<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="7">
<package pkgid="8cb21f30be0434456b5fdd01154a269001f469358be20d460a9b49d93cacf6cdf0eecb3e62f0c1bb3bfd59b31bda04d80b36024bf934fef04a726ecb479fa137" name="kernel-default" arch="i586">
  <version epoch="0" ver="7.1.3" rel="1.1.gf68906d"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="tiwai@suse.de" date="1783425600">- e1000e: retry ME PHY-ownership gate and log FWSM on failure
  (bsc#1269482).
- commit f68906d</changelog>
</package>
<package pkgid="4a0100bca4433ed4a3f6e89e8f6b3bdd10933bf2effa2ffe01078c24bddfc0bc599e2e32771a7bec562b06c20fc2b9767d414e06ebb88cf35155e85a619816e6" name="kernel-default" arch="src">
  <version epoch="0" ver="7.1.3" rel="1.1.gf68906d"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="tiwai@suse.de" date="1783425600">- e1000e: retry ME PHY-ownership gate and log FWSM on failure
  (bsc#1269482).
- commit f68906d</changelog>
</package>
<package pkgid="3ba6f2499ce8a953ae2a32a9458d48ebcaa903391a8f76017a022015c77ec28f68de6fd1120bf6411dc871cbb17aecef9b5cb8f4a389553ef87c05250ce01370" name="kernel-default-debuginfo" arch="i586">
  <version epoch="0" ver="7.1.3" rel="1.1.gf68906d"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="tiwai@suse.de" date="1783425600">- e1000e: retry ME PHY-ownership gate and log FWSM on failure
  (bsc#1269482).
- commit f68906d</changelog>
</package>
<package pkgid="4811c374fd114720f9cb3c66dbc52b82edb03e76f5f3065210ddec08adb4f4a1e81a09ace70c0e4dd03b5daa900e1f32d231f8f2455106e83f05f5d597cce17c" name="kernel-default-debugsource" arch="i586">
  <version epoch="0" ver="7.1.3" rel="1.1.gf68906d"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="tiwai@suse.de" date="1783425600">- e1000e: retry ME PHY-ownership gate and log FWSM on failure
  (bsc#1269482).
- commit f68906d</changelog>
</package>
<package pkgid="8150bd03e8132ef8eeb3389007754f48c7b4e9df058e09c4de1c89765de39a8af9c5e3007e328d0360ce3e2c38a519aeefab0310ee16e395b3e69e301e18d47a" name="kernel-default-devel" arch="i586">
  <version epoch="0" ver="7.1.3" rel="1.1.gf68906d"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="tiwai@suse.de" date="1783425600">- e1000e: retry ME PHY-ownership gate and log FWSM on failure
  (bsc#1269482).
- commit f68906d</changelog>
</package>
<package pkgid="b3ffa538e2929644d5e184eb7e75143e3d9fce731828167a88f59defe6a234c002feca2f8a971c67abc0d4b53e08cd2b5e2e6c376786a664bff872be578915e6" name="kernel-default-vdso" arch="i586">
  <version epoch="0" ver="7.1.3" rel="1.1.gf68906d"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="tiwai@suse.de" date="1783425600">- e1000e: retry ME PHY-ownership gate and log FWSM on failure
  (bsc#1269482).
- commit f68906d</changelog>
</package>
<package pkgid="91ff6569bfd2e866f03c90ba2c44d2af6984db4b966fbb218beac74e2afe4f4c400daa5417190d9aabfc6b03a806c717559480b4592ec12cd2d864791fcaa04d" name="kernel-default-vdso-debuginfo" arch="i586">
  <version epoch="0" ver="7.1.3" rel="1.1.gf68906d"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="tiwai@suse.de" date="1783425600">- e1000e: retry ME PHY-ownership gate and log FWSM on failure
  (bsc#1269482).
- commit f68906d</changelog>
</package>
</otherdata>