<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="180">
<package pkgid="5bd19ff7ffcaf62f87e8a394e2bb736a5053fe0590644b419d04f9bb34379b2b" name="cluster-md-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="f996b0bc0e86b17bb5fae8668424536a57e977b37069405967f4be830273665a" name="cluster-md-kmp-64kb-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="25c866c8f815a8a3d84cf7cdd4ae091fd12649188fa57507de3fff00bee6ec64" name="cluster-md-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="f49e913616fd7d01fdcbf68609a30b03a777d73b019663c311428e302b102355" name="cluster-md-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="baabddacd8267d781280651c1107f4b7dd70a3308c55d8264f5889937e209167" name="cluster-md-kmp-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="46655ded69f3e74deb61b5d584214749ef4d97964e97215c72c07f7ffc0a4938" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="f3f662085e4a7331ac4caa9f2ae24d5b5821a05ce90b5ec333a024069d4ecf1f" name="cluster-md-kmp-default-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="05bffbd9a02d9090069af46170cb0f999a77992d73ed41bb9c38fcecfd1c8dca" name="cluster-md-kmp-default-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="9defe578d30a85cae52a55fd528c3a59d5a15a1ea00c4c102f81de88dbd9ccc5" name="cluster-md-kmp-default-debuginfo" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="559e10ab8499077e6efbfe81dba37eaf967a944e26c4c4c534dfd7615028aca0" name="cluster-md-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="fdb90962c9501be503b7496c641f96f1ef94484cea5240bcf3661842df2386f4" name="dlm-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="f0d56178d71592e23555116bc6a154ffd8ea6e794b5fb2aa0b40412381d62380" name="dlm-kmp-64kb-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="7a8ff3b389b3494ab5905e6e09fbb56fd4d0e344e5920c2a89fb968e116df45c" name="dlm-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="be56cad3bfb1eb4633667d53c9f103b9c495a75c439c2871b5594965068e2bfa" name="dlm-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="14bfcaca773136e237d7b1160fa83d67b3af6a2e254d6d798e4ca1b9f17a7502" name="dlm-kmp-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="d5e75e7626125c4e4394a122c90655f8c4e88e866939b86804b77dab9edc796a" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="03508e97df8981f75599abd2a83a9c923ec0a0c2586fd278ed577122865b2d11" name="dlm-kmp-default-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="472897225ea68c835d5cfda9743af17e5fd25011ec044bad76457e2ca4b59b72" name="dlm-kmp-default-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="bf09a60fed2e000a4a32a50afda84e40f9759fc4f52fbdea8fd3632fdf08e00a" name="dlm-kmp-default-debuginfo" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="ac855e986e58f1fcbfba3c70ad4e1cfb6d1167f227ef33232b84c320cc659d61" name="dlm-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="0e54d211d323a629a1e20420a8f66e5526f75c8c022fbd64199a46497e44ea6f" name="dtb-aarch64" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="0072ab41941e26289f9b6a47df9b2dd037fd4f6f59d03813d281f0c8cc4c82e6" name="dtb-allwinner" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="341d6e48a2d2e0dc65583014bb2e0a2b5ec742d2af4bb627cc333582b741fc53" name="dtb-altera" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="de0283b6e5f7651a803b4e170a268a72efc96f01b44448d2c3033e78a05ddbd9" name="dtb-amazon" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="f8f5556c50989ea310fbfcd5cf7349ec5993e8170e24a8e084bb84f984b51e3a" name="dtb-amd" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="5c664a18674e3777c4c3507d9301b6228ebaede293f94c4854b0cd9c77ba3285" name="dtb-amlogic" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="f1540f58636d149bed75952ef300aedcc0bc8f28aa48c6f17e6614513ebbae28" name="dtb-apm" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="24333d829626a2befbcb2e24ae87f322e9e1fb7cb88a7f0ecc45393ed474f03e" name="dtb-apple" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="04c1ebd16287119a799dd60857b5713e45c6ad9394bc288d7ff13db482e2a29c" name="dtb-arm" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="fec1c23956643afc795bd36ce35437fb543a9510d5265bc5ea1ef43531718ddc" name="dtb-broadcom" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="8ef46531cd98ab3fd1039cfb1e74fcd7640aea099021750c2230d8ff9609c9b2" name="dtb-cavium" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="1db17bb10c01020418ac58b3fdae168c2eddf962b6d2cbd24961788da43f14d0" name="dtb-exynos" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="e986b39d5caf3592c46933d9feab5a177542686d90c8c3f1926a162d998bdf52" name="dtb-freescale" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="3c2397ab3db3b4672297fa424dde84f807ed5b2e000440257d7d41a84b708874" name="dtb-hisilicon" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="0a87051e56465ab7a7deb74385cd82edb105cd084c4f639237774e6cb6e5ecbc" name="dtb-lg" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="e2b0d009e20f3fe7053d7f848dadaf589b7637e0eaf50a40b9e492a1371c125e" name="dtb-marvell" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="e00866bf73733f9ae57d3603be536840ca97cafcf25c0f886d0fdfdd2d1e3bab" name="dtb-mediatek" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="9f8849a0f51ada9d2e1fce78e4a97b7f0999e143701b51f16e68c4b19de67891" name="dtb-nvidia" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="26f2f82dce65989a55ec6f9e92a5a6c83277aa0a26485bda9c9d4a5d9c9c2596" name="dtb-qcom" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="487f304a04655d657ac2b46c45e4eefecf74fe85cdf1b0af656261d87bb0269f" name="dtb-renesas" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="e831ae8ff2d468b0ebe7236de6c2abdc626d7fd0c7bb79b69e393a95c75441b5" name="dtb-rockchip" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="6a2e221947a288f6a078d3b4c67c0d9b9e2f3b92232d73b8c564da4bd7597bcb" name="dtb-socionext" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="fc16198da232d603ea58de0945d6bb423c4a09b6884829f0ddd74785cf30ffa6" name="dtb-sprd" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="73cad71024ee77786d54d88b95788dfae1331959ccb5fce3dda1ad56a0597dd4" name="dtb-xilinx" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="afbee394ad8330a9ea1378aa5742fde486f890957cc89eda474df5f7025a4b20" name="gfs2-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="eb5d7faec5edebdcddbc5ae7a8d544a348873c9400346bbccdcf57336f57b6b1" name="gfs2-kmp-64kb-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="e89fd01fbcf7b4c925e1ec72292f85739b2dc71185f1494e7e34f462413e75c4" name="gfs2-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="b128ef2b144606a16e9af29fe0ce3a8f374bddf3c8b8b1ce97c6866372246768" name="gfs2-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="e7805be44d3a950ec6c75b6fae63e7b195f6f509bc0f06f041b29f270cebaa6e" name="gfs2-kmp-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="f583c9ae703f0389439d095d134282a7fa4ea8922fd5c92593e7da42bb24c671" name="gfs2-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="aa2ddfc6654b7f0298effc27ecc12d323f4df86393a570bdf7f3d2d72187f298" name="gfs2-kmp-default-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="090727910594e2c57952b5630e62c9070b777a080ff2016804e843f229207ad8" name="gfs2-kmp-default-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="75e33ca3d9350635fde4b3d10c3ed6801718a82ad1439bba0a0583230fa431d0" name="gfs2-kmp-default-debuginfo" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="5e3256a6fa871c07511a9e0d4b752742b8566f1ff98b5626f4501a7633875d4d" name="gfs2-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="f9bf035f283b0543c196f9b51973f8344634e49b8e13b5fa1f544174396a145a" name="kernel-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="7ef2c5e668ded5ea028b4d7832d4af89c10f7a7de7a32d1d4e7f7d2b20ae33cb" name="kernel-64kb" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="2d103199a6f82348e5144052cb41face3de744415faaece76091c182e7776616" name="kernel-64kb-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="13a4ce3b0890611f7b2a41067f2c57ea19418cc9e1fc3325c79269de9a8c626d" name="kernel-64kb-debugsource" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="af9b7bcd11239edb826385e6491f4c09ec3c2e610cccc3f8de9b401d85b8fd0a" name="kernel-64kb-devel" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="acd186d97edb5d47833b80a68b8d8283ed88d2c261831a3b1ffae8fed68dd702" name="kernel-64kb-devel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="39e32927ffe2e3797221b64e73e8d8fd78f488f1431579859f6dfc9f2a2a9b7f" name="kernel-64kb-extra" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="8024b177358c51164fc58809e23345640102da5cfebe7cc4009e9e66591dd50c" name="kernel-64kb-extra-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="5bc1f1d24f3487123c382251e42161f0e76735e55edfb723afd88147775631b9" name="kernel-64kb-optional" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="0d3a7492d1c65a1a5060b11ce995064a8e59c943f9c42f04d76aa461a6a66738" name="kernel-64kb-optional-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="260821e5a05036bef000c36b32176540a56c90586bc01c1e598fcd1e72d6ab4a" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="1e616f22ca019013c0c61af9a909cc07a0ab81517ad83bcb95b4c22c075da847" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="6306d73e8697f4e3f2b7bca62a79347e3a7dd609e7fe5a128a69297753b042cb" name="kernel-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="5f97cfea1d8dd86823e8e7cf254187c8cfc4b139f8e5f9d584e255102d6005b9" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="a5b4bc52ae6eb644ac7e2bd210a209bde9b3b26412b5094a995781f00d761a9b" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="d2663e338f0ed32f72c9a7de56892b5d82c13398262f9289fd9f570144c63a2a" name="kernel-default-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="2dff797768530a9821b0e7e4693d2f728fc5807db2d350968023580124919b25" name="kernel-default-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="b7ccf710999063908a629517a95e36f6c76294b78772bfc82f959c2681cc6e3f" name="kernel-default-debuginfo" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="0914516373cbe2d07cbee8fbb443c21b2a640997a1a3aabbbbff21bb92a6021c" name="kernel-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="f384c17ead462cb99215ffb0c4a0ead47d8f5064f9939dc70032e876ea546b98" name="kernel-default-debugsource" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="017c933ca4a358b9ea7ca3c1fcdf53b318dbfa3db083706ec93bb07416e8c9f6" name="kernel-default-debugsource" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="03ca16800d113ad469703c5d73ee695172e71b604701e83ba955115a01f99774" name="kernel-default-debugsource" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="ae848f6652ad113833dcac61a18165a37cbc03b50cd36aea217e73b7467bf160" name="kernel-default-debugsource" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="5205e8a01d530a84038494208e4afcbc7953f7dfc9cb86ca6d43faaff9546c90" name="kernel-default-devel" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="5020a82157b65d8853272b1359d8ad113b9ffd0e4617ee5755a25208ed17dad8" name="kernel-default-devel" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="00cfb69c83d2ab11fa35baf5c948cf76a1273750fc1e7ba17ce7db5208a15bee" name="kernel-default-devel" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="97e4826993d97b680037fd762cffb5f3dcbff4759d9cf91e660d1d1d3264b9d8" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="f4581fd72a2a7c271294632e0f8819ac5b0c5997f82c77408f98d605251f4944" name="kernel-default-devel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="a879cacc37508b3b5ad5d00c9a9e7c7e7bb93ffb0985c848a53cdc10812d7ec9" name="kernel-default-devel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="8c034adf0a655c8bbdea3a83ced6b1a11950245d5653cd2f2f935a1b92a696aa" name="kernel-default-devel-debuginfo" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="35a9108f64832b0788ca55dea425e0c875e306067255a31261eb6222acc3f80b" name="kernel-default-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="ad4653de653eb92affa41503ff851cee1ec93cab73ab8baf1aa9f965fe22db1d" name="kernel-default-extra" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="9cd67d2ea1c20d633c3f137e4162c4869b263d769cf3188b18580aa653bbc484" name="kernel-default-extra" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="4f7b332ff6d40c9102436af66d9d6c17668b050988587b53ccee325f5d3a0cb8" name="kernel-default-extra" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="0963b3b339abccab801b153b7d54a07f6e2f8d26db0c9f21991411c01a5800d3" name="kernel-default-extra" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="3acb594471015ea2ff980d064dc8a7cca26d9e6ee92de4ede5911fa265e93355" name="kernel-default-extra-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="740e73c976f86e10e3785b720592dcf0e4f21f9073d25d634565b595f51ece09" name="kernel-default-extra-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="06c212453bcbe489efb5c247125d19e92cf0f8c984b3d78244ae974970a7b9bb" name="kernel-default-extra-debuginfo" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="1bef95bb7668ae21a0d72f643b37a824630bacbf32ba40624da52390b36650b5" name="kernel-default-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="2316827c2661aa58f467316f43258a07b30705d969cecbf2924242d9d64446f1" name="kernel-default-livepatch" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="076c7d33ac6d1bc58d58411d18ae0bf17c017001057fe7121f9f2cbfe7829564" name="kernel-default-livepatch" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="bff6479f745cf97dee7aeb87546ceaef636c0953bc42ff01cf28d3eb8d592a6f" name="kernel-default-livepatch" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="040bd117d57df95ce64d53aa102c712b0280ff9fbe4e7c33c871dbdf5b1bb633" name="kernel-default-livepatch" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="3af325ba10cf10f34485691f714d50f913bab49164d0ff0b9e4a05efb48dc6cb" name="kernel-default-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="488ccd283ce6946d2f7a68c897a97eeee0f53b6e74e039519085e4244ebc735d" name="kernel-default-livepatch-devel" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="fdd82a3f293957814258c1df21053d6b8ff9a4dee0330aa56623037453282a6e" name="kernel-default-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="3021dbce846618ad105b0161d65d69c7629f2445d98674ec601fcac75f6782c6" name="kernel-default-optional" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="ca4be307a497eff333b755717c4b249e539ff4f2cd172e0f71ab92d0acdec4c4" name="kernel-default-optional" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="4ba1cb4dcd04c0aa0bca8df565c7c52cc6aa11f588c3942389dec395f0775f16" name="kernel-default-optional" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="6c22dfadb5cb0c1d224df4c53072ff1b82185404e53781f9af9be18475b7bc4c" name="kernel-default-optional" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="5e962686d1cae2f82fe3c6611d71366a5fa8afd2c8105774d51787b5eb05583d" name="kernel-default-optional-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="20183922ea385b422094ecf5b1f3bede117731949aa858c0680b4732c94d4273" name="kernel-default-optional-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="155624534832d27e2a272cb145e975fb78ee75f35918dd9075edf2d5522b1bd3" name="kernel-default-optional-debuginfo" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="61d9c96b3ef8cb775c5567082198377358e99270c848f84ab494ae889fec3d80" name="kernel-default-optional-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="dfdd793f628361b155722a1f9788851f556aa23b106ea8c0ffd5c4a27d28eb02" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="645f263c09ea79ba019de01cd431789ee5242db5a6c2c55097d9592eb7e40b5e" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="72ff869bac5b833ca814c06b771658cd93eef368b65b1825031c647bf744866d" name="kernel-docs" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="4c1ff7f78ace0f1a3d330cb5579740311d67120ae5ac993fd42d4557b26bf1db" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="a666058035d49189ef69c8703962cabcd75f6b1a9b7c9e3b9159d62befaff314" name="kernel-kvmsmall" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="411abd798a8d1c1d3de7d0a7c7c1237a5e7d31cf720e032c20e600b7acccf9b3" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="0712fdb3f940a90b87ea0381b9a187471746541da4a7c727865ff1d21194d43b" name="kernel-kvmsmall" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="c23dee2faa9630a284489cd10397048073936480feaabb3b168ace02a8580999" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="0b98509913528430114e8ea270282ffd6dc465995854364819a23d1c6d29b795" name="kernel-kvmsmall-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="8eb96c7abc559696de460e7ca2d6d3b513ca5bfabcb37be541b79879823db2b6" name="kernel-kvmsmall-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="397dcfc9ad84ef307d8f2a8570237bc8b3a58a6aee92e734195e26351c201591" name="kernel-kvmsmall-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="8173890648ccc289b062afca04138e27d003d991781f53f4243def59daded5ec" name="kernel-kvmsmall-debugsource" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="00d1336e9a6a382b0fecb35a49a9e7fa99bb5935d728707af4666dccd1fc14ff" name="kernel-kvmsmall-debugsource" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="44abf50bf363006d9fa9d4f39bcee26d2aa53d7c96d6262b97a785f05201885e" name="kernel-kvmsmall-debugsource" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="0aa39b4eb1202125beddc7e37545edfb01287d47b091a0f14fe27d9e557b6e46" name="kernel-kvmsmall-devel" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="7c0e1daa19781caf3c42e706378e5c1a218fcfc1324d404dc5e12d8fe28b05bb" name="kernel-kvmsmall-devel" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="1607d091e9f334b35d8855039aecb6adfc59dc1d549630608f486eac6fd260e2" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="333ced1349178e9c3d7be2fc381d5515ed6e23495a10dcb3473dbb9a5ff05f6c" name="kernel-kvmsmall-devel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="c20fb4d02a349ae4cf905b33566bad017ccd7529876d04fb307abe9cf8052d10" name="kernel-kvmsmall-devel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="c30ad6e4bc29d76aad5e501afe84433073af43373b87281e41396ea650cfd4cb" name="kernel-kvmsmall-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="d63c4035ac41144f1220acd9e0df9b09a6987514d2f6dd08125163a3d1e0af84" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="0d5a4df8e8944fe6aca951af090966a09d6876af85799380df1c8be28b3664ae" name="kernel-obs-build" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="c2ec90ac71d80627d4a95dc16d2c9fdc437785cf7a5bc30beeaaeba3444868e6" name="kernel-obs-build" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="bad823afd02aac91fd69f40211addf56b97ac3b9106177e48210bcbe705ce264" name="kernel-obs-build" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="faa211e466af0ade67e7ae7e0d7b326e563484c3d9f30b7273becbc83a021878" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="590d151042ec782d9ee7f084470721b16b197a826ac38ea4923fc574ceb7f2c9" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="46ca87a6db3c1e351dbfe67bab1f6af4fc6cf0c9008ba93aae57d30f2fee6ecc" name="kernel-obs-build-debugsource" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="06baf660253ba17bca72ce1f57e8913cbf94a303f2066af3b04673611e3f6243" name="kernel-obs-build-debugsource" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="ca6e511a5e6c4df653f0b7a52079ec5613b07cdd6847cee0b1b27a292c5f49bf" name="kernel-obs-build-debugsource" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="de5e93396eb4168d52bcee1ceb1e8a863b6942e61a5c0d23c58d39628f412729" name="kernel-obs-build-debugsource" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="3d9c102b3eab716a455866ab4b706e6222c06a9ba4dc1f3dd3fa5109b333c967" name="kernel-source" arch="noarch">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="e4de092b9fc0821a428c6b2c45609365e9744d701c2c005df2074079676c39fa" name="kernel-source" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="769f9522a3fc26379f11f4b9110575cf093a33b8634f90c37254b8fd299aab7e" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="7ef83b5b57ff44dc5356ff4f3c976e9827a11d5b556a99ffeb8685bcd5b4102b" name="kernel-syms" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="c5d149186d2f7bed7e16b6ae013be488ffd2cd09d891eb7bfa959d0b0a01325f" name="kernel-syms" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="e8a1f042635fbfb9eacc1007dc862d9ac6978495ca46b3503d0ce62598d78e46" name="kernel-syms" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="303168ad991a6505e13dee3f7f1110e7c07dd406a867cc0b31db5dad9ac7ac9a" name="kernel-syms" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="c101b344cb1ac2ba4e7d72ddb87c67105ae4248b61aa467cac4cae68f9792997" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="2bac569831221c9de37b2c7adbada2361f91073137f045c9abdafef0621d5574" name="kernel-zfcpdump" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="122ee721232b0dff7e5a2959c457faa2113a7b8d59f6da30d1b944e2e09196ad" name="kernel-zfcpdump" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="d6ac3f6a0d8d145f15f07545eba250ac93b8fc4816f6aad99a8dbc238d83c433" name="kernel-zfcpdump-debuginfo" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="a1933d7d777c744e2fcc31fb66c13dd91d32316709d01ac5da7c2c49d2b1af47" name="kernel-zfcpdump-debugsource" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="28374840cca90b09fc3cf5e86905dbfbd29b1fa5c2d5ce8c6d0dff584d2adf14" name="kselftests-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="95c8623d8369b11c14cbc5451440c9b0c8607526befbcb6002e55cc58c0f87b6" name="kselftests-kmp-64kb-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="7814058fbd12decc21aaa9ff433f24d97926e8d70cb7dd4e96d33b67b045fb5c" name="kselftests-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="397cb71708961c99db923a45e7644cba801a68e45ad8a9962083d95ef057d47f" name="kselftests-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="eb00c817ec5cd54e0512a6b358e1bad4dd18ebdcc3d7dec639bef96d6b810e7a" name="kselftests-kmp-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="8d3c928b0ff0120bd351ecebcd74c8f00ea4f7bf990de8e33637e9dc7e47840a" name="kselftests-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="02a7ab996bba8df251b20ad00a06864f3f4b59261d5bb35b05ca8410593575c5" name="kselftests-kmp-default-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="be6550b1be3e2e71fe574e43896be24f3c0477f7de610c7bc3ee496af96a6519" name="kselftests-kmp-default-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="cd3b7714b794b99138682a5dd962a8431d86c21ff0ec6783311cc11e483483fb" name="kselftests-kmp-default-debuginfo" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="6ee077141fa3bcc9acaad6c8debc9986d9456c0b90169699fac41396e7e35a58" name="kselftests-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="66adcc8fc7d913be623b8f4a805c8d0ee48958c79082c7f6cbf84aa6378920ee" name="ocfs2-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="c68d4c41acfa8d14fa57ffe139cfe31e9796d3be5a0a784a908fd1593269242a" name="ocfs2-kmp-64kb-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="c2260902894aac1a5d322e9551e93c5da794176c758e0719dbb639a46459c356" name="ocfs2-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="d3f59f855a17aa799d7b32e30809d30a6a2c99aa32cd5543b5421992958bad6d" name="ocfs2-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="50b206446fa2d6b3a9850572edfced82a4d15a75b6c11fd171440600328f1340" name="ocfs2-kmp-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="84cf68e49519a68a10bc13babdea2ccef5a25377dc772774ac483f82d9dcfd30" name="ocfs2-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="d6d485d3583ea5fdb3bbc7be0a9353f30ff3db2b519789c9fa4da04321392429" name="ocfs2-kmp-default-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="7c3fe7e8e252d723d76f6dff062cb0e75fa71197b3ea4a1755142bf26a0aaf84" name="ocfs2-kmp-default-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="b5eea14676902de225ea69d6577f92faf03dd69bc45233a1e26f1a55b8c94818" name="ocfs2-kmp-default-debuginfo" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="b04b7f596b2e3a58fa7e8ee4bd73335a2367de5180a04623c5b57a016549894a" name="ocfs2-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="9cd29b9ab1a043567119e8c1b3f7ae87368a9d4a87b697f3a278bd79be9ff637" name="reiserfs-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="20af5ca1f51abfb1afa46e5cd152b8015c232ad2237806268bf180bf0333b4b5" name="reiserfs-kmp-64kb-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="c7c2f09726c23a793ac152d0448b8063e4867640154206b64438000de22ab23d" name="reiserfs-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="2d84c5a83958d064a2477d6db024ad4df10a914eb2061d3d2b538ae1a5ccc856" name="reiserfs-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="03ef8f9b2bd5d9e13e6b6de1b38ff5c1f266c1c312faf08128e2640f6c479c43" name="reiserfs-kmp-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="99c733128492484605e6e62c09a8d639f8c02969af0a3708b3504b3f04433d9b" name="reiserfs-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="72d5928139b56996f492fd92674278f9b77e5c757b60ee87c6367a239b4e8d4c" name="reiserfs-kmp-default-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="27eb12906981b64bb52372127b6e7250c8c89ded27513470ac3bc1458bc9d568" name="reiserfs-kmp-default-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="4e7297f2583205a6d169a54fbee48dce16fc7c17dd8b20fa172badfcef00b24c" name="reiserfs-kmp-default-debuginfo" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
<package pkgid="be3cac513e990bc6b52de63bf3b28e4d432fb2b15f68a4a1b16c9a86719dca86" name="reiserfs-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.1.1.gb6fb1ef"/>
  <changelog author="mhocko@suse.com" date="1769428800">- x86: make page fault handling disable interrupts properly
  (git-fixes).
- commit a7abb9b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1769428801">- net: dpaa: Pad packets to ETH_ZLEN (CVE-2024-46854 bsc#1231084).
- commit dbb5cae</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428802">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit f157995</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428803">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit 9d4582b</changelog>
  <changelog author="rgoldwyn@suse.com" date="1769428804">- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
- commit b9dec39</changelog>
  <changelog author="pfalcato@suse.de" date="1769515200">- page_pool: Fix use-after-free in page_pool_recycle_in_ring
  (CVE-2025-38129 bsc#1245723).
- page_pool: fix inconsistency for page_pool_ring_lock()
  (CVE-2025-38129 bsc#1245723).
- commit ef250c6</changelog>
  <changelog author="pfalcato@suse.de" date="1769601600">- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- commit 56442cc</changelog>
  <changelog author="oneukum@suse.com" date="1769601601">- usbnet: Prevents free active kevent (CVE-2025-68312
  bsc#1255171).
- commit ee0ab3e</changelog>
  <changelog author="rbm@suse.com" date="1769688000">- ipv6: BUG() in pskb_expand_head() as part of
  calipso_skbuff_setattr() (CVE-2025-71085 bsc#1256623).
- commit 3ba0df8</changelog>
  <changelog author="ohering@suse.de" date="1769774400">- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- net: hv_netvsc: reject RSS hash key programming without RX
  indirection table (bsc#1257473).
- commit 3778f43</changelog>
  <changelog author="mkubecek@suse.cz" date="1769774401">- net/sched: sch_qfq: do not free existing class in
  qfq_change_class() (CVE-2026-22999 bsc#1257236).
- commit 16a63b9</changelog>
  <changelog author="sjaeckel@suse.de" date="1769774402">- macvlan: fix possible UAF in macvlan_forward_source()
  (CVE-2026-23001 bsc#1257232).
- net: hns3: add VLAN id validation before using (CVE-2025-71112
  bsc#1256726).
- commit 270e8e5</changelog>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/USB-gadget-Fix-obscure-lockdep-violation-for-udc_mut.patch
  (CVE-2022-49980 bsc#1245110 CVE-2022-49943 bsc#1244904).
- Update
  patches.suse/USB-gadget-bcm63xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53412 bsc#1254462).
- Update
  patches.suse/USB-gadget-lpc32xx_udc-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53418 bsc#1254464).
- Update
  patches.suse/USB-gadget-pxa27x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53407 bsc#1253028).
- Update
  patches.suse/USB-sl811-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53417 bsc#1254463).
- Update patches.suse/arm64-set-UXN-on-swapper-page-tables.patch
  (git-fixes CVE-2022-50232 bsc#1244758).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1249158 CVE-2025-21658 bsc#1236208).
- Update
  patches.suse/ip-Fix-data-races-around-sysctl_ip_fwd_use_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2022-49604 bsc#1238414).
- Update
  patches.suse/ipv4-use-RCU-protection-in-__ip_rt_update_pmtu.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21766 bsc#1238754).
- Update
  patches.suse/ipv6-use-RCU-protection-in-ip6_default_advmss.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21765 bsc#1237906).
- Update
  patches.suse/mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
  (CVE-2023-53178 bsc#1249827 git-fix CVE-2024-26832 bsc#1223007).
- Update
  patches.suse/ndisc-extend-RCU-protection-in-ndisc_send_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21760 bsc#1238763).
- Update
  patches.suse/ndisc-use-RCU-protection-in-ndisc_alloc_skb.patch
  (CVE-2025-40139 bsc#1253409 CVE-2025-21764 bsc#1237885).
- Update
  patches.suse/net-sched-ets-use-old-nbands-while-purging-unused-classes.patch
  (git-fixes CVE-2025-38684 bsc#1249156).
- Update
  patches.suse/netfilter-nft_set_hash-unaligned-atomic-read-on-struct-nft.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-54031 bsc#1235905).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-end-interval-element-from-gc.patch
  (CVE-2023-52923 bsc#1236104 CVE-2024-26581 bsc#1220144).
- Update
  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elements-in-.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-52433 bsc#1220137).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
  (bsc#1252785 CVE-2025-40044 CVE-2024-50143 bsc#1233038).
- commit 5e5b6b9</changelog>
  <changelog author="tiwai@suse.de" date="1770033601">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit c1cfc1c</changelog>
  <changelog author="jlee@suse.com" date="1770379200">- ata: libata-sff: Ensure that we cannot write outside the
  allocated buffer (bsc#1238917 CVE-2025-21738).
- commit 173ef4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1770379201">- x86/its: Fix crash during dynamic its initialization (bsc#1257771)
  GFP_KERNEL doesn't guarantee we get back zeroed out memory, yet krealloc
  is being called on a pointer, residing in GFP_KERNEL kmalloced space.
  This causes a crash when the pointer's value is being read as it's
  invalid.  Fix it by ensuring returned memory is zeroed out thus calling
  krealloc on a NULL pointer which is well-defined.
- commit 84e6b21</changelog>
  <changelog author="tiwai@suse.de" date="1770638400">- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  (CVE-2026-23089 bsc#1257790).
- commit f5d553b</changelog>
  <changelog author="mkubecek@suse.cz" date="1770811200">- net/sched: Enforce that teql can only be used as root qdisc
  (CVE-2026-23074 bsc#1257749).
- commit faf6ae4</changelog>
  <changelog author="nik.borisov@suse.com" date="1771243200">- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- commit de95fb3</changelog>
  <changelog author="tiwai@suse.de" date="1771329600">- crypto: qat - fix ring to service map for QAT GEN4
  (bsc#1258248).
- crypto: qat - use masks for AE groups (bsc#1258248).
- crypto: qat - refactor fw config related functions
  (bsc#1258248).
- commit 2f41de4</changelog>
</package>
</otherdata>