
- perf header: Sanity check HEADER_EVENT_DESC attr.size before
swap (bsc#1012628).
- perf header: Validate bitmap size before allocating in
do_read_bitmap() (bsc#1012628).
- iio: light: si1133: reset counter to prevent race condition
(bsc#1012628).
- iio: light: si1133: prevent race condition on timeout
(bsc#1012628).
- iio: magnetometer: ak8975: fix potential kernel stack memory
leak (bsc#1012628).
- iio: adc: xilinx-ams: fix out-of-bounds channel lookup in
event handling (bsc#1012628).
- iio: accel: mma8452: handle I2C read error(s) in mma8452_read()
(bsc#1012628).
- iio: tcs3472: power down chip on probe failure (bsc#1012628).
- clk: at91: keep securam node alive while mapping it
(bsc#1012628).
- HID: logitech-hidpp: remove excess kernel-doc member in
hidpp_scroll_counter (bsc#1012628).
- docs: changes.rst: restore pahole 1.26 minimum (regressed by
sort) (bsc#1012628).
- clk: spacemit: k3: Switch to pll2_d6 as parent for PCIe clock
(bsc#1012628).
- clk: spacemit: k3: Fix PCIe clock register offset (bsc#1012628).
- fs/ntfs3: add bounds check to run_get_highest_vcn()
(bsc#1012628).
- fs/ntfs3: fix wrong LCN in run_remove_range() when splitting
a run (bsc#1012628).
- fs/ntfs3: call _ntfs_bad_inode() when failing to rename
(bsc#1012628).
- ntfs3: Allocate iomap inline_data using alloc_page
(bsc#1012628).
- ntfs3: avoid another -Wmaybe-uninitialized warning
(bsc#1012628).
- fs/ntfs3: fix mount failure on 64K page-size kernels
(bsc#1012628).
- drm/amd/display: Add missing kdoc for ALLM parameters
(bsc#1012628).
- thunderbolt: debugfs: Fix margining error counter buffer leak
(bsc#1012628).
- dmaengine: imx-sdma: Refine spba bus searching in probe
(bsc#1012628).
- dt-bindings: dma: nvidia,tegra186-gpc-dma: Make reset optional
(bsc#1012628).
- perf: Fix off-by-one stack buffer overflow in kallsyms__parse()
(bsc#1012628).
- perf annotate: Fix crashes on empty annotate windows
(bsc#1012628).
- perf tools: Guard test_bit from out-of-bounds sample CPU
(bsc#1012628).
- perf sched: Fix thread reference leak in latency_switch_event
(bsc#1012628).
- perf sample: Add file_offset field to struct perf_sample
(bsc#1012628).
- perf sched: Replace BUG_ON on invalid CPU with graceful skip
(bsc#1012628).
- perf sched: Fix NULL dereference in latency_runtime_event
(bsc#1012628).
- perf sched: Fix comp_cpus heap overflow with cross-machine
recordings (bsc#1012628).
- perf tools: Guard remaining test_bit calls from OOB sample CPU
(bsc#1012628).
- perf tools: Add bounds check to cpu__get_node() (bsc#1012628).
- perf sched: Fix thread reference leaks in timehist_get_thread()
(bsc#1012628).
- perf sched: Cap max_cpu at MAX_CPUS in timehist sample
processing (bsc#1012628).
- perf sched: Fix register_pid() overflow, strcpy, and BUG_ON
(bsc#1012628).
- perf mmap: Guard cpu__get_node() return in aio_bind()
(bsc#1012628).
- perf stat: Bounds-check CPU index in topology aggregation
callbacks (bsc#1012628).
- perf c2c: Bounds-check CPU and node IDs before bitmap and
array access (bsc#1012628).
- perf c2c: Bounds-check CPU IDs in setup_nodes() topology loop
(bsc#1012628).
- perf sched: Clean up idle_threads entry on init failure
(bsc#1012628).
- perf sched: Use is_idle_sample() for idle thread runtime cast
guard (bsc#1012628).
- perf sched: Fix thread reference leak in idle hist processing
(bsc#1012628).
- perf sched: Use thread__put() in free_idle_threads()
(bsc#1012628).
- perf sched: Replace BUG_ON and add NULL checks in replay event
helpers (bsc#1012628).
- perf mmap: Fix NULL deref in aio cleanup on alloc failure
(bsc#1012628).
- perf stat: Introduce perf_env__get_cpu_topology() to guard
NULL env->cpu (bsc#1012628).
- perf c2c: Fix use-after-free in he__get_c2c_hists() error path
(bsc#1012628).
- perf timechart: Fix cpu2y() OOB read on untrusted CPU index
(bsc#1012628).
- perf tools: Fix int16_t truncation of max_cpu_num in
set_max_cpu_num() (bsc#1012628).
- perf sched: Free callchain nodes in idle thread cleanup
(bsc#1012628).
- dt-bindings: clock: qcom: Add X1P42100 camera clock controller
(bsc#1012628).
- clk: qcom: camcc-x1e80100: Add support for camera QDSS debug
clocks (bsc#1012628).
- docs: memfd_preservation: fix rendering of ABI documentation
(bsc#1012628).
- mshv: add bounds check on vp_index in mshv_intercept_isr()
(bsc#1012628).
- dmaengine: qcom: gpi: set DMA_PRIVATE capability (bsc#1012628).
- dmaengine: Fix possible use after free (bsc#1012628).
- dmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc
(bsc#1012628).
- dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor
(bsc#1012628).
- clk: qcom: a53: Corrected frequency multiplier for 1152MHz
(bsc#1012628).
- sunrpc: Fix error handling in
rpc_sysfs_xprt_switch_add_xprt_store() (bsc#1012628).
- pNFS/filelayout: fix cheking if a layout is striped
(bsc#1012628).
- xprtrdma: Use sendctx DMA state for Send signaling
(bsc#1012628).
- xprtrdma: Decouple req recycling from RPC completion
(bsc#1012628).
- NFSv4/pnfs: defer return_range callbacks until after inode
unlock (bsc#1012628).
- nfs: keep PG_UPTODATE clear after read errors in page groups
(bsc#1012628).
- NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS
connect errors (bsc#1012628).
- NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in
pg_get_mirror_count_write (bsc#1012628).
- nfs: use nfsi->rwsem to protect traversal of the file lock list
(bsc#1012628).
- PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro
(bsc#1012628).
- pwm: rzg2l-gpt: Add missing newlines to dev_err_probe() messages
(bsc#1012628).
- PCI: meson: Propagate devm_add_action_or_reset() failure
(bsc#1012628).
- PCI: meson: Add missing remove callback (bsc#1012628).
- lockd: Correct kernel-doc status descriptions for NLMv4 GRANTED
(bsc#1012628).
- virtio: add missing kernel-doc for map and vmap members
(bsc#1012628).
- fs/ntfs3: prevent potential lcn remains uninitialized
(bsc#1012628).
- fs/ntfs3: resize log->one_page_buf when adopting on-disk page
size (bsc#1012628).
- platform/x86/intel/vsec: Restore BAR fallback for header walk
(bsc#1012628).
- perf tools: Fix get_max_num() size_t underflow on empty sysfs
file (bsc#1012628).
- perf tools: Use scnprintf() in cpu_map__snprint() to prevent
overflow (bsc#1012628).
- perf tools: Use perf_env__get_cpu_topology() in
machine__resolve() (bsc#1012628).
- perf tools: NULL bitmap pointers after bitmap_free()
(bsc#1012628).
- PCI: rcar-host: Remove unused LIST_HEAD(res) (bsc#1012628).
- perf sched: Bounds-check prio before test_bit() in timehist
(bsc#1012628).
- perf sched: Fix idle-hist callchain display using wrong rb_first
variant (bsc#1012628).
- perf tools: Add O_CLOEXEC to open() calls in DSO and ELF code
(bsc#1012628).
- perf bpf: Use scnprintf() in snprintf_hex() and
synthesize_bpf_prog_name() (bsc#1012628).
- perf hists: Fix snprintf() in hists__scnprintf_title() UID
filter path (bsc#1012628).
- perf tools: Use scnprintf() in build_id__snprintf() and hwmon
read_events() (bsc#1012628).
- xprtrdma: Fix ep kref imbalance on ADDR_CHANGE (bsc#1012628).
- xprtrdma: Initialize re_id before removal registration
(bsc#1012628).
- xprtrdma: Check frwr_wp_create() during connect (bsc#1012628).
- xprtrdma: Document and assert reply-handler invariants
(bsc#1012628).
- xprtrdma: Resize reply buffers before reposting receives
(bsc#1012628).
- xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1012628).
- xprtrdma: Sanitize the reply credit grant after parsing
(bsc#1012628).
- xprtrdma: Repost Receive buffers for malformed replies
(bsc#1012628).
- xprtrdma: Return sendctx slot after Send preparation failure
(bsc#1012628).
- perf s390: Fix TEXTREL in Python extension by compiling as PIC
(bsc#1012628).
- perf data convert json: Fix addr_location leak on time-filtered
samples (bsc#1012628).
- perf cs-etm: Queue context packets for frontend (bsc#1012628).
- perf pmu: Fix pmu_id() heap underwrite on empty identifier file
(bsc#1012628).
- perf pmu: Fix perf_pmu__parse_scale/unit() OOB access on empty
sysfs file (bsc#1012628).
- tools lib api: Fix missing null termination in
filename__read_int/ull() (bsc#1012628).
- perf symbols: Fix signed overflow in sysfs__read_build_id()
size check (bsc#1012628).
- perf symbols: Bounds-check .gnu_debuglink section data
(bsc#1012628).
- perf tools: Use mkostemp() for O_CLOEXEC on temporary files
(bsc#1012628).
- perf intel-pt: Fix snprintf size tracking bug in insn decoder
(bsc#1012628).
- perf tools: Fix thread__set_comm_from_proc() on empty comm file
(bsc#1012628).
- perf hwmon: Fix off-by-one null termination on sysfs reads
(bsc#1012628).
- perf hwmon: Use scnprintf() in hwmon_pmu__for_each_event()
(bsc#1012628).
- perf hwmon: Fix parse_hwmon_filename() strlcpy buffer overflow
(bsc#1012628).
- perf symbols: Bounds-check descsz in sysfs__read_build_id()
GNU fallback (bsc#1012628).
- perf tools: Fix uninitialized pathname on uncompressed fallback
in filename__decompress() (bsc#1012628).
- perf hwmon: Guard label read against empty or failed reads
(bsc#1012628).
- perf tools: Use snprintf() in
dso__read_running_kernel_build_id() (bsc#1012628).
- tools lib api: Fix filename__write_int() writing uninitialized
stack data (bsc#1012628).
- tools lib api: Fix mount_overload() snprintf truncation and
toupper range (bsc#1012628).
- perf bpf: Add NULL check for btf__type_by_id() in
synthesize_bpf_prog_name() (bsc#1012628).
- perf bpf: Fix map data leak in bpf_metadata_create() on alloc
failure (bsc#1012628).
- perf bpf: Fix metadata leak in perf_env__add_bpf_info() on
duplicate insert (bsc#1012628).
- perf symbols: Add bounds checks to elf_read_build_id() note
iteration (bsc#1012628).
- perf symbols: Add bounds checks to read_build_id() note
iteration in minimal build (bsc#1012628).
- dt-bindings: dma: snps,dw-axi-dmac: Add fallback compatible
for CV1800B (bsc#1012628).
- dt-bindings: phy: sc8280xp-qmp-pcie: Disallow bifurcation
register on Purwa (bsc#1012628).
- PCI: mediatek: Use actual physical address instead of
virt_to_phys() (bsc#1012628).
- phy: freescale: phy-fsl-imx8qm-lvds-phy: Use synchronous PM
runtime put in reset (bsc#1012628).
- phy: freescale: phy-fsl-imx8qm-lvds-phy: Fix missing
pm_runtime_disable() on probe error path (bsc#1012628).
- PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL
dereference when no RAS DES capability (bsc#1012628).
- xfrm: Fix dev use-after-free in xfrm async resumption
(bsc#1012628).
- sparc: Avoid -Wunused-but-set-parameter in clear_user_page()
(bsc#1012628).
- Documentation: ABI: sysfs-class-reboot-mode-reboot_modes:
fix doc warnings (bsc#1012628).
- Revert "PCI/MSI: Unmap MSI-X region on error" (bsc#1012628).
- apparmor: fix shadowing of plabel that prevents cache from
being updated (bsc#1012628).
- apparmor: fix race in unix socket mediation when peer_path is
used (bsc#1012628).
- apparmor: fix refcount leak when updating the sk_ctx
(bsc#1012628).
- security/apparmor/apparmorfs.c: conditionally compile
get_loaddata_common_ref() (bsc#1012628).
- apparmor: check label build before no_new_privs test
(bsc#1012628).
- apparmor: aa_label_alloc use aa_label_free on alloc failure
(bsc#1012628).
- apparmor: fix rawdata_f_data implicit flex array (bsc#1012628).
- apparmor: grab ns lock and refresh when looking up changehat
child profiles (bsc#1012628).
- apparmor: fix potential UAF in aa_replace_profiles
(bsc#1012628).
- apparmor: fix NULL pointer dereference in unpack_pdb
(bsc#1012628).
- apparmor: remove or add symlinks to rawdata according to
export_binary (bsc#1012628).
- apparmor: Fix return in ns_mkdir_op (bsc#1012628).
- apparmor: fail policy unpack on accept2 allocation failure
(bsc#1012628).
- apparmor: release exe file resources on path failure
(bsc#1012628).
- apparmor: remove unnecessary goto and associated label
(bsc#1012628).
- apparmor: aa_getprocattr free procattr leak on format failure
(bsc#1012628).
- apparmor: put secmark label after secid lookup (bsc#1012628).
- apparmor: Fix inverted comparison in cache_hold_inc()
(bsc#1012628).
- i3c: mipi-i3c-hci: Fix suspend behavior when bus disable falls
back to software reset (bsc#1012628).
- i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ring
(bsc#1012628).
- i3c: master: Make hot-join workqueue freezable to block hot-join
during suspend (bsc#1012628).
- i3c: master: Serialize i3c_set_hotjoin() with the maintenance
lock (bsc#1012628).
- i3c: master: Consolidate Hot-Join DAA work in the core
(bsc#1012628).
- i3c: master: Ensure Hot-Join operations are stopped on shutdown
(bsc#1012628).
- i3c: master: Defer new-device registration out of DAA caller
context (bsc#1012628).
- i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev()
(bsc#1012628).
- i3c: master: Prevent reuse of dynamic address on device add
failure (bsc#1012628).
- apparmor: fix label can not be immediately before a declaration
(bsc#1012628).
- accel/ivpu: fix HWS command queue leak on registration failure
(bsc#1012628).
- sparc: led: avoid trimming a newline from empty writes
(bsc#1012628).
- perf maps: Add maps__mutate_mapping (bsc#1012628).
- perf symbols: Fix bswap copy-paste error for 32-bit ELF p_filesz
(bsc#1012628).
- perf symbols: Validate p_filesz before use in
filename__read_build_id() (bsc#1012628).
- perf symbols: Break infinite loop on zero-filled notes in
sysfs__read_build_id() (bsc#1012628).
- perf dso: Fix heap overflow in dso__get_filename() on
decompressed path (bsc#1012628).
- perf dso: Set error code when open() fails on uncompressed
fallback path (bsc#1012628).
- perf tools: Use snprintf() for root_dir path construction
(bsc#1012628).
- perf hwmon: Fix fd check to accept fd 0 in
hwmon_pmu__describe_items() (bsc#1012628).
- perf sched: Replace (void*)1 sentinel with proper runtime
allocation (bsc#1012628).
- perf bpf: Validate func_info_rec_size and sub_id in
synthesize_bpf_prog_name() (bsc#1012628).
- perf bpf: Reject oversized BPF metadata events that truncate
header.size (bsc#1012628).
- perf bpf: Bounds-check array offsets in bpil_offs_to_addr()
(bsc#1012628).
- perf c2c: Free format list entries when releasing c2c hist
entries (bsc#1012628).
- perf cs-etm: Reject CPU IDs that would overflow signed
comparison (bsc#1012628).
- gpio: mlxbf3: fail probe if gpiochip registration fails
(bsc#1012628).
- regcache: Do not overwrite error code when finalizing cache
after error (bsc#1012628).
- drm/i915: clear CRTC color blob pointers after dropping refs
(bsc#1012628).
- drm/xe: Fix wa_oob codegen recipe for external module builds
(bsc#1012628).
- spi: dw: fix wrong BAUDR setting after resume (bsc#1012628).
- i3c: master: Update dev_nack_retry_count under maintenance lock
(bsc#1012628).
- i3c: master: Add missing runtime PM get in
dev_nack_retry_count_store() (bsc#1012628).
- erofs: call erofs_exit_ishare() before rcu_barrier()
(bsc#1012628).
- ALSA: usb-audio: qcom: Free sideband sg_table objects
(bsc#1012628).
- xfrm: Fix xfrm state cache insertion race (bsc#1012628).
- xfrm: annotate data-races around xfrm_policy_count[] and
xfrm_policy_default[] (bsc#1012628).
- xfrm: validate selector family and prefixlen during match
(bsc#1012628).
- perf machine: Use snprintf() for guestmount path construction
(bsc#1012628).
- perf cs-etm: Validate num_cpu before metadata allocation
(bsc#1012628).
- perf cs-etm: Require full global header in auxtrace_info size
check (bsc#1012628).
- perf cs-etm: Bounds-check CPU in cs_etm__get_queue()
(bsc#1012628).
- perf c2c: Free format list entries when c2c_hists__init()
fails (bsc#1012628).
- perf c2c: Fix hist entry and format list leaks in c2c_he_free()
(bsc#1012628).
- perf bpf: Validate array presence before casting BPF prog info
pointers (bsc#1012628).
- perf dso: Set standard errno on decompression failure
(bsc#1012628).
- ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate
mode (bsc#1012628).
- drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free
(bsc#1012628).
- drm/amdgpu: initialize iter.start in amdgpu_devcoredump_format
(bsc#1012628).
- drm/amd/display: Skip PHY SSC reduction on some 8K panels
(bsc#1012628).
- drm/amd/display: Fix mem_type change detection for async flips
(bsc#1012628).
- drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm
(bsc#1012628).
- drm/amdgpu: initialize irq.lock spinlock earlier (bsc#1012628).
- net: ethernet: mtk_eth_soc: fix supported_interface set after
phylink_create (bsc#1012628).
- selftests/ftrace: Fix trace_marker_raw test on 64K page kernels
(bsc#1012628).
- octeontx2-pf: Fix leak of SQ timestamp buffer on teardown
(bsc#1012628).
- octeontx2-af: npc: Log successful MCAM drop-on-non-hit install
at debug level (bsc#1012628).
- net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1012628).
- sctp: hold socket lock when dumping endpoints in sctp_diag
(bsc#1012628).
- ALSA: usb-audio: qcom: reject stream disable with no active
interface (bsc#1012628).
- ALSA: usb-audio: qcom: clear opened when stream enable fails
(bsc#1012628).
- PCI: iproc: Restore .map_irq() for the platform bus driver
(bsc#1012628).
- spi: rpc-if: Use correct device for hardware reinitialization
on resume (bsc#1012628).
- virtio-net: fix len check in receive_big() (bsc#1012628).
- dpaa2-switch: fix VLAN upper check not rejecting bridge join
(bsc#1012628).
- devlink: Fix parent ref leak in devl_rate_node_create()
(bsc#1012628).
- devlink: Fix parent ref leak on tc-bw failure (bsc#1012628).
- net: airoha: fix foe_check_time allocation size (bsc#1012628).
- net: macb: add TX stall timeout callback to recover from lost
TSTART write (bsc#1012628).
- flow_dissector: check device type before reading ETH_ADDRS
(bsc#1012628).
- netconsole: don't drop the last byte of a full-sized message
(bsc#1012628).
- selftests: vlan_bridge_binding: Fix flaky operational state
check (bsc#1012628).
- eth: fbnic: take netif_addr_lock_bh() around rx mode address
programming (bsc#1012628).
- ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints
(bsc#1012628).
- netfilter: flowtable: fix and simplify IP6IP6 tunnel handling
(bsc#1012628).
- arm64: static_call: include asm/insns.h (bsc#1012628).
- arm64/hw_breakpoint: reject unaligned watchpoints that would
truncate BAS (bsc#1012628).
- thermal: intel: Fix dangling resources on
thermal_throttle_online() failure (bsc#1012628).
- ACPI: resource: Amend kernel-doc style (bsc#1012628).
- ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone()
(bsc#1012628).
- ieee802154: Restore initial state on failed device_rename()
in cfg802154_switch_netns() (bsc#1012628).
- ieee802154: Avoid calling WARN_ON() on -ENOMEM in
cfg802154_switch_netns() (bsc#1012628).
- ieee802154: Remove WARN_ON() in cfg802154_pernet_exit()
(bsc#1012628).
- ieee802154: fix kernel-infoleak in dgram_recvmsg()
(bsc#1012628).
- mac802154: Prevent overwrite return code in
mac802154_perform_association() (bsc#1012628).
- md/raid1: fix writes_pending and barrier reference leaks on
write failures (bsc#1012628).
- md/raid10: fix writes_pending leak on write request failures
(bsc#1012628).
- md/raid10: fix writes_pending and barrier reference leaks on
discard failures (bsc#1012628).
- md/raid1: honor REQ_NOWAIT when waiting for behind writes
(bsc#1012628).
- md/raid1: free r1_bio when REQ_NOWAIT is set and read would
block on retry (bsc#1012628).
- netfilter: ipset: Don't use test_bit() in lockless RCU readers
in hash types (bsc#1012628).
- netfilter: ipset: Don't use test_bit() in lockless RCU readers
in bitmap types (bsc#1012628).
- netfilter: ipset: fix order of kfree_rcu() and
rcu_assign_pointer() (bsc#1012628).
- netfilter: ipset: make sure gc is properly stopped
(bsc#1012628).
- netfilter: nft_payload: reject offsets exceeding 65535 bytes
(bsc#1012628).
- netfilter: nft_meta_bridge: add validate callback for get
operations (bsc#1012628).
- netfilter: nft_flow_offload: zero device address for non-ether
case (bsc#1012628).
- netfilter: nf_reject: skip iphdr options when looking for icmp
header (bsc#1012628).
- netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak
(bsc#1012628).
- tpm_crb: Check ACPI_COMPANION() against NULL during probe
(bsc#1012628).
- mailbox: imx: Forward the timeout/ error in imx_mu_generic_tx()
(bsc#1012628).
- irqchip/crossbar: Fix parent domain resource leak (bsc#1012628).
- alloc_tag: fix use-after-free in /proc/allocinfo after module
unload (bsc#1012628).
- selftests/mm: restore default nr_hugepages value via exit trap
in charge_reserved_hugetlb.sh (bsc#1012628).
- selftests/mm: fix hugetlb pathname construction in
charge_reserved_hugetlb.sh (bsc#1012628).
- selftests/mm: restore default nr_hugepages value via exit trap
in hugetlb_reparenting_test.sh (bsc#1012628).
- selftests/mm: fix hugetlb pathname construction in
hugetlb_reparenting_test.sh (bsc#1012628).
- selftests/mm: fix cgroup task placement and drop memory.current
checks in hugetlb_reparenting_test.sh (bsc#1012628).
- selftests/mm: size tmpfs according to PMD page size in
split_huge_page_test (bsc#1012628).
- selftests/mm: free dynamically allocated PMD-sized buffers in
split_huge_page_test (bsc#1012628).
- selftest/mm: register existing mapping with userfaultfd in
hugetlb-mremap (bsc#1012628).
- selftests/mm: ensure destination is hugetlb-backed in
hugetlb-mremap (bsc#1012628).
- selftests/mm: skip uffd-stress test when nr_pages_per_cpu is
zero (bsc#1012628).
- selftests/mm: run_vmtests.sh: free memory if available memory
is low (bsc#1012628).
- selftests/mm: move hwpoison setup into run_test() and silence
modprobe output for memory-failure category (bsc#1012628).
- selftests/mm: clarify alternate unmapping in compaction_test
(bsc#1012628).
- selftests/mm: allow PUD-level entries in compound testcase of
hmm tests (bsc#1012628).
- selftests/mm: remove hardcoded THP sizing assumptions in hmm
tests (bsc#1012628).
- selftests/mm: fix exclusive_cow test fork() handling
(bsc#1012628).
- net: marvell: prestera: initialize err in prestera_port_sfp_bind
(bsc#1012628).
- tipc: fix use-after-free of the discoverer in tipc_disc_rcv()
(bsc#1012628).
- net: dst_metadata: fix false-positive memcpy overflow in
tun_dst_unclone (bsc#1012628).
- net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init
error paths (bsc#1012628).
- octeontx2-af: npc: cn20k: fix NPC defrag (bsc#1012628).
- octeontx2-af: mcs: Fix unsupported secy stats read
(bsc#1012628).
- octeontx2-pf: Clear stats of all resources when freeing
resources (bsc#1012628).
- octeontx2-pf: mcs: Fix mcs resources free on PF shutdown
(bsc#1012628).
- net: emac: Fix NULL pointer dereference in emac_probe
(bsc#1012628).
- net/sched: act_ct: fix nf_connlabels leak on two error paths
(bsc#1012628).
- net: airoha: Fix skb->priority underflow in
airoha_dev_select_queue() (bsc#1012628).
- ipv6: ndisc: fix NULL deref in accept_untracked_na()
(bsc#1012628).
- ipv6: ioam: fix type confusion of dst_entry (bsc#1012628).
- dpaa2-switch: do not accept VLAN uppers while bridged
(bsc#1012628).
- rtc: abx80x: fix the RTC_VL_CLR clearing all status flags
(bsc#1012628).
- rtc: ds1307: handle oscillator stop flag for
ds1337/ds1339/ds3231 (bsc#1012628).
- bpf: Fix stack slot index in nospec checks (bsc#1012628).
- bpf: Fix partial copy of non-linear test_run output
(bsc#1012628).
- bpftool: Fix vmlinux BTF leak in cgroup commands (bsc#1012628).
- bpf: zero-initialize the fib lookup flow struct (bsc#1012628).
- bpf: Fix BPF_PROG_ASSOC_STRUCT_OPS last field check
(bsc#1012628).
- bpf: Fix effective prog array index with BPF_F_PREORDER
(bsc#1012628).
- power: sequencing: fix ABBA deadlock in
pwrseq_device_unregister() (bsc#1012628).
- gpiolib: initialize return value in gpiochip_set_multiple()
(bsc#1012628).
- drm/edid: fix OOB read in drm_parse_tiled_block() (bsc#1012628).
- erofs: handle 48-bit blocks_hi for compressed inodes
(bsc#1012628).
- ASoC: cs530x: Fix expected MCLK rates for CS5302/4/8
(bsc#1012628).
- PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count'
value of 0 (bsc#1012628).
- PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count'
value of 0 (bsc#1012628).
- PCI: endpoint: pci-epf-vntb: Document legacy MSI doorbell offset
(bsc#1012628).
- PCI: endpoint: pci-epf-vntb: Defer pci_epc_raise_irq() out of
atomic context (bsc#1012628).
- PCI: endpoint: pci-epf-vntb: Report 0-based doorbell vector
via ntb_db_event() (bsc#1012628).
- bpf: Preserve pointer spill metadata during half-slot cleanup
(bsc#1012628).
- ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()
(bsc#1012628).
- ice: fix AQ error code comparison in ice_set_pauseparam()
(bsc#1012628).
- ice: call netif_keep_dst() once when entering switchdev mode
(bsc#1012628).
- rtc: isl1208: Balance enable_irq_wake() with disable_irq_wake()
on cleanup (bsc#1012628).
- ice: dpll: set pointers to NULL after kfree in
ice_dpll_deinit_info (bsc#1012628).
- ice: dpll: fix memory leak in ice_dpll_init_info error paths
(bsc#1012628).
- i40e: Fix i40e_debug() to use struct i40e_hw argument
(bsc#1012628).
- e1000e: Reconfigure PLL clock gate timeout and re-enable K1
on Meteor Lake (bsc#1012628).
- rtc: msc313: fix NULL deref in shared IRQ handler at probe
(bsc#1012628).
- bpf: Guard conntrack opts error writes (bsc#1012628).
- selftests/bpf: Cover small conntrack opts error writes
(bsc#1012628).
- ksmbd: fix use-after-free of conn->preauth_info in concurrent
SMB2 NEGOTIATE (bsc#1012628).
- ipv6: Fix null-ptr-deref in fib6_nh_mtu_change() (bsc#1012628).
- eth: bnxt: improve the timing of stats (bsc#1012628).
- ipv4: fib: Don't ignore error route in local/main tables
(bsc#1012628).
- md/raid5: use stripe state snapshot in break_stripe_batch_list()
(bsc#1012628).
- md/raid5: avoid R5_Overlap races while breaking stripe batches
(bsc#1012628).
- bpf: Disable xfrm_decode_session hook attachment (bsc#1012628).
- netfilter: nf_nat: avoid invalid nat_net pointer use on failed
nf_nat_init() (bsc#1012628).
- netfilter: nf_conncount: prevent connlimit drops for early
confirmed ct (bsc#1012628).
- netfilter: flowtable: Validate iph->ihl in
nf_flow_ip4_tunnel_proto() (bsc#1012628).
- netfilter: nft_synproxy: stop bypassing the priv->info snapshot
(bsc#1012628).
- netfilter: nft_compat: ebtables emulation must reject non-bridge
targets (bsc#1012628).
- gpio: davinci: fix IRQ domain leak on devm_kzalloc failure
(bsc#1012628).
- netfilter: nf_conntrack_helper: dynamically allocate struct
nf_conntrack_helper (bsc#1012628).
- netfilter: nf_conntrack_pptp: move GRE specific cleanup to
GRE tracker (bsc#1012628).
- netfilter: conntrack: check NULL when retrieving ct extension
(bsc#1012628).
- netfilter: nf_conntrack_expect: use conntrack GC to reap
expectations (bsc#1012628).
- netfilter: nf_conntrack_expect: store master_tuple in
expectation (bsc#1012628).
- netfilter: nf_conntrack_expect: run expectation eviction with
no helper (bsc#1012628).
- netfilter: nft_ct: expectation timeouts are passed in
milliseconds (bsc#1012628).
- netfilter: nf_conntrack_helper: cap maximum number of
expectation at helper registration (bsc#1012628).
- cpuidle: Allow exit latency to exceed target residency
(bsc#1012628).
- ASoC: SDCA: Validate written enum value in ge_put_enum_double()
(bsc#1012628).
- ASoC: rt5575: Use __le32 for SPI burst write address
(bsc#1012628).
- PCI: endpoint: pci-epf-vntb: Exclude reserved slots from
db_valid_mask (bsc#1012628).
- NTB: epf: Make db_valid_mask cover only real doorbell bits
(bsc#1012628).
- NTB: epf: Report 0-based doorbell vector via ntb_db_event()
(bsc#1012628).
- NTB: epf: Fix doorbell bitmask and IRQ vector handling
(bsc#1012628).
- alpha/PCI: Add security_locked_down() check to
pci_mmap_resource() (bsc#1012628).
- alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs
(bsc#1012628).
- Docs/driver-api/uio-howto: document mmap_prepare callback
(bsc#1012628).
- net, bpf: check master for NULL in xdp_master_redirect()
(bsc#1012628).
- net: do not acquire dev->tx_global_lock in netdev_watchdog_up()
(bsc#1012628).
- net: dsa: sja1105: round up PTP perout pin duration
(bsc#1012628).
- net: ti: icssg: Fix XSK zero copy TX during application wakeup
(bsc#1012628).
- veth: fix NAPI leak in XDP enable error path (bsc#1012628).
- net: usb: lan78xx: restore VLAN and hash filters after link up
(bsc#1012628).
- net: lwtunnel: Drop skb metadata before LWT encapsulation
(bsc#1012628).
- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
(bsc#1012628).
- sctp: fix err_chunk memory leaks in INIT handling (bsc#1012628).
- ipv6: fix error handling in disable_ipv6 sysctl (bsc#1012628).
- ipv6: fix error handling in ignore_routes_with_linkdown sysctl
(bsc#1012628).
- ipv6: fix error handling in forwarding sysctl (bsc#1012628).
- ipv6: fix error handling in disable_policy sysctl (bsc#1012628).
- ipv6: fix state corruption during proxy_ndp sysctl restart
(bsc#1012628).
- ipv6: fix missing notification for ignore_routes_with_linkdown
(bsc#1012628).
- eth: fbnic: fix ordering of heartbeat vs ownership
(bsc#1012628).
- s390/mm: Fix handling of _PAGE_UNUSED pte bit (bsc#1012628).
- thermal: testing: zone: Flush work items during cleanup
(bsc#1012628).
- ACPI: processor_idle: Mark LPI enter functions as __cpuidle
(bsc#1012628).
- smb/client: preserve errors from smb2_set_sparse()
(bsc#1012628).
- rtc: ds1307: Fix off-by-one issue with wday for rx8130
(bsc#1012628).
- rtc: cmos: unregister HPET IRQ handler on probe failure
(bsc#1012628).
- net: dsa: realtek: fix memory leak in rtl8366rb_setup_led()
(bsc#1012628).
- net: dsa: mxl862xx: avoid unaligned 16-bit access in api_wrap
(bsc#1012628).
- net: dsa: mxl862xx: fix use-after-free of DSA ports in
crc_err_work (bsc#1012628).
- net: mana: Fall back to standard MTU when PF reports adapter_mtu
of 0 (bsc#1012628).
- net: phy: realtek: Clear MDIO_AN_10GBT_CTRL_ADV10G bit
(bsc#1012628).
- octeontx2-af: Validate NIX maximum LFs correctly (bsc#1012628).
- octeontx2-af: fix CGX debugfs RVU AF PCI reference leaks
(bsc#1012628).
- net: mvneta: re-enable percpu interrupt on resume (bsc#1012628).
- geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint
(bsc#1012628).
- geneve: validate inner network offset in geneve_gro_complete()
(bsc#1012628).
- tools: ynl: build archives with $(AR) (bsc#1012628).
- net: sungem: fix probe error cleanup (bsc#1012628).
- net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in
remove (bsc#1012628).
- net: stmmac: dwmac-spacemit: Fix wrong phy interface definition
(bsc#1012628).
- net: stmmac: dwmac-spacemit: Fix wrong irq definition
(bsc#1012628).
- LoongArch: Move struct kimage forward declaration before use
(bsc#1012628).
- LoongArch: BPF: Fix outdated tail call comments (bsc#1012628).
- LoongArch: BPF: Fix off-by-one error in tail call (bsc#1012628).
- ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel
count (bsc#1012628).
- net: udp_tunnel: prevent double queueing in
udp_tunnel_nic_device_sync (bsc#1012628).
- dt-bindings: net: renesas,ether: Drop example
"ethernet-phy-ieee802.3-c22" fallback (bsc#1012628).
- net: enetc: fix potential divide-by-zero when num_vsi is zero
(bsc#1012628).
- udp_tunnel: Pass struct sock to udp_tunnel_sock_release()
(bsc#1012628).
- udp_tunnel: Pass struct sock to setup_udp_tunnel_sock()
(bsc#1012628).
- tipc: Store struct sock in struct udp_bearer (bsc#1012628).
- tipc: fix UAF in cleanup_bearer() due to premature
dst_cache_destroy() (bsc#1012628).
- tipc: avoid busy looping in tipc_exit_net() (bsc#1012628).
- selftests: tls: size splice_short pipe by page size
(bsc#1012628).
- net: hns3: unify copper port ksettings configuration path
(bsc#1012628).
- net: hns3: refactor MAC autoneg and speed configuration
(bsc#1012628).
- net: hns3: fix permanent link down deadlock after reset
(bsc#1012628).
- net: hns3: differentiate autoneg default values between copper
and fiber (bsc#1012628).
- ALSA: FCP: Fix NULL pointer dereference in interface lookup
(bsc#1012628).
- tracing: probes: fix typo in a log message (bsc#1012628).
- spi: sh-msiof: abort transfers when reset times out
(bsc#1012628).
- ACPI: RIMT: Only defer the IOMMU configuration in init stage
(bsc#1012628).
- riscv: Fix 32-bit call_on_irq_stack() frame pointer ABI
(bsc#1012628).
- bpf: Mask pseudo pointer values in verifier logs (bsc#1012628).
- bpf: Fix insn_aux_data leak on verifier err_free_env path
(bsc#1012628).
- gpio: mvebu: fail probe if gpiochip registration fails
(bsc#1012628).
- gpio: htc-egpio: use managed gpiochip registration
(bsc#1012628).
- net: pse-pd: scope pse_control regulator handle to kref lifetime
(bsc#1012628).
- seg6: validate SRH length before reading fixed fields
(bsc#1012628).
- qede: fix out-of-bounds check for cqe->len_list[] (bsc#1012628).
- net: enetc: check the number of BDs needed for xdp_frame
(bsc#1012628).
- sctp: fix SCTP_RESET_STREAMS stream list length limit
(bsc#1012628).
- sctp: add INIT verification after cookie unpacking
(bsc#1012628).
- MIPS: DEC: Ensure RTC platform device deregistration upon
failure (bsc#1012628).
- MIPS: mm: Add check for highmem before removing memory block
(bsc#1012628).
- ASoC: codecs: lpass-va-macro: Fix LPASS Codec Version for SC7280
(bsc#1012628).
- hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid()
(bsc#1012628).
- accel/amdxdna: Fix iommu domain lifetime race during device
removal (bsc#1012628).
- hwmon: adm1275: Prevent reading uninitialized stack
(bsc#1012628).
- hwmon: (pmbus) Fix passing events to regulator core
(bsc#1012628).
- hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against
divide-by-zero (bsc#1012628).
- eth: fbnic: don't cache shinfo across skb realloc (bsc#1012628).
- ipv6: fib6: fix NULL deref in fib6_walk_continue() on
multi-batch dump (bsc#1012628).
- usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()
(bsc#1012628).
- net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy
(bsc#1012628).
- net: libwx: fix VMDQ mask for 1-queue mode (bsc#1012628).
- net: gianfar: dispose irq mappings on probe failure and device
removal (bsc#1012628).
- net/sched: sch_teql: Introduce slaves_lock to avoid race
condition and UAF (bsc#1012628).
- bridge: stp: Fix a potential use-after-free when deleting a
bridge (bsc#1012628).
- gpio: shared-proxy: always serialize with a sleeping mutex
(bsc#1012628).
- drm/panthor: Always use the IRQ-safe variant when acquiring
the fence lock (bsc#1012628).
- drm/panthor: Keep the reset work disabled until everything is
initialized (bsc#1012628).
- drm/panthor: Fix potential invalid pointer deref in
group_process_tiler_oom() (bsc#1012628).
- drm/panthor: Pass an iomem pointer to GPU register access
helpers (bsc#1012628).
- drm/panthor: Split register definitions by components
(bsc#1012628).
- drm/panthor: Store IRQ register base iomem pointer in
panthor_irq (bsc#1012628).
- drm/panthor: Fix theoretical IOMEM access in suspended state
(bsc#1012628).
- drm/panthor: Don't overrule pending immediate ticks in
sched_resume_tick() (bsc#1012628).
- drm/panthor: Fix panthor_pwr_unplug() (bsc#1012628).
- drm/panthor: Fix a leak when a group is evicted before the
tiler OOM is serviced (bsc#1012628).
- drm/panthor: Interrupt group start/resumption if
group_bind_locked() fails (bsc#1012628).
- tracing/eprobes: Allow use of BTF names to dereference pointers
(bsc#1012628).
- tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg
(bsc#1012628).
- tracing/events: Fix to check the simple_tsk_fn creation
(bsc#1012628).
- tracing: eprobe: read the complete FILTER_PTR_STRING pointer
(bsc#1012628).
- tracing/fprobe: Fix NULL pointer dereference in
fprobe_fgraph_entry() (bsc#1012628).
- tracing/probes: Make the $ prefix mandatory for comm access
(bsc#1012628).
- irqchip/gic-v3-its: Fix OF node reference leak (bsc#1012628).
- irqchip/ts4800: Fix missing chained handler cleanup on remove
(bsc#1012628).
- spi: rzv2h-rspi: Fix DMA transfer error handling for signal
interruption (bsc#1012628).
- sctp: fix addr_wq_timer race in sctp_free_addr_wq()
(bsc#1012628).
- virtio_net: disable cb when NAPI is busy-polled (bsc#1012628).
- cxgb4: Fix decode strings dump for T6 adapters (bsc#1012628).
- selftests: drv-net: tso: don't touch dangerous feature bits
(bsc#1012628).
- net/sched: act_bpf: use rcu_dereference_bh() to read the filter
(bsc#1012628).
- ksmbd: reject undersized DACLs before parsing ACEs
(bsc#1012628).
- ksmbd: fix use-after-free of fp->owner.name in durable handle
owner check (bsc#1012628).
- gpio: timberdale: Return -ENOMEM on dynamic memory allocation
in probe (bsc#1012628).
- pinctrl: meson: restore non-sleeping GPIO access (bsc#1012628).
- xen/pvcalls: bound backend response req_id before indexing rsp[]
(bsc#1012628).
- net/sched: dualpi2: clear stale classification on filter miss
(bsc#1012628).
- net/sched: hhf: clear heavy-hitter state on reset (bsc#1012628).
- fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid
(bsc#1012628).
- afs: Fix error code in afs_extract_vl_addrs() (bsc#1012628).
- afs: Fix double netfs initialisation in afs_root_iget()
(bsc#1012628).
- afs: Remove setting of AS_RELEASE_ALWAYS for symlinks and
mountpoints (bsc#1012628).
- afs: Fix directory inode initialisation order (bsc#1012628).
- afs: use kvfree() to free memory allocated by kvcalloc()
(bsc#1012628).
- afs: Remove erroneous seq |= 1 in volume lookup loop
(bsc#1012628).
- afs: Fix bulk lookup malfunction due to change in dir_emit()
API (bsc#1012628).
- afs: Fix misplaced inc of net->cells_outstanding (bsc#1012628).
- afs: Fix reinitialisation of the inode, in particular
- >lock_work (bsc#1012628).
- afs: Fix callback service message parsers to pass through
- EAGAIN (bsc#1012628).
- afs: Fix missing NULL pointer check in
afs_break_some_callbacks() (bsc#1012628).
- afs: Use scoped_seqlock_read() rather than manually doing
seqlock stuff (bsc#1012628).
- afs: Fix leak of ungot volume (bsc#1012628).
- afs: Fix vllist leak (bsc#1012628).
- afs: Fix lack of locking around modifications of
net->cells_dyn_ino (bsc#1012628).
- afs: Fix premature cell exposure through /afs (bsc#1012628).
- afs: Fix the volume AFS_VOLUME_RM_TREE is set on (bsc#1012628).
- afs: Fix unchecked-length string display in debug statement
(bsc#1012628).
- iomap: release pages on atomic dio size mismatch (bsc#1012628).
- minix: avoid overflow in bitmap block count calculation
(bsc#1012628).
- cachefiles: Fix double unlock in nomem_d_alloc error path
(bsc#1012628).
- ovl: fix comment about locking order (bsc#1012628).
- iomap: guard io_size EOF trim against concurrent truncate
underflow (bsc#1012628).
- netfs: Fix netfs_create_write_req() to handle async cache
object creation (bsc#1012628).
- cachefiles: Fix file burial to take lock when unsetting
S_KERNEL_FILE (bsc#1012628).
- netfs: Fix writethrough to use collection offload (bsc#1012628).
- netfs: Fix writeback error handling (bsc#1012628).
- netfs: Fix folio state after ENOMEM whilst under writeback
iteration (bsc#1012628).
- drm/xe/pt: Fix NULL pointer dereference in
xe_pt_zap_ptes_entry() (bsc#1012628).
- drm/imagination: Fix returned size for DRM_IOCTL_PVR_DEV_QUERY
(bsc#1012628).
- drm/xe/userptr: Hold notifier_lock for write on inject test path
(bsc#1012628).
- drm/xe/userptr: Drop bogus static from finish in
force_invalidate (bsc#1012628).
- drm/xe/hw_engine: Fix double-free of managed BO in error path
(bsc#1012628).
- drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays
(bsc#1012628).
- drm/xe: fix NPD in bo_meminfo() (bsc#1012628).
- drm/xe/pt: prevent invalid cursor access for purged BOs
(bsc#1012628).
- x86/uprobes: Keep shadow stack in sync for emulated CALLs
(bsc#1012628).
- uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline
(bsc#1012628).
- cifs: Fix missing credit release on failure in cifs_issue_read()
(bsc#1012628).
- ata: sata_gemini: unwind clocks on IDE pinctrl errors
(bsc#1012628).
- ata: libata-scsi: limit simulated SCSI command copy to response
length (bsc#1012628).
- netfs: Fix barriering when walking subrequest list
(bsc#1012628).
- ntfs: avoid stale runlist element dereference in MFT writeback
(bsc#1012628).
- HID: picolcd: prevent NULL pointer dereference in
picolcd_send_and_wait() (bsc#1012628).
- HID: core: Fix OOB read in hid_get_report for numbered reports
(bsc#1012628).
- arm64: Avoid eager DVMSync reclaim batches with C1-Pro SME
erratum (bsc#1012628).
- arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range()
(bsc#1012628).
- iio: dac: mcp47feb02: Fix passing uninitialized vref1_uV for
no Vref1 case (bsc#1012628).
- ntfs: avoid stale runlist element dereference in fallocate
(bsc#1012628).
- HID: bpf: Fix hid_bpf_get_data() range check (bsc#1012628).
- selftests/hid: Load only requested struct_ops maps
(bsc#1012628).
- selftests/hid: Cover hid_bpf_get_data() size overflow
(bsc#1012628).
- arm64/sysreg: Fix BWE field encoding in ID_AA64DFR2_EL1
(bsc#1012628).
- net: usb: net1080: validate packet_len before pad-byte access
in rx_fixup (bsc#1012628).
- gue: validate REMCSUM private option length (bsc#1012628).
- netfilter: xt_u32: reject invalid shift counts (bsc#1012628).
- netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
(bsc#1012628).
- netfilter: ip6tables: mark malformed IPv6 extension headers
for hotdrop (bsc#1012628).
- netfilter: nft_set_rbtree: get command skips end element with
open interval (bsc#1012628).
- netfilter: xt_connmark: reject invalid shift parameters
(bsc#1012628).
- platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference
during suspend/resume (bsc#1012628).
- net/mlx5: Lag: refactor representor reload handling
(bsc#1012628).
- net/mlx5: E-Switch, add representor lifecycle lock
(bsc#1012628).
- net/mlx5: Lag, avoid LAG and representor lock cycles
(bsc#1012628).
- net/mlx5: LAG, factor out shared FDB code into dedicated file
(bsc#1012628).
- net/mlx5: LAG, replace peer count check with direct peer lookup
(bsc#1012628).
- net/mlx5: LAG, prepare for SD device integration (bsc#1012628).
- net/mlx5: LAG, extend shared FDB API with group_id filter
(bsc#1012628).
- net/mlx5: LAG, Fix off-by-one in single-FDB error rollback
(bsc#1012628).
- net/mlx5: LAG, MPESW, Fix missing complete() on devcom error
(bsc#1012628).
- net/mlx5e: TC, skip peer flow cleanup when LAG seq is
unavailable (bsc#1012628).
- drm/bridge: analogix_dp: Fix PE/VS value shift mismatch during
link training (bsc#1012628).
- net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation
(bsc#1012628).
- net/mlx5e: Fix HV VHCA stats agent registration race
(bsc#1012628).
- net/mlx5e: Fix publication race for priv->channel_stats[]
(bsc#1012628).
- net: microchip: vcap: fix races on the shared Super VCAP block
(bsc#1012628).
- qede: fix off-by-one in BD ring consumption on build_skb failure
(bsc#1012628).
- net: qualcomm: rmnet: validate MAP frame length before ingress
parsing (bsc#1012628).
- net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload
(bsc#1012628).
- net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket
(bsc#1012628).
- amt: fix size calculation in amt_get_size() (bsc#1012628).
- ksmbd: fix multichannel binding and enforce channel limit
(bsc#1012628).
- smb: client: preserve leading slash for POSIX absolute symlink
targets (bsc#1012628).
- gpio: shared: make the voting mechanism adaptable (bsc#1012628).
- drm/i915/ltphy: Fix SSC Enablement bit in PORT_CLOCK_CTL
(bsc#1012628).
- Bluetooth: 6lowpan: avoid untracked enable work (bsc#1012628).
- Bluetooth: 6lowpan: hold L2CAP conn across debugfs control
(bsc#1012628).
- Bluetooth: MGMT: Fix adv monitor add failure cleanup
(bsc#1012628).
- Bluetooth: sco: Fix a race condition in sco_sock_timeout()
(bsc#1012628).
- Bluetooth: btintel_pcie: Support Product level reset
(bsc#1012628).
- Bluetooth: btintel_pcie: Add support for smart trigger dump
(bsc#1012628).
- Bluetooth: btintel_pcie: Separate coredump work from RX work
(bsc#1012628).
- Bluetooth: btintel_pcie: Refactor FLR to use device_reprobe()
(bsc#1012628).
- Bluetooth: ISO: fix malformed ISO_END/CONT handling
(bsc#1012628).
- Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length
(bsc#1012628).
- Bluetooth: bpa10x: avoid OOB read of revision string in
bpa10x_setup() (bsc#1012628).
- Bluetooth: L2CAP: fix tx ident leak for commands without a
response (bsc#1012628).
- ring-buffer: Fix event length with forced 8-byte alignment
(bsc#1012628).
- accel/amdxdna: Prevent PM resume deadlock in
hwctx_sync_debug_bo() (bsc#1012628).
- accel/amdxdna: Use unsigned long for nr_pages in
amdxdna_hmm_register() (bsc#1012628).
- accel/amdxdna: Fix VMA access race (bsc#1012628).
- net/tls: Consume empty data records in tls_sw_read_sock()
(bsc#1012628).
- net: rnpgbe: fix mailbox endianness and remove pointer casts
(bsc#1012628).
- net/liquidio: drop cached VF pci_dev LUT (bsc#1012628).
- net: usb: lan78xx: disable VLAN filter in promiscuous mode
(bsc#1012628).
- gpio: dwapb: Defer clock gating until noirq (bsc#1012628).
- drm: Guard DRM_CLIENT_CAP_PLANE_COLOR_PIPELINE (bsc#1012628).
- tracing: Make tracepoint_printk static as not exported
(bsc#1012628).
- accel/amdxdna: Fix potential amdxdna_umap lifetime race
(bsc#1012628).
- drm/v3d: Reject invalid indirect BO handle in indirect CSD setup
(bsc#1012628).
- selftests: gpio: add gpio-cdev-uaf to .gitignore (bsc#1012628).
- net: mdio: select REGMAP_MMIO instead of depending on it
(bsc#1012628).
- net/sched: cake: reject overhead values that underflow length
(bsc#1012628).
- octeontx2-pf: check DMAC extraction support before filtering
(bsc#1012628).
- perf/x86/amd/core: Avoid enabling BRS from the SVM reload path
(bsc#1012628).
- gpio: mvebu: free generic chips on unbind (bsc#1012628).
- ipv4: igmp: Fix potential UAF in igmp_gq_start_timer()
(bsc#1012628).
- ipv6: mcast: Fix potential UAF in MLD delayed work
(bsc#1012628).
- ipv4: igmp: annotate data-races around im->users (bsc#1012628).
- ipv4: igmp: annotate data-races around timer-related fields
(bsc#1012628).
- ipv4: igmp: Fix potential memory leaks in igmp_mod_timer()
and igmp_stop_timer() (bsc#1012628).
- netfilter: nft_lookup: fix catchall element handling with
inverted lookups (bsc#1012628).
- ipvs: pass parsed transport offset to state handlers
(bsc#1012628).
- ipvs: use parsed transport offset in TCP state lookup
(bsc#1012628).
- ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1012628).
- ipvs: ensure inner headers in ICMP errors are in headroom
(bsc#1012628).
- s390/zcrypt: Remove the empty file (bsc#1012628).
- cifs: validate DFS referral string offsets (bsc#1012628).
- SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED
(bsc#1012628).
- SUNRPC: pin upper rpc_clnt across the TLS connect_worker
(bsc#1012628).
- dm era: fix NULL pointer dereference in metadata_open()
(bsc#1012628).
- smb: client: fix busy dentry warning on unmount after DIO
(bsc#1012628).
- regulator: core: regulator_lock_two() should test for EDEADLK
not EDEADLOCK (bsc#1012628).
- drm/fb-helper: Only consider active CRTCs for vblank sync
(bsc#1012628).
- selftests/net: fix EVP_MD_CTX leak in tcp_mmap (bsc#1012628).
- net/mlx5: Fix L3 tunnel entropy refcount leak (bsc#1012628).
- ethtool: rss: Fix hfunc and input_xfrm parsing on big endian
(bsc#1012628).
- octeontx2-af: fix VF bringup affecting PF promiscuous state
(bsc#1012628).
- drm/xe: remove duplicate <kunit/test-bug.h> include
(bsc#1012628).
- drm/xe: free madvise VMA array on L2 flush failure
(bsc#1012628).
- smb: client: fix overflow in passthrough ioctl bounds check
(bsc#1012628).
- drm/imagination: make pvr_fw_trace_init_mask_ops static
(bsc#1012628).
- tracing/remotes: Fix leak in trace_remote_alloc_buffer()
error path (bsc#1012628).
- tracing/remotes: Fix struct_len in trace_remote_alloc_buffer()
(bsc#1012628).
- ring-buffer: Allow sparse CPU masks in ring_buffer_desc()
(bsc#1012628).
- idpf: add padding to PTP virtchnl structures (bsc#1012628).
- mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()
(bsc#1012628).
- mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()
(bsc#1012628).
- vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter
(bsc#1012628).
- VDUSE: avoid leaking information to userspace (bsc#1012628).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
(bsc#1012628).
- ASoC: SOF: ipc4-control: Validate notification payload size
(bsc#1012628).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
size calc (bsc#1012628).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
(bsc#1012628).
- ASoC: SOF: topology: validate vendor array size before parsing
(bsc#1012628).
- tipc: restrict socket queue dumps in enqueue tracepoints
(bsc#1012628).
- net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post()
(bsc#1012628).
- net: atm: reject out-of-range traffic classes in QoS validation
(bsc#1012628).
- octeontx2-pf: clear stale mailbox IRQ state before request_irq()
(bsc#1012628).
- octeontx2-vf: clear stale mailbox IRQ state before request_irq()
(bsc#1012628).
- net: ife: require ETH_HLEN to be pullable in ife_decode()
(bsc#1012628).
- arm64: fpsimd: Fix type mismatch in sve_{save,load}_state()
(bsc#1012628).
- arm64: dts: s32g3: Fix SWT8 watchdog address (bsc#1012628).
- arm64: dts: renesas: ironhide: Describe inline ECC carveouts
(bsc#1012628).
- ARM: dts: imx6ul-var-som: fix warning for non-existent dc-supply
property (bsc#1012628).
- arm64: dts: qcom: sdm630: describe adsp_mem region properly
(bsc#1012628).
- arm64: dts: rockchip: fix Ethernet PHY not found on PX30
Ringneck (bsc#1012628).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Fix ADC sampling times
(bsc#1012628).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Move divergent mecio1
ADC channels to board files (bsc#1012628).
- arm64: dts: ti: k3-am62a7-sk: Add bootph-all tag to vqmmc
(bsc#1012628).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Enable internal ADC
reference (bsc#1012628).
- arm64: dts: imx8ulp-evk: Correct Type-C int GPIO flags
(bsc#1012628).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Fix GPIO names typo
(bsc#1012628).
- arm64: dts: qcom: hamoa: Fix OPP tables for all DisplayPort
controllers (bsc#1012628).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Move gpio-line-names
to board files (bsc#1012628).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Fix expander gpio line
typo (bsc#1012628).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Move expander
gpio-line-names to board files (bsc#1012628).
- LoongArch: KVM: Validate irqchip index in irqfd routing
(bsc#1012628).
- LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt()
(bsc#1012628).
- LoongArch: KVM: Check the return values for put_user()
(bsc#1012628).
- LoongArch: KVM: Fix FPU register width with user access API
(bsc#1012628).
- LoongArch: KVM: Return full old CSR value from
kvm_emu_xchg_csr() (bsc#1012628).
- KVM: s390: vsie: Fix allocation of struct vsie_rmap
(bsc#1012628).
- KVM: s390: vsie: Add missing radix_tree_preload() in
_gaccess_shadow_fault() (bsc#1012628).
- KVM: s390: Silence potential warnings in
_gmap_crstep_xchg_atomic() (bsc#1012628).
- KVM: s390: vsie: Use mmu cache to allocate rmap (bsc#1012628).
- KVM: s390: Initialize KVM_S390_GET_CMMA_BITS memory
(bsc#1012628).
- KVM: s390: Fix unlikely race in try_get_locked_pte()
(bsc#1012628).
- powerpc/pseries/Kconfig: Enable CONFIG_VPA_PMU to be used with
KVM (bsc#1012628).
- KVM: s390: pci: Fix GISC refcount leak on AIF enable failure
(bsc#1012628).
- KVM: arm64: vgic: Check the interrupt is still ours before
migrating it (bsc#1012628).
- KVM: arm64: vgic: Handle race between interrupt affinity change
and LPI disabling (bsc#1012628).
- KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into
"normal" checks (bsc#1012628).
- KVM: s390: pci: Fix handling of AIF enable without AISB
(bsc#1012628).
- KVM: SEV: Do not allow intra-host migration/mirroring of SNP
VMs (bsc#1012628).
- KVM: TDX: Reject concurrent change to CPUID entry count
(bsc#1012628).
- KVM: x86: Ignore pending PV EOI if the vCPU has since disabled
PV EOIs (bsc#1012628).
- KVM: x86: Nullify irqfd->producer if updating IRTE for bypass
fails (bsc#1012628).
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to
invalid guest state (bsc#1012628).
- KVM: Move kvm_io_bus_get_dev() locking responsibilities to
callers (bsc#1012628).
- KVM: arm64: account pKVM reclaim against the VM mm
(bsc#1012628).
- KVM: arm64: Ensure level is always initialized when relaxing
perms (bsc#1012628).
- KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2
(bsc#1012628).
- KVM: arm64: nv: Write ESR_EL2 for injected nested SError
exceptions (bsc#1012628).
- KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops()
(bsc#1012628).
- KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR
(bsc#1012628).
- KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't
resolve PFN (bsc#1012628).
- KVM: arm64: nv: Re-translate VNCR before injecting abort
(bsc#1012628).
- KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory
(bsc#1012628).
- fbdev: metronomefb: fix potential memory leak in
metronomefb_probe() (bsc#1012628).
- fbdev: broadsheetfb: fix potential memory leak in
broadsheetfb_probe() (bsc#1012628).
- fbdev: hecubafb: fix potential memory leak in hecubafb_probe()
(bsc#1012628).
- fbdev: sm712: Fix operator precedence in big_swap macro
(bsc#1012628).
- fbdev: efifb: fix memory leak in efifb_probe() (bsc#1012628).
- fbdev: radeon: fix potential memory leak in
radeonfb_pci_register() (bsc#1012628).
- fbdev: i740fb: fix potential memory leak in i740fb_probe()
(bsc#1012628).
- fbdev: s3fb: fix potential memory leak in s3_pci_probe()
(bsc#1012628).
- fbdev: uvesafb: fix potential memory leak in uvesafb_probe()
(bsc#1012628).
- fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe()
(bsc#1012628).
- fbdev: carminefb: fix potential memory leak in
alloc_carmine_fb() (bsc#1012628).
- fbdev: vesafb: fix memory leak in vesafb_probe() (bsc#1012628).
- fbdev: nvidia: fix potential memory leak in nvidiafb_probe()
(bsc#1012628).
- fbdev: tridentfb: fix potential memory leak in
trident_pci_probe() (bsc#1012628).
- ASoC: SOF: topology: fix memory leak in snd_sof_load_topology
(bsc#1012628).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
(bsc#1012628).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
(bsc#1012628).
- ASoC: mediatek: mt8192: Check runtime resume during probe
(bsc#1012628).
- ASoC: mediatek: mt8192: Release reserved memory on cleanup
(bsc#1012628).
- ASoC: mediatek: mt8183: Check runtime resume during probe
(bsc#1012628).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
(bsc#1012628).
- ASoC: qcom: q6apm: fix NULL pointer dereference in
graph_callback (bsc#1012628).
- netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
(bsc#1012628).
- netfilter: nfnl_cthelper: apply per-class values when updating
policies (bsc#1012628).
- netfilter: xt_cluster: reject template conntracks in hash match
(bsc#1012628).
- netfilter: nf_queue: pin bridge device while NFQUEUE holds
fake dst (bsc#1012628).
- netfilter: nft_fib: reject fib expression on the netdev egress
hook (bsc#1012628).
- netfilter: nf_conntrack_sip: validate skb_dst() before accessing
it (bsc#1012628).
- netfilter: nft_set_pipapo: don't leak bad clone into future
transaction (bsc#1012628).
- netfilter: nf_nat_sip: reload possible stale data pointer
(bsc#1012628).
- netfilter: nf_conntrack_reasm: guard mac_header adjustment
after IPv6 defrag (bsc#1012628).
- netfilter: flowtable: use dst in this direction when pushing
IPIP header (bsc#1012628).
- netfilter: flowtable: support IPIP tunnel with direct xmit
(bsc#1012628).
- netfilter: nf_conncount: fix zone comparison in tuple dedup
(bsc#1012628).
- netfilter: xt_physdev: masks are not c-strings (bsc#1012628).
- netfilter: ecache: fix inverted time_after() check
(bsc#1012628).
- netfilter: xt_nat: reject unsupported target families
(bsc#1012628).
- netfilter: bridge: fix stale prevhdr pointer in
br_ip6_fragment() (bsc#1012628).
- netfilter: flowtable: use correct direction to set up tunnel
route (bsc#1012628).
- gpu: host1x: Fix device reference leak in
host1x_device_parse_dt() error path (bsc#1012628).
- gpu/buddy: bail out of try_harder when alignment cannot be
honoured (bsc#1012628).
- soc: ti: k3-ringacc: Fix access mode for
k3_ringacc_ring_pop_tail_io/proxy (bsc#1012628).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
(bsc#1012628).
- selinux: check connect-related permissions on TCP Fast Open
(bsc#1012628).
- selinux: avoid sk_socket dereference in
selinux_sctp_bind_connect() (bsc#1012628).
- selinux: fix incorrect execmem checks on overlayfs
(bsc#1012628).
- leds: uleds: Fix potential buffer overread (bsc#1012628).
- mfd: sm501: Fix reference leak on failed device registration
(bsc#1012628).
- tools/power/x86/intel-speed-select: Harden daemon pidfile open
(bsc#1012628).
- x86/video: Only fall back to vga_default_device() without
screen info (bsc#1012628).
- x86/virt/sev: Revert "Drop WBINVD before setting
MSR_AMD64_SYSCFG_SNP_EN" (bsc#1012628).
- x86/boot: Validate console=uart8250 baud rate to fix early
boot hang (bsc#1012628).
- x86/boot: Reject too long acpi_rsdp= values (bsc#1012628).
- perf/x86/amd/brs: Fix kernel address leakage (bsc#1012628).
- perf/x86/amd/lbr: Fix kernel address leakage (bsc#1012628).
- cpufreq: schedutil: Fix uncleared need_freq_update on the
.adjust_perf() path (bsc#1012628).
- cpufreq: intel_pstate: Set non-turbo capacity to
HWP_GUARANTEED_PERF() (bsc#1012628).
- s390/perf_cpum_cf: Add missing array_index_nospec() to
__hw_perf_event_init() (bsc#1012628).
- batman-adv: gw: acquire ethernet header only after skb realloc
(bsc#1012628).
- batman-adv: retrieve ethhdr after potential skb realloc on RX
(bsc#1012628).
- batman-adv: access unicast_ttvn skb->data only after skb realloc
(bsc#1012628).
- batman-adv: dat: acquire ARP hw source only after skb realloc
(bsc#1012628).
- batman-adv: bla: reacquire gw address after skb realloc
(bsc#1012628).
- batman-adv: dat: ensure accessible eth_hdr proto field
(bsc#1012628).
- batman-adv: ensure minimal ethernet header on TX (bsc#1012628).
- batman-adv: dat: fix tie-break for candidate selection
(bsc#1012628).
- batman-adv: tt: avoid request storms during pending request
(bsc#1012628).
- batman-adv: fix VLAN priority offset (bsc#1012628).
- batman-adv: frag: free unfragmentable packet (bsc#1012628).
- batman-adv: clean untagged VLAN on netdev registration failure
(bsc#1012628).
- batman-adv: frag: fix primary_if leak on failed linearization
(bsc#1012628).
- batman-adv: mcast: avoid OOB read of num_dests header
(bsc#1012628).
- batman-adv: tt: prevent TVLV OOB check overflow (bsc#1012628).
- cifs: invalidate cfid on unlink/rename/rmdir (bsc#1012628).
- mfd: tps6586x: Fix OF node refcount (bsc#1012628).
- backlight: ktd2801: Enable BL_CORE_SUSPENDRESUME (bsc#1012628).
- cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size
(bsc#1012628).
- jbd2: fix integer underflow in
jbd2_journal_initialize_fast_commit() (bsc#1012628).
- nvdimm/btt: Free arenas on btt_init() error paths (bsc#1012628).
- nvdimm/btt: Free arena sub-allocations on discover_arenas()
error path (bsc#1012628).
- pinctrl: renesas: rzg2l: Use -ENOTSUPP instead of -EOPNOTSUPP
(bsc#1012628).
- sunrpc: pin svc_xprt across the asynchronous TLS handshake
callback (bsc#1012628).
- sunrpc: wait for in-flight TLS handshake callback when cancel
loses race (bsc#1012628).
- sunrpc: harden rq_procinfo lifecycle to prevent double-free
(bsc#1012628).
- lockd: Plug nlm_file leak when nlm_do_fopen() fails
(bsc#1012628).
- lockd: Plug nlm_file refcount leak on cached nlm_do_fopen()
failure (bsc#1012628).
- SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing
(bsc#1012628).
- remoteproc: qcom: Fix leak when custom dump_segments addition
fails (bsc#1012628).
- remoteproc: xlnx: Check remote core state (bsc#1012628).
- mm/sparse-vmemmap: fix vmemmap accounting underflow
(bsc#1012628).
- MIPS: ip22-gio: fix gio device memory leak (bsc#1012628).
- MIPS: ip22-gio: fix kfree() of static object (bsc#1012628).
- MIPS: ip22-gio: fix device reference leak in probe
(bsc#1012628).
- MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()
(bsc#1012628).
- mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound
pages (bsc#1012628).
- power: supply: cpcap-battery: Fix missing nvmem_device_put()
causing reference leak (bsc#1012628).
- power: supply: max17042: fix OF node reference imbalance
(bsc#1012628).
- mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch
(bsc#1012628).
- mm/memory_hotplug: fix incorrect altmap passing in error path
(bsc#1012628).
- mm/damon/core: make charge_addr_from aware of end-address
exclusivity (bsc#1012628).
- ntfs: grow index root value before reparent header update
(bsc#1012628).
- ntfs: fix incorrect size of symbolic link (bsc#1012628).
- ntfs: fix off-by-one in mapping pairs decoding bounds checks
(bsc#1012628).
- ntfs: Add WQ_PERCPU to alloc_workqueue users (bsc#1012628).
- ntfs: validate attribute values on lookup (bsc#1012628).
- ntfs: add bounds check before accessing EA entries
(bsc#1012628).
- ntfs: not change 0-byte $DATA attribute to non-resident
(bsc#1012628).
- ntfs: validate index block header more strictly (bsc#1012628).
- ntfs: free volume-wide resources on fill_super failure
(bsc#1012628).
- ntfs: update index root allocated size before shrink
(bsc#1012628).
- ntfs: centalize $INDEX_ROOT header validation (bsc#1012628).
- ntfs: skip extent mft records in writeback to prevent deadlock
(bsc#1012628).
- ntfs: reinit search context before volume information lookup
(bsc#1012628).
- ntfs: only alias volume $UpCase to default on exact match
(bsc#1012628).
- ntfs: avoid heap allocation for free-cluster readahead state
(bsc#1012628).
- ntfs: validate index entries on reading (bsc#1012628).
- ntfs: detect mapping-pairs LCN accumulator overflow
(bsc#1012628).
- ntfs: do not replace volume name after lookup errors
(bsc#1012628).
- ntfs: validate resident volume name values on lookup
(bsc#1012628).
- ntfs: validate resident index root values on lookup
(bsc#1012628).
- ntfs: reject non-resident records for resident-only attributes
(bsc#1012628).
- fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory
rename (bsc#1012628).
- fs/ntfs3: bound DeleteIndexEntryAllocation memmove length
(bsc#1012628).
- fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass
(bsc#1012628).
- fs/ntfs3: bound attr_off in UpdateResidentValue against data_off
(bsc#1012628).
- fs/ntfs3: validate lcns_follow in log_replay conversion
(bsc#1012628).
- fs/ntfs3: add depth limit to indx_find_buffer to prevent stack
overflow (bsc#1012628).
- fs/ntfs3: bound NTFS_DE view.data_off in
UpdateRecordData{Root,Allocation} (bsc#1012628).
- ntfs3: cap RESTART_TABLE free-chain walker at rt->used
(bsc#1012628).
- ntfs3: bound to_move in indx_insert_into_root before
hdr_insert_head (bsc#1012628).
- ntfs3: validate split-point offset in indx_insert_into_buffer
(bsc#1012628).
- ntfs3: fix out-of-bounds read in decompress_lznt (bsc#1012628).
- ntfs: fix mrec_lock ABBA deadlock in rename (bsc#1012628).
- ntfs: fail attrlist updates when the superblock is inactive
(bsc#1012628).
- ntfs: sanitize MFT references returned from
ntfs_lookup_inode_by_name() (bsc#1012628).
- ntfs: avoid self-deadlock during inode eviction (bsc#1012628).
- ntfs: make system files immutable to prevent corruption
(bsc#1012628).
- ntfs: fix WARN_ON for resident attribute in
ntfs_map_runlist_nolock() (bsc#1012628).
- ntfs: fix hole runlist memory leak in insert range error path
(bsc#1012628).
- landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path
(bsc#1012628).
- power: supply: charger-manager: fix refcount leak in
is_full_charged() (bsc#1012628).
- selftests/landlock: Test SCOPE_SIGNAL on the SIGIO/fowner pgid
path (bsc#1012628).
- mips: sched: Fix CPUMASK_OFFSTACK memory corruption
(bsc#1012628).
- mm/huge_memory: preserve pmd_swp_uffd_wp on device-private
PMD downgrade (bsc#1012628).
- riscv: cacheinfo: Fix node reference leak in
populate_cache_leaves (bsc#1012628).
- mm/damon/core: always put unsuccessfully committed target pids
(bsc#1012628).
- mm/damon/sysfs-schemes: fix dir put orders in
access_pattern_add_dirs() (bsc#1012628).
- mm/damon/sysfs-schemes: put stats for scheme_add_dirs()
internal error (bsc#1012628).
- fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-update race
(bsc#1012628).
- fs/proc/task_mmu: fix hugetlb self-deadlock in
pagemap_scan_pte_hole() (bsc#1012628).
- fs/proc/task_mmu: use huge_page_size() in
pagemap_scan_hugetlb_entry() (bsc#1012628).
- fs/proc/task_mmu: do not warn on seeing non-migration pmd entry
(bsc#1012628).
- proc: only bump parent nlink when registering directories
(bsc#1012628).
- fs/proc: fix KPF_KSM reported for all anonymous pages
(bsc#1012628).
- powerpc/dt_cpu_ftrs: Set CPU_FTR_P11_PVR for Power11 and later
processors (bsc#1012628).
- mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE
(bsc#1012628).
- kcov: use WRITE_ONCE() for selftest mode stores (bsc#1012628).
- mtd: slram: remove failed entries from the device list
(bsc#1012628).
- 9p: skip nlink update in cacheless mode to fix WARN_ON
(bsc#1012628).
- power: supply: bq257xx: Fix VSYSMIN clamping logic
(bsc#1012628).
- scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished()
(bsc#1012628).
- kho: make sure scratch size is always aligned by
CMA_MIN_ALIGNMENT_BYTES (bsc#1012628).
- scsi: sas: Skip opt_sectors when DMA reports no real
optimization hint (bsc#1012628).
- openrisc: Add full instruction cache invalidate functions
(bsc#1012628).
- mtd: maps: vmu-flash: fix fault in unaligned fixup
(bsc#1012628).
- ocfs2: use kzalloc for quota recovery bitmap allocation
(bsc#1012628).
- mtd: rawnand: pl353: fix probe resource allocation
(bsc#1012628).
- net/9p: fix infinite loop in p9_client_rpc on fatal signal
(bsc#1012628).
- mtd: rawnand: fix condition in 'nand_select_target()'
(bsc#1012628).
- ocfs2: avoid moving extents to occupied clusters (bsc#1012628).
- ocfs2: fix NULL h_transaction deref in
ocfs2_assure_trans_credits (bsc#1012628).
- ocfs2: fix UBSAN array-index-out-of-bounds in
ocfs2_sum_rightmost_rec (bsc#1012628).
- ocfs2: add journal NULL check in ocfs2_checkpoint_inode()
(bsc#1012628).
- ocfs2: reject dinodes with non-canonical i_mode type
(bsc#1012628).
- ocfs2: reject dinodes whose i_rdev disagrees with the file type
(bsc#1012628).
- ocfs2: reject non-inline dinodes with i_size and zero i_clusters
(bsc#1012628).
- fpga: dfl: add bounds check in dfh_get_param_size()
(bsc#1012628).
- bus: mhi: host: pci_generic: Fix the physical function check
(bsc#1012628).
- bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path
(bsc#1012628).
- net: thunderbolt: Fix frags[] overflow by bounding frame_count
(bsc#1012628).
- fpga: microchip-spi: fix zero header_size OOB read in
mpf_ops_parse_header() (bsc#1012628).
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (bsc#1012628).
- s390/pkey: Check length in pkey_pckmo handler implementation
(bsc#1012628).
- mtd: spi-nor: swp: Improve locking user experience
(bsc#1012628).
- mtd: spi-nor: spansion: use die erase for multi-die devices only
(bsc#1012628).
- mtd: rawnand: Pause continuous reads at block boundaries
(bsc#1012628).
- openrisc: Fix jump_label smp syncing (bsc#1012628).
- mtd: maps: vmu-flash: fix NULL pointer dereference in
initialization (bsc#1012628).
- taskstats: retain dead thread stats in TGID queries
(bsc#1012628).
- irqchip/crossbar: Use correct index in crossbar_domain_free()
(bsc#1012628).
- tpm: restore timeout for key creation commands (bsc#1012628).
- tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()
(bsc#1012628).
- tpm: tpm2-sessions: wait for async KPP completion in
tpm_buf_append_salt (bsc#1012628).
- sunrpc: fix uninitialized xprt_create_args structure
(bsc#1012628).
- dmaengine: tegra: Fix burst size calculation (bsc#1012628).
- dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and
ABORT_INT_MASK (bsc#1012628).
- dmaengine: sh: rz-dmac: Fix incorrect NULL check for
list_first_entry() (bsc#1012628).
- dmaengine: dw-edma-pcie: Reject devices without driver data
(bsc#1012628).
- dmaengine: sh: rz-dmac: Move interrupt request after everything
is set up (bsc#1012628).
- platform/x86/intel/tpmi: use cleanup helpers in mem_write()
(bsc#1012628).
- platform/x86: dell-laptop: fix missing cleanups in init error
path (bsc#1012628).
- platform/x86: hp-wmi: Add support for Omen 16-ap0xxx (8D26)
(bsc#1012628).
- platform/x86: hp-wmi: Add support for Omen 16-ap0xxx (8E35)
(bsc#1012628).
- platform/x86: ISST: Restore SST-PP control to all domains
(bsc#1012628).
- platform/x86/amd/pmc: Check for intermediate wakeup in function
(bsc#1012628).
- platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops
(bsc#1012628).
- platform/x86/amd/pmc: Add delay_suspend module parameter
(bsc#1012628).
- platform/x86/amd/pmc: Don't log during intermediate wakeups
(bsc#1012628).
- pkey: Move keytype check from pkey api to handler (bsc#1012628).
- smb: client: use kvzalloc() for megabyte buffer in simple
fallocate (bsc#1012628).
- ksmbd: fix integer overflow in set_file_allocation_info()
(bsc#1012628).
- hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig
(bsc#1012628).
- hwmon: (max6697) add missing 'select REGMAP_I2C' to Kconfig
(bsc#1012628).
- i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)
(bsc#1012628).
- i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ)
(bsc#1012628).
- i2c: mediatek: fix WRRD for SoCs without auto_restart option
(bsc#1012628).
- i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()
(bsc#1012628).
- i2c: spacemit: fix spurious IRQ handling returning IRQ_HANDLED
(bsc#1012628).
- ice: fix ice_init_link() error return preventing probe
(bsc#1012628).
- tcp: defer md5sig_info kfree past RCU grace period in
tcp_connect (bsc#1012628).
- tcp: Decrement tcp_md5_needed static branch (bsc#1012628).
- ufs: core: tracing: Do not dereference pointers in TP_printk()
(bsc#1012628).
- xen/gntdev: fix error handling in ioctl (bsc#1012628).
- xfrm: nat_keepalive: avoid double free on send error
(bsc#1012628).
- xfrm: use compat translator only for u64 alignment mismatch
(bsc#1012628).
- xfrm: xfrm_interface: require CAP_NET_ADMIN in the device
netns for changelink (bsc#1012628).
- tpm: fix event_size output in tpm1_binary_bios_measurements_show
(bsc#1012628).
- tpm: Make the TPM character devices non-seekable (bsc#1012628).
- time: Fix off-by-one in compat settimeofday() usec validation
(bsc#1012628).
- spi: imx: reconfigure for PIO when DMA cannot be started
(bsc#1012628).
- spi: uniphier: Fix completion initialization order before
devm_request_irq() (bsc#1012628).
- sctp: validate STALE_COOKIE cause length before reading
staleness (bsc#1012628).
- NFS: Charge unstable writes by request size, not folio size
(bsc#1012628).
- nvme-apple: Prevent shared tags across queues on Apple A11
(bsc#1012628).
- nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1012628).
- nvmet-rdma: handle inline data with a nonzero offset
(bsc#1012628).
- nvmet: fix refcount leak in nvmet_sq_create() (bsc#1012628).
- netdev-genl: report NAPI thread PID in the caller's pid
namespace (bsc#1012628).
- ovl: use linked upper dentry in copy-up tmpfile (bsc#1012628).
- can: esd_usb: kill anchored URBs before freeing netdevs
(bsc#1012628).
- can: isotp: use unconditional synchronize_rcu() in
isotp_release() (bsc#1012628).
- can: isotp: fix use-after-free race with concurrent
NETDEV_UNREGISTER (bsc#1012628).
- can: isotp: serialize TX state transitions under so->rx_lock
(bsc#1012628).
- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer
UAF (bsc#1012628).
- can: bcm: fix lockless bound/ifindex race and silent RX_SETUP
failure (bsc#1012628).
- can: bcm: add locking when updating filter and timer values
(bsc#1012628).
- can: bcm: add missing rcu list annotations and operations
(bsc#1012628).
- can: bcm: extend bcm_tx_lock usage for data and timer updates
(bsc#1012628).
- can: bcm: fix CAN frame rx/tx statistics (bsc#1012628).
- can: bcm: fix data race on rx_stamp/rx_ifindex in
bcm_rx_handler() (bsc#1012628).
- can: bcm: fix stale rx/tx ops after device removal
(bsc#1012628).
- can: bcm: track a single source interface for ANYDEV
timeout/throttle ops (bsc#1012628).
- can: bcm: validate frame length in bcm_rx_setup() for RTR
replies (bsc#1012628).
- can: bcm: add missing device refcount for CAN filter removal
(bsc#1012628).
- io_uring/bpf-ops: reject re-registration of an already-bound
ops (bsc#1012628).
- bpf: Reset register bounds before narrowing retval range in
check_mem_access() (bsc#1012628).
- bpf,fork: wipe ->bpf_storage before bailouts that access it
(bsc#1012628).
- bpf: Add missing access_ok call to copy_user_syms (bsc#1012628).
- selftests/bpf: Cover negative buffer pointer offsets
(bsc#1012628).
- block: remove redundant GD_NEED_PART_SCAN in add_disk_final()
(bsc#1012628).
- block: fix race in blk_time_get_ns() returning 0 (bsc#1012628).
- block: fix IORING_URING_CMD_REISSUE flags check in
blkdev_uring_cmd (bsc#1012628).
- net: sparx5: unregister blocking notifier on init failure
(bsc#1012628).
- dm thin metadata: fix superblock refcount leak on snapshot
shadow failure (bsc#1012628).
- dm thin metadata: fix metadata snapshot consistency on commit
failure (bsc#1012628).
- dm era: fix out-of-bounds memory access for non-zero start
sector (bsc#1012628).
- dm-bufio: fix wrong count calculation in dm_bufio_issue_discard
(bsc#1012628).
- dm-ioctl: fix a possible overflow in list_version_get_info
(bsc#1012628).
- dm-log: fix a bitset_size overflow on 32bit machines
(bsc#1012628).
- dm-pcache: reject option groups without values (bsc#1012628).
- dm-stats: fix dm_jiffies_to_msec64 (bsc#1012628).
- dm-stats: fix merge accounting (bsc#1012628).
- dm: avoid leaking the caller's thread keyring via the table
device file (bsc#1012628).
- dm_early_create: fix freeing used table on dm_resume failure
(bsc#1012628).
- dm-integrity: fix leaking uninitialized kernel memory
(bsc#1012628).
- dm-integrity: fix a bug if the bio is out of limits
(bsc#1012628).
- dm-integrity: don't increment hash_offset twice (bsc#1012628).
- dm-verity: fix buffer overflow in FEC calculation (bsc#1012628).
- dm-verity: avoid double increment of &use_bh_wq_enabled
(bsc#1012628).
- dm-verity: fix a possible NULL pointer dereference
(bsc#1012628).
- dm-verity: increase sprintf buffer size (bsc#1012628).
- dm-verity: make error counter atomic (bsc#1012628).
- dma-fence: Make dma_fence_dedup_array() robust against 0-count
input (bsc#1012628).
- dma-fence: use correct callback in dma_fence_timeline_name()
(bsc#1012628).
- dma-buf: dma-fence: Fix potential NULL pointer dereference
(bsc#1012628).
- accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap()
(bsc#1012628).
- accel/amdxdna: reject command submission on devices without
a submit op (bsc#1012628).
- accel/amdxdna: reject user command submission without a command
BO (bsc#1012628).
- accel/amdxdna: Use caller client for debug BO sync
(bsc#1012628).
- accel/ivpu: Reject firmware log with size smaller than header
(bsc#1012628).
- scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
(bsc#1012628).
- scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()
(bsc#1012628).
- scsi: sg: Report request-table problems when any status is set
(bsc#1012628).
- scsi: xen: scsiback: Free the command tag on the TMR
submit-failure path (bsc#1012628).
- scsi: xen: scsiback: Free unsubmitted command instead of
double-putting it (bsc#1012628).
- scsi: target: Bound PR-OUT TransportID parsing to the received
buffer (bsc#1012628).
- scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER
AND MOVE (bsc#1012628).
- scsi: elx: efct: Fix refcount leak in efct_hw_io_abort()
(bsc#1012628).
- scsi: elx: efct: Fix I/O leak on unsupported additional CDB
(bsc#1012628).
- fs/resctrl: Fix use-after-free during unmount (bsc#1012628).
- Input: ims-pcu - fix use-after-free and double-free in
disconnect (bsc#1012628).
- Input: ims-pcu - only expose sysfs attributes on control
interface (bsc#1012628).
- Input: ims-pcu - release data interface on disconnect
(bsc#1012628).
- Input: ims-pcu - validate control endpoint type (bsc#1012628).
- Input: ims-pcu - add response length checks (bsc#1012628).
- Input: ims-pcu - fix DMA mapping violation in line setup
(bsc#1012628).
- Input: ims-pcu - fix firmware leak in async update
(bsc#1012628).
- Input: ims-pcu - fix logic error in packet reset (bsc#1012628).
- Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq()
debug logging (bsc#1012628).
- Input: ims-pcu - fix potential infinite loop in CDC union
descriptor parsing (bsc#1012628).
- Input: ims-pcu - fix race condition in reset_device sysfs
callback (bsc#1012628).
- Input: ims-pcu - fix type confusion in CDC union descriptor
parsing (bsc#1012628).
- mmc: vub300: fix use-after-free on probe failure (bsc#1012628).
- net/mlx5e: macsec: fix use-after-free of metadata_dst on RX
SC delete (bsc#1012628).
- tracing/user_events: Fix use-after-free in user_event_mm_dup()
(bsc#1012628).
- wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()
(bsc#1012628).
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()
(bsc#1012628).
- posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()
(bsc#1012628).
- selftests/ftrace: Drop invalid top-level local in test_ownership
(bsc#1012628).
- cpu: hotplug: Preserve per instance callback errors
(bsc#1012628).
- cpu: hotplug: Bound hotplug states sysfs output (bsc#1012628).
- net: mana: Validate the packet length reported by the NIC
(bsc#1012628).
- net: mana: Sync page pool RX frags for CPU (bsc#1012628).
- gpio: mt7621: more robust management of IRQ domain teardown
(bsc#1012628).
- gpio: tegra: do not call pinctrl for GPIO direction
(bsc#1012628).
- gpio: mt7621: be sure IRQ domain is created before exposing
GPIO chips (bsc#1012628).
- gpio-f7188x: Add support for NCT6126D version B (bsc#1012628).
- gpio: mt7621: avoid corruption of shared interrupt trigger state
(bsc#1012628).
- gpios: palmas: add .get_direction() op (bsc#1012628).
- net: sit: require CAP_NET_ADMIN in the device netns for
changelink (bsc#1012628).
- net: ethernet: ti: icssg: guard PA stat lookups (bsc#1012628).
- net: wwan: t7xx: destroy DMA pool on CLDMA late init failure
(bsc#1012628).
- net: ixp4xx_hss: fix duplicate HDLC netdev allocation
(bsc#1012628).
- net/sched: act_ct: preserve tc_skb_cb across defragmentation
(bsc#1012628).
- selftests: net: fix file owner for broadcast_ether_dst test
(bsc#1012628).
- net: ena: clean up XDP TX queues when regular TX setup fails
(bsc#1012628).
- net: ip6_vti: require CAP_NET_ADMIN in the device netns for
changelink (bsc#1012628).
- net: ip_vti: require CAP_NET_ADMIN in the device netns for
changelink (bsc#1012628).
- net: ipip: require CAP_NET_ADMIN in the device netns for
changelink (bsc#1012628).
- net: ip6_gre: require CAP_NET_ADMIN in the device netns for
changelink (bsc#1012628).
- net: ip6_tunnel: require CAP_NET_ADMIN in the device netns
for changelink (bsc#1012628).
- octeontx2-af: Free BPID bitmap on setup failure (bsc#1012628).
- ieee802154: admin-gate legacy LLSEC dump operations
(bsc#1012628).
- ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict
validation (bsc#1012628).
- ieee802154: ca8210: fix cas_ctl leak on spi_async failure
(bsc#1012628).
- ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit
(bsc#1012628).
- gve: fix header buffer corruption with header-split and HW-GRO
(bsc#1012628).
- octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF
(bsc#1012628).
- ksmbd: fix stack buffer overflow in multichannel session-key
copy (bsc#1012628).
- netfilter: nfnetlink_cthelper: cap to maximum number of
expectation per master (bsc#1012628).
- platform/x86/amd/pmc: Avoid logging "(null)" for DMI values
(bsc#1012628).
- net/sched: sch_teql: move rcu_read_lock()/spin_lock() from
_bh variants (bsc#1012628).
- ACPICA: Define acpi_ut_safe_strncpy() as strscpy_pad() alias
(bsc#1012628).
- drm/xe/userptr: Stub notifier_lock helpers when DRM_GPUSVM=n
(bsc#1012628).
- netfilter: nfnetlink_cthelper: cap to maximum number of
expectation per master on updates (bsc#1012628).
- KVM: arm64: Fix propagation of TLBI level in
kvm_pgtable_stage2_relax_perms() (bsc#1012628).
- riscv: vdso: Always declare vdso_start symbols (bsc#1012628).
- pwm: rzg2l-gpt: Fix period_ticks type from u32 to u64
(bsc#1012628).
- LoongArch: Fix nr passing in set_direct_map_valid_noflush()
(bsc#1012628).
- LoongArch: Fix missing dirty page tracking in
{pte,pmd}_wrprotect() (bsc#1012628).
- ipmi: Fix user refcount underflow in event delivery
(bsc#1012628).
- espintcp: use sk_msg_free_partial to fix partial send
(bsc#1012628).
- ipmi: fix refcount leak in i_ipmi_request() (bsc#1012628).
- bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()
(bsc#1012628).
- rtc: renesas-rtca3: Fix PIE clear polling condition in alarm
setup error path (bsc#1012628).
- fscrypt: Replace mk_users keyring with simple list
(bsc#1012628).
- rtc: mpfs: fix counter upload completion condition
(bsc#1012628).
- hwmon: (w83627hf) remove VID sysfs files on error and remove
(bsc#1012628).
- hwmon: (w83793) remove vrm sysfs file on probe failure
(bsc#1012628).
- net: liquidio: fix BAR resource leak on PF number failure
(bsc#1012628).
- ACPI: TAD: Check AC wake capability before enabling wakeup
(bsc#1012628).
- hwmon: (occ) unregister sysfs devices outside occ lock
(bsc#1012628).
- fsl/fman: Free init resources on KeyGen failure in fman_init()
(bsc#1012628).
- net: lan743x: Initialize eth_syslock spinlock before use
(bsc#1012628).
- net/sched: sch_multiq: Replace direct dequeue call with peek
and qdisc_dequeue_peeked (bsc#1012628).
- net/sched: sch_taprio: Replace direct dequeue call with peek
and qdisc_dequeue_peeked (bsc#1012628).
- fhandle: reject detached mounts in capable_wrt_mount()
(bsc#1012628).
- hwmon: (max1619) add missing 'select REGMAP' to Kconfig
(bsc#1012628).
- tracing/probes: Fix double addition of offset for @+FOFFSET
(bsc#1012628).
- orangefs: keep the readdir entry size 64-bit in fill_from_part()
(bsc#1012628).
- net/mlx5: HWS, fix matcher leak on resize target setup failure
(bsc#1012628).
- ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD
(bsc#1012628).
- ata: pata_pxa: Fix DMA channel leak on probe error
(bsc#1012628).
- ata: libata-core: Reject an invalid concurrent positioning
ranges count (bsc#1012628).
- net: wwan: iosm: bound device offsets in the MUX downlink
decoder (bsc#1012628).
- net: ipa: fix SMEM state handle leaks in SMP2P init
(bsc#1012628).
- hwmon: (asus_atk0110) Check package count before accessing
element (bsc#1012628).
- riscv: probes: save original sp in rethook trampoline
(bsc#1012628).
- mm/compaction: handle free_pages_prepare() properly in
compaction_free() (bsc#1012628).
- irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup
failure (bsc#1012628).
- s390/monwriter: Reject buffer reuse with different data length
(bsc#1012628).
- mac802154: remove interfaces with RCU list deletion
(bsc#1012628).
- octeontx2-pf: fix SQB pointer leak on init failure
(bsc#1012628).
- selftests: net: make busywait timeout clock portable
(bsc#1012628).
- llc: fix SAP refcount leak in llc_ui_autobind() (bsc#1012628).
- ipvs: use parsed transport offset in SCTP state lookup
(bsc#1012628).
- ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
(bsc#1012628).
- macsec: don't read an unset MAC header in macsec_encrypt()
(bsc#1012628).
- dibs: loopback: validate offset and size in move_data()
(bsc#1012628).
- net: macb: drop in-flight Tx SKBs on close (bsc#1012628).
- amdkfd: properly free secondary context id (bsc#1012628).
- arm64: smp: Fix hot-unplug tearing by forcing unregistration
(bsc#1012628).
- cpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable()
(bsc#1012628).
- fs/resctrl: Free mon_data structures on rdt_get_tree() failure
(bsc#1012628).
- fs/resctrl: Fix double-add of pseudo-locked region's RMID to
free list (bsc#1012628).
- ata: libata-core: Skip HPA resize for locked drives
(bsc#1012628).
- ata: libata-core: Allow capacity transition to zero for locked
drives (bsc#1012628).
- drbd: reject data replies with an out-of-range payload size
(bsc#1012628).
- riscv: Prevent NULL pointer dereference in
machine_kexec_prepare() (bsc#1012628).
- tracing/osnoise: Call synchronize_rcu() when unregistering
(bsc#1012628).
- s390/diag: Add missing array_index_nospec() call to
memtop_get_page_count() (bsc#1012628).
- s390/mm: Fix type mismatch in get_align_mask() (bsc#1012628).
- selftests/rseq: Fix a building error for riscv arch
(bsc#1012628).
- cgroup/cpuset: rebind mm mempolicy to effective_mems, not
mems_allowed (bsc#1012628).
- pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for
DSI/CSI (bsc#1012628).
- pmdomain: mediatek: Fix possible nullptr KP in HWV
cleanup/on-check (bsc#1012628).
- pmdomain: imx: Fix i.MX8MP power notifier (bsc#1012628).
- pmdomain: imx: Fix i.MX8MP VC8000E power up sequence
(bsc#1012628).
- selftests/landlock: Skip scoped_signal subtest with MSG_OOB
if not available (bsc#1012628).
- selftests/landlock: Fix screwed up pointers in the
scoped_signal_test (bsc#1012628).
- mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios
timing on resume (bsc#1012628).
- powerpc/pseries: fix memory leak on krealloc failure in
papr_init (bsc#1012628).
- net/mlx5: free mlx5_st_idx_data on final dealloc (bsc#1012628).
- wifi: rt2x00: avoid full teardown before work setup in probe
(bsc#1012628).
- wifi: mwifiex: fix roaming to different channel in host_mlme
mode (bsc#1012628).
- wifi: mac80211: fix memory leak in ieee80211_register_hw()
(bsc#1012628).
- wifi: brcmfmac: cyw: fix heap overflow on a short auth frame
(bsc#1012628).
- riscv: vdso: Do not use LTO for the vDSO (bsc#1012628).
- arch/riscv: vdso: remove CFI landing pad from rt_sigreturn
(bsc#1012628).
- regulator: ltc3676: Fix incorrect IRQSTAT bit offsets
(bsc#1012628).
- net: openvswitch: reject oversized nested action attrs
(bsc#1012628).
- Bluetooth: btrtl: validate firmware patch bounds (bsc#1012628).
- crypto: aes - Fix conditions for selecting MAC dependencies
(bsc#1012628).
- llc: fix SAP refcount leak when creating incoming sockets
(bsc#1012628).
- macsec: fix promiscuity refcount leak in macsec_dev_open()
(bsc#1012628).
- memstick: ms_block: reject a card that reports too many blocks
(bsc#1012628).
- ipvs: fix more places with wrong ipv6 transport offsets
(bsc#1012628).
- ipvs: reload ip header after head reallocation (bsc#1012628).
- reset: imx7: Correct polarity of MIPI CSI resets on i.MX8MQ
(bsc#1012628).
- reset: sunxi: fix memory region leak on ioremap failure
(bsc#1012628).
- powerpc/spufs: fix out-of-bounds access in
spufs_mem_mmap_access() (bsc#1012628).
- powerpc/uaccess: correct check for CONFIG_PPC_E500 in
mask_user_address() (bsc#1012628).
- wifi: cfg80211: validate EHT MLE before MLD ID read
(bsc#1012628).
- wifi: ieee80211: validate MLE common info length (bsc#1012628).
- wifi: mac80211: free ack status frame on TX header build failure
(bsc#1012628).
- wifi: mac80211: validate extension-frame layout before RX
(bsc#1012628).
- wifi: mwifiex: fix permanently busy scans after multiple roam
iterations (bsc#1012628).
- mtd: virt-concat: free duplicate generated name (bsc#1012628).
- mtd: onenand: samsung: report DMA completion timeouts
(bsc#1012628).
- mtd: mchp23k256: use SPI match data for chip caps (bsc#1012628).
- mmc: vub300: defer reset until cmd_mutex is unlocked
(bsc#1012628).
- mtd: rawnand: fsl_ifc: return errors for failed page reads
(bsc#1012628).
- mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout
(bsc#1012628).
- mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion
timeout (bsc#1012628).
- mmc: block: fix RPMB device unregister ordering (bsc#1012628).
- mmc: mmc_test: Fix __counted_by handling after kzalloc_flex()
conversion (bsc#1012628).
- mmc: sdhci-of-dwcmshc: check bus clock enable result in the
probe() method (bsc#1012628).
- mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq
check for tuning save/restore (bsc#1012628).
- mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on
resume (bsc#1012628).
- mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow
default state restore (bsc#1012628).
- mmc: sdhci-esdhc-imx: disable irq during suspend to fix
unhandled interrupt (bsc#1012628).
- mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend
(bsc#1012628).
- mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in
suspend (bsc#1012628).
- mmc: sdhci-esdhc-imx: fix resume error handling (bsc#1012628).
- bpf: Reject negative const offsets for buffer pointers
(bsc#1012628).
- mm/damon/core: trace esz at first setup (bsc#1012628).
- samples/damon/mtier: fail early if address range parameters
are invalid (bsc#1012628).
- device property: initialize the remaining fields of
fwnode_handle in fwnode_init() (bsc#1012628).
- f2fs: fix potential deadlock in f2fs_balance_fs() (bsc#1012628).
- f2fs: fix potential deadlock in gc_merge path of
f2fs_balance_fs() (bsc#1012628).
- f2fs: fix listxattr handling of corrupted xattr entries
(bsc#1012628).
- iio: hid-sensor-rotation: Fix stale or zero output when reading
raw values (bsc#1012628).
- ALSA: scarlett2: Allow selecting config_set by firmware version
(bsc#1012628).
- ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417
(bsc#1012628).
- firmware_loader: Add cancel helper for async requests
(bsc#1012628).
- ALSA: hda/tas2781: Cancel async firmware request at unbind
(bsc#1012628).
- binder: Use LIST_HEAD() to initialize on stack list head
(bsc#1012628).
- binder: cache secctx size before release zeroes it
(bsc#1012628).
- Bluetooth: 6lowpan: fix cyclic locking warning on netdev
unregister (bsc#1012628).
- Bluetooth: L2CAP: Fix use-after-free in
l2cap_sock_new_connection_cb() (bsc#1012628).
- ksmbd: fix path resolution in ksmbd_vfs_kern_path_create
(bsc#1012628).
- smb: move compression definitions into common/fscc.h
(bsc#1012628).
- ksmbd: use opener credentials for FSCTL mutations (bsc#1012628).
- xfs: factor out a xfs_zone_mark_free helper (bsc#1012628).
- xfs: add newly added RTGs to the free pool in growfs
(bsc#1012628).
- usb: atm: ueagle-atm: use dev_dbg() for 'device found' message
(bsc#1012628).
- usb: atm: ueagle-atm: remove function entry/exit debug messages
(bsc#1012628).
- usb: atm: ueagle-atm: wait for pre-firmware load in
.disconnect() (bsc#1012628).
- liveupdate: validate session type before performing operation
(bsc#1012628).
- crypto: xilinx-trng - Remove crypto_rng interface (bsc#1012628).
- exfat: replace unsafe macros with static inline functions
(bsc#1012628).
- exfat: add balloc parameter to exfat_map_cluster() for iomap
support (bsc#1012628).
- exfat: add data_start_bytes and exfat_cluster_to_phys_bytes()
helper (bsc#1012628).
- exfat: fix implicit declaration of brelse() (bsc#1012628).
- iomap: consolidate bio submission (bsc#1012628).
- drm/amd/display: Fix Color Manager (3DLUT, Shaper, Blend)
(bsc#1012628).
- posix-timers: Expand timer_[re]arm() callbacks with a boolean
return value (bsc#1012628).
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race
(bsc#1012628).
- Revert "gpib: cb7210: Fix region leak when request_irq fails"
(bsc#1012628).
- Rename to
patches.kernel.org/7.1.5-1045-apparmor-don-t-audit-files-pointing-to-aa_null.patch.
- Rename to
patches.kernel.org/7.1.5-1046-apparmor-fix-uninitialised-pointer-passed-to-a.patch.
- Rename to
patches.kernel.org/7.1.5-1260-ACPICA-Unbreak-tools-build-after-switching-ove.patch.
- Update config files.
- commit 1704591
* Mon Jul 27 2026 msuchanek@suse.de
- pkspec-dtb: Fix dtb-al rename.
- commit 98ec660
* Mon Jul 27 2026 msuchanek@suse.de
- mkspec-dtb: Skip missing DTBs.
- commit 133d77b
* Thu Jul 23 2026 mwilck@suse.com
- md/raid1: create serial pool adding rdev to array with
serialize_policy=1 (bsc#1272261).
- commit 50997db
* Wed Jul 22 2026 tiwai@suse.de
- drm/i915/mtl+: Enable PPS before PLL (bsc#1264698).
- commit 1d4fda8
* Tue Jul 21 2026 tiwai@suse.de
- soundwire: dmi-quirks: Disable ghost Realtek on Asus Zenbook
Duo (bsc#1271264).
- commit bce4269
* Tue Jul 21 2026 tiwai@suse.de
- soundwire: dmi-quirks: Disable ghost Realtek devices
(bsc#1271264).
- commit 5c9ff0f
* Mon Jul 20 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.1.2-002-fuse-re-lock-request-before-replacing-page-cach.patch
(bsc#1012628 CVE-2026-53388).
- Update
patches.kernel.org/7.1.2-005-iio-light-veml6075-add-bounds-check-to-veml6075.patch
(bsc#1012628 CVE-2026-53387).
- Update
patches.kernel.org/7.1.2-006-iio-adc-ti-ads1298-add-bounds-check-to-pga_sett.patch
(bsc#1012628 CVE-2026-53386).
- Update
patches.kernel.org/7.1.2-008-vc_screen-fix-null-ptr-deref-in-vcs_notifier-du.patch
(bsc#1012628 CVE-2026-53385).
- Update
patches.kernel.org/7.1.2-010-serial-8250_dw-unregister-8250-port-if-clk_noti.patch
(bsc#1012628 CVE-2026-53384).
- Update
patches.kernel.org/7.1.2-012-ksmbd-reject-non-VALID-session-in-compound-requ.patch
(bsc#1012628 CVE-2026-53383).
- Update
patches.kernel.org/7.1.2-013-media-vidtv-fix-NULL-pointer-dereference-in-vid.patch
(bsc#1012628 CVE-2026-53382).
- Update
patches.kernel.org/7.1.2-014-virtiofs-fix-UAF-on-submount-umount.patch
(bsc#1012628 CVE-2026-53381).
- Update
patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
(bsc#1012628 CVE-2026-53359 bsc#1270059).
- Update
patches.kernel.org/7.1.3-006-batman-adv-tp_meter-avoid-divide-by-zero-for-de.patch
(bsc#1012628 CVE-2026-63836).
- Update
patches.kernel.org/7.1.3-018-batman-adv-v-prevent-OGM-aggregation-on-disable.patch
(bsc#1012628 CVE-2026-63835).
- Update
patches.kernel.org/7.1.3-019-batman-adv-tp_meter-restrict-number-of-unacked-.patch
(bsc#1012628 CVE-2026-63834).
- Update
patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
(bsc#1012628 CVE-2026-53362 bsc#1269493).
- Update
patches.kernel.org/7.1.3-029-ipv4-account-for-fraggap-on-the-paged-allocatio.patch
(bsc#1012628 CVE-2026-53366 bsc#1271366).
- Update
patches.kernel.org/7.1.3-030-ntfs3-reject-direct-userspace-writes-to-reserve.patch
(bsc#1012628 CVE-2026-63833).
- Update
patches.kernel.org/7.1.3-031-wifi-mt76-add-wcid-publish-check-in-mt76_sta_ad.patch
(bsc#1012628 CVE-2026-63832).
- Update
patches.kernel.org/7.1.3-032-mac802154-llsec-add-skb_cow_data-before-in-plac.patch
(bsc#1012628 CVE-2026-63831).
- Update
patches.kernel.org/7.1.3-033-net-skmsg-preserve-sg.copy-across-SG-transforms.patch
(bsc#1012628 CVE-2026-63830).
- Update
patches.kernel.org/7.1.3-034-net-ip_gre-require-CAP_NET_ADMIN-in-the-device-.patch
(bsc#1012628 CVE-2026-63829).
- Update
patches.kernel.org/7.1.3-036-apparmor-mediate-the-implicit-connect-of-TCP-fa.patch
(bsc#1012628 CVE-2026-63828).
- Update
patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch
(bko#221513 bsc#1012628 CVE-2026-63827).
- Update
patches.kernel.org/7.1.3-039-fbdev-fix-use-after-free-in-store_modes.patch
(bsc#1012628 CVE-2026-63826).
- Update
patches.kernel.org/7.1.3-045-gcov-use-atomic-counter-updates-to-fix-concurre.patch
(bsc#1012628 CVE-2026-63825).
- Update
patches.kernel.org/7.1.3-046-KEYS-fix-overflow-in-keyctl_pkey_params_get_2.patch
(bsc#1012628 CVE-2026-63824).
- Update
patches.kernel.org/7.1.3-047-keys-Pin-request_key_auth-payload-in-instantiat.patch
(bsc#1012628 CVE-2026-63823).
- Update
patches.kernel.org/7.1.3-052-wifi-ath11k-fix-warning-when-unbinding.patch
(bsc#1012628 CVE-2026-63822).
- Update
patches.kernel.org/7.1.3-056-wifi-rtw88-usb-fix-memory-leaks-on-USB-write-fa.patch
(bsc#1012628 CVE-2026-63821).
- Update
patches.kernel.org/7.1.3-060-f2fs-fix-missing-read-bio-submission-on-large-f.patch
(bsc#1012628 CVE-2026-63820).
- Update
patches.kernel.org/7.1.3-063-f2fs-fix-to-do-sanity-check-on-f2fs_get_node_fo.patch
(bsc#1012628 CVE-2026-63819).
- Update
patches.kernel.org/7.1.3-064-f2fs-validate-orphan-inode-entry-count.patch
(bsc#1012628 CVE-2026-63818).
- Update
patches.kernel.org/7.1.3-065-f2fs-validate-compress-cache-inode-only-when-en.patch
(bsc#1012628 CVE-2026-63817).
- Update
patches.kernel.org/7.1.3-066-f2fs-atomic-fix-UAF-issue-on-f2fs_inode_info.at.patch
(bsc#1012628 CVE-2026-63816).
- Update
patches.kernel.org/7.1.3-068-f2fs-bound-i_inline_xattr_size-for-non-inline-x.patch
(bsc#1012628 CVE-2026-63815).
- Update
patches.kernel.org/7.1.3-069-f2fs-validate-ACL-entry-sizes-in-f2fs_acl_from_.patch
(bsc#1012628 CVE-2026-63814).
- Update
patches.kernel.org/7.1.3-070-Revert-f2fs-remove-non-uptodate-folio-from-the-.patch
(bsc#1012628 CVE-2026-63813).
- Update
patches.kernel.org/7.1.3-071-f2fs-fix-incorrect-FI_NO_EXTENT-handling-in-__d.patch
(bsc#1012628 CVE-2026-63812).
- Update
patches.kernel.org/7.1.3-073-f2fs-read-COW-data-with-the-original-inode-duri.patch
(bsc#1012628 CVE-2026-63811).
- Update
patches.kernel.org/7.1.3-074-block-Avoid-mounting-the-bdev-pseudo-filesystem.patch
(bsc#1012628 CVE-2026-63810).
- Update
patches.kernel.org/7.1.3-075-bpf-use-kvfree-for-replaced-sysctl-write-buffer.patch
(bsc#1012628 CVE-2026-63809).
- Update
patches.kernel.org/7.1.3-077-exfat-fix-potential-use-after-free-in-exfat_fin.patch
(bsc#1012628 CVE-2026-63808).
- Update
patches.kernel.org/7.1.3-078-KVM-x86-mmu-Ensure-hugepage-is-in-by-slot-befor.patch
(bsc#1012628 CVE-2026-63807).
- Update
patches.kernel.org/7.1.3-079-KVM-Replace-guest-triggerable-BUG_ON-in-ioevent.patch
(bsc#1012628 CVE-2026-63806).
- Update
patches.kernel.org/7.1.3-080-crypto-nx-fix-nx_crypto_ctx_exit-argument.patch
(bsc#1012628 CVE-2026-63805).
- Update
patches.kernel.org/7.1.3-081-gfs2-fix-use-after-free-in-gfs2_qd_dealloc.patch
(bsc#1012628 CVE-2026-63804).
- Update
patches.kernel.org/7.1.3-083-hdlc_ppp-sync-per-proto-timers-before-freeing-h.patch
(bsc#1012628 CVE-2026-63803).
- Update
patches.kernel.org/7.1.3-084-blk-cgroup-fix-UAF-in-__blkcg_rstat_flush.patch
(bsc#1012628 CVE-2026-63802).
- Update
patches.kernel.org/7.1.3-085-tipc-fix-slab-use-after-free-Read-in-tipc_aead_.patch
(bsc#1012628 CVE-2026-63801).
- Update
patches.kernel.org/7.1.3-087-pNFS-Fix-use-after-free-in-pnfs_update_layout.patch
(bsc#1012628 CVE-2026-63800).
- Update
patches.kernel.org/7.1.3-088-sched-mmcid-Fix-OOB-clear_bit-when-CID-is-MM_CI.patch
(bsc#1012628 CVE-2026-63799).
- Update
patches.kernel.org/7.1.3-089-irqchip-imgpdc-Fix-resource-leak-add-missing-ch.patch
(bsc#1012628 CVE-2026-63798).
- Update
patches.kernel.org/7.1.3-091-rpmsg-char-Fix-use-after-free-on-probe-error-pa.patch
(bsc#1012628 CVE-2026-63797).
- Update
patches.kernel.org/7.1.3-092-ocfs2-reject-oversized-group-bitmap-descriptors.patch
(bsc#1012628 CVE-2026-63796).
- Update
patches.kernel.org/7.1.3-093-9p-avoid-putting-oldfid-in-p9_client_walk-error.patch
(bsc#1012628 CVE-2026-63795).
- Update
patches.kernel.org/7.1.3-096-KVM-SVM-Fix-page-overflow-in-sev_dbg_crypt-for-.patch
(bsc#1012628 CVE-2026-63794).
- Update
patches.kernel.org/7.1.3-100-ntfs-serialize-volume-label-accesses.patch
(bsc#1012628 CVE-2026-63793).
- Update
patches.kernel.org/7.1.3-101-fbdev-Fix-fb_new_modelist-to-prevent-null-ptr-d.patch
(bsc#1012628 CVE-2026-53403).
- Update
patches.kernel.org/7.1.3-102-fbdev-fbcon-fix-out-of-bounds-read-in-err_out-o.patch
(bsc#1012628 CVE-2026-53402).
- Update
patches.kernel.org/7.1.3-103-fbdev-omap2-fix-use-after-free-in-omapfb_mmap.patch
(bsc#1012628 CVE-2026-53401).
- Update
patches.kernel.org/7.1.3-106-i2c-core-fix-adapter-registration-race.patch
(bsc#1012628 CVE-2026-53400).
- Update
patches.kernel.org/7.1.3-107-nfsd-release-layout-stid-on-setlease-failure.patch
(bsc#1012628 CVE-2026-53399).
- Update
patches.kernel.org/7.1.3-108-NFSD-Fix-SECINFO_NO_NAME-decode-error-cleanup.patch
(bsc#1012628 CVE-2026-53398).
- Update
patches.kernel.org/7.1.3-109-nfsd-fix-posix_acl-leak-on-SETACL-decode-failur.patch
(bsc#1012628 CVE-2026-53397).
- Update
patches.kernel.org/7.1.3-111-nfsd-fix-posix_acl-leak-and-ignored-error-in-nf.patch
(bsc#1012628 CVE-2026-53396).
- Update
patches.kernel.org/7.1.3-113-nfsd-fix-dead-ACL-conflict-guard-in-nfsd4_creat.patch
(bsc#1012628 CVE-2026-53395).
- Update
patches.kernel.org/7.1.3-114-nfsd-avoid-leaking-pre-allocated-openowner-on-u.patch
(bsc#1012628 CVE-2026-53394).
- Update
patches.kernel.org/7.1.3-115-nfsd-reset-write-verifier-on-deferred-writeback.patch
(bsc#1012628 CVE-2026-53393).
- Update
patches.kernel.org/7.1.3-116-NFSv4-flexfiles-reject-zero-filehandle-version-.patch
(bsc#1012628 CVE-2026-53392).
- Update
patches.kernel.org/7.1.3-117-NFSv4-pNFS-reject-zero-length-r_addr-in-nfs4_de.patch
(bsc#1012628 CVE-2026-53391).
- Update
patches.kernel.org/7.1.3-120-ksmbd-fix-out-of-bounds-read-in-smb_check_perm_.patch
(bsc#1012628 CVE-2026-53390).
- Update
patches.kernel.org/7.1.3-121-net-tcp-ao-fix-use-after-free-of-key-in-del_asy.patch
(bsc#1012628 CVE-2026-53389).
suse-add-cves
- commit 46107bf
* Mon Jul 20 2026 jslaby@suse.cz
- udmabuf: Ensure to perform cache synchronisation in
begin_cpu_udmabuf() (git-fixes).
- commit 4d139b6
* Mon Jul 20 2026 jslaby@suse.cz
- Linux 7.1.4 (bsc#1012628).
- rust: str: use the "kernel vertical" imports style
(bsc#1012628).
- rust: str: clean unused import for Rust >= 1.98 (bsc#1012628).
- userfaultfd: gate must_wait writability check on pte_present()
(bsc#1012628).
- net/sched: dualpi2: fix GSO backlog accounting (bsc#1012628).
- mm/khugepaged: write all dirty file folios when collapsing
(bsc#1012628).
- slab: recognize @GFP parameter as optional in kernel-doc
(bsc#1012628).
- perf trace beauty fcntl: Fix build with older kernel headers
(bsc#1012628).
- KVM: x86: Move update_cr8_intercept() to lapic.c (bsc#1012628).
- KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is
in guest mode (bsc#1012628).
- KVM: x86: Unconditionally recompute CR8 intercept on PPR update
(bsc#1012628).
- ACPI: CPPC: Suppress UBSAN warning caused by field misuse
(bsc#1012628).
- ACPI: NFIT: core: Fix possible NULL pointer dereference
(bsc#1012628).
- ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
(bsc#1012628).
- platform/x86: intel-hid: Protect ACPI notify handler against
recursion (bsc#1012628).
- LoongArch: Add PIO for early access before ACPI PCI root
register (bsc#1012628).
- rust: cpufreq: clean new `clippy::map_or_identity` lint for
Rust 1.98.0 (bsc#1012628).
- rust: kasan: KASAN+RUST requires clang (bsc#1012628).
- rust: pci: use 'static lifetime for PCI BAR resource names
(bsc#1012628).
- rust: block: fix GenDisk cleanup paths (bsc#1012628).
- rust: doctest: fix incorrect pattern in replacement
(bsc#1012628).
- rust: Kbuild: set frame-pointer llvm module flag for
CONFIG_FRAME_POINTER (bsc#1012628).
- futex/requeue: Revert "Prevent NULL pointer dereference in
remove_waiter() on self-deadlock"" (bsc#1012628).
- perf/core: Detach event groups during remove_on_exec
(bsc#1012628).
- bpf: Support for hardening against JIT spraying (bsc#1012628).
- x86/bugs: Enable IBPB flush on BPF JIT allocation (bsc#1012628).
- bpf: Restrict JIT predictor flush to cBPF (bsc#1012628).
- bpf: Skip redundant IBPB in pack allocator (bsc#1012628).
- bpf: Prefer packs that won't trigger an IBPB flush on allocation
(bsc#1012628).
- bpf: Prefer dirty packs for eBPF allocations (bsc#1012628).
- usb: gadget: function: rndis: add length check to response query
(bsc#1012628).
- usb: gadget: function: rndis: add length check for header
(bsc#1012628).
- iio: accel: bmc150: clamp the device-reported FIFO frame count
(bsc#1012628).
- iio: accel: kxsd9: fix runtime PM imbalance on write_raw()
error (bsc#1012628).
- iio: adc: ad4062: add GPIOLIB dependency (bsc#1012628).
- iio: adc: ad7380: select REGMAP (bsc#1012628).
- iio: adc: ad7768-1: Select GPIOLIB (bsc#1012628).
- iio: adc: ad7779: add missing 'select IIO_TRIGGERED_BUFFER'
to Kconfig (bsc#1012628).
- iio: adc: ad_sigma_delta: fix clear_pending_event for
registerless devices (bsc#1012628).
- iio: adc: ad_sigma_delta: fix CS held asserted and state leaks
(bsc#1012628).
- iio: adc: lpc32xx: Initialize completion before requesting IRQ
(bsc#1012628).
- iio: adc: nxp-sar-adc: Fix the delay calculation in
nxp_sar_adc_wait_for() (bsc#1012628).
- iio: adc: spear: Initialize completion before requesting IRQ
(bsc#1012628).
- iio: adc: ti-ads1119: fix PM reference leak in buffer preenable
(bsc#1012628).
- iio: adc: ti-ads124s08: Return reset GPIO lookup errors
(bsc#1012628).
- iio: backend: fix uninitialized data in debugfs (bsc#1012628).
- iio: buffer: hw-consumer: free scan_mask on buffer release
(bsc#1012628).
- iio: chemical: scd30: Cleanup initializations and fix
sign-extension bug (bsc#1012628).
- iio: common: st_sensors: honour channel endianness in
read_axis_data (bsc#1012628).
- iio: core: fix uninitialized data in debugfs (bsc#1012628).
- iio: dac: ad3552r-hs: fix uninitialized data ni
ad3552r_hs_write_data_source() (bsc#1012628).
- iio: event: Fix event FIFO reset race (bsc#1012628).
- iio: gyro: bmg160: bail out when bandwidth/filter is not in
table (bsc#1012628).
- iio: gyro: bmg160: wait full startup time after mode change
at probe (bsc#1012628).
- iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
(bsc#1012628).
- iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
(bsc#1012628).
- iio: imu: inv_icm42600: fix timestamp clock period by using
lower value (bsc#1012628).
- iio: imu: inv_icm42600: fix timestamping by limiting FIFO
reading (bsc#1012628).
- iio: imu: st_lsm6dsx: deselect shub page before reading whoami
(bsc#1012628).
- iio: light: al3000a: add missing REGMAP_I2C to Kconfig
(bsc#1012628).
- iio: light: al3010: add missing REGMAP_I2C to Kconfig
(bsc#1012628).
- iio: light: al3010: fix incorrect scale for the highest gain
range (bsc#1012628).
- iio: light: al3010: read both ALS ADC registers again
(bsc#1012628).
- iio: light: al3320a: add missing REGMAP_I2C to Kconfig
(bsc#1012628).
- iio: light: al3320a: read both ALS ADC registers again
(bsc#1012628).
- iio: light: gp2ap002: fix runtime PM leak on read error
(bsc#1012628).
- iio: light: opt3001: fix missing state reset on timeout
(bsc#1012628).
- iio: light: tsl2591: return actual error from probe IRQ failure
(bsc#1012628).
- iio: light: veml6030: fix channel type when pushing events
(bsc#1012628).
- iio: magnetometer: ak8975: Add missed
pm_runtime_put_autosuspend() call (bsc#1012628).
- iio: pressure: bmp280: zero-init bmp580 trigger handler buffer
(bsc#1012628).
- iio: pressure: mpl115: fix runtime PM leak on read error
(bsc#1012628).
- iio: proximity: vl53l0x: notify trigger and clear IRQ on error
paths (bsc#1012628).
- iio: resolver: ad2s1210: notify trigger and clear state on
fault read error (bsc#1012628).
- iio: temperature: Build mlx90635 with CONFIG_MLX90635
(bsc#1012628).
- iio: temperature: ltc2983: Fix n_wires default bypassing
rotation check (bsc#1012628).
- iio: temperature: ltc2983: Fix reinit_completion() called
after conversion start (bsc#1012628).
- iio: temperature: tmp006: use devm_iio_trigger_register
(bsc#1012628).
- ALSA: usx2y: us144mkii: fix work UAF on disconnect
(bsc#1012628).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping
(bsc#1012628).
- ALSA: virtio: Validate control metadata from the device
(bsc#1012628).
- ALSA: ymfpci: check snd_ctl_new1() return value (bsc#1012628).
- ALSA: aoa: check snd_ctl_new1() return value (bsc#1012628).
- ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4
input parser (bsc#1012628).
- ALSA: cmipci: check snd_ctl_new1() return value (bsc#1012628).
- ALSA: compress: Fix task creation error unwind (bsc#1012628).
- ALSA: es1938: check snd_ctl_new1() return value (bsc#1012628).
- ALSA: FCP: Add Focusrite ISA C8X support (bsc#1012628).
- ALSA: firewire: isight: bound the sample count to the packet
payload (bsc#1012628).
- ALSA: gus: check snd_ctl_new1() return value (bsc#1012628).
- ALSA: hda/cs35l41: Fix firmware load work teardown
(bsc#1012628).
- ALSA: hda/hdmi: Add force-connect quirk for HP EliteDesk 800
G5 Mini (bsc#1012628).
- ALSA: hda/hdmi: Use 'AC_PINSENSE_ELDV' to detect pinsense for
Loongson (bsc#1012628).
- ALSA: hda/realtek: Fix noisy mic for Clevo V6xxAW (bsc#1012628).
- ALSA: ice1712: check snd_ctl_new1() return value (bsc#1012628).
- ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
(bsc#1012628).
- ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb
corrupts anchor list on each resubmission (bsc#1012628).
- ALSA: usb-audio: add IFB_SILENCE_ON_EMPTY quirk for Behringer
Flow 8 (bsc#1012628).
- ALSA: usb-audio: avoid kobject path lookup in DualSense match
(bsc#1012628).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
(bsc#1012628).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
EQ-switch put callbacks (bsc#1012628).
- ALSA: usb-audio: Roll back quirk control caches on write errors
(bsc#1012628).
- ALSA: usb-audio: Update Babyface Pro control caches only after
successful writes (bsc#1012628).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
successful writes (bsc#1012628).
- x86,fs/resctrl: Prevent out-of-bounds access while offlining
CPU when SNC enabled (bsc#1012628).
- vfio/pci: Use a private flag to prevent power state change
with VFs (bsc#1012628).
- vfio/pci: Latch disable_idle_d3 per device (bsc#1012628).
- vfio/pci: Release the VGA arbiter client on register_device()
failure (bsc#1012628).
- vfio/pci: Fix racy bitfields and tighten struct layout
(bsc#1012628).
- vfio: prevent infinite loop in vfio_mig_get_next_state()
on blocked arc (bsc#1012628).
- vfio: Remove device debugfs before releasing devres
(bsc#1012628).
- vfio/mlx5: Fix racy bitfields and tighten struct layout
(bsc#1012628).
- Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB
(bsc#1012628).
- Bluetooth: btusb: fix use-after-free on registration failure
(bsc#1012628).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
(bsc#1012628).
- Bluetooth: btusb: fix wakeup source leak on probe failure
(bsc#1012628).
- binder: fix UAF in binder_thread_release() (bsc#1012628).
- binder: fix UAF in binder_free_transaction() (bsc#1012628).
- rust_binder: use a u64 stride when cleaning up the offsets array
(bsc#1012628).
- rust_binder: fix BINDER_GET_EXTENDED_ERROR (bsc#1012628).
- rust_binder: reject context manager self-transaction
(bsc#1012628).
- rust_binder: synchronize Rust Binder stats with freeze commands
(bsc#1012628).
- rust_binder: clear freeze listener on node removal
(bsc#1012628).
- usb: xhci: Fix sleep in atomic context in xhci_free_streams()
(bsc#1012628).
- xhci: sideband: fix ring sg table pages leak (bsc#1012628).
- usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
(bsc#1012628).
- riscv: dts: sophgo: Add dma-coherent to SG2042 PCIe controllers
(bsc#1012628).
- PCI: loongson: Override PCIe bridge supported speeds for
Loongson-3C6000 series (bsc#1012628).
- PCI: altera: Do not dispose parent IRQ mapping (bsc#1012628).
- PCI: altera: Fix resource leaks on probe failure (bsc#1012628).
- PCI: Always lift 2.5GT/s restriction in PCIe failed link
retraining (bsc#1012628).
- PCI: host-common: Request bus reassignment when not probe-only
(bsc#1012628).
- PCI: imx6: Configure REF_USE_PAD before PHY reset for i.MX95
(bsc#1012628).
- PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
(bsc#1012628).
- PCI: imx6: Assert ref_clk_en after reference clock stabilizes
on i.MX95 (bsc#1012628).
- PCI: mediatek: Fix IRQ domain leak when port fails to enable
(bsc#1012628).
- PCI: qcom: Initialize DWC MSI lock for firmware-managed ECAM
hosts (bsc#1012628).
- PCI: Skip Resizable BAR restore on read error (bsc#1012628).
- PCI/IOV: Skip VF Resizable BAR restore on read error
(bsc#1012628).
- tcp: restore RCU grace period in tcp_ao_destroy_sock
(bsc#1012628).
- mm/damon/ops-common: handle extreme intervals in
damon_hot_score() (bsc#1012628).
- netfilter: ipset: fix race between dump and ip_set_list resize
(bsc#1012628).
- virtio_pci: fix vq info pointer lookup via wrong index
(bsc#1012628).
- virtio-mmio: fix device release warning on module unload
(bsc#1012628).
- hwrng: virtio: clamp device-reported used.len at copy_data()
(bsc#1012628).
- USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
(bsc#1012628).
- usb: dwc3: run gadget disconnect from sleepable suspend context
(bsc#1012628).
- usb: misc: usbio: fix disconnect UAF in client teardown
(bsc#1012628).
- 6lowpan: fix NHC entry use-after-free on error path
(bsc#1012628).
- tracing: Fix NULL pointer dereference in func_set_flag()
(bsc#1012628).
- tipc: fix out-of-bounds read in broadcast Gap ACK blocks
(bsc#1012628).
- staging: vme_user: bound slave read/write to the kern_buf size
(bsc#1012628).
- smb: client: restrict implied bcc[0] exemption to responses
without data area (bsc#1012628).
- staging: vme_user: fix location monitor leak in fake bridge
(bsc#1012628).
- staging: vme_user: fix location monitor leak in tsi148 bridge
(bsc#1012628).
- media: staging: ipu3-imgu: Add range check for
imgu_css_cfg_acc_stripe (bsc#1012628).
- staging: media: atomisp: reduce load_primary_binaries() stack
usage (bsc#1012628).
- staging: media: ipu7: fix double-free and use-after-free in
error paths (bsc#1012628).
- staging: rtl8723bs: don't drop short TX frames in
_rtw_pktfile_read() (bsc#1012628).
- staging: rtl8723bs: fix heap buffer overflow in
rtw_cfg80211_set_wpa_ie() (bsc#1012628).
- staging: rtl8723bs: fix WEP length underflow and OOB read in
OnAuth() (bsc#1012628).
- staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
(bsc#1012628).
- staging: rtl8723bs: fix OOB read in update_beacon_info()
IE loop (bsc#1012628).
- staging: rtl8723bs: fix OOB reads in IE loops in
issue_assocreq() and join_cmd_hdl() (bsc#1012628).
- staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
(bsc#1012628).
- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(),
rtw_get_wapi_ie(), and rtw_get_wps_attr() (bsc#1012628).
- staging: rtl8723bs: fix OOB write in HT_caps_handler()
(bsc#1012628).
- crypto: amlogic - avoid double cleanup in meson_crypto_probe()
(bsc#1012628).
- crypto: krb5 - filter out async aead implementations at alloc
(bsc#1012628).
- crypto: qat - fix VF2PF work teardown race in
adf_disable_sriov() (bsc#1012628).
- ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE
then SMB2_CANCEL (bsc#1012628).
- net: af_key: initialize alg_key_len for IPComp states
(bsc#1012628).
- audit: Fix data races of skb_queue_len() readers on audit_queue
(bsc#1012628).
- Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn
ref (bsc#1012628).
- Bluetooth: MGMT: Fix UAF of hci_conn_params in
add_device_complete (bsc#1012628).
- coresight: etb10: restore atomic_t for shared reading state
(bsc#1012628).
- debugobjects: Plug race against a concurrent OOM disable
(bsc#1012628).
- fs/ntfs3: validate Dirty Page Table capacity in log_replay
copy_lcns (bsc#1012628).
- ntfs: avoid calling post_write_mst_fixup() for invalid
index_block (bsc#1012628).
- NTB: epf: Avoid calling pci_irq_vector() from hardirq context
(bsc#1012628).
- gpio: eic-sprd: use raw_spinlock_t in the irq startup path
(bsc#1012628).
- gpio: sch: use raw_spinlock_t in the irq startup path
(bsc#1012628).
- HID: logitech-dj: Fix maxfield check in DJ short report
validation (bsc#1012628).
- io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work
item (bsc#1012628).
- io_uring/rw: preserve partial result for iopoll (bsc#1012628).
- netpoll: fix a use-after-free on shutdown path (bsc#1012628).
- ipv4: igmp: remove multicast group from hash table on device
destruction (bsc#1012628).
- net: ipv4: bound TCP reordering sysctl writes and MTU probe
sizes (bsc#1012628).
- media: nxp: imx8-isi: Fix use-after-free on remove
(bsc#1012628).
- mfd: cros_ec: Delay dev_set_drvdata() until probe success
(bsc#1012628).
- mm/shrinker: do not hold RCU lock in
shrinker_debugfs_count_show() (bsc#1012628).
- mm: shrinker: fix shrinker_info teardown race with expansion
(bsc#1012628).
- mm: shrinker: fix NULL pointer dereference in debugfs
(bsc#1012628).
- mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on
swapless host (bsc#1012628).
- mm/swap: add cond_resched() in swap_reclaim_full_clusters to
prevent softlockup (bsc#1012628).
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
(bsc#1012628).
- netfilter: handle unreadable frags (bsc#1012628).
- netfilter: ebtables: zero chainstack array (bsc#1012628).
- netfilter: ebtables: module names must be null-terminated
(bsc#1012628).
- netfilter: ebtables: terminate table name before
find_table_lock() (bsc#1012628).
- netfilter: flowtable: fix offloaded ct timeout never being
extended (bsc#1012628).
- netfilter: flowtable: IPIP tunnel hardware offload is not yet
support (bsc#1012628).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
(bsc#1012628).
- Bluetooth: bnep: pin L2CAP connection during netdev registration
(bsc#1012628).
- Bluetooth: btnxpuart: Fix out-of-bounds firmware read in
nxp_recv_fw_req_v3() (bsc#1012628).
- Bluetooth: fix UAF in bt_accept_dequeue() (bsc#1012628).
- Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()
(bsc#1012628).
- Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work
is canceled (bsc#1012628).
- Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()
(bsc#1012628).
- Bluetooth: L2CAP: cancel pending_rx_work before taking
conn->lock (bsc#1012628).
- Bluetooth: L2CAP: validate option length before reading conf
opt value (bsc#1012628).
- coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
(bsc#1012628).
- smb: client: resolve SWN tcon from live registrations
(bsc#1012628).
- smb/client: Fix error code in smb2_aead_req_alloc()
(bsc#1012628).
- ksmbd: prevent path traversal bypass by restricting caseless
retry (bsc#1012628).
- ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
(bsc#1012628).
- ksmbd: add a permission check for FSCTL_SET_ZERO_DATA
(bsc#1012628).
- ksmbd: serialize QUERY_DIRECTORY requests per file
(bsc#1012628).
- ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock
cancellation (bsc#1012628).
- ksmbd: require source read access for duplicate extents
(bsc#1012628).
- ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO
SECURITY (bsc#1012628).
- ksmbd: run set info with opener credentials (bsc#1012628).
- ksmbd: enforce FILE_READ_ATTRIBUTES on
SMB_FIND_FILE_POSIX_INFORMATION (bsc#1012628).
- ksmbd: add per-handle permission check to FILE_LINK_INFORMATION
(bsc#1012628).
- ksmbd: use opener credentials for delete-on-close (bsc#1012628).
- ksmbd: use opener credentials for ADS I/O (bsc#1012628).
- ksmbd: track the connection owning a byte-range lock
(bsc#1012628).
- ksmbd: validate NTLMv2 response before updating session key
(bsc#1012628).
- smb/client: fix chown/chgrp with SMB3 POSIX Extensions
(bsc#1012628).
- smb: client: fix query directory replay double-free
(bsc#1012628).
- smb: client: fix query_info() replay double-free (bsc#1012628).
- smb: client: fix double-free in SMB2_ioctl() replay
(bsc#1012628).
- smb: client: fix change notify replay double-free (bsc#1012628).
- smb: client: fix double-free in SMB2_flush() replay
(bsc#1012628).
- smb: client: fix double-free in SMB2_open() replay
(bsc#1012628).
- smb: client: fix double-free in SMB2_close() replay
(bsc#1012628).
- smb: client: Fix next buffer leak in
receive_encrypted_standard() (bsc#1012628).
- smb: client: use unaligned reads in parse_posix_ctxt()
(bsc#1012628).
- smb: client: harden POSIX SID length parsing (bsc#1012628).
- smb: client: fix atime clamp check in read completion
(bsc#1012628).
- smb: client: mask server-provided mode to 07777 in modefromsid
(bsc#1012628).
- smb/server: do not require delete access for non-replacing links
(bsc#1012628).
- writeback: fix race between cgroup_writeback_umount() and
inode_switch_wbs() (bsc#1012628).
- OPP: of: Fix potential memory leak in opp_parse_supplies()
(bsc#1012628).
- cpufreq: qcom-cpufreq-hw: Fix possible double free
(bsc#1012628).
- firmware_loader: fix device reference leak in
firmware_upload_register() (bsc#1012628).
- libfs: set SB_I_NOEXEC and SB_I_NODEV by default in
init_pseudo() (bsc#1012628).
- proc: protect ptrace_may_access() with exec_update_lock (FD
links) (bsc#1012628).
- perf/x86/intel/uncore: Defer ADL global PMON enable to
enable_box() (bsc#1012628).
- cpufreq: intel_pstate: Sync policy->cur during CPU offline
(bsc#1012628).
- sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
(bsc#1012628).
- cpufreq: Fix hotplug-suspend race during reboot (bsc#1012628).
- cpufreq: pcc: fix use-after-free and double free in _OSC
evaluation (bsc#1012628).
- proc: protect ptrace_may_access() with exec_update_lock (part 1)
(bsc#1012628).
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep()
error path (bsc#1012628).
- time/jiffies: Register jiffies clocksource before usage
(bsc#1012628).
- clocksource/drivers/timer-tegra186: Fix support for multiple
watchdog instances (bsc#1012628).
- s390: Revert support for DCACHE_WORD_ACCESS (bsc#1012628).
- perf/arm-cmn: Fix DVM node events (bsc#1012628).
- X.509: Fix validation of ASN.1 certificate header (bsc#1012628).
- mm/slab: do not limit zeroing to orig_size when only red zoning
is enabled (bsc#1012628).
- tools/mm/slabinfo: Fix trace disable logic inversion
(bsc#1012628).
- tools/mm/slabinfo: fix total_objects attribute name
(bsc#1012628).
- HID: hid-goodix-spi: validate report size to prevent stack
buffer overflow (bsc#1012628).
- HID: uhid: convert to hid_safe_input_report() (bsc#1012628).
- HID: wacom: stop hardware after post-start probe failures
(bsc#1012628).
- HID: pidff: Use correct effect type in effect update
(bsc#1012628).
- HID: hid-lenovo-go: cancel cfg_setup work in hid_go_cfg_remove()
(bsc#1012628).
- HID: wacom: fix slab-out-of-bounds write in
wacom_wac_queue_insert (bsc#1012628).
- HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()
(bsc#1012628).
- HID: letsketch: fix UAF on inrange_timer at driver unbind
(bsc#1012628).
- HID: multitouch: fix out-of-bounds bit access on mt_io_flags
(bsc#1012628).
- HID: appleir: fix UAF on pending key_up_timer in remove()
(bsc#1012628).
- HID: lg-g15: cancel pending work on remove to fix a
use-after-free (bsc#1012628).
- HID: sensor-hub: Add sensor_hub_input_attr_read_values()
for multi-byte reads (bsc#1012628).
- hfs/hfsplus: fix u32 overflow in
check_and_correct_requested_length (bsc#1012628).
- hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
(bsc#1012628).
- nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment
numbers (bsc#1012628).
- media: mtk-jpeg: cancel workqueue on release for supported
platforms only (bsc#1012628).
- serial: 8250_mid: Disable DMA for selected platforms
(bsc#1012628).
- xfs: use null daddr for unset first bad log block (bsc#1012628).
- xfs: release dquot buffer after dqflush failure (bsc#1012628).
- xfs: pass back updated nb from xfs_growfs_compute_deltas
(bsc#1012628).
- xfs: only log freed extents for the current RTG in zoned growfs
(bsc#1012628).
- xfs: initialize iomap->flags earlier in xfs_bmbt_to_iomap
(bsc#1012628).
- xfs: fix unreachable BIGTIME check in dquot flush validation
(bsc#1012628).
- xfs: fix pointer arithmetic error on 32-bit systems
(bsc#1012628).
- xfs: fix exchmaps reservation limit check (bsc#1012628).
- xfs: fix memory leak in xfs_dqinode_metadir_create()
(bsc#1012628).
- bpf: Reject fragmented frames in devmap (bsc#1012628).
- bpf: Restore sysctl new-value from 1 to 0 (bsc#1012628).
- bpf: Validate BTF repeated field counts before expansion
(bsc#1012628).
- bpf: Keep dynamic inner array lookups nullable (bsc#1012628).
- bpf: Allow LPM map access from sleepable BPF programs
(bsc#1012628).
- net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
(bsc#1012628).
- Revert "usb: typec: mux: avoid duplicated mux switches"
(bsc#1012628).
- usb: cdc_acm: Add quirk for Uniden BC125AT scanner
(bsc#1012628).
- usb: cdnsp: fix stream context array leak in
cdnsp_alloc_stream_info() (bsc#1012628).
- USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
(bsc#1012628).
- usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in
dwc3_ulpi_setup() (bsc#1012628).
- usb: dwc3: meson-g12a: fix refcount leak in
dwc3_meson_g12a_resume() (bsc#1012628).
- usb: free iso schedules on failed submit (bsc#1012628).
- usb: gadget: composite: fix dead empty check in the USB_DT_OTG
handler (bsc#1012628).
- usb: gadget: udc: Fix use-after-free in gadget_match_driver
(bsc#1012628).
- usb: gadget: f_printer: take kref only for successful open
(bsc#1012628).
- USB: idmouse: fix use-after-free on disconnect race
(bsc#1012628).
- USB: ldusb: fix use-after-free on disconnect race (bsc#1012628).
- USB: iowarrior: fix use-after-free on disconnect (bsc#1012628).
- USB: iowarrior: fix use-after-free on disconnect race
(bsc#1012628).
- USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
(bsc#1012628).
- USB: legousbtower: fix use-after-free on disconnect race
(bsc#1012628).
- usb: sl811-hcd: disable controller wakeup on remove
(bsc#1012628).
- USB: storage: include US_FL_NO_SAME in quirks mask
(bsc#1012628).
- usb: misc: usbio: bound bulk IN response length to the received
transfer (bsc#1012628).
- USB: misc: uss720: unregister parport on probe failure
(bsc#1012628).
- usb: mtu3: unmap request DMA on queue failure (bsc#1012628).
- USB: serial: keyspan_pda: fix information leak (bsc#1012628).
- USB: serial: option: add Telit Cinterion FE990D50 compositions
(bsc#1012628).
- USB: serial: digi_acceleport: fix broken rx after throttle
(bsc#1012628).
- USB: serial: digi_acceleport: fix hard lockup on disconnect
(bsc#1012628).
- USB: serial: digi_acceleport: fix write buffer corruption
(bsc#1012628).
- USB: ulpi: fix memory leak on registration failure
(bsc#1012628).
- USB: usb-storage: ene_ub6250: restore media-ready check
(bsc#1012628).
- usbip: tools: support SuperSpeedPlus devices (bsc#1012628).
- usbip: vudc: fix NULL deref in vep_dequeue() (bsc#1012628).
- usb: typec: anx7411: use devm_pm_runtime_enable() (bsc#1012628).
- usb: typec: class: drop PD lookup reference (bsc#1012628).
- usb: typec: ps883x: Fix DP+USB3 configuration (bsc#1012628).
- usb: typec: tcpm: Fix VDM type for Enter Mode commands
(bsc#1012628).
- usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
(bsc#1012628).
- usb: typec: ucsi: Invert DisplayPort role assignment
(bsc#1012628).
- usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM
for DP alt mode (bsc#1012628).
- usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
(bsc#1012628).
- usb: typec: ucsi: cancel pending work on system suspend
(bsc#1012628).
- usb: gadget: f_fs: initialize reset_work at allocation time
(bsc#1012628).
- usb: gadget: f_fs: Fix DMA fence leak (bsc#1012628).
- usb: gadget: f_fs: Initialize epfile->in early to fix endpoint
direction checks (bsc#1012628).
- usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
(bsc#1012628).
- block: skip sync_blockdev() on surprise removal in
bdev_mark_dead() (bsc#1012628).
- wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon
(bsc#1012628).
- udf: validate free block extents against the partition length
(bsc#1012628).
- udf: validate VAT header length against the VAT inode size
(bsc#1012628).
- udf: validate sparing table length as an entry count, not a
byte count (bsc#1012628).
- hwrng: jh7110 - fix refcount leak in starfive_trng_read()
(bsc#1012628).
- crypto: atmel-sha204a - drop hwrng quality reduction for
ATSHA204A (bsc#1012628).
- crypto: atmel-sha204a - fail on hwrng registration error in
probe path (bsc#1012628).
- nvme: target: rdma: fix ndev refcount leak on queue connect
(bsc#1012628).
- block: partitions: fix of_node refcount leak in of_partition()
(bsc#1012628).
- dm-ioctl: report an error if a device has no table
(bsc#1012628).
- nvme-multipath: set BIO_REMAPPED on bios remapped to per-path
namespace disks (bsc#1012628).
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get
Log Page (bsc#1012628).
- btrfs: fix false IO failure after falling back to buffered write
(bsc#1012628).
- nvmet-auth: validate reply message payload bounds against
transfer length (bsc#1012628).
- btrfs: check and set EXTENT_DELALLOC_NEW before clearing
EXTENT_DELALLOC (bsc#1012628).
- btrfs: do not trim a device which is not writeable
(bsc#1012628).
- partitions: aix: bound the pp_count scan to the ppe array
(bsc#1012628).
- btrfs: fix incorrect buffered IO fallback for append direct
writes (bsc#1012628).
- isofs: bound Rock Ridge symlink components to the SL record
(bsc#1012628).
- crypto: af_alg - Remove zero-copy support from skcipher and aead
(bsc#1012628).
- crypto: caam - use print_hex_dump_devel to guard key hex dumps
(bsc#1012628).
- crypto: caam - use print_hex_dump_devel to guard key hex dumps
again (bsc#1012628).
- crypto: chacha20poly1305 - validate poly1305 template argument
(bsc#1012628).
- crypto: crypto4xx - Remove insecure and unused rng_alg
(bsc#1012628).
- crypto: ecc - Fix carry overflow in vli multiplication
(bsc#1012628).
- crypto: hisi-trng - Remove crypto_rng interface (bsc#1012628).
- crypto: pcrypt - restore callback for non-parallel fallback
(bsc#1012628).
- crypto: tegra - fix refcount leak in tegra_se_host1x_submit()
(bsc#1012628).
- crypto: loongson - Select CRYPTO_RNG (bsc#1012628).
- crypto: loongson - Remove broken and unused loongson-rng
(bsc#1012628).
- crypto: ccp - Do not initialize SNP for SEV ioctls
(bsc#1012628).
- crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)
(bsc#1012628).
- crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)
(bsc#1012628).
- crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)
(bsc#1012628).
- crypto: drbg - Fix returning success on failure in CTR_DRBG
(bsc#1012628).
- crypto: drbg - Fix misaligned writes in CTR_DRBG and HASH_DRBG
(bsc#1012628).
- crypto: drbg - Fix ineffective sanity check (bsc#1012628).
- crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
(bsc#1012628).
- crypto: drbg - Fix the fips_enabled priority boost
(bsc#1012628).
- crypto: qat - centralize bus master enable (bsc#1012628).
- crypto: qat - fix restarting state leak on allocation failure
(bsc#1012628).
- crypto: qat - handle sysfs-triggered reset callbacks
(bsc#1012628).
- crypto: qat - keep VFs enabled during reset (bsc#1012628).
- crypto: qat - notify fatal error before AER reset preparation
(bsc#1012628).
- crypto: qat - protect service table iterations with service_lock
(bsc#1012628).
- crypto: qat - skip restart for down devices (bsc#1012628).
- crypto: qat - validate RSA CRT component lengths (bsc#1012628).
- crypto: qat - factor out AER reset helpers (bsc#1012628).
- crypto: talitos - use dma_sync_single_for_cpu() before reading
descriptor header (bsc#1012628).
- crypto: talitos - add chaining of arbitrary number of descriptor
for the SEC1 (bsc#1012628).
- crypto: talitos - move dma unmapping code in flush_channel()
into a standalone dma_unmap_request() function (bsc#1012628).
- crypto: talitos - move dma mapping code in talitos_submit()
into a standalone dma_map_request() function (bsc#1012628).
- crypto: talitos - move code in current_desc_hdr() into a
standalone function (bsc#1012628).
- crypto: talitos/hash - prepare SEC1 descriptor chaining,
remove additional descriptor (bsc#1012628).
- crypto: talitos/hash - use descriptor chaining for SEC1 instead
of workqueue (bsc#1012628).
- crypto: talitos/hash - drop workqueue mechanism for SEC1
(bsc#1012628).
- crypto: talitos/hash - rename first_desc/last_desc to
first_request/last_request (bsc#1012628).
- crypto: talitos/hash - remove useless wrapper (bsc#1012628).
- crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation
(bsc#1012628).
- arm64: fpsimd: Fix type mismatch in sme_{save,load}_state()
(bsc#1012628).
- spi: fsl-lpspi: replace dmaengine_terminate_all() with
dmaengine_terminate_sync() (bsc#1012628).
- spi: fsl-lpspi: terminate the RX channel on TX prepare failure
path (bsc#1012628).
- x86/mm: Fix freeing of PMD-sized vmemmap pages (bsc#1012628).
- EDAC/i10nm: Don't fail probing if ADXL is missing (bsc#1012628).
- watchdog: apple: Add "apple,t8103-wdt" compatible (bsc#1012628).
- regulator: scmi: fix of_node refcount leak in
scmi_regulator_probe() (bsc#1012628).
- i2c: core: fix hang on adapter registration failure
(bsc#1012628).
- perf/aux: Fix page UAF in map_range() (bsc#1012628).
- liveupdate: reject LIVEUPDATE_IOCTL_CREATE_SESSION with invalid
name length (bsc#1012628).
- selftests/liveupdate: add test cases for
LIVEUPDATE_IOCTL_CREATE_SESSION calls with invalid length
(bsc#1012628).
- tracing: Prevent out-of-bounds read in glob matching
(bsc#1012628).
- audit: fix potential integer overflow in audit_log_n_hex()
(bsc#1012628).
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
(bsc#1012628).
- rqspinlock: Fix order in raw_res_spin_(un)lock_irq to allow
schedule (bsc#1012628).
- module: decompress: check return value of
module_extend_max_pages() (bsc#1012628).
- vt: fix spurious modifier in CSI/cursor key sequences
(bsc#1012628).
- exfat: preserve benign secondary entries during rename and move
(bsc#1012628).
- exfat: bound uniname advance in exfat_find_dir_entry()
(bsc#1012628).
- NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
(bsc#1012628).
- riscv: mm: Define DIRECT_MAP_PHYSMEM_END (bsc#1012628).
- riscv: mm: Unconditionally sfence.vma for spurious fault
(bsc#1012628).
- lib/test_hmm: use kvfree() to free kvcalloc() allocations
(bsc#1012628).
- mm: fix mmap errno value when MAP_DROPPABLE is not supported
(bsc#1012628).
- selftests: mm: fix and speedup "droppable" test (bsc#1012628).
- mm: page_ext: add count limit to page_ext_iter_next to prevent
invalid PFN access (bsc#1012628).
- mm: do file ownership checks with the proper mount idmap
(bsc#1012628).
- selftests/mm: pagemap_ioctl: use the correct page size for
transact_test() (bsc#1012628).
- selftests/mm: fix ksft_process_madv.sh test category
(bsc#1012628).
- nouveau/vmm: fix another SPT/LPT race (bsc#1012628).
- bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is
uninitialized (bsc#1012628).
- iommu/vt-d: Avoid WARNING in sva unbind path (bsc#1012628).
- iommu/amd: Don't split flush for amd_iommu_domain_flush_all()
(bsc#1012628).
- iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read
(bsc#1012628).
- iommufd: Fix data_len byte-count vs element-count mismatch
(bsc#1012628).
- iommufd: Move vevent memory allocation outside spinlock
(bsc#1012628).
- iommufd: Set veventq_depth upper bound (bsc#1012628).
- iommufd: Rewind header length in done if
iommufd_veventq_fops_read() fails (bsc#1012628).
- iommufd: Reject invalid read count in
iommufd_veventq_fops_read() (bsc#1012628).
- iommufd: Propagate allocation failure in
iommufd_veventq_deliver_fetch() (bsc#1012628).
- iommufd: Reject invalid read count in iommufd_fault_fops_read()
(bsc#1012628).
- iommufd: Break the loop on failure in iommufd_fault_fops_read()
(bsc#1012628).
- iommufd: Avoid partial fault group delivery in
iommufd_fault_fops_read() (bsc#1012628).
- iommufd: Set upper bounds on cache invalidation entry_num and
entry_len (bsc#1012628).
- audit: fix removal of dangling executable rules (bsc#1012628).
- landlock: Set audit_net.sk for socket access checks
(bsc#1012628).
- selftests/landlock: Explicitly disable audit in teardowns
(bsc#1012628).
- landlock: Account all audit data allocations to user space
(bsc#1012628).
- selftests/landlock: Filter dealloc records in
audit_count_records() (bsc#1012628).
- selftests/landlock: Increase default audit socket timeout
(bsc#1012628).
- KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB
(bsc#1012628).
- LoongArch: KVM: Add missing slots_lock for device
register/unregister (bsc#1012628).
- KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU
(bsc#1012628).
- KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM
hyp vCPU (bsc#1012628).
- KVM: SEV: Pin source page for write when adding CPUID data
for SNP guest (bsc#1012628).
- KVM: x86: Add dedicated API for getting mask of accelerated
x2APIC MSRs (bsc#1012628).
- KVM: SVM: Disable x2AVIC RDMSR interception for MSRs KVM
actually supports (bsc#1012628).
- KVM: SVM: Only disable x2AVIC WRMSR interception for MSRs that
are accelerated (bsc#1012628).
- KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all
injected #DBs (bsc#1012628).
- KVM: SEV: Don't terminate SNP VMs on #VMGEXIT without a
registered GHCB (bsc#1012628).
- KVM: VMX: Handle bad values on proxied writes to LBR MSRs
(bsc#1012628).
- KVM: TDX: Account all non-transient page allocations for per-TD
structures (bsc#1012628).
- KVM: x86: Ensure vendor's exit handler runs before fastpath
userspace exits (bsc#1012628).
- KVM: guest_memfd: Treat memslot binding offset+size as unsigned
values (bsc#1012628).
- KVM: arm64: Don't leak PFN when kvm_translate_vncr() races
MMU notifier (bsc#1012628).
- udmabuf: fix DMA direction mismatch in release_udmabuf()
(bsc#1012628).
- dma-buf/udmabuf: skip redundant cpu sync to fix cacheline
EEXIST warning (bsc#1012628).
- svcrdma: wake sq waiters when the transport closes
(bsc#1012628).
- Revert "svcrdma: Use contiguous pages for RDMA Read sink
buffers" (bsc#1012628).
- fpga: dfl-afu: validate DMA mapping length in
afu_dma_map_region() (bsc#1012628).
- i2c: core: fix irq domain leak on adapter registration failure
(bsc#1012628).
- i2c: core: fix NULL-deref on adapter registration failure
(bsc#1012628).
- i2c: core: fix adapter probe deferral loop (bsc#1012628).
- i2c: core: fix adapter debugfs creation (bsc#1012628).
- i2c: core: fix adapter deregistration race (bsc#1012628).
- i2c: mpc: Fix timeout calculations (bsc#1012628).
- i2c: davinci: Unregister cpufreq notifier on probe failure
(bsc#1012628).
- i2c: stm32f7: truncate clock period instead of rounding it
(bsc#1012628).
- i2c: imx-lpi2c: mark I2C adapter when hardware is powered down
(bsc#1012628).
- i2c: i801: fix hardware state machine corruption in error path
(bsc#1012628).
- Input: synaptics-rmi4 - unregister function handlers on physical
driver registration failure (bsc#1012628).
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
(bsc#1012628).
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED
count (bsc#1012628).
- Input: elan_i2c - prevent division by zero and arithmetic
underflow (bsc#1012628).
- Input: goodix - clamp the device-reported contact count
(bsc#1012628).
- Input: iforce - bound the device-reported force-feedback effect
index (bsc#1012628).
- Input: mms114 - fix touch indexing for MMS134S and MMS136
(bsc#1012628).
- Input: ads7846 - don't use scratch for tx_buf when clearing
register (bsc#1012628).
- Input: touchwin - reset the packet index on every complete
packet (bsc#1012628).
- Input: mms114 - reject an oversized device packet size
(bsc#1012628).
- Input: gscps2 - advance receive buffer write index
(bsc#1012628).
- Input: maplemouse - fix NULL pointer dereference in open()
(bsc#1012628).
- Input: mms114 - fix multi-touch slot corruption (bsc#1012628).
- Input: maple_keyb - set driver data before registering input
device (bsc#1012628).
- Input: maplemouse - set driver data before registering input
device (bsc#1012628).
- Input: maplecontrol - set driver data before registering input
device (bsc#1012628).
- RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in
rdma_write_sg (bsc#1012628).
- RDMA/core: Fix broadcast address falsely detected as local
(bsc#1012628).
- RDMA/siw: bound Read Response placement to the RREAD length
(bsc#1012628).
- fuse: back uncached readdir buffers with pages (bsc#1012628).
- fuse: avoid 32-bit prune notification count wrap (bsc#1012628).
- Revert "fuse: fix conversion of fuse_reverse_inval_entry()
to start_removing()" (bsc#1012628).
- fuse: fix device node leak in cuse_process_init_reply()
(bsc#1012628).
- fuse: do not use start_removing_noperm() (bsc#1012628).
- fuse: re-lock request before returning from fuse_ref_folio()
(bsc#1012628).
- fuse: fix io-uring background queue dispatch on request
completion (bsc#1012628).
- fuse: don't block in fuse_get_dev() for non-sync_init case
(bsc#1012628).
- fuse: clear intr_entry in fuse_resend and
fuse_remove_pending_req (bsc#1012628).
- fuse-uring: fix EFAULT clobber in fuse_uring_commit
(bsc#1012628).
- fuse-uring: fix data races on ring->ready (bsc#1012628).
- fuse-uring: fix moving cancelled entry to ent_in_userspace list
(bsc#1012628).
- fuse-uring: end fuse_req on io-uring cancel task work
(bsc#1012628).
- fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues
(bsc#1012628).
- fuse-uring: Avoid queue->stopped races and set/read that value
under lock (bsc#1012628).
- fuse-uring: make a fuse_req on SQE commit only findable after
memcpy (bsc#1012628).
- fuse-uring: remove request-less entries from ent_w_req_queue
to fix NULL deref (bsc#1012628).
- ALSA: doc: usb-audio: Add doc for
QUIRK_FLAG_IFB_SILENCE_ON_EMPTY (bsc#1012628).
- timekeeping: Register default clocksource before taking
tk_core.lock (bsc#1012628).
- Bluetooth: 6lowpan: Fix using chan->conn as indication to no
remote netdev (bsc#1012628).
- smb: client: reject overlapping data areas in SMB2 responses
(bsc#1012628).
- xfs: fix null pointer dereference in tracepoint (bsc#1012628).
- xfs: fail recovery on a committed log item with no regions
(bsc#1012628).
- xfs: resample the data fork mapping after cycling ILOCK
(bsc#1012628).
- xfs: don't wrap around quota ids in dqiterate (bsc#1012628).
- xfs: grab rtrmap btree when checking rgsuper (bsc#1012628).
- xfs: use the rt version of the cow staging checker
(bsc#1012628).
- xfs: set xfarray killable sort correctly (bsc#1012628).
- xfs: handle non-inode owners for rtrmap record checking
(bsc#1012628).
- xfs: clamp timestamp nanoseconds correctly (bsc#1012628).
- xfs: fully check the parent handle when it points to the rootdir
(bsc#1012628).
- xfs: don't zap bmbt forks if they are MAXLEVELS tall
(bsc#1012628).
- xfs: fix off-by-one error when calling xchk_xref_has_rt_owner
(bsc#1012628).
- xfs: write the rg superblock when fixing it (bsc#1012628).
- xfs: use rtrefcount btree cursor in xchk_xref_is_rt_cow_staging
(bsc#1012628).
- Rename to
patches.kernel.org/7.1.4-030-wifi-rtw89-correct-drop-logic-for-malformed-AMP.patch.
- Rename to
patches.kernel.org/7.1.4-184-io_uring-nop-fix-file-reference-leak-with-IOSQE.patch.
- commit 9ad6d99
* Tue Jul 14 2026 jslaby@suse.cz
- wifi: rtw89: correct drop logic for malformed AMPDU frames
(bsc#1271359).
- commit 5a35dfd
* Fri Jul 10 2026 jslaby@suse.cz
- Refresh
patches.suse/x86-alternative-dump-more-on-failure-in-__text_poke.patch.
Fixed 32bit build warnings.
- commit 7018243
* Fri Jul 10 2026 jslaby@suse.cz
- Refresh
patches.suse/x86-alternative-dump-more-on-failure-in-__text_poke.patch.
Dump also ptes.
- commit 7ed9bfa
* Fri Jul 10 2026 jslaby@suse.cz
- x86/alternative: dump more on failure in __text_poke()
(bsc#1271202).
- commit 5482b39
* Fri Jul 10 2026 jslaby@suse.cz
- io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE
(https://github.com/axboe/liburing/issues/1611).
- commit c00d577
* Thu Jul 09 2026 jslaby@suse.cz
- Delete
patches.suse/wifi-iwlwifi-Add-missing-firmware-info-for-bz-b0-mod.patch.
Drop as per:
https://bugzilla.suse.com/show_bug.cgi?id=1252084#c20
> Let's close this one. The upstream linux-firmware includes more newer
> versions, so the condition doesn't apply any longer.
> It's a a Whack-a-Mole issue, after all...
(cherry picked from commit 00fa88f271a1bd686db8274ca442c4e1bbcce68c)
- commit 14ca9d4
* Tue Jul 07 2026 schwab@suse.de
- config: riscv64: raise CONFIG_NR_CPUS
Set CONFIG_NR_CPUS to the new default of 256.
(cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e
* Sat Jul 04 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
(bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
(bsc#1012628 CVE-2026-53359).
- Update
patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
(bsc#1012628 CVE-2026-53362).
suse-add-cves
- commit 1cb5006
* Sat Jul 04 2026 jslaby@suse.cz
- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
(bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
(bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
(bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
(bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
(bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
(bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
(bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
(bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
(bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
(bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
(bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
(bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
(bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
(bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
(bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
(bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
(bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
(bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
(bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
(bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
(bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
(bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
(bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
(bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
(bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
(bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
(bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
(bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
(bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
(bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
(bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
(bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
(bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
(bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
(bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
(bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
(bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
(bsc#1012628).
- f2fs: pass correct iostat type for single node writes
(bsc#1012628).
- f2fs: reject setattr size changes on large folio files
(bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
(bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
(bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
(bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
(bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
(bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
(bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
__destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
(bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
(bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
(bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
(bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
(bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
(bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
(bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
(bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
(bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
(bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
(bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
(bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
(bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
(bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
(bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
(bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
(bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
(bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
(bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
(bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
(bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
(bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
(bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
(bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
(bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
(bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
(bsc#1012628).
- Rename to
patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777
* Fri Jul 03 2026 jslaby@suse.cz
- Refresh
patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
Update upstream status.
- commit 0709164
* Thu Jul 02 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
(bsc#1012628 CVE-2026-53354).
- Update
patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
(bsc#1012628 CVE-2026-53325 bsc#1269726).
suse-add-cves
- commit 992f18c
* Thu Jul 02 2026 jslaby@suse.cz
- KVM: x86/tdx: Do not print error message on non-present feature
(bsc#1270053).
- commit 15c3ef6
* Sat Jun 27 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
(bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022
* Sat Jun 27 2026 jslaby@suse.cz
- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
(bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
(bsc#1012628).
- drivers/base/memory: set mem->altmap after successful device
registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
(bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
(bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
(bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
(bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
(bsc#1012628).
- fuse: re-lock request before replacing page cache folio
(bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
(bsc#1012628).
- commit 8d2f9d1
* Fri Jun 26 2026 mkoutny@suse.com
- Update config files.
Enable PSI measurement (jsc#PED-15418).
Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042
* Fri Jun 26 2026 jslaby@suse.cz
- Refresh
patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
Update upstream status by: ./scripts/series_sort -u
- commit 594ea34
* Fri Jun 26 2026 jslaby@suse.cz
- Refresh
patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
Update upstream status.
- commit c4d22cc
* Tue Jun 23 2026 rbm@suse.com
- selftests/bpf: Tolerate missing files during install
(poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
(poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
(poo#202224).
- selftests/bpf: Tolerate test file compilation failures
(poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
(poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
(poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9
* Tue Jun 23 2026 jslaby@suse.cz
- ACPICA: Unbreak tools build after switching over to
strscpy_pad() (bsc#1268472).
- Delete
patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8
* Sun Jun 21 2026 jslaby@suse.cz
- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
(bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
(bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
(bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
(bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
100 CPU (bsc#1012628).
- Rename to
patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122
* Fri Jun 19 2026 jslaby@suse.cz
- HID: Input: Add battery list cleanup with devm action
(git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
(git-fixes).
- commit 396d3f6
* Thu Jun 18 2026 jslaby@suse.cz
- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47
* Mon Jun 15 2026 jslaby@suse.cz
- Delete
patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5
* Mon Jun 15 2026 jslaby@suse.cz
- Refresh
patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
Update upstream status.
- commit 2ebf0bc
* Mon Jun 15 2026 mkubecek@suse.cz
- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
for 7.1 kernel.
- commit e6e2f10
* Mon Jun 15 2026 ddiss@suse.de
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
(cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63
* Mon Jun 15 2026 ddiss@suse.de
- apparmor: fix uninitialised pointer passed to
audit_log_untrustedstring() (bsc#1259668).
(cherry picked from commit 65d5a585a9fea5f40a1da0e20217aa062f95b44a)
- apparmor: don't audit files pointing to aa_null.dentry
(bsc#1259668).
(cherry picked from commit 43454f55637bff80a9bbe035dd7a8c52cb494e83)
- apparmor: fix uninitialised pointer passed to
audit_log_untrustedstring() (bsc#1259668).
- apparmor: don't audit files pointing to aa_null.dentry
(bsc#1259668).
- commit d8bfaae
* Sun Jun 14 2026 mkubecek@suse.cz
- update to 7.1 final
- refresh configs
- commit 957a9a8
* Sun Jun 14 2026 mkubecek@suse.cz
- config: update and reenable armv7hl configs
- option values copied from armv7hl
- commit cce93c7
* Sun Jun 14 2026 mkubecek@suse.cz
- config: update and reenable armv7hl configs
- option values copied from arm64 except
- DRM_TILCDC_PANEL_LEGACY=y
- CLK_RV1103B=y
- commit 8a5016d
* Sun Jun 14 2026 mkubecek@suse.cz
- config: update and reenable arm64 configs
- option values copied from x86_64, i386 and riscv64 except
- ARM64_ERRATUM_4193714=y
- ARM64_LSUI=n
- STM32_DBG_BUS=n
- DWMAC_NUVOTON=m
- PINCTRL_ELIZA=m
- PINCTRL_HAWI=m
- PINCTRL_IPQ5210=m
- PINCTRL_MILOS_LPASS_LPI=m
- PINCTRL_SDM670_LPASS_LPI=m
- PINCTRL_RTD1625=m
- CHARGER_MAX77759=m
- MACSMC_POWER=m
- SND_SOC_TEGRA_WM8962=n
- SND_SOC_TEGRA_CPCAP=n
- USB_DWC3_IMX=m
- MMC_SDHCI_BST=m
- CLK_ELIZA_DISPCC=m
- CLK_ELIZA_TCSRCC=m
- CLK_GLYMUR_GPUCC=m
- CLK_GLYMUR_VIDEOCC=m
- CLK_NORD_GCC=m
- IPQ_GCC_5210=m
- CLK_NORD_TCSRCC=m
- SM_GPUCC_8750=m
- ARCH_R9A08G046=y
- ARCH_TEGRA_238_SOC=y
- RESET_SKY1=y
- NVIDIA_TEGRA410_CMEM_LATENCY_PMU=m
- NVIDIA_TEGRA410_C2C_PMU=m
- INTERCONNECT_QCOM_ELIZA=m
- NTFS_DEBUG=n
- NTFS_FS_POSIX_ACL=y
- commit 4326118
* Thu Jun 11 2026 jslaby@suse.cz
- Update config files. Disable CAIF (bsc#1266716 CVE-2026-45866).
The whole code is removed in 7.1 anyway by 6d5431555de0 ("caif: remove
CAIF NETWORK LAYER"). Let's be proactive as there are holes.
- commit 3512c44
* Wed Jun 10 2026 jslaby@suse.cz
- Linux 7.0.12 (bsc#1012628).
- Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB
buffer size (bsc#1012628).
- ACPI: button: Fix ACPI GPE handler leak during removal
(bsc#1012628).
- ACPI: button: Enable wakeup GPEs for ACPI buttons at probe time
(bsc#1012628).
- xfrm: move policy_bydst RCU sync from per-netns .exit to
.pre_exit (bsc#1012628).
- net/sched: sch_sfb: Replace direct dequeue call with peek and
qdisc_dequeue_peeked (bsc#1012628).
- nfc: llcp: Fix use-after-free in llcp_sock_release()
(bsc#1012628).
- nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()
(bsc#1012628).
- xfrm: Check for underflow in xfrm_state_mtu (bsc#1012628).
- nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems
(bsc#1012628).
- tools/bootconfig: Fix buf leaks in apply_xbc (bsc#1012628).
- HID: remove duplicate hid_warn_ratelimited definition
(bsc#1012628).
- kunit: fix use-after-free in debugfs when using kunit.filter
(bsc#1012628).
- accel/rocket: fix UAF via dangling GEM handle in create_bo
(bsc#1012628).
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable
(bsc#1012628).
- netfilter: xt_cpu: prefer raw_smp_processor_id (bsc#1012628).
- netfilter: ebtables: fix OOB read in compat_mtw_from_user
(bsc#1012628).
- netfilter: nf_tables: fix dst corruption in same register
operation (bsc#1012628).
- tun: free page on short-frame rejection in tun_xdp_one()
(bsc#1012628).
- tap: free page on error paths in tap_get_user_xdp()
(bsc#1012628).
- tun: free page on build_skb failure in tun_xdp_one()
(bsc#1012628).
- vsock: keep poll shutdown state consistent (bsc#1012628).
- net: netlink: fix sending unassigned nsid after assigned one
(bsc#1012628).
- net: netlink: don't set nsid on local notifications
(bsc#1012628).
- net/smc: Do not re-initialize smc hashtables (bsc#1012628).
- net/iucv: fix locking in .getsockopt (bsc#1012628).
- scsi: core: Run queues for all non-SDEV_DEL devices from
scsi_run_host_queues (bsc#1012628).
- scsi: scsi_debug: Add missing newline in
scsi_debug_device_reset() (bsc#1012628).
- ipv4: free net->ipv4.sysctl_local_reserved_ports after
unregister_net_sysctl_table() (bsc#1012628).
- ALSA: hda: cs35l56: Fix system name string leaks (bsc#1012628).
- ALSA: pcm: oss: Fix setup list UAF on proc write error
(bsc#1012628).
- ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors
(bsc#1012628).
- net/mlx5: HWS: Reject unsupported remove-header action
(bsc#1012628).
- net: hsr: fix potential OOB access in supervision frame handling
(bsc#1012628).
- accel/ivpu: prevent uninitialized data bug in debugfs
(bsc#1012628).
- gpio: mxc: fix irq_high handling (bsc#1012628).
- drm/i915/aux: use polling when irqs are unavailable
(bsc#1012628).
- net: Avoid checksumming unreadable skb tail on trim
(bsc#1012628).
- ethtool: rss: avoid modifying the RSS context response
(bsc#1012628).
- ethtool: rss: add missing errno on RSS context delete
(bsc#1012628).
- ethtool: rss: fix falsely ignoring indir table updates
(bsc#1012628).
- ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
(bsc#1012628).
- ethtool: rss: fix hkey leak when indir_size is 0 (bsc#1012628).
- ethtool: rss: avoid device context leak on reply-build failure
(bsc#1012628).
- ethtool: module: call ethnl_ops_complete() on module flash
errors (bsc#1012628).
- ethtool: module: avoid leaking a netdev ref on module flash
errors (bsc#1012628).
- ethtool: module: avoid racy updates to dev->ethtool bitfield
(bsc#1012628).
- ethtool: module: check fw_flash_in_progress under rtnl_lock
(bsc#1012628).
- ethtool: module: fix cleanup if socket used for flashing
multiple devices (bsc#1012628).
- ethtool: cmis: require exact CDB reply length (bsc#1012628).
- ethtool: cmis: fix u16-to-u8 truncation of msleep_pre_rpl
(bsc#1012628).
- ethtool: cmis: validate start_cmd_payload_size from module
(bsc#1012628).
- ethtool: cmis: validate fw->size against start_cmd_payload_size
(bsc#1012628).
- cxl/test: Update mock dev array before calling
platform_device_add() (bsc#1012628).
- tunnels: load network headers after skb_cow() in
iptunnel_pmtud_build_icmp[v6]() (bsc#1012628).
- vxlan: do not reuse cached ip_hdr() value after
skb_tunnel_check_pmtu() (bsc#1012628).
- tunnels: do not assume transport header in
iptunnel_pmtud_check_icmp() (bsc#1012628).
- ksmbd: fix FSCTL permission bypass by adding a permission
check for FSCTL_SET_SPARSE (bsc#1012628).
- ASoC: codecs: simple-mux: Fix enum control bounds check
(bsc#1012628).
- drm/xe: Restore IDLEDLY regiter on engine reset (bsc#1012628).
- Bluetooth: 6lowpan: check skb_clone() return value in
send_mcast_pkt() (bsc#1012628).
- bonding: refuse to enslave CAN devices (bsc#1012628).
- bridge: Fix sleep in atomic context in netlink path
(bsc#1012628).
- bridge: Fix sleep in atomic context in sysfs path (bsc#1012628).
- ethtool: coalesce: cap profile updates at
NET_DIM_PARAMS_NUM_PROFILES (bsc#1012628).
- ethtool: tsconfig: fix reply error handling (bsc#1012628).
- ethtool: linkstate: fix unbalanced ethnl_ops_complete() on
PHY lookup error (bsc#1012628).
- ethtool: pse-pd: fix missing ethnl_ops_complete() (bsc#1012628).
- ethtool: tsconfig: fix missing ethnl_ops_complete()
(bsc#1012628).
- ethtool: tsinfo: fix uninitialized stats on the by-PHC path
(bsc#1012628).
- ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on
prepare failure (bsc#1012628).
- ethtool: strset: fix header attribute index in
ethnl_req_get_phydev() (bsc#1012628).
- ethtool: eeprom: add missing ethnl_ops_begin() / _complete()
during fallback (bsc#1012628).
- ethtool: eeprom: add more safeties to EEPROM Netlink fallback
(bsc#1012628).
- ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()
(bsc#1012628).
- net/sched: Revert "net/sched: Restrict conditions for adding
duplicating netems to qdisc tree" (bsc#1012628).
- net/sched: fix packet loop on netem when duplicate is on
(bsc#1012628).
- net: Introduce skb tc depth field to track packet loops
(bsc#1012628).
- net/sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress
mirred loop (bsc#1012628).
- net/sched: act_mirred: Fix blockcast recursion bypass leading
to stack overflow (bsc#1012628).
- net/sched: act_mirred: Fix return code in early mirred redirect
error paths (bsc#1012628).
- net: hibmcge: disable Relaxed Ordering to fix RX packet
corruption (bsc#1012628).
- net: hibmcge: move dma_rmb() after dma_sync_single_for_cpu()
in RX path (bsc#1012628).
- net/handshake: Use spin_lock_bh for hn_lock (bsc#1012628).
- nvme-tcp: store negative errno in queue->tls_err (bsc#1012628).
- net/handshake: Pass negative errno through handshake_complete()
(bsc#1012628).
- net/handshake: hand off the pinned file reference to accept_doit
(bsc#1012628).
- net/handshake: Take a long-lived file reference at submit
(bsc#1012628).
- net/handshake: Drain pending requests at net namespace exit
(bsc#1012628).
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime
(bsc#1012628).
- dpll: zl3073x: add die temperature reporting for supported chips
(bsc#1012628).
- dpll: export __dpll_device_change_ntf() for use under dpll_lock
(bsc#1012628).
- dpll: zl3073x: use __dpll_device_change_ntf() and remove
change_work (bsc#1012628).
- Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration
success (bsc#1012628).
- Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp
(bsc#1012628).
- Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device
close (bsc#1012628).
- Bluetooth: hci_sync: Reset device counters in
hci_dev_close_sync() (bsc#1012628).
- gpio: adnp: fix flow control regression caused by scoped_guard()
(bsc#1012628).
- gpio: virtuser: Fix uninitialized data bug in
gpio_virtuser_direction_do_write() (bsc#1012628).
- gpio: rockchip: convert bank->clk to devm_clk_get_enabled()
(bsc#1012628).
- gpio: rockchip: teardown bugs and resource leaks (bsc#1012628).
- net: mana: Add NULL guards in teardown path to prevent panic
on attach failure (bsc#1012628).
- net: mana: Skip redundant detach on already-detached port
(bsc#1012628).
- sctp: fix race between sctp_wait_for_connect and peeloff
(bsc#1012628).
- net: pcs: pcs-mtk-lynxi: fix bpi-r3 serdes configuration
(bsc#1012628).
- vsock/virtio: bind uarg before filling zerocopy skb
(bsc#1012628).
- ipv6: fix possible infinite loop in rt6_fill_node()
(bsc#1012628).
- ipv6: fix possible infinite loop in fib6_select_path()
(bsc#1012628).
- net: skbuff: fix pskb_carve leaking zcopy pages (bsc#1012628).
- Revert "ipv6: preserve insertion order for same-scope addresses"
(bsc#1012628).
- Revert "x86/fpu: Refine and simplify the magic number check
during signal return" (bsc#1012628).
- drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS
DPCD register (bsc#1012628).
- drm/i915/psr: Read Intel DPCD workaround register (bsc#1012628).
- drm/i915/psr: Apply Intel DPCD workaround when SDP on prior
line used (bsc#1012628).
- iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer
(bsc#1012628).
- iio: imu: adis16550: fix stack leak in trigger handler
(bsc#1012628).
- iio: pressure: bmp280: fix stack leak in bmp580 trigger handler
(bsc#1012628).
- usb: typec: ucsi: ccg: reject firmware images without a ':'
record header (bsc#1012628).
- usb: typec: tcpm: validate VDO count in Discover Identity ACK
handlers (bsc#1012628).
- usb: typec: tcpm: bound altmode_desc[] per iteration in
svdm_consume_modes() (bsc#1012628).
- usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without
a payload VDO (bsc#1012628).
- usb: typec: altmodes/displayport: validate count before reading
Status Update VDO (bsc#1012628).
- usb: typec: wcove: don't write past struct pd_message in
wcove_read_rx_buffer() (bsc#1012628).
- usb: typec: tcpm/tcpci_maxim: validate header NDO against
RX_BYTE_CNT (bsc#1012628).
- usb: typec: ucsi: validate connector number in
ucsi_connector_change() (bsc#1012628).
- USB: serial: safe_serial: fix memory corruption with small
endpoint (bsc#1012628).
- media: rc: igorplugusb: fix control request setup packet
(bsc#1012628).
- Input: ims-pcu - fix usb_free_coherent() size in
ims_pcu_buffers_free() (bsc#1012628).
- USB: serial: cypress_m8: fix memory corruption with small
endpoint (bsc#1012628).
- HID: quirks: Add ALWAYS_POLL quirk for SIGMACHIP USB mouse
(bsc#1012628).
- Bluetooth: btusb: Allow firmware re-download when version
matches (bsc#1012628).
- mm/vmalloc: do not trigger BUG() on BH disabled context
(bsc#1012628).
- hpfs: fix a crash if hpfs_map_dnode_bitmap fails (bsc#1012628).
- mm/damon/sysfs-schemes: delete tried region in regions_rmdirs()
(bsc#1012628).
- ipc: limit next_id allocation to the valid ID range
(bsc#1012628).
- mm: memcontrol: propagate NMI slab stats to memcg vmstats
(bsc#1012628).
- mm/migrate_device: fix pgtable leak in
migrate_vma_insert_huge_pmd_page (bsc#1012628).
- memfd: deny writeable mappings when implying SEAL_WRITE
(bsc#1012628).
- zram: fix use-after-free in zram_writeback_endio (bsc#1012628).
- mm/rmap: initialize nr_pages to 1 at loop start in
try_to_unmap_one (bsc#1012628).
- auxdisplay: line-display: fix OOB read on zero-length
message_store() (bsc#1012628).
- smb: client: fix uninitialized variable in smb2_writev_callback
(bsc#1012628).
- Bluetooth: L2CAP: use chan timer to close channels in
cleanup_listen() (bsc#1012628).
- Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout()
on !conn (bsc#1012628).
- Bluetooth: HIDP: fix missing length checks in
hidp_input_report() (bsc#1012628).
- Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1012628).
- Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock
(bsc#1012628).
- Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()
(bsc#1012628).
- Bluetooth: hci_qca: Use 100 ms SSR delay for rampatch and NVM
loading (bsc#1012628).
- Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync
(bsc#1012628).
- Input: xpad - fix out-of-bounds access for Share button
(bsc#1012628).
- parport: Fix race between port and client registration
(bsc#1012628).
- rust_binder: Avoid holding lock when dropping delivered_death
(bsc#1012628).
- rust_binder: avoid calling pending_oneway_finished() on
TF_UPDATE_TXN (bsc#1012628).
- USB: cdc-acm: Fix bit overlap and move quirk definitions to
header (bsc#1012628).
- KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor
(bsc#1012628).
- KVM: arm64: PMU: Preserve AArch32 counter low bits
(bsc#1012628).
- KVM: SVM: Flush the current TLB when transitioning from xAVIC =>
x2AVIC (bsc#1012628).
- KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use
(bsc#1012628).
- KVM: SEV: Ignore Port I/O requests of length '0' (bsc#1012628).
- KVM: SEV: Use the size of the PSC header as the minimum size
for PSC requests (bsc#1012628).
- KVM: SEV: WARN if KVM attempts to setup scratch area with
min_len==0 (bsc#1012628).
- KVM: SEV: Compute the correct max length of the in-GHCB scratch
area (bsc#1012628).
- KVM: SEV: Check PSC request indices against the actual size
of the buffer (bsc#1012628).
- KVM: SEV: Use READ_ONCE() when reading entries/indices from
PSC buffer (bsc#1012628).
- KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc()
(bsc#1012628).
- gpio: shared: undo the vote of the proxy on GPIO free
(bsc#1012628).
- gpio: shared: fix deadlock on shared proxy's parent removal
(bsc#1012628).
- gpio: shared: fix lockdep false positive by removing unneeded
lock (bsc#1012628).
- Disable -Wattribute-alias for clang-23 and newer (bsc#1012628).
- iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for
dual mux (bsc#1012628).
- iio: adc: npcm: fix unbalanced clk_disable_unprepare()
(bsc#1012628).
- iio: dac: ad3530r: Fix AD3531/AD3531R powerdown mode strings
(bsc#1012628).
- iio: dac: max5821: fix return value check in powerdown sync
(bsc#1012628).
- iio: dac: ad5686: fix ref bit initialization for single-channel
parts (bsc#1012628).
- iio: dac: ad5686: fix input raw value check (bsc#1012628).
- iio: dac: ad5686: acquire lock when doing powerdown control
(bsc#1012628).
- iio: dac: ad5686: fix powerdown control on dual-channel devices
(bsc#1012628).
- iio: adc: mt6359: fix unchecked return value in mt6358_read_imp
(bsc#1012628).
- iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw
(bsc#1012628).
- iio: adc: ad4695: Fix call ordering in offload buffer postenable
(bsc#1012628).
- iio: adc: nxp-sar-adc: fix division by zero in write_raw
(bsc#1012628).
- iio: adc: nxp-sar-adc: Avoid division by zero (bsc#1012628).
- iio: adc: nxp-sar-adc: zero-initialize dma_slave_config
(bsc#1012628).
- iio: gyro: itg3200: fix i2c read into the wrong stack location
(bsc#1012628).
- iio: gyro: adis16260: fix division by zero in write_raw
(bsc#1012628).
- iio: ssp_sensors: cancel delayed work_refresh on remove
(bsc#1012628).
- iio: temperature: tsys01: fix broken PROM checksum validation
(bsc#1012628).
- iio: magnetometer: st_magn: fix default DRDY pin selection
for LIS2MDL (bsc#1012628).
- iio: light: veml6070: Fix resource leak in probe error path
(bsc#1012628).
- iio: Fix iio_multiply_value use in
iio_read_channel_processed_scale (bsc#1012628).
- iio: chemical: mhz19b: reject oversized serial replies
(bsc#1012628).
- iio: chemical: scd30: fix division by zero in write_raw
(bsc#1012628).
- iio: light: cm3323: fix reg_conf not being initialized correctly
(bsc#1012628).
- iio: buffer: hw-consumer: fix use-after-free in error path
(bsc#1012628).
- iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf()
(bsc#1012628).
- USB: serial: omninet: fix memory corruption with small endpoint
(bsc#1012628).
- usb: cdns3: gadget: fix request skipping after clearing halt
(bsc#1012628).
- usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy
acquisition failure (bsc#1012628).
- usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call
permanently leaks the runtime PM usage counter across
bind/unbind cycles (bsc#1012628).
- usb: dwc2: Fix use after free in debug code (bsc#1012628).
- Input: elan_i2c - validate firmware size before use
(bsc#1012628).
- i2c: davinci: fix division by zero on missing clock-frequency
(bsc#1012628).
- x86/ftrace: Relocate %rip-relative percpu refs in dynamic
trampolines (bsc#1012628).
- wireguard: send: append trailer after expanding head
(bsc#1012628).
- bpf: sockmap: fix tail fragment offset in bpf_msg_push_data
(bsc#1012628).
- macsec: fix replay protection at XPN lower-PN wrap
(bsc#1012628).
- ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()
(bsc#1012628).
- ASoC: qcom: q6asm-dai: fix error handling in prepare and
set_params (bsc#1012628).
- octeontx2-af: validate body pcifunc in
rvu_mbox_handler_rep_event_notify (bsc#1012628).
- ipv6: exthdrs: refresh nh after handling HAO option
(bsc#1012628).
- ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate()
(bsc#1012628).
- ipv6: validate extension header length before copying to cmsg
(bsc#1012628).
- xfrm: input: hold netns during deferred transport reinjection
(bsc#1012628).
- l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname
(bsc#1012628).
- ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1012628).
- net: skbuff: fix missing zerocopy reference in pskb_carve
helpers (bsc#1012628).
- spi: spi-mem: avoid mutating op template in
spi_mem_supports_op() (bsc#1012628).
- HID: wacom: Fix OOB write in wacom_hid_set_device_mode()
(bsc#1012628).
- iommu, debugobjects: avoid gcc-16.1 section mismatch warnings
(bsc#1012628).
- nfc: hci: fix out-of-bounds read in HCP header parsing
(bsc#1012628).
- xfrm: route MIGRATE notifications to caller's netns
(bsc#1012628).
- xfrm: ipcomp: Free destination pages on acomp errors
(bsc#1012628).
- xfrm: ah: use skb_to_full_sk in async output callbacks
(bsc#1012628).
- ALSA: scarlett2: Fix 2i2 Gen 4 direct monitor gain on firmware
2417 (bsc#1012628).
- ALSA: firewire-motu: Protect register DSP event queue positions
(bsc#1012628).
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq
RST without direction check (bsc#1012628).
- ASoC: qcom: q6asm-dai: close stream only when running
(bsc#1012628).
- ASoC: qcom: q6asm-dai: do not set stream state in event and
trigger callbacks (bsc#1012628).
- xfrm: esp: restore combined single-frag length gate
(bsc#1012628).
- ALSA: hda/realtek: Fix speaker output on ASUS ROG Strix G615LP
(bsc#1012628).
- xfrm: iptfs: reset runtime state when cloning SAs (bsc#1012628).
- dma-buf: fix UAF in dma_buf_fd() tracepoint (bsc#1012628).
- Input: xpad - add "Nova 2 Lite" from GameSir (bsc#1012628).
- Input: xpad - add support for ASUS ROG RAIKIRI II (bsc#1012628).
- ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk
loops (bsc#1012628).
- misc: rp1: Send IACK on IRQ activate to fix kdump/kexec
(bsc#1012628).
- Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem
(bsc#1012628).
- Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad
E490 (bsc#1012628).
- dt-bindings: usb: Fix EIC7700 USB reset's issue (bsc#1012628).
- comedi: comedi_test: fix check for valid scan_begin_src in
waveform_ai_cmdtest() (bsc#1012628).
- comedi: comedi_test: Fix limiting of convert_arg in
waveform_ai_cmdtest() (bsc#1012628).
- counter: Fix refcount leak in counter_alloc() error path
(bsc#1012628).
- tty: serial: pch_uart: add check for dma_alloc_coherent()
(bsc#1012628).
- tty: serial: samsung: Remove redundant port lock acquisition
in rx helpers (bsc#1012628).
- uio: uio_pci_generic_sva: fix double free of devm_kzalloc()
memory (bsc#1012628).
- usb: chipidea: core: convert ci_role_switch to local variable
(bsc#1012628).
- usb: core: Fix up Interrupt IN endpoints with bogus
wBytesPerInterval (bsc#1012628).
- usb: dwc3: xilinx: fix error handling in zynqmp init error paths
(bsc#1012628).
- usb: musb: omap2430: Fix use-after-free in omap2430_probe()
(bsc#1012628).
- USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2
hub controllers (bsc#1012628).
- usb: storage: Add quirks for PNY Elite Portable SSD
(bsc#1012628).
- usbip: vudc: Fix use after free bug in vudc_remove due to race
condition (bsc#1012628).
- usb: usbtmc: check URB actual_length for interrupt-IN
notifications (bsc#1012628).
- usb: usbtmc: reject interrupt endpoints with small
wMaxPacketSize (bsc#1012628).
- usb: typec: tipd: Fix error code in tps6598x_probe()
(bsc#1012628).
- usb: typec: tcpm: improve handling of DISCOVER_MODES failures
(bsc#1012628).
- usb: typec: ucsi: Check if power role change actually happened
before handling (bsc#1012628).
- usb: typec: ucsi: Don't update power_supply on power role
change if not connected (bsc#1012628).
- USB: serial: option: add MeiG SRM813Q (bsc#1012628).
- USB: serial: option: add missing RSVD(5) flag for Rolling
RW135R-GL (bsc#1012628).
- USB: serial: belkin_sa: validate interrupt status length
(bsc#1012628).
- USB: serial: cypress_m8: validate interrupt packet headers
(bsc#1012628).
- USB: serial: digi_acceleport: fix memory corruption with small
endpoints (bsc#1012628).
- USB: serial: keyspan: fix missing indat transfer sanity check
(bsc#1012628).
- USB: serial: mxuport: fix memory corruption with small endpoint
(bsc#1012628).
- USB: serial: mct_u232: fix memory corruption with small endpoint
(bsc#1012628).
- USB: serial: mct_u232: fix missing interrupt-in transfer sanity
check (bsc#1012628).
- usb: gadget: uvc: hold opts->lock across XU walks in
uvc_function_bind (bsc#1012628).
- usb: gadget: net2280: Fix double free in probe error path
(bsc#1012628).
- usb: gadget: f_hid: fix device reference leak in hidg_alloc()
(bsc#1012628).
- usb: gadget: composite: fix integer underflow in WebUSB GET_URL
handling (bsc#1012628).
- usb: gadget: dummy_hcd: Reject hub port requests for
non-existent ports (bsc#1012628).
- usb: gadget: f_fs: copy only received bytes on short ep0 read
(bsc#1012628).
- usb: gadget: f_fs: serialize DMABUF cancel against request
completion (bsc#1012628).
- thunderbolt: property: Reject u32 wrap in
tb_property_entry_valid() (bsc#1012628).
- thunderbolt: property: Reject dir_len < 4 to prevent size_t
underflow (bsc#1012628).
- thunderbolt: property: Cap recursion depth in
__tb_property_parse_dir() (bsc#1012628).
- scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL
walker (bsc#1012628).
- scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32
(bsc#1012628).
- scsi: target: iscsi: Fix CRC overread and double-free in
iscsit_handle_text_cmd() (bsc#1012628).
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends
to rsp_buf (bsc#1012628).
- scsi: target: iscsi: Validate CHAP_R length before base64 decode
(bsc#1012628).
- drm/hyperv: validate resolution_count and fix WIN8 fallback
(bsc#1012628).
- drm/hyperv: validate VMBus packet size in receive callback
(bsc#1012628).
- drm/gem: fix race between change_handle and handle_delete
(bsc#1012628).
- drm/i915/color: Fix HDR pre-CSC LUT programming loop
(bsc#1012628).
- drm/i915/psr: Block DC states on vblank enable when Panel
Replay supported (bsc#1012628).
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank
enable (bsc#1012628).
- drm/i915: Fix potential UAF in TTM object purge (bsc#1012628).
- drm/amd/pm/si: Disregard vblank time when no displays are
connected (bsc#1012628).
- serial: altera_jtaguart: handle uart_add_one_port() failures
(bsc#1012628).
- serial: qcom-geni: fix UART_RX_PAR_EN bit position
(bsc#1012628).
- serial: qcom_geni: fix kfifo underflow when flush precedes
DMA completion IRQ (bsc#1012628).
- serial: sh-sci: fix memory region release in error path
(bsc#1012628).
- serial: zs: Fix swapped RI/DSR modem line transition counting
(bsc#1012628).
- serial: fsl_lpuart: fix rx buffer and DMA map leaks in
start_rx_dma (bsc#1012628).
- drm/amdkfd: fix NULL pointer bug in svm_range_set_attr
(bsc#1012628).
- drm/amdkfd: fix a vulnerability of integer overflow in kfd
debugger (bsc#1012628).
- drm/amdkfd: Check for pdd drm file first in CRIU restore path
(bsc#1012628).
- drm/amdgpu: fix lock leak on ENOMEM in
AMDGPU_GEM_OP_GET_MAPPING_INFO (bsc#1012628).
- drm/amdgpu: fix calling VM invalidation in
amdgpu_hmm_invalidate_gfx (bsc#1012628).
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1012628).
- drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO
(bsc#1012628).
- serial: dz: Fix bootconsole message clobbering at chip reset
(bsc#1012628).
- serial: dz: Fix bootconsole handover lockup (bsc#1012628).
- serial: dz: Convert to use a platform device (bsc#1012628).
- serial: zs: Fix bootconsole handover lockup (bsc#1012628).
- serial: zs: Switch to using channel reset (bsc#1012628).
- serial: zs: Convert to use a platform device (bsc#1012628).
- serial: core: introduce
guard(uart_port_lock_check_sysrq_irqsave) (bsc#1012628).
- serial: 8250: dispatch SysRq character in
serial8250_handle_irq() (bsc#1012628).
- serial: 8250_dw: dispatch SysRq character in dw8250_handle_irq()
(bsc#1012628).
- Revert "mm/hugetlbfs: update hugetlbfs to use mmap_prepare"
(bsc#1012628).
- platform/x86/intel/vsec: Refactor base_addr handling
(bsc#1012628).
- platform/x86/intel/vsec: Make driver_data info const
(bsc#1012628).
- platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe
error recovery (bsc#1012628).
- rxrpc: Fix RESPONSE packet verification to extract skb to a
linear buffer (bsc#1012628).
- ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360
15-fh0xxx (bsc#1012628).
- ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP 16 Piston
OmniBook X (bsc#1012628).
- arm64: tlb: Flush walk cache when unsharing PMD tables
(bsc#1012628).
- i2c: tegra: make tegra_i2c_mutex_unlock() return void
(bsc#1012628).
- hwmon: (pmbus) Add support for guarded PMBus lock (bsc#1012628).
- hwmon: (pmbus/adm1266) serialize sequencer_state debugfs read
with pmbus_lock (bsc#1012628).
- hwmon: (pmbus/adm1266) serialize GPIO PMBus accesses with
pmbus_lock (bsc#1012628).
- net: phy: micrel: fix LAN8814 QSGMII soft reset (bsc#1012628).
- xhci: tegra: Fix ghost USB device on dual-role port unplug
(bsc#1012628).
- mailbox: Fix NULL message support in mbox_send_message()
(bsc#1012628).
- usb: core: Fix SuperSpeed root hub wMaxPacketSize (bsc#1012628).
- tools: ynl: add scope qualifier for definitions (bsc#1012628).
- KVM: arm64: vgic-its: Drop the translation cache reference
only for the erased entry (bsc#1012628).
- KVM: arm64: Reassign nested_mmus array behind mmu_lock
(bsc#1012628).
- Rename to
patches.kernel.org/7.0.12-006-bcache-fix-uninitialized-closure-object.patch.
- Rename to
patches.kernel.org/7.0.12-055-blk-mq-reinsert-cached-request-to-the-list.patch.
- commit 32bf651
* Wed Jun 10 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.0.10-0188-net-sched-act_ct-Only-release-RCU-read-lock-a.patch
(bsc#1012628 CVE-2026-46319).
- Update
patches.kernel.org/7.0.10-0860-eventpoll-fix-ep_remove-struct-eventpoll-stru.patch
(bsc#1012628 CVE-2026-46242 bsc#1267618).
- Update
patches.kernel.org/7.0.10-0889-netfilter-nf_tables-use-list_del_rcu-for-netl.patch
(bsc#1012628 CVE-2026-46324 bsc#1267995).
- Update
patches.kernel.org/7.0.10-1090-io-wq-check-that-the-predecessor-is-hashed-in.patch
(bsc#1012628 CVE-2026-46274 bsc#1267918).
- Update
patches.kernel.org/7.0.11-004-smb-client-reject-userspace-cifs.spnego-descri.patch
(bsc#1012628 CVE-2026-46243 bsc#1266238).
- Update
patches.kernel.org/7.0.11-030-io_uring-waitid-clear-waitid-info-before-copyi.patch
(bsc#1012628 CVE-2026-46315 bsc#1267953).
- Update
patches.kernel.org/7.0.11-044-Bluetooth-hci_uart-fix-UAFs-and-race-condition.patch
(bsc#1012628 CVE-2026-46275 bsc#1267968).
- Update
patches.kernel.org/7.0.11-060-netfilter-nft_inner-Fix-IPv6-inner_thoff-desyn.patch
(bsc#1012628 CVE-2026-46244 bsc#1267654).
- Update
patches.kernel.org/7.0.11-452-net-gro-don-t-merge-zcopy-skbs.patch
(bsc#1012628 CVE-2026-46323).
- Update
patches.kernel.org/7.0.12-019-tun-free-page-on-short-frame-rejection-in-tun_.patch
(bsc#1012628 CVE-2026-46321).
- Update
patches.kernel.org/7.0.12-020-tap-free-page-on-error-paths-in-tap_get_user_x.patch
(bsc#1012628 CVE-2026-46320 bsc#1267993).
- Update
patches.kernel.org/7.0.12-021-tun-free-page-on-build_skb-failure-in-tun_xdp_.patch
(bsc#1012628 CVE-2026-46322 bsc#1267994).
- Update
patches.kernel.org/7.0.12-315-Revert-mm-hugetlbfs-update-hugetlbfs-to-use-mm.patch
(bsc#1012628 CVE-2026-46318).
- Update
patches.kernel.org/7.0.12-332-KVM-arm64-vgic-its-Drop-the-translation-cache-.patch
(bsc#1012628 CVE-2026-46316).
- Update
patches.kernel.org/7.0.12-333-KVM-arm64-Reassign-nested_mmus-array-behind-mm.patch
(bsc#1012628 CVE-2026-46317).
- Update
patches.kernel.org/7.0.4-008-LoongArch-Add-spectre-boundry-for-syscall-dispa.patch
(bsc#1012628 CVE-2026-45993 bsc#1267352).
- Update
patches.kernel.org/7.0.4-009-drm-nouveau-fix-u32-overflow-in-pushbuf-reloc-b.patch
(bsc#1012628 CVE-2026-46006 bsc#1267479).
- Update
patches.kernel.org/7.0.4-010-leds-qcom-lpg-Check-for-array-overflow-when-sel.patch
(bsc#1012628 CVE-2026-46286 bsc#1267932).
- Update
patches.kernel.org/7.0.4-011-greybus-gb-beagleplay-bound-bootloader-receive-.patch
(bsc#1012628 CVE-2026-46332).
- Update
patches.kernel.org/7.0.4-012-greybus-gb-beagleplay-fix-sleep-in-atomic-conte.patch
(bsc#1012628 CVE-2026-46041 bsc#1267589).
- Update
patches.kernel.org/7.0.4-013-misc-ibmasm-fix-OOB-MMIO-read-in-ibmasm_handle_.patch
(bsc#1012628 CVE-2026-46022 bsc#1267434).
- Update
patches.kernel.org/7.0.4-014-ibmasm-fix-OOB-reads-in-command_file_write-due-.patch
(bsc#1012628 CVE-2026-45994 bsc#1267432).
- Update
patches.kernel.org/7.0.4-015-ibmasm-fix-heap-over-read-in-ibmasm_send_i2o_me.patch
(bsc#1012628 CVE-2026-46064 bsc#1267497).
- Update
patches.kernel.org/7.0.4-019-drm-nouveau-fix-nvkm_device-leak-on-aperture-re.patch
(bsc#1012628 CVE-2026-52904).
- Update
patches.kernel.org/7.0.4-022-fs-afs-revert-mmap_prepare-change.patch
(bsc#1012628 CVE-2026-46100 bsc#1267447).
- Update
patches.kernel.org/7.0.4-024-lib-test_hmm-evict-device-pages-on-file-close-t.patch
(bsc#1012628 CVE-2026-46280 bsc#1267958).
- Update
patches.kernel.org/7.0.4-030-ocfs2-split-transactions-in-dio-completion-to-a.patch
(bsc#1012628 CVE-2026-46080 bsc#1267596).
- Update
patches.kernel.org/7.0.4-031-Input-edt-ft5x06-fix-use-after-free-in-debugfs-.patch
(bsc#1012628 CVE-2026-46097 bsc#1267428).
- Update
patches.kernel.org/7.0.4-032-zram-do-not-forget-to-endio-for-partial-discard.patch
(bsc#1012628 CVE-2026-46089 bsc#1267445).
- Update
patches.kernel.org/7.0.4-033-wifi-rtw88-check-for-PCI-upstream-bridge-existe.patch
(bsc#1012628 CVE-2026-46092 bsc#1267595).
- Update
patches.kernel.org/7.0.4-034-wifi-mwifiex-fix-use-after-free-in-mwifiex_adap.patch
(bsc#1012628 CVE-2026-46069 bsc#1267437).
- Update
patches.kernel.org/7.0.4-038-vfio-cdx-Serialize-VFIO_DEVICE_SET_IRQS-with-a-.patch
(bsc#1012628 CVE-2026-46036 bsc#1267470).
- Update
patches.kernel.org/7.0.4-042-spi-imx-fix-use-after-free-on-unbind.patch
(bsc#1012628 CVE-2026-45996 bsc#1267436).
- Update
patches.kernel.org/7.0.4-043-spi-ch341-fix-memory-leaks-on-probe-failures.patch
(bsc#1012628 CVE-2026-46074 bsc#1267468).
- Update
patches.kernel.org/7.0.4-044-crypto-algif_aead-snapshot-IV-for-async-AEAD-re.patch
(bsc#1012628 CVE-2026-46028 bsc#1267430).
- Update
patches.kernel.org/7.0.4-047-of-unittest-fix-use-after-free-in-of_unittest_c.patch
(bsc#1012628 CVE-2026-46288 bsc#1267941).
- Update
patches.kernel.org/7.0.4-049-hwmon-powerz-Fix-missing-usb_kill_urb-on-signal.patch
(bsc#1012628 CVE-2026-46073 bsc#1267597).
- Update
patches.kernel.org/7.0.4-050-EDAC-versalnet-Fix-device_node-leak-in-mc_probe.patch
(bsc#1012628 CVE-2026-46030 bsc#1267451).
- Update
patches.kernel.org/7.0.4-054-net-caif-clear-client-service-pointer-on-teardo.patch
(bsc#1012628 CVE-2026-46098 bsc#1267552).
- Update
patches.kernel.org/7.0.4-055-net-strparser-fix-skb_head-leak-in-strp_abort_s.patch
(bsc#1012628 CVE-2026-46102 bsc#1267502).
- Update
patches.kernel.org/7.0.4-056-media-mtk-jpeg-fix-use-after-free-in-release-pa.patch
(bsc#1012628 CVE-2026-46011 bsc#1267491).
- Update
patches.kernel.org/7.0.4-065-ext2-reject-inodes-with-zero-i_nlink-and-valid-.patch
(bsc#1012628 CVE-2026-46002 bsc#1267587).
- Update
patches.kernel.org/7.0.4-070-ALSA-ctxfi-Add-fallback-to-default-RSR-for-S-PD.patch
(bsc#1012628 CVE-2026-46049 bsc#1267448).
- Update
patches.kernel.org/7.0.4-072-erofs-fix-the-out-of-bounds-nameoff-handling-fo.patch
(bsc#1012628 CVE-2026-46078 bsc#1267505).
- Update
patches.kernel.org/7.0.4-073-ipmi-ssif-Clean-up-kthread-on-errors.patch
(bsc#1012628 CVE-2026-46044 bsc#1267464).
- Update
patches.kernel.org/7.0.4-078-media-rockchip-rkcif-fix-off-by-one-bugs.patch
(bsc#1012628 CVE-2026-52907).
- Update
patches.kernel.org/7.0.4-081-mm-alloc_tag-clear-codetag-for-pages-allocated-.patch
(bsc#1012628 CVE-2026-46279 bsc#1267929).
- Update
patches.kernel.org/7.0.4-082-mm-damon-core-fix-damon_call-vs-kdamond_fn-exit.patch
(bsc#1012628 CVE-2026-46025 bsc#1267585).
- Update
patches.kernel.org/7.0.4-084-mm-hugetlb-fix-early-boot-crash-on-parameters-w.patch
(bsc#1012628 CVE-2026-46284 bsc#1267938).
- Update
patches.kernel.org/7.0.4-085-mtd-docg3-fix-use-after-free-in-docg3_release.patch
(bsc#1012628 CVE-2026-46285 bsc#1267948).
- Update
patches.kernel.org/7.0.4-105-mm-zone_device-do-not-touch-device-folio-after-.patch
(bsc#1012628 CVE-2026-46277 bsc#1267960).
- Update
patches.kernel.org/7.0.4-126-rxrpc-Fix-potential-UAF-after-skb_unshare-failu.patch
(bsc#1012628 CVE-2026-45998 bsc#1267452).
- Update
patches.kernel.org/7.0.4-127-rxrpc-Fix-memory-leaks-in-rxkad_verify_response.patch
(bsc#1012628 CVE-2026-46012 bsc#1267350).
- Update
patches.kernel.org/7.0.4-128-rxrpc-Fix-conn-level-packet-handling-to-unshare.patch
(bsc#1012628 CVE-2026-46000 bsc#1267490).
- Update
patches.kernel.org/7.0.4-135-net-txgbe-fix-RTNL-assertion-warning-when-remov.patch
(bsc#1012628 CVE-2026-46287 bsc#1267954).
- Update
patches.kernel.org/7.0.4-141-net-rds-fix-MR-cleanup-on-copy-error.patch
(bsc#1012628 CVE-2026-46053 bsc#1267427).
- Update
patches.kernel.org/7.0.4-144-net-ks8851-Reinstate-disabling-of-BHs-around-IR.patch
(bsc#1012628 CVE-2026-46031 bsc#1267463).
- Update
patches.kernel.org/7.0.4-145-net-bridge-use-a-stable-FDB-dst-snapshot-in-RCU.patch
(bsc#1012628 CVE-2026-46086 bsc#1267524).
- Update
patches.kernel.org/7.0.4-154-ipv4-icmp-validate-reply-type-before-using-icmp.patch
(bsc#1012628 CVE-2026-46037 bsc#1267361).
- Update
patches.kernel.org/7.0.4-162-fbdev-defio-Disconnect-deferred-I-O-from-the-li.patch
(bsc#1012628 CVE-2026-46065 bsc#1267458).
- Update
patches.kernel.org/7.0.4-165-hwmon-powerz-Avoid-cacheline-sharing-for-DMA-bu.patch
(bsc#1012628 CVE-2026-46007 bsc#1267586).
- Update
patches.kernel.org/7.0.4-170-selinux-fix-overlayfs-mmap-and-mprotect-access-.patch
(bsc#1012628 CVE-2026-46054 bsc#1267475).
- Update
patches.kernel.org/7.0.4-176-crypto-qat-fix-IRQ-cleanup-on-6xxx-probe-failur.patch
(bsc#1012628 CVE-2026-46060 bsc#1267594).
- Update
patches.kernel.org/7.0.4-178-xfs-fix-a-resource-leak-in-xfs_alloc_buftarg.patch
(bsc#1012628 CVE-2026-46005 bsc#1267431).
- Update
patches.kernel.org/7.0.4-184-tpm2-sessions-Fix-missing-tpm_buf_destroy-in-tp.patch
(bsc#1012628 CVE-2026-46096 bsc#1267371).
- Update
patches.kernel.org/7.0.4-186-tpm-Use-kfree_sensitive-to-free-auth-session-in.patch
(bsc#1012628 CVE-2026-46283 bsc#1267952).
- Update
patches.kernel.org/7.0.4-190-mm-vmalloc-take-vmap_purge_lock-in-shrinker.patch
(bsc#1012628 CVE-2026-46093 bsc#1267548).
- Update
patches.kernel.org/7.0.4-191-mm-memfd_luo-fix-physical-address-conversion-in.patch
(bsc#1012628 CVE-2026-46013 bsc#1267351).
- Update
patches.kernel.org/7.0.4-192-mm-mempolicy-fix-memory-leaks-in-weighted_inter.patch
(bsc#1012628 CVE-2026-46042 bsc#1267588).
- Update
patches.kernel.org/7.0.4-193-mm-damon-stat-fix-memory-leak-on-damon_start-fa.patch
(bsc#1012628 CVE-2026-46087 bsc#1267492).
- Update
patches.kernel.org/7.0.4-194-mm-damon-core-validate-damos_quota_goal-nid-for.patch
(bsc#1012628 CVE-2026-46020 bsc#1267446).
- Update
patches.kernel.org/7.0.4-195-mm-damon-core-validate-damos_quota_goal-nid-for.patch
(bsc#1012628 CVE-2026-46067 bsc#1267498).
- Update
patches.kernel.org/7.0.4-198-mm-damon-core-disallow-non-power-of-two-min_reg.patch
(bsc#1012628 CVE-2026-52905).
- Update
patches.kernel.org/7.0.4-205-KVM-SVM-Inject-UD-for-INVLPGA-if-EFER.SVME-0.patch
(bsc#1012628 CVE-2026-46082 bsc#1267473).
- Update
patches.kernel.org/7.0.4-208-KVM-nSVM-Always-use-NextRIP-as-vmcb02-s-NextRIP.patch
(bsc#1012628 CVE-2026-46059 bsc#1267495).
- Update
patches.kernel.org/7.0.4-212-KVM-nSVM-Avoid-clearing-VMCB_LBR-in-vmcb12.patch
(bsc#1012628 CVE-2026-46071 bsc#1267591).
- Update
patches.kernel.org/7.0.4-215-KVM-SVM-Add-missing-save-restore-handling-of-LB.patch
(bsc#1012628 CVE-2026-46014 bsc#1267440).
- Update
patches.kernel.org/7.0.4-219-KVM-nSVM-Triple-fault-if-restore-host-CR3-fails.patch
(bsc#1012628 CVE-2026-46032 bsc#1267476).
- Update
patches.kernel.org/7.0.4-227-KVM-nSVM-Raise-UD-if-unhandled-VMMCALL-isn-t-in.patch
(bsc#1012628 CVE-2026-46076 bsc#1267365).
- Update
patches.kernel.org/7.0.4-237-md-md-llbitmap-skip-reading-rdevs-that-are-not-.patch
(bsc#1012628 CVE-2026-46045 bsc#1267474).
- Update
patches.kernel.org/7.0.4-238-md-md-llbitmap-raise-barrier-before-state-machi.patch
(bsc#1012628 CVE-2026-46095 bsc#1267363).
- Update
patches.kernel.org/7.0.4-239-md-raid5-fix-soft-lockup-in-retry_aligned_read.patch
(bsc#1012628 CVE-2026-46051 bsc#1267360).
- Update
patches.kernel.org/7.0.4-240-md-raid5-validate-payload-size-before-accessing.patch
(bsc#1012628 CVE-2026-46070 bsc#1267501).
- Update
patches.kernel.org/7.0.4-244-inotify-fix-watch-count-leak-when-fsnotify_add_.patch
(bsc#1012628 CVE-2026-46040 bsc#1267472).
- Update
patches.kernel.org/7.0.4-248-tcp-call-sk_data_ready-after-listener-migration.patch
(bsc#1012628 CVE-2026-46015 bsc#1267439).
- Update
patches.kernel.org/7.0.4-252-9p-fix-access-mode-flags-being-ORed-instead-of-.patch
(bsc#1012628 CVE-2026-52906).
- Update
patches.kernel.org/7.0.4-254-Bluetooth-hci_event-fix-potential-UAF-in-SSP-pa.patch
(bsc#1012628 CVE-2026-46056 bsc#1267435).
- Update
patches.kernel.org/7.0.4-256-can-ucan-fix-devres-lifetime.patch
(bsc#1012628 CVE-2026-46103 bsc#1267555).
- Update
patches.kernel.org/7.0.4-263-crypto-atmel-tdes-fix-DMA-sync-direction.patch
(bsc#1012628 CVE-2026-46077 bsc#1267466).
- Update
patches.kernel.org/7.0.4-265-crypto-atmel-sha204a-Fix-potential-UAF-and-memo.patch
(bsc#1012628 CVE-2026-46075 bsc#1267367).
- Update
patches.kernel.org/7.0.4-267-crypto-nx-fix-bounce-buffer-leaks-in-nx842_cryp.patch
(bsc#1012628 CVE-2026-46068 bsc#1267592).
- Update
patches.kernel.org/7.0.4-270-dm-mirror-fix-integer-overflow-in-create_dirty_.patch
(bsc#1012628 CVE-2026-46023 bsc#1267449).
- Update
patches.kernel.org/7.0.4-272-ceph-fix-num_ops-off-by-one-when-crypto-allocat.patch
(bsc#1012628 CVE-2026-46066 bsc#1267593).
- Update
patches.kernel.org/7.0.4-273-ceph-only-d_add-negative-dentries-when-they-are.patch
(bsc#1012628 CVE-2026-46052 bsc#1267494).
- Update
patches.kernel.org/7.0.4-278-ntfs3-add-buffer-boundary-checks-to-run_unpack.patch
(bsc#1012628 CVE-2026-46072 bsc#1267441).
- Update
patches.kernel.org/7.0.4-279-ntfs3-fix-integer-overflow-in-run_unpack-volume.patch
(bsc#1012628 CVE-2026-46062 bsc#1267358).
- Update
patches.kernel.org/7.0.4-281-rxgk-Fix-potential-integer-overflow-in-length-c.patch
(bsc#1012628 CVE-2026-46039 bsc#1267465).
- Update
patches.kernel.org/7.0.4-287-iio-frequency-admv1013-fix-NULL-pointer-derefer.patch
(bsc#1012628 CVE-2026-46282 bsc#1267919).
- Update
patches.kernel.org/7.0.4-299-drm-amdgpu-fix-zero-size-GDS-range-init-on-RDNA.patch
(bsc#1012628 CVE-2026-46276 bsc#1267922).
- Update
patches.kernel.org/7.0.4-300-drm-imagination-Fix-segfault-when-updating-ftra.patch
(bsc#1012628 CVE-2026-46278 bsc#1267915).
- Update
patches.kernel.org/7.0.4-301-ALSA-caiaq-fix-usb_dev-refcount-leak-on-probe-f.patch
(bsc#1012628 CVE-2026-46048 bsc#1267496).
- Update
patches.kernel.org/7.0.4-302-ALSA-aloop-Fix-peer-runtime-UAF-during-format-c.patch
(bsc#1012628 CVE-2026-46090 bsc#1267531).
- Update
patches.kernel.org/7.0.4-303-vmalloc-fix-buffer-overflow-in-vrealloc_node_al.patch
(bsc#1012628 CVE-2026-46281 bsc#1267961).
- Update
patches.kernel.org/7.0.4-305-mm-slab-return-NULL-early-from-kmalloc_nolock-i.patch
(bsc#1012628 CVE-2026-46029 bsc#1267590).
- Update
patches.kernel.org/7.0.7-001-scsi-target-configfs-Bound-snprintf-return-in-t.patch
(bsc#1012628 CVE-2026-46149 bsc#1267648).
- Update
patches.kernel.org/7.0.7-002-ipmi-Add-limits-to-event-and-receive-message-re.patch
(bsc#1012628 CVE-2026-46177 bsc#1267725).
- Update
patches.kernel.org/7.0.7-003-ipmi-Check-event-message-buffer-response-for-ba.patch
(bsc#1012628 CVE-2026-46128 bsc#1267643).
- Update
patches.kernel.org/7.0.7-004-ipmi-si-Return-state-to-normal-if-message-alloc.patch
(bsc#1012628 CVE-2026-46108 bsc#1267615).
- Update
patches.kernel.org/7.0.7-013-ASoC-SOF-Don-t-allow-pointer-operations-on-unco.patch
(bsc#1012628 CVE-2026-46179 bsc#1267719).
- Update
patches.kernel.org/7.0.7-018-flow_dissector-do-not-dissect-PPPoE-PFC-frames.patch
(bsc#1012628 CVE-2026-46306 bsc#1267986).
- Update
patches.kernel.org/7.0.7-021-exit-prevent-preemption-of-oopsing-TASK_DEAD-ta.patch
(bsc#1012628 CVE-2026-46173 bsc#1267723).
- Update
patches.kernel.org/7.0.7-030-wifi-ath5k-do-not-access-array-OOB.patch
(bsc#1012628 CVE-2026-46307 bsc#1267987).
- Update
patches.kernel.org/7.0.7-032-wifi-b43-enforce-bounds-check-on-firmware-key-i.patch
(bsc#1012628 CVE-2026-46122 bsc#1267583).
- Update
patches.kernel.org/7.0.7-034-usb-usblp-fix-heap-leak-in-IEEE-1284-device-ID-.patch
(bsc#1012628 CVE-2026-46151 bsc#1267728).
- Update
patches.kernel.org/7.0.7-037-ALSA-usb-audio-Avoid-potential-endless-loop-in-.patch
(bsc#1012628 CVE-2026-46146 bsc#1267571).
- Update
patches.kernel.org/7.0.7-045-ALSA-pcm-oss-Fix-data-race-at-accessing-runtime.patch
(bsc#1012628 CVE-2026-46157 bsc#1267726).
- Update
patches.kernel.org/7.0.7-054-xfrm-defensively-unhash-xfrm_state-lists-in-__x.patch
(bsc#1012628 CVE-2026-46116 bsc#1267369).
- Update
patches.kernel.org/7.0.7-056-xfrm-ah-account-for-ESN-high-bits-in-async-call.patch
(bsc#1012628 CVE-2026-46193 bsc#1267656).
- Update
patches.kernel.org/7.0.7-058-selinux-use-sk-blob-accessor-in-socket-permissi.patch
(bsc#1012628 CVE-2026-46104 bsc#1267559).
- Update
patches.kernel.org/7.0.7-064-selinux-allow-multiple-opens-of-sys-fs-selinux-.patch
(bsc#1012628 CVE-2026-46302 bsc#1267947).
- Update
patches.kernel.org/7.0.7-068-Bluetooth-virtio_bt-clamp-rx-length-before-skb_.patch
(bsc#1012628 CVE-2026-46123 bsc#1267621).
- Update
patches.kernel.org/7.0.7-070-Bluetooth-btmtk-validate-WMT-event-SKB-length-b.patch
(bsc#1012628 CVE-2026-46140 bsc#1267677).
- Update
patches.kernel.org/7.0.7-071-Bluetooth-hci_conn-fix-potential-UAF-in-create_.patch
(bsc#1012628 CVE-2026-46111 bsc#1267626).
- Update
patches.kernel.org/7.0.7-072-Bluetooth-hci_event-Fix-OOB-read-and-infinite-l.patch
(bsc#1012628 CVE-2026-46138 bsc#1267649).
- Update
patches.kernel.org/7.0.7-088-spi-s3c64xx-fix-NULL-deref-on-driver-unbind.patch
(bsc#1012628 CVE-2026-46296 bsc#1267927).
- Update
patches.kernel.org/7.0.7-089-staging-rtl8723bs-os_dep-avoid-NULL-pointer-der.patch
(bsc#1012628 CVE-2026-46305 bsc#1267930).
- Update
patches.kernel.org/7.0.7-091-fanotify-fix-false-positive-on-permission-event.patch
(bsc#1012628 CVE-2026-46150 bsc#1267388).
- Update
patches.kernel.org/7.0.7-098-net-rtnetlink-zero-ifla_vf_broadcast-to-avoid-s.patch
(bsc#1012628 CVE-2026-46132 bsc#1267616).
- Update
patches.kernel.org/7.0.7-111-pseries-papr-hvpipe-Fix-race-with-interrupt-han.patch
(bsc#1012628 CVE-2026-46298 bsc#1267923).
- Update
patches.kernel.org/7.0.7-112-pseries-papr-hvpipe-Prevent-kernel-stack-memory.patch
(bsc#1012628 CVE-2026-46182 bsc#1267383).
- Update
patches.kernel.org/7.0.7-117-ip6_gre-Use-cached-t-net-in-ip6erspan_changelin.patch
(bsc#1012628 CVE-2026-46120 bsc#1267640).
- Update
patches.kernel.org/7.0.7-118-net-libwx-use-request_irq-for-VF-misc-interrupt.patch
(bsc#1012628 CVE-2026-46297 bsc#1267935).
- Update
patches.kernel.org/7.0.7-125-x86-efi-Fix-graceful-fault-handling-after-FPU-s.patch
(bsc#1012628 CVE-2026-46290 bsc#1267973).
- Update
patches.kernel.org/7.0.7-132-pmdomain-mediatek-fix-use-after-free-in-scpsys_.patch
(bsc#1012628 CVE-2026-46308 bsc#1267988).
- Update
patches.kernel.org/7.0.7-139-fbcon-Avoid-OOB-font-access-if-console-rotation.patch
(bsc#1012628 CVE-2026-46191 bsc#1267690).
- Update
patches.kernel.org/7.0.7-145-ibmveth-Disable-GSO-for-packets-with-small-MSS.patch
(bsc#1012628 CVE-2026-46273 bsc#1267651).
- Update
patches.kernel.org/7.0.7-150-spi-microchip-core-qspi-control-built-in-cs-man.patch
(bsc#1012628 CVE-2026-46148 bsc#1267718).
- Update
patches.kernel.org/7.0.7-158-spi-topcliff-pch-fix-use-after-free-on-unbind.patch
(bsc#1012628 CVE-2026-46301 bsc#1267983).
- Update
patches.kernel.org/7.0.7-165-clk-microchip-mpfs-ccc-fix-out-of-bounds-access.patch
(bsc#1012628 CVE-2026-46293 bsc#1267933).
- Update
patches.kernel.org/7.0.7-172-ASoC-qcom-q6apm-lpass-dai-Fix-multiple-graph-op.patch
(bsc#1012628 CVE-2026-46143 bsc#1267712).
- Update
patches.kernel.org/7.0.7-175-btrfs-fix-btrfs_ioctl_space_info-slot_count-TOC.patch
(bsc#1012628 CVE-2026-46159 bsc#1267652).
- Update
patches.kernel.org/7.0.7-178-btrfs-fix-missing-last_unlink_trans-update-when.patch
(bsc#1012628 CVE-2026-46160 bsc#1267624).
- Update
patches.kernel.org/7.0.7-179-dm-thin-fix-metadata-refcount-underflow.patch
(bsc#1012628 CVE-2026-46107 bsc#1267612).
- Update
patches.kernel.org/7.0.7-181-dm-fix-a-buffer-overflow-in-ioctl-processing.patch
(bsc#1012628 CVE-2026-46294 bsc#1267939).
- Update
patches.kernel.org/7.0.7-182-eventfs-Hold-eventfs_mutex-and-SRCU-when-remoun.patch
(bsc#1012628 CVE-2026-46106 bsc#1267613).
- Update
patches.kernel.org/7.0.7-186-dm-verity-fec-fix-reading-parity-bytes-split-ac.patch
(bsc#1012628 CVE-2026-46130 bsc#1267629).
- Update
patches.kernel.org/7.0.7-188-isofs-validate-Rock-Ridge-CE-continuation-exten.patch
(bsc#1012628 CVE-2026-46303 bsc#1267984).
- Update
patches.kernel.org/7.0.7-195-lib-scatterlist-fix-length-calculations-in-extr.patch
(bsc#1012628 CVE-2026-46289 bsc#1267966).
- Update
patches.kernel.org/7.0.7-197-libceph-Fix-slab-out-of-bounds-access-in-auth-m.patch
(bsc#1012628 CVE-2026-46119 bsc#1267628).
- Update
patches.kernel.org/7.0.7-200-nvmet-tcp-fix-race-between-ICReq-handling-and-q.patch
(bsc#1012628 CVE-2026-46135 bsc#1267373).
- Update
patches.kernel.org/7.0.7-201-nvmet-avoid-recursive-nvmet-wq-flush-in-nvmet_c.patch
(bsc#1012628 CVE-2026-46304 bsc#1267985).
- Update
patches.kernel.org/7.0.7-203-pmdomain-core-Fix-detach-procedure-for-virtual-.patch
(bsc#1012628 CVE-2026-46292 bsc#1267943).
- Update
patches.kernel.org/7.0.7-205-RDMA-hns-Fix-unlocked-call-to-hns_roce_qp_remov.patch
(bsc#1012628 CVE-2026-46112 bsc#1267582).
- Update
patches.kernel.org/7.0.7-209-scsi-mpt3sas-Limit-NVMe-request-size-to-2-MiB.patch
(bsc#1012628 CVE-2026-46105 bsc#1267372).
- Update
patches.kernel.org/7.0.7-210-smb-client-fix-out-of-bounds-read-in-smb2_compo.patch
(bsc#1012628 CVE-2026-46155 bsc#1267720).
- Update
patches.kernel.org/7.0.7-212-smb-client-use-kzalloc-to-zero-initialize-secur.patch
(bsc#1012628 CVE-2026-46139 bsc#1267681).
- Update
patches.kernel.org/7.0.7-214-KVM-x86-check-for-nEPT-nNPT-in-slow-flush-hyper.patch
(bsc#1012628 CVE-2026-46131 bsc#1267636).
- Update
patches.kernel.org/7.0.7-215-KVM-x86-Do-IRR-scan-in-__kvm_apic_update_irr-ev.patch
(bsc#1012628 CVE-2026-46295 bsc#1267931).
- Update
patches.kernel.org/7.0.7-233-RDMA-mana-Fix-mana_destroy_wq_obj-cleanup-in-ma.patch
(bsc#1012628 CVE-2026-46126 bsc#1267584).
- Update
patches.kernel.org/7.0.7-234-RDMA-mana-Remove-user-triggerable-WARN_ON-in-ma.patch
(bsc#1012628 CVE-2026-46117 bsc#1267375).
- Update
patches.kernel.org/7.0.7-235-RDMA-mana-Validate-rx_hash_key_len.patch
(bsc#1012628 CVE-2026-46145 bsc#1267715).
- Update
patches.kernel.org/7.0.7-237-RDMA-mlx4-Fix-resource-leak-on-error-in-mlx4_ib.patch
(bsc#1012628 CVE-2026-46178 bsc#1267493).
- Update
patches.kernel.org/7.0.7-260-mptcp-pm-ADD_ADDR-rtx-fix-potential-data-race.patch
(bsc#1012628 CVE-2026-46137 bsc#1267570).
- Update
patches.kernel.org/7.0.7-262-mptcp-pm-ADD_ADDR-rtx-free-sk-if-last.patch
(bsc#1012628 CVE-2026-46170 bsc#1267714).
- Update
patches.kernel.org/7.0.7-271-f2fs-fix-node_cnt-race-between-extent-node-dest.patch
(bsc#1012628 CVE-2026-46194 bsc#1267569).
- Update
patches.kernel.org/7.0.7-281-KVM-arm64-Fix-pin-leak-and-publication-ordering.patch
(bsc#1012628 CVE-2026-46147 bsc#1267689).
- Update
patches.kernel.org/7.0.7-282-LoongArch-Fix-potential-ADE-in-loongson_gpu_fix.patch
(bsc#1012628 CVE-2026-46156 bsc#1267385).
- Update
patches.kernel.org/7.0.7-296-hfsplus-fix-uninit-value-by-validating-catalog-.patch
(bsc#1012628 CVE-2026-46169 bsc#1267713).
- Update
patches.kernel.org/7.0.7-297-hfsplus-fix-held-lock-freed-on-hfsplus_fill_sup.patch
(bsc#1012628 CVE-2026-46299 bsc#1267920).
- Update
patches.kernel.org/7.0.7-299-8021q-delete-cleared-egress-QoS-mappings.patch
(bsc#1012628 CVE-2026-46153 bsc#1267574).
- Update
patches.kernel.org/7.0.7-301-crypto-caam-guard-HMAC-key-hex-dumps-in-hash_di.patch
(bsc#1012628 CVE-2026-46291 bsc#1267937).
- Update
patches.kernel.org/7.0.7-305-x86-CPU-AMD-Prevent-improper-isolation-of-share.patch
(bsc#1012628 CVE-2026-46174 bsc#1267384).
- Update
patches.kernel.org/7.0.9-001-HID-playstation-Clamp-num_touch_reports.patch
(bsc#1012628 CVE-2026-46232 bsc#1267669).
- Update
patches.kernel.org/7.0.9-002-HID-appletb-kbd-fix-UAF-in-inactivity-timer-cle.patch
(bsc#1012628 CVE-2026-46213 bsc#1267665).
- Update
patches.kernel.org/7.0.9-014-media-renesas-vsp1-Fix-NULL-pointer-deref-on-mo.patch
(bsc#1012628 CVE-2026-46310 bsc#1267934).
- Update
patches.kernel.org/7.0.9-035-media-i2c-ov5647-Fix-runtime-PM-refcount-leak-i.patch
(bsc#1012628 CVE-2026-46239 bsc#1267530).
- Update
patches.kernel.org/7.0.9-039-media-videobuf2-Set-vma_flags-in-vb2_dma_sg_mma.patch
(bsc#1012628 CVE-2026-46312 bsc#1267990).
- Update
patches.kernel.org/7.0.9-040-media-rockchip-rkcif-Add-missing-MUST_CONNECT-f.patch
(bsc#1012628 CVE-2026-46222 bsc#1267695).
- Update
patches.kernel.org/7.0.9-042-media-intel-ipu6-fix-error-pointer-dereference.patch
(bsc#1012628 CVE-2026-46313 bsc#1267991).
- Update
patches.kernel.org/7.0.9-053-media-saa7164-add-ioremap-return-checks-and-cle.patch
(bsc#1012628 CVE-2026-46235 bsc#1267702).
- Update
patches.kernel.org/7.0.9-076-media-iris-fix-use-after-free-of-fmt_src-during.patch
(bsc#1012628 CVE-2026-46210 bsc#1267692).
- Update
patches.kernel.org/7.0.9-090-spi-ch341-fix-devres-lifetime.patch
(bsc#1012628 CVE-2026-46228 bsc#1267705).
- Update
patches.kernel.org/7.0.9-092-spi-fsl-fix-controller-deregistration.patch
(bsc#1012628 CVE-2026-46226 bsc#1267673).
- Update
patches.kernel.org/7.0.9-099-spi-rspi-fix-controller-deregistration.patch
(bsc#1012628 CVE-2026-46225 bsc#1267627).
- Update
patches.kernel.org/7.0.9-112-spi-mpc52xx-fix-use-after-free-on-unbind.patch
(bsc#1012628 CVE-2026-46219 bsc#1267667).
- Update
patches.kernel.org/7.0.9-120-spi-cadence-quadspi-fix-unclocked-access-on-unb.patch
(bsc#1012628 CVE-2026-46203 bsc#1267620).
- Update
patches.kernel.org/7.0.9-121-drm-msm-gem-fix-error-handling-in-msm_ioctl_gem.patch
(bsc#1012628 CVE-2026-46211 bsc#1267380).
- Update
patches.kernel.org/7.0.9-125-drm-v3d-Reject-empty-multisync-extension-to-pre.patch
(bsc#1012628 CVE-2026-46314 bsc#1267992).
- Update
patches.kernel.org/7.0.9-127-drm-amdkfd-Clear-VRAM-on-allocation-to-prevent-.patch
(bsc#1012628 CVE-2026-46229 bsc#1267567).
- Update
patches.kernel.org/7.0.9-135-drm-amdgpu-Add-bounds-checking-to-ib_-get-set-_.patch
(bsc#1012628 CVE-2026-46218 bsc#1267632).
- Update
patches.kernel.org/7.0.9-136-drm-amdgpu-vcn4-Prevent-OOB-reads-when-parsing-.patch
(bsc#1012628 CVE-2026-46204 bsc#1267661).
- Update
patches.kernel.org/7.0.9-138-drm-amdgpu-vcn4-Prevent-OOB-reads-when-parsing-.patch
(bsc#1012628 CVE-2026-46199 bsc#1267638).
- Update
patches.kernel.org/7.0.9-139-drm-amdgpu-vcn3-Prevent-OOB-reads-when-parsing-.patch
(bsc#1012628 CVE-2026-46230 bsc#1267623).
- Update
patches.kernel.org/7.0.9-141-drm-gem-Fix-inconsistent-plane-dimension-calcul.patch
(bsc#1012628 CVE-2026-46209 bsc#1267663).
- Update
patches.kernel.org/7.0.9-143-drm-amdkfd-validate-SVM-ioctl-nattr-against-buf.patch
(bsc#1012628 CVE-2026-46197 bsc#1267381).
- Update
patches.kernel.org/7.0.9-150-drm-xe-uapi-Reject-coh_none-PAT-index-for-CPU-c.patch
(bsc#1012628 CVE-2026-46309 bsc#1267989).
- Update
patches.kernel.org/7.0.9-155-drm-amdgpu-userq-fix-access-to-stale-wptr-mappi.patch
(bsc#1012628 CVE-2026-46311 bsc#1267949).
- Update
patches.kernel.org/7.0.9-162-drm-amdgpu-sdma4-replace-BUG_ON-with-WARN_ON-in.patch
(bsc#1012628 CVE-2026-46220 bsc#1267704).
- Update
patches.kernel.org/7.0.9-169-sctp-revalidate-list-cursor-after-sctp_sendmsg_.patch
(bsc#1012628 CVE-2026-46227 bsc#1267697).
- Update
patches.kernel.org/7.0.9-175-batman-adv-bla-prevent-use-after-free-when-dele.patch
(bsc#1012628 CVE-2026-46212 bsc#1267693).
- Update
patches.kernel.org/7.0.9-176-batman-adv-bla-only-purge-non-released-claims.patch
(bsc#1012628 CVE-2026-46233 bsc#1267701).
- Update
patches.kernel.org/7.0.9-177-batman-adv-bla-put-backbone-reference-on-failed.patch
(bsc#1012628 CVE-2026-46231 bsc#1267565).
- Update
patches.kernel.org/7.0.9-184-EDAC-versalnet-Fix-device-name-memory-leak.patch
(bsc#1012628 CVE-2026-46221 bsc#1267523).
- Update
patches.kernel.org/7.0.9-188-cgroup-Defer-css-percpu_ref-kill-on-rmdir-until.patch
(bsc#1012628 CVE-2026-46223 bsc#1267699).
- Update
patches.kernel.org/7.0.9-194-vsock-virtio-fix-empty-payload-in-tap-skb-for-n.patch
(bsc#1012628 CVE-2026-46207 bsc#1267691).
- Update
patches.kernel.org/7.0.9-195-vsock-virtio-fix-accept-queue-count-leak-on-tra.patch
(bsc#1012628 CVE-2026-46214 bsc#1267717).
- Update
patches.kernel.org/7.0.9-197-drm-amdgpu-vcn4-Avoid-overflow-on-msg-bound-che.patch
(bsc#1012628 CVE-2026-46217 bsc#1267655).
suse-add-cves
- commit 8beab0b
* Wed Jun 10 2026 jslaby@suse.cz
- drm/gem: Try to fix change_handle ioctl, attempt 4 (git-fixes).
- commit 41887ca
* Tue Jun 09 2026 jslaby@suse.cz
- i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl
(git-fixes).
- commit e3cc0a5
* Mon Jun 08 2026 mkubecek@suse.cz
- update to 7.1-rc7
- commit f7dda10
* Fri Jun 05 2026 msuchanek@suse.de
- packaging: Add nvidia kernel description
- commit 5f2699f
* Wed Jun 03 2026 tiwai@suse.de
- rpm/mkspec: Conditionally set Rust BuildReqs (bsc#1258538)
This is a further optimization of kernel packaging rust-enablement.
Add the check of CONFIG_RUST at creating the spec for each kernel
flavor, and set BuildRequires conditionally only for archs that have
CONFIG_RUST. This avoids the unnecessary dependency chains due to
unused rust.
The main knob ENABLE_RUST is still needed because otherwise we can't
know whether to pass the dummy-tools or not at processing
run_oldconfig.
- commit ccf4b93
* Wed Jun 03 2026 tiwai@suse.de
- rpm/check-for-config-changes: ignore Rust-related configs (bsc#1258538)
Those configs may be dynamically changed at the build time
- commit 5251980
* Wed Jun 03 2026 tiwai@suse.de
- rpm: Add BuildRequires for Rust enablement (bsc#1258538)
Update mkspec and template to generate the spec files with
BuildRequires of Rust-related packages when ENABLE_RUST=Yes is set in
rpm/config.sh.
- commit d0f276f
* Wed Jun 03 2026 rgoldwyn@suse.com
- ima: return error early if file xattr cannot be changed (bsc#1261041).
(cherry picked from commit 5d98aa3da261a44f676d60ae2e11bfbf8f691928)
- ima: return error early if file xattr cannot be changed (bsc#1261041).
- commit c8ca8cf
* Tue Jun 02 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.0.10-0148-bpf-fix-end-of-list-detection-in-cgroup_stora.patch
(bsc#1012628 CVE-2026-45838 bsc#1266396).
- Update
patches.kernel.org/7.0.10-0155-bpf-reject-negative-CO-RE-accessor-indices-in.patch
(bsc#1012628 CVE-2026-45839 bsc#1266399).
- Update
patches.kernel.org/7.0.10-0802-openvswitch-cap-upcall-PID-array-size-and-pre.patch
(bsc#1012628 CVE-2026-45840 bsc#1266397).
- Update
patches.kernel.org/7.0.10-0805-netfilter-nfnetlink_osf-fix-divide-by-zero-in.patch
(bsc#1012628 CVE-2026-45841 bsc#1266390).
- Update
patches.kernel.org/7.0.10-0812-slip-reject-VJ-receive-packets-on-instances-w.patch
(bsc#1012628 CVE-2026-45842 bsc#1266400).
- Update
patches.kernel.org/7.0.10-0813-slip-bound-decode-reads-against-the-compresse.patch
(bsc#1012628 CVE-2026-45843 bsc#1266395).
- Update
patches.kernel.org/7.0.10-0860-eventpoll-fix-ep_remove-struct-eventpoll-stru.patch
(bsc#1012628 CVE-2026-46242).
- Update
patches.kernel.org/7.0.10-0888-netfilter-arp_tables-fix-IEEE1394-ARP-payload.patch
(bsc#1012628 CVE-2026-45844 bsc#1266392).
- Update
patches.kernel.org/7.0.10-0939-net-sched-taprio-fix-NULL-pointer-dereference.patch
(bsc#1012628 CVE-2026-45845 bsc#1266393).
- Update
patches.kernel.org/7.0.10-0981-bareudp-fix-NULL-pointer-dereference-in-bareu.patch
(bsc#1012628 CVE-2026-45846 bsc#1266394).
- Update
patches.kernel.org/7.0.10-1139-net-rds-reset-op_nents-when-zerocopy-page-pin.patch
(bsc#1012628 CVE-2026-43494 bsc#1265626).
- Update
patches.kernel.org/7.0.10-1142-net-skbuff-preserve-shared-frag-marker-during.patch
(bsc#1012628 CVE-2026-46300 bsc#1265209).
- Update
patches.kernel.org/7.0.10-1143-net-skbuff-propagate-shared-frag-marker-throu.patch
(bsc#1012628 CVE-2026-43503 bsc#1266229).
- Update
patches.kernel.org/7.0.11-004-smb-client-reject-userspace-cifs.spnego-descri.patch
(bsc#1012628 CVE-2026-46243).
- Update
patches.kernel.org/7.0.4-001-ALSA-usb-audio-stop-parsing-UAC2-rates-at-MAX_N.patch
(bsc#1012628 CVE-2026-46018 bsc#1266751).
- Update
patches.kernel.org/7.0.4-008-LoongArch-Add-spectre-boundry-for-syscall-dispa.patch
(bsc#1012628 CVE-2026-45993).
- Update
patches.kernel.org/7.0.4-009-drm-nouveau-fix-u32-overflow-in-pushbuf-reloc-b.patch
(bsc#1012628 CVE-2026-46006).
- Update
patches.kernel.org/7.0.4-012-greybus-gb-beagleplay-fix-sleep-in-atomic-conte.patch
(bsc#1012628 CVE-2026-46041).
- Update
patches.kernel.org/7.0.4-013-misc-ibmasm-fix-OOB-MMIO-read-in-ibmasm_handle_.patch
(bsc#1012628 CVE-2026-46022).
- Update
patches.kernel.org/7.0.4-014-ibmasm-fix-OOB-reads-in-command_file_write-due-.patch
(bsc#1012628 CVE-2026-45994).
- Update
patches.kernel.org/7.0.4-015-ibmasm-fix-heap-over-read-in-ibmasm_send_i2o_me.patch
(bsc#1012628 CVE-2026-46064).
- Update
patches.kernel.org/7.0.4-022-fs-afs-revert-mmap_prepare-change.patch
(bsc#1012628 CVE-2026-46100).
- Update
patches.kernel.org/7.0.4-029-mm-fix-deferred-split-queue-races-during-migrat.patch
(bsc#1012628 CVE-2026-46017 bsc#1267241).
- Update
patches.kernel.org/7.0.4-030-ocfs2-split-transactions-in-dio-completion-to-a.patch
(bsc#1012628 CVE-2026-46080).
- Update
patches.kernel.org/7.0.4-031-Input-edt-ft5x06-fix-use-after-free-in-debugfs-.patch
(bsc#1012628 CVE-2026-46097).
- Update
patches.kernel.org/7.0.4-032-zram-do-not-forget-to-endio-for-partial-discard.patch
(bsc#1012628 CVE-2026-46089).
- Update
patches.kernel.org/7.0.4-033-wifi-rtw88-check-for-PCI-upstream-bridge-existe.patch
(bsc#1012628 CVE-2026-46092).
- Update
patches.kernel.org/7.0.4-034-wifi-mwifiex-fix-use-after-free-in-mwifiex_adap.patch
(bsc#1012628 CVE-2026-46069).
- Update
patches.kernel.org/7.0.4-038-vfio-cdx-Serialize-VFIO_DEVICE_SET_IRQS-with-a-.patch
(bsc#1012628 CVE-2026-46036).
- Update
patches.kernel.org/7.0.4-039-vfio-cdx-Fix-NULL-pointer-dereference-in-interr.patch
(bsc#1012628 CVE-2026-46034 bsc#1266757).
- Update
patches.kernel.org/7.0.4-041-thermal-core-Fix-thermal-zone-governor-cleanup-.patch
(bsc#1012628 CVE-2026-46021 bsc#1267220).
- Update
patches.kernel.org/7.0.4-042-spi-imx-fix-use-after-free-on-unbind.patch
(bsc#1012628 CVE-2026-45996).
- Update
patches.kernel.org/7.0.4-043-spi-ch341-fix-memory-leaks-on-probe-failures.patch
(bsc#1012628 CVE-2026-46074).
- Update
patches.kernel.org/7.0.4-044-crypto-algif_aead-snapshot-IV-for-async-AEAD-re.patch
(bsc#1012628 CVE-2026-46028).
- Update
patches.kernel.org/7.0.4-048-of-unittest-fix-use-after-free-in-testdrv_probe.patch
(bsc#1012628 CVE-2026-45989 bsc#1266676).
- Update
patches.kernel.org/7.0.4-049-hwmon-powerz-Fix-missing-usb_kill_urb-on-signal.patch
(bsc#1012628 CVE-2026-46073).
- Update
patches.kernel.org/7.0.4-050-EDAC-versalnet-Fix-device_node-leak-in-mc_probe.patch
(bsc#1012628 CVE-2026-46030).
- Update
patches.kernel.org/7.0.4-052-media-amphion-Fix-race-between-m2m-job_abort-an.patch
(bsc#1012628 CVE-2026-46058 bsc#1266677).
- Update
patches.kernel.org/7.0.4-053-ALSA-control-Validate-buf_len-before-strnlen-in.patch
(bsc#1012628 CVE-2026-46088 bsc#1267226).
- Update
patches.kernel.org/7.0.4-054-net-caif-clear-client-service-pointer-on-teardo.patch
(bsc#1012628 CVE-2026-46098).
- Update
patches.kernel.org/7.0.4-055-net-strparser-fix-skb_head-leak-in-strp_abort_s.patch
(bsc#1012628 CVE-2026-46102).
- Update
patches.kernel.org/7.0.4-056-media-mtk-jpeg-fix-use-after-free-in-release-pa.patch
(bsc#1012628 CVE-2026-46011).
- Update
patches.kernel.org/7.0.4-058-PCI-endpoint-pci-epf-ntb-Remove-duplicate-resou.patch
(bsc#1012628 CVE-2026-46009 bsc#1266684).
- Update
patches.kernel.org/7.0.4-064-net-qrtr-ns-Fix-use-after-free-in-driver-remove.patch
(bsc#1012628 CVE-2026-46047 bsc#1267229).
- Update
patches.kernel.org/7.0.4-065-ext2-reject-inodes-with-zero-i_nlink-and-valid-.patch
(bsc#1012628 CVE-2026-46002).
- Update
patches.kernel.org/7.0.4-070-ALSA-ctxfi-Add-fallback-to-default-RSR-for-S-PD.patch
(bsc#1012628 CVE-2026-46049).
- Update
patches.kernel.org/7.0.4-072-erofs-fix-the-out-of-bounds-nameoff-handling-fo.patch
(bsc#1012628 CVE-2026-46078).
- Update
patches.kernel.org/7.0.4-073-ipmi-ssif-Clean-up-kthread-on-errors.patch
(bsc#1012628 CVE-2026-46044).
- Update
patches.kernel.org/7.0.4-074-jbd2-fix-deadlock-in-jbd2_journal_cancel_revoke.patch
(bsc#1012628 CVE-2026-46061 bsc#1266454).
- Update
patches.kernel.org/7.0.4-076-md-raid10-fix-deadlock-with-check-operation-and.patch
(bsc#1012628 CVE-2026-46050 bsc#1266686).
- Update
patches.kernel.org/7.0.4-077-media-rc-igorplugusb-heed-coherency-rules.patch
(bsc#1012628 CVE-2026-46091 bsc#1267238).
- Update
patches.kernel.org/7.0.4-082-mm-damon-core-fix-damon_call-vs-kdamond_fn-exit.patch
(bsc#1012628 CVE-2026-46025).
- Update
patches.kernel.org/7.0.4-083-mm-damon-core-fix-damos_walk-vs-kdamond_fn-exit.patch
(bsc#1012628 CVE-2026-46008 bsc#1266689).
- Update
patches.kernel.org/7.0.4-093-RDMA-mana_ib-Disable-RX-steering-on-RSS-QP-dest.patch
(bsc#1012628 CVE-2026-46084 bsc#1266758).
- Update
patches.kernel.org/7.0.4-094-remoteproc-xlnx-Only-access-buffer-information-.patch
(bsc#1012628 CVE-2026-46016 bsc#1266729).
- Update
patches.kernel.org/7.0.4-098-landlock-Fix-LOG_SUBDOMAINS_OFF-inheritance-acr.patch
(bsc#1012628 CVE-2026-46057 bsc#1266683).
- Update
patches.kernel.org/7.0.4-104-rbd-fix-null-ptr-deref-when-device_add_disk-fai.patch
(bsc#1012628 CVE-2026-46079 bsc#1266452).
- Update
patches.kernel.org/7.0.4-112-io_uring-zcrx-fix-user_struct-uaf.patch
(bsc#1012628 CVE-2026-45995 bsc#1267242).
- Update
patches.kernel.org/7.0.4-119-ALSA-caiaq-Handle-probe-errors-properly.patch
(bsc#1012628 CVE-2026-46004 bsc#1267222).
- Update
patches.kernel.org/7.0.4-126-rxrpc-Fix-potential-UAF-after-skb_unshare-failu.patch
(bsc#1012628 CVE-2026-45998).
- Update
patches.kernel.org/7.0.4-127-rxrpc-Fix-memory-leaks-in-rxkad_verify_response.patch
(bsc#1012628 CVE-2026-46012).
- Update
patches.kernel.org/7.0.4-128-rxrpc-Fix-conn-level-packet-handling-to-unshare.patch
(bsc#1012628 CVE-2026-46000).
- Update
patches.kernel.org/7.0.4-129-rxrpc-Fix-rxkad-crypto-unalignment-handling.patch
(bsc#1012628 CVE-2026-46085 bsc#1266724).
- Update
patches.kernel.org/7.0.4-130-rxrpc-Fix-error-handling-in-rxgk_extract_token.patch
(bsc#1012628 CVE-2026-46010 bsc#1266760).
- Update
patches.kernel.org/7.0.4-131-rxrpc-Fix-re-decryption-of-RESPONSE-packets.patch
(bsc#1012628 CVE-2026-45988 bsc#1266455).
- Update
patches.kernel.org/7.0.4-138-net-qrtr-ns-Limit-the-maximum-number-of-lookups.patch
(bsc#1012628 CVE-2026-46026 bsc#1266876).
- Update
patches.kernel.org/7.0.4-139-net-qrtr-ns-Free-the-node-during-ctrl_cmd_bye.patch
(bsc#1012628 CVE-2026-46038 bsc#1266695).
- Update
patches.kernel.org/7.0.4-140-net-qrtr-ns-Limit-the-total-number-of-nodes.patch
(bsc#1012628 CVE-2026-46003 bsc#1267210).
- Update
patches.kernel.org/7.0.4-141-net-rds-fix-MR-cleanup-on-copy-error.patch
(bsc#1012628 CVE-2026-46053).
- Update
patches.kernel.org/7.0.4-143-net-smc-avoid-early-lgr-access-in-smc_clc_wait_.patch
(bsc#1012628 CVE-2026-46027 bsc#1266744).
- Update
patches.kernel.org/7.0.4-144-net-ks8851-Reinstate-disabling-of-BHs-around-IR.patch
(bsc#1012628 CVE-2026-46031).
- Update
patches.kernel.org/7.0.4-145-net-bridge-use-a-stable-FDB-dst-snapshot-in-RCU.patch
(bsc#1012628 CVE-2026-46086).
- Update
patches.kernel.org/7.0.4-150-slub-fix-data-loss-and-overflow-in-krealloc.patch
(bsc#1012628 CVE-2026-45990 bsc#1267225).
- Update
patches.kernel.org/7.0.4-152-RDMA-rxe-Validate-pad-and-ICRC-before-payload_s.patch
(bsc#1012628 CVE-2026-46043 bsc#1266901).
- Update
patches.kernel.org/7.0.4-154-ipv4-icmp-validate-reply-type-before-using-icmp.patch
(bsc#1012628 CVE-2026-46037).
- Update
patches.kernel.org/7.0.4-155-libceph-Prevent-potential-null-ptr-deref-in-cep.patch
(bsc#1012628 CVE-2026-46024 bsc#1267218).
- Update
patches.kernel.org/7.0.4-156-spi-fix-resource-leaks-on-device-setup-failure.patch
(bsc#1012628 CVE-2026-46083 bsc#1266696).
- Update
patches.kernel.org/7.0.4-157-apparmor-Fix-string-overrun-due-to-missing-term.patch
(bsc#1012628 CVE-2026-46055 bsc#1266682).
- Update
patches.kernel.org/7.0.4-162-fbdev-defio-Disconnect-deferred-I-O-from-the-li.patch
(bsc#1012628 CVE-2026-46065).
- Update
patches.kernel.org/7.0.4-165-hwmon-powerz-Avoid-cacheline-sharing-for-DMA-bu.patch
(bsc#1012628 CVE-2026-46007).
- Update
patches.kernel.org/7.0.4-170-selinux-fix-overlayfs-mmap-and-mprotect-access-.patch
(bsc#1012628 CVE-2026-46054).
- Update
patches.kernel.org/7.0.4-171-hwmon-pt5161l-Fix-bugs-in-pt5161l_read_block_da.patch
(bsc#1012628 CVE-2026-46001 bsc#1266736).
- Update
patches.kernel.org/7.0.4-176-crypto-qat-fix-IRQ-cleanup-on-6xxx-probe-failur.patch
(bsc#1012628 CVE-2026-46060).
- Update
patches.kernel.org/7.0.4-178-xfs-fix-a-resource-leak-in-xfs_alloc_buftarg.patch
(bsc#1012628 CVE-2026-46005).
- Update
patches.kernel.org/7.0.4-184-tpm2-sessions-Fix-missing-tpm_buf_destroy-in-tp.patch
(bsc#1012628 CVE-2026-46096).
- Update
patches.kernel.org/7.0.4-190-mm-vmalloc-take-vmap_purge_lock-in-shrinker.patch
(bsc#1012628 CVE-2026-46093).
- Update
patches.kernel.org/7.0.4-191-mm-memfd_luo-fix-physical-address-conversion-in.patch
(bsc#1012628 CVE-2026-46013).
- Update
patches.kernel.org/7.0.4-192-mm-mempolicy-fix-memory-leaks-in-weighted_inter.patch
(bsc#1012628 CVE-2026-46042).
- Update
patches.kernel.org/7.0.4-193-mm-damon-stat-fix-memory-leak-on-damon_start-fa.patch
(bsc#1012628 CVE-2026-46087).
- Update
patches.kernel.org/7.0.4-194-mm-damon-core-validate-damos_quota_goal-nid-for.patch
(bsc#1012628 CVE-2026-46020).
- Update
patches.kernel.org/7.0.4-195-mm-damon-core-validate-damos_quota_goal-nid-for.patch
(bsc#1012628 CVE-2026-46067).
- Update
patches.kernel.org/7.0.4-204-KVM-nSVM-Sync-interrupt-shadow-to-cached-vmcb12.patch
(bsc#1012628 CVE-2026-45987 bsc#1267213).
- Update
patches.kernel.org/7.0.4-205-KVM-SVM-Inject-UD-for-INVLPGA-if-EFER.SVME-0.patch
(bsc#1012628 CVE-2026-46082).
- Update
patches.kernel.org/7.0.4-208-KVM-nSVM-Always-use-NextRIP-as-vmcb02-s-NextRIP.patch
(bsc#1012628 CVE-2026-46059).
- Update
patches.kernel.org/7.0.4-212-KVM-nSVM-Avoid-clearing-VMCB_LBR-in-vmcb12.patch
(bsc#1012628 CVE-2026-46071).
- Update
patches.kernel.org/7.0.4-215-KVM-SVM-Add-missing-save-restore-handling-of-LB.patch
(bsc#1012628 CVE-2026-46014).
- Update
patches.kernel.org/7.0.4-219-KVM-nSVM-Triple-fault-if-restore-host-CR3-fails.patch
(bsc#1012628 CVE-2026-46032).
- Update
patches.kernel.org/7.0.4-227-KVM-nSVM-Raise-UD-if-unhandled-VMMCALL-isn-t-in.patch
(bsc#1012628 CVE-2026-46076).
- Update
patches.kernel.org/7.0.4-231-ext4-fix-bounds-check-in-check_xattrs-to-preven.patch
(bsc#1012628 CVE-2026-46094 bsc#1266927).
- Update
patches.kernel.org/7.0.4-232-ext4-fix-missing-brelse-in-ext4_xattr_inode_dec.patch
(bsc#1012628 CVE-2026-46046 bsc#1266726).
- Update
patches.kernel.org/7.0.4-233-udf-fix-partition-descriptor-append-bookkeeping.patch
(bsc#1012628 CVE-2026-45991 bsc#1267227).
- Update
patches.kernel.org/7.0.4-237-md-md-llbitmap-skip-reading-rdevs-that-are-not-.patch
(bsc#1012628 CVE-2026-46045).
- Update
patches.kernel.org/7.0.4-238-md-md-llbitmap-raise-barrier-before-state-machi.patch
(bsc#1012628 CVE-2026-46095).
- Update
patches.kernel.org/7.0.4-239-md-raid5-fix-soft-lockup-in-retry_aligned_read.patch
(bsc#1012628 CVE-2026-46051).
- Update
patches.kernel.org/7.0.4-240-md-raid5-validate-payload-size-before-accessing.patch
(bsc#1012628 CVE-2026-46070).
- Update
patches.kernel.org/7.0.4-244-inotify-fix-watch-count-leak-when-fsnotify_add_.patch
(bsc#1012628 CVE-2026-46040).
- Update
patches.kernel.org/7.0.4-246-x86-shstk-Prevent-deadlock-during-shstk-sigretu.patch
(bsc#1012628 CVE-2026-46063 bsc#1267228).
- Update
patches.kernel.org/7.0.4-248-tcp-call-sk_data_ready-after-listener-migration.patch
(bsc#1012628 CVE-2026-46015).
- Update
patches.kernel.org/7.0.4-254-Bluetooth-hci_event-fix-potential-UAF-in-SSP-pa.patch
(bsc#1012628 CVE-2026-46056).
- Update
patches.kernel.org/7.0.4-256-can-ucan-fix-devres-lifetime.patch
(bsc#1012628 CVE-2026-46103).
- Update
patches.kernel.org/7.0.4-257-crypto-acomp-fix-wrong-pointer-stored-by-acomp_.patch
(bsc#1012628 CVE-2026-46081 bsc#1266453).
- Update
patches.kernel.org/7.0.4-259-crypto-atmel-aes-Fix-3-page-memory-leak-in-atme.patch
(bsc#1012628 CVE-2026-46019 bsc#1266732).
- Update
patches.kernel.org/7.0.4-262-crypto-ccree-fix-a-memory-leak-in-cc_mac_digest.patch
(bsc#1012628 CVE-2026-45986 bsc#1266739).
- Update
patches.kernel.org/7.0.4-263-crypto-atmel-tdes-fix-DMA-sync-direction.patch
(bsc#1012628 CVE-2026-46077).
- Update
patches.kernel.org/7.0.4-265-crypto-atmel-sha204a-Fix-potential-UAF-and-memo.patch
(bsc#1012628 CVE-2026-46075).
- Update
patches.kernel.org/7.0.4-267-crypto-nx-fix-bounce-buffer-leaks-in-nx842_cryp.patch
(bsc#1012628 CVE-2026-46068).
- Update
patches.kernel.org/7.0.4-270-dm-mirror-fix-integer-overflow-in-create_dirty_.patch
(bsc#1012628 CVE-2026-46023).
- Update
patches.kernel.org/7.0.4-271-erofs-fix-unsigned-underflow-in-z_erofs_lz4_han.patch
(bsc#1012628 CVE-2026-45999 bsc#1266750).
- Update
patches.kernel.org/7.0.4-272-ceph-fix-num_ops-off-by-one-when-crypto-allocat.patch
(bsc#1012628 CVE-2026-46066).
- Update
patches.kernel.org/7.0.4-273-ceph-only-d_add-negative-dentries-when-they-are.patch
(bsc#1012628 CVE-2026-46052).
- Update
patches.kernel.org/7.0.4-278-ntfs3-add-buffer-boundary-checks-to-run_unpack.patch
(bsc#1012628 CVE-2026-46072).
- Update
patches.kernel.org/7.0.4-279-ntfs3-fix-integer-overflow-in-run_unpack-volume.patch
(bsc#1012628 CVE-2026-46062).
- Update
patches.kernel.org/7.0.4-281-rxgk-Fix-potential-integer-overflow-in-length-c.patch
(bsc#1012628 CVE-2026-46039).
- Update
patches.kernel.org/7.0.4-283-scsi-sd-fix-missing-put_disk-when-device_add-di.patch
(bsc#1012628 CVE-2026-45997 bsc#1266740).
- Update
patches.kernel.org/7.0.4-294-crypto-authencesn-reject-short-ahash-digests-du.patch
(bsc#1012628 CVE-2026-46033 bsc#1266692).
- Update
patches.kernel.org/7.0.4-296-ALSA-caiaq-Fix-potentially-leftover-ep1_in_urb-.patch
(bsc#1012628 CVE-2026-45992 bsc#1267231).
- Update
patches.kernel.org/7.0.4-301-ALSA-caiaq-fix-usb_dev-refcount-leak-on-probe-f.patch
(bsc#1012628 CVE-2026-46048).
- Update
patches.kernel.org/7.0.4-302-ALSA-aloop-Fix-peer-runtime-UAF-during-format-c.patch
(bsc#1012628 CVE-2026-46090).
- Update
patches.kernel.org/7.0.4-304-mm-page_alloc-return-NULL-early-from-alloc_froz.patch
(bsc#1012628 CVE-2026-46035 bsc#1266756).
- Update
patches.kernel.org/7.0.4-305-mm-slab-return-NULL-early-from-kmalloc_nolock-i.patch
(bsc#1012628 CVE-2026-46029).
- Update
patches.kernel.org/7.0.4-306-net-ipv6-fix-NOREF-dst-use-in-seg6-and-rpl-lwtu.patch
(bsc#1012628 CVE-2026-46099 bsc#1266722).
- Update
patches.kernel.org/7.0.4-307-netfilter-reject-zero-shift-in-nft_bitwise.patch
(bsc#1012628 CVE-2026-46101 bsc#1266878).
- Update
patches.kernel.org/7.0.7-001-scsi-target-configfs-Bound-snprintf-return-in-t.patch
(bsc#1012628 CVE-2026-46149).
- Update
patches.kernel.org/7.0.7-002-ipmi-Add-limits-to-event-and-receive-message-re.patch
(bsc#1012628 CVE-2026-46177).
- Update
patches.kernel.org/7.0.7-003-ipmi-Check-event-message-buffer-response-for-ba.patch
(bsc#1012628 CVE-2026-46128).
- Update
patches.kernel.org/7.0.7-004-ipmi-si-Return-state-to-normal-if-message-alloc.patch
(bsc#1012628 CVE-2026-46108).
- Update
patches.kernel.org/7.0.7-011-tracepoint-balance-regfunc-on-func_add-failure-.patch
(bsc#1012628 CVE-2026-46196 bsc#1266848).
- Update
patches.kernel.org/7.0.7-013-ASoC-SOF-Don-t-allow-pointer-operations-on-unco.patch
(bsc#1012628 CVE-2026-46179).
- Update
patches.kernel.org/7.0.7-017-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
(bsc#1012628 CVE-2026-46113 bsc#1266969).
- Update
patches.kernel.org/7.0.7-021-exit-prevent-preemption-of-oopsing-TASK_DEAD-ta.patch
(bsc#1012628 CVE-2026-46173).
- Update
patches.kernel.org/7.0.7-024-wifi-mt76-mt7921-fix-a-potential-clc-buffer-len.patch
(bsc#1012628 CVE-2026-46136 bsc#1266831).
- Update
patches.kernel.org/7.0.7-026-wifi-b43legacy-enforce-bounds-check-on-firmware.patch
(bsc#1012628 CVE-2026-46163 bsc#1266863).
- Update
patches.kernel.org/7.0.7-027-wifi-mac80211-drop-stray-static-from-fast-RX-rx.patch
(bsc#1012628 CVE-2026-46152 bsc#1266855).
- Update
patches.kernel.org/7.0.7-028-wifi-rsi-fix-kthread-lifetime-race-between-self.patch
(bsc#1012628 CVE-2026-46187 bsc#1266842).
- Update
patches.kernel.org/7.0.7-029-wifi-mac80211-use-safe-list-iteration-in-radar-.patch
(bsc#1012628 CVE-2026-46166 bsc#1266839).
- Update
patches.kernel.org/7.0.7-031-wifi-mac80211-remove-station-if-connection-prep.patch
(bsc#1012628 CVE-2026-46125 bsc#1266879).
- Update
patches.kernel.org/7.0.7-032-wifi-b43-enforce-bounds-check-on-firmware-key-i.patch
(bsc#1012628 CVE-2026-46122).
- Update
patches.kernel.org/7.0.7-033-wifi-brcmfmac-Fix-potential-use-after-free-issu.patch
(bsc#1012628 CVE-2026-46180 bsc#1266813).
- Update
patches.kernel.org/7.0.7-034-usb-usblp-fix-heap-leak-in-IEEE-1284-device-ID-.patch
(bsc#1012628 CVE-2026-46151).
- Update
patches.kernel.org/7.0.7-035-usb-usblp-fix-uninitialized-heap-leak-via-LPGET.patch
(bsc#1012628 CVE-2026-46167 bsc#1266832).
- Update
patches.kernel.org/7.0.7-037-ALSA-usb-audio-Avoid-potential-endless-loop-in-.patch
(bsc#1012628 CVE-2026-46146).
- Update
patches.kernel.org/7.0.7-042-usb-ulpi-fix-memory-leak-on-ulpi_register-error.patch
(bsc#1012628 CVE-2026-46109 bsc#1266850).
- Update
patches.kernel.org/7.0.7-045-ALSA-pcm-oss-Fix-data-race-at-accessing-runtime.patch
(bsc#1012628 CVE-2026-46157).
- Update
patches.kernel.org/7.0.7-052-sched_ext-Read-scx_root-under-scx_cgroup_ops_rw.patch
(bsc#1012628 CVE-2026-46154 bsc#1266812).
- Update
patches.kernel.org/7.0.7-054-xfrm-defensively-unhash-xfrm_state-lists-in-__x.patch
(bsc#1012628 CVE-2026-46116).
- Update
patches.kernel.org/7.0.7-055-ipv6-xfrm6-release-dst-on-error-in-xfrm6_rcv_en.patch
(bsc#1012628 CVE-2026-46172 bsc#1266903).
- Update
patches.kernel.org/7.0.7-056-xfrm-ah-account-for-ESN-high-bits-in-async-call.patch
(bsc#1012628 CVE-2026-46193).
- Update
patches.kernel.org/7.0.7-058-selinux-use-sk-blob-accessor-in-socket-permissi.patch
(bsc#1012628 CVE-2026-46104).
- Update
patches.kernel.org/7.0.7-068-Bluetooth-virtio_bt-clamp-rx-length-before-skb_.patch
(bsc#1012628 CVE-2026-46123).
- Update
patches.kernel.org/7.0.7-069-Bluetooth-virtio_bt-validate-rx-pkt_type-header.patch
(bsc#1012628 CVE-2026-46186 bsc#1266917).
- Update
patches.kernel.org/7.0.7-070-Bluetooth-btmtk-validate-WMT-event-SKB-length-b.patch
(bsc#1012628 CVE-2026-46140).
- Update
patches.kernel.org/7.0.7-071-Bluetooth-hci_conn-fix-potential-UAF-in-create_.patch
(bsc#1012628 CVE-2026-46111).
- Update
patches.kernel.org/7.0.7-072-Bluetooth-hci_event-Fix-OOB-read-and-infinite-l.patch
(bsc#1012628 CVE-2026-46138).
- Update
patches.kernel.org/7.0.7-073-Bluetooth-L2CAP-Fix-null-ptr-deref-in-l2cap_soc.patch
(bsc#1012628 CVE-2026-45835 bsc#1266411).
- Update
patches.kernel.org/7.0.7-074-Bluetooth-L2CAP-Fix-null-ptr-deref-in-l2cap_soc.patch
(bsc#1012628 CVE-2026-45834 bsc#1266412).
- Update
patches.kernel.org/7.0.7-075-Bluetooth-L2CAP-Fix-null-ptr-deref-in-l2cap_soc.patch
(bsc#1012628 CVE-2026-45836 bsc#1266410).
- Update
patches.kernel.org/7.0.7-091-fanotify-fix-false-positive-on-permission-event.patch
(bsc#1012628 CVE-2026-46150).
- Update
patches.kernel.org/7.0.7-093-mtd-spi-nor-debugfs-fix-out-of-bounds-read-in-s.patch
(bsc#1012628 CVE-2026-46190 bsc#1266934).
- Update
patches.kernel.org/7.0.7-098-net-rtnetlink-zero-ifla_vf_broadcast-to-avoid-s.patch
(bsc#1012628 CVE-2026-46132).
- Update
patches.kernel.org/7.0.7-110-sound-ua101-fix-division-by-zero-at-probe.patch
(bsc#1012628 CVE-2026-46184 bsc#1266864).
- Update
patches.kernel.org/7.0.7-112-pseries-papr-hvpipe-Prevent-kernel-stack-memory.patch
(bsc#1012628 CVE-2026-46182).
- Update
patches.kernel.org/7.0.7-113-pseries-papr-hvpipe-Fix-null-ptr-deref-in-papr_.patch
(bsc#1012628 CVE-2026-46118 bsc#1267237).
- Update
patches.kernel.org/7.0.7-116-net-libwx-fix-VF-illegal-register-access.patch
(bsc#1012628 CVE-2026-46142 bsc#1266824).
- Update
patches.kernel.org/7.0.7-117-ip6_gre-Use-cached-t-net-in-ip6erspan_changelin.patch
(bsc#1012628 CVE-2026-46120).
- Update
patches.kernel.org/7.0.7-123-platform-chrome-cros_ec_typec-Init-mutex-in-Thu.patch
(bsc#1012628 CVE-2026-46134 bsc#1266940).
- Update
patches.kernel.org/7.0.7-133-block-add-pgmap-check-to-biovec_phys_mergeable.patch
(bsc#1012628 CVE-2026-46115 bsc#1266874).
- Update
patches.kernel.org/7.0.7-139-fbcon-Avoid-OOB-font-access-if-console-rotation.patch
(bsc#1012628 CVE-2026-46191).
- Update
patches.kernel.org/7.0.7-146-ice-fix-double-free-in-ice_sf_eth_activate-erro.patch
(bsc#1012628 CVE-2026-46162 bsc#1266840).
- Update
patches.kernel.org/7.0.7-149-spi-microchip-core-qspi-don-t-attempt-to-transm.patch
(bsc#1012628 CVE-2026-46192 bsc#1266909).
- Update
patches.kernel.org/7.0.7-150-spi-microchip-core-qspi-control-built-in-cs-man.patch
(bsc#1012628 CVE-2026-46148).
- Update
patches.kernel.org/7.0.7-172-ASoC-qcom-q6apm-lpass-dai-Fix-multiple-graph-op.patch
(bsc#1012628 CVE-2026-46143).
- Update
patches.kernel.org/7.0.7-175-btrfs-fix-btrfs_ioctl_space_info-slot_count-TOC.patch
(bsc#1012628 CVE-2026-46159).
- Update
patches.kernel.org/7.0.7-176-btrfs-fix-double-free-in-create_space_info-erro.patch
(bsc#1012628 CVE-2026-46129 bsc#1266828).
- Update
patches.kernel.org/7.0.7-177-btrfs-fix-double-free-in-create_space_info_sub_.patch
(bsc#1012628 CVE-2026-46164 bsc#1266906).
- Update
patches.kernel.org/7.0.7-178-btrfs-fix-missing-last_unlink_trans-update-when.patch
(bsc#1012628 CVE-2026-46160).
- Update
patches.kernel.org/7.0.7-179-dm-thin-fix-metadata-refcount-underflow.patch
(bsc#1012628 CVE-2026-46107).
- Update
patches.kernel.org/7.0.7-182-eventfs-Hold-eventfs_mutex-and-SRCU-when-remoun.patch
(bsc#1012628 CVE-2026-46106).
- Update
patches.kernel.org/7.0.7-186-dm-verity-fec-fix-reading-parity-bytes-split-ac.patch
(bsc#1012628 CVE-2026-46130).
- Update
patches.kernel.org/7.0.7-189-isofs-validate-block-number-from-NFS-file-handl.patch
(bsc#1012628 CVE-2026-46124 bsc#1266847).
- Update
patches.kernel.org/7.0.7-197-libceph-Fix-slab-out-of-bounds-access-in-auth-m.patch
(bsc#1012628 CVE-2026-46119).
- Update
patches.kernel.org/7.0.7-198-md-raid10-fix-divide-by-zero-in-setup_geo-with-.patch
(bsc#1012628 CVE-2026-46161 bsc#1266838).
- Update
patches.kernel.org/7.0.7-200-nvmet-tcp-fix-race-between-ICReq-handling-and-q.patch
(bsc#1012628 CVE-2026-46135).
- Update
patches.kernel.org/7.0.7-202-openvswitch-vport-fix-self-deadlock-on-release-.patch
(bsc#1012628 CVE-2026-46165 bsc#1266836).
- Update
patches.kernel.org/7.0.7-205-RDMA-hns-Fix-unlocked-call-to-hns_roce_qp_remov.patch
(bsc#1012628 CVE-2026-46112).
- Update
patches.kernel.org/7.0.7-206-riscv-kvm-fix-vector-context-allocation-leak.patch
(bsc#1012628 CVE-2026-46171 bsc#1266866).
- Update
patches.kernel.org/7.0.7-209-scsi-mpt3sas-Limit-NVMe-request-size-to-2-MiB.patch
(bsc#1012628 CVE-2026-46105).
- Update
patches.kernel.org/7.0.7-210-smb-client-fix-out-of-bounds-read-in-smb2_compo.patch
(bsc#1012628 CVE-2026-46155).
- Update
patches.kernel.org/7.0.7-211-smb-client-fix-out-of-bounds-read-in-symlink_da.patch
(bsc#1012628 CVE-2026-46185 bsc#1266830).
- Update
patches.kernel.org/7.0.7-212-smb-client-use-kzalloc-to-zero-initialize-secur.patch
(bsc#1012628 CVE-2026-46139).
- Update
patches.kernel.org/7.0.7-213-smb-client-validate-dacloffset-before-building-.patch
(bsc#1012628 CVE-2026-46195 bsc#1266860).
- Update
patches.kernel.org/7.0.7-214-KVM-x86-check-for-nEPT-nNPT-in-slow-flush-hyper.patch
(bsc#1012628 CVE-2026-46131).
- Update
patches.kernel.org/7.0.7-219-mm-damon-sysfs-schemes-protect-memcg_path-kfree.patch
(bsc#1012628 CVE-2026-46121 bsc#1266932).
- Update
patches.kernel.org/7.0.7-220-mm-damon-sysfs-schemes-protect-path-kfree-with-.patch
(bsc#1012628 CVE-2026-46183 bsc#1266924).
- Update
patches.kernel.org/7.0.7-226-powerpc-xive-fix-kmemleak-caused-by-incorrect-c.patch
(bsc#1012628 CVE-2026-46141 bsc#1266877).
- Update
patches.kernel.org/7.0.7-232-RDMA-mana-Fix-error-unwind-in-mana_ib_create_qp.patch
(bsc#1012628 CVE-2026-46144 bsc#1266913).
- Update
patches.kernel.org/7.0.7-233-RDMA-mana-Fix-mana_destroy_wq_obj-cleanup-in-ma.patch
(bsc#1012628 CVE-2026-46126).
- Update
patches.kernel.org/7.0.7-234-RDMA-mana-Remove-user-triggerable-WARN_ON-in-ma.patch
(bsc#1012628 CVE-2026-46117).
- Update
patches.kernel.org/7.0.7-235-RDMA-mana-Validate-rx_hash_key_len.patch
(bsc#1012628 CVE-2026-46145).
- Update
patches.kernel.org/7.0.7-236-RDMA-mlx4-Fix-mis-use-of-RCU-in-mlx4_srq_event.patch
(bsc#1012628 CVE-2026-46181 bsc#1266826).
- Update
patches.kernel.org/7.0.7-237-RDMA-mlx4-Fix-resource-leak-on-error-in-mlx4_ib.patch
(bsc#1012628 CVE-2026-46178).
- Update
patches.kernel.org/7.0.7-238-RDMA-mlx5-Fix-error-path-fall-through-in-mlx5_i.patch
(bsc#1012628 CVE-2026-46176 bsc#1266816).
- Update
patches.kernel.org/7.0.7-239-RDMA-ocrdma-Don-t-NULL-deref-uctx-on-errors-in-.patch
(bsc#1012628 CVE-2026-46127 bsc#1267236).
- Update
patches.kernel.org/7.0.7-240-RDMA-rxe-Reject-non-8-byte-ATOMIC_WRITE-payload.patch
(bsc#1012628 CVE-2026-46114 bsc#1266972).
- Update
patches.kernel.org/7.0.7-241-RDMA-rxe-Reject-unknown-opcodes-before-ICRC-pro.patch
(bsc#1012628 CVE-2026-46133 bsc#1266928).
- Update
patches.kernel.org/7.0.7-242-RDMA-vmw_pvrdma-Fix-double-free-on-pvrdma_alloc.patch
(bsc#1012628 CVE-2026-46189 bsc#1266918).
- Update
patches.kernel.org/7.0.7-255-mptcp-fix-scheduling-with-atomic-in-timestamp-s.patch
(bsc#1012628 CVE-2026-46168 bsc#1266869).
- Update
patches.kernel.org/7.0.7-260-mptcp-pm-ADD_ADDR-rtx-fix-potential-data-race.patch
(bsc#1012628 CVE-2026-46137).
- Update
patches.kernel.org/7.0.7-261-mptcp-pm-ADD_ADDR-rtx-always-decrease-sk-refcou.patch
(bsc#1012628 CVE-2026-46158 bsc#1266880).
- Update
patches.kernel.org/7.0.7-262-mptcp-pm-ADD_ADDR-rtx-free-sk-if-last.patch
(bsc#1012628 CVE-2026-46170).
- Update
patches.kernel.org/7.0.7-271-f2fs-fix-node_cnt-race-between-extent-node-dest.patch
(bsc#1012628 CVE-2026-46194).
- Update
patches.kernel.org/7.0.7-275-f2fs-fix-fsck-inconsistency-caused-by-FGGC-of-n.patch
(bsc#1012628 CVE-2026-46175 bsc#1266865).
- Update
patches.kernel.org/7.0.7-281-KVM-arm64-Fix-pin-leak-and-publication-ordering.patch
(bsc#1012628 CVE-2026-46147).
- Update
patches.kernel.org/7.0.7-282-LoongArch-Fix-potential-ADE-in-loongson_gpu_fix.patch
(bsc#1012628 CVE-2026-46156).
- Update
patches.kernel.org/7.0.7-289-bpf-Fix-use-after-free-in-arena_vm_close-on-for.patch
(bsc#1012628 CVE-2026-45837 bsc#1266398).
- Update
patches.kernel.org/7.0.7-290-octeon_ep_vf-add-NULL-check-for-napi_build_skb.patch
(bsc#1012628 CVE-2026-46188 bsc#1266859).
- Update
patches.kernel.org/7.0.7-296-hfsplus-fix-uninit-value-by-validating-catalog-.patch
(bsc#1012628 CVE-2026-46169).
- Update
patches.kernel.org/7.0.7-299-8021q-delete-cleared-egress-QoS-mappings.patch
(bsc#1012628 CVE-2026-46153).
- Update
patches.kernel.org/7.0.7-303-net-stmmac-Prevent-NULL-deref-when-RX-memory-ex.patch
(bsc#1012628 CVE-2026-46110 bsc#1266759).
- Update
patches.kernel.org/7.0.7-305-x86-CPU-AMD-Prevent-improper-isolation-of-share.patch
(bsc#1012628 CVE-2026-46174).
- Update
patches.kernel.org/7.0.9-001-HID-playstation-Clamp-num_touch_reports.patch
(bsc#1012628 CVE-2026-46232).
- Update
patches.kernel.org/7.0.9-002-HID-appletb-kbd-fix-UAF-in-inactivity-timer-cle.patch
(bsc#1012628 CVE-2026-46213).
- Update
patches.kernel.org/7.0.9-003-HID-appletb-kbd-run-inactivity-autodim-from-wor.patch
(bsc#1012628 CVE-2026-46202 bsc#1266849).
- Update
patches.kernel.org/7.0.9-028-staging-media-atomisp-Disallow-all-private-IOCT.patch
(bsc#1012628 CVE-2026-46205 bsc#1266908).
- Update
patches.kernel.org/7.0.9-033-media-rc-xbox_remote-heed-DMA-restrictions.patch
(bsc#1012628 CVE-2026-46236 bsc#1266910).
- Update
patches.kernel.org/7.0.9-035-media-i2c-ov5647-Fix-runtime-PM-refcount-leak-i.patch
(bsc#1012628 CVE-2026-46239).
- Update
patches.kernel.org/7.0.9-040-media-rockchip-rkcif-Add-missing-MUST_CONNECT-f.patch
(bsc#1012628 CVE-2026-46222).
- Update
patches.kernel.org/7.0.9-053-media-saa7164-add-ioremap-return-checks-and-cle.patch
(bsc#1012628 CVE-2026-46235).
- Update
patches.kernel.org/7.0.9-070-media-iris-Fix-use-after-free-in-iris_release_i.patch
(bsc#1012628 CVE-2026-46240 bsc#1266843).
- Update
patches.kernel.org/7.0.9-076-media-iris-fix-use-after-free-of-fmt_src-during.patch
(bsc#1012628 CVE-2026-46210).
- Update
patches.kernel.org/7.0.9-079-drm-xe-hdcp-Add-NULL-check-for-media_gt-in-inte.patch
(bsc#1012628 CVE-2026-46216 bsc#1267234).
- Update
patches.kernel.org/7.0.9-090-spi-ch341-fix-devres-lifetime.patch
(bsc#1012628 CVE-2026-46228).
- Update
patches.kernel.org/7.0.9-092-spi-fsl-fix-controller-deregistration.patch
(bsc#1012628 CVE-2026-46226).
- Update
patches.kernel.org/7.0.9-099-spi-rspi-fix-controller-deregistration.patch
(bsc#1012628 CVE-2026-46225).
- Update
patches.kernel.org/7.0.9-110-spi-mpc52xx-fix-use-after-free-on-registration-.patch
(bsc#1012628 CVE-2026-46241 bsc#1266931).
- Update
patches.kernel.org/7.0.9-111-spi-mpc52xx-fix-controller-deregistration.patch
(bsc#1012628 CVE-2026-46200 bsc#1266835).
- Update
patches.kernel.org/7.0.9-112-spi-mpc52xx-fix-use-after-free-on-unbind.patch
(bsc#1012628 CVE-2026-46219).
- Update
patches.kernel.org/7.0.9-120-spi-cadence-quadspi-fix-unclocked-access-on-unb.patch
(bsc#1012628 CVE-2026-46203).
- Update
patches.kernel.org/7.0.9-121-drm-msm-gem-fix-error-handling-in-msm_ioctl_gem.patch
(bsc#1012628 CVE-2026-46211).
- Update
patches.kernel.org/7.0.9-127-drm-amdkfd-Clear-VRAM-on-allocation-to-prevent-.patch
(bsc#1012628 CVE-2026-46229).
- Update
patches.kernel.org/7.0.9-135-drm-amdgpu-Add-bounds-checking-to-ib_-get-set-_.patch
(bsc#1012628 CVE-2026-46218).
- Update
patches.kernel.org/7.0.9-136-drm-amdgpu-vcn4-Prevent-OOB-reads-when-parsing-.patch
(bsc#1012628 CVE-2026-46204).
- Update
patches.kernel.org/7.0.9-138-drm-amdgpu-vcn4-Prevent-OOB-reads-when-parsing-.patch
(bsc#1012628 CVE-2026-46199).
- Update
patches.kernel.org/7.0.9-139-drm-amdgpu-vcn3-Prevent-OOB-reads-when-parsing-.patch
(bsc#1012628 CVE-2026-46230).
- Update
patches.kernel.org/7.0.9-141-drm-gem-Fix-inconsistent-plane-dimension-calcul.patch
(bsc#1012628 CVE-2026-46209).
- Update
patches.kernel.org/7.0.9-143-drm-amdkfd-validate-SVM-ioctl-nattr-against-buf.patch
(bsc#1012628 CVE-2026-46197).
- Update
patches.kernel.org/7.0.9-146-drm-xe-Fix-bo-leak-in-xe_dma_buf_init_obj-on-al.patch
(bsc#1012628 CVE-2026-46224 bsc#1266845).
- Update
patches.kernel.org/7.0.9-148-drm-xe-Fix-dma-buf-attachment-leak-in-xe_gem_pr.patch
(bsc#1012628 CVE-2026-46201 bsc#1266841).
- Update
patches.kernel.org/7.0.9-151-drm-Set-old-handle-to-NULL-before-prime-swap-in.patch
(bsc#1012628 CVE-2026-46215 bsc#1267235).
- Update
patches.kernel.org/7.0.9-162-drm-amdgpu-sdma4-replace-BUG_ON-with-WARN_ON-in.patch
(bsc#1012628 CVE-2026-46220).
- Update
patches.kernel.org/7.0.9-169-sctp-revalidate-list-cursor-after-sctp_sendmsg_.patch
(bsc#1012628 CVE-2026-46227).
- Update
patches.kernel.org/7.0.9-170-batman-adv-fix-integer-overflow-on-buff_pos.patch
(bsc#1012628 CVE-2026-46198 bsc#1266854).
- Update
patches.kernel.org/7.0.9-171-batman-adv-reject-new-tp_meter-sessions-during-.patch
(bsc#1012628 CVE-2026-46206 bsc#1266834).
- Update
patches.kernel.org/7.0.9-172-batman-adv-stop-tp_meter-sessions-during-mesh-t.patch
(bsc#1012628 CVE-2026-46208 bsc#1266853).
- Update
patches.kernel.org/7.0.9-173-batman-adv-stop-caching-unowned-originator-poin.patch
(bsc#1012628 CVE-2026-46238 bsc#1266846).
- Update
patches.kernel.org/7.0.9-175-batman-adv-bla-prevent-use-after-free-when-dele.patch
(bsc#1012628 CVE-2026-46212).
- Update
patches.kernel.org/7.0.9-176-batman-adv-bla-only-purge-non-released-claims.patch
(bsc#1012628 CVE-2026-46233).
- Update
patches.kernel.org/7.0.9-177-batman-adv-bla-put-backbone-reference-on-failed.patch
(bsc#1012628 CVE-2026-46231).
- Update
patches.kernel.org/7.0.9-184-EDAC-versalnet-Fix-device-name-memory-leak.patch
(bsc#1012628 CVE-2026-46221).
- Update
patches.kernel.org/7.0.9-188-cgroup-Defer-css-percpu_ref-kill-on-rmdir-until.patch
(bsc#1012628 CVE-2026-46223).
- Update
patches.kernel.org/7.0.9-192-vsock-fix-buffer-size-clamping-order.patch
(bsc#1012628 CVE-2026-46234 bsc#1266904).
- Update
patches.kernel.org/7.0.9-194-vsock-virtio-fix-empty-payload-in-tap-skb-for-n.patch
(bsc#1012628 CVE-2026-46207).
- Update
patches.kernel.org/7.0.9-195-vsock-virtio-fix-accept-queue-count-leak-on-tra.patch
(bsc#1012628 CVE-2026-46214).
- Update
patches.kernel.org/7.0.9-196-drm-amdgpu-vcn3-Avoid-overflow-on-msg-bound-che.patch
(bsc#1012628 CVE-2026-46237 bsc#1266871).
- Update
patches.kernel.org/7.0.9-197-drm-amdgpu-vcn4-Avoid-overflow-on-msg-bound-che.patch
(bsc#1012628 CVE-2026-46217).
suse-add-cves
- commit d1677f1
* Tue Jun 02 2026 jslaby@suse.cz
- blk-mq: reinsert cached request to the list (git-fixes).
- batman-adv: fix batadv_skb_is_frag() kernel-doc (git-fixes).
- net: ethernet: cortina: No mapping is a dropped rx (git-fixes).
- commit 6fbeab5
* Tue Jun 02 2026 jslaby@suse.cz
- Linux 7.0.11 (bsc#1012628).
- iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs
(bsc#1012628).
- iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs
(bsc#1012628).
- ksmbd: close durable scavenger races against m_fp_list lookups
(bsc#1012628).
- smb: client: reject userspace cifs.spnego descriptions
(bsc#1012628).
- ata: libata-scsi: improve readability of ata_scsi_qc_issue()
(bsc#1012628).
- ata: libata-scsi: do not use the deferred QC feature for
ATA_DEFER_PORT (bsc#1012628).
- ata: libata-scsi: do not use the deferred QC feature on PMPs
with CBS (bsc#1012628).
- ata: libata-scsi: do not needlessly defer commands when using
PMP with FBS (bsc#1012628).
- sysfs: don't remove existing directory on update failure
(bsc#1012628).
- mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break()
(bsc#1012628).
- ksmbd: fix null pointer dereference in compare_guid_key()
(bsc#1012628).
- ksmbd: fix null pointer dereference in proc_show_files()
(bsc#1012628).
- ksmbd: fix SID memory leak in set_posix_acl_entries_dacl()
on overflow (bsc#1012628).
- ksmbd: validate SID in parent security descriptor during ACL
inheritance (bsc#1012628).
- regulator: tps65219: fix irq_data.rdev not being assigned
(bsc#1012628).
- x86/mm: Disable broadcast TLB flush when PCID is disabled
(bsc#1012628).
- scripts/gdb: mm: cast untyped symbols in x86_page_ops
(bsc#1012628).
- smb: client: require net admin for CIFS SWN netlink
(bsc#1012628).
- smb: client: protect tc_count increment in
smb2_find_smb_sess_tcon_unlocked() (bsc#1012628).
- smb: client: use data_len for SMB2 READ encrypted folioq copy
(bsc#1012628).
- smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close
(bsc#1012628).
- hwmon: (pmbus/adm1266) widen blackbox-info buffer to
I2C_SMBUS_BLOCK_MAX (bsc#1012628).
- ALSA: ua101: Reject too-short USB descriptors (bsc#1012628).
- ALSA: pcm: Don't setup bogus iov_iter for silencing
(bsc#1012628).
- ALSA: asihpi: Fix potential OOB array access at reading cache
(bsc#1012628).
- ALSA: scarlett2: Allow flash writes ending at segment boundary
(bsc#1012628).
- ACPI: battery: Fix system wakeup on critical battery status
(bsc#1012628).
- efi: Allocate runtime workqueue before ACPI init (bsc#1012628).
- spi: amd: Set correct bus number in ACPI probe path
(bsc#1012628).
- io_uring/waitid: clear waitid info before copying it to
userspace (bsc#1012628).
- drivers/base/memory: fix memory block reference leak in poison
accounting (bsc#1012628).
- ipv6: ioam: refresh hdr pointer before ioam6_event()
(bsc#1012628).
- mm/memory: fix spurious warning when unmapping
device-private/exclusive pages (bsc#1012628).
- mm: fix __vm_normal_page() to handle missing support for
pmd_special()/pud_special() (bsc#1012628).
- mm/memory_hotplug: fix memory block reference leak on remove
(bsc#1012628).
- mm/page_alloc: fix initialization of tags of the huge zero
folio with init_on_free (bsc#1012628).
- mm/migrate_device: fix spinlock leak in
migrate_vma_insert_huge_pmd_page (bsc#1012628).
- selftests/mm: run_vmtests.sh: fix destructive tests invocation
(bsc#1012628).
- mm/damon: fix damos_stat tracepoint format for sz_applied
(bsc#1012628).
- net: wwan: iosm: fix potential memory leaks in ipc_imem_init()
(bsc#1012628).
- Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs
l2cap_conn_del() (bsc#1012628).
- Bluetooth: ISO: drop ISO_END frames received without prior
ISO_START (bsc#1012628).
- Bluetooth: bnep: Fix UAF read of dev->name (bsc#1012628).
- Bluetooth: hci_uart: fix UAFs and race conditions in close
and init paths (bsc#1012628).
- Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not
stack pointer (bsc#1012628).
- Bluetooth: hci_qca: Convert timeout from jiffies to ms
(bsc#1012628).
- Bluetooth: MGMT: validate Add Extended Advertising Data length
(bsc#1012628).
- Bluetooth: serialize accept_q access (bsc#1012628).
- phonet/pep: disable BH around forwarded sk_receive_skb()
(bsc#1012628).
- net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1012628).
- net: devmem: reject dma-buf bind with non-page-aligned size
or SG length (bsc#1012628).
- net: phy: skip EEE advertisement write when autoneg is disabled
(bsc#1012628).
- net: hsr: defer node table free until after RCU readers
(bsc#1012628).
- net/mlx5e: Fix use-after-free in
mlx5e_tx_reporter_timeout_recover (bsc#1012628).
- net: ifb: report ethtool stats over num_tx_queues (bsc#1012628).
- net: pse-pd: fix sign on -ENOENT check in of_load_pse_pis()
(bsc#1012628).
- netfilter: ip6t_hbh: reject oversized option lists
(bsc#1012628).
- netfilter: nf_queue: hold bridge skb->dev while queued
(bsc#1012628).
- netfilter: ipset: stop hash:* range iteration at end
(bsc#1012628).
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (bsc#1012628).
- net: ethtool: fix NULL pointer dereference in phy_reply_size
(bsc#1012628).
- net: ethtool: phy: avoid NULL deref when PHY driver is unbound
(bsc#1012628).
- ACPI: driver: Check ACPI_COMPANION() against NULL during probe
(bsc#1012628).
- sched_ext: Fix missing warning in scx_set_task_state() default
case (bsc#1012628).
- sched_ext: Avoid UAF in scx_root_enable_workfn() init failure
path (bsc#1012628).
- l2tp: use list_del_rcu in l2tp_session_unhash (bsc#1012628).
- qed: fix double free in qed_cxt_tables_alloc() (bsc#1012628).
- ring-buffer: Fix reporting of missed events in iterator
(bsc#1012628).
- ring-buffer: Flush and stop persistent ring buffer on panic
(bsc#1012628).
- wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb
(bsc#1012628).
- ipv6: ioam: add NULL check for idev in ipv6_hop_ioam()
(bsc#1012628).
- selftests: mptcp: drop nanoseconds width specifier
(bsc#1012628).
- mptcp: pm: fix ADD_ADDR timer infinite retry on option space
insufficient (bsc#1012628).
- vsock/vmci: fix UAF when peer resets connection during handshake
(bsc#1012628).
- vsock/virtio: reset connection on receiving queue overflow
(bsc#1012628).
- ice: fix VF queue configuration with low MTU values
(bsc#1012628).
- wifi: ath11k: clear shared SRNG pointer state on restart
(bsc#1012628).
- wifi: iwlwifi: mvm: fix driver-set TX rates on old devices
(bsc#1012628).
- wifi: iwlwifi: mld: stop TX during firmware restart
(bsc#1012628).
- ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1012628).
- ixgbevf: fix use-after-free in VEPA multicast source pruning
(bsc#1012628).
- rbd: eliminate a race in lock_dwork draining on unmap
(bsc#1012628).
- mptcp: do not drop partial packets (bsc#1012628).
- mptcp: reset rcv wnd on disconnect (bsc#1012628).
- lsm: hold cred_guard_mutex for lsm_set_self_attr()
(bsc#1012628).
- octeontx2-af: CGX: add bounds check to cgx_speed_mbps index
(bsc#1012628).
- octeontx2-pf: fix double free in rvu_rep_rsrc_init()
(bsc#1012628).
- igc: fix potential skb leak in igc_fpe_xmit_smd_frame()
(bsc#1012628).
- ice: fix locking around wait_event_interruptible_locked_irq
(bsc#1012628).
- ice: fix setting promisc mode while adding VID filter
(bsc#1012628).
- ice: restore PTP Rx timestamp config after ethtool set-channels
(bsc#1012628).
- wifi: cfg80211: advance loop vars in cfg80211_merge_profile()
(bsc#1012628).
- af_unix: Fix UAF read of tail->len in unix_stream_data_wait()
(bsc#1012628).
- wifi: mac80211: consume only present negotiated TTLM maps
(bsc#1012628).
- octeontx2-pf: avoid double free of pool->stack on AQ init
failure (bsc#1012628).
- cifs: Fix busy dentry used after unmounting (bsc#1012628).
- tracing: Do not call map->ops->elt_free() if elt_alloc() fails
(bsc#1012628).
- ASoC: codecs: pcm512x: fix null-ptr dereference in
pcm512x_overclock_xxx_put() (bsc#1012628).
- arm64: probes: Handle probes on hinted conditional branch
instructions (bsc#1012628).
- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
num_eventid_bits (bsc#1012628).
- KVM: arm64: vgic: Free private_irqs when init fails after
allocation (bsc#1012628).
- KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h
(erratum #1235) (bsc#1012628).
- riscv: kvm: return SBI_ERR_FAILURE for pmu_snapshot_set_shmem()
when OOM (bsc#1012628).
- riscv: kvm: return SBI_ERR_FAILURE for pmu_event_info() when
OOM (bsc#1012628).
- virt: sev-guest: Explicitly leak pages in unknown state
(bsc#1012628).
- i2c: tegra: fix pm_runtime leak on mutex_lock failure
(bsc#1012628).
- drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c
probe (bsc#1012628).
- spi: qup: fix error pointer deref after DMA setup failure
(bsc#1012628).
- phy: exynos5-usbdrd: fix USB 2.0 HS PHY tuning values for
Exynos7870 (bsc#1012628).
- phy: tegra: xusb: Fix per-pad high-speed termination calibration
(bsc#1012628).
- phy: qcom-qmp-ufs: Fix kaanapali PHY PLL lock failure after
SM8650 G4 fix (bsc#1012628).
- phy: qcom: edp: Unify generic DP/eDP swing and pre-emphasis
tables (bsc#1012628).
- phy: qcom: edp: Add eDP/DP mode switch support (bsc#1012628).
- phy: qcom: edp: Fix AUX_CFG8 programming for DP mode
(bsc#1012628).
- scsi: isci: Fix use-after-free in device removal path
(bsc#1012628).
- spi: ep93xx: fix error pointer deref after DMA setup failure
(bsc#1012628).
- spi: sprd: fix error pointer deref after DMA setup failure
(bsc#1012628).
- spi: ti-qspi: fix use-after-free after DMA setup failure
(bsc#1012628).
- mm/slub: hold cpus_read_lock around flush_rcu_sheaves_on_cache()
(bsc#1012628).
- RDMA/siw: Reject MPA FPDU length underflow before signed
receive math (bsc#1012628).
- s390/cio: Restore GFP_DMA for CHSC allocation (bsc#1012628).
- s390/pai: Disable duplicate read of kernel PAI counter value
(bsc#1012628).
- s390/pai: Fix missing PAI counter increments under heavy load
(bsc#1012628).
- fwctl: pds: Validate RPC input size before parsing
(bsc#1012628).
- LoongArch: kprobes: Use larch_insn_text_copy() to patch
instructions (bsc#1012628).
- LoongArch: Remove unused code to avoid build warning
(bsc#1012628).
- cpufreq: intel_pstate: Use correct scaling factor on Raptor
Lake-E (bsc#1012628).
- device property: set fwnode->secondary to NULL in fwnode_init()
(bsc#1012628).
- drm/i915/display: Copy color pipeline from plane in the primary
joiner pipe (bsc#1012628).
- drm/msm: Fix shrinker deadlock (bsc#1012628).
- drm/v3d: Fix use-after-free of CPU job query arrays on error
path (bsc#1012628).
- drm/v3d: Release indirect CSD GEM reference on CPU job free
(bsc#1012628).
- drm/virtio: use uninterruptible resv lock for plane updates
(bsc#1012628).
- drm/xe/multi_queue: Fix secondary queue error case
(bsc#1012628).
- drm/amdgpu/vpe: Force collaborate sync after TRAP (bsc#1012628).
- drm/bridge: it66121: acquire reset GPIO in probe (bsc#1012628).
- drm/bridge: megachips: remove bridge when irq request fails
(bsc#1012628).
- drm/amd/display: Fix integer overflow in bios_get_image()
(bsc#1012628).
- drm/amd/display: Validate GPIO pin LUT table size before
iterating (bsc#1012628).
- drm/amd/display: Validate payload length and link_index in
dc_process_dmub_aux_transfer_async (bsc#1012628).
- batman-adv: v: stop OGMv2 on disabled interface (bsc#1012628).
- batman-adv: tvlv: abort OGM send on tvlv append failure
(bsc#1012628).
- batman-adv: tvlv: reject oversized TVLV packets (bsc#1012628).
- batman-adv: iv: recover OGM scheduling after forward packet
error (bsc#1012628).
- batman-adv: mcast: fix use-after-free in orig_node RCU release
(bsc#1012628).
- batman-adv: clear current gateway during teardown (bsc#1012628).
- batman-adv: dat: handle forward allocation error (bsc#1012628).
- batman-adv: fix fragment reassembly length accounting
(bsc#1012628).
- batman-adv: fix tp_meter counter underflow during shutdown
(bsc#1012628).
- batman-adv: frag: disallow unicast fragment in fragment
(bsc#1012628).
- batman-adv: bla: fix report_work leak on backbone_gw purge
(bsc#1012628).
- batman-adv: bla: avoid double decrement of bla.num_requests
(bsc#1012628).
- batman-adv: bla: avoid NULL-ptr deref for claim via dropped
interface (bsc#1012628).
- batman-adv: tp_meter: avoid use of uninit sender vars
(bsc#1012628).
- batman-adv: tp_meter: directly shut down timer on cleanup
(bsc#1012628).
- batman-adv: tp_meter: fix tp_vars reference leak in receiver
shutdown (bsc#1012628).
- batman-adv: tp_meter: fix race condition in send error reporting
(bsc#1012628).
- batman-adv: tp_meter: avoid role confusion in tp_list
(bsc#1012628).
- batman-adv: tt: fix TOCTOU race for reported vlans
(bsc#1012628).
- batman-adv: tt: reject oversized local TVLV buffers
(bsc#1012628).
- batman-adv: tt: avoid empty VLAN responses (bsc#1012628).
- batman-adv: tt: fix negative last_changeset_len (bsc#1012628).
- batman-adv: tt: fix negative tt_buff_len (bsc#1012628).
- batman-adv: tt: prevent TVLV entry number overflow
(bsc#1012628).
- hwmon: (pmbus/adm1266) seed timestamp from the real-time clock
(bsc#1012628).
- hwmon: (pmbus/adm1266) reject implausible blackbox record_count
(bsc#1012628).
- hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer
read buffer (bsc#1012628).
- hwmon: (pmbus/adm1266) bounce blackbox records through a
protocol-sized buffer (bsc#1012628).
- hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at
ADM1266_PDIO_NR (bsc#1012628).
- hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO
read in get_multiple (bsc#1012628).
- hwmon: (pmbus/adm1266) register the gpio_chip after
pmbus_do_probe() (bsc#1012628).
- hwmon: (pmbus/adm1266) register the nvmem device after
pmbus_do_probe() (bsc#1012628).
- hwmon: (pmbus/adm1266) reject short block-read responses in
the GPIO accessors (bsc#1012628).
- pinctrl: mediatek: moore: implement gpio_chip::get_direction()
(bsc#1012628).
- pinctrl: qcom: ipq4019: mark gpio as a GPIO pin function
(bsc#1012628).
- arm64: dts: renesas: r8a78000: Fix SCIF brg_int clocks
(bsc#1012628).
- ARM: dts: renesas: genmai: Drop superfluous cells (bsc#1012628).
- ARM: dts: renesas: rskrza1: Drop superfluous cells
(bsc#1012628).
- pinctrl: renesas: rzg2l: Fix incorrect PUPD register offset
for high pins during suspend/resume (bsc#1012628).
- pinctrl: renesas: rzg2l: Fix SMT register cache handling
(bsc#1012628).
- pinctrl: meson: amlogic-a4: fix deadlock issue (bsc#1012628).
- pinctrl: qcom: Fix GPIO to PDC wake irq map for qcs615
(bsc#1012628).
- kho: skip KHO for crash kernel (bsc#1012628).
- mm/memfd_luo: report error when restoring a folio fails mid-loop
(bsc#1012628).
- HID: intel-thc-hid: Intel-quickspi: Fix some error codes
(bsc#1012628).
- HID: uclogic: Fix regression of input name assignment
(bsc#1012628).
- firmware: arm_ffa: Check for NULL FF-A ID table while driver
registration (bsc#1012628).
- firmware: arm_ffa: Skip free_pages on RX buffer alloc failure
(bsc#1012628).
- firmware: arm_ffa: Fix per-vcpu self notifications handling
in workqueue (bsc#1012628).
- firmware: arm_ffa: Unregister bus notifier on teardown for
FF-A v1.0 (bsc#1012628).
- riscv: errata: Fix bitwise vs logical AND in MIPS errata
patching (bsc#1012628).
- riscv: Fix register corruption from uninitialized cregs on error
(bsc#1012628).
- riscv: mm: Fixup no5lvl failure when vaddr is invalid
(bsc#1012628).
- kunit: config: Enable KUNIT_DEBUGFS by default (bsc#1012628).
- kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS
(bsc#1012628).
- pinctrl: qcom: Fix wakeirq map by removing disconnected irqs
for sm8150 (bsc#1012628).
- firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies
(bsc#1012628).
- firmware: arm_ffa: Keep framework RX release under lock
(bsc#1012628).
- firmware: arm_ffa: Validate framework notification message
layout (bsc#1012628).
- firmware: arm_ffa: Snapshot notifier callbacks under lock
(bsc#1012628).
- firmware: arm_ffa: Fix sched-recv callback partition lookup
(bsc#1012628).
- ARM: integrator: Fix early initialization (bsc#1012628).
- ALSA: hda: cs35l56: Put ACPI device after setting companion
(bsc#1012628).
- ALSA: hda: cs35l41: Put ACPI device on missing physical node
(bsc#1012628).
- btrfs: tracepoints: fix sleep while in atomic context in
btrfs_sync_file() (bsc#1012628).
- netfilter: x_tables: allow initial table replace without
emitting audit log message (bsc#1012628).
- netfilter: x_tables: allocate hook ops while under mutex
(bsc#1012628).
- netfilter: x_tables: unregister the templates first
(bsc#1012628).
- netfilter: x_tables: add and use xt_unregister_table_pre_exit
(bsc#1012628).
- netfilter: x_tables: add and use xtables_unregister_table_exit
(bsc#1012628).
- netfilter: ebtables: move to two-stage removal scheme
(bsc#1012628).
- netfilter: ebtables: close dangling table module init race
(bsc#1012628).
- netfilter: x_tables: close dangling table module init race
(bsc#1012628).
- netfilter: bridge: eb_tables: close module init race
(bsc#1012628).
- netfilter: nf_conntrack_expect: restore helper propagation
via expectation (bsc#1012628).
- kprobes: skip non-symbol addresses in
kprobe_add_ksym_blacklist() (bsc#1012628).
- test_kprobes: clear kprobes between test runs (bsc#1012628).
- tcp: Fix imbalanced icsk_accept_queue count (bsc#1012628).
- net: napi: Avoid gro timer misfiring at end of busypoll
(bsc#1012628).
- net: shaper: Reject reparenting of existing nodes (bsc#1012628).
- idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()
(bsc#1012628).
- ice: fix setting RSS VSI hash for E830 (bsc#1012628).
- ice: fix locking in ice_dcb_rebuild() (bsc#1012628).
- ice: dpll: fix rclk pin state get for E810 (bsc#1012628).
- ice: dpll: fix misplaced header macros (bsc#1012628).
- net: lan966x: avoid unregistering netdev on register failure
(bsc#1012628).
- net: ti: icssm-prueth: fix eth_ports_node leak in probe
(bsc#1012628).
- phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL
register access (bsc#1012628).
- phy: spacemit: Remove incorrect clk_disable() in
spacemit_usb2phy_init() (bsc#1012628).
- NFSD: Fix infinite loop in layout state revocation
(bsc#1012628).
- ASoC: sdw_utils: Add quirk to ignore RT712 CODEC_MIC
(bsc#1012628).
- ASoC: sdw_utils: Add quirk to ignore RT721 CODEC_MIC
(bsc#1012628).
- fprobe: Fix unregister_fprobe() to wait for RCU grace period
(bsc#1012628).
- fs/statmount: fix slab out-of-bounds write in
statmount_mnt_idmap (bsc#1012628).
- fs: Fix return in jfs_mkdir and orangefs_mkdir (bsc#1012628).
- irqchip/ath79-cpu: Remove unused function (bsc#1012628).
- fs: fix forced iversion increment on lazytime timestamp updates
(bsc#1012628).
- ublk: reject max_sectors smaller than PAGE_SECTORS in parameter
validation (bsc#1012628).
- nsfs: fix wrong error code returned for pidns ioctls
(bsc#1012628).
- irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT
(bsc#1012628).
- nvme: fix bio leak on mapping failure (bsc#1012628).
- nvme-pci: fix use-after-free in nvme_free_host_mem()
(bsc#1012628).
- zonefs: handle integer overflow in zonefs_fname_to_fno
(bsc#1012628).
- tcp: Fix out-of-bounds access for twsk in
tcp_ao_established_key() (bsc#1012628).
- ASoC: SOF: amd: Fix error code handling in psp_send_cmd()
(bsc#1012628).
- powerpc: 82xx: fix uninitialized pointers with free attribute
(bsc#1012628).
- powerpc: fix dead default for GUEST_STATE_BUFFER_TEST
(bsc#1012628).
- powerpc/hv-gpci: fix preempt count leak in sysfs show paths
(bsc#1012628).
- netfs: Fix cancellation of a DIO and single read subrequests
(bsc#1012628).
- netfs: Fix missing locking around retry adding new subreqs
(bsc#1012628).
- netfs: Fix missing barriers when accessing stream->subrequests
locklessly (bsc#1012628).
- netfs: Fix netfs_read_to_pagecache() to pause on subreq failure
(bsc#1012628).
- netfs: Fix potential for tearing in ->remote_i_size and
- >zero_point (bsc#1012628).
- netfs: Fix zeropoint update where i_size > remote_i_size
(bsc#1012628).
- netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call
(bsc#1012628).
- netfs: Fix overrun check in netfs_extract_user_iter()
(bsc#1012628).
- netfs: Fix netfs_invalidate_folio() to clear dirty bit if all
changes gone (bsc#1012628).
- netfs: Defer the emission of trace_netfs_folio() (bsc#1012628).
- netfs: Fix streaming write being overwritten (bsc#1012628).
- netfs: Fix potential deadlock in write-through mode
(bsc#1012628).
- netfs: Fix read-gaps to remove netfs_folio from filled folio
(bsc#1012628).
- netfs: Fix write streaming disablement if fd open O_RDWR
(bsc#1012628).
- netfs: Fix early put of sink folio in netfs_read_gaps()
(bsc#1012628).
- netfs: Fix leak of request in netfs_write_begin() error handling
(bsc#1012628).
- netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()
(bsc#1012628).
- netfs: Fix partial invalidation of streaming-write folio
(bsc#1012628).
- netfs: Fix folio->private handling in netfs_perform_write()
(bsc#1012628).
- netfs: Fix netfs_read_folio() to wait on writeback
(bsc#1012628).
- netfs, afs: Fix write skipping in dir/link writepages
(bsc#1012628).
- afs: Fix the locking used by afs_get_link() (bsc#1012628).
- net: ethernet: cortina: Make RX SKB per-port (bsc#1012628).
- net: ethernet: cortina: Drop half-assembled SKB (bsc#1012628).
- net: ethernet: cortina: Carry over frag counter (bsc#1012628).
- net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS
reference (bsc#1012628).
- wifi: ath11k: fix error path leaks in some WMI WOW calls
(bsc#1012628).
- wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm()
(bsc#1012628).
- wifi: ath10k: skip WMI and beacon transmission when device is
wedged (bsc#1012628).
- net: shaper: flip the polarity of the valid flag (bsc#1012628).
- net: shaper: fix trivial ordering issue in net_shaper_commit()
(bsc#1012628).
- net: shaper: reject duplicate leaves in GROUP request
(bsc#1012628).
- net: shaper: set ret to -ENOMEM when genlmsg_new() fails in
group_doit (bsc#1012628).
- net: shaper: fix undersized reply skb allocation in GROUP
command (bsc#1012628).
- net: shaper: enforce singleton NETDEV scope with id 0
(bsc#1012628).
- net: shaper: reject QUEUE scope handle with missing id
(bsc#1012628).
- block: don't overwrite bip_vcnt in bio_integrity_copy_user()
(bsc#1012628).
- block: recompute nr_integrity_segments in
blk_insert_cloned_request (bsc#1012628).
- HID: quirks: really enable the intended work around for
appledisplay (bsc#1012628).
- block: bio-integrity: Fix null-ptr-deref in
bio_integrity_map_user() (bsc#1012628).
- accel/qaic: Add overflow check to remap_pfn_range during mmap
(bsc#1012628).
- net/smc: avoid NULL deref of conn->lnk in smc_msg_event
tracepoint (bsc#1012628).
- ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics
(bsc#1012628).
- drm/msm/dpu: fix UV scanlines calculation for YUV UBWC formats
(bsc#1012628).
- drm/msm/dpu: Fix Kaanapali CWB register configuration
(bsc#1012628).
- drm/msm/dsi: don't dump registers past the mapped region
(bsc#1012628).
- drm/msm/dpu: don't mix devm and drmm functions (bsc#1012628).
- block: rename struct gendisk zone_wplugs_lock field
(bsc#1012628).
- block: allow submitting all zone writes from a single context
(bsc#1012628).
- block: fix handling of dead zone write plugs (bsc#1012628).
- selftests: ublk: cap nthreads to kernel's actual nr_hw_queues
(bsc#1012628).
- x86/mce: Restore MCA polling interval halving (bsc#1012628).
- Documentation: intel_pstate: Fix description of asymmetric
packing with SMT (bsc#1012628).
- drm/msm: Fix GMEM_BASE for A650 (bsc#1012628).
- drm/msm/a6xx: Add soft fuse detection support (bsc#1012628).
- drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()
(bsc#1012628).
- drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx
(bsc#1012628).
- drm/msm/a6xx: Restore sysprof_active (bsc#1012628).
- drm/msm: Fix iommu_map_sgtable() return value check and avoid
WARN (bsc#1012628).
- drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table
(bsc#1012628).
- ASoC: intel: sof_sdw: Prepare for configuration without a jack
(bsc#1012628).
- ASoC: sdw_utils: cs42l43: allow spk component names to be
combined (bsc#1012628).
- ASoC: sdw_utils: Check speaker component string allocation
(bsc#1012628).
- riscv: Docs: fix unmatched quote warning (bsc#1012628).
- powerpc/time: Remove redundant preempt_disable|enable() calls
from arch_irq_work_raise() (bsc#1012628).
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot
(bsc#1012628).
- net: tls: fix off-by-one in sg_chain entry count for wrapped
sk_msg ring (bsc#1012628).
- net: tls: prevent chain-after-chain in plain text SG
(bsc#1012628).
- net: phy: DP83TC811: add reading of abilities (bsc#1012628).
- ovpn: tcp - use cached peer pointer in ovpn_tcp_close()
(bsc#1012628).
- ovpn: respect peer refcount in CMD_NEW_PEER error path
(bsc#1012628).
- ovpn: fix race between deleting interface and adding new peer
(bsc#1012628).
- cifs: client: stage smb3_reconfigure() updates and restore
ctx on failure (bsc#1012628).
- phy: apple: atc: Fix typec switch/mux leak on unbind
(bsc#1012628).
- gcc-plugins: Always define CONST_CAST_GIMPLE and CONST_CAST_TREE
(bsc#1012628).
- x86/xen: Fix xen_e820_swap_entry_with_ram() (bsc#1012628).
- vfio/pci: Check BAR resources before exporting a DMABUF
(bsc#1012628).
- ovpn: disable BHs when updating device stats (bsc#1012628).
- tls: Preserve sk_err across recvmsg() when data has been copied
(bsc#1012628).
- net/mlx5: Do not restore destination-less TC rules
(bsc#1012628).
- net/mlx5: Skip disabled vports when setting max TX speed
(bsc#1012628).
- scsi: sd: Fix return code handling in sd_spinup_disk()
(bsc#1012628).
- ASoC: codecs: fs210x: fix possible buffer overflow
(bsc#1012628).
- iommupt: Directly call iommupt's unmap_range() (bsc#1012628).
- iommupt: Avoid rewalking during map (bsc#1012628).
- iommu: Fix loss of errno on map failure for classic ops
(bsc#1012628).
- iommu: Fix up map/unmap debugging for iommupt domains
(bsc#1012628).
- iommu: Handle unmap error when iommu_debug is enabled
(bsc#1012628).
- iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap
(bsc#1012628).
- iommupt: Fix the end_index calculation in __map_range_leaf()
(bsc#1012628).
- ALSA: scarlett2: Add missing error check when initialise
Autogain Status (bsc#1012628).
- ALSA: hda/ca0132: Disable auto-detect on manual output select
(bsc#1012628).
- cachefiles: Fix error return when vfs_mkdir() fails
(bsc#1012628).
- io_uring/net: punt IORING_OP_BIND async if it needs file create
(bsc#1012628).
- vsock/virtio: fix zerocopy completion for multi-skb sends
(bsc#1012628).
- btrfs: check for subvolume before deleting squota qgroup
(bsc#1012628).
- btrfs: fix squota accounting during enable generation
(bsc#1012628).
- ASoC: amd: acp-sdw-legacy: check CPU DAI name before logging
(bsc#1012628).
- spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache()
(bsc#1012628).
- netfilter: nft_inner: release local_lock before re-enabling
softirqs (bsc#1012628).
- ALSA: hda/realtek: Use ALC287_FIXUP_TXNW2781_I2C for ASUS
Strix Gxx5 (bsc#1012628).
- drm/msm/snapshot: fix dumping of the unaligned regions
(bsc#1012628).
- hwmon: (lm90) Stop work before releasing hwmon device
(bsc#1012628).
- hwmon: (lm90) Add lock protection to lm90_alert (bsc#1012628).
- wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU
is disabled (bsc#1012628).
- wifi: iwlwifi: mld: don't dereference a pointer before NULL
checking it (bsc#1012628).
- dma-mapping: move dma_map_resource() sanity check into debug
code (bsc#1012628).
- drm/gem: Make the GEM LRU lock part of drm_device (bsc#1012628).
- drm/xe/gsc: Fix double-free of managed BO in error path
(bsc#1012628).
- drm/xe/vf: Fix signature of print functions (bsc#1012628).
- drm/xe/pf: Fix CFI failure in debugfs access (bsc#1012628).
- drm/xe: Consolidate workaround entries for Wa_14019988906
(bsc#1012628).
- drm/xe: Consolidate workaround entries for Wa_18033852989
(bsc#1012628).
- drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN1
(bsc#1012628).
- drm/xe/tuning: Apply windower hardware filtering setting on
Xe3 and Xe3p (bsc#1012628).
- drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN4
(bsc#1012628).
- wifi: ath11k: fix peer resolution on rx path when peer_id=0
(bsc#1012628).
- wifi: ath12k: fix EHT TX MCS limitation due to wrong 20 MHz-only
parsing (bsc#1012628).
- drm/mediatek: mtk_hdmi_ddc_v2: Fix non-static global variable
(bsc#1012628).
- drm/mediatek: mtk_hdmi_v2: Fix non-static global variable
(bsc#1012628).
- drm/mediatek: mtk_cec: Fix non-static global variable
(bsc#1012628).
- drm/mediatek: mtk_hdmi_ddc: Fix non-static global variable
(bsc#1012628).
- io_uring: propagate array_index_nospec opcode into req->opcode
(bsc#1012628).
- cgroup/rstat: validate cpu before css_rstat_cpu() access
(bsc#1012628).
- net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1012628).
- cifs: Fix undefined variables (bsc#1012628).
- ice: ptp: serialize E825 PHY timer start with PTP lock
(bsc#1012628).
- ice: ptp: use primary NAC semaphore on E825 (bsc#1012628).
- igc: set tx buffer type for SMD frames (bsc#1012628).
- drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP
(bsc#1012628).
- phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp
swing config (bsc#1012628).
- kbuild: pacman-pkg: make "rc" releases adhere to pacman
versioning scheme (bsc#1012628).
- net: dsa: mt7530: fix FDB entries not aging out with short
timeout (bsc#1012628).
- net: dsa: mt7530: preserve VLAN tags on trapped link-local
frames (bsc#1012628).
- net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer
(bsc#1012628).
- platform/surface: aggregator_registry: omit battery & AC nodes
on Surface Laptop 7 (bsc#1012628).
- platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL
(bsc#1012628).
- platform/x86: hp_accel: Check ACPI_COMPANION() against NULL
(bsc#1012628).
- platform/x86: intel-hid: Check ACPI_HANDLE() against NULL
(bsc#1012628).
- platform/x86: intel_sar: Check ACPI_HANDLE() against NULL
(bsc#1012628).
- platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL
(bsc#1012628).
- platform/x86: uniwill-laptop: Properly initialize charging
threshold (bsc#1012628).
- platform/x86: uniwill-laptop: Accept charging threshold of 0
(bsc#1012628).
- platform/x86: uniwill-laptop: Fix behavior of "force" module
param (bsc#1012628).
- platform/x86: asus-armoury: fix mini-LED mode get/set on MODE2
devices (bsc#1012628).
- ASoC: soc-utils: Add missing va_end in snd_soc_ret()
(bsc#1012628).
- drm/amdgpu: Align amdgpu_gtt_mgr entries to TLB size on Tahiti
(v2) (bsc#1012628).
- drm/amdgpu/vce1: Check that the GPU address is < 128 MiB
(bsc#1012628).
- drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets
(bsc#1012628).
- RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port
(bsc#1012628).
- RDMA/rtrs: Fix use-after-free in path file creation cleanup
(bsc#1012628).
- bridge: mcast: Fix a possible use-after-free when removing a
bridge port (bsc#1012628).
- net: phy: honor eee_disabled_modes in phy_support_eee()
(bsc#1012628).
- net: phy: honor eee_disabled_modes in phy_advertise_eee_all()
(bsc#1012628).
- net: airoha: Fix NPU RX DMA descriptor bits (bsc#1012628).
- pds_core: fix error handling in pdsc_devcmd_wait (bsc#1012628).
- pds_core: fix debugfs_lookup dentry leak and error handling
(bsc#1012628).
- erofs: fix managed cache race for unaligned extents
(bsc#1012628).
- erofs: harden h_shared_count in erofs_init_inode_xattrs()
(bsc#1012628).
- erofs: fix metabuf leak in inode xattr initialization
(bsc#1012628).
- wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs
(bsc#1012628).
- wifi: mac80211: fix MLE defragmentation (bsc#1012628).
- wifi: mac80211: fix multi-link element inheritance
(bsc#1012628).
- wifi: wilc1000: fix dma_buffer leak on bus acquire failure
(bsc#1012628).
- ALSA: seq: Serialize UMP output teardown with event_input
(bsc#1012628).
- cgroup: rstat: relax NMI guard after switch to try_cmpxchg
(bsc#1012628).
- Bluetooth: hci_sync: Fix not setting mask for
HCI_EVT_LE_ALL_REMOTE_FEATURES_COMPLETE (bsc#1012628).
- Bluetooth: btintel_pcie: Fix incorrect MAC access programming
(bsc#1012628).
- Bluetooth: btmtk: fix urb->setup_packet leak in error paths
(bsc#1012628).
- udp: gso: Fix handling checksum in __udp_gso_segment
(bsc#1012628).
- udp: Fix UDP length on last GSO_PARTIAL segment (bsc#1012628).
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA
(bsc#1012628).
- net: shaper: annotate the data races (bsc#1012628).
- net: shaper: rework the VALID marking (again) (bsc#1012628).
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length
checks (bsc#1012628).
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer
in recvmsg (bsc#1012628).
- net: ag71xx: check error for platform_get_irq (bsc#1012628).
- bpf, skmsg: fix verdict sk_data_ready racing with ktls rx
(bsc#1012628).
- tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction
(bsc#1012628).
- net: stmmac: eswin: fix HSP CSR init ordering after clock enable
(bsc#1012628).
- net: stmmac: eswin: clear TXD and RXD delay registers during
initialization (bsc#1012628).
- net: stmmac: eswin: correct RGMII delay granularity to 20 ps
(bsc#1012628).
- net: stmmac: eswin: validate RGMII delay values (bsc#1012628).
- gpio: cdev: check if uAPI v2 config attributes are correctly
zeroed (bsc#1012628).
- gpio: aggregator: fix a potential use-after-free (bsc#1012628).
- gpio: aggregator: stop using dev-sync-probe (bsc#1012628).
- gpio: aggregator: remove the software node when deactivating
the aggregator (bsc#1012628).
- gpio: aggregator: lock device when calling device_is_bound()
(bsc#1012628).
- ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove()
(bsc#1012628).
- drm/xe/oa: Fix exec_queue leak on width check in stream open
(bsc#1012628).
- ASoC: cs-amp-lib: Fix wrong sizeof() in
_cs_amp_set_efi_calibration_data() (bsc#1012628).
- ASoC: cs-amp-lib: Fix missing dput() after debugfs_lookup()
(bsc#1012628).
- selftests: net: Fix checksums in xdp_native (bsc#1012628).
- nvme-pci: fix dma_vecs leak on p2p memory (bsc#1012628).
- nvme-pci: fix dma mapping leak on data setup error
(bsc#1012628).
- octeontx2-af: npc: Fix allmulticast skip logic for LBK and
SDP VFs (bsc#1012628).
- net: mana: validate rx_req_idx to prevent out-of-bounds array
access (bsc#1012628).
- tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR
(bsc#1012628).
- net: airoha: Disable GDM2 forwarding before configuring GDM2
loopback (bsc#1012628).
- pds_core: ensure null-termination for firmware version strings
(bsc#1012628).
- net: gro: don't merge zcopy skbs (bsc#1012628).
- net: enetc: fix missing error code when pf->vf_state allocation
fails (bsc#1012628).
- io_uring/nop: pass all errors to userspace (bsc#1012628).
- blk-mq: pop cached request if it is usable (bsc#1012628).
- ksmbd: fix durable reconnect error path file lifetime
(bsc#1012628).
- LoongArch: kprobes: Fix handling of fatal unrecoverable
recursions (bsc#1012628).
- block: avoid use-after-free in disk_free_zone_resources()
(bsc#1012628).
- Documentation: laptops: Update documentation for uniwill laptops
(bsc#1012628).
- platform/x86: uniwill-laptop: Do not enable the charging limit
even when forced (bsc#1012628).
- drm/msm: Restore second parameter name in purge() and evict()
(bsc#1012628).
- security/keys: fix missed RCU read section on lookup
(bsc#1012628).
- Rename to
patches.kernel.org/7.0.11-200-firmware-arm_ffa-Align-RxTx-buffer-size-before.patch.
- Rename to
patches.kernel.org/7.0.11-373-srcu-Don-t-queue-workqueue-handlers-to-never-o.patch.
- Rename to
patches.kernel.org/7.0.11-417-tracing-Avoid-NULL-return-from-hist_field_name.patch.
- commit 9c40593
* Mon Jun 01 2026 msuchanek@suse.de
- packaging: Replace compute-PATCHVERSION with python implementation
This script is copied by kkspec to the package directory and called from
there. That means that libraries from kernel-source cannot be loaded,
and that's the reason why the script is appended to the library that is
most useful for it. compute-PATCHVERSION and mkspec are no longer
shipped in rpm packages which means compute-PATCHVERSION could be folded
into mkspec, and that in turn into tar-up. However, these are all
written in different languages.
- commit de458e0
* Mon Jun 01 2026 mkubecek@suse.cz
- update to 7.1-rc6
- commit e6c850a
* Wed May 27 2026 dmueller@suse.com
- Improve compatibility with awk 2.4.0 (bsc#1266214)
This was meant to match the literal '+', so it needs to be backslashed
not a repetition of the '^' symbol.
- commit fbbce3e
* Tue May 26 2026 msuchanek@suse.de
- compute-PATCHVERSION: Do not append .. to default patch directories
All the callers are either using . or a specific patch directory.
If a caller really needs to load patches from .. it should be passed as
parameter.
- commit d383394
* Tue May 26 2026 msuchanek@suse.de
- compute-PATCHVERSION: Remove unpack logic
This used to be needed when compute-PATCHVERSION was shipped as part of
the rpm package where unpacked patches are not available.
It is not done annymore, and the unpackinng is not needed.
- commit 9a8fa0e
* Tue May 26 2026 msuchanek@suse.de
- packaging: Rip out extra symbols support
Extra symbols are not supported for a long time.
The oldest branch we maintain is SLE 11 SP1 and it does not use patch
guards to select patches.
- commit 7b3d5b0
* Mon May 25 2026 msuchanek@suse.de
- packaging: compute-PATCHVERSION.sh -> compute-PATCHVERSION
- commit fc624df
* Sun May 24 2026 mkubecek@suse.cz
- update to 7.1-rc5
- update configs
- EL3=m (i386 only, reverted driver removal)
- commit 78f8dcb
* Sat May 23 2026 jslaby@suse.cz
- tracing: Avoid NULL return from hist_field_name() on truncation
(git-fixes).
- firmware: arm_ffa: Align RxTx buffer size before mapping
(git-fixes).
- commit bb95589
* Sat May 23 2026 jslaby@suse.cz
- Linux 7.0.10 (bsc#1012628).
- blk-cgroup: wait for blkcg cleanup before initializing new disk
(bsc#1012628).
- md: suppress spurious superblock update error message for
dm-raid (bsc#1012628).
- fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START
(bsc#1012628).
- fs/mbcache: cancel shrink work before destroying the cache
(bsc#1012628).
- md/raid1: fix the comparing region of interval tree
(bsc#1012628).
- fs: fix archiecture-specific compat_ftruncate64 (bsc#1012628).
- drbd: Balance RCU calls in drbd_adm_dump_devices()
(bsc#1012628).
- loop: fix partition scan race between udev and
loop_reread_partitions() (bsc#1012628).
- block: fix zones_cond memory leak on zone revalidation error
paths (bsc#1012628).
- nilfs2: reject zero bd_oblocknr in
nilfs_ioctl_mark_blocks_dirty() (bsc#1012628).
- blk-cgroup: fix disk reference leak in
blkcg_maybe_throttle_current() (bsc#1012628).
- pstore/ram: fix resource leak when ioremap() fails
(bsc#1012628).
- erofs: include the trailing NUL in FS_IOC_GETFSLABEL
(bsc#1012628).
- md: fix array_state=clear sysfs deadlock (bsc#1012628).
- ublk: reset per-IO canceled flag on each fetch (bsc#1012628).
- blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default()
(bsc#1012628).
- erofs: handle 48-bit blocks/uniaddr for extra devices
(bsc#1012628).
- md: remove unused static md_wq workqueue (bsc#1012628).
- md: wake raid456 reshape waiters before suspend (bsc#1012628).
- dcache: permit dynamic_dname()s up to NAME_MAX (bsc#1012628).
- btrfs: fix the inline compressed extent check in
inode_need_compress() (bsc#1012628).
- btrfs: fix deadlock between reflink and transaction commit
when using flushoncommit (bsc#1012628).
- btrfs: do not reject a valid running dev-replace (bsc#1012628).
- OPP: debugfs: Use performance level if available to distinguish
between rates (bsc#1012628).
- OPP: Move break out of scoped_guard in
dev_pm_opp_xlate_required_opp() (bsc#1012628).
- ACPI: x86: cmos_rtc: Clean up address space handler driver
(bsc#1012628).
- ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver
(bsc#1012628).
- devres: fix missing node debug info in devm_krealloc()
(bsc#1012628).
- thermal/drivers/spear: Fix error condition for reading
st,thermal-flags (bsc#1012628).
- debugfs: check for NULL pointer in debugfs_create_str()
(bsc#1012628).
- debugfs: fix placement of EXPORT_SYMBOL_GPL for
debugfs_create_str() (bsc#1012628).
- soundwire: debugfs: initialize firmware_file to empty string
(bsc#1012628).
- amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init()
(bsc#1012628).
- amd-pstate: Update cppc_req_cached in fast_switch case
(bsc#1012628).
- cpufreq: Pass the policy to cpufreq_driver->adjust_perf()
(bsc#1012628).
- PCI: use generic driver_override infrastructure (bsc#1012628).
- platform/wmi: use generic driver_override infrastructure
(bsc#1012628).
- vdpa: use generic driver_override infrastructure (bsc#1012628).
- s390/cio: use generic driver_override infrastructure
(bsc#1012628).
- s390/ap: use generic driver_override infrastructure
(bsc#1012628).
- bus: fsl-mc: use generic driver_override infrastructure
(bsc#1012628).
- locking/mutex: Rename mutex_init_lockep() (bsc#1012628).
- locking/mutex: Fix wrong comment for CONFIG_DEBUG_LOCK_ALLOC
(bsc#1012628).
- irqchip/irq-pic32-evic: Address warning related to wrong
printf() formatter (bsc#1012628).
- hrtimer: Avoid pointless reprogramming in
__hrtimer_start_range_ns() (bsc#1012628).
- hrtimer: Reduce trace noise in hrtimer_start() (bsc#1012628).
- locking: Fix rwlock and spinlock lock context annotations
(bsc#1012628).
- signal: Fix the lock_task_sighand() annotation (bsc#1012628).
- ww-mutex: Fix the ww_acquire_ctx function annotations
(bsc#1012628).
- perf/amd/ibs: Account interrupt for discarded samples
(bsc#1012628).
- perf/amd/ibs: Preserve PhyAddrVal bit when clearing PhyAddr MSR
(bsc#1012628).
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS
NMI handler (bsc#1012628).
- x86/tdx: Fix the typo in TDX_ATTR_MIGRTABLE (bsc#1012628).
- rust: sync: atomic: Remove bound `T: Sync` for
`Atomic::from_ptr()` (bsc#1012628).
- sparc64: vdso: Link with -z noexecstack (bsc#1012628).
- scripts/gdb: timerlist: Adapt to move of tk_core (bsc#1012628).
- locking: Fix rwlock support in <linux/spinlock_up.h>
(bsc#1012628).
- sched/topology: Compute sd_weight considering cpuset partitions
(bsc#1012628).
- x86/irqflags: Preemptively move include paravirt.h directive
where it belongs (bsc#1012628).
- sched/topology: Fix sched_domain_span() (bsc#1012628).
- irqchip/renesas-rzg2l: Fix error path in
rzg2l_irqc_common_probe() (bsc#1012628).
- ASoC: Intel: avs: Check maximum valid CPUID leaf (bsc#1012628).
- ASoC: Intel: avs: Include CPUID header at file scope
(bsc#1012628).
- x86/vdso: Clean up remnants of VDSO32_NOTE_MASK (bsc#1012628).
- firmware: dmi: Correct an indexing error in dmi.h (bsc#1012628).
- fs/resctrl: Report invalid domain ID when parsing io_alloc_cbm
(bsc#1012628).
- sched: Make class_schedulers avoid pushing current, and get
rid of proxy_tag_curr() (bsc#1012628).
- sched/rt: Skip group schedulable check with rt_group_sched=0
(bsc#1012628).
- wifi: ath11k: fix memory leaks in beacon template setup
(bsc#1012628).
- wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt()
(bsc#1012628).
- wifi: rtlwifi: pci: fix possible use-after-free caused by
unfinished irq_prepare_bcn_tasklet (bsc#1012628).
- bpf: test_run: Fix the null pointer dereference issue in
bpf_lwt_xmit_push_encap (bsc#1012628).
- wifi: ath12k: account TX stats only when ACK/BA status is
present (bsc#1012628).
- wifi: ath12k: Fix legacy rate mapping for monitor mode capture
(bsc#1012628).
- selftests/bpf: Handle !CONFIG_SMC in bpf_smc.c (bsc#1012628).
- wifi: ieee80211: fix definition of EHT-MCS 15 in MRU
(bsc#1012628).
- dpaa2: add independent dependencies for FSL_DPAA2_SWITCH
(bsc#1012628).
- dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n (bsc#1012628).
- s390/bpf: Zero-extend bpf prog return values and kfunc arguments
(bsc#1012628).
- powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy
(bsc#1012628).
- powerpc/64s: Fix unmap race with PMD migration entries
(bsc#1012628).
- module: Fix freeing of charp module parameters when
CONFIG_SYSFS=n (bsc#1012628).
- wifi: libertas: use USB anchors for tracking in-flight URBs
(bsc#1012628).
- wifi: libertas: don't kill URBs in interrupt context
(bsc#1012628).
- bpf: Do not allow deleting local storage in NMI (bsc#1012628).
- selftests/nolibc: fix test_file_stream() on musl libc
(bsc#1012628).
- selftests/nolibc: Fix build with host headers and libc
(bsc#1012628).
- tools/nolibc/printf: Change variables 'c' to 'ch' and 'tmpbuf[]'
to 'outbuf[]' (bsc#1012628).
- tools/nolibc/printf: Move snprintf length check to callback
(bsc#1012628).
- tools/nolibc: MIPS: fix clobbers of 'lo' and 'hi' registers
on different ISAs (bsc#1012628).
- tools/nolibc: avoid -Wundef warning for __STDC_VERSION__
(bsc#1012628).
- wifi: mt76: mt7996: fix the behavior of radar detection
(bsc#1012628).
- wifi: mt76: mt7996: fix iface combination for different chipsets
(bsc#1012628).
- wifi: mt76: mt7996: Set mtxq->wcid just for primary link
(bsc#1012628).
- wifi: mt76: mt7996: Reset mtxq->idx if primary link is removed
in mt7996_vif_link_remove() (bsc#1012628).
- wifi: mt76: mt7996: Switch to the secondary link if the default
one is removed (bsc#1012628).
- wifi: mt76: mt7996: Clear wcid pointer in
mt7996_mac_sta_deinit_link() (bsc#1012628).
- wifi: mt76: mt7996: Reset ampdu_state state in case of failure
in mt7996_tx_check_aggr() (bsc#1012628).
- wifi: mt76: mt7921: Reset ampdu_state state in case of failure
in mt76_connac2_tx_check_aggr() (bsc#1012628).
- wifi: mt76: mt7925: Fix incorrect MLO mode in firmware control
(bsc#1012628).
- wifi: mt76: mt7615: fix use_cts_prot support (bsc#1012628).
- wifi: mt76: mt7915: fix use_cts_prot support (bsc#1012628).
- wifi: mt76: mt7925: prevent NULL pointer dereference in
mt7925_tx_check_aggr() (bsc#1012628).
- wifi: mt76: mt7925: prevent NULL vif dereference in
mt7925_mac_write_txwi (bsc#1012628).
- wifi: mt76: mt7996: fix FCS error flag check in RX descriptor
(bsc#1012628).
- wifi: mt76: mt7921: Place upper limit on station AID
(bsc#1012628).
- wifi: mt76: Fix memory leak destroying device (bsc#1012628).
- wifi: mt76: mt7996: Fix NPU stop procedure (bsc#1012628).
- wifi: mt76: npu: Add missing rx_token_size initialization
(bsc#1012628).
- wifi: mt76: mt7925: drop puncturing handling from BSS change
path (bsc#1012628).
- wifi: mt76: mt7925: fix potential deadlock in
mt7925_roc_abort_sync (bsc#1012628).
- wifi: mt76: Fix memory leak after
mt76_connac_mcu_alloc_sta_req() (bsc#1012628).
- wifi: mt76: mt7925: fix tx power setting failure after chip
reset (bsc#1012628).
- wifi: mt76: mt7921: fix potential deadlock in
mt7921_roc_abort_sync (bsc#1012628).
- wifi: mt76: fix deadlock in remain-on-channel (bsc#1012628).
- wifi: mt76: fix backoff fields and max_power calculation
(bsc#1012628).
- arm64: cpufeature: Make PMUVer and PerfMon unsigned
(bsc#1012628).
- bpf: Switch CONFIG_CFI_CLANG to CONFIG_CFI (bsc#1012628).
- wifi: mt76: mt7996: fix wrong DMAD length when using MAC TXP
(bsc#1012628).
- wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event
(bsc#1012628).
- wifi: mt76: mt7915: fix use-after-free bugs in
mt7915_mac_dump_work() (bsc#1012628).
- wifi: mt76: mt7996: fix use-after-free bugs in
mt7996_mac_dump_work() (bsc#1012628).
- wifi: mt76: mt7921: fix 6GHz regulatory update on connection
(bsc#1012628).
- wifi: mt76: mt7996: Add missing CHANCTX_STA_CSA property
(bsc#1012628).
- wifi: mt76: mt7996: Remove link pointer dependency in
mt7996_mac_sta_remove_links() (bsc#1012628).
- wifi: mt76: mt7996: Decrement sta counter removing the link
in mt7996_mac_reset_sta_iter() (bsc#1012628).
- wifi: mt76: fix multi-radio on-channel scanning (bsc#1012628).
- wifi: mt76: support upgrading passive scans to active
(bsc#1012628).
- wifi: mt76: mt7996: fix RRO EMU configuration (bsc#1012628).
- bpf: Fix refcount check in check_struct_ops_btf_id()
(bsc#1012628).
- selftests/bpf: Fix sockmap_multi_channels reliability
(bsc#1012628).
- bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path
(bsc#1012628).
- bpf: Fix variable length stack write over spilled pointers
(bsc#1012628).
- arm_mpam: Ensure in_reset_state is false after applying
configuration (bsc#1012628).
- arm_mpam: Reset when feature configuration bit unset
(bsc#1012628).
- bpf,arc_jit: Fix missing newline in pr_err messages
(bsc#1012628).
- wifi: rtw89: phy: fix uninitialized variable access in
rtw89_phy_cfo_set_crystal_cap() (bsc#1012628).
- drivers/vfio_pci_core: Change PXD_ORDER check from switch case
to if/else block (bsc#1012628).
- r8152: fix incorrect register write to USB_UPHY_XTAL
(bsc#1012628).
- selftests/tracing: Fix to make --logdir option work again
(bsc#1012628).
- selftests/tracing: Fix to check awk supports non POSIX
strtonum() (bsc#1012628).
- powerpc/crash: fix backup region offset update to elfcorehdr
(bsc#1012628).
- powerpc/crash: Update backup region offset in elfcorehdr on
memory hotplug (bsc#1012628).
- selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
(bsc#1012628).
- bpf: Fix abuse of kprobe_write_ctx via freplace (bsc#1012628).
- macvlan: annotate data-races around port->bc_queue_len_used
(bsc#1012628).
- bpf: Use copy_map_value_locked() in alloc_htab_elem() for
BPF_F_LOCK (bsc#1012628).
- bpf: fix end-of-list detection in cgroup_storage_get_next_key()
(bsc#1012628).
- bpf: Fix stale offload->prog pointer after constant blinding
(bsc#1012628).
- net: ethernet: ti-cpsw:: rename soft_reset() function
(bsc#1012628).
- net: ethernet: ti-cpsw: fix linking built-in code to modules
(bsc#1012628).
- wifi: brcmfmac: Fix error pointer dereference (bsc#1012628).
- wifi: mac80211: handle VHT EXT NSS in
ieee80211_determine_our_sta_mode() (bsc#1012628).
- bpf: Drop task_to_inode and inet_conn_established from lsm
sleepable hooks (bsc#1012628).
- bpf: reject negative CO-RE accessor indices in
bpf_core_parse_spec() (bsc#1012628).
- bpf: Prefer vmlinux symbols over module symbols for unqualified
kprobes (bsc#1012628).
- wifi: ath10k: fix station lookup failure during disconnect
(bsc#1012628).
- bpf: Fix linked reg delta tracking when src_reg == dst_reg
(bsc#1012628).
- net: dropreason: add SKB_DROP_REASON_RECURSION_LIMIT
(bsc#1012628).
- net: plumb drop reasons to __dev_queue_xmit() (bsc#1012628).
- net: qdisc_pkt_len_segs_init() cleanup (bsc#1012628).
- net: pull headers in qdisc_pkt_len_segs_init() (bsc#1012628).
- arm64: entry: Don't preempt with SError or Debug masked
(bsc#1012628).
- ACPI: AGDI: fix missing newline in error message (bsc#1012628).
- arm64: kexec: Remove duplicate allocation for trans_pgd
(bsc#1012628).
- bpf: Propagate error from visit_tailcall_insn (bsc#1012628).
- bpf: Fix ld_{abs,ind} failure path analysis in subprogs
(bsc#1012628).
- bpf: Remove static qualifier from local subprog pointer
(bsc#1012628).
- mptcp: better mptcp-level RTT estimator (bsc#1012628).
- bpf: Fix use-after-free in offloaded map/prog info fill
(bsc#1012628).
- macsec: Support VLAN-filtering lower devices (bsc#1012628).
- net: bcmgenet: fix off-by-one in bcmgenet_put_txcb
(bsc#1012628).
- net: bcmgenet: fix leaking free_bds (bsc#1012628).
- net: bcmgenet: fix racing timeout handler (bsc#1012628).
- net: airoha: Add dma_rmb() and READ_ONCE() in
airoha_qdma_rx_process() (bsc#1012628).
- eth: fbnic: Use wake instead of start (bsc#1012628).
- netfilter: xt_socket: enable defrag after all other checks
(bsc#1012628).
- netfilter: nft_fwd_netdev: check ttl/hl before forwarding
(bsc#1012628).
- bpf: fix mm lifecycle in open-coded task_vma iterator
(bsc#1012628).
- bpf: switch task_vma iterator from mmap_lock to per-VMA locks
(bsc#1012628).
- bpf: return VMA snapshot from task_vma iterator (bsc#1012628).
- bpf: Fix RCU stall in bpf_fd_array_map_clear() (bsc#1012628).
- net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf
(bsc#1012628).
- net: airoha: Fix FE_PSE_BUF_SET configuration if PPE2 is
available (bsc#1012628).
- bpf: Enforce regsafe base id consistency for BPF_ADD_CONST
scalars (bsc#1012628).
- selftests/bpf: fix __jited_unpriv tag name (bsc#1012628).
- net/sched: cls_fw: fix NULL dereference of "old" filters before
change() (bsc#1012628).
- net/sched: act_ct: Only release RCU read lock after ct_ft
(bsc#1012628).
- selftests: netfilter: nft_tproxy.sh: adjust to socat changes
(bsc#1012628).
- net: mana: Use pci_name() for debugfs directory naming
(bsc#1012628).
- net: mana: Move current_speed debugfs file to mana_init_port()
(bsc#1012628).
- net: airoha: Add missing RX_CPU_IDX() configuration in
airoha_qdma_cleanup_rx_queue() (bsc#1012628).
- net_sched: fix skb memory leak in deferred qdisc drops
(bsc#1012628).
- bpf: Fix same-register dst/src OOB read and pointer leak in
sock_ops (bsc#1012628).
- bpf: Allow instructions with arena source and non-arena dest
registers (bsc#1012628).
- selftests/bpf: Fix reg_bounds to match new tnum-based refinement
(bsc#1012628).
- net/rds: Optimize rds_ib_laddr_check (bsc#1012628).
- net/rds: Restrict use of RDS/IB to the initial network namespace
(bsc#1012628).
- bpf: Fix OOB in pcpu_init_value (bsc#1012628).
- ppp: require CAP_NET_ADMIN in target netns for unattached ioctls
(bsc#1012628).
- net: ipa: Fix programming of QTIME_TIMESTAMP_CFG (bsc#1012628).
- net: ipa: Fix decoding EV_PER_EE for IPA v5.0+ (bsc#1012628).
- dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional
for sja1110 (bsc#1012628).
- net: phy: fix a return path in get_phy_c45_ids() (bsc#1012628).
- net/mlx5e: Fix features not applied during netdev registration
(bsc#1012628).
- net/mlx5e: IPsec, fix ASO poll timeout with
read_poll_timeout_atomic() (bsc#1012628).
- net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU
registers (bsc#1012628).
- net: fix skb_ext_total_length() BUILD_BUG_ON with
CONFIG_GCOV_PROFILE_ALL (bsc#1012628).
- bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
(bsc#1012628).
- Bluetooth: L2CAP: Fix printing wrong information if SDU length
exceeds MTU (bsc#1012628).
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error
(bsc#1012628).
- Bluetooth: fix locking in hci_conn_request_evt() with
HCI_PROTO_DEFER (bsc#1012628).
- Bluetooth: l2cap: Add missing chan lock in
l2cap_ecred_reconf_rsp (bsc#1012628).
- Bluetooth: SCO: check for codecs->num_codecs == 1 before
assigning to sco_pi(sk)->codec (bsc#1012628).
- net: phy: qcom: at803x: Use the correct bit to disable extended
next page (bsc#1012628).
- udp: Force compute_score to always inline (bsc#1012628).
- tcp: Don't set treq->req_usec_ts in cookie_tcp_reqsk_init()
(bsc#1012628).
- sctp: fix missing encap_port propagation for GSO fragments
(bsc#1012628).
- sctp: disable BH before calling udp_tunnel_xmit_skb()
(bsc#1012628).
- selftests/namespaces: remove unused utils.h include from
listns_efault_test (bsc#1012628).
- net, bpf: fix null-ptr-deref in xdp_master_redirect() for down
master (bsc#1012628).
- net: airoha: Fix VIP configuration for AN7583 SoC (bsc#1012628).
- net: airoha: Add missing PPE configurations in
airoha_ppe_hw_init() (bsc#1012628).
- drm/panel: ilitek-ili9882t: Select DRM_DISPLAY_DSC_HELPER
(bsc#1012628).
- selftests/futex: Fix incorrect result reporting of futex_requeue
test item (bsc#1012628).
- drm/komeda: fix integer overflow in AFBC framebuffer size check
(bsc#1012628).
- dma-fence: Fix sparse warnings due __rcu annotations
(bsc#1012628).
- drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm()
(bsc#1012628).
- drm/virtio: Allow importing prime buffers when 3D is enabled
(bsc#1012628).
- ASoC: soc-compress: use function to clear symmetric params
(bsc#1012628).
- PCI/TPH: Allow TPH enable for RCiEPs (bsc#1012628).
- PCI: endpoint: pci-epf-vntb: Fix MSI doorbell IRQ unwind
(bsc#1012628).
- PCI: endpoint: pci-epf-test: Don't free doorbell IRQ unless
requested (bsc#1012628).
- PCI: endpoint: pci-ep-msi: Fix error unwind and prevent double
alloc (bsc#1012628).
- drm/sun4i: mixer: Fix layer init code (bsc#1012628).
- drm/sun4i: backend: fix error pointer dereference (bsc#1012628).
- drm/xe: Consolidate workaround entries for Wa_14019877138
(bsc#1012628).
- drm/xe: Consolidate workaround entries for Wa_14019386621
(bsc#1012628).
- drm/xe/xe2_hpg: Drop invalid workaround Wa_15010599737
(bsc#1012628).
- gpu: nova-core: gsp: use empty slices instead of [0..0] ranges
(bsc#1012628).
- gpu: nova-core: gsp: fix improper handling of empty slot in cmdq
(bsc#1012628).
- drm/amdkfd: Removed commented line for MQD queue priority
(bsc#1012628).
- PCI: imx6: Fix device node reference leak in imx_pcie_probe()
(bsc#1012628).
- ASoC: SDCA: Add default value for
mipi-sdca-function-reset-max-delay (bsc#1012628).
- ASoC: SDCA: Update counting of SU/GE DAPM routes (bsc#1012628).
- crypto: inside-secure/eip93 - fix register definition
(bsc#1012628).
- ASoC: sti: Return errors from regmap_field_alloc()
(bsc#1012628).
- ASoC: sti: use managed regmap_field allocations (bsc#1012628).
- dm cache: fix null-deref with concurrent writes in passthrough
mode (bsc#1012628).
- dm cache: fix write path cache coherency in passthrough mode
(bsc#1012628).
- dm cache: fix write hang in passthrough mode (bsc#1012628).
- dm cache policy smq: fix missing locks in invalidating cache
blocks (bsc#1012628).
- dm cache: fix concurrent write failure in passthrough mode
(bsc#1012628).
- dm cache: fix dirty mapping checking in passthrough mode
switching (bsc#1012628).
- dm-mpath: don't stop probing paths at presuspend (bsc#1012628).
- drm/amd/ras: Fix type size of remainder argument (bsc#1012628).
- dt-bindings: mmc: dwcmshc-sdhci: Fix resets array validation
(bsc#1012628).
- drm/amdgpu: GFX12.1 scratch memory limit up to 57-bit
(bsc#1012628).
- platform/chrome: chromeos_tbmc: Drop wakeup source on remove
(bsc#1012628).
- gpu: nova-core: use checked arithmetic in FWSEC firmware parsing
(bsc#1012628).
- gpu: nova-core: create falcon firmware DMA objects lazily
(bsc#1012628).
- gpu: nova-core: falcon: rename load parameters to reflect DMA
dependency (bsc#1012628).
- gpu: nova-core: firmware: fix and explain v2 header offsets
computations (bsc#1012628).
- PCI: dwc: ep: Fix MSI-X Table Size configuration in
dw_pcie_ep_set_msix() (bsc#1012628).
- PCI: dwc: ep: Mirror the max link width and speed fields to
all functions (bsc#1012628).
- PCI: dwc: Perform cleanup in the error path of
dw_pcie_resume_noirq() (bsc#1012628).
- dm cache metadata: fix memory leak on metadata abort retry
(bsc#1012628).
- dm log: fix out-of-bounds write due to region_count overflow
(bsc#1012628).
- iopoll: fix function parameter names in
read_poll_timeout_atomic() (bsc#1012628).
- drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector
earlier in atomic_enable() (bsc#1012628).
- drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook
to drm_bridge_funcs (bsc#1012628).
- drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in
bridge atomic check (bsc#1012628).
- spi: nxp-xspi: Use reinit_completion() for repeated operations
(bsc#1012628).
- spi: nxp-fspi: Use reinit_completion() for repeated operations
(bsc#1012628).
- spi: fsl-qspi: Use reinit_completion() for repeated operations
(bsc#1012628).
- spi: axiado: Remove redundant pm_runtime_mark_last_busy() call
(bsc#1012628).
- media: i2c: og01a1b: Fix V4L2 subdevice data initialization
on probe (bsc#1012628).
- media: synopsys: VIDEO_DW_MIPI_CSI2RX should depend on
ARCH_ROCKCHIP (bsc#1012628).
- drm/amd/pm: Fix xgmi max speed reporting (bsc#1012628).
- spi: atcspi200: fix mutex initialization order (bsc#1012628).
- selftests/sched_ext: Add missing error check for exit__load()
(bsc#1012628).
- drm/v3d: Handle error from drm_sched_entity_init()
(bsc#1012628).
- drm/sun4i: Fix resource leaks (bsc#1012628).
- crypto: inside-secure/eip93 - register hash before authenc
algorithms (bsc#1012628).
- PCI: rzg3s-host: Fix reset handling in probe error path
(bsc#1012628).
- PCI: rzg3s-host: Reorder reset assertion during suspend
(bsc#1012628).
- dt-bindings: PCI: renesas,r9a08g045s33-pcie: Fix naming
properties (bsc#1012628).
- iommu/riscv: Add IOTINVAL after updating DDT/PDT entries
(bsc#1012628).
- iommu/riscv: Skip IRQ count check when using MSI interrupts
(bsc#1012628).
- iommu/riscv: Add missing GENERIC_MSI_IRQ (bsc#1012628).
- iommu/riscv: Stop polling when CQCSR reports an error
(bsc#1012628).
- drm/amdkfd: Update queue properties for metadata ring
(bsc#1012628).
- drm/amd/ras: Fix NULL deref in ras_core_ras_interrupt_detected()
(bsc#1012628).
- drm/amdgpu: Add default case in DVI mode validation
(bsc#1012628).
- regulator: dt-bindings: fp9931: Make vin-supply property as
required (bsc#1012628).
- regulator: fp9931: Fix handling of mandatory "vin" supply
(bsc#1012628).
- drm/amd/ras: Fix NULL deref in
ras_core_get_utc_second_timestamp() (bsc#1012628).
- drm/amdgpu: Drop redundant queue NULL check in hang detect
worker (bsc#1012628).
- drm/amdgpu: Remove dead negative offset check in
amdgpu_virt_init_critical_region() (bsc#1012628).
- dm init: ensure device probing has finished in dm-mod.waitfor=
(bsc#1012628).
- fbdev: matroxfb: Mark variable with __maybe_unused to avoid
W=1 build break (bsc#1012628).
- crypto: simd - reject compat registrations without __ prefixes
(bsc#1012628).
- crypto: tegra - Disable softirqs before finalizing request
(bsc#1012628).
- crypto: atmel-aes - guard unregister on error in
atmel_aes_register_algs (bsc#1012628).
- padata: Remove cpu online check from cpu add and removal
(bsc#1012628).
- padata: Put CPU offline callback in ONLINE section to allow
failure (bsc#1012628).
- PCI: dwc: rcar-gen4: Change EPC BAR alignment to 4K as per
the documentation (bsc#1012628).
- accel/amdxdna: fix missing newline in pr_err message
(bsc#1012628).
- drm/amd/ras: Remove redundant NULL check in pending bad-bank
list iteration (bsc#1012628).
- drm/amdgpu/gfx10: look at the right prop for gfx queue priority
(bsc#1012628).
- drm/amdgpu/gfx11: look at the right prop for gfx queue priority
(bsc#1012628).
- spi: hisi-kunpeng: prevent infinite while() loop in
hisi_spi_flush_fifo (bsc#1012628).
- PCI: sky1: Fix missing cleanup of ECAM config on probe failure
(bsc#1012628).
- drm/imagination: Switch reset_reason fields from enum to u32
(bsc#1012628).
- iommu/tegra241-cmdqv: Set supports_cmd op in
tegra241_vcmdq_hw_init() (bsc#1012628).
- iommu/tegra241-cmdqv: Update uAPI to clarify HYP_OWN requirement
(bsc#1012628).
- drm/msm: add missing MODULE_DEVICE_ID definitions (bsc#1012628).
- drm/msm/dpu: fix mismatch between power and frequency
(bsc#1012628).
- drm/msm/dsi: add the missing parameter description
(bsc#1012628).
- drm/msm/dpu: don't try using 2 LMs if only one DSC is available
(bsc#1012628).
- drm/msm/dsi: fix bits_per_pclk (bsc#1012628).
- drm/msm/dsi: fix hdisplay calculation for CMD mode panel
(bsc#1012628).
- drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0
(bsc#1012628).
- ASoC: rockchip: rockchip_sai: Set slot width for non-TDM mode
(bsc#1012628).
- tools/sched_ext: scx_pair: fix pair_ctx indexing for CPU pairs
(bsc#1012628).
- drm/panel: sharp-ls043t1le01: make use of prepare_prev_first
(bsc#1012628).
- drm/panel: simple: Correct G190EAN01 prepare timing
(bsc#1012628).
- PCI: qcom: Advertise Hotplug Slot Capability with no Command
Completion support (bsc#1012628).
- PCI: Prevent shrinking bridge window from its required size
(bsc#1012628).
- PCI: Fix premature removal from realloc_head list during
resource assignment (bsc#1012628).
- crypto: hisilicon/sec2 - prevent req used-after-free for sec
(bsc#1012628).
- PCI: Fix alignment calculation for resource size larger than
align (bsc#1012628).
- iommu/riscv: Fix signedness bug (bsc#1012628).
- ALSA: core: Validate compress device numbers without dynamic
minors (bsc#1012628).
- drm/amd/display: Avoid NULL dereference in dc_dmub_srv error
paths (bsc#1012628).
- ASoC: amd: acp: update dmic_num logic for acp pdm dmic
(bsc#1012628).
- drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled
(bsc#1012628).
- drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs
(bsc#1012628).
- drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock
(bsc#1012628).
- drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0
(bsc#1012628).
- drm/amd/pm/ci: Clear EnabledForActivity field for memory levels
(bsc#1012628).
- drm/amd/pm/ci: Fill DW8 fields from SMC (bsc#1012628).
- drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board
(bsc#1012628).
- drm/amdgpu/uvd4.2: Don't initialize UVD 4.2 when DPM is disabled
(bsc#1012628).
- PCI/DPC: Log AER error info for DPC/EDR uncorrectable errors
(bsc#1012628).
- hwmon: (aspeed-g6-pwm-tach): remove redundant driver remove
callback (bsc#1012628).
- ALSA: hda/realtek: fix bad indentation for alc269 (bsc#1012628).
- ALSA: hda/realtek: fix code style (ERROR: else should follow
close brace '}') (bsc#1012628).
- ASoC: SOF: Intel: hda: Place check before dereference
(bsc#1012628).
- drm/msm/vma: Avoid lock in VM_BIND fence signaling path
(bsc#1012628).
- drm/msm/a6xx: Add missing aperture_lock init (bsc#1012628).
- drm/msm: Reject fb creation from _NO_SHARE objs (bsc#1012628).
- drm/msm: Fix VM_BIND UNMAP locking (bsc#1012628).
- drm/msm/a6xx: Fix HLSQ register dumping (bsc#1012628).
- drm/msm/shrinker: Fix can_block() logic (bsc#1012628).
- drm/msm/a6xx: Fix dumping A650+ debugbus blocks (bsc#1012628).
- drm/msm/a6xx: Use barriers while updating HFI Q headers
(bsc#1012628).
- drm/msm/a8xx: Fix the ticks used in submit traces (bsc#1012628).
- drm/msm/a6xx: Switch to preemption safe AO counter
(bsc#1012628).
- drm/msm/a6xx: Correct OOB usage (bsc#1012628).
- drm/msm/adreno: Implement gx_is_on() for A8x (bsc#1012628).
- drm/msm/a6xx: Fix gpu init from secure world (bsc#1012628).
- ALSA: hda/cmedia: Remove duplicate pin configuration parsing
(bsc#1012628).
- pmdomain: ti: omap_prm: Fix a reference leak on device node
(bsc#1012628).
- pmdomain: imx: scu-pd: Fix device_node reference leak during
- >probe() (bsc#1012628).
- PM: domains: De-constify fields in struct
dev_pm_domain_attach_data (bsc#1012628).
- drm/msm/dpu: drop INTF_0 on MSM8953 (bsc#1012628).
- ASoC: fsl_micfil: Add access property for "VAD Detected"
(bsc#1012628).
- ASoC: fsl_micfil: Fix event generation in hwvad_put_enable()
(bsc#1012628).
- ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode()
(bsc#1012628).
- ASoC: fsl_micfil: Fix event generation in micfil_range_set()
(bsc#1012628).
- ASoC: fsl_micfil: Fix event generation in
micfil_put_dc_remover_state() (bsc#1012628).
- ASoC: fsl_micfil: Fix event generation in micfil_quality_set()
(bsc#1012628).
- ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put()
(bsc#1012628).
- ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put()
(bsc#1012628).
- ASoC: fsl_easrc: Check the variable range in
fsl_easrc_iec958_put_bits() (bsc#1012628).
- ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits()
(bsc#1012628).
- ASoC: fsl_easrc: Change the type for iec958 channel status
controls (bsc#1012628).
- iommu/amd: Fix clone_alias() to use the original device's devid
(bsc#1012628).
- iommu/riscv: Remove overflows on the invalidation path
(bsc#1012628).
- ASoC: qcom: qdsp6: topology: check widget type before accessing
data (bsc#1012628).
- PCI: dwc: Fix type mismatch for kstrtou32_from_user() return
value (bsc#1012628).
- crypto: qat - disable 4xxx AE cluster when lead engine is
fused off (bsc#1012628).
- crypto: qat - disable 420xx AE cluster when lead engine is
fused off (bsc#1012628).
- crypto: qat - fix compression instance leak (bsc#1012628).
- crypto: qat - fix type mismatch in RAS sysfs show functions
(bsc#1012628).
- crypto: iaa - fix per-node CPU counter reset in
rebalance_wq_table() (bsc#1012628).
- crypto: qat - use swab32 macro (bsc#1012628).
- ALSA: hda: Notify IEC958 Default PCM switch state changes
(bsc#1012628).
- ASoC: rsnd: Fix potential out-of-bounds access of
component_dais[] (bsc#1012628).
- PCI: Enable AtomicOps only if Root Port supports them
(bsc#1012628).
- PCI: imx6: Keep Root Port MSI capability with iMSI-RX to work
around hardware bug (bsc#1012628).
- PCI: aspeed: Fix IRQ domain leak on platform_get_irq() failure
(bsc#1012628).
- dt-bindings: PCI: imx6q-pcie: Fix maxItems of clocks and
clock-names (bsc#1012628).
- PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not
found (bsc#1012628).
- gpu: nova-core: bitfield: fix broken Default implementation
(bsc#1012628).
- selftests/mm: skip migration tests if NUMA is unavailable
(bsc#1012628).
- Documentation: fix a hugetlbfs reservation statement
(bsc#1012628).
- Docs/admin-guide/mm/damn/lru_sort: fix intervals autotune
parameter name (bsc#1012628).
- Docs/mm/damon/index: fix typo: autoamted -> automated
(bsc#1012628).
- zram: do not permit params change after init (bsc#1012628).
- selftest: memcg: skip memcg_sock test if address family not
supported (bsc#1012628).
- gpu: nova-core: remove redundant `.as_ref()` for `dev_*` print
(bsc#1012628).
- gpu: nova-core: fix missing colon in SEC2 boot debug message
(bsc#1012628).
- ALSA: scarlett2: Add missing sentinel initializer field
(bsc#1012628).
- ASoC: qcom: audioreach: explicitly enable speaker protection
modules (bsc#1012628).
- ASoC: SOF: compress: return the configured codec from get_params
(bsc#1012628).
- PCI/NPEM: Set LED_HW_PLUGGABLE for hotplug-capable ports
(bsc#1012628).
- tools/sched_ext: Fix off-by-one in scx_sdt payload zeroing
(bsc#1012628).
- ASoC: soc-component: re-add pcm_new()/pcm_free() (bsc#1012628).
- ASoC: amd: name back to pcm_new()/pcm_free() (bsc#1012628).
- ASoC: amd: ps: fix the pcm device numbering for acp pdm dmic
(bsc#1012628).
- ALSA: usb-audio: qcom: Fix incorrect type in enable_audio_stream
(bsc#1012628).
- PCI: tegra194: Fix polling delay for L2 state (bsc#1012628).
- PCI: tegra194: Increase LTSSM poll time on surprise link down
(bsc#1012628).
- PCI: tegra194: Disable LTSSM after transition to Detect on
surprise link down (bsc#1012628).
- PCI: tegra194: Don't force the device into the D0 state before
L2 (bsc#1012628).
- PCI: tegra194: Disable PERST# IRQ only in Endpoint mode
(bsc#1012628).
- PCI: tegra194: Use devm_gpiod_get_optional() to parse
"nvidia,refclk-select" (bsc#1012628).
- PCI: tegra194: Disable direct speed change for Endpoint mode
(bsc#1012628).
- PCI: tegra194: Set LTR message request before PCIe link up in
Endpoint mode (bsc#1012628).
- PCI: tegra194: Allow system suspend when the Endpoint link is
not up (bsc#1012628).
- PCI: tegra194: Free up Endpoint resources during remove()
(bsc#1012628).
- PCI: tegra194: Use DWC IP core version (bsc#1012628).
- PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well
(bsc#1012628).
- PCI: tegra194: Disable L1.2 capability of Tegra234 EP
(bsc#1012628).
- PCI: tegra194: Fix CBB timeout caused by DBI access before
core power-on (bsc#1012628).
- drm/fb-helper: Fix a locking bug in an error path (bsc#1012628).
- PCI: cadence: Add flags for disabling ASPM capability for
broken Root Ports (bsc#1012628).
- PCI: sg2042: Avoid L0s and L1 on Sophgo 2042 PCIe Root Ports
(bsc#1012628).
- ASoC: SDCA: Fix cleanup inversion in class driver (bsc#1012628).
- spi: rzv2h-rspi: Fix invalid SPR=0/BRDV=0 clock configuration
(bsc#1012628).
- spi: mtk-snfi: unregister ECC engine on probe failure and
remove() callback (bsc#1012628).
- ALSA: sc6000: Keep the programmed board state in card-private
data (bsc#1012628).
- dm cache: fix missing return in invalidate_committed's error
path (bsc#1012628).
- sched_ext: Track @p's rq lock across set_cpus_allowed_scx ->
ops.set_cpumask (bsc#1012628).
- sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq
tracking (bsc#1012628).
- spi: cadence-qspi: Revert the filtering of certain opcodes in
ODTR (bsc#1012628).
- crypto: jitterentropy - replace long-held spinlock with mutex
(bsc#1012628).
- ALSA: usb-audio: Exclude Scarlett 18i20 1st Gen from
SKIP_IFACE_SETUP (bsc#1012628).
- ALSA: hda/realtek - fixed speaker no sound update (bsc#1012628).
- gfs2: Call unlock_new_inode before d_instantiate (bsc#1012628).
- fanotify: avoid/silence premature LSM capability checks
(bsc#1012628).
- fanotify: call fanotify_events_supported() before
path_permission() and security_path_notify() (bsc#1012628).
- fuse: fix uninit-value in fuse_dentry_revalidate()
(bsc#1012628).
- ktest: Avoid undef warning when WARNINGS_FILE is unset
(bsc#1012628).
- ktest: Honor empty per-test option overrides (bsc#1012628).
- ktest: Run POST_KTEST hooks on failure and cancellation
(bsc#1012628).
- vfio: selftests: fix crash in vfio_dma_mapping_mmio_test
(bsc#1012628).
- rtla/utils: Fix resource leak in set_comm_sched_attr()
(bsc#1012628).
- tools/rtla: Generate optstring from long options (bsc#1012628).
- rtla: Fix segfault on multiple SIGINTs (bsc#1012628).
- vfio: selftests: Build tests on aarch64 (bsc#1012628).
- gfs2: less aggressive low-memory log flushing (bsc#1012628).
- quota: Fix race of dquot_scan_active() with quota deactivation
(bsc#1012628).
- vfio: unhide vdev->debug_root (bsc#1012628).
- gfs2: add some missing log locking (bsc#1012628).
- gfs2: prevent NULL pointer dereference during unmount
(bsc#1012628).
- efi/capsule-loader: fix incorrect sizeof in phys array
reallocation (bsc#1012628).
- ksmbd: fix use-after-free from async crypto on Qualcomm crypto
engine (bsc#1012628).
- arm64: dts: mediatek: mt8365: Describe infracfg-nao as a pure
syscon (bsc#1012628).
- ARM: dts: mediatek: mt7623: fix efuse fallback compatible
(bsc#1012628).
- memory: tegra124-emc: Fix dll_change check (bsc#1012628).
- memory: tegra30-emc: Fix dll_change check (bsc#1012628).
- arm64: dts: imx8-apalis: Fix LEDs name collision (bsc#1012628).
- arm64: dts: imx91-11x11-evk: change usdhc tuning step for eMMC
and SD (bsc#1012628).
- riscv: dts: spacemit: pcie: fix missing power regulator
(bsc#1012628).
- arm64: dts: mediatek: mt7988a-bpi-r4pro: fix model string
(bsc#1012628).
- arm64: dts: rockchip: Make Jaguar PCIe-refclk pin use pull-up
config (bsc#1012628).
- arm64: dts: imx8mp-evk: Enable pull select bit for PCIe
regulator GPIO (M.2 W_DISABLE1) (bsc#1012628).
- iommufd: vfio compatibility extension check for noiommu mode
(bsc#1012628).
- arm64: dts: qcom: sm6125-xiaomi-ginkgo: Remove board-id
(bsc#1012628).
- arm64: dts: qcom: sm6125-xiaomi-ginkgo: Correct reserved memory
ranges (bsc#1012628).
- arm64: dts: qcom: sm6125-xiaomi-ginkgo: Remove extcon
(bsc#1012628).
- arm64: dts: qcom: sm6125-xiaomi-ginkgo: Fix reserved gpio ranges
(bsc#1012628).
- arm64: dts: qcom: qcs6490-rubikpi3: Use lt9611 DSI Port B
(bsc#1012628).
- arm64: dts: qcom: talos: Add missing clock-names to GCC
(bsc#1012628).
- arm64: dts: ti: k3-am62l: include WKUP_UART0 in wakeup
peripheral window (bsc#1012628).
- arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count
(bsc#1012628).
- arm64: dts: mediatek: mt7981b: Fix gpio-ranges pin count
(bsc#1012628).
- arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count
(bsc#1012628).
- iommufd/selftest: Fix page leaks in mock_viommu_{init,destroy}
(bsc#1012628).
- arm64: dts: imx8mp-kontron: Fix touch reset configuration on
DL devices (bsc#1012628).
- arm64: dts: imx8mp-kontron: Drop vmmc-supply to fix SD card
on SMARC eval carrier (bsc#1012628).
- arm64: dts: imx8mp-hummingboard-pulse/cubox-m: fix vmmc gpio
polarity (bsc#1012628).
- arm64: dts: imx8mp-hummingboard-pulse: fix mini-hdmi dsi port
reference (bsc#1012628).
- ARM: dts: BCM5301X: Drop extra NAND controller compatible
(bsc#1012628).
- arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value
(bsc#1012628).
- arm64: dts: qcom: msm8937-xiaomi-land: correct wled ovp value
(bsc#1012628).
- arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight
(bsc#1012628).
- firmware: qcom_scm: don't opencode kmemdup (bsc#1012628).
- soc: qcom: ubwc: disable bank swizzling for Glymur platform
(bsc#1012628).
- arm64: dts: rockchip: Fix Bluetooth stability on LCKFB TaiShan
Pi (bsc#1012628).
- Revert "arm64: dts: rockchip: add SPDIF audio to Beelink A1"
(bsc#1012628).
- arm64: dts: rockchip: Correct Fan Supply for Gameforce Ace
(bsc#1012628).
- arm64: dts: rockchip: Correct Joystick Axes on Gameforce Ace
(bsc#1012628).
- soc: qcom: ocmem: make the core clock optional (bsc#1012628).
- soc: qcom: ocmem: register reasons for probe deferrals
(bsc#1012628).
- soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available
(bsc#1012628).
- riscv: dts: spacemit: drop incorrect pinctrl for combo PHY
(bsc#1012628).
- arm64: dts: rockchip: Fix RK3562 EVB2 model name (bsc#1012628).
- arm64: dts: rockchip: Add mphy reset to ufshc node
(bsc#1012628).
- bus: rifsc: fix RIF configuration check for peripherals
(bsc#1012628).
- arm64: dts: qcom: arduino-imola: fix faulty spidev node
(bsc#1012628).
- arm64: dts: qcom: add missing denali-oled.dtb to Makefile
(bsc#1012628).
- arm64: dts: qcom: hamoa: correct Iris corners for the MXC rail
(bsc#1012628).
- arm64: dts: qcom: lemans: correct Iris corners for the MXC rail
(bsc#1012628).
- arm64: dts: qcom: monaco: correct Iris corners for the MXC rail
(bsc#1012628).
- arm64: dts: qcom: sm8550: correct Iris corners for the MXC rail
(bsc#1012628).
- arm64: dts: qcom: sm8650: correct Iris corners for the MXC rail
(bsc#1012628).
- arm64: dts: qcom: sm8750: correct Iris corners for the MXC rail
(bsc#1012628).
- arm64: dts: qcom: kaanapali: Fix GIC_ITS range length
(bsc#1012628).
- arm64: dts: qcom: milos: Fix GIC_ITS range length (bsc#1012628).
- arm64: dts: qcom: sm8450: Fix GIC_ITS range length
(bsc#1012628).
- arm64: dts: qcom: sm8550: Fix GIC_ITS range length
(bsc#1012628).
- arm64: dts: qcom: sm8650: Fix GIC_ITS range length
(bsc#1012628).
- arm64: dts: qcom: sm8750: Fix GIC_ITS range length
(bsc#1012628).
- arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD
host controller (bsc#1012628).
- arm64: dts: qcom: sm8650: Fix xo clock supply of SD host
controller (bsc#1012628).
- arm64: dts: qcom: hamoa: Fix xo clock supply of platform SD
host controller (bsc#1012628).
- arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD
card modes (bsc#1012628).
- arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD
card modes (bsc#1012628).
- arm64: dts: qcom: sm8650: Enable UHS-I SDR50 and SDR104 SD
card modes (bsc#1012628).
- arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias
pinctrl (bsc#1012628).
- arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator
as powered during boot (bsc#1012628).
- arm64: dts: qcom: msm8917-xiaomi-riva: Fix board-id for all
bootloader (bsc#1012628).
- arm64: dts: ti: k3-am62p5-sk: Disable MMC1 internal pulls on
data pins (bsc#1012628).
- arm64: dts: ti: k3-am62l3-evm: Disable MMC1 internal pulls on
data pins (bsc#1012628).
- arm64: dts: ti: k3-am62-lp-sk: Enable internal pulls for MMC0
data pins (bsc#1012628).
- arm64: dts: ti: k3-am62-verdin: Fix SPI_1 GPIO CS pinctrl label
(bsc#1012628).
- arm64: dts: freescale: imx8mp-tqma8mpql-mba8mp-ras314: fix
UART1 RTS/CTS muxing (bsc#1012628).
- arm64: dts: imx91: Remove TMU's superfluous sensor ID
(bsc#1012628).
- arm64: dts: imx8mp-kontron: Fix boot order for PMIC and RTC
(bsc#1012628).
- arm64: dts: imx8dxl-evk: Use audio-graph-card2 for wm8960-2
and wm8960-3 (bsc#1012628).
- arm64: dts: imx8mp-evk: Specify ADV7535 register addresses
(bsc#1012628).
- arm64: dts: lx2160a: change i2c0 (iic1) pinmux mask to one bit
(bsc#1012628).
- arm64: dts: lx2160a: remove duplicate pinmux nodes
(bsc#1012628).
- arm64: dts: lx2160a: rename pinmux nodes for readability
(bsc#1012628).
- arm64: dts: lx2160a: add sda gpio references for i2c bus
recovery (bsc#1012628).
- arm64: dts: lx2160a: change zeros to hexadecimal in pinmux nodes
(bsc#1012628).
- arm64: dts: lx2160a: complete pinmux for rcwsr12 configuration
word (bsc#1012628).
- arm64: dts: imx8qm-mek: switch Type-C connector power-role to
dual (bsc#1012628).
- arm64: dts: imx8qxp-mek: switch Type-C connector power-role
to dual (bsc#1012628).
- soc/tegra: cbb: Set ERD on resume for err interrupt
(bsc#1012628).
- soc/tegra: cbb: Fix incorrect ARRAY_SIZE in fabric lookup tables
(bsc#1012628).
- soc/tegra: cbb: Fix cross-fabric target timeout lookup
(bsc#1012628).
- arm64: tegra: Fix RTC aliases (bsc#1012628).
- soc/tegra: pmc: Add kerneldoc for reboot notifier (bsc#1012628).
- soc/tegra: pmc: Correct function names in kerneldoc
(bsc#1012628).
- soc/tegra: pmc: Add kerneldoc for wake-up variables
(bsc#1012628).
- unshare: fix nsproxy leak in ksys_unshare() on
set_cred_ucounts() failure (bsc#1012628).
- ocfs2/dlm: validate qr_numregions in dlm_match_regions()
(bsc#1012628).
- ocfs2/dlm: fix off-by-one in dlm_match_regions() region
comparison (bsc#1012628).
- soc: qcom: llcc: fix v1 SB syndrome register offset
(bsc#1012628).
- soc: qcom: aoss: compare against normalized cooling state
(bsc#1012628).
- arm64: dts: qcom: milos: Add missing CX power domain to GCC
(bsc#1012628).
- arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP
(bsc#1012628).
- ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX
(bsc#1012628).
- arm64/xor: fix conflicting attributes for xor_block_template
(bsc#1012628).
- lib: kunit_iov_iter: fix memory leaks (bsc#1012628).
- ARM: dts: imx27-eukrea: replace interrupts with
interrupts-extended (bsc#1012628).
- firmware: arm_ffa: Use the correct buffer size during RXTX_MAP
(bsc#1012628).
- fwctl: Fix class init ordering to avoid NULL pointer dereference
on device removal (bsc#1012628).
- ocfs2: fix listxattr handling when the buffer is full
(bsc#1012628).
- ocfs2: validate bg_bits during freefrag scan (bsc#1012628).
- ocfs2: validate group add input before caching (bsc#1012628).
- dmaengine: dw-axi-dmac: fix Alignment should match open
parenthesis (bsc#1012628).
- dmaengine: dw-axi-dmac: Remove unnecessary return statement
from void function (bsc#1012628).
- phy: apple: apple: Use local variable for ioremap return value
(bsc#1012628).
- soundwire: bus: demote UNATTACHED state warnings to dev_dbg()
(bsc#1012628).
- soundwire: Intel: test bus.bpt_stream before assigning it
(bsc#1012628).
- dmaengine: mxs-dma: Fix missing return value from
of_dma_controller_register() (bsc#1012628).
- soundwire: cadence: Clear message complete before signaling
waiting thread (bsc#1012628).
- tracing: move __printf() attribute on __ftrace_vbprintk()
(bsc#1012628).
- tracing: Rebuild full_name on each hist_field_name() call
(bsc#1012628).
- hte: tegra194: remove Kconfig dependency on Tegra194 SoC
(bsc#1012628).
- remoteproc: xlnx: Fix sram property parsing (bsc#1012628).
- stop_machine: Fix the documentation for a NULL cpus argument
(bsc#1012628).
- remoteproc: imx_rproc: Check return value of regmap_attach_dev()
in imx_rproc_mmio_detect_mode() (bsc#1012628).
- ima: check return value of crypto_shash_final() in boot
aggregate (bsc#1012628).
- HID: asus: make asus_resume adhere to linux kernel coding
standards (bsc#1012628).
- HID: asus: do not abort probe when not necessary (bsc#1012628).
- workqueue: devres: Add device-managed allocate workqueue
(bsc#1012628).
- power: supply: max77705: Drop duplicated IRQ error message
(bsc#1012628).
- power: supply: max77705: Free allocated workqueue and fix
removal order (bsc#1012628).
- mtd: physmap_of_gemini: Fix disabled pinctrl state check
(bsc#1012628).
- ima_fs: Correctly create securityfs files for unsupported hash
algos (bsc#1012628).
- dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range
(bsc#1012628).
- mtd: spi-nor: core: correct the op.dummy.nbytes when check
read operations (bsc#1012628).
- mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation
(bsc#1012628).
- mtd: spi-nor: micron-st: add SNOR_CMD_PP_8_8_8_DTR sfdp fixup
for mt35xu512aba (bsc#1012628).
- mtd: spi-nor: swp: check SR_TB flag when getting tb_mask
(bsc#1012628).
- mtd: parsers: ofpart: call of_node_put() only in ofpart_fail
path (bsc#1012628).
- mtd: parsers: ofpart: call of_node_get() for dedicated
subpartitions (bsc#1012628).
- cxl/pci: Check memdev driver binding status in cxl_reset_done()
(bsc#1012628).
- mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob
(bsc#1012628).
- mtd: spinand: winbond: Clarify when to enable the HS bit
(bsc#1012628).
- HID: usbhid: fix deadlock in hid_post_reset() (bsc#1012628).
- ext4: fix miss unlock 'sb->s_umount' in extents_kunit_init()
(bsc#1012628).
- ext4: call deactivate_super() in extents_kunit_exit()
(bsc#1012628).
- ext4: fix the error handling process in extents_kunit_init)
(bsc#1012628).
- ext4: fix possible null-ptr-deref in extents_kunit_exit()
(bsc#1012628).
- ext4: fix possible null-ptr-deref in mbt_kunit_exit()
(bsc#1012628).
- bpf, arm64: Reject out-of-range B.cond targets (bsc#1012628).
- bpf, arm64: Fix off-by-one in check_imm signed range check
(bsc#1012628).
- bpf, arm64: Remove redundant bpf_flush_icache() after pack
allocator finalize (bsc#1012628).
- bpf, riscv: Remove redundant bpf_flush_icache() after pack
allocator finalize (bsc#1012628).
- bpf, sockmap: Fix af_unix iter deadlock (bsc#1012628).
- bpf, sockmap: Fix af_unix null-ptr-deref in proto update
(bsc#1012628).
- bpf, sockmap: Take state lock for af_unix iter (bsc#1012628).
- bpf: Fix precedence bug in convert_bpf_ld_abs alignment check
(bsc#1012628).
- bpf: Fix NULL deref in map_kptr_match_type for scalar regs
(bsc#1012628).
- bpf: allow UTF-8 literals in bpf_bprintf_prepare()
(bsc#1012628).
- libbpf: Prevent double close and leak of btf objects
(bsc#1012628).
- bpf: Validate node_id in arena_alloc_pages() (bsc#1012628).
- bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT
(bsc#1012628).
- perf trace: Fix IS_ERR() vs NULL check bug (bsc#1012628).
- dt-bindings: pinctrl: marvell,armada3710-xb-pinctrl: add
missing items keyword (bsc#1012628).
- pinctrl: pinctrl-pic32: Fix resource leak (bsc#1012628).
- perf trace: Avoid an ERR_PTR in syscall_stats (bsc#1012628).
- pinctrl: microchip-mssio: Fix missing return in probe
(bsc#1012628).
- perf test type profiling: Remote typedef on struct
(bsc#1012628).
- pinctrl: cy8c95x0: remove duplicate error message (bsc#1012628).
- pinctrl: cy8c95x0: Unify messages with help of dev_err_probe()
(bsc#1012628).
- pinctrl: cy8c95x0: Avoid returning positive values to user space
(bsc#1012628).
- perf branch: Avoid incrementing NULL (bsc#1012628).
- perf: tools: cs-etm: Fix print issue for Coresight debug in
ETE/TRBE trace (bsc#1012628).
- pinctrl: pinconf-generic: Fully validate 'pinmux' property
(bsc#1012628).
- pinctrl: realtek: Fix function signature for config argument
(bsc#1012628).
- pinctrl: abx500: Fix type of 'argument' variable (bsc#1012628).
- pinctrl: renesas: rzg2l: Fix save/restore of {IOLH,IEN,PUPD,SMT}
registers (bsc#1012628).
- tools build: Correct link flags for libopenssl (bsc#1012628).
- perf lock: Fix option value type in parse_max_stack
(bsc#1012628).
- perf stat: Fix opt->value type for parse_cache_level
(bsc#1012628).
- memblock: reserve_mem: fix end caclulation in
reserve_mem_release_by_name() (bsc#1012628).
- perf stat: Fix crash on arm64 (bsc#1012628).
- perf tools: Fix module symbol resolution for non-zero .text
sh_addr (bsc#1012628).
- perf test: Fix ratio_to_prev event parsing test (bsc#1012628).
- perf test: Skip perf data type profiling tests for s390
(bsc#1012628).
- perf expr: Return -EINVAL for syntax error in expr__find_ids()
(bsc#1012628).
- perf metrics: Make common stalled metrics conditional on having
the event (bsc#1012628).
- ipmi: ssif_bmc: fix missing check for copy_to_user() partial
failure (bsc#1012628).
- ipmi: ssif_bmc: fix message desynchronization after truncated
response (bsc#1012628).
- ipmi: ssif_bmc: change log level to dbg in irq callback
(bsc#1012628).
- perf cgroup: Update metric leader in evlist__expand_cgroup
(bsc#1012628).
- pinctrl: sophgo: pinctrl-sg2042: Fix wrong module description
(bsc#1012628).
- pinctrl: sophgo: pinctrl-sg2044: Fix wrong module description
(bsc#1012628).
- perf maps: Fix fixup_overlap_and_insert that can break sorted
by name order (bsc#1012628).
- perf maps: Fix copy_from that can break sorted by name order
(bsc#1012628).
- perf util: Kill die() prototype, dead for a long time
(bsc#1012628).
- i3c: master: dw-i3c: Fix missing reset assertion in remove()
callback (bsc#1012628).
- i3c: master: dw-i3c: Balance PM runtime usage count on probe
failure (bsc#1012628).
- i3c: master: renesas: Fix memory leak in renesas_i3c_i3c_xfers()
(bsc#1012628).
- i3c: dw: Fix memory leak in dw_i3c_master_i3c_xfers()
(bsc#1012628).
- i3c: master: adi: Fix error propagation for CCCs (bsc#1012628).
- i3c: mipi-i3c-hci: fix IBI payload length calculation for
final status (bsc#1012628).
- fs/ntfs3: prevent uninitialized lcn caused by zero len
(bsc#1012628).
- backlight: sky81452-backlight: Check return value of
devm_gpiod_get_optional() in sky81452_bl_parse_dt()
(bsc#1012628).
- platform/surface: surfacepro3_button: Drop wakeup source on
remove (bsc#1012628).
- leds: lgm-sso: Remove duplicate assignments for priv->mmap
(bsc#1012628).
- usb: typec: Fix error pointer dereference (bsc#1012628).
- tty: hvc_iucv: fix off-by-one in number of supported devices
(bsc#1012628).
- usb: typec: ps883x: Fix Oops at unbind (bsc#1012628).
- platform/x86: panasonic-laptop: Fix OPTD notifier registration
and cleanup (bsc#1012628).
- platform/x86: barco-p50-gpio: normalize return value of gpio_get
(bsc#1012628).
- fs/ntfs3: fix missing run load for vcn0 in
attr_data_get_block_locked() (bsc#1012628).
- mfd: mc13xxx-core: Fix memory leak in
mc13xxx_add_subdevice_pdata() (bsc#1012628).
- nfs/blocklayout: Fix compilation error (`make W=1`) in
bl_write_pagelist() (bsc#1012628).
- sunrpc: Kill RPC_IFDEBUG() (bsc#1012628).
- sunrpc: Fix compilation error (`make W=1`) when dprintk()
is no-op (bsc#1012628).
- NFSD: fix nfs4_file access extra count in
nfsd4_add_rdaccess_to_wrdeleg (bsc#1012628).
- nfsd: use dynamic allocation for oversized NFSv4.0 replay cache
(bsc#1012628).
- RDMA/umem: Use consistent DMA attributes when unmapping entries
(bsc#1012628).
- greybus: raw: fix use-after-free on cdev close (bsc#1012628).
- greybus: raw: fix use-after-free if write is called after
disconnect (bsc#1012628).
- platform/x86: asus-wmi: adjust screenpad power/brightness
handling (bsc#1012628).
- platform/x86: asus-wmi: fix screenpad brightness range
(bsc#1012628).
- tty: serial: ip22zilog: Fix section mispatch warning
(bsc#1012628).
- fs/ntfs3: terminate the cached volume label after UTF-8
conversion (bsc#1012628).
- platform/x86: hp-wmi: fix ignored return values in fan settings
(bsc#1012628).
- platform/x86: hp-wmi: avoid cancel_delayed_work_sync from work
handler (bsc#1012628).
- platform/x86: hp-wmi: use mod_delayed_work to reset keep-alive
timer (bsc#1012628).
- platform/x86: hp-wmi: fix u8 underflow in gpu_delta calculation
(bsc#1012628).
- platform/x86: hp-wmi: add locking for concurrent hwmon access
(bsc#1012628).
- platform/x86: dell_rbu: avoid uninit value usage in
packet_size_write() (bsc#1012628).
- platform/x86: dell-wmi-sysman: bound enumeration string
aggregation (bsc#1012628).
- RDMA/core: Prefer NLA_NUL_STRING (bsc#1012628).
- platform/x86: hp-wmi: fix fan table parsing (bsc#1012628).
- dt-bindings: clock: qcom: Add GCC video axi reset clock for
Glymur (bsc#1012628).
- clk: qcom: gcc-glymur: Add video axi clock resets for glymur
(bsc#1012628).
- clk: qcom: dispcc-glymur: use RCG2 ops for DPTX1 AUX clock
source (bsc#1012628).
- clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock
source (bsc#1012628).
- clk: renesas: r9a09g057: Fix ordering of module clocks array
(bsc#1012628).
- clk: renesas: r9a09g056: Fix ordering of module clocks array
(bsc#1012628).
- clk: sunxi-ng: sun55i-a523-r: Add missing r-spi module clock
(bsc#1012628).
- scsi: sg: Fix sysctl sg-big-buff register during sg_init()
(bsc#1012628).
- scsi: sg: Resolve soft lockup issue when opening /dev/sgX
(bsc#1012628).
- clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from
byte_div_clk_src dividers (bsc#1012628).
- clk: qcom: dispcc-glymur: Fix DSI byte clock rate setting
(bsc#1012628).
- clk: qcom: dispcc-kaanapali: Fix DSI byte clock rate setting
(bsc#1012628).
- clk: qcom: dispcc-milos: Fix DSI byte clock rate setting
(bsc#1012628).
- clk: qcom: dispcc-sm4450: Fix DSI byte clock rate setting
(bsc#1012628).
- clk: qcom: dispcc[01]-sa8775p: Fix DSI byte clock rate setting
(bsc#1012628).
- clk: renesas: r9a09g057: Remove entries for WDT{0,2,3}
(bsc#1012628).
- scsi: qla2xxx: Add support to report MPI FW state (bsc#1012628).
- scsi: target: core: Fix integer overflow in UNMAP bounds check
(bsc#1012628).
- scsi: ufs: rockchip,rk3576-ufshc: dt-bindings: Add new mphy
reset item (bsc#1012628).
- dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs
(bsc#1012628).
- clk: qcom: gcc-sc8180x: Add missing GDSCs (bsc#1012628).
- clk: qcom: gcc-sc8180x: Use retention for USB power domains
(bsc#1012628).
- clk: qcom: gcc-sc8180x: Use retention for PCIe power domains
(bsc#1012628).
- clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk
(bsc#1012628).
- clk: qcom: dispcc-sm8250: Enable parents for pixel clocks
(bsc#1012628).
- clk: imx: imx6q: Fix device node reference leak in
pll6_bypassed() (bsc#1012628).
- clk: imx: imx6q: Fix device node reference leak in
of_assigned_ldb_sels() (bsc#1012628).
- clk: imx8mq: Correct the CSI PHY sels (bsc#1012628).
- um: Fix potential race condition in TLB sync (bsc#1012628).
- x86/um: fix vDSO installation (bsc#1012628).
- clk: qoriq: avoid format string warning (bsc#1012628).
- clk: xgene: Fix mapping leak in xgene_pllclk_init()
(bsc#1012628).
- clk: spacemit: ccu_mix: fix inverted condition in
ccu_mix_trigger_fc() (bsc#1012628).
- f2fs: avoid reading already updated pages during GC
(bsc#1012628).
- printk_ringbuffer: Fix get_data() size sanity check
(bsc#1012628).
- clk: qcom: gdsc: Fix error path on registration of multiple
pm subdomains (bsc#1012628).
- lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug()
(bsc#1012628).
- f2fs: fix data loss caused by incorrect use of nat_entry flag
(bsc#1012628).
- f2fs: fix to preserve previous reserve_{blocks,node} value
when remount (bsc#1012628).
- scsi: hpsa: Enlarge controller and IRQ name buffers
(bsc#1012628).
- drm/amd/display: Fix parameter mismatch in panel self-refresh
helper (bsc#1012628).
- clk: qcom: gcc-x1e80100: Keep GCC USB QTB clock always ON
(bsc#1012628).
- clk: visconti: pll: initialize clk_init_data to zero
(bsc#1012628).
- f2fs: allow empty mount string for Opt_usr|grp|projjquota
(bsc#1012628).
- f2fs: protect extension_list reading with sb_lock in
f2fs_sbi_show() (bsc#1012628).
- drm/i915/wm: Verify the correct plane DDB entry (bsc#1012628).
- virt: arm-cca-guest: fix error check for RSI_INCOMPLETE
(bsc#1012628).
- crypto: eip93 - fix hmac setkey algo selection (bsc#1012628).
- crypto: sa2ul - Fix AEAD fallback algorithm names (bsc#1012628).
- crypto: ccp - copy IV using skcipher ivsize (bsc#1012628).
- sh: Include <linux/io.h> in dac.h (bsc#1012628).
- erofs: unify lcn as u64 for 32-bit platforms (bsc#1012628).
- tools: hv: Fix cross-compilation (bsc#1012628).
- Drivers: hv: vmbus: fix hyperv_cpuhp_online variable shadowing
(bsc#1012628).
- arm64: dts: imx8mp-debix-model-a: Correct PAD settings for
PMIC_nINT (bsc#1012628).
- arm64: dts: imx8mp-debix-som-a: Correct PAD settings for
PMIC_nINT (bsc#1012628).
- arm64: dts: imx8mp-navqp: Correct PAD settings for PMIC_nINT
(bsc#1012628).
- arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for
PMIC_nINT (bsc#1012628).
- arm64: dts: imx8mp-edm-g: Correct PAD settings for PMIC_nINT
(bsc#1012628).
- arm64: dts: imx8mp-aristainetos3a-som-v1: Correct PAD settings
for PMIC_nINT (bsc#1012628).
- arm64: dts: imx8mp-nitrogen-som: Correct PAD settings for
PMIC_nINT (bsc#1012628).
- arm64: dts: imx8mp-sr-som: Correct PAD settings for PMIC_nINT
(bsc#1012628).
- arm64: dts: imx8mp-ultra-mach-sbc: Correct PAD settings for
PMIC_nINT (bsc#1012628).
- arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT
(bsc#1012628).
- arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings
for PMIC_nINT (bsc#1012628).
- PCMCIA: Fix garbled log messages for KERN_CONT (bsc#1012628).
- reset: amlogic: t7: Fix null reset ops (bsc#1012628).
- arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT
(bsc#1012628).
- arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT
(bsc#1012628).
- arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT
(bsc#1012628).
- arm64: dts: marvell: armada-37xx: use 'usb2-phy' in USB3
controller's phy-names (bsc#1012628).
- pwm: stm32: Fix rounding issue for requests with inverted
polarity (bsc#1012628).
- net/sched: act_mirred: fix wrong device for mac_header_xmit
check in tcf_blockcast_redir (bsc#1012628).
- macvlan: fix macvlan_get_size() not reserving space for
IFLA_MACVLAN_BC_CUTOFF (bsc#1012628).
- net/sched: sch_cake: fix NAT destination port not being updated
in cake_update_flowkeys (bsc#1012628).
- nexthop: fix IPv6 route referencing IPv4 nexthop (bsc#1012628).
- net: airoha: Wait for NPU PPE configuration to complete in
airoha_ppe_offload_setup() (bsc#1012628).
- net/sched: taprio: fix use-after-free in advance_sched()
on schedule switch (bsc#1012628).
- net: dsa: remove redundant netdev_lock_ops() from conduit
ethtool ops (bsc#1012628).
- net: enetc: correct the command BD ring consumer index
(bsc#1012628).
- net: enetc: fix NTMP DMA use-after-free issue (bsc#1012628).
- ksmbd: fix use-after-free in smb2_open during durable reconnect
(bsc#1012628).
- tcp: move tp->chrono_type next tp->chrono_stat[] (bsc#1012628).
- tcp: inline tcp_chrono_start() (bsc#1012628).
- tcp: annotate data-races in tcp_get_info_chrono_stats()
(bsc#1012628).
- tcp: add data-race annotations around tp->data_segs_out and
tp->total_retrans (bsc#1012628).
- tcp: add data-races annotations around tp->reordering,
tp->snd_cwnd (bsc#1012628).
- tcp: annotate data-races around tp->snd_ssthresh (bsc#1012628).
- tcp: annotate data-races around tp->delivered and
tp->delivered_ce (bsc#1012628).
- tcp: add data-race annotations for TCP_NLA_SNDQ_SIZE
(bsc#1012628).
- tcp: annotate data-races around tp->bytes_sent (bsc#1012628).
- tcp: annotate data-races around tp->bytes_retrans (bsc#1012628).
- tcp: annotate data-races around tp->dsack_dups (bsc#1012628).
- tcp: annotate data-races around tp->reord_seen (bsc#1012628).
- tcp: annotate data-races around tp->srtt_us (bsc#1012628).
- tcp: annotate data-races around tp->timeout_rehash
(bsc#1012628).
- tcp: annotate data-races around (tp->write_seq - tp->snd_nxt)
(bsc#1012628).
- tcp: annotate data-races around tp->plb_rehash (bsc#1012628).
- ice: fix 'adjust' timer programming for E830 devices
(bsc#1012628).
- ice: update PCS latency settings for E825 10G/25Gb modes
(bsc#1012628).
- ice: fix double-free of tx_buf skb (bsc#1012628).
- ice: fix PHY config on media change with link-down-on-close
(bsc#1012628).
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (bsc#1012628).
- ice: fix race condition in TX timestamp ring cleanup
(bsc#1012628).
- ice: fix potential NULL pointer deref in error path of
ice_set_ringparam() (bsc#1012628).
- i40e: don't advertise IFF_SUPP_NOFCS (bsc#1012628).
- iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2
(bsc#1012628).
- e1000e: Unroll PTP in probe error handling (bsc#1012628).
- ipv6: fix possible UAF in icmpv6_rcv() (bsc#1012628).
- af_unix: Drop all SCM attributes for SOCKMAP (bsc#1012628).
- sctp: fix OOB write to userspace in
sctp_getsockopt_peer_auth_chunks (bsc#1012628).
- pppoe: drop PFC frames (bsc#1012628).
- net/mlx5: Fix HCA caps leak on notifier init failure
(bsc#1012628).
- openvswitch: cap upcall PID array size and pre-size vport
replies (bsc#1012628).
- net: airoha: Fix possible TX queue stall in
airoha_qdma_tx_napi_poll() (bsc#1012628).
- netfilter: nft_osf: restrict it to ipv4 (bsc#1012628).
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
(bsc#1012628).
- netfilter: conntrack: remove sprintf usage (bsc#1012628).
- netfilter: xtables: restrict several matches to inet family
(bsc#1012628).
- netfilter: nat: use kfree_rcu to release ops (bsc#1012628).
- ipvs: fix MTU check for GSO packets in tunnel mode
(bsc#1012628).
- netfilter: nfnetlink_osf: fix out-of-bounds read on option
matching (bsc#1012628).
- netfilter: nfnetlink_osf: fix potential NULL dereference in
ttl check (bsc#1012628).
- slip: reject VJ receive packets on instances with no rstate
array (bsc#1012628).
- slip: bound decode() reads against the compressed packet length
(bsc#1012628).
- net/sched: sch_dualpi2: drain both C-queue and L-queue in
dualpi2_change() (bsc#1012628).
- arm64: dts: amlogic: meson-axg: Add missing cache information
to cpu0 (bsc#1012628).
- arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number
(bsc#1012628).
- vfio/pci: Clean up DMABUFs before disabling function
(bsc#1012628).
- pwm: atmel-tcb: Cache clock rates and mark chip as atomic
(bsc#1012628).
- ksmbd: destroy tree_conn_ida in ksmbd_session_destroy()
(bsc#1012628).
- ksmbd: destroy async_ida in ksmbd_conn_free() (bsc#1012628).
- ksmbd: fix durable fd leak on ClientGUID mismatch in durable
v2 open (bsc#1012628).
- ksmbd: scope conn->binding slowpath to bound sessions only
(bsc#1012628).
- net: validate skb->napi_id in RX tracepoints (bsc#1012628).
- bnge: fix initial HWRM sequence (bsc#1012628).
- bnge: remove unsupported backing store type (bsc#1012628).
- sctp: fix sockets_allocated imbalance after sk_clone()
(bsc#1012628).
- net/rds: zero per-item info buffer before handing it to visitors
(bsc#1012628).
- ice: fix timestamp interrupt configuration for E825C
(bsc#1012628).
- ice: perform PHY soft reset for E825C ports at initialization
(bsc#1012628).
- ice: fix ready bitmap check for non-E822 devices (bsc#1012628).
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (bsc#1012628).
- net_sched: sch_hhf: annotate data-races in hhf_dump_stats()
(bsc#1012628).
- net/sched: sch_pie: annotate data-races in pie_dump_stats()
(bsc#1012628).
- net/sched: sch_fq_codel: remove data-races from
fq_codel_dump_stats() (bsc#1012628).
- net/sched: sch_red: annotate data-races in red_dump_stats()
(bsc#1012628).
- net/sched: sch_sfb: annotate data-races in sfb_dump_stats()
(bsc#1012628).
- net: airoha: Move ndesc initialization at end of
airoha_qdma_init_tx() (bsc#1012628).
- net: airoha: Add missing bits in airoha_qdma_cleanup_tx_queue()
(bsc#1012628).
- net: dsa: realtek: rtl8365mb: fix mode mask calculation
(bsc#1012628).
- net: airoha: Move ndesc initialization at end of
airoha_qdma_init_rx_queue() (bsc#1012628).
- net: airoha: Rework the code flow in airoha_remove() and in
airoha_probe() error path (bsc#1012628).
- net: airoha: Add size check for TX NAPIs in
airoha_qdma_cleanup() (bsc#1012628).
- net: mana: Init link_change_work before potential error paths
in probe (bsc#1012628).
- net: mana: Init gf_stats_work before potential error paths in
probe (bsc#1012628).
- net: mana: Guard mana_remove against double invocation
(bsc#1012628).
- net: mana: Don't overwrite port probe error with add_adev result
(bsc#1012628).
- net: mana: Fix EQ leak in mana_remove on NULL port
(bsc#1012628).
- vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting
(bsc#1012628).
- virtio_net: sync rss_trailer.max_tx_vq on queue_pairs change
via VQ_PAIRS_SET (bsc#1012628).
- nfp: fix swapped arguments in nfp_encode_basic_qdr() calls
(bsc#1012628).
- tcp: send a challenge ACK on SEG.ACK > SND.NXT (bsc#1012628).
- tipc: fix double-free in tipc_buf_append() (bsc#1012628).
- vhost_net: fix sleeping with preempt-disabled in
vhost_net_busy_poll() (bsc#1012628).
- nstree: fix func. parameter kernel-doc warnings (bsc#1012628).
- eventpoll: use hlist_is_singular_node() in __ep_remove()
(bsc#1012628).
- eventpoll: split __ep_remove() (bsc#1012628).
- eventpoll: kill __ep_remove() (bsc#1012628).
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}()
(bsc#1012628).
- eventpoll: move epi_fget() up (bsc#1012628).
- eventpoll: fix ep_remove struct eventpoll / struct file UAF
(bsc#1012628).
- fs/adfs: validate nzones in adfs_validate_bblk() (bsc#1012628).
- rtc: abx80x: Disable alarm feature if no interrupt attached
(bsc#1012628).
- kbuild: builddeb - avoid recompiles for non-cross-compiles
(bsc#1012628).
- tools/power turbostat: Fix AMD RAPL regression on big systems
(bsc#1012628).
- fbdev: offb: fix PCI device reference leak on probe failure
(bsc#1012628).
- tools/power turbostat: Fix unrecognized option '-P'
(bsc#1012628).
- tools/power turbostat: Fix --cpu-set 0 regression on HT systems
(bsc#1012628).
- tools/power turbostat: Fix --cpu-set 1 regression on HT systems
(bsc#1012628).
- kbuild: Never respect CONFIG_WERROR / W=e to fixdep
(bsc#1012628).
- mailbox: mtk-vcp-mailbox: Fix the return value in
mtk_vcp_mbox_xlate() (bsc#1012628).
- mailbox: mtk-cmdq: Fix CURR and END addr for task insert case
(bsc#1012628).
- mailbox: mailbox-test: free channels on probe error
(bsc#1012628).
- sched/psi: fix race between file release and pressure write
(bsc#1012628).
- cgroup/rdma: fix integer overflow in rdmacg_try_charge()
(bsc#1012628).
- cgroup/cpuset: record DL BW alloc CPU for attach rollback
(bsc#1012628).
- mailbox: add sanity check for channel array (bsc#1012628).
- mailbox: mailbox-test: handle channel errors consistently
(bsc#1012628).
- mailbox: mailbox-test: don't free the reused channel
(bsc#1012628).
- mailbox: mailbox-test: initialize struct earlier (bsc#1012628).
- mailbox: mailbox-test: make data_ready a per-instance variable
(bsc#1012628).
- fsnotify: fix inode reference leak in fsnotify_recalc_mask()
(bsc#1012628).
- btrfs: fix bytes_may_use leak in move_existing_remap()
(bsc#1012628).
- btrfs: fix bytes_may_use leak in do_remap_reloc_trans()
(bsc#1012628).
- btrfs: don't clobber errors in add_remap_tree_entries()
(bsc#1012628).
- btrfs: fix double-decrement of bytes_may_use in
submit_one_async_extent() (bsc#1012628).
- tracing: branch: Fix inverted check on stat tracer registration
(bsc#1012628).
- nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to
its callers (bsc#1012628).
- netfilter: arp_tables: fix IEEE1394 ARP payload parsing
(bsc#1012628).
- netfilter: nf_tables: use list_del_rcu for netlink hooks
(bsc#1012628).
- rculist: add list_splice_rcu() for private lists (bsc#1012628).
- netfilter: nf_tables: join hook list via splice_list_rcu()
in commit phase (bsc#1012628).
- netfilter: nf_tables: add hook transactions for device deletions
(bsc#1012628).
- nvme-pci: fix missed admin queue sq doorbell write
(bsc#1012628).
- drm/amdgpu: avoid double drm_exec_fini() in userq validate
(bsc#1012628).
- drm/amdgpu/gmc: Fix AMDGPU_GART_PLACEMENT_LOW to not overlap
with VRAM (bsc#1012628).
- drm/amd/pm: fix missing fine-grained dpm table flag on aldebaran
(bsc#1012628).
- drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG (bsc#1012628).
- drm/amdgpu/uvd3.1: Don't validate the firmware when already
validated (bsc#1012628).
- drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs
(v2) (bsc#1012628).
- drm/amdgpu: Only send RMA CPER when threshold is exceeded
(bsc#1012628).
- netfilter: xt_policy: fix strict mode inbound policy matching
(bsc#1012628).
- netfilter: nf_conntrack_sip: don't use simple_strtoul
(bsc#1012628).
- spi: rzv2h-rspi: Fix silent failure in clock setup error path
(bsc#1012628).
- ASoC: amd: acp: Add DMI quirk for Valve Steam Deck OLED
(bsc#1012628).
- ASoC: SOF: Intel: add an empty adr_link (bsc#1012628).
- spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ
(bsc#1012628).
- ASoC: tas2764: Mark die temp register as volatile (bsc#1012628).
- ASoC: tas2770: Fix order of operations for temperature
calculation (bsc#1012628).
- drm/sysfb: ofdrm: fix PCI device reference leaks (bsc#1012628).
- drm/color-mgmt: Typo s/R332/RGB332/ (bsc#1012628).
- arm64/scs: Fix potential sign extension issue of advance_loc4
(bsc#1012628).
- spi: spi-mem: Add a packed command operation (bsc#1012628).
- mtd: spinand: Add support for packed read data ODTR commands
(bsc#1012628).
- mtd: spinand: winbond: Set the packed page read flag to
W35N02/04JW (bsc#1012628).
- mtd: spinand: winbond: Fix ODTR write VCR on W35NxxJW
(bsc#1012628).
- ACPICA: Provide #defines for EINJV2 error types (bsc#1012628).
- ACPI: APEI: EINJ: Fix EINJV2 memory error injection
(bsc#1012628).
- cdrom, scsi: sr: propagate read-only status to block layer
via set_disk_ro() (bsc#1012628).
- spi: axiado: replace usleep_range() with udelay() in IRQ path
(bsc#1012628).
- netdevsim: zero initialize struct iphdr in dummy sk_buff
(bsc#1012628).
- net/sched: netem: fix probability gaps in 4-state loss model
(bsc#1012628).
- net/sched: netem: fix queue limit check to include reordered
packets (bsc#1012628).
- net/sched: netem: only reseed PRNG when seed is explicitly
provided (bsc#1012628).
- net/sched: netem: validate slot configuration (bsc#1012628).
- net/sched: netem: fix slot delay calculation overflow
(bsc#1012628).
- net/sched: netem: check for negative latency and jitter
(bsc#1012628).
- net: airoha: fix BQL imbalance in TX path (bsc#1012628).
- net: airoha: stop net_device TX queue before updating CPU index
(bsc#1012628).
- net: airoha: fix typo in function name (bsc#1012628).
- net: airoha: Do not wake all netdev TX queues in
airoha_qdma_wake_netdev_txqs() (bsc#1012628).
- net: airoha: Do not read uninitialized fragment address in
airoha_dev_xmit() (bsc#1012628).
- net/sched: sch_choke: annotate data-races in choke_dump_stats()
(bsc#1012628).
- net/sched: sch_fq_pie: annotate data-races in
fq_pie_dump_stats() (bsc#1012628).
- vrf: Fix a potential NPD when removing a port from a VRF
(bsc#1012628).
- net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()
(bsc#1012628).
- net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit
(bsc#1012628).
- spi: amlogic-spisg: initialize completion before requesting IRQ
(bsc#1012628).
- NFC: trf7970a: Ignore antenna noise when checking for RF field
(bsc#1012628).
- net/sched: taprio: fix NULL pointer dereference in class dump
(bsc#1012628).
- net: phonet: do not BUG_ON() in pn_socket_autobind() on failed
bind (bsc#1012628).
- neigh: let neigh_xmit take skb ownership (bsc#1012628).
- tcp: make probe0 timer handle expired user timeout
(bsc#1012628).
- netpoll: fix IPv6 local-address corruption (bsc#1012628).
- ALSA: usb-audio: Fix potential leak of pd at parsing UAC3
streams (bsc#1012628).
- sched/fair: Fix wakeup_preempt_fair() vs delayed dequeue
(bsc#1012628).
- sched/fair: Clear rel_deadline when initializing forked entities
(bsc#1012628).
- net: mctp i2c: check length before marking flow active
(bsc#1012628).
- md/raid1,raid10: don't fail devices for invalid IO errors
(bsc#1012628).
- md: add fallback to correct bitmap_ops on version mismatch
(bsc#1012628).
- md: factor bitmap creation away from sysfs handling
(bsc#1012628).
- md/md-bitmap: split bitmap sysfs groups (bsc#1012628).
- md/md-bitmap: add a none backend for bitmap grow (bsc#1012628).
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access()
(bsc#1012628).
- net: phy: dp83869: fix setting CLK_O_SEL field (bsc#1012628).
- drm/amd/display: properly handle family setting for early GC
11.5.4 (bsc#1012628).
- drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings
(bsc#1012628).
- drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings
(bsc#1012628).
- drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings
(bsc#1012628).
- drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring
(bsc#1012628).
- drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring
(bsc#1012628).
- drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring
(bsc#1012628).
- drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring
(bsc#1012628).
- drm/amdgpu/vcn: set no_user_fence for VCN v5.0.1 enc ring
(bsc#1012628).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring
(bsc#1012628).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring
(bsc#1012628).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring
(bsc#1012628).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring
(bsc#1012628).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring
(bsc#1012628).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring
(bsc#1012628).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring
(bsc#1012628).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring
(bsc#1012628).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v5.3.0 ring
(bsc#1012628).
- drm/amd/pm: Add fine grained flag to SMU v13.0.6 (bsc#1012628).
- io_uring/napi: cap busy_poll_to 10 msec (bsc#1012628).
- ASoC: cs35l56: Fix illegal writes to OTP_MEM registers
(bsc#1012628).
- net: psp: check for device unregister when creating assoc
(bsc#1012628).
- net: psp: require admin permission for dev-set and key-rotate
(bsc#1012628).
- ASoC: codecs: ab8500: Fix casting of private data (bsc#1012628).
- netfilter: skip recording stale or retransmitted INIT
(bsc#1012628).
- sctp: discard stale INIT after handshake completion
(bsc#1012628).
- bareudp: fix NULL pointer dereference in
bareudp_fill_metadata_dst() (bsc#1012628).
- net/sched: sch_cake: annotate data-races in cake_dump_stats()
(I) (bsc#1012628).
- net/sched: sch_cake: annotate data-races in cake_dump_stats()
(II) (bsc#1012628).
- net/sched: sch_cake: annotate data-races in cake_dump_stats()
(III) (bsc#1012628).
- net/sched: sch_cake: annotate data-races in cake_dump_stats()
(IV) (bsc#1012628).
- net/sched: sch_cake: annotate data-races in cake_dump_stats()
(V) (bsc#1012628).
- netconsole: return count instead of strnlen(buf, count) from
store callbacks (bsc#1012628).
- netconsole: avoid clobbering userdatum value on truncated write
(bsc#1012628).
- netconsole: propagate device name truncation in dev_name_store()
(bsc#1012628).
- netconsole: restore userdatum value on update_userdata()
failure (bsc#1012628).
- ALSA: hda/conexant: Fix missing error check for jack detection
(bsc#1012628).
- ALSA: hda: cs35l56: Fix uninitialized value in
cs35l56_hda_read_acpi() (bsc#1012628).
- ALSA: hda/tas2781: Fix incorrect bit update for non-book-zero
or book 0 pages >1 (bsc#1012628).
- futex: Prevent lockup in requeue-PI during signal/ timeout
wakeup (bsc#1012628).
- drm/amd/display: Allow embedded connectors without DDC
(bsc#1012628).
- drm/amd/display: Allow DCE link encoder without AUX registers
(bsc#1012628).
- drm/amd/display: Allow constructing DCE6 link encoder without
DDC (bsc#1012628).
- drm/amd/display: Allow constructing DCE8 link encoder without
DDC (bsc#1012628).
- drm/amd/display: Read EDID from VBIOS embedded panel info
(bsc#1012628).
- drm/amd/display: Use EDID from VBIOS embedded panel info
(bsc#1012628).
- drm/xe: Use XE_WEDGED_MODE_UPON_ANY_HANG_NO_RESET enum instead
of magic number (bsc#1012628).
- drm/xe: Drop registration of guc_submit_wedged_fini from
xe_guc_submit_wedge() (bsc#1012628).
- drm/xe/debugfs: Correct printing of register whitelist ranges
(bsc#1012628).
- drm/xe: Fix potential NULL deref in
xe_exec_queue_tlb_inval_last_fence_put_unlocked (bsc#1012628).
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()
(bsc#1012628).
- drm/xe/eustall: Fix drm_dev_put called before stream disable
in close (bsc#1012628).
- drm/xe/gsc: Fix BO leak on error in
query_compatibility_version() (bsc#1012628).
- drm/xe/xelp: Fix Wa_18022495364 (bsc#1012628).
- net: airoha: Do not return err in ndo_stop() callback
(bsc#1012628).
- bonding: print churn state via netlink (bsc#1012628).
- bonding: 3ad: implement proper RCU rules for port->aggregator
(bsc#1012628).
- page_pool: fix memory-provider leak in page_pool_create_percpu()
error path (bsc#1012628).
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (bsc#1012628).
- iavf: stop removing VLAN filters from PF on interface down
(bsc#1012628).
- iavf: wait for PF confirmation before removing VLAN filters
(bsc#1012628).
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler
(bsc#1012628).
- ice: fix NULL pointer dereference in ice_reset_all_vfs()
(bsc#1012628).
- ice: fix infinite recursion in ice_cfg_tx_topo via
ice_init_dev_hw (bsc#1012628).
- ice: fix missing SMA pin initialization in DPLL subsystem
(bsc#1012628).
- ice: fix SMA and U.FL pin state changes affecting paired pin
(bsc#1012628).
- ice: fix missing dpll notifications for SW pins (bsc#1012628).
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock
(bsc#1012628).
- ice: add dpll peer notification for paired SMA and U.FL pins
(bsc#1012628).
- net: tls: fix strparser anchor skb leak on offload RX setup
failure (bsc#1012628).
- sfc: fix error code in efx_devlink_info_running_versions()
(bsc#1012628).
- net/sched: cls_flower: revert unintended changes (bsc#1012628).
- kselftest/arm64: Include <asm/ptrace.h> for user_gcs definition
(bsc#1012628).
- arm64: Reserve an extra page for early kernel mapping
(bsc#1012628).
- futex: Drop CLONE_THREAD requirement for private default hash
alloc (bsc#1012628).
- PCI: Initialize temporary device in new_id_store()
(bsc#1012628).
- workqueue: fix devm_alloc_workqueue() va_list misuse
(bsc#1012628).
- net/sched: sch_pie: annotate more data-races in pie_dump_stats()
(bsc#1012628).
- sched/fair: Fix wakeup_preempt_fair() for not waking up task
(bsc#1012628).
- crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1012628).
- i40e: Cleanup PTP pins on probe failure (bsc#1012628).
- workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs()
WQ_UNBOUND path (bsc#1012628).
- net: ena: PHC: Fix potential use-after-free in get_timestamp
(bsc#1012628).
- cgroup/cpuset: Reset DL migration state on can_attach() failure
(bsc#1012628).
- netfilter: nf_conntrack_sip: get helper before allocating
expectation (bsc#1012628).
- audit: fix incorrect inheritable capability in CAPSET records
(bsc#1012628).
- net: ena: PHC: Check return code before setting timestamp output
(bsc#1012628).
- cgroup/dmem: Return -ENOMEM on failed pool preallocation
(bsc#1012628).
- idpf: fix double free and use-after-free in aux device error
paths (bsc#1012628).
- cgroup/cpuset: Reserve DL bandwidth only for root-domain moves
(bsc#1012628).
- Revert "ACPI: CPPC: Adjust debug messages in
amd_set_max_freq_ratio() to warn" (bsc#1012628).
- netfilter: nft_ct: fix missing expect put in obj eval
(bsc#1012628).
- net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL
enabled (bsc#1012628).
- audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV
(bsc#1012628).
- cgroup/cpuset: Return only actually allocated CPUs during
partition invalidation (bsc#1012628).
- KVM: x86: Swap the dst and src operand for MOVNTDQA
(bsc#1012628).
- KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
(bsc#1012628).
- KVM: s390: pci: fix GAIT table indexing due to double-scaling
pointer arithmetic (bsc#1012628).
- KVM: x86: Fix Xen hypercall tracepoint argument assignment
(bsc#1012628).
- HID: pass the buffer size to hid_report_raw_event (bsc#1012628).
- HID: core: introduce hid_safe_input_report() (bsc#1012628).
- rseq: Revert to historical performance killing behaviour
(bsc#1012628).
- rseq: Implement read only ABI enforcement for optimized RSEQ
V2 mode (bsc#1012628).
- rseq: Reenable performance optimizations conditionally
(bsc#1012628).
- HID: core: Fix size_t specifier in hid_report_raw_event()
(bsc#1012628).
- ata: libata-scsi: fix requeue of deferred ATA PASS-THROUGH
commands (bsc#1012628).
- media: staging: imx: configure src_mux in csi_start
(bsc#1012628).
- nvme-apple: Reset q->sq_tail during queue init (bsc#1012628).
- smb/client: fix possible infinite loop and oob read in
symlink_data() (bsc#1012628).
- drm/loongson: Use managed KMS polling (bsc#1012628).
- drm/bridge: imx8qxp-pxl2dpi: avoid ERR_PTR with device_node
cleanup (bsc#1012628).
- drm/i915/dp: Fix VSC dynamic range signaling for RGB formats
(bsc#1012628).
- drm/amd/display: Wrap DCN32 phantom-plane allocation in
DC_RUN_WITH_PREEMPTION_ENABLED (bsc#1012628).
- drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout
failure (bsc#1012628).
- platform/x86: intel: Move debugfs register before creating
devices (bsc#1012628).
- platform/x86: lenovo-wmi-helpers: Move gamezone enums to
wmi-helpers (bsc#1012628).
- platform/x86: lenovo-wmi-helpers: Fix memory leak in
lwmi_dev_evaluate_int() (bsc#1012628).
- platform/x86: lenovo-wmi-other: Balance IDA id allocation and
free (bsc#1012628).
- platform/x86: lenovo-wmi-other: Balance component bind and
unbind (bsc#1012628).
- platform/x86: lenovo-wmi-other: Zero initialize WMI arguments
(bsc#1012628).
- platform/x86: lenovo-wmi-other: Fix tunable_attr_01 struct
members (bsc#1012628).
- platform/x86: lenovo-wmi-other: Add Attribute ID helper
functions (bsc#1012628).
- platform/x86: lenovo-wmi-other: Limit adding attributes to
supported devices (bsc#1012628).
- accel/rocket: Fix prep_bo ioctl leaking positive return from
dma_resv_wait_timeout() (bsc#1012628).
- ALSA: hda/realtek: Add mute LED quirk for HP Pavilion Laptop
16-ag0xxx (bsc#1012628).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Book5 360
headphone (bsc#1012628).
- ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans
(bsc#1012628).
- ALSA: usb-audio: Bound MIDI endpoint descriptor scans
(bsc#1012628).
- ALSA: usb-audio: qcom: Check offload mapping failures
(bsc#1012628).
- btrfs: only release the dirty pages io tree after successful
writes (bsc#1012628).
- ceph: fix a buffer leak in __ceph_setxattr() (bsc#1012628).
- ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale
blob size (bsc#1012628).
- ceph: put folios not suitable for writeback (bsc#1012628).
- io-wq: check that the predecessor is hashed in
io_wq_remove_pending() (bsc#1012628).
- iommu/amd: Bounds-check devid in __rlookup_amd_iommu()
(bsc#1012628).
- x86/kexec: Push kjump return address even for non-kjump kexec
(bsc#1012628).
- xfs: fix memory leak on error in xfs_alloc_zone_info()
(bsc#1012628).
- virt: sev-guest: Do not use host-controlled page order in
cleanup path (bsc#1012628).
- powerpc/warp: Fix error handling in pika_dtm_thread
(bsc#1012628).
- netfs: fix error handling in netfs_extract_user_iter()
(bsc#1012628).
- nfsd: fix GET_DIR_DELEGATION when VFS leases are disabled
(bsc#1012628).
- nfsd: fix file change detection in CB_GETATTR (bsc#1012628).
- nfsd: update mtime/ctime on CLONE in presense of delegated
attributes (bsc#1012628).
- nfsd: update mtime/ctime on COPY in presence of delegated
attributes (bsc#1012628).
- irqchip/riscv-imsic: Clear interrupt move state during CPU
offlining (bsc#1012628).
- irqchip/meson-gpio: Use the correct register in
meson_s4_gpio_irq_set_type() (bsc#1012628).
- irqchip/gic-v5: Move LPI allocation into the LPI domain
(bsc#1012628).
- irqchip/gic-v5: Support range allocation for LPIs (bsc#1012628).
- irqchip/gic-v5: Allocate ITS parent LPIs as a range
(bsc#1012628).
- libceph: Fix potential out-of-bounds access in osdmap_decode()
(bsc#1012628).
- libceph: Fix potential null-ptr-deref in decode_choose_args()
(bsc#1012628).
- libceph: Fix potential out-of-bounds access in
__ceph_x_decrypt() (bsc#1012628).
- libceph: Fix potential out-of-bounds access in crush_decode()
(bsc#1012628).
- libceph: handle rbtree insertion error in decode_choose_args()
(bsc#1012628).
- iommu/vt-d: Disable DMAR for Intel Q35 IGFX (bsc#1012628).
- iommu/vt-d: Fix oops due to out of scope access (bsc#1012628).
- iommu/vt-d: Avoid NULL pointer dereference or refcount
corruption (bsc#1012628).
- iommu: Fix NULL group->domain dereference in
pci_dev_reset_iommu_done() (bsc#1012628).
- iommu: Replace per-group resetting_domain with per-gdev blocked
flag (bsc#1012628).
- iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due
to reset (bsc#1012628).
- iommu: Fix pasid attach in pci_dev_reset_iommu_prepare/done()
(bsc#1012628).
- iommu: Fix nested pci_dev_reset_iommu_prepare/done()
(bsc#1012628).
- iommu: Fix ATS invalidation timeouts during
__iommu_remove_group_pasid() (bsc#1012628).
- drm/i915: skip __i915_request_skip() for already signaled
requests (bsc#1012628).
- drm/panfrost: Fix wait_bo ioctl leaking positive return from
dma_resv_wait_timeout() (bsc#1012628).
- drm/xe/dma-buf: handle empty bo and UAF races (bsc#1012628).
- drm/xe/dma-buf: fix UAF with retry loop (bsc#1012628).
- drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure
(bsc#1012628).
- drm/ttm: Convert -EAGAIN from dmem_cgroup_try_charge to -ENOSPC
(bsc#1012628).
- drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup
(bsc#1012628).
- drm/gma500/oaktrail_lvds: fix hang on init failure
(bsc#1012628).
- drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init
(bsc#1012628).
- arm_mpam: Fix monitor instance selection when checking for
hardware NRDY (bsc#1012628).
- arm_mpam: Pretend that NRDY is always hardware managed
(bsc#1012628).
- arm_mpam: Improve check for whether or not NRDY is hardware
managed (bsc#1012628).
- arm_mpam: Fix false positive assert failure during
mpam_disable() (bsc#1012628).
- arm_mpam: Check whether the config array is allocated before
destroying it (bsc#1012628).
- eventfs: Simplify code using guard()s (bsc#1012628).
- eventfs: Use list_add_tail_rcu() for SRCU-protected children
list (bsc#1012628).
- smb: client: Use FullSessionKey for AES-256 encryption key
derivation (bsc#1012628).
- spi: sifive: Simplify clock handling with devm_clk_get_enabled()
(bsc#1012628).
- spi: sifive: fix controller deregistration (bsc#1012628).
- net/rds: reset op_nents when zerocopy page pin fails
(bsc#1012628).
- tracefs: Removed unused 'ret' variable in eventfs_iterate()
(bsc#1012628).
- workqueue: Annotate alloc_workqueue_va() with __printf(1, 0)
(bsc#1012628).
- net: skbuff: preserve shared-frag marker during coalescing
(bsc#1012628).
- net: skbuff: propagate shared-frag marker through frag-transfer
helpers (bsc#1012628).
- selftests/bpf: Remove test_access_variable_array (bsc#1012628).
- netfs: Fix potential uninitialised var in
netfs_extract_user_iter() (bsc#1012628).
- Rename to
patches.kernel.org/7.0.10-1062-Bluetooth-btmtk-accept-too-short-WMT-FUNC_CTR.patch.
- Rename to
patches.kernel.org/7.0.10-1066-drm-Replace-old-pointer-to-new-idr.patch.
- Update config files.
- commit 5d35845
* Fri May 22 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.0.4-045-crypto-pcrypt-Fix-handling-of-MAY_BACKLOG-reque.patch
(bsc#1012628 CVE-2026-43493 bsc#1265627).
- Update
patches.kernel.org/7.0.4-137-net-qrtr-ns-Limit-the-maximum-server-registrati.patch
(bsc#1012628 CVE-2026-43491 bsc#1265628).
- Update
patches.kernel.org/7.0.4-280-rtmutex-Use-waiter-task-instead-of-current-in-r.patch
(bsc#1012628 CVE-2026-43499 bsc#1266001).
- Update
patches.kernel.org/7.0.4-298-ipv6-rpl-reserve-mac_len-headroom-when-recompre.patch
(bsc#1012628 CVE-2026-43501 bsc#1266009).
- Update
patches.kernel.org/7.0.7-005-fbdev-udlfb-add-vm_ops-to-dlfb_ops_mmap-to-prev.patch
(bsc#1012628 CVE-2026-43497 bsc#1266003).
- Update
patches.kernel.org/7.0.7-020-net-sched-sch_red-Replace-direct-dequeue-call-w.patch
(bsc#1012628 CVE-2026-43496 bsc#1266000).
- Update
patches.kernel.org/7.0.7-109-accel-ivpu-Disallow-re-exporting-imported-GEM-o.patch
(bsc#1012628 CVE-2026-43498 bsc#1266002).
- Update
patches.kernel.org/7.0.7-120-net-rds-handle-zerocopy-send-cleanup-before-the.patch
(bsc#1012628 CVE-2026-43502 bsc#1266008).
- Update
patches.kernel.org/7.0.7-121-net-wwan-t7xx-validate-port_count-against-messa.patch
(bsc#1012628 CVE-2026-43495 bsc#1265999).
- Update
patches.kernel.org/7.0.7-193-lib-crypto-mpi-Fix-integer-underflow-in-mpi_rea.patch
(bsc#1012628 CVE-2026-43492 bsc#1265629).
suse-add-cves
- commit 2564307
* Fri May 22 2026 jslaby@suse.cz
- Refresh
patches.suse/Bluetooth-btmtk-accept-too-short-WMT-FUNC_CTRL-event.patch.
- Refresh
patches.suse/srcu-Don-t-queue-workqueue-handlers-to-never-online-.patch.
Update upstream info.
- commit 90e5100
* Thu May 21 2026 msuchanek@suse.de
- kernel-binary: Only apply vmlinux workaround on SLE15 and later
To create debuginfo for vmlinux the file needs to be present even if
it's not packaged because a compressed file is packaged insteand.
To accomplish that the file is marked as ghost in the file list. Then
rpm does not complain that the file exists but does not package it.
However, rpm still reserves space for ghost files when installing a
package. To avoid reserving space for a file that is not used the file
is truncated.
That works on SLE 15 but on SLE 12 rpm then fails packaging the
debuginfo complaiing that extra debuginfo files are present. Limit the
workaround to SLE 15 and later.
Fixes: 222edac2a18 (kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements)
- commit 1ef7451
* Thu May 21 2026 msuchanek@suse.de
- Kernel-binary: Do not truncate vmlinux when it's the boot image
Some architectures use vmlinux to boot. Truncating vmlinux on those
architectures causes signing failure during build. Also if the signing
was disabled a brokne kernel would be produced.
Fixes: 222edac2a18 (kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements)
- commit d3cf603
* Wed May 20 2026 sangeetha.thackarajan@suse.com
- kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements
define %__spec_install_post to truncate the uncompressed vmlinux
to 0 bytes after find-debuginfo.sh and brp-* scripts run. This prevents
rpmbuild from baking the %ghost file size into the FILESIZES
header, which can cause installation failures on smaller /boot partitions.
Fixes: bsc#1265456
- commit 222edac
* Tue May 19 2026 jslaby@suse.cz
- Bluetooth: btmtk: accept too short WMT FUNC_CTRL events
(bsc#1265457).
- commit 17ac7c8
* Mon May 18 2026 mkubecek@suse.cz
- update to 7.1-rc4
- update configs
- NVME_TARGET_AUTH_DEBUG=n
- commit 1ff3c85
* Sun May 17 2026 jslaby@suse.cz
- drm: Replace old pointer to new idr (git-fixes).
- commit 9b5964b
* Sun May 17 2026 jslaby@suse.cz
- Linux 7.0.9 (bsc#1012628).
- HID: playstation: Clamp num_touch_reports (bsc#1012628).
- HID: appletb-kbd: fix UAF in inactivity-timer cleanup path
(bsc#1012628).
- HID: appletb-kbd: run inactivity autodim from workqueues
(bsc#1012628).
- HID: pidff: Fix integer overflow in pidff_rescale (bsc#1012628).
- media: uvcvideo: Enable VB2_DMABUF for metadata stream
(bsc#1012628).
- drm/msm/hdmi: Fix wrong CTRL1 register used in writing info
frames (bsc#1012628).
- media: rzv2h-ivc: Avoid double job scheduling (bsc#1012628).
- media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0
(bsc#1012628).
- media: rzv2h-ivc: Write AXIRX_PIXFMT once (bsc#1012628).
- media: rzv2h-ivc: Fix FM_STOP register write (bsc#1012628).
- media: rzv2h-ivc: Fix concurrent buffer list access
(bsc#1012628).
- media: mali-c55: Initialize the ISP in enable_streams()
(bsc#1012628).
- media: mali-c55: Fix Iridix bypass macros (bsc#1012628).
- media: renesas: vsp1: Fix NULL pointer deref on module unload
(bsc#1012628).
- media: renesas: vin: Fix RAW8 (again) (bsc#1012628).
- media: i2c: ov8856: free control handler on error in
ov8856_init_controls() (bsc#1012628).
- media: dt-bindings: rockchip,vdec: Add alternative reg-names
order for RK35{76,88} (bsc#1012628).
- media: dt-bindings: rockchip,vdec: Mark reg-names required
for RK35{76,88} (bsc#1012628).
- media: chips-media: wave5: fix a potential memory leak in
wave5_vdi_init() (bsc#1012628).
- media: chips-media: wave5: add missing spinlock protection
for send_eos_event() (bsc#1012628).
- media: chips-media: wave5: add missing spinlock protection
for handle_dynamic_resolution_change() (bsc#1012628).
- arm64: dts: freescale: imx95-toradex-smarc: fix PMIC_SD2_VSEL
label position (bsc#1012628).
- drm/gpusvm: Allow device pages to be mapped in mixed mappings
after system pages (bsc#1012628).
- drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages
(bsc#1012628).
- spi: bcm63xx: fix controller deregistration (bsc#1012628).
- spi: atmel: fix controller deregistration (bsc#1012628).
- arm64: dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio
pinmux (bsc#1012628).
- staging: media: atomisp: Disallow all private IOCTLs
(bsc#1012628).
- regulator: mt6357: fix OF node reference imbalance
(bsc#1012628).
- spi: st-ssc4: fix controller deregistration (bsc#1012628).
- regulator: max77650: fix OF node reference imbalance
(bsc#1012628).
- media: ti: vpe: Add missing v4l2_device_unregister in
vip_remove() (bsc#1012628).
- media: rc: xbox_remote: heed DMA restrictions (bsc#1012628).
- media: rc: streamzap: Error handling in probe (bsc#1012628).
- media: i2c: ov5647: Fix runtime PM refcount leak in s_ctrl
(bsc#1012628).
- media: i2c: imx283: Enter full standby when stopping streaming
(bsc#1012628).
- regulator: bq257xx: fix OF node reference imbalance
(bsc#1012628).
- regulator: rk808: fix OF node reference imbalance (bsc#1012628).
- media: videobuf2: Set vma_flags in vb2_dma_sg_mmap
(bsc#1012628).
- media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads
(bsc#1012628).
- media: mali-c55: Fully reset the ISP configuration
(bsc#1012628).
- media: intel/ipu6: fix error pointer dereference (bsc#1012628).
- media: i2c: imx283: Fix hang when going from large to small
resolution (bsc#1012628).
- regulator: act8945a: fix OF node reference imbalance
(bsc#1012628).
- regulator: s2dos05: fix OF node reference imbalance
(bsc#1012628).
- regulator: bd9571mwv: fix OF node reference imbalance
(bsc#1012628).
- spi: lantiq-ssc: fix controller deregistration (bsc#1012628).
- spi: meson-spicc: fix controller deregistration (bsc#1012628).
- spi: qup: fix controller deregistration (bsc#1012628).
- arm64: dts: ti: k3-am69-aquila-clover: Fix DP regulator enable
GPIO (bsc#1012628).
- spi: at91-usart: fix controller deregistration (bsc#1012628).
- media: saa7164: add ioremap return checks and cleanups
(bsc#1012628).
- spi: amlogic-spisg: fix controller deregistration (bsc#1012628).
- spi: aspeed-smc: fix controller deregistration (bsc#1012628).
- drm/colorop: Preserve bypass value in duplicate_state()
(bsc#1012628).
- drm/atomic: Add affected colorops with affected planes
(bsc#1012628).
- platform/x86: hp-wmi: Ignore backlight and FnLock events
(bsc#1012628).
- vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating
bytes to copy (bsc#1012628).
- arm64: dts: broadcom: bcm2712-d-rpi-5-b: add fixes for
pinctrl/pinctrl_aon (bsc#1012628).
- arm64: dts: broadcom: bcm2712-d-rpi-5-b: update uart10 interrupt
(bsc#1012628).
- media: pci: zoran: fix potential memory leak in zoran_probe()
(bsc#1012628).
- media: dib8000: avoid division by 0 in dib8000_set_dds()
(bsc#1012628).
- media: i2c: imx412: Assert reset GPIO during probe
(bsc#1012628).
- media: staging: imx: request mbus_config in csi_start
(bsc#1012628).
- media: i2c: ov08d10: fix image vertical start setting
(bsc#1012628).
- media: i2c: ov08d10: fix runtime PM handling in probe
(bsc#1012628).
- media: omap3isp: drop the use count of v4l2 pipeline
(bsc#1012628).
- media: iris: fix QCOM_MDT_LOADER dependency (bsc#1012628).
- media: iris: Fix use-after-free in
iris_release_internal_buffers() (bsc#1012628).
- media: qcom: camss: Fix csid clock configuration for sa8775p
(bsc#1012628).
- media: qcom: camss: Fix csid IRQ offset for sa8775p
(bsc#1012628).
- media: qcom: iris: increase H265D_MAX_SLICE to fix H.265
decoding on SC7280 (bsc#1012628).
- media: venus: fix QCOM_MDT_LOADER dependency (bsc#1012628).
- media: iris: Fix dma_free_attrs() size in iris_hfi_queues_init()
(bsc#1012628).
- media: iris: fix use-after-free of fmt_src during MBPF check
(bsc#1012628).
- media: iris: switch to hardware mode after firmware boot
(bsc#1012628).
- media: qcom: camss: Add missing clocks for VFE lite on sa8775p
(bsc#1012628).
- drm/xe/hdcp: Add NULL check for media_gt in
intel_hdcp_gsc_check_status() (bsc#1012628).
- spi: mxs: fix controller deregistration (bsc#1012628).
- spi: mt65xx: fix controller deregistration (bsc#1012628).
- spi: dln2: fix controller deregistration (bsc#1012628).
- spi: s3c64xx: fix controller deregistration (bsc#1012628).
- spi: fsl-espi: fix controller deregistration (bsc#1012628).
- spi: omap2-mcspi: fix controller deregistration (bsc#1012628).
- spi: pic32: fix controller deregistration (bsc#1012628).
- spi: ep93xx: fix controller deregistration (bsc#1012628).
- spi: mtk-nor: fix controller deregistration (bsc#1012628).
- spi: pl022: fix controller deregistration (bsc#1012628).
- spi: ch341: fix devres lifetime (bsc#1012628).
- spi: sh-hspi: fix controller deregistration (bsc#1012628).
- spi: fsl: fix controller deregistration (bsc#1012628).
- spi: bcmbca-hsspi: fix controller deregistration (bsc#1012628).
- spi: coldfire-qspi: fix controller deregistration (bsc#1012628).
- spi: npcm-pspi: fix controller deregistration (bsc#1012628).
- spi: cavium-thunderx: fix controller deregistration
(bsc#1012628).
- spi: pic32-sqi: fix controller deregistration (bsc#1012628).
- spi: sprd: fix controller deregistration (bsc#1012628).
- spi: rspi: fix controller deregistration (bsc#1012628).
- spi: sh-msiof: fix controller deregistration (bsc#1012628).
- spi: slave-mt27xx: fix controller deregistration (bsc#1012628).
- spi: img-spfi: fix controller deregistration (bsc#1012628).
- spi: mpfs: fix controller deregistration (bsc#1012628).
- spi: octeon: fix controller deregistration (bsc#1012628).
- spi: imx: fix runtime pm leak on probe deferral (bsc#1012628).
- spi: mxic: fix controller deregistration (bsc#1012628).
- spi: orion: fix controller deregistration (bsc#1012628).
- spi: orion: fix runtime pm leak on unbind (bsc#1012628).
- spi: orion: fix clock imbalance on registration failure
(bsc#1012628).
- spi: mpc52xx: fix use-after-free on registration failure
(bsc#1012628).
- spi: mpc52xx: fix controller deregistration (bsc#1012628).
- spi: mpc52xx: fix use-after-free on unbind (bsc#1012628).
- spi: cadence: fix controller deregistration (bsc#1012628).
- spi: cadence-quadspi: fix controller deregistration
(bsc#1012628).
- spi: cadence: fix unclocked access on unbind (bsc#1012628).
- spi: cadence: fix clock imbalance on probe failure
(bsc#1012628).
- spi: cadence-quadspi: fix runtime pm disable imbalance on
probe failure (bsc#1012628).
- spi: cadence-quadspi: fix clock imbalance on probe failure
(bsc#1012628).
- spi: cadence-quadspi: fix runtime pm and clock imbalance on
unbind (bsc#1012628).
- spi: cadence-quadspi: fix unclocked access on unbind
(bsc#1012628).
- drm/msm/gem: fix error handling in
msm_ioctl_gem_info_get_metadata() (bsc#1012628).
- drm/colorop: Fix blob property reference tracking in state
lifecycle (bsc#1012628).
- drm/imx: parallel-display: Prefer bus format set via legacy
"interface-pix-fmt" DT property (bsc#1012628).
- drm/msm: always recover the gpu (bsc#1012628).
- drm/v3d: Reject empty multisync extension to prevent infinite
loop (bsc#1012628).
- drm/i915/psr: Init variable to avoid early exit from et
alignment loop (bsc#1012628).
- drm/amdkfd: Clear VRAM on allocation to prevent stale data
exposure (bsc#1012628).
- drm/amd/display: fix math_mod() using arg1 instead of arg2
(bsc#1012628).
- drm/amd: Add missing firmware declaration for PSP v15.0.0
(bsc#1012628).
- drm/amdgpu: Use NBIF offset for register
RCC_STRAP0_RCC_DEV0_EPF0_STRAP0 (bsc#1012628).
- drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower
count (bsc#1012628).
- drm/amdgpu: gate VM CPU HDP flush on reset lock (bsc#1012628).
- drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x
(bsc#1012628).
- drm/amdkfd: Add upper bound check for num_of_nodes
(bsc#1012628).
- drm/amdgpu: Add bounds checking to ib_{get,set}_value
(bsc#1012628).
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
(bsc#1012628).
- drm/amdgpu/vce: Prevent partial address patches (bsc#1012628).
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg
(bsc#1012628).
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
(bsc#1012628).
- drm/amd/display: Change dither policy for 10 bpc output back
to dithering (bsc#1012628).
- drm/gem: Fix inconsistent plane dimension calculation in
drm_gem_fb_init_with_funcs() (bsc#1012628).
- drm/appletbdrm: Use kvzalloc for big allocations (bsc#1012628).
- drm/amdkfd: validate SVM ioctl nattr against buffer size
(bsc#1012628).
- drm/amdgpu: Avoid reset in AMDGPU unload path for APUs with
GFX V11 and higher (bsc#1012628).
- drm/udl: Increase GET_URB_TIMEOUT (bsc#1012628).
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation
failure (bsc#1012628).
- drm/xe/bo: Fix bo leak on GGTT flag validation in
xe_bo_init_locked() (bsc#1012628).
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()
(bsc#1012628).
- drm/xe/bo: Fix bo leak on unaligned size validation in
xe_bo_init_locked() (bsc#1012628).
- drm/xe/uapi: Reject coh_none PAT index for CPU cached memory
in madvise (bsc#1012628).
- drm: Set old handle to NULL before prime swap in change_handle
(bsc#1012628).
- drm/radeon: add missing revision check for CI (bsc#1012628).
- drm/amdgpu: zero-initialize GART table on allocation
(bsc#1012628).
- drm/exynos: remove bridge when component_add fails
(bsc#1012628).
- drm/amdgpu/userq: fix access to stale wptr mapping
(bsc#1012628).
- drm/panel: himax-hx83102: restore MODE_LPM after sending
disable cmds (bsc#1012628).
- drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in
KIQ (bsc#1012628).
- drm/bridge: tda998x: Use __be32 for audio port OF property
pointer (bsc#1012628).
- drm/sti: remove bridge when sti_hda component_add fails
(bsc#1012628).
- drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending
disable cmds (bsc#1012628).
- drm/amdkfd: Make all TLB-flushes heavy-weight (bsc#1012628).
- drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission
(bsc#1012628).
- drm/amdgpu/pm: add missing revision check for CI (bsc#1012628).
- drm/amdgpu/pm: align Hawaii mclk workaround with radeon
(bsc#1012628).
- arm64: dts: qcom: kodiak: Fix PCIe1 PHY ref clock voting
(bsc#1012628).
- arm64: dts: qcom: lemans: Correct QUP interrupt numbers
(bsc#1012628).
- arm64: dts: ti: k3-am62a7-sk: Fix pin name in comment from
M19 to N22 (bsc#1012628).
- arm64: dts: ti: k3-am69-aquila-dev: Fix DP regulator enable GPIO
(bsc#1012628).
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc()
in SCTP_SENDALL (bsc#1012628).
- batman-adv: fix integer overflow on buff_pos (bsc#1012628).
- batman-adv: reject new tp_meter sessions during teardown
(bsc#1012628).
- batman-adv: stop tp_meter sessions during mesh teardown
(bsc#1012628).
- batman-adv: stop caching unowned originator pointers in BAT IV
(bsc#1012628).
- batman-adv: tp_meter: fix tp_num leak on kmalloc failure
(bsc#1012628).
- batman-adv: bla: prevent use-after-free when deleting claims
(bsc#1012628).
- batman-adv: bla: only purge non-released claims (bsc#1012628).
- batman-adv: bla: put backbone reference on failed claim hash
insert (bsc#1012628).
- sched_ext: Use HK_TYPE_DOMAIN_BOOT to detect isolcpus= domain
isolation (bsc#1012628).
- usb: typec: tcpm: reset internal port states on soft reset AMS
(bsc#1012628).
- io_uring/zcrx: use guards for locking (bsc#1012628).
- io_uring/zcrx: warn on freelist violations (bsc#1012628).
- kho: fix error handling in kho_add_subtree() (bsc#1012628).
- EDAC/versalnet: Refactor memory controller initialization and
cleanup (bsc#1012628).
- EDAC/versalnet: Fix device name memory leak (bsc#1012628).
- spi: uniphier: Simplify clock handling with
devm_clk_get_enabled() (bsc#1012628).
- spi: uniphier: fix controller deregistration (bsc#1012628).
- cgroup: Increment nr_dying_subsys_* from rmdir context
(bsc#1012628).
- cgroup: Defer css percpu_ref kill on rmdir until cgroup is
depopulated (bsc#1012628).
- sched_ext: Skip tasks with stale task_rq in bypass_lb_cpu()
(bsc#1012628).
- perf build: fix "argument list too long" in second location
(bsc#1012628).
- mm/vma: do not try to unmap a VMA if mmap_prepare() invoked
from mmap() (bsc#1012628).
- vsock: fix buffer size clamping order (bsc#1012628).
- vsock/virtio: fix length and offset in tap skb for split packets
(bsc#1012628).
- vsock/virtio: fix empty payload in tap skb for non-linear
buffers (bsc#1012628).
- vsock/virtio: fix accept queue count leak on transport mismatch
(bsc#1012628).
- drm/amdgpu/vcn3: Avoid overflow on msg bound check
(bsc#1012628).
- drm/amdgpu/vcn4: Avoid overflow on msg bound check
(bsc#1012628).
- Rename to
patches.kernel.org/7.0.9-052-media-ipu-bridge-Add-upside-down-sensor-DMI-qui.patch.
- commit e4a2ce0
* Sun May 17 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.0.7-306-ksmbd-validate-inherited-ACE-SID-length.patch
(bsc#1012628 CVE-2026-43490 bsc#1265333).
- Update
patches.kernel.org/7.0.8-001-ptrace-slightly-saner-get_dumpable-logic.patch
(bsc#1012628 bsc#1265308 CVE-2026-46333).
suse-add-cves
- commit 1684d62
* Sun May 17 2026 jslaby@suse.cz
- Linux 7.0.8 (bsc#1012628).
- Rename to
patches.kernel.org/7.0.8-001-ptrace-slightly-saner-get_dumpable-logic.patch.
- commit ce3b8c5
* Fri May 15 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.0.2-014-f2fs-fix-to-avoid-uninit-value-access-in-f2fs_s.patch
(bsc#1012628 CVE-2026-43349 bsc#1265131).
- Update
patches.kernel.org/7.0.2-024-smb-client-require-a-full-NFS-mode-SID-before-r.patch
(bsc#1012628 CVE-2026-43350 bsc#1264985).
- Update
patches.kernel.org/7.0.2-042-mshv_vtl-Fix-vmemmap_shift-exceeding-MAX_FOLIO_.patch
(bsc#1012628 CVE-2026-43348 bsc#1264981).
- Update
patches.kernel.org/7.0.7-306-ksmbd-validate-inherited-ACE-SID-length.patch
(bsc#1012628 CVE-2026-43490).
suse-add-cves
- commit f1d450c
* Fri May 15 2026 ddiss@suse.de
- ptrace: slightly saner 'get_dumpable()' logic (bsc#1265308).
- commit 67ebcde
* Thu May 14 2026 rbm@suse.com
- selftests/namespaces: Skip efault tests when listns() is not
available (poo#196367).
(cherry picked from commit 37898a99d0da51559e0f2159e578acf0a0ff8642)
- selftests/namespaces: Fix waitpid race in listns_efault_test
cleanup (poo#196367).
(cherry picked from commit e8033b51eb0f5ebe7efa2cc2dcb11ae92f7fa7eb)
- selftests/namespaces: Kill grandchild in nsid fixture teardown
(poo#196367).
(cherry picked from commit 4b12ab2750c6c833963adaf74e6e421b32a57233)
- selftests/namespaces: Skip efault tests when listns() is not
available (poo#196367).
- selftests/namespaces: Fix waitpid race in listns_efault_test
cleanup (poo#196367).
- selftests/namespaces: Kill grandchild in nsid fixture teardown
(poo#196367).
- commit cd396ff
* Thu May 14 2026 jslaby@suse.cz
- Linux 7.0.7 (bsc#1012628).
- scsi: target: configfs: Bound snprintf() return in
tg_pt_gp_members_show() (bsc#1012628).
- ipmi: Add limits to event and receive message requests
(bsc#1012628).
- ipmi: Check event message buffer response for bad data
(bsc#1012628).
- ipmi:si: Return state to normal if message allocation fails
(bsc#1012628).
- fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent
use-after-free (bsc#1012628).
- ACPI: arm64: cpuidle: Tolerate platforms with no deep PSCI
idle states (bsc#1012628).
- ACPI: scan: Use acpi_dev_put() in object add error paths
(bsc#1012628).
- ACPI: video: Add backlight=native quirk for Dell OptiPlex 7770
AIO (bsc#1012628).
- ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug
(bsc#1012628).
- ACPI: video: force native backlight on HP OMEN 16 (8A44)
(bsc#1012628).
- tracepoint: balance regfunc() on func_add() failure in
tracepoint_add_func() (bsc#1012628).
- iommufd: Fix a race with concurrent allocation and unmap
(bsc#1012628).
- ASoC: SOF: Don't allow pointer operations on unconfigured
streams (bsc#1012628).
- wifi: mt76: mt7925: fix incorrect TLV length in CLC command
(bsc#1012628).
- spi: rockchip: fix controller deregistration (bsc#1012628).
- ksmbd: rewrite stop_sessions() with restartable iteration
(bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
GFN (bsc#1012628).
- flow_dissector: do not dissect PPPoE PFC frames (bsc#1012628).
- smb: client/smbdirect: fix MR registration for coalesced SG
lists (bsc#1012628).
- net/sched: sch_red: Replace direct dequeue call with peek and
qdisc_dequeue_peeked (bsc#1012628).
- exit: prevent preemption of oopsing TASK_DEAD task
(bsc#1012628).
- wifi: mt76: mt7925: fix AMPDU state handling in
mt7925_tx_check_aggr (bsc#1012628).
- wifi: mt76: mt7925: fix incorrect length field in txpower
command (bsc#1012628).
- wifi: mt76: mt7921: fix a potential clc buffer length underflow
(bsc#1012628).
- wifi: mt76: mt7921: fix ROC abort flow interruption in
mt7921_roc_work (bsc#1012628).
- wifi: b43legacy: enforce bounds check on firmware key index
in RX path (bsc#1012628).
- wifi: mac80211: drop stray 'static' from fast-RX rx_result
(bsc#1012628).
- wifi: rsi: fix kthread lifetime race between self-exit and
external-stop (bsc#1012628).
- wifi: mac80211: use safe list iteration in radar detect work
(bsc#1012628).
- wifi: ath5k: do not access array OOB (bsc#1012628).
- wifi: mac80211: remove station if connection prep fails
(bsc#1012628).
- wifi: b43: enforce bounds check on firmware key index in
b43_rx() (bsc#1012628).
- wifi: brcmfmac: Fix potential use-after-free issue when stopping
watchdog task (bsc#1012628).
- usb: usblp: fix heap leak in IEEE 1284 device ID via short
response (bsc#1012628).
- usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
(bsc#1012628).
- ALSA: usb-audio: midi2: Restart output URBs on resume
(bsc#1012628).
- ALSA: usb-audio: Avoid potential endless loop in
convert_chmap_v3() (bsc#1012628).
- ALSA: usb-audio: Fix UAC3 cluster descriptor size check
(bsc#1012628).
- usb: dwc3: Move GUID programming after PHY initialization
(bsc#1012628).
- USB: omap_udc: DMA: Don't enable burst 4 mode (bsc#1012628).
- USB: serial: option: add Telit Cinterion LE910Cx compositions
(bsc#1012628).
- usb: ulpi: fix memory leak on ulpi_register() error paths
(bsc#1012628).
- usb: typec: tcpm: fix debug accessory mode detection for sink
ports (bsc#1012628).
- ALSA: hda: cs35l56: Propagate ASP TX source control errors
(bsc#1012628).
- ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger
(bsc#1012628).
- ALSA: hda/realtek: Fix speaker silence after S3 resume on
Xiaomi Mi Laptop Pro 15 (bsc#1012628).
- ALSA: firewire-tascam: Do not drop unread control events
(bsc#1012628).
- ALSA: seq: Fix UMP group 16 filtering (bsc#1012628).
- powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o
(bsc#1012628).
- x86/efi: Restore IRQ state in EFI page fault handler
(bsc#1012628).
- sched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup
setters (bsc#1012628).
- xfrm: provide message size for XFRM_MSG_MAPPING (bsc#1012628).
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
(bsc#1012628).
- ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
(bsc#1012628).
- xfrm: ah: account for ESN high bits in async callbacks
(bsc#1012628).
- selinux: fix avdcache auditing (bsc#1012628).
- selinux: use sk blob accessor in socket permission helpers
(bsc#1012628).
- selinux: don't reserve xattr slot when we won't fill it
(bsc#1012628).
- selinux: shrink critical section in sel_write_load()
(bsc#1012628).
- selinux: prune /sys/fs/selinux/checkreqprot (bsc#1012628).
- selinux: prune /sys/fs/selinux/disable (bsc#1012628).
- selinux: prune /sys/fs/selinux/user (bsc#1012628).
- selinux: allow multiple opens of /sys/fs/selinux/policy
(bsc#1012628).
- io_uring/kbuf: support min length left for incremental buffers
(bsc#1012628).
- io_uring/tw: serialize ctx->retry_llist with ->uring_lock
(bsc#1012628).
- LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read()
(bsc#1012628).
- Bluetooth: virtio_bt: clamp rx length before skb_put
(bsc#1012628).
- Bluetooth: virtio_bt: validate rx pkt_type header length
(bsc#1012628).
- Bluetooth: btmtk: validate WMT event SKB length before struct
access (bsc#1012628).
- Bluetooth: hci_conn: fix potential UAF in create_big_sync
(bsc#1012628).
- Bluetooth: hci_event: Fix OOB read and infinite loop in
hci_le_create_big_complete_evt (bsc#1012628).
- Bluetooth: L2CAP: Fix null-ptr-deref in
l2cap_sock_new_connection_cb() (bsc#1012628).
- Bluetooth: L2CAP: Fix null-ptr-deref in
l2cap_sock_state_change_cb() (bsc#1012628).
- Bluetooth: L2CAP: Fix null-ptr-deref in
l2cap_sock_get_sndtimeo_cb() (bsc#1012628).
- rust: drm: gem: clean up GEM state in init failure case
(bsc#1012628).
- rust: allow `clippy::collapsible_match` globally (bsc#1012628).
- rust: allow `clippy::collapsible_if` globally (bsc#1012628).
- rust: pin-init: internal: move alignment check to
`make_field_check` (bsc#1012628).
- spi: syncuacer: fix controller deregistration (bsc#1012628).
- spi: sun4i: fix controller deregistration (bsc#1012628).
- spi: zynq-qspi: fix controller deregistration (bsc#1012628).
- spi: ti-qspi: fix controller deregistration (bsc#1012628).
- spi: sun6i: fix controller deregistration (bsc#1012628).
- spi: tegra114: fix controller deregistration (bsc#1012628).
- spi: zynqmp-gqspi: fix controller deregistration (bsc#1012628).
- spi: tegra20-sflash: fix controller deregistration
(bsc#1012628).
- spi: s3c64xx: fix NULL-deref on driver unbind (bsc#1012628).
- staging: rtl8723bs: os_dep: avoid NULL pointer dereference in
rtw_cbuf_alloc (bsc#1012628).
- staging: vme_user: fix root device leak on init failure
(bsc#1012628).
- fanotify: fix false positive on permission events (bsc#1012628).
- KVM: arm64: Fix kvm_vcpu_initialized() macro parameter
(bsc#1012628).
- mtd: spi-nor: debugfs: fix out-of-bounds read in
spi_nor_params_show() (bsc#1012628).
- arm64: signal: Preserve POR_EL0 if poe_context is missing
(bsc#1012628).
- mm/hugetlb_cma: round up per_node before logging it
(bsc#1012628).
- LoongArch: Fix SYM_SIGFUNC_START definition for 32BIT
(bsc#1012628).
- LoongArch: KVM: Compile switch.S directly into the kernel
(bsc#1012628).
- net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak
in rtnl_fill_vfinfo (bsc#1012628).
- mptcp: pm: ADD_ADDR rtx: skip inactive subflows (bsc#1012628).
- perf/x86/intel: Improve validation and configuration of ACR
masks (bsc#1012628).
- selftests/rseq: Don't run tests with runner scripts outside
of the scripts (bsc#1012628).
- rseq: Set rseq::cpu_id_start to 0 on unregistration
(bsc#1012628).
- rseq: Protect rseq_reset() against interrupts (bsc#1012628).
- rseq: Don't advertise time slice extensions if disabled
(bsc#1012628).
- selftests/rseq: Make registration flexible for legacy and
optimized mode (bsc#1012628).
- selftests/rseq: Skip tests if time slice extensions are not
available (bsc#1012628).
- selftests/rseq: Validate legacy behavior (bsc#1012628).
- selftests/rseq: Expand for optimized RSEQ ABI v2 (bsc#1012628).
- accel/ivpu: Disallow re-exporting imported GEM objects
(bsc#1012628).
- sound: ua101: fix division by zero at probe (bsc#1012628).
- pseries/papr-hvpipe: Fix race with interrupt handler
(bsc#1012628).
- pseries/papr-hvpipe: Prevent kernel stack memory leak to
userspace (bsc#1012628).
- pseries/papr-hvpipe: Fix null ptr deref in
papr_hvpipe_dev_create_handle() (bsc#1012628).
- pseries/papr-hvpipe: Fix & simplify error handling in
papr_hvpipe_init() (bsc#1012628).
- pseries/papr-hvpipe: Fix the usage of copy_to_user()
(bsc#1012628).
- net: libwx: fix VF illegal register access (bsc#1012628).
- ip6_gre: Use cached t->net in ip6erspan_changelink()
(bsc#1012628).
- net: libwx: use request_irq for VF misc interrupt (bsc#1012628).
- netpoll: pass buffer size to egress_dev() to avoid MAC
truncation (bsc#1012628).
- net/rds: handle zerocopy send cleanup before the message is
queued (bsc#1012628).
- net: wwan: t7xx: validate port_count against message length
in t7xx_port_enum_msg_handler (bsc#1012628).
- ovl: fix verity lazy-load guard broken by fsverity_active()
semantic change (bsc#1012628).
- platform/chrome: cros_ec_typec: Init mutex in Thunderbolt
registration (bsc#1012628).
- parisc: Fix IRQ leak in LASI driver (bsc#1012628).
- x86/efi: Fix graceful fault handling after FPU softirq changes
(bsc#1012628).
- hwmon: (ltc2992) Clamp threshold writes to hardware range
(bsc#1012628).
- hwmon: (ltc2992) Fix u32 overflow in power read path
(bsc#1012628).
- clk: rk808: fix OF node reference imbalance (bsc#1012628).
- hwmon: (corsair-psu) Close HID device on probe errors
(bsc#1012628).
- af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1012628).
- arm64/fpsimd: ptrace: zero target's fpsimd_state, not the
tracer's (bsc#1012628).
- pmdomain: mediatek: fix use-after-free in
scpsys_get_bus_protection_legacy() (bsc#1012628).
- block: add pgmap check to biovec_phys_mergeable (bsc#1012628).
- block: fix zone write plug removal (bsc#1012628).
- block: only read from sqe on initial invocation of
blkdev_uring_cmd() (bsc#1012628).
- cifs: abort open_cached_dir if we don't request leases
(bsc#1012628).
- cifs: change_conf needs to be called for session setup
(bsc#1012628).
- extcon: ptn5150: handle pending IRQ events during system resume
(bsc#1012628).
- fbcon: Avoid OOB font access if console rotation fails
(bsc#1012628).
- gpio: of: clear OF_POPULATED on hog nodes in remove path
(bsc#1012628).
- hv: Select CONFIG_SYSFB only for CONFIG_HYPERV_VMBUS
(bsc#1012628).
- hv_sock: fix ARM64 support (bsc#1012628).
- hv_sock: Report EOF instead of -EIO for FIN (bsc#1012628).
- hv_sock: Return -EIO for malformed/short packets (bsc#1012628).
- ibmveth: Disable GSO for packets with small MSS (bsc#1012628).
- ice: fix double free in ice_sf_eth_activate() error path
(bsc#1012628).
- spi: microchip-core-qspi: fix controller deregistration
(bsc#1012628).
- spi: microchip-core-spi: fix controller deregistration
(bsc#1012628).
- spi: microchip-core-qspi: don't attempt to transmit during
emulated read-only dual/quad operations (bsc#1012628).
- spi: microchip-core-qspi: control built-in cs manually
(bsc#1012628).
- tracefs: Fix default permissions not being applied on initial
mount (bsc#1012628).
- udf: reject descriptors with oversized CRC length (bsc#1012628).
- x86/boot/e820: Re-enable BIOS fallback if e820 table is empty
(bsc#1012628).
- thermal: core: Free thermal zone ID later during removal
(bsc#1012628).
- thermal/drivers/sprd: Fix temperature clamping in
sprd_thm_temp_to_rawdata (bsc#1012628).
- thermal/drivers/sprd: Fix raw temperature clamping in
sprd_thm_rawdata_to_temp (bsc#1012628).
- spi: topcliff-pch: fix controller deregistration (bsc#1012628).
- spi: topcliff-pch: fix use-after-free on unbind (bsc#1012628).
- tracing/fprobe: Avoid kcalloc() in rcu_read_lock section
(bsc#1012628).
- tracing/fprobe: Remove fprobe from hash in failure path
(bsc#1012628).
- tracing/fprobe: Unregister fprobe even if memory allocation
fails (bsc#1012628).
- tracing/probes: Limit size of event probe to 3K (bsc#1012628).
- tracing/fprobe: Check the same type fprobe on table as the
unregistered one (bsc#1012628).
- clk: imx: imx8-acm: fix flags for acm clocks (bsc#1012628).
- clk: microchip: mpfs-ccc: fix out of bounds access during
output registration (bsc#1012628).
- cpuidle: powerpc: avoid double clear when breaking snooze
(bsc#1012628).
- ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product
line in quirk table (bsc#1012628).
- ASoC: ES8389: convert to devm_clk_get_optional() to get clock
(bsc#1012628).
- ASoC: fsl_easrc: fix comment typo (bsc#1012628).
- ASoC: Intel: bytcr_wm5102: Fix MCLK leak on
platform_clock_control error (bsc#1012628).
- ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop
(bsc#1012628).
- ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens
(bsc#1012628).
- ASoC: qcom: q6apm: remove child devices when apm is removed
(bsc#1012628).
- btrfs: do not mark inode incompressible after inline attempt
fails (bsc#1012628).
- btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which
can lead to info-leak (bsc#1012628).
- btrfs: fix double free in create_space_info() error path
(bsc#1012628).
- btrfs: fix double free in create_space_info_sub_group() error
path (bsc#1012628).
- btrfs: fix missing last_unlink_trans update when removing a
directory (bsc#1012628).
- dm-thin: fix metadata refcount underflow (bsc#1012628).
- dm: don't report warning when doing deferred remove
(bsc#1012628).
- dm: fix a buffer overflow in ioctl processing (bsc#1012628).
- eventfs: Hold eventfs_mutex and SRCU when remount walks events
(bsc#1012628).
- dm-verity-fec: correctly reject too-small FEC devices
(bsc#1012628).
- dm-verity-fec: correctly reject too-small hash devices
(bsc#1012628).
- dm-verity-fec: fix corrected block count stat (bsc#1012628).
- dm-verity-fec: fix reading parity bytes split across blocks
(take 3) (bsc#1012628).
- dm-verity-fec: fix the size of dm_verity_fec_io::erasures
(bsc#1012628).
- isofs: validate Rock Ridge CE continuation extent against
volume size (bsc#1012628).
- isofs: validate block number from NFS file handle in
isofs_export_iget (bsc#1012628).
- iommufd: Fix return value of iommufd_fault_fops_write()
(bsc#1012628).
- iommu/vt-d: Block PASID attachment to nested domain with dirty
tracking (bsc#1012628).
- iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE
update (bsc#1012628).
- lib/crypto: mpi: Fix integer underflow in
mpi_read_raw_from_sgl() (bsc#1012628).
- lib/crc: tests: Make crc_kunit test only the enabled CRC
variants (bsc#1012628).
- lib/scatterlist: fix length calculations in extract_kvec_to_sg
(bsc#1012628).
- lib/scatterlist: fix temp buffer in extract_user_to_sg()
(bsc#1012628).
- libceph: Fix slab-out-of-bounds access in auth message
processing (bsc#1012628).
- md/raid10: fix divide-by-zero in setup_geo() with zero
far_copies (bsc#1012628).
- nvme-apple: drop invalid put of admin queue reference count
(bsc#1012628).
- nvmet-tcp: fix race between ICReq handling and queue teardown
(bsc#1012628).
- nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free
(bsc#1012628).
- openvswitch: vport: fix self-deadlock on release of tunnel ports
(bsc#1012628).
- pmdomain: core: Fix detach procedure for virtual devices in
genpd (bsc#1012628).
- psp: strip variable-length PSP header in psp_dev_rcv()
(bsc#1012628).
- RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
(bsc#1012628).
- riscv: kvm: fix vector context allocation leak (bsc#1012628).
- s390/debug: Reject zero-length input in debug_input_flush_fn()
(bsc#1012628).
- s390/debug: Reject zero-length input before trimming a newline
(bsc#1012628).
- scsi: mpt3sas: Limit NVMe request size to 2 MiB (bsc#1012628).
- smb/client: fix out-of-bounds read in smb2_compound_op()
(bsc#1012628).
- smb/client: fix out-of-bounds read in symlink_data()
(bsc#1012628).
- smb: client: use kzalloc to zero-initialize security descriptor
buffer (bsc#1012628).
- smb: client: validate dacloffset before building DACL pointers
(bsc#1012628).
- KVM: x86: check for nEPT/nNPT in slow flush hypercalls
(bsc#1012628).
- KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is
empty (bsc#1012628).
- mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid
values (bsc#1012628).
- mm/damon/reclaim: detect and use fresh enabled and kdamond_pid
values (bsc#1012628).
- mm/damon/stat: detect and use fresh enabled value (bsc#1012628).
- mm/damon/sysfs-schemes: protect memcg_path kfree() with
damon_sysfs_lock (bsc#1012628).
- mm/damon/sysfs-schemes: protect path kfree() with
damon_sysfs_lock (bsc#1012628).
- PCI: Update saved_config_space upon resource assignment
(bsc#1012628).
- PCI/AER: Clear only error bits in PCIe Device Status
(bsc#1012628).
- PCI/AER: Stop ruling out unbound devices as error source
(bsc#1012628).
- PCI/ASPM: Fix pci_clear_and_set_config_dword() usage
(bsc#1012628).
- power: supply: max17042: avoid overflow when determining health
(bsc#1012628).
- powerpc/xive: fix kmemleak caused by incorrect chip_data lookup
(bsc#1012628).
- perf/x86/intel: Always reprogram ACR events to prevent stale
masks (bsc#1012628).
- perf/x86/intel: Disable PMI for self-reloaded ACR events
(bsc#1012628).
- perf/x86/intel: Enable auto counter reload for DMR
(bsc#1012628).
- RDMA/ionic: bound node_desc sysfs read with %.64s (bsc#1012628).
- RDMA/ionic: Fix typo in format string (bsc#1012628).
- RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()
(bsc#1012628).
- RDMA/mana: Fix mana_destroy_wq_obj() cleanup in
mana_ib_create_qp_rss() (bsc#1012628).
- RDMA/mana: Remove user triggerable WARN_ON() in
mana_ib_create_qp_rss() (bsc#1012628).
- RDMA/mana: Validate rx_hash_key_len (bsc#1012628).
- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (bsc#1012628).
- RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
(bsc#1012628).
- RDMA/mlx5: Fix error path fall-through in
mlx5_ib_dev_res_srq_init() (bsc#1012628).
- RDMA/ocrdma: Don't NULL deref uctx on errors in
ocrdma_copy_pd_uresp() (bsc#1012628).
- RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (bsc#1012628).
- RDMA/rxe: Reject unknown opcodes before ICRC processing
(bsc#1012628).
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext()
error path (bsc#1012628).
- remoteproc: imx_rproc: Fix NULL vs IS_ERR() bug in
imx_rproc_addr_init() (bsc#1012628).
- remoteproc: k3: Fix NULL vs IS_ERR() bug in
k3_reserved_mem_init() (bsc#1012628).
- sched_ext: idle: Recheck prev_cpu after narrowing allowed mask
(bsc#1012628).
- sched_ext: Use dsq->first_task instead of list_empty() in
dispatch_enqueue() FIFO-tail (bsc#1012628).
- selftests: mptcp: check output: catch cmd errors (bsc#1012628).
- selftests: mptcp: pm: restrict 'unknown' check to pm_nl_ctl
(bsc#1012628).
- mptcp: fastclose msk when linger time is 0 (bsc#1012628).
- mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure
(bsc#1012628).
- mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure
(bsc#1012628).
- mptcp: sockopt: set timestamp flags on subflow socket, not msk
(bsc#1012628).
- mptcp: sockopt: increase seq in mptcp_setsockopt_all_sf
(bsc#1012628).
- mptcp: fix rx timestamp corruption on fastopen (bsc#1012628).
- mptcp: fix scheduling with atomic in timestamp sockopt
(bsc#1012628).
- mptcp: pm: prio: skip closed subflows (bsc#1012628).
- mptcp: pm: kernel: reset fullmesh counter after flush
(bsc#1012628).
- mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0
(bsc#1012628).
- mptcp: pm: ADD_ADDR rtx: allow ID 0 (bsc#1012628).
- mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1012628).
- mptcp: pm: ADD_ADDR rtx: always decrease sk refcount
(bsc#1012628).
- mptcp: pm: ADD_ADDR rtx: free sk if last (bsc#1012628).
- mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker
(bsc#1012628).
- mptcp: pm: ADD_ADDR rtx: return early if no retrans
(bsc#1012628).
- f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode()
(bsc#1012628).
- f2fs: fix false alarm of lockdep on cp_global_sem lock
(bsc#1012628).
- f2fs: fix fiemap boundary handling when read extent cache is
incomplete (bsc#1012628).
- f2fs: fix fsck inconsistency caused by incorrect nat_entry
flag usage (bsc#1012628).
- f2fs: fix incorrect file address mapping when inline inode is
unwritten (bsc#1012628).
- f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks()
(bsc#1012628).
- f2fs: fix node_cnt race between extent node destroy and
writeback (bsc#1012628).
- f2fs: fix uninitialized kobject put in f2fs_init_sysfs()
(bsc#1012628).
- f2fs: refactor f2fs_move_node_folio function (bsc#1012628).
- f2fs: fix inline data not being written to disk in writeback
path (bsc#1012628).
- f2fs: fix fsck inconsistency caused by FGGC of node block
(bsc#1012628).
- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
(bsc#1012628).
- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
value (bsc#1012628).
- KVM: arm64: Fix initialisation order in __pkvm_init_finalise()
(bsc#1012628).
- KVM: arm64: Fix FEAT_SPE_FnE to use PMSIDR_EL1.FnE, not PMSVer
(bsc#1012628).
- KVM: arm64: Fix FEAT_Debugv8p9 to check DebugVer, not PMUVer
(bsc#1012628).
- KVM: arm64: Fix pin leak and publication ordering in
__pkvm_init_vcpu() (bsc#1012628).
- LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()
(bsc#1012628).
- LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS
(bsc#1012628).
- LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry
(bsc#1012628).
- LoongArch: KVM: Fix HW timer interrupt lost when inject
interrupt by software (bsc#1012628).
- LoongArch: KVM: Move unconditional delay into timer clear
scenery (bsc#1012628).
- LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte()
(bsc#1012628).
- LoongArch: Use per-root-bridge PCIH flag to skip mem resource
fixup (bsc#1012628).
- bpf: Fix use-after-free in arena_vm_close on fork (bsc#1012628).
- octeon_ep_vf: add NULL check for napi_build_skb() (bsc#1012628).
- mmc: core: Adjust MDT beyond 2025 (bsc#1012628).
- mmc: core: Add quirk for incorrect manufacturing date
(bsc#1012628).
- mmc: core: Optimize time for secure erase/trim for some Kingston
eMMCs (bsc#1012628).
- crypto: qat - fix indentation of macros in qat_hal.c
(bsc#1012628).
- crypto: qat - fix firmware loading failure for GEN6 devices
(bsc#1012628).
- hfsplus: fix uninit-value by validating catalog record size
(bsc#1012628).
- hfsplus: fix held lock freed on hfsplus_fill_super()
(bsc#1012628).
- 8021q: use RCU for egress QoS mappings (bsc#1012628).
- 8021q: delete cleared egress QoS mappings (bsc#1012628).
- printk: add print_hex_dump_devel() (bsc#1012628).
- crypto: caam - guard HMAC key hex dumps in hash_digest_key
(bsc#1012628).
- net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY()
(bsc#1012628).
- net: stmmac: Prevent NULL deref when RX memory exhausted
(bsc#1012628).
- rust: pin-init: fix incorrect accessor reference lifetime
(bsc#1012628).
- x86/CPU/AMD: Prevent improper isolation of shared resources
in Zen2's op cache (bsc#1012628).
- ksmbd: validate inherited ACE SID length (bsc#1012628).
- Rename to
patches.kernel.org/7.0.7-048-ALSA-core-Serialize-deferred-fasync-state-check.patch.
- commit cd9577c
* Wed May 13 2026 jslaby@suse.cz
- srcu: Don't queue workqueue handlers to never-online CPUs
(bsc#1263947).
- commit 71994e6
* Tue May 12 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.0.1-001-nfc-llcp-add-missing-return-after-LLCP_CLOSED-c.patch
(bsc#1012628 CVE-2026-31629 bsc#1263790).
- Update
patches.kernel.org/7.0.1-002-x86-CPU-Fix-FPDSS-on-Zen1.patch
(bsc#1012628 CVE-2026-31628 bsc#1263788).
- Update
patches.kernel.org/7.0.1-004-i2c-s3c24xx-check-the-size-of-the-SMBUS-message.patch
(bsc#1012628 CVE-2026-31627 bsc#1263786).
- Update
patches.kernel.org/7.0.1-005-staging-rtl8723bs-initialize-le_tmp64-in-rtw_BI.patch
(bsc#1012628 CVE-2026-31626 bsc#1263782).
- Update
patches.kernel.org/7.0.1-008-net-usb-cdc-phonet-fix-skb-frags-overflow-in-rx.patch
(bsc#1012628 CVE-2026-31623 bsc#1263778).
- Update
patches.kernel.org/7.0.1-009-NFC-digital-Bounds-check-NFC-A-cascade-depth-in.patch
(bsc#1012628 CVE-2026-31622 bsc#1263797).
- Update
patches.kernel.org/7.0.1-010-drm-vc4-platform_get_irq_byname-returns-an-int.patch
(bsc#1012628 CVE-2026-43072 bsc#1264451).
- Update
patches.kernel.org/7.0.1-011-bnge-return-after-auxiliary_device_uninit-in-er.patch
(bsc#1012628 CVE-2026-31621 bsc#1263771).
- Update
patches.kernel.org/7.0.1-013-ALSA-fireworks-bound-device-supplied-status-bef.patch
(bsc#1012628 CVE-2026-31619 bsc#1263806).
- Update
patches.kernel.org/7.0.1-014-fbdev-tdfxfb-avoid-divide-by-zero-on-FBIOPUT_VS.patch
(bsc#1012628 CVE-2026-31618 bsc#1263785).
- Update
patches.kernel.org/7.0.1-015-usb-gadget-f_ncm-validate-minimum-block_len-in-.patch
(bsc#1012628 CVE-2026-31617 bsc#1263780).
- Update
patches.kernel.org/7.0.1-016-usb-gadget-f_phonet-fix-skb-frags-overflow-in-p.patch
(bsc#1012628 CVE-2026-31616 bsc#1263777).
- Update
patches.kernel.org/7.0.1-017-usb-gadget-renesas_usb3-validate-endpoint-index.patch
(bsc#1012628 CVE-2026-31615 bsc#1263776).
- Update
patches.kernel.org/7.0.1-018-smb-client-fix-off-by-8-bounds-check-in-check_w.patch
(bsc#1012628 CVE-2026-31614 bsc#1263774).
- Update
patches.kernel.org/7.0.1-019-smb-client-fix-OOB-reads-parsing-symlink-error-.patch
(bsc#1012628 CVE-2026-31613 bsc#1263769).
- Update
patches.kernel.org/7.0.1-020-ksmbd-validate-EaNameLength-in-smb2_get_ea.patch
(bsc#1012628 CVE-2026-31612 bsc#1263768).
- Update
patches.kernel.org/7.0.1-021-ksmbd-require-3-sub-authorities-before-reading-.patch
(bsc#1012628 CVE-2026-31611 bsc#1263763).
- Update
patches.kernel.org/7.0.1-041-dcache-Limit-the-minimal-number-of-bucket-to-tw.patch
(bsc#1012628 CVE-2026-43071 bsc#1264289).
- Update
patches.kernel.org/7.0.1-058-x86-64-rename-misleadingly-named-__copy_user_no.patch
(bsc#1012628 CVE-2026-43073 bsc#1264454).
- Update
patches.kernel.org/7.0.1-074-media-vidtv-fix-pass-by-value-structs-causing-M.patch
(bsc#1012628 CVE-2026-43058 bsc#1264129).
- Update
patches.kernel.org/7.0.2-005-crypto-krb5enc-fix-async-decrypt-skipping-hash-.patch
(bsc#1012628 CVE-2026-31719 bsc#1264115).
- Update
patches.kernel.org/7.0.2-006-ksmbd-fix-use-after-free-in-__ksmbd_close_fd-vi.patch
(bsc#1012628 CVE-2026-31718 bsc#1264114).
- Update
patches.kernel.org/7.0.2-007-ksmbd-validate-owner-of-durable-handle-on-recon.patch
(bsc#1012628 CVE-2026-31717 bsc#1264118).
- Update
patches.kernel.org/7.0.2-010-fs-ntfs3-validate-rec-used-in-journal-replay-fi.patch
(bsc#1012628 CVE-2026-31716 bsc#1264107).
- Update
patches.kernel.org/7.0.2-012-f2fs-fix-UAF-caused-by-decrementing-sbi-nr_page.patch
(bsc#1012628 CVE-2026-31715 bsc#1264120).
- Update
patches.kernel.org/7.0.2-013-f2fs-fix-to-avoid-memory-leak-in-f2fs_rename.patch
(bsc#1012628 CVE-2026-31714 bsc#1263899).
- Update
patches.kernel.org/7.0.2-014-f2fs-fix-to-avoid-uninit-value-access-in-f2fs_s.patch
(bsc#1012628 CVE-2026-43349).
- Update
patches.kernel.org/7.0.2-015-fuse-reject-oversized-dirents-in-page-cache.patch
(bsc#1012628 CVE-2026-31694 bsc#1263901).
- Update
patches.kernel.org/7.0.2-016-fuse-abort-on-fatal-signal-during-sync-init.patch
(bsc#1012628 CVE-2026-31713 bsc#1264108).
- Update
patches.kernel.org/7.0.2-020-ksmbd-require-minimum-ACE-size-in-smb_check_per.patch
(bsc#1012628 CVE-2026-31712 bsc#1264113).
- Update
patches.kernel.org/7.0.2-021-smb-server-fix-active_num_conn-leak-on-transpor.patch
(bsc#1012628 CVE-2026-31711 bsc#1264029).
- Update
patches.kernel.org/7.0.2-022-smb-client-fix-dir-separator-in-SMB1-UNIX-mount.patch
(bsc#1012628 CVE-2026-31710 bsc#1264027).
- Update
patches.kernel.org/7.0.2-024-smb-client-require-a-full-NFS-mode-SID-before-r.patch
(bsc#1012628 CVE-2026-43350).
- Update
patches.kernel.org/7.0.2-025-smb-client-validate-the-whole-DACL-before-rewri.patch
(bsc#1012628 CVE-2026-31709 bsc#1264024).
- Update
patches.kernel.org/7.0.2-026-smb-client-fix-OOB-read-in-smb2_ioctl_query_inf.patch
(bsc#1012628 CVE-2026-31708 bsc#1264022).
- Update
patches.kernel.org/7.0.2-027-ksmbd-validate-response-sizes-in-ipc_validate_m.patch
(bsc#1012628 CVE-2026-31707 bsc#1263875).
- Update
patches.kernel.org/7.0.2-028-ksmbd-validate-num_aces-and-harden-ACE-walk-in-.patch
(bsc#1012628 CVE-2026-31706 bsc#1263885).
- Update
patches.kernel.org/7.0.2-029-ksmbd-fix-out-of-bounds-write-in-smb2_get_ea-EA.patch
(bsc#1012628 CVE-2026-31705 bsc#1263878).
- Update
patches.kernel.org/7.0.2-030-ksmbd-use-check_add_overflow-to-prevent-u16-DAC.patch
(bsc#1012628 CVE-2026-31704 bsc#1263881).
- Update
patches.kernel.org/7.0.2-032-writeback-Fix-use-after-free-in-inode_switch_wb.patch
(bsc#1012628 bsc#1259701 CVE-2026-31703 bsc#1263883).
- Update
patches.kernel.org/7.0.2-033-f2fs-fix-use-after-free-of-sbi-in-f2fs_compress.patch
(bsc#1012628 CVE-2026-31702 bsc#1263884).
- Update
patches.kernel.org/7.0.2-036-ALSA-caiaq-take-a-reference-on-the-USB-device-i.patch
(bsc#1012628 CVE-2026-31701 bsc#1263876).
- Update
patches.kernel.org/7.0.2-037-net-packet-fix-TOCTOU-race-on-mmap-d-vnet_hdr-i.patch
(bsc#1012628 CVE-2026-31700 bsc#1263882).
- Update
patches.kernel.org/7.0.2-038-crypto-ccp-Don-t-attempt-to-copy-CSR-to-userspa.patch
(bsc#1012628 CVE-2026-31699 bsc#1263879).
- Update
patches.kernel.org/7.0.2-039-crypto-ccp-Don-t-attempt-to-copy-PDH-cert-to-us.patch
(bsc#1012628 CVE-2026-31698 bsc#1263880).
- Update
patches.kernel.org/7.0.2-040-crypto-ccp-Don-t-attempt-to-copy-ID-to-userspac.patch
(bsc#1012628 CVE-2026-31697 bsc#1264116).
- Update
patches.kernel.org/7.0.2-041-rxrpc-Fix-missing-validation-of-ticket-length-i.patch
(bsc#1012628 CVE-2026-31696 bsc#1263900).
- Update
patches.kernel.org/7.0.2-042-mshv_vtl-Fix-vmemmap_shift-exceeding-MAX_FOLIO_.patch
(bsc#1012628 CVE-2026-43348).
- Update
patches.kernel.org/7.0.5-001-xfrm-esp-avoid-in-place-decrypt-on-shared-skb-f.patch
(bsc#1012628 CVE-2026-43284 bsc#1264449).
- Update
patches.kernel.org/7.0.6-001-rxrpc-Also-unshare-DATA-RESPONSE-packets-when-p.patch
(bsc#1012628 CVE-2026-43500 bsc#1264450).
Run suse-add-cves.
- commit 96c854d
* Mon May 11 2026 msuchanek@suse.de
- mkspec: Add signature to source list only when it exists
- commit e496e84
* Mon May 11 2026 jslaby@suse.cz
- Linux 7.0.6 (bsc#1012628).
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags
are present (bsc#1012628).
- commit 437be88
* Mon May 11 2026 mkubecek@suse.cz
- update to 7.1-rc3
- drop 1 mainline patch
- patches.suse/xfrm-esp-avoid-in-place-decrypt-on-shared-skb-frags.patch
- commit 5b69a3b
* Sat May 09 2026 jslaby@suse.cz
- ALSA: core: Serialize deferred fasync state checks (git-fixes).
- commit 6661b4c
* Fri May 08 2026 pfalcato@suse.de
- Update
patches.suse/xfrm-esp-avoid-in-place-decrypt-on-shared-skb-frags.patch
(dirty-frag git-fixes).
References: was wrong, it's obviously dirty-frag, not pipe. In my defense,
it was late...
- commit 7726775
* Fri May 08 2026 jslaby@suse.cz
- Linux 7.0.5 (bsc#1012628).
- xfrm: esp: avoid in-place decrypt on shared skb frags
(bsc#1012628).
- commit 77ae3c4
* Fri May 08 2026 pfalcato@suse.de
- xfrm: esp: avoid in-place decrypt on shared skb frags
(dirty-pipe git-fixes).
- commit 43f0141
* Thu May 07 2026 ailiop@suse.com
- Update config files: reenable NFS v4.0 (bsc#1264351)
Upstream commit 4e0269352534 ("NFS: Add a way to disable NFS v4.0 via
KConfig") merged in v7.0-rc1 made NFS v4.0 support configurable, and it
got disabled by default.
Reenable it as otherwise mounting with nfs4 type shares that do not
support higher protocols will fail. While it is advisable and
preferrable to always use NFS v4.1 or higher, it may not always be
available. Also since we are still enabling NFS v3, there is no good
reason to completely disable NFS v4.0 yet. The client will anyway
negotiate and use the highest protocol version available with the
server.
- commit 2a164bc
* Thu May 07 2026 jslaby@suse.cz
- Linux 7.0.4 (bsc#1012628).
- ipmi:ssif: NULL thread on error (bsc#1012628).
- ipmi:ssif: Remove unnecessary indention (bsc#1012628).
- netfilter: reject zero shift in nft_bitwise (bsc#1012628).
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
(bsc#1012628).
- mm/slab: return NULL early from kmalloc_nolock() in NMI on UP
(bsc#1012628).
- mm/page_alloc: return NULL early from
alloc_frozen_pages_nolock() in NMI on UP (bsc#1012628).
- vmalloc: fix buffer overflow in vrealloc_node_align()
(bsc#1012628).
- ALSA: aloop: Fix peer runtime UAF during format-change stop
(bsc#1012628).
- ALSA: caiaq: fix usb_dev refcount leak on probe failure
(bsc#1012628).
- drm/imagination: Fix segfault when updating ftrace mask
(bsc#1012628).
- drm/amdgpu: fix zero-size GDS range init on RDNA4 (bsc#1012628).
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows
(bsc#1012628).
- ALSA: caiaq: Don't abort when no input device is available
(bsc#1012628).
- ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path
(bsc#1012628).
- driver core: Add kernel-doc for DEV_FLAG_COUNT enum value
(bsc#1012628).
- crypto: authencesn - reject short ahash digests during instance
creation (bsc#1012628).
- mei: me: add nova lake point H DID (bsc#1012628).
- mei: me: use PCI_DEVICE_DATA macro (bsc#1012628).
- mm: avoid deadlock when holding rmap on mmap_prepare error
(bsc#1012628).
- mm: various small mmap_prepare cleanups (bsc#1012628).
- wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling
(bsc#1012628).
- wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor
(bsc#1012628).
- iio: frequency: admv1013: fix NULL pointer dereference on str
(bsc#1012628).
- iio: frequency: admv1013: add dev variable (bsc#1012628).
- perf loongarch: Fix build failure with CONFIG_LIBDW_DWARF_UNWIND
(bsc#1012628).
- seg6: fix seg6 lwtunnel output redirect for L2 reduced encap
mode (bsc#1012628).
- scsi: sd: fix missing put_disk() when device_add(&disk_dev)
fails (bsc#1012628).
- sched_ext: Documentation: Clarify ops.dispatch() role in task
lifecycle (bsc#1012628).
- rxgk: Fix potential integer overflow in length check
(bsc#1012628).
- rtmutex: Use waiter::task instead of current in remove_waiter()
(bsc#1012628).
- ntfs3: fix integer overflow in run_unpack() volume boundary
check (bsc#1012628).
- ntfs3: add buffer boundary checks to run_unpack() (bsc#1012628).
- NFSv4.1: Apply session size limits on clone path (bsc#1012628).
- ktest: Fix the month in the name of the failure directory
(bsc#1012628).
- IB/core: Fix zero dmac race in neighbor resolution
(bsc#1012628).
- gtp: disable BH before calling udp_tunnel_xmit_skb()
(bsc#1012628).
- ceph: only d_add() negative dentries when they are unhashed
(bsc#1012628).
- ceph: fix num_ops off-by-one when crypto allocation fails
(bsc#1012628).
- erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()
(bsc#1012628).
- dm mirror: fix integer overflow in create_dirty_log()
(bsc#1012628).
- crypto: nx - Fix packed layout in struct nx842_crypto_header
(bsc#1012628).
- crypto: nx - fix context leak in nx842_crypto_free_ctx
(bsc#1012628).
- crypto: nx - fix bounce buffer leaks in
nx842_crypto_{alloc,free}_ctx (bsc#1012628).
- crypto: atmel-sha204a - Fix uninitialized data access on OTP
read error (bsc#1012628).
- crypto: atmel-sha204a - Fix potential UAF and memory leak in
remove path (bsc#1012628).
- crypto: atmel-sha204a - Fix error codes in OTP reads
(bsc#1012628).
- crypto: atmel-tdes - fix DMA sync direction (bsc#1012628).
- crypto: ccree - fix a memory leak in cc_mac_digest()
(bsc#1012628).
- crypto: hisilicon - Fix dma_unmap_single() direction
(bsc#1012628).
- crypto: atmel-ecc - Release client on allocation failure
(bsc#1012628).
- crypto: atmel-aes - Fix 3-page memory leak in
atmel_aes_buff_cleanup (bsc#1012628).
- crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated
as 64-bit (bsc#1012628).
- crypto: acomp - fix wrong pointer stored by acomp_save_req()
(bsc#1012628).
- can: ucan: fix devres lifetime (bsc#1012628).
- bus: mhi: host: pci_generic: Switch to async power up to avoid
boot delays (bsc#1012628).
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
(bsc#1012628).
- apparmor: use target task's context in apparmor_getprocattr()
(bsc#1012628).
- 9p: fix access mode flags being ORed instead of replaced
(bsc#1012628).
- mfd: core: Preserve OF node when ACPI handle is present
(bsc#1012628).
- mptcp: sync the msk->sndbuf at accept() time (bsc#1012628).
- taskstats: set version in TGID exit notifications (bsc#1012628).
- tcp: call sk_data_ready() after listener migration
(bsc#1012628).
- wifi: rtl8xxxu: fix potential use of uninitialized value
(bsc#1012628).
- x86/shstk: Prevent deadlock during shstk sigreturn
(bsc#1012628).
- x86/cpu: Disable FRED when PTI is forced on (bsc#1012628).
- inotify: fix watch count leak when
fsnotify_add_inode_mark_locked() fails (bsc#1012628).
- HID: apple: ensure the keyboard backlight is off if suspending
(bsc#1012628).
- mm, swap: speed up hibernation allocation and writeout
(bsc#1012628).
- check-uapi: link into shared objects (bsc#1012628).
- md/raid5: validate payload size before accessing journal
metadata (bsc#1012628).
- md/raid5: fix soft lockup in retry_aligned_read() (bsc#1012628).
- md/md-llbitmap: raise barrier before state machine transition
(bsc#1012628).
- md/md-llbitmap: skip reading rdevs that are not in_sync
(bsc#1012628).
- amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2
(bsc#1012628).
- mtd: spinand: winbond: Declare the QE bit on W25NxxJW
(bsc#1012628).
- mtd: spi-nor: sst: Fix write enable before AAI sequence
(bsc#1012628).
- udf: fix partition descriptor append bookkeeping (bsc#1012628).
- ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()
(bsc#1012628).
- ext4: fix bounds check in check_xattrs() to prevent
out-of-bounds access (bsc#1012628).
- ring-buffer: Do not double count the reader_page (bsc#1012628).
- ARM: 9472/1: fix race condition on PG_dcache_clean in
__sync_icache_dcache() (bsc#1012628).
- KVM: nSVM: Always intercept VMMCALL when L2 is active
(bsc#1012628).
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted
by L1 (bsc#1012628).
- KVM: nSVM: Add missing consistency check for nCR3 validity
(bsc#1012628).
- KVM: nSVM: Drop the non-architectural consistency check for
NP_ENABLE (bsc#1012628).
- KVM: nSVM: Add missing consistency check for EFER, CR0, CR4,
and CS (bsc#1012628).
- KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested
[#]VMEXIT (bsc#1012628).
- KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT
(bsc#1012628).
- KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) (bsc#1012628).
- KVM: nSVM: Triple fault if mapping VMCB12 fails on nested
[#]VMEXIT (bsc#1012628).
- KVM: nSVM: Triple fault if restore host CR3 fails on nested
[#]VMEXIT (bsc#1012628).
- KVM: nSVM: Refactor writing vmcb12 on nested #VMEXIT as a helper
(bsc#1012628).
- KVM: nSVM: Refactor checking LBRV enablement in vmcb12 into
a helper (bsc#1012628).
- KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on
nested VMRUN (bsc#1012628).
- KVM: SVM: Add missing save/restore handling of LBR MSRs
(bsc#1012628).
- KVM: SVM: Switch svm_copy_lbrs() to a macro (bsc#1012628).
- KVM: nSVM: Delay setting soft IRQ RIP tracking fields until
vCPU run (bsc#1012628).
- KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 (bsc#1012628).
- KVM: arm64: Account for RESx bits in __compute_fgt()
(bsc#1012628).
- KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested
[#]VMEXIT (bsc#1012628).
- KVM: nSVM: Delay stuffing L2's current RIP into NextRIP until
vCPU run (bsc#1012628).
- KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first
L2 VMRUN (bsc#1012628).
- KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to
guest mode (bsc#1012628).
- KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB
intercepts (bsc#1012628).
- KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 (bsc#1012628).
- KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN
of L2 (bsc#1012628).
- KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2
(bsc#1012628).
- KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state
(bsc#1012628).
- KVM: x86: Defer non-architectural deliver of exception payload
to userspace read (bsc#1012628).
- LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel()
(bsc#1012628).
- userfaultfd: allow registration of ranges below mmap_min_addr
(bsc#1012628).
- mm/damon/core: disallow non-power of two min_region_sz on
damon_start() (bsc#1012628).
- mm/damon/core: disallow time-quota setting zero esz
(bsc#1012628).
- mm/damon/core: use time_in_range_open() for damos quota window
start (bsc#1012628).
- mm/damon/core: validate damos_quota_goal->nid for
node_memcg_{used,free}_bp (bsc#1012628).
- mm/damon/core: validate damos_quota_goal->nid for
node_mem_{used,free}_bp (bsc#1012628).
- mm/damon/stat: fix memory leak on damon_start() failure in
damon_stat_start() (bsc#1012628).
- mm/mempolicy: fix memory leaks in
weighted_interleave_auto_store() (bsc#1012628).
- mm/memfd_luo: fix physical address conversion in put_folios
cleanup (bsc#1012628).
- mm/vmalloc: take vmap_purge_lock in shrinker (bsc#1012628).
- rtc: ntxec: fix OF node reference imbalance (bsc#1012628).
- tpm: tpm_tis: stop transmit if retries are exhausted
(bsc#1012628).
- tpm: tpm_tis: add error logging for data transfer (bsc#1012628).
- tpm: Use kfree_sensitive() to free auth session in
tpm_dev_release() (bsc#1012628).
- tpm: Fix auth session leak in tpm2_get_random() error path
(bsc#1012628).
- tpm2-sessions: Fix missing tpm_buf_destroy() in
tpm2_read_public() (bsc#1012628).
- pwm: imx-tpm: Count the number of enabled channels in probe
(bsc#1012628).
- crypto: talitos - rename first/last to first_desc/last_desc
(bsc#1012628).
- crypto: talitos - fix SEC1 32k ahash request limitation
(bsc#1012628).
- firmware: exynos-acpm: Drop fake 'const' on handle pointer
(bsc#1012628).
- firmware: google: framebuffer: Do not unregister platform device
(bsc#1012628).
- xfs: fix a resource leak in xfs_alloc_buftarg() (bsc#1012628).
- xfs: start gc on zonegc_low_space attribute updates
(bsc#1012628).
- crypto: qat - fix IRQ cleanup on 6xxx probe failure
(bsc#1012628).
- arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins
(bsc#1012628).
- mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration
(bsc#1012628).
- mmc: block: use single block write in retry (bsc#1012628).
- randomize_kstack: Maintain kstack_offset per task (bsc#1012628).
- hwmon: (pt5161l) Fix bugs in pt5161l_read_block_data()
(bsc#1012628).
- selinux: fix overlayfs mmap() and mprotect() access checks
(bsc#1012628).
- lsm: add backing_file LSM hooks (bsc#1012628).
- fs: prepare for adding LSM blob to backing_file (bsc#1012628).
- media: rzv2h-ivc: Fix AXIRX_VBLANK register write (bsc#1012628).
- media: rzv2h-ivc: Revise default VBLANK formula (bsc#1012628).
- hwmon: (powerz) Avoid cacheline sharing for DMA buffer
(bsc#1012628).
- hwmon: (isl28022) Fix integer overflow in power calculation
on 32-bit (bsc#1012628).
- power: supply: axp288_charger: Do not cancel work before
initializing it (bsc#1012628).
- fbdev: defio: Disconnect deferred I/O from the lifetime of
struct fb_info (bsc#1012628).
- LoongArch: Show CPU vulnerabilites correctly (bsc#1012628).
- LoongArch: Make arch_irq_work_has_interrupt() true only if
IPI HW exist (bsc#1012628).
- tpm: avoid -Wunused-but-set-variable (bsc#1012628).
- extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE'
(bsc#1012628).
- apparmor: Fix string overrun due to missing termination
(bsc#1012628).
- spi: fix resource leaks on device setup failure (bsc#1012628).
- libceph: Prevent potential null-ptr-deref in
ceph_handle_auth_reply() (bsc#1012628).
- ipv4: icmp: validate reply type before using icmp_pointers
(bsc#1012628).
- printf: Compile the kunit test with DISABLE_BRANCH_PROFILING
DISABLE_BRANCH_PROFILING (bsc#1012628).
- RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv
(bsc#1012628).
- tracing/fprobe: Reject registration of a registered fprobe
before init (bsc#1012628).
- slub: fix data loss and overflow in krealloc() (bsc#1012628).
- drm/arcpgu: fix device node leak (bsc#1012628).
- net: ks8851: Avoid excess softirq scheduling (bsc#1012628).
- net: mctp: fix don't require received header reserved bits to
be zero (bsc#1012628).
- netconsole: avoid out-of-bounds access on empty string in
trim_newline() (bsc#1012628).
- net: bridge: use a stable FDB dst snapshot in RCU readers
(bsc#1012628).
- net: ks8851: Reinstate disabling of BHs around IRQ handler
(bsc#1012628).
- net/smc: avoid early lgr access in smc_clc_wait_msg
(bsc#1012628).
- net: txgbe: fix firmware version check (bsc#1012628).
- net: rds: fix MR cleanup on copy error (bsc#1012628).
- net: qrtr: ns: Limit the total number of nodes (bsc#1012628).
- net: qrtr: ns: Free the node during ctrl_cmd_bye()
(bsc#1012628).
- net: qrtr: ns: Limit the maximum number of lookups
(bsc#1012628).
- net: qrtr: ns: Limit the maximum server registration per node
(bsc#1012628).
- arm64: dts: marvell: uDPU: add ethernet aliases (bsc#1012628).
- net: txgbe: fix RTNL assertion warning when remove module
(bsc#1012628).
- tools/accounting: handle truncated taskstats netlink messages
(bsc#1012628).
- EDAC/versalnet: Fix memory leak in remove and probe error paths
(bsc#1012628).
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets
(bsc#1012628).
- rxrpc: Fix re-decryption of RESPONSE packets (bsc#1012628).
- rxrpc: Fix error handling in rxgk_extract_token() (bsc#1012628).
- rxrpc: Fix rxkad crypto unalignment handling (bsc#1012628).
- rxrpc: Fix conn-level packet handling to unshare RESPONSE
packets (bsc#1012628).
- rxrpc: Fix memory leaks in rxkad_verify_response()
(bsc#1012628).
- rxrpc: Fix potential UAF after skb_unshare() failure
(bsc#1012628).
- iio: adc: ad7768-1: remove switch to one-shot mode
(bsc#1012628).
- iio: adc: ad7768-1: fix one-shot mode data acquisition
(bsc#1012628).
- ALSA: pcmtest: Fix resource leaks in module init error paths
(bsc#1012628).
- ALSA: pcmtest: fix reference leak on failed device registration
(bsc#1012628).
- ALSA: hda/realtek - Add mute LED support for HP Victus 15-fa2xxx
(bsc#1012628).
- ALSA: 6fire: Fix input volume change detection (bsc#1012628).
- ALSA: caiaq: Handle probe errors properly (bsc#1012628).
- ALSA: caiaq: Fix control_put() result and cache rollback
(bsc#1012628).
- ALSA: core: Fix potential data race at fasync handling
(bsc#1012628).
- module.lds.S: Fix modules on 32-bit parisc architecture
(bsc#1012628).
- module.lds,codetag: force 0 sh_addr for sections (bsc#1012628).
- io_uring/poll: ensure EPOLL_ONESHOT is propagated for
EPOLL_URING_WAKE (bsc#1012628).
- io_uring/poll: fix signed comparison in io_poll_get_ownership()
(bsc#1012628).
- io_uring/zcrx: fix user_struct uaf (bsc#1012628).
- io_uring/register: fix ring resizing with mixed/large SQEs/CQEs
(bsc#1012628).
- iio: adc: ti-ads7950: use
iio_push_to_buffers_with_ts_unaligned() (bsc#1012628).
- block: relax pgmap check in bio_add_page for compatible zone
device pages (bsc#1012628).
- io_uring/timeout: check unused sqe fields (bsc#1012628).
- io_uring/zcrx: return back two step unregistration
(bsc#1012628).
- block: fix zone write plugs refcount handling in
disk_zone_wplug_schedule_bio_work() (bsc#1012628).
- mm/zone_device: do not touch device folio after calling
- >folio_free() (bsc#1012628).
- rbd: fix null-ptr-deref when device_add_disk() fails
(bsc#1012628).
- selftests/landlock: Skip stale records in audit_match_record()
(bsc#1012628).
- selftests/landlock: Fix snprintf truncation checks in audit
helpers (bsc#1012628).
- selftests/landlock: Fix format warning for __u64 in net_test
(bsc#1012628).
- selftests/landlock: Drain stale audit records on init
(bsc#1012628).
- landlock: Allow TSYNC with LOG_SUBDOMAINS_OFF and fd=-1
(bsc#1012628).
- landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork()
(bsc#1012628).
- selftests/mqueue: Fix incorrectly named file (bsc#1012628).
- sched: Use u64 for bandwidth ratio calculations (bsc#1012628).
- reset: rzv2h-usb2phy: Keep PHY clock enabled for entire device
lifetime (bsc#1012628).
- remoteproc: xlnx: Only access buffer information if IPI is
buffered (bsc#1012628).
- RDMA/mana_ib: Disable RX steering on RSS QP destroy
(bsc#1012628).
- perf annotate: Use jump__delete when freeing LoongArch jumps
(bsc#1012628).
- PCI: imx6: Fix reference clock source selection for i.MX95
(bsc#1012628).
- PCI: cadence: Use cdns_pcie_read_sz() for byte or word read
access (bsc#1012628).
- parisc: Drop ip_fast_csum() inline assembly implementation
(bsc#1012628).
- parisc: _llseek syscall is only available for 32-bit userspace
(bsc#1012628).
- nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set
(bsc#1012628).
- nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston
OM3SGP4 (bsc#1012628).
- mtd: docg3: fix use-after-free in docg3_release() (bsc#1012628).
- mm/hugetlb: fix early boot crash on parameters without '='
separator (bsc#1012628).
- mm/damon/core: fix damos_walk() vs kdamond_fn() exit race
(bsc#1012628).
- mm/damon/core: fix damon_call() vs kdamond_fn() exit race
(bsc#1012628).
- mm/alloc_tag: clear codetag for pages allocated before page_ext
initialization (bsc#1012628).
- mfd: stpmic1: Attempt system shutdown twice in case PMIC is
confused (bsc#1012628).
- media: rockchip: rkcif: comply with minimum number of buffers
requirement (bsc#1012628).
- media: rockchip: rkcif: fix off by one bugs (bsc#1012628).
- media: rc: igorplugusb: heed coherency rules (bsc#1012628).
- md/raid10: fix deadlock with check operation and nowait requests
(bsc#1012628).
- KVM: selftests: Fix reserved value WRMSR testcase for
multi-feature MSRs (bsc#1012628).
- jbd2: fix deadlock in jbd2_journal_cancel_revoke()
(bsc#1012628).
- ipmi:ssif: Clean up kthread on errors (bsc#1012628).
- erofs: fix the out-of-bounds nameoff handling for trailing
dirents (bsc#1012628).
- ALSA: seq_oss: return full count for successful SEQ_FULLSIZE
writes (bsc#1012628).
- ALSA: ctxfi: Add fallback to default RSR for S/PDIF
(bsc#1012628).
- ALSA: aoa: Skip devices with no codecs in i2sbus_resume()
(bsc#1012628).
- ALSA: aoa: i2sbus: fix OF node lifetime handling (bsc#1012628).
- ALSA: aoa: i2sbus: clear stale prepared state (bsc#1012628).
- mm/zsmalloc: copy KMSAN metadata in zs_page_migrate()
(bsc#1012628).
- ext2: reject inodes with zero i_nlink and valid mode in
ext2_iget() (bsc#1012628).
- net: qrtr: ns: Fix use-after-free in driver remove()
(bsc#1012628).
- media: i2c: imx219: Check return value of
devm_gpiod_get_optional() in imx219_probe() (bsc#1012628).
- lib/ts_kmp: fix integer overflow in pattern length calculation
(bsc#1012628).
- PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops
complete (bsc#1012628).
- phy: qcom: m31-eusb2: clear PLL_EN during init (bsc#1012628).
- Revert "ALSA: usb: Increase volume range that triggers a
warning" (bsc#1012628).
- PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown
(bsc#1012628).
- crypto: atmel-sha204a - Fix OTP sysfs read and error handling
(bsc#1012628).
- media: mtk-jpeg: fix use-after-free in release path due to
uncancelled work (bsc#1012628).
- net: strparser: fix skb_head leak in strp_abort_strp()
(bsc#1012628).
- net: caif: clear client service pointer on teardown
(bsc#1012628).
- ALSA: control: Validate buf_len before strnlen() in
snd_ctl_elem_init_enum_names() (bsc#1012628).
- media: amphion: Fix race between m2m job_abort and device_run
(bsc#1012628).
- PCI: imx6: Skip waiting for L2/L3 Ready on i.MX6SX
(bsc#1012628).
- EDAC/versalnet: Fix device_node leak in mc_probe()
(bsc#1012628).
- hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt
(bsc#1012628).
- of: unittest: fix use-after-free in testdrv_probe()
(bsc#1012628).
- of: unittest: fix use-after-free in of_unittest_changeset()
(bsc#1012628).
- dt-bindings: display: ti, am65x-dss: Fix AM62L DSS reg and
clock constraints (bsc#1012628).
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests
(bsc#1012628).
- crypto: algif_aead - snapshot IV for async AEAD requests
(bsc#1012628).
- spi: ch341: fix memory leaks on probe failures (bsc#1012628).
- spi: imx: fix use-after-free on unbind (bsc#1012628).
- thermal: core: Fix thermal zone governor cleanup issues
(bsc#1012628).
- um: drivers: call kernel_strrchr() explicitly in cow_user.c
(bsc#1012628).
- vfio/cdx: Fix NULL pointer dereference in interrupt trigger path
(bsc#1012628).
- vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex
(bsc#1012628).
- vfio/virtio: Convert list_lock from spinlock to mutex
(bsc#1012628).
- vfio/xe: Add a missing vfio_pci_core_release_dev()
(bsc#1012628).
- vfio: selftests: Fix VLA initialisation in vfio_pci_irq_set()
(bsc#1012628).
- wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()
(bsc#1012628).
- wifi: rtw88: check for PCI upstream bridge existence
(bsc#1012628).
- zram: do not forget to endio for partial discard requests
(bsc#1012628).
- Input: edt-ft5x06 - fix use-after-free in debugfs teardown
(bsc#1012628).
- ocfs2: split transactions in dio completion to avoid credit
exhaustion (bsc#1012628).
- mm: fix deferred split queue races during migration
(bsc#1012628).
- mm: prevent droppable mappings from being locked (bsc#1012628).
- mm: migrate: requeue destination folio on deferred split queue
(bsc#1012628).
- arm64: mm: Fix rodata=full block mapping support for realm
guests (bsc#1012628).
- arm64/mm: Enable batched TLB flush in unmap_hotplug_range()
(bsc#1012628).
- lib: test_hmm: evict device pages on file close to avoid
use-after-free (bsc#1012628).
- firmware: google: framebuffer: Do not mark framebuffer as busy
(bsc#1012628).
- fs: afs: revert mmap_prepare() change (bsc#1012628).
- kbuild: rust: allow `clippy::uninlined_format_args`
(bsc#1012628).
- rust: dma: remove DMA_ATTR_NO_KERNEL_MAPPING from public attrs
(bsc#1012628).
- drm/nouveau: fix nvkm_device leak on aperture removal failure
(bsc#1012628).
- device property: Make modifications of fwnode "flags" thread
safe (bsc#1012628).
- driver core: Don't let a device probe until it's ready
(bsc#1012628).
- sysfs: attribute_group: Respect is_visible_const() when changing
owner (bsc#1012628).
- ibmasm: fix heap over-read in ibmasm_send_i2o_message()
(bsc#1012628).
- ibmasm: fix OOB reads in command_file_write due to missing
size checks (bsc#1012628).
- misc: ibmasm: fix OOB MMIO read in
ibmasm_handle_mouse_interrupt() (bsc#1012628).
- greybus: gb-beagleplay: fix sleep in atomic context in
hdlc_tx_frames() (bsc#1012628).
- greybus: gb-beagleplay: bound bootloader receive buffering
(bsc#1012628).
- leds: qcom-lpg: Check for array overflow when selecting the
high resolution (bsc#1012628).
- drm/nouveau: fix u32 overflow in pushbuf reloc bounds check
(bsc#1012628).
- LoongArch: Add spectre boundry for syscall dispatch table
(bsc#1012628).
- ALSA: usb-audio: Evaluate packsize caps at the right place
(bsc#1012628).
- usb: chipidea: core: allow ci_irq_handler() handle both ID
and VBUS change (bsc#1012628).
- usb: chipidea: otg: not wait vbus drop if use role_switch
(bsc#1012628).
- usb: xhci: Make usb_host_endpoint.hcpriv survive
endpoint_disable() (bsc#1012628).
- ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch
(bsc#1012628).
- ALSA: usb-audio: Avoid false E-MU sample-rate notifications
(bsc#1012628).
- ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
(bsc#1012628).
- commit 0d9ad46
* Thu May 07 2026 jslaby@suse.cz
- Delete
patches.suse/iwlwifi-declare-missing-firmware-files.patch (bsc#1254352).
See:
https://bugzilla.suse.com/show_bug.cgi?id=1254352#c17
(cherry picked from commit 80f0df78b90666c98e9d3e12cc9109631ed0b7b2)
- Delete
patches.suse/iwlwifi-declare-missing-firmware-files.patch (bsc#1254352).
See:
https://bugzilla.suse.com/show_bug.cgi?id=1254352#c17
- commit 650b0c2
* Mon May 04 2026 jslaby@suse.cz
- Refresh
patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
Update upstream status.
- commit 2d1ff64
* Mon May 04 2026 pfalcato@suse.de
- update to 7.1-rc2
- refresh configs
- commit f495535
* Thu Apr 30 2026 jslaby@suse.cz
- Update
patches.kernel.org/7.0.1-001-nfc-llcp-add-missing-return-after-LLCP_CLOSED-c.patch
(bsc#1012628 CVE-2026-31629).
- Update
patches.kernel.org/7.0.1-002-x86-CPU-Fix-FPDSS-on-Zen1.patch
(bsc#1012628 CVE-2026-31628).
- Update
patches.kernel.org/7.0.1-003-can-raw-fix-ro-uniq-use-after-free-in-raw_rcv.patch
(bsc#1012628 CVE-2026-31532 bsc#1262757).
- Update
patches.kernel.org/7.0.1-004-i2c-s3c24xx-check-the-size-of-the-SMBUS-message.patch
(bsc#1012628 CVE-2026-31627).
- Update
patches.kernel.org/7.0.1-005-staging-rtl8723bs-initialize-le_tmp64-in-rtw_BI.patch
(bsc#1012628 CVE-2026-31626).
- Update
patches.kernel.org/7.0.1-006-HID-alps-fix-NULL-pointer-dereference-in-alps_r.patch
(bsc#1012628 CVE-2026-31625 bsc#1263030).
- Update
patches.kernel.org/7.0.1-007-HID-core-clamp-report_size-in-s32ton-to-avoid-u.patch
(bsc#1012628 CVE-2026-31624 bsc#1263657).
- Update
patches.kernel.org/7.0.1-008-net-usb-cdc-phonet-fix-skb-frags-overflow-in-rx.patch
(bsc#1012628 CVE-2026-31623).
- Update
patches.kernel.org/7.0.1-009-NFC-digital-Bounds-check-NFC-A-cascade-depth-in.patch
(bsc#1012628 CVE-2026-31622).
- Update
patches.kernel.org/7.0.1-011-bnge-return-after-auxiliary_device_uninit-in-er.patch
(bsc#1012628 CVE-2026-31621).
- Update
patches.kernel.org/7.0.1-012-ALSA-usx2y-us144mkii-fix-NULL-deref-on-missing-.patch
(bsc#1012628 CVE-2026-31620 bsc#1263029).
- Update
patches.kernel.org/7.0.1-013-ALSA-fireworks-bound-device-supplied-status-bef.patch
(bsc#1012628 CVE-2026-31619).
- Update
patches.kernel.org/7.0.1-014-fbdev-tdfxfb-avoid-divide-by-zero-on-FBIOPUT_VS.patch
(bsc#1012628 CVE-2026-31618).
- Update
patches.kernel.org/7.0.1-015-usb-gadget-f_ncm-validate-minimum-block_len-in-.patch
(bsc#1012628 CVE-2026-31617).
- Update
patches.kernel.org/7.0.1-016-usb-gadget-f_phonet-fix-skb-frags-overflow-in-p.patch
(bsc#1012628 CVE-2026-31616).
- Update
patches.kernel.org/7.0.1-017-usb-gadget-renesas_usb3-validate-endpoint-index.patch
(bsc#1012628 CVE-2026-31615).
- Update
patches.kernel.org/7.0.1-018-smb-client-fix-off-by-8-bounds-check-in-check_w.patch
(bsc#1012628 CVE-2026-31614).
- Update
patches.kernel.org/7.0.1-019-smb-client-fix-OOB-reads-parsing-symlink-error-.patch
(bsc#1012628 CVE-2026-31613).
- Update
patches.kernel.org/7.0.1-020-ksmbd-validate-EaNameLength-in-smb2_get_ea.patch
(bsc#1012628 CVE-2026-31612).
- Update
patches.kernel.org/7.0.1-021-ksmbd-require-3-sub-authorities-before-reading-.patch
(bsc#1012628 CVE-2026-31611).
- Update
patches.kernel.org/7.0.1-022-ksmbd-fix-mechToken-leak-when-SPNEGO-decode-fai.patch
(bsc#1012628 CVE-2026-31610 bsc#1263046).
- Update
patches.kernel.org/7.0.1-023-smb-client-avoid-double-free-in-smbd_free_send_.patch
(bsc#1012628 CVE-2026-31609 bsc#1263663).
- Update
patches.kernel.org/7.0.1-024-smb-server-avoid-double-free-in-smb_direct_free.patch
(bsc#1012628 CVE-2026-31608 bsc#1263664).
- Update
patches.kernel.org/7.0.1-025-usbip-validate-number_of_packets-in-usbip_pack_.patch
(bsc#1012628 CVE-2026-31607 bsc#1263600).
- Update
patches.kernel.org/7.0.1-029-usb-gadget-f_hid-don-t-call-cdev_init-while-cde.patch
(bsc#1012628 CVE-2026-31606 bsc#1263591).
- Update
patches.kernel.org/7.0.1-031-fbdev-udlfb-avoid-divide-by-zero-on-FBIOPUT_VSC.patch
(bsc#1012628 CVE-2026-31605 bsc#1263493).
- Update
patches.kernel.org/7.0.1-034-wifi-rtw88-fix-device-leak-on-probe-failure.patch
(bsc#1012628 CVE-2026-31604 bsc#1263045).
- Update
patches.kernel.org/7.0.1-035-staging-sm750fb-fix-division-by-zero-in-ps_to_h.patch
(bsc#1012628 CVE-2026-31603 bsc#1263491).
- Update
patches.kernel.org/7.0.1-040-ALSA-ctxfi-Limit-PTP-to-a-single-page.patch
(bsc#1012628 CVE-2026-31602 bsc#1263723).
- Update
patches.kernel.org/7.0.1-042-vfio-xe-Reorganize-the-init-to-decouple-migrati.patch
(bsc#1012628 CVE-2026-31601 bsc#1263722).
- Update
patches.kernel.org/7.0.1-043-arm64-mm-Handle-invalid-large-leaf-mappings-cor.patch
(bsc#1012628 CVE-2026-31600 bsc#1263721).
- Update
patches.kernel.org/7.0.1-044-media-vidtv-fix-NULL-pointer-dereference-in-vid.patch
(bsc#1012628 CVE-2026-31599 bsc#1263031).
- Update
patches.kernel.org/7.0.1-045-ocfs2-fix-possible-deadlock-between-unlink-and-.patch
(bsc#1012628 CVE-2026-31598 bsc#1263718).
- Update
patches.kernel.org/7.0.1-046-ocfs2-fix-use-after-free-in-ocfs2_fault-when-VM.patch
(bsc#1012628 CVE-2026-31597 bsc#1263717).
- Update
patches.kernel.org/7.0.1-047-ocfs2-handle-invalid-dinode-in-ocfs2_group_exte.patch
(bsc#1012628 CVE-2026-31596 bsc#1263319).
- Update
patches.kernel.org/7.0.1-048-PCI-endpoint-pci-epf-vntb-Stop-cmd_handler-work.patch
(bsc#1012628 CVE-2026-31595 bsc#1263130).
- Update
patches.kernel.org/7.0.1-049-PCI-endpoint-pci-epf-vntb-Remove-duplicate-reso.patch
(bsc#1012628 CVE-2026-31594 bsc#1263129).
- Update
patches.kernel.org/7.0.1-051-KVM-SEV-Reject-attempts-to-sync-VMSA-of-an-alre.patch
(bsc#1012628 CVE-2026-31593 bsc#1263124).
- Update
patches.kernel.org/7.0.1-052-KVM-SEV-Protect-all-of-sev_mem_enc_register_reg.patch
(bsc#1012628 CVE-2026-31592 bsc#1263123).
- Update
patches.kernel.org/7.0.1-054-KVM-SEV-Lock-all-vCPUs-when-synchronzing-VMSAs-.patch
(bsc#1012628 CVE-2026-31591 bsc#1263122).
- Update
patches.kernel.org/7.0.1-055-KVM-SEV-Drop-WARN-on-large-size-for-KVM_MEMORY_.patch
(bsc#1012628 CVE-2026-31590 bsc#1263152).
- Update
patches.kernel.org/7.0.1-056-mm-call-free_folio-directly-in-folio_unmap_inva.patch
(bsc#1012628 CVE-2026-31589 bsc#1263125).
- Update
patches.kernel.org/7.0.1-061-KVM-x86-Use-scratch-field-in-MMIO-fragment-to-h.patch
(bsc#1012628 CVE-2026-31588 bsc#1263165).
- Update
patches.kernel.org/7.0.1-062-ASoC-qcom-q6apm-move-component-registration-to-.patch
(bsc#1012628 CVE-2026-31587 bsc#1263145).
- Update
patches.kernel.org/7.0.1-063-mm-kasan-fix-double-free-for-kasan-pXds.patch
(bsc#1012628 CVE-2026-31686 bsc#1263597).
- Update
patches.kernel.org/7.0.1-064-mm-blk-cgroup-fix-use-after-free-in-cgwb_releas.patch
(bsc#1012628 CVE-2026-31586 bsc#1263176).
- Update
patches.kernel.org/7.0.1-065-media-vidtv-fix-nfeeds-state-corruption-on-star.patch
(bsc#1012628 CVE-2026-31585 bsc#1263134).
- Update
patches.kernel.org/7.0.1-066-media-mediatek-vcodec-fix-use-after-free-in-enc.patch
(bsc#1012628 CVE-2026-31584 bsc#1263180).
- Update
patches.kernel.org/7.0.1-067-media-em28xx-fix-use-after-free-in-em28xx_v4l2_.patch
(bsc#1012628 CVE-2026-31583 bsc#1263173).
- Update
patches.kernel.org/7.0.1-068-hwmon-powerz-Fix-use-after-free-on-USB-disconne.patch
(bsc#1012628 CVE-2026-31582 bsc#1263588).
- Update
patches.kernel.org/7.0.1-069-ALSA-6fire-fix-use-after-free-on-disconnect.patch
(bsc#1012628 CVE-2026-31581 bsc#1263167).
- Update
patches.kernel.org/7.0.1-070-bcache-fix-cached_dev.sb_bio-use-after-free-and.patch
(bsc#1012628 CVE-2026-31580 bsc#1263169).
- Update
patches.kernel.org/7.0.1-071-wireguard-device-use-exit_rtnl-callback-instead.patch
(bsc#1012628 CVE-2026-31579 bsc#1263074).
- Update
patches.kernel.org/7.0.1-072-media-as102-fix-to-not-free-memory-after-the-de.patch
(bsc#1012628 CVE-2026-31578 bsc#1263075).
- Update
patches.kernel.org/7.0.1-073-nilfs2-fix-NULL-i_assoc_inode-dereference-in-ni.patch
(bsc#1012628 CVE-2026-31577 bsc#1263028).
- Update
patches.kernel.org/7.0.1-075-media-hackrf-fix-to-not-free-memory-after-the-d.patch
(bsc#1012628 CVE-2026-31576 bsc#1263073).
- Update
patches.kernel.org/7.0.1-076-mm-userfaultfd-fix-hugetlb-fault-mutex-hash-cal.patch
(bsc#1012628 CVE-2026-31575 bsc#1263067).
- Update
patches.kernel.org/7.0.1-077-clockevents-Add-missing-resets-of-the-next_even.patch
(bsc#1012628 CVE-2026-31574 bsc#1263071).
- Update
patches.kernel.org/7.0.3-001-Buffer-overflow-in-drivers-xen-sys-hypervisor.c.patch
(bsc#1012628 CVE-2026-31786 bsc#1262179).
- Update
patches.kernel.org/7.0.3-002-xen-privcmd-fix-double-free-via-VMA-splitting.patch
(bsc#1012628 CVE-2026-31787 bsc#1262181).
suse-add-cves
- commit 752ba7f
* Thu Apr 30 2026 jslaby@suse.cz
- Linux 7.0.3 (bsc#1012628).
- xen/privcmd: fix double free via VMA splitting (bsc#1012628).
- Buffer overflow in drivers/xen/sys-hypervisor.c (bsc#1012628).
- commit 59ed080
* Thu Apr 30 2026 jslaby@suse.cz
- Update config files. Set CONFIG_CRYPTO_BENCHMARK=m on arm (bsc#1247996)
The commit below omitted arm. Set this on arm too.
Fixes: c17c50da0497 ("Update config files (bsc#1247996)")
(cherry picked from commit 086d181cbac7a36b7d8fd9df243a6ef72efc1ded)
- Update config files. Set CONFIG_CRYPTO_BENCHMARK=m on arm (bsc#1247996)
The commit below omitted arm. Set this on arm too.
Fixes: c17c50da0497 ("Update config files (bsc#1247996)")
- commit fbfc4da
* Tue Apr 28 2026 jslaby@suse.cz
- Linux 7.0.2 (bsc#1012628).
- crypto: authencesn - Fix src offset when decrypting in-place
(bsc#1012628).
- pwm: th1520: fix `CLIPPY=1` warning (bsc#1012628).
- drm/amdgpu: replace PASID IDR with XArray (bsc#1012628).
- crypto: krb5enc - fix sleepable flag handling in encrypt
dispatch (bsc#1012628).
- crypto: krb5enc - fix async decrypt skipping hash verification
(bsc#1012628).
- ksmbd: fix use-after-free in __ksmbd_close_fd() via durable
scavenger (bsc#1012628).
- ksmbd: validate owner of durable handle on reconnect
(bsc#1012628).
- scripts: generate_rust_analyzer.py: define scripts
(bsc#1012628).
- scripts/dtc: Remove unused dts_version in dtc-lexer.l
(bsc#1012628).
- fs/ntfs3: validate rec->used in journal-replay file record check
(bsc#1012628).
- f2fs: fix to do sanity check on dcc->discard_cmd_cnt
conditionally (bsc#1012628).
- f2fs: fix UAF caused by decrementing sbi->nr_pages[] in
f2fs_write_end_io() (bsc#1012628).
- f2fs: fix to avoid memory leak in f2fs_rename() (bsc#1012628).
- f2fs: fix to avoid uninit-value access in
f2fs_sanity_check_node_footer (bsc#1012628).
- fuse: reject oversized dirents in page cache (bsc#1012628).
- fuse: abort on fatal signal during sync init (bsc#1012628).
- fuse: Check for large folio with SPLICE_F_MOVE (bsc#1012628).
- fuse: quiet down complaints in fuse_conn_limit_write
(bsc#1012628).
- fuse: fuse_dev_ioctl_clone() should wait for device file to
be initialized (bsc#1012628).
- ksmbd: require minimum ACE size in smb_check_perm_dacl()
(bsc#1012628).
- smb: server: fix active_num_conn leak on transport allocation
failure (bsc#1012628).
- smb: client: fix dir separator in SMB1 UNIX mounts
(bsc#1012628).
- smb: server: fix max_connections off-by-one in tcp accept path
(bsc#1012628).
- smb: client: require a full NFS mode SID before reading mode
bits (bsc#1012628).
- smb: client: validate the whole DACL before rewriting it in
cifsacl (bsc#1012628).
- smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO
path (bsc#1012628).
- ksmbd: validate response sizes in ipc_validate_msg()
(bsc#1012628).
- ksmbd: validate num_aces and harden ACE walk in
smb_inherit_dacl() (bsc#1012628).
- ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment
(bsc#1012628).
- ksmbd: use check_add_overflow() to prevent u16 DACL size
overflow (bsc#1012628).
- ksmbd: reset rcount per connection in
ksmbd_conn_wait_idle_sess_id() (bsc#1012628).
- f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()
(bsc#1012628).
- ALSA: usb-audio: apply quirk for MOONDROP JU Jiu (bsc#1012628).
- ALSA: hda/realtek: Add quirk for Legion S7 15IMH (bsc#1012628).
- ALSA: caiaq: take a reference on the USB device in create_card()
(bsc#1012628).
- net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
(bsc#1012628).
- crypto: ccp: Don't attempt to copy CSR to userspace if PSP
command failed (bsc#1012628).
- crypto: ccp: Don't attempt to copy PDH cert to userspace if
PSP command failed (bsc#1012628).
- crypto: ccp: Don't attempt to copy ID to userspace if PSP
command failed (bsc#1012628).
- rxrpc: Fix missing validation of ticket length in non-XDR key
preparsing (bsc#1012628).
- mshv_vtl: Fix vmemmap_shift exceeding MAX_FOLIO_ORDER
(bsc#1012628).
- Rename to
patches.kernel.org/7.0.2-032-writeback-Fix-use-after-free-in-inode_switch_wb.patch.
- commit 46da294
* Mon Apr 27 2026 pfalcato@suse.de
- update to 7.1-rc1
- drop patches (78 stable, 5 mainline, 1 unneeded)
- patches.kernel.org/*
- patches.suse/bcache-fix-uninitialized-closure-object.patch
- patches.suse/crypto-hkdf-skip-TVs-with-unapproved-salt-lengths-in.patch
- patches.suse/mfd-bcm2835-pm-Add-BCM2712-PM-device-support.patch
- patches.suse/mfd-bcm2835-pm-Introduce-SoC-specific-type-identifier.patch
- patches.suse/usb-gadget-f_hid-Add-missing-error-code.patch
- patches.suse/writeback-Fix-use-after-free-in-inode_switch_wbs_wor.patch
- refresh
- patches.rpmify/certs-Replace-openssl-invocation-with-OPENSSL.patch
- patches.suse/Restore-kABI-for-NVidia-vGPU-driver.patch
- patches.suse/add-suse-supported-flag.patch
- patches.suse/btrfs-provide-super_operations-get_inode_dev
- patches.suse/vfs-add-super_operations-get_inode_dev
- disable ARM architectures (need config update)
- new config options
- Processor type and features
- Power management and ACPI options
- ACPI (Advanced Configuration and Power Interface) Support
- CONFIG_ACPI_APEI_GHES_NVIDIA=m
- CPU Frequency scaling
- CONFIG_X86_AMD_PSTATE_DYNAMIC_EPP=y
- Memory Management options
- CONFIG_NUMA_MIGRATION=y
- Data Access Monitoring
- CONFIG_DAMON_DEBUG_SANITY=n
- Device Drivers
- PCI support
- CONFIG_PCI_PWRCTRL_GENERIC=m
- Generic Driver Options
- CONFIG_DRIVER_DEFERRED_PROBE_TIMEOUT=10
- fwctl device firmware access framework
- CONFIG_FWCTL_BNXT=m
- Memory Technology Device (MTD) support
- Partition parsers
- CONFIG_MTD_VIRT_CONCAT=y
- Misc devices
- EEPROM support
- CONFIG_INTEL_MEI_CSC=m
- Pin controllers
- CONFIG_PINCTRL_STMFX=m
- GPIO Support
- Memory mapped GPIO drivers
- CONFIG_GPIO_BY_PINCTRL=m
- Port-mapped I/O GPIO drivers
- CONFIG_GPIO_NOVALAKE=m
- Power supply class support
- CONFIG_BATTERY_S2MU005=m
- Hardware Monitoring support
- CONFIG_SENSORS_GPIO_FAN=m
- CONFIG_SENSORS_LATTEPANDA_SIGMA_EC=m
- CONFIG_SENSORS_MCP9982=m
- PMBus support
- CONFIG_SENSORS_APS_379=m
- CONFIG_SENSORS_XDP720=m
- CONFIG_SENSORS_XDPE1A2G7B=m
- CONFIG_SENSORS_YOGAFAN=m
- Multimedia support
- Media ancillary drivers
- Camera sensor devices
- CONFIG_VIDEO_T4KA3=m
- Graphics support
- Direct Rendering Manager (XFree86 4.1.0 and higher DRI support)
- CONFIG_DRM_RAS=y
- Drivers for system framebuffers
- CONFIG_DRM_COREBOOTDRM=m
- Sound card support
- Advanced Linux Sound Architecture
- ALSA for SoC audio support
- CODEC drivers
- CS35L56 driver options
- CONFIG_SND_SOC_CS35L56_CAL_PERFORM_CTRL=n
- CONFIG_SND_SOC_UDA1380=m
- HID bus support
- Special HID drivers
- CONFIG_HID_LENOVO_GO=m
- CONFIG_HID_LENOVO_GO_S=m
- CONFIG_HID_HUAWEI=m
- DMA Engine support
- CONFIG_SWITCHTEC_DMA=m
- X86 Platform Specific Device Drivers
- CONFIG_BITLAND_MIFS_WMI=m
- Generic Radix Page Table
- CONFIG_IOMMU_PT_RISCV64=n
- Industrial I/O support
- Analog to digital converters
- CONFIG_QCOM_SPMI_ADC5_GEN3=n
- Proximity and distance sensors
- CONFIG_VL53L1X_I2C=n
- CONFIG_MUX_CORE=y
- File systems
- DOS/FAT/EXFAT/NT Filesystems
- CONFIG_NTFS_FS=n
- CONFIG_NTFS_DEBUG=n
- CONFIG_NTFS_FS_POSIX_ACL=n
- Cryptographic API
- Hashes, digests, and MACs
- CONFIG_CRYPTO_SM3=m
- Kernel hacking
- Tracers
- CONFIG_TRACE_REMOTE_TEST=n
- Kernel Testing and Coverage
- Runtime Testing
- CONFIG_TEST_WORKQUEUE=n
- other architectures (OF-based options)
- VIDEO_OV2732=m
- DRM_LONTIUM_LT8713SX=n
- DRM_PANEL_HIMAX_HX83121A=n
- DRM_PANEL_ILITEK_ILI9806E_DSI=n
- DRM_PANEL_ILITEK_ILI9806E_SPI=n
- DRM_PANEL_LXD_M9189A=n
- DRM_PANEL_MOTOROLA_MOT=n
- DRM_PANEL_NOVATEK_NT37700F=n
- DRM_PANEL_SAMSUNG_S6E8FC0=n
- x86_64 options
- PINCTRL_STMFX=n
- ppc64le options
- HSA_AMD_P2P=y
- s390x options
- ISM_VFIO_PCI=m
- PAGE_TABLE_CHECK=y
- PAGE_TABLE_CHECK_ENFORCED=n
- riscv64 options
- PCIE_ANDES_QILAI=m
- PCIE_ESWIN=m
- DWMAC_SPACEMIT=m
- MDIO_PIC64HPSC=m
- POWER_RESET_QEMU_VIRT_CTRL=m
- HSA_AMD_P2P=y
- DRM_THEAD_TH1520_DW_HDMI=m
- DRM_DW_HDMI_AHB_AUDIO=n
- DRM_DW_HDMI_I2S_AUDIO=n
- DRM_DW_HDMI_GP_AUDIO=n
- DRM_DW_HDMI_CEC=n
- DRM_VERISILICON_DC=m
- COMMON_CLK_EIC7700=m
- TENSTORRENT_ATLANTIS_PRCM=m
- DEBUG_GENERIC_PT=n
- IOMMU_PT_AMDV1=n
- IOMMU_PT_VTDSS=n
- IOMMU_PT_RISCV64=y
- IOMMU_PT_X86_64=n
- POLARFIRE_SOC_IRQ_MUX=y
- RESET_TENSTORRENT_ATLANTIS=m
- PHY_EIC7700_SATA=m
- commit 4ffd344
* Sun Apr 26 2026 jslaby@suse.cz
- Refresh
patches.suse/mfd-bcm2835-pm-Add-BCM2712-PM-device-support.patch.
- Refresh
patches.suse/mfd-bcm2835-pm-Introduce-SoC-specific-type-identifier.patch.
- Refresh
patches.suse/writeback-Fix-use-after-free-in-inode_switch_wbs_wor.patch.
Update upstream status.
- commit 8e3001e
* Thu Apr 23 2026 pfalcato@suse.de
- Re-enable ARM architectures and update configs
Rather late (well, that's an understatement) but better than never.
- commit 46dfbfa
* Thu Apr 23 2026 jslaby@suse.cz
- Update config files. Set INTEL_IOMMU_SCALABLE_MODE_DEFAULT_ON=y (bsc#1262308)
The same as for SL-16.*.
- commit ccbbbdf
* Thu Apr 23 2026 jslaby@suse.cz
- Linux 7.0.1 (bsc#1012628).
- clockevents: Add missing resets of the next_event_forced flag
(bsc#1012628).
- mm/userfaultfd: fix hugetlb fault mutex hash calculation
(bsc#1012628).
- media: hackrf: fix to not free memory after the device is
registered in hackrf_probe() (bsc#1012628).
- media: vidtv: fix pass-by-value structs causing MSAN warnings
(bsc#1012628).
- nilfs2: fix NULL i_assoc_inode dereference in
nilfs_mdt_save_to_shadow_map (bsc#1012628).
- media: as102: fix to not free memory after the device is
registered in as102_usb_probe() (bsc#1012628).
- wireguard: device: use exit_rtnl callback instead of manual
rtnl_lock in pre_exit (bsc#1012628).
- bcache: fix cached_dev.sb_bio use-after-free and crash
(bsc#1012628).
- ALSA: 6fire: fix use-after-free on disconnect (bsc#1012628).
- hwmon: (powerz) Fix use-after-free on USB disconnect
(bsc#1012628).
- media: em28xx: fix use-after-free in em28xx_v4l2_open()
(bsc#1012628).
- media: mediatek: vcodec: fix use-after-free in encoder release
path (bsc#1012628).
- media: vidtv: fix nfeeds state corruption on start_streaming
failure (bsc#1012628).
- mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
(bsc#1012628).
- mm/kasan: fix double free for kasan pXds (bsc#1012628).
- ASoC: qcom: q6apm: move component registration to unmanaged
version (bsc#1012628).
- KVM: x86: Use scratch field in MMIO fragment to hold small
write values (bsc#1012628).
- x86-64/arm64/powerpc: clean up and rename
__copy_from_user_flushcache (bsc#1012628).
- x86: rename and clean up __copy_from_user_inatomic_nocache()
(bsc#1012628).
- x86-64: rename misleadingly named '__copy_user_nocache()'
function (bsc#1012628).
- checkpatch: add support for Assisted-by tag (bsc#1012628).
- mm: call ->free_folio() directly in folio_unmap_invalidate()
(bsc#1012628).
- KVM: SEV: Drop WARN on large size for
KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1012628).
- KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch
finish (bsc#1012628).
- KVM: SEV: Disallow LAUNCH_FINISH if vCPUs are actively being
created (bsc#1012628).
- KVM: SEV: Protect *all* of sev_mem_enc_register_region()
with kvm->lock (bsc#1012628).
- KVM: SEV: Reject attempts to sync VMSA of an
already-launched/encrypted vCPU (bsc#1012628).
- KVM: selftests: Remove duplicate LAUNCH_UPDATE_VMSA call in
SEV-ES migrate test (bsc#1012628).
- PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown
(bsc#1012628).
- PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in
epf_ntb_epc_cleanup (bsc#1012628).
- ocfs2: handle invalid dinode in ocfs2_group_extend
(bsc#1012628).
- ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY
(bsc#1012628).
- ocfs2: fix possible deadlock between unlink and dio_end_io_write
(bsc#1012628).
- media: vidtv: fix NULL pointer dereference in
vidtv_channel_pmt_match_sections (bsc#1012628).
- arm64: mm: Handle invalid large leaf mappings correctly
(bsc#1012628).
- vfio/xe: Reorganize the init to decouple migration from reset
(bsc#1012628).
- dcache: Limit the minimal number of bucket to two (bsc#1012628).
- ALSA: ctxfi: Limit PTP to a single page (bsc#1012628).
- Docs/admin-guide/mm/damon/lru_sort: warn commit_inputs vs
param updates race (bsc#1012628).
- Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param
updates race (bsc#1012628).
- USB: serial: option: add Telit Cinterion FN990A MBIM composition
(bsc#1012628).
- selftests/mm: hmm-tests: don't hardcode THP size to 2MB
(bsc#1012628).
- staging: sm750fb: fix division by zero in ps_to_hz()
(bsc#1012628).
- wifi: rtw88: fix device leak on probe failure (bsc#1012628).
- scripts: generate_rust_analyzer.py: avoid FD leak (bsc#1012628).
- scripts/gdb/symbols: handle module path parameters
(bsc#1012628).
- fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
(bsc#1012628).
- usb: port: add delay after usb_hub_set_port_power()
(bsc#1012628).
- usb: gadget: f_hid: don't call cdev_init while cdev in use
(bsc#1012628).
- USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC
touchscreen (bsc#1012628).
- usb: storage: Expand range of matched versions for VL817 quirks
entry (bsc#1012628).
- usb: typec: fusb302: Switch to threaded IRQ handler
(bsc#1012628).
- usbip: validate number_of_packets in usbip_pack_ret_submit()
(bsc#1012628).
- smb: server: avoid double-free in smb_direct_free_sendmsg
after smb_direct_flush_send_list() (bsc#1012628).
- smb: client: avoid double-free in smbd_free_send_io() after
smbd_send_batch_flush() (bsc#1012628).
- ksmbd: fix mechToken leak when SPNEGO decode fails after token
alloc (bsc#1012628).
- ksmbd: require 3 sub-authorities before reading sub_auth[2]
(bsc#1012628).
- ksmbd: validate EaNameLength in smb2_get_ea() (bsc#1012628).
- smb: client: fix OOB reads parsing symlink error response
(bsc#1012628).
- smb: client: fix off-by-8 bounds check in check_wsl_eas()
(bsc#1012628).
- usb: gadget: renesas_usb3: validate endpoint index in standard
request handlers (bsc#1012628).
- usb: gadget: f_phonet: fix skb frags[] overflow in
pn_rx_complete() (bsc#1012628).
- usb: gadget: f_ncm: validate minimum block_len in
ncm_unwrap_ntb() (bsc#1012628).
- fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
(bsc#1012628).
- ALSA: fireworks: bound device-supplied status before string
array lookup (bsc#1012628).
- ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0
(bsc#1012628).
- bnge: return after auxiliary_device_uninit() in error path
(bsc#1012628).
- drm/vc4: platform_get_irq_byname() returns an int (bsc#1012628).
- NFC: digital: Bounds check NFC-A cascade depth in SDD response
handler (bsc#1012628).
- net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()
(bsc#1012628).
- HID: core: clamp report_size in s32ton() to avoid undefined
shift (bsc#1012628).
- HID: alps: fix NULL pointer dereference in alps_raw_event()
(bsc#1012628).
- staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()
(bsc#1012628).
- i2c: s3c24xx: check the size of the SMBUS message before using
it (bsc#1012628).
- can: raw: fix ro->uniq use-after-free in raw_rcv()
(bsc#1012628).
- x86/CPU: Fix FPDSS on Zen1 (bsc#1012628).
- nfc: llcp: add missing return after LLCP_CLOSED checks
(bsc#1012628).
- commit a523726
* Mon Apr 20 2026 jslaby@suse.cz
- usb: gadget: f_hid: Add missing error code (git-fixes).
- bcache: fix uninitialized closure object (git-fixes).
- commit dbb12f6
* Mon Apr 20 2026 jslaby@suse.cz
- Update config files. Enable TPS68470 drivers (bsc#1261843)
- commit 9e15f59
* Fri Apr 17 2026 tiwai@suse.de
- Update config files: (re-)enable CONFIG_TN3270*=y (bsc#1243081)
- commit a9c6a75
* Fri Apr 17 2026 jslaby@suse.cz
- writeback: Fix use after free in inode_switch_wbs_work_fn()
(bsc#1259701).
- commit 5021f62
* Thu Apr 16 2026 msuchanek@suse.de
- check-for-config-changes: Exclude CC_MS_EXTENSIONS
- commit c04d7e7
* Mon Apr 13 2026 msuchanek@suse.de
- check-for-config-changes: Exclude HAVE_CFI_ICALL_NORMALIZE_INTEGERS{,_RUSTC}
- commit ba5597d
* Mon Apr 13 2026 jslaby@suse.cz
- Refresh
patches.suse/selftests-bpf-Support-when-CONFIG_VXLAN-m.patch.
Fix upstream status.
- commit 9f6830f
* Mon Apr 13 2026 jslaby@suse.cz
- Delete
patches.suse/locking-qspinlock-Save-previous-node-owner-CPU-into-.patch.
This was a debugging aid for bsc#1258936. It is no longer needed.
- commit e54d311
* Mon Apr 13 2026 pfalcato@suse.de
- update to 7.0 final
- refresh configs
- rebase patch patches.suse/vfs-add-super_operations-get_inode_dev
- commit 5844293
* Sun Apr 12 2026 jslaby@suse.cz
- usb: typec: ucsi: skip connector validation before init
(git-fixes).
- commit c7234f7
* Sat Apr 11 2026 jslaby@suse.cz
- Linux 6.19.12 (bsc#1012628).
- drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid
for smu v13 (bsc#1012628).
- net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback
(bsc#1012628).
- net: mana: fix use-after-free in add_adev() error path
(bsc#1012628).
- scsi: target: file: Use kzalloc_flex for aio_cmd (bsc#1012628).
- scsi: target: tcm_loop: Drain commands in target_reset handler
(bsc#1012628).
- xfs: only assert new size for datafork during truncate extents
(bsc#1012628).
- xfs: factor out xfs_attr3_node_entry_remove (bsc#1012628).
- xfs: factor out xfs_attr3_leaf_init (bsc#1012628).
- xfs: close crash window in attr dabtree inactivation
(bsc#1012628).
- arm64/scs: Fix handling of advance_loc4 (bsc#1012628).
- HID: logitech-hidpp: Enable MX Master 4 over bluetooth
(bsc#1012628).
- wifi: mac80211: check tdls flag in ieee80211_tdls_oper
(bsc#1012628).
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq
(bsc#1012628).
- atm: lec: fix use-after-free in sock_def_readable()
(bsc#1012628).
- btrfs: don't take device_list_mutex when querying zone info
(bsc#1012628).
- tg3: replace placeholder MAC address with device property
(bsc#1012628).
- objtool: Fix Clang jump table detection (bsc#1012628).
- HID: logitech-hidpp: Prevent use-after-free on force feedback
initialisation failure (bsc#1012628).
- HID: core: Mitigate potential OOB by removing bogus memset()
(bsc#1012628).
- objtool/klp: fix mkstemp() failure with long paths
(bsc#1012628).
- HID: multitouch: Check to ensure report responses match the
request (bsc#1012628).
- btrfs: reserve enough transaction items for qgroup ioctls
(bsc#1012628).
- i2c: tegra: Don't mark devices with pins as IRQ safe
(bsc#1012628).
- btrfs: reject root items with drop_progress and zero drop_level
(bsc#1012628).
- drm/amd/display: Fix gamma 2.2 colorop TFs (bsc#1012628).
- smb: client: fix generic/694 due to wrong ->i_blocks
(bsc#1012628).
- spi: geni-qcom: Check DMA interrupts early in ISR (bsc#1012628).
- mshv: Fix error handling in mshv_region_pin (bsc#1012628).
- dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties
to fix common property warning (bsc#1012628).
- wifi: iwlwifi: mld: Fix MLO scan timing (bsc#1012628).
- wifi: iwlwifi: mvm: don't send a 6E related command when not
supported (bsc#1012628).
- wifi: iwlwifi: mld: correctly set wifi generation data
(bsc#1012628).
- wifi: ath11k: Pass the correct value of each TID during a stop
AMPDU session (bsc#1012628).
- cgroup: Wait for dying tasks to leave on rmdir (bsc#1012628).
- selftests/cgroup: Don't require synchronous populated update
on task exit (bsc#1012628).
- cgroup: Fix cgroup_drain_dying() testing the wrong condition
(bsc#1012628).
- crypto: caam - fix DMA corruption on long hmac keys
(bsc#1012628).
- crypto: caam - fix overflow on long hmac keys (bsc#1012628).
- crypto: deflate - fix spurious -ENOSPC (bsc#1012628).
- crypto: af-alg - fix NULL pointer dereference in scatterwalk
(bsc#1012628).
- mpls: add seqcount to protect the platform_label{,s} pair
(bsc#1012628).
- net: mana: Fix RX skb truesize accounting (bsc#1012628).
- netdevsim: fix build if SKB_EXTENSIONS=n (bsc#1012628).
- net: fec: fix the PTP periodic output sysfs interface
(bsc#1012628).
- net: enetc: reset PIR and CIR if they are not equal when
initializing TX ring (bsc#1012628).
- net: enetc: add graceful stop to safely reinitialize the TX Ring
(bsc#1012628).
- net: enetc: do not access non-existent registers on pseudo MAC
(bsc#1012628).
- net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix
memory leak (bsc#1012628).
- net: ipv6: ndisc: fix ndisc_ra_useropt to initialize
nduseropt_padX fields to zero to prevent an info-leak
(bsc#1012628).
- iommupt/amdv1: mark amdv1pt_install_leaf_entry as
__always_inline (bsc#1012628).
- net/ipv6: ioam6: prevent schema length wraparound in trace fill
(bsc#1012628).
- tg3: Fix race for querying speed/duplex (bsc#1012628).
- net: ti: icssg-prueth: fix missing data copy and wrong recycle
in ZC RX dispatch (bsc#1012628).
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
(bsc#1012628).
- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1012628).
- eth: fbnic: Account for page fragments when updating BDQ tail
(bsc#1012628).
- bridge: br_nd_send: linearize skb before parsing ND options
(bsc#1012628).
- net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
(bsc#1012628).
- net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta
(bsc#1012628).
- net: enetc: check whether the RSS algorithm is Toeplitz
(bsc#1012628).
- net: enetc: do not allow VF to configure the RSS key
(bsc#1012628).
- ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from
SKIP_IFACE_SETUP (bsc#1012628).
- ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add
rollback on failure (bsc#1012628).
- ipv6: prevent possible UaF in addrconf_permanent_addr()
(bsc#1012628).
- net: airoha: Add missing cleanup bits in
airoha_qdma_cleanup_rx_queue() (bsc#1012628).
- net: introduce mangleid_features (bsc#1012628).
- net: use skb_header_pointer() for TCPv4 GSO frag_off check
(bsc#1012628).
- net: sched: cls_api: fix tc_chain_fill_node to initialize
tcm_info to zero to prevent an info-leak (bsc#1012628).
- bnxt_en: set backing store type from query type (bsc#1012628).
- crypto: algif_aead - Revert to operating out-of-place
(bsc#1012628).
- crypto: authencesn - Do not place hiseq at end of dst for
out-of-place decryption (bsc#1012628).
- net: bonding: fix use-after-free in bond_xmit_broadcast()
(bsc#1012628).
- NFC: pn533: bound the UART receive buffer (bsc#1012628).
- net: xilinx: axienet: Correct BD length masks to match AXIDMA
IP spec (bsc#1012628).
- net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets
(bsc#1012628).
- ASoC: Intel: boards: fix unmet dependency on PINCTRL
(bsc#1012628).
- bridge: mrp: reject zero test interval to avoid OOM panic
(bsc#1012628).
- bpf: Fix regsafe() for pointers to packet (bsc#1012628).
- net: ipv6: flowlabel: defer exclusive option free until RCU
teardown (bsc#1012628).
- mptcp: add eat_recv_skb helper (bsc#1012628).
- mptcp: fix soft lockup in mptcp_recvmsg() (bsc#1012628).
- net: stmmac: skip VLAN restore when VLAN hash ops are missing
(bsc#1012628).
- ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from
SKIP_IFACE_SETUP (bsc#1012628).
- netfilter: flowtable: strictly check for maximum number of
actions (bsc#1012628).
- netfilter: nfnetlink_log: account for netlink header size
(bsc#1012628).
- netfilter: x_tables: ensure names are nul-terminated
(bsc#1012628).
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr
(bsc#1012628).
- netfilter: nf_conntrack_helper: pass helper to expect cleanup
(bsc#1012628).
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT
absent (bsc#1012628).
- netfilter: nf_conntrack_expect: honor expectation helper field
(bsc#1012628).
- netfilter: nf_conntrack_expect: use expect->helper
(bsc#1012628).
- netfilter: nf_conntrack_expect: store netns and zone in
expectation (bsc#1012628).
- netfilter: ctnetlink: ignore explicit helper on new expectations
(bsc#1012628).
- netfilter: x_tables: restrict xt_check_match/xt_check_target
extensions for NFPROTO_ARP (bsc#1012628).
- netfilter: nf_tables: reject immediate NF_QUEUE verdict
(bsc#1012628).
- Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if
immediate (bsc#1012628).
- Bluetooth: SCO: fix race conditions in sco_sock_connect()
(bsc#1012628).
- Bluetooth: L2CAP: Add support for setting BT_PHY (bsc#1012628).
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST
if exists (bsc#1012628).
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once
fails (bsc#1012628).
- Bluetooth: hci_sync: Fix UAF in le_read_features_complete
(bsc#1012628).
- Bluetooth: hci_h4: Fix race during initialization (bsc#1012628).
- Bluetooth: MGMT: validate LTK enc_size on load (bsc#1012628).
- Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
(bsc#1012628).
- Bluetooth: hci_event: fix potential UAF in
hci_le_remote_conn_param_req_evt (bsc#1012628).
- Bluetooth: MGMT: validate mesh send advertising payload length
(bsc#1012628).
- rds: ib: reject FRMR registration before IB connection is
established (bsc#1012628).
- bpf: sockmap: Fix use-after-free of sk->sk_socket in
sk_psock_verdict_data_ready() (bsc#1012628).
- net/sched: sch_netem: fix out-of-bounds access in packet
corruption (bsc#1012628).
- net: macb: fix clk handling on PCI glue driver removal
(bsc#1012628).
- net: macb: properly unregister fixed rate clocks (bsc#1012628).
- net/mlx5: lag: Check for LAG device before creating debugfs
(bsc#1012628).
- net/mlx5: Avoid "No data available" when FW version queries fail
(bsc#1012628).
- net/mlx5: Fix switchdev mode rollback in case of failure
(bsc#1012628).
- bnxt_en: Refactor some basic ring setup and adjustment logic
(bsc#1012628).
- bnxt_en: Don't assume XDP is never enabled in
bnxt_init_dflt_ring_mode() (bsc#1012628).
- bnxt_en: Restore default stat ctxs for ULP when resource is
available (bsc#1012628).
- net/x25: Fix potential double free of skb (bsc#1012628).
- net/x25: Fix overflow when accumulating packets (bsc#1012628).
- net/sched: cls_fw: fix NULL pointer dereference on shared blocks
(bsc#1012628).
- net/sched: cls_flow: fix NULL pointer dereference on shared
blocks (bsc#1012628).
- net: hsr: fix VLAN add unwind on slave errors (bsc#1012628).
- ipv6: avoid overflows in ip6_datagram_send_ctl() (bsc#1012628).
- eth: fbnic: Increase FBNIC_QUEUE_SIZE_MIN to 64 (bsc#1012628).
- bpf: reject direct access to nullable PTR_TO_BUF pointers
(bsc#1012628).
- bpf: Reject sleepable kprobe_multi programs at attach time
(bsc#1012628).
- bpf: Fix incorrect pruning due to atomic fetch precision
tracking (bsc#1012628).
- Revert "drm: Fix use-after-free on framebuffers and property
blobs when calling drm_dev_unplug" (bsc#1012628).
- iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one
(bsc#1012628).
- gpiolib: clear requested flag if line is invalid (bsc#1012628).
- interconnect: qcom: sm8450: Fix NULL pointer dereference in
icc_link_nodes() (bsc#1012628).
- gpio: shared: call gpio_chip::of_xlate() if set (bsc#1012628).
- gpio: shared: handle pins shared by child nodes of devices
(bsc#1012628).
- gpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio()
(bsc#1012628).
- drm/bridge: Fix refcount shown via debugfs for
encoder_bridges_show() (bsc#1012628).
- accel/qaic: Handle DBC deactivation if the owner went away
(bsc#1012628).
- io_uring/rsrc: reject zero-length fixed buffer import
(bsc#1012628).
- hwmon: (tps53679) Fix array access with zero-length block read
(bsc#1012628).
- hwmon: (pxe1610) Check return value of page-select write in
probe (bsc#1012628).
- hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS")
(bsc#1012628).
- gpio: shared: shorten the critical section in
gpiochip_setup_shared() (bsc#1012628).
- dt-bindings: gpio: fix microchip #interrupt-cells (bsc#1012628).
- spi: stm32-ospi: Fix resource leak in remove() callback
(bsc#1012628).
- spi: stm32-ospi: Fix reset control leak on probe error
(bsc#1012628).
- drm/xe/xe_pagefault: Disallow writes to read-only VMAs
(bsc#1012628).
- drm/xe/pxp: Clean up termination status on failure
(bsc#1012628).
- drm/xe/pxp: Remove incorrect handling of impossible state
during suspend (bsc#1012628).
- drm/xe/pxp: Clear restart flag in pxp_start after jumping back
(bsc#1012628).
- hwmon: (tps53679) Fix device ID comparison and printing in
tps53676_identify() (bsc#1012628).
- spi: amlogic: spifc-a4: unregister ECC engine on probe failure
and remove() callback (bsc#1012628).
- hwmon: (occ) Fix missing newline in occ_show_extended()
(bsc#1012628).
- irqchip/riscv-aplic: Restrict genpd notifier to device tree only
(bsc#1012628).
- drm/sysfb: Fix efidrm error handling and memory type mismatch
(bsc#1012628).
- hwmon: (asus-ec-sensors) Fix T_Sensor for PRIME X670E-PRO WIFI
(bsc#1012628).
- mips: ralink: update CPU clock index (bsc#1012628).
- sched/fair: Fix zero_vruntime tracking fix (bsc#1012628).
- sched/debug: Fix avg_vruntime() usage (bsc#1012628).
- perf/x86: Fix potential bad container_of in intel_pmu_hw_config
(bsc#1012628).
- riscv: kgdb: fix several debug register assignment bugs
(bsc#1012628).
- riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set
(bsc#1012628).
- ACPI: RIMT: Add dependency between iommu and devices
(bsc#1012628).
- drm/ioc32: stop speculation on the drm_compat_ioctl path
(bsc#1012628).
- rust_binder: use AssertSync for BINDER_VM_OPS (bsc#1012628).
- wifi: wilc1000: fix u8 overflow in SSID scan buffer size
calculation (bsc#1012628).
- wifi: iwlwifi: mvm: fix potential out-of-bounds read in
iwl_mvm_nd_match_info_handler() (bsc#1012628).
- USB: serial: option: add MeiG Smart SRM825WN (bsc#1012628).
- drm/amd/display: Fix NULL pointer dereference in
dcn401_init_hw() (bsc#1012628).
- sched_ext: Fix inconsistent NUMA node lookup in
scx_select_cpu_dfl() (bsc#1012628).
- lib/crypto: chacha: Zeroize permuted_state before it leaves
scope (bsc#1012628).
- sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to
balance callback (bsc#1012628).
- ALSA: caiaq: fix stack out-of-bounds read in init_card
(bsc#1012628).
- ALSA: hda/realtek: add quirk for Acer Swift SFG14-73
(bsc#1012628).
- ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15
(bsc#1012628).
- ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxx
(bsc#1012628).
- ALSA: hda/realtek: change quirk for HP OmniBook 7 Laptop
16-bh0xxx (bsc#1012628).
- io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()
(bsc#1012628).
- Bluetooth: SMP: derive legacy responder STK authentication
from MITM state (bsc#1012628).
- Bluetooth: SMP: force responder MITM requirements before
building the pairing response (bsc#1012628).
- Bluetooth: hci_sync: fix stack buffer overflow in
hci_le_big_create_sync (bsc#1012628).
- Bluetooth: hci_event: move wake reason storage into validated
event handlers (bsc#1012628).
- ksmbd: fix OOB write in QUERY_INFO for compound requests
(bsc#1012628).
- MIPS: SiByte: Bring back cache initialisation (bsc#1012628).
- MIPS: Fix the GCC version check for `__multi3' workaround
(bsc#1012628).
- hwmon: (occ) Fix division by zero in occ_show_power_1()
(bsc#1012628).
- mips: mm: Allocate tlb_vpn array atomically (bsc#1012628).
- x86/kexec: Disable KCOV instrumentation after load_segments()
(bsc#1012628).
- drm/amdgpu: fix the idr allocation flags (bsc#1012628).
- gpib: fix use-after-free in IO ioctl handlers (bsc#1012628).
- iio: add IIO_DECLARE_QUATERNION() macro (bsc#1012628).
- iio: orientation: hid-sensor-rotation: fix quaternion alignment
(bsc#1012628).
- iio: orientation: hid-sensor-rotation: add timestamp hack to
not break userspace (bsc#1012628).
- iio: adc: ti-adc161s626: fix buffer read on big-endian
(bsc#1012628).
- iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()
(bsc#1012628).
- iio: adc: ti-ads1119: Fix unbalanced pm reference count in
ds1119_single_conversion() (bsc#1012628).
- iio: adc: ti-ads1119: Reinit completion before
wait_for_completion_timeout() (bsc#1012628).
- iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD
(bsc#1012628).
- drm/ast: dp501: Fix initialization of SCU2C (bsc#1012628).
- drm/i915/dsi: Don't do DSC horizontal timing adjustments in
command mode (bsc#1012628).
- drm/i915/dp: Use crtc_state->enhanced_framing properly on
ivb/hsw CPU eDP (bsc#1012628).
- drm/i915/cdclk: Do the full CDCLK dance for min_voltage_level
changes (bsc#1012628).
- drm/amdgpu: Fix wait after reset sequence in S4 (bsc#1012628).
- drm/amdgpu: validate doorbell_offset in user queue creation
(bsc#1012628).
- drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB
(bsc#1012628).
- drm/amdgpu/pm: drop SMU driver if version not matched messages
(bsc#1012628).
- USB: serial: io_edgeport: add support for Blackbox IC135A
(bsc#1012628).
- USB: serial: option: add support for Rolling Wireless RW135R-GL
(bsc#1012628).
- USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam
(bsc#1012628).
- Input: synaptics-rmi4 - fix a locking bug in an error path
(bsc#1012628).
- Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to
i8042 quirk table (bsc#1012628).
- Input: bcm5974 - recover from failed mode switch (bsc#1012628).
- Input: xpad - add support for BETOP BTP-KP50B/C controller's
wireless mode (bsc#1012628).
- Input: xpad - add support for Razer Wolverine V3 Pro
(bsc#1012628).
- iio: adc: ti-ads7950: normalize return value of gpio_get
(bsc#1012628).
- iio: adc: ti-ads7950: do not clobber gpio state in
ti_ads7950_get() (bsc#1012628).
- iio: adc: ade9000: fix wrong return type in streaming push
(bsc#1012628).
- iio: adc: ade9000: fix wrong register in CALIBBIAS case for
active power (bsc#1012628).
- iio: adc: ade9000: move mutex init before IRQ registration
(bsc#1012628).
- iio: adc: aspeed: clear reference voltage bits before
configuring vref (bsc#1012628).
- iio: accel: fix ADXL355 temperature signature value
(bsc#1012628).
- iio: accel: adxl380: fix FIFO watermark bit 8 always written
as 0 (bsc#1012628).
- iio: accel: adxl313: add missing error check in predisable
(bsc#1012628).
- iio: dac: ad5770r: fix error return in ad5770r_read_raw()
(bsc#1012628).
- iio: imu: adis16550: fix swapped gyro/accel filter functions
(bsc#1012628).
- iio: light: vcnl4035: fix scan buffer on big-endian
(bsc#1012628).
- iio: light: veml6070: fix veml6070_read() return value
(bsc#1012628).
- iio: imu: bmi160: Remove potential undefined behavior in
bmi160_config_pin() (bsc#1012628).
- iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and
gyroscope only (bsc#1012628).
- iio: imu: st_lsm6dsx: Set buffer sampling frequency for
accelerometer only (bsc#1012628).
- iio: gyro: mpu3050: Fix incorrect free_irq() variable
(bsc#1012628).
- iio: gyro: mpu3050: Fix irq resource leak (bsc#1012628).
- iio: gyro: mpu3050: Move iio_device_register() to correct
location (bsc#1012628).
- iio: gyro: mpu3050: Fix out-of-sequence free_irq()
(bsc#1012628).
- mei: me: reduce the scope on unexpected reset (bsc#1012628).
- gpib: lpvo_usb: fix memory leak on disconnect (bsc#1012628).
- usb: quirks: add DELAY_INIT quirk for another Silicon Motion
flash drive (bsc#1012628).
- usb: ulpi: fix double free in ulpi_register_interface() error
path (bsc#1012628).
- usb: usbtmc: Flush anchored URBs in usbtmc_release
(bsc#1012628).
- usb: misc: usbio: Fix URB memory leak on submit failure
(bsc#1012628).
- usb: host: xhci-sideband: delegate offload_usage tracking to
class drivers (bsc#1012628).
- usb: ehci-brcm: fix sleep during atomic (bsc#1012628).
- usb: dwc2: gadget: Fix spin_lock/unlock mismatch in
dwc2_hsotg_udc_stop() (bsc#1012628).
- usb: core: phy: avoid double use of 'usb3-phy' (bsc#1012628).
- usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
(bsc#1012628).
- usb: cdns3: gadget: fix state inconsistency on gadget init
failure (bsc#1012628).
- usb: core: use dedicated spinlock for offload state
(bsc#1012628).
- io_uring: protect remaining lockless ctx->rings accesses with
RCU (bsc#1012628).
- auxdisplay: line-display: fix NULL dereference in
linedisp_release (bsc#1012628).
- bridge: br_nd_send: validate ND option lengths (bsc#1012628).
- cdc-acm: new quirk for EPSON HMD (bsc#1012628).
- comedi: dt2815: add hardware detection to prevent crash
(bsc#1012628).
- comedi: runflags cannot determine whether to reclaim chanlist
(bsc#1012628).
- comedi: Reinit dev->spinlock between attachments to low-level
drivers (bsc#1012628).
- comedi: ni_atmio16d: Fix invalid clean-up after failed attach
(bsc#1012628).
- comedi: me_daq: Fix potential overrun of firmware buffer
(bsc#1012628).
- comedi: me4000: Fix potential overrun of firmware buffer
(bsc#1012628).
- firmware: microchip: fail auto-update probe if no flash found
(bsc#1012628).
- dt-bindings: connector: add pd-disable dependency (bsc#1012628).
- spi: cadence-qspi: Fix exec_mem_op error handling (bsc#1012628).
- s390/zcrypt: Fix memory leak with CCA cards used as accelerator
(bsc#1012628).
- s390/cpum_sf: Cap sampling rate to prevent lsctl exception
(bsc#1012628).
- reset: gpio: fix double free in reset_add_gpio_aux_device()
error path (bsc#1012628).
- PM: EM: Fix NULL pointer dereference when perf domain ID is
not found (bsc#1012628).
- nvmem: imx: assign nvmem_cell_info::raw_len (bsc#1012628).
- nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy
(bsc#1012628).
- netfilter: ipset: drop logically empty buckets in mtype_del
(bsc#1012628).
- gpib: Fix fluke driver s390 compile issue (bsc#1012628).
- vt: discard stale unicode buffer on alt screen exit after resize
(bsc#1012628).
- vt: resize saved unicode buffer on alt screen exit after resize
(bsc#1012628).
- counter: rz-mtu3-cnt: prevent counter from being toggled
multiple times (bsc#1012628).
- counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev
member (bsc#1012628).
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (bsc#1012628).
- vxlan: validate ND option lengths in vxlan_na_create
(bsc#1012628).
- net: ftgmac100: fix ring allocation unwind on open failure
(bsc#1012628).
- net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled
(bsc#1012628).
- iommupt: Fix short gather if the unmap goes into a large mapping
(bsc#1012628).
- virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN
(bsc#1012628).
- cpufreq: governor: fix double free in
cpufreq_dbs_governor_init() error path (bsc#1012628).
- sched_ext: Fix is_bpf_migration_disabled() false negative on
non-PREEMPT_RCU (bsc#1012628).
- sched_ext: Fix stale direct dispatch state in ddsp_dsq_id
(bsc#1012628).
- gpio: mxc: map Both Edge pad wakeup to Rising Edge
(bsc#1012628).
- gpio: Fix resource leaks on errors in
gpiochip_add_data_with_key() (bsc#1012628).
- thermal: core: Address thermal zone removal races with resume
(bsc#1012628).
- thermal: core: Fix thermal zone device registration error path
(bsc#1012628).
- misc: fastrpc: possible double-free of cctx->remote_heap
(bsc#1012628).
- misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe
(bsc#1012628).
- usb: typec: thunderbolt: Set enter_vdo during initialization
(bsc#1012628).
- thunderbolt: Fix property read in nhi_wake_supported()
(bsc#1012628).
- USB: dummy-hcd: Fix locking/synchronization error (bsc#1012628).
- USB: dummy-hcd: Fix interrupt synchronization error
(bsc#1012628).
- usb: gadget: dummy_hcd: fix premature URB completion when ZLP
follows partial transfer (bsc#1012628).
- usb: typec: ucsi: validate connector number in
ucsi_notify_common() (bsc#1012628).
- HID: appletb-kbd: add .resume method in PM (bsc#1012628).
- usb: gadget: u_ether: Fix race between gether_disconnect and
eth_stop (bsc#1012628).
- usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo
(bsc#1012628).
- usb: gadget: uvc: fix NULL pointer dereference during unbind
race (bsc#1012628).
- usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
(bsc#1012628).
- usb: gadget: f_rndis: Protect RNDIS options with mutex
(bsc#1012628).
- usb: gadget: f_ecm: Fix net_device lifecycle with device_move
(bsc#1012628).
- usb: gadget: f_eem: Fix net_device lifecycle with device_move
(bsc#1012628).
- usb: gadget: f_subset: Fix net_device lifecycle with device_move
(bsc#1012628).
- usb: gadget: f_rndis: Fix net_device lifecycle with device_move
(bsc#1012628).
- usb: gadget: f_hid: move list and spinlock inits from bind to
alloc (bsc#1012628).
- usb: gadget: f_uac1_legacy: validate control request size
(bsc#1012628).
- kallsyms: clean up @namebuf initialization in
kallsyms_lookup_buildid() (bsc#1012628).
- kallsyms: clean up modname and modbuildid initialization in
kallsyms_lookup_buildid() (bsc#1012628).
- kallsyms: cleanup code for appending the module buildid
(bsc#1012628).
- kallsyms: prevent module removal when printing module name
and buildid (bsc#1012628).
- wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free
(bsc#1012628).
- Rename to
patches.kernel.org/6.19.12-172-ALSA-ctxfi-Check-the-error-for-index-mapping.patch.
- Rename to
patches.kernel.org/6.19.12-173-ALSA-ctxfi-Fix-missing-SPDIFI1-index-handling.patch.
- Rename to
patches.kernel.org/6.19.12-174-ALSA-ctxfi-Don-t-enumerate-SPDIF1-at-DAIO-ini.patch.
- commit f5be748
* Thu Apr 09 2026 jslaby@suse.cz
- Update config files.
Fixes: a52ea116bed2 ("Update config files.")
- commit 0590338
* Mon Apr 06 2026 jslaby@suse.cz
- scripts/common-functions: fix check_mod_support() for always buily code
Joao noticed the commit below broke the check. It omitted to check
whether there is any config to enable building the .c file in the first
place.
Fixes: 38178280c292 (scripts/common-functions: use module config to check builtin status)
- commit 1b7d8a2
* Mon Apr 06 2026 pfalcato@suse.de
- update to 7.0-rc7
- refresh configs
- update config for s390
- CONFIG_DRM_SCHED=n
- CONFIG_FB_DMAMEM_HELPERS=n
- CONFIG_FB_DMAMEM_HELPERS_DEFERRED=n
- commit 4589aa2
* Thu Apr 02 2026 jslaby@suse.cz
- Linux 6.19.11 (bsc#1012628).
- cxl/port: Fix use after free of parent_port in cxl_detach_ep()
(bsc#1012628).
- cxl/region: Fix leakage in __construct_region() (bsc#1012628).
- bpf: Reset register ID for BPF_END value tracking (bsc#1012628).
- bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1012628).
- x86/perf: Make sure to program the counter value for stopped
events on migration (bsc#1012628).
- perf: Make sure to use pmu_ctx->pmu for groups (bsc#1012628).
- s390/mm: Add missing secure storage access fixups for donated
memory (bsc#1012628).
- objtool/klp: fix data alignment in __clone_symbol()
(bsc#1012628).
- livepatch/klp-build: Fix inconsistent kernel version
(bsc#1012628).
- cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are
enabled (bsc#1012628).
- hwmon: axi-fan: don't use driver_override as IRQ name
(bsc#1012628).
- sh: platform_early: remove pdev->driver_override check
(bsc#1012628).
- driver core: generalize driver_override in struct device
(bsc#1012628).
- driver core: platform: use generic driver_override
infrastructure (bsc#1012628).
- bpf: Release module BTF IDR before module unload (bsc#1012628).
- cxl: Adjust the startup priority of cxl_pmem to be higher than
that of cxl_acpi (bsc#1012628).
- bpf: Fix exception exit lock checking for subprogs
(bsc#1012628).
- bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN
(bsc#1012628).
- bpf: Fix unsound scalar forking in maybe_fork_scalars() for
BPF_OR (bsc#1012628).
- tracing: Revert "tracing: Remove pid in task_rename tracing
output" (bsc#1012628).
- platform/x86: hp-wmi: Add Omen 16-wf0xxx fan and thermal support
(bsc#1012628).
- HID: asus: avoid memory leak in asus_report_fixup()
(bsc#1012628).
- platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to
dmi_vgbs_allow_list (bsc#1012628).
- nvme-pci: cap queue creation to used queues (bsc#1012628).
- nvme-fabrics: use kfree_sensitive() for DHCHAP secrets
(bsc#1012628).
- platform/x86: hp-wmi: Add Omen 16-xd0xxx fan and thermal support
(bsc#1012628).
- platform/x86: intel-hid: Enable 5-button array on ThinkPad X1
Fold 16 Gen 1 (bsc#1012628).
- platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix
touchscreen on SUPI S10 (bsc#1012628).
- platform/x86: hp-wmi: add Omen 14-fb1xxx (board 8E41) support
(bsc#1012628).
- nvme-pci: ensure we're polling a polled queue (bsc#1012628).
- HID: magicmouse: fix battery reporting for Apple Magic Trackpad
2 (bsc#1012628).
- HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
(bsc#1012628).
- platform/x86: hp-wmi: Add Victus 16-d0xxx support (bsc#1012628).
- HID: intel-ish-hid: ipc: Add Nova Lake-H/S PCI device IDs
(bsc#1012628).
- platform/x86: oxpec: Add support for OneXPlayer APEX
(bsc#1012628).
- platform/x86: oxpec: Add support for OneXPlayer X1z
(bsc#1012628).
- net: usb: r8152: add TRENDnet TUC-ET2G (bsc#1012628).
- kbuild: install-extmod-build: Package resolve_btfids if
necessary (bsc#1012628).
- platform/x86: oxpec: Add support for Aokzoe A2 Pro
(bsc#1012628).
- platform/x86: oxpec: Add support for OneXPlayer X1 Air
(bsc#1012628).
- HID: mcp2221: cancel last I2C command on read error
(bsc#1012628).
- HID: asus: add xg mobile 2023 external hardware support
(bsc#1012628).
- module: Fix kernel panic when a symbol st_shndx is out of bounds
(bsc#1012628).
- ASoC: fsl_easrc: Fix event generation in
fsl_easrc_iec958_set_reg() (bsc#1012628).
- scsi: mpi3mr: Clear reset history on ready and recheck state
after timeout (bsc#1012628).
- ASoC: rt1321: fix DMIC ch2/3 mask issue (bsc#1012628).
- scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP
(bsc#1012628).
- ASoC: Intel: sof_sdw: Add quirk for Alienware Area 51 (2025)
0CCD SKU (bsc#1012628).
- ALSA: hda/hdmi: Add Tegra238 HDA codec device ID (bsc#1012628).
- ASoC: fsl_easrc: Fix event generation in
fsl_easrc_iec958_put_bits() (bsc#1012628).
- ASoC: cs35l56: Only patch ASP registers if the DAI is part of
a DAIlink (bsc#1012628).
- spi: spi-dw-dma: fix print error log when wait finish
transaction (bsc#1012628).
- dma-buf: Include ioctl.h in UAPI header (bsc#1012628).
- block: break pcpu_alloc_mutex dependency on freeze_lock
(bsc#1012628).
- ALSA: hda/senary: Ensure EAPD is enabled during init
(bsc#1012628).
- drm/ttm/tests: Fix build failure on PREEMPT_RT (bsc#1012628).
- ASoC: amd: acp: Add ACP6.3 match entries for Cirrus Logic parts
(bsc#1012628).
- bpf: Fix u32/s32 bounds when ranges cross min/max boundary
(bsc#1012628).
- HID: apple: avoid memory leak in apple_report_fixup()
(bsc#1012628).
- sched_ext: Use WRITE_ONCE() for the write side of dsq->seq
update (bsc#1012628).
- btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create
(bsc#1012628).
- objtool: Use HOSTCFLAGS for HAVE_XXHASH test (bsc#1012628).
- powerpc64/ftrace: fix OOL stub count with clang (bsc#1012628).
- ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk
(bsc#1012628).
- objtool/klp: Disable unsupported pr_debug() usage (bsc#1012628).
- ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix
headphone (bsc#1012628).
- ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390
(bsc#1012628).
- objtool: Handle Clang RSP musical chairs (bsc#1012628).
- nvmet: move async event work off nvmet-wq (bsc#1012628).
- drm/amdgpu: fix gpu idle power consumption issue for gfx v12
(bsc#1012628).
- usb: core: new quirk to handle devices with zero configurations
(bsc#1012628).
- spi: intel-pci: Add support for Nova Lake mobile SPI flash
(bsc#1012628).
- ALSA: usb-audio: Add iface reset and delay quirk for SPACETOUCH
USB Audio (bsc#1012628).
- ALSA: hda/realtek: add quirk for ASUS UM6702RC (bsc#1012628).
- i3c: master: dw-i3c: Fix missing of_node for virtual I2C adapter
(bsc#1012628).
- xfrm: add missing extack for XFRMA_SA_PCPU in add_acquire and
allocspi (bsc#1012628).
- xfrm: fix the condition on x->pcpu_num in xfrm_sa_len
(bsc#1012628).
- xfrm: call xdo_dev_state_delete during state update
(bsc#1012628).
- esp: fix skb leak with espintcp and async crypto (bsc#1012628).
- pinctrl: renesas: rzt2h: Fix device node leak in
rzt2h_gpio_register() (bsc#1012628).
- xfrm: iptfs: fix skb_put() panic on non-linear skb during
reassembly (bsc#1012628).
- pinctrl: qcom: spmi-gpio: implement .get_direction()
(bsc#1012628).
- pinctrl: renesas: rza1: Normalize return value of gpio_get()
(bsc#1012628).
- xfrm: Fix work re-schedule after cancel in
xfrm_nat_keepalive_net_fini() (bsc#1012628).
- xfrm: prevent policy_hthresh.work from racing with netns
teardown (bsc#1012628).
- af_key: validate families in pfkey_send_migrate() (bsc#1012628).
- dma: swiotlb: add KMSAN annotations to swiotlb_bounce()
(bsc#1012628).
- erofs: set fileio bio failed in short read case (bsc#1012628).
- can: statistics: add missing atomic access in hot path
(bsc#1012628).
- pinctrl: stm32: fix HDP driver dependency on GPIO_GENERIC
(bsc#1012628).
- Bluetooth: L2CAP: Fix stack-out-of-bounds read in
l2cap_ecred_conn_req (bsc#1012628).
- Bluetooth: L2CAP: Validate PDU length before reading SDU length
in l2cap_ecred_data_rcv() (bsc#1012628).
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to
missing sock_hold (bsc#1012628).
- Bluetooth: MGMT: Fix dangling pointer on
mgmt_add_adv_patterns_monitor_complete (bsc#1012628).
- Bluetooth: hci_ll: Fix firmware leak on error path
(bsc#1012628).
- Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb
(bsc#1012628).
- pinctrl: mediatek: common: Fix probe failure for devices
without EINT (bsc#1012628).
- ionic: fix persistent MAC address override on PF (bsc#1012628).
- nfc: nci: fix circular locking dependency in nci_close_device
(bsc#1012628).
- net: openvswitch: Avoid releasing netdev before teardown
completes (bsc#1012628).
- openvswitch: defer tunnel netdev_put to RCU release
(bsc#1012628).
- openvswitch: validate MPLS set/set_masked payload length
(bsc#1012628).
- net/smc: fix double-free of smc_spd_priv when tee() duplicates
splice pipe buffer (bsc#1012628).
- rtnetlink: count IFLA_PARENT_DEV_{NAME,BUS_NAME} in
if_nlmsg_size (bsc#1012628).
- rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size
(bsc#1012628).
- net: bcmasp: streamline early exit in probe (bsc#1012628).
- net: bcmasp: fix double free of WoL irq (bsc#1012628).
- net: bcmasp: fix double disable of clk (bsc#1012628).
- platform/x86: ISST: Check HWP support before MSR access
(bsc#1012628).
- platform/x86: lenovo: wmi-gamezone: Drop gz_chain_head
(bsc#1012628).
- platform/olpc: olpc-xo175-ec: Fix overflow error message to
print inlen (bsc#1012628).
- platform/x86: intel-hid: disable wakeup_mode during hibernation
(bsc#1012628).
- ice: fix inverted ready check for VF representors (bsc#1012628).
- ice: use ice_update_eth_stats() for representor stats
(bsc#1012628).
- iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()
(bsc#1012628).
- ipv6: Remove permanent routes from tb6_gc_hlist when all
exceptions expire (bsc#1012628).
- ipv6: Don't remove permanent routes with exceptions from
tb6_gc_hlist (bsc#1012628).
- net: fix fanout UAF in packet_release() via NETDEV_UP race
(bsc#1012628).
- net: airoha: add RCU lock around dev_fill_forward_path
(bsc#1012628).
- net: b44: always select CONFIG_FIXED_PHY (bsc#1012628).
- udp: Fix wildcard bind conflict check when using hash2
(bsc#1012628).
- net: enetc: fix the output issue of 'ethtool --show-ring'
(bsc#1012628).
- virtio-net: correct hdr_len handling for
VIRTIO_NET_F_GUEST_HDRLEN (bsc#1012628).
- virtio-net: correct hdr_len handling for tunnel gso
(bsc#1012628).
- team: fix header_ops type confusion with non-Ethernet ports
(bsc#1012628).
- net: ti: icssg-prueth: fix use-after-free of CPPI descriptor
in RX path (bsc#1012628).
- net: lan743x: fix duplex configuration in mac_link_up
(bsc#1012628).
- rtnetlink: fix leak of SRCU struct in rtnl_link_register
(bsc#1012628).
- net_sched: codel: fix stale state for empty flows in fq_codel
(bsc#1012628).
- dma-mapping: add missing `inline` for `dma_free_attrs`
(bsc#1012628).
- Bluetooth: L2CAP: Fix send LE flow credits in ACL link
(bsc#1012628).
- Bluetooth: btintel: serialize btintel_hw_error() with
hci_req_sync_lock (bsc#1012628).
- Bluetooth: L2CAP: Fix not tracking outstanding TX ident
(bsc#1012628).
- Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()
(bsc#1012628).
- Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite
loop (bsc#1012628).
- Bluetooth: btusb: clamp SCO altsetting table indices
(bsc#1012628).
- tls: Purge async_hold in tls_decrypt_async_wait() (bsc#1012628).
- netfilter: nfnetlink_log: fix uninitialized padding leak in
NFULA_PAYLOAD (bsc#1012628).
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
(bsc#1012628).
- netfilter: nft_set_rbtree: revisit array resize logic
(bsc#1012628).
- netfilter: nf_conntrack_expect: skip expectations in other
netns via proc (bsc#1012628).
- netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr
in process_sdp (bsc#1012628).
- netfilter: ctnetlink: use netlink policy range checks
(bsc#1012628).
- net: macb: use the current queue number for stats (bsc#1012628).
- RDMA/bng_re: Fix silent failure in HWRM version query
(bsc#1012628).
- RDMA/efa: Check stored completion CTX command ID with received
one (bsc#1012628).
- RDMA/efa: Improve admin completion context state machine
(bsc#1012628).
- RDMA/efa: Fix use of completion ctx after free (bsc#1012628).
- regmap: Synchronize cache for the page selector (bsc#1012628).
- ALSA: hda/realtek: Sequence GPIO2 on Star Labs StarFighter
(bsc#1012628).
- RDMA/rw: Fall back to direct SGE on MR pool exhaustion
(bsc#1012628).
- RDMA/efa: Fix possible deadlock (bsc#1012628).
- ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen from
SKIP_IFACE_SETUP (bsc#1012628).
- RDMA/irdma: Initialize free_qp completion before using it
(bsc#1012628).
- RDMA/irdma: Update ibqp state to error if QP is already in
error state (bsc#1012628).
- RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce()
(bsc#1012628).
- RDMA/irdma: Clean up unnecessary dereference of event->cm_node
(bsc#1012628).
- RDMA/irdma: Remove reset check from irdma_modify_qp_to_err()
(bsc#1012628).
- RDMA/irdma: Fix deadlock during netdev reset with active
connections (bsc#1012628).
- RDMA/irdma: Return EINVAL for invalid arp index error
(bsc#1012628).
- RDMA/irdma: Harden depth calculation functions (bsc#1012628).
- ASoC: simple-card-utils: Check value of is_playback_only and
is_capture_only (bsc#1012628).
- ASoC: fsl: imx-card: initialize playback_only and capture_only
(bsc#1012628).
- scsi: scsi_transport_sas: Fix the maximum channel scanning issue
(bsc#1012628).
- x86/efi: efi_unmap_boot_services: fix calculation of
ranges_to_free size (bsc#1012628).
- drm/mediatek: dsi: Store driver data before invoking
mipi_dsi_host_register (bsc#1012628).
- drm/i915/gmbus: fix spurious timeout on 512-byte burst reads
(bsc#1012628).
- PM: hibernate: Drain trailing zero pages on userspace restore
(bsc#1012628).
- PM: sleep: Drop spurious WARN_ON() from pm_restore_gfp_mask()
(bsc#1012628).
- drm/xe/pf: Fix use-after-free in migration restore
(bsc#1012628).
- spi: sn-f-ospi: Fix resource leak in f_ospi_probe()
(bsc#1012628).
- ASoC: Intel: catpt: Fix the device initialization (bsc#1012628).
- spi: meson-spicc: Fix double-put in remove path (bsc#1012628).
- drm/amd/display: Do not skip unrelated mode changes in DSC
validation (bsc#1012628).
- ASoC: dt-bindings: stm32: Fix incorrect compatible string in
stm32h7-sai match (bsc#1012628).
- rust: regulator: do not assume that regulator_get() returns
non-null (bsc#1012628).
- drm/xe: Implement recent spec updates to Wa_16025250150
(bsc#1012628).
- spi: use generic driver_override infrastructure (bsc#1012628).
- ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
(bsc#1012628).
- drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib
(bsc#1012628).
- hwmon: (adm1177) fix sysfs ABI violation and current unit
conversion (bsc#1012628).
- ASoC: SDCA: fix finding wrong entity (bsc#1012628).
- hwmon: (pmbus) Mark lowest/average/highest/rated attributes
as read-only (bsc#1012628).
- hwmon: (pmbus) Introduce the concept of "write-only" attributes
(bsc#1012628).
- hwmon: (pmbus/core) Protect regulator operations with mutex
(bsc#1012628).
- sysctl: fix uninitialized variable in proc_do_large_bitmap
(bsc#1012628).
- ASoC: adau1372: Fix unchecked clk_prepare_enable() return value
(bsc#1012628).
- ASoC: adau1372: Fix clock leak on PLL lock failure
(bsc#1012628).
- spi: spi-fsl-lpspi: fix teardown order issue (UAF)
(bsc#1012628).
- io_uring/fdinfo: fix SQE_MIXED SQE displaying (bsc#1012628).
- io_uring/fdinfo: fix OOB read in SQE_MIXED wrap check
(bsc#1012628).
- ALSA: usb-audio: Exclude Scarlett 2i4 1st Gen from
SKIP_IFACE_SETUP (bsc#1012628).
- s390/syscalls: Add spectre boundary for syscall dispatch table
(bsc#1012628).
- s390/barrier: Make array_index_mask_nospec() __always_inline
(bsc#1012628).
- s390/entry: Scrub r12 register on kernel entry (bsc#1012628).
- tracing: Drain deferred trigger frees if kthread creation fails
(bsc#1012628).
- tracing: Fix potential deadlock in cpu hotplug with osnoise
(bsc#1012628).
- drm/xe: always keep track of remap prev/next (bsc#1012628).
- ksmbd: replace hardcoded hdr2_len with offsetof() in
smb2_calc_max_out_buf_len() (bsc#1012628).
- ksmbd: fix potencial OOB in get_file_all_info() for compound
requests (bsc#1012628).
- ksmbd: fix memory leaks and NULL deref in smb2_lock()
(bsc#1012628).
- ksmbd: do not expire session on binding failure (bsc#1012628).
- Revert "ALSA: hda/intel: Add MSI X870E Tomahawk to denylist"
(bsc#1012628).
- ALSA: hda/realtek: add quirk for ASUS Strix G16 G615JMR
(bsc#1012628).
- ALSA: firewire-lib: fix uninitialized local variable
(bsc#1012628).
- accel/ivpu: Add disable clock relinquish workaround for NVL-A0
(bsc#1012628).
- ASoC: codecs: wcd934x: fix typo in dt parsing (bsc#1012628).
- ASoC: sma1307: fix double free of devm_kzalloc() memory
(bsc#1012628).
- ASoC: SOF: ipc4-topology: Allow bytes controls without initial
payload (bsc#1012628).
- can: gw: fix OOB heap access in cgw_csum_crc8_rel()
(bsc#1012628).
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
(bsc#1012628).
- can: netlink: can_changelink(): add missing error handling to
call can_ctrlmode_changelink() (bsc#1012628).
- cpufreq: Don't skip cpufreq_frequency_table_cpuinfo()
(bsc#1012628).
- cpufreq: conservative: Reset requested_freq on limits change
(bsc#1012628).
- kbuild: Delete .builtin-dtbs.S when running make clean
(bsc#1012628).
- mm/damon/stat: monitor all System RAM resources (bsc#1012628).
- thermal: intel: int340x: soc_slider: Set offset only for
balanced mode (bsc#1012628).
- RDMA/ionic: Preserve and set Ethernet source MAC after
ib_ud_header_init() (bsc#1012628).
- platform/x86: ISST: Correct locked bit width (bsc#1012628).
- KVM: arm64: Discard PC update state on vcpu reset (bsc#1012628).
- KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc()
(bsc#1012628).
- hwmon: (pmbus/ina233) Fix error handling and sign extension
in shunt voltage read (bsc#1012628).
- hwmon: (pmbus/isl68137) Add mutex protection for AVS enable
sysfs attributes (bsc#1012628).
- hwmon: (peci/cputemp) Fix crit_hyst returning delta instead
of absolute temperature (bsc#1012628).
- hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible()
(bsc#1012628).
- media: mc, v4l2: serialize REINIT and REQBUFS with
req_queue_mutex (bsc#1012628).
- media: verisilicon: Fix kernel panic due to __initconst misuse
(bsc#1012628).
- xfrm: iptfs: validate inner IPv4 header length in IPTFS payload
(bsc#1012628).
- xfrm: iptfs: only publish mode_data after clone setup
(bsc#1012628).
- virt: tdx-guest: Fix handling of host controlled 'quote'
buffer length (bsc#1012628).
- virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is
cleared and napi_tx is false (bsc#1012628).
- vfio/pci: Fix double free in dma-buf feature (bsc#1012628).
- erofs: add GFP_NOIO in the bio completion if needed
(bsc#1012628).
- alarmtimer: Fix argument order in alarm_timer_forward()
(bsc#1012628).
- mm/huge_memory: fix folio isn't locked in softleaf_to_folio()
(bsc#1012628).
- writeback: don't block sync for filesystems with no data
integrity guarantees (bsc#1012628).
- x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling()
(bsc#1012628).
- x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask
(bsc#1012628).
- x86/fred: Fix early boot failures on SEV-ES/SNP guests
(bsc#1012628).
- phy: qcom: qmp-ufs: Fix SM8650 PCS table for Gear 4
(bsc#1012628).
- ovl: make fsync after metadata copy-up opt-in mount option
(bsc#1012628).
- ovl: fix wrong detection of 32bit inode numbers (bsc#1012628).
- scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()
(bsc#1012628).
- scsi: ses: Handle positive SCSI error from ses_recv_diag()
(bsc#1012628).
- net: macb: Move devm_{free,request}_irq() out of spin lock area
(bsc#1012628).
- net: macb: Protect access to net_device::ip_ptr with RCU lock
(bsc#1012628).
- net: macb: Use dev_consume_skb_any() to free TX SKBs
(bsc#1012628).
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating
an MMIO SPTE (bsc#1012628).
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting
shadow-present SPTE (bsc#1012628).
- jbd2: gracefully abort on checkpointing state corruptions
(bsc#1012628).
- irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment
(bsc#1012628).
- iomap: fix invalid folio access when i_blkbits differs from
I/O granularity (bsc#1012628).
- i2c: designware: amdisp: Fix resume-probe race condition issue
(bsc#1012628).
- futex: Clear stale exiting pointer in futex_lock_pi() retry path
(bsc#1012628).
- i2c: imx: fix i2c issue when reading multiple messages
(bsc#1012628).
- i2c: imx: ensure no clock is generated after last read
(bsc#1012628).
- dmaengine: fsl-edma: fix channel parameter config for fixed
channel requests (bsc#1012628).
- dmaengine: sh: rz-dmac: Protect the driver specific lists
(bsc#1012628).
- dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock
(bsc#1012628).
- drm/amdgpu: prevent immediate PASID reuse case (bsc#1012628).
- drm/amdgpu: fix strsep() corrupting lockup_timeout on multi-GPU
(v3) (bsc#1012628).
- drm/amd/display: Fix DCE LVDS handling (bsc#1012628).
- drm/amd/display: Fix drm_edid leak in amdgpu_dm (bsc#1012628).
- drm/amd/display: check if ext_caps is valid in BL setup
(bsc#1012628).
- drm/i915/dp_tunnel: Fix error handling when clearing stream
BW in atomic state (bsc#1012628).
- drm/i915: Order OP vs. timeout correctly in __wait_for()
(bsc#1012628).
- drm/i915: Unlink NV12 planes earlier (bsc#1012628).
- LoongArch: Fix missing NULL checks for kstrdup() (bsc#1012628).
- LoongArch: vDSO: Emit GNU_EH_FRAME correctly (bsc#1012628).
- LoongArch: Workaround LS2K/LS7A GPU DMA hang bug (bsc#1012628).
- LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust
(bsc#1012628).
- LoongArch: KVM: Fix base address calculation in
kvm_eiointc_regs_access() (bsc#1012628).
- LoongArch: KVM: Handle the case that EIOINTC's coremap is empty
(bsc#1012628).
- drm/amd/pm: Return -EOPNOTSUPP for unsupported OD_MCLK on
smu_v13_0_6 (bsc#1012628).
- mm/memory: fix PMD/PUD checks in follow_pfnmap_start()
(bsc#1012628).
- mm/mseal: update VMA end correctly on merge (bsc#1012628).
- mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx()
failure (bsc#1012628).
- mm/damon/sysfs: check contexts->nr before accessing
contexts_arr[0] (bsc#1012628).
- mm/damon/sysfs: check contexts->nr in repeat_call_fn
(bsc#1012628).
- mm/pagewalk: fix race between concurrent split and refault
(bsc#1012628).
- xfs: stop reclaim before pushing AIL during unmount
(bsc#1012628).
- xfs: save ailp before dropping the AIL lock in push callbacks
(bsc#1012628).
- xfs: avoid dereferencing log items after push callbacks
(bsc#1012628).
- xfs: scrub: unlock dquot before early return in quota scrub
(bsc#1012628).
- xfs: fix ri_total validation in xlog_recover_attri_commit_pass2
(bsc#1012628).
- xfs: don't irele after failing to iget in xfs_attri_recover_work
(bsc#1012628).
- xfs: remove file_path tracepoint data (bsc#1012628).
- ext4: fix journal credit check when setting fscrypt context
(bsc#1012628).
- ext4: convert inline data to extents when truncate exceeds
inline size (bsc#1012628).
- ext4: fix stale xarray tags after writeback (bsc#1012628).
- ext4: do not check fast symlink during orphan recovery
(bsc#1012628).
- ext4: fix fsync(2) for nojournal mode (bsc#1012628).
- ext4: make recently_deleted() properly work with lazy itable
initialization (bsc#1012628).
- ext4: replace BUG_ON with proper error handling in
ext4_read_inline_folio (bsc#1012628).
- ext4: publish jinode after initialization (bsc#1012628).
- ext4: test if inode's all dirty pages are submitted to disk
(bsc#1012628).
- ext4: validate p_idx bounds in ext4_ext_correct_indexes
(bsc#1012628).
- ext4: avoid infinite loops caused by residual data
(bsc#1012628).
- ext4: avoid allocate block from corrupted group in
ext4_mb_find_by_goal() (bsc#1012628).
- ext4: reject mount if bigalloc with s_first_data_block != 0
(bsc#1012628).
- ext4: fix use-after-free in update_super_work when racing with
umount (bsc#1012628).
- ext4: fix the might_sleep() warnings in kvfree() (bsc#1012628).
- ext4: handle wraparound when searching for blocks for indirect
mapped blocks (bsc#1012628).
- ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths
(bsc#1012628).
- ext4: always drain queued discard work in ext4_mb_release()
(bsc#1012628).
- arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off (bsc#1012628).
- powerpc64/bpf: do not increment tailcall count when prog is NULL
(bsc#1012628).
- mm/damon/core: avoid use of half-online-committed context
(bsc#1012628).
- rust: pin-init: internal: init: document load-bearing fact of
field accessors (bsc#1012628).
- ksmbd: fix use-after-free and NULL deref in smb_grant_oplock()
(bsc#1012628).
- dmaengine: idxd: Fix crash when the event log is disabled
(bsc#1012628).
- dmaengine: idxd: Fix possible invalid memory access after FLR
(bsc#1012628).
- dmaengine: idxd: Fix not releasing workqueue on .release()
(bsc#1012628).
- dmaengine: idxd: Fix memory leak when a wq is reset
(bsc#1012628).
- dmaengine: idxd: Fix freeing the allocated ida too late
(bsc#1012628).
- dmaengine: idxd: Fix leaking event log memory (bsc#1012628).
- phy: ti: j721e-wiz: Fix device node reference leak in
wiz_get_lane_phy_types() (bsc#1012628).
- dmaengine: dw-edma: Fix multiple times setting of the
CYCLE_STATE and CYCLE_BIT bits for HDMA (bsc#1012628).
- dmaengine: xilinx: xdma: Fix regmap init error handling
(bsc#1012628).
- netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC
iterators (bsc#1012628).
- netfs: Fix NULL pointer dereference in netfs_unbuffered_write()
on retry (bsc#1012628).
- dmaengine: idxd: fix possible wrong descriptor completion in
llist_abort_desc() (bsc#1012628).
- dmaengine: xilinx: xilinx_dma: Fix dma_device directions
(bsc#1012628).
- dmaengine: xilinx: xilinx_dma: Fix residue calculation for
cyclic DMA (bsc#1012628).
- dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction
(bsc#1012628).
- dmaengine: xilinx_dma: Fix reset related timeout with
two-channel AXIDMA (bsc#1012628).
- selftests/mount_setattr: increase tmpfs size for idmapped
mount tests (bsc#1012628).
- netfs: Fix read abandonment during retry (bsc#1012628).
- btrfs: fix super block offset in error message in
btrfs_validate_super() (bsc#1012628).
- btrfs: fix leak of kobject name for sub-group space_info
(bsc#1012628).
- btrfs: fix lost error when running device stats on multiple
devices fs (bsc#1012628).
- xen/privcmd: unregister xenstore notifier on module exit
(bsc#1012628).
- netfs: Fix the handling of stream->front by removing it
(bsc#1012628).
- irqchip/renesas-rzv2h: Fix error path in
rzv2h_icu_probe_common() (bsc#1012628).
- futex: Require sys_futex_requeue() to have identical flags
(bsc#1012628).
- futex: Fix UaF between futex_key_to_node_opt() and
vma_replace_policy() (bsc#1012628).
- ext4: introduce EXPORT_SYMBOL_FOR_EXT4_TEST() helper
(bsc#1012628).
- ext4: fix mballoc-test.c is not compiled when EXT4_KUNIT_TESTS=M
(bsc#1012628).
- bug: avoid format attribute warning for clang as well
(bsc#1012628).
- Bluetooth: L2CAP: Fix regressions caused by reusing ident
(bsc#1012628).
- Revert "perf jevents: Handle deleted JSONS in out of source
builds" (bsc#1012628).
- Rename to
patches.kernel.org/6.19.11-015-perf-metricgroup-Fix-metricgroup__has_metric_.patch.
- Rename to
patches.kernel.org/6.19.11-037-HID-apple-Add-EPOMAKER-TH87-to-the-non-apple-.patch.
- commit b4a2f1c
* Wed Apr 01 2026 jdelvare@suse.com
- Update config files.
Disable DRM_ACCEL_ARM_ETHOSU on non-ARM kernels. The Ethos-U65/U85
NPU is only found on ARM systems so there it no point in including
this driver in other kernels.
(cherry picked from commit eb0e9deb3d84073f46a19b25ce5bd7267d1b1846)
- Update config files.
Disable DRM_ACCEL_ARM_ETHOSU on non-ARM kernels. The Ethos-U65/U85
NPU is only found on ARM systems so there it no point in including
this driver in other kernels.
- commit a52ea11
* Wed Apr 01 2026 jslaby@suse.cz
- perf metricgroup: Fix metricgroup__has_metric_or_groups()
(bsc#1259358).
Update upstream status.
- commit 748f4e5
* Tue Mar 31 2026 tiwai@suse.de
- ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization
(bsc#1259925).
- commit 4c2b092
* Mon Mar 30 2026 pfalcato@suse.de
- update to 7.0-rc6
- refresh configs
- drop upstreamed patch
- patches.suse/perf-metricgroup-Fix-metricgroup__has_metric_or_grou.patch
- commit 3e993d7
* Sun Mar 29 2026 tiwai@suse.de
- ALSA: ctxfi: Check the error for index mapping (bsc#1259925).
- ALSA: ctxfi: Fix missing SPDIFI1 index handling (bsc#1259925).
- commit bf9d48f
* Wed Mar 25 2026 andrea.porta@suse.com
- mfd: bcm2835-pm: Add BCM2712 PM device support (PED-13236).
- commit ac407cb
* Wed Mar 25 2026 andrea.porta@suse.com
- mfd: bcm2835-pm: Introduce SoC-specific type identifier
(PED-13236).
- scripts/python/git_sort/git_sort.yaml: added Lee Jones MFD tree
- commit e62f70e
* Wed Mar 25 2026 andrea.porta@suse.com
- mfd: bcm2835-pm: Add BCM2712 PM device support (jsc#PED-13236).
- commit 3aee44d
* Wed Mar 25 2026 andrea.porta@suse.com
- mfd: bcm2835-pm: Introduce SoC-specific type identifier (jsc#PED-13236).
- commit 3ff8346
* Wed Mar 25 2026 jslaby@suse.cz
- Linux 6.19.10 (bsc#1012628).
- xen/privcmd: add boot control for restricted usage in domU
(bsc#1012628).
- xen/privcmd: restrict usage in unprivileged domU (bsc#1012628).
- hwmon: (max6639) Fix pulses-per-revolution implementation
(bsc#1012628).
- drm/xe/guc: Fail immediately on GuC load error (bsc#1012628).
- arm64: realm: Fix PTE_NS_SHARED for 52bit PA support
(bsc#1012628).
- tools/bootconfig: fix fd leak in load_xbc_file() on fstat
failure (bsc#1012628).
- lib/bootconfig: check xbc_init_node() return in override path
(bsc#1012628).
- fs/tests: exec: Remove bad test vector (bsc#1012628).
- drm/i915/gt: Check set_default_submission() before deferencing
(bsc#1012628).
- ksmbd: fix use-after-free in durable v2 replay of active file
handles (bsc#1012628).
- ksmbd: fix use-after-free of share_conf in compound request
(bsc#1012628).
- drm/bridge: dw-hdmi-qp: fix multi-channel audio output
(bsc#1012628).
- drm/amd: fix dcn 2.01 check (bsc#1012628).
- drm/amd/display: Fix DisplayID not-found handling in
parse_edid_displayid_vrr() (bsc#1012628).
- iommu/amd: Block identity domain when SNP enabled (bsc#1012628).
- iommu/sva: Fix crash in iommu_sva_unbind_device() (bsc#1012628).
- iommu: Fix mapping check for 0x0 to avoid re-mapping it
(bsc#1012628).
- drm/vmwgfx: Don't overwrite KMS surface dirty tracker
(bsc#1012628).
- spi: amlogic-spisg: Fix memory leak in aml_spisg_probe()
(bsc#1012628).
- spi: amlogic: spifc-a4: Remove redundant clock cleanup
(bsc#1012628).
- mshv: Fix use-after-free in mshv_map_user_memory error path
(bsc#1012628).
- arm_mpam: Fix null pointer dereference when restoring bandwidth
counters (bsc#1012628).
- x86/hyperv: Use __naked attribute to fix stackless C function
(bsc#1012628).
- mtd: rawnand: brcmnand: skip DMA during panic write
(bsc#1012628).
- mtd: rawnand: serialize lock/unlock against other NAND
operations (bsc#1012628).
- binfmt_elf_fdpic: fix AUXV size calculation for ELF_HWCAP3
and ELF_HWCAP4 (bsc#1012628).
- x86/platform/uv: Handle deconfigured sockets (bsc#1012628).
- x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs
(bsc#1012628).
- tracing: Fix trace_marker copy link list updates (bsc#1012628).
- tracing: Fix failure to read user space from system call trace
events (bsc#1012628).
- ring-buffer: Fix to update per-subbuf entries of persistent
ring buffer (bsc#1012628).
- perf/x86: Move event pointer setup earlier in x86_pmu_enable()
(bsc#1012628).
- perf/x86/intel: Add missing branch counters constraint apply
(bsc#1012628).
- irqchip/riscv-rpmi-sysmsi: Fix mailbox channel leak in
rpmi_sysmsi_probe() (bsc#1012628).
- i2c: pxa: defer reset on Armada 3700 when recovery is used
(bsc#1012628).
- i2c: fsi: Fix a potential leak in fsi_i2c_probe() (bsc#1012628).
- i2c: cp2615: fix serial string NULL-deref at probe
(bsc#1012628).
- hwmon: (pmbus/isl68137) Fix unchecked return value and use
sysfs_emit() (bsc#1012628).
- hwmon: (pmbus/mp2869) Check pmbus_read_byte_data() before
using its return value (bsc#1012628).
- hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data()
return value (bsc#1012628).
- hwmon: (pmbus/ina233) Add error check for pmbus_read_word_data()
return value (bsc#1012628).
- MPTCP: fix lock class name family in pm_nl_create_listen_socket
(bsc#1012628).
- icmp: fix NULL pointer dereference in icmp_tag_validation()
(bsc#1012628).
- net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in
error paths (bsc#1012628).
- net: shaper: protect from late creation of hierarchy
(bsc#1012628).
- net: shaper: protect late read accesses to the hierarchy
(bsc#1012628).
- net: mvpp2: guard flow control update with global_tx_fc in
buffer switching (bsc#1012628).
- nfnetlink_osf: validate individual option lengths in
fingerprints (bsc#1012628).
- netfilter: nf_tables: release flowtable after rcu grace period
on error (bsc#1012628).
- netfilter: bpf: defer hook memory release until rcu readers
are done (bsc#1012628).
- net: bonding: fix NULL deref in bond_debug_rlb_hash_show
(bsc#1012628).
- udp_tunnel: fix NULL deref caused by udp_sock_create6 when
CONFIG_IPV6=n (bsc#1012628).
- net/mlx5e: Fix race condition during IPSec ESN update
(bsc#1012628).
- net/mlx5e: Prevent concurrent access to IPSec ASO context
(bsc#1012628).
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle
(bsc#1012628).
- ipv6: add NULL checks for idev in SRv6 paths (bsc#1012628).
- net: macb: fix uninitialized rx_fs_lock (bsc#1012628).
- netdevsim: drop PSP ext ref on forward failure (bsc#1012628).
- ACPI: processor: Fix previous acpi_processor_errata_piix4()
fix (bsc#1012628).
- wifi: mac80211: always free skb on ieee80211_tx_prepare_skb()
failure (bsc#1012628).
- wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is
not enough headroom (bsc#1012628).
- wifi: mac80211: fix NULL deref in mesh_matches_local()
(bsc#1012628).
- libie: prevent memleak in fwlog code (bsc#1012628).
- iavf: fix VLAN filter lost on add/delete race (bsc#1012628).
- igc: fix page fault in XDP TX timestamps handling (bsc#1012628).
- igc: fix missing update of skb->tail in igc_xmit_frame()
(bsc#1012628).
- ACPICA: Update the format of Arg3 of _DSM (bsc#1012628).
- net: usb: aqc111: Do not perform PM inside suspend callback
(bsc#1012628).
- clsact: Fix use-after-free in init/destroy rollback asymmetry
(bsc#1012628).
- net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check
(bsc#1012628).
- net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check
(bsc#1012628).
- net: airoha: Remove airoha_dev_stop() in airoha_remove()
(bsc#1012628).
- net/sched: teql: Fix double-free in teql_master_xmit
(bsc#1012628).
- net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
(bsc#1012628).
- bonding: prevent potential infinite loop in bond_header_parse()
(bsc#1012628).
- PM: runtime: Fix a race condition related to device removal
(bsc#1012628).
- sched: idle: Consolidate the handling of two special cases
(bsc#1012628).
- net: ti: icssg-prueth: Fix memory leak in XDP_DROP for
non-zero-copy mode (bsc#1012628).
- net: mana: fix use-after-free in mana_hwc_destroy_channel()
by reordering teardown (bsc#1012628).
- net: bcmgenet: increase WoL poll timeout (bsc#1012628).
- crypto: ccp - Fix leaking the same page twice (bsc#1012628).
- netfilter: nf_conntrack_h323: check for zero length in
DecodeQ931() (bsc#1012628).
- netfilter: xt_time: use unsigned int for monthday bit shift
(bsc#1012628).
- netfilter: xt_CT: drop pending enqueued packets on template
removal (bsc#1012628).
- netfilter: nft_ct: drop pending enqueued packets on removal
(bsc#1012628).
- nf_tables: nft_dynset: fix possible stateful expression memleak
in error path (bsc#1012628).
- netfilter: nf_conntrack_h323: fix OOB read in decode_int()
CONS case (bsc#1012628).
- netfilter: nf_flow_table_ip: reset mac header before vlan push
(bsc#1012628).
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation
in sip_help_tcp() (bsc#1012628).
- netfilter: conntrack: add missing netlink policy validations
(bsc#1012628).
- netfilter: ctnetlink: fix use-after-free in
ctnetlink_dump_exp_ct() (bsc#1012628).
- mpls: add missing unregister_netdevice_notifier to mpls_init
(bsc#1012628).
- ip_tunnel: adapt iptunnel_xmit_stats() to
NETDEV_PCPU_STAT_DSTATS (bsc#1012628).
- net/rose: fix NULL pointer dereference in rose_transmit_link
on reconnect (bsc#1012628).
- bridge: cfm: Fix race condition in peer_mep deletion
(bsc#1012628).
- af_unix: Give up GC if MSG_PEEK intervened (bsc#1012628).
- Bluetooth: qca: fix ROM version reading on WCN3998 chips
(bsc#1012628).
- Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user
(bsc#1012628).
- Bluetooth: HIDP: Fix possible UAF (bsc#1012628).
- Bluetooth: MGMT: Fix list corruption and UAF in command complete
handlers (bsc#1012628).
- Bluetooth: hci_sync: Fix hci_le_create_conn_sync (bsc#1012628).
- Bluetooth: ISO: Fix defer tests being unstable (bsc#1012628).
- Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy (bsc#1012628).
- Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed
SDU (bsc#1012628).
- Bluetooth: LE L2CAP: Disconnect if received packet's SDU
exceeds IMTU (bsc#1012628).
- firmware: arm_scmi: Fix NULL dereference on notify error path
(bsc#1012628).
- firmware: arm_scpi: Fix device_node reference leak in probe path
(bsc#1012628).
- firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap()
(bsc#1012628).
- arm64: dts: renesas: r8a78000: Fix out-of-range SPI interrupt
numbers (bsc#1012628).
- arm64: dts: renesas: rzg3s-smarc-som: Set bypass for Versa3 PLL2
(bsc#1012628).
- arm64: dts: renesas: r9a09g087: Fix CPG register region sizes
(bsc#1012628).
- arm64: dts: renesas: r9a09g077: Fix CPG register region sizes
(bsc#1012628).
- arm64: dts: renesas: r9a09g057: Remove wdt{0,2,3} nodes
(bsc#1012628).
- arm64: dts: renesas: rzv2-evk-cn15-sd: Add ramp delay for SD0
regulator (bsc#1012628).
- arm64: dts: renesas: rzt2h-n2h-evk: Add ramp delay for SD0
card regulator (bsc#1012628).
- wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down
(bsc#1012628).
- wifi: mac80211: Fix static_branch_dec() underflow for
aql_disable (bsc#1012628).
- wifi: mac80211: use jiffies_delta_to_msecs() for sta_info
inactive times (bsc#1012628).
- wifi: mac80211: remove keys after disabling beaconing
(bsc#1012628).
- tee: shm: Remove refcounting of kernel pages (bsc#1012628).
- soc: fsl: cpm1: qmc: Fix error check for devm_ioremap_resource()
in qmc_qe_init_resources() (bsc#1012628).
- soc: fsl: qbman: fix race condition in qman_destroy_fq
(bsc#1012628).
- soc: rockchip: grf: Add missing of_node_put() when returning
(bsc#1012628).
- cache: ax45mp: Fix device node reference leak in
ax45mp_cache_init() (bsc#1012628).
- cache: starfive: fix device node leak in starlink_cache_init()
(bsc#1012628).
- soc: microchip: mpfs: Fix memory leak in
mpfs_sys_controller_probe() (bsc#1012628).
- btrfs: tree-checker: fix misleading root drop_level error
message (bsc#1012628).
- btrfs: log new dentries when logging parent dir of a conflicting
inode (bsc#1012628).
- Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
(bsc#1012628).
- drm/xe: Open-code GGTT MMIO access protection (bsc#1012628).
- drm/xe: Fix missing runtime PM reference in ccs_mode_store
(bsc#1012628).
- drm/xe: Always kill exec queues in xe_guc_submit_pause_abort
(bsc#1012628).
- drm/xe/oa: Allow reading after disabling OA stream
(bsc#1012628).
- drm/xe/guc: Ensure CT state transitions via STOP before DISABLED
(bsc#1012628).
- drm/i915/psr: Disable PSR on update_m_n and update_lrr
(bsc#1012628).
- drm/i915/psr: Compute PSR entry_setup_frames into
intel_crtc_state (bsc#1012628).
- drm/i915/dmc: Fix an unlikely NULL pointer deference at probe
(bsc#1012628).
- drm/amdgpu: rework how we handle TLB fences (bsc#1012628).
- drm/amdgpu: Limit BO list entry count to prevent resource
exhaustion (bsc#1012628).
- drm/amdgpu: apply state adjust rules to some additional HAINAN
vairants (bsc#1012628).
- drm/radeon: apply state adjust rules to some additional HAINAN
vairants (bsc#1012628).
- drm/imagination: Synchronize interrupts before suspending the
GPU (bsc#1012628).
- drm/imagination: Fix deadlock in soft reset sequence
(bsc#1012628).
- drm/amdgpu/mmhub4.1.0: add bounds checking for cid
(bsc#1012628).
- drm/amdgpu/mmhub3.0: add bounds checking for cid (bsc#1012628).
- drm/amdgpu/mmhub3.0.2: add bounds checking for cid
(bsc#1012628).
- drm/amdgpu/mmhub3.0.1: add bounds checking for cid
(bsc#1012628).
- drm/amdgpu/mmhub2.3: add bounds checking for cid (bsc#1012628).
- drm/amdgpu/mmhub2.0: add bounds checking for cid (bsc#1012628).
- drm/amdgpu/gmc9.0: add bounds checking for cid (bsc#1012628).
- drm/amd/display: Wrap dcn32_override_min_req_memclk() in
DC_FP_{START, END} (bsc#1012628).
- drm: Fix use-after-free on framebuffers and property blobs
when calling drm_dev_unplug (bsc#1012628).
- serial: uartlite: fix PM runtime usage count underflow on probe
(bsc#1012628).
- serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN
(bsc#1012628).
- serial: 8250_dw: Ensure BUSY is deasserted (bsc#1012628).
- serial: 8250: Add late synchronize_irq() to shutdown to handle
DW UART BUSY (bsc#1012628).
- serial: 8250_dw: Rework IIR_NO_INT handling to stop interrupt
storm (bsc#1012628).
- serial: 8250_dw: Rework dw8250_handle_irq() locking and IIR
handling (bsc#1012628).
- serial: 8250: Add serial8250_handle_irq_locked() (bsc#1012628).
- serial: 8250_dw: Avoid unnecessary LCR writes (bsc#1012628).
- serial: 8250: Protect LCR write in shutdown (bsc#1012628).
- serial: 8250: always disable IRQ during THRE test (bsc#1012628).
- serial: 8250: Fix TX deadlock when using DMA (bsc#1012628).
- serial: 8250_pci: add support for the AX99100 (bsc#1012628).
- vt: save/restore unicode screen buffer for alternate screen
(bsc#1012628).
- io_uring/kbuf: propagate BUF_MORE through early buffer commit
path (bsc#1012628).
- io_uring/kbuf: fix missing BUF_MORE for incremental buffers
at EOF (bsc#1012628).
- io_uring/poll: fix multishot recv missing EOF on wakeup race
(bsc#1012628).
- iommu/vt-d: Only handle IOPF for SVA when PRI is supported
(bsc#1012628).
- iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry
(bsc#1012628).
- mtd: Avoid boot crash in RedBoot partition table parser
(bsc#1012628).
- mtd: rawnand: cadence: Fix error check for dma_alloc_coherent()
in cadence_nand_init() (bsc#1012628).
- mtd: rawnand: pl353: make sure optimal timings are applied
(bsc#1012628).
- mtd: spi-nor: Fix RDCR controller capability core check
(bsc#1012628).
- spi: fix statistics allocation (bsc#1012628).
- spi: fix use-after-free on controller registration failure
(bsc#1012628).
- pmdomain: bcm: bcm2835-power: Increase ASB control timeout
(bsc#1012628).
- pmdomain: mediatek: Fix power domain count (bsc#1012628).
- mmc: sdhci: fix timing selection for 1-bit bus width
(bsc#1012628).
- mmc: sdhci-pci-gli: fix GL9750 DMA write corruption
(bsc#1012628).
- ata: libata-scsi: report correct sense field pointer in
ata_scsiop_maint_in() (bsc#1012628).
- ata: libata-core: disable LPM on ADATA SU680 SSD (bsc#1012628).
- ipmi:msghandler: Handle error returns from the SMI sender
(bsc#1012628).
- ipmi: Consolidate the run to completion checking for xmit msgs
lock (bsc#1012628).
- drm/xe: Fix memory leak in xe_vm_madvise_ioctl (bsc#1012628).
- cifs: open files should not hold ref on superblock
(bsc#1012628).
- crypto: atmel-sha204a - Fix OOM ->tfm_count leak (bsc#1012628).
- netconsole: fix sysdata_release_enabled_show checking wrong flag
(bsc#1012628).
- firmware: stratix10-svc: Add Multi SVC clients support
(bsc#1012628).
- firmware: stratix10-svc: Delete some stray tabs (bsc#1012628).
- net: macb: Reinitialize tx/rx queue pointer registers and rx
ring during resume (bsc#1012628).
- net: macb: Introduce gem_init_rx_ring() (bsc#1012628).
- LoongArch: Check return values for set_memory_{rw,rox}
(bsc#1012628).
- drm/i915/psr: Write DSC parameters on Selective Update in ET
mode (bsc#1012628).
- drm/i915/dsc: Add helper for writing DSC Selective Update ET
parameters (bsc#1012628).
- drm/i915/dsc: Add Selective Update register definitions
(bsc#1012628).
- ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION
(bsc#1012628).
- ksmbd: unset conn->binding on failed binding request
(bsc#1012628).
- smb: client: fix krb5 mount with username option (bsc#1012628).
- drm/amd: Fix hang on amdgpu unload by using
pci_dev_is_disconnected() (bsc#1012628).
- Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before
access (bsc#1012628).
- Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()
(bsc#1012628).
- crypto: padlock-sha - Disable for Zhaoxin processor
(bsc#1012628).
- mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN
stations (bsc#1012628).
- batman-adv: avoid OGM aggregation when skb tailroom is
insufficient (bsc#1012628).
- parisc: Flush correct cache in cacheflush() syscall
(bsc#1012628).
- bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler
(bsc#1012628).
- net: macb: fix use-after-free access to PTP clock (bsc#1012628).
- NFC: nxp-nci: allow GPIOs to sleep (bsc#1012628).
- LoongArch: No need to flush icache if text copy failed
(bsc#1012628).
- LoongArch: Give more information if kmem access failed
(bsc#1012628).
- mm/huge_memory: fix early failure try_to_migrate() when split
huge pmd for shared THP (bsc#1012628).
- mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd()
(bsc#1012628).
- mm/rmap: fix incorrect pte restoration for lazyfree folios
(bsc#1012628).
- crash_dump: don't log dm-crypt key bytes in
read_key_from_user_keying (bsc#1012628).
- nvdimm/bus: Fix potential use after free in asynchronous
initialization (bsc#1012628).
- sunrpc: fix cache_request leak in cache_release (bsc#1012628).
- HID: bpf: prevent buffer overflow in hid_hw_request
(bsc#1012628).
- selftests/hid: fix compilation when bpf_wq and hid_device are
not exported (bsc#1012628).
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
(bsc#1012628).
- NFSD: Hold net reference for the lifetime of
/proc/fs/nfs/exports fd (bsc#1012628).
- NFSD: Defer sub-object cleanup in export put callbacks
(bsc#1012628).
- commit a439317
* Mon Mar 23 2026 pfalcato@suse.de
- update to 7.0-rc5
- refresh configs
- commit fd8bc21
* Thu Mar 19 2026 jslaby@suse.cz
- Linux 6.19.9 (bsc#1012628).
- remoteproc: qcom_wcnss: Fix reserved region mapping failure
(bsc#1012628).
- powerpc/uaccess: Fix inline assembly for clang build on PPC32
(bsc#1012628).
- powerpc/kexec/core: use big-endian types for crash variables
(bsc#1012628).
- powerpc/crash: adjust the elfcorehdr size (bsc#1012628).
- remoteproc: sysmon: Correct subsys_name_len type in QMI request
(bsc#1012628).
- remoteproc: mediatek: Unprepare SCP clock during system suspend
(bsc#1012628).
- powerpc: 83xx: km83xx: Fix keymile vendor prefix (bsc#1012628).
- smb/server: Fix another refcount leak in smb2_open()
(bsc#1012628).
- scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT
(bsc#1012628).
- ACPI: PM: Save NVS memory on Lenovo G70-35 (bsc#1012628).
- scsi: ufs: core: Reset urgent_bkops_lvl to allow runtime PM
power mode (bsc#1012628).
- fs: init flags_valid before calling vfs_fileattr_get
(bsc#1012628).
- scsi: mpi3mr: Add NULL checks when resetting request and reply
queues (bsc#1012628).
- ALSA: hda/realtek: Fix speaker pop on Star Labs StarFighter
(bsc#1012628).
- unshare: fix unshare_fs() handling (bsc#1012628).
- wifi: mac80211: set default WMM parameters on all links
(bsc#1012628).
- ACPI: OSI: Add DMI quirk for Acer Aspire One D255 (bsc#1012628).
- scsi: ses: Fix devices attaching to different hosts
(bsc#1012628).
- ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table
(bsc#1012628).
- ASoC: cs42l43: Report insert for exotic peripherals
(bsc#1012628).
- scsi: ufs: core: Fix possible NULL pointer dereference in
ufshcd_add_command_trace() (bsc#1012628).
- scsi: ufs: core: Fix shift out of bounds when MAXQ=32
(bsc#1012628).
- ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB
Audio 2.0 (bsc#1012628).
- drm/amdgpu/vcn5: Add SMU dpm interface type (bsc#1012628).
- ALSA: usb-audio: Check max frame size for implicit feedback
mode, too (bsc#1012628).
- nfs: return EISDIR on nfs3_proc_create if d_alias is a dir
(bsc#1012628).
- drm/msm/dpu: Fix LM size on a number of platforms (bsc#1012628).
- drm/msm/dsi: fix hdisplay calculation when programming dsi
registers (bsc#1012628).
- xprtrdma: Decrement re_receiving on the early exit paths
(bsc#1012628).
- btrfs: hold space_info->lock when clearing periodic reclaim
ready (bsc#1012628).
- drm/msm/a6xx: Fix the bogus protect error on X2-85
(bsc#1012628).
- workqueue: Use POOL_BH instead of WQ_BH when checking pool flags
(bsc#1012628).
- perf disasm: Fix off-by-one bug in outside check (bsc#1012628).
- drm/msm/a8xx: Fix ubwc config related to swizzling
(bsc#1012628).
- dt-bindings: display/msm: qcom,sm8750-mdss: Fix model typo
(bsc#1012628).
- net: dsa: realtek: rtl8365mb: remove ifOutDiscards from
rx_packets (bsc#1012628).
- drm/msm/dsi: fix pclk rate calculation for bonded dsi
(bsc#1012628).
- drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT
for smu v13 (bsc#1012628).
- drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT
for smu v14 (bsc#1012628).
- drm/amdgpu: Fix kernel-doc comments for some LUT properties
(bsc#1012628).
- bonding: do not set usable_slaves for broadcast mode
(bsc#1012628).
- bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link
states (bsc#1012628).
- net/mlx5: Fix deadlock between devlink lock and esw->wq
(bsc#1012628).
- net/mlx5: Fix crash when moving to switchdev mode (bsc#1012628).
- net/mlx5: Fix peer miss rules host disabled checks
(bsc#1012628).
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
(bsc#1012628).
- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ
(bsc#1012628).
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ
(bsc#1012628).
- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
on TEQL slave xmit (bsc#1012628).
- rxrpc, afs: Fix missing error pointer check after
rxrpc_kernel_lookup_peer() (bsc#1012628).
- net: spacemit: Fix error handling in
emac_alloc_rx_desc_buffers() (bsc#1012628).
- net: spacemit: Fix error handling in emac_tx_mem_map()
(bsc#1012628).
- drm/sitronix/st7586: fix bad pixel data due to byte swap
(bsc#1012628).
- firmware: cs_dsp: Fix fragmentation regression in firmware
download (bsc#1012628).
- spi: amlogic: spifc-a4: Fix DMA mapping error handling
(bsc#1012628).
- spi: rockchip-sfc: Fix double-free in remove() callback
(bsc#1012628).
- ASoC: soc-core: drop delayed_work_pending() check before flush
(bsc#1012628).
- ASoC: soc-core: flush delayed work before removing DAIs and
widgets (bsc#1012628).
- ASoC: simple-card-utils: fix graph_util_is_ports0() for DT
overlays (bsc#1012628).
- net: sfp: improve Huawei MA5671a fixup (bsc#1012628).
- serial: caif: hold tty->link reference in ldisc_open and
ser_release (bsc#1012628).
- bnxt_en: Fix RSS table size check when changing ethtool channels
(bsc#1012628).
- drm/i915/dp: Read ALPM caps after DPCD init (bsc#1012628).
- net: enetc: fix incorrect fallback PHY address handling
(bsc#1012628).
- net: enetc: do not skip setting LaBCR[MDIO_PHYAD_PRTAD] for
addr 0 (bsc#1012628).
- mctp: i2c: fix skb memory leak in receive path (bsc#1012628).
- can: hi311x: hi3110_open(): add check for hi3110_power_enable()
return value (bsc#1012628).
- bonding: fix type confusion in bond_setup_by_slave()
(bsc#1012628).
- mctp: route: hold key->lock in mctp_flow_prepare_output()
(bsc#1012628).
- amd-xgbe: fix link status handling in xgbe_rx_adaptation
(bsc#1012628).
- amd-xgbe: prevent CRC errors during RX adaptation with AN
disabled (bsc#1012628).
- amd-xgbe: reset PHY settings before starting PHY (bsc#1012628).
- net: add xmit recursion limit to tunnel xmit functions
(bsc#1012628).
- netfilter: nf_tables: Fix for duplicate device in netdev hooks
(bsc#1012628).
- netfilter: nf_tables: always walk all pending catchall elements
(bsc#1012628).
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in
pipapo_drop() (bsc#1012628).
- netfilter: x_tables: guard option walkers against 1-byte tail
reads (bsc#1012628).
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict
error path (bsc#1012628).
- netfilter: nfnetlink_cthelper: fix OOB read in
nfnl_cthelper_dump_table() (bsc#1012628).
- netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
(bsc#1012628).
- perf annotate: Fix hashmap__new() error checking (bsc#1012628).
- regulator: pca9450: Correct interrupt type (bsc#1012628).
- regulator: pca9450: Correct probed name for PCA9452
(bsc#1012628).
- perf ftrace: Fix hashmap__new() error checking (bsc#1012628).
- sched: idle: Make skipping governor callbacks more consistent
(bsc#1012628).
- nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set
(bsc#1012628).
- nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1012628).
- drivers: net: ice: fix devlink parameters get without irdma
(bsc#1012628).
- iavf: fix PTP use-after-free during reset (bsc#1012628).
- iavf: fix incorrect reset handling in callbacks (bsc#1012628).
- accel/amdxdna: Fix runtime suspend deadlock when there is
pending job (bsc#1012628).
- ASoC: codecs: rt1011: Use component to get the dapm context
in spk_mode_put (bsc#1012628).
- i40e: fix src IP mask checks and memcpy argument names in
cloud filter (bsc#1012628).
- e1000/e1000e: Fix leak in DMA error cleanup (bsc#1012628).
- page_pool: store detach_time as ktime_t to avoid false-negatives
(bsc#1012628).
- net: bcmgenet: fix broken EEE by converting to phylib-managed
state (bsc#1012628).
- ACPI: OSL: fix __iomem type on return from
acpi_os_map_generic_address() (bsc#1012628).
- ASoC: amd: acp3x-rt5682-max9836: Add missing error check for
clock acquisition (bsc#1012628).
- ASoC: detect empty DMI strings (bsc#1012628).
- drm/amdkfd: Unreserve bo if queue update failed (bsc#1012628).
- ASoC: amd: acp-mach-common: Add missing error check for clock
acquisition (bsc#1012628).
- io_uring: fix physical SQE bounds check for SQE_MIXED 128-byte
ops (bsc#1012628).
- perf synthetic-events: Fix stale build ID in module MMAP2
records (bsc#1012628).
- net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled
(bsc#1012628).
- net: dsa: realtek: Fix LED group port bit for non-zero LED group
(bsc#1012628).
- neighbour: restore protocol != 0 check in pneigh update
(bsc#1012628).
- net/mana: Null service_wq on setup error to prevent double
destroy (bsc#1012628).
- net: ethernet: ti: am65-cpsw-nuss: Fix rx_filter value for
PTP support (bsc#1012628).
- octeontx2-af: devlink: fix NIX RAS reporter recovery condition
(bsc#1012628).
- octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt
status (bsc#1012628).
- net: prevent NULL deref in ip[6]tunnel_xmit() (bsc#1012628).
- iio: imu: inv-mpu9150: fix irq ack preventing irq storms
(bsc#1012628).
- usb: gadget: f_mass_storage: Fix potential integer overflow
in check_command_size_in_blocks() (bsc#1012628).
- drm/amdgpu: ensure no_hw_access is visible before MMIO
(bsc#1012628).
- cgroup: fix race between task migration and iteration
(bsc#1012628).
- sched_ext: Remove redundant css_put() in scx_cgroup_init()
(bsc#1012628).
- cgroup: Don't expose dead tasks in cgroup (bsc#1012628).
- ALSA: pcm: fix use-after-free on linked stream runtime in
snd_pcm_drain() (bsc#1012628).
- ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2
mixer interfaces (bsc#1012628).
- can: gs_usb: gs_can_open(): always configure bitrates before
starting device (bsc#1012628).
- net: usb: lan78xx: fix silent drop of packets with checksum
errors (bsc#1012628).
- net: usb: lan78xx: fix TX byte statistics for small packets
(bsc#1012628).
- net: usb: lan78xx: fix WARN in __netif_napi_del_locked on
disconnect (bsc#1012628).
- net: usb: lan78xx: skip LTM configuration for LAN7850
(bsc#1012628).
- gpib: lpvo_usb: fix unintended binding of FTDI 8U232AM devices
(bsc#1012628).
- rust_binder: fix oneway spam detection (bsc#1012628).
- rust_binder: check ownership before using vma (bsc#1012628).
- rust_binder: avoid reading the written value in offsets array
(bsc#1012628).
- rust_binder: call set_notification_done() without proc lock
(bsc#1012628).
- rust: kbuild: allow `unused_features` (bsc#1012628).
- rust: kbuild: emit dep-info into $(depfile) directly
(bsc#1012628).
- rust: str: make NullTerminatedFormatter public (bsc#1012628).
- ata: libata-core: Add BRIDGE_OK quirk for QEMU drives
(bsc#1012628).
- ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA
(bsc#1012628).
- KVM: arm64: Fix protected mode handling of pages larger than
4kB (bsc#1012628).
- KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM
(bsc#1012628).
- KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with
in-kernel APIC (bsc#1012628).
- KVM: SVM: Set/clear CR8 write interception when AVIC is
(de)activated (bsc#1012628).
- KVM: arm64: pkvm: Fallback to level-3 mapping on host stage-2
fault (bsc#1012628).
- KVM: arm64: vgic: Pick EOIcount deactivations from AP-list tail
(bsc#1012628).
- KVM: arm64: pkvm: Don't reprobe for ICH_VTR_EL2.TDS on CPU
hotplug (bsc#1012628).
- USB: add QUIRK_NO_BOS for video capture several devices
(bsc#1012628).
- usb/core/quirks: Add Huawei ME906S-device to wakeup quirk
(bsc#1012628).
- USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb
speed (bsc#1012628).
- usb: xhci: Fix memory leak in xhci_disable_slot() (bsc#1012628).
- usb: xhci: Prevent interrupt storm on host controller error
(HCE) (bsc#1012628).
- xhci: Fix NULL pointer dereference when reading portli debugfs
files (bsc#1012628).
- usb: yurex: fix race in probe (bsc#1012628).
- usb: dwc3: pci: add support for the Intel Nova Lake -H
(bsc#1012628).
- usb: misc: uss720: properly clean up reference in uss720_probe()
(bsc#1012628).
- usb: core: don't power off roothub PHYs if phy_set_mode()
fails (bsc#1012628).
- usb: cdc-acm: Restore CAP_BRK functionnality to CH343
(bsc#1012628).
- usb: roles: get usb role switch from parent only for
usb-b-connector (bsc#1012628).
- usb: typec: altmode/displayport: set displayport signaling
rate in configure message (bsc#1012628).
- USB: usbcore: Introduce usb_bulk_msg_killable() (bsc#1012628).
- USB: usbtmc: Use usb_bulk_msg_killable() with user-specified
timeouts (bsc#1012628).
- USB: core: Limit the length of unkillable synchronous timeouts
(bsc#1012628).
- usb: class: cdc-wdm: fix reordering issue in read code path
(bsc#1012628).
- usb: renesas_usbhs: fix use-after-free in ISR during device
removal (bsc#1012628).
- usb: gadget: f_hid: fix SuperSpeed descriptors (bsc#1012628).
- usb: mdc800: handle signal and read racing (bsc#1012628).
- usb: gadget: uvc: fix interval_duration calculation
(bsc#1012628).
- usb: image: mdc800: kill download URB on timeout (bsc#1012628).
- usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus
handling (bsc#1012628).
- usb: gadget: f_ncm: Fix atomic context locking issue
(bsc#1012628).
- usb: legacy: ncm: Fix NPE in gncm_bind (bsc#1012628).
- Revert "usb: gadget: f_ncm: Fix atomic context locking issue"
(bsc#1012628).
- Revert "usb: legacy: ncm: Fix NPE in gncm_bind" (bsc#1012628).
- Revert "usb: gadget: u_ether: Add auto-cleanup helper for
freeing net_device" (bsc#1012628).
- Revert "usb: gadget: f_ncm: align net_device lifecycle with
bind/unbind" (bsc#1012628).
- Revert "usb: gadget: u_ether: add gether_opts for config
caching" (bsc#1012628).
- usb: gadget: f_ncm: Fix net_device lifecycle with device_move
(bsc#1012628).
- mm/tracing: rss_stat: ensure curr is false from kthread context
(bsc#1012628).
- ceph: fix i_nlink underrun during async unlink (bsc#1012628).
- ceph: do not skip the first folio of the next object in
writeback (bsc#1012628).
- ceph: fix memory leaks in ceph_mdsc_build_path() (bsc#1012628).
- ALSA: usb-audio: Improve Focusrite sample rate filtering
(bsc#1012628).
- objtool/klp: Fix detection of corrupt static branch/call entries
(bsc#1012628).
- objtool: Fix data alignment in elf_add_data() (bsc#1012628).
- objtool: Fix another stack overflow in validate_branch()
(bsc#1012628).
- irqchip/riscv-aplic: Preserve APLIC states across suspend/resume
(bsc#1012628).
- irqchip/riscv-aplic: Do not clear ACPI dependencies on probe
failure (bsc#1012628).
- irqchip/riscv-aplic: Register syscore operations only once
(bsc#1012628).
- time/jiffies: Mark jiffies_64_to_clock_t() notrace
(bsc#1012628).
- i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach
and reattach (bsc#1012628).
- powerpc, perf: Check that current->mm is alive before getting
user callchain (bsc#1012628).
- scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS
suspend (bsc#1012628).
- scsi: qla2xxx: Completely fix fcport double free (bsc#1012628).
- scsi: hisi_sas: Fix NULL pointer exception during user_scan()
(bsc#1012628).
- mm/kfence: fix KASAN hardware tag faults during late enablement
(bsc#1012628).
- mmc: mmci: Fix device_node reference leak in
of_get_dml_pipe_index() (bsc#1012628).
- mm/kfence: disable KFENCE upon KASAN HW tags enablement
(bsc#1012628).
- mmc: sdhci-brcmstb: use correct register offset for V1 pin_sel
restore (bsc#1012628).
- mmc: dw_mmc-rockchip: Fix runtime PM support for internal
phase support (bsc#1012628).
- mmc: core: Avoid bitfield RMW for claim/retune flags
(bsc#1012628).
- ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop
and start (bsc#1012628).
- tipc: fix divide-by-zero in tipc_sk_filter_connect()
(bsc#1012628).
- firmware: stratix10-rsu: Fix NULL pointer dereference when
RSU is disabled (bsc#1012628).
- kprobes: avoid crash when rmmod/insmod after ftrace killed
(bsc#1012628).
- ceph: add a bunch of missing ceph_path_info initializers
(bsc#1012628).
- libceph: Fix potential out-of-bounds access in
ceph_handle_auth_reply() (bsc#1012628).
- libceph: reject preamble if control segment is empty
(bsc#1012628).
- libceph: prevent potential out-of-bounds reads in
process_message_header() (bsc#1012628).
- libceph: Use u32 for non-negative values in ceph_monmap_decode()
(bsc#1012628).
- libceph: admit message frames only in CEPH_CON_S_OPEN state
(bsc#1012628).
- Revert "tcpm: allow looking for role_sw device in the main node"
(bsc#1012628).
- Revert "ptdesc: remove references to folios from
__pagetable_ctor() and pagetable_dtor()" (bsc#1012628).
- mm: Fix a hmm_range_fault() livelock / starvation problem
(bsc#1012628).
- nsfs: tighten permission checks for ns iteration ioctls
(bsc#1012628).
- liveupdate: luo_file: remember retrieve() status (bsc#1012628).
- kthread: consolidate kthread exit paths to prevent
use-after-free (bsc#1012628).
- cpufreq: intel_pstate: Fix NULL pointer dereference in
update_cpu_qos_request() (bsc#1012628).
- drm/amdgpu: add upper bound check on user inputs in signal ioctl
(bsc#1012628).
- drm/amdgpu/userq: Fix reference leak in amdgpu_userq_wait_ioctl
(bsc#1012628).
- drm/amdgpu: add upper bound check on user inputs in wait ioctl
(bsc#1012628).
- drm/amd: Disable MES LR compute W/A (bsc#1012628).
- ipmi:si: Don't block module unload if the BMC is messed up
(bsc#1012628).
- ipmi:si: Use a long timeout when the BMC is misbehaving
(bsc#1012628).
- drm/bridge: samsung-dsim: Fix memory leak in error path
(bsc#1012628).
- drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used
(bsc#1012628).
- ipmi:si: Handle waiting messages when BMC failure detected
(bsc#1012628).
- nouveau/gsp: drop WARN_ON in ACPI probes (bsc#1012628).
- gpiolib: normalize the return value of gc->get() on behalf of
buggy drivers (bsc#1012628).
- ipmi:si: Fix check for a misbehaving BMC (bsc#1012628).
- drm/xe/sync: Fix user fence leak on alloc failure (bsc#1012628).
- drm/xe/sync: Cleanup partially initialized sync on parse failure
(bsc#1012628).
- s390/pfault: Fix virtual vs physical address confusion
(bsc#1012628).
- bpf: Fix kprobe_multi cookies access in show_fdinfo callback
(bsc#1012628).
- arm64: gcs: Honour mprotect(PROT_NONE) on shadow stack mappings
(bsc#1012628).
- nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit()
(bsc#1012628).
- device property: Allow secondary lookup in
fwnode_get_next_child_node() (bsc#1012628).
- irqchip/gic-v3-its: Limit number of per-device MSIs to the
range the ITS supports (bsc#1012628).
- btrfs: fix chunk map leak in btrfs_map_block() after
btrfs_chunk_map_num_copies() (bsc#1012628).
- sched_ext: Disable preemption between scx_claim_exit() and
kicking helper work (bsc#1012628).
- sched_ext: Fix starvation of scx_enable() under fair-class
saturation (bsc#1012628).
- iomap: don't mark folio uptodate if read IO has bytes pending
(bsc#1012628).
- iomap: reject delalloc mappings during writeback (bsc#1012628).
- nsfs: tighten permission checks for handle opening
(bsc#1012628).
- nstree: tighten permission checks for listing (bsc#1012628).
- ice: reintroduce retry mechanism for indirect AQ (bsc#1012628).
- kunit: irq: Ensure timer doesn't fire too frequently
(bsc#1012628).
- ixgbevf: fix link setup issue (bsc#1012628).
- mm: memfd_luo: always make all folios uptodate (bsc#1012628).
- mm: memfd_luo: always dirty all folios (bsc#1012628).
- mm/huge_memory: fix a folio_split() race condition with
folio_try_get() (bsc#1012628).
- mm/damon/core: clear walk_control on inactive context in
damos_walk() (bsc#1012628).
- mm/slab: fix an incorrect check in obj_exts_alloc_size()
(bsc#1012628).
- staging: sm750fb: add missing pci_release_region on error and
removal (bsc#1012628).
- staging: rtl8723bs: properly validate the data in
rtw_get_ie_ex() (bsc#1012628).
- staging: rtl8723bs: fix potential out-of-bounds read in
rtw_restruct_wmm_ie (bsc#1012628).
- pinctrl: cy8c95x0: Don't miss reading the last bank registers
(bsc#1012628).
- selftests: fix mntns iteration selftests (bsc#1012628).
- media: dvb-net: fix OOB access in ULE extension header tables
(bsc#1012628).
- net: mana: Ring doorbell at 4 CQ wraparounds (bsc#1012628).
- net: Fix rcu_tasks stall in threaded busypoll (bsc#1012628).
- ice: fix retry for AQ command 0x06EE (bsc#1012628).
- fgraph: Fix thresh_return clear per-task notrace (bsc#1012628).
- tracing: Fix syscall events activation by ensuring refcount
hits zero (bsc#1012628).
- net/tcp-ao: Fix MAC comparison to be constant-time
(bsc#1012628).
- fgraph: Fix thresh_return nosleeptime double-adjust
(bsc#1012628).
- net/tcp-md5: Fix MAC comparison to be constant-time
(bsc#1012628).
- batman-adv: Avoid double-rtnl_lock ELP metric worker
(bsc#1012628).
- drm/xe/xe2_hpg: Correct implementation of Wa_16025250150
(bsc#1012628).
- pmdomain: rockchip: Fix PD_VCODEC for RK3588 (bsc#1012628).
- parisc: Increase initial mapping to 64 MB with KALLSYMS
(bsc#1012628).
- nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
(bsc#1012628).
- arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix
kexec/hibernation (bsc#1012628).
- hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
(bsc#1012628).
- io_uring/zcrx: use READ_ONCE with user shared RQEs
(bsc#1012628).
- parisc: Fix initial page table creation for boot (bsc#1012628).
- arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS
faults (bsc#1012628).
- parisc: Check kernel mapping earlier at bootup (bsc#1012628).
- io_uring/net: reject SEND_VECTORIZED when unsupported
(bsc#1012628).
- regulator: pf9453: Respect IRQ trigger settings from firmware
(bsc#1012628).
- pmdomain: bcm: bcm2835-power: Fix broken reset status read
(bsc#1012628).
- drm/ttm: Fix ttm_pool_beneficial_order() return type
(bsc#1012628).
- crypto: ccp - allow callers to use HV-Fixed page API when SEV
is disabled (bsc#1012628).
- s390/stackleak: Fix __stackleak_poison() inline assembly
constraint (bsc#1012628).
- ata: libata-core: Disable LPM on ST1000DM010-2EP102
(bsc#1012628).
- s390/xor: Fix xor_xc_2() inline assembly constraints
(bsc#1012628).
- drm/amd/display: Fallback to boot snapshot for dispclk
(bsc#1012628).
- s390/xor: Fix xor_xc_5() inline assembly (bsc#1012628).
- slab: distinguish lock and trylock for sheaf_flush_main()
(bsc#1012628).
- memcg: fix slab accounting in refill_obj_stock() trylock path
(bsc#1012628).
- ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()
(bsc#1012628).
- smb: server: fix use-after-free in smb2_open() (bsc#1012628).
- ksmbd: Don't log keys in SMB3 signing and encryption key
generation (bsc#1012628).
- ksmbd: fix use-after-free by using call_rcu() for oplock_info
(bsc#1012628).
- net: mctp: fix device leak on probe failure (bsc#1012628).
- net: nexthop: fix percpu use-after-free in remove_nh_grp_entry
(bsc#1012628).
- net: ncsi: fix skb leak in error paths (bsc#1012628).
- net: ethernet: arc: emac: quiesce interrupts before requesting
IRQ (bsc#1012628).
- net: dsa: microchip: Fix error path in PTP IRQ setup
(bsc#1012628).
- net: macb: Shuffle the tx ring before enabling tx (bsc#1012628).
- drm/amd/pm: remove invalid gpu_metrics.energy_accumulator on
smu v13.0.x (bsc#1012628).
- drm/amdgpu: Fix use-after-free race in VM acquire (bsc#1012628).
- drm/amd: Set num IP blocks to 0 if discovery fails
(bsc#1012628).
- drm/amd: Fix NULL pointer dereference in device cleanup
(bsc#1012628).
- drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding
(bsc#1012628).
- drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS
output (bsc#1012628).
- drm/i915: Fix potential overflow of shmem scatterlist length
(bsc#1012628).
- drm/i915/psr: Repeat Selective Update area alignment
(bsc#1012628).
- drm/msm: Fix dma_free_attrs() buffer size (bsc#1012628).
- drm/amd: Fix a few more NULL pointer dereference in device
cleanup (bsc#1012628).
- drm/msm/dpu: Correct the SA8775P intr_underrun/intr_underrun
index (bsc#1012628).
- drm/i915/vrr: Configure VRR timings after enabling
TRANS_DDI_FUNC_CTL (bsc#1012628).
- tracing: Fix enabling multiple events on the kernel command
line and bootconfig (bsc#1012628).
- tracing: Fix trace_buf_size= cmdline parameter with sizes >=
2G (bsc#1012628).
- net-shapers: don't free reply skb after genlmsg_reply()
(bsc#1012628).
- qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size
(bsc#1012628).
- can: dev: keep the max bitrate error at 5% (bsc#1012628).
- io_uring/kbuf: check if target buffer list is still legacy on
recycle (bsc#1012628).
- cifs: make default value of retrans as zero (bsc#1012628).
- xfs: fix integer overflow in bmap intent sort comparator
(bsc#1012628).
- xfs: fix returned valued from xfs_defer_can_append
(bsc#1012628).
- xfs: fix undersized l_iclog_roundoff values (bsc#1012628).
- xfs: ensure dquot item is deleted from AIL only after log
shutdown (bsc#1012628).
- sched_ext: Fix enqueue_task_scx() truncation of upper enqueue
flags (bsc#1012628).
- s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute
(bsc#1012628).
- dt-bindings: display: msm: Fix reg ranges and clocks on Glymur
(bsc#1012628).
- ublk: fix NULL pointer dereference in ublk_ctrl_set_size()
(bsc#1012628).
- s390/dasd: Move quiesce state with pprc swap (bsc#1012628).
- s390/dasd: Copy detected format information to secondary device
(bsc#1012628).
- powerpc/pseries: Correct MSI allocation tracking (bsc#1012628).
- powerpc64/bpf: fix kfunc call support (bsc#1012628).
- powerpc64/bpf: fix the address returned by bpf_get_func_ip
(bsc#1012628).
- lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed
brace error (bsc#1012628).
- scsi: core: Fix error handling for scsi_alloc_sdev()
(bsc#1012628).
- x86/apic: Disable x2apic on resume if the kernel expects so
(bsc#1012628).
- kprobes: Remove unneeded warnings from __arm_kprobe_ftrace()
(bsc#1012628).
- lib/bootconfig: fix snprintf truncation check in
xbc_node_compose_key_after() (bsc#1012628).
- lib/bootconfig: check bounds before writing in
__xbc_open_brace() (bsc#1012628).
- smb: client: fix atomic open with O_DIRECT & O_SYNC
(bsc#1012628).
- smb: client: fix in-place encryption corruption in SMB2_write()
(bsc#1012628).
- smb: client: fix iface port assignment in
parse_server_interfaces (bsc#1012628).
- btrfs: fix transaction abort when snapshotting received
subvolumes (bsc#1012628).
- btrfs: fix transaction abort on file creation due to name hash
collision (bsc#1012628).
- btrfs: fix transaction abort on set received ioctl due to item
overflow (bsc#1012628).
- btrfs: add missing RCU unlock in error path in
try_release_subpage_extent_buffer() (bsc#1012628).
- btrfs: abort transaction on failure to update root in the
received subvol ioctl (bsc#1012628).
- iio: dac: ds4424: reject -128 RAW value (bsc#1012628).
- iio: frequency: adf4377: Fix duplicated soft reset mask
(bsc#1012628).
- iio: chemical: sps30_serial: fix buffer size in
sps30_serial_read_meas() (bsc#1012628).
- iio: chemical: sps30_i2c: fix buffer size in
sps30_i2c_read_meas() (bsc#1012628).
- iio: magnetometer: tlv493d: remove erroneous shift in X-axis
data (bsc#1012628).
- iio: potentiometer: mcp4131: fix double application of wiper
shift (bsc#1012628).
- iio: chemical: bme680: Fix measurement wait duration calculation
(bsc#1012628).
- iio: buffer: Fix wait_queue not being removed (bsc#1012628).
- iio: gyro: mpu3050-core: fix pm_runtime error handling
(bsc#1012628).
- iio: imu: adis: Fix NULL pointer dereference in adis_init
(bsc#1012628).
- iio: gyro: mpu3050-i2c: fix pm_runtime error handling
(bsc#1012628).
- iio: imu: inv_icm45600: fix regulator put warning when probe
fails (bsc#1012628).
- iio: light: bh1780: fix PM runtime leak on error path
(bsc#1012628).
- iio: imu: inv_icm45600: fix INT1 drive bit inverted
(bsc#1012628).
- iio: imu: inv_icm42600: fix odr switch to the same value
(bsc#1012628).
- iio: imu: inv_icm42600: fix odr switch when turning buffer off
(bsc#1012628).
- iio: proximity: hx9023s: fix assignment order for __counted_by
(bsc#1012628).
- iio: proximity: hx9023s: Protect against division by zero in
set_samp_freq (bsc#1012628).
- i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout
errors (bsc#1012628).
- i3c: mipi-i3c-hci: Factor out DMA mapping from queuing path
(bsc#1012628).
- i3c: mipi-i3c-hci: Consolidate spinlocks (bsc#1012628).
- i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue
abort (bsc#1012628).
- i3c: mipi-i3c-hci: Add missing TID field to no-op command
descriptor (bsc#1012628).
- i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1012628).
- i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA
dequeue (bsc#1012628).
- mm/damon: rename DAMON_MIN_REGION to DAMON_MIN_REGION_SZ
(bsc#1012628).
- mm/damon: rename min_sz_region of damon_ctx to min_region_sz
(bsc#1012628).
- mm/damon/core: disallow non-power of two min_region_sz
(bsc#1012628).
- KVM: arm64: gic: Set vgic_model before initing private IRQs
(bsc#1012628).
- KVM: arm64: Eagerly init vgic dist/redist on vgic creation
(bsc#1012628).
- io_uring: ensure ctx->rings is stable for task work flags
manipulation (bsc#1012628).
- io_uring/eventfd: use ctx->rings_rcu for flags checking
(bsc#1012628).
- cxl/acpi: Fix CXL_ACPI and CXL_PMEM Kconfig tristate mismatch
(bsc#1012628).
- bpf: drop kthread_exit from noreturn_deny (bsc#1012628).
- sched_ext: Use WRITE_ONCE() for the write side of scx_enable
helper pointer (bsc#1012628).
- Rename to
patches.kernel.org/6.19.9-185-sched-mmcid-Prevent-CID-stalls-due-to-concurre.patch.
- Rename to
patches.kernel.org/6.19.9-186-sched-mmcid-Handle-vfork-CLONE_VM-correctly.patch.
- Rename to
patches.kernel.org/6.19.9-187-sched-mmcid-Remove-pointless-preempt-guard.patch.
- Rename to
patches.kernel.org/6.19.9-188-sched-mmcid-Avoid-full-tasklist-walks.patch.
- Rename to
patches.kernel.org/6.19.9-227-drm-i915-alpm-ALPM-disable-fixes.patch.
- Delete
patches.suse/usb-gadget-u_ether-use-linux-hex.h-header-file.patch.
- commit dcfeefc
* Wed Mar 18 2026 jslaby@suse.cz
- Refresh
patches.suse/sched-mmcid-Avoid-full-tasklist-walks.patch.
- Refresh
patches.suse/sched-mmcid-Handle-vfork-CLONE_VM-correctly.patch.
- Refresh
patches.suse/sched-mmcid-Prevent-CID-stalls-due-to-concurrent-for.patch.
- Refresh
patches.suse/sched-mmcid-Remove-pointless-preempt-guard.patch.
Update upstream status.
- commit c9155eb
* Tue Mar 17 2026 alnovak@suse.com
- Use unified maintainers' email address
- commit cfbe674
* Mon Mar 16 2026 pfalcato@suse.de
- update to 7.0-rc4
- Refresh configs
- CONFIG_I3C_OR_I2C=m (or =y)
- commit 6fe07f4
* Fri Mar 13 2026 jslaby@suse.cz
- Linux 6.19.8 (bsc#1012628).
- apparmor: fix race between freeing data and fs accessing it
(bsc#1012628).
- apparmor: fix race on rawdata dereference (bsc#1012628).
- apparmor: fix differential encoding verification (bsc#1012628).
- apparmor: fix unprivileged local user can do privileged policy
management (bsc#1012628).
- apparmor: Fix double free of ns_name in aa_replace_profiles()
(bsc#1012628).
- apparmor: fix missing bounds check on DEFAULT table in
verify_dfa() (bsc#1012628).
- apparmor: fix side-effect bug in match_char() macro usage
(bsc#1012628).
- apparmor: fix: limit the number of levels of policy namespaces
(bsc#1012628).
- apparmor: replace recursive profile removal with iterative
approach (bsc#1012628).
- apparmor: fix memory leak in verify_header (bsc#1012628).
- apparmor: validate DFA start states are in bounds in unpack_pdb
(bsc#1012628).
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
and shared blocks (bsc#1012628).
- net/sched: act_gate: snapshot parameters with RCU on replace
(bsc#1012628).
- commit 5a5a4f4
* Fri Mar 13 2026 jslaby@suse.cz
- Update
patches.kernel.org/6.19.1-003-smb-client-split-cached_fid-bitfields-to-avoid.patch
(bsc#1012628 CVE-2026-23230 bsc#1258430).
- Update
patches.kernel.org/6.19.1-004-ksmbd-fix-infinite-loop-caused-by-next_smb2_rc.patch
(bsc#1012628 CVE-2026-23220 bsc#1258432).
- Update
patches.kernel.org/6.19.1-005-ksmbd-add-chann_lock-to-protect-ksmbd_chann_li.patch
(bsc#1012628 CVE-2026-23226 bsc#1258820).
- Update
patches.kernel.org/6.19.1-006-smb-server-fix-leak-of-active_num_conn-in-ksmb.patch
(bsc#1012628 CVE-2026-23228 bsc#1258431).
- Update
patches.kernel.org/6.19.1-030-crypto-iaa-Fix-out-of-bounds-index-in-find_emp.patch
(bsc#1012628 CVE-2025-71231 bsc#1258424).
- Update
patches.kernel.org/6.19.1-032-crypto-omap-Allocate-OMAP_CRYPTO_FORCE_COPY-sc.patch
(bsc#1012628 CVE-2026-23222 bsc#1258484).
- Update
patches.kernel.org/6.19.1-033-crypto-virtio-Add-spinlock-protection-with-vir.patch
(bsc#1012628 CVE-2026-23229 bsc#1258429).
- Update
patches.kernel.org/6.19.1-035-nilfs2-Fix-potential-block-overflow-that-cause.patch
(bsc#1012628 CVE-2025-71237 bsc#1258467).
- Update
patches.kernel.org/6.19.1-036-hfs-ensure-sb-s_fs_info-is-always-cleaned-up.patch
(bsc#1012628 CVE-2025-71230 bsc#1258413).
- Update
patches.kernel.org/6.19.1-037-wifi-rtw88-Fix-alignment-fault-in-rtw_core_ena.patch
(bsc#1012628 CVE-2025-71229 bsc#1258415).
- Update
patches.kernel.org/6.19.1-038-scsi-qla2xxx-Validate-sp-before-freeing-associ.patch
(bsc#1012628 CVE-2025-71236 bsc#1258442).
- Update
patches.kernel.org/6.19.1-040-scsi-qla2xxx-Delay-module-unload-while-fabric-.patch
(bsc#1012628 CVE-2025-71235 bsc#1258469).
- Update
patches.kernel.org/6.19.1-041-scsi-qla2xxx-Free-sp-in-error-path-to-fix-syst.patch
(bsc#1012628 CVE-2025-71232 bsc#1258422).
- Update
patches.kernel.org/6.19.1-043-sched-mmcid-Don-t-assume-CID-is-CPU-owned-on-m.patch
(bsc#1012628 CVE-2026-23225 bsc#1258474).
- Update
patches.kernel.org/6.19.1-044-bus-fsl-mc-fix-use-after-free-in-driver_overri.patch
(bsc#1012628 CVE-2026-23221 bsc#1258660).
- Update
patches.kernel.org/6.19.1-045-erofs-fix-UAF-issue-for-file-backed-mounts-w-d.patch
(bsc#1012628 CVE-2026-23224 bsc#1258461).
- Update
patches.kernel.org/6.19.1-046-xfs-fix-UAF-in-xchk_btree_check_block_owner.patch
(bsc#1012628 CVE-2026-23223 bsc#1258483).
- Update
patches.kernel.org/6.19.1-047-drm-exynos-vidi-use-ctx-lock-to-protect-struct.patch
(bsc#1012628 CVE-2026-23227 bsc#1258472).
- Update
patches.kernel.org/6.19.1-048-PCI-endpoint-Avoid-creating-sub-groups-asynchr.patch
(bsc#1012628 CVE-2025-71233 bsc#1258421).
- Update
patches.kernel.org/6.19.1-049-wifi-rtl8xxxu-fix-slab-out-of-bounds-in-rtl8xx.patch
(bsc#1012628 CVE-2025-71234 bsc#1258419).
- Update
patches.kernel.org/6.19.3-001-scsi-qla2xxx-Fix-bsg_done-causing-double-free.patch
(bsc#1012628 CVE-2025-71238 bsc#1259186).
- Update
patches.kernel.org/6.19.3-005-fbdev-smscufx-properly-copy-ioctl-memory-to-ke.patch
(bsc#1012628 CVE-2026-23236 bsc#1259199).
- Update
patches.kernel.org/6.19.3-009-f2fs-fix-out-of-bounds-access-in-sysfs-attribu.patch
(bsc#1012628 CVE-2026-23235 bsc#1259195).
- Update
patches.kernel.org/6.19.3-010-f2fs-fix-to-avoid-UAF-in-f2fs_write_end_io.patch
(bsc#1012628 CVE-2026-23234 bsc#1259194).
- Update
patches.kernel.org/6.19.3-012-f2fs-fix-to-avoid-mapping-wrong-physical-block.patch
(bsc#1012628 CVE-2026-23233 bsc#1259193).
- Update
patches.kernel.org/6.19.3-015-Revert-f2fs-block-cache-dio-write-during-f2fs_.patch
(bsc#1012628 CVE-2026-23232 bsc#1259192).
- Update
patches.kernel.org/6.19.4-666-netfilter-nf_tables-fix-use-after-free-in-nf_t.patch
(bsc#1012628 CVE-2026-23231 bsc#1259188).
- Update
patches.kernel.org/6.19.6-454-espintcp-Fix-race-condition-in-espintcp_close.patch
(bsc#1012628 CVE-2026-23239 bsc#1259485).
- Update
patches.kernel.org/6.19.6-477-tls-Fix-race-condition-in-tls_sw_cancel_work_t.patch
(bsc#1012628 CVE-2026-23240 bsc#1259484).
Add CVE references.
- commit b7e70c1
* Thu Mar 12 2026 jslaby@suse.cz
- Linux 6.19.7 (bsc#1012628).
- perf/core: Fix refcount bug and potential UAF in perf_mmap
(bsc#1012628).
- drm/vmwgfx: Fix invalid kref_put callback in
vmw_bo_dirty_release (bsc#1012628).
- drm/vmwgfx: Return the correct value in vmw_translate_ptr
functions (bsc#1012628).
- debugobject: Make it work with deferred page initialization -
again (bsc#1012628).
- drm/logicvc: Fix device node reference leak in
logicvc_drm_config_parse() (bsc#1012628).
- KVM: arm64: Hide S1POE from guests when not supported by the
host (bsc#1012628).
- KVM: arm64: Fix ID register initialization for non-protected
pKVM guests (bsc#1012628).
- drm/fourcc: fix plane order for 10/12/16-bit YCbCr formats
(bsc#1012628).
- drm/tiny: sharp-memory: fix pointer error dereference
(bsc#1012628).
- irqchip/sifive-plic: Fix frozen interrupt due to affinity
setting (bsc#1012628).
- scsi: lpfc: Properly set WC for DPP mapping (bsc#1012628).
- scsi: pm8001: Fix use-after-free in pm8001_queue_command()
(bsc#1012628).
- accel: ethosu: Fix shift overflow in cmd_to_addr()
(bsc#1012628).
- drm/imx: parallel-display: check return value of
devm_drm_bridge_add() in imx_pd_probe() (bsc#1012628).
- drm/bridge: synopsys: dw-dp: Check return value of
devm_drm_bridge_add() in dw_dp_bind() (bsc#1012628).
- ALSA: scarlett2: Fix DSP filter control array handling
(bsc#1012628).
- ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite
devices (bsc#1012628).
- ALSA: usb-audio: Add QUIRK_FLAG_SKIP_IFACE_SETUP (bsc#1012628).
- gpio: shared: fix memory leaks (bsc#1012628).
- x86/fred: Correct speculative safety in fred_extint()
(bsc#1012628).
- x86/bug: Handle __WARN_printf() trap in early_fixup_exception()
(bsc#1012628).
- x86/cfi: Fix CFI rewrite for odd alignments (bsc#1012628).
- sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight
(bsc#1012628).
- sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime,
and helper functions (bsc#1012628).
- sched/fair: Introduce and use the vruntime_cmp() and
vruntime_op() wrappers for wrapped-signed aritmetics
(bsc#1012628).
- sched/fair: Fix zero_vruntime tracking (bsc#1012628).
- sched/fair: Only set slice protection at pick time
(bsc#1012628).
- sched/eevdf: Update se->vprot in reweight_entity()
(bsc#1012628).
- sched/fair: Fix lag clamp (bsc#1012628).
- rseq: Clarify rseq registration rseq_size bound check comment
(bsc#1012628).
- perf/core: Fix invalid wait context in ctx_sched_in()
(bsc#1012628).
- accel/amdxdna: Remove buffer size check when creating command BO
(bsc#1012628).
- accel/amdxdna: Switch to always use chained command
(bsc#1012628).
- accel/amdxdna: Fix crash when destroying a suspended hardware
context (bsc#1012628).
- accel/amdxdna: Reduce log noise during process termination
(bsc#1012628).
- accel/amdxdna: Fix dead lock for suspend and resume
(bsc#1012628).
- accel/amdxdna: Fix suspend failure after enabling turbo mode
(bsc#1012628).
- accel/amdxdna: Fix command hang on suspended hardware context
(bsc#1012628).
- accel/amdxdna: Fix out-of-bounds memset in command slot handling
(bsc#1012628).
- accel/amdxdna: Prevent ubuf size overflow (bsc#1012628).
- accel/amdxdna: Validate command buffer payload count
(bsc#1012628).
- drm/xe/wa: Steer RMW of MCR registers while building default
LRC (bsc#1012628).
- cgroup/cpuset: Fix incorrect change to effective_xcpus in
partition_xcpus_del() (bsc#1012628).
- cgroup/cpuset: Fix incorrect use of
cpuset_update_tasks_cpumask() in update_cpumasks_hier()
(bsc#1012628).
- clk: scu/imx8qxp: do not register driver in probe()
(bsc#1012628).
- cxl: Move devm_cxl_add_nvdimm_bridge() to cxl_pmem.ko
(bsc#1012628).
- cxl: Fix race of nvdimm_bus object when creating nvdimm objects
(bsc#1012628).
- cxl/mbox: validate payload size before accessing contents in
cxl_payload_from_user_allowed() (bsc#1012628).
- scsi: ufs: core: Move link recovery for hibern8 exit failure
to wl_resume (bsc#1012628).
- regulator: fp9931: Fix PM runtime reference leak in
fp9931_hwmon_read() (bsc#1012628).
- regulator: bq257xx: Fix device node reference leak in
bq257xx_reg_dt_parse_gpio() (bsc#1012628).
- irqchip/ls-extirq: Fix devm_of_iomap() error check
(bsc#1012628).
- io_uring/cmd_net: use READ_ONCE() for ->addr3 read
(bsc#1012628).
- zloop: advertise a volatile write cache (bsc#1012628).
- zloop: check for spurious options passed to remove
(bsc#1012628).
- drm/client: Do not destroy NULL modes (bsc#1012628).
- ALSA: usb-audio: Cap the packet size pre-calculations
(bsc#1012628).
- ALSA: usb-audio: Use inclusive terms (bsc#1012628).
- perf: Fix __perf_event_overflow() vs perf_remove_from_context()
race (bsc#1012628).
- s390/idle: Fix cpu idle exit cpu time accounting (bsc#1012628).
- s390/vtime: Fix virtual timer forwarding (bsc#1012628).
- s390/kexec: Disable stack protector in s390_reset_system()
(bsc#1012628).
- arm64: io: Rename ioremap_prot() to __ioremap_prot()
(bsc#1012628).
- arm64: io: Extract user memory type in ioremap_prot()
(bsc#1012628).
- PCI: dwc: ep: Refresh MSI Message Address cache on change
(bsc#1012628).
- PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry
(bsc#1012628).
- drm/amdgpu/userq: Do not allow userspace to trivially triger
kernel warnings (bsc#1012628).
- drm/amdgpu: Unlock a mutex before destroying it (bsc#1012628).
- drm/amdgpu: Fix locking bugs in error paths (bsc#1012628).
- drm/amdgpu: Fix error handling in slot reset (bsc#1012628).
- ALSA: hda: cs35l56: Fix signedness error in
cs35l56_hda_posture_put() (bsc#1012628).
- btrfs: free pages on error in btrfs_uring_read_extent()
(bsc#1012628).
- btrfs: fix error message order of parameters in
btrfs_delete_delayed_dir_index() (bsc#1012628).
- btrfs: fix incorrect key offset in error message in
check_dev_extent_item() (bsc#1012628).
- btrfs: fix objectid value in error message in
check_extent_data_ref() (bsc#1012628).
- btrfs: fix warning in scrub_verify_one_metadata() (bsc#1012628).
- btrfs: print correct subvol num if active swapfile prevents
deletion (bsc#1012628).
- btrfs: fix compat mask in error messages in
btrfs_check_features() (bsc#1012628).
- ALSA: usb: qcom: Correct parameter comment for
uaudio_transfer_buffer_setup() (bsc#1012628).
- mm/slab: pass __GFP_NOWARN to refill_sheaf() if fallback is
available (bsc#1012628).
- ASoC: SDCA: Fix comments for sdca_irq_request() (bsc#1012628).
- bpf, arm64: Force 8-byte alignment for JIT buffer to prevent
atomic tearing (bsc#1012628).
- bpf: Fix stack-out-of-bounds write in devmap (bsc#1012628).
- selftests/bpf: Fix OOB read in dmabuf_collector (bsc#1012628).
- sched_ext: Fix SCX_EFLAG_INITIALIZED being a no-op flag
(bsc#1012628).
- spi: stm32: fix missing pointer assignment in case of dma
chaining (bsc#1012628).
- PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value (bsc#1012628).
- bpf: Fix race in cpumap on PREEMPT_RT (bsc#1012628).
- bpf: Fix race in devmap on PREEMPT_RT (bsc#1012628).
- bpf: Add bitwise tracking for BPF_END (bsc#1012628).
- bpf: Introduce tnum_step to step through tnum's members
(bsc#1012628).
- bpf: Improve bounds when tnum has a single possible value
(bsc#1012628).
- uaccess: Fix scoped_user_read_access() for 'pointer to const'
(bsc#1012628).
- usb: gadget: u_ether: add gether_opts for config caching
(bsc#1012628).
- usb: gadget: u_ether: Add auto-cleanup helper for freeing
net_device (bsc#1012628).
- usb: gadget: f_ncm: align net_device lifecycle with bind/unbind
(bsc#1012628).
- accel/rocket: fix unwinding in error path in rocket_core_init
(bsc#1012628).
- accel/rocket: fix unwinding in error path in rocket_probe
(bsc#1012628).
- KVM: x86: Add x2APIC "features" to control EOI broadcast
suppression (bsc#1012628).
- eventpoll: Fix integer overflow in ep_loop_check_proc()
(bsc#1012628).
- namespace: fix proc mount iteration (bsc#1012628).
- media: dvb-core: fix wrong reinitialization of ringbuffer on
reopen (bsc#1012628).
- nfc: pn533: properly drop the usb interface reference on
disconnect (bsc#1012628).
- net: usb: kaweth: validate USB endpoints (bsc#1012628).
- net: usb: kalmia: validate USB endpoints (bsc#1012628).
- net: usb: pegasus: validate USB endpoints (bsc#1012628).
- can: ems_usb: ems_usb_read_bulk_callback(): check the proper
length of a message (bsc#1012628).
- can: usb: f81604: correctly anchor the urb in the read bulk
callback (bsc#1012628).
- can: ucan: Fix infinite loop from zero-length messages
(bsc#1012628).
- can: usb: etas_es58x: correctly anchor the urb in the read
bulk callback (bsc#1012628).
- can: usb: f81604: handle short interrupt urb messages properly
(bsc#1012628).
- can: usb: f81604: handle bulk write errors properly
(bsc#1012628).
- HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks
missing them (bsc#1012628).
- HID: pidff: Fix condition effect bit clearing (bsc#1012628).
- HID: multitouch: Keep latency normal on deactivate for
reactivation gesture (bsc#1012628).
- x86/efi: defer freeing of boot services memory (bsc#1012628).
- perf/x86/intel/uncore: Add per-scheduler IMC CAS count events
(bsc#1012628).
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths
(bsc#1012628).
- x86/sev: Allow IBPB-on-Entry feature for SNP guests
(bsc#1012628).
- x86/boot/sev: Move SEV decompressor variables into the .data
section (bsc#1012628).
- platform/x86: dell-wmi-sysman: Don't hex dump plaintext password
data (bsc#1012628).
- platform/x86: alienware-wmi-wmax: Add G-Mode support to m18
laptops (bsc#1012628).
- platform/x86: dell-wmi: Add audio/mic mute key codes
(bsc#1012628).
- ALSA: hda/realtek: Add quirk for HP Pavilion 15-eh1xxx to
enable mute LED (bsc#1012628).
- ALSA: doc: usb-audio: Add doc for QUIRK_FLAG_SKIP_IFACE_SETUP
(bsc#1012628).
- ALSA: usb-audio: Use correct version for UAC3 header validation
(bsc#1012628).
- ALSA: hda/intel: increase default bdl_pos_adj for Nvidia
controllers (bsc#1012628).
- ALSA: hda/realtek: fix model name typo for Samsung Galaxy Book
Flex (NT950QCG-X716) (bsc#1012628).
- ALSA: hda/realtek: Add quirk for Acer Aspire V3-572G
(bsc#1012628).
- ALSA: hda/realtek: add quirk for Samsung Galaxy Book Flex
(NT950QCT-A38A) (bsc#1012628).
- ALSA: hda/realtek: add quirk for Acer Nitro ANV15-51
(bsc#1012628).
- wifi: radiotap: reject radiotap with unknown bits (bsc#1012628).
- wifi: libertas: fix use-after-free in lbs_free_adapter()
(bsc#1012628).
- wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()
(bsc#1012628).
- wifi: mac80211: bounds-check link_id in
ieee80211_ml_reconfiguration (bsc#1012628).
- wifi: mac80211: fix NULL pointer dereference in
mesh_rx_csa_frame() (bsc#1012628).
- Bluetooth: purge error queues in socket destructors
(bsc#1012628).
- gve: fix incorrect buffer cleanup in
gve_tx_clean_pending_packets for QPL (bsc#1012628).
- net: phy: register phy led_triggers during probe to avoid
AB-BA deadlock (bsc#1012628).
- IB/mthca: Add missed mthca_unmap_user_db() for
mthca_create_srq() (bsc#1012628).
- RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()
(bsc#1012628).
- RDMA/ionic: Fix kernel stack leak in ionic_create_cq()
(bsc#1012628).
- ksmbd: Compare MACs in constant time (bsc#1012628).
- cpufreq: intel_pstate: Fix crash during turbo disable
(bsc#1012628).
- arm64: gcs: Do not set PTE_SHARED on GCS mappings if FEAT_LPA2
is enabled (bsc#1012628).
- net/sched: ets: fix divide by zero in the offload path
(bsc#1012628).
- nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit()
(bsc#1012628).
- tracing: Fix WARN_ON in tracing_buffers_mmap_close
(bsc#1012628).
- scsi: target: Fix recursive locking in __configfs_open_file()
(bsc#1012628).
- mm: thp: deny THP for files on anonymous inodes (bsc#1012628).
- Squashfs: check metadata block offset is within range
(bsc#1012628).
- drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()
(bsc#1012628).
- drbd: fix null-pointer dereference on local read error
(bsc#1012628).
- xfs: fix xfs_group release bug in xfs_dax_notify_dev_failure
(bsc#1012628).
- xfs: Fix error pointer dereference (bsc#1012628).
- smb: client: fix cifs_pick_channel when channels are equally
loaded (bsc#1012628).
- smb: client: fix broken multichannel with krb5+signing
(bsc#1012628).
- smb: client: Don't log plaintext credentials in
cifs_set_cifscreds (bsc#1012628).
- smb: client: fix oops due to uninitialised var in smb2_unlink()
(bsc#1012628).
- scsi: core: Fix refcount leak for tagset_refcnt (bsc#1012628).
- scsi: ufs: core: Fix RPMB region size detection for UFS 2.2
(bsc#1012628).
- mptcp: pm: avoid sending RM_ADDR over same subflow
(bsc#1012628).
- mptcp: pm: in-kernel: always mark signal+subflow endp as used
(bsc#1012628).
- selftests: mptcp: more stable simult_flows tests (bsc#1012628).
- selftests: mptcp: join: check RM_ADDR not sent over same subflow
(bsc#1012628).
- selftests: mptcp: join: check removing signal+subflow endp
(bsc#1012628).
- kbuild: Split .modinfo out from ELF_DETAILS (bsc#1012628).
- ASoC: sdca: Fix missing regmap dependencies in Kconfig
(bsc#1012628).
- Revert "netfilter: nft_set_rbtree: validate open interval
overlap" (bsc#1012628).
- ARM: clean up the memset64() C wrapper (bsc#1012628).
- platform/x86: hp-bioscfg: Support allocations of larger data
(bsc#1012628).
- Bluetooth: Fix CIS host feature condition (bsc#1012628).
- ipmi: Fix use-after-free and list corruption on sender error
(bsc#1012628).
- net: stmmac: remove support for lpi_intr_o (bsc#1012628).
- drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink
(bsc#1012628).
- nvme: fix admin queue leak on controller reset (bsc#1012628).
- hwmon: (macsmc) Fix regressions in Apple Silicon SMC hwmon
driver (bsc#1012628).
- hwmon: (macsmc) Fix overflows, underflows, and sign extension
(bsc#1012628).
- hwmon: (aht10) Fix initialization commands for AHT20
(bsc#1012628).
- pinctrl: equilibrium: rename irq_chip function callbacks
(bsc#1012628).
- pinctrl: equilibrium: fix warning trace on load (bsc#1012628).
- pinctrl: qcom: qcs615: Add missing dual edge GPIO IRQ errata
flag (bsc#1012628).
- platform/x86: thinkpad_acpi: Fix errors reading battery
thresholds (bsc#1012628).
- module: Remove duplicate freeing of lockdep classes
(bsc#1012628).
- HID: multitouch: new class MT_CLS_EGALAX_P80H84 (bsc#1012628).
- pinctrl: pinconf-generic: Fix memory leak in
pinconf_generic_parse_dt_config() (bsc#1012628).
- pinctrl: generic: move function to amlogic-am4 driver
(bsc#1012628).
- pinctrl: meson: amlogic-a4: Fix device node reference leak in
aml_dt_node_to_map_pinmux() (bsc#1012628).
- pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()
(bsc#1012628).
- hwmon: (it87) Check the it87_lock() return value (bsc#1012628).
- idpf: increment completion queue next_to_clean in sw marker
wait routine (bsc#1012628).
- idpf: change IRQ naming to match netdev and ethtool queue
numbering (bsc#1012628).
- idpf: Fix flow rule delete failure due to invalid validation
(bsc#1012628).
- ice: recap the VSI and QoS info after rebuild (bsc#1012628).
- ice: fix crash in ethtool offline loopback test (bsc#1012628).
- i40e: Fix preempt count leak in napi poll tracepoint
(bsc#1012628).
- e1000e: clear DPG_EN after reset to avoid autonomous
power-gating (bsc#1012628).
- drm/solomon: Fix page start when updating rectangle in page
addressing mode (bsc#1012628).
- netfs: Fix unbuffered/DIO writes to dispatch subrequests in
strict sequence (bsc#1012628).
- nvmet-fcloop: Check remoteport port_state before calling done
callback (bsc#1012628).
- net: annotate data-races around sk->sk_{data_ready,write_space}
(bsc#1012628).
- bridge: Check relevant per-VLAN options in VLAN range grouping
(bsc#1012628).
- net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast
entry handling in ALE table (bsc#1012628).
- nvme-multipath: fix leak on try_module_get failure
(bsc#1012628).
- inet: annotate data-races around isk->inet_num (bsc#1012628).
- crypto: ccp - Fix use-after-free on error path (bsc#1012628).
- accel/amdxdna: Fill invalid payload for failed command
(bsc#1012628).
- udp: Unhash auto-bound connected sk from 4-tuple hash table
when disconnected (bsc#1012628).
- tcp: give up on stronger sk_rcvbuf checks (for now)
(bsc#1012628).
- xsk: Fix fragment node deletion to prevent buffer leak
(bsc#1012628).
- xsk: Fix zero-copy AF_XDP fragment drop (bsc#1012628).
- dpaa2-switch: Fix interrupt storm after receiving bad if_id
in IRQ handler (bsc#1012628).
- atm: lec: fix null-ptr-deref in lec_arp_clear_vccs
(bsc#1012628).
- net: ti: icssg-prueth: Fix ping failure after offload mode
setup when link speed is not 1G (bsc#1012628).
- amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds
(bsc#1012628).
- regulator: mt6363: Fix incorrect and redundant IRQ disposal
in probe (bsc#1012628).
- can: bcm: fix locking for bcm_op runtime updates (bsc#1012628).
- can: dummy_can: dummy_can_init(): fix packet statistics
(bsc#1012628).
- can: mcp251x: fix deadlock in error path of mcp251x_open
(bsc#1012628).
- wifi: rsi: Don't default to -EOPNOTSUPP in rsi_mac80211_config
(bsc#1012628).
- drm/syncobj: Fix handle <-> fd ioctls with dirty stack
(bsc#1012628).
- drm/xe: Do not preempt fence signaling CS instructions
(bsc#1012628).
- drm/xe/configfs: Free ctx_restore_mid_bb in release
(bsc#1012628).
- drm/xe/queue: Call fini on exec queue creation fail
(bsc#1012628).
- blktrace: fix __this_cpu_read/write in preemptible context
(bsc#1012628).
- rust: kunit: fix warning when !CONFIG_PRINTK (bsc#1012628).
- kunit: tool: copy caller args in run_kernel to prevent mutation
(bsc#1012628).
- accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
(bsc#1012628).
- drm/amd/display: Use mpc.preblend flag to indicate 3D LUT
(bsc#1012628).
- drm/amd/display: Enable DEGAMMA and reject
COLOR_PIPELINE+DEGAMMA_LUT (bsc#1012628).
- net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write
return value (bsc#1012628).
- bpf/bonding: reject vlan+srcmac xmit_hash_policy change when
XDP is loaded (bsc#1012628).
- octeon_ep: Relocate counter updates before NAPI (bsc#1012628).
- octeon_ep: avoid compiler and IQ/OQ reordering (bsc#1012628).
- octeon_ep_vf: Relocate counter updates before NAPI
(bsc#1012628).
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (bsc#1012628).
- wifi: cw1200: Fix locking in error paths (bsc#1012628).
- wifi: wlcore: Fix a locking bug (bsc#1012628).
- wifi: mt76: mt7996: Fix possible oob access in
mt7996_mac_write_txwi_80211() (bsc#1012628).
- wifi: mt76: mt7925: Fix possible oob access in
mt7925_mac_write_txwi_80211() (bsc#1012628).
- wifi: mt76: Fix possible oob access in
mt76_connac2_mac_write_txwi_80211() (bsc#1012628).
- indirect_call_wrapper: do not reevaluate function pointer
(bsc#1012628).
- net/rds: Fix circular locking dependency in rds_tcp_tune
(bsc#1012628).
- xen/acpi-processor: fix _CST detection using undersized
evaluation buffer (bsc#1012628).
- ASoC: SDCA: Add allocation failure check for Entity name
(bsc#1012628).
- ice: fix adding AQ LLDP filter for VF (bsc#1012628).
- ice: Fix memory leak in ice_set_ringparam() (bsc#1012628).
- libie: don't unroll if fwlog isn't supported (bsc#1012628).
- iavf: fix netdev->max_mtu to respect actual hardware limit
(bsc#1012628).
- igb: Fix trigger of incorrect irq in igb_xsk_wakeup
(bsc#1012628).
- igc: Fix trigger of incorrect irq in igc_xsk_wakeup function
(bsc#1012628).
- bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim
(bsc#1012628).
- smb/client: fix buffer size for smb311_posix_qinfo in
smb2_compound_op() (bsc#1012628).
- smb/client: fix buffer size for smb311_posix_qinfo in
SMB311_posix_query_info() (bsc#1012628).
- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
(bsc#1012628).
- net: ipv4: fix ARM64 alignment fault in multipath hash seed
(bsc#1012628).
- amd-xgbe: fix sleep while atomic on suspend/resume
(bsc#1012628).
- drm/sched: Fix kernel-doc warning for drm_sched_job_done()
(bsc#1012628).
- ata: libata: cancel pending work after clearing deferred_qc
(bsc#1012628).
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus
lock" (bsc#1012628).
- time/jiffies: Fix sysctl file error on configurations where
USER_HZ < HZ (bsc#1012628).
- drm/xe/gsc: Fix GSC proxy cleanup on early initialization
failure (bsc#1012628).
- drm/xe/reg_sr: Fix leak on xa_store failure (bsc#1012628).
- nvme: fix memory allocation in nvme_pr_read_keys()
(bsc#1012628).
- x86/numa: Store extra copy of numa_nodes_parsed (bsc#1012628).
- x86/topo: Add topology_num_nodes_per_package() (bsc#1012628).
- x86/topo: Replace x86_has_numa_in_package (bsc#1012628).
- x86/topo: Fix SNC topology mess (bsc#1012628).
- sched/deadline: Fix missing ENQUEUE_REPLENISH during PI
de-boosting (bsc#1012628).
- timekeeping: Fix timex status validation for auxiliary clocks
(bsc#1012628).
- hwmon: (max6639) fix inverted polarity (bsc#1012628).
- net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for
lockless qdiscs (bsc#1012628).
- tcp: secure_seq: add back ports to TS offset (bsc#1012628).
- net: nfc: nci: Fix zero-length proprietary notifications
(bsc#1012628).
- net_sched: sch_fq: clear q->band_pkt_count[] in fq_reset()
(bsc#1012628).
- net: devmem: use READ_ONCE/WRITE_ONCE on binding->dev
(bsc#1012628).
- nfc: nci: free skb on nci_transceive early error paths
(bsc#1012628).
- nfc: nci: complete pending data exchange on device close
(bsc#1012628).
- nfc: nci: clear NCI_DATA_EXCHANGE before calling completion
callback (bsc#1012628).
- nfc: rawsock: cancel tx_work before socket teardown
(bsc#1012628).
- net: stmmac: Fix error handling in VLAN add and delete paths
(bsc#1012628).
- net: stmmac: Improve double VLAN handling (bsc#1012628).
- net: stmmac: Fix VLAN HW state restore (bsc#1012628).
- net: stmmac: Defer VLAN HW configuration when interface is down
(bsc#1012628).
- block: use trylock to avoid lockdep circular dependency in sysfs
(bsc#1012628).
- net: Provide a PREEMPT_RT specific check for
netdev_queue::_xmit_lock (bsc#1012628).
- netfilter: nf_tables: unconditionally bump set->nelems before
insertion (bsc#1012628).
- netfilter: nf_tables: clone set on flush only (bsc#1012628).
- netfilter: nft_set_pipapo: split gc into unlink and reclaim
phase (bsc#1012628).
- net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case
of error in mtk_xdp_setup() (bsc#1012628).
- selftests/harness: order TEST_F and XFAIL_ADD constructors
(bsc#1012628).
- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
(bsc#1012628).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
(bsc#1012628).
- net: ipv6: fix panic when IPv4 route references loopback IPv6
nexthop (bsc#1012628).
- net/sched: act_ife: Fix metalist update behavior (bsc#1012628).
- xdp: use modulo operation to calculate XDP frag tailroom
(bsc#1012628).
- xsk: introduce helper to determine rxq->frag_size (bsc#1012628).
- ice: fix rxq info registering in mbuf packets (bsc#1012628).
- ice: change XDP RxQ frag_size from DMA write length to
xdp.frame_sz (bsc#1012628).
- i40e: fix registering XDP RxQ info (bsc#1012628).
- i40e: use xdp.frame_sz as XDP RxQ info frag_size (bsc#1012628).
- net: enetc: use truesize as XDP RxQ info frag_size
(bsc#1012628).
- xdp: produce a warning when calculated tailroom is negative
(bsc#1012628).
- accel: ethosu: Fix job submit error clean-up refcount underflows
(bsc#1012628).
- accel: ethosu: Fix NPU_OP_ELEMENTWISE validation with scalar
(bsc#1012628).
- ata: libata-eh: Fix detection of deferred qc timeouts
(bsc#1012628).
- selftest/arm64: Fix sve2p1_sigill() to hwcap test (bsc#1012628).
- tracing: Add NULL pointer check to trigger_data_free()
(bsc#1012628).
- bpf: collect only live registers in linked regs (bsc#1012628).
- selftests/bpf: Avoid simplification of crafted bounds test
(bsc#1012628).
- Rename to
patches.kernel.org/6.19.7-168-kbuild-Leave-objtool-binary-around-with-make-c.patch.
- commit 41c12e4
* Thu Mar 12 2026 jslaby@suse.cz
- series.conf: move perf patch to sorted section
- commit 16b8fd5
* Thu Mar 12 2026 jslaby@suse.cz
- Refresh
patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
Update upstream status.
(cherry picked from commit c5b4bda2b7408b9f41e59f4864d810545a3e9584)
- Refresh
patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
Update upstream status.
- commit 2baf4af
* Thu Mar 12 2026 jslaby@suse.cz
- Refresh
patches.suse/sched-mmcid-Avoid-full-tasklist-walks.patch.
- Refresh
patches.suse/sched-mmcid-Handle-vfork-CLONE_VM-correctly.patch.
- Refresh
patches.suse/sched-mmcid-Prevent-CID-stalls-due-to-concurrent-for.patch.
- Refresh
patches.suse/sched-mmcid-Remove-pointless-preempt-guard.patch.
Update upstream info.
- commit 595f0ff
* Wed Mar 11 2026 tiwai@suse.de
- Move upstreamed patches into sorted section
- commit 0f53674
* Wed Mar 11 2026 tiwai@suse.de
- media: ipu-bridge: Add upside-down sensor DMI quirk for Dell
XPS 13 9340 and XPS 14 9440 (bsc#1259459).
(cherry picked from commit 9f059031058de3c3d10be404c21b7c0cd7c7b90c)
- media: ipu-bridge: Add upside-down sensor DMI quirk for Dell
XPS 13 9340 and XPS 14 9440 (bsc#1259459).
- commit 33069f3
* Wed Mar 11 2026 jslaby@suse.cz
- sched/mmcid: Avoid full tasklist walks (bsc#1258936).
- sched/mmcid: Remove pointless preempt guard (bsc#1258936).
- sched/mmcid: Handle vfork()/CLONE_VM correctly (bsc#1258936).
- sched/mmcid: Prevent CID stalls due to concurrent forks
(bsc#1258936).
- commit a63865d
* Wed Mar 11 2026 jslaby@suse.cz
- Revert "drm/syncobj: Fix handle <-> fd ioctls with dirty stack"
(git-fixes).
- usb: gadget: u_ether: use <linux/hex.h> header file (git-fixes).
- commit 7f7ff04
* Tue Mar 10 2026 jslaby@suse.cz
- Refresh
patches.suse/kbuild-Leave-objtool-binary-around-with-make-clean.patch.
Update to upstream version.
- commit a96a4c8
* Tue Mar 10 2026 jslaby@suse.cz
- perf metricgroup: Fix metricgroup__has_metric_or_groups
(bsc#1259358).
- Delete
patches.suse/Revert-perf-metricgroup-Don-t-early-exit-if-no-CPUID.patch.
Replace the revert by an upstream fix.
- perf metricgroup: Fix metricgroup__has_metric_or_groups
(bsc#1259358).
- commit da5960c
* Mon Mar 09 2026 tiwai@suse.de
- Refresh patches.rpmify/certs-Replace-openssl-invocation-with-OPENSSL.patch
Improved the patch to allow the alternative openssl more generically
- commit 332afe7
* Mon Mar 09 2026 jslaby@suse.cz
- Revert "perf metricgroup: Don't early exit if no CPUID table
exists" (bsc#1259358).
- commit 382985e
* Mon Mar 09 2026 pfalcato@suse.de
- update to 7.0-rc3
- Delete upstream patch kbuild-Leave-objtool-binary-around-with-make-clean.patch
- refresh configs
- commit 0e787eb
* Sun Mar 08 2026 jslaby@suse.cz
- Revert "fix mm_cid race (bsc#1258936)."
This reverts commit ac981d7fc2f61a11573db2572dc5af0684e23ee2, it does
not work.
- commit 446493f
* Sun Mar 08 2026 jslaby@suse.cz
- fix mm_cid race (bsc#1258936).
- commit ac981d7
* Thu Mar 05 2026 jslaby@suse.cz
- Linux 6.19.6 (bsc#1012628).
- rust_binder: Fix build failure if !CONFIG_COMPAT (bsc#1012628).
- mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms
(bsc#1012628).
- Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay
to 5ms" (bsc#1012628).
- perf test: Fix test case perf evlist tests for s390x
(bsc#1012628).
- perf test stat tests: Fix for virtualized machines
(bsc#1012628).
- perf build: Raise minimum shellcheck version to 0.7.2
(bsc#1012628).
- perf unwind-libdw: Fix invalid reference counts (bsc#1012628).
- perf callchain: Fix srcline printing with inlines (bsc#1012628).
- libsubcmd: Fix null intersection case in exclude_cmds()
(bsc#1012628).
- rtc: nvvrs: Add ARCH_TEGRA to the NV VRS RTC driver
(bsc#1012628).
- rtc: max31335: use correct CONFIG symbol in IS_REACHABLE()
(bsc#1012628).
- perf symbol-elf: Fix leak of ELF files with GNU debugdata
(bsc#1012628).
- perf tools: Get debug info of DSO properly (bsc#1012628).
- perf tests kallsyms: Fix missed map__put() (bsc#1012628).
- perf cs-etm: Fix decoding for sparse CPU maps (bsc#1012628).
- perf annotate: Fix args leak of map_symbol (bsc#1012628).
- perf maps: Fix reference count leak in maps__find_ams()
(bsc#1012628).
- perf tests sched: Avoid error in cleanup on loaded machines
(bsc#1012628).
- perf annotate: Fix memcpy size in arch__grow_instructions()
(bsc#1012628).
- tools headers: Go back to include asm-generic/unistd.h for arm64
(bsc#1012628).
- perf annotate: Fix BUILD_NONDISTRO=1 missing args->ms
conversions to pointer (bsc#1012628).
- perf test: Fix test perf evlist for z/VM s390x (bsc#1012628).
- perf vendor events amd: Fix Zen 5 MAB allocation events
(bsc#1012628).
- perf jevents: Handle deleted JSONS in out of source builds
(bsc#1012628).
- perf build: Remove NO_LIBCAP that controls nothing
(bsc#1012628).
- libperf build: Always place libperf includes first
(bsc#1012628).
- perf metricgroup: Don't early exit if no CPUID table exists
(bsc#1012628).
- perf test: Fix test case perftool-testsuite_report for s390
(bsc#1012628).
- objtool/rust: add one more `noreturn` Rust function
(bsc#1012628).
- perf stat: Ensure metrics are displayed even with failed events
(bsc#1012628).
- perf stat-shadow: In prepare_metric fix guard on reading NULL
perf_stat_evsel (bsc#1012628).
- io_uring: add IORING_OP_URING_CMD128 to opcode checks
(bsc#1012628).
- rtc: interface: Alarm race handling should not discard preceding
error (bsc#1012628).
- statmount: permission check should return EPERM (bsc#1012628).
- hfsplus: fix volume corruption issue for generic/480
(bsc#1012628).
- audit: add fchmodat2() to change attributes class (bsc#1012628).
- hfsplus: fix volume corruption issue for generic/498
(bsc#1012628).
- fs/buffer: add alert in try_to_free_buffers() for folios
without buffers (bsc#1012628).
- kselftest/kublk: include message in _Static_assert for C11
compatibility (bsc#1012628).
- hfs: Replace BUG_ON with error handling for CNID count checks
(bsc#1012628).
- audit: add missing syscalls to read class (bsc#1012628).
- hfsplus: pretend special inodes as regular files (bsc#1012628).
- i3c: master: svc: Initialize 'dev' to NULL in
svc_i3c_master_ibi_isr() (bsc#1012628).
- i3c: mipi-i3c-hci: Stop reading Extended Capabilities if
capability ID is 0 (bsc#1012628).
- i3c: mipi-i3c-hci: Reset RING_OPERATION1 fields during init
(bsc#1012628).
- dlm: fix recovery pending middle conversion (bsc#1012628).
- minix: Add required sanity checking to minix_check_superblock()
(bsc#1012628).
- dlm: validate length in dlm_search_rsb_tree (bsc#1012628).
- btrfs: don't BUG() on unexpected delayed ref type in
run_one_delayed_ref() (bsc#1012628).
- btrfs: fallback to buffered IO if the data profile has
duplication (bsc#1012628).
- btrfs: handle user interrupt properly in btrfs_trim_fs()
(bsc#1012628).
- netfs: when subreq is marked for retry, do not check if it
faced an error (bsc#1012628).
- smb: client: add proper locking around ses->iface_last_update
(bsc#1012628).
- gfs2: fiemap page fault fix (bsc#1012628).
- smb: client: prevent races in ->query_interfaces()
(bsc#1012628).
- tools/cpupower: Fix inverted APERF capability check
(bsc#1012628).
- s390/boot: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS
(bsc#1012628).
- tools/power cpupower: Reset errno before strtoull()
(bsc#1012628).
- s390/purgatory: Add -Wno-default-const-init-unsafe to
KBUILD_CFLAGS (bsc#1012628).
- perf/arm-cmn: Support CMN-600AE (bsc#1012628).
- arm64: Add support for TSV110 Spectre-BHB mitigation
(bsc#1012628).
- rnbd-srv: Zero the rsp buffer before using it (bsc#1012628).
- x86/xen/pvh: Enable PAE mode for 32-bit guest only when
CONFIG_X86_PAE is set (bsc#1012628).
- ntfs: ->d_compare() must not block (bsc#1012628).
- EFI/CPER: don't dump the entire memory region (bsc#1012628).
- APEI/GHES: ensure that won't go past CPER allocated record
(bsc#1012628).
- APEI/GHES: ARM processor Error: don't go past allocated memory
(bsc#1012628).
- EFI/CPER: don't go past the ARM processor CPER record buffer
(bsc#1012628).
- ACPI: processor: Fix NULL-pointer dereference in
acpi_processor_errata_piix4() (bsc#1012628).
- ACPI: resource: Add JWIPC JVC9100 to
irq1_level_low_skip_override[] (bsc#1012628).
- ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP
(bsc#1012628).
- powercap: intel_rapl: Add PL4 support for Ice Lake
(bsc#1012628).
- io_uring/timeout: annotate data race in io_flush_timeouts()
(bsc#1012628).
- alpha: fix user-space corruption during memory compaction
(bsc#1012628).
- md-cluster: fix NULL pointer dereference in
process_metadata_update (bsc#1012628).
- md raid: fix hang when stopping arrays with metadata through
dm-raid (bsc#1012628).
- rust: cpufreq: always inline functions using build_assert with
arguments (bsc#1012628).
- cpufreq: dt-platdev: Block the driver from probing on more QC
platforms (bsc#1012628).
- s390/perf: Disable register readout on sampling events
(bsc#1012628).
- arm64: mte: Set TCMA1 whenever MTE is present in the kernel
(bsc#1012628).
- perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD
(bsc#1012628).
- ACPI: x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On
Display) (bsc#1012628).
- ACPI: scan: Use async schedule function in
acpi_scan_clear_dep_fn() (bsc#1012628).
- ACPI: battery: fix incorrect charging status when current is
zero (bsc#1012628).
- xenbus: Use .freeze/.thaw to handle xenbus devices
(bsc#1012628).
- blk-mq-debugfs: add missing debugfs_mutex in
blk_mq_debugfs_register_hctxs() (bsc#1012628).
- blk-mq-sched: unify elevators checking for async requests
(bsc#1012628).
- block: decouple secure erase size limit from discard size limit
(bsc#1012628).
- sparc: Synchronize user stack on fork and clone (bsc#1012628).
- sparc: don't reference obsolete termio struct for TC* constants
(bsc#1012628).
- bpf: verifier improvement in 32bit shift sign extension pattern
(bsc#1012628).
- irqchip/riscv-imsic: Add a CPU pm notifier to restore the
IMSIC on exit (bsc#1012628).
- perf/x86/msr: Add Airmont NP (bsc#1012628).
- perf/x86/cstate: Add Airmont NP (bsc#1012628).
- perf/x86/intel: Add Airmont NP (bsc#1012628).
- bpf: crypto: Use the correct destructor kfunc type
(bsc#1012628).
- bpf: net_sched: Use the correct destructor kfunc type
(bsc#1012628).
- bpf: Recognize special arithmetic shift in the verifier
(bsc#1012628).
- genirq/cpuhotplug: Notify about affinity changes breaking the
affinity mask (bsc#1012628).
- bpf: Properly mark live registers for indirect jumps
(bsc#1012628).
- perf/core: Fix slow perf_event_task_exit() with LBR callstacks
(bsc#1012628).
- arm64/ftrace,bpf: Fix partial regs after bpf_prog_run
(bsc#1012628).
- clocksource/drivers/sh_tmu: Always leave device running after
probe (bsc#1012628).
- clocksource/drivers/timer-integrator-ap: Add missing Kconfig
dependency on OF (bsc#1012628).
- PCI/MSI: Unmap MSI-X region on error (bsc#1012628).
- bpftool: Fix dependencies for static build (bsc#1012628).
- crypto: hisilicon/qm - move the barrier before writing to the
mailbox register (bsc#1012628).
- mailbox: bcm-ferxrm-mailbox: Use default primary handler
(bsc#1012628).
- char: tpm: cr50: Remove IRQF_ONESHOT (bsc#1012628).
- sched/debug: Fix updating of ppos on server write ops
(bsc#1012628).
- pstore: ram_core: fix incorrect success return when vmap()
fails (bsc#1012628).
- firmware: arm_ffa: Unmap Rx/Tx buffers on init failure
(bsc#1012628).
- Revert "arm64: zynqmp: Add an OP-TEE node to the device tree"
(bsc#1012628).
- EDAC/igen6: Add more Intel Panther Lake-H SoCs support
(bsc#1012628).
- EDAC/igen6: Add two Intel Amston Lake SoCs support
(bsc#1012628).
- arm64: tegra: smaug: Add usb-role-switch support (bsc#1012628).
- soc: imx8m: Fix error handling for clk_prepare_enable()
(bsc#1012628).
- soc/tegra: pmc: Fix unsafe generic_handle_irq() call
(bsc#1012628).
- x86/sev: Use kfree_sensitive() when freeing a SNP message
descriptor (bsc#1012628).
- parisc: Prevent interrupts during reboot (bsc#1012628).
- drm/xe/ggtt: Use scope-based runtime pm (bsc#1012628).
- drm/xe: Covert return of -EBUSY to -ENOMEM in VM bind IOCTL
(bsc#1012628).
- drm/xe/vm: Skip ufence association for CPU address mirror VMA
during MAP (bsc#1012628).
- drm/panthor: Always wait after sending a command to an AS
(bsc#1012628).
- drm/xe/xe3_lpg: Apply Wa_16028005424 (bsc#1012628).
- drm/panel-edp: Add CSW MNE007QB3-1 (bsc#1012628).
- gpu/panel-edp: add AUO panel entry for B140HAN06.4
(bsc#1012628).
- accel/amdxdna: Fix tail-pointer polling in mailbox_get_msg()
(bsc#1012628).
- drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1012628).
- drm/amdgpu: fix the calculation of RAS bad page number
(bsc#1012628).
- drm/amdgpu/ras: Move ras data alloc before bad page check
(bsc#1012628).
- drm/amd/display: Correct DSC padding accounting (bsc#1012628).
- drm/amd/display: Fix wrong x_pos and y_pos for cursor offload
(bsc#1012628).
- drm/amd/display: Correct FIXED_VS Link Rate Toggle Condition
(bsc#1012628).
- drm/amd/display: Guard FAMS2 configuration updates
(bsc#1012628).
- drm/panel-edp: Add AUO B140QAX01.H panel (bsc#1012628).
- drm/amdkfd: Handle GPU reset and drain retry fault race
(bsc#1012628).
- spi-geni-qcom: initialize mode related registers to 0
(bsc#1012628).
- spi-geni-qcom: use xfer->bits_per_word for can_dma()
(bsc#1012628).
- spi: cadence-quadspi: Parse DT for flashes with the rest of
the DT parsing (bsc#1012628).
- drm/amd/display: Fix DP no audio issue (bsc#1012628).
- drm/amd/display: Add USB-C DP Alt Mode lane limitation in DCN32
(bsc#1012628).
- drm/amd/display: Don't disable DPCD mst_en if sink connected
(bsc#1012628).
- ASoC: SOF: ipc4: Support for sending payload along with
LARGE_CONFIG_GET (bsc#1012628).
- media: dvb-core: dmxdevfilter must always flush bufs
(bsc#1012628).
- gpio: pca953x: Add support for TCAL6408 TCAL6416 (bsc#1012628).
- spi: stm32: fix Overrun issue at < 8bpw (bsc#1012628).
- drm/ast: Swap framebuffer writes on big-endian machines
(bsc#1012628).
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform
(bsc#1012628).
- drm/v3d: Set DMA segment size to avoid debug warnings
(bsc#1012628).
- media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes
(bsc#1012628).
- media: omap3isp: isppreview: always clamp in
preview_try_format() (bsc#1012628).
- media: omap3isp: set initial format (bsc#1012628).
- media: chips-media: wave5: Fix conditional in start_streaming
(bsc#1012628).
- media: chips-media: wave5: Process ready frames when CMD_STOP
sent to Encoder (bsc#1012628).
- drm/panel: edp: add BOE NV140WUM-T08 panel (bsc#1012628).
- media: mediatek: vcodec: Don't try to decode 422/444 VP9
(bsc#1012628).
- drm/amdgpu: add support for HDP IP version 6.1.1 (bsc#1012628).
- drm/amd/display: Fix mismatched unlock for DMUB HW lock in
HWSS fast path (bsc#1012628).
- drm/amd/display: Fix dsc eDP issue (bsc#1012628).
- drm/amdgpu: avoid a warning in timedout job handler
(bsc#1012628).
- drm/amd/display: Add signal type check for dcn401
get_phyd32clk_src (bsc#1012628).
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last
Fence Update and Timeline Management v4 (bsc#1012628).
- HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple
keyboards (bsc#1012628).
- HID: pidff: Do not set out of range trigger button
(bsc#1012628).
- HID: multitouch: add quirks for Lenovo Yoga Book 9i
(bsc#1012628).
- drm/amdgpu: Skip loading SDMA_RS64 in VF (bsc#1012628).
- drm/amd/display: only power down dig on phy endpoints
(bsc#1012628).
- drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON
for TMDS on DCN35 (bsc#1012628).
- drm/xe: Only toggle scheduling in TDR if GuC is running
(bsc#1012628).
- ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask
(bsc#1012628).
- ASoC: wm8962: Don't report a microphone if it's shorted to
ground on plug (bsc#1012628).
- spi: spi-mem: Limit octal DTR constraints to octal DTR
situations (bsc#1012628).
- cgroup/cpuset: Don't fail cpuset.cpus change in v2
(bsc#1012628).
- media: amphion: Clear last_buffer_dequeued flag for
DEC_CMD_START (bsc#1012628).
- drm/panel: Fix a possible null-pointer dereference in
jdi_panel_dsi_remove() (bsc#1012628).
- media: adv7180: fix frame interval in progressive mode
(bsc#1012628).
- media: pvrusb2: fix URB leak in pvr2_send_request_ex
(bsc#1012628).
- media: solo6x10: Check for out of bounds chip_id (bsc#1012628).
- media: cx25821: Fix a resource leak in cx25821_dev_setup()
(bsc#1012628).
- media: qcom: camss: Do not enable cpas fast ahb clock for
SM8550 VFE lite (bsc#1012628).
- media: v4l2-async: Fix error handling on steps after finding
a match (bsc#1012628).
- media: mt9m114: Avoid a reset low spike during probe()
(bsc#1012628).
- media: mt9m114: Return -EPROBE_DEFER if no endpoint is found
(bsc#1012628).
- media: ipu6: Ensure stream_mutex is acquired when dealing with
node list (bsc#1012628).
- media: ipu6: Close firmware streams on streaming enable failure
(bsc#1012628).
- media: ipu6: Always close firmware stream (bsc#1012628).
- ALSA: hda/realtek: add HP Victus 16-e0xxx mute LED quirk
(bsc#1012628).
- ALSA: usb-audio: presonus s18xx uses little-endian
(bsc#1012628).
- drm/amdkfd: Relax size checking during queue buffer get
(bsc#1012628).
- drm/amdkfd: Fix GART PTE for non-4K pagesize in
svm_migrate_gart_map() (bsc#1012628).
- drm: Account property blob allocations to memcg (bsc#1012628).
- drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting
for some panels (bsc#1012628).
- hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed
(bsc#1012628).
- virt: vbox: uapi: Mark inner unions in packed structs as packed
(bsc#1012628).
- ASoC: soc-acpi-intel-arl-match: change rt722 amp endpoint to
aggregated (bsc#1012628).
- ASoC: soc-acpi-intel-ptl-match: use aggregated endpoint in
ptl_rt722_l0_rt1320_l23 (bsc#1012628).
- ASoC: sdw_utils: remove dai registered check (bsc#1012628).
- drm/atmel-hlcdc: destroy properly the plane state in the reset
callback (bsc#1012628).
- PCI: Add Intel Nova Lake audio Device ID (bsc#1012628).
- ALSA: hda: controllers: intel: add support for Nova Lake
(bsc#1012628).
- drm/amd/display: Disable FEC when powering down encoders
(bsc#1012628).
- drm/amd/display: Ensure link output is disabled in backend
reset for PLL_ON (bsc#1012628).
- drm/amd/display: Revert "init dispclk from bootup clock for
DCN314" (bsc#1012628).
- drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state
callback (bsc#1012628).
- drm/atmel-hlcdc: don't reject the commit if the src rect has
fractional parts (bsc#1012628).
- drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after
release (bsc#1012628).
- media: rkisp1: Fix filter mode register configuration
(bsc#1012628).
- drm/amd/display: Revert "init dispclk from bootup clock for
DCN315" (bsc#1012628).
- drm/amdgpu: mark invalid records with U64_MAX (bsc#1012628).
- HID: multitouch: add eGalaxTouch EXC3188 support (bsc#1012628).
- media: uvcvideo: Create an ID namespace for streaming output
terminals (bsc#1012628).
- HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK
(bsc#1012628).
- ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie
15X Pro (bsc#1012628).
- ALSA: hda/realtek: fix LG Gram Style 14 speakers (bsc#1012628).
- gpio: aspeed-sgpio: Change the macro to support deferred probe
(bsc#1012628).
- ASoC: sunxi: sun50i-dmic: Add missing check for
devm_regmap_init_mmio (bsc#1012628).
- spi: spi-mem: Protect dirmap_create() with
spi_mem_access_start/end (bsc#1012628).
- drm/amd/display: Fix GFX12 family constant checks (bsc#1012628).
- drm/amd/display: avoid dig reg access timeout on usb4 link
training fail (bsc#1012628).
- spi: cadence-qspi: Fix probe error path and remove
(bsc#1012628).
- drm/amdgpu: validate user queue size constraints (bsc#1012628).
- spi: cadence-qspi: Try hard to disable the clocks (bsc#1012628).
- drm/amd/pm: Fix null pointer dereference issue (bsc#1012628).
- ASoC: codecs: max98390: Check return value of
devm_gpiod_get_optional() in max98390_i2c_probe() (bsc#1012628).
- hwmon: (asus-ec-sensors) add Pro WS TRX50-SAGE WIFI A
(bsc#1012628).
- hwmon: (dell-smm) Add support for Dell OptiPlex 7080
(bsc#1012628).
- hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE (bsc#1012628).
- hwmon: (nct6683) Add customer ID for ASRock Z590 Taichi
(bsc#1012628).
- hwmon: (emc2305) Fix a resource leak in
emc2305_of_parse_pwm_child (bsc#1012628).
- hwmon: (f71882fg) Add F81968 support (bsc#1012628).
- hwmon: (nct7363) Fix a resource leak in
nct7363_present_pwm_fanin (bsc#1012628).
- HID: logitech-hidpp: Add support for Logitech K980
(bsc#1012628).
- ASoC: es8328: Add error unwind in resume (bsc#1012628).
- ALSA: hda/realtek: Add quirk for Minisforum V3 SE (bsc#1012628).
- modpost: Amend ppc64 save/restfpr symnames for -Os build
(bsc#1012628).
- ASoC: qcom: q6asm: drop DSP responses for closed data streams
(bsc#1012628).
- power: sequencing: fix missing state_lock in pwrseq_power_on()
error path (bsc#1012628).
- ASoC: SOF: Intel: hda: Fix NULL pointer dereference
(bsc#1012628).
- spi: geni-qcom: Fix abort sequence execution for serial engine
errors (bsc#1012628).
- ASoC: fsl: imx-rpmsg: use snd_soc_find_dai_with_mutex() in probe
(bsc#1012628).
- ALSA: hda/realtek - Enable mute LEDs on HP ENVY x360 15-es0xxx
(bsc#1012628).
- ALSA: mixer: oss: Add card disconnect checkpoints (bsc#1012628).
- ALSA: ctxfi: Add quirk for SE-300PCIE variant (160b:0102)
(bsc#1012628).
- ALSA: usb-audio: Add DSD support for iBasso DC04U (bsc#1012628).
- ALSA: usb-audio: Add iface reset and delay quirk for AB13X
USB Audio (bsc#1012628).
- jfs: Add missing set_freezable() for freezable kthread
(bsc#1012628).
- jfs: nlink overflow in jfs_rename (bsc#1012628).
- PCI: dwc: Skip PME_Turn_Off broadcast and L2/L3 transition
during suspend if link is not up (bsc#1012628).
- wifi: rtw88: fix DTIM period handling when conf->dtim_period
is zero (bsc#1012628).
- wifi: rtw89: 8852au: add support for TP TX30U Plus
(bsc#1012628).
- wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode()
(bsc#1012628).
- wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H (bsc#1012628).
- wifi: rtw89: 8922a: set random mac if efuse contains zeroes
(bsc#1012628).
- wifi: rtw89: ser: enable error IMR after recovering from L1
(bsc#1012628).
- wifi: rtw89: setting TBTT AGG number when mac port
initialization (bsc#1012628).
- wifi: rtw89: mcc: reset probe counter when receiving beacon
(bsc#1012628).
- wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band()
(bsc#1012628).
- wifi: rtw88: Fix inadvertent sharing of struct
ieee80211_supported_band data (bsc#1012628).
- PCI: cadence: Avoid signed 64-bit truncation and invalid sort
(bsc#1012628).
- wifi: rtw89: regd: 6 GHz power type marks default when inactive
(bsc#1012628).
- dm: replace -EEXIST with -EBUSY (bsc#1012628).
- dm: remove fake timeout to avoid leak request (bsc#1012628).
- iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency
(bsc#1012628).
- net: wwan: mhi: Add network support for Foxconn T99W760
(bsc#1012628).
- wifi: rtw89: fix potential zero beacon interval in beacon
tracking (bsc#1012628).
- rtla: Fix NULL pointer dereference in actions_parse
(bsc#1012628).
- wifi: libertas: fix WARNING in usb_tx_block (bsc#1012628).
- iommu/amd: move wait_on_sem() out of spinlock (bsc#1012628).
- wifi: rtw89: Add support for MSI AX1800 Nano (GUAX18N)
(bsc#1012628).
- wifi: rtw89: Add support for D-Link VR Air Bridge (DWA-F18)
(bsc#1012628).
- wifi: rtw89: pci: validate sequence number of TX release report
(bsc#1012628).
- wifi: rtw89: mac: correct page number for CSI response
(bsc#1012628).
- wifi: rtw89: wow: add reason codes for disassociation in WoWLAN
mode (bsc#1012628).
- PCI: dw-rockchip: Disable BAR 0 and BAR 1 for Root Port
(bsc#1012628).
- wifi: rtw89: disable EHT protocol by chip capabilities
(bsc#1012628).
- wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1
(bsc#1012628).
- wifi: ath11k: Fix failure to connect to a 6 GHz AP
(bsc#1012628).
- wifi: ath12k: fix preferred hardware mode calculation
(bsc#1012628).
- wifi: ath12k: fix mac phy capability parsing (bsc#1012628).
- wifi: cfg80211: allow only one NAN interface, also in multi
radio (bsc#1012628).
- ipv6: annotate data-races in
ip6_multipath_hash_{policy,fields}() (bsc#1012628).
- ipv6: annotate data-races over sysctl.flowlabel_reflect
(bsc#1012628).
- ipv6: annotate data-races in net/ipv6/route.c (bsc#1012628).
- ipv6: exthdrs: annotate data-race over multiple sysctl
(bsc#1012628).
- ext4: mark group add fast-commit ineligible (bsc#1012628).
- ext4: move ext4_percpu_param_init() before ext4_mb_init()
(bsc#1012628).
- ext4: mark group extend fast-commit ineligible (bsc#1012628).
- ext4: use reserved metadata blocks when splitting extent on
endio (bsc#1012628).
- netfilter: nf_conntrack: Add allow_clash to generic protocol
handler (bsc#1012628).
- netfilter: xt_tcpmss: check remaining length before reading
optlen (bsc#1012628).
- openrisc: define arch-specific version of nop() (bsc#1012628).
- net: usb: r8152: fix transmit queue timeout (bsc#1012628).
- PCI: imx6: Add CLKREQ# override to enable REFCLK for i.MX95 PCIe
(bsc#1012628).
- wifi: iwlwifi: mld: Handle rate selection for NAN interface
(bsc#1012628).
- wifi: iwlwifi: mvm: check the validity of noa_len (bsc#1012628).
- wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1012628).
- wifi: iwlwifi: mld: fix chandef start calculation (bsc#1012628).
- wifi: iwlwifi: mld: Fix primary link selection logic
(bsc#1012628).
- driver core: faux: stop using static struct device
(bsc#1012628).
- wifi: rtw89: Add default ID 28de:2432 for RTL8832CU
(bsc#1012628).
- wifi: rtw89: fix unable to receive probe responses under MLO
connection (bsc#1012628).
- wifi: rtw89: 8922a: add digital compensation for 2GHz
(bsc#1012628).
- net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1012628).
- ext4: propagate flags to convert_initialized_extent()
(bsc#1012628).
- gro: change the BUG_ON() in gro_pull_from_frag0() (bsc#1012628).
- ipv4: igmp: annotate data-races around idev->mr_maxdelay
(bsc#1012628).
- net: hns3: extend HCLGE_FD_AD_QID to 11 bits (bsc#1012628).
- wifi: cfg80211: treat deprecated INDOOR_SP_AP_OLD control
value as LPI mode (bsc#1012628).
- wifi: iwlegacy: add missing mutex protection in
il4965_store_tx_power() (bsc#1012628).
- wifi: iwlegacy: add missing mutex protection in
il3945_store_measurement() (bsc#1012628).
- wifi: rtw89: pci: validate release report content before using
for RTL8922DE (bsc#1012628).
- ipv4: fib: Annotate access to struct fib_alias.fa_state
(bsc#1012628).
- Bluetooth: btusb: Add support for MediaTek7920 0489:e158
(bsc#1012628).
- Bluetooth: hci_qca: Fix SSR (SubSystem Restart) fail when
BT_EN is pulled up by hw (bsc#1012628).
- Bluetooth: hci_conn: Set link_policy on incoming ACL connections
(bsc#1012628).
- Bluetooth: btusb: Add USB ID 0489:e112 for Realtek 8851BE
(bsc#1012628).
- Bluetooth: hci_conn: use mod_delayed_work for active mode
timeout (bsc#1012628).
- Bluetooth: btusb: Add new VID/PID for RTL8852CE (bsc#1012628).
- Bluetooth: btusb: Add device ID for Realtek RTL8761BU
(bsc#1012628).
- octeontx2-af: Workaround SQM/PSE stalls by disabling sticky
(bsc#1012628).
- net: sfp: add quirk for Lantech 8330-265D (bsc#1012628).
- wifi: rtw89: pci: restore LDO setting after device resume
(bsc#1012628).
- wifi: ath10k: fix lock protection in
ath10k_wmi_event_peer_sta_ps_state_chg() (bsc#1012628).
- bnxt_en: Allow ntuple filters for drops (bsc#1012628).
- ptp: ptp_vmclock: add 'VMCLOCK' to ACPI device match
(bsc#1012628).
- net: usb: sr9700: remove code to drive nonexistent multicast
filter (bsc#1012628).
- vmw_vsock: bypass false-positive Wnonnull warning with gcc-16
(bsc#1012628).
- net/rds: Clear reconnect pending bit (bsc#1012628).
- PCI: Mark ASM1164 SATA controller to avoid bus reset
(bsc#1012628).
- PCI/AER: Clear stale errors on reporting agents upon probe
(bsc#1012628).
- PCI: Fix pci_slot_lock () device locking (bsc#1012628).
- PCI: Enable ACS after configuring IOMMU for OF platforms
(bsc#1012628).
- PCI: Add ACS quirk for Qualcomm Hamoa & Glymur (bsc#1012628).
- PCI: Mark Nvidia GB10 to avoid bus reset (bsc#1012628).
- PCI/bwctrl: Disable BW controller on Intel P45 using a quirk
(bsc#1012628).
- myri10ge: avoid uninitialized variable use (bsc#1012628).
- nfc: nxp-nci: remove interrupt trigger type (bsc#1012628).
- hisi_acc_vfio_pci: resolve duplicate migration states
(bsc#1012628).
- RDMA/rtrs-clt: For conn rejection use actual err number
(bsc#1012628).
- hisi_acc_vfio_pci: fix the queue parameter anomaly issue
(bsc#1012628).
- um: Preserve errno within signal handler (bsc#1012628).
- ata: libata: avoid long timeouts on hot-unplugged SATA DAS
(bsc#1012628).
- hisi_acc_vfio_pci: update status after RAS error (bsc#1012628).
- scsi: buslogic: Reduce stack usage (bsc#1012628).
- vhost: fix caching attributes of MMIO regions by setting them
explicitly (bsc#1012628).
- scsi: ufs: mediatek: Fix page faults in ufs_mtk_clk_scale()
trace event (bsc#1012628).
- riscv: vector: init vector context with proper vlenb
(bsc#1012628).
- tracing: Fix false sharing in hwlat get_sample() (bsc#1012628).
- remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when
mailbox TX channel is uninitialized (bsc#1012628).
- mailbox: mchp-ipc-sbi: fix out-of-bounds access in
mchp_ipc_get_cluster_aggr_irq() (bsc#1012628).
- mailbox: pcc: Remove spurious IRQF_ONESHOT usage (bsc#1012628).
- mailbox: imx: Skip the suspend flag for i.MX7ULP (bsc#1012628).
- mailbox: mchp-ipc-sbi: fix uninitialized symbol and other
smatch warnings (bsc#1012628).
- mailbox: sprd: mask interrupts that are not handled
(bsc#1012628).
- remoteproc: mediatek: Break lock dependency to `prepare_lock`
(bsc#1012628).
- mailbox: sprd: clear delivery flag before handling TX done
(bsc#1012628).
- clk: amlogic: remove potentially unsafe flags from S4 video
clocks (bsc#1012628).
- clk: renesas: rzg2l: Deassert reset on assert timeout
(bsc#1012628).
- clk: microchip: core: correct return value on *_get_parent()
(bsc#1012628).
- HID: i2c-hid: Add FocalTech FT8112 (bsc#1012628).
- m68k: nommu: fix memmove() with differently aligned src and
dest for 68000 (bsc#1012628).
- 9p/xen: protect xen_9pfs_front_free against concurrent calls
(bsc#1012628).
- dmaengine: stm32-dma3: use module_platform_driver (bsc#1012628).
- soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded
of NUC15) (bsc#1012628).
- soundwire: intel_auxdevice: add cs42l45 codec to
wake_capable_list (bsc#1012628).
- staging: rtl8723bs: fix missing status update on
sdio_alloc_irq() failure (bsc#1012628).
- serial: 8250_dw: handle clock enable errors in runtime_resume
(bsc#1012628).
- usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed
PDOs (bsc#1012628).
- tty: vt/keyboard: Split apart vt_do_diacrit() (bsc#1012628).
- serial: rsci: Add set_rtrg() callback (bsc#1012628).
- fpga: of-fpga-region: Fail if any bridge is missing
(bsc#1012628).
- most: core: fix resource leak in most_register_interface error
paths (bsc#1012628).
- dmaengine: sun6i: Choose appropriate burst length under maxburst
(bsc#1012628).
- dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to
fix warnings (bsc#1012628).
- phy: ti: phy-j721e-wiz: restore mux selection during resume
(bsc#1012628).
- phy: cadence-torrent: restore parent clock for refclk during
resume (bsc#1012628).
- misc: bcm_vk: Fix possible null-pointer dereferences in
bcm_vk_read() (bsc#1012628).
- pinctrl: mediatek: make devm allocations safer and clearer in
mtk_eint_do_init() (bsc#1012628).
- misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66
(bsc#1012628).
- misc: ti_fpc202: fix a potential memory leak in probe function
(bsc#1012628).
- pinctrl: renesas: rzt2h: Allow .get_direction() for IRQ function
GPIOs (bsc#1012628).
- iio: bmi270_i2c: Add MODULE_DEVICE_TABLE for BMI260/270
(bsc#1012628).
- usb: gadget: f_fs: fix DMA-BUF OUT queues (bsc#1012628).
- usb: gadget: f_fs: Fix ioctl error handling (bsc#1012628).
- usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()
(bsc#1012628).
- staging: rtl8723bs: fix memory leak on failure path
(bsc#1012628).
- serial: 8250: 8250_omap.c: Add support for handling UART error
conditions (bsc#1012628).
- serial: 8250: 8250_omap.c: Clear DMA RX running status only
after DMA termination is done (bsc#1012628).
- fix it87_wdt early reboot by reporting running timer
(bsc#1012628).
- binder: don't use %pK through printk (bsc#1012628).
- watchdog: imx7ulp_wdt: handle the nowayout option (bsc#1012628).
- watchdog: rzv2h_wdt: Discard pm_runtime_put() return value
(bsc#1012628).
- phy: mvebu-cp110-utmi: fix dr_mode property read from dts
(bsc#1012628).
- phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature
(bsc#1012628).
- Revert "mfd: da9052-spi: Change read-mask to write-mask"
(bsc#1012628).
- mfd: intel-lpss: Add Intel Nova Lake-S PCI IDs (bsc#1012628).
- iio: Use IRQF_NO_THREAD (bsc#1012628).
- iio: magnetometer: Remove IRQF_ONESHOT (bsc#1012628).
- MIPS: Loongson: Make cpumask_of_node() robust against
NUMA_NO_NODE (bsc#1012628).
- block: fix partial IOVA mapping cleanup in blk_rq_dma_map_iova
(bsc#1012628).
- fs: ntfs3: check return value of indx_find to avoid infinite
loop (bsc#1012628).
- fs: ntfs3: fix infinite loop in attr_load_runs_range on
inconsistent metadata (bsc#1012628).
- fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
(bsc#1012628).
- fs/ntfs3: handle attr_set_size() errors when truncating files
(bsc#1012628).
- fs/ntfs3: drop preallocated clusters for sparse and compressed
files (bsc#1012628).
- ntfs3: fix circular locking dependency in run_unpack_ex
(bsc#1012628).
- fs/ntfs3: avoid calling run_get_entry() when run == NULL in
ntfs_read_run_nb_ra() (bsc#1012628).
- ceph: supply snapshot context in ceph_uninline_data()
(bsc#1012628).
- libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1012628).
- thermal: int340x: Fix sysfs group leak on DLVR registration
failure (bsc#1012628).
- ACPI: x86: Force enabling of PWM2 on the Yogabook YB1-X90
(bsc#1012628).
- include: uapi: netfilter_bridge.h: Cover for musl libc
(bsc#1012628).
- ARM: 9467/1: mm: Don't use %pK through printk (bsc#1012628).
- drm/amd/display: Fix writeback on DCN 3.2+ (bsc#1012628).
- drm/amdgpu: Skip vcn poison irq release on VF (bsc#1012628).
- mshv: Ignore second stats page map result failure (bsc#1012628).
- x86/hyperv: Move hv crash init after hypercall pg setup
(bsc#1012628).
- mshv: clear eventfd counter on irqfd shutdown (bsc#1012628).
- ASoC: rt721-sdca: Fix issue of fail to detect OMTP jack type
(bsc#1012628).
- regulator: core: Remove regulator supply_name length limit
(bsc#1012628).
- ALSA: hda/tas2781: Ignore reset check for SPI device
(bsc#1012628).
- drm/amd/display: Fix system resume lag issue (bsc#1012628).
- drm/amd/display: Avoid updating surface with the same surface
under MPO (bsc#1012628).
- drm/amdgpu: return when ras table checksum is error
(bsc#1012628).
- drm/amdgpu: Adjust usleep_range in fence wait (bsc#1012628).
- ALSA: hda/realtek: Fix headset mic on ASUS Zenbook 14 UX3405MA
(bsc#1012628).
- ALSA: usb-audio: Update the number of packets properly at
receiving (bsc#1012628).
- drm/amd/display: set enable_legacy_fast_update to false for
DCN36 (bsc#1012628).
- drm/amdgpu: Add HAINAN clock adjustment (bsc#1012628).
- drm/amd/display: bypass post csc for additional color spaces
in dal (bsc#1012628).
- spi: spidev: fix lock inversion between spi_lock and buf_lock
(bsc#1012628).
- drm/radeon: Add HAINAN clock adjustment (bsc#1012628).
- ALSA: usb-audio: Add sanity check for OOB writes at silencing
(bsc#1012628).
- btrfs: replace BUG() with error handling in __btrfs_balance()
(bsc#1012628).
- btrfs: do not ASSERT() when the fs flips RO inside
btrfs_repair_io_failure() (bsc#1012628).
- ASoC: amd: amd_sdw: add machine driver quirk for Lenovo models
(bsc#1012628).
- ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 (bsc#1012628).
- arm64: hugetlbpage: avoid unused-but-set-parameter warning
(gcc-16) (bsc#1012628).
- drm/amd/display: Remove conditional for shaper 3DLUT power-on
(bsc#1012628).
- drm/amdgpu: avoid sdma ring reset in sriov (bsc#1012628).
- rtc: zynqmp: correct frequency value (bsc#1012628).
- ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access
(bsc#1012628).
- ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
(bsc#1012628).
- iommu/amd: serialize sequence allocation under concurrent TLB
invalidations (bsc#1012628).
- xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
(bsc#1012628).
- xfrm: skip templates check for packet offload tunnel mode
(bsc#1012628).
- ipmi: ipmb: initialise event handler read bytes (bsc#1012628).
- xfrm: always flush state and policy upon NETDEV_UNREGISTER event
(bsc#1012628).
- writeback: Fix wakeup and logging timeouts for !DETECT_HUNG_TASK
(bsc#1012628).
- tcp: fix potential race in tcp_v6_syn_recv_sock() (bsc#1012628).
- psp: use sk->sk_hash in psp_write_headers() (bsc#1012628).
- espintcp: Fix race condition in espintcp_close() (bsc#1012628).
- net: usb: kaweth: remove TX queue manipulation in
kaweth_set_rx_mode (bsc#1012628).
- net: usb: lan78xx: scan all MDIO addresses on LAN7801
(bsc#1012628).
- proc: Fix pointer error dereference (bsc#1012628).
- net: phy: qcom: qca807x: normalize return value of gpio_get
(bsc#1012628).
- net: ethernet: xscale: Check for PTP support properly
(bsc#1012628).
- udplite: Fix null-ptr-deref in __udp_enqueue_schedule_skb()
(bsc#1012628).
- bnxt_en: Fix RSS context delete logic (bsc#1012628).
- bnxt_en: Fix deleting of Ntuple filters (bsc#1012628).
- ovpn: tcp - fix packet extraction from stream (bsc#1012628).
- ksmbd: fix signededness bug in smb_direct_prepare_negotiation()
(bsc#1012628).
- dma-mapping: avoid random addr value print out on error path
(bsc#1012628).
- sparc: Fix page alignment in dma mapping (bsc#1012628).
- wifi: cfg80211: wext: fix IGTK key ID off-by-one (bsc#1012628).
- wifi: brcmfmac: Fix potential kernel oops when probe fails
(bsc#1012628).
- Remove WARN_ALL_UNSEEDED_RANDOM kernel config option
(bsc#1012628).
- Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ
(bsc#1012628).
- Bluetooth: L2CAP: Fix result of L2CAP_ECRED_CONN_RSP when MTU
is too short (bsc#1012628).
- Bluetooth: hci_qca: Cleanup on all setup failures (bsc#1012628).
- Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ
(bsc#1012628).
- Bluetooth: L2CAP: Fix not checking output MTU is acceptable
on L2CAP_ECRED_CONN_REQ (bsc#1012628).
- Bluetooth: L2CAP: Fix missing key size check for
L2CAP_LE_CONN_REQ (bsc#1012628).
- net: do not pass flow_id to set_rps_cpu() (bsc#1012628).
- tls: Fix race condition in tls_sw_cancel_work_tx()
(bsc#1012628).
- kcm: fix zero-frag skb in frag_list on partial sendmsg error
(bsc#1012628).
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for
some chip IDs (bsc#1012628).
- tipc: fix duplicate publication key in
tipc_service_insert_publ() (bsc#1012628).
- RDMA/core: Fix stale RoCE GIDs during netdev events at
registration (bsc#1012628).
- RDMA/bng_re: Remove unnessary validity checks (bsc#1012628).
- RDMA/bng_re: Unwind bng_re_dev_init properly (bsc#1012628).
- net: wan: farsync: Fix use-after-free bugs caused by unfinished
tasklets (bsc#1012628).
- netconsole: avoid OOB reads, msg is not nul-terminated
(bsc#1012628).
- RDMA/ionic: Fix potential NULL pointer dereference in
ionic_query_port (bsc#1012628).
- RDMA/efa: Fix typo in efa_alloc_mr() (bsc#1012628).
- net: Drop the lock in skb_may_tx_timestamp() (bsc#1012628).
- net: usb: pegasus: enable basic endpoint checking (bsc#1012628).
- erofs: fix interlaced plain identification for encoded extents
(bsc#1012628).
- RDMA/umem: Fix double dma_buf_unpin in failure path
(bsc#1012628).
- tcp: re-enable acceptance of FIN packets when RWIN is 0
(bsc#1012628).
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init()
(bsc#1012628).
- net: mana: Fix double destroy_workqueue on service rescan PCI
path (bsc#1012628).
- team: avoid NETDEV_CHANGEMTU event when unregistering slave
(bsc#1012628).
- net/mlx5: DR, Fix circular locking dependency in dump
(bsc#1012628).
- net/mlx5: LAG, disable MPESW in lag_disable_change()
(bsc#1012628).
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev
(bsc#1012628).
- net/mlx5: Fix missing devlink lock in SRIOV enable error path
(bsc#1012628).
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address
query (bsc#1012628).
- net: consume xmit errors of GSO frames (bsc#1012628).
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write
(bsc#1012628).
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
(bsc#1012628).
- x86/acpi/boot: Correct acpi_is_processor_usable() check again
(bsc#1012628).
- rpmsg: core: fix race in driver_override_show() and use core
helper (bsc#1012628).
- clk: renesas: rzg2l: Fix intin variable size (bsc#1012628).
- clk: renesas: rzg2l: Select correct div round macro
(bsc#1012628).
- hfsplus: ensure sb->s_fs_info is always cleaned up
(bsc#1012628).
- memory: mtk-smi: fix device leaks on common probe (bsc#1012628).
- memory: mtk-smi: fix device leak on larb probe (bsc#1012628).
- arm64: dts: ti: am62p-verdin: Fix SD regulator startup delay
(bsc#1012628).
- drm/panthor: fix for dma-fence safe access rules (bsc#1012628).
- ASoC: SOF: ipc4-control: If there is no data do not send bytes
update (bsc#1012628).
- ASoC: SOF: ipc4-topology: Correct the allocation size for
bytes controls (bsc#1012628).
- ASoC: SOF: ipc4-control: Use the correct size for
scontrol->ipc_control_data (bsc#1012628).
- ASoC: SOF: ipc4-control: Keep the payload size up to date
(bsc#1012628).
- PCI: j721e: Add config guards for Cadence Host and Endpoint
library APIs (bsc#1012628).
- fpga: dfl: use subsys_initcall to allow built-in drivers to
be added (bsc#1012628).
- drm/tests: shmem: Swap names of export tests (bsc#1012628).
- drm/tests: shmem: Add clean-up action to unpin pages
(bsc#1012628).
- drm/tests: shmem: Hold reservation lock around vmap/vunmap
(bsc#1012628).
- drm/tests: shmem: Hold reservation lock around madvise
(bsc#1012628).
- drm/tests: shmem: Hold reservation lock around purge
(bsc#1012628).
- drm/xe: Fix ggtt fb alignment (bsc#1012628).
- Revert "PCI: dw-rockchip: Don't wait for link since we can
detect Link Up" (bsc#1012628).
- PCI: dwc: Add L1 Substates context to ltssm_status of debugfs
(bsc#1012628).
- PCI: dw-rockchip: Change get_ltssm() to provide L1 Substates
info (bsc#1012628).
- Revert "PCI: dw-rockchip: Enumerate endpoints based on
dll_link_up IRQ" (bsc#1012628).
- Revert "PCI: qcom: Don't wait for link if we can detect Link Up"
(bsc#1012628).
- Revert "PCI: qcom: Enable MSI interrupts together with Link
up if 'Global IRQ' is supported" (bsc#1012628).
- Revert "PCI: qcom: Enumerate endpoints based on Link up event in
'global_irq' interrupt" (bsc#1012628).
- Revert "PCI: dwc: Don't wait for link up if driver can detect
Link Up event" (bsc#1012628).
- PCI: Use resource_set_range() that correctly sets ->end
(bsc#1012628).
- net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels
(bsc#1012628).
- phy: qcom: edp: Make the number of clocks flexible
(bsc#1012628).
- arm64: dts: qcom: sdm630: Add missing MDSS reset (bsc#1012628).
- dm-verity: correctly handle dm_bufio_client_create() failure
(bsc#1012628).
- media: uvcvideo: Fix support for
V4L2_CTRL_FLAG_HAS_WHICH_MIN_MAX (bsc#1012628).
- media: mediatek: encoder: Fix uninitialized scalar variable
issue (bsc#1012628).
- media: mtk-mdp: Fix error handling in probe function
(bsc#1012628).
- media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()
(bsc#1012628).
- media: chips-media: wave5: Fix PM runtime usage count underflow
(bsc#1012628).
- media: chips-media: wave5: Fix kthread worker destruction in
polling mode (bsc#1012628).
- media: chips-media: wave5: Fix device cleanup order to prevent
kernel panic (bsc#1012628).
- media: chips-media: wave5: Fix SError of kernel panic when
closed (bsc#1012628).
- media: chips-media: wave5: Fix Null reference while testing
fluster (bsc#1012628).
- media: v4l2-mem2mem: Add a kref to the v4l2_m2m_dev structure
(bsc#1012628).
- media: verisilicon: Avoid G2 bus error while decoding H.264
and HEVC (bsc#1012628).
- media: verisilicon: AV1: Fix enable cdef computation
(bsc#1012628).
- media: verisilicon: AV1: Fix tx mode bit setting (bsc#1012628).
- arm64: dts: qcom: x1e80100: Add missing TCSR ref clock to the
DP PHYs (bsc#1012628).
- arm64: dts: qcom: sm8750: Fix BAM DMA probing (bsc#1012628).
- ARM: omap2: Fix reference count leaks in omap_control_init()
(bsc#1012628).
- arm64: kernel: initialize missing kexec_buf->random field
(bsc#1012628).
- powerpc/pseries: Fix MSI-X allocation failure when quota is
exceeded (bsc#1012628).
- KVM: x86: Return "unsupported" instead of "invalid" on access
to unsupported PV MSR (bsc#1012628).
- KVM: nSVM: Remove a user-triggerable WARN on
nested_svm_load_cr3() succeeding (bsc#1012628).
- arm64: Disable branch profiling for all arm64 code
(bsc#1012628).
- pinctrl: meson: amlogic-a4: mark the GPIO controller as sleeping
(bsc#1012628).
- HID: hid-pl: handle probe errors (bsc#1012628).
- HID: magicmouse: Do not crash on missing msc->input
(bsc#1012628).
- HID: prodikeys: Check presence of pm->input_ep82 (bsc#1012628).
- HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()
(bsc#1012628).
- fs: ensure that internal tmpfs mount gets mount id zero
(bsc#1012628).
- arm64: dts: apple: t8112-j473: Keep the HDMI port powered on
(bsc#1012628).
- media: amphion: Drop min_queued_buffers assignment
(bsc#1012628).
- media: rockchip: rga: Fix possible ERR_PTR dereference in
rga_buf_init() (bsc#1012628).
- media: verisilicon: AV1: Set IDR flag for intra_only frame type
(bsc#1012628).
- media: tegra-video: Fix memory leak in
__tegra_channel_try_format() (bsc#1012628).
- media: radio-keene: fix memory leak in error path (bsc#1012628).
- media: cx88: Add missing unmap in snd_cx88_hw_params()
(bsc#1012628).
- media: cx23885: Add missing unmap in snd_cx23885_hw_params()
(bsc#1012628).
- media: cx25821: Add missing unmap in snd_cx25821_hw_params()
(bsc#1012628).
- media: i2c/tw9903: Fix potential memory leak in tw9903_probe()
(bsc#1012628).
- media: i2c/tw9906: Fix potential memory leak in tw9906_probe()
(bsc#1012628).
- media: i2c: ov01a10: Fix the horizontal flip control
(bsc#1012628).
- media: i2c: ov01a10: Fix reported pixel-rate value
(bsc#1012628).
- media: i2c: ov01a10: Fix analogue gain range (bsc#1012628).
- media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls
(bsc#1012628).
- media: i2c: ov01a10: Fix passing stream instead of pad to
v4l2_subdev_state_get_format() (bsc#1012628).
- media: i2c: ov01a10: Fix test-pattern disabling (bsc#1012628).
- media: qcom: camss: vfe: Fix out-of-bounds access in
vfe_isr_reg_update() (bsc#1012628).
- media: ccs: Avoid possible division by zero (bsc#1012628).
- media: i2c: ov5647: Initialize subdev before controls
(bsc#1012628).
- media: i2c: ov5647: Correct pixel array offset (bsc#1012628).
- media: i2c: ov5647: Correct minimum VBLANK value (bsc#1012628).
- media: i2c: ov5647: Sensor should report RAW color space
(bsc#1012628).
- media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode
(bsc#1012628).
- media: ccs: Fix setting initial sub-device state (bsc#1012628).
- media: i2c: ov5647: use our own mutex for the ctrl lock
(bsc#1012628).
- media: dw9714: Fix powerup sequence (bsc#1012628).
- media: ipu6: Fix typo and wrong constant in ipu6-mmu.c
(bsc#1012628).
- media: ipu6: Fix RPM reference leak in probe error paths
(bsc#1012628).
- media: staging/ipu7: Ignore interrupts when device is suspended
(bsc#1012628).
- media: staging/ipu7: Call synchronous RPM suspend in probe
failure (bsc#1012628).
- media: staging/ipu7: Update CDPHY register settings
(bsc#1012628).
- media: staging/ipu7: Fix the loop bound in l2 table alloc
(bsc#1012628).
- platform/x86: ISST: Add missing write block check (bsc#1012628).
- platform/x86: ISST: Store and restore all domains data
(bsc#1012628).
- KVM: x86: Ignore -EBUSY when checking nested events from
vcpu_block() (bsc#1012628).
- dm-integrity: fix a typo in the code for write/discard race
(bsc#1012628).
- dm: clear cloned request bio pointer when last clone bio
completes (bsc#1012628).
- drm/tegra: dsi: fix device leak on probe (bsc#1012628).
- soc: ti: k3-socinfo: Fix regmap leak on probe failure
(bsc#1012628).
- soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
(bsc#1012628).
- arm64: dts: ti: k3-am69-aquila: Change main_spi0/2 CS to GPIO
mode (bsc#1012628).
- arm64: dts: ti: k3-am69-aquila-clover: Change main_spi2 CS0
to GPIO mode (bsc#1012628).
- KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation
(bsc#1012628).
- bus: omap-ocp2scp: fix OF populate on driver rebind
(bsc#1012628).
- clk: clk-apple-nco: Add "apple,t8103-nco" compatible
(bsc#1012628).
- soc: rockchip: grf: Fix wrong RK3576_IOCGRF_MISC_CON definition
(bsc#1012628).
- soc: rockchip: grf: Support multiple grf to be handled
(bsc#1012628).
- media: stm32: dcmipp: avoid naming clock if only one is needed
(bsc#1012628).
- media: stm32: dcmipp: bytecap: clear all interrupts upon stream
stop (bsc#1012628).
- media: stm32: dcmipp: byteproc: disable compose for all bayers
(bsc#1012628).
- media: i2c: ov01a10: Fix digital gain range (bsc#1012628).
- arm64: dts: rockchip: Fix SD card support for RK3576 EVB1
(bsc#1012628).
- arm64: dts: rockchip: Fix SD card support for RK3576 Nanopi R76s
(bsc#1012628).
- x86/uprobes: Fix XOL allocation failure for 32-bit tasks
(bsc#1012628).
- clk: tegra: tegra124-emc: Fix potential memory leak in
tegra124_clk_register_emc() (bsc#1012628).
- s390/pci: Handle futile config accesses of disabled devices
directly (bsc#1012628).
- mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()
(bsc#1012628).
- drm/i915/psr: Don't enable Panel Replay on sink if globally
disabled (bsc#1012628).
- reset: gpio: suppress bind attributes in sysfs (bsc#1012628).
- dm-integrity: fix recalculation in bitmap mode (bsc#1012628).
- dm-unstripe: fix mapping bug when there are multiple targets
in a table (bsc#1012628).
- rtc: pcf8563: use correct of_node for output clock
(bsc#1012628).
- drm/tyr: fix register name in error print (bsc#1012628).
- arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook
Pro (bsc#1012628).
- media: venus: vdec: fix error state assignment for zero
bytesused (bsc#1012628).
- media: venus: vdec: restrict EOS addr quirk to IRIS2 only
(bsc#1012628).
- Revert "media: iris: Add sanity check for stop streaming"
(bsc#1012628).
- media: iris: Fix ffmpeg corrupted frame error (bsc#1012628).
- media: iris: Fix fps calculation (bsc#1012628).
- media: iris: use fallback size when S_FMT is called without
width/height (bsc#1012628).
- media: iris: remove v4l2_m2m_ioctl_{de,en}coder_cmd API usage
during STOP handling (bsc#1012628).
- media: iris: Add missing platform data entries for SM8750
(bsc#1012628).
- media: iris: Add buffer to list only after successful allocation
(bsc#1012628).
- media: iris: Skip resolution set on first IPSC (bsc#1012628).
- media: iris: gen1: Destroy internal buffers after FW releases
(bsc#1012628).
- media: iris: gen2: Add sanity check for session stop
(bsc#1012628).
- media: iris: Prevent output buffer queuing before stream-on
completes (bsc#1012628).
- drm: of: drm_of_panel_bridge_remove(): fix device_node leak
(bsc#1012628).
- docs: kdoc: fix logic to handle unissued warnings (bsc#1012628).
- docs: kdoc: avoid error_count overflows (bsc#1012628).
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP
allocations (bsc#1012628).
- selftests/mm/charge_reserved_hugetlb: drop mount size for
hugetlbfs (bsc#1012628).
- drm/buddy: Prevent BUG_ON by validating rounded allocation
(bsc#1012628).
- drm/bridge: anx7625: Fix invalid EDID size (bsc#1012628).
- phy: fsl-imx8mq-usb: set platform driver data (bsc#1012628).
- PCI: dwc: Skip waiting for L2/L3 Ready if
dw_pcie_rp::skip_l23_wait is true (bsc#1012628).
- xfs: mark data structures corrupt on EIO and ENODATA
(bsc#1012628).
- xfs: remove xfs_attr_leaf_hasname (bsc#1012628).
- media: verisilicon: AV1: Fix tile info buffer size
(bsc#1012628).
- dm: fix excessive blk-crypto operations for invalid keys
(bsc#1012628).
- media: uvcvideo: Return queued buffers on start_streaming()
failure (bsc#1012628).
- iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device
without scalable mode (bsc#1012628).
- iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible
in scalable mode (bsc#1012628).
- iommu/vt-d: Flush piotlb for SVM and Nested domain
(bsc#1012628).
- KVM: arm64: nv: Return correct RES0 bits for FGT registers
(bsc#1012628).
- mfd: core: Add locking around 'mfd_of_node_list' (bsc#1012628).
- mfd: tps65219: Implement LOCK register handling for TPS65214
(bsc#1012628).
- mfd: macsmc: Initialize mutex (bsc#1012628).
- mfd: qcom-pm8xxx: Fix OF populate on driver rebind
(bsc#1012628).
- mfd: omap-usb-host: Fix OF populate on driver rebind
(bsc#1012628).
- erofs: fix incorrect early exits for invalid metabox-enabled
images (bsc#1012628).
- erofs: fix incorrect early exits in volume label handling
(bsc#1012628).
- arm64: dts: rockchip: Explicitly request UFS reset pin on RK3576
(bsc#1012628).
- arm64: dts: rockchip: Fix rk356x PCIe range mappings
(bsc#1012628).
- arm64: dts: rockchip: Fix rk3588 PCIe range mappings
(bsc#1012628).
- PCI/PM: Prevent runtime suspend until devices are fully
initialized (bsc#1012628).
- iio: accel: adxl380: Avoid reading more entries than present
in FIFO (bsc#1012628).
- clk: tegra: tegra124-emc: fix device leak on set_rate()
(bsc#1012628).
- iommu/arm-smmu-v3: Add update_safe bits to fix STE update
sequence (bsc#1012628).
- iommu/arm-smmu-v3: Mark STE MEV safe when computing the update
sequence (bsc#1012628).
- iommu/arm-smmu-v3: Mark EATS_TRANS safe when computing the
update sequence (bsc#1012628).
- iommu/arm-smmu-v3: Do not set disable_ats unless vSTE is
Translate (bsc#1012628).
- usb: host: tegra: Remove manual wake IRQ disposal (bsc#1012628).
- xfs: delete attr leaf freemap entries when empty (bsc#1012628).
- xfs: fix freemap adjustments when adding xattrs to leaf blocks
(bsc#1012628).
- xfs: fix the xattr scrub to detect freemap/entries array
collisions (bsc#1012628).
- xfs: fix remote xattr valuelblk check (bsc#1012628).
- xfs: get rid of the xchk_xfile_*_descr calls (bsc#1012628).
- spmi: apple: Add "apple,t8103-spmi" compatible (bsc#1012628).
- rust/drm: Fix Registration::{new,new_foreign_owned}() docs
(bsc#1012628).
- KVM: x86: Add SRCU protection for reading PDPTRs in
__get_sregs2() (bsc#1012628).
- PCI: endpoint: Fix swapped parameters in
pci_{primary/secondary}_epc_epf_unlink() functions
(bsc#1012628).
- pinctrl: intel: Add code name documentation (bsc#1012628).
- xfs: only call xf{array,blob}_destroy if we have a valid pointer
(bsc#1012628).
- xfs: check return value of xchk_scrub_create_subord
(bsc#1012628).
- xfs: check for deleted cursors when revalidating two btrees
(bsc#1012628).
- md/bitmap: fix GPF in write_page caused by resize race
(bsc#1012628).
- nfsd: fix nfs4_file refcount leak in nfsd_get_dir_deleg()
(bsc#1012628).
- NFSD: fix setting FMODE_NOCMTIME in nfs4_open_delegation
(bsc#1012628).
- nfsd: fix return error code for nfsd_map_name_to_[ug]id
(bsc#1012628).
- nvmem: Drop OF node reference on nvmem_add_one_cell() failure
(bsc#1012628).
- PCI: Fix bridge window alignment with optional resources
(bsc#1012628).
- ima: verify the previous kernel's IMA buffer lies in addressable
RAM (bsc#1012628).
- of/kexec: refactor ima_get_kexec_buffer() to use
ima_validate_range() (bsc#1012628).
- x86/kexec: add a sanity check on previous kernel's ima kexec
buffer (bsc#1012628).
- mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node
(bsc#1012628).
- usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN
(bsc#1012628).
- mm/slab: add rcu_barrier() to kvfree_rcu_barrier_on_cache()
(bsc#1012628).
- io_uring/net: don't continue send bundle if poll was required
for retry (bsc#1012628).
- bus: fsl-mc: fix an error handling in fsl_mc_device_add()
(bsc#1012628).
- dm mpath: Add missing dm_put_device when failing to get scsi
dh name (bsc#1012628).
- dm mpath: make pg_init_delay_msecs settable (bsc#1012628).
- arm64: poe: fix stale POR_EL0 values for ptrace (bsc#1012628).
- tools: Fix bitfield dependency failure (bsc#1012628).
- vhost: move vdpa group bound check to vhost_vdpa (bsc#1012628).
- ACPI: APEI: GHES: Add helper for CPER CXL protocol errors checks
(bsc#1012628).
- ACPI: APEI: GHES: Disable KASAN instrumentation when compile
testing with clang < 18 (bsc#1012628).
- powerpc/smp: Add check for kcalloc() failure in
parse_thread_groups() (bsc#1012628).
- iio: gyro: itg3200: Fix unchecked return value in read_raw
(bsc#1012628).
- mtd: spinand: Disable continuous read during probe
(bsc#1012628).
- power: reset: tdx-ec-poweroff: fix restart (bsc#1012628).
- mm/highmem: fix __kmap_to_page() build error (bsc#1012628).
- compiler-clang.h: require LLVM 19.1.0 or higher for
__typeof_unqual__ (bsc#1012628).
- rapidio: replace rio_free_net() with kfree() in
rio_scan_alloc_net() (bsc#1012628).
- ocfs2: fix reflink preserve cleanup issue (bsc#1012628).
- kexec: derive purgatory entry from symbol (bsc#1012628).
- crash_dump: fix dm_crypt keys locking and ref leak
(bsc#1012628).
- kho: skip memoryless NUMA nodes when reserving scratch areas
(bsc#1012628).
- Revert "PCI/IOV: Add PCI rescan-remove locking when
enabling/disabling SR-IOV" (bsc#1012628).
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug
(bsc#1012628).
- arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y
(bsc#1012628).
- uprobes: Fix incorrect lockdep condition in filter_chain()
(bsc#1012628).
- clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841
(bsc#1012628).
- btrfs: fix periodic reclaim condition (bsc#1012628).
- btrfs: zoned: fixup last alloc pointer after extent removal
for RAID1 (bsc#1012628).
- btrfs: zoned: fixup last alloc pointer after extent removal
for DUP (bsc#1012628).
- btrfs: zoned: fixup last alloc pointer after extent removal
for RAID0/10 (bsc#1012628).
- btrfs: continue trimming remaining devices on failure
(bsc#1012628).
- iommupt: Always add IOVA range to iotlb_gather in
gather_range_pages() (bsc#1012628).
- remoteproc: imx_rproc: Fix invalid loaded resource table
detection (bsc#1012628).
- perf/arm-cmn: Reject unsupported hardware configurations
(bsc#1012628).
- scsi: ufs: core: Flush exception handling work when RPM level
is zero (bsc#1012628).
- mm/slab: avoid allocating slabobj_ext array from its own slab
(bsc#1012628).
- mm/slab: use unsigned long for orig_size to ensure proper
metadata align (bsc#1012628).
- PM: sleep: core: Avoid bit field races related to
work_in_progress (bsc#1012628).
- MIPS: Loongson2ef: Register PCI controller in early stage
(bsc#1012628).
- MIPS: Loongson2ef: Use pcibios_align_resource() to block io
range (bsc#1012628).
- PCI: dwc: Fix msg_atu_index assignment (bsc#1012628).
- mux: mmio: fix regmap leak on probe failure (bsc#1012628).
- usb: dwc3: gadget: Move vbus draw to workqueue context
(bsc#1012628).
- usb: dwc2: fix resume failure if dr_mode is host (bsc#1012628).
- mtd: rawnand: pl353: Fix software ECC support (bsc#1012628).
- tipc: fix RCU dereference race in tipc_aead_users_dec()
(bsc#1012628).
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()
(bsc#1012628).
- drm/amdgpu: Protect GPU register accesses in powergated state
in some paths (bsc#1012628).
- drm/amdgpu: GPU vm support 5-level page table (bsc#1012628).
- drm/amdgpu: Use 5-level paging if gmc support 57-bit VA
(bsc#1012628).
- net: cpsw_new: Fix unnecessary netdev unregistration in
cpsw_probe() error path (bsc#1012628).
- net: cpsw_new: Fix potential unregister of netdev that has
not been registered yet (bsc#1012628).
- PCI: Don't claim disabled bridge windows (bsc#1012628).
- PCI: Fix pci_slot_trylock() error handling (bsc#1012628).
- parisc: kernel: replace kfree() with put_device() in
create_tree_node() (bsc#1012628).
- mptcp: pm: in-kernel: always set ID as avail when rm endp
(bsc#1012628).
- staging: rtl8723bs: fix null dereference in find_network
(bsc#1012628).
- hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler
optimization induced race (bsc#1012628).
- kcsan, compiler_types: avoid duplicate type issues in BPF Type
Format (bsc#1012628).
- watchdog/softlockup: fix sample ring index wrap in
need_counting_irqs() (bsc#1012628).
- i2c: imx-lpi2c: fix SMBus block read NACK after byte count
(bsc#1012628).
- cifs: Fix locking usage for tcon fields (bsc#1012628).
- MIPS: rb532: Fix MMIO UART resource registration (bsc#1012628).
- ceph: supply snapshot context in ceph_zero_partial_object()
(bsc#1012628).
- drm/i915/quirks: Fix device id for QUIRK_EDP_LIMIT_RATE_HBR2
entry (bsc#1012628).
- rust: kbuild: pass `-Zunstable-options` for Rust 1.95.0
(bsc#1012628).
- mm/slab: do not access current->mems_allowed_seq if !allow_spin
(bsc#1012628).
- mm/slab: use prandom if !allow_spin (bsc#1012628).
- LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE
(bsc#1012628).
- LoongArch: Prefer top-down allocation after arch_mem_init()
(bsc#1012628).
- LoongArch: Use %px to print unmodified unwinding address
(bsc#1012628).
- LoongArch: Handle percpu handler address for ORC unwinder
(bsc#1012628).
- LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT
(bsc#1012628).
- LoongArch: Remove some extern variables in source files
(bsc#1012628).
- LoongArch: Disable instrumentation for setup_ptwalker()
(bsc#1012628).
- net: ethernet: marvell: skge: remove incorrect conflicting
PCI ID (bsc#1012628).
- net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in
uhdlc_memclean() (bsc#1012628).
- octeontx2-af: CGX: fix bitmap leaks (bsc#1012628).
- net: ti: icssg-prueth: Add optional dependency on HSR
(bsc#1012628).
- net: macb: Fix tx/rx malfunction after phy link down and up
(bsc#1012628).
- tracing: Fix to set write permission to per-cpu buffer_size_kb
(bsc#1012628).
- tracing: Reset last_boot_info if ring buffer is reset
(bsc#1012628).
- ceph: do not propagate page array emplacement errors as batch
errors (bsc#1012628).
- ceph: fix write storm on fscrypted files (bsc#1012628).
- io_uring/filetable: clamp alloc_hint to the configured alloc
range (bsc#1012628).
- io_uring/openclose: fix io_pipe_fixed() slot tracking for
specific slots (bsc#1012628).
- drm/i915/dp: Fail state computation for invalid DSC source
input BPP values (bsc#1012628).
- drm/i915/dp: Fix pipe BPP clamping due to HDR (bsc#1012628).
- drm/amd/display: Increase DCN35 SR enter/exit latency
(bsc#1012628).
- drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify
(bsc#1012628).
- mm/hugetlb: restore failed global reservations to subpool
(bsc#1012628).
- mm/page_alloc: skip debug_check_no_{obj,locks}_freed with
FPI_TRYLOCK (bsc#1012628).
- procfs: fix possible double mmput() in do_procmap_query()
(bsc#1012628).
- mm/vmscan: fix demotion targets checks in reclaim/demotion
(bsc#1012628).
- mm/page_alloc: clear page->private in free_pages_prepare()
(bsc#1012628).
- net: intel: fix PCI device ID conflict between i40e and ipw2200
(bsc#1012628).
- atm: fore200e: fix use-after-free in tasklets during device
removal (bsc#1012628).
- function_graph: Restore direct mode when callbacks drop to one
(bsc#1012628).
- kbuild: Fix CC_CAN_LINK detection (bsc#1012628).
- kbuild: rpm-pkg: Restrict manual debug package creation
(bsc#1012628).
- kernel: rpm-pkg: Restore find-debuginfo.sh approach to
- debuginfo package (bsc#1012628).
- kbuild: rpm-pkg: Fix manual debuginfo generation when using
.src.rpm (bsc#1012628).
- ipv6: ioam: fix heap buffer overflow in
__ioam6_fill_trace_data() (bsc#1012628).
- mm: numa_memblks: Identify the accurate NUMA ID of CFMW
(bsc#1012628).
- fbdev: Use device_create_with_groups() to fix sysfs groups
registration race (bsc#1012628).
- fbcon: check return value of con2fb_acquire_newinfo()
(bsc#1012628).
- fbdev: vt8500lcdfb: fix missing dma_free_coherent()
(bsc#1012628).
- fbdev: of: display_timing: fix refcount leak in
of_get_display_timings() (bsc#1012628).
- fbdev: ffb: fix corrupted video output on Sun FFB1
(bsc#1012628).
- fbcon: Remove struct fbcon_display.inverse (bsc#1012628).
- io_uring/zcrx: fix sgtable leak on mapping failures
(bsc#1012628).
- io_uring/zcrx: fix post open error handling (bsc#1012628).
- io_uring/zcrx: check unsupported flags on import (bsc#1012628).
- cifs: some missing initializations on replay (bsc#1012628).
- gpio: nomadik: Add missing IS_ERR() check (bsc#1012628).
- io_uring/cmd_net: fix too strict requirement on ioctl
(bsc#1012628).
- ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR
(bsc#1012628).
- kbuild: rpm-pkg: Disable automatic requires for manual debuginfo
package (bsc#1012628).
- net: arcnet: com20020-pci: fix support for 2.5Mbit cards
(bsc#1012628).
- drm/xe: Add bounds check on pat_index to prevent OOB kernel
read in madvise (bsc#1012628).
- net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle
(bsc#1012628).
- net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash()
(bsc#1012628).
- gpio: swnode: restore the swnode-name-against-chip-label
matching (bsc#1012628).
- gpio: sysfs: fix chip removal with GPIOs exported over sysfs
(bsc#1012628).
- x86/kexec: Copy ACPI root pointer address from config table
(bsc#1012628).
- io_uring/zcrx: fix user_ref race between scrub and refill paths
(bsc#1012628).
- rust: irq: add `'static` bounds to irq callbacks (bsc#1012628).
- rust: pin-init: replace clippy `expect` with `allow`
(bsc#1012628).
- arm64: Force the use of CNTVCT_EL0 in __delay() (bsc#1012628).
- drm/amd/display: Correct logic check error for fastboot
(bsc#1012628).
- drm/amdgpu: keep vga memory on MacBooks with switchable graphics
(bsc#1012628).
- net: nfc: nci: Fix parameter validation for packet data
(bsc#1012628).
- ring-buffer: Fix possible dereference of uninitialized pointer
(bsc#1012628).
- tracing: ring-buffer: Fix to check event length before using
(bsc#1012628).
- fgraph: Do not call handlers direct when not using ftrace_ops
(bsc#1012628).
- tracing: Fix checking of freed trace_event_file for hist files
(bsc#1012628).
- tracing: Wake up poll waiters for hist files when removing an
event (bsc#1012628).
- rust: list: Add unsafe blocks for container_of and safety
comments (bsc#1012628).
- NTB: ntb_transport: Fix too small buffer for debugfs_name
(bsc#1012628).
- ALSA: pcm: Revert bufs move in snd_pcm_xfern_frames_ioctl()
(bsc#1012628).
- Revert "ACPI: processor: Update cpuidle driver check in
__acpi_processor_start()" (bsc#1012628).
- drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros
(bsc#1012628).
- xfs: fix copy-paste error in previous fix (bsc#1012628).
- arm64: Fix sampling the "stable" virtual counter in preemptible
section (bsc#1012628).
- most: core: fix leak on early registration failure
(bsc#1012628).
- perf test parse-metric: Ensure aggregate counts appear to have
run (bsc#1012628).
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last
Fence Update and Timeline Management v7 (bsc#1012628).
- Rename to
patches.kernel.org/6.19.6-096-gendwarfksyms-Fix-build-on-32-bit-hosts.patch.
- Update config files.
- commit 9abab2a
* Wed Mar 04 2026 msuchanek@suse.de
- Move dummy openssl from kernel-source to kernel
Fixes: eb95320d3295 ("scripts/run_oldconfig: use dummy-tools openssl (bsc#1259065)")
- commit dd3697c
* Mon Mar 02 2026 jslaby@suse.cz
- locking/qspinlock: Save previous node & owner CPU into
mcs_spinlock (bsc#1258936).
- commit 9c15967
* Mon Mar 02 2026 tiwai@suse.de
- certs: Replace openssl invocation with $OPENSSL (bsc#1259065).
- commit 104ab06
* Mon Mar 02 2026 tiwai@suse.de
- Update config files: re-enable CONFIG_OPENSSL_SUPPORTS_ML_DSA (bsc#1259065)
- commit 0bfc1b0
* Mon Mar 02 2026 tiwai@suse.de
- scripts/run_oldconfig: use dummy-tools openssl (bsc#1259065)
Needed for CONFIG_OPENSSL_SUPPORTS_ML_DSA introduced in 7.0 kernel.
- commit eb95320
* Mon Mar 02 2026 jslaby@suse.cz
- Refresh
patches.rpmify/gendwarfksyms-Fix-build-on-32-bit-hosts.patch.
Update upstream status.
- commit 55bf02e
* Mon Mar 02 2026 pfalcato@suse.de
- update to 7.0-rc2
- refresh config files
- commit 1b18c75
* Sat Feb 28 2026 jslaby@suse.cz
- kbuild: Leave objtool binary around with 'make clean' (kmp-fix).
- commit 3f3f246
* Sat Feb 28 2026 jslaby@suse.cz
- Linux 6.19.5 (bsc#1012628).
- Rename to
patches.kernel.org/6.19.5-001-netfilter-nf_tables-add-.abort_skip_removal-fl.patch.
- commit 25f578f
* Fri Feb 27 2026 tiwai@suse.de
- netfilter: nf_tables: add .abort_skip_removal flag for set types
(bsc#1259020).
- commit 09a974f
* Fri Feb 27 2026 jslaby@suse.cz
- Linux 6.19.4 (bsc#1012628).
- RDMA/siw: Fix potential NULL pointer dereference in header
processing (bsc#1012628).
- RDMA/umad: Reject negative data_len in ib_umad_write
(bsc#1012628).
- auxdisplay: arm-charlcd: fix release_mem_region() size
(bsc#1012628).
- hfsplus: return error when node already exists in
hfs_bnode_create (bsc#1012628).
- rcutorture: Correctly compute probability to invoke
- >exp_current() (bsc#1012628).
- rcu: Fix rcu_read_unlock() deadloop due to softirq
(bsc#1012628).
- audit: move the compat_xxx_class[] extern declarations to
audit_arch.h (bsc#1012628).
- selftests/resctrl: Fix a division by zero error on Hygon
(bsc#1012628).
- i3c: Move device name assignment after i3c_bus_init
(bsc#1012628).
- device_cgroup: remove branch hint after code refactor
(bsc#1012628).
- fs: move initializing f_mode before file_ref_init()
(bsc#1012628).
- fs: add <linux/init_task.h> for 'init_fs' (bsc#1012628).
- i3c: master: Update hot-join flag only on success (bsc#1012628).
- erofs: Use %pe format specifier for error pointers
(bsc#1012628).
- erofs: avoid noisy messages for transient -ENOMEM (bsc#1012628).
- gfs2: Retries missing in gfs2_{rename,exchange} (bsc#1012628).
- gfs2: Rename gfs2_log_submit_{bio -> write} (bsc#1012628).
- gfs2: Initialize bio->bi_opf early (bsc#1012628).
- gfs2: Fix slab-use-after-free in qd_put (bsc#1012628).
- iomap: fix invalid folio access after folio_end_read()
(bsc#1012628).
- gfs2: Fix use-after-free in iomap inline data write path
(bsc#1012628).
- i3c: dw: Initialize spinlock to avoid upsetting lockdep
(bsc#1012628).
- i3c: dw: Fix memory leak in dw_i3c_master_i2c_xfers()
(bsc#1012628).
- tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount()
failure (bsc#1012628).
- tpm: st33zp24: Fix missing cleanup on get_burstcount() error
(bsc#1012628).
- erofs: handle end of filesystem properly for file-backed mounts
(bsc#1012628).
- btrfs: zoned: don't zone append to conventional zone
(bsc#1012628).
- btrfs: qgroup: return correct error when deleting qgroup
relation item (bsc#1012628).
- btrfs: fix block_group_tree dirty_list corruption (bsc#1012628).
- btrfs: fix EEXIST abort due to non-consecutive gaps in chunk
allocation (bsc#1012628).
- gfs2: fix memory leaks in gfs2_fill_super error path
(bsc#1012628).
- erofs: fix inline data read failure for ztailpacking pclusters
(bsc#1012628).
- smb: client: fix potential UAF and double free in
smb2_open_file() (bsc#1012628).
- netfs: avoid double increment of retry_count in subreq
(bsc#1012628).
- tools/nolibc: always use 64-bit mode for s390 header checks
(bsc#1012628).
- rnbd-srv: Fix server side setting of bi_size for special IOs
(bsc#1012628).
- docs: find-unused-docs.sh: fixup directory usage (bsc#1012628).
- ACPI: processor: Update cpuidle driver check in
__acpi_processor_start() (bsc#1012628).
- xen/virtio: Don't use grant-dma-ops when running as Dom0
(bsc#1012628).
- io_uring: use release-acquire ordering for
IORING_SETUP_R_DISABLED (bsc#1012628).
- ACPICA: Fix NULL pointer dereference in
acpi_ev_address_space_dispatch() (bsc#1012628).
- io_uring/eventfd: remove unused ctx->evfd_last_cq_tail member
(bsc#1012628).
- io_uring/sync: validate passed in offset (bsc#1012628).
- cpuidle: governors: menu: Always check timers with tick stopped
(bsc#1012628).
- thermal: intel: x86_pkg_temp_thermal: Handle invalid temperature
(bsc#1012628).
- md/raid5: fix raid5_run() to return error when log_init()
fails (bsc#1012628).
- md/raid10: fix any_working flag handling in raid10_sync_request
(bsc#1012628).
- md/raid5: fix IO hang with degraded array with llbitmap
(bsc#1012628).
- md/md-llbitmap: fix percpu_ref not resurrected on suspend
timeout (bsc#1012628).
- OPP: Return correct value in dev_pm_opp_get_level (bsc#1012628).
- cpufreq: scmi: Fix device_node reference leak in
scmi_cpu_domain_id() (bsc#1012628).
- iomap: fix submission side handling of completion side errors
(bsc#1012628).
- thermal/of: Fix reference leak in thermal_of_cm_lookup()
(bsc#1012628).
- ublk: restore auto buf unregister refcount optimization
(bsc#1012628).
- ublk: Validate SQE128 flag before accessing the cmd
(bsc#1012628).
- ublk: use READ_ONCE() to read struct ublksrv_ctrl_cmd
(bsc#1012628).
- Partial revert "x86/xen: fix balloon target initialization
for PVH dom0" (bsc#1012628).
- md/raid1: fix memory leak in raid1_run() (bsc#1012628).
- md: fix return value of mddev_trylock (bsc#1012628).
- PM: wakeup: Handle empty list in wakeup_sources_walk_start()
(bsc#1012628).
- arm64/gcs: Fix error handling in arch_set_shadow_stack_status()
(bsc#1012628).
- block: don't use strcpy to copy blockdev name (bsc#1012628).
- perf: arm_spe: Properly set hw.state on failures (bsc#1012628).
- cpufreq: intel_pstate: Enable asym capacity only when CPU SMT
is not possible (bsc#1012628).
- PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races
(bsc#1012628).
- s390/cio: Fix device lifecycle handling in
css_alloc_subchannel() (bsc#1012628).
- io_uring/kbuf: fix memory leak if io_buffer_add_list fails
(bsc#1012628).
- x86/cpu/amd: Correct the microcode table for Zenbleed
(bsc#1012628).
- perf/x86/core: Do not set bit width for unavailable counters
(bsc#1012628).
- crypto: qat - fix parameter order used in
ICP_QAT_FW_COMN_FLAGS_BUILD (bsc#1012628).
- crypto: qat - fix warning on adf_pfvf_pf_proto.c (bsc#1012628).
- bpf: bpf_scc_visit instance and backedges accumulation for
bpf_loop() (bsc#1012628).
- selftests/bpf: veristat: fix printing order in output_stats()
(bsc#1012628).
- libbpf: Fix OOB read in btf_dump_get_bitfield_value
(bsc#1012628).
- sched: Export hidden tracepoints to modules (bsc#1012628).
- ARM: VDSO: Patch out __vdso_clock_getres() if unavailable
(bsc#1012628).
- time/sched_clock: Use ACCESS_PRIVATE() to evaluate
hrtimer::function (bsc#1012628).
- bpf: Return proper address for non-zero offsets in insn array
(bsc#1012628).
- sched: Fix build for modules using set_tsk_need_resched()
(bsc#1012628).
- crypto: cavium - fix dma_free_coherent() size (bsc#1012628).
- crypto: octeontx - fix dma_free_coherent() size (bsc#1012628).
- crypto: hisilicon/zip - adjust the way to obtain the req in
the callback function (bsc#1012628).
- crypto: hisilicon/sec - move backlog management to qp and
store sqe in qp for callback (bsc#1012628).
- crypto: hisilicon/hpre: extend tag field to 64 bits for better
performance (bsc#1012628).
- crypto: hisilicon/qm - enhance the configuration of req_type
in queue attributes (bsc#1012628).
- crypto: hisilicon/qm - centralize the sending locks of each
module into qm (bsc#1012628).
- crypto: hisilicon/zip - support fallback for zip (bsc#1012628).
- crypto: hisilicon - consolidate qp creation and start in
hisi_qm_alloc_qps_node (bsc#1012628).
- crypto: hisilicon/hpre - support the hpre algorithm fallback
(bsc#1012628).
- crypto: hisilicon/sec2 - support skcipher/aead fallback for
hardware queue unavailable (bsc#1012628).
- crypto: hisilicon/sgl - fix inconsistent map/unmap direction
issue (bsc#1012628).
- bpf: Preserve id of register in sync_linked_regs()
(bsc#1012628).
- clocksource/drivers/timer-sp804: Fix an Oops when
read_current_timer is called on ARM32 platforms where the
SP804 is not registered as the sched_clock (bsc#1012628).
- bpf: Fix memory access flags in helper prototypes (bsc#1012628).
- selftests/bpf: Fix resource leak in serial_test_wq on attach
failure (bsc#1012628).
- hrtimer: Fix trace oddity (bsc#1012628).
- crypto: inside-secure/eip93 - fix kernel panic in driver detach
(bsc#1012628).
- crypto: ccp - Fix a case where SNP_SHUTDOWN is missed
(bsc#1012628).
- crypto: ccp - narrow scope of snp_range_list (bsc#1012628).
- hwrng: airoha - set rng quality to 900 (bsc#1012628).
- rqspinlock: Fix TAS fallback lock entry creation (bsc#1012628).
- bpf, sockmap: Fix incorrect copied_seq calculation
(bsc#1012628).
- bpf, sockmap: Fix FIONREAD for sockmap (bsc#1012628).
- bpf: Fix tcx/netkit detach permissions when prog fd isn't given
(bsc#1012628).
- seqlock: fix scoped_seqlock_read kernel-doc (bsc#1012628).
- x86/hyperv: Fix smp_ops build failure on UP kernels
(bsc#1012628).
- ftrace,bpf: Remove FTRACE_OPS_FL_JMP ftrace_ops flag
(bsc#1012628).
- bpf: Fix verifier_bug_if to account for BPF_CALL (bsc#1012628).
- crypto: ccp - Fix a crash due to incorrect cleanup usage of
kfree (bsc#1012628).
- crypto: inside-secure/eip93 - unregister only available
algorithm (bsc#1012628).
- x86/fgraph: Fix return_to_handler regs.rsp value (bsc#1012628).
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to
hw_regs path (bsc#1012628).
- selftests/bpf: Fix kprobe multi stacktrace_ips test
(bsc#1012628).
- crypto: hisilicon/trng - support tfms sharing the device
(bsc#1012628).
- crypto: caam - fix netdev memory leak in dpaa2_caam_probe
(bsc#1012628).
- bpf: Fix bpf_xdp_store_bytes proto for read-only arg
(bsc#1012628).
- genirq: Set IRQF_COND_ONESHOT in devm_request_irq()
(bsc#1012628).
- platform/x86: int0002: Remove IRQF_ONESHOT from request_irq()
(bsc#1012628).
- iommu/amd: Use core's primary handler and set IRQF_ONESHOT
(bsc#1012628).
- Bluetooth: btintel_pcie: Use IRQF_ONESHOT and default primary
handler (bsc#1012628).
- scsi: efct: Use IRQF_ONESHOT and default primary handler
(bsc#1012628).
- EDAC/altera: Remove IRQF_ONESHOT (bsc#1012628).
- usb: typec: fusb302: Remove IRQF_ONESHOT (bsc#1012628).
- rtc: amlogic-a4: Remove IRQF_ONESHOT (bsc#1012628).
- mfd: wm8350-core: Use IRQF_ONESHOT (bsc#1012628).
- media: pci: mg4b: Use IRQF_NO_THREAD (bsc#1012628).
- sched/deadline: Clear the defer params (bsc#1012628).
- sched/rt: Skip currently executing CPU in rto_next_cpu()
(bsc#1012628).
- sched: Re-evaluate scheduling when migrating queued tasks out
of throttled cgroups (bsc#1012628).
- fs/tests: exec: drop duplicate bprm_stack_limits test vectors
(bsc#1012628).
- irqchip/sifive-plic: Handle number of hardware interrupts
correctly (bsc#1012628).
- bpf: Limit bpf program signature size (bsc#1012628).
- bpf: Require frozen map for calculating map hash (bsc#1012628).
- crypto: starfive - Fix memory leak in
starfive_aes_aead_do_one_req() (bsc#1012628).
- hwrng: core - use RCU and work_struct to fix race condition
(bsc#1012628).
- selftests/xsk: properly handle batch ending in the middle of
a packet (bsc#1012628).
- selftests/xsk: fix number of Tx frags in invalid packet
(bsc#1012628).
- pstore/ram: fix buffer overflow in persistent_ram_save_old()
(bsc#1012628).
- arm64: dts: ti: k3-am69-aquila-dev: Fix USB-C Sink PDO
(bsc#1012628).
- arm64: dts: ti: k3-am69-aquila-clover: Fix USB-C Sink PDO
(bsc#1012628).
- soc: qcom: smem: handle ENOMEM error during probe (bsc#1012628).
- EDAC/i5000: Fix snprintf() size calculation in
calculate_dimm_size() (bsc#1012628).
- EDAC/i5400: Fix snprintf() limit calculation in
calculate_dimm_size() (bsc#1012628).
- firmware: arm_ffa: Correct 32-bit response handling in
NOTIFICATION_INFO_GET (bsc#1012628).
- riscv: dts: sophgo: cv180x: fix USB dwc2 FIFO sizes
(bsc#1012628).
- arm64: dts: tqma8mpql-mba8mpxl: Fix HDMI CEC pad control
settings (bsc#1012628).
- arm64: dts: tqma8mpql-mba8mp-ras314: Fix HDMI CEC pad control
settings (bsc#1012628).
- EDAC/amd64: Avoid a -Wformat-security warning (bsc#1012628).
- clk: qcom: Return correct error code in qcom_cc_probe_by_index()
(bsc#1012628).
- arm64: dts: qcom: sdm630: fix gpu_speed_bin size (bsc#1012628).
- arm64: dts: qcom: sm8150-hdk,mtp: specify ZAP firmware name
(bsc#1012628).
- arm64: dts: qcom: sm8250-hdk: specify ZAP firmware name
(bsc#1012628).
- arm64: dts: qcom: sdm850-huawei-matebook-e-2019: Remove
duplicate reserved-memroy nodes (bsc#1012628).
- arm64: dts: qcom: sdm850-huawei-matebook-e-2019: Correct
ipa_fw_mem for the driver to load successfully (bsc#1012628).
- arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on
(bsc#1012628).
- arm64: dts: qcom: sdm845-oneplus: Don't keep panel regulator
always on (bsc#1012628).
- arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on
(bsc#1012628).
- arm64: dts: qcom: x1e80100: Fix USB combo PHYs SS1 and SS2
ref clocks (bsc#1012628).
- arm64: dts: renesas: r9a09g047e57-smarc: Remove duplicate
SW_LCD_EN (bsc#1012628).
- arm64: dts: qcom: msm8994-octagon: Fix Analog Devices vendor
prefix of AD7147 (bsc#1012628).
- ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios"
property (bsc#1012628).
- powerpc/uaccess: Move barrier_nospec() out of
allow_read_{from/write}_user() (bsc#1012628).
- soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in
cmd_db_dev_probe (bsc#1012628).
- soc: mediatek: svs: Fix memory leak in svs_enable_debug_write()
(bsc#1012628).
- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in
EEH event handling (bsc#1012628).
- arm64: dts: renesas: rzt2h-n2h-evk-common: Use GPIO for SD0
write protect (bsc#1012628).
- arm: dts: lpc32xx: add clocks property to Motor Control PWM
device tree node (bsc#1012628).
- arm64: dts: mediatek: mt8183-jacuzzi-pico6: Fix typo in pinmux
node (bsc#1012628).
- arm64: dts: amlogic: s4: assign mmc b clock to 24MHz
(bsc#1012628).
- arm64: dts: amlogic: s4: fix mmc clock assignment (bsc#1012628).
- arm64: dts: ti: k3-j784s4-main.dtsi: Move c71_3 node to
appropriate order (bsc#1012628).
- arm64: dts: ti: k3-j784s4-j742s2-main-common.dtsi: Refactor
watchdog instances for j784s4 (bsc#1012628).
- soc: qcom: ubwc: add missing include (bsc#1012628).
- hwspinlock: omap: Handle devm_pm_runtime_enable() errors
(bsc#1012628).
- arm64: dts: amlogic: c3: assign the MMC signal clocks
(bsc#1012628).
- arm64: dts: amlogic: axg: assign the MMC signal clocks
(bsc#1012628).
- arm64: dts: amlogic: gx: assign the MMC signal clocks
(bsc#1012628).
- arm64: dts: amlogic: g12: assign the MMC B and C signal clocks
(bsc#1012628).
- arm64: dts: amlogic: g12: assign the MMC A signal clock
(bsc#1012628).
- arm64: dts: qcom: qrb4210-rb2: Fix UART3 wakeup IRQ storm
(bsc#1012628).
- arm64: dts: qcom: sdm845-db845c: drop CS from SPIO0
(bsc#1012628).
- arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1
(bsc#1012628).
- arm64: dts: ti: k3-am67a-kontron-sa67-base: Fix CMA node
(bsc#1012628).
- arm64: dts: ti: k3-am67a-kontron-sa67-base: Fix SD card
regulator (bsc#1012628).
- arm64: dts: qcom: x1e: bus is 40-bits (fix 64GB models)
(bsc#1012628).
- arm64: dts: imx95: Use GPU_CGC as core clock for GPU
(bsc#1012628).
- arm64: dts: qcom: talos: Drop opp-shared from QUP OPP table
(bsc#1012628).
- arm64: dts: amlogic: meson-sm1-odroid: Eliminate Odroid HC4
power glitches during boot (bsc#1012628).
- arm64: dts: qcom: agatti: Add CX_MEM/DBGC GPU regions
(bsc#1012628).
- arm64: dts: qcom: sm6115: Add CX_MEM/DBGC GPU regions
(bsc#1012628).
- reset: canaan: k230: drop OF dependency and enable by default
(bsc#1012628).
- drm/xe/pf: Fix .bulk_profile/sched_priority description
(bsc#1012628).
- drm/panthor: Recover from panthor_gpu_flush_caches() failures
(bsc#1012628).
- drm/panthor: Fix the full_tick check (bsc#1012628).
- drm/panthor: Fix the group priority rotation logic
(bsc#1012628).
- drm/panthor: Fix immediate ticking on a disabled tick
(bsc#1012628).
- drm/panthor: Fix the logic that decides when to stop ticking
(bsc#1012628).
- drm/panthor: Make sure we resume the tick when new jobs are
submitted (bsc#1012628).
- drm/panthor: Remove redundant call to disable the MCU
(bsc#1012628).
- drm/panthor: fix queue_reset_timeout_locked (bsc#1012628).
- workqueue: Process rescuer work items one-by-one using a cursor
(bsc#1012628).
- drm/panthor: Fix panthor_gpu_coherency_set() (bsc#1012628).
- accel/amdxdna: Fix race condition when checking rpm_on
(bsc#1012628).
- accel/amdxdna: Fix cu_idx being cleared by memset() during
command setup (bsc#1012628).
- drm/plane: Fix IS_ERR() vs NULL bug
drm_plane_create_color_pipeline_property() (bsc#1012628).
- accel/amdxdna: Fix race where send ring appears full due to
delayed head update (bsc#1012628).
- firmware: cs_dsp: Remove __free() from
cs_dsp_debugfs_string_read() (bsc#1012628).
- firmware: cs_dsp: Don't use __free() in cs_dsp_load() and
cs_dsp_load_coeff() (bsc#1012628).
- spi: cadence-qspi: Remove redundant pm_runtime_mark_last_busy
call (bsc#1012628).
- accel/amdxdna: Fix potential NULL pointer dereference in
context cleanup (bsc#1012628).
- drm/panel: sw43408: Remove manual invocation of unprepare at
remove (bsc#1012628).
- ALSA: compress_offload: Relax __free() variable declarations
(bsc#1012628).
- ALSA: control: Relax __free() variable declarations
(bsc#1012628).
- ALSA: pcm: Relax __free() variable declarations (bsc#1012628).
- ALSA: oss: Relax __free() variable declarations (bsc#1012628).
- ALSA: seq: oss: Relax __free() variable declarations
(bsc#1012628).
- ALSA: seq: Relax __free() variable declarations (bsc#1012628).
- ALSA: timer: Relax __free() variable declarations (bsc#1012628).
- ALSA: vmaster: Relax __free() variable declarations
(bsc#1012628).
- ALSA: hda: Relax __free() variable declarations (bsc#1012628).
- ALSA: usx2y: Relax __free() variable declarations (bsc#1012628).
- ALSA: usb-audio: Relax __free() variable declarations
(bsc#1012628).
- ASoC: SDCA: Allow sample width wild cards in set_usage()
(bsc#1012628).
- drm/panthor: Fix NULL pointer dereference on panthor_fw_unplug
(bsc#1012628).
- drm/i915/colorop: do not include headers from headers
(bsc#1012628).
- drm/panthor: Evict groups before VM termination (bsc#1012628).
- drm/display/dp_mst: Add protection against 0 vcpi (bsc#1012628).
- drm/atomic: convert drm_atomic_get_{old, new}_colorop_state()
into proper functions (bsc#1012628).
- ima: Fix stack-out-of-bounds in is_bprm_creds_for_exec()
(bsc#1012628).
- smack: /smack/doi must be > 0 (bsc#1012628).
- smack: /smack/doi: accept previously used values (bsc#1012628).
- ASoC: nau8821: Fixup nau8821_enable_jack_detect() (bsc#1012628).
- ASoC: nau8821: Cancel delayed work on component remove
(bsc#1012628).
- ASoC: nau8821: Cancel pending work before suspend (bsc#1012628).
- media: chips-media: wave5: Fix memory leak on codec_info
allocation failure (bsc#1012628).
- drm/amd/display: Don't use kernel-doc comment in
dc_register_software_state struct (bsc#1012628).
- drm/amdgpu: Describe @AMD_IP_BLOCK_TYPE_RAS in amd_ip_block_type
enum (bsc#1012628).
- drm/amd: Drop "amdgpu kernel modesetting enabled" message
(bsc#1012628).
- drm/amdkfd: Fix signal_eviction_fence() bool return value
(bsc#1012628).
- drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init
(bsc#1012628).
- drm/amd/display: Remove unused encoder types (bsc#1012628).
- drm/amd/display: Use local variable for analog_engine
initialization (bsc#1012628).
- drm/amd/display: Pass proper DAC encoder ID to VBIOS
(bsc#1012628).
- drm/amd/display: Update dc_connection_dac_load to
dc_connection_analog_load (bsc#1012628).
- drm/amd/display: Don't repeat DAC load detection (bsc#1012628).
- drm/msm/disp/dpu: add merge3d support for sc7280 (bsc#1012628).
- drm/msm/dpu: Set vsync source irrespective of mdp top support
(bsc#1012628).
- drm/msm/dpu: fix WD timer handling on DPU 8.x (bsc#1012628).
- drm/msm/dp: Update msm_dp_controller IDs for sa8775p
(bsc#1012628).
- ALSA: hda - fix function names & missing function parameter
(bsc#1012628).
- mei: late_bind: fix struct intel_lb_component_ops kernel-doc
(bsc#1012628).
- spi: microchip-core: use XOR instead of ANDNOT to fix the logic
(bsc#1012628).
- regulator: core: fix locking in regulator_resolve_supply()
error path (bsc#1012628).
- regulator: core: move supply check earlier in
set_machine_constraints() (bsc#1012628).
- regulator: core: don't ignore errors from event forwarding setup
(bsc#1012628).
- HID: playstation: Add missing check for input_ff_create_memless
(bsc#1012628).
- drm/amdgpu/ttm: Pin 4K MMIO_REMAP Singleton BO at Init v2
(bsc#1012628).
- drm/amdgpu: Drop MMIO_REMAP domain bit and keep it Internal
(bsc#1012628).
- gpu: nova-core: check for overflow to DMATRFBASE1 (bsc#1012628).
- drm/msm/disp: set num_planes to 1 for interleaved YUV formats
(bsc#1012628).
- drm/msm/dpu: drop intr_start from DPU 3.x catalog files
(bsc#1012628).
- drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x (bsc#1012628).
- drm/msm/dsi_phy_14nm: convert from divider_round_rate() to
divider_determine_rate() (bsc#1012628).
- accel/amdxdna: Fix notifier_wq flushing warning (bsc#1012628).
- drm/msm: Fix x2-85 TPL1_DBG_ECO_CNTL1 (bsc#1012628).
- drm/msm: Fix GMEM_BASE for gen8 (bsc#1012628).
- media: ccs: Accommodate C-PHY into the calculation
(bsc#1012628).
- drm/msm/a2xx: fix pixel shader start on A225 (bsc#1012628).
- drm/buddy: release free_trees array on buddy mm teardown
(bsc#1012628).
- drm/hisilicon/hibmc: fix dp probabilistical detect errors
after HPD irq (bsc#1012628).
- drm/hisilicon/hibmc: add dp mode valid check (bsc#1012628).
- drm/hisilicon/hibmc: fix no showing problem with loading hibmc
manually (bsc#1012628).
- drm/hisilicon/hibmc: Adding reset colorbar cfg in dp init
(bsc#1012628).
- drm/rockchip: dw_hdmi_qp: Fix RK3576 HPD interrupt handling
(bsc#1012628).
- rust: pwm: Fix potential memory leak on init error
(bsc#1012628).
- drm/amd/pm: Fix unneeded semicolon warning (bsc#1012628).
- drm/msm/mdss: correct HBB programmed on UBWC 5.x and 6.x devices
(bsc#1012628).
- drm/msm/dpu: offset HBB values written to DPU by -13
(bsc#1012628).
- drm/msm/dpu: program correct register for UBWC config on DPU
8.x+ (bsc#1012628).
- drm/msm/dpu: fix SSPP_UBWC_STATIC_CTRL programming on UBWC 5.x+
(bsc#1012628).
- drm/msm/dp: Avoid division by zero in msm_dp_ctrl_config_msa()
(bsc#1012628).
- platform/chrome: cros_typec_switch: Don't touch struct
fwnode_handle::dev (bsc#1012628).
- pwm: tiehrpwm: Enable pwmchip's parent device before setting
configuration (bsc#1012628).
- drm/amd/pm: Return -EOPNOTSUPP when can't read power limit
(bsc#1012628).
- media: uvcvideo: Fix allocation for small frame sizes
(bsc#1012628).
- evm: Use ordered xattrs list to calculate HMAC in
evm_init_hmac() (bsc#1012628).
- drm/xe/ptl: Disable DCC on PTL (bsc#1012628).
- drm/xe: Unregister drm device on probe error (bsc#1012628).
- mm/slab: fix false lockdep warning in __kfree_rcu_sheaf()
(bsc#1012628).
- ASoC: tegra: Add AHUB writeable_reg for RX holes (bsc#1012628).
- platform/chrome: cros_ec_lightbar: Fix response size
initialization (bsc#1012628).
- accel/amdxdna: Hold mm structure across
iommu_sva_unbind_device() (bsc#1012628).
- accel/amdxdna: Stop job scheduling across
aie2_release_resource() (bsc#1012628).
- accel/amdxdna: Fix memory leak in amdxdna_ubuf_map
(bsc#1012628).
- drm/i915/display: fix the pixel normalization handling for
xe3p_lpd (bsc#1012628).
- HID: intel-ish-hid: fix NULL-ptr-deref in
ishtp_bus_remove_all_clients (bsc#1012628).
- HID: Intel-thc-hid: Intel-thc: Fix wrong register fields
updating (bsc#1012628).
- accel/amdxdna: Remove hardware context status (bsc#1012628).
- accel/amdxdna: Fix incorrect error code returned for failed
chain command (bsc#1012628).
- ASoC: SDCA: Remove outdated todo comment (bsc#1012628).
- ASoC: SDCA: Handle volatile controls correctly (bsc#1012628).
- ASoC: SDCA: Factor out jack handling into new c file
(bsc#1012628).
- ASoC: SDCA: Add ability to connect SDCA jacks to ASoC jacks
(bsc#1012628).
- ASoC: SDCA: Still process most of the jack detect if control
is missing (bsc#1012628).
- accel/amdxdna: Fix incorrect DPM level after suspend/resume
(bsc#1012628).
- accel/amdxdna: Move RPM resume into job run function
(bsc#1012628).
- ASoC: cs4271: Fix resource leak in cs4271_soc_resume()
(bsc#1012628).
- vsnprintf: drop __printf() attributes on binary printing
functions (bsc#1012628).
- ALSA: oss: delete self assignment (bsc#1012628).
- spi: tools: Add include folder to .gitignore (bsc#1012628).
- Revert "hwmon: (ibmpex) fix use-after-free in high/low store"
(bsc#1012628).
- hwmon: (pmbus/mpq8785) fix VOUT_MODE mismatch during
identification (bsc#1012628).
- PCI: mediatek: Fix IRQ domain leak when MSI allocation fails
(bsc#1012628).
- wifi: rtw89: correct use sequence of driver_data in skb->info
(bsc#1012628).
- PCI: xilinx: Fix INTx IRQ domain leak in error paths
(bsc#1012628).
- Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors
(bsc#1012628).
- PCI: Add WQ_PERCPU to alloc_workqueue() users (bsc#1012628).
- PCI: endpoint: Add missing NULL check for alloc_workqueue()
(bsc#1012628).
- PCI: rzg3s-host: Use pci_generic_config_write() for the root
bus (bsc#1012628).
- PCI/PM: Avoid redundant delays on D3hot->D3cold (bsc#1012628).
- wifi: cfg80211: Fix use_for flag update on BSS refresh
(bsc#1012628).
- PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page()
fails (bsc#1012628).
- PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning condition
(bsc#1012628).
- Documentation: tracing: Add PCI tracepoint documentation
(bsc#1012628).
- PCI: Do not attempt to set ExtTag for VFs (bsc#1012628).
- PCI: sophgo: Disable L0s and L1 on Sophgo 2044 PCIe Root Ports
(bsc#1012628).
- PCI/portdrv: Fix potential resource leak (bsc#1012628).
- dm: fix unlocked test for dm_suspended_md (bsc#1012628).
- dm: use READ_ONCE in dm_blk_report_zones (bsc#1012628).
- PCI/PTM: Fix pcie_ptm_create_debugfs() memory leak
(bsc#1012628).
- PCI/P2PDMA: Reset page reference count when page mapping fails
(bsc#1012628).
- wifi: ath9k: debug.h: fix kernel-doc bad lines and struct
ath_tx_stats (bsc#1012628).
- wifi: ath9k: fix kernel-doc warnings in common-debug.h
(bsc#1012628).
- wifi: ath9k: add OF dependency to AHB (bsc#1012628).
- wifi: ath12k: do WoW offloads only on primary link
(bsc#1012628).
- quota: fix livelock between quotactl and freeze_super
(bsc#1012628).
- PCI/pwrctrl: tc9563: Use put_device() instead of
i2c_put_adapter() (bsc#1012628).
- net: mctp-i2c: fix duplicate reception of old data
(bsc#1012628).
- mctp i2c: initialise event handler read bytes (bsc#1012628).
- wifi: cfg80211: stop NAN and P2P in cfg80211_leave
(bsc#1012628).
- iommupt: Do not set C-bit on MMIO backed PTEs (bsc#1012628).
- ext4: fast commit: make s_fc_lock reclaim-safe (bsc#1012628).
- netfilter: nf_tables: reset table validation state on abort
(bsc#1012628).
- netfilter: nf_conncount: increase the connection clean up
limit to 64 (bsc#1012628).
- netfilter: nft_compat: add more restrictions on netlink
attributes (bsc#1012628).
- netfilter: nf_conncount: fix tracking of connections from
localhost (bsc#1012628).
- kallsyms/bpf: rename __bpf_address_lookup() to
bpf_address_lookup() (bsc#1012628).
- module: add helper function for reading module_buildid()
(bsc#1012628).
- kallsyms/ftrace: set module buildid in
ftrace_mod_address_lookup() (bsc#1012628).
- PCI: Mark 3ware-9650SA Root Port Extended Tags as broken
(bsc#1012628).
- wifi: rtw89: debug: Fix memory leak in __print_txpwr_map()
(bsc#1012628).
- iommu/vt-d: Flush cache for PASID table before using it
(bsc#1012628).
- iommu/vt-d: Clear Present bit before tearing down PASID entry
(bsc#1012628).
- iommu/vt-d: Clear Present bit before tearing down context entry
(bsc#1012628).
- iommu/vt-d: Fix race condition during PASID entry replacement
(bsc#1012628).
- dm: use bio_clone_blkg_association (bsc#1012628).
- xdrgen: Fix struct prefix for typedef types in program wrappers
(bsc#1012628).
- NFS: NFSERR_INVAL is not defined by NFSv2 (bsc#1012628).
- xdrgen: Initialize data pointer for zero-length items
(bsc#1012628).
- xdrgen: Remove inclusion of nlm4.h header (bsc#1012628).
- nfsd: never defer requests during idmap lookup (bsc#1012628).
- lib/kstrtox: fix kstrtobool() docstring to mention
enabled/disabled (bsc#1012628).
- lib/Kconfig.debug: fix BOOTPARAM_HUNG_TASK_PANIC comment
(bsc#1012628).
- rust: task: restrict Task::group_leader() to current
(bsc#1012628).
- fat: avoid parent link count underflow in rmdir (bsc#1012628).
- PCI: Rewrite bridge window head alignment function
(bsc#1012628).
- PCI: Stop over-estimating bridge window size (bsc#1012628).
- PCI: Remove old_size limit from bridge window sizing
(bsc#1012628).
- tcp: tcp_tx_timestamp() must look at the rtx queue
(bsc#1012628).
- Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported
PHYs (bsc#1012628).
- PCI: Check parent for NULL in of_pci_bus_release_domain_nr()
(bsc#1012628).
- wifi: ath10k: sdio: add missing lock protection in
ath10k_sdio_fw_crashed_dump() (bsc#1012628).
- wifi: ath11k: add usecase firmware handling based on device
compatible (bsc#1012628).
- wifi: ath12k: Fix index decrement when array_len is zero
(bsc#1012628).
- wifi: ath12k: clear stale link mapping of ahvif->links_map
(bsc#1012628).
- PCI: Initialize RCB from pci_configure_device() (bsc#1012628).
- PCI/ACPI: Restrict program_hpx_type2() to AER bits
(bsc#1012628).
- Revert "net/smc: Introduce TCP ULP support" (bsc#1012628).
- selftests/mm: fix usage of FORCE_READ() in cow tests
(bsc#1012628).
- ipc: don't audit capability check in ipc_permissions()
(bsc#1012628).
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit()
(bsc#1012628).
- jfs: avoid -Wtautological-constant-out-of-range-compare warning
(bsc#1012628).
- PCI: s32g: Skip Root Port removal during success (bsc#1012628).
- tcp: ECT_1_NEGOTIATION and NEEDS_ACCECN identifiers
(bsc#1012628).
- tcp: disable RFC3168 fallback identifier for CC modules
(bsc#1012628).
- tcp: accecn: handle unexpected AccECN negotiation feedback
(bsc#1012628).
- PCI: Add preceding capability position support in
PCI_FIND_NEXT_*_CAP macros (bsc#1012628).
- PCI: dwc: Add new APIs to remove standard and extended
Capability (bsc#1012628).
- PCI: dwc: ep: Cache MSI outbound iATU mapping (bsc#1012628).
- PCI: dwc: Remove duplicate dw_pcie_ep_hide_ext_capability()
function (bsc#1012628).
- PCI: endpoint: Add dynamic_inbound_mapping EPC feature
(bsc#1012628).
- PCI: endpoint: Add BAR subrange mapping support (bsc#1012628).
- PCI: dwc: Advertise dynamic inbound mapping support
(bsc#1012628).
- PCI: dwc: ep: Support BAR subrange inbound mapping via Address
Match Mode iATU (bsc#1012628).
- PCI: dwc: ep: Fix resizable BAR support for multi-PF
configurations (bsc#1012628).
- PCI: dwc: ep: Add per-PF BAR and inbound ATU mapping support
(bsc#1012628).
- of: unittest: fix possible null-pointer dereferences in
of_unittest_property_copy() (bsc#1012628).
- mptcp: do not account for OoO in mptcp_rcvbuf_grow()
(bsc#1012628).
- mptcp: fix receive space timestamp initialization (bsc#1012628).
- octeontx2-af: Fix PF driver crash with kexec kernel booting
(bsc#1012628).
- bonding: only set speed/duplex to unknown, if getting speed
failed (bsc#1012628).
- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP
(bsc#1012628).
- nfc: hci: shdlc: Stop timers and work before freeing context
(bsc#1012628).
- amd-xgbe: do not select NET_SELFTESTS when INET is disabled
(bsc#1012628).
- netfilter: nfnetlink_queue: optimize verdict lookup with hash
table (bsc#1012628).
- netfilter: nfnetlink_queue: do shared-unconfirmed check before
segmentation (bsc#1012628).
- netfilter: nft_set_hash: fix get operation on big endian
(bsc#1012628).
- netfilter: nft_counter: fix reset of counters on 32bit archs
(bsc#1012628).
- netfilter: nft_set_rbtree: fix bogus EEXIST with NLM_F_CREATE
with null interval (bsc#1012628).
- netfilter: nft_set_rbtree: check for partial overlaps in
anonymous sets (bsc#1012628).
- netfilter: nft_set_rbtree: translate rbtree to array for binary
search (bsc#1012628).
- netfilter: nft_set_rbtree: use binary search array in get
command (bsc#1012628).
- netfilter: nft_set_rbtree: remove seqcount_rwlock_t
(bsc#1012628).
- netfilter: nft_set_rbtree: don't gc elements on insert
(bsc#1012628).
- netfilter: nft_set_rbtree: validate element belonging to
interval (bsc#1012628).
- netfilter: nft_set_rbtree: validate open interval overlap
(bsc#1012628).
- PCI: rzg3s-host: Fix device node reference leak in
rzg3s_pcie_host_parse_port() (bsc#1012628).
- PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404]
(bsc#1012628).
- rust: driver-core: use "kernel vertical" style for imports
(bsc#1012628).
- rust: devres: fix race condition due to nesting (bsc#1012628).
- dpll: zl3073x: Fix output pin phase adjustment sign
(bsc#1012628).
- net: hns3: fix double free issue for tx spare buffer
(bsc#1012628).
- procfs: fix missing RCU protection when reading real_parent
in do_task_stat() (bsc#1012628).
- smb: client: correct value for smbd_max_fragmented_recv_size
(bsc#1012628).
- net: atm: fix crash due to unvalidated vcc pointer in
sigd_send() (bsc#1012628).
- net: sunhme: Fix sbus regression (bsc#1012628).
- xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
(bsc#1012628).
- serial: caif: fix use-after-free in caif_serial ldisc_close()
(bsc#1012628).
- octeon_ep: disable per ring interrupts (bsc#1012628).
- octeon_ep: ensure dbell BADDR updation (bsc#1012628).
- octeon_ep_vf: ensure dbell BADDR updation (bsc#1012628).
- ionic: Rate limit unknown xcvr type messages (bsc#1012628).
- net: renesas: rswitch: fix forwarding offload statemachine
(bsc#1012628).
- octeontx2-pf: Unregister devlink on probe failure (bsc#1012628).
- af_unix: Fix memleak of newsk in unix_stream_connect()
(bsc#1012628).
- RDMA/rtrs: server: remove dead code (bsc#1012628).
- IB/cache: update gid cache on client reregister event
(bsc#1012628).
- RDMA/hns: Fix WQ_MEM_RECLAIM warning (bsc#1012628).
- RDMA/hns: Return actual error code instead of fixed EINVAL
(bsc#1012628).
- RDMA/hns: Fix RoCEv1 failure due to DSCP (bsc#1012628).
- RDMA/hns: Notify ULP of remaining soft-WCs during reset
(bsc#1012628).
- RDMA/mlx5: Fix ucaps init error flow (bsc#1012628).
- cxl/mem: Fix devm_cxl_memdev_edac_release() confusion
(bsc#1012628).
- power: supply: ab8500: Fix use-after-free in
power_supply_changed() (bsc#1012628).
- power: supply: act8945a: Fix use-after-free in
power_supply_changed() (bsc#1012628).
- power: supply: bq256xx: Fix use-after-free in
power_supply_changed() (bsc#1012628).
- power: supply: bq25980: Fix use-after-free in
power_supply_changed() (bsc#1012628).
- power: supply: cpcap-battery: Fix use-after-free in
power_supply_changed() (bsc#1012628).
- power: supply: goldfish: Fix use-after-free in
power_supply_changed() (bsc#1012628).
- power: supply: pf1550: Fix use-after-free in
power_supply_changed() (bsc#1012628).
- power: supply: pm8916_bms_vm: Fix use-after-free in
power_supply_changed() (bsc#1012628).
- power: supply: pm8916_lbc: Fix use-after-free in
power_supply_changed() (bsc#1012628).
- power: supply: rt9455: Fix use-after-free in
power_supply_changed() (bsc#1012628).
- power: supply: sbs-battery: Fix use-after-free in
power_supply_changed() (bsc#1012628).
- power: reset: nvmem-reboot-mode: respect cell size for
nvmem_cell_write (bsc#1012628).
- power: supply: bq27xxx: fix wrong errno when bus ops are
unsupported (bsc#1012628).
- power: supply: wm97xx: Fix NULL pointer dereference in
power_supply_changed() (bsc#1012628).
- RDMA/rtrs-srv: fix SG mapping (bsc#1012628).
- RDMA/rxe: Fix double free in rxe_srq_from_init (bsc#1012628).
- RDMA/iwcm: Fix workqueue list corruption by removing work_list
(bsc#1012628).
- platform/x86: hp-wmi: fix platform profile values for Omen
16-wf1xxx (bsc#1012628).
- tools/power/x86/intel-speed-select: Fix file descriptor leak
in isolate_cpus() (bsc#1012628).
- RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1012628).
- IB/mlx5: Fix port speed query for representors (bsc#1012628).
- mtd: rawnand: cadence: Fix return type of CDMA send-and-wait
helper (bsc#1012628).
- mtd: intel-dg: Fix accessing regions before setting nregions
(bsc#1012628).
- vfio/pci: Lock upstream bridge for vfio_pci_core_disable()
(bsc#1012628).
- platform/x86/amd/pmf: Prevent TEE errors after hibernate
(bsc#1012628).
- crypto: ccp - Declare PSP dead if PSP_CMD_TEE_RING_INIT fails
(bsc#1012628).
- crypto: ccp - Add an S4 restore flow (bsc#1012628).
- crypto: ccp - Factor out ring destroy handling to a helper
(bsc#1012628).
- crypto: ccp - Send PSP_CMD_TEE_RING_DESTROY when
PSP_CMD_TEE_RING_INIT fails (bsc#1012628).
- mtd: parsers: Fix memory leak in
mtd_parser_tplink_safeloader_parse() (bsc#1012628).
- NFS/localio: Handle short writes by retrying (bsc#1012628).
- NFS/localio: prevent direct reclaim recursion into NFS via
nfs_writepages (bsc#1012628).
- NFS/localio: use GFP_NOIO and non-memreclaim workqueue in
nfs_local_commit (bsc#1012628).
- NFS/localio: remove -EAGAIN handling in nfs_local_doio()
(bsc#1012628).
- cxl/hdm: Fix newline character in dev_err() messages
(bsc#1012628).
- cxl/core: Fix cxl_dport debugfs EINJ entries (bsc#1012628).
- RDMA/rxe: Fix iova-to-va conversion for MR page sizes !=
PAGE_SIZE (bsc#1012628).
- ata: libata: Add ATA_QUIRK_MAX_SEC and convert all device quirks
(bsc#1012628).
- ata: libata-core: Quirk INTEL SSDSC2KG480G8 max_sectors
(bsc#1012628).
- RDMA/uverbs: Validate wqe_size before using it in
ib_uverbs_post_send (bsc#1012628).
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler
(bsc#1012628).
- RDMA/rxe: Fix race condition in QP timer handlers (bsc#1012628).
- RDMA/core: add rdma_rw_max_sge() helper for SQ sizing
(bsc#1012628).
- cxl: Fix premature commit_end increment on decoder commit
failure (bsc#1012628).
- mtd: parsers: ofpart: fix OF node refcount leak in
parse_fixed_partitions() (bsc#1012628).
- mtd: spinand: Fix kernel doc (bsc#1012628).
- hisi_acc_vfio_pci: fix VF reset timeout issue (bsc#1012628).
- power: supply: pm8916_lbc: Fix use-after-free for extcon in
IRQ handler (bsc#1012628).
- power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer
(bsc#1012628).
- RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv()
kmalloc (bsc#1012628).
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN
(bsc#1012628).
- scsi: smartpqi: Fix memory leak in pqi_report_phys_luns()
(bsc#1012628).
- scsi: ufs: host: mediatek: Require CONFIG_PM (bsc#1012628).
- scsi: csiostor: Fix dereference of null pointer rn
(bsc#1012628).
- nvdimm: virtio_pmem: serialize flush requests (bsc#1012628).
- fs/nfs: Fix readdir slow-start regression (bsc#1012628).
- tracing: Properly process error handling in
event_hist_trigger_parse() (bsc#1012628).
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR
macros (bsc#1012628).
- remoteproc: imx_rproc: Use strstarts for "rsc-table" check
(bsc#1012628).
- remoteproc: imx_dsp_rproc: Fix multiple start/stop operations
(bsc#1012628).
- remoteproc: imx_dsp_rproc: Only reset carveout memory at
RPROC_OFFLINE state (bsc#1012628).
- Revert "mailbox/pcc: support mailbox management of the shared
buffer" (bsc#1012628).
- fbdev: of_display_timing: Fix device node reference leak in
of_get_display_timings() (bsc#1012628).
- fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe()
(bsc#1012628).
- clk: thead: th1520-ap: Poll for PLL lock and wait for stability
(bsc#1012628).
- clk: spacemit: Respect Kconfig setting when building modules
(bsc#1012628).
- clk: qcom: gcc-sm8550: Use floor ops for SDCC RCGs
(bsc#1012628).
- clk: qcom: gcc-sm8650: Use floor ops for SDCC RCGs
(bsc#1012628).
- clk: qcom: rcg2: compute 2d using duty fraction directly
(bsc#1012628).
- clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs
(bsc#1012628).
- clk: meson: g12a: Limit the HDMI PLL OD to /4 (bsc#1012628).
- clk: qcom: gcc-sm8450: Update the SDCC RCGs to use
shared_floor_ops (bsc#1012628).
- clk: qcom: gcc-sm8750: Update the SDCC RCGs to use
shared_floor_ops (bsc#1012628).
- clk: qcom: gcc-sm4450: Update the SDCC RCGs to use
shared_floor_ops (bsc#1012628).
- clk: qcom: gcc-sdx75: Update the SDCC RCGs to use
shared_floor_ops (bsc#1012628).
- clk: qcom: gcc-milos: Update the SDCC RCGs to use
shared_floor_ops (bsc#1012628).
- clk: qcom: gcc-x1e80100: Update the SDCC RCGs to use
shared_floor_ops (bsc#1012628).
- clk: qcom: gcc-qdu1000: Update the SDCC RCGs to use
shared_floor_ops (bsc#1012628).
- clk: qcom: gcc-glymur: Update the SDCC RCGs to use
shared_floor_ops (bsc#1012628).
- clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc
(bsc#1012628).
- clk: qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc
(bsc#1012628).
- clk: qcom: gcc-ipq5018: flag sleep clock as critical
(bsc#1012628).
- clk: qcom: alpha-pll: convert from divider_round_rate() to
divider_determine_rate() (bsc#1012628).
- clk: rockchip: Fix error pointer check after
rockchip_clk_register_gate_link() (bsc#1012628).
- clk: microchip: core: remove duplicate determine_rate on
pic32_sclk_ops (bsc#1012628).
- Input: adp5589 - remove a leftover header file (bsc#1012628).
- clk: Move clk_{save,restore}_context() to COMMON_CLK section
(bsc#1012628).
- clk: qcom: regmap-divider: convert from divider_ro_round_rate()
to divider_ro_determine_rate() (bsc#1012628).
- clk: qcom: regmap-divider: convert from divider_round_rate()
to divider_determine_rate() (bsc#1012628).
- clk: qcom: dispcc-sdm845: Enable parents for pixel clocks
(bsc#1012628).
- clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk1_clk_src
(bsc#1012628).
- clk: qcom: gfx3d: add parent to parent request map
(bsc#1012628).
- clk: actions: owl-composite: convert from
owl_divider_helper_round_rate() to divider_determine_rate()
(bsc#1012628).
- clk: actions: owl-divider: convert from divider_round_rate()
to divider_determine_rate() (bsc#1012628).
- clk: bm1880: convert from divider_round_rate() to
divider_determine_rate() (bsc#1012628).
- clk: hisilicon: clkdivider-hi6220: convert from
divider_round_rate() to divider_determine_rate() (bsc#1012628).
- clk: loongson1: convert from divider_round_rate() to
divider_determine_rate() (bsc#1012628).
- clk: milbeaut: convert from divider_round_rate() to
divider_determine_rate() (bsc#1012628).
- clk: nuvoton: ma35d1-divider: convert from divider_round_rate()
to divider_determine_rate() (bsc#1012628).
- clk: nxp: lpc32xx: convert from divider_round_rate() to
divider_determine_rate() (bsc#1012628).
- clk: sophgo: sg2042-clkgen: convert from divider_round_rate()
to divider_determine_rate() (bsc#1012628).
- clk: sprd: div: convert from divider_round_rate() to
divider_determine_rate() (bsc#1012628).
- clk: stm32: stm32-core: convert from divider_ro_round_rate()
to divider_ro_determine_rate() (bsc#1012628).
- clk: stm32: stm32-core: convert from divider_round_rate_parent()
to divider_determine_rate() (bsc#1012628).
- clk: versaclock3: convert from divider_round_rate() to
divider_determine_rate() (bsc#1012628).
- clk: x86: cgu: convert from divider_round_rate() to
divider_determine_rate() (bsc#1012628).
- clk: zynqmp: divider: convert from divider_round_rate() to
divider_determine_rate() (bsc#1012628).
- clk: mediatek: Drop __initconst from gates (bsc#1012628).
- clk: mediatek: Add mfg_eb as parent to mt8196 mfgpll clocks
(bsc#1012628).
- clk: mediatek: Fix error handling in runtime PM setup
(bsc#1012628).
- clk: zynqmp: divider: Fix zynqmp_clk_divider_determine_rate
kerneldoc (bsc#1012628).
- clk: zynqmp: pll: Fix zynqmp_clk_divider_determine_rate
kerneldoc (bsc#1012628).
- interconnect: mediatek: Don't hijack parent device
(bsc#1012628).
- interconnect: mediatek: Aggregate bandwidth with saturating add
(bsc#1012628).
- dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX
(bsc#1012628).
- dma: dma-axi-dmac: fix SW cyclic transfers (bsc#1012628).
- dma: dma-axi-dmac: fix HW scatter-gather not looking at the
queue (bsc#1012628).
- phy: rockchip: samsung-hdptx: Pre-compute HDMI PLL config for
461.10125 MHz output (bsc#1012628).
- char: misc: Use IS_ERR() for filp_open() return value
(bsc#1012628).
- soundwire: intel_ace2x: add SND_HDA_CORE dependency
(bsc#1012628).
- iio: test: drop dangling symbol in gain-time-scale helpers
(bsc#1012628).
- usb: typec: ucsi: drop an unused Kconfig symbol (bsc#1012628).
- staging: greybus: lights: avoid NULL deref (bsc#1012628).
- serial: imx: change SERIAL_IMX_CONSOLE to bool (bsc#1012628).
- serial: SH_SCI: improve "DMA support" prompt (bsc#1012628).
- gpib: Fix error code in ibonline() (bsc#1012628).
- gpib: Fix error code in ni_usb_write_registers() (bsc#1012628).
- gpib: Fix memory leak in ni_usb_init() (bsc#1012628).
- stm class: Kconfig: correct symbol name (bsc#1012628).
- mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms
(bsc#1012628).
- iio: pressure: mprls0025pa: fix spi_transfer struct
initialisation (bsc#1012628).
- iio: pressure: mprls0025pa: fix SPI CS delay violation
(bsc#1012628).
- iio: pressure: mprls0025pa: fix interrupt flag (bsc#1012628).
- iio: pressure: mprls0025pa: fix scan_type struct (bsc#1012628).
- iio: pressure: mprls0025pa: fix pressure calculation
(bsc#1012628).
- watchdog: starfive-wdt: Fix PM reference leak in probe error
path (bsc#1012628).
- coresight: etm3x: Fix cpulocked warning on cpuhp (bsc#1012628).
- backlight: aw99706: Fix build errors caused by wrong gpio header
(bsc#1012628).
- phy: freescale: imx8qm-hsio: fix NULL pointer dereference
(bsc#1012628).
- interconnect: qcom: qcs8300: fix the num_links for nsp icc node
(bsc#1012628).
- coresight: tmc-etr: Fix race condition between sysfs and perf
mode (bsc#1012628).
- Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay
to 5ms" (bsc#1012628).
- mfd: arizona: Fix regulator resource leak on
wm5102_clear_write_sequencer() failure (bsc#1012628).
- mfd: simple-mfd-i2c: Add Delta TN48M CPLD support (bsc#1012628).
- mfd: sec: Fix IRQ domain names duplication (bsc#1012628).
- drivers: iio: mpu3050: use dev_err_probe for regulator request
(bsc#1012628).
- usb: bdc: fix sleep during atomic (bsc#1012628).
- nvmem: an8855: drop an unused Kconfig symbol (bsc#1012628).
- mcb: fix incorrect sanity check (bsc#1012628).
- pinctrl: equilibrium: Fix device node reference leak in
pinbank_init() (bsc#1012628).
- ovl: Fix uninit-value in ovl_fill_real (bsc#1012628).
- nfsd: do not allow exporting of special kernel filesystems
(bsc#1012628).
- iio: sca3000: Fix a resource leak in sca3000_probe()
(bsc#1012628).
- mips: LOONGSON32: drop a dangling Kconfig symbol (bsc#1012628).
- pidfs: return -EREMOTE when PIDFD_GET_INFO is called on another
ns (bsc#1012628).
- pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition
(bsc#1012628).
- pinctrl: meson: amlogic-a4: Fix device node reference leak in
bank helpers (bsc#1012628).
- pinctrl: single: fix refcount leak in pcs_add_gpio_func()
(bsc#1012628).
- pinctrl: canaan: k230: Fix NULL pointer dereference when
parsing devicetree (bsc#1012628).
- leds: expresswire: Fix chip state breakage (bsc#1012628).
- leds: qcom-lpg: Check the return value of regmap_bulk_write()
(bsc#1012628).
- backlight: qcom-wled: Support ovp values for PMI8994
(bsc#1012628).
- backlight: qcom-wled: Change PM8950 WLED configurations
(bsc#1012628).
- dmaengine: fsl-edma: don't explicitly disable clocks in
.remove() (bsc#1012628).
- drbd: always set BLK_FEAT_STABLE_WRITES (bsc#1012628).
- block: allow IOC_PR_READ_* ioctls with BLK_OPEN_READ
(bsc#1012628).
- io_uring: delay sqarray static branch disablement (bsc#1012628).
- io_uring/cancel: de-unionize file and user_data in struct
io_cancel_data (bsc#1012628).
- fs/ntfs3: Initialize new folios before use (bsc#1012628).
- fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()
(bsc#1012628).
- fs/ntfs3: rename ni_readpage_cmpr into ni_read_folio_cmpr
(bsc#1012628).
- fs/ntfs3: fix deadlock in ni_read_folio_cmpr (bsc#1012628).
- fs/ntfs3: prevent infinite loops caused by the next valid
being the same (bsc#1012628).
- fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
(bsc#1012628).
- tools/power turbostat: AMD: msr offset 0x611 read failed:
Input/output error (bsc#1012628).
- tools/power turbostat: Harden against unexpected values
(bsc#1012628).
- powercap: intel_rapl: Remove incorrect CPU check in PMU context
(bsc#1012628).
- ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online
CPUs (bsc#1012628).
- powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version
check (bsc#1012628).
- kbuild: Add objtool to top-level clean target (bsc#1012628).
- smb: client: fix regression with mount options parsing
(bsc#1012628).
- selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT
(bsc#1012628).
- objpool: fix the overestimation of object pooling metadata size
(bsc#1012628).
- ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO
(bsc#1012628).
- cpuidle: Skip governor when only one idle state is available
(bsc#1012628).
- ovpn: set sk_user_data before overriding callbacks
(bsc#1012628).
- ovpn: fix possible use-after-free in ovpn_net_xmit
(bsc#1012628).
- ovpn: fix VPN TX bytes counting (bsc#1012628).
- net: mctp: ensure our nlmsg responses are initialised
(bsc#1012628).
- selftests: mlxsw: tc_restrictions: Fix test failure with new
iproute2 (bsc#1012628).
- selftests: net: lib: Fix jq parsing error (bsc#1012628).
- net: stmmac: fix oops when split header is enabled
(bsc#1012628).
- net: sparx5/lan969x: fix DWRR cost max to match hardware
register width (bsc#1012628).
- net: mscc: ocelot: extract ocelot_xmit_timestamp() helper
(bsc#1012628).
- net: mscc: ocelot: split xmit into FDMA and register injection
paths (bsc#1012628).
- net: mscc: ocelot: add missing lock protection in
ocelot_port_xmit_inj() (bsc#1012628).
- selftests: netconsole: Increase port listening timeout
(bsc#1012628).
- ipv6: Fix out-of-bound access in fib6_add_rt2node()
(bsc#1012628).
- net: sparx5/lan969x: fix PTP clock max_adj value (bsc#1012628).
- fbnic: close fw_log race between users and teardown
(bsc#1012628).
- libbpf: Fix invalid write loop logic in bpf_linker__add_buf()
(bsc#1012628).
- bpf: Fix a potential use-after-free of BTF object (bsc#1012628).
- bpf: Add a map/btf from a fd array more consistently
(bsc#1012628).
- eth: fbnic: set FBNIC_QUEUE_RDE_CTL0_EN_HDR_SPLIT on RDE_CTL0
(bsc#1012628).
- eth: fbnic: increase FBNIC_HDR_BYTES_MIN from 128 to 256 bytes
(bsc#1012628).
- eth: fbnic: set DMA_HINT_L4 for all flows (bsc#1012628).
- ovpn: tcp - don't deref NULL sk_socket member after tcp_close()
(bsc#1012628).
- net: usb: catc: enable basic endpoint checking (bsc#1012628).
- xen-netback: reject zero-queue configuration from guest
(bsc#1012628).
- net/rds: rds_sendmsg should not discard payload_len
(bsc#1012628).
- net: bridge: mcast: always update mdb_n_entries for vlan
contexts (bsc#1012628).
- selftests: forwarding: vxlan_bridge_1d: fix test failure with
br_netfilter enabled (bsc#1012628).
- selftests: forwarding: vxlan_bridge_1d_ipv6: fix test failure
with br_netfilter enabled (bsc#1012628).
- selftests: forwarding: fix pedit tests failure with br_netfilter
enabled (bsc#1012628).
- netfilter: nft_counter: serialize reset with spinlock
(bsc#1012628).
- netfilter: nft_quota: use atomic64_xchg for reset (bsc#1012628).
- netfilter: nf_tables: revert commit_mutex usage in reset path
(bsc#1012628).
- netfilter: nf_conntrack_h323: don't pass uninitialised l3num
value (bsc#1012628).
- ipvs: skip ipv6 extension headers for csum checks (bsc#1012628).
- ipvs: do not keep dest_dst if dev is going down (bsc#1012628).
- net: remove WARN_ON_ONCE when accessing forward path array
(bsc#1012628).
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
(bsc#1012628).
- ipv6: fix a race in ip6_sock_set_v6only() (bsc#1012628).
- bpftool: Fix truncated netlink dumps (bsc#1012628).
- net: psp: select CONFIG_SKB_EXTENSIONS (bsc#1012628).
- net: do not delay zero-copy skbs in skb_attempt_defer_free()
(bsc#1012628).
- dpll: zl3073x: Fix ref frequency setting (bsc#1012628).
- ping: annotate data-races in ping_lookup() (bsc#1012628).
- selftests: tc_actions: don't dump 2MB of \0 to stdout
(bsc#1012628).
- macvlan: observe an RCU grace period in macvlan_common_newlink()
error path (bsc#1012628).
- eth: fbnic: Add validation for MTU changes (bsc#1012628).
- icmp: prevent possible overflow in icmp_global_allow()
(bsc#1012628).
- inet: move icmp_global_{credit,stamp} to a separate cache line
(bsc#1012628).
- ipv6: icmp: remove obsolete code in icmpv6_xrlim_allow()
(bsc#1012628).
- octeontx2-af: Fix default entries mcam entry action
(bsc#1012628).
- eth: fbnic: Advertise supported XDP features (bsc#1012628).
- bnge: fix reserving resources from FW (bsc#1012628).
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down
(bsc#1012628).
- net/mlx5: Fix multiport device check over light SFs
(bsc#1012628).
- net/mlx5e: Fix misidentification of ASO CQE during poll loop
(bsc#1012628).
- net/mlx5: Fix misidentification of write combining CQE during
poll loop (bsc#1012628).
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event
(bsc#1012628).
- net/mlx5e: Fix deadlocks between devlink and netdev instance
locks (bsc#1012628).
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels
(bsc#1012628).
- apparmor: fix NULL pointer dereference in
__unix_needs_revalidation (bsc#1012628).
- apparmor: fix NULL sock in aa_sock_file_perm (bsc#1012628).
- AppArmor: Allow apparmor to handle unaligned dfa tables
(bsc#1012628).
- apparmor: Fix & Optimize table creation from possibly unaligned
memory (bsc#1012628).
- apparmor: return -ENOMEM in unpack_perms_table upon alloc
failure (bsc#1012628).
- apparmor: fix boolean argument in apparmor_mmap_file
(bsc#1012628).
- apparmor: drop in_atomic flag in common_mmap, and
common_file_perm (bsc#1012628).
- apparmor: account for in_atomic removal in common_file_perm
(bsc#1012628).
- apparmor: move check for aa_null file to cover all cases
(bsc#1012628).
- apparmor: fix rlimit for posix cpu timers (bsc#1012628).
- apparmor: remove apply_modes_to_perms from label_match
(bsc#1012628).
- apparmor: make label_match return a consistent value
(bsc#1012628).
- apparmor: avoid per-cpu hold underflow in aa_get_buffer
(bsc#1012628).
- apparmor: fix invalid deref of rawdata when export_binary is
unset (bsc#1012628).
- apparmor: fix aa_label to return state from compount and
component match (bsc#1012628).
- drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc()
(bsc#1012628).
- drm/amdgpu: Use kvfree instead of kfree in
amdgpu_gmc_get_nps_memranges() (bsc#1012628).
- drm/amdgpu: Fix memory leak in amdgpu_ras_init() (bsc#1012628).
- drm/amdgpu/sdma5: enable queue resets unconditionally
(bsc#1012628).
- drm/amdgpu/sdma5.2: enable queue resets unconditionally
(bsc#1012628).
- drm/amdgpu/sdma6: enable queue resets unconditionally
(bsc#1012628).
- drm/amdgpu: clean up the amdgpu_cs_parser_bos (bsc#1012628).
- mshv: fix SRCU protection in irqfd resampler ack handler
(bsc#1012628).
- regulator: mt6363: Fix interrmittent timeout (bsc#1012628).
- ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()
(bsc#1012628).
- drm/i915/acpi: free _DSM package when no connectors
(bsc#1012628).
- ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic
init (bsc#1012628).
- PCI: Validate window resource type in
pbus_select_window_for_type() (bsc#1012628).
- drm/amd/display: Fix dc_link NULL handling in HPD init
(bsc#1012628).
- drm/amdgpu: Fix missing unwind in amdgpu_ib_schedule() error
path (bsc#1012628).
- drm/amdkfd: Fix watch_id bounds checking in debug address
watch v2 (bsc#1012628).
- drm/amd/display: Reject cursor plane on DCE when scaled
differently than primary (bsc#1012628).
- drm/amd/display: Fix out-of-bounds stream encoder index v3
(bsc#1012628).
- spi: wpcm-fiu: Fix potential NULL pointer dereference in
wpcm_fiu_probe() (bsc#1012628).
- gpio: cdev: Avoid NULL dereference in linehandle_create()
(bsc#1012628).
- s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n
(bsc#1012628).
- drm/xe/pf: Fix sysfs initialization (bsc#1012628).
- drm/xe/configfs: Fix 'parameter name omitted' errors
(bsc#1012628).
- drm/xe/mmio: Avoid double-adjust in 64-bit reads (bsc#1012628).
- drm/xe/xe2_hpg: Fix handling of Wa_14019988906 & Wa_14019877138
(bsc#1012628).
- drm/xe/vf: Avoid reading media version when media GT is disabled
(bsc#1012628).
- drm/xe: Make xe_modparam.force_vram_bar_size signed
(bsc#1012628).
- drm/xe/bo: Redirect faults to dummy page for wedged device
(bsc#1012628).
- gpio: amd-fch: ionly return allowed values from
amd_fch_gpio_get() (bsc#1012628).
- efi: Fix reservation of unaccepted memory table (bsc#1012628).
- btrfs: reset block group size class when it becomes empty
(bsc#1012628).
- btrfs: use the correct type to initialize block reserve for
delayed refs (bsc#1012628).
- btrfs: fix invalid leaf access in btrfs_quota_enable() if ref
key not found (bsc#1012628).
- drm/amd/display: Use DCE 6 link encoder for DCE 6 analog
connectors (bsc#1012628).
- drm/amd/display: Only use analog link encoder with analog engine
(bsc#1012628).
- drm/amd/display: Only use analog stream encoder with analog
engine (bsc#1012628).
- x86/hyperv: Fix error pointer dereference (bsc#1012628).
- ASoC: rockchip: i2s-tdm: Use param rate if not provided by
set_sysclk (bsc#1012628).
- drm/amd/display: Use same max plane scaling limits for all 64
bpp formats (bsc#1012628).
- drm/amd/display: Don't call find_analog_engine() twice
(bsc#1012628).
- drm/amd/display: Turn off DAC in DCE link encoder using VBIOS
(bsc#1012628).
- drm/amd/display: Initialize DAC in DCE link encoder using VBIOS
(bsc#1012628).
- drm/amd/display: Set CRTC source for DAC using registers
(bsc#1012628).
- drm/amd/display: Enable DAC in DCE link encoder (bsc#1012628).
- PCI: dwc: ep: Always clear IB maps on BAR update (bsc#1012628).
- usb: cdns3: fix role switching during resume (bsc#1012628).
- MIPS: Work around LLVM bug when gp is used as global register
variable (bsc#1012628).
- ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error
paths (bsc#1012628).
- ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1012628).
- ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before
submitting I/O (bsc#1012628).
- ext4: don't zero the entire extent if
EXT4_EXT_DATA_PARTIAL_VALID1 (bsc#1012628).
- ext4: don't cache extent during splitting extent (bsc#1012628).
- ext4: drop extent cache after doing PARTIAL_VALID1 zeroout
(bsc#1012628).
- ext4: drop extent cache when splitting extent fails
(bsc#1012628).
- ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1012628).
- ext4: fix e4b bitmap inconsistency reports (bsc#1012628).
- ext4: fix dirtyclusters double decrement on fs shutdown
(bsc#1012628).
- ext4: always allocate blocks only from groups inode can use
(bsc#1012628).
- ext4: use optimized mballoc scanning regardless of inode format
(bsc#1012628).
- ata: pata_ftide010: Fix some DMA timings (bsc#1012628).
- ata: libata-scsi: refactor ata_scsi_translate() (bsc#1012628).
- ata: libata-scsi: avoid Non-NCQ command starvation
(bsc#1012628).
- SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths
(bsc#1012628).
- SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path
(bsc#1012628).
- dt-bindings: phy: qcom-edp: Add missing clock for X Elite
(bsc#1012628).
- dt-bindings: media: qcom,qcs8300-camss: Add missing power
supplies (bsc#1012628).
- ASoC: dt-bindings: asahi-kasei,ak4458: set
unevaluatedProperties:false (bsc#1012628).
- ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names
(bsc#1012628).
- ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names
(bsc#1012628).
- ALSA: hda/realtek: Add quirk for Gigabyte G5 KF5 (2023)
(bsc#1012628).
- ALSA: hda/conexant: Fix headphone jack handling on Acer Swift
SF314 (bsc#1012628).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Book3 Pro 360
(NP965QFG) (bsc#1012628).
- drm/exynos: vidi: use priv->vidi_dev for ctx lookup in
vidi_connection_ioctl() (bsc#1012628).
- drm/exynos: vidi: fix to avoid directly dereferencing user
pointer (bsc#1012628).
- Drivers: hv: vmbus: Use kthread for vmbus interrupts on
PREEMPT_RT (bsc#1012628).
- net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz
(bsc#1012628).
- ata: libata-eh: correctly handle deferred qc timeouts
(bsc#1012628).
- ata: libata-core: fix cancellation of a port deferred qc work
(bsc#1012628).
- Update config files.
- Refresh patches.suse/accel-amdxdna-Remove-amdxdna_flush.patch.
- Rename to
patches.kernel.org/6.19.4-298-accel-amdxdna-Enable-temporal-sharing-only-mod.patch.
- commit 3752e20
* Tue Feb 24 2026 tiwai@suse.de
- HID: apple: Add EPOMAKER TH87 to the non-apple keyboards list
(bsc#1258455).
- commit ab36671
* Tue Feb 24 2026 mkubecek@suse.cz
- config: refresh
- commit 440de45
* Mon Feb 23 2026 mkubecek@suse.cz
- rpm/check-for-config-changes: add OPENSSL_SUPPORTS_ to IGNORED_CONFIGS_RE
Config option OPENSSL_SUPPORTS_ML_DSA was introduced by mainline commit
0ad9a71933e7 ("modsign: Enable ML-DSA module signing") in 7.0-rc1
- commit 21b4616
* Mon Feb 23 2026 tzimmermann@suse.com
- config: Enable coreboot support (bsc#1258262)
Enable kernel support for coreboot firmware. Enabling these options
provides various interfaces under /sys/firmware/. One of the next
releases of the Linux kernel will feature corebootdrm, a dedicated
DRM driver for coreboot's system framebuffer. The driver relies on
support for coreboot firmware.
Leave out s390x and ppc64le, as coreboot apparently does not support
them.
- commit 14b0853
* Mon Feb 23 2026 mkubecek@suse.cz
- update to 7.0-rc1
- drop 77 patches (72 stable, 5 mainline):
- patches.kernel.org/*
- patches.rpmify/gendwarfksyms-Fix-build-on-32-bit-hosts.patch (ddc54f912a55)
- patches.suse/accel-amdxdna-Enable-temporal-sharing-only-mode.patch
- patches.suse/accel-amdxdna-Remove-NPU2-support.patch
- patches.suse/accel-amdxdna-Remove-amdxdna_flush.patch
- patches.suse/accel-amdxdna-Update-firmware-version-check-for-late.patch
- refresh
- patches.rpmify/btf-pahole-j1-option.patch
- patches.suse/0003-efi-Lock-down-the-kernel-if-booted-in-secure-boot-mode.patch
- patches.suse/Restore-kABI-for-NVidia-vGPU-driver.patch
- patches.suse/btrfs-provide-super_operations-get_inode_dev
- patches.suse/iwlwifi-declare-missing-firmware-files.patch
- patches.suse/vfs-add-super_operations-get_inode_dev
- patches.suse/wifi-iwlwifi-Add-missing-firmware-info-for-bz-b0-mod.patch
- disable ARM architectures (need config update)
- new config options
- General setup
- CONFIG_RSEQ_SLICE_EXTENSION=n
- Memory Management options
- CONFIG_BALLOON_MIGRATION=y
- Networking support
- CONFIG_NET_DSA_TAG_MXL_862XX=m
- File systems
- CONFIG_EROFS_FS_PAGE_CACHE_SHARE=n
- CONFIG_NFS_V4_0=n
- CONFIG_NFSD_V4_POSIX_ACLS=n
- Cryptographic API
- CONFIG_CRYPTO_MLDSA=m
- CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_44=n
- CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_65=n
- CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_87=n
- Kernel hacking
- CONFIG_BOOTPARAM_SOFTLOCKUP_PANIC=0
- CONFIG_BOOTPARAM_WQ_STALL_PANIC=0
- CONFIG_DEBUG_ATOMIC=n
- CONFIG_CONTEXT_ANALYSIS_TEST=n
- Cryptographic API
- CONFIG_PKCS7_WAIVE_AUTHATTRS_REJECTION_FOR_MLDSA=n
- Network device support
- CONFIG_NET_DSA_MXL862=m
- CONFIG_DWMAC_MOTORCOMM=m
- Hardware Monitoring support
- CONFIG_SENSORS_HAC300S=m
- CONFIG_SENSORS_MP5926=m
- CONFIG_SENSORS_STEF48H28=m
- Voltage and Current Regulator Support
- CONFIG_REGULATOR_RT8092=m
- CONFIG_REGULATOR_TPS65185=m
- Multimedia support
- CONFIG_VIDEO_OS05B10=m
- CONFIG_VIDEO_S5K3M5=m
- CONFIG_VIDEO_S5KJN1=m
- Graphics support
- CONFIG_DRM_ST7571=m
- CONFIG_DRM_ST7571_SPI=m
- CONFIG_DRM_ST7920=m
- Sound card support
- CONFIG_SND_SOC_RT5575=m
- CONFIG_SND_SOC_RT5575_SPI=y
- LED Support
- CONFIG_LEDS_OSRAM_AMS_AS3668=m
- CONFIG_LEDS_LP5812=m
- Staging drivers
- CONFIG_FB_TFT=m
- CONFIG_FB_TFT_AGM1264K_FL=m
- CONFIG_FB_TFT_BD663474=m
- CONFIG_FB_TFT_HX8340BN=m
- CONFIG_FB_TFT_HX8347D=m
- CONFIG_FB_TFT_HX8353D=m
- CONFIG_FB_TFT_HX8357D=m
- CONFIG_FB_TFT_ILI9163=m
- CONFIG_FB_TFT_ILI9320=m
- CONFIG_FB_TFT_ILI9325=m
- CONFIG_FB_TFT_ILI9340=m
- CONFIG_FB_TFT_ILI9341=m
- CONFIG_FB_TFT_ILI9481=m
- CONFIG_FB_TFT_ILI9486=m
- CONFIG_FB_TFT_PCD8544=m
- CONFIG_FB_TFT_RA8875=m
- CONFIG_FB_TFT_S6D02A1=m
- CONFIG_FB_TFT_S6D1121=m
- CONFIG_FB_TFT_SEPS525=m
- CONFIG_FB_TFT_SH1106=m
- CONFIG_FB_TFT_SSD1289=m
- CONFIG_FB_TFT_SSD1305=m
- CONFIG_FB_TFT_SSD1306=m
- CONFIG_FB_TFT_SSD1331=m
- CONFIG_FB_TFT_SSD1351=m
- CONFIG_FB_TFT_ST7735R=m
- CONFIG_FB_TFT_ST7789V=m
- CONFIG_FB_TFT_TINYLCD=m
- CONFIG_FB_TFT_TLS8204=m
- CONFIG_FB_TFT_UC1611=m
- CONFIG_FB_TFT_UC1701=m
- CONFIG_FB_TFT_UPD161704=m
- Industrial I/O support
- CONFIG_ADXL345_I2C=n
- CONFIG_ADXL345_SPI=n
- CONFIG_AD4062=n
- CONFIG_AD4134=n
- CONFIG_TI_ADS1018=n
- CONFIG_TI_ADS131M02=n
- CONFIG_ADL8113=n
- CONFIG_MAX22007=n
- CONFIG_MCP47FEB02=n
- CONFIG_MMC5633=n
- CONFIG_ABP2030PA_I2C=n
- CONFIG_ABP2030PA_SPI=n
- CONFIG_MPRLS0025PA_I2C=n
- CONFIG_MPRLS0025PA_SPI=n
- misc drivers
- CONFIG_PHY_GOOGLE_USB=m
- CONFIG_DPLL_REFCNT_TRACKER=n
- CONFIG_HID_RAPOO=m
- CONFIG_USB_DWC3_GOOGLE=m
- CONFIG_IOMMU_DEBUG_PAGEALLOC=n
- OF dependent (i386, ppc64le, riscv64)
- GPIO_LINE_MUX=m
- POWER_SEQUENCING_PCIE_M2=m
- i386
- REGULATOR_MAX77675=m
- DRM_PANEL_SAMSUNG_LTL106HL02=n
- ppc64le
- INTEL_MEI=n
- LOGO_LINUX_VGA16_FILE="drivers/video/logo/logo_linux_vga16.ppm"
- LOGO_LINUX_CLUT224_FILE="drivers/video/logo/logo_linux_clut224.ppm"
- TRUSTED_KEYS_PKWM=y
- s390x
- INTEL_MEI=n
- s390x/zfcpdump
- KEXEC_SIG=y
- PKCS8_PRIVATE_KEY_PARSER=y
- PKCS7_TEST_KEY=n
- SIGNED_PE_FILE_VERIFICATION=y
- FIPS_SIGNATURE_SELFTEST=n
- SYSTEM_TRUSTED_KEYS=""
- SYSTEM_EXTRA_CERTIFICATE=n
- SECONDARY_TRUSTED_KEYRING=y
- SECONDARY_TRUSTED_KEYRING_SIGNED_BY_BUILTIN=n
- riscv64
- RISCV_USER_CFI=y
- INTEL_MEI=n
- SPI_ATCSPI200=m
- REGULATOR_MAX77675=m
- VIDEO_DW_MIPI_CSI2RX=m
- DRM_PANEL_SAMSUNG_LTL106HL02=n
- FIRMWARE_EDID=y
- SND_SOC_CV1800B_TDM=m
- SND_SOC_CV1800B_ADC_CODEC=m
- SND_SOC_CV1800B_DAC_CODEC=m
- SPACEMI