<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="3">
<package pkgid="d96634d4da36a2789573b40c92069f007c7ee30be31e18de1ebc56030e2fe819" name="kernel-syms" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="2.1"/>
  <changelog author="rgoldwyn@suse.com" date="1780488000">- ima: return error early if file xattr cannot be changed (bsc#1261041).
  (cherry picked from commit 5d98aa3da261a44f676d60ae2e11bfbf8f691928)
- ima: return error early if file xattr cannot be changed (bsc#1261041).
- commit c8ca8cf</changelog>
  <changelog author="tiwai@suse.de" date="1780488001">- rpm: Add BuildRequires for Rust enablement (bsc#1258538)
  Update mkspec and template to generate the spec files with
  BuildRequires of Rust-related packages when ENABLE_RUST=Yes is set in
  rpm/config.sh.
- commit d0f276f</changelog>
  <changelog author="tiwai@suse.de" date="1780488002">- rpm/check-for-config-changes: ignore Rust-related configs (bsc#1258538)
  Those configs may be dynamically changed at the build time
- commit 5251980</changelog>
  <changelog author="tiwai@suse.de" date="1780488003">- rpm/mkspec: Conditionally set Rust BuildReqs (bsc#1258538)
  This is a further optimization of kernel packaging rust-enablement.
  Add the check of CONFIG_RUST at creating the spec for each kernel
  flavor, and set BuildRequires conditionally only for archs that have
  CONFIG_RUST.  This avoids the unnecessary dependency chains due to
  unused rust.
  The main knob ENABLE_RUST is still needed because otherwise we can't
  know whether to pass the dummy-tools or not at processing
  run_oldconfig.
- commit ccf4b93</changelog>
  <changelog author="msuchanek@suse.de" date="1780660800">- packaging: Add nvidia kernel description
- commit 5f2699f</changelog>
  <changelog author="mkubecek@suse.cz" date="1780920000">- update to 7.1-rc7
- commit f7dda10</changelog>
  <changelog author="jslaby@suse.cz" date="1781006400">- i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl
  (git-fixes).
- commit e3cc0a5</changelog>
  <changelog author="jslaby@suse.cz" date="1781092800">- drm/gem: Try to fix change_handle ioctl, attempt 4 (git-fixes).
- commit 41887ca</changelog>
  <changelog author="jslaby@suse.cz" date="1781092801">- Update
  patches.kernel.org/7.0.10-0188-net-sched-act_ct-Only-release-RCU-read-lock-a.patch
  (bsc#1012628 CVE-2026-46319).
- Update
  patches.kernel.org/7.0.10-0860-eventpoll-fix-ep_remove-struct-eventpoll-stru.patch
  (bsc#1012628 CVE-2026-46242 bsc#1267618).
- Update
  patches.kernel.org/7.0.10-0889-netfilter-nf_tables-use-list_del_rcu-for-netl.patch
  (bsc#1012628 CVE-2026-46324 bsc#1267995).
- Update
  patches.kernel.org/7.0.10-1090-io-wq-check-that-the-predecessor-is-hashed-in.patch
  (bsc#1012628 CVE-2026-46274 bsc#1267918).
- Update
  patches.kernel.org/7.0.11-004-smb-client-reject-userspace-cifs.spnego-descri.patch
  (bsc#1012628 CVE-2026-46243 bsc#1266238).
- Update
  patches.kernel.org/7.0.11-030-io_uring-waitid-clear-waitid-info-before-copyi.patch
  (bsc#1012628 CVE-2026-46315 bsc#1267953).
- Update
  patches.kernel.org/7.0.11-044-Bluetooth-hci_uart-fix-UAFs-and-race-condition.patch
  (bsc#1012628 CVE-2026-46275 bsc#1267968).
- Update
  patches.kernel.org/7.0.11-060-netfilter-nft_inner-Fix-IPv6-inner_thoff-desyn.patch
  (bsc#1012628 CVE-2026-46244 bsc#1267654).
- Update
  patches.kernel.org/7.0.11-452-net-gro-don-t-merge-zcopy-skbs.patch
  (bsc#1012628 CVE-2026-46323).
- Update
  patches.kernel.org/7.0.12-019-tun-free-page-on-short-frame-rejection-in-tun_.patch
  (bsc#1012628 CVE-2026-46321).
- Update
  patches.kernel.org/7.0.12-020-tap-free-page-on-error-paths-in-tap_get_user_x.patch
  (bsc#1012628 CVE-2026-46320 bsc#1267993).
- Update
  patches.kernel.org/7.0.12-021-tun-free-page-on-build_skb-failure-in-tun_xdp_.patch
  (bsc#1012628 CVE-2026-46322 bsc#1267994).
- Update
  patches.kernel.org/7.0.12-315-Revert-mm-hugetlbfs-update-hugetlbfs-to-use-mm.patch
  (bsc#1012628 CVE-2026-46318).
- Update
  patches.kernel.org/7.0.12-332-KVM-arm64-vgic-its-Drop-the-translation-cache-.patch
  (bsc#1012628 CVE-2026-46316).
- Update
  patches.kernel.org/7.0.12-333-KVM-arm64-Reassign-nested_mmus-array-behind-mm.patch
  (bsc#1012628 CVE-2026-46317).
- Update
  patches.kernel.org/7.0.4-008-LoongArch-Add-spectre-boundry-for-syscall-dispa.patch
  (bsc#1012628 CVE-2026-45993 bsc#1267352).
- Update
  patches.kernel.org/7.0.4-009-drm-nouveau-fix-u32-overflow-in-pushbuf-reloc-b.patch
  (bsc#1012628 CVE-2026-46006 bsc#1267479).
- Update
  patches.kernel.org/7.0.4-010-leds-qcom-lpg-Check-for-array-overflow-when-sel.patch
  (bsc#1012628 CVE-2026-46286 bsc#1267932).
- Update
  patches.kernel.org/7.0.4-011-greybus-gb-beagleplay-bound-bootloader-receive-.patch
  (bsc#1012628 CVE-2026-46332).
- Update
  patches.kernel.org/7.0.4-012-greybus-gb-beagleplay-fix-sleep-in-atomic-conte.patch
  (bsc#1012628 CVE-2026-46041 bsc#1267589).
- Update
  patches.kernel.org/7.0.4-013-misc-ibmasm-fix-OOB-MMIO-read-in-ibmasm_handle_.patch
  (bsc#1012628 CVE-2026-46022 bsc#1267434).
- Update
  patches.kernel.org/7.0.4-014-ibmasm-fix-OOB-reads-in-command_file_write-due-.patch
  (bsc#1012628 CVE-2026-45994 bsc#1267432).
- Update
  patches.kernel.org/7.0.4-015-ibmasm-fix-heap-over-read-in-ibmasm_send_i2o_me.patch
  (bsc#1012628 CVE-2026-46064 bsc#1267497).
- Update
  patches.kernel.org/7.0.4-019-drm-nouveau-fix-nvkm_device-leak-on-aperture-re.patch
  (bsc#1012628 CVE-2026-52904).
- Update
  patches.kernel.org/7.0.4-022-fs-afs-revert-mmap_prepare-change.patch
  (bsc#1012628 CVE-2026-46100 bsc#1267447).
- Update
  patches.kernel.org/7.0.4-024-lib-test_hmm-evict-device-pages-on-file-close-t.patch
  (bsc#1012628 CVE-2026-46280 bsc#1267958).
- Update
  patches.kernel.org/7.0.4-030-ocfs2-split-transactions-in-dio-completion-to-a.patch
  (bsc#1012628 CVE-2026-46080 bsc#1267596).
- Update
  patches.kernel.org/7.0.4-031-Input-edt-ft5x06-fix-use-after-free-in-debugfs-.patch
  (bsc#1012628 CVE-2026-46097 bsc#1267428).
- Update
  patches.kernel.org/7.0.4-032-zram-do-not-forget-to-endio-for-partial-discard.patch
  (bsc#1012628 CVE-2026-46089 bsc#1267445).
- Update
  patches.kernel.org/7.0.4-033-wifi-rtw88-check-for-PCI-upstream-bridge-existe.patch
  (bsc#1012628 CVE-2026-46092 bsc#1267595).
- Update
  patches.kernel.org/7.0.4-034-wifi-mwifiex-fix-use-after-free-in-mwifiex_adap.patch
  (bsc#1012628 CVE-2026-46069 bsc#1267437).
- Update
  patches.kernel.org/7.0.4-038-vfio-cdx-Serialize-VFIO_DEVICE_SET_IRQS-with-a-.patch
  (bsc#1012628 CVE-2026-46036 bsc#1267470).
- Update
  patches.kernel.org/7.0.4-042-spi-imx-fix-use-after-free-on-unbind.patch
  (bsc#1012628 CVE-2026-45996 bsc#1267436).
- Update
  patches.kernel.org/7.0.4-043-spi-ch341-fix-memory-leaks-on-probe-failures.patch
  (bsc#1012628 CVE-2026-46074 bsc#1267468).
- Update
  patches.kernel.org/7.0.4-044-crypto-algif_aead-snapshot-IV-for-async-AEAD-re.patch
  (bsc#1012628 CVE-2026-46028 bsc#1267430).
- Update
  patches.kernel.org/7.0.4-047-of-unittest-fix-use-after-free-in-of_unittest_c.patch
  (bsc#1012628 CVE-2026-46288 bsc#1267941).
- Update
  patches.kernel.org/7.0.4-049-hwmon-powerz-Fix-missing-usb_kill_urb-on-signal.patch
  (bsc#1012628 CVE-2026-46073 bsc#1267597).
- Update
  patches.kernel.org/7.0.4-050-EDAC-versalnet-Fix-device_node-leak-in-mc_probe.patch
  (bsc#1012628 CVE-2026-46030 bsc#1267451).
- Update
  patches.kernel.org/7.0.4-054-net-caif-clear-client-service-pointer-on-teardo.patch
  (bsc#1012628 CVE-2026-46098 bsc#1267552).
- Update
  patches.kernel.org/7.0.4-055-net-strparser-fix-skb_head-leak-in-strp_abort_s.patch
  (bsc#1012628 CVE-2026-46102 bsc#1267502).
- Update
  patches.kernel.org/7.0.4-056-media-mtk-jpeg-fix-use-after-free-in-release-pa.patch
  (bsc#1012628 CVE-2026-46011 bsc#1267491).
- Update
  patches.kernel.org/7.0.4-065-ext2-reject-inodes-with-zero-i_nlink-and-valid-.patch
  (bsc#1012628 CVE-2026-46002 bsc#1267587).
- Update
  patches.kernel.org/7.0.4-070-ALSA-ctxfi-Add-fallback-to-default-RSR-for-S-PD.patch
  (bsc#1012628 CVE-2026-46049 bsc#1267448).
- Update
  patches.kernel.org/7.0.4-072-erofs-fix-the-out-of-bounds-nameoff-handling-fo.patch
  (bsc#1012628 CVE-2026-46078 bsc#1267505).
- Update
  patches.kernel.org/7.0.4-073-ipmi-ssif-Clean-up-kthread-on-errors.patch
  (bsc#1012628 CVE-2026-46044 bsc#1267464).
- Update
  patches.kernel.org/7.0.4-078-media-rockchip-rkcif-fix-off-by-one-bugs.patch
  (bsc#1012628 CVE-2026-52907).
- Update
  patches.kernel.org/7.0.4-081-mm-alloc_tag-clear-codetag-for-pages-allocated-.patch
  (bsc#1012628 CVE-2026-46279 bsc#1267929).
- Update
  patches.kernel.org/7.0.4-082-mm-damon-core-fix-damon_call-vs-kdamond_fn-exit.patch
  (bsc#1012628 CVE-2026-46025 bsc#1267585).
- Update
  patches.kernel.org/7.0.4-084-mm-hugetlb-fix-early-boot-crash-on-parameters-w.patch
  (bsc#1012628 CVE-2026-46284 bsc#1267938).
- Update
  patches.kernel.org/7.0.4-085-mtd-docg3-fix-use-after-free-in-docg3_release.patch
  (bsc#1012628 CVE-2026-46285 bsc#1267948).
- Update
  patches.kernel.org/7.0.4-105-mm-zone_device-do-not-touch-device-folio-after-.patch
  (bsc#1012628 CVE-2026-46277 bsc#1267960).
- Update
  patches.kernel.org/7.0.4-126-rxrpc-Fix-potential-UAF-after-skb_unshare-failu.patch
  (bsc#1012628 CVE-2026-45998 bsc#1267452).
- Update
  patches.kernel.org/7.0.4-127-rxrpc-Fix-memory-leaks-in-rxkad_verify_response.patch
  (bsc#1012628 CVE-2026-46012 bsc#1267350).
- Update
  patches.kernel.org/7.0.4-128-rxrpc-Fix-conn-level-packet-handling-to-unshare.patch
  (bsc#1012628 CVE-2026-46000 bsc#1267490).
- Update
  patches.kernel.org/7.0.4-135-net-txgbe-fix-RTNL-assertion-warning-when-remov.patch
  (bsc#1012628 CVE-2026-46287 bsc#1267954).
- Update
  patches.kernel.org/7.0.4-141-net-rds-fix-MR-cleanup-on-copy-error.patch
  (bsc#1012628 CVE-2026-46053 bsc#1267427).
- Update
  patches.kernel.org/7.0.4-144-net-ks8851-Reinstate-disabling-of-BHs-around-IR.patch
  (bsc#1012628 CVE-2026-46031 bsc#1267463).
- Update
  patches.kernel.org/7.0.4-145-net-bridge-use-a-stable-FDB-dst-snapshot-in-RCU.patch
  (bsc#1012628 CVE-2026-46086 bsc#1267524).
- Update
  patches.kernel.org/7.0.4-154-ipv4-icmp-validate-reply-type-before-using-icmp.patch
  (bsc#1012628 CVE-2026-46037 bsc#1267361).
- Update
  patches.kernel.org/7.0.4-162-fbdev-defio-Disconnect-deferred-I-O-from-the-li.patch
  (bsc#1012628 CVE-2026-46065 bsc#1267458).
- Update
  patches.kernel.org/7.0.4-165-hwmon-powerz-Avoid-cacheline-sharing-for-DMA-bu.patch
  (bsc#1012628 CVE-2026-46007 bsc#1267586).
- Update
  patches.kernel.org/7.0.4-170-selinux-fix-overlayfs-mmap-and-mprotect-access-.patch
  (bsc#1012628 CVE-2026-46054 bsc#1267475).
- Update
  patches.kernel.org/7.0.4-176-crypto-qat-fix-IRQ-cleanup-on-6xxx-probe-failur.patch
  (bsc#1012628 CVE-2026-46060 bsc#1267594).
- Update
  patches.kernel.org/7.0.4-178-xfs-fix-a-resource-leak-in-xfs_alloc_buftarg.patch
  (bsc#1012628 CVE-2026-46005 bsc#1267431).
- Update
  patches.kernel.org/7.0.4-184-tpm2-sessions-Fix-missing-tpm_buf_destroy-in-tp.patch
  (bsc#1012628 CVE-2026-46096 bsc#1267371).
- Update
  patches.kernel.org/7.0.4-186-tpm-Use-kfree_sensitive-to-free-auth-session-in.patch
  (bsc#1012628 CVE-2026-46283 bsc#1267952).
- Update
  patches.kernel.org/7.0.4-190-mm-vmalloc-take-vmap_purge_lock-in-shrinker.patch
  (bsc#1012628 CVE-2026-46093 bsc#1267548).
- Update
  patches.kernel.org/7.0.4-191-mm-memfd_luo-fix-physical-address-conversion-in.patch
  (bsc#1012628 CVE-2026-46013 bsc#1267351).
- Update
  patches.kernel.org/7.0.4-192-mm-mempolicy-fix-memory-leaks-in-weighted_inter.patch
  (bsc#1012628 CVE-2026-46042 bsc#1267588).
- Update
  patches.kernel.org/7.0.4-193-mm-damon-stat-fix-memory-leak-on-damon_start-fa.patch
  (bsc#1012628 CVE-2026-46087 bsc#1267492).
- Update
  patches.kernel.org/7.0.4-194-mm-damon-core-validate-damos_quota_goal-nid-for.patch
  (bsc#1012628 CVE-2026-46020 bsc#1267446).
- Update
  patches.kernel.org/7.0.4-195-mm-damon-core-validate-damos_quota_goal-nid-for.patch
  (bsc#1012628 CVE-2026-46067 bsc#1267498).
- Update
  patches.kernel.org/7.0.4-198-mm-damon-core-disallow-non-power-of-two-min_reg.patch
  (bsc#1012628 CVE-2026-52905).
- Update
  patches.kernel.org/7.0.4-205-KVM-SVM-Inject-UD-for-INVLPGA-if-EFER.SVME-0.patch
  (bsc#1012628 CVE-2026-46082 bsc#1267473).
- Update
  patches.kernel.org/7.0.4-208-KVM-nSVM-Always-use-NextRIP-as-vmcb02-s-NextRIP.patch
  (bsc#1012628 CVE-2026-46059 bsc#1267495).
- Update
  patches.kernel.org/7.0.4-212-KVM-nSVM-Avoid-clearing-VMCB_LBR-in-vmcb12.patch
  (bsc#1012628 CVE-2026-46071 bsc#1267591).
- Update
  patches.kernel.org/7.0.4-215-KVM-SVM-Add-missing-save-restore-handling-of-LB.patch
  (bsc#1012628 CVE-2026-46014 bsc#1267440).
- Update
  patches.kernel.org/7.0.4-219-KVM-nSVM-Triple-fault-if-restore-host-CR3-fails.patch
  (bsc#1012628 CVE-2026-46032 bsc#1267476).
- Update
  patches.kernel.org/7.0.4-227-KVM-nSVM-Raise-UD-if-unhandled-VMMCALL-isn-t-in.patch
  (bsc#1012628 CVE-2026-46076 bsc#1267365).
- Update
  patches.kernel.org/7.0.4-237-md-md-llbitmap-skip-reading-rdevs-that-are-not-.patch
  (bsc#1012628 CVE-2026-46045 bsc#1267474).
- Update
  patches.kernel.org/7.0.4-238-md-md-llbitmap-raise-barrier-before-state-machi.patch
  (bsc#1012628 CVE-2026-46095 bsc#1267363).
- Update
  patches.kernel.org/7.0.4-239-md-raid5-fix-soft-lockup-in-retry_aligned_read.patch
  (bsc#1012628 CVE-2026-46051 bsc#1267360).
- Update
  patches.kernel.org/7.0.4-240-md-raid5-validate-payload-size-before-accessing.patch
  (bsc#1012628 CVE-2026-46070 bsc#1267501).
- Update
  patches.kernel.org/7.0.4-244-inotify-fix-watch-count-leak-when-fsnotify_add_.patch
  (bsc#1012628 CVE-2026-46040 bsc#1267472).
- Update
  patches.kernel.org/7.0.4-248-tcp-call-sk_data_ready-after-listener-migration.patch
  (bsc#1012628 CVE-2026-46015 bsc#1267439).
- Update
  patches.kernel.org/7.0.4-252-9p-fix-access-mode-flags-being-ORed-instead-of-.patch
  (bsc#1012628 CVE-2026-52906).
- Update
  patches.kernel.org/7.0.4-254-Bluetooth-hci_event-fix-potential-UAF-in-SSP-pa.patch
  (bsc#1012628 CVE-2026-46056 bsc#1267435).
- Update
  patches.kernel.org/7.0.4-256-can-ucan-fix-devres-lifetime.patch
  (bsc#1012628 CVE-2026-46103 bsc#1267555).
- Update
  patches.kernel.org/7.0.4-263-crypto-atmel-tdes-fix-DMA-sync-direction.patch
  (bsc#1012628 CVE-2026-46077 bsc#1267466).
- Update
  patches.kernel.org/7.0.4-265-crypto-atmel-sha204a-Fix-potential-UAF-and-memo.patch
  (bsc#1012628 CVE-2026-46075 bsc#1267367).
- Update
  patches.kernel.org/7.0.4-267-crypto-nx-fix-bounce-buffer-leaks-in-nx842_cryp.patch
  (bsc#1012628 CVE-2026-46068 bsc#1267592).
- Update
  patches.kernel.org/7.0.4-270-dm-mirror-fix-integer-overflow-in-create_dirty_.patch
  (bsc#1012628 CVE-2026-46023 bsc#1267449).
- Update
  patches.kernel.org/7.0.4-272-ceph-fix-num_ops-off-by-one-when-crypto-allocat.patch
  (bsc#1012628 CVE-2026-46066 bsc#1267593).
- Update
  patches.kernel.org/7.0.4-273-ceph-only-d_add-negative-dentries-when-they-are.patch
  (bsc#1012628 CVE-2026-46052 bsc#1267494).
- Update
  patches.kernel.org/7.0.4-278-ntfs3-add-buffer-boundary-checks-to-run_unpack.patch
  (bsc#1012628 CVE-2026-46072 bsc#1267441).
- Update
  patches.kernel.org/7.0.4-279-ntfs3-fix-integer-overflow-in-run_unpack-volume.patch
  (bsc#1012628 CVE-2026-46062 bsc#1267358).
- Update
  patches.kernel.org/7.0.4-281-rxgk-Fix-potential-integer-overflow-in-length-c.patch
  (bsc#1012628 CVE-2026-46039 bsc#1267465).
- Update
  patches.kernel.org/7.0.4-287-iio-frequency-admv1013-fix-NULL-pointer-derefer.patch
  (bsc#1012628 CVE-2026-46282 bsc#1267919).
- Update
  patches.kernel.org/7.0.4-299-drm-amdgpu-fix-zero-size-GDS-range-init-on-RDNA.patch
  (bsc#1012628 CVE-2026-46276 bsc#1267922).
- Update
  patches.kernel.org/7.0.4-300-drm-imagination-Fix-segfault-when-updating-ftra.patch
  (bsc#1012628 CVE-2026-46278 bsc#1267915).
- Update
  patches.kernel.org/7.0.4-301-ALSA-caiaq-fix-usb_dev-refcount-leak-on-probe-f.patch
  (bsc#1012628 CVE-2026-46048 bsc#1267496).
- Update
  patches.kernel.org/7.0.4-302-ALSA-aloop-Fix-peer-runtime-UAF-during-format-c.patch
  (bsc#1012628 CVE-2026-46090 bsc#1267531).
- Update
  patches.kernel.org/7.0.4-303-vmalloc-fix-buffer-overflow-in-vrealloc_node_al.patch
  (bsc#1012628 CVE-2026-46281 bsc#1267961).
- Update
  patches.kernel.org/7.0.4-305-mm-slab-return-NULL-early-from-kmalloc_nolock-i.patch
  (bsc#1012628 CVE-2026-46029 bsc#1267590).
- Update
  patches.kernel.org/7.0.7-001-scsi-target-configfs-Bound-snprintf-return-in-t.patch
  (bsc#1012628 CVE-2026-46149 bsc#1267648).
- Update
  patches.kernel.org/7.0.7-002-ipmi-Add-limits-to-event-and-receive-message-re.patch
  (bsc#1012628 CVE-2026-46177 bsc#1267725).
- Update
  patches.kernel.org/7.0.7-003-ipmi-Check-event-message-buffer-response-for-ba.patch
  (bsc#1012628 CVE-2026-46128 bsc#1267643).
- Update
  patches.kernel.org/7.0.7-004-ipmi-si-Return-state-to-normal-if-message-alloc.patch
  (bsc#1012628 CVE-2026-46108 bsc#1267615).
- Update
  patches.kernel.org/7.0.7-013-ASoC-SOF-Don-t-allow-pointer-operations-on-unco.patch
  (bsc#1012628 CVE-2026-46179 bsc#1267719).
- Update
  patches.kernel.org/7.0.7-018-flow_dissector-do-not-dissect-PPPoE-PFC-frames.patch
  (bsc#1012628 CVE-2026-46306 bsc#1267986).
- Update
  patches.kernel.org/7.0.7-021-exit-prevent-preemption-of-oopsing-TASK_DEAD-ta.patch
  (bsc#1012628 CVE-2026-46173 bsc#1267723).
- Update
  patches.kernel.org/7.0.7-030-wifi-ath5k-do-not-access-array-OOB.patch
  (bsc#1012628 CVE-2026-46307 bsc#1267987).
- Update
  patches.kernel.org/7.0.7-032-wifi-b43-enforce-bounds-check-on-firmware-key-i.patch
  (bsc#1012628 CVE-2026-46122 bsc#1267583).
- Update
  patches.kernel.org/7.0.7-034-usb-usblp-fix-heap-leak-in-IEEE-1284-device-ID-.patch
  (bsc#1012628 CVE-2026-46151 bsc#1267728).
- Update
  patches.kernel.org/7.0.7-037-ALSA-usb-audio-Avoid-potential-endless-loop-in-.patch
  (bsc#1012628 CVE-2026-46146 bsc#1267571).
- Update
  patches.kernel.org/7.0.7-045-ALSA-pcm-oss-Fix-data-race-at-accessing-runtime.patch
  (bsc#1012628 CVE-2026-46157 bsc#1267726).
- Update
  patches.kernel.org/7.0.7-054-xfrm-defensively-unhash-xfrm_state-lists-in-__x.patch
  (bsc#1012628 CVE-2026-46116 bsc#1267369).
- Update
  patches.kernel.org/7.0.7-056-xfrm-ah-account-for-ESN-high-bits-in-async-call.patch
  (bsc#1012628 CVE-2026-46193 bsc#1267656).
- Update
  patches.kernel.org/7.0.7-058-selinux-use-sk-blob-accessor-in-socket-permissi.patch
  (bsc#1012628 CVE-2026-46104 bsc#1267559).
- Update
  patches.kernel.org/7.0.7-064-selinux-allow-multiple-opens-of-sys-fs-selinux-.patch
  (bsc#1012628 CVE-2026-46302 bsc#1267947).
- Update
  patches.kernel.org/7.0.7-068-Bluetooth-virtio_bt-clamp-rx-length-before-skb_.patch
  (bsc#1012628 CVE-2026-46123 bsc#1267621).
- Update
  patches.kernel.org/7.0.7-070-Bluetooth-btmtk-validate-WMT-event-SKB-length-b.patch
  (bsc#1012628 CVE-2026-46140 bsc#1267677).
- Update
  patches.kernel.org/7.0.7-071-Bluetooth-hci_conn-fix-potential-UAF-in-create_.patch
  (bsc#1012628 CVE-2026-46111 bsc#1267626).
- Update
  patches.kernel.org/7.0.7-072-Bluetooth-hci_event-Fix-OOB-read-and-infinite-l.patch
  (bsc#1012628 CVE-2026-46138 bsc#1267649).
- Update
  patches.kernel.org/7.0.7-088-spi-s3c64xx-fix-NULL-deref-on-driver-unbind.patch
  (bsc#1012628 CVE-2026-46296 bsc#1267927).
- Update
  patches.kernel.org/7.0.7-089-staging-rtl8723bs-os_dep-avoid-NULL-pointer-der.patch
  (bsc#1012628 CVE-2026-46305 bsc#1267930).
- Update
  patches.kernel.org/7.0.7-091-fanotify-fix-false-positive-on-permission-event.patch
  (bsc#1012628 CVE-2026-46150 bsc#1267388).
- Update
  patches.kernel.org/7.0.7-098-net-rtnetlink-zero-ifla_vf_broadcast-to-avoid-s.patch
  (bsc#1012628 CVE-2026-46132 bsc#1267616).
- Update
  patches.kernel.org/7.0.7-111-pseries-papr-hvpipe-Fix-race-with-interrupt-han.patch
  (bsc#1012628 CVE-2026-46298 bsc#1267923).
- Update
  patches.kernel.org/7.0.7-112-pseries-papr-hvpipe-Prevent-kernel-stack-memory.patch
  (bsc#1012628 CVE-2026-46182 bsc#1267383).
- Update
  patches.kernel.org/7.0.7-117-ip6_gre-Use-cached-t-net-in-ip6erspan_changelin.patch
  (bsc#1012628 CVE-2026-46120 bsc#1267640).
- Update
  patches.kernel.org/7.0.7-118-net-libwx-use-request_irq-for-VF-misc-interrupt.patch
  (bsc#1012628 CVE-2026-46297 bsc#1267935).
- Update
  patches.kernel.org/7.0.7-125-x86-efi-Fix-graceful-fault-handling-after-FPU-s.patch
  (bsc#1012628 CVE-2026-46290 bsc#1267973).
- Update
  patches.kernel.org/7.0.7-132-pmdomain-mediatek-fix-use-after-free-in-scpsys_.patch
  (bsc#1012628 CVE-2026-46308 bsc#1267988).
- Update
  patches.kernel.org/7.0.7-139-fbcon-Avoid-OOB-font-access-if-console-rotation.patch
  (bsc#1012628 CVE-2026-46191 bsc#1267690).
- Update
  patches.kernel.org/7.0.7-145-ibmveth-Disable-GSO-for-packets-with-small-MSS.patch
  (bsc#1012628 CVE-2026-46273 bsc#1267651).
- Update
  patches.kernel.org/7.0.7-150-spi-microchip-core-qspi-control-built-in-cs-man.patch
  (bsc#1012628 CVE-2026-46148 bsc#1267718).
- Update
  patches.kernel.org/7.0.7-158-spi-topcliff-pch-fix-use-after-free-on-unbind.patch
  (bsc#1012628 CVE-2026-46301 bsc#1267983).
- Update
  patches.kernel.org/7.0.7-165-clk-microchip-mpfs-ccc-fix-out-of-bounds-access.patch
  (bsc#1012628 CVE-2026-46293 bsc#1267933).
- Update
  patches.kernel.org/7.0.7-172-ASoC-qcom-q6apm-lpass-dai-Fix-multiple-graph-op.patch
  (bsc#1012628 CVE-2026-46143 bsc#1267712).
- Update
  patches.kernel.org/7.0.7-175-btrfs-fix-btrfs_ioctl_space_info-slot_count-TOC.patch
  (bsc#1012628 CVE-2026-46159 bsc#1267652).
- Update
  patches.kernel.org/7.0.7-178-btrfs-fix-missing-last_unlink_trans-update-when.patch
  (bsc#1012628 CVE-2026-46160 bsc#1267624).
- Update
  patches.kernel.org/7.0.7-179-dm-thin-fix-metadata-refcount-underflow.patch
  (bsc#1012628 CVE-2026-46107 bsc#1267612).
- Update
  patches.kernel.org/7.0.7-181-dm-fix-a-buffer-overflow-in-ioctl-processing.patch
  (bsc#1012628 CVE-2026-46294 bsc#1267939).
- Update
  patches.kernel.org/7.0.7-182-eventfs-Hold-eventfs_mutex-and-SRCU-when-remoun.patch
  (bsc#1012628 CVE-2026-46106 bsc#1267613).
- Update
  patches.kernel.org/7.0.7-186-dm-verity-fec-fix-reading-parity-bytes-split-ac.patch
  (bsc#1012628 CVE-2026-46130 bsc#1267629).
- Update
  patches.kernel.org/7.0.7-188-isofs-validate-Rock-Ridge-CE-continuation-exten.patch
  (bsc#1012628 CVE-2026-46303 bsc#1267984).
- Update
  patches.kernel.org/7.0.7-195-lib-scatterlist-fix-length-calculations-in-extr.patch
  (bsc#1012628 CVE-2026-46289 bsc#1267966).
- Update
  patches.kernel.org/7.0.7-197-libceph-Fix-slab-out-of-bounds-access-in-auth-m.patch
  (bsc#1012628 CVE-2026-46119 bsc#1267628).
- Update
  patches.kernel.org/7.0.7-200-nvmet-tcp-fix-race-between-ICReq-handling-and-q.patch
  (bsc#1012628 CVE-2026-46135 bsc#1267373).
- Update
  patches.kernel.org/7.0.7-201-nvmet-avoid-recursive-nvmet-wq-flush-in-nvmet_c.patch
  (bsc#1012628 CVE-2026-46304 bsc#1267985).
- Update
  patches.kernel.org/7.0.7-203-pmdomain-core-Fix-detach-procedure-for-virtual-.patch
  (bsc#1012628 CVE-2026-46292 bsc#1267943).
- Update
  patches.kernel.org/7.0.7-205-RDMA-hns-Fix-unlocked-call-to-hns_roce_qp_remov.patch
  (bsc#1012628 CVE-2026-46112 bsc#1267582).
- Update
  patches.kernel.org/7.0.7-209-scsi-mpt3sas-Limit-NVMe-request-size-to-2-MiB.patch
  (bsc#1012628 CVE-2026-46105 bsc#1267372).
- Update
  patches.kernel.org/7.0.7-210-smb-client-fix-out-of-bounds-read-in-smb2_compo.patch
  (bsc#1012628 CVE-2026-46155 bsc#1267720).
- Update
  patches.kernel.org/7.0.7-212-smb-client-use-kzalloc-to-zero-initialize-secur.patch
  (bsc#1012628 CVE-2026-46139 bsc#1267681).
- Update
  patches.kernel.org/7.0.7-214-KVM-x86-check-for-nEPT-nNPT-in-slow-flush-hyper.patch
  (bsc#1012628 CVE-2026-46131 bsc#1267636).
- Update
  patches.kernel.org/7.0.7-215-KVM-x86-Do-IRR-scan-in-__kvm_apic_update_irr-ev.patch
  (bsc#1012628 CVE-2026-46295 bsc#1267931).
- Update
  patches.kernel.org/7.0.7-233-RDMA-mana-Fix-mana_destroy_wq_obj-cleanup-in-ma.patch
  (bsc#1012628 CVE-2026-46126 bsc#1267584).
- Update
  patches.kernel.org/7.0.7-234-RDMA-mana-Remove-user-triggerable-WARN_ON-in-ma.patch
  (bsc#1012628 CVE-2026-46117 bsc#1267375).
- Update
  patches.kernel.org/7.0.7-235-RDMA-mana-Validate-rx_hash_key_len.patch
  (bsc#1012628 CVE-2026-46145 bsc#1267715).
- Update
  patches.kernel.org/7.0.7-237-RDMA-mlx4-Fix-resource-leak-on-error-in-mlx4_ib.patch
  (bsc#1012628 CVE-2026-46178 bsc#1267493).
- Update
  patches.kernel.org/7.0.7-260-mptcp-pm-ADD_ADDR-rtx-fix-potential-data-race.patch
  (bsc#1012628 CVE-2026-46137 bsc#1267570).
- Update
  patches.kernel.org/7.0.7-262-mptcp-pm-ADD_ADDR-rtx-free-sk-if-last.patch
  (bsc#1012628 CVE-2026-46170 bsc#1267714).
- Update
  patches.kernel.org/7.0.7-271-f2fs-fix-node_cnt-race-between-extent-node-dest.patch
  (bsc#1012628 CVE-2026-46194 bsc#1267569).
- Update
  patches.kernel.org/7.0.7-281-KVM-arm64-Fix-pin-leak-and-publication-ordering.patch
  (bsc#1012628 CVE-2026-46147 bsc#1267689).
- Update
  patches.kernel.org/7.0.7-282-LoongArch-Fix-potential-ADE-in-loongson_gpu_fix.patch
  (bsc#1012628 CVE-2026-46156 bsc#1267385).
- Update
  patches.kernel.org/7.0.7-296-hfsplus-fix-uninit-value-by-validating-catalog-.patch
  (bsc#1012628 CVE-2026-46169 bsc#1267713).
- Update
  patches.kernel.org/7.0.7-297-hfsplus-fix-held-lock-freed-on-hfsplus_fill_sup.patch
  (bsc#1012628 CVE-2026-46299 bsc#1267920).
- Update
  patches.kernel.org/7.0.7-299-8021q-delete-cleared-egress-QoS-mappings.patch
  (bsc#1012628 CVE-2026-46153 bsc#1267574).
- Update
  patches.kernel.org/7.0.7-301-crypto-caam-guard-HMAC-key-hex-dumps-in-hash_di.patch
  (bsc#1012628 CVE-2026-46291 bsc#1267937).
- Update
  patches.kernel.org/7.0.7-305-x86-CPU-AMD-Prevent-improper-isolation-of-share.patch
  (bsc#1012628 CVE-2026-46174 bsc#1267384).
- Update
  patches.kernel.org/7.0.9-001-HID-playstation-Clamp-num_touch_reports.patch
  (bsc#1012628 CVE-2026-46232 bsc#1267669).
- Update
  patches.kernel.org/7.0.9-002-HID-appletb-kbd-fix-UAF-in-inactivity-timer-cle.patch
  (bsc#1012628 CVE-2026-46213 bsc#1267665).
- Update
  patches.kernel.org/7.0.9-014-media-renesas-vsp1-Fix-NULL-pointer-deref-on-mo.patch
  (bsc#1012628 CVE-2026-46310 bsc#1267934).
- Update
  patches.kernel.org/7.0.9-035-media-i2c-ov5647-Fix-runtime-PM-refcount-leak-i.patch
  (bsc#1012628 CVE-2026-46239 bsc#1267530).
- Update
  patches.kernel.org/7.0.9-039-media-videobuf2-Set-vma_flags-in-vb2_dma_sg_mma.patch
  (bsc#1012628 CVE-2026-46312 bsc#1267990).
- Update
  patches.kernel.org/7.0.9-040-media-rockchip-rkcif-Add-missing-MUST_CONNECT-f.patch
  (bsc#1012628 CVE-2026-46222 bsc#1267695).
- Update
  patches.kernel.org/7.0.9-042-media-intel-ipu6-fix-error-pointer-dereference.patch
  (bsc#1012628 CVE-2026-46313 bsc#1267991).
- Update
  patches.kernel.org/7.0.9-053-media-saa7164-add-ioremap-return-checks-and-cle.patch
  (bsc#1012628 CVE-2026-46235 bsc#1267702).
- Update
  patches.kernel.org/7.0.9-076-media-iris-fix-use-after-free-of-fmt_src-during.patch
  (bsc#1012628 CVE-2026-46210 bsc#1267692).
- Update
  patches.kernel.org/7.0.9-090-spi-ch341-fix-devres-lifetime.patch
  (bsc#1012628 CVE-2026-46228 bsc#1267705).
- Update
  patches.kernel.org/7.0.9-092-spi-fsl-fix-controller-deregistration.patch
  (bsc#1012628 CVE-2026-46226 bsc#1267673).
- Update
  patches.kernel.org/7.0.9-099-spi-rspi-fix-controller-deregistration.patch
  (bsc#1012628 CVE-2026-46225 bsc#1267627).
- Update
  patches.kernel.org/7.0.9-112-spi-mpc52xx-fix-use-after-free-on-unbind.patch
  (bsc#1012628 CVE-2026-46219 bsc#1267667).
- Update
  patches.kernel.org/7.0.9-120-spi-cadence-quadspi-fix-unclocked-access-on-unb.patch
  (bsc#1012628 CVE-2026-46203 bsc#1267620).
- Update
  patches.kernel.org/7.0.9-121-drm-msm-gem-fix-error-handling-in-msm_ioctl_gem.patch
  (bsc#1012628 CVE-2026-46211 bsc#1267380).
- Update
  patches.kernel.org/7.0.9-125-drm-v3d-Reject-empty-multisync-extension-to-pre.patch
  (bsc#1012628 CVE-2026-46314 bsc#1267992).
- Update
  patches.kernel.org/7.0.9-127-drm-amdkfd-Clear-VRAM-on-allocation-to-prevent-.patch
  (bsc#1012628 CVE-2026-46229 bsc#1267567).
- Update
  patches.kernel.org/7.0.9-135-drm-amdgpu-Add-bounds-checking-to-ib_-get-set-_.patch
  (bsc#1012628 CVE-2026-46218 bsc#1267632).
- Update
  patches.kernel.org/7.0.9-136-drm-amdgpu-vcn4-Prevent-OOB-reads-when-parsing-.patch
  (bsc#1012628 CVE-2026-46204 bsc#1267661).
- Update
  patches.kernel.org/7.0.9-138-drm-amdgpu-vcn4-Prevent-OOB-reads-when-parsing-.patch
  (bsc#1012628 CVE-2026-46199 bsc#1267638).
- Update
  patches.kernel.org/7.0.9-139-drm-amdgpu-vcn3-Prevent-OOB-reads-when-parsing-.patch
  (bsc#1012628 CVE-2026-46230 bsc#1267623).
- Update
  patches.kernel.org/7.0.9-141-drm-gem-Fix-inconsistent-plane-dimension-calcul.patch
  (bsc#1012628 CVE-2026-46209 bsc#1267663).
- Update
  patches.kernel.org/7.0.9-143-drm-amdkfd-validate-SVM-ioctl-nattr-against-buf.patch
  (bsc#1012628 CVE-2026-46197 bsc#1267381).
- Update
  patches.kernel.org/7.0.9-150-drm-xe-uapi-Reject-coh_none-PAT-index-for-CPU-c.patch
  (bsc#1012628 CVE-2026-46309 bsc#1267989).
- Update
  patches.kernel.org/7.0.9-155-drm-amdgpu-userq-fix-access-to-stale-wptr-mappi.patch
  (bsc#1012628 CVE-2026-46311 bsc#1267949).
- Update
  patches.kernel.org/7.0.9-162-drm-amdgpu-sdma4-replace-BUG_ON-with-WARN_ON-in.patch
  (bsc#1012628 CVE-2026-46220 bsc#1267704).
- Update
  patches.kernel.org/7.0.9-169-sctp-revalidate-list-cursor-after-sctp_sendmsg_.patch
  (bsc#1012628 CVE-2026-46227 bsc#1267697).
- Update
  patches.kernel.org/7.0.9-175-batman-adv-bla-prevent-use-after-free-when-dele.patch
  (bsc#1012628 CVE-2026-46212 bsc#1267693).
- Update
  patches.kernel.org/7.0.9-176-batman-adv-bla-only-purge-non-released-claims.patch
  (bsc#1012628 CVE-2026-46233 bsc#1267701).
- Update
  patches.kernel.org/7.0.9-177-batman-adv-bla-put-backbone-reference-on-failed.patch
  (bsc#1012628 CVE-2026-46231 bsc#1267565).
- Update
  patches.kernel.org/7.0.9-184-EDAC-versalnet-Fix-device-name-memory-leak.patch
  (bsc#1012628 CVE-2026-46221 bsc#1267523).
- Update
  patches.kernel.org/7.0.9-188-cgroup-Defer-css-percpu_ref-kill-on-rmdir-until.patch
  (bsc#1012628 CVE-2026-46223 bsc#1267699).
- Update
  patches.kernel.org/7.0.9-194-vsock-virtio-fix-empty-payload-in-tap-skb-for-n.patch
  (bsc#1012628 CVE-2026-46207 bsc#1267691).
- Update
  patches.kernel.org/7.0.9-195-vsock-virtio-fix-accept-queue-count-leak-on-tra.patch
  (bsc#1012628 CVE-2026-46214 bsc#1267717).
- Update
  patches.kernel.org/7.0.9-197-drm-amdgpu-vcn4-Avoid-overflow-on-msg-bound-che.patch
  (bsc#1012628 CVE-2026-46217 bsc#1267655).
  suse-add-cves
- commit 8beab0b</changelog>
  <changelog author="jslaby@suse.cz" date="1781092802">- Linux 7.0.12 (bsc#1012628).
- Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB
  buffer size (bsc#1012628).
- ACPI: button: Fix ACPI GPE handler leak during removal
  (bsc#1012628).
- ACPI: button: Enable wakeup GPEs for ACPI buttons at probe time
  (bsc#1012628).
- xfrm: move policy_bydst RCU sync from per-netns .exit to
  .pre_exit (bsc#1012628).
- net/sched: sch_sfb: Replace direct dequeue call with peek and
  qdisc_dequeue_peeked (bsc#1012628).
- nfc: llcp: Fix use-after-free in llcp_sock_release()
  (bsc#1012628).
- nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()
  (bsc#1012628).
- xfrm: Check for underflow in xfrm_state_mtu (bsc#1012628).
- nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems
  (bsc#1012628).
- tools/bootconfig: Fix buf leaks in apply_xbc (bsc#1012628).
- HID: remove duplicate hid_warn_ratelimited definition
  (bsc#1012628).
- kunit: fix use-after-free in debugfs when using kunit.filter
  (bsc#1012628).
- accel/rocket: fix UAF via dangling GEM handle in create_bo
  (bsc#1012628).
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable
  (bsc#1012628).
- netfilter: xt_cpu: prefer raw_smp_processor_id (bsc#1012628).
- netfilter: ebtables: fix OOB read in compat_mtw_from_user
  (bsc#1012628).
- netfilter: nf_tables: fix dst corruption in same register
  operation (bsc#1012628).
- tun: free page on short-frame rejection in tun_xdp_one()
  (bsc#1012628).
- tap: free page on error paths in tap_get_user_xdp()
  (bsc#1012628).
- tun: free page on build_skb failure in tun_xdp_one()
  (bsc#1012628).
- vsock: keep poll shutdown state consistent (bsc#1012628).
- net: netlink: fix sending unassigned nsid after assigned one
  (bsc#1012628).
- net: netlink: don't set nsid on local notifications
  (bsc#1012628).
- net/smc: Do not re-initialize smc hashtables (bsc#1012628).
- net/iucv: fix locking in .getsockopt (bsc#1012628).
- scsi: core: Run queues for all non-SDEV_DEL devices from
  scsi_run_host_queues (bsc#1012628).
- scsi: scsi_debug: Add missing newline in
  scsi_debug_device_reset() (bsc#1012628).
- ipv4: free net-&gt;ipv4.sysctl_local_reserved_ports after
  unregister_net_sysctl_table() (bsc#1012628).
- ALSA: hda: cs35l56: Fix system name string leaks (bsc#1012628).
- ALSA: pcm: oss: Fix setup list UAF on proc write error
  (bsc#1012628).
- ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors
  (bsc#1012628).
- net/mlx5: HWS: Reject unsupported remove-header action
  (bsc#1012628).
- net: hsr: fix potential OOB access in supervision frame handling
  (bsc#1012628).
- accel/ivpu: prevent uninitialized data bug in debugfs
  (bsc#1012628).
- gpio: mxc: fix irq_high handling (bsc#1012628).
- drm/i915/aux: use polling when irqs are unavailable
  (bsc#1012628).
- net: Avoid checksumming unreadable skb tail on trim
  (bsc#1012628).
- ethtool: rss: avoid modifying the RSS context response
  (bsc#1012628).
- ethtool: rss: add missing errno on RSS context delete
  (bsc#1012628).
- ethtool: rss: fix falsely ignoring indir table updates
  (bsc#1012628).
- ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
  (bsc#1012628).
- ethtool: rss: fix hkey leak when indir_size is 0 (bsc#1012628).
- ethtool: rss: avoid device context leak on reply-build failure
  (bsc#1012628).
- ethtool: module: call ethnl_ops_complete() on module flash
  errors (bsc#1012628).
- ethtool: module: avoid leaking a netdev ref on module flash
  errors (bsc#1012628).
- ethtool: module: avoid racy updates to dev-&gt;ethtool bitfield
  (bsc#1012628).
- ethtool: module: check fw_flash_in_progress under rtnl_lock
  (bsc#1012628).
- ethtool: module: fix cleanup if socket used for flashing
  multiple devices (bsc#1012628).
- ethtool: cmis: require exact CDB reply length (bsc#1012628).
- ethtool: cmis: fix u16-to-u8 truncation of msleep_pre_rpl
  (bsc#1012628).
- ethtool: cmis: validate start_cmd_payload_size from module
  (bsc#1012628).
- ethtool: cmis: validate fw-&gt;size against start_cmd_payload_size
  (bsc#1012628).
- cxl/test: Update mock dev array before calling
  platform_device_add() (bsc#1012628).
- tunnels: load network headers after skb_cow() in
  iptunnel_pmtud_build_icmp[v6]() (bsc#1012628).
- vxlan: do not reuse cached ip_hdr() value after
  skb_tunnel_check_pmtu() (bsc#1012628).
- tunnels: do not assume transport header in
  iptunnel_pmtud_check_icmp() (bsc#1012628).
- ksmbd: fix FSCTL permission bypass by adding a permission
  check for FSCTL_SET_SPARSE (bsc#1012628).
- ASoC: codecs: simple-mux: Fix enum control bounds check
  (bsc#1012628).
- drm/xe: Restore IDLEDLY regiter on engine reset (bsc#1012628).
- Bluetooth: 6lowpan: check skb_clone() return value in
  send_mcast_pkt() (bsc#1012628).
- bonding: refuse to enslave CAN devices (bsc#1012628).
- bridge: Fix sleep in atomic context in netlink path
  (bsc#1012628).
- bridge: Fix sleep in atomic context in sysfs path (bsc#1012628).
- ethtool: coalesce: cap profile updates at
  NET_DIM_PARAMS_NUM_PROFILES (bsc#1012628).
- ethtool: tsconfig: fix reply error handling (bsc#1012628).
- ethtool: linkstate: fix unbalanced ethnl_ops_complete() on
  PHY lookup error (bsc#1012628).
- ethtool: pse-pd: fix missing ethnl_ops_complete() (bsc#1012628).
- ethtool: tsconfig: fix missing ethnl_ops_complete()
  (bsc#1012628).
- ethtool: tsinfo: fix uninitialized stats on the by-PHC path
  (bsc#1012628).
- ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on
  prepare failure (bsc#1012628).
- ethtool: strset: fix header attribute index in
  ethnl_req_get_phydev() (bsc#1012628).
- ethtool: eeprom: add missing ethnl_ops_begin() / _complete()
  during fallback (bsc#1012628).
- ethtool: eeprom: add more safeties to EEPROM Netlink fallback
  (bsc#1012628).
- ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()
  (bsc#1012628).
- net/sched: Revert "net/sched: Restrict conditions for adding
  duplicating netems to qdisc tree" (bsc#1012628).
- net/sched: fix packet loop on netem when duplicate is on
  (bsc#1012628).
- net: Introduce skb tc depth field to track packet loops
  (bsc#1012628).
- net/sched: Fix ethx:ingress -&gt; ethy:egress -&gt; ethx:ingress
  mirred loop (bsc#1012628).
- net/sched: act_mirred: Fix blockcast recursion bypass leading
  to stack overflow (bsc#1012628).
- net/sched: act_mirred: Fix return code in early mirred redirect
  error paths (bsc#1012628).
- net: hibmcge: disable Relaxed Ordering to fix RX packet
  corruption (bsc#1012628).
- net: hibmcge: move dma_rmb() after dma_sync_single_for_cpu()
  in RX path (bsc#1012628).
- net/handshake: Use spin_lock_bh for hn_lock (bsc#1012628).
- nvme-tcp: store negative errno in queue-&gt;tls_err (bsc#1012628).
- net/handshake: Pass negative errno through handshake_complete()
  (bsc#1012628).
- net/handshake: hand off the pinned file reference to accept_doit
  (bsc#1012628).
- net/handshake: Take a long-lived file reference at submit
  (bsc#1012628).
- net/handshake: Drain pending requests at net namespace exit
  (bsc#1012628).
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime
  (bsc#1012628).
- dpll: zl3073x: add die temperature reporting for supported chips
  (bsc#1012628).
- dpll: export __dpll_device_change_ntf() for use under dpll_lock
  (bsc#1012628).
- dpll: zl3073x: use __dpll_device_change_ntf() and remove
  change_work (bsc#1012628).
- Bluetooth: l2cap: clear chan-&gt;ident on ECRED reconfiguration
  success (bsc#1012628).
- Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp
  (bsc#1012628).
- Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device
  close (bsc#1012628).
- Bluetooth: hci_sync: Reset device counters in
  hci_dev_close_sync() (bsc#1012628).
- gpio: adnp: fix flow control regression caused by scoped_guard()
  (bsc#1012628).
- gpio: virtuser: Fix uninitialized data bug in
  gpio_virtuser_direction_do_write() (bsc#1012628).
- gpio: rockchip: convert bank-&gt;clk to devm_clk_get_enabled()
  (bsc#1012628).
- gpio: rockchip: teardown bugs and resource leaks (bsc#1012628).
- net: mana: Add NULL guards in teardown path to prevent panic
  on attach failure (bsc#1012628).
- net: mana: Skip redundant detach on already-detached port
  (bsc#1012628).
- sctp: fix race between sctp_wait_for_connect and peeloff
  (bsc#1012628).
- net: pcs: pcs-mtk-lynxi: fix bpi-r3 serdes configuration
  (bsc#1012628).
- vsock/virtio: bind uarg before filling zerocopy skb
  (bsc#1012628).
- ipv6: fix possible infinite loop in rt6_fill_node()
  (bsc#1012628).
- ipv6: fix possible infinite loop in fib6_select_path()
  (bsc#1012628).
- net: skbuff: fix pskb_carve leaking zcopy pages (bsc#1012628).
- Revert "ipv6: preserve insertion order for same-scope addresses"
  (bsc#1012628).
- Revert "x86/fpu: Refine and simplify the magic number check
  during signal return" (bsc#1012628).
- drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS
  DPCD register (bsc#1012628).
- drm/i915/psr: Read Intel DPCD workaround register (bsc#1012628).
- drm/i915/psr: Apply Intel DPCD workaround when SDP on prior
  line used (bsc#1012628).
- iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer
  (bsc#1012628).
- iio: imu: adis16550: fix stack leak in trigger handler
  (bsc#1012628).
- iio: pressure: bmp280: fix stack leak in bmp580 trigger handler
  (bsc#1012628).
- usb: typec: ucsi: ccg: reject firmware images without a ':'
  record header (bsc#1012628).
- usb: typec: tcpm: validate VDO count in Discover Identity ACK
  handlers (bsc#1012628).
- usb: typec: tcpm: bound altmode_desc[] per iteration in
  svdm_consume_modes() (bsc#1012628).
- usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without
  a payload VDO (bsc#1012628).
- usb: typec: altmodes/displayport: validate count before reading
  Status Update VDO (bsc#1012628).
- usb: typec: wcove: don't write past struct pd_message in
  wcove_read_rx_buffer() (bsc#1012628).
- usb: typec: tcpm/tcpci_maxim: validate header NDO against
  RX_BYTE_CNT (bsc#1012628).
- usb: typec: ucsi: validate connector number in
  ucsi_connector_change() (bsc#1012628).
- USB: serial: safe_serial: fix memory corruption with small
  endpoint (bsc#1012628).
- media: rc: igorplugusb: fix control request setup packet
  (bsc#1012628).
- Input: ims-pcu - fix usb_free_coherent() size in
  ims_pcu_buffers_free() (bsc#1012628).
- USB: serial: cypress_m8: fix memory corruption with small
  endpoint (bsc#1012628).
- HID: quirks: Add ALWAYS_POLL quirk for SIGMACHIP USB mouse
  (bsc#1012628).
- Bluetooth: btusb: Allow firmware re-download when version
  matches (bsc#1012628).
- mm/vmalloc: do not trigger BUG() on BH disabled context
  (bsc#1012628).
- hpfs: fix a crash if hpfs_map_dnode_bitmap fails (bsc#1012628).
- mm/damon/sysfs-schemes: delete tried region in regions_rmdirs()
  (bsc#1012628).
- ipc: limit next_id allocation to the valid ID range
  (bsc#1012628).
- mm: memcontrol: propagate NMI slab stats to memcg vmstats
  (bsc#1012628).
- mm/migrate_device: fix pgtable leak in
  migrate_vma_insert_huge_pmd_page (bsc#1012628).
- memfd: deny writeable mappings when implying SEAL_WRITE
  (bsc#1012628).
- zram: fix use-after-free in zram_writeback_endio (bsc#1012628).
- mm/rmap: initialize nr_pages to 1 at loop start in
  try_to_unmap_one (bsc#1012628).
- auxdisplay: line-display: fix OOB read on zero-length
  message_store() (bsc#1012628).
- smb: client: fix uninitialized variable in smb2_writev_callback
  (bsc#1012628).
- Bluetooth: L2CAP: use chan timer to close channels in
  cleanup_listen() (bsc#1012628).
- Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout()
  on !conn (bsc#1012628).
- Bluetooth: HIDP: fix missing length checks in
  hidp_input_report() (bsc#1012628).
- Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1012628).
- Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock
  (bsc#1012628).
- Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()
  (bsc#1012628).
- Bluetooth: hci_qca: Use 100 ms SSR delay for rampatch and NVM
  loading (bsc#1012628).
- Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync
  (bsc#1012628).
- Input: xpad - fix out-of-bounds access for Share button
  (bsc#1012628).
- parport: Fix race between port and client registration
  (bsc#1012628).
- rust_binder: Avoid holding lock when dropping delivered_death
  (bsc#1012628).
- rust_binder: avoid calling pending_oneway_finished() on
  TF_UPDATE_TXN (bsc#1012628).
- USB: cdc-acm: Fix bit overlap and move quirk definitions to
  header (bsc#1012628).
- KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor
  (bsc#1012628).
- KVM: arm64: PMU: Preserve AArch32 counter low bits
  (bsc#1012628).
- KVM: SVM: Flush the current TLB when transitioning from xAVIC =&gt;
  x2AVIC (bsc#1012628).
- KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use
  (bsc#1012628).
- KVM: SEV: Ignore Port I/O requests of length '0' (bsc#1012628).
- KVM: SEV: Use the size of the PSC header as the minimum size
  for PSC requests (bsc#1012628).
- KVM: SEV: WARN if KVM attempts to setup scratch area with
  min_len==0 (bsc#1012628).
- KVM: SEV: Compute the correct max length of the in-GHCB scratch
  area (bsc#1012628).
- KVM: SEV: Check PSC request indices against the actual size
  of the buffer (bsc#1012628).
- KVM: SEV: Use READ_ONCE() when reading entries/indices from
  PSC buffer (bsc#1012628).
- KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc()
  (bsc#1012628).
- gpio: shared: undo the vote of the proxy on GPIO free
  (bsc#1012628).
- gpio: shared: fix deadlock on shared proxy's parent removal
  (bsc#1012628).
- gpio: shared: fix lockdep false positive by removing unneeded
  lock (bsc#1012628).
- Disable -Wattribute-alias for clang-23 and newer (bsc#1012628).
- iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for
  dual mux (bsc#1012628).
- iio: adc: npcm: fix unbalanced clk_disable_unprepare()
  (bsc#1012628).
- iio: dac: ad3530r: Fix AD3531/AD3531R powerdown mode strings
  (bsc#1012628).
- iio: dac: max5821: fix return value check in powerdown sync
  (bsc#1012628).
- iio: dac: ad5686: fix ref bit initialization for single-channel
  parts (bsc#1012628).
- iio: dac: ad5686: fix input raw value check (bsc#1012628).
- iio: dac: ad5686: acquire lock when doing powerdown control
  (bsc#1012628).
- iio: dac: ad5686: fix powerdown control on dual-channel devices
  (bsc#1012628).
- iio: adc: mt6359: fix unchecked return value in mt6358_read_imp
  (bsc#1012628).
- iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw
  (bsc#1012628).
- iio: adc: ad4695: Fix call ordering in offload buffer postenable
  (bsc#1012628).
- iio: adc: nxp-sar-adc: fix division by zero in write_raw
  (bsc#1012628).
- iio: adc: nxp-sar-adc: Avoid division by zero (bsc#1012628).
- iio: adc: nxp-sar-adc: zero-initialize dma_slave_config
  (bsc#1012628).
- iio: gyro: itg3200: fix i2c read into the wrong stack location
  (bsc#1012628).
- iio: gyro: adis16260: fix division by zero in write_raw
  (bsc#1012628).
- iio: ssp_sensors: cancel delayed work_refresh on remove
  (bsc#1012628).
- iio: temperature: tsys01: fix broken PROM checksum validation
  (bsc#1012628).
- iio: magnetometer: st_magn: fix default DRDY pin selection
  for LIS2MDL (bsc#1012628).
- iio: light: veml6070: Fix resource leak in probe error path
  (bsc#1012628).
- iio: Fix iio_multiply_value use in
  iio_read_channel_processed_scale (bsc#1012628).
- iio: chemical: mhz19b: reject oversized serial replies
  (bsc#1012628).
- iio: chemical: scd30: fix division by zero in write_raw
  (bsc#1012628).
- iio: light: cm3323: fix reg_conf not being initialized correctly
  (bsc#1012628).
- iio: buffer: hw-consumer: fix use-after-free in error path
  (bsc#1012628).
- iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf()
  (bsc#1012628).
- USB: serial: omninet: fix memory corruption with small endpoint
  (bsc#1012628).
- usb: cdns3: gadget: fix request skipping after clearing halt
  (bsc#1012628).
- usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy
  acquisition failure (bsc#1012628).
- usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call
  permanently leaks the runtime PM usage counter across
  bind/unbind cycles (bsc#1012628).
- usb: dwc2: Fix use after free in debug code (bsc#1012628).
- Input: elan_i2c - validate firmware size before use
  (bsc#1012628).
- i2c: davinci: fix division by zero on missing clock-frequency
  (bsc#1012628).
- x86/ftrace: Relocate %rip-relative percpu refs in dynamic
  trampolines (bsc#1012628).
- wireguard: send: append trailer after expanding head
  (bsc#1012628).
- bpf: sockmap: fix tail fragment offset in bpf_msg_push_data
  (bsc#1012628).
- macsec: fix replay protection at XPN lower-PN wrap
  (bsc#1012628).
- ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()
  (bsc#1012628).
- ASoC: qcom: q6asm-dai: fix error handling in prepare and
  set_params (bsc#1012628).
- octeontx2-af: validate body pcifunc in
  rvu_mbox_handler_rep_event_notify (bsc#1012628).
- ipv6: exthdrs: refresh nh after handling HAO option
  (bsc#1012628).
- ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate()
  (bsc#1012628).
- ipv6: validate extension header length before copying to cmsg
  (bsc#1012628).
- xfrm: input: hold netns during deferred transport reinjection
  (bsc#1012628).
- l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname
  (bsc#1012628).
- ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1012628).
- net: skbuff: fix missing zerocopy reference in pskb_carve
  helpers (bsc#1012628).
- spi: spi-mem: avoid mutating op template in
  spi_mem_supports_op() (bsc#1012628).
- HID: wacom: Fix OOB write in wacom_hid_set_device_mode()
  (bsc#1012628).
- iommu, debugobjects: avoid gcc-16.1 section mismatch warnings
  (bsc#1012628).
- nfc: hci: fix out-of-bounds read in HCP header parsing
  (bsc#1012628).
- xfrm: route MIGRATE notifications to caller's netns
  (bsc#1012628).
- xfrm: ipcomp: Free destination pages on acomp errors
  (bsc#1012628).
- xfrm: ah: use skb_to_full_sk in async output callbacks
  (bsc#1012628).
- ALSA: scarlett2: Fix 2i2 Gen 4 direct monitor gain on firmware
  2417 (bsc#1012628).
- ALSA: firewire-motu: Protect register DSP event queue positions
  (bsc#1012628).
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq
  RST without direction check (bsc#1012628).
- ASoC: qcom: q6asm-dai: close stream only when running
  (bsc#1012628).
- ASoC: qcom: q6asm-dai: do not set stream state in event and
  trigger callbacks (bsc#1012628).
- xfrm: esp: restore combined single-frag length gate
  (bsc#1012628).
- ALSA: hda/realtek: Fix speaker output on ASUS ROG Strix G615LP
  (bsc#1012628).
- xfrm: iptfs: reset runtime state when cloning SAs (bsc#1012628).
- dma-buf: fix UAF in dma_buf_fd() tracepoint (bsc#1012628).
- Input: xpad - add "Nova 2 Lite" from GameSir (bsc#1012628).
- Input: xpad - add support for ASUS ROG RAIKIRI II (bsc#1012628).
- ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk
  loops (bsc#1012628).
- misc: rp1: Send IACK on IRQ activate to fix kdump/kexec
  (bsc#1012628).
- Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem
  (bsc#1012628).
- Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad
  E490 (bsc#1012628).
- dt-bindings: usb: Fix EIC7700 USB reset's issue (bsc#1012628).
- comedi: comedi_test: fix check for valid scan_begin_src in
  waveform_ai_cmdtest() (bsc#1012628).
- comedi: comedi_test: Fix limiting of convert_arg in
  waveform_ai_cmdtest() (bsc#1012628).
- counter: Fix refcount leak in counter_alloc() error path
  (bsc#1012628).
- tty: serial: pch_uart: add check for dma_alloc_coherent()
  (bsc#1012628).
- tty: serial: samsung: Remove redundant port lock acquisition
  in rx helpers (bsc#1012628).
- uio: uio_pci_generic_sva: fix double free of devm_kzalloc()
  memory (bsc#1012628).
- usb: chipidea: core: convert ci_role_switch to local variable
  (bsc#1012628).
- usb: core: Fix up Interrupt IN endpoints with bogus
  wBytesPerInterval (bsc#1012628).
- usb: dwc3: xilinx: fix error handling in zynqmp init error paths
  (bsc#1012628).
- usb: musb: omap2430: Fix use-after-free in omap2430_probe()
  (bsc#1012628).
- USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2
  hub controllers (bsc#1012628).
- usb: storage: Add quirks for PNY Elite Portable SSD
  (bsc#1012628).
- usbip: vudc: Fix use after free bug in vudc_remove due to race
  condition (bsc#1012628).
- usb: usbtmc: check URB actual_length for interrupt-IN
  notifications (bsc#1012628).
- usb: usbtmc: reject interrupt endpoints with small
  wMaxPacketSize (bsc#1012628).
- usb: typec: tipd: Fix error code in tps6598x_probe()
  (bsc#1012628).
- usb: typec: tcpm: improve handling of DISCOVER_MODES failures
  (bsc#1012628).
- usb: typec: ucsi: Check if power role change actually happened
  before handling (bsc#1012628).
- usb: typec: ucsi: Don't update power_supply on power role
  change if not connected (bsc#1012628).
- USB: serial: option: add MeiG SRM813Q (bsc#1012628).
- USB: serial: option: add missing RSVD(5) flag for Rolling
  RW135R-GL (bsc#1012628).
- USB: serial: belkin_sa: validate interrupt status length
  (bsc#1012628).
- USB: serial: cypress_m8: validate interrupt packet headers
  (bsc#1012628).
- USB: serial: digi_acceleport: fix memory corruption with small
  endpoints (bsc#1012628).
- USB: serial: keyspan: fix missing indat transfer sanity check
  (bsc#1012628).
- USB: serial: mxuport: fix memory corruption with small endpoint
  (bsc#1012628).
- USB: serial: mct_u232: fix memory corruption with small endpoint
  (bsc#1012628).
- USB: serial: mct_u232: fix missing interrupt-in transfer sanity
  check (bsc#1012628).
- usb: gadget: uvc: hold opts-&gt;lock across XU walks in
  uvc_function_bind (bsc#1012628).
- usb: gadget: net2280: Fix double free in probe error path
  (bsc#1012628).
- usb: gadget: f_hid: fix device reference leak in hidg_alloc()
  (bsc#1012628).
- usb: gadget: composite: fix integer underflow in WebUSB GET_URL
  handling (bsc#1012628).
- usb: gadget: dummy_hcd: Reject hub port requests for
  non-existent ports (bsc#1012628).
- usb: gadget: f_fs: copy only received bytes on short ep0 read
  (bsc#1012628).
- usb: gadget: f_fs: serialize DMABUF cancel against request
  completion (bsc#1012628).
- thunderbolt: property: Reject u32 wrap in
  tb_property_entry_valid() (bsc#1012628).
- thunderbolt: property: Reject dir_len &lt; 4 to prevent size_t
  underflow (bsc#1012628).
- thunderbolt: property: Cap recursion depth in
  __tb_property_parse_dir() (bsc#1012628).
- scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL
  walker (bsc#1012628).
- scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32
  (bsc#1012628).
- scsi: target: iscsi: Fix CRC overread and double-free in
  iscsit_handle_text_cmd() (bsc#1012628).
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends
  to rsp_buf (bsc#1012628).
- scsi: target: iscsi: Validate CHAP_R length before base64 decode
  (bsc#1012628).
- drm/hyperv: validate resolution_count and fix WIN8 fallback
  (bsc#1012628).
- drm/hyperv: validate VMBus packet size in receive callback
  (bsc#1012628).
- drm/gem: fix race between change_handle and handle_delete
  (bsc#1012628).
- drm/i915/color: Fix HDR pre-CSC LUT programming loop
  (bsc#1012628).
- drm/i915/psr: Block DC states on vblank enable when Panel
  Replay supported (bsc#1012628).
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank
  enable (bsc#1012628).
- drm/i915: Fix potential UAF in TTM object purge (bsc#1012628).
- drm/amd/pm/si: Disregard vblank time when no displays are
  connected (bsc#1012628).
- serial: altera_jtaguart: handle uart_add_one_port() failures
  (bsc#1012628).
- serial: qcom-geni: fix UART_RX_PAR_EN bit position
  (bsc#1012628).
- serial: qcom_geni: fix kfifo underflow when flush precedes
  DMA completion IRQ (bsc#1012628).
- serial: sh-sci: fix memory region release in error path
  (bsc#1012628).
- serial: zs: Fix swapped RI/DSR modem line transition counting
  (bsc#1012628).
- serial: fsl_lpuart: fix rx buffer and DMA map leaks in
  start_rx_dma (bsc#1012628).
- drm/amdkfd: fix NULL pointer bug in svm_range_set_attr
  (bsc#1012628).
- drm/amdkfd: fix a vulnerability of integer overflow in kfd
  debugger (bsc#1012628).
- drm/amdkfd: Check for pdd drm file first in CRIU restore path
  (bsc#1012628).
- drm/amdgpu: fix lock leak on ENOMEM in
  AMDGPU_GEM_OP_GET_MAPPING_INFO (bsc#1012628).
- drm/amdgpu: fix calling VM invalidation in
  amdgpu_hmm_invalidate_gfx (bsc#1012628).
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1012628).
- drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO
  (bsc#1012628).
- serial: dz: Fix bootconsole message clobbering at chip reset
  (bsc#1012628).
- serial: dz: Fix bootconsole handover lockup (bsc#1012628).
- serial: dz: Convert to use a platform device (bsc#1012628).
- serial: zs: Fix bootconsole handover lockup (bsc#1012628).
- serial: zs: Switch to using channel reset (bsc#1012628).
- serial: zs: Convert to use a platform device (bsc#1012628).
- serial: core: introduce
  guard(uart_port_lock_check_sysrq_irqsave) (bsc#1012628).
- serial: 8250: dispatch SysRq character in
  serial8250_handle_irq() (bsc#1012628).
- serial: 8250_dw: dispatch SysRq character in dw8250_handle_irq()
  (bsc#1012628).
- Revert "mm/hugetlbfs: update hugetlbfs to use mmap_prepare"
  (bsc#1012628).
- platform/x86/intel/vsec: Refactor base_addr handling
  (bsc#1012628).
- platform/x86/intel/vsec: Make driver_data info const
  (bsc#1012628).
- platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe
  error recovery (bsc#1012628).
- rxrpc: Fix RESPONSE packet verification to extract skb to a
  linear buffer (bsc#1012628).
- ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360
  15-fh0xxx (bsc#1012628).
- ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP 16 Piston
  OmniBook X (bsc#1012628).
- arm64: tlb: Flush walk cache when unsharing PMD tables
  (bsc#1012628).
- i2c: tegra: make tegra_i2c_mutex_unlock() return void
  (bsc#1012628).
- hwmon: (pmbus) Add support for guarded PMBus lock (bsc#1012628).
- hwmon: (pmbus/adm1266) serialize sequencer_state debugfs read
  with pmbus_lock (bsc#1012628).
- hwmon: (pmbus/adm1266) serialize GPIO PMBus accesses with
  pmbus_lock (bsc#1012628).
- net: phy: micrel: fix LAN8814 QSGMII soft reset (bsc#1012628).
- xhci: tegra: Fix ghost USB device on dual-role port unplug
  (bsc#1012628).
- mailbox: Fix NULL message support in mbox_send_message()
  (bsc#1012628).
- usb: core: Fix SuperSpeed root hub wMaxPacketSize (bsc#1012628).
- tools: ynl: add scope qualifier for definitions (bsc#1012628).
- KVM: arm64: vgic-its: Drop the translation cache reference
  only for the erased entry (bsc#1012628).
- KVM: arm64: Reassign nested_mmus array behind mmu_lock
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.0.12-006-bcache-fix-uninitialized-closure-object.patch.
- Rename to
  patches.kernel.org/7.0.12-055-blk-mq-reinsert-cached-request-to-the-list.patch.
- commit 32bf651</changelog>
  <changelog author="jslaby@suse.cz" date="1781179200">- Update config files. Disable CAIF (bsc#1266716 CVE-2026-45866).
  The whole code is removed in 7.1 anyway by 6d5431555de0 ("caif: remove
  CAIF NETWORK LAYER"). Let's be proactive as there are holes.
- commit 3512c44</changelog>
  <changelog author="mkubecek@suse.cz" date="1781438400">- config: update and reenable arm64 configs
- option values copied from x86_64, i386 and riscv64 except
  - ARM64_ERRATUM_4193714=y
  - ARM64_LSUI=n
  - STM32_DBG_BUS=n
  - DWMAC_NUVOTON=m
  - PINCTRL_ELIZA=m
  - PINCTRL_HAWI=m
  - PINCTRL_IPQ5210=m
  - PINCTRL_MILOS_LPASS_LPI=m
  - PINCTRL_SDM670_LPASS_LPI=m
  - PINCTRL_RTD1625=m
  - CHARGER_MAX77759=m
  - MACSMC_POWER=m
  - SND_SOC_TEGRA_WM8962=n
  - SND_SOC_TEGRA_CPCAP=n
  - USB_DWC3_IMX=m
  - MMC_SDHCI_BST=m
  - CLK_ELIZA_DISPCC=m
  - CLK_ELIZA_TCSRCC=m
  - CLK_GLYMUR_GPUCC=m
  - CLK_GLYMUR_VIDEOCC=m
  - CLK_NORD_GCC=m
  - IPQ_GCC_5210=m
  - CLK_NORD_TCSRCC=m
  - SM_GPUCC_8750=m
  - ARCH_R9A08G046=y
  - ARCH_TEGRA_238_SOC=y
  - RESET_SKY1=y
  - NVIDIA_TEGRA410_CMEM_LATENCY_PMU=m
  - NVIDIA_TEGRA410_C2C_PMU=m
  - INTERCONNECT_QCOM_ELIZA=m
  - NTFS_DEBUG=n
  - NTFS_FS_POSIX_ACL=y
- commit 4326118</changelog>
  <changelog author="mkubecek@suse.cz" date="1781438401">- config: update and reenable armv7hl configs
- option values copied from arm64 except
  - DRM_TILCDC_PANEL_LEGACY=y
  - CLK_RV1103B=y
- commit 8a5016d</changelog>
  <changelog author="mkubecek@suse.cz" date="1781438402">- config: update and reenable armv7hl configs
- option values copied from armv7hl
- commit cce93c7</changelog>
  <changelog author="mkubecek@suse.cz" date="1781438403">- update to 7.1 final
- refresh configs
- commit 957a9a8</changelog>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix uninitialised pointer passed to
  audit_log_untrustedstring() (bsc#1259668).
  (cherry picked from commit 65d5a585a9fea5f40a1da0e20217aa062f95b44a)
- apparmor: don't audit files pointing to aa_null.dentry
  (bsc#1259668).
  (cherry picked from commit 43454f55637bff80a9bbe035dd7a8c52cb494e83)
- apparmor: fix uninitialised pointer passed to
  audit_log_untrustedstring() (bsc#1259668).
- apparmor: don't audit files pointing to aa_null.dentry
  (bsc#1259668).
- commit d8bfaae</changelog>
  <changelog author="ddiss@suse.de" date="1781524801">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524802">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524804">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
</package>
<package pkgid="1ba87e20248ac2fd67af0effc878206804a7d2e1c977e0fbd85b1dd67f175060" name="kernel-syms" arch="src">
  <version epoch="0" ver="7.1.0" rel="2.1"/>
  <changelog author="rgoldwyn@suse.com" date="1780488000">- ima: return error early if file xattr cannot be changed (bsc#1261041).
  (cherry picked from commit 5d98aa3da261a44f676d60ae2e11bfbf8f691928)
- ima: return error early if file xattr cannot be changed (bsc#1261041).
- commit c8ca8cf</changelog>
  <changelog author="tiwai@suse.de" date="1780488001">- rpm: Add BuildRequires for Rust enablement (bsc#1258538)
  Update mkspec and template to generate the spec files with
  BuildRequires of Rust-related packages when ENABLE_RUST=Yes is set in
  rpm/config.sh.
- commit d0f276f</changelog>
  <changelog author="tiwai@suse.de" date="1780488002">- rpm/check-for-config-changes: ignore Rust-related configs (bsc#1258538)
  Those configs may be dynamically changed at the build time
- commit 5251980</changelog>
  <changelog author="tiwai@suse.de" date="1780488003">- rpm/mkspec: Conditionally set Rust BuildReqs (bsc#1258538)
  This is a further optimization of kernel packaging rust-enablement.
  Add the check of CONFIG_RUST at creating the spec for each kernel
  flavor, and set BuildRequires conditionally only for archs that have
  CONFIG_RUST.  This avoids the unnecessary dependency chains due to
  unused rust.
  The main knob ENABLE_RUST is still needed because otherwise we can't
  know whether to pass the dummy-tools or not at processing
  run_oldconfig.
- commit ccf4b93</changelog>
  <changelog author="msuchanek@suse.de" date="1780660800">- packaging: Add nvidia kernel description
- commit 5f2699f</changelog>
  <changelog author="mkubecek@suse.cz" date="1780920000">- update to 7.1-rc7
- commit f7dda10</changelog>
  <changelog author="jslaby@suse.cz" date="1781006400">- i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl
  (git-fixes).
- commit e3cc0a5</changelog>
  <changelog author="jslaby@suse.cz" date="1781092800">- drm/gem: Try to fix change_handle ioctl, attempt 4 (git-fixes).
- commit 41887ca</changelog>
  <changelog author="jslaby@suse.cz" date="1781092801">- Update
  patches.kernel.org/7.0.10-0188-net-sched-act_ct-Only-release-RCU-read-lock-a.patch
  (bsc#1012628 CVE-2026-46319).
- Update
  patches.kernel.org/7.0.10-0860-eventpoll-fix-ep_remove-struct-eventpoll-stru.patch
  (bsc#1012628 CVE-2026-46242 bsc#1267618).
- Update
  patches.kernel.org/7.0.10-0889-netfilter-nf_tables-use-list_del_rcu-for-netl.patch
  (bsc#1012628 CVE-2026-46324 bsc#1267995).
- Update
  patches.kernel.org/7.0.10-1090-io-wq-check-that-the-predecessor-is-hashed-in.patch
  (bsc#1012628 CVE-2026-46274 bsc#1267918).
- Update
  patches.kernel.org/7.0.11-004-smb-client-reject-userspace-cifs.spnego-descri.patch
  (bsc#1012628 CVE-2026-46243 bsc#1266238).
- Update
  patches.kernel.org/7.0.11-030-io_uring-waitid-clear-waitid-info-before-copyi.patch
  (bsc#1012628 CVE-2026-46315 bsc#1267953).
- Update
  patches.kernel.org/7.0.11-044-Bluetooth-hci_uart-fix-UAFs-and-race-condition.patch
  (bsc#1012628 CVE-2026-46275 bsc#1267968).
- Update
  patches.kernel.org/7.0.11-060-netfilter-nft_inner-Fix-IPv6-inner_thoff-desyn.patch
  (bsc#1012628 CVE-2026-46244 bsc#1267654).
- Update
  patches.kernel.org/7.0.11-452-net-gro-don-t-merge-zcopy-skbs.patch
  (bsc#1012628 CVE-2026-46323).
- Update
  patches.kernel.org/7.0.12-019-tun-free-page-on-short-frame-rejection-in-tun_.patch
  (bsc#1012628 CVE-2026-46321).
- Update
  patches.kernel.org/7.0.12-020-tap-free-page-on-error-paths-in-tap_get_user_x.patch
  (bsc#1012628 CVE-2026-46320 bsc#1267993).
- Update
  patches.kernel.org/7.0.12-021-tun-free-page-on-build_skb-failure-in-tun_xdp_.patch
  (bsc#1012628 CVE-2026-46322 bsc#1267994).
- Update
  patches.kernel.org/7.0.12-315-Revert-mm-hugetlbfs-update-hugetlbfs-to-use-mm.patch
  (bsc#1012628 CVE-2026-46318).
- Update
  patches.kernel.org/7.0.12-332-KVM-arm64-vgic-its-Drop-the-translation-cache-.patch
  (bsc#1012628 CVE-2026-46316).
- Update
  patches.kernel.org/7.0.12-333-KVM-arm64-Reassign-nested_mmus-array-behind-mm.patch
  (bsc#1012628 CVE-2026-46317).
- Update
  patches.kernel.org/7.0.4-008-LoongArch-Add-spectre-boundry-for-syscall-dispa.patch
  (bsc#1012628 CVE-2026-45993 bsc#1267352).
- Update
  patches.kernel.org/7.0.4-009-drm-nouveau-fix-u32-overflow-in-pushbuf-reloc-b.patch
  (bsc#1012628 CVE-2026-46006 bsc#1267479).
- Update
  patches.kernel.org/7.0.4-010-leds-qcom-lpg-Check-for-array-overflow-when-sel.patch
  (bsc#1012628 CVE-2026-46286 bsc#1267932).
- Update
  patches.kernel.org/7.0.4-011-greybus-gb-beagleplay-bound-bootloader-receive-.patch
  (bsc#1012628 CVE-2026-46332).
- Update
  patches.kernel.org/7.0.4-012-greybus-gb-beagleplay-fix-sleep-in-atomic-conte.patch
  (bsc#1012628 CVE-2026-46041 bsc#1267589).
- Update
  patches.kernel.org/7.0.4-013-misc-ibmasm-fix-OOB-MMIO-read-in-ibmasm_handle_.patch
  (bsc#1012628 CVE-2026-46022 bsc#1267434).
- Update
  patches.kernel.org/7.0.4-014-ibmasm-fix-OOB-reads-in-command_file_write-due-.patch
  (bsc#1012628 CVE-2026-45994 bsc#1267432).
- Update
  patches.kernel.org/7.0.4-015-ibmasm-fix-heap-over-read-in-ibmasm_send_i2o_me.patch
  (bsc#1012628 CVE-2026-46064 bsc#1267497).
- Update
  patches.kernel.org/7.0.4-019-drm-nouveau-fix-nvkm_device-leak-on-aperture-re.patch
  (bsc#1012628 CVE-2026-52904).
- Update
  patches.kernel.org/7.0.4-022-fs-afs-revert-mmap_prepare-change.patch
  (bsc#1012628 CVE-2026-46100 bsc#1267447).
- Update
  patches.kernel.org/7.0.4-024-lib-test_hmm-evict-device-pages-on-file-close-t.patch
  (bsc#1012628 CVE-2026-46280 bsc#1267958).
- Update
  patches.kernel.org/7.0.4-030-ocfs2-split-transactions-in-dio-completion-to-a.patch
  (bsc#1012628 CVE-2026-46080 bsc#1267596).
- Update
  patches.kernel.org/7.0.4-031-Input-edt-ft5x06-fix-use-after-free-in-debugfs-.patch
  (bsc#1012628 CVE-2026-46097 bsc#1267428).
- Update
  patches.kernel.org/7.0.4-032-zram-do-not-forget-to-endio-for-partial-discard.patch
  (bsc#1012628 CVE-2026-46089 bsc#1267445).
- Update
  patches.kernel.org/7.0.4-033-wifi-rtw88-check-for-PCI-upstream-bridge-existe.patch
  (bsc#1012628 CVE-2026-46092 bsc#1267595).
- Update
  patches.kernel.org/7.0.4-034-wifi-mwifiex-fix-use-after-free-in-mwifiex_adap.patch
  (bsc#1012628 CVE-2026-46069 bsc#1267437).
- Update
  patches.kernel.org/7.0.4-038-vfio-cdx-Serialize-VFIO_DEVICE_SET_IRQS-with-a-.patch
  (bsc#1012628 CVE-2026-46036 bsc#1267470).
- Update
  patches.kernel.org/7.0.4-042-spi-imx-fix-use-after-free-on-unbind.patch
  (bsc#1012628 CVE-2026-45996 bsc#1267436).
- Update
  patches.kernel.org/7.0.4-043-spi-ch341-fix-memory-leaks-on-probe-failures.patch
  (bsc#1012628 CVE-2026-46074 bsc#1267468).
- Update
  patches.kernel.org/7.0.4-044-crypto-algif_aead-snapshot-IV-for-async-AEAD-re.patch
  (bsc#1012628 CVE-2026-46028 bsc#1267430).
- Update
  patches.kernel.org/7.0.4-047-of-unittest-fix-use-after-free-in-of_unittest_c.patch
  (bsc#1012628 CVE-2026-46288 bsc#1267941).
- Update
  patches.kernel.org/7.0.4-049-hwmon-powerz-Fix-missing-usb_kill_urb-on-signal.patch
  (bsc#1012628 CVE-2026-46073 bsc#1267597).
- Update
  patches.kernel.org/7.0.4-050-EDAC-versalnet-Fix-device_node-leak-in-mc_probe.patch
  (bsc#1012628 CVE-2026-46030 bsc#1267451).
- Update
  patches.kernel.org/7.0.4-054-net-caif-clear-client-service-pointer-on-teardo.patch
  (bsc#1012628 CVE-2026-46098 bsc#1267552).
- Update
  patches.kernel.org/7.0.4-055-net-strparser-fix-skb_head-leak-in-strp_abort_s.patch
  (bsc#1012628 CVE-2026-46102 bsc#1267502).
- Update
  patches.kernel.org/7.0.4-056-media-mtk-jpeg-fix-use-after-free-in-release-pa.patch
  (bsc#1012628 CVE-2026-46011 bsc#1267491).
- Update
  patches.kernel.org/7.0.4-065-ext2-reject-inodes-with-zero-i_nlink-and-valid-.patch
  (bsc#1012628 CVE-2026-46002 bsc#1267587).
- Update
  patches.kernel.org/7.0.4-070-ALSA-ctxfi-Add-fallback-to-default-RSR-for-S-PD.patch
  (bsc#1012628 CVE-2026-46049 bsc#1267448).
- Update
  patches.kernel.org/7.0.4-072-erofs-fix-the-out-of-bounds-nameoff-handling-fo.patch
  (bsc#1012628 CVE-2026-46078 bsc#1267505).
- Update
  patches.kernel.org/7.0.4-073-ipmi-ssif-Clean-up-kthread-on-errors.patch
  (bsc#1012628 CVE-2026-46044 bsc#1267464).
- Update
  patches.kernel.org/7.0.4-078-media-rockchip-rkcif-fix-off-by-one-bugs.patch
  (bsc#1012628 CVE-2026-52907).
- Update
  patches.kernel.org/7.0.4-081-mm-alloc_tag-clear-codetag-for-pages-allocated-.patch
  (bsc#1012628 CVE-2026-46279 bsc#1267929).
- Update
  patches.kernel.org/7.0.4-082-mm-damon-core-fix-damon_call-vs-kdamond_fn-exit.patch
  (bsc#1012628 CVE-2026-46025 bsc#1267585).
- Update
  patches.kernel.org/7.0.4-084-mm-hugetlb-fix-early-boot-crash-on-parameters-w.patch
  (bsc#1012628 CVE-2026-46284 bsc#1267938).
- Update
  patches.kernel.org/7.0.4-085-mtd-docg3-fix-use-after-free-in-docg3_release.patch
  (bsc#1012628 CVE-2026-46285 bsc#1267948).
- Update
  patches.kernel.org/7.0.4-105-mm-zone_device-do-not-touch-device-folio-after-.patch
  (bsc#1012628 CVE-2026-46277 bsc#1267960).
- Update
  patches.kernel.org/7.0.4-126-rxrpc-Fix-potential-UAF-after-skb_unshare-failu.patch
  (bsc#1012628 CVE-2026-45998 bsc#1267452).
- Update
  patches.kernel.org/7.0.4-127-rxrpc-Fix-memory-leaks-in-rxkad_verify_response.patch
  (bsc#1012628 CVE-2026-46012 bsc#1267350).
- Update
  patches.kernel.org/7.0.4-128-rxrpc-Fix-conn-level-packet-handling-to-unshare.patch
  (bsc#1012628 CVE-2026-46000 bsc#1267490).
- Update
  patches.kernel.org/7.0.4-135-net-txgbe-fix-RTNL-assertion-warning-when-remov.patch
  (bsc#1012628 CVE-2026-46287 bsc#1267954).
- Update
  patches.kernel.org/7.0.4-141-net-rds-fix-MR-cleanup-on-copy-error.patch
  (bsc#1012628 CVE-2026-46053 bsc#1267427).
- Update
  patches.kernel.org/7.0.4-144-net-ks8851-Reinstate-disabling-of-BHs-around-IR.patch
  (bsc#1012628 CVE-2026-46031 bsc#1267463).
- Update
  patches.kernel.org/7.0.4-145-net-bridge-use-a-stable-FDB-dst-snapshot-in-RCU.patch
  (bsc#1012628 CVE-2026-46086 bsc#1267524).
- Update
  patches.kernel.org/7.0.4-154-ipv4-icmp-validate-reply-type-before-using-icmp.patch
  (bsc#1012628 CVE-2026-46037 bsc#1267361).
- Update
  patches.kernel.org/7.0.4-162-fbdev-defio-Disconnect-deferred-I-O-from-the-li.patch
  (bsc#1012628 CVE-2026-46065 bsc#1267458).
- Update
  patches.kernel.org/7.0.4-165-hwmon-powerz-Avoid-cacheline-sharing-for-DMA-bu.patch
  (bsc#1012628 CVE-2026-46007 bsc#1267586).
- Update
  patches.kernel.org/7.0.4-170-selinux-fix-overlayfs-mmap-and-mprotect-access-.patch
  (bsc#1012628 CVE-2026-46054 bsc#1267475).
- Update
  patches.kernel.org/7.0.4-176-crypto-qat-fix-IRQ-cleanup-on-6xxx-probe-failur.patch
  (bsc#1012628 CVE-2026-46060 bsc#1267594).
- Update
  patches.kernel.org/7.0.4-178-xfs-fix-a-resource-leak-in-xfs_alloc_buftarg.patch
  (bsc#1012628 CVE-2026-46005 bsc#1267431).
- Update
  patches.kernel.org/7.0.4-184-tpm2-sessions-Fix-missing-tpm_buf_destroy-in-tp.patch
  (bsc#1012628 CVE-2026-46096 bsc#1267371).
- Update
  patches.kernel.org/7.0.4-186-tpm-Use-kfree_sensitive-to-free-auth-session-in.patch
  (bsc#1012628 CVE-2026-46283 bsc#1267952).
- Update
  patches.kernel.org/7.0.4-190-mm-vmalloc-take-vmap_purge_lock-in-shrinker.patch
  (bsc#1012628 CVE-2026-46093 bsc#1267548).
- Update
  patches.kernel.org/7.0.4-191-mm-memfd_luo-fix-physical-address-conversion-in.patch
  (bsc#1012628 CVE-2026-46013 bsc#1267351).
- Update
  patches.kernel.org/7.0.4-192-mm-mempolicy-fix-memory-leaks-in-weighted_inter.patch
  (bsc#1012628 CVE-2026-46042 bsc#1267588).
- Update
  patches.kernel.org/7.0.4-193-mm-damon-stat-fix-memory-leak-on-damon_start-fa.patch
  (bsc#1012628 CVE-2026-46087 bsc#1267492).
- Update
  patches.kernel.org/7.0.4-194-mm-damon-core-validate-damos_quota_goal-nid-for.patch
  (bsc#1012628 CVE-2026-46020 bsc#1267446).
- Update
  patches.kernel.org/7.0.4-195-mm-damon-core-validate-damos_quota_goal-nid-for.patch
  (bsc#1012628 CVE-2026-46067 bsc#1267498).
- Update
  patches.kernel.org/7.0.4-198-mm-damon-core-disallow-non-power-of-two-min_reg.patch
  (bsc#1012628 CVE-2026-52905).
- Update
  patches.kernel.org/7.0.4-205-KVM-SVM-Inject-UD-for-INVLPGA-if-EFER.SVME-0.patch
  (bsc#1012628 CVE-2026-46082 bsc#1267473).
- Update
  patches.kernel.org/7.0.4-208-KVM-nSVM-Always-use-NextRIP-as-vmcb02-s-NextRIP.patch
  (bsc#1012628 CVE-2026-46059 bsc#1267495).
- Update
  patches.kernel.org/7.0.4-212-KVM-nSVM-Avoid-clearing-VMCB_LBR-in-vmcb12.patch
  (bsc#1012628 CVE-2026-46071 bsc#1267591).
- Update
  patches.kernel.org/7.0.4-215-KVM-SVM-Add-missing-save-restore-handling-of-LB.patch
  (bsc#1012628 CVE-2026-46014 bsc#1267440).
- Update
  patches.kernel.org/7.0.4-219-KVM-nSVM-Triple-fault-if-restore-host-CR3-fails.patch
  (bsc#1012628 CVE-2026-46032 bsc#1267476).
- Update
  patches.kernel.org/7.0.4-227-KVM-nSVM-Raise-UD-if-unhandled-VMMCALL-isn-t-in.patch
  (bsc#1012628 CVE-2026-46076 bsc#1267365).
- Update
  patches.kernel.org/7.0.4-237-md-md-llbitmap-skip-reading-rdevs-that-are-not-.patch
  (bsc#1012628 CVE-2026-46045 bsc#1267474).
- Update
  patches.kernel.org/7.0.4-238-md-md-llbitmap-raise-barrier-before-state-machi.patch
  (bsc#1012628 CVE-2026-46095 bsc#1267363).
- Update
  patches.kernel.org/7.0.4-239-md-raid5-fix-soft-lockup-in-retry_aligned_read.patch
  (bsc#1012628 CVE-2026-46051 bsc#1267360).
- Update
  patches.kernel.org/7.0.4-240-md-raid5-validate-payload-size-before-accessing.patch
  (bsc#1012628 CVE-2026-46070 bsc#1267501).
- Update
  patches.kernel.org/7.0.4-244-inotify-fix-watch-count-leak-when-fsnotify_add_.patch
  (bsc#1012628 CVE-2026-46040 bsc#1267472).
- Update
  patches.kernel.org/7.0.4-248-tcp-call-sk_data_ready-after-listener-migration.patch
  (bsc#1012628 CVE-2026-46015 bsc#1267439).
- Update
  patches.kernel.org/7.0.4-252-9p-fix-access-mode-flags-being-ORed-instead-of-.patch
  (bsc#1012628 CVE-2026-52906).
- Update
  patches.kernel.org/7.0.4-254-Bluetooth-hci_event-fix-potential-UAF-in-SSP-pa.patch
  (bsc#1012628 CVE-2026-46056 bsc#1267435).
- Update
  patches.kernel.org/7.0.4-256-can-ucan-fix-devres-lifetime.patch
  (bsc#1012628 CVE-2026-46103 bsc#1267555).
- Update
  patches.kernel.org/7.0.4-263-crypto-atmel-tdes-fix-DMA-sync-direction.patch
  (bsc#1012628 CVE-2026-46077 bsc#1267466).
- Update
  patches.kernel.org/7.0.4-265-crypto-atmel-sha204a-Fix-potential-UAF-and-memo.patch
  (bsc#1012628 CVE-2026-46075 bsc#1267367).
- Update
  patches.kernel.org/7.0.4-267-crypto-nx-fix-bounce-buffer-leaks-in-nx842_cryp.patch
  (bsc#1012628 CVE-2026-46068 bsc#1267592).
- Update
  patches.kernel.org/7.0.4-270-dm-mirror-fix-integer-overflow-in-create_dirty_.patch
  (bsc#1012628 CVE-2026-46023 bsc#1267449).
- Update
  patches.kernel.org/7.0.4-272-ceph-fix-num_ops-off-by-one-when-crypto-allocat.patch
  (bsc#1012628 CVE-2026-46066 bsc#1267593).
- Update
  patches.kernel.org/7.0.4-273-ceph-only-d_add-negative-dentries-when-they-are.patch
  (bsc#1012628 CVE-2026-46052 bsc#1267494).
- Update
  patches.kernel.org/7.0.4-278-ntfs3-add-buffer-boundary-checks-to-run_unpack.patch
  (bsc#1012628 CVE-2026-46072 bsc#1267441).
- Update
  patches.kernel.org/7.0.4-279-ntfs3-fix-integer-overflow-in-run_unpack-volume.patch
  (bsc#1012628 CVE-2026-46062 bsc#1267358).
- Update
  patches.kernel.org/7.0.4-281-rxgk-Fix-potential-integer-overflow-in-length-c.patch
  (bsc#1012628 CVE-2026-46039 bsc#1267465).
- Update
  patches.kernel.org/7.0.4-287-iio-frequency-admv1013-fix-NULL-pointer-derefer.patch
  (bsc#1012628 CVE-2026-46282 bsc#1267919).
- Update
  patches.kernel.org/7.0.4-299-drm-amdgpu-fix-zero-size-GDS-range-init-on-RDNA.patch
  (bsc#1012628 CVE-2026-46276 bsc#1267922).
- Update
  patches.kernel.org/7.0.4-300-drm-imagination-Fix-segfault-when-updating-ftra.patch
  (bsc#1012628 CVE-2026-46278 bsc#1267915).
- Update
  patches.kernel.org/7.0.4-301-ALSA-caiaq-fix-usb_dev-refcount-leak-on-probe-f.patch
  (bsc#1012628 CVE-2026-46048 bsc#1267496).
- Update
  patches.kernel.org/7.0.4-302-ALSA-aloop-Fix-peer-runtime-UAF-during-format-c.patch
  (bsc#1012628 CVE-2026-46090 bsc#1267531).
- Update
  patches.kernel.org/7.0.4-303-vmalloc-fix-buffer-overflow-in-vrealloc_node_al.patch
  (bsc#1012628 CVE-2026-46281 bsc#1267961).
- Update
  patches.kernel.org/7.0.4-305-mm-slab-return-NULL-early-from-kmalloc_nolock-i.patch
  (bsc#1012628 CVE-2026-46029 bsc#1267590).
- Update
  patches.kernel.org/7.0.7-001-scsi-target-configfs-Bound-snprintf-return-in-t.patch
  (bsc#1012628 CVE-2026-46149 bsc#1267648).
- Update
  patches.kernel.org/7.0.7-002-ipmi-Add-limits-to-event-and-receive-message-re.patch
  (bsc#1012628 CVE-2026-46177 bsc#1267725).
- Update
  patches.kernel.org/7.0.7-003-ipmi-Check-event-message-buffer-response-for-ba.patch
  (bsc#1012628 CVE-2026-46128 bsc#1267643).
- Update
  patches.kernel.org/7.0.7-004-ipmi-si-Return-state-to-normal-if-message-alloc.patch
  (bsc#1012628 CVE-2026-46108 bsc#1267615).
- Update
  patches.kernel.org/7.0.7-013-ASoC-SOF-Don-t-allow-pointer-operations-on-unco.patch
  (bsc#1012628 CVE-2026-46179 bsc#1267719).
- Update
  patches.kernel.org/7.0.7-018-flow_dissector-do-not-dissect-PPPoE-PFC-frames.patch
  (bsc#1012628 CVE-2026-46306 bsc#1267986).
- Update
  patches.kernel.org/7.0.7-021-exit-prevent-preemption-of-oopsing-TASK_DEAD-ta.patch
  (bsc#1012628 CVE-2026-46173 bsc#1267723).
- Update
  patches.kernel.org/7.0.7-030-wifi-ath5k-do-not-access-array-OOB.patch
  (bsc#1012628 CVE-2026-46307 bsc#1267987).
- Update
  patches.kernel.org/7.0.7-032-wifi-b43-enforce-bounds-check-on-firmware-key-i.patch
  (bsc#1012628 CVE-2026-46122 bsc#1267583).
- Update
  patches.kernel.org/7.0.7-034-usb-usblp-fix-heap-leak-in-IEEE-1284-device-ID-.patch
  (bsc#1012628 CVE-2026-46151 bsc#1267728).
- Update
  patches.kernel.org/7.0.7-037-ALSA-usb-audio-Avoid-potential-endless-loop-in-.patch
  (bsc#1012628 CVE-2026-46146 bsc#1267571).
- Update
  patches.kernel.org/7.0.7-045-ALSA-pcm-oss-Fix-data-race-at-accessing-runtime.patch
  (bsc#1012628 CVE-2026-46157 bsc#1267726).
- Update
  patches.kernel.org/7.0.7-054-xfrm-defensively-unhash-xfrm_state-lists-in-__x.patch
  (bsc#1012628 CVE-2026-46116 bsc#1267369).
- Update
  patches.kernel.org/7.0.7-056-xfrm-ah-account-for-ESN-high-bits-in-async-call.patch
  (bsc#1012628 CVE-2026-46193 bsc#1267656).
- Update
  patches.kernel.org/7.0.7-058-selinux-use-sk-blob-accessor-in-socket-permissi.patch
  (bsc#1012628 CVE-2026-46104 bsc#1267559).
- Update
  patches.kernel.org/7.0.7-064-selinux-allow-multiple-opens-of-sys-fs-selinux-.patch
  (bsc#1012628 CVE-2026-46302 bsc#1267947).
- Update
  patches.kernel.org/7.0.7-068-Bluetooth-virtio_bt-clamp-rx-length-before-skb_.patch
  (bsc#1012628 CVE-2026-46123 bsc#1267621).
- Update
  patches.kernel.org/7.0.7-070-Bluetooth-btmtk-validate-WMT-event-SKB-length-b.patch
  (bsc#1012628 CVE-2026-46140 bsc#1267677).
- Update
  patches.kernel.org/7.0.7-071-Bluetooth-hci_conn-fix-potential-UAF-in-create_.patch
  (bsc#1012628 CVE-2026-46111 bsc#1267626).
- Update
  patches.kernel.org/7.0.7-072-Bluetooth-hci_event-Fix-OOB-read-and-infinite-l.patch
  (bsc#1012628 CVE-2026-46138 bsc#1267649).
- Update
  patches.kernel.org/7.0.7-088-spi-s3c64xx-fix-NULL-deref-on-driver-unbind.patch
  (bsc#1012628 CVE-2026-46296 bsc#1267927).
- Update
  patches.kernel.org/7.0.7-089-staging-rtl8723bs-os_dep-avoid-NULL-pointer-der.patch
  (bsc#1012628 CVE-2026-46305 bsc#1267930).
- Update
  patches.kernel.org/7.0.7-091-fanotify-fix-false-positive-on-permission-event.patch
  (bsc#1012628 CVE-2026-46150 bsc#1267388).
- Update
  patches.kernel.org/7.0.7-098-net-rtnetlink-zero-ifla_vf_broadcast-to-avoid-s.patch
  (bsc#1012628 CVE-2026-46132 bsc#1267616).
- Update
  patches.kernel.org/7.0.7-111-pseries-papr-hvpipe-Fix-race-with-interrupt-han.patch
  (bsc#1012628 CVE-2026-46298 bsc#1267923).
- Update
  patches.kernel.org/7.0.7-112-pseries-papr-hvpipe-Prevent-kernel-stack-memory.patch
  (bsc#1012628 CVE-2026-46182 bsc#1267383).
- Update
  patches.kernel.org/7.0.7-117-ip6_gre-Use-cached-t-net-in-ip6erspan_changelin.patch
  (bsc#1012628 CVE-2026-46120 bsc#1267640).
- Update
  patches.kernel.org/7.0.7-118-net-libwx-use-request_irq-for-VF-misc-interrupt.patch
  (bsc#1012628 CVE-2026-46297 bsc#1267935).
- Update
  patches.kernel.org/7.0.7-125-x86-efi-Fix-graceful-fault-handling-after-FPU-s.patch
  (bsc#1012628 CVE-2026-46290 bsc#1267973).
- Update
  patches.kernel.org/7.0.7-132-pmdomain-mediatek-fix-use-after-free-in-scpsys_.patch
  (bsc#1012628 CVE-2026-46308 bsc#1267988).
- Update
  patches.kernel.org/7.0.7-139-fbcon-Avoid-OOB-font-access-if-console-rotation.patch
  (bsc#1012628 CVE-2026-46191 bsc#1267690).
- Update
  patches.kernel.org/7.0.7-145-ibmveth-Disable-GSO-for-packets-with-small-MSS.patch
  (bsc#1012628 CVE-2026-46273 bsc#1267651).
- Update
  patches.kernel.org/7.0.7-150-spi-microchip-core-qspi-control-built-in-cs-man.patch
  (bsc#1012628 CVE-2026-46148 bsc#1267718).
- Update
  patches.kernel.org/7.0.7-158-spi-topcliff-pch-fix-use-after-free-on-unbind.patch
  (bsc#1012628 CVE-2026-46301 bsc#1267983).
- Update
  patches.kernel.org/7.0.7-165-clk-microchip-mpfs-ccc-fix-out-of-bounds-access.patch
  (bsc#1012628 CVE-2026-46293 bsc#1267933).
- Update
  patches.kernel.org/7.0.7-172-ASoC-qcom-q6apm-lpass-dai-Fix-multiple-graph-op.patch
  (bsc#1012628 CVE-2026-46143 bsc#1267712).
- Update
  patches.kernel.org/7.0.7-175-btrfs-fix-btrfs_ioctl_space_info-slot_count-TOC.patch
  (bsc#1012628 CVE-2026-46159 bsc#1267652).
- Update
  patches.kernel.org/7.0.7-178-btrfs-fix-missing-last_unlink_trans-update-when.patch
  (bsc#1012628 CVE-2026-46160 bsc#1267624).
- Update
  patches.kernel.org/7.0.7-179-dm-thin-fix-metadata-refcount-underflow.patch
  (bsc#1012628 CVE-2026-46107 bsc#1267612).
- Update
  patches.kernel.org/7.0.7-181-dm-fix-a-buffer-overflow-in-ioctl-processing.patch
  (bsc#1012628 CVE-2026-46294 bsc#1267939).
- Update
  patches.kernel.org/7.0.7-182-eventfs-Hold-eventfs_mutex-and-SRCU-when-remoun.patch
  (bsc#1012628 CVE-2026-46106 bsc#1267613).
- Update
  patches.kernel.org/7.0.7-186-dm-verity-fec-fix-reading-parity-bytes-split-ac.patch
  (bsc#1012628 CVE-2026-46130 bsc#1267629).
- Update
  patches.kernel.org/7.0.7-188-isofs-validate-Rock-Ridge-CE-continuation-exten.patch
  (bsc#1012628 CVE-2026-46303 bsc#1267984).
- Update
  patches.kernel.org/7.0.7-195-lib-scatterlist-fix-length-calculations-in-extr.patch
  (bsc#1012628 CVE-2026-46289 bsc#1267966).
- Update
  patches.kernel.org/7.0.7-197-libceph-Fix-slab-out-of-bounds-access-in-auth-m.patch
  (bsc#1012628 CVE-2026-46119 bsc#1267628).
- Update
  patches.kernel.org/7.0.7-200-nvmet-tcp-fix-race-between-ICReq-handling-and-q.patch
  (bsc#1012628 CVE-2026-46135 bsc#1267373).
- Update
  patches.kernel.org/7.0.7-201-nvmet-avoid-recursive-nvmet-wq-flush-in-nvmet_c.patch
  (bsc#1012628 CVE-2026-46304 bsc#1267985).
- Update
  patches.kernel.org/7.0.7-203-pmdomain-core-Fix-detach-procedure-for-virtual-.patch
  (bsc#1012628 CVE-2026-46292 bsc#1267943).
- Update
  patches.kernel.org/7.0.7-205-RDMA-hns-Fix-unlocked-call-to-hns_roce_qp_remov.patch
  (bsc#1012628 CVE-2026-46112 bsc#1267582).
- Update
  patches.kernel.org/7.0.7-209-scsi-mpt3sas-Limit-NVMe-request-size-to-2-MiB.patch
  (bsc#1012628 CVE-2026-46105 bsc#1267372).
- Update
  patches.kernel.org/7.0.7-210-smb-client-fix-out-of-bounds-read-in-smb2_compo.patch
  (bsc#1012628 CVE-2026-46155 bsc#1267720).
- Update
  patches.kernel.org/7.0.7-212-smb-client-use-kzalloc-to-zero-initialize-secur.patch
  (bsc#1012628 CVE-2026-46139 bsc#1267681).
- Update
  patches.kernel.org/7.0.7-214-KVM-x86-check-for-nEPT-nNPT-in-slow-flush-hyper.patch
  (bsc#1012628 CVE-2026-46131 bsc#1267636).
- Update
  patches.kernel.org/7.0.7-215-KVM-x86-Do-IRR-scan-in-__kvm_apic_update_irr-ev.patch
  (bsc#1012628 CVE-2026-46295 bsc#1267931).
- Update
  patches.kernel.org/7.0.7-233-RDMA-mana-Fix-mana_destroy_wq_obj-cleanup-in-ma.patch
  (bsc#1012628 CVE-2026-46126 bsc#1267584).
- Update
  patches.kernel.org/7.0.7-234-RDMA-mana-Remove-user-triggerable-WARN_ON-in-ma.patch
  (bsc#1012628 CVE-2026-46117 bsc#1267375).
- Update
  patches.kernel.org/7.0.7-235-RDMA-mana-Validate-rx_hash_key_len.patch
  (bsc#1012628 CVE-2026-46145 bsc#1267715).
- Update
  patches.kernel.org/7.0.7-237-RDMA-mlx4-Fix-resource-leak-on-error-in-mlx4_ib.patch
  (bsc#1012628 CVE-2026-46178 bsc#1267493).
- Update
  patches.kernel.org/7.0.7-260-mptcp-pm-ADD_ADDR-rtx-fix-potential-data-race.patch
  (bsc#1012628 CVE-2026-46137 bsc#1267570).
- Update
  patches.kernel.org/7.0.7-262-mptcp-pm-ADD_ADDR-rtx-free-sk-if-last.patch
  (bsc#1012628 CVE-2026-46170 bsc#1267714).
- Update
  patches.kernel.org/7.0.7-271-f2fs-fix-node_cnt-race-between-extent-node-dest.patch
  (bsc#1012628 CVE-2026-46194 bsc#1267569).
- Update
  patches.kernel.org/7.0.7-281-KVM-arm64-Fix-pin-leak-and-publication-ordering.patch
  (bsc#1012628 CVE-2026-46147 bsc#1267689).
- Update
  patches.kernel.org/7.0.7-282-LoongArch-Fix-potential-ADE-in-loongson_gpu_fix.patch
  (bsc#1012628 CVE-2026-46156 bsc#1267385).
- Update
  patches.kernel.org/7.0.7-296-hfsplus-fix-uninit-value-by-validating-catalog-.patch
  (bsc#1012628 CVE-2026-46169 bsc#1267713).
- Update
  patches.kernel.org/7.0.7-297-hfsplus-fix-held-lock-freed-on-hfsplus_fill_sup.patch
  (bsc#1012628 CVE-2026-46299 bsc#1267920).
- Update
  patches.kernel.org/7.0.7-299-8021q-delete-cleared-egress-QoS-mappings.patch
  (bsc#1012628 CVE-2026-46153 bsc#1267574).
- Update
  patches.kernel.org/7.0.7-301-crypto-caam-guard-HMAC-key-hex-dumps-in-hash_di.patch
  (bsc#1012628 CVE-2026-46291 bsc#1267937).
- Update
  patches.kernel.org/7.0.7-305-x86-CPU-AMD-Prevent-improper-isolation-of-share.patch
  (bsc#1012628 CVE-2026-46174 bsc#1267384).
- Update
  patches.kernel.org/7.0.9-001-HID-playstation-Clamp-num_touch_reports.patch
  (bsc#1012628 CVE-2026-46232 bsc#1267669).
- Update
  patches.kernel.org/7.0.9-002-HID-appletb-kbd-fix-UAF-in-inactivity-timer-cle.patch
  (bsc#1012628 CVE-2026-46213 bsc#1267665).
- Update
  patches.kernel.org/7.0.9-014-media-renesas-vsp1-Fix-NULL-pointer-deref-on-mo.patch
  (bsc#1012628 CVE-2026-46310 bsc#1267934).
- Update
  patches.kernel.org/7.0.9-035-media-i2c-ov5647-Fix-runtime-PM-refcount-leak-i.patch
  (bsc#1012628 CVE-2026-46239 bsc#1267530).
- Update
  patches.kernel.org/7.0.9-039-media-videobuf2-Set-vma_flags-in-vb2_dma_sg_mma.patch
  (bsc#1012628 CVE-2026-46312 bsc#1267990).
- Update
  patches.kernel.org/7.0.9-040-media-rockchip-rkcif-Add-missing-MUST_CONNECT-f.patch
  (bsc#1012628 CVE-2026-46222 bsc#1267695).
- Update
  patches.kernel.org/7.0.9-042-media-intel-ipu6-fix-error-pointer-dereference.patch
  (bsc#1012628 CVE-2026-46313 bsc#1267991).
- Update
  patches.kernel.org/7.0.9-053-media-saa7164-add-ioremap-return-checks-and-cle.patch
  (bsc#1012628 CVE-2026-46235 bsc#1267702).
- Update
  patches.kernel.org/7.0.9-076-media-iris-fix-use-after-free-of-fmt_src-during.patch
  (bsc#1012628 CVE-2026-46210 bsc#1267692).
- Update
  patches.kernel.org/7.0.9-090-spi-ch341-fix-devres-lifetime.patch
  (bsc#1012628 CVE-2026-46228 bsc#1267705).
- Update
  patches.kernel.org/7.0.9-092-spi-fsl-fix-controller-deregistration.patch
  (bsc#1012628 CVE-2026-46226 bsc#1267673).
- Update
  patches.kernel.org/7.0.9-099-spi-rspi-fix-controller-deregistration.patch
  (bsc#1012628 CVE-2026-46225 bsc#1267627).
- Update
  patches.kernel.org/7.0.9-112-spi-mpc52xx-fix-use-after-free-on-unbind.patch
  (bsc#1012628 CVE-2026-46219 bsc#1267667).
- Update
  patches.kernel.org/7.0.9-120-spi-cadence-quadspi-fix-unclocked-access-on-unb.patch
  (bsc#1012628 CVE-2026-46203 bsc#1267620).
- Update
  patches.kernel.org/7.0.9-121-drm-msm-gem-fix-error-handling-in-msm_ioctl_gem.patch
  (bsc#1012628 CVE-2026-46211 bsc#1267380).
- Update
  patches.kernel.org/7.0.9-125-drm-v3d-Reject-empty-multisync-extension-to-pre.patch
  (bsc#1012628 CVE-2026-46314 bsc#1267992).
- Update
  patches.kernel.org/7.0.9-127-drm-amdkfd-Clear-VRAM-on-allocation-to-prevent-.patch
  (bsc#1012628 CVE-2026-46229 bsc#1267567).
- Update
  patches.kernel.org/7.0.9-135-drm-amdgpu-Add-bounds-checking-to-ib_-get-set-_.patch
  (bsc#1012628 CVE-2026-46218 bsc#1267632).
- Update
  patches.kernel.org/7.0.9-136-drm-amdgpu-vcn4-Prevent-OOB-reads-when-parsing-.patch
  (bsc#1012628 CVE-2026-46204 bsc#1267661).
- Update
  patches.kernel.org/7.0.9-138-drm-amdgpu-vcn4-Prevent-OOB-reads-when-parsing-.patch
  (bsc#1012628 CVE-2026-46199 bsc#1267638).
- Update
  patches.kernel.org/7.0.9-139-drm-amdgpu-vcn3-Prevent-OOB-reads-when-parsing-.patch
  (bsc#1012628 CVE-2026-46230 bsc#1267623).
- Update
  patches.kernel.org/7.0.9-141-drm-gem-Fix-inconsistent-plane-dimension-calcul.patch
  (bsc#1012628 CVE-2026-46209 bsc#1267663).
- Update
  patches.kernel.org/7.0.9-143-drm-amdkfd-validate-SVM-ioctl-nattr-against-buf.patch
  (bsc#1012628 CVE-2026-46197 bsc#1267381).
- Update
  patches.kernel.org/7.0.9-150-drm-xe-uapi-Reject-coh_none-PAT-index-for-CPU-c.patch
  (bsc#1012628 CVE-2026-46309 bsc#1267989).
- Update
  patches.kernel.org/7.0.9-155-drm-amdgpu-userq-fix-access-to-stale-wptr-mappi.patch
  (bsc#1012628 CVE-2026-46311 bsc#1267949).
- Update
  patches.kernel.org/7.0.9-162-drm-amdgpu-sdma4-replace-BUG_ON-with-WARN_ON-in.patch
  (bsc#1012628 CVE-2026-46220 bsc#1267704).
- Update
  patches.kernel.org/7.0.9-169-sctp-revalidate-list-cursor-after-sctp_sendmsg_.patch
  (bsc#1012628 CVE-2026-46227 bsc#1267697).
- Update
  patches.kernel.org/7.0.9-175-batman-adv-bla-prevent-use-after-free-when-dele.patch
  (bsc#1012628 CVE-2026-46212 bsc#1267693).
- Update
  patches.kernel.org/7.0.9-176-batman-adv-bla-only-purge-non-released-claims.patch
  (bsc#1012628 CVE-2026-46233 bsc#1267701).
- Update
  patches.kernel.org/7.0.9-177-batman-adv-bla-put-backbone-reference-on-failed.patch
  (bsc#1012628 CVE-2026-46231 bsc#1267565).
- Update
  patches.kernel.org/7.0.9-184-EDAC-versalnet-Fix-device-name-memory-leak.patch
  (bsc#1012628 CVE-2026-46221 bsc#1267523).
- Update
  patches.kernel.org/7.0.9-188-cgroup-Defer-css-percpu_ref-kill-on-rmdir-until.patch
  (bsc#1012628 CVE-2026-46223 bsc#1267699).
- Update
  patches.kernel.org/7.0.9-194-vsock-virtio-fix-empty-payload-in-tap-skb-for-n.patch
  (bsc#1012628 CVE-2026-46207 bsc#1267691).
- Update
  patches.kernel.org/7.0.9-195-vsock-virtio-fix-accept-queue-count-leak-on-tra.patch
  (bsc#1012628 CVE-2026-46214 bsc#1267717).
- Update
  patches.kernel.org/7.0.9-197-drm-amdgpu-vcn4-Avoid-overflow-on-msg-bound-che.patch
  (bsc#1012628 CVE-2026-46217 bsc#1267655).
  suse-add-cves
- commit 8beab0b</changelog>
  <changelog author="jslaby@suse.cz" date="1781092802">- Linux 7.0.12 (bsc#1012628).
- Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB
  buffer size (bsc#1012628).
- ACPI: button: Fix ACPI GPE handler leak during removal
  (bsc#1012628).
- ACPI: button: Enable wakeup GPEs for ACPI buttons at probe time
  (bsc#1012628).
- xfrm: move policy_bydst RCU sync from per-netns .exit to
  .pre_exit (bsc#1012628).
- net/sched: sch_sfb: Replace direct dequeue call with peek and
  qdisc_dequeue_peeked (bsc#1012628).
- nfc: llcp: Fix use-after-free in llcp_sock_release()
  (bsc#1012628).
- nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()
  (bsc#1012628).
- xfrm: Check for underflow in xfrm_state_mtu (bsc#1012628).
- nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems
  (bsc#1012628).
- tools/bootconfig: Fix buf leaks in apply_xbc (bsc#1012628).
- HID: remove duplicate hid_warn_ratelimited definition
  (bsc#1012628).
- kunit: fix use-after-free in debugfs when using kunit.filter
  (bsc#1012628).
- accel/rocket: fix UAF via dangling GEM handle in create_bo
  (bsc#1012628).
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable
  (bsc#1012628).
- netfilter: xt_cpu: prefer raw_smp_processor_id (bsc#1012628).
- netfilter: ebtables: fix OOB read in compat_mtw_from_user
  (bsc#1012628).
- netfilter: nf_tables: fix dst corruption in same register
  operation (bsc#1012628).
- tun: free page on short-frame rejection in tun_xdp_one()
  (bsc#1012628).
- tap: free page on error paths in tap_get_user_xdp()
  (bsc#1012628).
- tun: free page on build_skb failure in tun_xdp_one()
  (bsc#1012628).
- vsock: keep poll shutdown state consistent (bsc#1012628).
- net: netlink: fix sending unassigned nsid after assigned one
  (bsc#1012628).
- net: netlink: don't set nsid on local notifications
  (bsc#1012628).
- net/smc: Do not re-initialize smc hashtables (bsc#1012628).
- net/iucv: fix locking in .getsockopt (bsc#1012628).
- scsi: core: Run queues for all non-SDEV_DEL devices from
  scsi_run_host_queues (bsc#1012628).
- scsi: scsi_debug: Add missing newline in
  scsi_debug_device_reset() (bsc#1012628).
- ipv4: free net-&gt;ipv4.sysctl_local_reserved_ports after
  unregister_net_sysctl_table() (bsc#1012628).
- ALSA: hda: cs35l56: Fix system name string leaks (bsc#1012628).
- ALSA: pcm: oss: Fix setup list UAF on proc write error
  (bsc#1012628).
- ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors
  (bsc#1012628).
- net/mlx5: HWS: Reject unsupported remove-header action
  (bsc#1012628).
- net: hsr: fix potential OOB access in supervision frame handling
  (bsc#1012628).
- accel/ivpu: prevent uninitialized data bug in debugfs
  (bsc#1012628).
- gpio: mxc: fix irq_high handling (bsc#1012628).
- drm/i915/aux: use polling when irqs are unavailable
  (bsc#1012628).
- net: Avoid checksumming unreadable skb tail on trim
  (bsc#1012628).
- ethtool: rss: avoid modifying the RSS context response
  (bsc#1012628).
- ethtool: rss: add missing errno on RSS context delete
  (bsc#1012628).
- ethtool: rss: fix falsely ignoring indir table updates
  (bsc#1012628).
- ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
  (bsc#1012628).
- ethtool: rss: fix hkey leak when indir_size is 0 (bsc#1012628).
- ethtool: rss: avoid device context leak on reply-build failure
  (bsc#1012628).
- ethtool: module: call ethnl_ops_complete() on module flash
  errors (bsc#1012628).
- ethtool: module: avoid leaking a netdev ref on module flash
  errors (bsc#1012628).
- ethtool: module: avoid racy updates to dev-&gt;ethtool bitfield
  (bsc#1012628).
- ethtool: module: check fw_flash_in_progress under rtnl_lock
  (bsc#1012628).
- ethtool: module: fix cleanup if socket used for flashing
  multiple devices (bsc#1012628).
- ethtool: cmis: require exact CDB reply length (bsc#1012628).
- ethtool: cmis: fix u16-to-u8 truncation of msleep_pre_rpl
  (bsc#1012628).
- ethtool: cmis: validate start_cmd_payload_size from module
  (bsc#1012628).
- ethtool: cmis: validate fw-&gt;size against start_cmd_payload_size
  (bsc#1012628).
- cxl/test: Update mock dev array before calling
  platform_device_add() (bsc#1012628).
- tunnels: load network headers after skb_cow() in
  iptunnel_pmtud_build_icmp[v6]() (bsc#1012628).
- vxlan: do not reuse cached ip_hdr() value after
  skb_tunnel_check_pmtu() (bsc#1012628).
- tunnels: do not assume transport header in
  iptunnel_pmtud_check_icmp() (bsc#1012628).
- ksmbd: fix FSCTL permission bypass by adding a permission
  check for FSCTL_SET_SPARSE (bsc#1012628).
- ASoC: codecs: simple-mux: Fix enum control bounds check
  (bsc#1012628).
- drm/xe: Restore IDLEDLY regiter on engine reset (bsc#1012628).
- Bluetooth: 6lowpan: check skb_clone() return value in
  send_mcast_pkt() (bsc#1012628).
- bonding: refuse to enslave CAN devices (bsc#1012628).
- bridge: Fix sleep in atomic context in netlink path
  (bsc#1012628).
- bridge: Fix sleep in atomic context in sysfs path (bsc#1012628).
- ethtool: coalesce: cap profile updates at
  NET_DIM_PARAMS_NUM_PROFILES (bsc#1012628).
- ethtool: tsconfig: fix reply error handling (bsc#1012628).
- ethtool: linkstate: fix unbalanced ethnl_ops_complete() on
  PHY lookup error (bsc#1012628).
- ethtool: pse-pd: fix missing ethnl_ops_complete() (bsc#1012628).
- ethtool: tsconfig: fix missing ethnl_ops_complete()
  (bsc#1012628).
- ethtool: tsinfo: fix uninitialized stats on the by-PHC path
  (bsc#1012628).
- ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on
  prepare failure (bsc#1012628).
- ethtool: strset: fix header attribute index in
  ethnl_req_get_phydev() (bsc#1012628).
- ethtool: eeprom: add missing ethnl_ops_begin() / _complete()
  during fallback (bsc#1012628).
- ethtool: eeprom: add more safeties to EEPROM Netlink fallback
  (bsc#1012628).
- ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()
  (bsc#1012628).
- net/sched: Revert "net/sched: Restrict conditions for adding
  duplicating netems to qdisc tree" (bsc#1012628).
- net/sched: fix packet loop on netem when duplicate is on
  (bsc#1012628).
- net: Introduce skb tc depth field to track packet loops
  (bsc#1012628).
- net/sched: Fix ethx:ingress -&gt; ethy:egress -&gt; ethx:ingress
  mirred loop (bsc#1012628).
- net/sched: act_mirred: Fix blockcast recursion bypass leading
  to stack overflow (bsc#1012628).
- net/sched: act_mirred: Fix return code in early mirred redirect
  error paths (bsc#1012628).
- net: hibmcge: disable Relaxed Ordering to fix RX packet
  corruption (bsc#1012628).
- net: hibmcge: move dma_rmb() after dma_sync_single_for_cpu()
  in RX path (bsc#1012628).
- net/handshake: Use spin_lock_bh for hn_lock (bsc#1012628).
- nvme-tcp: store negative errno in queue-&gt;tls_err (bsc#1012628).
- net/handshake: Pass negative errno through handshake_complete()
  (bsc#1012628).
- net/handshake: hand off the pinned file reference to accept_doit
  (bsc#1012628).
- net/handshake: Take a long-lived file reference at submit
  (bsc#1012628).
- net/handshake: Drain pending requests at net namespace exit
  (bsc#1012628).
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime
  (bsc#1012628).
- dpll: zl3073x: add die temperature reporting for supported chips
  (bsc#1012628).
- dpll: export __dpll_device_change_ntf() for use under dpll_lock
  (bsc#1012628).
- dpll: zl3073x: use __dpll_device_change_ntf() and remove
  change_work (bsc#1012628).
- Bluetooth: l2cap: clear chan-&gt;ident on ECRED reconfiguration
  success (bsc#1012628).
- Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp
  (bsc#1012628).
- Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device
  close (bsc#1012628).
- Bluetooth: hci_sync: Reset device counters in
  hci_dev_close_sync() (bsc#1012628).
- gpio: adnp: fix flow control regression caused by scoped_guard()
  (bsc#1012628).
- gpio: virtuser: Fix uninitialized data bug in
  gpio_virtuser_direction_do_write() (bsc#1012628).
- gpio: rockchip: convert bank-&gt;clk to devm_clk_get_enabled()
  (bsc#1012628).
- gpio: rockchip: teardown bugs and resource leaks (bsc#1012628).
- net: mana: Add NULL guards in teardown path to prevent panic
  on attach failure (bsc#1012628).
- net: mana: Skip redundant detach on already-detached port
  (bsc#1012628).
- sctp: fix race between sctp_wait_for_connect and peeloff
  (bsc#1012628).
- net: pcs: pcs-mtk-lynxi: fix bpi-r3 serdes configuration
  (bsc#1012628).
- vsock/virtio: bind uarg before filling zerocopy skb
  (bsc#1012628).
- ipv6: fix possible infinite loop in rt6_fill_node()
  (bsc#1012628).
- ipv6: fix possible infinite loop in fib6_select_path()
  (bsc#1012628).
- net: skbuff: fix pskb_carve leaking zcopy pages (bsc#1012628).
- Revert "ipv6: preserve insertion order for same-scope addresses"
  (bsc#1012628).
- Revert "x86/fpu: Refine and simplify the magic number check
  during signal return" (bsc#1012628).
- drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS
  DPCD register (bsc#1012628).
- drm/i915/psr: Read Intel DPCD workaround register (bsc#1012628).
- drm/i915/psr: Apply Intel DPCD workaround when SDP on prior
  line used (bsc#1012628).
- iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer
  (bsc#1012628).
- iio: imu: adis16550: fix stack leak in trigger handler
  (bsc#1012628).
- iio: pressure: bmp280: fix stack leak in bmp580 trigger handler
  (bsc#1012628).
- usb: typec: ucsi: ccg: reject firmware images without a ':'
  record header (bsc#1012628).
- usb: typec: tcpm: validate VDO count in Discover Identity ACK
  handlers (bsc#1012628).
- usb: typec: tcpm: bound altmode_desc[] per iteration in
  svdm_consume_modes() (bsc#1012628).
- usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without
  a payload VDO (bsc#1012628).
- usb: typec: altmodes/displayport: validate count before reading
  Status Update VDO (bsc#1012628).
- usb: typec: wcove: don't write past struct pd_message in
  wcove_read_rx_buffer() (bsc#1012628).
- usb: typec: tcpm/tcpci_maxim: validate header NDO against
  RX_BYTE_CNT (bsc#1012628).
- usb: typec: ucsi: validate connector number in
  ucsi_connector_change() (bsc#1012628).
- USB: serial: safe_serial: fix memory corruption with small
  endpoint (bsc#1012628).
- media: rc: igorplugusb: fix control request setup packet
  (bsc#1012628).
- Input: ims-pcu - fix usb_free_coherent() size in
  ims_pcu_buffers_free() (bsc#1012628).
- USB: serial: cypress_m8: fix memory corruption with small
  endpoint (bsc#1012628).
- HID: quirks: Add ALWAYS_POLL quirk for SIGMACHIP USB mouse
  (bsc#1012628).
- Bluetooth: btusb: Allow firmware re-download when version
  matches (bsc#1012628).
- mm/vmalloc: do not trigger BUG() on BH disabled context
  (bsc#1012628).
- hpfs: fix a crash if hpfs_map_dnode_bitmap fails (bsc#1012628).
- mm/damon/sysfs-schemes: delete tried region in regions_rmdirs()
  (bsc#1012628).
- ipc: limit next_id allocation to the valid ID range
  (bsc#1012628).
- mm: memcontrol: propagate NMI slab stats to memcg vmstats
  (bsc#1012628).
- mm/migrate_device: fix pgtable leak in
  migrate_vma_insert_huge_pmd_page (bsc#1012628).
- memfd: deny writeable mappings when implying SEAL_WRITE
  (bsc#1012628).
- zram: fix use-after-free in zram_writeback_endio (bsc#1012628).
- mm/rmap: initialize nr_pages to 1 at loop start in
  try_to_unmap_one (bsc#1012628).
- auxdisplay: line-display: fix OOB read on zero-length
  message_store() (bsc#1012628).
- smb: client: fix uninitialized variable in smb2_writev_callback
  (bsc#1012628).
- Bluetooth: L2CAP: use chan timer to close channels in
  cleanup_listen() (bsc#1012628).
- Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout()
  on !conn (bsc#1012628).
- Bluetooth: HIDP: fix missing length checks in
  hidp_input_report() (bsc#1012628).
- Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1012628).
- Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock
  (bsc#1012628).
- Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()
  (bsc#1012628).
- Bluetooth: hci_qca: Use 100 ms SSR delay for rampatch and NVM
  loading (bsc#1012628).
- Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync
  (bsc#1012628).
- Input: xpad - fix out-of-bounds access for Share button
  (bsc#1012628).
- parport: Fix race between port and client registration
  (bsc#1012628).
- rust_binder: Avoid holding lock when dropping delivered_death
  (bsc#1012628).
- rust_binder: avoid calling pending_oneway_finished() on
  TF_UPDATE_TXN (bsc#1012628).
- USB: cdc-acm: Fix bit overlap and move quirk definitions to
  header (bsc#1012628).
- KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor
  (bsc#1012628).
- KVM: arm64: PMU: Preserve AArch32 counter low bits
  (bsc#1012628).
- KVM: SVM: Flush the current TLB when transitioning from xAVIC =&gt;
  x2AVIC (bsc#1012628).
- KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use
  (bsc#1012628).
- KVM: SEV: Ignore Port I/O requests of length '0' (bsc#1012628).
- KVM: SEV: Use the size of the PSC header as the minimum size
  for PSC requests (bsc#1012628).
- KVM: SEV: WARN if KVM attempts to setup scratch area with
  min_len==0 (bsc#1012628).
- KVM: SEV: Compute the correct max length of the in-GHCB scratch
  area (bsc#1012628).
- KVM: SEV: Check PSC request indices against the actual size
  of the buffer (bsc#1012628).
- KVM: SEV: Use READ_ONCE() when reading entries/indices from
  PSC buffer (bsc#1012628).
- KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc()
  (bsc#1012628).
- gpio: shared: undo the vote of the proxy on GPIO free
  (bsc#1012628).
- gpio: shared: fix deadlock on shared proxy's parent removal
  (bsc#1012628).
- gpio: shared: fix lockdep false positive by removing unneeded
  lock (bsc#1012628).
- Disable -Wattribute-alias for clang-23 and newer (bsc#1012628).
- iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for
  dual mux (bsc#1012628).
- iio: adc: npcm: fix unbalanced clk_disable_unprepare()
  (bsc#1012628).
- iio: dac: ad3530r: Fix AD3531/AD3531R powerdown mode strings
  (bsc#1012628).
- iio: dac: max5821: fix return value check in powerdown sync
  (bsc#1012628).
- iio: dac: ad5686: fix ref bit initialization for single-channel
  parts (bsc#1012628).
- iio: dac: ad5686: fix input raw value check (bsc#1012628).
- iio: dac: ad5686: acquire lock when doing powerdown control
  (bsc#1012628).
- iio: dac: ad5686: fix powerdown control on dual-channel devices
  (bsc#1012628).
- iio: adc: mt6359: fix unchecked return value in mt6358_read_imp
  (bsc#1012628).
- iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw
  (bsc#1012628).
- iio: adc: ad4695: Fix call ordering in offload buffer postenable
  (bsc#1012628).
- iio: adc: nxp-sar-adc: fix division by zero in write_raw
  (bsc#1012628).
- iio: adc: nxp-sar-adc: Avoid division by zero (bsc#1012628).
- iio: adc: nxp-sar-adc: zero-initialize dma_slave_config
  (bsc#1012628).
- iio: gyro: itg3200: fix i2c read into the wrong stack location
  (bsc#1012628).
- iio: gyro: adis16260: fix division by zero in write_raw
  (bsc#1012628).
- iio: ssp_sensors: cancel delayed work_refresh on remove
  (bsc#1012628).
- iio: temperature: tsys01: fix broken PROM checksum validation
  (bsc#1012628).
- iio: magnetometer: st_magn: fix default DRDY pin selection
  for LIS2MDL (bsc#1012628).
- iio: light: veml6070: Fix resource leak in probe error path
  (bsc#1012628).
- iio: Fix iio_multiply_value use in
  iio_read_channel_processed_scale (bsc#1012628).
- iio: chemical: mhz19b: reject oversized serial replies
  (bsc#1012628).
- iio: chemical: scd30: fix division by zero in write_raw
  (bsc#1012628).
- iio: light: cm3323: fix reg_conf not being initialized correctly
  (bsc#1012628).
- iio: buffer: hw-consumer: fix use-after-free in error path
  (bsc#1012628).
- iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf()
  (bsc#1012628).
- USB: serial: omninet: fix memory corruption with small endpoint
  (bsc#1012628).
- usb: cdns3: gadget: fix request skipping after clearing halt
  (bsc#1012628).
- usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy
  acquisition failure (bsc#1012628).
- usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call
  permanently leaks the runtime PM usage counter across
  bind/unbind cycles (bsc#1012628).
- usb: dwc2: Fix use after free in debug code (bsc#1012628).
- Input: elan_i2c - validate firmware size before use
  (bsc#1012628).
- i2c: davinci: fix division by zero on missing clock-frequency
  (bsc#1012628).
- x86/ftrace: Relocate %rip-relative percpu refs in dynamic
  trampolines (bsc#1012628).
- wireguard: send: append trailer after expanding head
  (bsc#1012628).
- bpf: sockmap: fix tail fragment offset in bpf_msg_push_data
  (bsc#1012628).
- macsec: fix replay protection at XPN lower-PN wrap
  (bsc#1012628).
- ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()
  (bsc#1012628).
- ASoC: qcom: q6asm-dai: fix error handling in prepare and
  set_params (bsc#1012628).
- octeontx2-af: validate body pcifunc in
  rvu_mbox_handler_rep_event_notify (bsc#1012628).
- ipv6: exthdrs: refresh nh after handling HAO option
  (bsc#1012628).
- ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate()
  (bsc#1012628).
- ipv6: validate extension header length before copying to cmsg
  (bsc#1012628).
- xfrm: input: hold netns during deferred transport reinjection
  (bsc#1012628).
- l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname
  (bsc#1012628).
- ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1012628).
- net: skbuff: fix missing zerocopy reference in pskb_carve
  helpers (bsc#1012628).
- spi: spi-mem: avoid mutating op template in
  spi_mem_supports_op() (bsc#1012628).
- HID: wacom: Fix OOB write in wacom_hid_set_device_mode()
  (bsc#1012628).
- iommu, debugobjects: avoid gcc-16.1 section mismatch warnings
  (bsc#1012628).
- nfc: hci: fix out-of-bounds read in HCP header parsing
  (bsc#1012628).
- xfrm: route MIGRATE notifications to caller's netns
  (bsc#1012628).
- xfrm: ipcomp: Free destination pages on acomp errors
  (bsc#1012628).
- xfrm: ah: use skb_to_full_sk in async output callbacks
  (bsc#1012628).
- ALSA: scarlett2: Fix 2i2 Gen 4 direct monitor gain on firmware
  2417 (bsc#1012628).
- ALSA: firewire-motu: Protect register DSP event queue positions
  (bsc#1012628).
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq
  RST without direction check (bsc#1012628).
- ASoC: qcom: q6asm-dai: close stream only when running
  (bsc#1012628).
- ASoC: qcom: q6asm-dai: do not set stream state in event and
  trigger callbacks (bsc#1012628).
- xfrm: esp: restore combined single-frag length gate
  (bsc#1012628).
- ALSA: hda/realtek: Fix speaker output on ASUS ROG Strix G615LP
  (bsc#1012628).
- xfrm: iptfs: reset runtime state when cloning SAs (bsc#1012628).
- dma-buf: fix UAF in dma_buf_fd() tracepoint (bsc#1012628).
- Input: xpad - add "Nova 2 Lite" from GameSir (bsc#1012628).
- Input: xpad - add support for ASUS ROG RAIKIRI II (bsc#1012628).
- ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk
  loops (bsc#1012628).
- misc: rp1: Send IACK on IRQ activate to fix kdump/kexec
  (bsc#1012628).
- Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem
  (bsc#1012628).
- Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad
  E490 (bsc#1012628).
- dt-bindings: usb: Fix EIC7700 USB reset's issue (bsc#1012628).
- comedi: comedi_test: fix check for valid scan_begin_src in
  waveform_ai_cmdtest() (bsc#1012628).
- comedi: comedi_test: Fix limiting of convert_arg in
  waveform_ai_cmdtest() (bsc#1012628).
- counter: Fix refcount leak in counter_alloc() error path
  (bsc#1012628).
- tty: serial: pch_uart: add check for dma_alloc_coherent()
  (bsc#1012628).
- tty: serial: samsung: Remove redundant port lock acquisition
  in rx helpers (bsc#1012628).
- uio: uio_pci_generic_sva: fix double free of devm_kzalloc()
  memory (bsc#1012628).
- usb: chipidea: core: convert ci_role_switch to local variable
  (bsc#1012628).
- usb: core: Fix up Interrupt IN endpoints with bogus
  wBytesPerInterval (bsc#1012628).
- usb: dwc3: xilinx: fix error handling in zynqmp init error paths
  (bsc#1012628).
- usb: musb: omap2430: Fix use-after-free in omap2430_probe()
  (bsc#1012628).
- USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2
  hub controllers (bsc#1012628).
- usb: storage: Add quirks for PNY Elite Portable SSD
  (bsc#1012628).
- usbip: vudc: Fix use after free bug in vudc_remove due to race
  condition (bsc#1012628).
- usb: usbtmc: check URB actual_length for interrupt-IN
  notifications (bsc#1012628).
- usb: usbtmc: reject interrupt endpoints with small
  wMaxPacketSize (bsc#1012628).
- usb: typec: tipd: Fix error code in tps6598x_probe()
  (bsc#1012628).
- usb: typec: tcpm: improve handling of DISCOVER_MODES failures
  (bsc#1012628).
- usb: typec: ucsi: Check if power role change actually happened
  before handling (bsc#1012628).
- usb: typec: ucsi: Don't update power_supply on power role
  change if not connected (bsc#1012628).
- USB: serial: option: add MeiG SRM813Q (bsc#1012628).
- USB: serial: option: add missing RSVD(5) flag for Rolling
  RW135R-GL (bsc#1012628).
- USB: serial: belkin_sa: validate interrupt status length
  (bsc#1012628).
- USB: serial: cypress_m8: validate interrupt packet headers
  (bsc#1012628).
- USB: serial: digi_acceleport: fix memory corruption with small
  endpoints (bsc#1012628).
- USB: serial: keyspan: fix missing indat transfer sanity check
  (bsc#1012628).
- USB: serial: mxuport: fix memory corruption with small endpoint
  (bsc#1012628).
- USB: serial: mct_u232: fix memory corruption with small endpoint
  (bsc#1012628).
- USB: serial: mct_u232: fix missing interrupt-in transfer sanity
  check (bsc#1012628).
- usb: gadget: uvc: hold opts-&gt;lock across XU walks in
  uvc_function_bind (bsc#1012628).
- usb: gadget: net2280: Fix double free in probe error path
  (bsc#1012628).
- usb: gadget: f_hid: fix device reference leak in hidg_alloc()
  (bsc#1012628).
- usb: gadget: composite: fix integer underflow in WebUSB GET_URL
  handling (bsc#1012628).
- usb: gadget: dummy_hcd: Reject hub port requests for
  non-existent ports (bsc#1012628).
- usb: gadget: f_fs: copy only received bytes on short ep0 read
  (bsc#1012628).
- usb: gadget: f_fs: serialize DMABUF cancel against request
  completion (bsc#1012628).
- thunderbolt: property: Reject u32 wrap in
  tb_property_entry_valid() (bsc#1012628).
- thunderbolt: property: Reject dir_len &lt; 4 to prevent size_t
  underflow (bsc#1012628).
- thunderbolt: property: Cap recursion depth in
  __tb_property_parse_dir() (bsc#1012628).
- scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL
  walker (bsc#1012628).
- scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32
  (bsc#1012628).
- scsi: target: iscsi: Fix CRC overread and double-free in
  iscsit_handle_text_cmd() (bsc#1012628).
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends
  to rsp_buf (bsc#1012628).
- scsi: target: iscsi: Validate CHAP_R length before base64 decode
  (bsc#1012628).
- drm/hyperv: validate resolution_count and fix WIN8 fallback
  (bsc#1012628).
- drm/hyperv: validate VMBus packet size in receive callback
  (bsc#1012628).
- drm/gem: fix race between change_handle and handle_delete
  (bsc#1012628).
- drm/i915/color: Fix HDR pre-CSC LUT programming loop
  (bsc#1012628).
- drm/i915/psr: Block DC states on vblank enable when Panel
  Replay supported (bsc#1012628).
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank
  enable (bsc#1012628).
- drm/i915: Fix potential UAF in TTM object purge (bsc#1012628).
- drm/amd/pm/si: Disregard vblank time when no displays are
  connected (bsc#1012628).
- serial: altera_jtaguart: handle uart_add_one_port() failures
  (bsc#1012628).
- serial: qcom-geni: fix UART_RX_PAR_EN bit position
  (bsc#1012628).
- serial: qcom_geni: fix kfifo underflow when flush precedes
  DMA completion IRQ (bsc#1012628).
- serial: sh-sci: fix memory region release in error path
  (bsc#1012628).
- serial: zs: Fix swapped RI/DSR modem line transition counting
  (bsc#1012628).
- serial: fsl_lpuart: fix rx buffer and DMA map leaks in
  start_rx_dma (bsc#1012628).
- drm/amdkfd: fix NULL pointer bug in svm_range_set_attr
  (bsc#1012628).
- drm/amdkfd: fix a vulnerability of integer overflow in kfd
  debugger (bsc#1012628).
- drm/amdkfd: Check for pdd drm file first in CRIU restore path
  (bsc#1012628).
- drm/amdgpu: fix lock leak on ENOMEM in
  AMDGPU_GEM_OP_GET_MAPPING_INFO (bsc#1012628).
- drm/amdgpu: fix calling VM invalidation in
  amdgpu_hmm_invalidate_gfx (bsc#1012628).
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1012628).
- drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO
  (bsc#1012628).
- serial: dz: Fix bootconsole message clobbering at chip reset
  (bsc#1012628).
- serial: dz: Fix bootconsole handover lockup (bsc#1012628).
- serial: dz: Convert to use a platform device (bsc#1012628).
- serial: zs: Fix bootconsole handover lockup (bsc#1012628).
- serial: zs: Switch to using channel reset (bsc#1012628).
- serial: zs: Convert to use a platform device (bsc#1012628).
- serial: core: introduce
  guard(uart_port_lock_check_sysrq_irqsave) (bsc#1012628).
- serial: 8250: dispatch SysRq character in
  serial8250_handle_irq() (bsc#1012628).
- serial: 8250_dw: dispatch SysRq character in dw8250_handle_irq()
  (bsc#1012628).
- Revert "mm/hugetlbfs: update hugetlbfs to use mmap_prepare"
  (bsc#1012628).
- platform/x86/intel/vsec: Refactor base_addr handling
  (bsc#1012628).
- platform/x86/intel/vsec: Make driver_data info const
  (bsc#1012628).
- platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe
  error recovery (bsc#1012628).
- rxrpc: Fix RESPONSE packet verification to extract skb to a
  linear buffer (bsc#1012628).
- ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360
  15-fh0xxx (bsc#1012628).
- ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP 16 Piston
  OmniBook X (bsc#1012628).
- arm64: tlb: Flush walk cache when unsharing PMD tables
  (bsc#1012628).
- i2c: tegra: make tegra_i2c_mutex_unlock() return void
  (bsc#1012628).
- hwmon: (pmbus) Add support for guarded PMBus lock (bsc#1012628).
- hwmon: (pmbus/adm1266) serialize sequencer_state debugfs read
  with pmbus_lock (bsc#1012628).
- hwmon: (pmbus/adm1266) serialize GPIO PMBus accesses with
  pmbus_lock (bsc#1012628).
- net: phy: micrel: fix LAN8814 QSGMII soft reset (bsc#1012628).
- xhci: tegra: Fix ghost USB device on dual-role port unplug
  (bsc#1012628).
- mailbox: Fix NULL message support in mbox_send_message()
  (bsc#1012628).
- usb: core: Fix SuperSpeed root hub wMaxPacketSize (bsc#1012628).
- tools: ynl: add scope qualifier for definitions (bsc#1012628).
- KVM: arm64: vgic-its: Drop the translation cache reference
  only for the erased entry (bsc#1012628).
- KVM: arm64: Reassign nested_mmus array behind mmu_lock
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.0.12-006-bcache-fix-uninitialized-closure-object.patch.
- Rename to
  patches.kernel.org/7.0.12-055-blk-mq-reinsert-cached-request-to-the-list.patch.
- commit 32bf651</changelog>
  <changelog author="jslaby@suse.cz" date="1781179200">- Update config files. Disable CAIF (bsc#1266716 CVE-2026-45866).
  The whole code is removed in 7.1 anyway by 6d5431555de0 ("caif: remove
  CAIF NETWORK LAYER"). Let's be proactive as there are holes.
- commit 3512c44</changelog>
  <changelog author="mkubecek@suse.cz" date="1781438400">- config: update and reenable arm64 configs
- option values copied from x86_64, i386 and riscv64 except
  - ARM64_ERRATUM_4193714=y
  - ARM64_LSUI=n
  - STM32_DBG_BUS=n
  - DWMAC_NUVOTON=m
  - PINCTRL_ELIZA=m
  - PINCTRL_HAWI=m
  - PINCTRL_IPQ5210=m
  - PINCTRL_MILOS_LPASS_LPI=m
  - PINCTRL_SDM670_LPASS_LPI=m
  - PINCTRL_RTD1625=m
  - CHARGER_MAX77759=m
  - MACSMC_POWER=m
  - SND_SOC_TEGRA_WM8962=n
  - SND_SOC_TEGRA_CPCAP=n
  - USB_DWC3_IMX=m
  - MMC_SDHCI_BST=m
  - CLK_ELIZA_DISPCC=m
  - CLK_ELIZA_TCSRCC=m
  - CLK_GLYMUR_GPUCC=m
  - CLK_GLYMUR_VIDEOCC=m
  - CLK_NORD_GCC=m
  - IPQ_GCC_5210=m
  - CLK_NORD_TCSRCC=m
  - SM_GPUCC_8750=m
  - ARCH_R9A08G046=y
  - ARCH_TEGRA_238_SOC=y
  - RESET_SKY1=y
  - NVIDIA_TEGRA410_CMEM_LATENCY_PMU=m
  - NVIDIA_TEGRA410_C2C_PMU=m
  - INTERCONNECT_QCOM_ELIZA=m
  - NTFS_DEBUG=n
  - NTFS_FS_POSIX_ACL=y
- commit 4326118</changelog>
  <changelog author="mkubecek@suse.cz" date="1781438401">- config: update and reenable armv7hl configs
- option values copied from arm64 except
  - DRM_TILCDC_PANEL_LEGACY=y
  - CLK_RV1103B=y
- commit 8a5016d</changelog>
  <changelog author="mkubecek@suse.cz" date="1781438402">- config: update and reenable armv7hl configs
- option values copied from armv7hl
- commit cce93c7</changelog>
  <changelog author="mkubecek@suse.cz" date="1781438403">- update to 7.1 final
- refresh configs
- commit 957a9a8</changelog>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix uninitialised pointer passed to
  audit_log_untrustedstring() (bsc#1259668).
  (cherry picked from commit 65d5a585a9fea5f40a1da0e20217aa062f95b44a)
- apparmor: don't audit files pointing to aa_null.dentry
  (bsc#1259668).
  (cherry picked from commit 43454f55637bff80a9bbe035dd7a8c52cb494e83)
- apparmor: fix uninitialised pointer passed to
  audit_log_untrustedstring() (bsc#1259668).
- apparmor: don't audit files pointing to aa_null.dentry
  (bsc#1259668).
- commit d8bfaae</changelog>
  <changelog author="ddiss@suse.de" date="1781524801">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524802">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524804">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
</package>
<package pkgid="52ac9d95c413bb3c7001c16ceccb7d854aba389b049c42997a9fa4220a526570" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="2.1"/>
  <changelog author="rgoldwyn@suse.com" date="1780488000">- ima: return error early if file xattr cannot be changed (bsc#1261041).
  (cherry picked from commit 5d98aa3da261a44f676d60ae2e11bfbf8f691928)
- ima: return error early if file xattr cannot be changed (bsc#1261041).
- commit c8ca8cf</changelog>
  <changelog author="tiwai@suse.de" date="1780488001">- rpm: Add BuildRequires for Rust enablement (bsc#1258538)
  Update mkspec and template to generate the spec files with
  BuildRequires of Rust-related packages when ENABLE_RUST=Yes is set in
  rpm/config.sh.
- commit d0f276f</changelog>
  <changelog author="tiwai@suse.de" date="1780488002">- rpm/check-for-config-changes: ignore Rust-related configs (bsc#1258538)
  Those configs may be dynamically changed at the build time
- commit 5251980</changelog>
  <changelog author="tiwai@suse.de" date="1780488003">- rpm/mkspec: Conditionally set Rust BuildReqs (bsc#1258538)
  This is a further optimization of kernel packaging rust-enablement.
  Add the check of CONFIG_RUST at creating the spec for each kernel
  flavor, and set BuildRequires conditionally only for archs that have
  CONFIG_RUST.  This avoids the unnecessary dependency chains due to
  unused rust.
  The main knob ENABLE_RUST is still needed because otherwise we can't
  know whether to pass the dummy-tools or not at processing
  run_oldconfig.
- commit ccf4b93</changelog>
  <changelog author="msuchanek@suse.de" date="1780660800">- packaging: Add nvidia kernel description
- commit 5f2699f</changelog>
  <changelog author="mkubecek@suse.cz" date="1780920000">- update to 7.1-rc7
- commit f7dda10</changelog>
  <changelog author="jslaby@suse.cz" date="1781006400">- i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl
  (git-fixes).
- commit e3cc0a5</changelog>
  <changelog author="jslaby@suse.cz" date="1781092800">- drm/gem: Try to fix change_handle ioctl, attempt 4 (git-fixes).
- commit 41887ca</changelog>
  <changelog author="jslaby@suse.cz" date="1781092801">- Update
  patches.kernel.org/7.0.10-0188-net-sched-act_ct-Only-release-RCU-read-lock-a.patch
  (bsc#1012628 CVE-2026-46319).
- Update
  patches.kernel.org/7.0.10-0860-eventpoll-fix-ep_remove-struct-eventpoll-stru.patch
  (bsc#1012628 CVE-2026-46242 bsc#1267618).
- Update
  patches.kernel.org/7.0.10-0889-netfilter-nf_tables-use-list_del_rcu-for-netl.patch
  (bsc#1012628 CVE-2026-46324 bsc#1267995).
- Update
  patches.kernel.org/7.0.10-1090-io-wq-check-that-the-predecessor-is-hashed-in.patch
  (bsc#1012628 CVE-2026-46274 bsc#1267918).
- Update
  patches.kernel.org/7.0.11-004-smb-client-reject-userspace-cifs.spnego-descri.patch
  (bsc#1012628 CVE-2026-46243 bsc#1266238).
- Update
  patches.kernel.org/7.0.11-030-io_uring-waitid-clear-waitid-info-before-copyi.patch
  (bsc#1012628 CVE-2026-46315 bsc#1267953).
- Update
  patches.kernel.org/7.0.11-044-Bluetooth-hci_uart-fix-UAFs-and-race-condition.patch
  (bsc#1012628 CVE-2026-46275 bsc#1267968).
- Update
  patches.kernel.org/7.0.11-060-netfilter-nft_inner-Fix-IPv6-inner_thoff-desyn.patch
  (bsc#1012628 CVE-2026-46244 bsc#1267654).
- Update
  patches.kernel.org/7.0.11-452-net-gro-don-t-merge-zcopy-skbs.patch
  (bsc#1012628 CVE-2026-46323).
- Update
  patches.kernel.org/7.0.12-019-tun-free-page-on-short-frame-rejection-in-tun_.patch
  (bsc#1012628 CVE-2026-46321).
- Update
  patches.kernel.org/7.0.12-020-tap-free-page-on-error-paths-in-tap_get_user_x.patch
  (bsc#1012628 CVE-2026-46320 bsc#1267993).
- Update
  patches.kernel.org/7.0.12-021-tun-free-page-on-build_skb-failure-in-tun_xdp_.patch
  (bsc#1012628 CVE-2026-46322 bsc#1267994).
- Update
  patches.kernel.org/7.0.12-315-Revert-mm-hugetlbfs-update-hugetlbfs-to-use-mm.patch
  (bsc#1012628 CVE-2026-46318).
- Update
  patches.kernel.org/7.0.12-332-KVM-arm64-vgic-its-Drop-the-translation-cache-.patch
  (bsc#1012628 CVE-2026-46316).
- Update
  patches.kernel.org/7.0.12-333-KVM-arm64-Reassign-nested_mmus-array-behind-mm.patch
  (bsc#1012628 CVE-2026-46317).
- Update
  patches.kernel.org/7.0.4-008-LoongArch-Add-spectre-boundry-for-syscall-dispa.patch
  (bsc#1012628 CVE-2026-45993 bsc#1267352).
- Update
  patches.kernel.org/7.0.4-009-drm-nouveau-fix-u32-overflow-in-pushbuf-reloc-b.patch
  (bsc#1012628 CVE-2026-46006 bsc#1267479).
- Update
  patches.kernel.org/7.0.4-010-leds-qcom-lpg-Check-for-array-overflow-when-sel.patch
  (bsc#1012628 CVE-2026-46286 bsc#1267932).
- Update
  patches.kernel.org/7.0.4-011-greybus-gb-beagleplay-bound-bootloader-receive-.patch
  (bsc#1012628 CVE-2026-46332).
- Update
  patches.kernel.org/7.0.4-012-greybus-gb-beagleplay-fix-sleep-in-atomic-conte.patch
  (bsc#1012628 CVE-2026-46041 bsc#1267589).
- Update
  patches.kernel.org/7.0.4-013-misc-ibmasm-fix-OOB-MMIO-read-in-ibmasm_handle_.patch
  (bsc#1012628 CVE-2026-46022 bsc#1267434).
- Update
  patches.kernel.org/7.0.4-014-ibmasm-fix-OOB-reads-in-command_file_write-due-.patch
  (bsc#1012628 CVE-2026-45994 bsc#1267432).
- Update
  patches.kernel.org/7.0.4-015-ibmasm-fix-heap-over-read-in-ibmasm_send_i2o_me.patch
  (bsc#1012628 CVE-2026-46064 bsc#1267497).
- Update
  patches.kernel.org/7.0.4-019-drm-nouveau-fix-nvkm_device-leak-on-aperture-re.patch
  (bsc#1012628 CVE-2026-52904).
- Update
  patches.kernel.org/7.0.4-022-fs-afs-revert-mmap_prepare-change.patch
  (bsc#1012628 CVE-2026-46100 bsc#1267447).
- Update
  patches.kernel.org/7.0.4-024-lib-test_hmm-evict-device-pages-on-file-close-t.patch
  (bsc#1012628 CVE-2026-46280 bsc#1267958).
- Update
  patches.kernel.org/7.0.4-030-ocfs2-split-transactions-in-dio-completion-to-a.patch
  (bsc#1012628 CVE-2026-46080 bsc#1267596).
- Update
  patches.kernel.org/7.0.4-031-Input-edt-ft5x06-fix-use-after-free-in-debugfs-.patch
  (bsc#1012628 CVE-2026-46097 bsc#1267428).
- Update
  patches.kernel.org/7.0.4-032-zram-do-not-forget-to-endio-for-partial-discard.patch
  (bsc#1012628 CVE-2026-46089 bsc#1267445).
- Update
  patches.kernel.org/7.0.4-033-wifi-rtw88-check-for-PCI-upstream-bridge-existe.patch
  (bsc#1012628 CVE-2026-46092 bsc#1267595).
- Update
  patches.kernel.org/7.0.4-034-wifi-mwifiex-fix-use-after-free-in-mwifiex_adap.patch
  (bsc#1012628 CVE-2026-46069 bsc#1267437).
- Update
  patches.kernel.org/7.0.4-038-vfio-cdx-Serialize-VFIO_DEVICE_SET_IRQS-with-a-.patch
  (bsc#1012628 CVE-2026-46036 bsc#1267470).
- Update
  patches.kernel.org/7.0.4-042-spi-imx-fix-use-after-free-on-unbind.patch
  (bsc#1012628 CVE-2026-45996 bsc#1267436).
- Update
  patches.kernel.org/7.0.4-043-spi-ch341-fix-memory-leaks-on-probe-failures.patch
  (bsc#1012628 CVE-2026-46074 bsc#1267468).
- Update
  patches.kernel.org/7.0.4-044-crypto-algif_aead-snapshot-IV-for-async-AEAD-re.patch
  (bsc#1012628 CVE-2026-46028 bsc#1267430).
- Update
  patches.kernel.org/7.0.4-047-of-unittest-fix-use-after-free-in-of_unittest_c.patch
  (bsc#1012628 CVE-2026-46288 bsc#1267941).
- Update
  patches.kernel.org/7.0.4-049-hwmon-powerz-Fix-missing-usb_kill_urb-on-signal.patch
  (bsc#1012628 CVE-2026-46073 bsc#1267597).
- Update
  patches.kernel.org/7.0.4-050-EDAC-versalnet-Fix-device_node-leak-in-mc_probe.patch
  (bsc#1012628 CVE-2026-46030 bsc#1267451).
- Update
  patches.kernel.org/7.0.4-054-net-caif-clear-client-service-pointer-on-teardo.patch
  (bsc#1012628 CVE-2026-46098 bsc#1267552).
- Update
  patches.kernel.org/7.0.4-055-net-strparser-fix-skb_head-leak-in-strp_abort_s.patch
  (bsc#1012628 CVE-2026-46102 bsc#1267502).
- Update
  patches.kernel.org/7.0.4-056-media-mtk-jpeg-fix-use-after-free-in-release-pa.patch
  (bsc#1012628 CVE-2026-46011 bsc#1267491).
- Update
  patches.kernel.org/7.0.4-065-ext2-reject-inodes-with-zero-i_nlink-and-valid-.patch
  (bsc#1012628 CVE-2026-46002 bsc#1267587).
- Update
  patches.kernel.org/7.0.4-070-ALSA-ctxfi-Add-fallback-to-default-RSR-for-S-PD.patch
  (bsc#1012628 CVE-2026-46049 bsc#1267448).
- Update
  patches.kernel.org/7.0.4-072-erofs-fix-the-out-of-bounds-nameoff-handling-fo.patch
  (bsc#1012628 CVE-2026-46078 bsc#1267505).
- Update
  patches.kernel.org/7.0.4-073-ipmi-ssif-Clean-up-kthread-on-errors.patch
  (bsc#1012628 CVE-2026-46044 bsc#1267464).
- Update
  patches.kernel.org/7.0.4-078-media-rockchip-rkcif-fix-off-by-one-bugs.patch
  (bsc#1012628 CVE-2026-52907).
- Update
  patches.kernel.org/7.0.4-081-mm-alloc_tag-clear-codetag-for-pages-allocated-.patch
  (bsc#1012628 CVE-2026-46279 bsc#1267929).
- Update
  patches.kernel.org/7.0.4-082-mm-damon-core-fix-damon_call-vs-kdamond_fn-exit.patch
  (bsc#1012628 CVE-2026-46025 bsc#1267585).
- Update
  patches.kernel.org/7.0.4-084-mm-hugetlb-fix-early-boot-crash-on-parameters-w.patch
  (bsc#1012628 CVE-2026-46284 bsc#1267938).
- Update
  patches.kernel.org/7.0.4-085-mtd-docg3-fix-use-after-free-in-docg3_release.patch
  (bsc#1012628 CVE-2026-46285 bsc#1267948).
- Update
  patches.kernel.org/7.0.4-105-mm-zone_device-do-not-touch-device-folio-after-.patch
  (bsc#1012628 CVE-2026-46277 bsc#1267960).
- Update
  patches.kernel.org/7.0.4-126-rxrpc-Fix-potential-UAF-after-skb_unshare-failu.patch
  (bsc#1012628 CVE-2026-45998 bsc#1267452).
- Update
  patches.kernel.org/7.0.4-127-rxrpc-Fix-memory-leaks-in-rxkad_verify_response.patch
  (bsc#1012628 CVE-2026-46012 bsc#1267350).
- Update
  patches.kernel.org/7.0.4-128-rxrpc-Fix-conn-level-packet-handling-to-unshare.patch
  (bsc#1012628 CVE-2026-46000 bsc#1267490).
- Update
  patches.kernel.org/7.0.4-135-net-txgbe-fix-RTNL-assertion-warning-when-remov.patch
  (bsc#1012628 CVE-2026-46287 bsc#1267954).
- Update
  patches.kernel.org/7.0.4-141-net-rds-fix-MR-cleanup-on-copy-error.patch
  (bsc#1012628 CVE-2026-46053 bsc#1267427).
- Update
  patches.kernel.org/7.0.4-144-net-ks8851-Reinstate-disabling-of-BHs-around-IR.patch
  (bsc#1012628 CVE-2026-46031 bsc#1267463).
- Update
  patches.kernel.org/7.0.4-145-net-bridge-use-a-stable-FDB-dst-snapshot-in-RCU.patch
  (bsc#1012628 CVE-2026-46086 bsc#1267524).
- Update
  patches.kernel.org/7.0.4-154-ipv4-icmp-validate-reply-type-before-using-icmp.patch
  (bsc#1012628 CVE-2026-46037 bsc#1267361).
- Update
  patches.kernel.org/7.0.4-162-fbdev-defio-Disconnect-deferred-I-O-from-the-li.patch
  (bsc#1012628 CVE-2026-46065 bsc#1267458).
- Update
  patches.kernel.org/7.0.4-165-hwmon-powerz-Avoid-cacheline-sharing-for-DMA-bu.patch
  (bsc#1012628 CVE-2026-46007 bsc#1267586).
- Update
  patches.kernel.org/7.0.4-170-selinux-fix-overlayfs-mmap-and-mprotect-access-.patch
  (bsc#1012628 CVE-2026-46054 bsc#1267475).
- Update
  patches.kernel.org/7.0.4-176-crypto-qat-fix-IRQ-cleanup-on-6xxx-probe-failur.patch
  (bsc#1012628 CVE-2026-46060 bsc#1267594).
- Update
  patches.kernel.org/7.0.4-178-xfs-fix-a-resource-leak-in-xfs_alloc_buftarg.patch
  (bsc#1012628 CVE-2026-46005 bsc#1267431).
- Update
  patches.kernel.org/7.0.4-184-tpm2-sessions-Fix-missing-tpm_buf_destroy-in-tp.patch
  (bsc#1012628 CVE-2026-46096 bsc#1267371).
- Update
  patches.kernel.org/7.0.4-186-tpm-Use-kfree_sensitive-to-free-auth-session-in.patch
  (bsc#1012628 CVE-2026-46283 bsc#1267952).
- Update
  patches.kernel.org/7.0.4-190-mm-vmalloc-take-vmap_purge_lock-in-shrinker.patch
  (bsc#1012628 CVE-2026-46093 bsc#1267548).
- Update
  patches.kernel.org/7.0.4-191-mm-memfd_luo-fix-physical-address-conversion-in.patch
  (bsc#1012628 CVE-2026-46013 bsc#1267351).
- Update
  patches.kernel.org/7.0.4-192-mm-mempolicy-fix-memory-leaks-in-weighted_inter.patch
  (bsc#1012628 CVE-2026-46042 bsc#1267588).
- Update
  patches.kernel.org/7.0.4-193-mm-damon-stat-fix-memory-leak-on-damon_start-fa.patch
  (bsc#1012628 CVE-2026-46087 bsc#1267492).
- Update
  patches.kernel.org/7.0.4-194-mm-damon-core-validate-damos_quota_goal-nid-for.patch
  (bsc#1012628 CVE-2026-46020 bsc#1267446).
- Update
  patches.kernel.org/7.0.4-195-mm-damon-core-validate-damos_quota_goal-nid-for.patch
  (bsc#1012628 CVE-2026-46067 bsc#1267498).
- Update
  patches.kernel.org/7.0.4-198-mm-damon-core-disallow-non-power-of-two-min_reg.patch
  (bsc#1012628 CVE-2026-52905).
- Update
  patches.kernel.org/7.0.4-205-KVM-SVM-Inject-UD-for-INVLPGA-if-EFER.SVME-0.patch
  (bsc#1012628 CVE-2026-46082 bsc#1267473).
- Update
  patches.kernel.org/7.0.4-208-KVM-nSVM-Always-use-NextRIP-as-vmcb02-s-NextRIP.patch
  (bsc#1012628 CVE-2026-46059 bsc#1267495).
- Update
  patches.kernel.org/7.0.4-212-KVM-nSVM-Avoid-clearing-VMCB_LBR-in-vmcb12.patch
  (bsc#1012628 CVE-2026-46071 bsc#1267591).
- Update
  patches.kernel.org/7.0.4-215-KVM-SVM-Add-missing-save-restore-handling-of-LB.patch
  (bsc#1012628 CVE-2026-46014 bsc#1267440).
- Update
  patches.kernel.org/7.0.4-219-KVM-nSVM-Triple-fault-if-restore-host-CR3-fails.patch
  (bsc#1012628 CVE-2026-46032 bsc#1267476).
- Update
  patches.kernel.org/7.0.4-227-KVM-nSVM-Raise-UD-if-unhandled-VMMCALL-isn-t-in.patch
  (bsc#1012628 CVE-2026-46076 bsc#1267365).
- Update
  patches.kernel.org/7.0.4-237-md-md-llbitmap-skip-reading-rdevs-that-are-not-.patch
  (bsc#1012628 CVE-2026-46045 bsc#1267474).
- Update
  patches.kernel.org/7.0.4-238-md-md-llbitmap-raise-barrier-before-state-machi.patch
  (bsc#1012628 CVE-2026-46095 bsc#1267363).
- Update
  patches.kernel.org/7.0.4-239-md-raid5-fix-soft-lockup-in-retry_aligned_read.patch
  (bsc#1012628 CVE-2026-46051 bsc#1267360).
- Update
  patches.kernel.org/7.0.4-240-md-raid5-validate-payload-size-before-accessing.patch
  (bsc#1012628 CVE-2026-46070 bsc#1267501).
- Update
  patches.kernel.org/7.0.4-244-inotify-fix-watch-count-leak-when-fsnotify_add_.patch
  (bsc#1012628 CVE-2026-46040 bsc#1267472).
- Update
  patches.kernel.org/7.0.4-248-tcp-call-sk_data_ready-after-listener-migration.patch
  (bsc#1012628 CVE-2026-46015 bsc#1267439).
- Update
  patches.kernel.org/7.0.4-252-9p-fix-access-mode-flags-being-ORed-instead-of-.patch
  (bsc#1012628 CVE-2026-52906).
- Update
  patches.kernel.org/7.0.4-254-Bluetooth-hci_event-fix-potential-UAF-in-SSP-pa.patch
  (bsc#1012628 CVE-2026-46056 bsc#1267435).
- Update
  patches.kernel.org/7.0.4-256-can-ucan-fix-devres-lifetime.patch
  (bsc#1012628 CVE-2026-46103 bsc#1267555).
- Update
  patches.kernel.org/7.0.4-263-crypto-atmel-tdes-fix-DMA-sync-direction.patch
  (bsc#1012628 CVE-2026-46077 bsc#1267466).
- Update
  patches.kernel.org/7.0.4-265-crypto-atmel-sha204a-Fix-potential-UAF-and-memo.patch
  (bsc#1012628 CVE-2026-46075 bsc#1267367).
- Update
  patches.kernel.org/7.0.4-267-crypto-nx-fix-bounce-buffer-leaks-in-nx842_cryp.patch
  (bsc#1012628 CVE-2026-46068 bsc#1267592).
- Update
  patches.kernel.org/7.0.4-270-dm-mirror-fix-integer-overflow-in-create_dirty_.patch
  (bsc#1012628 CVE-2026-46023 bsc#1267449).
- Update
  patches.kernel.org/7.0.4-272-ceph-fix-num_ops-off-by-one-when-crypto-allocat.patch
  (bsc#1012628 CVE-2026-46066 bsc#1267593).
- Update
  patches.kernel.org/7.0.4-273-ceph-only-d_add-negative-dentries-when-they-are.patch
  (bsc#1012628 CVE-2026-46052 bsc#1267494).
- Update
  patches.kernel.org/7.0.4-278-ntfs3-add-buffer-boundary-checks-to-run_unpack.patch
  (bsc#1012628 CVE-2026-46072 bsc#1267441).
- Update
  patches.kernel.org/7.0.4-279-ntfs3-fix-integer-overflow-in-run_unpack-volume.patch
  (bsc#1012628 CVE-2026-46062 bsc#1267358).
- Update
  patches.kernel.org/7.0.4-281-rxgk-Fix-potential-integer-overflow-in-length-c.patch
  (bsc#1012628 CVE-2026-46039 bsc#1267465).
- Update
  patches.kernel.org/7.0.4-287-iio-frequency-admv1013-fix-NULL-pointer-derefer.patch
  (bsc#1012628 CVE-2026-46282 bsc#1267919).
- Update
  patches.kernel.org/7.0.4-299-drm-amdgpu-fix-zero-size-GDS-range-init-on-RDNA.patch
  (bsc#1012628 CVE-2026-46276 bsc#1267922).
- Update
  patches.kernel.org/7.0.4-300-drm-imagination-Fix-segfault-when-updating-ftra.patch
  (bsc#1012628 CVE-2026-46278 bsc#1267915).
- Update
  patches.kernel.org/7.0.4-301-ALSA-caiaq-fix-usb_dev-refcount-leak-on-probe-f.patch
  (bsc#1012628 CVE-2026-46048 bsc#1267496).
- Update
  patches.kernel.org/7.0.4-302-ALSA-aloop-Fix-peer-runtime-UAF-during-format-c.patch
  (bsc#1012628 CVE-2026-46090 bsc#1267531).
- Update
  patches.kernel.org/7.0.4-303-vmalloc-fix-buffer-overflow-in-vrealloc_node_al.patch
  (bsc#1012628 CVE-2026-46281 bsc#1267961).
- Update
  patches.kernel.org/7.0.4-305-mm-slab-return-NULL-early-from-kmalloc_nolock-i.patch
  (bsc#1012628 CVE-2026-46029 bsc#1267590).
- Update
  patches.kernel.org/7.0.7-001-scsi-target-configfs-Bound-snprintf-return-in-t.patch
  (bsc#1012628 CVE-2026-46149 bsc#1267648).
- Update
  patches.kernel.org/7.0.7-002-ipmi-Add-limits-to-event-and-receive-message-re.patch
  (bsc#1012628 CVE-2026-46177 bsc#1267725).
- Update
  patches.kernel.org/7.0.7-003-ipmi-Check-event-message-buffer-response-for-ba.patch
  (bsc#1012628 CVE-2026-46128 bsc#1267643).
- Update
  patches.kernel.org/7.0.7-004-ipmi-si-Return-state-to-normal-if-message-alloc.patch
  (bsc#1012628 CVE-2026-46108 bsc#1267615).
- Update
  patches.kernel.org/7.0.7-013-ASoC-SOF-Don-t-allow-pointer-operations-on-unco.patch
  (bsc#1012628 CVE-2026-46179 bsc#1267719).
- Update
  patches.kernel.org/7.0.7-018-flow_dissector-do-not-dissect-PPPoE-PFC-frames.patch
  (bsc#1012628 CVE-2026-46306 bsc#1267986).
- Update
  patches.kernel.org/7.0.7-021-exit-prevent-preemption-of-oopsing-TASK_DEAD-ta.patch
  (bsc#1012628 CVE-2026-46173 bsc#1267723).
- Update
  patches.kernel.org/7.0.7-030-wifi-ath5k-do-not-access-array-OOB.patch
  (bsc#1012628 CVE-2026-46307 bsc#1267987).
- Update
  patches.kernel.org/7.0.7-032-wifi-b43-enforce-bounds-check-on-firmware-key-i.patch
  (bsc#1012628 CVE-2026-46122 bsc#1267583).
- Update
  patches.kernel.org/7.0.7-034-usb-usblp-fix-heap-leak-in-IEEE-1284-device-ID-.patch
  (bsc#1012628 CVE-2026-46151 bsc#1267728).
- Update
  patches.kernel.org/7.0.7-037-ALSA-usb-audio-Avoid-potential-endless-loop-in-.patch
  (bsc#1012628 CVE-2026-46146 bsc#1267571).
- Update
  patches.kernel.org/7.0.7-045-ALSA-pcm-oss-Fix-data-race-at-accessing-runtime.patch
  (bsc#1012628 CVE-2026-46157 bsc#1267726).
- Update
  patches.kernel.org/7.0.7-054-xfrm-defensively-unhash-xfrm_state-lists-in-__x.patch
  (bsc#1012628 CVE-2026-46116 bsc#1267369).
- Update
  patches.kernel.org/7.0.7-056-xfrm-ah-account-for-ESN-high-bits-in-async-call.patch
  (bsc#1012628 CVE-2026-46193 bsc#1267656).
- Update
  patches.kernel.org/7.0.7-058-selinux-use-sk-blob-accessor-in-socket-permissi.patch
  (bsc#1012628 CVE-2026-46104 bsc#1267559).
- Update
  patches.kernel.org/7.0.7-064-selinux-allow-multiple-opens-of-sys-fs-selinux-.patch
  (bsc#1012628 CVE-2026-46302 bsc#1267947).
- Update
  patches.kernel.org/7.0.7-068-Bluetooth-virtio_bt-clamp-rx-length-before-skb_.patch
  (bsc#1012628 CVE-2026-46123 bsc#1267621).
- Update
  patches.kernel.org/7.0.7-070-Bluetooth-btmtk-validate-WMT-event-SKB-length-b.patch
  (bsc#1012628 CVE-2026-46140 bsc#1267677).
- Update
  patches.kernel.org/7.0.7-071-Bluetooth-hci_conn-fix-potential-UAF-in-create_.patch
  (bsc#1012628 CVE-2026-46111 bsc#1267626).
- Update
  patches.kernel.org/7.0.7-072-Bluetooth-hci_event-Fix-OOB-read-and-infinite-l.patch
  (bsc#1012628 CVE-2026-46138 bsc#1267649).
- Update
  patches.kernel.org/7.0.7-088-spi-s3c64xx-fix-NULL-deref-on-driver-unbind.patch
  (bsc#1012628 CVE-2026-46296 bsc#1267927).
- Update
  patches.kernel.org/7.0.7-089-staging-rtl8723bs-os_dep-avoid-NULL-pointer-der.patch
  (bsc#1012628 CVE-2026-46305 bsc#1267930).
- Update
  patches.kernel.org/7.0.7-091-fanotify-fix-false-positive-on-permission-event.patch
  (bsc#1012628 CVE-2026-46150 bsc#1267388).
- Update
  patches.kernel.org/7.0.7-098-net-rtnetlink-zero-ifla_vf_broadcast-to-avoid-s.patch
  (bsc#1012628 CVE-2026-46132 bsc#1267616).
- Update
  patches.kernel.org/7.0.7-111-pseries-papr-hvpipe-Fix-race-with-interrupt-han.patch
  (bsc#1012628 CVE-2026-46298 bsc#1267923).
- Update
  patches.kernel.org/7.0.7-112-pseries-papr-hvpipe-Prevent-kernel-stack-memory.patch
  (bsc#1012628 CVE-2026-46182 bsc#1267383).
- Update
  patches.kernel.org/7.0.7-117-ip6_gre-Use-cached-t-net-in-ip6erspan_changelin.patch
  (bsc#1012628 CVE-2026-46120 bsc#1267640).
- Update
  patches.kernel.org/7.0.7-118-net-libwx-use-request_irq-for-VF-misc-interrupt.patch
  (bsc#1012628 CVE-2026-46297 bsc#1267935).
- Update
  patches.kernel.org/7.0.7-125-x86-efi-Fix-graceful-fault-handling-after-FPU-s.patch
  (bsc#1012628 CVE-2026-46290 bsc#1267973).
- Update
  patches.kernel.org/7.0.7-132-pmdomain-mediatek-fix-use-after-free-in-scpsys_.patch
  (bsc#1012628 CVE-2026-46308 bsc#1267988).
- Update
  patches.kernel.org/7.0.7-139-fbcon-Avoid-OOB-font-access-if-console-rotation.patch
  (bsc#1012628 CVE-2026-46191 bsc#1267690).
- Update
  patches.kernel.org/7.0.7-145-ibmveth-Disable-GSO-for-packets-with-small-MSS.patch
  (bsc#1012628 CVE-2026-46273 bsc#1267651).
- Update
  patches.kernel.org/7.0.7-150-spi-microchip-core-qspi-control-built-in-cs-man.patch
  (bsc#1012628 CVE-2026-46148 bsc#1267718).
- Update
  patches.kernel.org/7.0.7-158-spi-topcliff-pch-fix-use-after-free-on-unbind.patch
  (bsc#1012628 CVE-2026-46301 bsc#1267983).
- Update
  patches.kernel.org/7.0.7-165-clk-microchip-mpfs-ccc-fix-out-of-bounds-access.patch
  (bsc#1012628 CVE-2026-46293 bsc#1267933).
- Update
  patches.kernel.org/7.0.7-172-ASoC-qcom-q6apm-lpass-dai-Fix-multiple-graph-op.patch
  (bsc#1012628 CVE-2026-46143 bsc#1267712).
- Update
  patches.kernel.org/7.0.7-175-btrfs-fix-btrfs_ioctl_space_info-slot_count-TOC.patch
  (bsc#1012628 CVE-2026-46159 bsc#1267652).
- Update
  patches.kernel.org/7.0.7-178-btrfs-fix-missing-last_unlink_trans-update-when.patch
  (bsc#1012628 CVE-2026-46160 bsc#1267624).
- Update
  patches.kernel.org/7.0.7-179-dm-thin-fix-metadata-refcount-underflow.patch
  (bsc#1012628 CVE-2026-46107 bsc#1267612).
- Update
  patches.kernel.org/7.0.7-181-dm-fix-a-buffer-overflow-in-ioctl-processing.patch
  (bsc#1012628 CVE-2026-46294 bsc#1267939).
- Update
  patches.kernel.org/7.0.7-182-eventfs-Hold-eventfs_mutex-and-SRCU-when-remoun.patch
  (bsc#1012628 CVE-2026-46106 bsc#1267613).
- Update
  patches.kernel.org/7.0.7-186-dm-verity-fec-fix-reading-parity-bytes-split-ac.patch
  (bsc#1012628 CVE-2026-46130 bsc#1267629).
- Update
  patches.kernel.org/7.0.7-188-isofs-validate-Rock-Ridge-CE-continuation-exten.patch
  (bsc#1012628 CVE-2026-46303 bsc#1267984).
- Update
  patches.kernel.org/7.0.7-195-lib-scatterlist-fix-length-calculations-in-extr.patch
  (bsc#1012628 CVE-2026-46289 bsc#1267966).
- Update
  patches.kernel.org/7.0.7-197-libceph-Fix-slab-out-of-bounds-access-in-auth-m.patch
  (bsc#1012628 CVE-2026-46119 bsc#1267628).
- Update
  patches.kernel.org/7.0.7-200-nvmet-tcp-fix-race-between-ICReq-handling-and-q.patch
  (bsc#1012628 CVE-2026-46135 bsc#1267373).
- Update
  patches.kernel.org/7.0.7-201-nvmet-avoid-recursive-nvmet-wq-flush-in-nvmet_c.patch
  (bsc#1012628 CVE-2026-46304 bsc#1267985).
- Update
  patches.kernel.org/7.0.7-203-pmdomain-core-Fix-detach-procedure-for-virtual-.patch
  (bsc#1012628 CVE-2026-46292 bsc#1267943).
- Update
  patches.kernel.org/7.0.7-205-RDMA-hns-Fix-unlocked-call-to-hns_roce_qp_remov.patch
  (bsc#1012628 CVE-2026-46112 bsc#1267582).
- Update
  patches.kernel.org/7.0.7-209-scsi-mpt3sas-Limit-NVMe-request-size-to-2-MiB.patch
  (bsc#1012628 CVE-2026-46105 bsc#1267372).
- Update
  patches.kernel.org/7.0.7-210-smb-client-fix-out-of-bounds-read-in-smb2_compo.patch
  (bsc#1012628 CVE-2026-46155 bsc#1267720).
- Update
  patches.kernel.org/7.0.7-212-smb-client-use-kzalloc-to-zero-initialize-secur.patch
  (bsc#1012628 CVE-2026-46139 bsc#1267681).
- Update
  patches.kernel.org/7.0.7-214-KVM-x86-check-for-nEPT-nNPT-in-slow-flush-hyper.patch
  (bsc#1012628 CVE-2026-46131 bsc#1267636).
- Update
  patches.kernel.org/7.0.7-215-KVM-x86-Do-IRR-scan-in-__kvm_apic_update_irr-ev.patch
  (bsc#1012628 CVE-2026-46295 bsc#1267931).
- Update
  patches.kernel.org/7.0.7-233-RDMA-mana-Fix-mana_destroy_wq_obj-cleanup-in-ma.patch
  (bsc#1012628 CVE-2026-46126 bsc#1267584).
- Update
  patches.kernel.org/7.0.7-234-RDMA-mana-Remove-user-triggerable-WARN_ON-in-ma.patch
  (bsc#1012628 CVE-2026-46117 bsc#1267375).
- Update
  patches.kernel.org/7.0.7-235-RDMA-mana-Validate-rx_hash_key_len.patch
  (bsc#1012628 CVE-2026-46145 bsc#1267715).
- Update
  patches.kernel.org/7.0.7-237-RDMA-mlx4-Fix-resource-leak-on-error-in-mlx4_ib.patch
  (bsc#1012628 CVE-2026-46178 bsc#1267493).
- Update
  patches.kernel.org/7.0.7-260-mptcp-pm-ADD_ADDR-rtx-fix-potential-data-race.patch
  (bsc#1012628 CVE-2026-46137 bsc#1267570).
- Update
  patches.kernel.org/7.0.7-262-mptcp-pm-ADD_ADDR-rtx-free-sk-if-last.patch
  (bsc#1012628 CVE-2026-46170 bsc#1267714).
- Update
  patches.kernel.org/7.0.7-271-f2fs-fix-node_cnt-race-between-extent-node-dest.patch
  (bsc#1012628 CVE-2026-46194 bsc#1267569).
- Update
  patches.kernel.org/7.0.7-281-KVM-arm64-Fix-pin-leak-and-publication-ordering.patch
  (bsc#1012628 CVE-2026-46147 bsc#1267689).
- Update
  patches.kernel.org/7.0.7-282-LoongArch-Fix-potential-ADE-in-loongson_gpu_fix.patch
  (bsc#1012628 CVE-2026-46156 bsc#1267385).
- Update
  patches.kernel.org/7.0.7-296-hfsplus-fix-uninit-value-by-validating-catalog-.patch
  (bsc#1012628 CVE-2026-46169 bsc#1267713).
- Update
  patches.kernel.org/7.0.7-297-hfsplus-fix-held-lock-freed-on-hfsplus_fill_sup.patch
  (bsc#1012628 CVE-2026-46299 bsc#1267920).
- Update
  patches.kernel.org/7.0.7-299-8021q-delete-cleared-egress-QoS-mappings.patch
  (bsc#1012628 CVE-2026-46153 bsc#1267574).
- Update
  patches.kernel.org/7.0.7-301-crypto-caam-guard-HMAC-key-hex-dumps-in-hash_di.patch
  (bsc#1012628 CVE-2026-46291 bsc#1267937).
- Update
  patches.kernel.org/7.0.7-305-x86-CPU-AMD-Prevent-improper-isolation-of-share.patch
  (bsc#1012628 CVE-2026-46174 bsc#1267384).
- Update
  patches.kernel.org/7.0.9-001-HID-playstation-Clamp-num_touch_reports.patch
  (bsc#1012628 CVE-2026-46232 bsc#1267669).
- Update
  patches.kernel.org/7.0.9-002-HID-appletb-kbd-fix-UAF-in-inactivity-timer-cle.patch
  (bsc#1012628 CVE-2026-46213 bsc#1267665).
- Update
  patches.kernel.org/7.0.9-014-media-renesas-vsp1-Fix-NULL-pointer-deref-on-mo.patch
  (bsc#1012628 CVE-2026-46310 bsc#1267934).
- Update
  patches.kernel.org/7.0.9-035-media-i2c-ov5647-Fix-runtime-PM-refcount-leak-i.patch
  (bsc#1012628 CVE-2026-46239 bsc#1267530).
- Update
  patches.kernel.org/7.0.9-039-media-videobuf2-Set-vma_flags-in-vb2_dma_sg_mma.patch
  (bsc#1012628 CVE-2026-46312 bsc#1267990).
- Update
  patches.kernel.org/7.0.9-040-media-rockchip-rkcif-Add-missing-MUST_CONNECT-f.patch
  (bsc#1012628 CVE-2026-46222 bsc#1267695).
- Update
  patches.kernel.org/7.0.9-042-media-intel-ipu6-fix-error-pointer-dereference.patch
  (bsc#1012628 CVE-2026-46313 bsc#1267991).
- Update
  patches.kernel.org/7.0.9-053-media-saa7164-add-ioremap-return-checks-and-cle.patch
  (bsc#1012628 CVE-2026-46235 bsc#1267702).
- Update
  patches.kernel.org/7.0.9-076-media-iris-fix-use-after-free-of-fmt_src-during.patch
  (bsc#1012628 CVE-2026-46210 bsc#1267692).
- Update
  patches.kernel.org/7.0.9-090-spi-ch341-fix-devres-lifetime.patch
  (bsc#1012628 CVE-2026-46228 bsc#1267705).
- Update
  patches.kernel.org/7.0.9-092-spi-fsl-fix-controller-deregistration.patch
  (bsc#1012628 CVE-2026-46226 bsc#1267673).
- Update
  patches.kernel.org/7.0.9-099-spi-rspi-fix-controller-deregistration.patch
  (bsc#1012628 CVE-2026-46225 bsc#1267627).
- Update
  patches.kernel.org/7.0.9-112-spi-mpc52xx-fix-use-after-free-on-unbind.patch
  (bsc#1012628 CVE-2026-46219 bsc#1267667).
- Update
  patches.kernel.org/7.0.9-120-spi-cadence-quadspi-fix-unclocked-access-on-unb.patch
  (bsc#1012628 CVE-2026-46203 bsc#1267620).
- Update
  patches.kernel.org/7.0.9-121-drm-msm-gem-fix-error-handling-in-msm_ioctl_gem.patch
  (bsc#1012628 CVE-2026-46211 bsc#1267380).
- Update
  patches.kernel.org/7.0.9-125-drm-v3d-Reject-empty-multisync-extension-to-pre.patch
  (bsc#1012628 CVE-2026-46314 bsc#1267992).
- Update
  patches.kernel.org/7.0.9-127-drm-amdkfd-Clear-VRAM-on-allocation-to-prevent-.patch
  (bsc#1012628 CVE-2026-46229 bsc#1267567).
- Update
  patches.kernel.org/7.0.9-135-drm-amdgpu-Add-bounds-checking-to-ib_-get-set-_.patch
  (bsc#1012628 CVE-2026-46218 bsc#1267632).
- Update
  patches.kernel.org/7.0.9-136-drm-amdgpu-vcn4-Prevent-OOB-reads-when-parsing-.patch
  (bsc#1012628 CVE-2026-46204 bsc#1267661).
- Update
  patches.kernel.org/7.0.9-138-drm-amdgpu-vcn4-Prevent-OOB-reads-when-parsing-.patch
  (bsc#1012628 CVE-2026-46199 bsc#1267638).
- Update
  patches.kernel.org/7.0.9-139-drm-amdgpu-vcn3-Prevent-OOB-reads-when-parsing-.patch
  (bsc#1012628 CVE-2026-46230 bsc#1267623).
- Update
  patches.kernel.org/7.0.9-141-drm-gem-Fix-inconsistent-plane-dimension-calcul.patch
  (bsc#1012628 CVE-2026-46209 bsc#1267663).
- Update
  patches.kernel.org/7.0.9-143-drm-amdkfd-validate-SVM-ioctl-nattr-against-buf.patch
  (bsc#1012628 CVE-2026-46197 bsc#1267381).
- Update
  patches.kernel.org/7.0.9-150-drm-xe-uapi-Reject-coh_none-PAT-index-for-CPU-c.patch
  (bsc#1012628 CVE-2026-46309 bsc#1267989).
- Update
  patches.kernel.org/7.0.9-155-drm-amdgpu-userq-fix-access-to-stale-wptr-mappi.patch
  (bsc#1012628 CVE-2026-46311 bsc#1267949).
- Update
  patches.kernel.org/7.0.9-162-drm-amdgpu-sdma4-replace-BUG_ON-with-WARN_ON-in.patch
  (bsc#1012628 CVE-2026-46220 bsc#1267704).
- Update
  patches.kernel.org/7.0.9-169-sctp-revalidate-list-cursor-after-sctp_sendmsg_.patch
  (bsc#1012628 CVE-2026-46227 bsc#1267697).
- Update
  patches.kernel.org/7.0.9-175-batman-adv-bla-prevent-use-after-free-when-dele.patch
  (bsc#1012628 CVE-2026-46212 bsc#1267693).
- Update
  patches.kernel.org/7.0.9-176-batman-adv-bla-only-purge-non-released-claims.patch
  (bsc#1012628 CVE-2026-46233 bsc#1267701).
- Update
  patches.kernel.org/7.0.9-177-batman-adv-bla-put-backbone-reference-on-failed.patch
  (bsc#1012628 CVE-2026-46231 bsc#1267565).
- Update
  patches.kernel.org/7.0.9-184-EDAC-versalnet-Fix-device-name-memory-leak.patch
  (bsc#1012628 CVE-2026-46221 bsc#1267523).
- Update
  patches.kernel.org/7.0.9-188-cgroup-Defer-css-percpu_ref-kill-on-rmdir-until.patch
  (bsc#1012628 CVE-2026-46223 bsc#1267699).
- Update
  patches.kernel.org/7.0.9-194-vsock-virtio-fix-empty-payload-in-tap-skb-for-n.patch
  (bsc#1012628 CVE-2026-46207 bsc#1267691).
- Update
  patches.kernel.org/7.0.9-195-vsock-virtio-fix-accept-queue-count-leak-on-tra.patch
  (bsc#1012628 CVE-2026-46214 bsc#1267717).
- Update
  patches.kernel.org/7.0.9-197-drm-amdgpu-vcn4-Avoid-overflow-on-msg-bound-che.patch
  (bsc#1012628 CVE-2026-46217 bsc#1267655).
  suse-add-cves
- commit 8beab0b</changelog>
  <changelog author="jslaby@suse.cz" date="1781092802">- Linux 7.0.12 (bsc#1012628).
- Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB
  buffer size (bsc#1012628).
- ACPI: button: Fix ACPI GPE handler leak during removal
  (bsc#1012628).
- ACPI: button: Enable wakeup GPEs for ACPI buttons at probe time
  (bsc#1012628).
- xfrm: move policy_bydst RCU sync from per-netns .exit to
  .pre_exit (bsc#1012628).
- net/sched: sch_sfb: Replace direct dequeue call with peek and
  qdisc_dequeue_peeked (bsc#1012628).
- nfc: llcp: Fix use-after-free in llcp_sock_release()
  (bsc#1012628).
- nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()
  (bsc#1012628).
- xfrm: Check for underflow in xfrm_state_mtu (bsc#1012628).
- nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems
  (bsc#1012628).
- tools/bootconfig: Fix buf leaks in apply_xbc (bsc#1012628).
- HID: remove duplicate hid_warn_ratelimited definition
  (bsc#1012628).
- kunit: fix use-after-free in debugfs when using kunit.filter
  (bsc#1012628).
- accel/rocket: fix UAF via dangling GEM handle in create_bo
  (bsc#1012628).
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable
  (bsc#1012628).
- netfilter: xt_cpu: prefer raw_smp_processor_id (bsc#1012628).
- netfilter: ebtables: fix OOB read in compat_mtw_from_user
  (bsc#1012628).
- netfilter: nf_tables: fix dst corruption in same register
  operation (bsc#1012628).
- tun: free page on short-frame rejection in tun_xdp_one()
  (bsc#1012628).
- tap: free page on error paths in tap_get_user_xdp()
  (bsc#1012628).
- tun: free page on build_skb failure in tun_xdp_one()
  (bsc#1012628).
- vsock: keep poll shutdown state consistent (bsc#1012628).
- net: netlink: fix sending unassigned nsid after assigned one
  (bsc#1012628).
- net: netlink: don't set nsid on local notifications
  (bsc#1012628).
- net/smc: Do not re-initialize smc hashtables (bsc#1012628).
- net/iucv: fix locking in .getsockopt (bsc#1012628).
- scsi: core: Run queues for all non-SDEV_DEL devices from
  scsi_run_host_queues (bsc#1012628).
- scsi: scsi_debug: Add missing newline in
  scsi_debug_device_reset() (bsc#1012628).
- ipv4: free net-&gt;ipv4.sysctl_local_reserved_ports after
  unregister_net_sysctl_table() (bsc#1012628).
- ALSA: hda: cs35l56: Fix system name string leaks (bsc#1012628).
- ALSA: pcm: oss: Fix setup list UAF on proc write error
  (bsc#1012628).
- ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors
  (bsc#1012628).
- net/mlx5: HWS: Reject unsupported remove-header action
  (bsc#1012628).
- net: hsr: fix potential OOB access in supervision frame handling
  (bsc#1012628).
- accel/ivpu: prevent uninitialized data bug in debugfs
  (bsc#1012628).
- gpio: mxc: fix irq_high handling (bsc#1012628).
- drm/i915/aux: use polling when irqs are unavailable
  (bsc#1012628).
- net: Avoid checksumming unreadable skb tail on trim
  (bsc#1012628).
- ethtool: rss: avoid modifying the RSS context response
  (bsc#1012628).
- ethtool: rss: add missing errno on RSS context delete
  (bsc#1012628).
- ethtool: rss: fix falsely ignoring indir table updates
  (bsc#1012628).
- ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
  (bsc#1012628).
- ethtool: rss: fix hkey leak when indir_size is 0 (bsc#1012628).
- ethtool: rss: avoid device context leak on reply-build failure
  (bsc#1012628).
- ethtool: module: call ethnl_ops_complete() on module flash
  errors (bsc#1012628).
- ethtool: module: avoid leaking a netdev ref on module flash
  errors (bsc#1012628).
- ethtool: module: avoid racy updates to dev-&gt;ethtool bitfield
  (bsc#1012628).
- ethtool: module: check fw_flash_in_progress under rtnl_lock
  (bsc#1012628).
- ethtool: module: fix cleanup if socket used for flashing
  multiple devices (bsc#1012628).
- ethtool: cmis: require exact CDB reply length (bsc#1012628).
- ethtool: cmis: fix u16-to-u8 truncation of msleep_pre_rpl
  (bsc#1012628).
- ethtool: cmis: validate start_cmd_payload_size from module
  (bsc#1012628).
- ethtool: cmis: validate fw-&gt;size against start_cmd_payload_size
  (bsc#1012628).
- cxl/test: Update mock dev array before calling
  platform_device_add() (bsc#1012628).
- tunnels: load network headers after skb_cow() in
  iptunnel_pmtud_build_icmp[v6]() (bsc#1012628).
- vxlan: do not reuse cached ip_hdr() value after
  skb_tunnel_check_pmtu() (bsc#1012628).
- tunnels: do not assume transport header in
  iptunnel_pmtud_check_icmp() (bsc#1012628).
- ksmbd: fix FSCTL permission bypass by adding a permission
  check for FSCTL_SET_SPARSE (bsc#1012628).
- ASoC: codecs: simple-mux: Fix enum control bounds check
  (bsc#1012628).
- drm/xe: Restore IDLEDLY regiter on engine reset (bsc#1012628).
- Bluetooth: 6lowpan: check skb_clone() return value in
  send_mcast_pkt() (bsc#1012628).
- bonding: refuse to enslave CAN devices (bsc#1012628).
- bridge: Fix sleep in atomic context in netlink path
  (bsc#1012628).
- bridge: Fix sleep in atomic context in sysfs path (bsc#1012628).
- ethtool: coalesce: cap profile updates at
  NET_DIM_PARAMS_NUM_PROFILES (bsc#1012628).
- ethtool: tsconfig: fix reply error handling (bsc#1012628).
- ethtool: linkstate: fix unbalanced ethnl_ops_complete() on
  PHY lookup error (bsc#1012628).
- ethtool: pse-pd: fix missing ethnl_ops_complete() (bsc#1012628).
- ethtool: tsconfig: fix missing ethnl_ops_complete()
  (bsc#1012628).
- ethtool: tsinfo: fix uninitialized stats on the by-PHC path
  (bsc#1012628).
- ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on
  prepare failure (bsc#1012628).
- ethtool: strset: fix header attribute index in
  ethnl_req_get_phydev() (bsc#1012628).
- ethtool: eeprom: add missing ethnl_ops_begin() / _complete()
  during fallback (bsc#1012628).
- ethtool: eeprom: add more safeties to EEPROM Netlink fallback
  (bsc#1012628).
- ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()
  (bsc#1012628).
- net/sched: Revert "net/sched: Restrict conditions for adding
  duplicating netems to qdisc tree" (bsc#1012628).
- net/sched: fix packet loop on netem when duplicate is on
  (bsc#1012628).
- net: Introduce skb tc depth field to track packet loops
  (bsc#1012628).
- net/sched: Fix ethx:ingress -&gt; ethy:egress -&gt; ethx:ingress
  mirred loop (bsc#1012628).
- net/sched: act_mirred: Fix blockcast recursion bypass leading
  to stack overflow (bsc#1012628).
- net/sched: act_mirred: Fix return code in early mirred redirect
  error paths (bsc#1012628).
- net: hibmcge: disable Relaxed Ordering to fix RX packet
  corruption (bsc#1012628).
- net: hibmcge: move dma_rmb() after dma_sync_single_for_cpu()
  in RX path (bsc#1012628).
- net/handshake: Use spin_lock_bh for hn_lock (bsc#1012628).
- nvme-tcp: store negative errno in queue-&gt;tls_err (bsc#1012628).
- net/handshake: Pass negative errno through handshake_complete()
  (bsc#1012628).
- net/handshake: hand off the pinned file reference to accept_doit
  (bsc#1012628).
- net/handshake: Take a long-lived file reference at submit
  (bsc#1012628).
- net/handshake: Drain pending requests at net namespace exit
  (bsc#1012628).
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime
  (bsc#1012628).
- dpll: zl3073x: add die temperature reporting for supported chips
  (bsc#1012628).
- dpll: export __dpll_device_change_ntf() for use under dpll_lock
  (bsc#1012628).
- dpll: zl3073x: use __dpll_device_change_ntf() and remove
  change_work (bsc#1012628).
- Bluetooth: l2cap: clear chan-&gt;ident on ECRED reconfiguration
  success (bsc#1012628).
- Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp
  (bsc#1012628).
- Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device
  close (bsc#1012628).
- Bluetooth: hci_sync: Reset device counters in
  hci_dev_close_sync() (bsc#1012628).
- gpio: adnp: fix flow control regression caused by scoped_guard()
  (bsc#1012628).
- gpio: virtuser: Fix uninitialized data bug in
  gpio_virtuser_direction_do_write() (bsc#1012628).
- gpio: rockchip: convert bank-&gt;clk to devm_clk_get_enabled()
  (bsc#1012628).
- gpio: rockchip: teardown bugs and resource leaks (bsc#1012628).
- net: mana: Add NULL guards in teardown path to prevent panic
  on attach failure (bsc#1012628).
- net: mana: Skip redundant detach on already-detached port
  (bsc#1012628).
- sctp: fix race between sctp_wait_for_connect and peeloff
  (bsc#1012628).
- net: pcs: pcs-mtk-lynxi: fix bpi-r3 serdes configuration
  (bsc#1012628).
- vsock/virtio: bind uarg before filling zerocopy skb
  (bsc#1012628).
- ipv6: fix possible infinite loop in rt6_fill_node()
  (bsc#1012628).
- ipv6: fix possible infinite loop in fib6_select_path()
  (bsc#1012628).
- net: skbuff: fix pskb_carve leaking zcopy pages (bsc#1012628).
- Revert "ipv6: preserve insertion order for same-scope addresses"
  (bsc#1012628).
- Revert "x86/fpu: Refine and simplify the magic number check
  during signal return" (bsc#1012628).
- drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS
  DPCD register (bsc#1012628).
- drm/i915/psr: Read Intel DPCD workaround register (bsc#1012628).
- drm/i915/psr: Apply Intel DPCD workaround when SDP on prior
  line used (bsc#1012628).
- iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer
  (bsc#1012628).
- iio: imu: adis16550: fix stack leak in trigger handler
  (bsc#1012628).
- iio: pressure: bmp280: fix stack leak in bmp580 trigger handler
  (bsc#1012628).
- usb: typec: ucsi: ccg: reject firmware images without a ':'
  record header (bsc#1012628).
- usb: typec: tcpm: validate VDO count in Discover Identity ACK
  handlers (bsc#1012628).
- usb: typec: tcpm: bound altmode_desc[] per iteration in
  svdm_consume_modes() (bsc#1012628).
- usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without
  a payload VDO (bsc#1012628).
- usb: typec: altmodes/displayport: validate count before reading
  Status Update VDO (bsc#1012628).
- usb: typec: wcove: don't write past struct pd_message in
  wcove_read_rx_buffer() (bsc#1012628).
- usb: typec: tcpm/tcpci_maxim: validate header NDO against
  RX_BYTE_CNT (bsc#1012628).
- usb: typec: ucsi: validate connector number in
  ucsi_connector_change() (bsc#1012628).
- USB: serial: safe_serial: fix memory corruption with small
  endpoint (bsc#1012628).
- media: rc: igorplugusb: fix control request setup packet
  (bsc#1012628).
- Input: ims-pcu - fix usb_free_coherent() size in
  ims_pcu_buffers_free() (bsc#1012628).
- USB: serial: cypress_m8: fix memory corruption with small
  endpoint (bsc#1012628).
- HID: quirks: Add ALWAYS_POLL quirk for SIGMACHIP USB mouse
  (bsc#1012628).
- Bluetooth: btusb: Allow firmware re-download when version
  matches (bsc#1012628).
- mm/vmalloc: do not trigger BUG() on BH disabled context
  (bsc#1012628).
- hpfs: fix a crash if hpfs_map_dnode_bitmap fails (bsc#1012628).
- mm/damon/sysfs-schemes: delete tried region in regions_rmdirs()
  (bsc#1012628).
- ipc: limit next_id allocation to the valid ID range
  (bsc#1012628).
- mm: memcontrol: propagate NMI slab stats to memcg vmstats
  (bsc#1012628).
- mm/migrate_device: fix pgtable leak in
  migrate_vma_insert_huge_pmd_page (bsc#1012628).
- memfd: deny writeable mappings when implying SEAL_WRITE
  (bsc#1012628).
- zram: fix use-after-free in zram_writeback_endio (bsc#1012628).
- mm/rmap: initialize nr_pages to 1 at loop start in
  try_to_unmap_one (bsc#1012628).
- auxdisplay: line-display: fix OOB read on zero-length
  message_store() (bsc#1012628).
- smb: client: fix uninitialized variable in smb2_writev_callback
  (bsc#1012628).
- Bluetooth: L2CAP: use chan timer to close channels in
  cleanup_listen() (bsc#1012628).
- Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout()
  on !conn (bsc#1012628).
- Bluetooth: HIDP: fix missing length checks in
  hidp_input_report() (bsc#1012628).
- Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1012628).
- Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock
  (bsc#1012628).
- Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()
  (bsc#1012628).
- Bluetooth: hci_qca: Use 100 ms SSR delay for rampatch and NVM
  loading (bsc#1012628).
- Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync
  (bsc#1012628).
- Input: xpad - fix out-of-bounds access for Share button
  (bsc#1012628).
- parport: Fix race between port and client registration
  (bsc#1012628).
- rust_binder: Avoid holding lock when dropping delivered_death
  (bsc#1012628).
- rust_binder: avoid calling pending_oneway_finished() on
  TF_UPDATE_TXN (bsc#1012628).
- USB: cdc-acm: Fix bit overlap and move quirk definitions to
  header (bsc#1012628).
- KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor
  (bsc#1012628).
- KVM: arm64: PMU: Preserve AArch32 counter low bits
  (bsc#1012628).
- KVM: SVM: Flush the current TLB when transitioning from xAVIC =&gt;
  x2AVIC (bsc#1012628).
- KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use
  (bsc#1012628).
- KVM: SEV: Ignore Port I/O requests of length '0' (bsc#1012628).
- KVM: SEV: Use the size of the PSC header as the minimum size
  for PSC requests (bsc#1012628).
- KVM: SEV: WARN if KVM attempts to setup scratch area with
  min_len==0 (bsc#1012628).
- KVM: SEV: Compute the correct max length of the in-GHCB scratch
  area (bsc#1012628).
- KVM: SEV: Check PSC request indices against the actual size
  of the buffer (bsc#1012628).
- KVM: SEV: Use READ_ONCE() when reading entries/indices from
  PSC buffer (bsc#1012628).
- KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc()
  (bsc#1012628).
- gpio: shared: undo the vote of the proxy on GPIO free
  (bsc#1012628).
- gpio: shared: fix deadlock on shared proxy's parent removal
  (bsc#1012628).
- gpio: shared: fix lockdep false positive by removing unneeded
  lock (bsc#1012628).
- Disable -Wattribute-alias for clang-23 and newer (bsc#1012628).
- iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for
  dual mux (bsc#1012628).
- iio: adc: npcm: fix unbalanced clk_disable_unprepare()
  (bsc#1012628).
- iio: dac: ad3530r: Fix AD3531/AD3531R powerdown mode strings
  (bsc#1012628).
- iio: dac: max5821: fix return value check in powerdown sync
  (bsc#1012628).
- iio: dac: ad5686: fix ref bit initialization for single-channel
  parts (bsc#1012628).
- iio: dac: ad5686: fix input raw value check (bsc#1012628).
- iio: dac: ad5686: acquire lock when doing powerdown control
  (bsc#1012628).
- iio: dac: ad5686: fix powerdown control on dual-channel devices
  (bsc#1012628).
- iio: adc: mt6359: fix unchecked return value in mt6358_read_imp
  (bsc#1012628).
- iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw
  (bsc#1012628).
- iio: adc: ad4695: Fix call ordering in offload buffer postenable
  (bsc#1012628).
- iio: adc: nxp-sar-adc: fix division by zero in write_raw
  (bsc#1012628).
- iio: adc: nxp-sar-adc: Avoid division by zero (bsc#1012628).
- iio: adc: nxp-sar-adc: zero-initialize dma_slave_config
  (bsc#1012628).
- iio: gyro: itg3200: fix i2c read into the wrong stack location
  (bsc#1012628).
- iio: gyro: adis16260: fix division by zero in write_raw
  (bsc#1012628).
- iio: ssp_sensors: cancel delayed work_refresh on remove
  (bsc#1012628).
- iio: temperature: tsys01: fix broken PROM checksum validation
  (bsc#1012628).
- iio: magnetometer: st_magn: fix default DRDY pin selection
  for LIS2MDL (bsc#1012628).
- iio: light: veml6070: Fix resource leak in probe error path
  (bsc#1012628).
- iio: Fix iio_multiply_value use in
  iio_read_channel_processed_scale (bsc#1012628).
- iio: chemical: mhz19b: reject oversized serial replies
  (bsc#1012628).
- iio: chemical: scd30: fix division by zero in write_raw
  (bsc#1012628).
- iio: light: cm3323: fix reg_conf not being initialized correctly
  (bsc#1012628).
- iio: buffer: hw-consumer: fix use-after-free in error path
  (bsc#1012628).
- iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf()
  (bsc#1012628).
- USB: serial: omninet: fix memory corruption with small endpoint
  (bsc#1012628).
- usb: cdns3: gadget: fix request skipping after clearing halt
  (bsc#1012628).
- usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy
  acquisition failure (bsc#1012628).
- usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call
  permanently leaks the runtime PM usage counter across
  bind/unbind cycles (bsc#1012628).
- usb: dwc2: Fix use after free in debug code (bsc#1012628).
- Input: elan_i2c - validate firmware size before use
  (bsc#1012628).
- i2c: davinci: fix division by zero on missing clock-frequency
  (bsc#1012628).
- x86/ftrace: Relocate %rip-relative percpu refs in dynamic
  trampolines (bsc#1012628).
- wireguard: send: append trailer after expanding head
  (bsc#1012628).
- bpf: sockmap: fix tail fragment offset in bpf_msg_push_data
  (bsc#1012628).
- macsec: fix replay protection at XPN lower-PN wrap
  (bsc#1012628).
- ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()
  (bsc#1012628).
- ASoC: qcom: q6asm-dai: fix error handling in prepare and
  set_params (bsc#1012628).
- octeontx2-af: validate body pcifunc in
  rvu_mbox_handler_rep_event_notify (bsc#1012628).
- ipv6: exthdrs: refresh nh after handling HAO option
  (bsc#1012628).
- ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate()
  (bsc#1012628).
- ipv6: validate extension header length before copying to cmsg
  (bsc#1012628).
- xfrm: input: hold netns during deferred transport reinjection
  (bsc#1012628).
- l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname
  (bsc#1012628).
- ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1012628).
- net: skbuff: fix missing zerocopy reference in pskb_carve
  helpers (bsc#1012628).
- spi: spi-mem: avoid mutating op template in
  spi_mem_supports_op() (bsc#1012628).
- HID: wacom: Fix OOB write in wacom_hid_set_device_mode()
  (bsc#1012628).
- iommu, debugobjects: avoid gcc-16.1 section mismatch warnings
  (bsc#1012628).
- nfc: hci: fix out-of-bounds read in HCP header parsing
  (bsc#1012628).
- xfrm: route MIGRATE notifications to caller's netns
  (bsc#1012628).
- xfrm: ipcomp: Free destination pages on acomp errors
  (bsc#1012628).
- xfrm: ah: use skb_to_full_sk in async output callbacks
  (bsc#1012628).
- ALSA: scarlett2: Fix 2i2 Gen 4 direct monitor gain on firmware
  2417 (bsc#1012628).
- ALSA: firewire-motu: Protect register DSP event queue positions
  (bsc#1012628).
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq
  RST without direction check (bsc#1012628).
- ASoC: qcom: q6asm-dai: close stream only when running
  (bsc#1012628).
- ASoC: qcom: q6asm-dai: do not set stream state in event and
  trigger callbacks (bsc#1012628).
- xfrm: esp: restore combined single-frag length gate
  (bsc#1012628).
- ALSA: hda/realtek: Fix speaker output on ASUS ROG Strix G615LP
  (bsc#1012628).
- xfrm: iptfs: reset runtime state when cloning SAs (bsc#1012628).
- dma-buf: fix UAF in dma_buf_fd() tracepoint (bsc#1012628).
- Input: xpad - add "Nova 2 Lite" from GameSir (bsc#1012628).
- Input: xpad - add support for ASUS ROG RAIKIRI II (bsc#1012628).
- ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk
  loops (bsc#1012628).
- misc: rp1: Send IACK on IRQ activate to fix kdump/kexec
  (bsc#1012628).
- Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem
  (bsc#1012628).
- Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad
  E490 (bsc#1012628).
- dt-bindings: usb: Fix EIC7700 USB reset's issue (bsc#1012628).
- comedi: comedi_test: fix check for valid scan_begin_src in
  waveform_ai_cmdtest() (bsc#1012628).
- comedi: comedi_test: Fix limiting of convert_arg in
  waveform_ai_cmdtest() (bsc#1012628).
- counter: Fix refcount leak in counter_alloc() error path
  (bsc#1012628).
- tty: serial: pch_uart: add check for dma_alloc_coherent()
  (bsc#1012628).
- tty: serial: samsung: Remove redundant port lock acquisition
  in rx helpers (bsc#1012628).
- uio: uio_pci_generic_sva: fix double free of devm_kzalloc()
  memory (bsc#1012628).
- usb: chipidea: core: convert ci_role_switch to local variable
  (bsc#1012628).
- usb: core: Fix up Interrupt IN endpoints with bogus
  wBytesPerInterval (bsc#1012628).
- usb: dwc3: xilinx: fix error handling in zynqmp init error paths
  (bsc#1012628).
- usb: musb: omap2430: Fix use-after-free in omap2430_probe()
  (bsc#1012628).
- USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2
  hub controllers (bsc#1012628).
- usb: storage: Add quirks for PNY Elite Portable SSD
  (bsc#1012628).
- usbip: vudc: Fix use after free bug in vudc_remove due to race
  condition (bsc#1012628).
- usb: usbtmc: check URB actual_length for interrupt-IN
  notifications (bsc#1012628).
- usb: usbtmc: reject interrupt endpoints with small
  wMaxPacketSize (bsc#1012628).
- usb: typec: tipd: Fix error code in tps6598x_probe()
  (bsc#1012628).
- usb: typec: tcpm: improve handling of DISCOVER_MODES failures
  (bsc#1012628).
- usb: typec: ucsi: Check if power role change actually happened
  before handling (bsc#1012628).
- usb: typec: ucsi: Don't update power_supply on power role
  change if not connected (bsc#1012628).
- USB: serial: option: add MeiG SRM813Q (bsc#1012628).
- USB: serial: option: add missing RSVD(5) flag for Rolling
  RW135R-GL (bsc#1012628).
- USB: serial: belkin_sa: validate interrupt status length
  (bsc#1012628).
- USB: serial: cypress_m8: validate interrupt packet headers
  (bsc#1012628).
- USB: serial: digi_acceleport: fix memory corruption with small
  endpoints (bsc#1012628).
- USB: serial: keyspan: fix missing indat transfer sanity check
  (bsc#1012628).
- USB: serial: mxuport: fix memory corruption with small endpoint
  (bsc#1012628).
- USB: serial: mct_u232: fix memory corruption with small endpoint
  (bsc#1012628).
- USB: serial: mct_u232: fix missing interrupt-in transfer sanity
  check (bsc#1012628).
- usb: gadget: uvc: hold opts-&gt;lock across XU walks in
  uvc_function_bind (bsc#1012628).
- usb: gadget: net2280: Fix double free in probe error path
  (bsc#1012628).
- usb: gadget: f_hid: fix device reference leak in hidg_alloc()
  (bsc#1012628).
- usb: gadget: composite: fix integer underflow in WebUSB GET_URL
  handling (bsc#1012628).
- usb: gadget: dummy_hcd: Reject hub port requests for
  non-existent ports (bsc#1012628).
- usb: gadget: f_fs: copy only received bytes on short ep0 read
  (bsc#1012628).
- usb: gadget: f_fs: serialize DMABUF cancel against request
  completion (bsc#1012628).
- thunderbolt: property: Reject u32 wrap in
  tb_property_entry_valid() (bsc#1012628).
- thunderbolt: property: Reject dir_len &lt; 4 to prevent size_t
  underflow (bsc#1012628).
- thunderbolt: property: Cap recursion depth in
  __tb_property_parse_dir() (bsc#1012628).
- scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL
  walker (bsc#1012628).
- scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32
  (bsc#1012628).
- scsi: target: iscsi: Fix CRC overread and double-free in
  iscsit_handle_text_cmd() (bsc#1012628).
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends
  to rsp_buf (bsc#1012628).
- scsi: target: iscsi: Validate CHAP_R length before base64 decode
  (bsc#1012628).
- drm/hyperv: validate resolution_count and fix WIN8 fallback
  (bsc#1012628).
- drm/hyperv: validate VMBus packet size in receive callback
  (bsc#1012628).
- drm/gem: fix race between change_handle and handle_delete
  (bsc#1012628).
- drm/i915/color: Fix HDR pre-CSC LUT programming loop
  (bsc#1012628).
- drm/i915/psr: Block DC states on vblank enable when Panel
  Replay supported (bsc#1012628).
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank
  enable (bsc#1012628).
- drm/i915: Fix potential UAF in TTM object purge (bsc#1012628).
- drm/amd/pm/si: Disregard vblank time when no displays are
  connected (bsc#1012628).
- serial: altera_jtaguart: handle uart_add_one_port() failures
  (bsc#1012628).
- serial: qcom-geni: fix UART_RX_PAR_EN bit position
  (bsc#1012628).
- serial: qcom_geni: fix kfifo underflow when flush precedes
  DMA completion IRQ (bsc#1012628).
- serial: sh-sci: fix memory region release in error path
  (bsc#1012628).
- serial: zs: Fix swapped RI/DSR modem line transition counting
  (bsc#1012628).
- serial: fsl_lpuart: fix rx buffer and DMA map leaks in
  start_rx_dma (bsc#1012628).
- drm/amdkfd: fix NULL pointer bug in svm_range_set_attr
  (bsc#1012628).
- drm/amdkfd: fix a vulnerability of integer overflow in kfd
  debugger (bsc#1012628).
- drm/amdkfd: Check for pdd drm file first in CRIU restore path
  (bsc#1012628).
- drm/amdgpu: fix lock leak on ENOMEM in
  AMDGPU_GEM_OP_GET_MAPPING_INFO (bsc#1012628).
- drm/amdgpu: fix calling VM invalidation in
  amdgpu_hmm_invalidate_gfx (bsc#1012628).
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1012628).
- drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO
  (bsc#1012628).
- serial: dz: Fix bootconsole message clobbering at chip reset
  (bsc#1012628).
- serial: dz: Fix bootconsole handover lockup (bsc#1012628).
- serial: dz: Convert to use a platform device (bsc#1012628).
- serial: zs: Fix bootconsole handover lockup (bsc#1012628).
- serial: zs: Switch to using channel reset (bsc#1012628).
- serial: zs: Convert to use a platform device (bsc#1012628).
- serial: core: introduce
  guard(uart_port_lock_check_sysrq_irqsave) (bsc#1012628).
- serial: 8250: dispatch SysRq character in
  serial8250_handle_irq() (bsc#1012628).
- serial: 8250_dw: dispatch SysRq character in dw8250_handle_irq()
  (bsc#1012628).
- Revert "mm/hugetlbfs: update hugetlbfs to use mmap_prepare"
  (bsc#1012628).
- platform/x86/intel/vsec: Refactor base_addr handling
  (bsc#1012628).
- platform/x86/intel/vsec: Make driver_data info const
  (bsc#1012628).
- platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe
  error recovery (bsc#1012628).
- rxrpc: Fix RESPONSE packet verification to extract skb to a
  linear buffer (bsc#1012628).
- ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360
  15-fh0xxx (bsc#1012628).
- ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP 16 Piston
  OmniBook X (bsc#1012628).
- arm64: tlb: Flush walk cache when unsharing PMD tables
  (bsc#1012628).
- i2c: tegra: make tegra_i2c_mutex_unlock() return void
  (bsc#1012628).
- hwmon: (pmbus) Add support for guarded PMBus lock (bsc#1012628).
- hwmon: (pmbus/adm1266) serialize sequencer_state debugfs read
  with pmbus_lock (bsc#1012628).
- hwmon: (pmbus/adm1266) serialize GPIO PMBus accesses with
  pmbus_lock (bsc#1012628).
- net: phy: micrel: fix LAN8814 QSGMII soft reset (bsc#1012628).
- xhci: tegra: Fix ghost USB device on dual-role port unplug
  (bsc#1012628).
- mailbox: Fix NULL message support in mbox_send_message()
  (bsc#1012628).
- usb: core: Fix SuperSpeed root hub wMaxPacketSize (bsc#1012628).
- tools: ynl: add scope qualifier for definitions (bsc#1012628).
- KVM: arm64: vgic-its: Drop the translation cache reference
  only for the erased entry (bsc#1012628).
- KVM: arm64: Reassign nested_mmus array behind mmu_lock
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.0.12-006-bcache-fix-uninitialized-closure-object.patch.
- Rename to
  patches.kernel.org/7.0.12-055-blk-mq-reinsert-cached-request-to-the-list.patch.
- commit 32bf651</changelog>
  <changelog author="jslaby@suse.cz" date="1781179200">- Update config files. Disable CAIF (bsc#1266716 CVE-2026-45866).
  The whole code is removed in 7.1 anyway by 6d5431555de0 ("caif: remove
  CAIF NETWORK LAYER"). Let's be proactive as there are holes.
- commit 3512c44</changelog>
  <changelog author="mkubecek@suse.cz" date="1781438400">- config: update and reenable arm64 configs
- option values copied from x86_64, i386 and riscv64 except
  - ARM64_ERRATUM_4193714=y
  - ARM64_LSUI=n
  - STM32_DBG_BUS=n
  - DWMAC_NUVOTON=m
  - PINCTRL_ELIZA=m
  - PINCTRL_HAWI=m
  - PINCTRL_IPQ5210=m
  - PINCTRL_MILOS_LPASS_LPI=m
  - PINCTRL_SDM670_LPASS_LPI=m
  - PINCTRL_RTD1625=m
  - CHARGER_MAX77759=m
  - MACSMC_POWER=m
  - SND_SOC_TEGRA_WM8962=n
  - SND_SOC_TEGRA_CPCAP=n
  - USB_DWC3_IMX=m
  - MMC_SDHCI_BST=m
  - CLK_ELIZA_DISPCC=m
  - CLK_ELIZA_TCSRCC=m
  - CLK_GLYMUR_GPUCC=m
  - CLK_GLYMUR_VIDEOCC=m
  - CLK_NORD_GCC=m
  - IPQ_GCC_5210=m
  - CLK_NORD_TCSRCC=m
  - SM_GPUCC_8750=m
  - ARCH_R9A08G046=y
  - ARCH_TEGRA_238_SOC=y
  - RESET_SKY1=y
  - NVIDIA_TEGRA410_CMEM_LATENCY_PMU=m
  - NVIDIA_TEGRA410_C2C_PMU=m
  - INTERCONNECT_QCOM_ELIZA=m
  - NTFS_DEBUG=n
  - NTFS_FS_POSIX_ACL=y
- commit 4326118</changelog>
  <changelog author="mkubecek@suse.cz" date="1781438401">- config: update and reenable armv7hl configs
- option values copied from arm64 except
  - DRM_TILCDC_PANEL_LEGACY=y
  - CLK_RV1103B=y
- commit 8a5016d</changelog>
  <changelog author="mkubecek@suse.cz" date="1781438402">- config: update and reenable armv7hl configs
- option values copied from armv7hl
- commit cce93c7</changelog>
  <changelog author="mkubecek@suse.cz" date="1781438403">- update to 7.1 final
- refresh configs
- commit 957a9a8</changelog>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix uninitialised pointer passed to
  audit_log_untrustedstring() (bsc#1259668).
  (cherry picked from commit 65d5a585a9fea5f40a1da0e20217aa062f95b44a)
- apparmor: don't audit files pointing to aa_null.dentry
  (bsc#1259668).
  (cherry picked from commit 43454f55637bff80a9bbe035dd7a8c52cb494e83)
- apparmor: fix uninitialised pointer passed to
  audit_log_untrustedstring() (bsc#1259668).
- apparmor: don't audit files pointing to aa_null.dentry
  (bsc#1259668).
- commit d8bfaae</changelog>
  <changelog author="ddiss@suse.de" date="1781524801">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524802">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524804">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
</package>
</otherdata>